aws-cdk-lib 2.200.2__py3-none-any.whl → 2.224.0__py3-none-any.whl

aws_cdk/aws_fsx/__init__.py

@@ -329,10 +329,24 @@ from ..aws_ec2 import (
     ISubnet as _ISubnet_d57d1229,
     IVpc as _IVpc_f30d5663,
 )
-from ..aws_kms import IKey as _IKey_5f11635f
+from ..interfaces.aws_fsx import (
+    DataRepositoryAssociationReference as _DataRepositoryAssociationReference_ec908964,
+    FileSystemReference as _FileSystemReference_1300395b,
+    IDataRepositoryAssociationRef as _IDataRepositoryAssociationRef_1317fd39,
+    IFileSystemRef as _IFileSystemRef_0a2e414d,
+    IS3AccessPointAttachmentRef as _IS3AccessPointAttachmentRef_22b962a0,
+    ISnapshotRef as _ISnapshotRef_fbdde5f5,
+    IStorageVirtualMachineRef as _IStorageVirtualMachineRef_3a0f4396,
+    IVolumeRef as _IVolumeRef_7f52c3ee,
+    S3AccessPointAttachmentReference as _S3AccessPointAttachmentReference_4957ffc1,
+    SnapshotReference as _SnapshotReference_84fbb991,
+    StorageVirtualMachineReference as _StorageVirtualMachineReference_27e496a6,
+    VolumeReference as _VolumeReference_ad7f96eb,
+)
+from ..interfaces.aws_kms import IKeyRef as _IKeyRef_d4fc6ef3
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IDataRepositoryAssociationRef_1317fd39, _ITaggable_36806126)
 class CfnDataRepositoryAssociation(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -390,7 +404,8 @@ class CfnDataRepositoryAssociation(
         s3: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDataRepositoryAssociation.S3Property", typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::FSx::DataRepositoryAssociation``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param data_repository_path: The path to the Amazon S3 data repository that will be linked to the file system. The path can be an S3 bucket or prefix in the format ``s3://myBucket/myPrefix/`` . This path specifies where in the S3 data repository files will be imported from or exported to.
@@ -474,6 +489,14 @@ class CfnDataRepositoryAssociation(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="dataRepositoryAssociationRef")
+    def data_repository_association_ref(
+        self,
+    ) -> _DataRepositoryAssociationReference_ec908964:
+        '''A reference to a DataRepositoryAssociation resource.'''
+        return typing.cast(_DataRepositoryAssociationReference_ec908964, jsii.get(self, "dataRepositoryAssociationRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -985,7 +1008,7 @@ class CfnDataRepositoryAssociationProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IFileSystemRef_0a2e414d, _ITaggable_36806126)
 class CfnFileSystem(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1042,6 +1065,7 @@ class CfnFileSystem(
                 throughput_capacity=123,
                 weekly_maintenance_start_time="weeklyMaintenanceStartTime"
             ),
+            network_type="networkType",
             ontap_configuration=fsx.CfnFileSystem.OntapConfigurationProperty(
                 deployment_type="deploymentType",
         
@@ -1053,6 +1077,7 @@ class CfnFileSystem(
                     mode="mode"
                 ),
                 endpoint_ip_address_range="endpointIpAddressRange",
+                endpoint_ipv6_address_range="endpointIpv6AddressRange",
                 fsx_admin_password="fsxAdminPassword",
                 ha_pairs=123,
                 preferred_subnet_id="preferredSubnetId",
@@ -1074,6 +1099,7 @@ class CfnFileSystem(
                     mode="mode"
                 ),
                 endpoint_ip_address_range="endpointIpAddressRange",
+                endpoint_ipv6_address_range="endpointIpv6AddressRange",
                 options=["options"],
                 preferred_subnet_id="preferredSubnetId",
                 read_cache_configuration=fsx.CfnFileSystem.ReadCacheConfigurationProperty(
@@ -1154,6 +1180,7 @@ class CfnFileSystem(
         file_system_type_version: typing.Optional[builtins.str] = None,
         kms_key_id: typing.Optional[builtins.str] = None,
         lustre_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnFileSystem.LustreConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        network_type: typing.Optional[builtins.str] = None,
         ontap_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnFileSystem.OntapConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         open_zfs_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnFileSystem.OpenZFSConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -1162,22 +1189,24 @@ class CfnFileSystem(
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         windows_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnFileSystem.WindowsConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::FSx::FileSystem``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param file_system_type: The type of Amazon FSx file system, which can be ``LUSTRE`` , ``WINDOWS`` , ``ONTAP`` , or ``OPENZFS`` .
         :param subnet_ids: Specifies the IDs of the subnets that the file system will be accessible from. For Windows and ONTAP ``MULTI_AZ_1`` deployment types,provide exactly two subnet IDs, one for the preferred file server and one for the standby file server. You specify one of these subnets as the preferred subnet using the ``WindowsConfiguration > PreferredSubnetID`` or ``OntapConfiguration > PreferredSubnetID`` properties. For more information about Multi-AZ file system configuration, see `Availability and durability: Single-AZ and Multi-AZ file systems <https://docs.aws.amazon.com/fsx/latest/WindowsGuide/high-availability-multiAZ.html>`_ in the *Amazon FSx for Windows User Guide* and `Availability and durability <https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/high-availability-multiAZ.html>`_ in the *Amazon FSx for ONTAP User Guide* . For Windows ``SINGLE_AZ_1`` and ``SINGLE_AZ_2`` and all Lustre deployment types, provide exactly one subnet ID. The file server is launched in that subnet's Availability Zone.
         :param backup_id: The ID of the file system backup that you are using to create a file system. For more information, see `CreateFileSystemFromBackup <https://docs.aws.amazon.com/fsx/latest/APIReference/API_CreateFileSystemFromBackup.html>`_ .
         :param file_system_type_version: For FSx for Lustre file systems, sets the Lustre version for the file system that you're creating. Valid values are ``2.10`` , ``2.12`` , and ``2.15`` : - ``2.10`` is supported by the Scratch and Persistent_1 Lustre deployment types. - ``2.12`` is supported by all Lustre deployment types, except for ``PERSISTENT_2`` with a metadata configuration mode. - ``2.15`` is supported by all Lustre deployment types and is recommended for all new file systems. Default value is ``2.10`` , except for the following deployments: - Default value is ``2.12`` when ``DeploymentType`` is set to ``PERSISTENT_2`` without a metadata configuration mode. - Default value is ``2.15`` when ``DeploymentType`` is set to ``PERSISTENT_2`` with a metadata configuration mode.
-        :param kms_key_id: The ID of the AWS Key Management Service ( AWS KMS ) key used to encrypt Amazon FSx file system data. Used as follows with Amazon FSx file system types: - Amazon FSx for Lustre ``PERSISTENT_1`` and ``PERSISTENT_2`` deployment types only. ``SCRATCH_1`` and ``SCRATCH_2`` types are encrypted using the Amazon FSx service AWS KMS key for your account. - Amazon FSx for NetApp ONTAP - Amazon FSx for OpenZFS - Amazon FSx for Windows File Server
-        :param lustre_configuration: The Lustre configuration for the file system being created. .. epigraph:: The following parameters are not supported when creating Lustre file systems with a data repository association. - ``AutoImportPolicy`` - ``ExportPath`` - ``ImportedChunkSize`` - ``ImportPath``
-        :param ontap_configuration: The ONTAP configuration properties of the FSx for ONTAP file system that you are creating.
-        :param open_zfs_configuration: The Amazon FSx for OpenZFS configuration properties for the file system that you are creating.
+        :param kms_key_id: The ID of the AWS Key Management Service ( AWS KMS ) key used to encrypt Amazon FSx file system data. Used as follows with Amazon FSx file system types: - Amazon FSx for Lustre ``PERSISTENT_1`` and ``PERSISTENT_2`` deployment types only. ``SCRATCH_1`` and ``SCRATCH_2`` types are encrypted using the Amazon FSx service AWS KMS key for your account. - Amazon FSx for NetApp ONTAP - Amazon FSx for OpenZFS - Amazon FSx for Windows File Server If this ID isn't specified, the Amazon FSx-managed key for your account is used. For more information, see `Encrypt <https://docs.aws.amazon.com//kms/latest/APIReference/API_Encrypt.html>`_ in the *AWS Key Management Service API Reference* .
+        :param lustre_configuration: The Lustre configuration for the file system being created. This configuration is required if the ``FileSystemType`` is set to ``LUSTRE`` . .. epigraph:: The following parameters are not supported when creating Lustre file systems with a data repository association. - ``AutoImportPolicy`` - ``ExportPath`` - ``ImportedChunkSize`` - ``ImportPath``
+        :param network_type: The network type of the file system.
+        :param ontap_configuration: The ONTAP configuration properties of the FSx for ONTAP file system that you are creating. This configuration is required if the ``FileSystemType`` is set to ``ONTAP`` .
+        :param open_zfs_configuration: The Amazon FSx for OpenZFS configuration properties for the file system that you are creating. This configuration is required if the ``FileSystemType`` is set to ``OPENZFS`` .
         :param security_group_ids: A list of IDs specifying the security groups to apply to all network interfaces created for file system access. This list isn't returned in later requests to describe the file system. .. epigraph:: You must specify a security group if you are creating a Multi-AZ FSx for ONTAP file system in a VPC subnet that has been shared with you.
         :param storage_capacity: Sets the storage capacity of the file system that you're creating. ``StorageCapacity`` is required if you are creating a new file system. It is not required if you are creating a file system by restoring a backup. *FSx for Lustre file systems* - The amount of storage capacity that you can configure depends on the value that you set for ``StorageType`` and the Lustre ``DeploymentType`` , as follows: - For ``SCRATCH_2`` , ``PERSISTENT_2`` and ``PERSISTENT_1`` deployment types using SSD storage type, the valid values are 1200 GiB, 2400 GiB, and increments of 2400 GiB. - For ``PERSISTENT_1`` HDD file systems, valid values are increments of 6000 GiB for 12 MB/s/TiB file systems and increments of 1800 GiB for 40 MB/s/TiB file systems. - For ``SCRATCH_1`` deployment type, valid values are 1200 GiB, 2400 GiB, and increments of 3600 GiB. *FSx for ONTAP file systems* - The amount of SSD storage capacity that you can configure depends on the value of the ``HAPairs`` property. The minimum value is calculated as 1,024 GiB * HAPairs and the maximum is calculated as 524,288 GiB * HAPairs, up to a maximum amount of SSD storage capacity of 1,048,576 GiB (1 pebibyte). *FSx for OpenZFS file systems* - The amount of storage capacity that you can configure is from 64 GiB up to 524,288 GiB (512 TiB). If you are creating a file system from a backup, you can specify a storage capacity equal to or greater than the original file system's storage capacity. *FSx for Windows File Server file systems* - The amount of storage capacity that you can configure depends on the value that you set for ``StorageType`` as follows: - For SSD storage, valid values are 32 GiB-65,536 GiB (64 TiB). - For HDD storage, valid values are 2000 GiB-65,536 GiB (64 TiB).
-        :param storage_type: Sets the storage class for the file system that you're creating. Valid values are ``SSD`` , ``HDD`` , and ``INTELLIGENT_TIERING`` . - Set to ``SSD`` to use solid state drive storage. SSD is supported on all Windows, Lustre, ONTAP, and OpenZFS deployment types. - Set to ``HDD`` to use hard disk drive storage, which is supported on ``SINGLE_AZ_2`` and ``MULTI_AZ_1`` Windows file system deployment types, and on ``PERSISTENT_1`` Lustre file system deployment types. - Set to ``INTELLIGENT_TIERING`` to use fully elastic, intelligently-tiered storage. Intelligent-Tiering is only available for OpenZFS file systems with the Multi-AZ deployment type. Default value is ``SSD`` . For more information, see `Storage type options <https://docs.aws.amazon.com/fsx/latest/WindowsGuide/optimize-fsx-costs.html#storage-type-options>`_ in the *FSx for Windows File Server User Guide* , `Multiple storage options <https://docs.aws.amazon.com/fsx/latest/LustreGuide/what-is.html#storage-options>`_ in the *FSx for Lustre User Guide* , and `Working with Intelligent-Tiering <https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/performance-intelligent-tiering>`_ in the *Amazon FSx for OpenZFS User Guide* .
+        :param storage_type: Sets the storage class for the file system that you're creating. Valid values are ``SSD`` , ``HDD`` , and ``INTELLIGENT_TIERING`` . - Set to ``SSD`` to use solid state drive storage. SSD is supported on all Windows, Lustre, ONTAP, and OpenZFS deployment types. - Set to ``HDD`` to use hard disk drive storage, which is supported on ``SINGLE_AZ_2`` and ``MULTI_AZ_1`` Windows file system deployment types, and on ``PERSISTENT_1`` Lustre file system deployment types. - Set to ``INTELLIGENT_TIERING`` to use fully elastic, intelligently-tiered storage. Intelligent-Tiering is only available for OpenZFS file systems with the Multi-AZ deployment type and for Lustre file systems with the Persistent_2 deployment type. Default value is ``SSD`` . For more information, see `Storage type options <https://docs.aws.amazon.com/fsx/latest/WindowsGuide/optimize-fsx-costs.html#storage-type-options>`_ in the *FSx for Windows File Server User Guide* , `FSx for Lustre storage classes <https://docs.aws.amazon.com/fsx/latest/LustreGuide/using-fsx-lustre.html#lustre-storage-classes>`_ in the *FSx for Lustre User Guide* , and `Working with Intelligent-Tiering <https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/performance-intelligent-tiering>`_ in the *Amazon FSx for OpenZFS User Guide* .
         :param tags: The tags to associate with the file system. For more information, see `Tagging your Amazon FSx resources <https://docs.aws.amazon.com/fsx/latest/LustreGuide/tag-resources.html>`_ in the *Amazon FSx for Lustre User Guide* .
-        :param windows_configuration: The configuration object for the Microsoft Windows file system you are creating. This value is required if ``FileSystemType`` is set to ``WINDOWS`` .
+        :param windows_configuration: The configuration object for the Microsoft Windows file system you are creating. This configuration is required if ``FileSystemType`` is set to ``WINDOWS`` .
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__2d13764c3dcb8d96799af4fa191d042ff4511c33cfd1aecbf235dded3234d3c5)
@@ -1190,6 +1219,7 @@ class CfnFileSystem(
             file_system_type_version=file_system_type_version,
             kms_key_id=kms_key_id,
             lustre_configuration=lustre_configuration,
+            network_type=network_type,
             ontap_configuration=ontap_configuration,
             open_zfs_configuration=open_zfs_configuration,
             security_group_ids=security_group_ids,
@@ -1290,6 +1320,12 @@ class CfnFileSystem(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="fileSystemRef")
+    def file_system_ref(self) -> _FileSystemReference_1300395b:
+        '''A reference to a FileSystem resource.'''
+        return typing.cast(_FileSystemReference_1300395b, jsii.get(self, "fileSystemRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -1379,6 +1415,19 @@ class CfnFileSystem(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "lustreConfiguration", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="networkType")
+    def network_type(self) -> typing.Optional[builtins.str]:
+        '''The network type of the file system.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "networkType"))
+
+    @network_type.setter
+    def network_type(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__7799a7898c1d78dcdd2f9531854e7ff35a8f4a27f4de33e706134e2fa35387ac)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "networkType", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="ontapConfiguration")
     def ontap_configuration(
@@ -1685,9 +1734,10 @@ class CfnFileSystem(
             size_gib: typing.Optional[jsii.Number] = None,
             sizing_mode: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''
-            :param size_gib: 
-            :param sizing_mode: 
+            '''The configuration for the optional provisioned SSD read cache on Amazon FSx for Lustre file systems that use the Intelligent-Tiering storage class.
+
+            :param size_gib: Required if ``SizingMode`` is set to ``USER_PROVISIONED`` . Specifies the size of the file system's SSD read cache, in gibibytes (GiB).
+            :param sizing_mode: Specifies how the provisioned SSD read cache is sized, as follows:. - Set to ``NO_CACHE`` if you do not want to use an SSD read cache with your Intelligent-Tiering file system. - Set to ``USER_PROVISIONED`` to specify the exact size of your SSD read cache. - Set to ``PROPORTIONAL_TO_THROUGHPUT_CAPACITY`` to have your SSD read cache automatically sized based on your throughput capacity.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-datareadcacheconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -1715,7 +1765,10 @@ class CfnFileSystem(
 
         @builtins.property
         def size_gib(self) -> typing.Optional[jsii.Number]:
-            '''
+            '''Required if ``SizingMode`` is set to ``USER_PROVISIONED`` .
+
+            Specifies the size of the file system's SSD read cache, in gibibytes (GiB).
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-datareadcacheconfiguration.html#cfn-fsx-filesystem-datareadcacheconfiguration-sizegib
             '''
             result = self._values.get("size_gib")
@@ -1723,7 +1776,12 @@ class CfnFileSystem(
 
         @builtins.property
         def sizing_mode(self) -> typing.Optional[builtins.str]:
-            '''
+            '''Specifies how the provisioned SSD read cache is sized, as follows:.
+
+            - Set to ``NO_CACHE`` if you do not want to use an SSD read cache with your Intelligent-Tiering file system.
+            - Set to ``USER_PROVISIONED`` to specify the exact size of your SSD read cache.
+            - Set to ``PROPORTIONAL_TO_THROUGHPUT_CAPACITY`` to have your SSD read cache automatically sized based on your throughput capacity.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-datareadcacheconfiguration.html#cfn-fsx-filesystem-datareadcacheconfiguration-sizingmode
             '''
             result = self._values.get("sizing_mode")
@@ -1866,16 +1924,16 @@ class CfnFileSystem(
             :param copy_tags_to_backups: (Optional) Not available for use with file systems that are linked to a data repository. A boolean flag indicating whether tags for the file system should be copied to backups. The default value is false. If ``CopyTagsToBackups`` is set to true, all file system tags are copied to all automatic and user-initiated backups when the user doesn't specify any backup-specific tags. If ``CopyTagsToBackups`` is set to true and you specify one or more backup tags, only the specified tags are copied to backups. If you specify one or more tags when creating a user-initiated backup, no tags are copied from the file system, regardless of this value. (Default = ``false`` ) For more information, see `Working with backups <https://docs.aws.amazon.com/fsx/latest/LustreGuide/using-backups-fsx.html>`_ in the *Amazon FSx for Lustre User Guide* .
             :param daily_automatic_backup_start_time: A recurring daily time, in the format ``HH:MM`` . ``HH`` is the zero-padded hour of the day (0-23), and ``MM`` is the zero-padded minute of the hour. For example, ``05:00`` specifies 5 AM daily.
             :param data_compression_type: Sets the data compression configuration for the file system. ``DataCompressionType`` can have the following values:. - ``NONE`` - (Default) Data compression is turned off when the file system is created. - ``LZ4`` - Data compression is turned on with the LZ4 algorithm. For more information, see `Lustre data compression <https://docs.aws.amazon.com/fsx/latest/LustreGuide/data-compression.html>`_ in the *Amazon FSx for Lustre User Guide* .
-            :param data_read_cache_configuration: 
-            :param deployment_type: (Optional) Choose ``SCRATCH_1`` and ``SCRATCH_2`` deployment types when you need temporary storage and shorter-term processing of data. The ``SCRATCH_2`` deployment type provides in-transit encryption of data and higher burst throughput capacity than ``SCRATCH_1`` . Choose ``PERSISTENT_1`` for longer-term storage and for throughput-focused workloads that aren’t latency-sensitive. ``PERSISTENT_1`` supports encryption of data in transit, and is available in all AWS Regions in which FSx for Lustre is available. Choose ``PERSISTENT_2`` for longer-term storage and for latency-sensitive workloads that require the highest levels of IOPS/throughput. ``PERSISTENT_2`` supports SSD storage, and offers higher ``PerUnitStorageThroughput`` (up to 1000 MB/s/TiB). You can optionally specify a metadata configuration mode for ``PERSISTENT_2`` which supports increasing metadata performance. ``PERSISTENT_2`` is available in a limited number of AWS Regions . For more information, and an up-to-date list of AWS Regions in which ``PERSISTENT_2`` is available, see `File system deployment options for FSx for Lustre <https://docs.aws.amazon.com/fsx/latest/LustreGuide/using-fsx-lustre.html#lustre-deployment-types>`_ in the *Amazon FSx for Lustre User Guide* . .. epigraph:: If you choose ``PERSISTENT_2`` , and you set ``FileSystemTypeVersion`` to ``2.10`` , the ``CreateFileSystem`` operation fails. Encryption of data in transit is automatically turned on when you access ``SCRATCH_2`` , ``PERSISTENT_1`` , and ``PERSISTENT_2`` file systems from Amazon EC2 instances that support automatic encryption in the AWS Regions where they are available. For more information about encryption in transit for FSx for Lustre file systems, see `Encrypting data in transit <https://docs.aws.amazon.com/fsx/latest/LustreGuide/encryption-in-transit-fsxl.html>`_ in the *Amazon FSx for Lustre User Guide* . (Default = ``SCRATCH_1`` )
+            :param data_read_cache_configuration: Specifies the optional provisioned SSD read cache on FSx for Lustre file systems that use the Intelligent-Tiering storage class. Required when ``StorageType`` is set to ``INTELLIGENT_TIERING`` .
+            :param deployment_type: (Optional) Choose ``SCRATCH_1`` and ``SCRATCH_2`` deployment types when you need temporary storage and shorter-term processing of data. The ``SCRATCH_2`` deployment type provides in-transit encryption of data and higher burst throughput capacity than ``SCRATCH_1`` . Choose ``PERSISTENT_1`` for longer-term storage and for throughput-focused workloads that aren’t latency-sensitive. ``PERSISTENT_1`` supports encryption of data in transit, and is available in all AWS Regions in which FSx for Lustre is available. Choose ``PERSISTENT_2`` for longer-term storage and for latency-sensitive workloads that require the highest levels of IOPS/throughput. ``PERSISTENT_2`` supports the SSD and Intelligent-Tiering storage classes. You can optionally specify a metadata configuration mode for ``PERSISTENT_2`` which supports increasing metadata performance. ``PERSISTENT_2`` is available in a limited number of AWS Regions . For more information, and an up-to-date list of AWS Regions in which ``PERSISTENT_2`` is available, see `Deployment and storage class options for FSx for Lustre file systems <https://docs.aws.amazon.com/fsx/latest/LustreGuide/using-fsx-lustre.html>`_ in the *Amazon FSx for Lustre User Guide* . .. epigraph:: If you choose ``PERSISTENT_2`` , and you set ``FileSystemTypeVersion`` to ``2.10`` , the ``CreateFileSystem`` operation fails. Encryption of data in transit is automatically turned on when you access ``SCRATCH_2`` , ``PERSISTENT_1`` , and ``PERSISTENT_2`` file systems from Amazon EC2 instances that support automatic encryption in the AWS Regions where they are available. For more information about encryption in transit for FSx for Lustre file systems, see `Encrypting data in transit <https://docs.aws.amazon.com/fsx/latest/LustreGuide/encryption-in-transit-fsxl.html>`_ in the *Amazon FSx for Lustre User Guide* . (Default = ``SCRATCH_1`` )
             :param drive_cache_type: The type of drive cache used by ``PERSISTENT_1`` file systems that are provisioned with HDD storage devices. This parameter is required when storage type is HDD. Set this property to ``READ`` to improve the performance for frequently accessed files by caching up to 20% of the total storage capacity of the file system. This parameter is required when ``StorageType`` is set to ``HDD`` and ``DeploymentType`` is ``PERSISTENT_1`` .
-            :param efa_enabled: 
+            :param efa_enabled: (Optional) Specifies whether Elastic Fabric Adapter (EFA) and GPUDirect Storage (GDS) support is enabled for the Amazon FSx for Lustre file system. (Default = ``false`` )
             :param export_path: (Optional) Specifies the path in the Amazon S3 bucket where the root of your Amazon FSx file system is exported. The path must use the same Amazon S3 bucket as specified in ImportPath. You can provide an optional prefix to which new and changed data is to be exported from your Amazon FSx for Lustre file system. If an ``ExportPath`` value is not provided, Amazon FSx sets a default export path, ``s3://import-bucket/FSxLustre[creation-timestamp]`` . The timestamp is in UTC format, for example ``s3://import-bucket/FSxLustre20181105T222312Z`` . The Amazon S3 export bucket must be the same as the import bucket specified by ``ImportPath`` . If you specify only a bucket name, such as ``s3://import-bucket`` , you get a 1:1 mapping of file system objects to S3 bucket objects. This mapping means that the input data in S3 is overwritten on export. If you provide a custom prefix in the export path, such as ``s3://import-bucket/[custom-optional-prefix]`` , Amazon FSx exports the contents of your file system to that export prefix in the Amazon S3 bucket. .. epigraph:: This parameter is not supported for file systems with a data repository association.
             :param imported_file_chunk_size: (Optional) For files imported from a data repository, this value determines the stripe count and maximum amount of data per file (in MiB) stored on a single physical disk. The maximum number of disks that a single file can be striped across is limited by the total number of disks that make up the file system. The default chunk size is 1,024 MiB (1 GiB) and can go as high as 512,000 MiB (500 GiB). Amazon S3 objects have a maximum size of 5 TB. .. epigraph:: This parameter is not supported for Lustre file systems with a data repository association.
             :param import_path: (Optional) The path to the Amazon S3 bucket (including the optional prefix) that you're using as the data repository for your Amazon FSx for Lustre file system. The root of your FSx for Lustre file system will be mapped to the root of the Amazon S3 bucket you select. An example is ``s3://import-bucket/optional-prefix`` . If you specify a prefix after the Amazon S3 bucket name, only object keys with that prefix are loaded into the file system. .. epigraph:: This parameter is not supported for Lustre file systems with a data repository association.
-            :param metadata_configuration: 
+            :param metadata_configuration: The Lustre metadata performance configuration for the creation of an FSx for Lustre file system using a ``PERSISTENT_2`` deployment type.
             :param per_unit_storage_throughput: Required with ``PERSISTENT_1`` and ``PERSISTENT_2`` deployment types, provisions the amount of read and write throughput for each 1 tebibyte (TiB) of file system storage capacity, in MB/s/TiB. File system throughput capacity is calculated by multiplying file system storage capacity (TiB) by the ``PerUnitStorageThroughput`` (MB/s/TiB). For a 2.4-TiB file system, provisioning 50 MB/s/TiB of ``PerUnitStorageThroughput`` yields 120 MB/s of file system throughput. You pay for the amount of throughput that you provision. Valid values: - For ``PERSISTENT_1`` SSD storage: 50, 100, 200 MB/s/TiB. - For ``PERSISTENT_1`` HDD storage: 12, 40 MB/s/TiB. - For ``PERSISTENT_2`` SSD storage: 125, 250, 500, 1000 MB/s/TiB.
-            :param throughput_capacity: 
+            :param throughput_capacity: Specifies the throughput of an FSx for Lustre file system using the Intelligent-Tiering storage class, measured in megabytes per second (MBps). Valid values are 4000 MBps or multiples of 4000 MBps. You pay for the amount of throughput that you provision.
             :param weekly_maintenance_start_time: The preferred start time to perform weekly maintenance, formatted d:HH:MM in the UTC time zone, where d is the weekday number, from 1 through 7, beginning with Monday and ending with Sunday. For example, ``1:05:00`` specifies maintenance at 5 AM Monday.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-lustreconfiguration.html
@@ -2042,7 +2100,10 @@ class CfnFileSystem(
         def data_read_cache_configuration(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFileSystem.DataReadCacheConfigurationProperty"]]:
-            '''
+            '''Specifies the optional provisioned SSD read cache on FSx for Lustre file systems that use the Intelligent-Tiering storage class.
+
+            Required when ``StorageType`` is set to ``INTELLIGENT_TIERING`` .
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-lustreconfiguration.html#cfn-fsx-filesystem-lustreconfiguration-datareadcacheconfiguration
             '''
             result = self._values.get("data_read_cache_configuration")
@@ -2056,7 +2117,7 @@ class CfnFileSystem(
 
             Choose ``PERSISTENT_1`` for longer-term storage and for throughput-focused workloads that aren’t latency-sensitive. ``PERSISTENT_1`` supports encryption of data in transit, and is available in all AWS Regions in which FSx for Lustre is available.
 
-            Choose ``PERSISTENT_2`` for longer-term storage and for latency-sensitive workloads that require the highest levels of IOPS/throughput. ``PERSISTENT_2`` supports SSD storage, and offers higher ``PerUnitStorageThroughput`` (up to 1000 MB/s/TiB). You can optionally specify a metadata configuration mode for ``PERSISTENT_2`` which supports increasing metadata performance. ``PERSISTENT_2`` is available in a limited number of AWS Regions . For more information, and an up-to-date list of AWS Regions in which ``PERSISTENT_2`` is available, see `File system deployment options for FSx for Lustre <https://docs.aws.amazon.com/fsx/latest/LustreGuide/using-fsx-lustre.html#lustre-deployment-types>`_ in the *Amazon FSx for Lustre User Guide* .
+            Choose ``PERSISTENT_2`` for longer-term storage and for latency-sensitive workloads that require the highest levels of IOPS/throughput. ``PERSISTENT_2`` supports the SSD and Intelligent-Tiering storage classes. You can optionally specify a metadata configuration mode for ``PERSISTENT_2`` which supports increasing metadata performance. ``PERSISTENT_2`` is available in a limited number of AWS Regions . For more information, and an up-to-date list of AWS Regions in which ``PERSISTENT_2`` is available, see `Deployment and storage class options for FSx for Lustre file systems <https://docs.aws.amazon.com/fsx/latest/LustreGuide/using-fsx-lustre.html>`_ in the *Amazon FSx for Lustre User Guide* .
             .. epigraph::
 
                If you choose ``PERSISTENT_2`` , and you set ``FileSystemTypeVersion`` to ``2.10`` , the ``CreateFileSystem`` operation fails.
@@ -2087,7 +2148,10 @@ class CfnFileSystem(
         def efa_enabled(
             self,
         ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-            '''
+            '''(Optional) Specifies whether Elastic Fabric Adapter (EFA) and GPUDirect Storage (GDS) support is enabled for the Amazon FSx for Lustre file system.
+
+            (Default = ``false`` )
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-lustreconfiguration.html#cfn-fsx-filesystem-lustreconfiguration-efaenabled
             '''
             result = self._values.get("efa_enabled")
@@ -2143,7 +2207,8 @@ class CfnFileSystem(
         def metadata_configuration(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFileSystem.MetadataConfigurationProperty"]]:
-            '''
+            '''The Lustre metadata performance configuration for the creation of an FSx for Lustre file system using a ``PERSISTENT_2`` deployment type.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-lustreconfiguration.html#cfn-fsx-filesystem-lustreconfiguration-metadataconfiguration
             '''
             result = self._values.get("metadata_configuration")
@@ -2168,7 +2233,10 @@ class CfnFileSystem(
 
         @builtins.property
         def throughput_capacity(self) -> typing.Optional[jsii.Number]:
-            '''
+            '''Specifies the throughput of an FSx for Lustre file system using the Intelligent-Tiering storage class, measured in megabytes per second (MBps).
+
+            Valid values are 4000 MBps or multiples of 4000 MBps. You pay for the amount of throughput that you provision.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-lustreconfiguration.html#cfn-fsx-filesystem-lustreconfiguration-throughputcapacity
             '''
             result = self._values.get("throughput_capacity")
@@ -2208,9 +2276,10 @@ class CfnFileSystem(
             iops: typing.Optional[jsii.Number] = None,
             mode: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''
-            :param iops: 
-            :param mode: 
+            '''The configuration that allows you to specify the performance of metadata operations for an FSx for Lustre file system.
+
+            :param iops: The number of Metadata IOPS provisioned for the file system.
+            :param mode: Specifies whether the file system is using the AUTOMATIC setting of metadata IOPS or if it is using a USER_PROVISIONED value.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-metadataconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -2238,7 +2307,8 @@ class CfnFileSystem(
 
         @builtins.property
         def iops(self) -> typing.Optional[jsii.Number]:
-            '''
+            '''The number of Metadata IOPS provisioned for the file system.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-metadataconfiguration.html#cfn-fsx-filesystem-metadataconfiguration-iops
             '''
             result = self._values.get("iops")
@@ -2246,7 +2316,8 @@ class CfnFileSystem(
 
         @builtins.property
         def mode(self) -> typing.Optional[builtins.str]:
-            '''
+            '''Specifies whether the file system is using the AUTOMATIC setting of metadata IOPS or if it is using a USER_PROVISIONED value.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-metadataconfiguration.html#cfn-fsx-filesystem-metadataconfiguration-mode
             '''
             result = self._values.get("mode")
@@ -2332,6 +2403,7 @@ class CfnFileSystem(
             "daily_automatic_backup_start_time": "dailyAutomaticBackupStartTime",
             "disk_iops_configuration": "diskIopsConfiguration",
             "endpoint_ip_address_range": "endpointIpAddressRange",
+            "endpoint_ipv6_address_range": "endpointIpv6AddressRange",
             "fsx_admin_password": "fsxAdminPassword",
             "ha_pairs": "haPairs",
             "preferred_subnet_id": "preferredSubnetId",
@@ -2350,6 +2422,7 @@ class CfnFileSystem(
             daily_automatic_backup_start_time: typing.Optional[builtins.str] = None,
             disk_iops_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnFileSystem.DiskIopsConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             endpoint_ip_address_range: typing.Optional[builtins.str] = None,
+            endpoint_ipv6_address_range: typing.Optional[builtins.str] = None,
             fsx_admin_password: typing.Optional[builtins.str] = None,
             ha_pairs: typing.Optional[jsii.Number] = None,
             preferred_subnet_id: typing.Optional[builtins.str] = None,
@@ -2364,7 +2437,8 @@ class CfnFileSystem(
             :param automatic_backup_retention_days: The number of days to retain automatic backups. Setting this property to ``0`` disables automatic backups. You can retain automatic backups for a maximum of 90 days. The default is ``30`` .
             :param daily_automatic_backup_start_time: A recurring daily time, in the format ``HH:MM`` . ``HH`` is the zero-padded hour of the day (0-23), and ``MM`` is the zero-padded minute of the hour. For example, ``05:00`` specifies 5 AM daily.
             :param disk_iops_configuration: The SSD IOPS configuration for the FSx for ONTAP file system.
-            :param endpoint_ip_address_range: (Multi-AZ only) Specifies the IP address range in which the endpoints to access your file system will be created. By default in the Amazon FSx API, Amazon FSx selects an unused IP address range for you from the 198.19.* range. By default in the Amazon FSx console, Amazon FSx chooses the last 64 IP addresses from the VPC’s primary CIDR range to use as the endpoint IP address range for the file system. You can have overlapping endpoint IP addresses for file systems deployed in the same VPC/route tables, as long as they don't overlap with any subnet.
+            :param endpoint_ip_address_range: (Multi-AZ only) Specifies the IPv4 address range in which the endpoints to access your file system will be created. By default in the Amazon FSx API, Amazon FSx selects an unused IP address range for you from the 198.19.* range. By default in the Amazon FSx console, Amazon FSx chooses the last 64 IP addresses from the VPC’s primary CIDR range to use as the endpoint IP address range for the file system. You can have overlapping endpoint IP addresses for file systems deployed in the same VPC/route tables, as long as they don't overlap with any subnet.
+            :param endpoint_ipv6_address_range: 
             :param fsx_admin_password: The ONTAP administrative password for the ``fsxadmin`` user with which you administer your file system using the NetApp ONTAP CLI and REST API.
             :param ha_pairs: Specifies how many high-availability (HA) pairs of file servers will power your file system. First-generation file systems are powered by 1 HA pair. Second-generation multi-AZ file systems are powered by 1 HA pair. Second generation single-AZ file systems are powered by up to 12 HA pairs. The default value is 1. The value of this property affects the values of ``StorageCapacity`` , ``Iops`` , and ``ThroughputCapacity`` . For more information, see `High-availability (HA) pairs <https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/administering-file-systems.html#HA-pairs>`_ in the FSx for ONTAP user guide. Block storage protocol support (iSCSI and NVMe over TCP) is disabled on file systems with more than 6 HA pairs. For more information, see `Using block storage protocols <https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/supported-fsx-clients.html#using-block-storage>`_ . Amazon FSx responds with an HTTP status code 400 (Bad Request) for the following conditions: - The value of ``HAPairs`` is less than 1 or greater than 12. - The value of ``HAPairs`` is greater than 1 and the value of ``DeploymentType`` is ``SINGLE_AZ_1`` , ``MULTI_AZ_1`` , or ``MULTI_AZ_2`` .
             :param preferred_subnet_id: Required when ``DeploymentType`` is set to ``MULTI_AZ_1`` or ``MULTI_AZ_2`` . This specifies the subnet in which you want the preferred file server to be located.
@@ -2393,6 +2467,7 @@ class CfnFileSystem(
                         mode="mode"
                     ),
                     endpoint_ip_address_range="endpointIpAddressRange",
+                    endpoint_ipv6_address_range="endpointIpv6AddressRange",
                     fsx_admin_password="fsxAdminPassword",
                     ha_pairs=123,
                     preferred_subnet_id="preferredSubnetId",
@@ -2409,6 +2484,7 @@ class CfnFileSystem(
                 check_type(argname="argument daily_automatic_backup_start_time", value=daily_automatic_backup_start_time, expected_type=type_hints["daily_automatic_backup_start_time"])
                 check_type(argname="argument disk_iops_configuration", value=disk_iops_configuration, expected_type=type_hints["disk_iops_configuration"])
                 check_type(argname="argument endpoint_ip_address_range", value=endpoint_ip_address_range, expected_type=type_hints["endpoint_ip_address_range"])
+                check_type(argname="argument endpoint_ipv6_address_range", value=endpoint_ipv6_address_range, expected_type=type_hints["endpoint_ipv6_address_range"])
                 check_type(argname="argument fsx_admin_password", value=fsx_admin_password, expected_type=type_hints["fsx_admin_password"])
                 check_type(argname="argument ha_pairs", value=ha_pairs, expected_type=type_hints["ha_pairs"])
                 check_type(argname="argument preferred_subnet_id", value=preferred_subnet_id, expected_type=type_hints["preferred_subnet_id"])
@@ -2427,6 +2503,8 @@ class CfnFileSystem(
                 self._values["disk_iops_configuration"] = disk_iops_configuration
             if endpoint_ip_address_range is not None:
                 self._values["endpoint_ip_address_range"] = endpoint_ip_address_range
+            if endpoint_ipv6_address_range is not None:
+                self._values["endpoint_ipv6_address_range"] = endpoint_ipv6_address_range
             if fsx_admin_password is not None:
                 self._values["fsx_admin_password"] = fsx_admin_password
             if ha_pairs is not None:
@@ -2494,7 +2572,7 @@ class CfnFileSystem(
 
         @builtins.property
         def endpoint_ip_address_range(self) -> typing.Optional[builtins.str]:
-            '''(Multi-AZ only) Specifies the IP address range in which the endpoints to access your file system will be created.
+            '''(Multi-AZ only) Specifies the IPv4 address range in which the endpoints to access your file system will be created.
 
             By default in the Amazon FSx API, Amazon FSx selects an unused IP address range for you from the 198.19.* range. By default in the Amazon FSx console, Amazon FSx chooses the last 64 IP addresses from the VPC’s primary CIDR range to use as the endpoint IP address range for the file system. You can have overlapping endpoint IP addresses for file systems deployed in the same VPC/route tables, as long as they don't overlap with any subnet.
 
@@ -2503,6 +2581,14 @@ class CfnFileSystem(
             result = self._values.get("endpoint_ip_address_range")
             return typing.cast(typing.Optional[builtins.str], result)
 
+        @builtins.property
+        def endpoint_ipv6_address_range(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-ontapconfiguration.html#cfn-fsx-filesystem-ontapconfiguration-endpointipv6addressrange
+            '''
+            result = self._values.get("endpoint_ipv6_address_range")
+            return typing.cast(typing.Optional[builtins.str], result)
+
         @builtins.property
         def fsx_admin_password(self) -> typing.Optional[builtins.str]:
             '''The ONTAP administrative password for the ``fsxadmin`` user with which you administer your file system using the NetApp ONTAP CLI and REST API.
@@ -2625,6 +2711,7 @@ class CfnFileSystem(
             "daily_automatic_backup_start_time": "dailyAutomaticBackupStartTime",
             "disk_iops_configuration": "diskIopsConfiguration",
             "endpoint_ip_address_range": "endpointIpAddressRange",
+            "endpoint_ipv6_address_range": "endpointIpv6AddressRange",
             "options": "options",
             "preferred_subnet_id": "preferredSubnetId",
             "read_cache_configuration": "readCacheConfiguration",
@@ -2645,6 +2732,7 @@ class CfnFileSystem(
             daily_automatic_backup_start_time: typing.Optional[builtins.str] = None,
             disk_iops_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnFileSystem.DiskIopsConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             endpoint_ip_address_range: typing.Optional[builtins.str] = None,
+            endpoint_ipv6_address_range: typing.Optional[builtins.str] = None,
             options: typing.Optional[typing.Sequence[builtins.str]] = None,
             preferred_subnet_id: typing.Optional[builtins.str] = None,
             read_cache_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnFileSystem.ReadCacheConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -2661,13 +2749,14 @@ class CfnFileSystem(
             :param copy_tags_to_volumes: A Boolean value indicating whether tags for the file system should be copied to volumes. This value defaults to ``false`` . If it's set to ``true`` , all tags for the file system are copied to volumes where the user doesn't specify tags. If this value is ``true`` , and you specify one or more tags, only the specified tags are copied to volumes. If you specify one or more tags when creating the volume, no tags are copied from the file system, regardless of this value.
             :param daily_automatic_backup_start_time: A recurring daily time, in the format ``HH:MM`` . ``HH`` is the zero-padded hour of the day (0-23), and ``MM`` is the zero-padded minute of the hour. For example, ``05:00`` specifies 5 AM daily.
             :param disk_iops_configuration: The SSD IOPS (input/output operations per second) configuration for an Amazon FSx for NetApp ONTAP, Amazon FSx for Windows File Server, or FSx for OpenZFS file system. By default, Amazon FSx automatically provisions 3 IOPS per GB of storage capacity. You can provision additional IOPS per GB of storage. The configuration consists of the total number of provisioned SSD IOPS and how it is was provisioned, or the mode (by the customer or by Amazon FSx).
-            :param endpoint_ip_address_range: (Multi-AZ only) Specifies the IP address range in which the endpoints to access your file system will be created. By default in the Amazon FSx API and Amazon FSx console, Amazon FSx selects an available /28 IP address range for you from one of the VPC's CIDR ranges. You can have overlapping endpoint IP addresses for file systems deployed in the same VPC/route tables, as long as they don't overlap with any subnet.
+            :param endpoint_ip_address_range: (Multi-AZ only) Specifies the IPv4 address range in which the endpoints to access your file system will be created. By default in the Amazon FSx API and Amazon FSx console, Amazon FSx selects an available /28 IP address range for you from one of the VPC's CIDR ranges. You can have overlapping endpoint IP addresses for file systems deployed in the same VPC/route tables, as long as they don't overlap with any subnet.
+            :param endpoint_ipv6_address_range: (Multi-AZ only) Specifies the IP address range in which the endpoints to access your file system will be created. By default in the Amazon FSx API and Amazon FSx console, Amazon FSx selects an available /118 IP address range for you from one of the VPC's CIDR ranges. You can have overlapping endpoint IP addresses for file systems deployed in the same VPC/route tables, as long as they don't overlap with any subnet.
             :param options: To delete a file system if there are child volumes present below the root volume, use the string ``DELETE_CHILD_VOLUMES_AND_SNAPSHOTS`` . If your file system has child volumes and you don't use this option, the delete request will fail.
             :param preferred_subnet_id: Required when ``DeploymentType`` is set to ``MULTI_AZ_1`` . This specifies the subnet in which you want the preferred file server to be located.
             :param read_cache_configuration: Specifies the optional provisioned SSD read cache on file systems that use the Intelligent-Tiering storage class.
             :param root_volume_configuration: The configuration Amazon FSx uses when creating the root value of the Amazon FSx for OpenZFS file system. All volumes are children of the root volume.
             :param route_table_ids: (Multi-AZ only) Specifies the route tables in which Amazon FSx creates the rules for routing traffic to the correct file server. You should specify all virtual private cloud (VPC) route tables associated with the subnets in which your clients are located. By default, Amazon FSx selects your VPC's default route table.
-            :param throughput_capacity: Specifies the throughput of an Amazon FSx for OpenZFS file system, measured in megabytes per second (MBps). Valid values depend on the ``DeploymentType`` that you choose, as follows: - For ``MULTI_AZ_1`` and ``SINGLE_AZ_2`` , valid values are 160, 320, 640, 1280, 2560, 3840, 5120, 7680, or 10240 MBps. - For ``SINGLE_AZ_1`` , valid values are 64, 128, 256, 512, 1024, 2048, 3072, or 4096 MBps. You pay for additional throughput capacity that you provision.
+            :param throughput_capacity: Specifies the throughput of an Amazon FSx for OpenZFS file system, measured in megabytes per second (MBps). Required if you are creating a new file system. Valid values depend on the ``DeploymentType`` that you choose, as follows: - For ``MULTI_AZ_1`` and ``SINGLE_AZ_2`` , valid values are 160, 320, 640, 1280, 2560, 3840, 5120, 7680, or 10240 MBps. - For ``SINGLE_AZ_1`` , valid values are 64, 128, 256, 512, 1024, 2048, 3072, or 4096 MBps. You pay for additional throughput capacity that you provision.
             :param weekly_maintenance_start_time: The preferred start time to perform weekly maintenance, formatted d:HH:MM in the UTC time zone, where d is the weekday number, from 1 through 7, beginning with Monday and ending with Sunday. For example, ``1:05:00`` specifies maintenance at 5 AM Monday.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-openzfsconfiguration.html
@@ -2692,6 +2781,7 @@ class CfnFileSystem(
                         mode="mode"
                     ),
                     endpoint_ip_address_range="endpointIpAddressRange",
+                    endpoint_ipv6_address_range="endpointIpv6AddressRange",
                     options=["options"],
                     preferred_subnet_id="preferredSubnetId",
                     read_cache_configuration=fsx.CfnFileSystem.ReadCacheConfigurationProperty(
@@ -2729,6 +2819,7 @@ class CfnFileSystem(
                 check_type(argname="argument daily_automatic_backup_start_time", value=daily_automatic_backup_start_time, expected_type=type_hints["daily_automatic_backup_start_time"])
                 check_type(argname="argument disk_iops_configuration", value=disk_iops_configuration, expected_type=type_hints["disk_iops_configuration"])
                 check_type(argname="argument endpoint_ip_address_range", value=endpoint_ip_address_range, expected_type=type_hints["endpoint_ip_address_range"])
+                check_type(argname="argument endpoint_ipv6_address_range", value=endpoint_ipv6_address_range, expected_type=type_hints["endpoint_ipv6_address_range"])
                 check_type(argname="argument options", value=options, expected_type=type_hints["options"])
                 check_type(argname="argument preferred_subnet_id", value=preferred_subnet_id, expected_type=type_hints["preferred_subnet_id"])
                 check_type(argname="argument read_cache_configuration", value=read_cache_configuration, expected_type=type_hints["read_cache_configuration"])
@@ -2751,6 +2842,8 @@ class CfnFileSystem(
                 self._values["disk_iops_configuration"] = disk_iops_configuration
             if endpoint_ip_address_range is not None:
                 self._values["endpoint_ip_address_range"] = endpoint_ip_address_range
+            if endpoint_ipv6_address_range is not None:
+                self._values["endpoint_ipv6_address_range"] = endpoint_ipv6_address_range
             if options is not None:
                 self._values["options"] = options
             if preferred_subnet_id is not None:
@@ -2847,7 +2940,7 @@ class CfnFileSystem(
 
         @builtins.property
         def endpoint_ip_address_range(self) -> typing.Optional[builtins.str]:
-            '''(Multi-AZ only) Specifies the IP address range in which the endpoints to access your file system will be created.
+            '''(Multi-AZ only) Specifies the IPv4 address range in which the endpoints to access your file system will be created.
 
             By default in the Amazon FSx API and Amazon FSx console, Amazon FSx selects an available /28 IP address range for you from one of the VPC's CIDR ranges. You can have overlapping endpoint IP addresses for file systems deployed in the same VPC/route tables, as long as they don't overlap with any subnet.
 
@@ -2856,6 +2949,17 @@ class CfnFileSystem(
             result = self._values.get("endpoint_ip_address_range")
             return typing.cast(typing.Optional[builtins.str], result)
 
+        @builtins.property
+        def endpoint_ipv6_address_range(self) -> typing.Optional[builtins.str]:
+            '''(Multi-AZ only) Specifies the IP address range in which the endpoints to access your file system will be created.
+
+            By default in the Amazon FSx API and Amazon FSx console, Amazon FSx selects an available /118 IP address range for you from one of the VPC's CIDR ranges. You can have overlapping endpoint IP addresses for file systems deployed in the same VPC/route tables, as long as they don't overlap with any subnet.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-openzfsconfiguration.html#cfn-fsx-filesystem-openzfsconfiguration-endpointipv6addressrange
+            '''
+            result = self._values.get("endpoint_ipv6_address_range")
+            return typing.cast(typing.Optional[builtins.str], result)
+
         @builtins.property
         def options(self) -> typing.Optional[typing.List[builtins.str]]:
             '''To delete a file system if there are child volumes present below the root volume, use the string ``DELETE_CHILD_VOLUMES_AND_SNAPSHOTS`` .
@@ -2917,6 +3021,8 @@ class CfnFileSystem(
         def throughput_capacity(self) -> typing.Optional[jsii.Number]:
             '''Specifies the throughput of an Amazon FSx for OpenZFS file system, measured in megabytes per second (MBps).
 
+            Required if you are creating a new file system.
+
             Valid values depend on the ``DeploymentType`` that you choose, as follows:
 
             - For ``MULTI_AZ_1`` and ``SINGLE_AZ_2`` , valid values are 160, 320, 640, 1280, 2560, 3840, 5120, 7680, or 10240 MBps.
@@ -2963,7 +3069,7 @@ class CfnFileSystem(
             size_gib: typing.Optional[jsii.Number] = None,
             sizing_mode: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''The configuration for the optional provisioned SSD read cache on file systems that use the Intelligent-Tiering storage class.
+            '''The configuration for the optional provisioned SSD read cache on Amazon FSx for OpenZFS file systems that use the Intelligent-Tiering storage class.
 
             :param size_gib: Required if ``SizingMode`` is set to ``USER_PROVISIONED`` . Specifies the size of the file system's SSD read cache, in gibibytes (GiB).
             :param sizing_mode: Specifies how the provisioned SSD read cache is sized, as follows:. - Set to ``NO_CACHE`` if you do not want to use an SSD read cache with your Intelligent-Tiering file system. - Set to ``USER_PROVISIONED`` to specify the exact size of your SSD read cache. - Set to ``PROPORTIONAL_TO_THROUGHPUT_CAPACITY`` to have your SSD read cache automatically sized based on your throughput capacity.
@@ -3740,6 +3846,7 @@ class CfnFileSystem(
         "file_system_type_version": "fileSystemTypeVersion",
         "kms_key_id": "kmsKeyId",
         "lustre_configuration": "lustreConfiguration",
+        "network_type": "networkType",
         "ontap_configuration": "ontapConfiguration",
         "open_zfs_configuration": "openZfsConfiguration",
         "security_group_ids": "securityGroupIds",
@@ -3759,6 +3866,7 @@ class CfnFileSystemProps:
         file_system_type_version: typing.Optional[builtins.str] = None,
         kms_key_id: typing.Optional[builtins.str] = None,
         lustre_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnFileSystem.LustreConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        network_type: typing.Optional[builtins.str] = None,
         ontap_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnFileSystem.OntapConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         open_zfs_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnFileSystem.OpenZFSConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -3773,15 +3881,16 @@ class CfnFileSystemProps:
         :param subnet_ids: Specifies the IDs of the subnets that the file system will be accessible from. For Windows and ONTAP ``MULTI_AZ_1`` deployment types,provide exactly two subnet IDs, one for the preferred file server and one for the standby file server. You specify one of these subnets as the preferred subnet using the ``WindowsConfiguration > PreferredSubnetID`` or ``OntapConfiguration > PreferredSubnetID`` properties. For more information about Multi-AZ file system configuration, see `Availability and durability: Single-AZ and Multi-AZ file systems <https://docs.aws.amazon.com/fsx/latest/WindowsGuide/high-availability-multiAZ.html>`_ in the *Amazon FSx for Windows User Guide* and `Availability and durability <https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/high-availability-multiAZ.html>`_ in the *Amazon FSx for ONTAP User Guide* . For Windows ``SINGLE_AZ_1`` and ``SINGLE_AZ_2`` and all Lustre deployment types, provide exactly one subnet ID. The file server is launched in that subnet's Availability Zone.
         :param backup_id: The ID of the file system backup that you are using to create a file system. For more information, see `CreateFileSystemFromBackup <https://docs.aws.amazon.com/fsx/latest/APIReference/API_CreateFileSystemFromBackup.html>`_ .
         :param file_system_type_version: For FSx for Lustre file systems, sets the Lustre version for the file system that you're creating. Valid values are ``2.10`` , ``2.12`` , and ``2.15`` : - ``2.10`` is supported by the Scratch and Persistent_1 Lustre deployment types. - ``2.12`` is supported by all Lustre deployment types, except for ``PERSISTENT_2`` with a metadata configuration mode. - ``2.15`` is supported by all Lustre deployment types and is recommended for all new file systems. Default value is ``2.10`` , except for the following deployments: - Default value is ``2.12`` when ``DeploymentType`` is set to ``PERSISTENT_2`` without a metadata configuration mode. - Default value is ``2.15`` when ``DeploymentType`` is set to ``PERSISTENT_2`` with a metadata configuration mode.
-        :param kms_key_id: The ID of the AWS Key Management Service ( AWS KMS ) key used to encrypt Amazon FSx file system data. Used as follows with Amazon FSx file system types: - Amazon FSx for Lustre ``PERSISTENT_1`` and ``PERSISTENT_2`` deployment types only. ``SCRATCH_1`` and ``SCRATCH_2`` types are encrypted using the Amazon FSx service AWS KMS key for your account. - Amazon FSx for NetApp ONTAP - Amazon FSx for OpenZFS - Amazon FSx for Windows File Server
-        :param lustre_configuration: The Lustre configuration for the file system being created. .. epigraph:: The following parameters are not supported when creating Lustre file systems with a data repository association. - ``AutoImportPolicy`` - ``ExportPath`` - ``ImportedChunkSize`` - ``ImportPath``
-        :param ontap_configuration: The ONTAP configuration properties of the FSx for ONTAP file system that you are creating.
-        :param open_zfs_configuration: The Amazon FSx for OpenZFS configuration properties for the file system that you are creating.
+        :param kms_key_id: The ID of the AWS Key Management Service ( AWS KMS ) key used to encrypt Amazon FSx file system data. Used as follows with Amazon FSx file system types: - Amazon FSx for Lustre ``PERSISTENT_1`` and ``PERSISTENT_2`` deployment types only. ``SCRATCH_1`` and ``SCRATCH_2`` types are encrypted using the Amazon FSx service AWS KMS key for your account. - Amazon FSx for NetApp ONTAP - Amazon FSx for OpenZFS - Amazon FSx for Windows File Server If this ID isn't specified, the Amazon FSx-managed key for your account is used. For more information, see `Encrypt <https://docs.aws.amazon.com//kms/latest/APIReference/API_Encrypt.html>`_ in the *AWS Key Management Service API Reference* .
+        :param lustre_configuration: The Lustre configuration for the file system being created. This configuration is required if the ``FileSystemType`` is set to ``LUSTRE`` . .. epigraph:: The following parameters are not supported when creating Lustre file systems with a data repository association. - ``AutoImportPolicy`` - ``ExportPath`` - ``ImportedChunkSize`` - ``ImportPath``
+        :param network_type: The network type of the file system.
+        :param ontap_configuration: The ONTAP configuration properties of the FSx for ONTAP file system that you are creating. This configuration is required if the ``FileSystemType`` is set to ``ONTAP`` .
+        :param open_zfs_configuration: The Amazon FSx for OpenZFS configuration properties for the file system that you are creating. This configuration is required if the ``FileSystemType`` is set to ``OPENZFS`` .
         :param security_group_ids: A list of IDs specifying the security groups to apply to all network interfaces created for file system access. This list isn't returned in later requests to describe the file system. .. epigraph:: You must specify a security group if you are creating a Multi-AZ FSx for ONTAP file system in a VPC subnet that has been shared with you.
         :param storage_capacity: Sets the storage capacity of the file system that you're creating. ``StorageCapacity`` is required if you are creating a new file system. It is not required if you are creating a file system by restoring a backup. *FSx for Lustre file systems* - The amount of storage capacity that you can configure depends on the value that you set for ``StorageType`` and the Lustre ``DeploymentType`` , as follows: - For ``SCRATCH_2`` , ``PERSISTENT_2`` and ``PERSISTENT_1`` deployment types using SSD storage type, the valid values are 1200 GiB, 2400 GiB, and increments of 2400 GiB. - For ``PERSISTENT_1`` HDD file systems, valid values are increments of 6000 GiB for 12 MB/s/TiB file systems and increments of 1800 GiB for 40 MB/s/TiB file systems. - For ``SCRATCH_1`` deployment type, valid values are 1200 GiB, 2400 GiB, and increments of 3600 GiB. *FSx for ONTAP file systems* - The amount of SSD storage capacity that you can configure depends on the value of the ``HAPairs`` property. The minimum value is calculated as 1,024 GiB * HAPairs and the maximum is calculated as 524,288 GiB * HAPairs, up to a maximum amount of SSD storage capacity of 1,048,576 GiB (1 pebibyte). *FSx for OpenZFS file systems* - The amount of storage capacity that you can configure is from 64 GiB up to 524,288 GiB (512 TiB). If you are creating a file system from a backup, you can specify a storage capacity equal to or greater than the original file system's storage capacity. *FSx for Windows File Server file systems* - The amount of storage capacity that you can configure depends on the value that you set for ``StorageType`` as follows: - For SSD storage, valid values are 32 GiB-65,536 GiB (64 TiB). - For HDD storage, valid values are 2000 GiB-65,536 GiB (64 TiB).
-        :param storage_type: Sets the storage class for the file system that you're creating. Valid values are ``SSD`` , ``HDD`` , and ``INTELLIGENT_TIERING`` . - Set to ``SSD`` to use solid state drive storage. SSD is supported on all Windows, Lustre, ONTAP, and OpenZFS deployment types. - Set to ``HDD`` to use hard disk drive storage, which is supported on ``SINGLE_AZ_2`` and ``MULTI_AZ_1`` Windows file system deployment types, and on ``PERSISTENT_1`` Lustre file system deployment types. - Set to ``INTELLIGENT_TIERING`` to use fully elastic, intelligently-tiered storage. Intelligent-Tiering is only available for OpenZFS file systems with the Multi-AZ deployment type. Default value is ``SSD`` . For more information, see `Storage type options <https://docs.aws.amazon.com/fsx/latest/WindowsGuide/optimize-fsx-costs.html#storage-type-options>`_ in the *FSx for Windows File Server User Guide* , `Multiple storage options <https://docs.aws.amazon.com/fsx/latest/LustreGuide/what-is.html#storage-options>`_ in the *FSx for Lustre User Guide* , and `Working with Intelligent-Tiering <https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/performance-intelligent-tiering>`_ in the *Amazon FSx for OpenZFS User Guide* .
+        :param storage_type: Sets the storage class for the file system that you're creating. Valid values are ``SSD`` , ``HDD`` , and ``INTELLIGENT_TIERING`` . - Set to ``SSD`` to use solid state drive storage. SSD is supported on all Windows, Lustre, ONTAP, and OpenZFS deployment types. - Set to ``HDD`` to use hard disk drive storage, which is supported on ``SINGLE_AZ_2`` and ``MULTI_AZ_1`` Windows file system deployment types, and on ``PERSISTENT_1`` Lustre file system deployment types. - Set to ``INTELLIGENT_TIERING`` to use fully elastic, intelligently-tiered storage. Intelligent-Tiering is only available for OpenZFS file systems with the Multi-AZ deployment type and for Lustre file systems with the Persistent_2 deployment type. Default value is ``SSD`` . For more information, see `Storage type options <https://docs.aws.amazon.com/fsx/latest/WindowsGuide/optimize-fsx-costs.html#storage-type-options>`_ in the *FSx for Windows File Server User Guide* , `FSx for Lustre storage classes <https://docs.aws.amazon.com/fsx/latest/LustreGuide/using-fsx-lustre.html#lustre-storage-classes>`_ in the *FSx for Lustre User Guide* , and `Working with Intelligent-Tiering <https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/performance-intelligent-tiering>`_ in the *Amazon FSx for OpenZFS User Guide* .
         :param tags: The tags to associate with the file system. For more information, see `Tagging your Amazon FSx resources <https://docs.aws.amazon.com/fsx/latest/LustreGuide/tag-resources.html>`_ in the *Amazon FSx for Lustre User Guide* .
-        :param windows_configuration: The configuration object for the Microsoft Windows file system you are creating. This value is required if ``FileSystemType`` is set to ``WINDOWS`` .
+        :param windows_configuration: The configuration object for the Microsoft Windows file system you are creating. This configuration is required if ``FileSystemType`` is set to ``WINDOWS`` .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html
         :exampleMetadata: fixture=_generated
@@ -3824,6 +3933,7 @@ class CfnFileSystemProps:
                     throughput_capacity=123,
                     weekly_maintenance_start_time="weeklyMaintenanceStartTime"
                 ),
+                network_type="networkType",
                 ontap_configuration=fsx.CfnFileSystem.OntapConfigurationProperty(
                     deployment_type="deploymentType",
             
@@ -3835,6 +3945,7 @@ class CfnFileSystemProps:
                         mode="mode"
                     ),
                     endpoint_ip_address_range="endpointIpAddressRange",
+                    endpoint_ipv6_address_range="endpointIpv6AddressRange",
                     fsx_admin_password="fsxAdminPassword",
                     ha_pairs=123,
                     preferred_subnet_id="preferredSubnetId",
@@ -3856,6 +3967,7 @@ class CfnFileSystemProps:
                         mode="mode"
                     ),
                     endpoint_ip_address_range="endpointIpAddressRange",
+                    endpoint_ipv6_address_range="endpointIpv6AddressRange",
                     options=["options"],
                     preferred_subnet_id="preferredSubnetId",
                     read_cache_configuration=fsx.CfnFileSystem.ReadCacheConfigurationProperty(
@@ -3932,6 +4044,7 @@ class CfnFileSystemProps:
             check_type(argname="argument file_system_type_version", value=file_system_type_version, expected_type=type_hints["file_system_type_version"])
             check_type(argname="argument kms_key_id", value=kms_key_id, expected_type=type_hints["kms_key_id"])
             check_type(argname="argument lustre_configuration", value=lustre_configuration, expected_type=type_hints["lustre_configuration"])
+            check_type(argname="argument network_type", value=network_type, expected_type=type_hints["network_type"])
             check_type(argname="argument ontap_configuration", value=ontap_configuration, expected_type=type_hints["ontap_configuration"])
             check_type(argname="argument open_zfs_configuration", value=open_zfs_configuration, expected_type=type_hints["open_zfs_configuration"])
             check_type(argname="argument security_group_ids", value=security_group_ids, expected_type=type_hints["security_group_ids"])
@@ -3951,6 +4064,8 @@ class CfnFileSystemProps:
             self._values["kms_key_id"] = kms_key_id
         if lustre_configuration is not None:
             self._values["lustre_configuration"] = lustre_configuration
+        if network_type is not None:
+            self._values["network_type"] = network_type
         if ontap_configuration is not None:
             self._values["ontap_configuration"] = ontap_configuration
         if open_zfs_configuration is not None:
@@ -4035,6 +4150,8 @@ class CfnFileSystemProps:
         - Amazon FSx for OpenZFS
         - Amazon FSx for Windows File Server
 
+        If this ID isn't specified, the Amazon FSx-managed key for your account is used. For more information, see `Encrypt <https://docs.aws.amazon.com//kms/latest/APIReference/API_Encrypt.html>`_ in the *AWS Key Management Service API Reference* .
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-kmskeyid
         '''
         result = self._values.get("kms_key_id")
@@ -4046,122 +4163,956 @@ class CfnFileSystemProps:
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFileSystem.LustreConfigurationProperty]]:
         '''The Lustre configuration for the file system being created.
 
-        .. epigraph::
+        This configuration is required if the ``FileSystemType`` is set to ``LUSTRE`` .
+        .. epigraph::
+
+           The following parameters are not supported when creating Lustre file systems with a data repository association.
+
+           - ``AutoImportPolicy``
+           - ``ExportPath``
+           - ``ImportedChunkSize``
+           - ``ImportPath``
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-lustreconfiguration
+        '''
+        result = self._values.get("lustre_configuration")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFileSystem.LustreConfigurationProperty]], result)
+
+    @builtins.property
+    def network_type(self) -> typing.Optional[builtins.str]:
+        '''The network type of the file system.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-networktype
+        '''
+        result = self._values.get("network_type")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def ontap_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFileSystem.OntapConfigurationProperty]]:
+        '''The ONTAP configuration properties of the FSx for ONTAP file system that you are creating.
+
+        This configuration is required if the ``FileSystemType`` is set to ``ONTAP`` .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-ontapconfiguration
+        '''
+        result = self._values.get("ontap_configuration")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFileSystem.OntapConfigurationProperty]], result)
+
+    @builtins.property
+    def open_zfs_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFileSystem.OpenZFSConfigurationProperty]]:
+        '''The Amazon FSx for OpenZFS configuration properties for the file system that you are creating.
+
+        This configuration is required if the ``FileSystemType`` is set to ``OPENZFS`` .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-openzfsconfiguration
+        '''
+        result = self._values.get("open_zfs_configuration")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFileSystem.OpenZFSConfigurationProperty]], result)
+
+    @builtins.property
+    def security_group_ids(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''A list of IDs specifying the security groups to apply to all network interfaces created for file system access.
+
+        This list isn't returned in later requests to describe the file system.
+        .. epigraph::
+
+           You must specify a security group if you are creating a Multi-AZ FSx for ONTAP file system in a VPC subnet that has been shared with you.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-securitygroupids
+        '''
+        result = self._values.get("security_group_ids")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+    @builtins.property
+    def storage_capacity(self) -> typing.Optional[jsii.Number]:
+        '''Sets the storage capacity of the file system that you're creating.
+
+        ``StorageCapacity`` is required if you are creating a new file system. It is not required if you are creating a file system by restoring a backup.
+
+        *FSx for Lustre file systems* - The amount of storage capacity that you can configure depends on the value that you set for ``StorageType`` and the Lustre ``DeploymentType`` , as follows:
+
+        - For ``SCRATCH_2`` , ``PERSISTENT_2`` and ``PERSISTENT_1`` deployment types using SSD storage type, the valid values are 1200 GiB, 2400 GiB, and increments of 2400 GiB.
+        - For ``PERSISTENT_1`` HDD file systems, valid values are increments of 6000 GiB for 12 MB/s/TiB file systems and increments of 1800 GiB for 40 MB/s/TiB file systems.
+        - For ``SCRATCH_1`` deployment type, valid values are 1200 GiB, 2400 GiB, and increments of 3600 GiB.
+
+        *FSx for ONTAP file systems* - The amount of SSD storage capacity that you can configure depends on the value of the ``HAPairs`` property. The minimum value is calculated as 1,024 GiB * HAPairs and the maximum is calculated as 524,288 GiB * HAPairs, up to a maximum amount of SSD storage capacity of 1,048,576 GiB (1 pebibyte).
+
+        *FSx for OpenZFS file systems* - The amount of storage capacity that you can configure is from 64 GiB up to 524,288 GiB (512 TiB). If you are creating a file system from a backup, you can specify a storage capacity equal to or greater than the original file system's storage capacity.
+
+        *FSx for Windows File Server file systems* - The amount of storage capacity that you can configure depends on the value that you set for ``StorageType`` as follows:
+
+        - For SSD storage, valid values are 32 GiB-65,536 GiB (64 TiB).
+        - For HDD storage, valid values are 2000 GiB-65,536 GiB (64 TiB).
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-storagecapacity
+        '''
+        result = self._values.get("storage_capacity")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    @builtins.property
+    def storage_type(self) -> typing.Optional[builtins.str]:
+        '''Sets the storage class for the file system that you're creating.
+
+        Valid values are ``SSD`` , ``HDD`` , and ``INTELLIGENT_TIERING`` .
+
+        - Set to ``SSD`` to use solid state drive storage. SSD is supported on all Windows, Lustre, ONTAP, and OpenZFS deployment types.
+        - Set to ``HDD`` to use hard disk drive storage, which is supported on ``SINGLE_AZ_2`` and ``MULTI_AZ_1`` Windows file system deployment types, and on ``PERSISTENT_1`` Lustre file system deployment types.
+        - Set to ``INTELLIGENT_TIERING`` to use fully elastic, intelligently-tiered storage. Intelligent-Tiering is only available for OpenZFS file systems with the Multi-AZ deployment type and for Lustre file systems with the Persistent_2 deployment type.
+
+        Default value is ``SSD`` . For more information, see `Storage type options <https://docs.aws.amazon.com/fsx/latest/WindowsGuide/optimize-fsx-costs.html#storage-type-options>`_ in the *FSx for Windows File Server User Guide* , `FSx for Lustre storage classes <https://docs.aws.amazon.com/fsx/latest/LustreGuide/using-fsx-lustre.html#lustre-storage-classes>`_ in the *FSx for Lustre User Guide* , and `Working with Intelligent-Tiering <https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/performance-intelligent-tiering>`_ in the *Amazon FSx for OpenZFS User Guide* .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-storagetype
+        '''
+        result = self._values.get("storage_type")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''The tags to associate with the file system.
+
+        For more information, see `Tagging your Amazon FSx resources <https://docs.aws.amazon.com/fsx/latest/LustreGuide/tag-resources.html>`_ in the *Amazon FSx for Lustre User Guide* .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-tags
+        '''
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
+
+    @builtins.property
+    def windows_configuration(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFileSystem.WindowsConfigurationProperty]]:
+        '''The configuration object for the Microsoft Windows file system you are creating.
+
+        This configuration is required if ``FileSystemType`` is set to ``WINDOWS`` .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-windowsconfiguration
+        '''
+        result = self._values.get("windows_configuration")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFileSystem.WindowsConfigurationProperty]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnFileSystemProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.implements(_IInspectable_c2943556, _IS3AccessPointAttachmentRef_22b962a0)
+class CfnS3AccessPointAttachment(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_fsx.CfnS3AccessPointAttachment",
+):
+    '''An S3 access point attached to an Amazon FSx volume.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-s3accesspointattachment.html
+    :cloudformationResource: AWS::FSx::S3AccessPointAttachment
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_fsx as fsx
+        
+        # policy: Any
+        
+        cfn_s3_access_point_attachment = fsx.CfnS3AccessPointAttachment(self, "MyCfnS3AccessPointAttachment",
+            name="name",
+            open_zfs_configuration=fsx.CfnS3AccessPointAttachment.S3AccessPointOpenZFSConfigurationProperty(
+                file_system_identity=fsx.CfnS3AccessPointAttachment.OpenZFSFileSystemIdentityProperty(
+                    posix_user=fsx.CfnS3AccessPointAttachment.OpenZFSPosixFileSystemUserProperty(
+                        gid=123,
+                        uid=123,
+        
+                        # the properties below are optional
+                        secondary_gids=[fsx.CfnS3AccessPointAttachment.FileSystemGIDProperty(
+                            gid=123
+                        )]
+                    ),
+                    type="type"
+                ),
+                volume_id="volumeId"
+            ),
+            type="type",
+        
+            # the properties below are optional
+            s3_access_point=fsx.CfnS3AccessPointAttachment.S3AccessPointProperty(
+                alias="alias",
+                policy=policy,
+                resource_arn="resourceArn",
+                vpc_configuration=fsx.CfnS3AccessPointAttachment.S3AccessPointVpcConfigurationProperty(
+                    vpc_id="vpcId"
+                )
+            )
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        name: builtins.str,
+        open_zfs_configuration: typing.Union[_IResolvable_da3f097b, typing.Union["CfnS3AccessPointAttachment.S3AccessPointOpenZFSConfigurationProperty", typing.Dict[builtins.str, typing.Any]]],
+        type: builtins.str,
+        s3_access_point: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnS3AccessPointAttachment.S3AccessPointProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Create a new ``AWS::FSx::S3AccessPointAttachment``.
+
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param name: The name of the S3 access point attachment; also used for the name of the S3 access point.
+        :param open_zfs_configuration: The OpenZFSConfiguration of the S3 access point attachment.
+        :param type: The type of Amazon FSx volume that the S3 access point is attached to.
+        :param s3_access_point: The S3 access point configuration of the S3 access point attachment.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__f51e0b107c6c6ca8bc284dbcf4013f6c7bcdd088cb084476fdf615b4d8ae257e)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnS3AccessPointAttachmentProps(
+            name=name,
+            open_zfs_configuration=open_zfs_configuration,
+            type=type,
+            s3_access_point=s3_access_point,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__6e021f2b2cc052b241526f0c8b04451cdbb773840ed5e597d710011b7885f25f)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__e4764700463d52298286c209b2ab565142140f7bfb04556d307ca9bd56430fb2)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrS3AccessPointAlias")
+    def attr_s3_access_point_alias(self) -> builtins.str:
+        '''The S3 access point's alias.
+
+        :cloudformationAttribute: S3AccessPoint.Alias
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrS3AccessPointAlias"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrS3AccessPointResourceArn")
+    def attr_s3_access_point_resource_arn(self) -> builtins.str:
+        '''The S3 access point's ARN.
+
+        :cloudformationAttribute: S3AccessPoint.ResourceARN
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrS3AccessPointResourceArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="s3AccessPointAttachmentRef")
+    def s3_access_point_attachment_ref(
+        self,
+    ) -> _S3AccessPointAttachmentReference_4957ffc1:
+        '''A reference to a S3AccessPointAttachment resource.'''
+        return typing.cast(_S3AccessPointAttachmentReference_4957ffc1, jsii.get(self, "s3AccessPointAttachmentRef"))
+
+    @builtins.property
+    @jsii.member(jsii_name="name")
+    def name(self) -> builtins.str:
+        '''The name of the S3 access point attachment;'''
+        return typing.cast(builtins.str, jsii.get(self, "name"))
+
+    @name.setter
+    def name(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__644edd6bd850880f5ebd47e103e56e49b7d7f21e620f2807e12dac453933e59d)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "name", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="openZfsConfiguration")
+    def open_zfs_configuration(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, "CfnS3AccessPointAttachment.S3AccessPointOpenZFSConfigurationProperty"]:
+        '''The OpenZFSConfiguration of the S3 access point attachment.'''
+        return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnS3AccessPointAttachment.S3AccessPointOpenZFSConfigurationProperty"], jsii.get(self, "openZfsConfiguration"))
+
+    @open_zfs_configuration.setter
+    def open_zfs_configuration(
+        self,
+        value: typing.Union[_IResolvable_da3f097b, "CfnS3AccessPointAttachment.S3AccessPointOpenZFSConfigurationProperty"],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__0756a73fef71599ffefeead45c6d0ea227439b511cdc73a360780b4f4c0df186)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "openZfsConfiguration", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="type")
+    def type(self) -> builtins.str:
+        '''The type of Amazon FSx volume that the S3 access point is attached to.'''
+        return typing.cast(builtins.str, jsii.get(self, "type"))
+
+    @type.setter
+    def type(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__ece88a5ab6d3a69d75415d92fc3eea5b9fd91186f1a15239e5ec10f6c6c0005a)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "type", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="s3AccessPoint")
+    def s3_access_point(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnS3AccessPointAttachment.S3AccessPointProperty"]]:
+        '''The S3 access point configuration of the S3 access point attachment.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnS3AccessPointAttachment.S3AccessPointProperty"]], jsii.get(self, "s3AccessPoint"))
+
+    @s3_access_point.setter
+    def s3_access_point(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnS3AccessPointAttachment.S3AccessPointProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1588dcc78f8354bc56e434d157b8dadab331295e3cbf0c065b7bd4b4b793aaa0)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "s3AccessPoint", value) # pyright: ignore[reportArgumentType]
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_fsx.CfnS3AccessPointAttachment.FileSystemGIDProperty",
+        jsii_struct_bases=[],
+        name_mapping={"gid": "gid"},
+    )
+    class FileSystemGIDProperty:
+        def __init__(self, *, gid: jsii.Number) -> None:
+            '''The GID of the file system user.
+
+            :param gid: The GID of the file system user.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-s3accesspointattachment-filesystemgid.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_fsx as fsx
+                
+                file_system_gIDProperty = fsx.CfnS3AccessPointAttachment.FileSystemGIDProperty(
+                    gid=123
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__72efd25b3b6057030d910de35b2f8e4104cb66dc72f89dc8ebb3b89daaf6a69f)
+                check_type(argname="argument gid", value=gid, expected_type=type_hints["gid"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "gid": gid,
+            }
+
+        @builtins.property
+        def gid(self) -> jsii.Number:
+            '''The GID of the file system user.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-s3accesspointattachment-filesystemgid.html#cfn-fsx-s3accesspointattachment-filesystemgid-gid
+            '''
+            result = self._values.get("gid")
+            assert result is not None, "Required property 'gid' is missing"
+            return typing.cast(jsii.Number, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "FileSystemGIDProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_fsx.CfnS3AccessPointAttachment.OpenZFSFileSystemIdentityProperty",
+        jsii_struct_bases=[],
+        name_mapping={"posix_user": "posixUser", "type": "type"},
+    )
+    class OpenZFSFileSystemIdentityProperty:
+        def __init__(
+            self,
+            *,
+            posix_user: typing.Union[_IResolvable_da3f097b, typing.Union["CfnS3AccessPointAttachment.OpenZFSPosixFileSystemUserProperty", typing.Dict[builtins.str, typing.Any]]],
+            type: builtins.str,
+        ) -> None:
+            '''Specifies the file system user identity that will be used for authorizing all file access requests that are made using the S3 access point.
+
+            :param posix_user: Specifies the UID and GIDs of the file system POSIX user.
+            :param type: Specifies the FSx for OpenZFS user identity type, accepts only ``POSIX`` .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-s3accesspointattachment-openzfsfilesystemidentity.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_fsx as fsx
+                
+                open_zFSFile_system_identity_property = fsx.CfnS3AccessPointAttachment.OpenZFSFileSystemIdentityProperty(
+                    posix_user=fsx.CfnS3AccessPointAttachment.OpenZFSPosixFileSystemUserProperty(
+                        gid=123,
+                        uid=123,
+                
+                        # the properties below are optional
+                        secondary_gids=[fsx.CfnS3AccessPointAttachment.FileSystemGIDProperty(
+                            gid=123
+                        )]
+                    ),
+                    type="type"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__af3bbbb456f8fdedf7c641c4786d89bf08acb663687e1b91f1ffdb83ab9819cb)
+                check_type(argname="argument posix_user", value=posix_user, expected_type=type_hints["posix_user"])
+                check_type(argname="argument type", value=type, expected_type=type_hints["type"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "posix_user": posix_user,
+                "type": type,
+            }
+
+        @builtins.property
+        def posix_user(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, "CfnS3AccessPointAttachment.OpenZFSPosixFileSystemUserProperty"]:
+            '''Specifies the UID and GIDs of the file system POSIX user.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-s3accesspointattachment-openzfsfilesystemidentity.html#cfn-fsx-s3accesspointattachment-openzfsfilesystemidentity-posixuser
+            '''
+            result = self._values.get("posix_user")
+            assert result is not None, "Required property 'posix_user' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnS3AccessPointAttachment.OpenZFSPosixFileSystemUserProperty"], result)
+
+        @builtins.property
+        def type(self) -> builtins.str:
+            '''Specifies the FSx for OpenZFS user identity type, accepts only ``POSIX`` .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-s3accesspointattachment-openzfsfilesystemidentity.html#cfn-fsx-s3accesspointattachment-openzfsfilesystemidentity-type
+            '''
+            result = self._values.get("type")
+            assert result is not None, "Required property 'type' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "OpenZFSFileSystemIdentityProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_fsx.CfnS3AccessPointAttachment.OpenZFSPosixFileSystemUserProperty",
+        jsii_struct_bases=[],
+        name_mapping={"gid": "gid", "uid": "uid", "secondary_gids": "secondaryGids"},
+    )
+    class OpenZFSPosixFileSystemUserProperty:
+        def __init__(
+            self,
+            *,
+            gid: jsii.Number,
+            uid: jsii.Number,
+            secondary_gids: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnS3AccessPointAttachment.FileSystemGIDProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
+        ) -> None:
+            '''The FSx for OpenZFS file system user that is used for authorizing all file access requests that are made using the S3 access point.
+
+            :param gid: The GID of the file system user.
+            :param uid: The UID of the file system user.
+            :param secondary_gids: The list of secondary GIDs for the file system user.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-s3accesspointattachment-openzfsposixfilesystemuser.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_fsx as fsx
+                
+                open_zFSPosix_file_system_user_property = fsx.CfnS3AccessPointAttachment.OpenZFSPosixFileSystemUserProperty(
+                    gid=123,
+                    uid=123,
+                
+                    # the properties below are optional
+                    secondary_gids=[fsx.CfnS3AccessPointAttachment.FileSystemGIDProperty(
+                        gid=123
+                    )]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__3decc490fdc822be6603dab799c80c7e004416dbd58cc34ea290fa556e81be39)
+                check_type(argname="argument gid", value=gid, expected_type=type_hints["gid"])
+                check_type(argname="argument uid", value=uid, expected_type=type_hints["uid"])
+                check_type(argname="argument secondary_gids", value=secondary_gids, expected_type=type_hints["secondary_gids"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "gid": gid,
+                "uid": uid,
+            }
+            if secondary_gids is not None:
+                self._values["secondary_gids"] = secondary_gids
+
+        @builtins.property
+        def gid(self) -> jsii.Number:
+            '''The GID of the file system user.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-s3accesspointattachment-openzfsposixfilesystemuser.html#cfn-fsx-s3accesspointattachment-openzfsposixfilesystemuser-gid
+            '''
+            result = self._values.get("gid")
+            assert result is not None, "Required property 'gid' is missing"
+            return typing.cast(jsii.Number, result)
+
+        @builtins.property
+        def uid(self) -> jsii.Number:
+            '''The UID of the file system user.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-s3accesspointattachment-openzfsposixfilesystemuser.html#cfn-fsx-s3accesspointattachment-openzfsposixfilesystemuser-uid
+            '''
+            result = self._values.get("uid")
+            assert result is not None, "Required property 'uid' is missing"
+            return typing.cast(jsii.Number, result)
+
+        @builtins.property
+        def secondary_gids(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnS3AccessPointAttachment.FileSystemGIDProperty"]]]]:
+            '''The list of secondary GIDs for the file system user.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-s3accesspointattachment-openzfsposixfilesystemuser.html#cfn-fsx-s3accesspointattachment-openzfsposixfilesystemuser-secondarygids
+            '''
+            result = self._values.get("secondary_gids")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnS3AccessPointAttachment.FileSystemGIDProperty"]]]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "OpenZFSPosixFileSystemUserProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_fsx.CfnS3AccessPointAttachment.S3AccessPointOpenZFSConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "file_system_identity": "fileSystemIdentity",
+            "volume_id": "volumeId",
+        },
+    )
+    class S3AccessPointOpenZFSConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            file_system_identity: typing.Union[_IResolvable_da3f097b, typing.Union["CfnS3AccessPointAttachment.OpenZFSFileSystemIdentityProperty", typing.Dict[builtins.str, typing.Any]]],
+            volume_id: builtins.str,
+        ) -> None:
+            '''Describes the FSx for OpenZFS attachment configuration of an S3 access point attachment.
+
+            :param file_system_identity: The file system identity used to authorize file access requests made using the S3 access point.
+            :param volume_id: The ID of the FSx for OpenZFS volume that the S3 access point is attached to.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-s3accesspointattachment-s3accesspointopenzfsconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_fsx as fsx
+                
+                s3_access_point_open_zFSConfiguration_property = fsx.CfnS3AccessPointAttachment.S3AccessPointOpenZFSConfigurationProperty(
+                    file_system_identity=fsx.CfnS3AccessPointAttachment.OpenZFSFileSystemIdentityProperty(
+                        posix_user=fsx.CfnS3AccessPointAttachment.OpenZFSPosixFileSystemUserProperty(
+                            gid=123,
+                            uid=123,
+                
+                            # the properties below are optional
+                            secondary_gids=[fsx.CfnS3AccessPointAttachment.FileSystemGIDProperty(
+                                gid=123
+                            )]
+                        ),
+                        type="type"
+                    ),
+                    volume_id="volumeId"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__19e4ea8fd55e864f4fe150ca7ce6a9a2838595c2d032b53647f2917e1f00ccfa)
+                check_type(argname="argument file_system_identity", value=file_system_identity, expected_type=type_hints["file_system_identity"])
+                check_type(argname="argument volume_id", value=volume_id, expected_type=type_hints["volume_id"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "file_system_identity": file_system_identity,
+                "volume_id": volume_id,
+            }
+
+        @builtins.property
+        def file_system_identity(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, "CfnS3AccessPointAttachment.OpenZFSFileSystemIdentityProperty"]:
+            '''The file system identity used to authorize file access requests made using the S3 access point.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-s3accesspointattachment-s3accesspointopenzfsconfiguration.html#cfn-fsx-s3accesspointattachment-s3accesspointopenzfsconfiguration-filesystemidentity
+            '''
+            result = self._values.get("file_system_identity")
+            assert result is not None, "Required property 'file_system_identity' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnS3AccessPointAttachment.OpenZFSFileSystemIdentityProperty"], result)
+
+        @builtins.property
+        def volume_id(self) -> builtins.str:
+            '''The ID of the FSx for OpenZFS volume that the S3 access point is attached to.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-s3accesspointattachment-s3accesspointopenzfsconfiguration.html#cfn-fsx-s3accesspointattachment-s3accesspointopenzfsconfiguration-volumeid
+            '''
+            result = self._values.get("volume_id")
+            assert result is not None, "Required property 'volume_id' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "S3AccessPointOpenZFSConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_fsx.CfnS3AccessPointAttachment.S3AccessPointProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "alias": "alias",
+            "policy": "policy",
+            "resource_arn": "resourceArn",
+            "vpc_configuration": "vpcConfiguration",
+        },
+    )
+    class S3AccessPointProperty:
+        def __init__(
+            self,
+            *,
+            alias: typing.Optional[builtins.str] = None,
+            policy: typing.Any = None,
+            resource_arn: typing.Optional[builtins.str] = None,
+            vpc_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnS3AccessPointAttachment.S3AccessPointVpcConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        ) -> None:
+            '''Describes the S3 access point configuration of the S3 access point attachment.
+
+            :param alias: The S3 access point's alias.
+            :param policy: The S3 access point's policy.
+            :param resource_arn: The S3 access point's ARN.
+            :param vpc_configuration: The S3 access point's virtual private cloud (VPC) configuration.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-s3accesspointattachment-s3accesspoint.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_fsx as fsx
+                
+                # policy: Any
+                
+                s3_access_point_property = fsx.CfnS3AccessPointAttachment.S3AccessPointProperty(
+                    alias="alias",
+                    policy=policy,
+                    resource_arn="resourceArn",
+                    vpc_configuration=fsx.CfnS3AccessPointAttachment.S3AccessPointVpcConfigurationProperty(
+                        vpc_id="vpcId"
+                    )
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__f4a6a2c709cd1951841b5d405e10b97412387430297e85aa1495d3aab1b70367)
+                check_type(argname="argument alias", value=alias, expected_type=type_hints["alias"])
+                check_type(argname="argument policy", value=policy, expected_type=type_hints["policy"])
+                check_type(argname="argument resource_arn", value=resource_arn, expected_type=type_hints["resource_arn"])
+                check_type(argname="argument vpc_configuration", value=vpc_configuration, expected_type=type_hints["vpc_configuration"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if alias is not None:
+                self._values["alias"] = alias
+            if policy is not None:
+                self._values["policy"] = policy
+            if resource_arn is not None:
+                self._values["resource_arn"] = resource_arn
+            if vpc_configuration is not None:
+                self._values["vpc_configuration"] = vpc_configuration
+
+        @builtins.property
+        def alias(self) -> typing.Optional[builtins.str]:
+            '''The S3 access point's alias.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-s3accesspointattachment-s3accesspoint.html#cfn-fsx-s3accesspointattachment-s3accesspoint-alias
+            '''
+            result = self._values.get("alias")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def policy(self) -> typing.Any:
+            '''The S3 access point's policy.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-s3accesspointattachment-s3accesspoint.html#cfn-fsx-s3accesspointattachment-s3accesspoint-policy
+            '''
+            result = self._values.get("policy")
+            return typing.cast(typing.Any, result)
+
+        @builtins.property
+        def resource_arn(self) -> typing.Optional[builtins.str]:
+            '''The S3 access point's ARN.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-s3accesspointattachment-s3accesspoint.html#cfn-fsx-s3accesspointattachment-s3accesspoint-resourcearn
+            '''
+            result = self._values.get("resource_arn")
+            return typing.cast(typing.Optional[builtins.str], result)
 
-           The following parameters are not supported when creating Lustre file systems with a data repository association.
+        @builtins.property
+        def vpc_configuration(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnS3AccessPointAttachment.S3AccessPointVpcConfigurationProperty"]]:
+            '''The S3 access point's virtual private cloud (VPC) configuration.
 
-           - ``AutoImportPolicy``
-           - ``ExportPath``
-           - ``ImportedChunkSize``
-           - ``ImportPath``
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-s3accesspointattachment-s3accesspoint.html#cfn-fsx-s3accesspointattachment-s3accesspoint-vpcconfiguration
+            '''
+            result = self._values.get("vpc_configuration")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnS3AccessPointAttachment.S3AccessPointVpcConfigurationProperty"]], result)
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-lustreconfiguration
-        '''
-        result = self._values.get("lustre_configuration")
-        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFileSystem.LustreConfigurationProperty]], result)
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
 
-    @builtins.property
-    def ontap_configuration(
-        self,
-    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFileSystem.OntapConfigurationProperty]]:
-        '''The ONTAP configuration properties of the FSx for ONTAP file system that you are creating.
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-ontapconfiguration
-        '''
-        result = self._values.get("ontap_configuration")
-        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFileSystem.OntapConfigurationProperty]], result)
+        def __repr__(self) -> str:
+            return "S3AccessPointProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
 
-    @builtins.property
-    def open_zfs_configuration(
-        self,
-    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFileSystem.OpenZFSConfigurationProperty]]:
-        '''The Amazon FSx for OpenZFS configuration properties for the file system that you are creating.
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_fsx.CfnS3AccessPointAttachment.S3AccessPointVpcConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={"vpc_id": "vpcId"},
+    )
+    class S3AccessPointVpcConfigurationProperty:
+        def __init__(self, *, vpc_id: builtins.str) -> None:
+            '''If included, Amazon S3 restricts access to this access point to requests from the specified virtual private cloud (VPC).
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-openzfsconfiguration
-        '''
-        result = self._values.get("open_zfs_configuration")
-        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFileSystem.OpenZFSConfigurationProperty]], result)
+            :param vpc_id: Specifies the virtual private cloud (VPC) for the S3 access point VPC configuration, if one exists.
 
-    @builtins.property
-    def security_group_ids(self) -> typing.Optional[typing.List[builtins.str]]:
-        '''A list of IDs specifying the security groups to apply to all network interfaces created for file system access.
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-s3accesspointattachment-s3accesspointvpcconfiguration.html
+            :exampleMetadata: fixture=_generated
 
-        This list isn't returned in later requests to describe the file system.
-        .. epigraph::
+            Example::
 
-           You must specify a security group if you are creating a Multi-AZ FSx for ONTAP file system in a VPC subnet that has been shared with you.
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_fsx as fsx
+                
+                s3_access_point_vpc_configuration_property = fsx.CfnS3AccessPointAttachment.S3AccessPointVpcConfigurationProperty(
+                    vpc_id="vpcId"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__ca5b9e5f42caf136a78ce4c94fb03a42b36504167d07de97e63171ff15aab81d)
+                check_type(argname="argument vpc_id", value=vpc_id, expected_type=type_hints["vpc_id"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "vpc_id": vpc_id,
+            }
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-securitygroupids
-        '''
-        result = self._values.get("security_group_ids")
-        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+        @builtins.property
+        def vpc_id(self) -> builtins.str:
+            '''Specifies the virtual private cloud (VPC) for the S3 access point VPC configuration, if one exists.
 
-    @builtins.property
-    def storage_capacity(self) -> typing.Optional[jsii.Number]:
-        '''Sets the storage capacity of the file system that you're creating.
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-s3accesspointattachment-s3accesspointvpcconfiguration.html#cfn-fsx-s3accesspointattachment-s3accesspointvpcconfiguration-vpcid
+            '''
+            result = self._values.get("vpc_id")
+            assert result is not None, "Required property 'vpc_id' is missing"
+            return typing.cast(builtins.str, result)
 
-        ``StorageCapacity`` is required if you are creating a new file system. It is not required if you are creating a file system by restoring a backup.
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
 
-        *FSx for Lustre file systems* - The amount of storage capacity that you can configure depends on the value that you set for ``StorageType`` and the Lustre ``DeploymentType`` , as follows:
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
 
-        - For ``SCRATCH_2`` , ``PERSISTENT_2`` and ``PERSISTENT_1`` deployment types using SSD storage type, the valid values are 1200 GiB, 2400 GiB, and increments of 2400 GiB.
-        - For ``PERSISTENT_1`` HDD file systems, valid values are increments of 6000 GiB for 12 MB/s/TiB file systems and increments of 1800 GiB for 40 MB/s/TiB file systems.
-        - For ``SCRATCH_1`` deployment type, valid values are 1200 GiB, 2400 GiB, and increments of 3600 GiB.
+        def __repr__(self) -> str:
+            return "S3AccessPointVpcConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
 
-        *FSx for ONTAP file systems* - The amount of SSD storage capacity that you can configure depends on the value of the ``HAPairs`` property. The minimum value is calculated as 1,024 GiB * HAPairs and the maximum is calculated as 524,288 GiB * HAPairs, up to a maximum amount of SSD storage capacity of 1,048,576 GiB (1 pebibyte).
 
-        *FSx for OpenZFS file systems* - The amount of storage capacity that you can configure is from 64 GiB up to 524,288 GiB (512 TiB). If you are creating a file system from a backup, you can specify a storage capacity equal to or greater than the original file system's storage capacity.
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_fsx.CfnS3AccessPointAttachmentProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "name": "name",
+        "open_zfs_configuration": "openZfsConfiguration",
+        "type": "type",
+        "s3_access_point": "s3AccessPoint",
+    },
+)
+class CfnS3AccessPointAttachmentProps:
+    def __init__(
+        self,
+        *,
+        name: builtins.str,
+        open_zfs_configuration: typing.Union[_IResolvable_da3f097b, typing.Union[CfnS3AccessPointAttachment.S3AccessPointOpenZFSConfigurationProperty, typing.Dict[builtins.str, typing.Any]]],
+        type: builtins.str,
+        s3_access_point: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnS3AccessPointAttachment.S3AccessPointProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnS3AccessPointAttachment``.
 
-        *FSx for Windows File Server file systems* - The amount of storage capacity that you can configure depends on the value that you set for ``StorageType`` as follows:
+        :param name: The name of the S3 access point attachment; also used for the name of the S3 access point.
+        :param open_zfs_configuration: The OpenZFSConfiguration of the S3 access point attachment.
+        :param type: The type of Amazon FSx volume that the S3 access point is attached to.
+        :param s3_access_point: The S3 access point configuration of the S3 access point attachment.
 
-        - For SSD storage, valid values are 32 GiB-65,536 GiB (64 TiB).
-        - For HDD storage, valid values are 2000 GiB-65,536 GiB (64 TiB).
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-s3accesspointattachment.html
+        :exampleMetadata: fixture=_generated
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-storagecapacity
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_fsx as fsx
+            
+            # policy: Any
+            
+            cfn_s3_access_point_attachment_props = fsx.CfnS3AccessPointAttachmentProps(
+                name="name",
+                open_zfs_configuration=fsx.CfnS3AccessPointAttachment.S3AccessPointOpenZFSConfigurationProperty(
+                    file_system_identity=fsx.CfnS3AccessPointAttachment.OpenZFSFileSystemIdentityProperty(
+                        posix_user=fsx.CfnS3AccessPointAttachment.OpenZFSPosixFileSystemUserProperty(
+                            gid=123,
+                            uid=123,
+            
+                            # the properties below are optional
+                            secondary_gids=[fsx.CfnS3AccessPointAttachment.FileSystemGIDProperty(
+                                gid=123
+                            )]
+                        ),
+                        type="type"
+                    ),
+                    volume_id="volumeId"
+                ),
+                type="type",
+            
+                # the properties below are optional
+                s3_access_point=fsx.CfnS3AccessPointAttachment.S3AccessPointProperty(
+                    alias="alias",
+                    policy=policy,
+                    resource_arn="resourceArn",
+                    vpc_configuration=fsx.CfnS3AccessPointAttachment.S3AccessPointVpcConfigurationProperty(
+                        vpc_id="vpcId"
+                    )
+                )
+            )
         '''
-        result = self._values.get("storage_capacity")
-        return typing.cast(typing.Optional[jsii.Number], result)
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__f8d86aefcd2904a1c36c865f774d6ff97130a2707963573cf5c4a4173e91ab0e)
+            check_type(argname="argument name", value=name, expected_type=type_hints["name"])
+            check_type(argname="argument open_zfs_configuration", value=open_zfs_configuration, expected_type=type_hints["open_zfs_configuration"])
+            check_type(argname="argument type", value=type, expected_type=type_hints["type"])
+            check_type(argname="argument s3_access_point", value=s3_access_point, expected_type=type_hints["s3_access_point"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "name": name,
+            "open_zfs_configuration": open_zfs_configuration,
+            "type": type,
+        }
+        if s3_access_point is not None:
+            self._values["s3_access_point"] = s3_access_point
 
     @builtins.property
-    def storage_type(self) -> typing.Optional[builtins.str]:
-        '''Sets the storage class for the file system that you're creating.
+    def name(self) -> builtins.str:
+        '''The name of the S3 access point attachment;
 
-        Valid values are ``SSD`` , ``HDD`` , and ``INTELLIGENT_TIERING`` .
+        also used for the name of the S3 access point.
 
-        - Set to ``SSD`` to use solid state drive storage. SSD is supported on all Windows, Lustre, ONTAP, and OpenZFS deployment types.
-        - Set to ``HDD`` to use hard disk drive storage, which is supported on ``SINGLE_AZ_2`` and ``MULTI_AZ_1`` Windows file system deployment types, and on ``PERSISTENT_1`` Lustre file system deployment types.
-        - Set to ``INTELLIGENT_TIERING`` to use fully elastic, intelligently-tiered storage. Intelligent-Tiering is only available for OpenZFS file systems with the Multi-AZ deployment type.
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-s3accesspointattachment.html#cfn-fsx-s3accesspointattachment-name
+        '''
+        result = self._values.get("name")
+        assert result is not None, "Required property 'name' is missing"
+        return typing.cast(builtins.str, result)
 
-        Default value is ``SSD`` . For more information, see `Storage type options <https://docs.aws.amazon.com/fsx/latest/WindowsGuide/optimize-fsx-costs.html#storage-type-options>`_ in the *FSx for Windows File Server User Guide* , `Multiple storage options <https://docs.aws.amazon.com/fsx/latest/LustreGuide/what-is.html#storage-options>`_ in the *FSx for Lustre User Guide* , and `Working with Intelligent-Tiering <https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/performance-intelligent-tiering>`_ in the *Amazon FSx for OpenZFS User Guide* .
+    @builtins.property
+    def open_zfs_configuration(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, CfnS3AccessPointAttachment.S3AccessPointOpenZFSConfigurationProperty]:
+        '''The OpenZFSConfiguration of the S3 access point attachment.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-storagetype
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-s3accesspointattachment.html#cfn-fsx-s3accesspointattachment-openzfsconfiguration
         '''
-        result = self._values.get("storage_type")
-        return typing.cast(typing.Optional[builtins.str], result)
+        result = self._values.get("open_zfs_configuration")
+        assert result is not None, "Required property 'open_zfs_configuration' is missing"
+        return typing.cast(typing.Union[_IResolvable_da3f097b, CfnS3AccessPointAttachment.S3AccessPointOpenZFSConfigurationProperty], result)
 
     @builtins.property
-    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
-        '''The tags to associate with the file system.
+    def type(self) -> builtins.str:
+        '''The type of Amazon FSx volume that the S3 access point is attached to.
 
-        For more information, see `Tagging your Amazon FSx resources <https://docs.aws.amazon.com/fsx/latest/LustreGuide/tag-resources.html>`_ in the *Amazon FSx for Lustre User Guide* .
-
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-tags
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-s3accesspointattachment.html#cfn-fsx-s3accesspointattachment-type
         '''
-        result = self._values.get("tags")
-        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
+        result = self._values.get("type")
+        assert result is not None, "Required property 'type' is missing"
+        return typing.cast(builtins.str, result)
 
     @builtins.property
-    def windows_configuration(
+    def s3_access_point(
         self,
-    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFileSystem.WindowsConfigurationProperty]]:
-        '''The configuration object for the Microsoft Windows file system you are creating.
-
-        This value is required if ``FileSystemType`` is set to ``WINDOWS`` .
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnS3AccessPointAttachment.S3AccessPointProperty]]:
+        '''The S3 access point configuration of the S3 access point attachment.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html#cfn-fsx-filesystem-windowsconfiguration
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-s3accesspointattachment.html#cfn-fsx-s3accesspointattachment-s3accesspoint
         '''
-        result = self._values.get("windows_configuration")
-        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFileSystem.WindowsConfigurationProperty]], result)
+        result = self._values.get("s3_access_point")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnS3AccessPointAttachment.S3AccessPointProperty]], result)
 
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
@@ -4170,12 +5121,12 @@ class CfnFileSystemProps:
         return not (rhs == self)
 
     def __repr__(self) -> str:
-        return "CfnFileSystemProps(%s)" % ", ".join(
+        return "CfnS3AccessPointAttachmentProps(%s)" % ", ".join(
             k + "=" + repr(v) for k, v in self._values.items()
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _ISnapshotRef_fbdde5f5, _ITaggable_36806126)
 class CfnSnapshot(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -4214,7 +5165,8 @@ class CfnSnapshot(
         volume_id: builtins.str,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::FSx::Snapshot``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name of the snapshot.
@@ -4283,6 +5235,12 @@ class CfnSnapshot(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="snapshotRef")
+    def snapshot_ref(self) -> _SnapshotReference_84fbb991:
+        '''A reference to a Snapshot resource.'''
+        return typing.cast(_SnapshotReference_84fbb991, jsii.get(self, "snapshotRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -4421,7 +5379,7 @@ class CfnSnapshotProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IStorageVirtualMachineRef_3a0f4396, _ITaggable_36806126)
 class CfnStorageVirtualMachine(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -4476,7 +5434,8 @@ class CfnStorageVirtualMachine(
         svm_admin_password: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::FSx::StorageVirtualMachine``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param file_system_id: Specifies the FSx for ONTAP file system on which to create the SVM.
@@ -4569,6 +5528,12 @@ class CfnStorageVirtualMachine(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="storageVirtualMachineRef")
+    def storage_virtual_machine_ref(self) -> _StorageVirtualMachineReference_27e496a6:
+        '''A reference to a StorageVirtualMachine resource.'''
+        return typing.cast(_StorageVirtualMachineReference_27e496a6, jsii.get(self, "storageVirtualMachineRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -5056,7 +6021,7 @@ class CfnStorageVirtualMachineProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IVolumeRef_7f52c3ee, _ITaggable_36806126)
 class CfnVolume(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -5182,7 +6147,8 @@ class CfnVolume(
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         volume_type: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::FSx::Volume``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name of the volume.
@@ -5281,6 +6247,12 @@ class CfnVolume(
         '''Tag Manager which manages the tags for this resource.'''
         return typing.cast(_TagManager_0a598cb3, jsii.get(self, "tags"))
 
+    @builtins.property
+    @jsii.member(jsii_name="volumeRef")
+    def volume_ref(self) -> _VolumeReference_ad7f96eb:
+        '''A reference to a Volume resource.'''
+        return typing.cast(_VolumeReference_ad7f96eb, jsii.get(self, "volumeRef"))
+
     @builtins.property
     @jsii.member(jsii_name="name")
     def name(self) -> builtins.str:
@@ -7387,7 +8359,7 @@ class FileSystemProps:
         storage_capacity_gib: jsii.Number,
         vpc: _IVpc_f30d5663,
         backup_id: typing.Optional[builtins.str] = None,
-        kms_key: typing.Optional[_IKey_5f11635f] = None,
+        kms_key: typing.Optional[_IKeyRef_d4fc6ef3] = None,
         removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
         security_group: typing.Optional[_ISecurityGroup_acf8a799] = None,
         storage_type: typing.Optional["StorageType"] = None,
@@ -7412,9 +8384,9 @@ class FileSystemProps:
             import aws_cdk as cdk
             from aws_cdk import aws_ec2 as ec2
             from aws_cdk import aws_fsx as fsx
-            from aws_cdk import aws_kms as kms
+            from aws_cdk.interfaces import aws_kms as interfaces_aws_kms
             
-            # key: kms.Key
+            # key_ref: interfaces_aws_kms.IKeyRef
             # security_group: ec2.SecurityGroup
             # vpc: ec2.Vpc
             
@@ -7424,7 +8396,7 @@ class FileSystemProps:
             
                 # the properties below are optional
                 backup_id="backupId",
-                kms_key=key,
+                kms_key=key_ref,
                 removal_policy=cdk.RemovalPolicy.DESTROY,
                 security_group=security_group,
                 storage_type=fsx.StorageType.SSD
@@ -7486,13 +8458,13 @@ class FileSystemProps:
         return typing.cast(typing.Optional[builtins.str], result)
 
     @builtins.property
-    def kms_key(self) -> typing.Optional[_IKey_5f11635f]:
+    def kms_key(self) -> typing.Optional[_IKeyRef_d4fc6ef3]:
         '''The KMS key used for encryption to protect your data at rest.
 
         :default: - the aws/fsx default KMS key for the AWS account being deployed into.
         '''
         result = self._values.get("kms_key")
-        return typing.cast(typing.Optional[_IKey_5f11635f], result)
+        return typing.cast(typing.Optional[_IKeyRef_d4fc6ef3], result)
 
     @builtins.property
     def removal_policy(self) -> typing.Optional[_RemovalPolicy_9f93c814]:
@@ -8023,7 +8995,7 @@ class LustreFileSystemProps(FileSystemProps):
         storage_capacity_gib: jsii.Number,
         vpc: _IVpc_f30d5663,
         backup_id: typing.Optional[builtins.str] = None,
-        kms_key: typing.Optional[_IKey_5f11635f] = None,
+        kms_key: typing.Optional[_IKeyRef_d4fc6ef3] = None,
         removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
         security_group: typing.Optional[_ISecurityGroup_acf8a799] = None,
         storage_type: typing.Optional["StorageType"] = None,
@@ -8133,13 +9105,13 @@ class LustreFileSystemProps(FileSystemProps):
         return typing.cast(typing.Optional[builtins.str], result)
 
     @builtins.property
-    def kms_key(self) -> typing.Optional[_IKey_5f11635f]:
+    def kms_key(self) -> typing.Optional[_IKeyRef_d4fc6ef3]:
         '''The KMS key used for encryption to protect your data at rest.
 
         :default: - the aws/fsx default KMS key for the AWS account being deployed into.
         '''
         result = self._values.get("kms_key")
-        return typing.cast(typing.Optional[_IKey_5f11635f], result)
+        return typing.cast(typing.Optional[_IKeyRef_d4fc6ef3], result)
 
     @builtins.property
     def removal_policy(self) -> typing.Optional[_RemovalPolicy_9f93c814]:
@@ -8525,7 +9497,7 @@ class LustreFileSystem(
         storage_capacity_gib: jsii.Number,
         vpc: _IVpc_f30d5663,
         backup_id: typing.Optional[builtins.str] = None,
-        kms_key: typing.Optional[_IKey_5f11635f] = None,
+        kms_key: typing.Optional[_IKeyRef_d4fc6ef3] = None,
         removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
         security_group: typing.Optional[_ISecurityGroup_acf8a799] = None,
         storage_type: typing.Optional[StorageType] = None,
@@ -8633,6 +9605,8 @@ __all__ = [
     "CfnDataRepositoryAssociationProps",
     "CfnFileSystem",
     "CfnFileSystemProps",
+    "CfnS3AccessPointAttachment",
+    "CfnS3AccessPointAttachmentProps",
     "CfnSnapshot",
     "CfnSnapshotProps",
     "CfnStorageVirtualMachine",
@@ -8775,6 +9749,7 @@ def _typecheckingstub__2d13764c3dcb8d96799af4fa191d042ff4511c33cfd1aecbf235dded3
     file_system_type_version: typing.Optional[builtins.str] = None,
     kms_key_id: typing.Optional[builtins.str] = None,
     lustre_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnFileSystem.LustreConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    network_type: typing.Optional[builtins.str] = None,
     ontap_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnFileSystem.OntapConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     open_zfs_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnFileSystem.OpenZFSConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -8834,6 +9809,12 @@ def _typecheckingstub__8646d19693a6f9abdd169bfa6ea6d4e784eba3f5391bff175f38918b4
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__7799a7898c1d78dcdd2f9531854e7ff35a8f4a27f4de33e706134e2fa35387ac(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__bc9b2f53e3a613c4a5e71936700bde6bac2b8c2691534dac7d5a5ce18f7e0687(
     value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFileSystem.OntapConfigurationProperty]],
 ) -> None:
@@ -8953,6 +9934,7 @@ def _typecheckingstub__0edc01444089461fa7f6973acca3d475ebd67f0229380856776cb1bcb
     daily_automatic_backup_start_time: typing.Optional[builtins.str] = None,
     disk_iops_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnFileSystem.DiskIopsConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     endpoint_ip_address_range: typing.Optional[builtins.str] = None,
+    endpoint_ipv6_address_range: typing.Optional[builtins.str] = None,
     fsx_admin_password: typing.Optional[builtins.str] = None,
     ha_pairs: typing.Optional[jsii.Number] = None,
     preferred_subnet_id: typing.Optional[builtins.str] = None,
@@ -8973,6 +9955,7 @@ def _typecheckingstub__5472f29690b088eacdf6c6853ffd8b23cd15c760dc30d812107be1280
     daily_automatic_backup_start_time: typing.Optional[builtins.str] = None,
     disk_iops_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnFileSystem.DiskIopsConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     endpoint_ip_address_range: typing.Optional[builtins.str] = None,
+    endpoint_ipv6_address_range: typing.Optional[builtins.str] = None,
     options: typing.Optional[typing.Sequence[builtins.str]] = None,
     preferred_subnet_id: typing.Optional[builtins.str] = None,
     read_cache_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnFileSystem.ReadCacheConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -9051,6 +10034,7 @@ def _typecheckingstub__cc6cf655096c0830614c2b73c7ebf907b07fc70f50859b1aa0f76bbf6
     file_system_type_version: typing.Optional[builtins.str] = None,
     kms_key_id: typing.Optional[builtins.str] = None,
     lustre_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnFileSystem.LustreConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    network_type: typing.Optional[builtins.str] = None,
     ontap_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnFileSystem.OntapConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     open_zfs_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnFileSystem.OpenZFSConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -9062,6 +10046,113 @@ def _typecheckingstub__cc6cf655096c0830614c2b73c7ebf907b07fc70f50859b1aa0f76bbf6
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__f51e0b107c6c6ca8bc284dbcf4013f6c7bcdd088cb084476fdf615b4d8ae257e(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    name: builtins.str,
+    open_zfs_configuration: typing.Union[_IResolvable_da3f097b, typing.Union[CfnS3AccessPointAttachment.S3AccessPointOpenZFSConfigurationProperty, typing.Dict[builtins.str, typing.Any]]],
+    type: builtins.str,
+    s3_access_point: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnS3AccessPointAttachment.S3AccessPointProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__6e021f2b2cc052b241526f0c8b04451cdbb773840ed5e597d710011b7885f25f(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__e4764700463d52298286c209b2ab565142140f7bfb04556d307ca9bd56430fb2(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__644edd6bd850880f5ebd47e103e56e49b7d7f21e620f2807e12dac453933e59d(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__0756a73fef71599ffefeead45c6d0ea227439b511cdc73a360780b4f4c0df186(
+    value: typing.Union[_IResolvable_da3f097b, CfnS3AccessPointAttachment.S3AccessPointOpenZFSConfigurationProperty],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__ece88a5ab6d3a69d75415d92fc3eea5b9fd91186f1a15239e5ec10f6c6c0005a(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__1588dcc78f8354bc56e434d157b8dadab331295e3cbf0c065b7bd4b4b793aaa0(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnS3AccessPointAttachment.S3AccessPointProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__72efd25b3b6057030d910de35b2f8e4104cb66dc72f89dc8ebb3b89daaf6a69f(
+    *,
+    gid: jsii.Number,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__af3bbbb456f8fdedf7c641c4786d89bf08acb663687e1b91f1ffdb83ab9819cb(
+    *,
+    posix_user: typing.Union[_IResolvable_da3f097b, typing.Union[CfnS3AccessPointAttachment.OpenZFSPosixFileSystemUserProperty, typing.Dict[builtins.str, typing.Any]]],
+    type: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__3decc490fdc822be6603dab799c80c7e004416dbd58cc34ea290fa556e81be39(
+    *,
+    gid: jsii.Number,
+    uid: jsii.Number,
+    secondary_gids: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnS3AccessPointAttachment.FileSystemGIDProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__19e4ea8fd55e864f4fe150ca7ce6a9a2838595c2d032b53647f2917e1f00ccfa(
+    *,
+    file_system_identity: typing.Union[_IResolvable_da3f097b, typing.Union[CfnS3AccessPointAttachment.OpenZFSFileSystemIdentityProperty, typing.Dict[builtins.str, typing.Any]]],
+    volume_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__f4a6a2c709cd1951841b5d405e10b97412387430297e85aa1495d3aab1b70367(
+    *,
+    alias: typing.Optional[builtins.str] = None,
+    policy: typing.Any = None,
+    resource_arn: typing.Optional[builtins.str] = None,
+    vpc_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnS3AccessPointAttachment.S3AccessPointVpcConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__ca5b9e5f42caf136a78ce4c94fb03a42b36504167d07de97e63171ff15aab81d(
+    *,
+    vpc_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__f8d86aefcd2904a1c36c865f774d6ff97130a2707963573cf5c4a4173e91ab0e(
+    *,
+    name: builtins.str,
+    open_zfs_configuration: typing.Union[_IResolvable_da3f097b, typing.Union[CfnS3AccessPointAttachment.S3AccessPointOpenZFSConfigurationProperty, typing.Dict[builtins.str, typing.Any]]],
+    type: builtins.str,
+    s3_access_point: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnS3AccessPointAttachment.S3AccessPointProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__9d5d4adee5d5cd344131498bc7092a1109dbe23b110d78c712b65bf1439e1c88(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
@@ -9423,7 +10514,7 @@ def _typecheckingstub__53f2e92923bf875c7e108f12d87a8f496daa12a3810536a41e896037f
     storage_capacity_gib: jsii.Number,
     vpc: _IVpc_f30d5663,
     backup_id: typing.Optional[builtins.str] = None,
-    kms_key: typing.Optional[_IKey_5f11635f] = None,
+    kms_key: typing.Optional[_IKeyRef_d4fc6ef3] = None,
     removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
     security_group: typing.Optional[_ISecurityGroup_acf8a799] = None,
     storage_type: typing.Optional[StorageType] = None,
@@ -9454,7 +10545,7 @@ def _typecheckingstub__4a492bedf6926d6b61f8888b09c8516deeb8bda6c3b965e000434ef73
     storage_capacity_gib: jsii.Number,
     vpc: _IVpc_f30d5663,
     backup_id: typing.Optional[builtins.str] = None,
-    kms_key: typing.Optional[_IKey_5f11635f] = None,
+    kms_key: typing.Optional[_IKeyRef_d4fc6ef3] = None,
     removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
     security_group: typing.Optional[_ISecurityGroup_acf8a799] = None,
     storage_type: typing.Optional[StorageType] = None,
@@ -9496,7 +10587,7 @@ def _typecheckingstub__fb0a1c17b53cef80f7d054c1b0c4d50733434d66dd0658819e0a58df8
     storage_capacity_gib: jsii.Number,
     vpc: _IVpc_f30d5663,
     backup_id: typing.Optional[builtins.str] = None,
-    kms_key: typing.Optional[_IKey_5f11635f] = None,
+    kms_key: typing.Optional[_IKeyRef_d4fc6ef3] = None,
     removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
     security_group: typing.Optional[_ISecurityGroup_acf8a799] = None,
     storage_type: typing.Optional[StorageType] = None,
@@ -9514,3 +10605,6 @@ def _typecheckingstub__09e9dff8e14ff81d8a495f07b5f7c6e2a9d756a63b5d283b892189cdc
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IFileSystem]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])