aws-cdk-lib 2.210.0__py3-none-any.whl → 2.211.0__py3-none-any.whl

aws_cdk/aws_ec2/__init__.py

@@ -1212,6 +1212,19 @@ ec2.InterfaceVpcEndpoint(self, "VPC Endpoint",
 )
 ```
 
+For cross-region VPC endpoints, specify the `serviceRegion` parameter:
+
+```python
+# vpc: ec2.Vpc
+
+
+ec2.InterfaceVpcEndpoint(self, "CrossRegionEndpoint",
+    vpc=vpc,
+    service=ec2.InterfaceVpcEndpointService("com.amazonaws.vpce.us-east-1.vpce-svc-123456", 443),
+    service_region="us-east-1"
+)
+```
+
 #### Security groups for interface VPC endpoints
 
 By default, interface VPC endpoints create a new security group and all traffic to the endpoint from within the VPC will be automatically allowed.
@@ -12267,7 +12280,7 @@ class CfnEC2Fleet(
             '''Describes a block device for an EBS volume.
 
             :param delete_on_termination: Indicates whether the EBS volume is deleted on instance termination. For more information, see `Preserving Amazon EBS volumes on instance termination <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/terminating-instances.html#preserving-volumes-on-termination>`_ in the *Amazon EC2 User Guide* .
-            :param encrypted: Indicates whether the encryption state of an EBS volume is changed while being restored from a backing snapshot. The effect of setting the encryption state to ``true`` depends on the volume origin (new or from a snapshot), starting encryption state, ownership, and whether encryption by default is enabled. For more information, see `Amazon EBS encryption <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption.html#encryption-parameters>`_ in the *Amazon EBS User Guide* . In no case can you remove encryption from an encrypted volume. Encrypted volumes can only be attached to instances that support Amazon EBS encryption. For more information, see `Supported instance types <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption-requirements.html#ebs-encryption_supported_instances>`_ . This parameter is not returned by ``DescribeImageAttribute`` . For ``CreateImage`` and ``RegisterImage`` , whether you can include this parameter, and the allowed values differ depending on the type of block device mapping you are creating. - If you are creating a block device mapping for a *new (empty) volume* , you can include this parameter, and specify either ``true`` for an encrypted volume, or ``false`` for an unencrypted volume. If you omit this parameter, it defaults to ``false`` (unencrypted). - If you are creating a block device mapping from an *existing encrypted or unencrypted snapshot* , you must omit this parameter. If you include this parameter, the request will fail, regardless of the value that you specify. - If you are creating a block device mapping from an *existing unencrypted volume* , you can include this parameter, but you must specify ``false`` . If you specify ``true`` , the request will fail. In this case, we recommend that you omit the parameter. - If you are creating a block device mapping from an *existing encrypted volume* , you can include this parameter, and specify either ``true`` or ``false`` . However, if you specify ``false`` , the parameter is ignored and the block device mapping is always encrypted. In this case, we recommend that you omit the parameter.
+            :param encrypted: Indicates whether the encryption state of an EBS volume is changed while being restored from a backing snapshot. The effect of setting the encryption state to ``true`` depends on the volume origin (new or from a snapshot), starting encryption state, ownership, and whether encryption by default is enabled. For more information, see `Amazon EBS encryption <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption.html#encryption-parameters>`_ in the *Amazon EBS User Guide* . In no case can you remove encryption from an encrypted volume. Encrypted volumes can only be attached to instances that support Amazon EBS encryption. For more information, see `Supported instance types <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption-requirements.html#ebs-encryption_supported_instances>`_ . - If you are creating a block device mapping for a *new (empty) volume* , you can include this parameter, and specify either ``true`` for an encrypted volume, or ``false`` for an unencrypted volume. If you omit this parameter, it defaults to ``false`` (unencrypted). - If you are creating a block device mapping from an *existing encrypted or unencrypted snapshot* , you must omit this parameter. If you include this parameter, the request will fail, regardless of the value that you specify. - If you are creating a block device mapping from an *existing unencrypted volume* , you can include this parameter, but you must specify ``false`` . If you specify ``true`` , the request will fail. In this case, we recommend that you omit the parameter. - If you are creating a block device mapping from an *existing encrypted volume* , you can include this parameter, and specify either ``true`` or ``false`` . However, if you specify ``false`` , the parameter is ignored and the block device mapping is always encrypted. In this case, we recommend that you omit the parameter.
             :param iops: The number of I/O operations per second (IOPS). For ``gp3`` , ``io1`` , and ``io2`` volumes, this represents the number of IOPS that are provisioned for the volume. For ``gp2`` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. The following are the supported values for each volume type: - ``gp3`` : 3,000 - 16,000 IOPS - ``io1`` : 100 - 64,000 IOPS - ``io2`` : 100 - 256,000 IOPS For ``io2`` volumes, you can achieve up to 256,000 IOPS on `instances built on the Nitro System <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html#ec2-nitro-instances>`_ . On other instances, you can achieve performance up to 32,000 IOPS. This parameter is required for ``io1`` and ``io2`` volumes. The default for ``gp3`` volumes is 3,000 IOPS.
             :param kms_key_id: Identifier (key ID, key alias, key ARN, or alias ARN) of the customer managed KMS key to use for EBS encryption. This parameter is only supported on ``BlockDeviceMapping`` objects called by `RunInstances <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html>`_ , `RequestSpotFleet <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RequestSpotFleet.html>`_ , and `RequestSpotInstances <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RequestSpotInstances.html>`_ .
             :param snapshot_id: The ID of the snapshot.
@@ -12343,10 +12356,6 @@ class CfnEC2Fleet(
 
             Encrypted volumes can only be attached to instances that support Amazon EBS encryption. For more information, see `Supported instance types <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption-requirements.html#ebs-encryption_supported_instances>`_ .
 
-            This parameter is not returned by ``DescribeImageAttribute`` .
-
-            For ``CreateImage`` and ``RegisterImage`` , whether you can include this parameter, and the allowed values differ depending on the type of block device mapping you are creating.
-
             - If you are creating a block device mapping for a *new (empty) volume* , you can include this parameter, and specify either ``true`` for an encrypted volume, or ``false`` for an unencrypted volume. If you omit this parameter, it defaults to ``false`` (unencrypted).
             - If you are creating a block device mapping from an *existing encrypted or unencrypted snapshot* , you must omit this parameter. If you include this parameter, the request will fail, regardless of the value that you specify.
             - If you are creating a block device mapping from an *existing unencrypted volume* , you can include this parameter, but you must specify ``false`` . If you specify ``true`` , the request will fail. In this case, we recommend that you omit the parameter.
@@ -18056,7 +18065,7 @@ class CfnIPAM(
         :param default_resource_discovery_organizational_unit_exclusions: If your IPAM is integrated with AWS Organizations, you can exclude an `organizational unit (OU) <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#organizationalunit>`_ from being managed by IPAM. When you exclude an OU, IPAM will not manage the IP addresses in accounts in that OU. For more information, see `Exclude organizational units from IPAM <https://docs.aws.amazon.com/vpc/latest/ipam/exclude-ous.html>`_ in the *Amazon Virtual Private Cloud IP Address Manager User Guide* .
         :param description: The description for the IPAM.
         :param enable_private_gua: Enable this option to use your own GUA ranges as private IPv6 addresses. This option is disabled by default.
-        :param metered_account: A metered account is an account that is charged for active IP addresses managed in IPAM.
+        :param metered_account: A metered account is an AWS account that is charged for active IP addresses managed in IPAM. For more information, see `Enable cost distribution <https://docs.aws.amazon.com/vpc/latest/ipam/ipam-enable-cost-distro.html>`_ in the *Amazon VPC IPAM User Guide* . Possible values: - ``ipam-owner`` (default): The AWS account which owns the IPAM is charged for all active IP addresses managed in IPAM. - ``resource-owner`` : The AWS account that owns the IP address is charged for the active IP address.
         :param operating_regions: The operating Regions for an IPAM. Operating Regions are AWS Regions where the IPAM is allowed to manage IP address CIDRs. IPAM only discovers and monitors resources in the AWS Regions you select as operating Regions. For more information about operating Regions, see `Create an IPAM <https://docs.aws.amazon.com//vpc/latest/ipam/create-ipam.html>`_ in the *Amazon VPC IPAM User Guide* .
         :param tags: The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value. For example, to find all resources that have a tag with the key ``Owner`` and the value ``TeamA`` , specify ``tag:Owner`` for the filter name and ``TeamA`` for the filter value.
         :param tier: IPAM is offered in a Free Tier and an Advanced Tier. For more information about the features available in each tier and the costs associated with the tiers, see the `VPC IPAM product pricing page <https://docs.aws.amazon.com//vpc/pricing/>`_ .
@@ -18242,7 +18251,7 @@ class CfnIPAM(
     @builtins.property
     @jsii.member(jsii_name="meteredAccount")
     def metered_account(self) -> typing.Optional[builtins.str]:
-        '''A metered account is an account that is charged for active IP addresses managed in IPAM.'''
+        '''A metered account is an AWS account that is charged for active IP addresses managed in IPAM.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "meteredAccount"))
 
     @metered_account.setter
@@ -19959,7 +19968,7 @@ class CfnIPAMProps:
         :param default_resource_discovery_organizational_unit_exclusions: If your IPAM is integrated with AWS Organizations, you can exclude an `organizational unit (OU) <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#organizationalunit>`_ from being managed by IPAM. When you exclude an OU, IPAM will not manage the IP addresses in accounts in that OU. For more information, see `Exclude organizational units from IPAM <https://docs.aws.amazon.com/vpc/latest/ipam/exclude-ous.html>`_ in the *Amazon Virtual Private Cloud IP Address Manager User Guide* .
         :param description: The description for the IPAM.
         :param enable_private_gua: Enable this option to use your own GUA ranges as private IPv6 addresses. This option is disabled by default.
-        :param metered_account: A metered account is an account that is charged for active IP addresses managed in IPAM.
+        :param metered_account: A metered account is an AWS account that is charged for active IP addresses managed in IPAM. For more information, see `Enable cost distribution <https://docs.aws.amazon.com/vpc/latest/ipam/ipam-enable-cost-distro.html>`_ in the *Amazon VPC IPAM User Guide* . Possible values: - ``ipam-owner`` (default): The AWS account which owns the IPAM is charged for all active IP addresses managed in IPAM. - ``resource-owner`` : The AWS account that owns the IP address is charged for the active IP address.
         :param operating_regions: The operating Regions for an IPAM. Operating Regions are AWS Regions where the IPAM is allowed to manage IP address CIDRs. IPAM only discovers and monitors resources in the AWS Regions you select as operating Regions. For more information about operating Regions, see `Create an IPAM <https://docs.aws.amazon.com//vpc/latest/ipam/create-ipam.html>`_ in the *Amazon VPC IPAM User Guide* .
         :param tags: The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value. For example, to find all resources that have a tag with the key ``Owner`` and the value ``TeamA`` , specify ``tag:Owner`` for the filter name and ``TeamA`` for the filter value.
         :param tier: IPAM is offered in a Free Tier and an Advanced Tier. For more information about the features available in each tier and the costs associated with the tiers, see the `VPC IPAM product pricing page <https://docs.aws.amazon.com//vpc/pricing/>`_ .
@@ -20050,7 +20059,14 @@ class CfnIPAMProps:
 
     @builtins.property
     def metered_account(self) -> typing.Optional[builtins.str]:
-        '''A metered account is an account that is charged for active IP addresses managed in IPAM.
+        '''A metered account is an AWS account that is charged for active IP addresses managed in IPAM.
+
+        For more information, see `Enable cost distribution <https://docs.aws.amazon.com/vpc/latest/ipam/ipam-enable-cost-distro.html>`_ in the *Amazon VPC IPAM User Guide* .
+
+        Possible values:
+
+        - ``ipam-owner`` (default): The AWS account which owns the IPAM is charged for all active IP addresses managed in IPAM.
+        - ``resource-owner`` : The AWS account that owns the IP address is charged for the active IP address.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipam.html#cfn-ec2-ipam-meteredaccount
         '''
@@ -29118,6 +29134,7 @@ class CfnLaunchTemplate(
                         delete_on_termination=False,
                         description="description",
                         device_index=123,
+                        ena_queue_count=123,
                         ena_srd_specification=ec2.CfnLaunchTemplate.EnaSrdSpecificationProperty(
                             ena_srd_enabled=False,
                             ena_srd_udp_specification=ec2.CfnLaunchTemplate.EnaSrdUdpSpecificationProperty(
@@ -30507,6 +30524,7 @@ class CfnLaunchTemplate(
             "delete_on_termination": "deleteOnTermination",
             "description": "description",
             "device_index": "deviceIndex",
+            "ena_queue_count": "enaQueueCount",
             "ena_srd_specification": "enaSrdSpecification",
             "groups": "groups",
             "interface_type": "interfaceType",
@@ -30535,6 +30553,7 @@ class CfnLaunchTemplate(
             delete_on_termination: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
             description: typing.Optional[builtins.str] = None,
             device_index: typing.Optional[jsii.Number] = None,
+            ena_queue_count: typing.Optional[jsii.Number] = None,
             ena_srd_specification: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnLaunchTemplate.EnaSrdSpecificationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             groups: typing.Optional[typing.Sequence[builtins.str]] = None,
             interface_type: typing.Optional[builtins.str] = None,
@@ -30562,6 +30581,7 @@ class CfnLaunchTemplate(
             :param delete_on_termination: Indicates whether the network interface is deleted when the instance is terminated.
             :param description: A description for the network interface.
             :param device_index: The device index for the network interface attachment. The primary network interface has a device index of 0. If the network interface is of type ``interface`` , you must specify a device index. If you create a launch template that includes secondary network interfaces but no primary network interface, and you specify it using the ``LaunchTemplate`` property of ``AWS::EC2::Instance`` , then you must include a primary network interface using the ``NetworkInterfaces`` property of ``AWS::EC2::Instance`` .
+            :param ena_queue_count: 
             :param ena_srd_specification: The ENA Express configuration for the network interface.
             :param groups: The IDs of one or more security groups.
             :param interface_type: The type of network interface. To create an Elastic Fabric Adapter (EFA), specify ``efa`` or ``efa`` . For more information, see `Elastic Fabric Adapter for AI/ML and HPC workloads on Amazon EC2 <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/efa.html>`_ in the *Amazon EC2 User Guide* . If you are not creating an EFA, specify ``interface`` or omit this parameter. If you specify ``efa-only`` , do not assign any IP addresses to the network interface. EFA-only network interfaces do not support IP addresses. Valid values: ``interface`` | ``efa`` | ``efa-only``
@@ -30599,6 +30619,7 @@ class CfnLaunchTemplate(
                     delete_on_termination=False,
                     description="description",
                     device_index=123,
+                    ena_queue_count=123,
                     ena_srd_specification=ec2.CfnLaunchTemplate.EnaSrdSpecificationProperty(
                         ena_srd_enabled=False,
                         ena_srd_udp_specification=ec2.CfnLaunchTemplate.EnaSrdUdpSpecificationProperty(
@@ -30639,6 +30660,7 @@ class CfnLaunchTemplate(
                 check_type(argname="argument delete_on_termination", value=delete_on_termination, expected_type=type_hints["delete_on_termination"])
                 check_type(argname="argument description", value=description, expected_type=type_hints["description"])
                 check_type(argname="argument device_index", value=device_index, expected_type=type_hints["device_index"])
+                check_type(argname="argument ena_queue_count", value=ena_queue_count, expected_type=type_hints["ena_queue_count"])
                 check_type(argname="argument ena_srd_specification", value=ena_srd_specification, expected_type=type_hints["ena_srd_specification"])
                 check_type(argname="argument groups", value=groups, expected_type=type_hints["groups"])
                 check_type(argname="argument interface_type", value=interface_type, expected_type=type_hints["interface_type"])
@@ -30668,6 +30690,8 @@ class CfnLaunchTemplate(
                 self._values["description"] = description
             if device_index is not None:
                 self._values["device_index"] = device_index
+            if ena_queue_count is not None:
+                self._values["ena_queue_count"] = ena_queue_count
             if ena_srd_specification is not None:
                 self._values["ena_srd_specification"] = ena_srd_specification
             if groups is not None:
@@ -30771,6 +30795,14 @@ class CfnLaunchTemplate(
             result = self._values.get("device_index")
             return typing.cast(typing.Optional[jsii.Number], result)
 
+        @builtins.property
+        def ena_queue_count(self) -> typing.Optional[jsii.Number]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-networkinterface.html#cfn-ec2-launchtemplate-networkinterface-enaqueuecount
+            '''
+            result = self._values.get("ena_queue_count")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
         @builtins.property
         def ena_srd_specification(
             self,
@@ -33088,9 +33120,6 @@ class CfnNatGateway(
         from aws_cdk import aws_ec2 as ec2
         
         cfn_nat_gateway = ec2.CfnNatGateway(self, "MyCfnNatGateway",
-            subnet_id="subnetId",
-        
-            # the properties below are optional
             allocation_id="allocationId",
             connectivity_type="connectivityType",
             max_drain_duration_seconds=123,
@@ -33098,6 +33127,7 @@ class CfnNatGateway(
             secondary_allocation_ids=["secondaryAllocationIds"],
             secondary_private_ip_address_count=123,
             secondary_private_ip_addresses=["secondaryPrivateIpAddresses"],
+            subnet_id="subnetId",
             tags=[CfnTag(
                 key="key",
                 value="value"
@@ -33110,7 +33140,6 @@ class CfnNatGateway(
         scope: _constructs_77d1e7e8.Construct,
         id: builtins.str,
         *,
-        subnet_id: builtins.str,
         allocation_id: typing.Optional[builtins.str] = None,
         connectivity_type: typing.Optional[builtins.str] = None,
         max_drain_duration_seconds: typing.Optional[jsii.Number] = None,
@@ -33118,12 +33147,12 @@ class CfnNatGateway(
         secondary_allocation_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
         secondary_private_ip_address_count: typing.Optional[jsii.Number] = None,
         secondary_private_ip_addresses: typing.Optional[typing.Sequence[builtins.str]] = None,
+        subnet_id: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param subnet_id: The ID of the subnet in which the NAT gateway is located.
         :param allocation_id: [Public NAT gateway only] The allocation ID of the Elastic IP address that's associated with the NAT gateway. This property is required for a public NAT gateway and cannot be specified with a private NAT gateway.
         :param connectivity_type: Indicates whether the NAT gateway supports public or private connectivity. The default is public connectivity.
         :param max_drain_duration_seconds: The maximum amount of time to wait (in seconds) before forcibly releasing the IP addresses if connections are still in progress. Default value is 350 seconds.
@@ -33131,6 +33160,7 @@ class CfnNatGateway(
         :param secondary_allocation_ids: Secondary EIP allocation IDs. For more information, see `Create a NAT gateway <https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateway-working-with.html>`_ in the *Amazon VPC User Guide* .
         :param secondary_private_ip_address_count: [Private NAT gateway only] The number of secondary private IPv4 addresses you want to assign to the NAT gateway. For more information about secondary addresses, see `Create a NAT gateway <https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-creating>`_ in the *Amazon Virtual Private Cloud User Guide* . ``SecondaryPrivateIpAddressCount`` and ``SecondaryPrivateIpAddresses`` cannot be set at the same time.
         :param secondary_private_ip_addresses: Secondary private IPv4 addresses. For more information about secondary addresses, see `Create a NAT gateway <https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-creating>`_ in the *Amazon Virtual Private Cloud User Guide* . ``SecondaryPrivateIpAddressCount`` and ``SecondaryPrivateIpAddresses`` cannot be set at the same time.
+        :param subnet_id: The ID of the subnet in which the NAT gateway is located.
         :param tags: The tags for the NAT gateway.
         '''
         if __debug__:
@@ -33138,7 +33168,6 @@ class CfnNatGateway(
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = CfnNatGatewayProps(
-            subnet_id=subnet_id,
             allocation_id=allocation_id,
             connectivity_type=connectivity_type,
             max_drain_duration_seconds=max_drain_duration_seconds,
@@ -33146,6 +33175,7 @@ class CfnNatGateway(
             secondary_allocation_ids=secondary_allocation_ids,
             secondary_private_ip_address_count=secondary_private_ip_address_count,
             secondary_private_ip_addresses=secondary_private_ip_addresses,
+            subnet_id=subnet_id,
             tags=tags,
         )
 
@@ -33201,19 +33231,6 @@ class CfnNatGateway(
         '''Tag Manager which manages the tags for this resource.'''
         return typing.cast(_TagManager_0a598cb3, jsii.get(self, "tags"))
 
-    @builtins.property
-    @jsii.member(jsii_name="subnetId")
-    def subnet_id(self) -> builtins.str:
-        '''The ID of the subnet in which the NAT gateway is located.'''
-        return typing.cast(builtins.str, jsii.get(self, "subnetId"))
-
-    @subnet_id.setter
-    def subnet_id(self, value: builtins.str) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__5ea5b3187b853cfa340b72b2a61dc1a1d7320459e754c328fc7013f403d31c74)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "subnetId", value) # pyright: ignore[reportArgumentType]
-
     @builtins.property
     @jsii.member(jsii_name="allocationId")
     def allocation_id(self) -> typing.Optional[builtins.str]:
@@ -33316,6 +33333,19 @@ class CfnNatGateway(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "secondaryPrivateIpAddresses", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="subnetId")
+    def subnet_id(self) -> typing.Optional[builtins.str]:
+        '''The ID of the subnet in which the NAT gateway is located.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "subnetId"))
+
+    @subnet_id.setter
+    def subnet_id(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__5ea5b3187b853cfa340b72b2a61dc1a1d7320459e754c328fc7013f403d31c74)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "subnetId", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
     def tags_raw(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
@@ -33334,7 +33364,6 @@ class CfnNatGateway(
     jsii_type="aws-cdk-lib.aws_ec2.CfnNatGatewayProps",
     jsii_struct_bases=[],
     name_mapping={
-        "subnet_id": "subnetId",
         "allocation_id": "allocationId",
         "connectivity_type": "connectivityType",
         "max_drain_duration_seconds": "maxDrainDurationSeconds",
@@ -33342,6 +33371,7 @@ class CfnNatGateway(
         "secondary_allocation_ids": "secondaryAllocationIds",
         "secondary_private_ip_address_count": "secondaryPrivateIpAddressCount",
         "secondary_private_ip_addresses": "secondaryPrivateIpAddresses",
+        "subnet_id": "subnetId",
         "tags": "tags",
     },
 )
@@ -33349,7 +33379,6 @@ class CfnNatGatewayProps:
     def __init__(
         self,
         *,
-        subnet_id: builtins.str,
         allocation_id: typing.Optional[builtins.str] = None,
         connectivity_type: typing.Optional[builtins.str] = None,
         max_drain_duration_seconds: typing.Optional[jsii.Number] = None,
@@ -33357,11 +33386,11 @@ class CfnNatGatewayProps:
         secondary_allocation_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
         secondary_private_ip_address_count: typing.Optional[jsii.Number] = None,
         secondary_private_ip_addresses: typing.Optional[typing.Sequence[builtins.str]] = None,
+        subnet_id: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''Properties for defining a ``CfnNatGateway``.
 
-        :param subnet_id: The ID of the subnet in which the NAT gateway is located.
         :param allocation_id: [Public NAT gateway only] The allocation ID of the Elastic IP address that's associated with the NAT gateway. This property is required for a public NAT gateway and cannot be specified with a private NAT gateway.
         :param connectivity_type: Indicates whether the NAT gateway supports public or private connectivity. The default is public connectivity.
         :param max_drain_duration_seconds: The maximum amount of time to wait (in seconds) before forcibly releasing the IP addresses if connections are still in progress. Default value is 350 seconds.
@@ -33369,6 +33398,7 @@ class CfnNatGatewayProps:
         :param secondary_allocation_ids: Secondary EIP allocation IDs. For more information, see `Create a NAT gateway <https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateway-working-with.html>`_ in the *Amazon VPC User Guide* .
         :param secondary_private_ip_address_count: [Private NAT gateway only] The number of secondary private IPv4 addresses you want to assign to the NAT gateway. For more information about secondary addresses, see `Create a NAT gateway <https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-creating>`_ in the *Amazon Virtual Private Cloud User Guide* . ``SecondaryPrivateIpAddressCount`` and ``SecondaryPrivateIpAddresses`` cannot be set at the same time.
         :param secondary_private_ip_addresses: Secondary private IPv4 addresses. For more information about secondary addresses, see `Create a NAT gateway <https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-creating>`_ in the *Amazon Virtual Private Cloud User Guide* . ``SecondaryPrivateIpAddressCount`` and ``SecondaryPrivateIpAddresses`` cannot be set at the same time.
+        :param subnet_id: The ID of the subnet in which the NAT gateway is located.
         :param tags: The tags for the NAT gateway.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-natgateway.html
@@ -33381,9 +33411,6 @@ class CfnNatGatewayProps:
             from aws_cdk import aws_ec2 as ec2
             
             cfn_nat_gateway_props = ec2.CfnNatGatewayProps(
-                subnet_id="subnetId",
-            
-                # the properties below are optional
                 allocation_id="allocationId",
                 connectivity_type="connectivityType",
                 max_drain_duration_seconds=123,
@@ -33391,6 +33418,7 @@ class CfnNatGatewayProps:
                 secondary_allocation_ids=["secondaryAllocationIds"],
                 secondary_private_ip_address_count=123,
                 secondary_private_ip_addresses=["secondaryPrivateIpAddresses"],
+                subnet_id="subnetId",
                 tags=[CfnTag(
                     key="key",
                     value="value"
@@ -33399,7 +33427,6 @@ class CfnNatGatewayProps:
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__1aba83edf7a8e3f14e1d4f9ca76c7049f7f7c569d2ffb43bcad65b330ee9a581)
-            check_type(argname="argument subnet_id", value=subnet_id, expected_type=type_hints["subnet_id"])
             check_type(argname="argument allocation_id", value=allocation_id, expected_type=type_hints["allocation_id"])
             check_type(argname="argument connectivity_type", value=connectivity_type, expected_type=type_hints["connectivity_type"])
             check_type(argname="argument max_drain_duration_seconds", value=max_drain_duration_seconds, expected_type=type_hints["max_drain_duration_seconds"])
@@ -33407,10 +33434,9 @@ class CfnNatGatewayProps:
             check_type(argname="argument secondary_allocation_ids", value=secondary_allocation_ids, expected_type=type_hints["secondary_allocation_ids"])
             check_type(argname="argument secondary_private_ip_address_count", value=secondary_private_ip_address_count, expected_type=type_hints["secondary_private_ip_address_count"])
             check_type(argname="argument secondary_private_ip_addresses", value=secondary_private_ip_addresses, expected_type=type_hints["secondary_private_ip_addresses"])
+            check_type(argname="argument subnet_id", value=subnet_id, expected_type=type_hints["subnet_id"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
-        self._values: typing.Dict[builtins.str, typing.Any] = {
-            "subnet_id": subnet_id,
-        }
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
         if allocation_id is not None:
             self._values["allocation_id"] = allocation_id
         if connectivity_type is not None:
@@ -33425,19 +33451,11 @@ class CfnNatGatewayProps:
             self._values["secondary_private_ip_address_count"] = secondary_private_ip_address_count
         if secondary_private_ip_addresses is not None:
             self._values["secondary_private_ip_addresses"] = secondary_private_ip_addresses
+        if subnet_id is not None:
+            self._values["subnet_id"] = subnet_id
         if tags is not None:
             self._values["tags"] = tags
 
-    @builtins.property
-    def subnet_id(self) -> builtins.str:
-        '''The ID of the subnet in which the NAT gateway is located.
-
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-natgateway.html#cfn-ec2-natgateway-subnetid
-        '''
-        result = self._values.get("subnet_id")
-        assert result is not None, "Required property 'subnet_id' is missing"
-        return typing.cast(builtins.str, result)
-
     @builtins.property
     def allocation_id(self) -> typing.Optional[builtins.str]:
         '''[Public NAT gateway only] The allocation ID of the Elastic IP address that's associated with the NAT gateway.
@@ -33521,6 +33539,15 @@ class CfnNatGatewayProps:
         result = self._values.get("secondary_private_ip_addresses")
         return typing.cast(typing.Optional[typing.List[builtins.str]], result)
 
+    @builtins.property
+    def subnet_id(self) -> typing.Optional[builtins.str]:
+        '''The ID of the subnet in which the NAT gateway is located.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-natgateway.html#cfn-ec2-natgateway-subnetid
+        '''
+        result = self._values.get("subnet_id")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
         '''The tags for the NAT gateway.
@@ -53108,7 +53135,7 @@ class CfnSubnet(
             *,
             internet_gateway_block_mode: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''The state of VPC Block Public Access (BPA).
+            '''Specifies the state of VPC Block Public Access (BPA).
 
             :param internet_gateway_block_mode: The mode of VPC BPA. - ``off`` : VPC BPA is not enabled and traffic is allowed to and from internet gateways and egress-only internet gateways in this Region. - ``block-bidirectional`` : Block all traffic to and from internet gateways and egress-only internet gateways in this Region (except for excluded VPCs and subnets). - ``block-ingress`` : Block all internet traffic to the VPCs in this Region (except for VPCs or subnets which are excluded). Only traffic to and from NAT gateways and egress-only internet gateways is allowed because these gateways only allow outbound connections to be established.
 
@@ -53173,7 +53200,7 @@ class CfnSubnet(
             enable_resource_name_dns_a_record: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
             hostname_type: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''Describes the options for instance hostnames.
+            '''Specifies the options for instance hostnames.
 
             :param enable_resource_name_dns_aaaa_record: Indicates whether to respond to DNS queries for instance hostname with DNS AAAA records.
             :param enable_resource_name_dns_a_record: Indicates whether to respond to DNS queries for instance hostnames with DNS A records.
@@ -56945,6 +56972,576 @@ class CfnTransitGatewayConnect(
             )
 
 
+@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+class CfnTransitGatewayConnectPeer(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_ec2.CfnTransitGatewayConnectPeer",
+):
+    '''Describes a transit gateway Connect peer.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewayconnectpeer.html
+    :cloudformationResource: AWS::EC2::TransitGatewayConnectPeer
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_ec2 as ec2
+        
+        cfn_transit_gateway_connect_peer = ec2.CfnTransitGatewayConnectPeer(self, "MyCfnTransitGatewayConnectPeer",
+            connect_peer_configuration=ec2.CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty(
+                inside_cidr_blocks=["insideCidrBlocks"],
+                peer_address="peerAddress",
+        
+                # the properties below are optional
+                bgp_configurations=[ec2.CfnTransitGatewayConnectPeer.TransitGatewayAttachmentBgpConfigurationProperty(
+                    bgp_status="bgpStatus",
+                    peer_address="peerAddress",
+                    peer_asn=123,
+                    transit_gateway_address="transitGatewayAddress",
+                    transit_gateway_asn=123
+                )],
+                protocol="protocol",
+                transit_gateway_address="transitGatewayAddress"
+            ),
+            transit_gateway_attachment_id="transitGatewayAttachmentId",
+        
+            # the properties below are optional
+            tags=[CfnTag(
+                key="key",
+                value="value"
+            )]
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        connect_peer_configuration: typing.Union[_IResolvable_da3f097b, typing.Union["CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty", typing.Dict[builtins.str, typing.Any]]],
+        transit_gateway_attachment_id: builtins.str,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param connect_peer_configuration: The Connect peer details.
+        :param transit_gateway_attachment_id: The ID of the Connect attachment.
+        :param tags: The tags for the Connect peer.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1f8d207f56975363774b74fa734c1d229d4b0713b4f3516f3314cd9ebcd0e41c)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnTransitGatewayConnectPeerProps(
+            connect_peer_configuration=connect_peer_configuration,
+            transit_gateway_attachment_id=transit_gateway_attachment_id,
+            tags=tags,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b94393058454232978c68e76b9895b5f0775d34692c68d57103fafd32b53d66e)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__9f8ed9dcea183e690fe0f56b975179a4ccbc13162e837cb3c510b70d38b0ef94)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrConnectPeerConfigurationBgpConfigurations")
+    def attr_connect_peer_configuration_bgp_configurations(
+        self,
+    ) -> _IResolvable_da3f097b:
+        '''The BGP configuration details.
+
+        :cloudformationAttribute: ConnectPeerConfiguration.BgpConfigurations
+        '''
+        return typing.cast(_IResolvable_da3f097b, jsii.get(self, "attrConnectPeerConfigurationBgpConfigurations"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrConnectPeerConfigurationProtocol")
+    def attr_connect_peer_configuration_protocol(self) -> builtins.str:
+        '''The tunnel protocol.
+
+        :cloudformationAttribute: ConnectPeerConfiguration.Protocol
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrConnectPeerConfigurationProtocol"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrCreationTime")
+    def attr_creation_time(self) -> builtins.str:
+        '''The creation time.
+
+        :cloudformationAttribute: CreationTime
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrCreationTime"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrState")
+    def attr_state(self) -> builtins.str:
+        '''The state of the Connect peer.
+
+        :cloudformationAttribute: State
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrState"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrTransitGatewayConnectPeerId")
+    def attr_transit_gateway_connect_peer_id(self) -> builtins.str:
+        '''The ID of the Connect peer.
+
+        :cloudformationAttribute: TransitGatewayConnectPeerId
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrTransitGatewayConnectPeerId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cdkTagManager")
+    def cdk_tag_manager(self) -> _TagManager_0a598cb3:
+        '''Tag Manager which manages the tags for this resource.'''
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="connectPeerConfiguration")
+    def connect_peer_configuration(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, "CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty"]:
+        '''The Connect peer details.'''
+        return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty"], jsii.get(self, "connectPeerConfiguration"))
+
+    @connect_peer_configuration.setter
+    def connect_peer_configuration(
+        self,
+        value: typing.Union[_IResolvable_da3f097b, "CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty"],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__58ed17da8e00760b83a59e1e504bfc8914d4d0783ebb460d52132e6d22c7c5f5)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "connectPeerConfiguration", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="transitGatewayAttachmentId")
+    def transit_gateway_attachment_id(self) -> builtins.str:
+        '''The ID of the Connect attachment.'''
+        return typing.cast(builtins.str, jsii.get(self, "transitGatewayAttachmentId"))
+
+    @transit_gateway_attachment_id.setter
+    def transit_gateway_attachment_id(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b2909b9fd1cf53285718444b2e767681f76b6ed629fb8bd9cac90f9dfa879a82)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "transitGatewayAttachmentId", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="tags")
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''The tags for the Connect peer.'''
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
+
+    @tags.setter
+    def tags(self, value: typing.Optional[typing.List[_CfnTag_f6864754]]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__6eada39e62da78a0081621fc2e53f369626e0a8daba2db28d9f8ab73bf02a2fd)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_ec2.CfnTransitGatewayConnectPeer.TransitGatewayAttachmentBgpConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "bgp_status": "bgpStatus",
+            "peer_address": "peerAddress",
+            "peer_asn": "peerAsn",
+            "transit_gateway_address": "transitGatewayAddress",
+            "transit_gateway_asn": "transitGatewayAsn",
+        },
+    )
+    class TransitGatewayAttachmentBgpConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            bgp_status: typing.Optional[builtins.str] = None,
+            peer_address: typing.Optional[builtins.str] = None,
+            peer_asn: typing.Optional[jsii.Number] = None,
+            transit_gateway_address: typing.Optional[builtins.str] = None,
+            transit_gateway_asn: typing.Optional[jsii.Number] = None,
+        ) -> None:
+            '''The BGP configuration information.
+
+            :param bgp_status: The BGP status.
+            :param peer_address: The interior BGP peer IP address for the appliance.
+            :param peer_asn: The peer Autonomous System Number (ASN).
+            :param transit_gateway_address: The interior BGP peer IP address for the transit gateway.
+            :param transit_gateway_asn: The transit gateway Autonomous System Number (ASN).
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayattachmentbgpconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_ec2 as ec2
+                
+                transit_gateway_attachment_bgp_configuration_property = ec2.CfnTransitGatewayConnectPeer.TransitGatewayAttachmentBgpConfigurationProperty(
+                    bgp_status="bgpStatus",
+                    peer_address="peerAddress",
+                    peer_asn=123,
+                    transit_gateway_address="transitGatewayAddress",
+                    transit_gateway_asn=123
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__d0f30598b4049c4e4e643a34da7497413353b78ba0ca8e5b1eb98867ba0a56b2)
+                check_type(argname="argument bgp_status", value=bgp_status, expected_type=type_hints["bgp_status"])
+                check_type(argname="argument peer_address", value=peer_address, expected_type=type_hints["peer_address"])
+                check_type(argname="argument peer_asn", value=peer_asn, expected_type=type_hints["peer_asn"])
+                check_type(argname="argument transit_gateway_address", value=transit_gateway_address, expected_type=type_hints["transit_gateway_address"])
+                check_type(argname="argument transit_gateway_asn", value=transit_gateway_asn, expected_type=type_hints["transit_gateway_asn"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if bgp_status is not None:
+                self._values["bgp_status"] = bgp_status
+            if peer_address is not None:
+                self._values["peer_address"] = peer_address
+            if peer_asn is not None:
+                self._values["peer_asn"] = peer_asn
+            if transit_gateway_address is not None:
+                self._values["transit_gateway_address"] = transit_gateway_address
+            if transit_gateway_asn is not None:
+                self._values["transit_gateway_asn"] = transit_gateway_asn
+
+        @builtins.property
+        def bgp_status(self) -> typing.Optional[builtins.str]:
+            '''The BGP status.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayattachmentbgpconfiguration.html#cfn-ec2-transitgatewayconnectpeer-transitgatewayattachmentbgpconfiguration-bgpstatus
+            '''
+            result = self._values.get("bgp_status")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def peer_address(self) -> typing.Optional[builtins.str]:
+            '''The interior BGP peer IP address for the appliance.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayattachmentbgpconfiguration.html#cfn-ec2-transitgatewayconnectpeer-transitgatewayattachmentbgpconfiguration-peeraddress
+            '''
+            result = self._values.get("peer_address")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def peer_asn(self) -> typing.Optional[jsii.Number]:
+            '''The peer Autonomous System Number (ASN).
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayattachmentbgpconfiguration.html#cfn-ec2-transitgatewayconnectpeer-transitgatewayattachmentbgpconfiguration-peerasn
+            '''
+            result = self._values.get("peer_asn")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        @builtins.property
+        def transit_gateway_address(self) -> typing.Optional[builtins.str]:
+            '''The interior BGP peer IP address for the transit gateway.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayattachmentbgpconfiguration.html#cfn-ec2-transitgatewayconnectpeer-transitgatewayattachmentbgpconfiguration-transitgatewayaddress
+            '''
+            result = self._values.get("transit_gateway_address")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def transit_gateway_asn(self) -> typing.Optional[jsii.Number]:
+            '''The transit gateway Autonomous System Number (ASN).
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayattachmentbgpconfiguration.html#cfn-ec2-transitgatewayconnectpeer-transitgatewayattachmentbgpconfiguration-transitgatewayasn
+            '''
+            result = self._values.get("transit_gateway_asn")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "TransitGatewayAttachmentBgpConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_ec2.CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "inside_cidr_blocks": "insideCidrBlocks",
+            "peer_address": "peerAddress",
+            "bgp_configurations": "bgpConfigurations",
+            "protocol": "protocol",
+            "transit_gateway_address": "transitGatewayAddress",
+        },
+    )
+    class TransitGatewayConnectPeerConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            inside_cidr_blocks: typing.Sequence[builtins.str],
+            peer_address: builtins.str,
+            bgp_configurations: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnTransitGatewayConnectPeer.TransitGatewayAttachmentBgpConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
+            protocol: typing.Optional[builtins.str] = None,
+            transit_gateway_address: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''Describes the Connect peer details.
+
+            :param inside_cidr_blocks: The range of interior BGP peer IP addresses.
+            :param peer_address: The Connect peer IP address on the appliance side of the tunnel.
+            :param bgp_configurations: The BGP configuration details.
+            :param protocol: The tunnel protocol.
+            :param transit_gateway_address: The Connect peer IP address on the transit gateway side of the tunnel.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayconnectpeerconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_ec2 as ec2
+                
+                transit_gateway_connect_peer_configuration_property = ec2.CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty(
+                    inside_cidr_blocks=["insideCidrBlocks"],
+                    peer_address="peerAddress",
+                
+                    # the properties below are optional
+                    bgp_configurations=[ec2.CfnTransitGatewayConnectPeer.TransitGatewayAttachmentBgpConfigurationProperty(
+                        bgp_status="bgpStatus",
+                        peer_address="peerAddress",
+                        peer_asn=123,
+                        transit_gateway_address="transitGatewayAddress",
+                        transit_gateway_asn=123
+                    )],
+                    protocol="protocol",
+                    transit_gateway_address="transitGatewayAddress"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__ed11c27aeee7d87fa8fd9b18c1c8885352346e3191deb89b80e860c9891e5b56)
+                check_type(argname="argument inside_cidr_blocks", value=inside_cidr_blocks, expected_type=type_hints["inside_cidr_blocks"])
+                check_type(argname="argument peer_address", value=peer_address, expected_type=type_hints["peer_address"])
+                check_type(argname="argument bgp_configurations", value=bgp_configurations, expected_type=type_hints["bgp_configurations"])
+                check_type(argname="argument protocol", value=protocol, expected_type=type_hints["protocol"])
+                check_type(argname="argument transit_gateway_address", value=transit_gateway_address, expected_type=type_hints["transit_gateway_address"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "inside_cidr_blocks": inside_cidr_blocks,
+                "peer_address": peer_address,
+            }
+            if bgp_configurations is not None:
+                self._values["bgp_configurations"] = bgp_configurations
+            if protocol is not None:
+                self._values["protocol"] = protocol
+            if transit_gateway_address is not None:
+                self._values["transit_gateway_address"] = transit_gateway_address
+
+        @builtins.property
+        def inside_cidr_blocks(self) -> typing.List[builtins.str]:
+            '''The range of interior BGP peer IP addresses.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayconnectpeerconfiguration.html#cfn-ec2-transitgatewayconnectpeer-transitgatewayconnectpeerconfiguration-insidecidrblocks
+            '''
+            result = self._values.get("inside_cidr_blocks")
+            assert result is not None, "Required property 'inside_cidr_blocks' is missing"
+            return typing.cast(typing.List[builtins.str], result)
+
+        @builtins.property
+        def peer_address(self) -> builtins.str:
+            '''The Connect peer IP address on the appliance side of the tunnel.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayconnectpeerconfiguration.html#cfn-ec2-transitgatewayconnectpeer-transitgatewayconnectpeerconfiguration-peeraddress
+            '''
+            result = self._values.get("peer_address")
+            assert result is not None, "Required property 'peer_address' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def bgp_configurations(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnTransitGatewayConnectPeer.TransitGatewayAttachmentBgpConfigurationProperty"]]]]:
+            '''The BGP configuration details.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayconnectpeerconfiguration.html#cfn-ec2-transitgatewayconnectpeer-transitgatewayconnectpeerconfiguration-bgpconfigurations
+            '''
+            result = self._values.get("bgp_configurations")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnTransitGatewayConnectPeer.TransitGatewayAttachmentBgpConfigurationProperty"]]]], result)
+
+        @builtins.property
+        def protocol(self) -> typing.Optional[builtins.str]:
+            '''The tunnel protocol.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayconnectpeerconfiguration.html#cfn-ec2-transitgatewayconnectpeer-transitgatewayconnectpeerconfiguration-protocol
+            '''
+            result = self._values.get("protocol")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def transit_gateway_address(self) -> typing.Optional[builtins.str]:
+            '''The Connect peer IP address on the transit gateway side of the tunnel.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayconnectpeerconfiguration.html#cfn-ec2-transitgatewayconnectpeer-transitgatewayconnectpeerconfiguration-transitgatewayaddress
+            '''
+            result = self._values.get("transit_gateway_address")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "TransitGatewayConnectPeerConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_ec2.CfnTransitGatewayConnectPeerProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "connect_peer_configuration": "connectPeerConfiguration",
+        "transit_gateway_attachment_id": "transitGatewayAttachmentId",
+        "tags": "tags",
+    },
+)
+class CfnTransitGatewayConnectPeerProps:
+    def __init__(
+        self,
+        *,
+        connect_peer_configuration: typing.Union[_IResolvable_da3f097b, typing.Union[CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty, typing.Dict[builtins.str, typing.Any]]],
+        transit_gateway_attachment_id: builtins.str,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnTransitGatewayConnectPeer``.
+
+        :param connect_peer_configuration: The Connect peer details.
+        :param transit_gateway_attachment_id: The ID of the Connect attachment.
+        :param tags: The tags for the Connect peer.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewayconnectpeer.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_ec2 as ec2
+            
+            cfn_transit_gateway_connect_peer_props = ec2.CfnTransitGatewayConnectPeerProps(
+                connect_peer_configuration=ec2.CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty(
+                    inside_cidr_blocks=["insideCidrBlocks"],
+                    peer_address="peerAddress",
+            
+                    # the properties below are optional
+                    bgp_configurations=[ec2.CfnTransitGatewayConnectPeer.TransitGatewayAttachmentBgpConfigurationProperty(
+                        bgp_status="bgpStatus",
+                        peer_address="peerAddress",
+                        peer_asn=123,
+                        transit_gateway_address="transitGatewayAddress",
+                        transit_gateway_asn=123
+                    )],
+                    protocol="protocol",
+                    transit_gateway_address="transitGatewayAddress"
+                ),
+                transit_gateway_attachment_id="transitGatewayAttachmentId",
+            
+                # the properties below are optional
+                tags=[CfnTag(
+                    key="key",
+                    value="value"
+                )]
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__32b3081584f3dcc39f1077e0e7bc1b3a6c7b2678c8e23fa6b66e94bc04676ed3)
+            check_type(argname="argument connect_peer_configuration", value=connect_peer_configuration, expected_type=type_hints["connect_peer_configuration"])
+            check_type(argname="argument transit_gateway_attachment_id", value=transit_gateway_attachment_id, expected_type=type_hints["transit_gateway_attachment_id"])
+            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "connect_peer_configuration": connect_peer_configuration,
+            "transit_gateway_attachment_id": transit_gateway_attachment_id,
+        }
+        if tags is not None:
+            self._values["tags"] = tags
+
+    @builtins.property
+    def connect_peer_configuration(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty]:
+        '''The Connect peer details.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewayconnectpeer.html#cfn-ec2-transitgatewayconnectpeer-connectpeerconfiguration
+        '''
+        result = self._values.get("connect_peer_configuration")
+        assert result is not None, "Required property 'connect_peer_configuration' is missing"
+        return typing.cast(typing.Union[_IResolvable_da3f097b, CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty], result)
+
+    @builtins.property
+    def transit_gateway_attachment_id(self) -> builtins.str:
+        '''The ID of the Connect attachment.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewayconnectpeer.html#cfn-ec2-transitgatewayconnectpeer-transitgatewayattachmentid
+        '''
+        result = self._values.get("transit_gateway_attachment_id")
+        assert result is not None, "Required property 'transit_gateway_attachment_id' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''The tags for the Connect peer.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewayconnectpeer.html#cfn-ec2-transitgatewayconnectpeer-tags
+        '''
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnTransitGatewayConnectPeerProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_ec2.CfnTransitGatewayConnectProps",
     jsii_struct_bases=[],
@@ -77339,6 +77936,7 @@ class IVpc(_IResource_c80c4260, typing_extensions.Protocol):
         private_dns_enabled: typing.Optional[builtins.bool] = None,
         private_dns_only_for_inbound_resolver_endpoint: typing.Optional["VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint"] = None,
         security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
+        service_region: typing.Optional[builtins.str] = None,
         subnets: typing.Optional[typing.Union["SubnetSelection", typing.Dict[builtins.str, typing.Any]]] = None,
     ) -> "InterfaceVpcEndpoint":
         '''Adds a new interface endpoint to this VPC.
@@ -77352,6 +77950,7 @@ class IVpc(_IResource_c80c4260, typing_extensions.Protocol):
         :param private_dns_enabled: Whether to associate a private hosted zone with the specified VPC. This allows you to make requests to the service using its default DNS hostname. Default: set by the instance of IInterfaceVpcEndpointService, or true if not defined by the instance of IInterfaceVpcEndpointService
         :param private_dns_only_for_inbound_resolver_endpoint: Whether to enable private DNS only for inbound endpoints. Default: not specified
         :param security_groups: The security groups to associate with this interface VPC endpoint. Default: - a new security group is created
+        :param service_region: The region where the VPC endpoint service is located. Only needs to be specified for cross-region VPC endpoints. Default: - Same region as the interface VPC endpoint
         :param subnets: The subnets in which to create an endpoint network interface. At most one per availability zone. Default: - private subnets
         '''
         ...
@@ -77628,6 +78227,7 @@ class _IVpcProxy(
         private_dns_enabled: typing.Optional[builtins.bool] = None,
         private_dns_only_for_inbound_resolver_endpoint: typing.Optional["VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint"] = None,
         security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
+        service_region: typing.Optional[builtins.str] = None,
         subnets: typing.Optional[typing.Union["SubnetSelection", typing.Dict[builtins.str, typing.Any]]] = None,
     ) -> "InterfaceVpcEndpoint":
         '''Adds a new interface endpoint to this VPC.
@@ -77641,6 +78241,7 @@ class _IVpcProxy(
         :param private_dns_enabled: Whether to associate a private hosted zone with the specified VPC. This allows you to make requests to the service using its default DNS hostname. Default: set by the instance of IInterfaceVpcEndpointService, or true if not defined by the instance of IInterfaceVpcEndpointService
         :param private_dns_only_for_inbound_resolver_endpoint: Whether to enable private DNS only for inbound endpoints. Default: not specified
         :param security_groups: The security groups to associate with this interface VPC endpoint. Default: - a new security group is created
+        :param service_region: The region where the VPC endpoint service is located. Only needs to be specified for cross-region VPC endpoints. Default: - Same region as the interface VPC endpoint
         :param subnets: The subnets in which to create an endpoint network interface. At most one per availability zone. Default: - private subnets
         '''
         if __debug__:
@@ -77655,6 +78256,7 @@ class _IVpcProxy(
             private_dns_enabled=private_dns_enabled,
             private_dns_only_for_inbound_resolver_endpoint=private_dns_only_for_inbound_resolver_endpoint,
             security_groups=security_groups,
+            service_region=service_region,
             subnets=subnets,
         )
 
@@ -84522,6 +85124,7 @@ class InterfaceVpcEndpointAwsServiceProps:
         "private_dns_enabled": "privateDnsEnabled",
         "private_dns_only_for_inbound_resolver_endpoint": "privateDnsOnlyForInboundResolverEndpoint",
         "security_groups": "securityGroups",
+        "service_region": "serviceRegion",
         "subnets": "subnets",
     },
 )
@@ -84537,6 +85140,7 @@ class InterfaceVpcEndpointOptions:
         private_dns_enabled: typing.Optional[builtins.bool] = None,
         private_dns_only_for_inbound_resolver_endpoint: typing.Optional["VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint"] = None,
         security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
+        service_region: typing.Optional[builtins.str] = None,
         subnets: typing.Optional[typing.Union["SubnetSelection", typing.Dict[builtins.str, typing.Any]]] = None,
     ) -> None:
         '''Options to add an interface endpoint to a VPC.
@@ -84549,6 +85153,7 @@ class InterfaceVpcEndpointOptions:
         :param private_dns_enabled: Whether to associate a private hosted zone with the specified VPC. This allows you to make requests to the service using its default DNS hostname. Default: set by the instance of IInterfaceVpcEndpointService, or true if not defined by the instance of IInterfaceVpcEndpointService
         :param private_dns_only_for_inbound_resolver_endpoint: Whether to enable private DNS only for inbound endpoints. Default: not specified
         :param security_groups: The security groups to associate with this interface VPC endpoint. Default: - a new security group is created
+        :param service_region: The region where the VPC endpoint service is located. Only needs to be specified for cross-region VPC endpoints. Default: - Same region as the interface VPC endpoint
         :param subnets: The subnets in which to create an endpoint network interface. At most one per availability zone. Default: - private subnets
 
         :exampleMetadata: lit=aws-ec2/test/integ.vpc-endpoint.lit.ts infused
@@ -84593,9 +85198,230 @@ class InterfaceVpcEndpointOptions:
             check_type(argname="argument private_dns_enabled", value=private_dns_enabled, expected_type=type_hints["private_dns_enabled"])
             check_type(argname="argument private_dns_only_for_inbound_resolver_endpoint", value=private_dns_only_for_inbound_resolver_endpoint, expected_type=type_hints["private_dns_only_for_inbound_resolver_endpoint"])
             check_type(argname="argument security_groups", value=security_groups, expected_type=type_hints["security_groups"])
+            check_type(argname="argument service_region", value=service_region, expected_type=type_hints["service_region"])
+            check_type(argname="argument subnets", value=subnets, expected_type=type_hints["subnets"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "service": service,
+        }
+        if dns_record_ip_type is not None:
+            self._values["dns_record_ip_type"] = dns_record_ip_type
+        if ip_address_type is not None:
+            self._values["ip_address_type"] = ip_address_type
+        if lookup_supported_azs is not None:
+            self._values["lookup_supported_azs"] = lookup_supported_azs
+        if open is not None:
+            self._values["open"] = open
+        if private_dns_enabled is not None:
+            self._values["private_dns_enabled"] = private_dns_enabled
+        if private_dns_only_for_inbound_resolver_endpoint is not None:
+            self._values["private_dns_only_for_inbound_resolver_endpoint"] = private_dns_only_for_inbound_resolver_endpoint
+        if security_groups is not None:
+            self._values["security_groups"] = security_groups
+        if service_region is not None:
+            self._values["service_region"] = service_region
+        if subnets is not None:
+            self._values["subnets"] = subnets
+
+    @builtins.property
+    def service(self) -> IInterfaceVpcEndpointService:
+        '''The service to use for this interface VPC endpoint.'''
+        result = self._values.get("service")
+        assert result is not None, "Required property 'service' is missing"
+        return typing.cast(IInterfaceVpcEndpointService, result)
+
+    @builtins.property
+    def dns_record_ip_type(self) -> typing.Optional["VpcEndpointDnsRecordIpType"]:
+        '''Type of DNS records created for the VPC endpoint.
+
+        :default: not specified
+        '''
+        result = self._values.get("dns_record_ip_type")
+        return typing.cast(typing.Optional["VpcEndpointDnsRecordIpType"], result)
+
+    @builtins.property
+    def ip_address_type(self) -> typing.Optional["VpcEndpointIpAddressType"]:
+        '''The IP address type for the endpoint.
+
+        :default: not specified
+        '''
+        result = self._values.get("ip_address_type")
+        return typing.cast(typing.Optional["VpcEndpointIpAddressType"], result)
+
+    @builtins.property
+    def lookup_supported_azs(self) -> typing.Optional[builtins.bool]:
+        '''Limit to only those availability zones where the endpoint service can be created.
+
+        Setting this to 'true' requires a lookup to be performed at synthesis time. Account
+        and region must be set on the containing stack for this to work.
+
+        :default: false
+        '''
+        result = self._values.get("lookup_supported_azs")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def open(self) -> typing.Optional[builtins.bool]:
+        '''Whether to automatically allow VPC traffic to the endpoint.
+
+        If enabled, all traffic to the endpoint from within the VPC will be
+        automatically allowed. This is done based on the VPC's CIDR range.
+
+        :default: true
+        '''
+        result = self._values.get("open")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def private_dns_enabled(self) -> typing.Optional[builtins.bool]:
+        '''Whether to associate a private hosted zone with the specified VPC.
+
+        This
+        allows you to make requests to the service using its default DNS hostname.
+
+        :default:
+
+        set by the instance of IInterfaceVpcEndpointService, or true if
+        not defined by the instance of IInterfaceVpcEndpointService
+        '''
+        result = self._values.get("private_dns_enabled")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def private_dns_only_for_inbound_resolver_endpoint(
+        self,
+    ) -> typing.Optional["VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint"]:
+        '''Whether to enable private DNS only for inbound endpoints.
+
+        :default: not specified
+        '''
+        result = self._values.get("private_dns_only_for_inbound_resolver_endpoint")
+        return typing.cast(typing.Optional["VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint"], result)
+
+    @builtins.property
+    def security_groups(self) -> typing.Optional[typing.List[ISecurityGroup]]:
+        '''The security groups to associate with this interface VPC endpoint.
+
+        :default: - a new security group is created
+        '''
+        result = self._values.get("security_groups")
+        return typing.cast(typing.Optional[typing.List[ISecurityGroup]], result)
+
+    @builtins.property
+    def service_region(self) -> typing.Optional[builtins.str]:
+        '''The region where the VPC endpoint service is located.
+
+        Only needs to be specified for cross-region VPC endpoints.
+
+        :default: - Same region as the interface VPC endpoint
+        '''
+        result = self._values.get("service_region")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def subnets(self) -> typing.Optional["SubnetSelection"]:
+        '''The subnets in which to create an endpoint network interface.
+
+        At most one
+        per availability zone.
+
+        :default: - private subnets
+        '''
+        result = self._values.get("subnets")
+        return typing.cast(typing.Optional["SubnetSelection"], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "InterfaceVpcEndpointOptions(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_ec2.InterfaceVpcEndpointProps",
+    jsii_struct_bases=[InterfaceVpcEndpointOptions],
+    name_mapping={
+        "service": "service",
+        "dns_record_ip_type": "dnsRecordIpType",
+        "ip_address_type": "ipAddressType",
+        "lookup_supported_azs": "lookupSupportedAzs",
+        "open": "open",
+        "private_dns_enabled": "privateDnsEnabled",
+        "private_dns_only_for_inbound_resolver_endpoint": "privateDnsOnlyForInboundResolverEndpoint",
+        "security_groups": "securityGroups",
+        "service_region": "serviceRegion",
+        "subnets": "subnets",
+        "vpc": "vpc",
+    },
+)
+class InterfaceVpcEndpointProps(InterfaceVpcEndpointOptions):
+    def __init__(
+        self,
+        *,
+        service: IInterfaceVpcEndpointService,
+        dns_record_ip_type: typing.Optional["VpcEndpointDnsRecordIpType"] = None,
+        ip_address_type: typing.Optional["VpcEndpointIpAddressType"] = None,
+        lookup_supported_azs: typing.Optional[builtins.bool] = None,
+        open: typing.Optional[builtins.bool] = None,
+        private_dns_enabled: typing.Optional[builtins.bool] = None,
+        private_dns_only_for_inbound_resolver_endpoint: typing.Optional["VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint"] = None,
+        security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
+        service_region: typing.Optional[builtins.str] = None,
+        subnets: typing.Optional[typing.Union["SubnetSelection", typing.Dict[builtins.str, typing.Any]]] = None,
+        vpc: IVpc,
+    ) -> None:
+        '''Construction properties for an InterfaceVpcEndpoint.
+
+        :param service: The service to use for this interface VPC endpoint.
+        :param dns_record_ip_type: Type of DNS records created for the VPC endpoint. Default: not specified
+        :param ip_address_type: The IP address type for the endpoint. Default: not specified
+        :param lookup_supported_azs: Limit to only those availability zones where the endpoint service can be created. Setting this to 'true' requires a lookup to be performed at synthesis time. Account and region must be set on the containing stack for this to work. Default: false
+        :param open: Whether to automatically allow VPC traffic to the endpoint. If enabled, all traffic to the endpoint from within the VPC will be automatically allowed. This is done based on the VPC's CIDR range. Default: true
+        :param private_dns_enabled: Whether to associate a private hosted zone with the specified VPC. This allows you to make requests to the service using its default DNS hostname. Default: set by the instance of IInterfaceVpcEndpointService, or true if not defined by the instance of IInterfaceVpcEndpointService
+        :param private_dns_only_for_inbound_resolver_endpoint: Whether to enable private DNS only for inbound endpoints. Default: not specified
+        :param security_groups: The security groups to associate with this interface VPC endpoint. Default: - a new security group is created
+        :param service_region: The region where the VPC endpoint service is located. Only needs to be specified for cross-region VPC endpoints. Default: - Same region as the interface VPC endpoint
+        :param subnets: The subnets in which to create an endpoint network interface. At most one per availability zone. Default: - private subnets
+        :param vpc: The VPC network in which the interface endpoint will be used.
+
+        :exampleMetadata: infused
+
+        Example::
+
+            # vpc: ec2.Vpc
+            
+            
+            ec2.InterfaceVpcEndpoint(self, "VPC Endpoint",
+                vpc=vpc,
+                service=ec2.InterfaceVpcEndpointService("com.amazonaws.vpce.us-east-1.vpce-svc-uuddlrlrbastrtsvc", 443),
+                subnets=ec2.SubnetSelection(
+                    subnet_type=ec2.SubnetType.PRIVATE_ISOLATED,
+                    availability_zones=["us-east-1a", "us-east-1c"]
+                )
+            )
+        '''
+        if isinstance(subnets, dict):
+            subnets = SubnetSelection(**subnets)
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__6606ba3de030c44ce43dee44afe64adc59231bfc542799d1354e0732a309b2f0)
+            check_type(argname="argument service", value=service, expected_type=type_hints["service"])
+            check_type(argname="argument dns_record_ip_type", value=dns_record_ip_type, expected_type=type_hints["dns_record_ip_type"])
+            check_type(argname="argument ip_address_type", value=ip_address_type, expected_type=type_hints["ip_address_type"])
+            check_type(argname="argument lookup_supported_azs", value=lookup_supported_azs, expected_type=type_hints["lookup_supported_azs"])
+            check_type(argname="argument open", value=open, expected_type=type_hints["open"])
+            check_type(argname="argument private_dns_enabled", value=private_dns_enabled, expected_type=type_hints["private_dns_enabled"])
+            check_type(argname="argument private_dns_only_for_inbound_resolver_endpoint", value=private_dns_only_for_inbound_resolver_endpoint, expected_type=type_hints["private_dns_only_for_inbound_resolver_endpoint"])
+            check_type(argname="argument security_groups", value=security_groups, expected_type=type_hints["security_groups"])
+            check_type(argname="argument service_region", value=service_region, expected_type=type_hints["service_region"])
             check_type(argname="argument subnets", value=subnets, expected_type=type_hints["subnets"])
+            check_type(argname="argument vpc", value=vpc, expected_type=type_hints["vpc"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "service": service,
+            "vpc": vpc,
         }
         if dns_record_ip_type is not None:
             self._values["dns_record_ip_type"] = dns_record_ip_type
@@ -84611,6 +85437,8 @@ class InterfaceVpcEndpointOptions:
             self._values["private_dns_only_for_inbound_resolver_endpoint"] = private_dns_only_for_inbound_resolver_endpoint
         if security_groups is not None:
             self._values["security_groups"] = security_groups
+        if service_region is not None:
+            self._values["service_region"] = service_region
         if subnets is not None:
             self._values["subnets"] = subnets
 
@@ -84699,207 +85527,15 @@ class InterfaceVpcEndpointOptions:
         return typing.cast(typing.Optional[typing.List[ISecurityGroup]], result)
 
     @builtins.property
-    def subnets(self) -> typing.Optional["SubnetSelection"]:
-        '''The subnets in which to create an endpoint network interface.
-
-        At most one
-        per availability zone.
-
-        :default: - private subnets
-        '''
-        result = self._values.get("subnets")
-        return typing.cast(typing.Optional["SubnetSelection"], result)
-
-    def __eq__(self, rhs: typing.Any) -> builtins.bool:
-        return isinstance(rhs, self.__class__) and rhs._values == self._values
-
-    def __ne__(self, rhs: typing.Any) -> builtins.bool:
-        return not (rhs == self)
-
-    def __repr__(self) -> str:
-        return "InterfaceVpcEndpointOptions(%s)" % ", ".join(
-            k + "=" + repr(v) for k, v in self._values.items()
-        )
-
-
-@jsii.data_type(
-    jsii_type="aws-cdk-lib.aws_ec2.InterfaceVpcEndpointProps",
-    jsii_struct_bases=[InterfaceVpcEndpointOptions],
-    name_mapping={
-        "service": "service",
-        "dns_record_ip_type": "dnsRecordIpType",
-        "ip_address_type": "ipAddressType",
-        "lookup_supported_azs": "lookupSupportedAzs",
-        "open": "open",
-        "private_dns_enabled": "privateDnsEnabled",
-        "private_dns_only_for_inbound_resolver_endpoint": "privateDnsOnlyForInboundResolverEndpoint",
-        "security_groups": "securityGroups",
-        "subnets": "subnets",
-        "vpc": "vpc",
-    },
-)
-class InterfaceVpcEndpointProps(InterfaceVpcEndpointOptions):
-    def __init__(
-        self,
-        *,
-        service: IInterfaceVpcEndpointService,
-        dns_record_ip_type: typing.Optional["VpcEndpointDnsRecordIpType"] = None,
-        ip_address_type: typing.Optional["VpcEndpointIpAddressType"] = None,
-        lookup_supported_azs: typing.Optional[builtins.bool] = None,
-        open: typing.Optional[builtins.bool] = None,
-        private_dns_enabled: typing.Optional[builtins.bool] = None,
-        private_dns_only_for_inbound_resolver_endpoint: typing.Optional["VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint"] = None,
-        security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
-        subnets: typing.Optional[typing.Union["SubnetSelection", typing.Dict[builtins.str, typing.Any]]] = None,
-        vpc: IVpc,
-    ) -> None:
-        '''Construction properties for an InterfaceVpcEndpoint.
-
-        :param service: The service to use for this interface VPC endpoint.
-        :param dns_record_ip_type: Type of DNS records created for the VPC endpoint. Default: not specified
-        :param ip_address_type: The IP address type for the endpoint. Default: not specified
-        :param lookup_supported_azs: Limit to only those availability zones where the endpoint service can be created. Setting this to 'true' requires a lookup to be performed at synthesis time. Account and region must be set on the containing stack for this to work. Default: false
-        :param open: Whether to automatically allow VPC traffic to the endpoint. If enabled, all traffic to the endpoint from within the VPC will be automatically allowed. This is done based on the VPC's CIDR range. Default: true
-        :param private_dns_enabled: Whether to associate a private hosted zone with the specified VPC. This allows you to make requests to the service using its default DNS hostname. Default: set by the instance of IInterfaceVpcEndpointService, or true if not defined by the instance of IInterfaceVpcEndpointService
-        :param private_dns_only_for_inbound_resolver_endpoint: Whether to enable private DNS only for inbound endpoints. Default: not specified
-        :param security_groups: The security groups to associate with this interface VPC endpoint. Default: - a new security group is created
-        :param subnets: The subnets in which to create an endpoint network interface. At most one per availability zone. Default: - private subnets
-        :param vpc: The VPC network in which the interface endpoint will be used.
-
-        :exampleMetadata: infused
-
-        Example::
-
-            # vpc: ec2.Vpc
-            
-            
-            ec2.InterfaceVpcEndpoint(self, "VPC Endpoint",
-                vpc=vpc,
-                service=ec2.InterfaceVpcEndpointService("com.amazonaws.vpce.us-east-1.vpce-svc-uuddlrlrbastrtsvc", 443),
-                subnets=ec2.SubnetSelection(
-                    subnet_type=ec2.SubnetType.PRIVATE_ISOLATED,
-                    availability_zones=["us-east-1a", "us-east-1c"]
-                )
-            )
-        '''
-        if isinstance(subnets, dict):
-            subnets = SubnetSelection(**subnets)
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__6606ba3de030c44ce43dee44afe64adc59231bfc542799d1354e0732a309b2f0)
-            check_type(argname="argument service", value=service, expected_type=type_hints["service"])
-            check_type(argname="argument dns_record_ip_type", value=dns_record_ip_type, expected_type=type_hints["dns_record_ip_type"])
-            check_type(argname="argument ip_address_type", value=ip_address_type, expected_type=type_hints["ip_address_type"])
-            check_type(argname="argument lookup_supported_azs", value=lookup_supported_azs, expected_type=type_hints["lookup_supported_azs"])
-            check_type(argname="argument open", value=open, expected_type=type_hints["open"])
-            check_type(argname="argument private_dns_enabled", value=private_dns_enabled, expected_type=type_hints["private_dns_enabled"])
-            check_type(argname="argument private_dns_only_for_inbound_resolver_endpoint", value=private_dns_only_for_inbound_resolver_endpoint, expected_type=type_hints["private_dns_only_for_inbound_resolver_endpoint"])
-            check_type(argname="argument security_groups", value=security_groups, expected_type=type_hints["security_groups"])
-            check_type(argname="argument subnets", value=subnets, expected_type=type_hints["subnets"])
-            check_type(argname="argument vpc", value=vpc, expected_type=type_hints["vpc"])
-        self._values: typing.Dict[builtins.str, typing.Any] = {
-            "service": service,
-            "vpc": vpc,
-        }
-        if dns_record_ip_type is not None:
-            self._values["dns_record_ip_type"] = dns_record_ip_type
-        if ip_address_type is not None:
-            self._values["ip_address_type"] = ip_address_type
-        if lookup_supported_azs is not None:
-            self._values["lookup_supported_azs"] = lookup_supported_azs
-        if open is not None:
-            self._values["open"] = open
-        if private_dns_enabled is not None:
-            self._values["private_dns_enabled"] = private_dns_enabled
-        if private_dns_only_for_inbound_resolver_endpoint is not None:
-            self._values["private_dns_only_for_inbound_resolver_endpoint"] = private_dns_only_for_inbound_resolver_endpoint
-        if security_groups is not None:
-            self._values["security_groups"] = security_groups
-        if subnets is not None:
-            self._values["subnets"] = subnets
-
-    @builtins.property
-    def service(self) -> IInterfaceVpcEndpointService:
-        '''The service to use for this interface VPC endpoint.'''
-        result = self._values.get("service")
-        assert result is not None, "Required property 'service' is missing"
-        return typing.cast(IInterfaceVpcEndpointService, result)
-
-    @builtins.property
-    def dns_record_ip_type(self) -> typing.Optional["VpcEndpointDnsRecordIpType"]:
-        '''Type of DNS records created for the VPC endpoint.
-
-        :default: not specified
-        '''
-        result = self._values.get("dns_record_ip_type")
-        return typing.cast(typing.Optional["VpcEndpointDnsRecordIpType"], result)
-
-    @builtins.property
-    def ip_address_type(self) -> typing.Optional["VpcEndpointIpAddressType"]:
-        '''The IP address type for the endpoint.
-
-        :default: not specified
-        '''
-        result = self._values.get("ip_address_type")
-        return typing.cast(typing.Optional["VpcEndpointIpAddressType"], result)
-
-    @builtins.property
-    def lookup_supported_azs(self) -> typing.Optional[builtins.bool]:
-        '''Limit to only those availability zones where the endpoint service can be created.
-
-        Setting this to 'true' requires a lookup to be performed at synthesis time. Account
-        and region must be set on the containing stack for this to work.
-
-        :default: false
-        '''
-        result = self._values.get("lookup_supported_azs")
-        return typing.cast(typing.Optional[builtins.bool], result)
-
-    @builtins.property
-    def open(self) -> typing.Optional[builtins.bool]:
-        '''Whether to automatically allow VPC traffic to the endpoint.
-
-        If enabled, all traffic to the endpoint from within the VPC will be
-        automatically allowed. This is done based on the VPC's CIDR range.
-
-        :default: true
-        '''
-        result = self._values.get("open")
-        return typing.cast(typing.Optional[builtins.bool], result)
-
-    @builtins.property
-    def private_dns_enabled(self) -> typing.Optional[builtins.bool]:
-        '''Whether to associate a private hosted zone with the specified VPC.
-
-        This
-        allows you to make requests to the service using its default DNS hostname.
-
-        :default:
-
-        set by the instance of IInterfaceVpcEndpointService, or true if
-        not defined by the instance of IInterfaceVpcEndpointService
-        '''
-        result = self._values.get("private_dns_enabled")
-        return typing.cast(typing.Optional[builtins.bool], result)
+    def service_region(self) -> typing.Optional[builtins.str]:
+        '''The region where the VPC endpoint service is located.
 
-    @builtins.property
-    def private_dns_only_for_inbound_resolver_endpoint(
-        self,
-    ) -> typing.Optional["VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint"]:
-        '''Whether to enable private DNS only for inbound endpoints.
+        Only needs to be specified for cross-region VPC endpoints.
 
-        :default: not specified
+        :default: - Same region as the interface VPC endpoint
         '''
-        result = self._values.get("private_dns_only_for_inbound_resolver_endpoint")
-        return typing.cast(typing.Optional["VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint"], result)
-
-    @builtins.property
-    def security_groups(self) -> typing.Optional[typing.List[ISecurityGroup]]:
-        '''The security groups to associate with this interface VPC endpoint.
-
-        :default: - a new security group is created
-        '''
-        result = self._values.get("security_groups")
-        return typing.cast(typing.Optional[typing.List[ISecurityGroup]], result)
+        result = self._values.get("service_region")
+        return typing.cast(typing.Optional[builtins.str], result)
 
     @builtins.property
     def subnets(self) -> typing.Optional["SubnetSelection"]:
@@ -95401,6 +96037,7 @@ class Vpc(
         private_dns_enabled: typing.Optional[builtins.bool] = None,
         private_dns_only_for_inbound_resolver_endpoint: typing.Optional["VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint"] = None,
         security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
+        service_region: typing.Optional[builtins.str] = None,
         subnets: typing.Optional[typing.Union[SubnetSelection, typing.Dict[builtins.str, typing.Any]]] = None,
     ) -> "InterfaceVpcEndpoint":
         '''Adds a new interface endpoint to this VPC.
@@ -95414,6 +96051,7 @@ class Vpc(
         :param private_dns_enabled: Whether to associate a private hosted zone with the specified VPC. This allows you to make requests to the service using its default DNS hostname. Default: set by the instance of IInterfaceVpcEndpointService, or true if not defined by the instance of IInterfaceVpcEndpointService
         :param private_dns_only_for_inbound_resolver_endpoint: Whether to enable private DNS only for inbound endpoints. Default: not specified
         :param security_groups: The security groups to associate with this interface VPC endpoint. Default: - a new security group is created
+        :param service_region: The region where the VPC endpoint service is located. Only needs to be specified for cross-region VPC endpoints. Default: - Same region as the interface VPC endpoint
         :param subnets: The subnets in which to create an endpoint network interface. At most one per availability zone. Default: - private subnets
         '''
         if __debug__:
@@ -95428,6 +96066,7 @@ class Vpc(
             private_dns_enabled=private_dns_enabled,
             private_dns_only_for_inbound_resolver_endpoint=private_dns_only_for_inbound_resolver_endpoint,
             security_groups=security_groups,
+            service_region=service_region,
             subnets=subnets,
         )
 
@@ -101655,6 +102294,7 @@ class InterfaceVpcEndpoint(
         private_dns_enabled: typing.Optional[builtins.bool] = None,
         private_dns_only_for_inbound_resolver_endpoint: typing.Optional[VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint] = None,
         security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
+        service_region: typing.Optional[builtins.str] = None,
         subnets: typing.Optional[typing.Union[SubnetSelection, typing.Dict[builtins.str, typing.Any]]] = None,
     ) -> None:
         '''
@@ -101669,6 +102309,7 @@ class InterfaceVpcEndpoint(
         :param private_dns_enabled: Whether to associate a private hosted zone with the specified VPC. This allows you to make requests to the service using its default DNS hostname. Default: set by the instance of IInterfaceVpcEndpointService, or true if not defined by the instance of IInterfaceVpcEndpointService
         :param private_dns_only_for_inbound_resolver_endpoint: Whether to enable private DNS only for inbound endpoints. Default: not specified
         :param security_groups: The security groups to associate with this interface VPC endpoint. Default: - a new security group is created
+        :param service_region: The region where the VPC endpoint service is located. Only needs to be specified for cross-region VPC endpoints. Default: - Same region as the interface VPC endpoint
         :param subnets: The subnets in which to create an endpoint network interface. At most one per availability zone. Default: - private subnets
         '''
         if __debug__:
@@ -101685,6 +102326,7 @@ class InterfaceVpcEndpoint(
             private_dns_enabled=private_dns_enabled,
             private_dns_only_for_inbound_resolver_endpoint=private_dns_only_for_inbound_resolver_endpoint,
             security_groups=security_groups,
+            service_region=service_region,
             subnets=subnets,
         )
 
@@ -104345,6 +104987,8 @@ __all__ = [
     "CfnTransitGatewayAttachment",
     "CfnTransitGatewayAttachmentProps",
     "CfnTransitGatewayConnect",
+    "CfnTransitGatewayConnectPeer",
+    "CfnTransitGatewayConnectPeerProps",
     "CfnTransitGatewayConnectProps",
     "CfnTransitGatewayMulticastDomain",
     "CfnTransitGatewayMulticastDomainAssociation",
@@ -108358,6 +109002,7 @@ def _typecheckingstub__c599e12c3de63926f26bb5da3afad64e8c60b24c3b563faa2986e88c1
     delete_on_termination: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     description: typing.Optional[builtins.str] = None,
     device_index: typing.Optional[jsii.Number] = None,
+    ena_queue_count: typing.Optional[jsii.Number] = None,
     ena_srd_specification: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLaunchTemplate.EnaSrdSpecificationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     groups: typing.Optional[typing.Sequence[builtins.str]] = None,
     interface_type: typing.Optional[builtins.str] = None,
@@ -108681,7 +109326,6 @@ def _typecheckingstub__4d23f1a46df0174ce142c0ff05ac9cb901ecac30141c8b466b44569b4
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
     *,
-    subnet_id: builtins.str,
     allocation_id: typing.Optional[builtins.str] = None,
     connectivity_type: typing.Optional[builtins.str] = None,
     max_drain_duration_seconds: typing.Optional[jsii.Number] = None,
@@ -108689,6 +109333,7 @@ def _typecheckingstub__4d23f1a46df0174ce142c0ff05ac9cb901ecac30141c8b466b44569b4
     secondary_allocation_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
     secondary_private_ip_address_count: typing.Optional[jsii.Number] = None,
     secondary_private_ip_addresses: typing.Optional[typing.Sequence[builtins.str]] = None,
+    subnet_id: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -108706,12 +109351,6 @@ def _typecheckingstub__ccb9afd936b7ea3bdc26e449176215293a7150d149aecacc164a3b752
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__5ea5b3187b853cfa340b72b2a61dc1a1d7320459e754c328fc7013f403d31c74(
-    value: builtins.str,
-) -> None:
-    """Type checking stubs"""
-    pass
-
 def _typecheckingstub__d4cfe702c80e90b7e94df290ccbd9b1126a59f7167ee8d0b08ead001f4b760be(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -108754,6 +109393,12 @@ def _typecheckingstub__6f95c2f3e513b379e30162aef0ef12684ffddc3d711e6a83303fbb920
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__5ea5b3187b853cfa340b72b2a61dc1a1d7320459e754c328fc7013f403d31c74(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__76a6a3daaab575df04de03efcf802de9ee1357d57a0474a96922bc7d42b638e2(
     value: typing.Optional[typing.List[_CfnTag_f6864754]],
 ) -> None:
@@ -108762,7 +109407,6 @@ def _typecheckingstub__76a6a3daaab575df04de03efcf802de9ee1357d57a0474a96922bc7d4
 
 def _typecheckingstub__1aba83edf7a8e3f14e1d4f9ca76c7049f7f7c569d2ffb43bcad65b330ee9a581(
     *,
-    subnet_id: builtins.str,
     allocation_id: typing.Optional[builtins.str] = None,
     connectivity_type: typing.Optional[builtins.str] = None,
     max_drain_duration_seconds: typing.Optional[jsii.Number] = None,
@@ -108770,6 +109414,7 @@ def _typecheckingstub__1aba83edf7a8e3f14e1d4f9ca76c7049f7f7c569d2ffb43bcad65b330
     secondary_allocation_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
     secondary_private_ip_address_count: typing.Optional[jsii.Number] = None,
     secondary_private_ip_addresses: typing.Optional[typing.Sequence[builtins.str]] = None,
+    subnet_id: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -112097,6 +112742,78 @@ def _typecheckingstub__f28cf9493a9ba4af846e6c741893e0f0824bc477c2f1963741643adc4
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__1f8d207f56975363774b74fa734c1d229d4b0713b4f3516f3314cd9ebcd0e41c(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    connect_peer_configuration: typing.Union[_IResolvable_da3f097b, typing.Union[CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty, typing.Dict[builtins.str, typing.Any]]],
+    transit_gateway_attachment_id: builtins.str,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b94393058454232978c68e76b9895b5f0775d34692c68d57103fafd32b53d66e(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__9f8ed9dcea183e690fe0f56b975179a4ccbc13162e837cb3c510b70d38b0ef94(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__58ed17da8e00760b83a59e1e504bfc8914d4d0783ebb460d52132e6d22c7c5f5(
+    value: typing.Union[_IResolvable_da3f097b, CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b2909b9fd1cf53285718444b2e767681f76b6ed629fb8bd9cac90f9dfa879a82(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__6eada39e62da78a0081621fc2e53f369626e0a8daba2db28d9f8ab73bf02a2fd(
+    value: typing.Optional[typing.List[_CfnTag_f6864754]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__d0f30598b4049c4e4e643a34da7497413353b78ba0ca8e5b1eb98867ba0a56b2(
+    *,
+    bgp_status: typing.Optional[builtins.str] = None,
+    peer_address: typing.Optional[builtins.str] = None,
+    peer_asn: typing.Optional[jsii.Number] = None,
+    transit_gateway_address: typing.Optional[builtins.str] = None,
+    transit_gateway_asn: typing.Optional[jsii.Number] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__ed11c27aeee7d87fa8fd9b18c1c8885352346e3191deb89b80e860c9891e5b56(
+    *,
+    inside_cidr_blocks: typing.Sequence[builtins.str],
+    peer_address: builtins.str,
+    bgp_configurations: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnTransitGatewayConnectPeer.TransitGatewayAttachmentBgpConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+    protocol: typing.Optional[builtins.str] = None,
+    transit_gateway_address: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__32b3081584f3dcc39f1077e0e7bc1b3a6c7b2678c8e23fa6b66e94bc04676ed3(
+    *,
+    connect_peer_configuration: typing.Union[_IResolvable_da3f097b, typing.Union[CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty, typing.Dict[builtins.str, typing.Any]]],
+    transit_gateway_attachment_id: builtins.str,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__ae4b1efff7cf5a4fab7c16d5ffad18f9c18dbd0d23dd3fa072685e3264ade5e1(
     *,
     options: typing.Union[_IResolvable_da3f097b, typing.Union[CfnTransitGatewayConnect.TransitGatewayConnectOptionsProperty, typing.Dict[builtins.str, typing.Any]]],
@@ -115155,6 +115872,7 @@ def _typecheckingstub__a8399f0a6a7650e1c02d00770e21cad422b9760a1fdc24465cf546371
     private_dns_enabled: typing.Optional[builtins.bool] = None,
     private_dns_only_for_inbound_resolver_endpoint: typing.Optional[VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint] = None,
     security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
+    service_region: typing.Optional[builtins.str] = None,
     subnets: typing.Optional[typing.Union[SubnetSelection, typing.Dict[builtins.str, typing.Any]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -115770,6 +116488,7 @@ def _typecheckingstub__1a6dd0208e338cbe286ecaa3bcf5f95a5f0a0c1e1b3565ca6de058b5f
     private_dns_enabled: typing.Optional[builtins.bool] = None,
     private_dns_only_for_inbound_resolver_endpoint: typing.Optional[VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint] = None,
     security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
+    service_region: typing.Optional[builtins.str] = None,
     subnets: typing.Optional[typing.Union[SubnetSelection, typing.Dict[builtins.str, typing.Any]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -115785,6 +116504,7 @@ def _typecheckingstub__6606ba3de030c44ce43dee44afe64adc59231bfc542799d1354e0732a
     private_dns_enabled: typing.Optional[builtins.bool] = None,
     private_dns_only_for_inbound_resolver_endpoint: typing.Optional[VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint] = None,
     security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
+    service_region: typing.Optional[builtins.str] = None,
     subnets: typing.Optional[typing.Union[SubnetSelection, typing.Dict[builtins.str, typing.Any]]] = None,
     vpc: IVpc,
 ) -> None:
@@ -117041,6 +117761,7 @@ def _typecheckingstub__00d64fd969958beb796ccf5d1bc5d808fd3e751c9e3c2237abfaf2dbe
     private_dns_enabled: typing.Optional[builtins.bool] = None,
     private_dns_only_for_inbound_resolver_endpoint: typing.Optional[VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint] = None,
     security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
+    service_region: typing.Optional[builtins.str] = None,
     subnets: typing.Optional[typing.Union[SubnetSelection, typing.Dict[builtins.str, typing.Any]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -117631,6 +118352,7 @@ def _typecheckingstub__a11756d82f1033710d89b4b10b111462f7a99734ff79d3648bd84d0e5
     private_dns_enabled: typing.Optional[builtins.bool] = None,
     private_dns_only_for_inbound_resolver_endpoint: typing.Optional[VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint] = None,
     security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
+    service_region: typing.Optional[builtins.str] = None,
     subnets: typing.Optional[typing.Union[SubnetSelection, typing.Dict[builtins.str, typing.Any]]] = None,
 ) -> None:
     """Type checking stubs"""