aws-cdk-lib 2.200.2__py3-none-any.whl → 2.224.0__py3-none-any.whl

aws_cdk/aws_apigateway/__init__.py

@@ -458,6 +458,32 @@ get_message_integration = apigateway.AwsIntegration(
 )
 ```
 
+### Lambda Integration Permissions
+
+By default, creating a `LambdaIntegration` will add a permission for API Gateway to invoke your AWS Lambda function, scoped to the specific method which uses the integration.
+
+If you reuse the same AWS Lambda function for many integrations, the AWS Lambda permission policy size can be exceeded by adding a separate policy statement for each method which invokes the AWS Lambda function. To avoid this, you can opt to scope permissions to any method on the API by setting `scopePermissionToMethod` to `false`, and this will ensure only a single policy statement is added to the AWS Lambda permission policy.
+
+```python
+# book: apigateway.Resource
+# backend: lambda.Function
+
+
+get_book_integration = apigateway.LambdaIntegration(backend,
+    scope_permission_to_method=False
+)
+create_book_integration = apigateway.LambdaIntegration(backend,
+    scope_permission_to_method=False
+)
+
+book.add_method("GET", get_book_integration)
+book.add_method("POST", create_book_integration)
+```
+
+In the above example, a single permission is added, shared by both `getBookIntegration` and `createBookIntegration`.
+
+Note that setting `scopePermissionToMethod` to `false` will always allow test invocations, no matter the value specified for `allowTestInvoke`.
+
 ## Usage Plan & API Keys
 
 A usage plan specifies who can access one or more deployed API stages and methods, and the rate at which they can be
@@ -1845,6 +1871,15 @@ api = apigateway.SpecRestApi(self, "books-api",
 )
 ```
 
+`SpecRestApi` also supports binary media types, similar to `RestApi`:
+
+```python
+api = apigateway.SpecRestApi(self, "books-api",
+    api_definition=apigateway.ApiDefinition.from_asset("path-to-file.json"),
+    binary_media_types=["image/png", "application/pdf"]
+)
+```
+
 ### Endpoint configuration
 
 By default, `SpecRestApi` will create an edge optimized endpoint.
@@ -1975,13 +2010,60 @@ from ..aws_iam import (
     PolicyStatement as _PolicyStatement_0fe33853,
 )
 from ..aws_kinesisfirehose import CfnDeliveryStream as _CfnDeliveryStream_8f3b1735
-from ..aws_kms import IKey as _IKey_5f11635f
 from ..aws_lambda import IFunction as _IFunction_6adb0ab8
 from ..aws_logs import ILogGroup as _ILogGroup_3c4fa718
 from ..aws_s3 import IBucket as _IBucket_42e086fd
 from ..aws_s3_assets import AssetOptions as _AssetOptions_2aa69621
 from ..aws_sagemaker import IEndpoint as _IEndpoint_58fe201a
 from ..aws_stepfunctions import IStateMachine as _IStateMachine_73e8d2b0
+from ..interfaces.aws_apigateway import (
+    AccountReference as _AccountReference_3ce7fd09,
+    ApiKeyReference as _ApiKeyReference_6382fd3a,
+    AuthorizerReference as _AuthorizerReference_9227c976,
+    BasePathMappingReference as _BasePathMappingReference_0fb943e6,
+    BasePathMappingV2Reference as _BasePathMappingV2Reference_bd6138fa,
+    ClientCertificateReference as _ClientCertificateReference_dc31fb12,
+    DeploymentReference as _DeploymentReference_d6bd3ce1,
+    DocumentationPartReference as _DocumentationPartReference_95653832,
+    DocumentationVersionReference as _DocumentationVersionReference_b6913e6e,
+    DomainNameAccessAssociationReference as _DomainNameAccessAssociationReference_558a7d70,
+    DomainNameReference as _DomainNameReference_f4138423,
+    DomainNameV2Reference as _DomainNameV2Reference_ca1122a1,
+    GatewayResponseReference as _GatewayResponseReference_0f1f239c,
+    IAccountRef as _IAccountRef_4b89af6a,
+    IApiKeyRef as _IApiKeyRef_6e16b46a,
+    IAuthorizerRef as _IAuthorizerRef_5e7c8723,
+    IBasePathMappingRef as _IBasePathMappingRef_79bb1c6e,
+    IBasePathMappingV2Ref as _IBasePathMappingV2Ref_e433a169,
+    IClientCertificateRef as _IClientCertificateRef_2a4b2b38,
+    IDeploymentRef as _IDeploymentRef_e5a0678c,
+    IDocumentationPartRef as _IDocumentationPartRef_07703b39,
+    IDocumentationVersionRef as _IDocumentationVersionRef_bdf6c8eb,
+    IDomainNameAccessAssociationRef as _IDomainNameAccessAssociationRef_f9b99574,
+    IDomainNameRef as _IDomainNameRef_8b0ccf94,
+    IDomainNameV2Ref as _IDomainNameV2Ref_e2e9faf2,
+    IGatewayResponseRef as _IGatewayResponseRef_d5aa66ef,
+    IMethodRef as _IMethodRef_6ea24188,
+    IModelRef as _IModelRef_19f34fa7,
+    IRequestValidatorRef as _IRequestValidatorRef_ad0e2de5,
+    IResourceRef as _IResourceRef_c7defb81,
+    IRestApiRef as _IRestApiRef_72dcbda0,
+    IStageRef as _IStageRef_b829c330,
+    IUsagePlanKeyRef as _IUsagePlanKeyRef_465586fc,
+    IUsagePlanRef as _IUsagePlanRef_7a28b470,
+    IVpcLinkRef as _IVpcLinkRef_0afd9621,
+    MethodReference as _MethodReference_cf812dcd,
+    ModelReference as _ModelReference_19c194a0,
+    RequestValidatorReference as _RequestValidatorReference_432e1849,
+    ResourceReference as _ResourceReference_c72d8a5a,
+    RestApiReference as _RestApiReference_0863f937,
+    StageReference as _StageReference_3eb94694,
+    UsagePlanKeyReference as _UsagePlanKeyReference_cfe985c6,
+    UsagePlanReference as _UsagePlanReference_3d3ec4d2,
+    VpcLinkReference as _VpcLinkReference_cccde188,
+)
+from ..interfaces.aws_kms import IKeyRef as _IKeyRef_d4fc6ef3
+from ..interfaces.aws_s3 import IBucketRef as _IBucketRef_3debe44e
 
 
 @jsii.data_type(
@@ -2195,6 +2277,15 @@ class AccessLogField(
         '''The API callers AWS account ID.'''
         return typing.cast(builtins.str, jsii.sinvoke(cls, "contextCallerAccountId", []))
 
+    @jsii.member(jsii_name="contextConnectionId")
+    @builtins.classmethod
+    def context_connection_id(cls) -> builtins.str:
+        '''A unique ID for the connection that can be used to make a callback to the client.
+
+        :see: https://docs.aws.amazon.com/apigateway/latest/developerguide/websocket-api-logging.html
+        '''
+        return typing.cast(builtins.str, jsii.sinvoke(cls, "contextConnectionId", []))
+
     @jsii.member(jsii_name="contextCustomDomainBasePathMatched")
     @builtins.classmethod
     def context_custom_domain_base_path_matched(cls) -> builtins.str:
@@ -2252,6 +2343,15 @@ class AccessLogField(
         '''A string containing a detailed validation error message.'''
         return typing.cast(builtins.str, jsii.sinvoke(cls, "contextErrorValidationErrorString", []))
 
+    @jsii.member(jsii_name="contextEventType")
+    @builtins.classmethod
+    def context_event_type(cls) -> builtins.str:
+        '''The event type: CONNECT, MESSAGE, or DISCONNECT.
+
+        :see: https://docs.aws.amazon.com/apigateway/latest/developerguide/websocket-api-logging.html
+        '''
+        return typing.cast(builtins.str, jsii.sinvoke(cls, "contextEventType", []))
+
     @jsii.member(jsii_name="contextExtendedRequestId")
     @builtins.classmethod
     def context_extended_request_id(cls) -> builtins.str:
@@ -2606,6 +2706,15 @@ class AccessLogField(
         '''
         return typing.cast(builtins.str, jsii.sinvoke(cls, "contextResponseOverrideStatus", []))
 
+    @jsii.member(jsii_name="contextRouteKey")
+    @builtins.classmethod
+    def context_route_key(cls) -> builtins.str:
+        '''The selected route key.
+
+        :see: https://docs.aws.amazon.com/apigateway/latest/developerguide/websocket-api-logging.html
+        '''
+        return typing.cast(builtins.str, jsii.sinvoke(cls, "contextRouteKey", []))
+
     @jsii.member(jsii_name="contextStage")
     @builtins.classmethod
     def context_stage(cls) -> builtins.str:
@@ -2699,6 +2808,15 @@ class AccessLogFormat(
         )
     '''
 
+    def __init__(self, format: builtins.str) -> None:
+        '''
+        :param format: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__0bc4acaae324fa465c0ae63ddfa13df8085530150092a3990e1815dea9b745ec)
+            check_type(argname="argument format", value=format, expected_type=type_hints["format"])
+        jsii.create(self.__class__, self, [format])
+
     @jsii.member(jsii_name="clf")
     @builtins.classmethod
     def clf(cls) -> "AccessLogFormat":
@@ -2846,21 +2964,10 @@ class ApiDefinition(
 
     Example::
 
-        my_api_definition = apigateway.ApiDefinition.from_asset("path-to-file.json")
-        spec_rest_api = apigateway.SpecRestApi(self, "my-specrest-api",
-            deploy=False,
-            api_definition=my_api_definition
-        )
-        
-        # Use `stageName` to deploy to an existing stage
-        deployment = apigateway.Deployment(self, "my-deployment",
-            api=spec_rest_api,
-            stage_name="dev",
-            retain_deployments=True
+        api = apigateway.SpecRestApi(self, "books-api",
+            api_definition=apigateway.ApiDefinition.from_asset("path-to-file.json"),
+            mode=apigateway.RestApiMode.MERGE
         )
-        
-        # Trigger a new deployment on OpenAPI definition updates
-        deployment.add_to_logical_id(my_api_definition)
     '''
 
     def __init__(self) -> None:
@@ -2875,7 +2982,7 @@ class ApiDefinition(
         deploy_time: typing.Optional[builtins.bool] = None,
         display_name: typing.Optional[builtins.str] = None,
         readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
-        source_kms_key: typing.Optional[_IKey_5f11635f] = None,
+        source_kms_key: typing.Optional[_IKeyRef_d4fc6ef3] = None,
         asset_hash: typing.Optional[builtins.str] = None,
         asset_hash_type: typing.Optional[_AssetHashType_05b67f2d] = None,
         bundling: typing.Optional[typing.Union[_BundlingOptions_588cc936, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -3007,7 +3114,7 @@ class ApiDefinition(
     def bind_after_create(
         self,
         _scope: _constructs_77d1e7e8.Construct,
-        _rest_api: "IRestApi",
+        _rest_api: _IRestApiRef_72dcbda0,
     ) -> None:
         '''Called after the CFN RestApi resource has been created to allow the Api Definition to bind to it.
 
@@ -3310,7 +3417,7 @@ class AssetApiDefinition(
         deploy_time: typing.Optional[builtins.bool] = None,
         display_name: typing.Optional[builtins.str] = None,
         readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
-        source_kms_key: typing.Optional[_IKey_5f11635f] = None,
+        source_kms_key: typing.Optional[_IKeyRef_d4fc6ef3] = None,
         asset_hash: typing.Optional[builtins.str] = None,
         asset_hash_type: typing.Optional[_AssetHashType_05b67f2d] = None,
         bundling: typing.Optional[typing.Union[_BundlingOptions_588cc936, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -3364,7 +3471,7 @@ class AssetApiDefinition(
     def bind_after_create(
         self,
         scope: _constructs_77d1e7e8.Construct,
-        rest_api: "IRestApi",
+        rest_api: _IRestApiRef_72dcbda0,
     ) -> None:
         '''Called after the CFN RestApi resource has been created to allow the Api Definition to bind to it.
 
@@ -3620,8 +3727,8 @@ class BasePathMapping(
         scope: _constructs_77d1e7e8.Construct,
         id: builtins.str,
         *,
-        domain_name: "IDomainName",
-        rest_api: "IRestApi",
+        domain_name: _IDomainNameRef_8b0ccf94,
+        rest_api: _IRestApiRef_72dcbda0,
         attach_to_stage: typing.Optional[builtins.bool] = None,
         base_path: typing.Optional[builtins.str] = None,
         stage: typing.Optional["Stage"] = None,
@@ -3766,8 +3873,8 @@ class BasePathMappingProps(BasePathMappingOptions):
         attach_to_stage: typing.Optional[builtins.bool] = None,
         base_path: typing.Optional[builtins.str] = None,
         stage: typing.Optional["Stage"] = None,
-        domain_name: "IDomainName",
-        rest_api: "IRestApi",
+        domain_name: _IDomainNameRef_8b0ccf94,
+        rest_api: _IRestApiRef_72dcbda0,
     ) -> None:
         '''
         :param attach_to_stage: Whether to attach the base path mapping to a stage. Use this property to create a base path mapping without attaching it to the Rest API default stage. This property is ignored if ``stage`` is provided. Default: - true
@@ -3846,18 +3953,18 @@ class BasePathMappingProps(BasePathMappingOptions):
         return typing.cast(typing.Optional["Stage"], result)
 
     @builtins.property
-    def domain_name(self) -> "IDomainName":
+    def domain_name(self) -> _IDomainNameRef_8b0ccf94:
         '''The DomainName to associate with this base path mapping.'''
         result = self._values.get("domain_name")
         assert result is not None, "Required property 'domain_name' is missing"
-        return typing.cast("IDomainName", result)
+        return typing.cast(_IDomainNameRef_8b0ccf94, result)
 
     @builtins.property
-    def rest_api(self) -> "IRestApi":
+    def rest_api(self) -> _IRestApiRef_72dcbda0:
         '''The RestApi resource to target.'''
         result = self._values.get("rest_api")
         assert result is not None, "Required property 'rest_api' is missing"
-        return typing.cast("IRestApi", result)
+        return typing.cast(_IRestApiRef_72dcbda0, result)
 
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
@@ -3871,7 +3978,7 @@ class BasePathMappingProps(BasePathMappingOptions):
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IAccountRef_4b89af6a)
 class CfnAccount(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -3905,7 +4012,8 @@ class CfnAccount(
         *,
         cloud_watch_role_arn: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ApiGateway::Account``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param cloud_watch_role_arn: The ARN of an Amazon CloudWatch role for the current Account.
@@ -3948,6 +4056,12 @@ class CfnAccount(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
+    @builtins.property
+    @jsii.member(jsii_name="accountRef")
+    def account_ref(self) -> _AccountReference_3ce7fd09:
+        '''A reference to a Account resource.'''
+        return typing.cast(_AccountReference_3ce7fd09, jsii.get(self, "accountRef"))
+
     @builtins.property
     @jsii.member(jsii_name="attrId")
     def attr_id(self) -> builtins.str:
@@ -4034,7 +4148,7 @@ class CfnAccountProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IApiKeyRef_6e16b46a, _ITaggable_36806126)
 class CfnApiKey(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -4086,7 +4200,8 @@ class CfnApiKey(
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         value: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ApiGateway::ApiKey``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param customer_id: An AWS Marketplace customer identifier, when integrating with the AWS SaaS Marketplace.
@@ -4115,6 +4230,27 @@ class CfnApiKey(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromApiKeyId")
+    @builtins.classmethod
+    def from_api_key_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        api_key_id: builtins.str,
+    ) -> _IApiKeyRef_6e16b46a:
+        '''Creates a new IApiKeyRef from a apiKeyId.
+
+        :param scope: -
+        :param id: -
+        :param api_key_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__d28618723a7da86eac262dd6fcbd57647bc2aa89de83959534c6b5288f040fef)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument api_key_id", value=api_key_id, expected_type=type_hints["api_key_id"])
+        return typing.cast(_IApiKeyRef_6e16b46a, jsii.sinvoke(cls, "fromApiKeyId", [scope, id, api_key_id]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -4145,6 +4281,12 @@ class CfnApiKey(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
+    @builtins.property
+    @jsii.member(jsii_name="apiKeyRef")
+    def api_key_ref(self) -> _ApiKeyReference_6382fd3a:
+        '''A reference to a ApiKey resource.'''
+        return typing.cast(_ApiKeyReference_6382fd3a, jsii.get(self, "apiKeyRef"))
+
     @builtins.property
     @jsii.member(jsii_name="attrApiKeyId")
     def attr_api_key_id(self) -> builtins.str:
@@ -4550,7 +4692,7 @@ class CfnApiKeyProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IAuthorizerRef_5e7c8723)
 class CfnAuthorizer(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -4602,7 +4744,8 @@ class CfnAuthorizer(
         identity_validation_expression: typing.Optional[builtins.str] = None,
         provider_arns: typing.Optional[typing.Sequence[builtins.str]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ApiGateway::Authorizer``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name of the authorizer.
@@ -4676,6 +4819,12 @@ class CfnAuthorizer(
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrAuthorizerId"))
 
+    @builtins.property
+    @jsii.member(jsii_name="authorizerRef")
+    def authorizer_ref(self) -> _AuthorizerReference_9227c976:
+        '''A reference to a Authorizer resource.'''
+        return typing.cast(_AuthorizerReference_9227c976, jsii.get(self, "authorizerRef"))
+
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
@@ -5037,7 +5186,7 @@ class CfnAuthorizerProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IBasePathMappingRef_79bb1c6e)
 class CfnBasePathMapping(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -5079,7 +5228,8 @@ class CfnBasePathMapping(
         rest_api_id: typing.Optional[builtins.str] = None,
         stage: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ApiGateway::BasePathMapping``.
+
         :param scope: Scope in which this resource is defined.
         :param id_: Construct identifier for this resource (unique in its scope).
         :param domain_name: The domain name of the BasePathMapping resource to be described.
@@ -5132,6 +5282,12 @@ class CfnBasePathMapping(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
+    @builtins.property
+    @jsii.member(jsii_name="basePathMappingRef")
+    def base_path_mapping_ref(self) -> _BasePathMappingReference_0fb943e6:
+        '''A reference to a BasePathMapping resource.'''
+        return typing.cast(_BasePathMappingReference_0fb943e6, jsii.get(self, "basePathMappingRef"))
+
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
@@ -5326,7 +5482,7 @@ class CfnBasePathMappingProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IBasePathMappingV2Ref_e433a169)
 class CfnBasePathMappingV2(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -5366,7 +5522,8 @@ class CfnBasePathMappingV2(
         base_path: typing.Optional[builtins.str] = None,
         stage: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ApiGateway::BasePathMappingV2``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param domain_name_arn: The ARN of the domain name for the BasePathMappingV2 resource to be described.
@@ -5426,6 +5583,12 @@ class CfnBasePathMappingV2(
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrBasePathMappingArn"))
 
+    @builtins.property
+    @jsii.member(jsii_name="basePathMappingV2Ref")
+    def base_path_mapping_v2_ref(self) -> _BasePathMappingV2Reference_bd6138fa:
+        '''A reference to a BasePathMappingV2 resource.'''
+        return typing.cast(_BasePathMappingV2Reference_bd6138fa, jsii.get(self, "basePathMappingV2Ref"))
+
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
@@ -5597,7 +5760,7 @@ class CfnBasePathMappingV2Props:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IClientCertificateRef_2a4b2b38, _ITaggable_36806126)
 class CfnClientCertificate(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -5632,7 +5795,8 @@ class CfnClientCertificate(
         description: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ApiGateway::ClientCertificate``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param description: The description of the client certificate.
@@ -5646,6 +5810,27 @@ class CfnClientCertificate(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromClientCertificateId")
+    @builtins.classmethod
+    def from_client_certificate_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        client_certificate_id: builtins.str,
+    ) -> _IClientCertificateRef_2a4b2b38:
+        '''Creates a new IClientCertificateRef from a clientCertificateId.
+
+        :param scope: -
+        :param id: -
+        :param client_certificate_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__0a5e31aa2352a567ea0a97f6b3c305db593bab1d23ed323eab3a574cdbc20b53)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument client_certificate_id", value=client_certificate_id, expected_type=type_hints["client_certificate_id"])
+        return typing.cast(_IClientCertificateRef_2a4b2b38, jsii.sinvoke(cls, "fromClientCertificateId", [scope, id, client_certificate_id]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -5692,6 +5877,12 @@ class CfnClientCertificate(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="clientCertificateRef")
+    def client_certificate_ref(self) -> _ClientCertificateReference_dc31fb12:
+        '''A reference to a ClientCertificate resource.'''
+        return typing.cast(_ClientCertificateReference_dc31fb12, jsii.get(self, "clientCertificateRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -5801,7 +5992,7 @@ class CfnClientCertificateProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IDeploymentRef_e5a0678c)
 class CfnDeployment(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -5894,7 +6085,8 @@ class CfnDeployment(
         stage_description: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDeployment.StageDescriptionProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         stage_name: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ApiGateway::Deployment``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param rest_api_id: The string identifier of the associated RestApi.
@@ -5963,6 +6155,12 @@ class CfnDeployment(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="deploymentRef")
+    def deployment_ref(self) -> _DeploymentReference_d6bd3ce1:
+        '''A reference to a Deployment resource.'''
+        return typing.cast(_DeploymentReference_d6bd3ce1, jsii.get(self, "deploymentRef"))
+
     @builtins.property
     @jsii.member(jsii_name="restApiId")
     def rest_api_id(self) -> builtins.str:
@@ -6343,6 +6541,8 @@ class CfnDeployment(
         ) -> None:
             '''The ``MethodSetting`` property type configures settings for all methods in a stage.
 
+            If you modify this property type, you must create a new deployment for your API.
+
             The ``MethodSettings`` property of the `Amazon API Gateway Deployment StageDescription <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-deployment-stagedescription.html>`_ property type contains a list of ``MethodSetting`` property types.
 
             :param cache_data_encrypted: Specifies whether the cached responses are encrypted.
@@ -7122,7 +7322,7 @@ class CfnDeploymentProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IDocumentationPartRef_07703b39)
 class CfnDocumentationPart(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -7164,7 +7364,8 @@ class CfnDocumentationPart(
         properties: builtins.str,
         rest_api_id: builtins.str,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ApiGateway::DocumentationPart``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param location: The location of the targeted API entity of the to-be-created documentation part.
@@ -7225,6 +7426,12 @@ class CfnDocumentationPart(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="documentationPartRef")
+    def documentation_part_ref(self) -> _DocumentationPartReference_95653832:
+        '''A reference to a DocumentationPart resource.'''
+        return typing.cast(_DocumentationPartReference_95653832, jsii.get(self, "documentationPartRef"))
+
     @builtins.property
     @jsii.member(jsii_name="location")
     def location(
@@ -7507,7 +7714,7 @@ class CfnDocumentationPartProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IDocumentationVersionRef_bdf6c8eb)
 class CfnDocumentationVersion(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -7545,7 +7752,8 @@ class CfnDocumentationVersion(
         rest_api_id: builtins.str,
         description: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ApiGateway::DocumentationVersion``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param documentation_version: The version identifier of the to-be-updated documentation version.
@@ -7599,6 +7807,12 @@ class CfnDocumentationVersion(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="documentationVersionRef")
+    def documentation_version_ref(self) -> _DocumentationVersionReference_b6913e6e:
+        '''A reference to a DocumentationVersion resource.'''
+        return typing.cast(_DocumentationVersionReference_b6913e6e, jsii.get(self, "documentationVersionRef"))
+
     @builtins.property
     @jsii.member(jsii_name="documentationVersion")
     def documentation_version(self) -> builtins.str:
@@ -7732,7 +7946,7 @@ class CfnDocumentationVersionProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IDomainNameRef_8b0ccf94, _ITaggable_36806126)
 class CfnDomainName(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -7791,16 +8005,17 @@ class CfnDomainName(
         security_policy: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ApiGateway::DomainName``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param certificate_arn: The reference to an AWS -managed certificate that will be used by edge-optimized endpoint or private endpoint for this domain name. AWS Certificate Manager is the only supported source.
+        :param certificate_arn: The reference to an AWS -managed certificate that will be used by edge-optimized endpoint or private endpoint for this domain name. Certificate Manager is the only supported source.
         :param domain_name: The custom domain name as an API host name, for example, ``my-api.example.com`` .
         :param endpoint_configuration: The endpoint configuration of this DomainName showing the endpoint types and IP address types of the domain name.
         :param mutual_tls_authentication: The mutual TLS authentication configuration for a custom domain name. If specified, API Gateway performs two-way authentication between the client and the server. Clients must present a trusted certificate to access your API.
         :param ownership_verification_certificate_arn: The ARN of the public certificate issued by ACM to validate ownership of your custom domain. Only required when configuring mutual TLS and using an ACM imported or private CA certificate ARN as the RegionalCertificateArn.
-        :param regional_certificate_arn: The reference to an AWS -managed certificate that will be used for validating the regional domain name. AWS Certificate Manager is the only supported source.
-        :param routing_mode: Default: - "BASE_PATH_MAPPING_ONLY"
+        :param regional_certificate_arn: The reference to an AWS -managed certificate that will be used for validating the regional domain name. Certificate Manager is the only supported source.
+        :param routing_mode: The routing mode for this domain name. The routing mode determines how API Gateway sends traffic from your custom domain name to your public APIs. Default: - "BASE_PATH_MAPPING_ONLY"
         :param security_policy: The Transport Layer Security (TLS) version + cipher suite for this DomainName. The valid values are ``TLS_1_0`` and ``TLS_1_2`` .
         :param tags: The collection of tags. Each tag element is associated with a given resource.
         '''
@@ -7822,6 +8037,48 @@ class CfnDomainName(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromDomainName")
+    @builtins.classmethod
+    def from_domain_name(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        domain_name: builtins.str,
+    ) -> _IDomainNameRef_8b0ccf94:
+        '''Creates a new IDomainNameRef from a domainName.
+
+        :param scope: -
+        :param id: -
+        :param domain_name: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__7573cabb5591aeca76fca113dbdb083344840ea756b892b5b440934d48a9afb3)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument domain_name", value=domain_name, expected_type=type_hints["domain_name"])
+        return typing.cast(_IDomainNameRef_8b0ccf94, jsii.sinvoke(cls, "fromDomainName", [scope, id, domain_name]))
+
+    @jsii.member(jsii_name="fromDomainNameArn")
+    @builtins.classmethod
+    def from_domain_name_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _IDomainNameRef_8b0ccf94:
+        '''Creates a new IDomainNameRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__7594371e62564d813ae77a2f2b52731cbf46dfc26d0b9ee7957708a268f7536f)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_IDomainNameRef_8b0ccf94, jsii.sinvoke(cls, "fromDomainNameArn", [scope, id, arn]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -7881,8 +8138,6 @@ class CfnDomainName(
     def attr_domain_name_arn(self) -> builtins.str:
         '''The ARN of the domain name.
 
-        Supported only for private custom domain names.
-
         :cloudformationAttribute: DomainNameArn
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrDomainNameArn"))
@@ -7912,6 +8167,12 @@ class CfnDomainName(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="domainNameRef")
+    def domain_name_ref(self) -> _DomainNameReference_f4138423:
+        '''A reference to a DomainName resource.'''
+        return typing.cast(_DomainNameReference_f4138423, jsii.get(self, "domainNameRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -8012,6 +8273,7 @@ class CfnDomainName(
     @builtins.property
     @jsii.member(jsii_name="routingMode")
     def routing_mode(self) -> typing.Optional[builtins.str]:
+        '''The routing mode for this domain name.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "routingMode"))
 
     @routing_mode.setter
@@ -8203,7 +8465,7 @@ class CfnDomainName(
             )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IDomainNameAccessAssociationRef_f9b99574, _ITaggableV2_4e6798f8)
 class CfnDomainNameAccessAssociation(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -8248,7 +8510,8 @@ class CfnDomainNameAccessAssociation(
         domain_name_arn: builtins.str,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ApiGateway::DomainNameAccessAssociation``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param access_association_source: The identifier of the domain name access association source. For a ``VPCE`` , the value is the VPC endpoint ID.
@@ -8321,6 +8584,14 @@ class CfnDomainNameAccessAssociation(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="domainNameAccessAssociationRef")
+    def domain_name_access_association_ref(
+        self,
+    ) -> _DomainNameAccessAssociationReference_558a7d70:
+        '''A reference to a DomainNameAccessAssociation resource.'''
+        return typing.cast(_DomainNameAccessAssociationReference_558a7d70, jsii.get(self, "domainNameAccessAssociationRef"))
+
     @builtins.property
     @jsii.member(jsii_name="accessAssociationSource")
     def access_association_source(self) -> builtins.str:
@@ -8523,13 +8794,13 @@ class CfnDomainNameProps:
     ) -> None:
         '''Properties for defining a ``CfnDomainName``.
 
-        :param certificate_arn: The reference to an AWS -managed certificate that will be used by edge-optimized endpoint or private endpoint for this domain name. AWS Certificate Manager is the only supported source.
+        :param certificate_arn: The reference to an AWS -managed certificate that will be used by edge-optimized endpoint or private endpoint for this domain name. Certificate Manager is the only supported source.
         :param domain_name: The custom domain name as an API host name, for example, ``my-api.example.com`` .
         :param endpoint_configuration: The endpoint configuration of this DomainName showing the endpoint types and IP address types of the domain name.
         :param mutual_tls_authentication: The mutual TLS authentication configuration for a custom domain name. If specified, API Gateway performs two-way authentication between the client and the server. Clients must present a trusted certificate to access your API.
         :param ownership_verification_certificate_arn: The ARN of the public certificate issued by ACM to validate ownership of your custom domain. Only required when configuring mutual TLS and using an ACM imported or private CA certificate ARN as the RegionalCertificateArn.
-        :param regional_certificate_arn: The reference to an AWS -managed certificate that will be used for validating the regional domain name. AWS Certificate Manager is the only supported source.
-        :param routing_mode: Default: - "BASE_PATH_MAPPING_ONLY"
+        :param regional_certificate_arn: The reference to an AWS -managed certificate that will be used for validating the regional domain name. Certificate Manager is the only supported source.
+        :param routing_mode: The routing mode for this domain name. The routing mode determines how API Gateway sends traffic from your custom domain name to your public APIs. Default: - "BASE_PATH_MAPPING_ONLY"
         :param security_policy: The Transport Layer Security (TLS) version + cipher suite for this DomainName. The valid values are ``TLS_1_0`` and ``TLS_1_2`` .
         :param tags: The collection of tags. Each tag element is associated with a given resource.
 
@@ -8598,7 +8869,7 @@ class CfnDomainNameProps:
     def certificate_arn(self) -> typing.Optional[builtins.str]:
         '''The reference to an AWS -managed certificate that will be used by edge-optimized endpoint or private endpoint for this domain name.
 
-        AWS Certificate Manager is the only supported source.
+        Certificate Manager is the only supported source.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html#cfn-apigateway-domainname-certificatearn
         '''
@@ -8653,7 +8924,7 @@ class CfnDomainNameProps:
     def regional_certificate_arn(self) -> typing.Optional[builtins.str]:
         '''The reference to an AWS -managed certificate that will be used for validating the regional domain name.
 
-        AWS Certificate Manager is the only supported source.
+        Certificate Manager is the only supported source.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html#cfn-apigateway-domainname-regionalcertificatearn
         '''
@@ -8662,7 +8933,10 @@ class CfnDomainNameProps:
 
     @builtins.property
     def routing_mode(self) -> typing.Optional[builtins.str]:
-        '''
+        '''The routing mode for this domain name.
+
+        The routing mode determines how API Gateway sends traffic from your custom domain name to your public APIs.
+
         :default: - "BASE_PATH_MAPPING_ONLY"
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html#cfn-apigateway-domainname-routingmode
@@ -8704,7 +8978,7 @@ class CfnDomainNameProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IDomainNameV2Ref_e2e9faf2, _ITaggableV2_4e6798f8)
 class CfnDomainNameV2(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -8756,14 +9030,15 @@ class CfnDomainNameV2(
         security_policy: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ApiGateway::DomainNameV2``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param certificate_arn: The reference to an AWS -managed certificate that will be used by the private endpoint for this domain name. AWS Certificate Manager is the only supported source.
         :param domain_name: Represents a custom domain name as a user-friendly host name of an API (RestApi).
         :param endpoint_configuration: The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has and the IP address types that can invoke it.
         :param policy: A stringified JSON policy document that applies to the ``execute-api`` service for this DomainName regardless of the caller and Method configuration. You can use ``Fn::ToJsonString`` to enter your ``policy`` . For more information, see `Fn::ToJsonString <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ToJsonString.html>`_ .
-        :param routing_mode: The valid routing modes are [BASE_PATH_MAPPING_ONLY], [ROUTING_RULE_THEN_BASE_PATH_MAPPING] and [ROUTING_RULE_ONLY]. All other inputs are invalid. Default: - "BASE_PATH_MAPPING_ONLY"
+        :param routing_mode: The routing mode for this domain name. The routing mode determines how API Gateway sends traffic from your custom domain name to your private APIs. Default: - "BASE_PATH_MAPPING_ONLY"
         :param security_policy: The Transport Layer Security (TLS) version + cipher suite for this DomainName. Only ``TLS_1_2`` is supported.
         :param tags: The collection of tags. Each tag element is associated with a given resource.
         '''
@@ -8842,6 +9117,12 @@ class CfnDomainNameV2(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="domainNameV2Ref")
+    def domain_name_v2_ref(self) -> _DomainNameV2Reference_ca1122a1:
+        '''A reference to a DomainNameV2 resource.'''
+        return typing.cast(_DomainNameV2Reference_ca1122a1, jsii.get(self, "domainNameV2Ref"))
+
     @builtins.property
     @jsii.member(jsii_name="certificateArn")
     def certificate_arn(self) -> typing.Optional[builtins.str]:
@@ -8902,7 +9183,7 @@ class CfnDomainNameV2(
     @builtins.property
     @jsii.member(jsii_name="routingMode")
     def routing_mode(self) -> typing.Optional[builtins.str]:
-        '''The valid routing modes are [BASE_PATH_MAPPING_ONLY], [ROUTING_RULE_THEN_BASE_PATH_MAPPING] and [ROUTING_RULE_ONLY].'''
+        '''The routing mode for this domain name.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "routingMode"))
 
     @routing_mode.setter
@@ -9044,7 +9325,7 @@ class CfnDomainNameV2Props:
         :param domain_name: Represents a custom domain name as a user-friendly host name of an API (RestApi).
         :param endpoint_configuration: The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has and the IP address types that can invoke it.
         :param policy: A stringified JSON policy document that applies to the ``execute-api`` service for this DomainName regardless of the caller and Method configuration. You can use ``Fn::ToJsonString`` to enter your ``policy`` . For more information, see `Fn::ToJsonString <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ToJsonString.html>`_ .
-        :param routing_mode: The valid routing modes are [BASE_PATH_MAPPING_ONLY], [ROUTING_RULE_THEN_BASE_PATH_MAPPING] and [ROUTING_RULE_ONLY]. All other inputs are invalid. Default: - "BASE_PATH_MAPPING_ONLY"
+        :param routing_mode: The routing mode for this domain name. The routing mode determines how API Gateway sends traffic from your custom domain name to your private APIs. Default: - "BASE_PATH_MAPPING_ONLY"
         :param security_policy: The Transport Layer Security (TLS) version + cipher suite for this DomainName. Only ``TLS_1_2`` is supported.
         :param tags: The collection of tags. Each tag element is associated with a given resource.
 
@@ -9144,9 +9425,9 @@ class CfnDomainNameV2Props:
 
     @builtins.property
     def routing_mode(self) -> typing.Optional[builtins.str]:
-        '''The valid routing modes are [BASE_PATH_MAPPING_ONLY], [ROUTING_RULE_THEN_BASE_PATH_MAPPING] and [ROUTING_RULE_ONLY].
+        '''The routing mode for this domain name.
 
-        All other inputs are invalid.
+        The routing mode determines how API Gateway sends traffic from your custom domain name to your private APIs.
 
         :default: - "BASE_PATH_MAPPING_ONLY"
 
@@ -9189,7 +9470,7 @@ class CfnDomainNameV2Props:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IGatewayResponseRef_d5aa66ef)
 class CfnGatewayResponse(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -9235,7 +9516,8 @@ class CfnGatewayResponse(
         response_templates: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
         status_code: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ApiGateway::GatewayResponse``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param response_type: The response type of the associated GatewayResponse.
@@ -9304,6 +9586,12 @@ class CfnGatewayResponse(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="gatewayResponseRef")
+    def gateway_response_ref(self) -> _GatewayResponseReference_0f1f239c:
+        '''A reference to a GatewayResponse resource.'''
+        return typing.cast(_GatewayResponseReference_0f1f239c, jsii.get(self, "gatewayResponseRef"))
+
     @builtins.property
     @jsii.member(jsii_name="responseType")
     def response_type(self) -> builtins.str:
@@ -9513,7 +9801,7 @@ class CfnGatewayResponseProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IMethodRef_6ea24188)
 class CfnMethod(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -9572,6 +9860,7 @@ class CfnMethod(
                 request_templates={
                     "request_templates_key": "requestTemplates"
                 },
+                response_transfer_mode="responseTransferMode",
                 timeout_in_millis=123,
                 uri="uri"
             ),
@@ -9616,7 +9905,8 @@ class CfnMethod(
         request_parameters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, typing.Union[builtins.bool, _IResolvable_da3f097b]]]] = None,
         request_validator_id: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ApiGateway::Method``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param http_method: The method's HTTP verb.
@@ -9690,6 +9980,12 @@ class CfnMethod(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="methodRef")
+    def method_ref(self) -> _MethodReference_cf812dcd:
+        '''A reference to a Method resource.'''
+        return typing.cast(_MethodReference_cf812dcd, jsii.get(self, "methodRef"))
+
     @builtins.property
     @jsii.member(jsii_name="httpMethod")
     def http_method(self) -> builtins.str:
@@ -9903,6 +10199,7 @@ class CfnMethod(
             "passthrough_behavior": "passthroughBehavior",
             "request_parameters": "requestParameters",
             "request_templates": "requestTemplates",
+            "response_transfer_mode": "responseTransferMode",
             "timeout_in_millis": "timeoutInMillis",
             "uri": "uri",
         },
@@ -9923,6 +10220,7 @@ class CfnMethod(
             passthrough_behavior: typing.Optional[builtins.str] = None,
             request_parameters: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
             request_templates: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
+            response_transfer_mode: typing.Optional[builtins.str] = None,
             timeout_in_millis: typing.Optional[jsii.Number] = None,
             uri: typing.Optional[builtins.str] = None,
         ) -> None:
@@ -9940,7 +10238,8 @@ class CfnMethod(
             :param passthrough_behavior: Specifies how the method request body of an unmapped content type will be passed through the integration request to the back end without transformation. A content type is unmapped if no mapping template is defined in the integration or the content type does not match any of the mapped content types, as specified in ``requestTemplates`` . The valid value is one of the following: ``WHEN_NO_MATCH`` : passes the method request body through the integration request to the back end without transformation when the method request content type does not match any content type associated with the mapping templates defined in the integration request. ``WHEN_NO_TEMPLATES`` : passes the method request body through the integration request to the back end without transformation when no mapping template is defined in the integration request. If a template is defined when this option is selected, the method request of an unmapped content-type will be rejected with an HTTP 415 Unsupported Media Type response. ``NEVER`` : rejects the method request with an HTTP 415 Unsupported Media Type response when either the method request content type does not match any content type associated with the mapping templates defined in the integration request or no mapping template is defined in the integration request.
             :param request_parameters: A key-value map specifying request parameters that are passed from the method request to the back end. The key is an integration request parameter name and the associated value is a method request parameter value or static value that must be enclosed within single quotes and pre-encoded as required by the back end. The method request parameter value must match the pattern of ``method.request.{location}.{name}`` , where ``location`` is ``querystring`` , ``path`` , or ``header`` and ``name`` must be a valid and unique method request parameter name.
             :param request_templates: Represents a map of Velocity templates that are applied on the request payload based on the value of the Content-Type header sent by the client. The content type value is the key in this map, and the template (as a String) is the value.
-            :param timeout_in_millis: Custom timeout between 50 and 29,000 milliseconds. The default value is 29,000 milliseconds or 29 seconds.
+            :param response_transfer_mode: Default: - "BUFFERED"
+            :param timeout_in_millis: Custom timeout between 50 and 29,000 milliseconds. The default value is 29,000 milliseconds or 29 seconds. You can increase the default value to longer than 29 seconds for Regional or private APIs only.
             :param uri: Specifies Uniform Resource Identifier (URI) of the integration endpoint. For ``HTTP`` or ``HTTP_PROXY`` integrations, the URI must be a fully formed, encoded HTTP(S) URL according to the RFC-3986 specification for standard integrations. If ``connectionType`` is ``VPC_LINK`` specify the Network Load Balancer DNS name. For ``AWS`` or ``AWS_PROXY`` integrations, the URI is of the form ``arn:aws:apigateway:{region}:{subdomain.service|service}:path|action/{service_api}`` . Here, {Region} is the API Gateway region (e.g., us-east-1); {service} is the name of the integrated AWS service (e.g., s3); and {subdomain} is a designated subdomain supported by certain AWS service for fast host-name lookup. action can be used for an AWS service action-based API, using an Action={name}&{p1}={v1}&p2={v2}... query string. The ensuing {service_api} refers to a supported action {name} plus any required input parameters. Alternatively, path can be used for an AWS service path-based API. The ensuing service_api refers to the path to an AWS service resource, including the region of the integrated AWS service, if applicable. For example, for integration with the S3 API of GetObject, the uri can be either ``arn:aws:apigateway:us-west-2:s3:action/GetObject&Bucket={bucket}&Key={key}`` or ``arn:aws:apigateway:us-west-2:s3:path/{bucket}/{key}``
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-method-integration.html
@@ -9983,6 +10282,7 @@ class CfnMethod(
                     request_templates={
                         "request_templates_key": "requestTemplates"
                     },
+                    response_transfer_mode="responseTransferMode",
                     timeout_in_millis=123,
                     uri="uri"
                 )
@@ -10001,6 +10301,7 @@ class CfnMethod(
                 check_type(argname="argument passthrough_behavior", value=passthrough_behavior, expected_type=type_hints["passthrough_behavior"])
                 check_type(argname="argument request_parameters", value=request_parameters, expected_type=type_hints["request_parameters"])
                 check_type(argname="argument request_templates", value=request_templates, expected_type=type_hints["request_templates"])
+                check_type(argname="argument response_transfer_mode", value=response_transfer_mode, expected_type=type_hints["response_transfer_mode"])
                 check_type(argname="argument timeout_in_millis", value=timeout_in_millis, expected_type=type_hints["timeout_in_millis"])
                 check_type(argname="argument uri", value=uri, expected_type=type_hints["uri"])
             self._values: typing.Dict[builtins.str, typing.Any] = {
@@ -10028,6 +10329,8 @@ class CfnMethod(
                 self._values["request_parameters"] = request_parameters
             if request_templates is not None:
                 self._values["request_templates"] = request_templates
+            if response_transfer_mode is not None:
+                self._values["response_transfer_mode"] = response_transfer_mode
             if timeout_in_millis is not None:
                 self._values["timeout_in_millis"] = timeout_in_millis
             if uri is not None:
@@ -10170,11 +10473,21 @@ class CfnMethod(
             result = self._values.get("request_templates")
             return typing.cast(typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]], result)
 
+        @builtins.property
+        def response_transfer_mode(self) -> typing.Optional[builtins.str]:
+            '''
+            :default: - "BUFFERED"
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-method-integration.html#cfn-apigateway-method-integration-responsetransfermode
+            '''
+            result = self._values.get("response_transfer_mode")
+            return typing.cast(typing.Optional[builtins.str], result)
+
         @builtins.property
         def timeout_in_millis(self) -> typing.Optional[jsii.Number]:
             '''Custom timeout between 50 and 29,000 milliseconds.
 
-            The default value is 29,000 milliseconds or 29 seconds.
+            The default value is 29,000 milliseconds or 29 seconds. You can increase the default value to longer than 29 seconds for Regional or private APIs only.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-method-integration.html#cfn-apigateway-method-integration-timeoutinmillis
             '''
@@ -10555,6 +10868,7 @@ class CfnMethodProps:
                     request_templates={
                         "request_templates_key": "requestTemplates"
                     },
+                    response_transfer_mode="responseTransferMode",
                     timeout_in_millis=123,
                     uri="uri"
                 ),
@@ -10775,7 +11089,7 @@ class CfnMethodProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IModelRef_19f34fa7)
 class CfnModel(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -10817,7 +11131,8 @@ class CfnModel(
         name: typing.Optional[builtins.str] = None,
         schema: typing.Any = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ApiGateway::Model``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param rest_api_id: The string identifier of the associated RestApi.
@@ -10875,6 +11190,12 @@ class CfnModel(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="modelRef")
+    def model_ref(self) -> _ModelReference_19c194a0:
+        '''A reference to a Model resource.'''
+        return typing.cast(_ModelReference_19c194a0, jsii.get(self, "modelRef"))
+
     @builtins.property
     @jsii.member(jsii_name="restApiId")
     def rest_api_id(self) -> builtins.str:
@@ -11075,7 +11396,7 @@ class CfnModelProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IRequestValidatorRef_ad0e2de5)
 class CfnRequestValidator(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -11115,7 +11436,8 @@ class CfnRequestValidator(
         validate_request_body: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         validate_request_parameters: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ApiGateway::RequestValidator``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param rest_api_id: The string identifier of the associated RestApi.
@@ -11182,6 +11504,12 @@ class CfnRequestValidator(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="requestValidatorRef")
+    def request_validator_ref(self) -> _RequestValidatorReference_432e1849:
+        '''A reference to a RequestValidator resource.'''
+        return typing.cast(_RequestValidatorReference_432e1849, jsii.get(self, "requestValidatorRef"))
+
     @builtins.property
     @jsii.member(jsii_name="restApiId")
     def rest_api_id(self) -> builtins.str:
@@ -11358,7 +11686,7 @@ class CfnRequestValidatorProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IResourceRef_c7defb81)
 class CfnResource(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -11392,7 +11720,8 @@ class CfnResource(
         path_part: builtins.str,
         rest_api_id: builtins.str,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ApiGateway::Resource``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param parent_id: The parent resource's identifier.
@@ -11455,6 +11784,12 @@ class CfnResource(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="resourceRef")
+    def resource_ref(self) -> _ResourceReference_c72d8a5a:
+        '''A reference to a Resource resource.'''
+        return typing.cast(_ResourceReference_c72d8a5a, jsii.get(self, "resourceRef"))
+
     @builtins.property
     @jsii.member(jsii_name="parentId")
     def parent_id(self) -> builtins.str:
@@ -11586,7 +11921,7 @@ class CfnResourceProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IRestApiRef_72dcbda0, _ITaggable_36806126)
 class CfnRestApi(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -11638,6 +11973,7 @@ class CfnRestApi(
                 "parameters_key": "parameters"
             },
             policy=policy,
+            security_policy="securityPolicy",
             tags=[CfnTag(
                 key="key",
                 value="value"
@@ -11664,9 +12000,11 @@ class CfnRestApi(
         name: typing.Optional[builtins.str] = None,
         parameters: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
         policy: typing.Any = None,
+        security_policy: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ApiGateway::RestApi``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param api_key_source_type: The source of the API key for metering requests according to a usage plan. Valid values are: ``HEADER`` to read the API key from the ``X-API-Key`` header of a request. ``AUTHORIZER`` to read the API key from the ``UsageIdentifierKey`` from a custom authorizer.
@@ -11683,6 +12021,7 @@ class CfnRestApi(
         :param name: The name of the RestApi. A name is required if the REST API is not based on an OpenAPI specification.
         :param parameters: Custom header parameters as part of the request. For example, to exclude DocumentationParts from an imported API, set ``ignore=documentation`` as a ``parameters`` value, as in the AWS CLI command of ``aws apigateway import-rest-api --parameters ignore=documentation --body 'file:///path/to/imported-api-body.json'`` .
         :param policy: A policy document that contains the permissions for the ``RestApi`` resource. To set the ARN for the policy, use the ``!Join`` intrinsic function with ``""`` as delimiter and values of ``"execute-api:/"`` and ``"*"`` .
+        :param security_policy: 
         :param tags: The key-value map of strings. The valid character set is [a-zA-Z+-=._:/]. The tag key can be up to 128 characters and must not start with ``aws:`` . The tag value can be up to 256 characters.
         '''
         if __debug__:
@@ -11704,11 +12043,33 @@ class CfnRestApi(
             name=name,
             parameters=parameters,
             policy=policy,
+            security_policy=security_policy,
             tags=tags,
         )
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromRestApiId")
+    @builtins.classmethod
+    def from_rest_api_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        rest_api_id: builtins.str,
+    ) -> _IRestApiRef_72dcbda0:
+        '''Creates a new IRestApiRef from a restApiId.
+
+        :param scope: -
+        :param id: -
+        :param rest_api_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__f098f990bc47fb67b4869dd0692c7805f635c5b6966164b81e7977eedb0e23a7)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument rest_api_id", value=rest_api_id, expected_type=type_hints["rest_api_id"])
+        return typing.cast(_IRestApiRef_72dcbda0, jsii.sinvoke(cls, "fromRestApiId", [scope, id, rest_api_id]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -11762,6 +12123,12 @@ class CfnRestApi(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="restApiRef")
+    def rest_api_ref(self) -> _RestApiReference_0863f937:
+        '''A reference to a RestApi resource.'''
+        return typing.cast(_RestApiReference_0863f937, jsii.get(self, "restApiRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -11978,6 +12345,18 @@ class CfnRestApi(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "policy", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="securityPolicy")
+    def security_policy(self) -> typing.Optional[builtins.str]:
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "securityPolicy"))
+
+    @security_policy.setter
+    def security_policy(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b5cbad8ea7b13cc4138aea2c1f4832de11327b51e38539bb2f152732a2d44409)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "securityPolicy", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
     def tags_raw(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
@@ -12218,6 +12597,7 @@ class CfnRestApi(
         "name": "name",
         "parameters": "parameters",
         "policy": "policy",
+        "security_policy": "securityPolicy",
         "tags": "tags",
     },
 )
@@ -12239,6 +12619,7 @@ class CfnRestApiProps:
         name: typing.Optional[builtins.str] = None,
         parameters: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
         policy: typing.Any = None,
+        security_policy: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''Properties for defining a ``CfnRestApi``.
@@ -12257,6 +12638,7 @@ class CfnRestApiProps:
         :param name: The name of the RestApi. A name is required if the REST API is not based on an OpenAPI specification.
         :param parameters: Custom header parameters as part of the request. For example, to exclude DocumentationParts from an imported API, set ``ignore=documentation`` as a ``parameters`` value, as in the AWS CLI command of ``aws apigateway import-rest-api --parameters ignore=documentation --body 'file:///path/to/imported-api-body.json'`` .
         :param policy: A policy document that contains the permissions for the ``RestApi`` resource. To set the ARN for the policy, use the ``!Join`` intrinsic function with ``""`` as delimiter and values of ``"execute-api:/"`` and ``"*"`` .
+        :param security_policy: 
         :param tags: The key-value map of strings. The valid character set is [a-zA-Z+-=._:/]. The tag key can be up to 128 characters and must not start with ``aws:`` . The tag value can be up to 256 characters.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-restapi.html
@@ -12297,6 +12679,7 @@ class CfnRestApiProps:
                     "parameters_key": "parameters"
                 },
                 policy=policy,
+                security_policy="securityPolicy",
                 tags=[CfnTag(
                     key="key",
                     value="value"
@@ -12319,6 +12702,7 @@ class CfnRestApiProps:
             check_type(argname="argument name", value=name, expected_type=type_hints["name"])
             check_type(argname="argument parameters", value=parameters, expected_type=type_hints["parameters"])
             check_type(argname="argument policy", value=policy, expected_type=type_hints["policy"])
+            check_type(argname="argument security_policy", value=security_policy, expected_type=type_hints["security_policy"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if api_key_source_type is not None:
@@ -12349,6 +12733,8 @@ class CfnRestApiProps:
             self._values["parameters"] = parameters
         if policy is not None:
             self._values["policy"] = policy
+        if security_policy is not None:
+            self._values["security_policy"] = security_policy
         if tags is not None:
             self._values["tags"] = tags
 
@@ -12520,6 +12906,14 @@ class CfnRestApiProps:
         result = self._values.get("policy")
         return typing.cast(typing.Any, result)
 
+    @builtins.property
+    def security_policy(self) -> typing.Optional[builtins.str]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-restapi.html#cfn-apigateway-restapi-securitypolicy
+        '''
+        result = self._values.get("security_policy")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
         '''The key-value map of strings.
@@ -12543,7 +12937,7 @@ class CfnRestApiProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IStageRef_b829c330, _ITaggable_36806126)
 class CfnStage(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -12627,7 +13021,8 @@ class CfnStage(
         tracing_enabled: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         variables: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ApiGateway::Stage``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param rest_api_id: The string identifier of the associated RestApi.
@@ -12703,6 +13098,12 @@ class CfnStage(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="stageRef")
+    def stage_ref(self) -> _StageReference_3eb94694:
+        '''A reference to a Stage resource.'''
+        return typing.cast(_StageReference_3eb94694, jsii.get(self, "stageRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -13651,7 +14052,7 @@ class CfnStageProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IUsagePlanRef_7a28b470, _ITaggable_36806126)
 class CfnUsagePlan(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -13714,7 +14115,8 @@ class CfnUsagePlan(
         throttle: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnUsagePlan.ThrottleSettingsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         usage_plan_name: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ApiGateway::UsagePlan``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param api_stages: The associated API stages of a usage plan.
@@ -13739,6 +14141,27 @@ class CfnUsagePlan(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromUsagePlanId")
+    @builtins.classmethod
+    def from_usage_plan_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        usage_plan_id: builtins.str,
+    ) -> _IUsagePlanRef_7a28b470:
+        '''Creates a new IUsagePlanRef from a usagePlanId.
+
+        :param scope: -
+        :param id: -
+        :param usage_plan_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__44855889c228ef5d7500d8d4056967324b295b7a5290ae6aa891ab901acb2c2e)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument usage_plan_id", value=usage_plan_id, expected_type=type_hints["usage_plan_id"])
+        return typing.cast(_IUsagePlanRef_7a28b470, jsii.sinvoke(cls, "fromUsagePlanId", [scope, id, usage_plan_id]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -13791,6 +14214,12 @@ class CfnUsagePlan(
         '''Tag Manager which manages the tags for this resource.'''
         return typing.cast(_TagManager_0a598cb3, jsii.get(self, "tags"))
 
+    @builtins.property
+    @jsii.member(jsii_name="usagePlanRef")
+    def usage_plan_ref(self) -> _UsagePlanReference_3d3ec4d2:
+        '''A reference to a UsagePlan resource.'''
+        return typing.cast(_UsagePlanReference_3d3ec4d2, jsii.get(self, "usagePlanRef"))
+
     @builtins.property
     @jsii.member(jsii_name="apiStages")
     def api_stages(
@@ -14138,7 +14567,7 @@ class CfnUsagePlan(
             )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IUsagePlanKeyRef_465586fc)
 class CfnUsagePlanKey(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -14174,7 +14603,8 @@ class CfnUsagePlanKey(
         key_type: builtins.str,
         usage_plan_id: builtins.str,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ApiGateway::UsagePlanKey``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param key_id: The Id of the UsagePlanKey resource.
@@ -14237,6 +14667,12 @@ class CfnUsagePlanKey(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="usagePlanKeyRef")
+    def usage_plan_key_ref(self) -> _UsagePlanKeyReference_cfe985c6:
+        '''A reference to a UsagePlanKey resource.'''
+        return typing.cast(_UsagePlanKeyReference_cfe985c6, jsii.get(self, "usagePlanKeyRef"))
+
     @builtins.property
     @jsii.member(jsii_name="keyId")
     def key_id(self) -> builtins.str:
@@ -14533,7 +14969,7 @@ class CfnUsagePlanProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IVpcLinkRef_0afd9621, _ITaggable_36806126)
 class CfnVpcLink(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -14576,7 +15012,8 @@ class CfnVpcLink(
         description: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ApiGateway::VpcLink``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name used to label and identify the VPC link.
@@ -14594,6 +15031,27 @@ class CfnVpcLink(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromVpcLinkId")
+    @builtins.classmethod
+    def from_vpc_link_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        vpc_link_id: builtins.str,
+    ) -> _IVpcLinkRef_0afd9621:
+        '''Creates a new IVpcLinkRef from a vpcLinkId.
+
+        :param scope: -
+        :param id: -
+        :param vpc_link_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c1a057c69ce236d79b8b6fb912b05b1084e8253b79689c49d313f733ba403dfd)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument vpc_link_id", value=vpc_link_id, expected_type=type_hints["vpc_link_id"])
+        return typing.cast(_IVpcLinkRef_0afd9621, jsii.sinvoke(cls, "fromVpcLinkId", [scope, id, vpc_link_id]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -14646,6 +15104,12 @@ class CfnVpcLink(
         '''Tag Manager which manages the tags for this resource.'''
         return typing.cast(_TagManager_0a598cb3, jsii.get(self, "tags"))
 
+    @builtins.property
+    @jsii.member(jsii_name="vpcLinkRef")
+    def vpc_link_ref(self) -> _VpcLinkReference_cccde188:
+        '''A reference to a VpcLink resource.'''
+        return typing.cast(_VpcLinkReference_cccde188, jsii.get(self, "vpcLinkRef"))
+
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
@@ -16348,7 +16812,7 @@ class IAccessLogDestination(typing_extensions.Protocol):
     '''Access log destination for a RestApi Stage.'''
 
     @jsii.member(jsii_name="bind")
-    def bind(self, stage: "IStage") -> AccessLogDestinationConfig:
+    def bind(self, stage: _IStageRef_b829c330) -> AccessLogDestinationConfig:
         '''Binds this destination to the RestApi Stage.
 
         :param stage: -
@@ -16362,7 +16826,7 @@ class _IAccessLogDestinationProxy:
     __jsii_type__: typing.ClassVar[str] = "aws-cdk-lib.aws_apigateway.IAccessLogDestination"
 
     @jsii.member(jsii_name="bind")
-    def bind(self, stage: "IStage") -> AccessLogDestinationConfig:
+    def bind(self, stage: _IStageRef_b829c330) -> AccessLogDestinationConfig:
         '''Binds this destination to the RestApi Stage.
 
         :param stage: -
@@ -16377,7 +16841,7 @@ typing.cast(typing.Any, IAccessLogDestination).__jsii_proxy_class__ = lambda : _
 
 
 @jsii.interface(jsii_type="aws-cdk-lib.aws_apigateway.IApiKey")
-class IApiKey(_IResource_c80c4260, typing_extensions.Protocol):
+class IApiKey(_IResource_c80c4260, _IApiKeyRef_6e16b46a, typing_extensions.Protocol):
     '''API keys are alphanumeric string values that you distribute to app developer customers to grant access to your API.'''
 
     @builtins.property
@@ -16398,6 +16862,7 @@ class IApiKey(_IResource_c80c4260, typing_extensions.Protocol):
 
 class _IApiKeyProxy(
     jsii.proxy_for(_IResource_c80c4260), # type: ignore[misc]
+    jsii.proxy_for(_IApiKeyRef_6e16b46a), # type: ignore[misc]
 ):
     '''API keys are alphanumeric string values that you distribute to app developer customers to grant access to your API.'''
 
@@ -16467,7 +16932,11 @@ typing.cast(typing.Any, IAuthorizer).__jsii_proxy_class__ = lambda : _IAuthorize
 
 
 @jsii.interface(jsii_type="aws-cdk-lib.aws_apigateway.IDomainName")
-class IDomainName(_IResource_c80c4260, typing_extensions.Protocol):
+class IDomainName(
+    _IResource_c80c4260,
+    _IDomainNameRef_8b0ccf94,
+    typing_extensions.Protocol,
+):
     @builtins.property
     @jsii.member(jsii_name="domainName")
     def domain_name(self) -> builtins.str:
@@ -16498,6 +16967,7 @@ class IDomainName(_IResource_c80c4260, typing_extensions.Protocol):
 
 class _IDomainNameProxy(
     jsii.proxy_for(_IResource_c80c4260), # type: ignore[misc]
+    jsii.proxy_for(_IDomainNameRef_8b0ccf94), # type: ignore[misc]
 ):
     __jsii_type__: typing.ClassVar[str] = "aws-cdk-lib.aws_apigateway.IDomainName"
 
@@ -16533,7 +17003,11 @@ typing.cast(typing.Any, IDomainName).__jsii_proxy_class__ = lambda : _IDomainNam
 
 
 @jsii.interface(jsii_type="aws-cdk-lib.aws_apigateway.IGatewayResponse")
-class IGatewayResponse(_IResource_c80c4260, typing_extensions.Protocol):
+class IGatewayResponse(
+    _IResource_c80c4260,
+    _IGatewayResponseRef_d5aa66ef,
+    typing_extensions.Protocol,
+):
     '''Represents gateway response resource.'''
 
     pass
@@ -16541,6 +17015,7 @@ class IGatewayResponse(_IResource_c80c4260, typing_extensions.Protocol):
 
 class _IGatewayResponseProxy(
     jsii.proxy_for(_IResource_c80c4260), # type: ignore[misc]
+    jsii.proxy_for(_IGatewayResponseRef_d5aa66ef), # type: ignore[misc]
 ):
     '''Represents gateway response resource.'''
 
@@ -16610,7 +17085,11 @@ typing.cast(typing.Any, IRequestValidator).__jsii_proxy_class__ = lambda : _IReq
 
 
 @jsii.interface(jsii_type="aws-cdk-lib.aws_apigateway.IResource")
-class IResource(_IResource_c80c4260, typing_extensions.Protocol):
+class IResource(
+    _IResource_c80c4260,
+    _IResourceRef_c7defb81,
+    typing_extensions.Protocol,
+):
     @builtins.property
     @jsii.member(jsii_name="api")
     def api(self) -> "IRestApi":
@@ -16799,6 +17278,7 @@ class IResource(_IResource_c80c4260, typing_extensions.Protocol):
 
 class _IResourceProxy(
     jsii.proxy_for(_IResource_c80c4260), # type: ignore[misc]
+    jsii.proxy_for(_IResourceRef_c7defb81), # type: ignore[misc]
 ):
     __jsii_type__: typing.ClassVar[str] = "aws-cdk-lib.aws_apigateway.IResource"
 
@@ -17042,7 +17522,7 @@ typing.cast(typing.Any, IResource).__jsii_proxy_class__ = lambda : _IResourcePro
 
 
 @jsii.interface(jsii_type="aws-cdk-lib.aws_apigateway.IRestApi")
-class IRestApi(_IResource_c80c4260, typing_extensions.Protocol):
+class IRestApi(_IResource_c80c4260, _IRestApiRef_72dcbda0, typing_extensions.Protocol):
     @builtins.property
     @jsii.member(jsii_name="restApiId")
     def rest_api_id(self) -> builtins.str:
@@ -17125,6 +17605,7 @@ class IRestApi(_IResource_c80c4260, typing_extensions.Protocol):
 
 class _IRestApiProxy(
     jsii.proxy_for(_IResource_c80c4260), # type: ignore[misc]
+    jsii.proxy_for(_IRestApiRef_72dcbda0), # type: ignore[misc]
 ):
     __jsii_type__: typing.ClassVar[str] = "aws-cdk-lib.aws_apigateway.IRestApi"
 
@@ -17220,7 +17701,7 @@ typing.cast(typing.Any, IRestApi).__jsii_proxy_class__ = lambda : _IRestApiProxy
 
 
 @jsii.interface(jsii_type="aws-cdk-lib.aws_apigateway.IStage")
-class IStage(_IResource_c80c4260, typing_extensions.Protocol):
+class IStage(_IResource_c80c4260, _IStageRef_b829c330, typing_extensions.Protocol):
     '''Represents an APIGateway Stage.'''
 
     @builtins.property
@@ -17265,6 +17746,7 @@ class IStage(_IResource_c80c4260, typing_extensions.Protocol):
 
 class _IStageProxy(
     jsii.proxy_for(_IResource_c80c4260), # type: ignore[misc]
+    jsii.proxy_for(_IStageRef_b829c330), # type: ignore[misc]
 ):
     '''Represents an APIGateway Stage.'''
 
@@ -17326,7 +17808,11 @@ typing.cast(typing.Any, IStage).__jsii_proxy_class__ = lambda : _IStageProxy
 
 
 @jsii.interface(jsii_type="aws-cdk-lib.aws_apigateway.IUsagePlan")
-class IUsagePlan(_IResource_c80c4260, typing_extensions.Protocol):
+class IUsagePlan(
+    _IResource_c80c4260,
+    _IUsagePlanRef_7a28b470,
+    typing_extensions.Protocol,
+):
     '''A UsagePlan, either managed by this CDK app, or imported.'''
 
     @builtins.property
@@ -17341,7 +17827,7 @@ class IUsagePlan(_IResource_c80c4260, typing_extensions.Protocol):
     @jsii.member(jsii_name="addApiKey")
     def add_api_key(
         self,
-        api_key: IApiKey,
+        api_key: _IApiKeyRef_6e16b46a,
         *,
         override_logical_id: typing.Optional[builtins.str] = None,
     ) -> None:
@@ -17355,6 +17841,7 @@ class IUsagePlan(_IResource_c80c4260, typing_extensions.Protocol):
 
 class _IUsagePlanProxy(
     jsii.proxy_for(_IResource_c80c4260), # type: ignore[misc]
+    jsii.proxy_for(_IUsagePlanRef_7a28b470), # type: ignore[misc]
 ):
     '''A UsagePlan, either managed by this CDK app, or imported.'''
 
@@ -17372,7 +17859,7 @@ class _IUsagePlanProxy(
     @jsii.member(jsii_name="addApiKey")
     def add_api_key(
         self,
-        api_key: IApiKey,
+        api_key: _IApiKeyRef_6e16b46a,
         *,
         override_logical_id: typing.Optional[builtins.str] = None,
     ) -> None:
@@ -17393,7 +17880,7 @@ typing.cast(typing.Any, IUsagePlan).__jsii_proxy_class__ = lambda : _IUsagePlanP
 
 
 @jsii.interface(jsii_type="aws-cdk-lib.aws_apigateway.IVpcLink")
-class IVpcLink(_IResource_c80c4260, typing_extensions.Protocol):
+class IVpcLink(_IResource_c80c4260, _IVpcLinkRef_0afd9621, typing_extensions.Protocol):
     '''Represents an API Gateway VpcLink.'''
 
     @builtins.property
@@ -17408,6 +17895,7 @@ class IVpcLink(_IResource_c80c4260, typing_extensions.Protocol):
 
 class _IVpcLinkProxy(
     jsii.proxy_for(_IResource_c80c4260), # type: ignore[misc]
+    jsii.proxy_for(_IVpcLinkRef_0afd9621), # type: ignore[misc]
 ):
     '''Represents an API Gateway VpcLink.'''
 
@@ -18487,7 +18975,7 @@ class JsonSchema:
     def __init__(
         self,
         *,
-        additional_items: typing.Optional[typing.Sequence[typing.Union["JsonSchema", typing.Dict[builtins.str, typing.Any]]]] = None,
+        additional_items: typing.Optional[typing.Union[builtins.bool, typing.Union["JsonSchema", typing.Dict[builtins.str, typing.Any]]]] = None,
         additional_properties: typing.Optional[typing.Union[builtins.bool, typing.Union["JsonSchema", typing.Dict[builtins.str, typing.Any]]]] = None,
         all_of: typing.Optional[typing.Sequence[typing.Union["JsonSchema", typing.Dict[builtins.str, typing.Any]]]] = None,
         any_of: typing.Optional[typing.Sequence[typing.Union["JsonSchema", typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -18720,9 +19208,11 @@ class JsonSchema:
             self._values["unique_items"] = unique_items
 
     @builtins.property
-    def additional_items(self) -> typing.Optional[typing.List["JsonSchema"]]:
+    def additional_items(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, "JsonSchema"]]:
         result = self._values.get("additional_items")
-        return typing.cast(typing.Optional[typing.List["JsonSchema"]], result)
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, "JsonSchema"]], result)
 
     @builtins.property
     def additional_properties(
@@ -19342,6 +19832,7 @@ class LambdaAuthorizerProps:
         "vpc_link": "vpcLink",
         "allow_test_invoke": "allowTestInvoke",
         "proxy": "proxy",
+        "scope_permission_to_method": "scopePermissionToMethod",
     },
 )
 class LambdaIntegrationOptions(IntegrationOptions):
@@ -19362,6 +19853,7 @@ class LambdaIntegrationOptions(IntegrationOptions):
         vpc_link: typing.Optional[IVpcLink] = None,
         allow_test_invoke: typing.Optional[builtins.bool] = None,
         proxy: typing.Optional[builtins.bool] = None,
+        scope_permission_to_method: typing.Optional[builtins.bool] = None,
     ) -> None:
         '''
         :param cache_key_parameters: A list of request parameters whose values are to be cached. It determines request parameters that will make it into the cache key.
@@ -19376,23 +19868,27 @@ class LambdaIntegrationOptions(IntegrationOptions):
         :param request_templates: A map of Apache Velocity templates that are applied on the request payload. The template that API Gateway uses is based on the value of the Content-Type header that's sent by the client. The content type value is the key, and the template is the value (specified as a string), such as the following snippet:: { "application/json": "{ \\"statusCode\\": 200 }" }
         :param timeout: The maximum amount of time an integration will run before it returns without a response. By default, the value must be between 50 milliseconds and 29 seconds. The upper bound can be increased for regional and private Rest APIs only, via a quota increase request for your acccount. This increase might require a reduction in your account-level throttle quota limit. See {@link https://docs.aws.amazon.com/apigateway/latest/developerguide/limits.html Amazon API Gateway quotas} for more details. Default: Duration.seconds(29)
         :param vpc_link: The VpcLink used for the integration. Required if connectionType is VPC_LINK
-        :param allow_test_invoke: Allow invoking method from AWS Console UI (for testing purposes). This will add another permission to the AWS Lambda resource policy which will allow the ``test-invoke-stage`` stage to invoke this handler. If this is set to ``false``, the function will only be usable from the deployment endpoint. Default: true
+        :param allow_test_invoke: Allow invoking method from AWS Console UI (for testing purposes). This will add another permission to the AWS Lambda resource policy which will allow the ``test-invoke-stage`` stage to invoke this handler. If this is set to ``false``, the function will only be usable from the deployment endpoint. Note that this property is ignored when ``scopePermissionToMethod`` is ``false``. Default: true
         :param proxy: Use proxy integration or normal (request/response mapping) integration. Default: true
+        :param scope_permission_to_method: Scope the permission for invoking the AWS Lambda down to the specific method associated with this integration. If this is set to ``false``, the permission will allow invoking the AWS Lambda from any method. This is useful for reducing the AWS Lambda policy size for cases where the same AWS Lambda function is reused for many integrations. Note that this will always allow test invocations. Default: true
 
         :exampleMetadata: infused
 
         Example::
 
+            # book: apigateway.Resource
             # backend: lambda.Function
             
             
-            api = apigateway.LambdaRestApi(self, "myapi",
-                handler=backend,
-                integration_options=apigateway.LambdaIntegrationOptions(
-                    allow_test_invoke=False,
-                    timeout=Duration.seconds(1)
-                )
+            get_book_integration = apigateway.LambdaIntegration(backend,
+                scope_permission_to_method=False
+            )
+            create_book_integration = apigateway.LambdaIntegration(backend,
+                scope_permission_to_method=False
             )
+            
+            book.add_method("GET", get_book_integration)
+            book.add_method("POST", create_book_integration)
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__ce30eee1096e0566120e3d64f9e65409fa005cc047656a224902fd86cd15c8b0)
@@ -19410,6 +19906,7 @@ class LambdaIntegrationOptions(IntegrationOptions):
             check_type(argname="argument vpc_link", value=vpc_link, expected_type=type_hints["vpc_link"])
             check_type(argname="argument allow_test_invoke", value=allow_test_invoke, expected_type=type_hints["allow_test_invoke"])
             check_type(argname="argument proxy", value=proxy, expected_type=type_hints["proxy"])
+            check_type(argname="argument scope_permission_to_method", value=scope_permission_to_method, expected_type=type_hints["scope_permission_to_method"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if cache_key_parameters is not None:
             self._values["cache_key_parameters"] = cache_key_parameters
@@ -19439,6 +19936,8 @@ class LambdaIntegrationOptions(IntegrationOptions):
             self._values["allow_test_invoke"] = allow_test_invoke
         if proxy is not None:
             self._values["proxy"] = proxy
+        if scope_permission_to_method is not None:
+            self._values["scope_permission_to_method"] = scope_permission_to_method
 
     @builtins.property
     def cache_key_parameters(self) -> typing.Optional[typing.List[builtins.str]]:
@@ -19595,6 +20094,8 @@ class LambdaIntegrationOptions(IntegrationOptions):
         is set to ``false``, the function will only be usable from the deployment
         endpoint.
 
+        Note that this property is ignored when ``scopePermissionToMethod`` is ``false``.
+
         :default: true
         '''
         result = self._values.get("allow_test_invoke")
@@ -19611,6 +20112,21 @@ class LambdaIntegrationOptions(IntegrationOptions):
         result = self._values.get("proxy")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def scope_permission_to_method(self) -> typing.Optional[builtins.bool]:
+        '''Scope the permission for invoking the AWS Lambda down to the specific method associated with this integration.
+
+        If this is set to ``false``, the permission will allow invoking the AWS Lambda
+        from any method. This is useful for reducing the AWS Lambda policy size
+        for cases where the same AWS Lambda function is reused for many integrations.
+
+        Note that this will always allow test invocations.
+
+        :default: true
+        '''
+        result = self._values.get("scope_permission_to_method")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -19654,7 +20170,7 @@ class LogGroupLogDestination(
         jsii.create(self.__class__, self, [log_group])
 
     @jsii.member(jsii_name="bind")
-    def bind(self, _stage: IStage) -> AccessLogDestinationConfig:
+    def bind(self, _stage: _IStageRef_b829c330) -> AccessLogDestinationConfig:
         '''Binds this destination to the CloudWatch Logs.
 
         :param _stage: -
@@ -19853,11 +20369,12 @@ class Method(
     def metric(
         self,
         metric_name: builtins.str,
-        stage: IStage,
+        stage: _IStageRef_b829c330,
         *,
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -19865,6 +20382,7 @@ class Method(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Returns the given named metric for this API method.
 
@@ -19873,6 +20391,7 @@ class Method(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -19880,6 +20399,7 @@ class Method(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__5673792ec70e78f31bd42c8b5fa76d95f3d27fb475ced2b715241422b9a73c79)
@@ -19889,6 +20409,7 @@ class Method(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -19896,6 +20417,7 @@ class Method(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metric", [metric_name, stage, props]))
@@ -19903,11 +20425,12 @@ class Method(
     @jsii.member(jsii_name="metricCacheHitCount")
     def metric_cache_hit_count(
         self,
-        stage: IStage,
+        stage: _IStageRef_b829c330,
         *,
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -19915,6 +20438,7 @@ class Method(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Metric for the number of requests served from the API cache in a given period.
 
@@ -19922,6 +20446,7 @@ class Method(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -19929,6 +20454,7 @@ class Method(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: - sum over 5 minutes
         '''
@@ -19939,6 +20465,7 @@ class Method(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -19946,6 +20473,7 @@ class Method(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricCacheHitCount", [stage, props]))
@@ -19953,11 +20481,12 @@ class Method(
     @jsii.member(jsii_name="metricCacheMissCount")
     def metric_cache_miss_count(
         self,
-        stage: IStage,
+        stage: _IStageRef_b829c330,
         *,
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -19965,6 +20494,7 @@ class Method(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Metric for the number of requests served from the backend in a given period, when API caching is enabled.
 
@@ -19972,6 +20502,7 @@ class Method(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -19979,6 +20510,7 @@ class Method(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: - sum over 5 minutes
         '''
@@ -19989,6 +20521,7 @@ class Method(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -19996,6 +20529,7 @@ class Method(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricCacheMissCount", [stage, props]))
@@ -20003,11 +20537,12 @@ class Method(
     @jsii.member(jsii_name="metricClientError")
     def metric_client_error(
         self,
-        stage: IStage,
+        stage: _IStageRef_b829c330,
         *,
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -20015,6 +20550,7 @@ class Method(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Metric for the number of client-side errors captured in a given period.
 
@@ -20022,6 +20558,7 @@ class Method(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -20029,6 +20566,7 @@ class Method(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: - sum over 5 minutes
         '''
@@ -20039,6 +20577,7 @@ class Method(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -20046,6 +20585,7 @@ class Method(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricClientError", [stage, props]))
@@ -20053,11 +20593,12 @@ class Method(
     @jsii.member(jsii_name="metricCount")
     def metric_count(
         self,
-        stage: IStage,
+        stage: _IStageRef_b829c330,
         *,
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -20065,6 +20606,7 @@ class Method(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Metric for the total number API requests in a given period.
 
@@ -20072,6 +20614,7 @@ class Method(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -20079,6 +20622,7 @@ class Method(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: - sample count over 5 minutes
         '''
@@ -20089,6 +20633,7 @@ class Method(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -20096,6 +20641,7 @@ class Method(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricCount", [stage, props]))
@@ -20103,11 +20649,12 @@ class Method(
     @jsii.member(jsii_name="metricIntegrationLatency")
     def metric_integration_latency(
         self,
-        stage: IStage,
+        stage: _IStageRef_b829c330,
         *,
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -20115,6 +20662,7 @@ class Method(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Metric for the time between when API Gateway relays a request to the backend and when it receives a response from the backend.
 
@@ -20122,6 +20670,7 @@ class Method(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -20129,6 +20678,7 @@ class Method(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: - average over 5 minutes.
         '''
@@ -20139,6 +20689,7 @@ class Method(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -20146,6 +20697,7 @@ class Method(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricIntegrationLatency", [stage, props]))
@@ -20153,11 +20705,12 @@ class Method(
     @jsii.member(jsii_name="metricLatency")
     def metric_latency(
         self,
-        stage: IStage,
+        stage: _IStageRef_b829c330,
         *,
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -20165,6 +20718,7 @@ class Method(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''The time between when API Gateway receives a request from a client and when it returns a response to the client.
 
@@ -20174,6 +20728,7 @@ class Method(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -20181,6 +20736,7 @@ class Method(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: - average over 5 minutes.
         '''
@@ -20191,6 +20747,7 @@ class Method(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -20198,6 +20755,7 @@ class Method(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricLatency", [stage, props]))
@@ -20205,11 +20763,12 @@ class Method(
     @jsii.member(jsii_name="metricServerError")
     def metric_server_error(
         self,
-        stage: IStage,
+        stage: _IStageRef_b829c330,
         *,
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -20217,6 +20776,7 @@ class Method(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Metric for the number of server-side errors captured in a given period.
 
@@ -20224,6 +20784,7 @@ class Method(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -20231,6 +20792,7 @@ class Method(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: - sum over 5 minutes
         '''
@@ -20241,6 +20803,7 @@ class Method(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -20248,6 +20811,7 @@ class Method(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricServerError", [stage, props]))
@@ -21512,7 +22076,7 @@ class ModelProps(ModelOptions):
             model_props = apigateway.ModelProps(
                 rest_api=rest_api,
                 schema=apigateway.JsonSchema(
-                    additional_items=[json_schema_],
+                    additional_items=False,
                     additional_properties=False,
                     all_of=[json_schema_],
                     any_of=[json_schema_],
@@ -21977,6 +22541,12 @@ class RateLimitedApiKey(
         '''Uniquely identifies this class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
 
+    @builtins.property
+    @jsii.member(jsii_name="apiKeyRef")
+    def api_key_ref(self) -> _ApiKeyReference_6382fd3a:
+        '''A reference to a ApiKey resource.'''
+        return typing.cast(_ApiKeyReference_6382fd3a, jsii.get(self, "apiKeyRef"))
+
     @builtins.property
     @jsii.member(jsii_name="keyArn")
     def key_arn(self) -> builtins.str:
@@ -23122,6 +23692,12 @@ class ResourceBase(
         '''The ID of the resource.'''
         ...
 
+    @builtins.property
+    @jsii.member(jsii_name="resourceRef")
+    def resource_ref(self) -> _ResourceReference_c72d8a5a:
+        '''A reference to a Resource resource.'''
+        return typing.cast(_ResourceReference_c72d8a5a, jsii.get(self, "resourceRef"))
+
     @builtins.property
     @jsii.member(jsii_name="defaultCorsPreflightOptions")
     @abc.abstractmethod
@@ -24101,6 +24677,7 @@ class RestApiBase(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -24108,6 +24685,7 @@ class RestApiBase(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Returns the given named metric for this API.
 
@@ -24115,6 +24693,7 @@ class RestApiBase(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -24122,6 +24701,7 @@ class RestApiBase(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__83e0007c5bc1aeac14243c8f05dab576ffb55853642cfe1f4a1352b59dda08cf)
@@ -24130,6 +24710,7 @@ class RestApiBase(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -24137,6 +24718,7 @@ class RestApiBase(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metric", [metric_name, props]))
@@ -24148,6 +24730,7 @@ class RestApiBase(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -24155,6 +24738,7 @@ class RestApiBase(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Metric for the number of requests served from the API cache in a given period.
 
@@ -24163,6 +24747,7 @@ class RestApiBase(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -24170,11 +24755,13 @@ class RestApiBase(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
         '''
         props = _MetricOptions_1788b62f(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -24182,6 +24769,7 @@ class RestApiBase(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricCacheHitCount", [props]))
@@ -24193,6 +24781,7 @@ class RestApiBase(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -24200,6 +24789,7 @@ class RestApiBase(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Metric for the number of requests served from the backend in a given period, when API caching is enabled.
 
@@ -24208,6 +24798,7 @@ class RestApiBase(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -24215,11 +24806,13 @@ class RestApiBase(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
         '''
         props = _MetricOptions_1788b62f(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -24227,6 +24820,7 @@ class RestApiBase(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricCacheMissCount", [props]))
@@ -24238,6 +24832,7 @@ class RestApiBase(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -24245,6 +24840,7 @@ class RestApiBase(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Metric for the number of client-side errors captured in a given period.
 
@@ -24253,6 +24849,7 @@ class RestApiBase(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -24260,11 +24857,13 @@ class RestApiBase(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
         '''
         props = _MetricOptions_1788b62f(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -24272,6 +24871,7 @@ class RestApiBase(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricClientError", [props]))
@@ -24283,6 +24883,7 @@ class RestApiBase(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -24290,6 +24891,7 @@ class RestApiBase(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Metric for the total number API requests in a given period.
 
@@ -24298,6 +24900,7 @@ class RestApiBase(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -24305,11 +24908,13 @@ class RestApiBase(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
         '''
         props = _MetricOptions_1788b62f(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -24317,6 +24922,7 @@ class RestApiBase(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricCount", [props]))
@@ -24328,6 +24934,7 @@ class RestApiBase(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -24335,6 +24942,7 @@ class RestApiBase(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Metric for the time between when API Gateway relays a request to the backend and when it receives a response from the backend.
 
@@ -24343,6 +24951,7 @@ class RestApiBase(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -24350,11 +24959,13 @@ class RestApiBase(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
         '''
         props = _MetricOptions_1788b62f(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -24362,6 +24973,7 @@ class RestApiBase(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricIntegrationLatency", [props]))
@@ -24373,6 +24985,7 @@ class RestApiBase(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -24380,6 +24993,7 @@ class RestApiBase(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''The time between when API Gateway receives a request from a client and when it returns a response to the client.
 
@@ -24390,6 +25004,7 @@ class RestApiBase(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -24397,11 +25012,13 @@ class RestApiBase(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
         '''
         props = _MetricOptions_1788b62f(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -24409,6 +25026,7 @@ class RestApiBase(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricLatency", [props]))
@@ -24420,6 +25038,7 @@ class RestApiBase(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -24427,6 +25046,7 @@ class RestApiBase(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Metric for the number of server-side errors captured in a given period.
 
@@ -24435,6 +25055,7 @@ class RestApiBase(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -24442,11 +25063,13 @@ class RestApiBase(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
         '''
         props = _MetricOptions_1788b62f(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -24454,6 +25077,7 @@ class RestApiBase(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricServerError", [props]))
@@ -24489,6 +25113,12 @@ class RestApiBase(
         '''
         return typing.cast(builtins.str, jsii.get(self, "restApiName"))
 
+    @builtins.property
+    @jsii.member(jsii_name="restApiRef")
+    def rest_api_ref(self) -> _RestApiReference_0863f937:
+        '''A reference to a RestApi resource.'''
+        return typing.cast(_RestApiReference_0863f937, jsii.get(self, "restApiRef"))
+
     @builtins.property
     @jsii.member(jsii_name="restApiRootResourceId")
     @abc.abstractmethod
@@ -25502,16 +26132,16 @@ class S3ApiDefinition(
         # The code below shows an example of how to instantiate this type.
         # The values are placeholders you should change.
         from aws_cdk import aws_apigateway as apigateway
-        from aws_cdk import aws_s3 as s3
+        from aws_cdk.interfaces import aws_s3 as interfaces_aws_s3
         
-        # bucket: s3.Bucket
+        # bucket_ref: interfaces_aws_s3.IBucketRef
         
-        s3_api_definition = apigateway.S3ApiDefinition(bucket, "key", "objectVersion")
+        s3_api_definition = apigateway.S3ApiDefinition(bucket_ref, "key", "objectVersion")
     '''
 
     def __init__(
         self,
-        bucket: _IBucket_42e086fd,
+        bucket: _IBucketRef_3debe44e,
         key: builtins.str,
         object_version: typing.Optional[builtins.str] = None,
     ) -> None:
@@ -25890,6 +26520,7 @@ class SpecRestApi(
         id: builtins.str,
         *,
         api_definition: ApiDefinition,
+        binary_media_types: typing.Optional[typing.Sequence[builtins.str]] = None,
         min_compression_size: typing.Optional[_Size_7b441c34] = None,
         mode: typing.Optional[RestApiMode] = None,
         cloud_watch_role: typing.Optional[builtins.bool] = None,
@@ -25912,6 +26543,7 @@ class SpecRestApi(
         :param scope: -
         :param id: -
         :param api_definition: An OpenAPI definition compatible with API Gateway.
+        :param binary_media_types: The list of binary media mime-types that are supported by the SpecRestApi resource, such as "image/png" or "application/octet-stream". Default: - SpecRestApi supports only UTF-8-encoded text payloads.
         :param min_compression_size: A Size(in bytes, kibibytes, mebibytes etc) that is used to enable compression (with non-negative between 0 and 10485760 (10M) bytes, inclusive) or disable compression (when undefined) on an API. When compression is enabled, compression or decompression is not applied on the payload if the payload size is smaller than this value. Setting it to zero allows compression for any payload size. Default: - Compression is disabled.
         :param mode: The Mode that determines how API Gateway handles resource updates. Valid values are ``overwrite`` or ``merge``. For ``overwrite``, the new API definition replaces the existing one. The existing API identifier remains unchanged. For ``merge``, the new API definition is merged with the existing API. If you don't specify this property, a default value is chosen: - For REST APIs created before March 29, 2021, the default is ``overwrite`` - For REST APIs created after March 29, 2021, the new API definition takes precedence, but any container types such as endpoint configurations and binary media types are merged with the existing API. Use the default mode to define top-level RestApi properties in addition to using OpenAPI. Generally, it's preferred to use API Gateway's OpenAPI extensions to model these properties. Default: - ``merge`` for REST APIs created after March 29, 2021, otherwise ``overwrite``
         :param cloud_watch_role: Automatically configure an AWS CloudWatch role for API Gateway. Default: - false if ``@aws-cdk/aws-apigateway:disableCloudWatchRole`` is enabled, true otherwise
@@ -25936,6 +26568,7 @@ class SpecRestApi(
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = SpecRestApiProps(
             api_definition=api_definition,
+            binary_media_types=binary_media_types,
             min_compression_size=min_compression_size,
             mode=mode,
             cloud_watch_role=cloud_watch_role,
@@ -26026,6 +26659,7 @@ class SpecRestApi(
         "rest_api_name": "restApiName",
         "retain_deployments": "retainDeployments",
         "api_definition": "apiDefinition",
+        "binary_media_types": "binaryMediaTypes",
         "min_compression_size": "minCompressionSize",
         "mode": "mode",
     },
@@ -26050,6 +26684,7 @@ class SpecRestApiProps(RestApiBaseProps):
         rest_api_name: typing.Optional[builtins.str] = None,
         retain_deployments: typing.Optional[builtins.bool] = None,
         api_definition: ApiDefinition,
+        binary_media_types: typing.Optional[typing.Sequence[builtins.str]] = None,
         min_compression_size: typing.Optional[_Size_7b441c34] = None,
         mode: typing.Optional[RestApiMode] = None,
     ) -> None:
@@ -26071,6 +26706,7 @@ class SpecRestApiProps(RestApiBaseProps):
         :param rest_api_name: A name for the API Gateway RestApi resource. Default: - ID of the RestApi construct.
         :param retain_deployments: Retains old deployment resources when the API changes. This allows manually reverting stages to point to old deployments via the AWS Console. Default: false
         :param api_definition: An OpenAPI definition compatible with API Gateway.
+        :param binary_media_types: The list of binary media mime-types that are supported by the SpecRestApi resource, such as "image/png" or "application/octet-stream". Default: - SpecRestApi supports only UTF-8-encoded text payloads.
         :param min_compression_size: A Size(in bytes, kibibytes, mebibytes etc) that is used to enable compression (with non-negative between 0 and 10485760 (10M) bytes, inclusive) or disable compression (when undefined) on an API. When compression is enabled, compression or decompression is not applied on the payload if the payload size is smaller than this value. Setting it to zero allows compression for any payload size. Default: - Compression is disabled.
         :param mode: The Mode that determines how API Gateway handles resource updates. Valid values are ``overwrite`` or ``merge``. For ``overwrite``, the new API definition replaces the existing one. The existing API identifier remains unchanged. For ``merge``, the new API definition is merged with the existing API. If you don't specify this property, a default value is chosen: - For REST APIs created before March 29, 2021, the default is ``overwrite`` - For REST APIs created after March 29, 2021, the new API definition takes precedence, but any container types such as endpoint configurations and binary media types are merged with the existing API. Use the default mode to define top-level RestApi properties in addition to using OpenAPI. Generally, it's preferred to use API Gateway's OpenAPI extensions to model these properties. Default: - ``merge`` for REST APIs created after March 29, 2021, otherwise ``overwrite``
 
@@ -26107,6 +26743,7 @@ class SpecRestApiProps(RestApiBaseProps):
             check_type(argname="argument rest_api_name", value=rest_api_name, expected_type=type_hints["rest_api_name"])
             check_type(argname="argument retain_deployments", value=retain_deployments, expected_type=type_hints["retain_deployments"])
             check_type(argname="argument api_definition", value=api_definition, expected_type=type_hints["api_definition"])
+            check_type(argname="argument binary_media_types", value=binary_media_types, expected_type=type_hints["binary_media_types"])
             check_type(argname="argument min_compression_size", value=min_compression_size, expected_type=type_hints["min_compression_size"])
             check_type(argname="argument mode", value=mode, expected_type=type_hints["mode"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
@@ -26142,6 +26779,8 @@ class SpecRestApiProps(RestApiBaseProps):
             self._values["rest_api_name"] = rest_api_name
         if retain_deployments is not None:
             self._values["retain_deployments"] = retain_deployments
+        if binary_media_types is not None:
+            self._values["binary_media_types"] = binary_media_types
         if min_compression_size is not None:
             self._values["min_compression_size"] = min_compression_size
         if mode is not None:
@@ -26330,6 +26969,15 @@ class SpecRestApiProps(RestApiBaseProps):
         assert result is not None, "Required property 'api_definition' is missing"
         return typing.cast(ApiDefinition, result)
 
+    @builtins.property
+    def binary_media_types(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''The list of binary media mime-types that are supported by the SpecRestApi resource, such as "image/png" or "application/octet-stream".
+
+        :default: - SpecRestApi supports only UTF-8-encoded text payloads.
+        '''
+        result = self._values.get("binary_media_types")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
     @builtins.property
     def min_compression_size(self) -> typing.Optional[_Size_7b441c34]:
         '''A Size(in bytes, kibibytes, mebibytes etc) that is used to enable compression (with non-negative between 0 and 10485760 (10M) bytes, inclusive) or disable compression (when undefined) on an API.
@@ -26523,6 +27171,7 @@ class StageBase(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -26530,6 +27179,7 @@ class StageBase(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Returns the given named metric for this stage.
 
@@ -26537,6 +27187,7 @@ class StageBase(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -26544,6 +27195,7 @@ class StageBase(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__e7aa140ce28102f6291e54fab42702aec75e06eb4ff034ae6897a3606e9c1ac3)
@@ -26552,6 +27204,7 @@ class StageBase(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -26559,6 +27212,7 @@ class StageBase(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metric", [metric_name, props]))
@@ -26570,6 +27224,7 @@ class StageBase(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -26577,12 +27232,14 @@ class StageBase(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Metric for the number of requests served from the API cache in a given period.
 
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -26590,6 +27247,7 @@ class StageBase(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: - sum over 5 minutes
         '''
@@ -26597,6 +27255,7 @@ class StageBase(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -26604,6 +27263,7 @@ class StageBase(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricCacheHitCount", [props]))
@@ -26615,6 +27275,7 @@ class StageBase(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -26622,12 +27283,14 @@ class StageBase(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Metric for the number of requests served from the backend in a given period, when API caching is enabled.
 
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -26635,6 +27298,7 @@ class StageBase(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: - sum over 5 minutes
         '''
@@ -26642,6 +27306,7 @@ class StageBase(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -26649,6 +27314,7 @@ class StageBase(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricCacheMissCount", [props]))
@@ -26660,6 +27326,7 @@ class StageBase(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -26667,12 +27334,14 @@ class StageBase(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Metric for the number of client-side errors captured in a given period.
 
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -26680,6 +27349,7 @@ class StageBase(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: - sum over 5 minutes
         '''
@@ -26687,6 +27357,7 @@ class StageBase(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -26694,6 +27365,7 @@ class StageBase(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricClientError", [props]))
@@ -26705,6 +27377,7 @@ class StageBase(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -26712,12 +27385,14 @@ class StageBase(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Metric for the total number API requests in a given period.
 
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -26725,6 +27400,7 @@ class StageBase(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: - sample count over 5 minutes
         '''
@@ -26732,6 +27408,7 @@ class StageBase(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -26739,6 +27416,7 @@ class StageBase(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricCount", [props]))
@@ -26750,6 +27428,7 @@ class StageBase(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -26757,12 +27436,14 @@ class StageBase(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Metric for the time between when API Gateway relays a request to the backend and when it receives a response from the backend.
 
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -26770,6 +27451,7 @@ class StageBase(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: - average over 5 minutes.
         '''
@@ -26777,6 +27459,7 @@ class StageBase(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -26784,6 +27467,7 @@ class StageBase(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricIntegrationLatency", [props]))
@@ -26795,6 +27479,7 @@ class StageBase(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -26802,6 +27487,7 @@ class StageBase(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''The time between when API Gateway receives a request from a client and when it returns a response to the client.
 
@@ -26810,6 +27496,7 @@ class StageBase(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -26817,6 +27504,7 @@ class StageBase(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: - average over 5 minutes.
         '''
@@ -26824,6 +27512,7 @@ class StageBase(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -26831,6 +27520,7 @@ class StageBase(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricLatency", [props]))
@@ -26842,6 +27532,7 @@ class StageBase(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -26849,12 +27540,14 @@ class StageBase(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Metric for the number of server-side errors captured in a given period.
 
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -26862,6 +27555,7 @@ class StageBase(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: - sum over 5 minutes
         '''
@@ -26869,6 +27563,7 @@ class StageBase(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -26876,6 +27571,7 @@ class StageBase(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricServerError", [props]))
@@ -26919,6 +27615,12 @@ class StageBase(
         '''Name of this stage.'''
         ...
 
+    @builtins.property
+    @jsii.member(jsii_name="stageRef")
+    def stage_ref(self) -> _StageReference_3eb94694:
+        '''A reference to a Stage resource.'''
+        return typing.cast(_StageReference_3eb94694, jsii.get(self, "stageRef"))
+
 
 class _StageBaseProxy(
     StageBase,
@@ -29285,7 +29987,7 @@ class UsagePlan(
     @jsii.member(jsii_name="addApiKey")
     def add_api_key(
         self,
-        api_key: IApiKey,
+        api_key: _IApiKeyRef_6e16b46a,
         *,
         override_logical_id: typing.Optional[builtins.str] = None,
     ) -> None:
@@ -29334,6 +30036,12 @@ class UsagePlan(
         '''
         return typing.cast(builtins.str, jsii.get(self, "usagePlanId"))
 
+    @builtins.property
+    @jsii.member(jsii_name="usagePlanRef")
+    def usage_plan_ref(self) -> _UsagePlanReference_3d3ec4d2:
+        '''A reference to a UsagePlan resource.'''
+        return typing.cast(_UsagePlanReference_3d3ec4d2, jsii.get(self, "usagePlanRef"))
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_apigateway.UsagePlanPerApiStage",
@@ -29662,6 +30370,12 @@ class VpcLink(
         '''
         return typing.cast(builtins.str, jsii.get(self, "vpcLinkId"))
 
+    @builtins.property
+    @jsii.member(jsii_name="vpcLinkRef")
+    def vpc_link_ref(self) -> _VpcLinkReference_cccde188:
+        '''A reference to a VpcLink resource.'''
+        return typing.cast(_VpcLinkReference_cccde188, jsii.get(self, "vpcLinkRef"))
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_apigateway.VpcLinkProps",
@@ -29897,6 +30611,12 @@ class ApiKey(
         '''Uniquely identifies this class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
 
+    @builtins.property
+    @jsii.member(jsii_name="apiKeyRef")
+    def api_key_ref(self) -> _ApiKeyReference_6382fd3a:
+        '''A reference to a ApiKey resource.'''
+        return typing.cast(_ApiKeyReference_6382fd3a, jsii.get(self, "apiKeyRef"))
+
     @builtins.property
     @jsii.member(jsii_name="keyArn")
     def key_arn(self) -> builtins.str:
@@ -30626,7 +31346,7 @@ class DomainName(
     @jsii.member(jsii_name="addApiMapping")
     def add_api_mapping(
         self,
-        target_stage: IStage,
+        target_stage: _IStageRef_b829c330,
         *,
         base_path: typing.Optional[builtins.str] = None,
     ) -> None:
@@ -30651,7 +31371,7 @@ class DomainName(
     @jsii.member(jsii_name="addBasePathMapping")
     def add_base_path_mapping(
         self,
-        target_api: IRestApi,
+        target_api: _IRestApiRef_72dcbda0,
         *,
         attach_to_stage: typing.Optional[builtins.bool] = None,
         base_path: typing.Optional[builtins.str] = None,
@@ -30701,6 +31421,12 @@ class DomainName(
         '''The Route53 hosted zone ID to use in order to connect a record set to this domain through an alias.'''
         return typing.cast(builtins.str, jsii.get(self, "domainNameAliasHostedZoneId"))
 
+    @builtins.property
+    @jsii.member(jsii_name="domainNameRef")
+    def domain_name_ref(self) -> _DomainNameReference_f4138423:
+        '''A reference to a DomainName resource.'''
+        return typing.cast(_DomainNameReference_f4138423, jsii.get(self, "domainNameRef"))
+
 
 @jsii.implements(IAccessLogDestination)
 class FirehoseLogDestination(
@@ -30744,7 +31470,7 @@ class FirehoseLogDestination(
         jsii.create(self.__class__, self, [stream])
 
     @jsii.member(jsii_name="bind")
-    def bind(self, stage: IStage) -> AccessLogDestinationConfig:
+    def bind(self, stage: _IStageRef_b829c330) -> AccessLogDestinationConfig:
         '''Binds this destination to the Firehose delivery stream.
 
         :param stage: -
@@ -30824,12 +31550,39 @@ class GatewayResponse(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromGatewayResponseId")
+    @builtins.classmethod
+    def from_gateway_response_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        gateway_response_id: builtins.str,
+    ) -> IGatewayResponse:
+        '''Reference an existing GatewayResponse given a gateway response ID.
+
+        :param scope: -
+        :param id: -
+        :param gateway_response_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__7867165fe1cd2b6780c9e541f8f709a08a02872d9895272cbd253b87e77c8da8)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument gateway_response_id", value=gateway_response_id, expected_type=type_hints["gateway_response_id"])
+        return typing.cast(IGatewayResponse, jsii.sinvoke(cls, "fromGatewayResponseId", [scope, id, gateway_response_id]))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
     def PROPERTY_INJECTION_ID(cls) -> builtins.str:
         '''Uniquely identifies this class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
 
+    @builtins.property
+    @jsii.member(jsii_name="gatewayResponseRef")
+    def gateway_response_ref(self) -> _GatewayResponseReference_0f1f239c:
+        '''A reference to a GatewayResponse resource.'''
+        return typing.cast(_GatewayResponseReference_0f1f239c, jsii.get(self, "gatewayResponseRef"))
+
 
 class HttpIntegration(
     Integration,
@@ -30910,6 +31663,7 @@ class LambdaIntegration(
         *,
         allow_test_invoke: typing.Optional[builtins.bool] = None,
         proxy: typing.Optional[builtins.bool] = None,
+        scope_permission_to_method: typing.Optional[builtins.bool] = None,
         cache_key_parameters: typing.Optional[typing.Sequence[builtins.str]] = None,
         cache_namespace: typing.Optional[builtins.str] = None,
         connection_type: typing.Optional[ConnectionType] = None,
@@ -30925,8 +31679,9 @@ class LambdaIntegration(
     ) -> None:
         '''
         :param handler: -
-        :param allow_test_invoke: Allow invoking method from AWS Console UI (for testing purposes). This will add another permission to the AWS Lambda resource policy which will allow the ``test-invoke-stage`` stage to invoke this handler. If this is set to ``false``, the function will only be usable from the deployment endpoint. Default: true
+        :param allow_test_invoke: Allow invoking method from AWS Console UI (for testing purposes). This will add another permission to the AWS Lambda resource policy which will allow the ``test-invoke-stage`` stage to invoke this handler. If this is set to ``false``, the function will only be usable from the deployment endpoint. Note that this property is ignored when ``scopePermissionToMethod`` is ``false``. Default: true
         :param proxy: Use proxy integration or normal (request/response mapping) integration. Default: true
+        :param scope_permission_to_method: Scope the permission for invoking the AWS Lambda down to the specific method associated with this integration. If this is set to ``false``, the permission will allow invoking the AWS Lambda from any method. This is useful for reducing the AWS Lambda policy size for cases where the same AWS Lambda function is reused for many integrations. Note that this will always allow test invocations. Default: true
         :param cache_key_parameters: A list of request parameters whose values are to be cached. It determines request parameters that will make it into the cache key.
         :param cache_namespace: An API-specific tag group of related cached parameters.
         :param connection_type: The type of network connection to the integration endpoint. Default: - ConnectionType.VPC_LINK if ``vpcLink`` property is configured; ConnectionType.Internet otherwise.
@@ -30946,6 +31701,7 @@ class LambdaIntegration(
         options = LambdaIntegrationOptions(
             allow_test_invoke=allow_test_invoke,
             proxy=proxy,
+            scope_permission_to_method=scope_permission_to_method,
             cache_key_parameters=cache_key_parameters,
             cache_namespace=cache_namespace,
             connection_type=connection_type,
@@ -33609,6 +34365,12 @@ def _typecheckingstub__d532554505e61f81e1b9ec850cbf52d3ee1550f112073eae6daecd883
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__0bc4acaae324fa465c0ae63ddfa13df8085530150092a3990e1815dea9b745ec(
+    format: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__4692c15f70ce18849ab172ed2332cc4added75850adcf2e0ed8a0ebce52c27db(
     format: builtins.str,
 ) -> None:
@@ -33628,7 +34390,7 @@ def _typecheckingstub__931fac6af706dd0dae384cc682b2ecb066666ff6165060417e461a392
     deploy_time: typing.Optional[builtins.bool] = None,
     display_name: typing.Optional[builtins.str] = None,
     readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
-    source_kms_key: typing.Optional[_IKey_5f11635f] = None,
+    source_kms_key: typing.Optional[_IKeyRef_d4fc6ef3] = None,
     asset_hash: typing.Optional[builtins.str] = None,
     asset_hash_type: typing.Optional[_AssetHashType_05b67f2d] = None,
     bundling: typing.Optional[typing.Union[_BundlingOptions_588cc936, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -33655,7 +34417,7 @@ def _typecheckingstub__3fdc39319ab31dc01370dce3eebe8d625768dc937b6e3ca507db636cd
 
 def _typecheckingstub__3ee382fc2c94d4bece70868d74861f5ede3af81a49e0b03d1b1d7f7808f09fd4(
     _scope: _constructs_77d1e7e8.Construct,
-    _rest_api: IRestApi,
+    _rest_api: _IRestApiRef_72dcbda0,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -33696,7 +34458,7 @@ def _typecheckingstub__8d060d6bc8fc5b369cfe71dc05efc964aa6b083b674baa7dc17f1762a
     deploy_time: typing.Optional[builtins.bool] = None,
     display_name: typing.Optional[builtins.str] = None,
     readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
-    source_kms_key: typing.Optional[_IKey_5f11635f] = None,
+    source_kms_key: typing.Optional[_IKeyRef_d4fc6ef3] = None,
     asset_hash: typing.Optional[builtins.str] = None,
     asset_hash_type: typing.Optional[_AssetHashType_05b67f2d] = None,
     bundling: typing.Optional[typing.Union[_BundlingOptions_588cc936, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -33715,7 +34477,7 @@ def _typecheckingstub__e81dd80c8a5aadd62f5dcc884b89ddc1076b787b54c75f996c03c1f18
 
 def _typecheckingstub__b1885a209c59071b4bad06f2e2988a4c685fbb214e4cfd8ee60a749d822b13fc(
     scope: _constructs_77d1e7e8.Construct,
-    rest_api: IRestApi,
+    rest_api: _IRestApiRef_72dcbda0,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -33739,8 +34501,8 @@ def _typecheckingstub__ef549043f328dc8eafa81dc926877350a07f0bbf5f070dbbc6d4486d7
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
     *,
-    domain_name: IDomainName,
-    rest_api: IRestApi,
+    domain_name: _IDomainNameRef_8b0ccf94,
+    rest_api: _IRestApiRef_72dcbda0,
     attach_to_stage: typing.Optional[builtins.bool] = None,
     base_path: typing.Optional[builtins.str] = None,
     stage: typing.Optional[Stage] = None,
@@ -33762,8 +34524,8 @@ def _typecheckingstub__9e348cc160af15e382c6a3c6d66cd04543644f3672b2679f19c801ae8
     attach_to_stage: typing.Optional[builtins.bool] = None,
     base_path: typing.Optional[builtins.str] = None,
     stage: typing.Optional[Stage] = None,
-    domain_name: IDomainName,
-    rest_api: IRestApi,
+    domain_name: _IDomainNameRef_8b0ccf94,
+    rest_api: _IRestApiRef_72dcbda0,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -33818,6 +34580,14 @@ def _typecheckingstub__7b22ef3a96b2535227fcee63bac2bd1636a3ecaf8ae447d48e70ec926
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__d28618723a7da86eac262dd6fcbd57647bc2aa89de83959534c6b5288f040fef(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    api_key_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__3d6e2d573fd59cd7bda27f8af3a06d556bf1f848f8a8571e3bb89f6ae03687b8(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -34140,6 +34910,14 @@ def _typecheckingstub__b04e1c6e6561781583a05d34684fa7f16c7a0f9593b5bdadf17a39aa7
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__0a5e31aa2352a567ea0a97f6b3c305db593bab1d23ed323eab3a574cdbc20b53(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    client_certificate_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__c56b005c9ce07b196b1f4cb1c80e16999eacd5dbdfac93d2f4f64138b0808a7e(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -34433,6 +35211,22 @@ def _typecheckingstub__133ab79e698bd61c150ef7c699a84e864403caafbb03bd0bc5874cee6
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__7573cabb5591aeca76fca113dbdb083344840ea756b892b5b440934d48a9afb3(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    domain_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__7594371e62564d813ae77a2f2b52731cbf46dfc26d0b9ee7957708a268f7536f(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__37a1235a5256f1b7d85e64cb2b5f3e81e3b6388eed32f66d2b4549fc757b871a(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -34869,6 +35663,7 @@ def _typecheckingstub__7fc2a1b31e9e3f92210ced50c17b0bf1cfcdb472f8b61fcc31a3c633b
     passthrough_behavior: typing.Optional[builtins.str] = None,
     request_parameters: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
     request_templates: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
+    response_transfer_mode: typing.Optional[builtins.str] = None,
     timeout_in_millis: typing.Optional[jsii.Number] = None,
     uri: typing.Optional[builtins.str] = None,
 ) -> None:
@@ -35106,11 +35901,20 @@ def _typecheckingstub__781aae0a2f2512495cbd89d2be23edec0478e71fd6a59c0527cabb245
     name: typing.Optional[builtins.str] = None,
     parameters: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
     policy: typing.Any = None,
+    security_policy: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__f098f990bc47fb67b4869dd0692c7805f635c5b6966164b81e7977eedb0e23a7(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    rest_api_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__0d311995dffe9db41f0b189d5aaebea2138fbb7863d3fb06df01c202917e8b13(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -35207,6 +36011,12 @@ def _typecheckingstub__b7c411e289712e4a9bfc8e944902e0103f628540a4cf7e48a8c916788
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__b5cbad8ea7b13cc4138aea2c1f4832de11327b51e38539bb2f152732a2d44409(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__9ae71bb5beb4f360ca0016003cbb508243a9ad4b5e494d1a4655780f8350d620(
     value: typing.Optional[typing.List[_CfnTag_f6864754]],
 ) -> None:
@@ -35248,6 +36058,7 @@ def _typecheckingstub__5e6d4ed4722f0c07021ff207940f8656b0bbeb24224daef1a2a167c70
     name: typing.Optional[builtins.str] = None,
     parameters: typing.Optional[typing.Union[typing.Mapping[builtins.str, builtins.str], _IResolvable_da3f097b]] = None,
     policy: typing.Any = None,
+    security_policy: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -35439,6 +36250,14 @@ def _typecheckingstub__8a8c11347e47e0f4cc9518ba40e4026dd908f54137f8dd41f789c4c65
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__44855889c228ef5d7500d8d4056967324b295b7a5290ae6aa891ab901acb2c2e(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    usage_plan_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__305ebc0d1bd2c496b732d04490b6e35befd6f95c0273c4a987a6d5335feaa2f4(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -35587,6 +36406,14 @@ def _typecheckingstub__4a1f69db69c9ab3edee19de9b16585e4355791d79ee3b330d18242cc4
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__c1a057c69ce236d79b8b6fb912b05b1084e8253b79689c49d313f733ba403dfd(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    vpc_link_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__ab88de0a7914cd8aabbb92e0ebc49325c3e07a7d032f4f5d29eb7cba850c71b6(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -35759,7 +36586,7 @@ def _typecheckingstub__e3a97849ce8a01a0a99c02ae97daf2651b1124b4c2bac9a50b3dbb318
     pass
 
 def _typecheckingstub__5584cb6e6dfde7a0ce69d852df52ee6697c36df3a33e7d95f1f8945c57eb76d0(
-    stage: IStage,
+    stage: _IStageRef_b829c330,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -35832,7 +36659,7 @@ def _typecheckingstub__0db60e65de0b59c265539f0763570e52f29515365793132c5be8ef41b
     pass
 
 def _typecheckingstub__0581a1cd8ecb86e004a1d843a397a02b17cb9a9aeacc0117b49cae486cf553be(
-    api_key: IApiKey,
+    api_key: _IApiKeyRef_6e16b46a,
     *,
     override_logical_id: typing.Optional[builtins.str] = None,
 ) -> None:
@@ -35933,7 +36760,7 @@ def _typecheckingstub__f6cb930af96a75dfa56cd51da050efc5f3c79f1759af7579e8e639450
 
 def _typecheckingstub__689c3507e908daefb625f42f5bfc2c215e135591704691d515c49669d5c3dbc3(
     *,
-    additional_items: typing.Optional[typing.Sequence[typing.Union[JsonSchema, typing.Dict[builtins.str, typing.Any]]]] = None,
+    additional_items: typing.Optional[typing.Union[builtins.bool, typing.Union[JsonSchema, typing.Dict[builtins.str, typing.Any]]]] = None,
     additional_properties: typing.Optional[typing.Union[builtins.bool, typing.Union[JsonSchema, typing.Dict[builtins.str, typing.Any]]]] = None,
     all_of: typing.Optional[typing.Sequence[typing.Union[JsonSchema, typing.Dict[builtins.str, typing.Any]]]] = None,
     any_of: typing.Optional[typing.Sequence[typing.Union[JsonSchema, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -36014,6 +36841,7 @@ def _typecheckingstub__ce30eee1096e0566120e3d64f9e65409fa005cc047656a224902fd86c
     vpc_link: typing.Optional[IVpcLink] = None,
     allow_test_invoke: typing.Optional[builtins.bool] = None,
     proxy: typing.Optional[builtins.bool] = None,
+    scope_permission_to_method: typing.Optional[builtins.bool] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -36025,7 +36853,7 @@ def _typecheckingstub__a84eaa748025edeb06434794d8ce0f9b8ad3d9438d71bcf66f8fe753a
     pass
 
 def _typecheckingstub__4a19c59b494e920f4294a640b251c2f8c481a6f520483bb6a66bf0f645b448fc(
-    _stage: IStage,
+    _stage: _IStageRef_b829c330,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -36059,11 +36887,12 @@ def _typecheckingstub__2b4cbdc48aca0832309ead12cf98a5327de5337263bcb7451db5561ae
 
 def _typecheckingstub__5673792ec70e78f31bd42c8b5fa76d95f3d27fb475ced2b715241422b9a73c79(
     metric_name: builtins.str,
-    stage: IStage,
+    stage: _IStageRef_b829c330,
     *,
     account: typing.Optional[builtins.str] = None,
     color: typing.Optional[builtins.str] = None,
     dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    id: typing.Optional[builtins.str] = None,
     label: typing.Optional[builtins.str] = None,
     period: typing.Optional[_Duration_4839e8c3] = None,
     region: typing.Optional[builtins.str] = None,
@@ -36071,16 +36900,18 @@ def _typecheckingstub__5673792ec70e78f31bd42c8b5fa76d95f3d27fb475ced2b715241422b
     stack_region: typing.Optional[builtins.str] = None,
     statistic: typing.Optional[builtins.str] = None,
     unit: typing.Optional[_Unit_61bc6f70] = None,
+    visible: typing.Optional[builtins.bool] = None,
 ) -> None:
     """Type checking stubs"""
     pass
 
 def _typecheckingstub__64ac2608c9f1609b3b980aa9e9605f3bd74f2569716d2fa90b1409dd75b1f362(
-    stage: IStage,
+    stage: _IStageRef_b829c330,
     *,
     account: typing.Optional[builtins.str] = None,
     color: typing.Optional[builtins.str] = None,
     dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    id: typing.Optional[builtins.str] = None,
     label: typing.Optional[builtins.str] = None,
     period: typing.Optional[_Duration_4839e8c3] = None,
     region: typing.Optional[builtins.str] = None,
@@ -36088,16 +36919,18 @@ def _typecheckingstub__64ac2608c9f1609b3b980aa9e9605f3bd74f2569716d2fa90b1409dd7
     stack_region: typing.Optional[builtins.str] = None,
     statistic: typing.Optional[builtins.str] = None,
     unit: typing.Optional[_Unit_61bc6f70] = None,
+    visible: typing.Optional[builtins.bool] = None,
 ) -> None:
     """Type checking stubs"""
     pass
 
 def _typecheckingstub__2cf284ffe8f66028e735d60b6ecd9664dc929e5cd71b9b7ce14143816a0fbb89(
-    stage: IStage,
+    stage: _IStageRef_b829c330,
     *,
     account: typing.Optional[builtins.str] = None,
     color: typing.Optional[builtins.str] = None,
     dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    id: typing.Optional[builtins.str] = None,
     label: typing.Optional[builtins.str] = None,
     period: typing.Optional[_Duration_4839e8c3] = None,
     region: typing.Optional[builtins.str] = None,
@@ -36105,16 +36938,18 @@ def _typecheckingstub__2cf284ffe8f66028e735d60b6ecd9664dc929e5cd71b9b7ce14143816
     stack_region: typing.Optional[builtins.str] = None,
     statistic: typing.Optional[builtins.str] = None,
     unit: typing.Optional[_Unit_61bc6f70] = None,
+    visible: typing.Optional[builtins.bool] = None,
 ) -> None:
     """Type checking stubs"""
     pass
 
 def _typecheckingstub__0493ec2c246530b5b05f1be196bdc153e1978bea6c8f269860b366eda94549a2(
-    stage: IStage,
+    stage: _IStageRef_b829c330,
     *,
     account: typing.Optional[builtins.str] = None,
     color: typing.Optional[builtins.str] = None,
     dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    id: typing.Optional[builtins.str] = None,
     label: typing.Optional[builtins.str] = None,
     period: typing.Optional[_Duration_4839e8c3] = None,
     region: typing.Optional[builtins.str] = None,
@@ -36122,16 +36957,18 @@ def _typecheckingstub__0493ec2c246530b5b05f1be196bdc153e1978bea6c8f269860b366eda
     stack_region: typing.Optional[builtins.str] = None,
     statistic: typing.Optional[builtins.str] = None,
     unit: typing.Optional[_Unit_61bc6f70] = None,
+    visible: typing.Optional[builtins.bool] = None,
 ) -> None:
     """Type checking stubs"""
     pass
 
 def _typecheckingstub__001b2bf8bfa27908da0580fb4246b555f3e30524cd2601928dd174bcc243cba8(
-    stage: IStage,
+    stage: _IStageRef_b829c330,
     *,
     account: typing.Optional[builtins.str] = None,
     color: typing.Optional[builtins.str] = None,
     dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    id: typing.Optional[builtins.str] = None,
     label: typing.Optional[builtins.str] = None,
     period: typing.Optional[_Duration_4839e8c3] = None,
     region: typing.Optional[builtins.str] = None,
@@ -36139,16 +36976,18 @@ def _typecheckingstub__001b2bf8bfa27908da0580fb4246b555f3e30524cd2601928dd174bcc
     stack_region: typing.Optional[builtins.str] = None,
     statistic: typing.Optional[builtins.str] = None,
     unit: typing.Optional[_Unit_61bc6f70] = None,
+    visible: typing.Optional[builtins.bool] = None,
 ) -> None:
     """Type checking stubs"""
     pass
 
 def _typecheckingstub__bade8cd8b8758f071556fa580f6b28b70f2f6440e36b36dc871b3306d5141d63(
-    stage: IStage,
+    stage: _IStageRef_b829c330,
     *,
     account: typing.Optional[builtins.str] = None,
     color: typing.Optional[builtins.str] = None,
     dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    id: typing.Optional[builtins.str] = None,
     label: typing.Optional[builtins.str] = None,
     period: typing.Optional[_Duration_4839e8c3] = None,
     region: typing.Optional[builtins.str] = None,
@@ -36156,16 +36995,18 @@ def _typecheckingstub__bade8cd8b8758f071556fa580f6b28b70f2f6440e36b36dc871b3306d
     stack_region: typing.Optional[builtins.str] = None,
     statistic: typing.Optional[builtins.str] = None,
     unit: typing.Optional[_Unit_61bc6f70] = None,
+    visible: typing.Optional[builtins.bool] = None,
 ) -> None:
     """Type checking stubs"""
     pass
 
 def _typecheckingstub__967d05990ceae877a7b59ca744da0bf2c478639cc36a703b76a49213cf45800f(
-    stage: IStage,
+    stage: _IStageRef_b829c330,
     *,
     account: typing.Optional[builtins.str] = None,
     color: typing.Optional[builtins.str] = None,
     dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    id: typing.Optional[builtins.str] = None,
     label: typing.Optional[builtins.str] = None,
     period: typing.Optional[_Duration_4839e8c3] = None,
     region: typing.Optional[builtins.str] = None,
@@ -36173,16 +37014,18 @@ def _typecheckingstub__967d05990ceae877a7b59ca744da0bf2c478639cc36a703b76a49213c
     stack_region: typing.Optional[builtins.str] = None,
     statistic: typing.Optional[builtins.str] = None,
     unit: typing.Optional[_Unit_61bc6f70] = None,
+    visible: typing.Optional[builtins.bool] = None,
 ) -> None:
     """Type checking stubs"""
     pass
 
 def _typecheckingstub__d41d28c85cd25934abfd3bd4223f1dfd9b5d6c8dbd0ceb1869a97c090d98e8bc(
-    stage: IStage,
+    stage: _IStageRef_b829c330,
     *,
     account: typing.Optional[builtins.str] = None,
     color: typing.Optional[builtins.str] = None,
     dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    id: typing.Optional[builtins.str] = None,
     label: typing.Optional[builtins.str] = None,
     period: typing.Optional[_Duration_4839e8c3] = None,
     region: typing.Optional[builtins.str] = None,
@@ -36190,6 +37033,7 @@ def _typecheckingstub__d41d28c85cd25934abfd3bd4223f1dfd9b5d6c8dbd0ceb1869a97c090
     stack_region: typing.Optional[builtins.str] = None,
     statistic: typing.Optional[builtins.str] = None,
     unit: typing.Optional[_Unit_61bc6f70] = None,
+    visible: typing.Optional[builtins.bool] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -36591,6 +37435,7 @@ def _typecheckingstub__83e0007c5bc1aeac14243c8f05dab576ffb55853642cfe1f4a1352b59
     account: typing.Optional[builtins.str] = None,
     color: typing.Optional[builtins.str] = None,
     dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    id: typing.Optional[builtins.str] = None,
     label: typing.Optional[builtins.str] = None,
     period: typing.Optional[_Duration_4839e8c3] = None,
     region: typing.Optional[builtins.str] = None,
@@ -36598,6 +37443,7 @@ def _typecheckingstub__83e0007c5bc1aeac14243c8f05dab576ffb55853642cfe1f4a1352b59
     stack_region: typing.Optional[builtins.str] = None,
     statistic: typing.Optional[builtins.str] = None,
     unit: typing.Optional[_Unit_61bc6f70] = None,
+    visible: typing.Optional[builtins.bool] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -36683,7 +37529,7 @@ def _typecheckingstub__edb4c50a5394bb1e1b27cdf2e1b593a161a3d26d31adcd03f57d290d6
     pass
 
 def _typecheckingstub__17529ae5d8eea5254fdacb085378cd0c45db1755d86da79bc4f191ca2d7d11cf(
-    bucket: _IBucket_42e086fd,
+    bucket: _IBucketRef_3debe44e,
     key: builtins.str,
     object_version: typing.Optional[builtins.str] = None,
 ) -> None:
@@ -36719,6 +37565,7 @@ def _typecheckingstub__4722b635be09e87466169ef31b6610061f0fa16d1cff99382f0584fde
     id: builtins.str,
     *,
     api_definition: ApiDefinition,
+    binary_media_types: typing.Optional[typing.Sequence[builtins.str]] = None,
     min_compression_size: typing.Optional[_Size_7b441c34] = None,
     mode: typing.Optional[RestApiMode] = None,
     cloud_watch_role: typing.Optional[builtins.bool] = None,
@@ -36764,6 +37611,7 @@ def _typecheckingstub__4506705cb637aa3098ad358d76fa29dd7a218f7542020d2e9dbfe8182
     rest_api_name: typing.Optional[builtins.str] = None,
     retain_deployments: typing.Optional[builtins.bool] = None,
     api_definition: ApiDefinition,
+    binary_media_types: typing.Optional[typing.Sequence[builtins.str]] = None,
     min_compression_size: typing.Optional[_Size_7b441c34] = None,
     mode: typing.Optional[RestApiMode] = None,
 ) -> None:
@@ -36809,6 +37657,7 @@ def _typecheckingstub__e7aa140ce28102f6291e54fab42702aec75e06eb4ff034ae6897a3606
     account: typing.Optional[builtins.str] = None,
     color: typing.Optional[builtins.str] = None,
     dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    id: typing.Optional[builtins.str] = None,
     label: typing.Optional[builtins.str] = None,
     period: typing.Optional[_Duration_4839e8c3] = None,
     region: typing.Optional[builtins.str] = None,
@@ -36816,6 +37665,7 @@ def _typecheckingstub__e7aa140ce28102f6291e54fab42702aec75e06eb4ff034ae6897a3606
     stack_region: typing.Optional[builtins.str] = None,
     statistic: typing.Optional[builtins.str] = None,
     unit: typing.Optional[_Unit_61bc6f70] = None,
+    visible: typing.Optional[builtins.bool] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -37013,7 +37863,7 @@ def _typecheckingstub__ab0eb11ee5a0c0bec0a62982098a57f7f8b2e2fbc41c99cc845ad7a13
     pass
 
 def _typecheckingstub__285a70fe54073228fa866e73042608af7f28bc4c6294e9973b244c1721d9e216(
-    api_key: IApiKey,
+    api_key: _IApiKeyRef_6e16b46a,
     *,
     override_logical_id: typing.Optional[builtins.str] = None,
 ) -> None:
@@ -37211,7 +38061,7 @@ def _typecheckingstub__cad31f1fc315ece50ad1a940ee742a009c2f4345a907cdf5e18ebc6a8
     pass
 
 def _typecheckingstub__821fdc8b9fd1b8f6ead947633bcbfaee025d8a1adbd4241c3f0854b9a0db8097(
-    target_stage: IStage,
+    target_stage: _IStageRef_b829c330,
     *,
     base_path: typing.Optional[builtins.str] = None,
 ) -> None:
@@ -37219,7 +38069,7 @@ def _typecheckingstub__821fdc8b9fd1b8f6ead947633bcbfaee025d8a1adbd4241c3f0854b9a
     pass
 
 def _typecheckingstub__d4b721986ff6c3d5c8679f934d8e6e82c46e724bc891e375b56c03d819d3a567(
-    target_api: IRestApi,
+    target_api: _IRestApiRef_72dcbda0,
     *,
     attach_to_stage: typing.Optional[builtins.bool] = None,
     base_path: typing.Optional[builtins.str] = None,
@@ -37235,7 +38085,7 @@ def _typecheckingstub__9d15f4386812b1b679d1ebcdd2e9d668cdbc03344408b9122024c31fe
     pass
 
 def _typecheckingstub__179d80b091f382f3efa388133eb4dc48f8c0278a36829a78d55f8c9c52eccd07(
-    stage: IStage,
+    stage: _IStageRef_b829c330,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -37253,6 +38103,14 @@ def _typecheckingstub__ab65ab77c1458b70c613940a2005350c46a9b8cb897c082088a4ea041
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__7867165fe1cd2b6780c9e541f8f709a08a02872d9895272cbd253b87e77c8da8(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    gateway_response_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__d3ff98fce51dfc1d2d8d0db44fd7207e20f84a1f392be482d886f122a6dcdeec(
     url: builtins.str,
     *,
@@ -37268,6 +38126,7 @@ def _typecheckingstub__5e5180800d8c68a79e025f16a87f0381973d727e2296f047786dc6bbc
     *,
     allow_test_invoke: typing.Optional[builtins.bool] = None,
     proxy: typing.Optional[builtins.bool] = None,
+    scope_permission_to_method: typing.Optional[builtins.bool] = None,
     cache_key_parameters: typing.Optional[typing.Sequence[builtins.str]] = None,
     cache_namespace: typing.Optional[builtins.str] = None,
     connection_type: typing.Optional[ConnectionType] = None,
@@ -37675,3 +38534,6 @@ def _typecheckingstub__e4e0dd5a5563a97619c37342a77235f5f54af4a7b6324b1a4257fe268
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IAccessLogDestination, IApiKey, IAuthorizer, IDomainName, IGatewayResponse, IModel, IRequestValidator, IResource, IRestApi, IStage, IUsagePlan, IVpcLink]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])