aws-cdk-lib 2.210.0__py3-none-any.whl → 2.212.0__py3-none-any.whl

aws_cdk/aws_ec2/__init__.py

@@ -1212,6 +1212,19 @@ ec2.InterfaceVpcEndpoint(self, "VPC Endpoint",
 )
 ```
 
+For cross-region VPC endpoints, specify the `serviceRegion` parameter:
+
+```python
+# vpc: ec2.Vpc
+
+
+ec2.InterfaceVpcEndpoint(self, "CrossRegionEndpoint",
+    vpc=vpc,
+    service=ec2.InterfaceVpcEndpointService("com.amazonaws.vpce.us-east-1.vpce-svc-123456", 443),
+    service_region="us-east-1"
+)
+```
+
 #### Security groups for interface VPC endpoints
 
 By default, interface VPC endpoints create a new security group and all traffic to the endpoint from within the VPC will be automatically allowed.
@@ -12267,7 +12280,7 @@ class CfnEC2Fleet(
             '''Describes a block device for an EBS volume.
 
             :param delete_on_termination: Indicates whether the EBS volume is deleted on instance termination. For more information, see `Preserving Amazon EBS volumes on instance termination <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/terminating-instances.html#preserving-volumes-on-termination>`_ in the *Amazon EC2 User Guide* .
-            :param encrypted: Indicates whether the encryption state of an EBS volume is changed while being restored from a backing snapshot. The effect of setting the encryption state to ``true`` depends on the volume origin (new or from a snapshot), starting encryption state, ownership, and whether encryption by default is enabled. For more information, see `Amazon EBS encryption <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption.html#encryption-parameters>`_ in the *Amazon EBS User Guide* . In no case can you remove encryption from an encrypted volume. Encrypted volumes can only be attached to instances that support Amazon EBS encryption. For more information, see `Supported instance types <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption-requirements.html#ebs-encryption_supported_instances>`_ . This parameter is not returned by ``DescribeImageAttribute`` . For ``CreateImage`` and ``RegisterImage`` , whether you can include this parameter, and the allowed values differ depending on the type of block device mapping you are creating. - If you are creating a block device mapping for a *new (empty) volume* , you can include this parameter, and specify either ``true`` for an encrypted volume, or ``false`` for an unencrypted volume. If you omit this parameter, it defaults to ``false`` (unencrypted). - If you are creating a block device mapping from an *existing encrypted or unencrypted snapshot* , you must omit this parameter. If you include this parameter, the request will fail, regardless of the value that you specify. - If you are creating a block device mapping from an *existing unencrypted volume* , you can include this parameter, but you must specify ``false`` . If you specify ``true`` , the request will fail. In this case, we recommend that you omit the parameter. - If you are creating a block device mapping from an *existing encrypted volume* , you can include this parameter, and specify either ``true`` or ``false`` . However, if you specify ``false`` , the parameter is ignored and the block device mapping is always encrypted. In this case, we recommend that you omit the parameter.
+            :param encrypted: Indicates whether the encryption state of an EBS volume is changed while being restored from a backing snapshot. The effect of setting the encryption state to ``true`` depends on the volume origin (new or from a snapshot), starting encryption state, ownership, and whether encryption by default is enabled. For more information, see `Amazon EBS encryption <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption.html#encryption-parameters>`_ in the *Amazon EBS User Guide* . In no case can you remove encryption from an encrypted volume. Encrypted volumes can only be attached to instances that support Amazon EBS encryption. For more information, see `Supported instance types <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption-requirements.html#ebs-encryption_supported_instances>`_ . - If you are creating a block device mapping for a *new (empty) volume* , you can include this parameter, and specify either ``true`` for an encrypted volume, or ``false`` for an unencrypted volume. If you omit this parameter, it defaults to ``false`` (unencrypted). - If you are creating a block device mapping from an *existing encrypted or unencrypted snapshot* , you must omit this parameter. If you include this parameter, the request will fail, regardless of the value that you specify. - If you are creating a block device mapping from an *existing unencrypted volume* , you can include this parameter, but you must specify ``false`` . If you specify ``true`` , the request will fail. In this case, we recommend that you omit the parameter. - If you are creating a block device mapping from an *existing encrypted volume* , you can include this parameter, and specify either ``true`` or ``false`` . However, if you specify ``false`` , the parameter is ignored and the block device mapping is always encrypted. In this case, we recommend that you omit the parameter.
             :param iops: The number of I/O operations per second (IOPS). For ``gp3`` , ``io1`` , and ``io2`` volumes, this represents the number of IOPS that are provisioned for the volume. For ``gp2`` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. The following are the supported values for each volume type: - ``gp3`` : 3,000 - 16,000 IOPS - ``io1`` : 100 - 64,000 IOPS - ``io2`` : 100 - 256,000 IOPS For ``io2`` volumes, you can achieve up to 256,000 IOPS on `instances built on the Nitro System <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html#ec2-nitro-instances>`_ . On other instances, you can achieve performance up to 32,000 IOPS. This parameter is required for ``io1`` and ``io2`` volumes. The default for ``gp3`` volumes is 3,000 IOPS.
             :param kms_key_id: Identifier (key ID, key alias, key ARN, or alias ARN) of the customer managed KMS key to use for EBS encryption. This parameter is only supported on ``BlockDeviceMapping`` objects called by `RunInstances <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html>`_ , `RequestSpotFleet <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RequestSpotFleet.html>`_ , and `RequestSpotInstances <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RequestSpotInstances.html>`_ .
             :param snapshot_id: The ID of the snapshot.
@@ -12343,10 +12356,6 @@ class CfnEC2Fleet(
 
             Encrypted volumes can only be attached to instances that support Amazon EBS encryption. For more information, see `Supported instance types <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption-requirements.html#ebs-encryption_supported_instances>`_ .
 
-            This parameter is not returned by ``DescribeImageAttribute`` .
-
-            For ``CreateImage`` and ``RegisterImage`` , whether you can include this parameter, and the allowed values differ depending on the type of block device mapping you are creating.
-
             - If you are creating a block device mapping for a *new (empty) volume* , you can include this parameter, and specify either ``true`` for an encrypted volume, or ``false`` for an unencrypted volume. If you omit this parameter, it defaults to ``false`` (unencrypted).
             - If you are creating a block device mapping from an *existing encrypted or unencrypted snapshot* , you must omit this parameter. If you include this parameter, the request will fail, regardless of the value that you specify.
             - If you are creating a block device mapping from an *existing unencrypted volume* , you can include this parameter, but you must specify ``false`` . If you specify ``true`` , the request will fail. In this case, we recommend that you omit the parameter.
@@ -14357,7 +14366,7 @@ class CfnEC2Fleet(
             '''Describes the placement of an instance.
 
             :param affinity: The affinity setting for the instance on the Dedicated Host. This parameter is not supported for `CreateFleet <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateFleet>`_ or `ImportInstance <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ImportInstance.html>`_ .
-            :param availability_zone: The Availability Zone of the instance. If not specified, an Availability Zone will be automatically chosen for you based on the load balancing criteria for the Region. This parameter is not supported for `CreateFleet <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateFleet>`_ .
+            :param availability_zone: The Availability Zone of the instance. Either ``AvailabilityZone`` or ``AvailabilityZoneId`` can be specified, but not both. If neither is specified, Amazon EC2 automatically selects an Availability Zone based on the load balancing criteria for the Region. This parameter is not supported for `CreateFleet <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateFleet>`_ .
             :param group_name: The name of the placement group that the instance is in. If you specify ``GroupName`` , you can't specify ``GroupId`` .
             :param host_id: The ID of the Dedicated Host on which the instance resides. This parameter is not supported for `CreateFleet <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateFleet>`_ or `ImportInstance <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ImportInstance.html>`_ .
             :param host_resource_group_arn: The ARN of the host resource group in which to launch the instances. If you specify this parameter, either omit the *Tenancy* parameter or set it to ``host`` . This parameter is not supported for `CreateFleet <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateFleet>`_ .
@@ -14428,7 +14437,7 @@ class CfnEC2Fleet(
         def availability_zone(self) -> typing.Optional[builtins.str]:
             '''The Availability Zone of the instance.
 
-            If not specified, an Availability Zone will be automatically chosen for you based on the load balancing criteria for the Region.
+            Either ``AvailabilityZone`` or ``AvailabilityZoneId`` can be specified, but not both. If neither is specified, Amazon EC2 automatically selects an Availability Zone based on the load balancing criteria for the Region.
 
             This parameter is not supported for `CreateFleet <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateFleet>`_ .
 
@@ -18056,7 +18065,7 @@ class CfnIPAM(
         :param default_resource_discovery_organizational_unit_exclusions: If your IPAM is integrated with AWS Organizations, you can exclude an `organizational unit (OU) <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#organizationalunit>`_ from being managed by IPAM. When you exclude an OU, IPAM will not manage the IP addresses in accounts in that OU. For more information, see `Exclude organizational units from IPAM <https://docs.aws.amazon.com/vpc/latest/ipam/exclude-ous.html>`_ in the *Amazon Virtual Private Cloud IP Address Manager User Guide* .
         :param description: The description for the IPAM.
         :param enable_private_gua: Enable this option to use your own GUA ranges as private IPv6 addresses. This option is disabled by default.
-        :param metered_account: A metered account is an account that is charged for active IP addresses managed in IPAM.
+        :param metered_account: A metered account is an AWS account that is charged for active IP addresses managed in IPAM. For more information, see `Enable cost distribution <https://docs.aws.amazon.com/vpc/latest/ipam/ipam-enable-cost-distro.html>`_ in the *Amazon VPC IPAM User Guide* . Possible values: - ``ipam-owner`` (default): The AWS account which owns the IPAM is charged for all active IP addresses managed in IPAM. - ``resource-owner`` : The AWS account that owns the IP address is charged for the active IP address.
         :param operating_regions: The operating Regions for an IPAM. Operating Regions are AWS Regions where the IPAM is allowed to manage IP address CIDRs. IPAM only discovers and monitors resources in the AWS Regions you select as operating Regions. For more information about operating Regions, see `Create an IPAM <https://docs.aws.amazon.com//vpc/latest/ipam/create-ipam.html>`_ in the *Amazon VPC IPAM User Guide* .
         :param tags: The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value. For example, to find all resources that have a tag with the key ``Owner`` and the value ``TeamA`` , specify ``tag:Owner`` for the filter name and ``TeamA`` for the filter value.
         :param tier: IPAM is offered in a Free Tier and an Advanced Tier. For more information about the features available in each tier and the costs associated with the tiers, see the `VPC IPAM product pricing page <https://docs.aws.amazon.com//vpc/pricing/>`_ .
@@ -18242,7 +18251,7 @@ class CfnIPAM(
     @builtins.property
     @jsii.member(jsii_name="meteredAccount")
     def metered_account(self) -> typing.Optional[builtins.str]:
-        '''A metered account is an account that is charged for active IP addresses managed in IPAM.'''
+        '''A metered account is an AWS account that is charged for active IP addresses managed in IPAM.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "meteredAccount"))
 
     @metered_account.setter
@@ -19959,7 +19968,7 @@ class CfnIPAMProps:
         :param default_resource_discovery_organizational_unit_exclusions: If your IPAM is integrated with AWS Organizations, you can exclude an `organizational unit (OU) <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#organizationalunit>`_ from being managed by IPAM. When you exclude an OU, IPAM will not manage the IP addresses in accounts in that OU. For more information, see `Exclude organizational units from IPAM <https://docs.aws.amazon.com/vpc/latest/ipam/exclude-ous.html>`_ in the *Amazon Virtual Private Cloud IP Address Manager User Guide* .
         :param description: The description for the IPAM.
         :param enable_private_gua: Enable this option to use your own GUA ranges as private IPv6 addresses. This option is disabled by default.
-        :param metered_account: A metered account is an account that is charged for active IP addresses managed in IPAM.
+        :param metered_account: A metered account is an AWS account that is charged for active IP addresses managed in IPAM. For more information, see `Enable cost distribution <https://docs.aws.amazon.com/vpc/latest/ipam/ipam-enable-cost-distro.html>`_ in the *Amazon VPC IPAM User Guide* . Possible values: - ``ipam-owner`` (default): The AWS account which owns the IPAM is charged for all active IP addresses managed in IPAM. - ``resource-owner`` : The AWS account that owns the IP address is charged for the active IP address.
         :param operating_regions: The operating Regions for an IPAM. Operating Regions are AWS Regions where the IPAM is allowed to manage IP address CIDRs. IPAM only discovers and monitors resources in the AWS Regions you select as operating Regions. For more information about operating Regions, see `Create an IPAM <https://docs.aws.amazon.com//vpc/latest/ipam/create-ipam.html>`_ in the *Amazon VPC IPAM User Guide* .
         :param tags: The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value. For example, to find all resources that have a tag with the key ``Owner`` and the value ``TeamA`` , specify ``tag:Owner`` for the filter name and ``TeamA`` for the filter value.
         :param tier: IPAM is offered in a Free Tier and an Advanced Tier. For more information about the features available in each tier and the costs associated with the tiers, see the `VPC IPAM product pricing page <https://docs.aws.amazon.com//vpc/pricing/>`_ .
@@ -20050,7 +20059,14 @@ class CfnIPAMProps:
 
     @builtins.property
     def metered_account(self) -> typing.Optional[builtins.str]:
-        '''A metered account is an account that is charged for active IP addresses managed in IPAM.
+        '''A metered account is an AWS account that is charged for active IP addresses managed in IPAM.
+
+        For more information, see `Enable cost distribution <https://docs.aws.amazon.com/vpc/latest/ipam/ipam-enable-cost-distro.html>`_ in the *Amazon VPC IPAM User Guide* .
+
+        Possible values:
+
+        - ``ipam-owner`` (default): The AWS account which owns the IPAM is charged for all active IP addresses managed in IPAM.
+        - ``resource-owner`` : The AWS account that owns the IP address is charged for the active IP address.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipam.html#cfn-ec2-ipam-meteredaccount
         '''
@@ -25828,6 +25844,200 @@ class CfnInternetGatewayProps:
         )
 
 
+@jsii.implements(_IInspectable_c2943556)
+class CfnIpPoolRouteTableAssociation(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_ec2.CfnIpPoolRouteTableAssociation",
+):
+    '''Resource Type definition for AWS::EC2::IpPoolRouteTableAssociation.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ippoolroutetableassociation.html
+    :cloudformationResource: AWS::EC2::IpPoolRouteTableAssociation
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_ec2 as ec2
+        
+        cfn_ip_pool_route_table_association = ec2.CfnIpPoolRouteTableAssociation(self, "MyCfnIpPoolRouteTableAssociation",
+            public_ipv4_pool="publicIpv4Pool",
+            route_table_id="routeTableId"
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        public_ipv4_pool: builtins.str,
+        route_table_id: builtins.str,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param public_ipv4_pool: The ID of the public IPv4 pool.
+        :param route_table_id: The ID of the route table.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__d2e346c37572137e6dfe14e676bbcd2ecce12183e9c91e6bac858b8287c38d18)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnIpPoolRouteTableAssociationProps(
+            public_ipv4_pool=public_ipv4_pool, route_table_id=route_table_id
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__0e8beabfae1e3898fe833fa4f6fec4db49c1797a24c9a17c0a1cc938efbb234d)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__9261e60da0656ce4be4de7b6f7ca910aa7426a27190ff19b86e1fa3fca169b5f)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrAssociationId")
+    def attr_association_id(self) -> builtins.str:
+        '''The route table association ID.
+
+        :cloudformationAttribute: AssociationId
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrAssociationId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="publicIpv4Pool")
+    def public_ipv4_pool(self) -> builtins.str:
+        '''The ID of the public IPv4 pool.'''
+        return typing.cast(builtins.str, jsii.get(self, "publicIpv4Pool"))
+
+    @public_ipv4_pool.setter
+    def public_ipv4_pool(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__9e778f968d1e05ca9a9a12139d6b6122fee2d84c3920b3266bb24123b1125376)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "publicIpv4Pool", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="routeTableId")
+    def route_table_id(self) -> builtins.str:
+        '''The ID of the route table.'''
+        return typing.cast(builtins.str, jsii.get(self, "routeTableId"))
+
+    @route_table_id.setter
+    def route_table_id(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__50b3a9184baeaee59a249d70d1646e9be6be39d5717e3a579744f8bcbd740d9e)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "routeTableId", value) # pyright: ignore[reportArgumentType]
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_ec2.CfnIpPoolRouteTableAssociationProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "public_ipv4_pool": "publicIpv4Pool",
+        "route_table_id": "routeTableId",
+    },
+)
+class CfnIpPoolRouteTableAssociationProps:
+    def __init__(
+        self,
+        *,
+        public_ipv4_pool: builtins.str,
+        route_table_id: builtins.str,
+    ) -> None:
+        '''Properties for defining a ``CfnIpPoolRouteTableAssociation``.
+
+        :param public_ipv4_pool: The ID of the public IPv4 pool.
+        :param route_table_id: The ID of the route table.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ippoolroutetableassociation.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_ec2 as ec2
+            
+            cfn_ip_pool_route_table_association_props = ec2.CfnIpPoolRouteTableAssociationProps(
+                public_ipv4_pool="publicIpv4Pool",
+                route_table_id="routeTableId"
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__ca7ebe92862b15a6d48fca22126c61fa57bcf8453d0939d48bb4080583c8ee82)
+            check_type(argname="argument public_ipv4_pool", value=public_ipv4_pool, expected_type=type_hints["public_ipv4_pool"])
+            check_type(argname="argument route_table_id", value=route_table_id, expected_type=type_hints["route_table_id"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "public_ipv4_pool": public_ipv4_pool,
+            "route_table_id": route_table_id,
+        }
+
+    @builtins.property
+    def public_ipv4_pool(self) -> builtins.str:
+        '''The ID of the public IPv4 pool.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ippoolroutetableassociation.html#cfn-ec2-ippoolroutetableassociation-publicipv4pool
+        '''
+        result = self._values.get("public_ipv4_pool")
+        assert result is not None, "Required property 'public_ipv4_pool' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def route_table_id(self) -> builtins.str:
+        '''The ID of the route table.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ippoolroutetableassociation.html#cfn-ec2-ippoolroutetableassociation-routetableid
+        '''
+        result = self._values.get("route_table_id")
+        assert result is not None, "Required property 'route_table_id' is missing"
+        return typing.cast(builtins.str, result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnIpPoolRouteTableAssociationProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
 class CfnKeyPair(
     _CfnResource_9df397a6,
@@ -27517,15 +27727,8 @@ class CfnLaunchTemplate(
     )
     class ElasticGpuSpecificationProperty:
         def __init__(self, *, type: typing.Optional[builtins.str] = None) -> None:
-            '''.. epigraph::
-
-   Amazon Elastic Graphics reached end of life on January 8, 2024.
-
-            Specifies a specification for an Elastic GPU for an Amazon EC2 launch template.
-
-            ``ElasticGpuSpecification`` is a property of `AWS::EC2::LaunchTemplate LaunchTemplateData <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html>`_ .
-
-            :param type: The type of Elastic Graphics accelerator.
+            '''
+            :param type: 
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-elasticgpuspecification.html
             :exampleMetadata: fixture=_generated
@@ -27549,8 +27752,7 @@ class CfnLaunchTemplate(
 
         @builtins.property
         def type(self) -> typing.Optional[builtins.str]:
-            '''The type of Elastic Graphics accelerator.
-
+            '''
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-elasticgpuspecification.html#cfn-ec2-launchtemplate-elasticgpuspecification-type
             '''
             result = self._values.get("type")
@@ -28929,8 +29131,8 @@ class CfnLaunchTemplate(
             :param disable_api_stop: Indicates whether to enable the instance for stop protection. For more information, see `Enable stop protection for your EC2 instances <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-stop-protection.html>`_ in the *Amazon EC2 User Guide* .
             :param disable_api_termination: Indicates whether termination protection is enabled for the instance. The default is ``false`` , which means that you can terminate the instance using the Amazon EC2 console, command line tools, or API. You can enable termination protection when you launch an instance, while the instance is running, or while the instance is stopped.
             :param ebs_optimized: Indicates whether the instance is optimized for Amazon EBS I/O. This optimization provides dedicated throughput to Amazon EBS and an optimized configuration stack to provide optimal Amazon EBS I/O performance. This optimization isn't available with all instance types. Additional usage charges apply when using an EBS-optimized instance.
-            :param elastic_gpu_specifications: Deprecated. .. epigraph:: Amazon Elastic Graphics reached end of life on January 8, 2024.
-            :param elastic_inference_accelerators: .. epigraph:: Amazon Elastic Inference is no longer available. An elastic inference accelerator to associate with the instance. Elastic inference accelerators are a resource you can attach to your Amazon EC2 instances to accelerate your Deep Learning (DL) inference workloads. You cannot specify accelerators from different generations in the same request.
+            :param elastic_gpu_specifications: 
+            :param elastic_inference_accelerators: 
             :param enclave_options: Indicates whether the instance is enabled for AWS Nitro Enclaves. For more information, see `What is Nitro Enclaves? <https://docs.aws.amazon.com/enclaves/latest/user/nitro-enclave.html>`_ in the *AWS Nitro Enclaves User Guide* . You can't enable AWS Nitro Enclaves and hibernation on the same instance.
             :param hibernation_options: Indicates whether an instance is enabled for hibernation. This parameter is valid only if the instance meets the `hibernation prerequisites <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/hibernating-prerequisites.html>`_ . For more information, see `Hibernate your Amazon EC2 instance <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Hibernate.html>`_ in the *Amazon EC2 User Guide* .
             :param iam_instance_profile: The name or Amazon Resource Name (ARN) of an IAM instance profile.
@@ -29118,6 +29320,7 @@ class CfnLaunchTemplate(
                         delete_on_termination=False,
                         description="description",
                         device_index=123,
+                        ena_queue_count=123,
                         ena_srd_specification=ec2.CfnLaunchTemplate.EnaSrdSpecificationProperty(
                             ena_srd_enabled=False,
                             ena_srd_udp_specification=ec2.CfnLaunchTemplate.EnaSrdUdpSpecificationProperty(
@@ -29374,12 +29577,7 @@ class CfnLaunchTemplate(
         def elastic_gpu_specifications(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnLaunchTemplate.ElasticGpuSpecificationProperty"]]]]:
-            '''Deprecated.
-
-            .. epigraph::
-
-               Amazon Elastic Graphics reached end of life on January 8, 2024.
-
+            '''
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-elasticgpuspecifications
             '''
             result = self._values.get("elastic_gpu_specifications")
@@ -29389,14 +29587,7 @@ class CfnLaunchTemplate(
         def elastic_inference_accelerators(
             self,
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnLaunchTemplate.LaunchTemplateElasticInferenceAcceleratorProperty"]]]]:
-            '''.. epigraph::
-
-   Amazon Elastic Inference is no longer available.
-
-            An elastic inference accelerator to associate with the instance. Elastic inference accelerators are a resource you can attach to your Amazon EC2 instances to accelerate your Deep Learning (DL) inference workloads.
-
-            You cannot specify accelerators from different generations in the same request.
-
+            '''
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-elasticinferenceaccelerators
             '''
             result = self._values.get("elastic_inference_accelerators")
@@ -29728,16 +29919,9 @@ class CfnLaunchTemplate(
             count: typing.Optional[jsii.Number] = None,
             type: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''.. epigraph::
-
-   Amazon Elastic Inference is no longer available.
-
-            Specifies an elastic inference accelerator.
-
-            ``LaunchTemplateElasticInferenceAccelerator`` is a property of `AWS::EC2::LaunchTemplate LaunchTemplateData <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html>`_ .
-
-            :param count: The number of elastic inference accelerators to attach to the instance. Default: 1
-            :param type: The type of elastic inference accelerator. The possible values are eia1.medium, eia1.large, and eia1.xlarge.
+            '''
+            :param count: 
+            :param type: 
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplateelasticinferenceaccelerator.html
             :exampleMetadata: fixture=_generated
@@ -29765,10 +29949,7 @@ class CfnLaunchTemplate(
 
         @builtins.property
         def count(self) -> typing.Optional[jsii.Number]:
-            '''The number of elastic inference accelerators to attach to the instance.
-
-            Default: 1
-
+            '''
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplateelasticinferenceaccelerator.html#cfn-ec2-launchtemplate-launchtemplateelasticinferenceaccelerator-count
             '''
             result = self._values.get("count")
@@ -29776,10 +29957,7 @@ class CfnLaunchTemplate(
 
         @builtins.property
         def type(self) -> typing.Optional[builtins.str]:
-            '''The type of elastic inference accelerator.
-
-            The possible values are eia1.medium, eia1.large, and eia1.xlarge.
-
+            '''
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplateelasticinferenceaccelerator.html#cfn-ec2-launchtemplate-launchtemplateelasticinferenceaccelerator-type
             '''
             result = self._values.get("type")
@@ -30507,6 +30685,7 @@ class CfnLaunchTemplate(
             "delete_on_termination": "deleteOnTermination",
             "description": "description",
             "device_index": "deviceIndex",
+            "ena_queue_count": "enaQueueCount",
             "ena_srd_specification": "enaSrdSpecification",
             "groups": "groups",
             "interface_type": "interfaceType",
@@ -30535,6 +30714,7 @@ class CfnLaunchTemplate(
             delete_on_termination: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
             description: typing.Optional[builtins.str] = None,
             device_index: typing.Optional[jsii.Number] = None,
+            ena_queue_count: typing.Optional[jsii.Number] = None,
             ena_srd_specification: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnLaunchTemplate.EnaSrdSpecificationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             groups: typing.Optional[typing.Sequence[builtins.str]] = None,
             interface_type: typing.Optional[builtins.str] = None,
@@ -30562,6 +30742,7 @@ class CfnLaunchTemplate(
             :param delete_on_termination: Indicates whether the network interface is deleted when the instance is terminated.
             :param description: A description for the network interface.
             :param device_index: The device index for the network interface attachment. The primary network interface has a device index of 0. If the network interface is of type ``interface`` , you must specify a device index. If you create a launch template that includes secondary network interfaces but no primary network interface, and you specify it using the ``LaunchTemplate`` property of ``AWS::EC2::Instance`` , then you must include a primary network interface using the ``NetworkInterfaces`` property of ``AWS::EC2::Instance`` .
+            :param ena_queue_count: The number of ENA queues to be created with the instance.
             :param ena_srd_specification: The ENA Express configuration for the network interface.
             :param groups: The IDs of one or more security groups.
             :param interface_type: The type of network interface. To create an Elastic Fabric Adapter (EFA), specify ``efa`` or ``efa`` . For more information, see `Elastic Fabric Adapter for AI/ML and HPC workloads on Amazon EC2 <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/efa.html>`_ in the *Amazon EC2 User Guide* . If you are not creating an EFA, specify ``interface`` or omit this parameter. If you specify ``efa-only`` , do not assign any IP addresses to the network interface. EFA-only network interfaces do not support IP addresses. Valid values: ``interface`` | ``efa`` | ``efa-only``
@@ -30599,6 +30780,7 @@ class CfnLaunchTemplate(
                     delete_on_termination=False,
                     description="description",
                     device_index=123,
+                    ena_queue_count=123,
                     ena_srd_specification=ec2.CfnLaunchTemplate.EnaSrdSpecificationProperty(
                         ena_srd_enabled=False,
                         ena_srd_udp_specification=ec2.CfnLaunchTemplate.EnaSrdUdpSpecificationProperty(
@@ -30639,6 +30821,7 @@ class CfnLaunchTemplate(
                 check_type(argname="argument delete_on_termination", value=delete_on_termination, expected_type=type_hints["delete_on_termination"])
                 check_type(argname="argument description", value=description, expected_type=type_hints["description"])
                 check_type(argname="argument device_index", value=device_index, expected_type=type_hints["device_index"])
+                check_type(argname="argument ena_queue_count", value=ena_queue_count, expected_type=type_hints["ena_queue_count"])
                 check_type(argname="argument ena_srd_specification", value=ena_srd_specification, expected_type=type_hints["ena_srd_specification"])
                 check_type(argname="argument groups", value=groups, expected_type=type_hints["groups"])
                 check_type(argname="argument interface_type", value=interface_type, expected_type=type_hints["interface_type"])
@@ -30668,6 +30851,8 @@ class CfnLaunchTemplate(
                 self._values["description"] = description
             if device_index is not None:
                 self._values["device_index"] = device_index
+            if ena_queue_count is not None:
+                self._values["ena_queue_count"] = ena_queue_count
             if ena_srd_specification is not None:
                 self._values["ena_srd_specification"] = ena_srd_specification
             if groups is not None:
@@ -30771,6 +30956,15 @@ class CfnLaunchTemplate(
             result = self._values.get("device_index")
             return typing.cast(typing.Optional[jsii.Number], result)
 
+        @builtins.property
+        def ena_queue_count(self) -> typing.Optional[jsii.Number]:
+            '''The number of ENA queues to be created with the instance.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-networkinterface.html#cfn-ec2-launchtemplate-networkinterface-enaqueuecount
+            '''
+            result = self._values.get("ena_queue_count")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
         @builtins.property
         def ena_srd_specification(
             self,
@@ -31055,7 +31249,7 @@ class CfnLaunchTemplate(
             ``Placement`` is a property of `AWS::EC2::LaunchTemplate LaunchTemplateData <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html>`_ .
 
             :param affinity: The affinity setting for an instance on a Dedicated Host.
-            :param availability_zone: The Availability Zone for the instance.
+            :param availability_zone: The Availability Zone for the instance. Either ``AvailabilityZone`` or ``AvailabilityZoneId`` can be specified, but not both
             :param group_id: The Group Id of a placement group. You must specify the Placement Group *Group Id* to launch an instance in a shared placement group.
             :param group_name: The name of the placement group for the instance.
             :param host_id: The ID of the Dedicated Host for the instance.
@@ -31129,6 +31323,8 @@ class CfnLaunchTemplate(
         def availability_zone(self) -> typing.Optional[builtins.str]:
             '''The Availability Zone for the instance.
 
+            Either ``AvailabilityZone`` or ``AvailabilityZoneId`` can be specified, but not both
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-placement.html#cfn-ec2-launchtemplate-placement-availabilityzone
             '''
             result = self._values.get("availability_zone")
@@ -33088,9 +33284,6 @@ class CfnNatGateway(
         from aws_cdk import aws_ec2 as ec2
         
         cfn_nat_gateway = ec2.CfnNatGateway(self, "MyCfnNatGateway",
-            subnet_id="subnetId",
-        
-            # the properties below are optional
             allocation_id="allocationId",
             connectivity_type="connectivityType",
             max_drain_duration_seconds=123,
@@ -33098,6 +33291,7 @@ class CfnNatGateway(
             secondary_allocation_ids=["secondaryAllocationIds"],
             secondary_private_ip_address_count=123,
             secondary_private_ip_addresses=["secondaryPrivateIpAddresses"],
+            subnet_id="subnetId",
             tags=[CfnTag(
                 key="key",
                 value="value"
@@ -33110,7 +33304,6 @@ class CfnNatGateway(
         scope: _constructs_77d1e7e8.Construct,
         id: builtins.str,
         *,
-        subnet_id: builtins.str,
         allocation_id: typing.Optional[builtins.str] = None,
         connectivity_type: typing.Optional[builtins.str] = None,
         max_drain_duration_seconds: typing.Optional[jsii.Number] = None,
@@ -33118,12 +33311,12 @@ class CfnNatGateway(
         secondary_allocation_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
         secondary_private_ip_address_count: typing.Optional[jsii.Number] = None,
         secondary_private_ip_addresses: typing.Optional[typing.Sequence[builtins.str]] = None,
+        subnet_id: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param subnet_id: The ID of the subnet in which the NAT gateway is located.
         :param allocation_id: [Public NAT gateway only] The allocation ID of the Elastic IP address that's associated with the NAT gateway. This property is required for a public NAT gateway and cannot be specified with a private NAT gateway.
         :param connectivity_type: Indicates whether the NAT gateway supports public or private connectivity. The default is public connectivity.
         :param max_drain_duration_seconds: The maximum amount of time to wait (in seconds) before forcibly releasing the IP addresses if connections are still in progress. Default value is 350 seconds.
@@ -33131,6 +33324,7 @@ class CfnNatGateway(
         :param secondary_allocation_ids: Secondary EIP allocation IDs. For more information, see `Create a NAT gateway <https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateway-working-with.html>`_ in the *Amazon VPC User Guide* .
         :param secondary_private_ip_address_count: [Private NAT gateway only] The number of secondary private IPv4 addresses you want to assign to the NAT gateway. For more information about secondary addresses, see `Create a NAT gateway <https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-creating>`_ in the *Amazon Virtual Private Cloud User Guide* . ``SecondaryPrivateIpAddressCount`` and ``SecondaryPrivateIpAddresses`` cannot be set at the same time.
         :param secondary_private_ip_addresses: Secondary private IPv4 addresses. For more information about secondary addresses, see `Create a NAT gateway <https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-creating>`_ in the *Amazon Virtual Private Cloud User Guide* . ``SecondaryPrivateIpAddressCount`` and ``SecondaryPrivateIpAddresses`` cannot be set at the same time.
+        :param subnet_id: The ID of the subnet in which the NAT gateway is located.
         :param tags: The tags for the NAT gateway.
         '''
         if __debug__:
@@ -33138,7 +33332,6 @@ class CfnNatGateway(
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = CfnNatGatewayProps(
-            subnet_id=subnet_id,
             allocation_id=allocation_id,
             connectivity_type=connectivity_type,
             max_drain_duration_seconds=max_drain_duration_seconds,
@@ -33146,6 +33339,7 @@ class CfnNatGateway(
             secondary_allocation_ids=secondary_allocation_ids,
             secondary_private_ip_address_count=secondary_private_ip_address_count,
             secondary_private_ip_addresses=secondary_private_ip_addresses,
+            subnet_id=subnet_id,
             tags=tags,
         )
 
@@ -33201,19 +33395,6 @@ class CfnNatGateway(
         '''Tag Manager which manages the tags for this resource.'''
         return typing.cast(_TagManager_0a598cb3, jsii.get(self, "tags"))
 
-    @builtins.property
-    @jsii.member(jsii_name="subnetId")
-    def subnet_id(self) -> builtins.str:
-        '''The ID of the subnet in which the NAT gateway is located.'''
-        return typing.cast(builtins.str, jsii.get(self, "subnetId"))
-
-    @subnet_id.setter
-    def subnet_id(self, value: builtins.str) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__5ea5b3187b853cfa340b72b2a61dc1a1d7320459e754c328fc7013f403d31c74)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "subnetId", value) # pyright: ignore[reportArgumentType]
-
     @builtins.property
     @jsii.member(jsii_name="allocationId")
     def allocation_id(self) -> typing.Optional[builtins.str]:
@@ -33316,6 +33497,19 @@ class CfnNatGateway(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "secondaryPrivateIpAddresses", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="subnetId")
+    def subnet_id(self) -> typing.Optional[builtins.str]:
+        '''The ID of the subnet in which the NAT gateway is located.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "subnetId"))
+
+    @subnet_id.setter
+    def subnet_id(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__5ea5b3187b853cfa340b72b2a61dc1a1d7320459e754c328fc7013f403d31c74)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "subnetId", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
     def tags_raw(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
@@ -33334,7 +33528,6 @@ class CfnNatGateway(
     jsii_type="aws-cdk-lib.aws_ec2.CfnNatGatewayProps",
     jsii_struct_bases=[],
     name_mapping={
-        "subnet_id": "subnetId",
         "allocation_id": "allocationId",
         "connectivity_type": "connectivityType",
         "max_drain_duration_seconds": "maxDrainDurationSeconds",
@@ -33342,6 +33535,7 @@ class CfnNatGateway(
         "secondary_allocation_ids": "secondaryAllocationIds",
         "secondary_private_ip_address_count": "secondaryPrivateIpAddressCount",
         "secondary_private_ip_addresses": "secondaryPrivateIpAddresses",
+        "subnet_id": "subnetId",
         "tags": "tags",
     },
 )
@@ -33349,7 +33543,6 @@ class CfnNatGatewayProps:
     def __init__(
         self,
         *,
-        subnet_id: builtins.str,
         allocation_id: typing.Optional[builtins.str] = None,
         connectivity_type: typing.Optional[builtins.str] = None,
         max_drain_duration_seconds: typing.Optional[jsii.Number] = None,
@@ -33357,11 +33550,11 @@ class CfnNatGatewayProps:
         secondary_allocation_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
         secondary_private_ip_address_count: typing.Optional[jsii.Number] = None,
         secondary_private_ip_addresses: typing.Optional[typing.Sequence[builtins.str]] = None,
+        subnet_id: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''Properties for defining a ``CfnNatGateway``.
 
-        :param subnet_id: The ID of the subnet in which the NAT gateway is located.
         :param allocation_id: [Public NAT gateway only] The allocation ID of the Elastic IP address that's associated with the NAT gateway. This property is required for a public NAT gateway and cannot be specified with a private NAT gateway.
         :param connectivity_type: Indicates whether the NAT gateway supports public or private connectivity. The default is public connectivity.
         :param max_drain_duration_seconds: The maximum amount of time to wait (in seconds) before forcibly releasing the IP addresses if connections are still in progress. Default value is 350 seconds.
@@ -33369,6 +33562,7 @@ class CfnNatGatewayProps:
         :param secondary_allocation_ids: Secondary EIP allocation IDs. For more information, see `Create a NAT gateway <https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateway-working-with.html>`_ in the *Amazon VPC User Guide* .
         :param secondary_private_ip_address_count: [Private NAT gateway only] The number of secondary private IPv4 addresses you want to assign to the NAT gateway. For more information about secondary addresses, see `Create a NAT gateway <https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-creating>`_ in the *Amazon Virtual Private Cloud User Guide* . ``SecondaryPrivateIpAddressCount`` and ``SecondaryPrivateIpAddresses`` cannot be set at the same time.
         :param secondary_private_ip_addresses: Secondary private IPv4 addresses. For more information about secondary addresses, see `Create a NAT gateway <https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-creating>`_ in the *Amazon Virtual Private Cloud User Guide* . ``SecondaryPrivateIpAddressCount`` and ``SecondaryPrivateIpAddresses`` cannot be set at the same time.
+        :param subnet_id: The ID of the subnet in which the NAT gateway is located.
         :param tags: The tags for the NAT gateway.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-natgateway.html
@@ -33381,9 +33575,6 @@ class CfnNatGatewayProps:
             from aws_cdk import aws_ec2 as ec2
             
             cfn_nat_gateway_props = ec2.CfnNatGatewayProps(
-                subnet_id="subnetId",
-            
-                # the properties below are optional
                 allocation_id="allocationId",
                 connectivity_type="connectivityType",
                 max_drain_duration_seconds=123,
@@ -33391,6 +33582,7 @@ class CfnNatGatewayProps:
                 secondary_allocation_ids=["secondaryAllocationIds"],
                 secondary_private_ip_address_count=123,
                 secondary_private_ip_addresses=["secondaryPrivateIpAddresses"],
+                subnet_id="subnetId",
                 tags=[CfnTag(
                     key="key",
                     value="value"
@@ -33399,7 +33591,6 @@ class CfnNatGatewayProps:
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__1aba83edf7a8e3f14e1d4f9ca76c7049f7f7c569d2ffb43bcad65b330ee9a581)
-            check_type(argname="argument subnet_id", value=subnet_id, expected_type=type_hints["subnet_id"])
             check_type(argname="argument allocation_id", value=allocation_id, expected_type=type_hints["allocation_id"])
             check_type(argname="argument connectivity_type", value=connectivity_type, expected_type=type_hints["connectivity_type"])
             check_type(argname="argument max_drain_duration_seconds", value=max_drain_duration_seconds, expected_type=type_hints["max_drain_duration_seconds"])
@@ -33407,10 +33598,9 @@ class CfnNatGatewayProps:
             check_type(argname="argument secondary_allocation_ids", value=secondary_allocation_ids, expected_type=type_hints["secondary_allocation_ids"])
             check_type(argname="argument secondary_private_ip_address_count", value=secondary_private_ip_address_count, expected_type=type_hints["secondary_private_ip_address_count"])
             check_type(argname="argument secondary_private_ip_addresses", value=secondary_private_ip_addresses, expected_type=type_hints["secondary_private_ip_addresses"])
+            check_type(argname="argument subnet_id", value=subnet_id, expected_type=type_hints["subnet_id"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
-        self._values: typing.Dict[builtins.str, typing.Any] = {
-            "subnet_id": subnet_id,
-        }
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
         if allocation_id is not None:
             self._values["allocation_id"] = allocation_id
         if connectivity_type is not None:
@@ -33425,19 +33615,11 @@ class CfnNatGatewayProps:
             self._values["secondary_private_ip_address_count"] = secondary_private_ip_address_count
         if secondary_private_ip_addresses is not None:
             self._values["secondary_private_ip_addresses"] = secondary_private_ip_addresses
+        if subnet_id is not None:
+            self._values["subnet_id"] = subnet_id
         if tags is not None:
             self._values["tags"] = tags
 
-    @builtins.property
-    def subnet_id(self) -> builtins.str:
-        '''The ID of the subnet in which the NAT gateway is located.
-
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-natgateway.html#cfn-ec2-natgateway-subnetid
-        '''
-        result = self._values.get("subnet_id")
-        assert result is not None, "Required property 'subnet_id' is missing"
-        return typing.cast(builtins.str, result)
-
     @builtins.property
     def allocation_id(self) -> typing.Optional[builtins.str]:
         '''[Public NAT gateway only] The allocation ID of the Elastic IP address that's associated with the NAT gateway.
@@ -33521,6 +33703,15 @@ class CfnNatGatewayProps:
         result = self._values.get("secondary_private_ip_addresses")
         return typing.cast(typing.Optional[typing.List[builtins.str]], result)
 
+    @builtins.property
+    def subnet_id(self) -> typing.Optional[builtins.str]:
+        '''The ID of the subnet in which the NAT gateway is located.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-natgateway.html#cfn-ec2-natgateway-subnetid
+        '''
+        result = self._values.get("subnet_id")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
         '''The tags for the NAT gateway.
@@ -53108,7 +53299,7 @@ class CfnSubnet(
             *,
             internet_gateway_block_mode: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''The state of VPC Block Public Access (BPA).
+            '''Specifies the state of VPC Block Public Access (BPA).
 
             :param internet_gateway_block_mode: The mode of VPC BPA. - ``off`` : VPC BPA is not enabled and traffic is allowed to and from internet gateways and egress-only internet gateways in this Region. - ``block-bidirectional`` : Block all traffic to and from internet gateways and egress-only internet gateways in this Region (except for excluded VPCs and subnets). - ``block-ingress`` : Block all internet traffic to the VPCs in this Region (except for VPCs or subnets which are excluded). Only traffic to and from NAT gateways and egress-only internet gateways is allowed because these gateways only allow outbound connections to be established.
 
@@ -53173,7 +53364,7 @@ class CfnSubnet(
             enable_resource_name_dns_a_record: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
             hostname_type: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''Describes the options for instance hostnames.
+            '''Specifies the options for instance hostnames.
 
             :param enable_resource_name_dns_aaaa_record: Indicates whether to respond to DNS queries for instance hostname with DNS AAAA records.
             :param enable_resource_name_dns_a_record: Indicates whether to respond to DNS queries for instance hostnames with DNS A records.
@@ -56945,6 +57136,576 @@ class CfnTransitGatewayConnect(
             )
 
 
+@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+class CfnTransitGatewayConnectPeer(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_ec2.CfnTransitGatewayConnectPeer",
+):
+    '''Describes a transit gateway Connect peer.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewayconnectpeer.html
+    :cloudformationResource: AWS::EC2::TransitGatewayConnectPeer
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_ec2 as ec2
+        
+        cfn_transit_gateway_connect_peer = ec2.CfnTransitGatewayConnectPeer(self, "MyCfnTransitGatewayConnectPeer",
+            connect_peer_configuration=ec2.CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty(
+                inside_cidr_blocks=["insideCidrBlocks"],
+                peer_address="peerAddress",
+        
+                # the properties below are optional
+                bgp_configurations=[ec2.CfnTransitGatewayConnectPeer.TransitGatewayAttachmentBgpConfigurationProperty(
+                    bgp_status="bgpStatus",
+                    peer_address="peerAddress",
+                    peer_asn=123,
+                    transit_gateway_address="transitGatewayAddress",
+                    transit_gateway_asn=123
+                )],
+                protocol="protocol",
+                transit_gateway_address="transitGatewayAddress"
+            ),
+            transit_gateway_attachment_id="transitGatewayAttachmentId",
+        
+            # the properties below are optional
+            tags=[CfnTag(
+                key="key",
+                value="value"
+            )]
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        connect_peer_configuration: typing.Union[_IResolvable_da3f097b, typing.Union["CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty", typing.Dict[builtins.str, typing.Any]]],
+        transit_gateway_attachment_id: builtins.str,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param connect_peer_configuration: The Connect peer details.
+        :param transit_gateway_attachment_id: The ID of the Connect attachment.
+        :param tags: The tags for the Connect peer.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1f8d207f56975363774b74fa734c1d229d4b0713b4f3516f3314cd9ebcd0e41c)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnTransitGatewayConnectPeerProps(
+            connect_peer_configuration=connect_peer_configuration,
+            transit_gateway_attachment_id=transit_gateway_attachment_id,
+            tags=tags,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b94393058454232978c68e76b9895b5f0775d34692c68d57103fafd32b53d66e)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__9f8ed9dcea183e690fe0f56b975179a4ccbc13162e837cb3c510b70d38b0ef94)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrConnectPeerConfigurationBgpConfigurations")
+    def attr_connect_peer_configuration_bgp_configurations(
+        self,
+    ) -> _IResolvable_da3f097b:
+        '''The BGP configuration details.
+
+        :cloudformationAttribute: ConnectPeerConfiguration.BgpConfigurations
+        '''
+        return typing.cast(_IResolvable_da3f097b, jsii.get(self, "attrConnectPeerConfigurationBgpConfigurations"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrConnectPeerConfigurationProtocol")
+    def attr_connect_peer_configuration_protocol(self) -> builtins.str:
+        '''The tunnel protocol.
+
+        :cloudformationAttribute: ConnectPeerConfiguration.Protocol
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrConnectPeerConfigurationProtocol"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrCreationTime")
+    def attr_creation_time(self) -> builtins.str:
+        '''The creation time.
+
+        :cloudformationAttribute: CreationTime
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrCreationTime"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrState")
+    def attr_state(self) -> builtins.str:
+        '''The state of the Connect peer.
+
+        :cloudformationAttribute: State
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrState"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrTransitGatewayConnectPeerId")
+    def attr_transit_gateway_connect_peer_id(self) -> builtins.str:
+        '''The ID of the Connect peer.
+
+        :cloudformationAttribute: TransitGatewayConnectPeerId
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrTransitGatewayConnectPeerId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cdkTagManager")
+    def cdk_tag_manager(self) -> _TagManager_0a598cb3:
+        '''Tag Manager which manages the tags for this resource.'''
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="connectPeerConfiguration")
+    def connect_peer_configuration(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, "CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty"]:
+        '''The Connect peer details.'''
+        return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty"], jsii.get(self, "connectPeerConfiguration"))
+
+    @connect_peer_configuration.setter
+    def connect_peer_configuration(
+        self,
+        value: typing.Union[_IResolvable_da3f097b, "CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty"],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__58ed17da8e00760b83a59e1e504bfc8914d4d0783ebb460d52132e6d22c7c5f5)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "connectPeerConfiguration", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="transitGatewayAttachmentId")
+    def transit_gateway_attachment_id(self) -> builtins.str:
+        '''The ID of the Connect attachment.'''
+        return typing.cast(builtins.str, jsii.get(self, "transitGatewayAttachmentId"))
+
+    @transit_gateway_attachment_id.setter
+    def transit_gateway_attachment_id(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b2909b9fd1cf53285718444b2e767681f76b6ed629fb8bd9cac90f9dfa879a82)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "transitGatewayAttachmentId", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="tags")
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''The tags for the Connect peer.'''
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
+
+    @tags.setter
+    def tags(self, value: typing.Optional[typing.List[_CfnTag_f6864754]]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__6eada39e62da78a0081621fc2e53f369626e0a8daba2db28d9f8ab73bf02a2fd)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_ec2.CfnTransitGatewayConnectPeer.TransitGatewayAttachmentBgpConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "bgp_status": "bgpStatus",
+            "peer_address": "peerAddress",
+            "peer_asn": "peerAsn",
+            "transit_gateway_address": "transitGatewayAddress",
+            "transit_gateway_asn": "transitGatewayAsn",
+        },
+    )
+    class TransitGatewayAttachmentBgpConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            bgp_status: typing.Optional[builtins.str] = None,
+            peer_address: typing.Optional[builtins.str] = None,
+            peer_asn: typing.Optional[jsii.Number] = None,
+            transit_gateway_address: typing.Optional[builtins.str] = None,
+            transit_gateway_asn: typing.Optional[jsii.Number] = None,
+        ) -> None:
+            '''The BGP configuration information.
+
+            :param bgp_status: The BGP status.
+            :param peer_address: The interior BGP peer IP address for the appliance.
+            :param peer_asn: The peer Autonomous System Number (ASN).
+            :param transit_gateway_address: The interior BGP peer IP address for the transit gateway.
+            :param transit_gateway_asn: The transit gateway Autonomous System Number (ASN).
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayattachmentbgpconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_ec2 as ec2
+                
+                transit_gateway_attachment_bgp_configuration_property = ec2.CfnTransitGatewayConnectPeer.TransitGatewayAttachmentBgpConfigurationProperty(
+                    bgp_status="bgpStatus",
+                    peer_address="peerAddress",
+                    peer_asn=123,
+                    transit_gateway_address="transitGatewayAddress",
+                    transit_gateway_asn=123
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__d0f30598b4049c4e4e643a34da7497413353b78ba0ca8e5b1eb98867ba0a56b2)
+                check_type(argname="argument bgp_status", value=bgp_status, expected_type=type_hints["bgp_status"])
+                check_type(argname="argument peer_address", value=peer_address, expected_type=type_hints["peer_address"])
+                check_type(argname="argument peer_asn", value=peer_asn, expected_type=type_hints["peer_asn"])
+                check_type(argname="argument transit_gateway_address", value=transit_gateway_address, expected_type=type_hints["transit_gateway_address"])
+                check_type(argname="argument transit_gateway_asn", value=transit_gateway_asn, expected_type=type_hints["transit_gateway_asn"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if bgp_status is not None:
+                self._values["bgp_status"] = bgp_status
+            if peer_address is not None:
+                self._values["peer_address"] = peer_address
+            if peer_asn is not None:
+                self._values["peer_asn"] = peer_asn
+            if transit_gateway_address is not None:
+                self._values["transit_gateway_address"] = transit_gateway_address
+            if transit_gateway_asn is not None:
+                self._values["transit_gateway_asn"] = transit_gateway_asn
+
+        @builtins.property
+        def bgp_status(self) -> typing.Optional[builtins.str]:
+            '''The BGP status.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayattachmentbgpconfiguration.html#cfn-ec2-transitgatewayconnectpeer-transitgatewayattachmentbgpconfiguration-bgpstatus
+            '''
+            result = self._values.get("bgp_status")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def peer_address(self) -> typing.Optional[builtins.str]:
+            '''The interior BGP peer IP address for the appliance.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayattachmentbgpconfiguration.html#cfn-ec2-transitgatewayconnectpeer-transitgatewayattachmentbgpconfiguration-peeraddress
+            '''
+            result = self._values.get("peer_address")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def peer_asn(self) -> typing.Optional[jsii.Number]:
+            '''The peer Autonomous System Number (ASN).
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayattachmentbgpconfiguration.html#cfn-ec2-transitgatewayconnectpeer-transitgatewayattachmentbgpconfiguration-peerasn
+            '''
+            result = self._values.get("peer_asn")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        @builtins.property
+        def transit_gateway_address(self) -> typing.Optional[builtins.str]:
+            '''The interior BGP peer IP address for the transit gateway.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayattachmentbgpconfiguration.html#cfn-ec2-transitgatewayconnectpeer-transitgatewayattachmentbgpconfiguration-transitgatewayaddress
+            '''
+            result = self._values.get("transit_gateway_address")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def transit_gateway_asn(self) -> typing.Optional[jsii.Number]:
+            '''The transit gateway Autonomous System Number (ASN).
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayattachmentbgpconfiguration.html#cfn-ec2-transitgatewayconnectpeer-transitgatewayattachmentbgpconfiguration-transitgatewayasn
+            '''
+            result = self._values.get("transit_gateway_asn")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "TransitGatewayAttachmentBgpConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_ec2.CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "inside_cidr_blocks": "insideCidrBlocks",
+            "peer_address": "peerAddress",
+            "bgp_configurations": "bgpConfigurations",
+            "protocol": "protocol",
+            "transit_gateway_address": "transitGatewayAddress",
+        },
+    )
+    class TransitGatewayConnectPeerConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            inside_cidr_blocks: typing.Sequence[builtins.str],
+            peer_address: builtins.str,
+            bgp_configurations: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnTransitGatewayConnectPeer.TransitGatewayAttachmentBgpConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
+            protocol: typing.Optional[builtins.str] = None,
+            transit_gateway_address: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''Describes the Connect peer details.
+
+            :param inside_cidr_blocks: The range of interior BGP peer IP addresses.
+            :param peer_address: The Connect peer IP address on the appliance side of the tunnel.
+            :param bgp_configurations: The BGP configuration details.
+            :param protocol: The tunnel protocol.
+            :param transit_gateway_address: The Connect peer IP address on the transit gateway side of the tunnel.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayconnectpeerconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_ec2 as ec2
+                
+                transit_gateway_connect_peer_configuration_property = ec2.CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty(
+                    inside_cidr_blocks=["insideCidrBlocks"],
+                    peer_address="peerAddress",
+                
+                    # the properties below are optional
+                    bgp_configurations=[ec2.CfnTransitGatewayConnectPeer.TransitGatewayAttachmentBgpConfigurationProperty(
+                        bgp_status="bgpStatus",
+                        peer_address="peerAddress",
+                        peer_asn=123,
+                        transit_gateway_address="transitGatewayAddress",
+                        transit_gateway_asn=123
+                    )],
+                    protocol="protocol",
+                    transit_gateway_address="transitGatewayAddress"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__ed11c27aeee7d87fa8fd9b18c1c8885352346e3191deb89b80e860c9891e5b56)
+                check_type(argname="argument inside_cidr_blocks", value=inside_cidr_blocks, expected_type=type_hints["inside_cidr_blocks"])
+                check_type(argname="argument peer_address", value=peer_address, expected_type=type_hints["peer_address"])
+                check_type(argname="argument bgp_configurations", value=bgp_configurations, expected_type=type_hints["bgp_configurations"])
+                check_type(argname="argument protocol", value=protocol, expected_type=type_hints["protocol"])
+                check_type(argname="argument transit_gateway_address", value=transit_gateway_address, expected_type=type_hints["transit_gateway_address"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "inside_cidr_blocks": inside_cidr_blocks,
+                "peer_address": peer_address,
+            }
+            if bgp_configurations is not None:
+                self._values["bgp_configurations"] = bgp_configurations
+            if protocol is not None:
+                self._values["protocol"] = protocol
+            if transit_gateway_address is not None:
+                self._values["transit_gateway_address"] = transit_gateway_address
+
+        @builtins.property
+        def inside_cidr_blocks(self) -> typing.List[builtins.str]:
+            '''The range of interior BGP peer IP addresses.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayconnectpeerconfiguration.html#cfn-ec2-transitgatewayconnectpeer-transitgatewayconnectpeerconfiguration-insidecidrblocks
+            '''
+            result = self._values.get("inside_cidr_blocks")
+            assert result is not None, "Required property 'inside_cidr_blocks' is missing"
+            return typing.cast(typing.List[builtins.str], result)
+
+        @builtins.property
+        def peer_address(self) -> builtins.str:
+            '''The Connect peer IP address on the appliance side of the tunnel.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayconnectpeerconfiguration.html#cfn-ec2-transitgatewayconnectpeer-transitgatewayconnectpeerconfiguration-peeraddress
+            '''
+            result = self._values.get("peer_address")
+            assert result is not None, "Required property 'peer_address' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def bgp_configurations(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnTransitGatewayConnectPeer.TransitGatewayAttachmentBgpConfigurationProperty"]]]]:
+            '''The BGP configuration details.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayconnectpeerconfiguration.html#cfn-ec2-transitgatewayconnectpeer-transitgatewayconnectpeerconfiguration-bgpconfigurations
+            '''
+            result = self._values.get("bgp_configurations")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnTransitGatewayConnectPeer.TransitGatewayAttachmentBgpConfigurationProperty"]]]], result)
+
+        @builtins.property
+        def protocol(self) -> typing.Optional[builtins.str]:
+            '''The tunnel protocol.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayconnectpeerconfiguration.html#cfn-ec2-transitgatewayconnectpeer-transitgatewayconnectpeerconfiguration-protocol
+            '''
+            result = self._values.get("protocol")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def transit_gateway_address(self) -> typing.Optional[builtins.str]:
+            '''The Connect peer IP address on the transit gateway side of the tunnel.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayconnectpeer-transitgatewayconnectpeerconfiguration.html#cfn-ec2-transitgatewayconnectpeer-transitgatewayconnectpeerconfiguration-transitgatewayaddress
+            '''
+            result = self._values.get("transit_gateway_address")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "TransitGatewayConnectPeerConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_ec2.CfnTransitGatewayConnectPeerProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "connect_peer_configuration": "connectPeerConfiguration",
+        "transit_gateway_attachment_id": "transitGatewayAttachmentId",
+        "tags": "tags",
+    },
+)
+class CfnTransitGatewayConnectPeerProps:
+    def __init__(
+        self,
+        *,
+        connect_peer_configuration: typing.Union[_IResolvable_da3f097b, typing.Union[CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty, typing.Dict[builtins.str, typing.Any]]],
+        transit_gateway_attachment_id: builtins.str,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnTransitGatewayConnectPeer``.
+
+        :param connect_peer_configuration: The Connect peer details.
+        :param transit_gateway_attachment_id: The ID of the Connect attachment.
+        :param tags: The tags for the Connect peer.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewayconnectpeer.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_ec2 as ec2
+            
+            cfn_transit_gateway_connect_peer_props = ec2.CfnTransitGatewayConnectPeerProps(
+                connect_peer_configuration=ec2.CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty(
+                    inside_cidr_blocks=["insideCidrBlocks"],
+                    peer_address="peerAddress",
+            
+                    # the properties below are optional
+                    bgp_configurations=[ec2.CfnTransitGatewayConnectPeer.TransitGatewayAttachmentBgpConfigurationProperty(
+                        bgp_status="bgpStatus",
+                        peer_address="peerAddress",
+                        peer_asn=123,
+                        transit_gateway_address="transitGatewayAddress",
+                        transit_gateway_asn=123
+                    )],
+                    protocol="protocol",
+                    transit_gateway_address="transitGatewayAddress"
+                ),
+                transit_gateway_attachment_id="transitGatewayAttachmentId",
+            
+                # the properties below are optional
+                tags=[CfnTag(
+                    key="key",
+                    value="value"
+                )]
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__32b3081584f3dcc39f1077e0e7bc1b3a6c7b2678c8e23fa6b66e94bc04676ed3)
+            check_type(argname="argument connect_peer_configuration", value=connect_peer_configuration, expected_type=type_hints["connect_peer_configuration"])
+            check_type(argname="argument transit_gateway_attachment_id", value=transit_gateway_attachment_id, expected_type=type_hints["transit_gateway_attachment_id"])
+            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "connect_peer_configuration": connect_peer_configuration,
+            "transit_gateway_attachment_id": transit_gateway_attachment_id,
+        }
+        if tags is not None:
+            self._values["tags"] = tags
+
+    @builtins.property
+    def connect_peer_configuration(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty]:
+        '''The Connect peer details.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewayconnectpeer.html#cfn-ec2-transitgatewayconnectpeer-connectpeerconfiguration
+        '''
+        result = self._values.get("connect_peer_configuration")
+        assert result is not None, "Required property 'connect_peer_configuration' is missing"
+        return typing.cast(typing.Union[_IResolvable_da3f097b, CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty], result)
+
+    @builtins.property
+    def transit_gateway_attachment_id(self) -> builtins.str:
+        '''The ID of the Connect attachment.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewayconnectpeer.html#cfn-ec2-transitgatewayconnectpeer-transitgatewayattachmentid
+        '''
+        result = self._values.get("transit_gateway_attachment_id")
+        assert result is not None, "Required property 'transit_gateway_attachment_id' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''The tags for the Connect peer.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewayconnectpeer.html#cfn-ec2-transitgatewayconnectpeer-tags
+        '''
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnTransitGatewayConnectPeerProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_ec2.CfnTransitGatewayConnectProps",
     jsii_struct_bases=[],
@@ -70712,7 +71473,7 @@ class CfnVolume(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param availability_zone: The ID of the Availability Zone in which to create the volume. For example, ``us-east-1a`` .
+        :param availability_zone: The ID of the Availability Zone in which to create the volume. For example, ``us-east-1a`` . Either ``AvailabilityZone`` or ``AvailabilityZoneId`` must be specified, but not both.
         :param auto_enable_io: Indicates whether the volume is auto-enabled for I/O operations. By default, Amazon EBS disables I/O to the volume from attached EC2 instances when it determines that a volume's data is potentially inconsistent. If the consistency of the volume is not a concern, and you prefer that the volume be made available immediately if it's impaired, you can configure the volume to automatically enable I/O.
         :param encrypted: Indicates whether the volume should be encrypted. The effect of setting the encryption state to ``true`` depends on the volume origin (new or from a snapshot), starting encryption state, ownership, and whether encryption by default is enabled. For more information, see `Encryption by default <https://docs.aws.amazon.com/ebs/latest/userguide/work-with-ebs-encr.html#encryption-by-default>`_ in the *Amazon EBS User Guide* . Encrypted Amazon EBS volumes must be attached to instances that support Amazon EBS encryption. For more information, see `Supported instance types <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption-requirements.html#ebs-encryption_supported_instances>`_ .
         :param iops: The number of I/O operations per second (IOPS). For ``gp3`` , ``io1`` , and ``io2`` volumes, this represents the number of IOPS that are provisioned for the volume. For ``gp2`` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. The following are the supported values for each volume type: - ``gp3`` : 3,000 - 16,000 IOPS - ``io1`` : 100 - 64,000 IOPS - ``io2`` : 100 - 256,000 IOPS For ``io2`` volumes, you can achieve up to 256,000 IOPS on `instances built on the Nitro System <https://docs.aws.amazon.com/ec2/latest/instancetypes/ec2-nitro-instances.html>`_ . On other instances, you can achieve performance up to 32,000 IOPS. This parameter is required for ``io1`` and ``io2`` volumes. The default for ``gp3`` volumes is 3,000 IOPS. This parameter is not supported for ``gp2`` , ``st1`` , ``sc1`` , or ``standard`` volumes.
@@ -70801,7 +71562,10 @@ class CfnVolume(
     @builtins.property
     @jsii.member(jsii_name="availabilityZone")
     def availability_zone(self) -> builtins.str:
-        '''The ID of the Availability Zone in which to create the volume.'''
+        '''The ID of the Availability Zone in which to create the volume.
+
+        For example, ``us-east-1a`` .
+        '''
         return typing.cast(builtins.str, jsii.get(self, "availabilityZone"))
 
     @availability_zone.setter
@@ -71256,7 +72020,7 @@ class CfnVolumeProps:
     ) -> None:
         '''Properties for defining a ``CfnVolume``.
 
-        :param availability_zone: The ID of the Availability Zone in which to create the volume. For example, ``us-east-1a`` .
+        :param availability_zone: The ID of the Availability Zone in which to create the volume. For example, ``us-east-1a`` . Either ``AvailabilityZone`` or ``AvailabilityZoneId`` must be specified, but not both.
         :param auto_enable_io: Indicates whether the volume is auto-enabled for I/O operations. By default, Amazon EBS disables I/O to the volume from attached EC2 instances when it determines that a volume's data is potentially inconsistent. If the consistency of the volume is not a concern, and you prefer that the volume be made available immediately if it's impaired, you can configure the volume to automatically enable I/O.
         :param encrypted: Indicates whether the volume should be encrypted. The effect of setting the encryption state to ``true`` depends on the volume origin (new or from a snapshot), starting encryption state, ownership, and whether encryption by default is enabled. For more information, see `Encryption by default <https://docs.aws.amazon.com/ebs/latest/userguide/work-with-ebs-encr.html#encryption-by-default>`_ in the *Amazon EBS User Guide* . Encrypted Amazon EBS volumes must be attached to instances that support Amazon EBS encryption. For more information, see `Supported instance types <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption-requirements.html#ebs-encryption_supported_instances>`_ .
         :param iops: The number of I/O operations per second (IOPS). For ``gp3`` , ``io1`` , and ``io2`` volumes, this represents the number of IOPS that are provisioned for the volume. For ``gp2`` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. The following are the supported values for each volume type: - ``gp3`` : 3,000 - 16,000 IOPS - ``io1`` : 100 - 64,000 IOPS - ``io2`` : 100 - 256,000 IOPS For ``io2`` volumes, you can achieve up to 256,000 IOPS on `instances built on the Nitro System <https://docs.aws.amazon.com/ec2/latest/instancetypes/ec2-nitro-instances.html>`_ . On other instances, you can achieve performance up to 32,000 IOPS. This parameter is required for ``io1`` and ``io2`` volumes. The default for ``gp3`` volumes is 3,000 IOPS. This parameter is not supported for ``gp2`` , ``st1`` , ``sc1`` , or ``standard`` volumes.
@@ -71345,9 +72109,9 @@ class CfnVolumeProps:
 
     @builtins.property
     def availability_zone(self) -> builtins.str:
-        '''The ID of the Availability Zone in which to create the volume.
+        '''The ID of the Availability Zone in which to create the volume. For example, ``us-east-1a`` .
 
-        For example, ``us-east-1a`` .
+        Either ``AvailabilityZone`` or ``AvailabilityZoneId`` must be specified, but not both.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-volume.html#cfn-ec2-volume-availabilityzone
         '''
@@ -77339,6 +78103,7 @@ class IVpc(_IResource_c80c4260, typing_extensions.Protocol):
         private_dns_enabled: typing.Optional[builtins.bool] = None,
         private_dns_only_for_inbound_resolver_endpoint: typing.Optional["VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint"] = None,
         security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
+        service_region: typing.Optional[builtins.str] = None,
         subnets: typing.Optional[typing.Union["SubnetSelection", typing.Dict[builtins.str, typing.Any]]] = None,
     ) -> "InterfaceVpcEndpoint":
         '''Adds a new interface endpoint to this VPC.
@@ -77352,6 +78117,7 @@ class IVpc(_IResource_c80c4260, typing_extensions.Protocol):
         :param private_dns_enabled: Whether to associate a private hosted zone with the specified VPC. This allows you to make requests to the service using its default DNS hostname. Default: set by the instance of IInterfaceVpcEndpointService, or true if not defined by the instance of IInterfaceVpcEndpointService
         :param private_dns_only_for_inbound_resolver_endpoint: Whether to enable private DNS only for inbound endpoints. Default: not specified
         :param security_groups: The security groups to associate with this interface VPC endpoint. Default: - a new security group is created
+        :param service_region: The region where the VPC endpoint service is located. Only needs to be specified for cross-region VPC endpoints. Default: - Same region as the interface VPC endpoint
         :param subnets: The subnets in which to create an endpoint network interface. At most one per availability zone. Default: - private subnets
         '''
         ...
@@ -77628,6 +78394,7 @@ class _IVpcProxy(
         private_dns_enabled: typing.Optional[builtins.bool] = None,
         private_dns_only_for_inbound_resolver_endpoint: typing.Optional["VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint"] = None,
         security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
+        service_region: typing.Optional[builtins.str] = None,
         subnets: typing.Optional[typing.Union["SubnetSelection", typing.Dict[builtins.str, typing.Any]]] = None,
     ) -> "InterfaceVpcEndpoint":
         '''Adds a new interface endpoint to this VPC.
@@ -77641,6 +78408,7 @@ class _IVpcProxy(
         :param private_dns_enabled: Whether to associate a private hosted zone with the specified VPC. This allows you to make requests to the service using its default DNS hostname. Default: set by the instance of IInterfaceVpcEndpointService, or true if not defined by the instance of IInterfaceVpcEndpointService
         :param private_dns_only_for_inbound_resolver_endpoint: Whether to enable private DNS only for inbound endpoints. Default: not specified
         :param security_groups: The security groups to associate with this interface VPC endpoint. Default: - a new security group is created
+        :param service_region: The region where the VPC endpoint service is located. Only needs to be specified for cross-region VPC endpoints. Default: - Same region as the interface VPC endpoint
         :param subnets: The subnets in which to create an endpoint network interface. At most one per availability zone. Default: - private subnets
         '''
         if __debug__:
@@ -77655,6 +78423,7 @@ class _IVpcProxy(
             private_dns_enabled=private_dns_enabled,
             private_dns_only_for_inbound_resolver_endpoint=private_dns_only_for_inbound_resolver_endpoint,
             security_groups=security_groups,
+            service_region=service_region,
             subnets=subnets,
         )
 
@@ -84522,6 +85291,7 @@ class InterfaceVpcEndpointAwsServiceProps:
         "private_dns_enabled": "privateDnsEnabled",
         "private_dns_only_for_inbound_resolver_endpoint": "privateDnsOnlyForInboundResolverEndpoint",
         "security_groups": "securityGroups",
+        "service_region": "serviceRegion",
         "subnets": "subnets",
     },
 )
@@ -84537,6 +85307,7 @@ class InterfaceVpcEndpointOptions:
         private_dns_enabled: typing.Optional[builtins.bool] = None,
         private_dns_only_for_inbound_resolver_endpoint: typing.Optional["VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint"] = None,
         security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
+        service_region: typing.Optional[builtins.str] = None,
         subnets: typing.Optional[typing.Union["SubnetSelection", typing.Dict[builtins.str, typing.Any]]] = None,
     ) -> None:
         '''Options to add an interface endpoint to a VPC.
@@ -84549,6 +85320,7 @@ class InterfaceVpcEndpointOptions:
         :param private_dns_enabled: Whether to associate a private hosted zone with the specified VPC. This allows you to make requests to the service using its default DNS hostname. Default: set by the instance of IInterfaceVpcEndpointService, or true if not defined by the instance of IInterfaceVpcEndpointService
         :param private_dns_only_for_inbound_resolver_endpoint: Whether to enable private DNS only for inbound endpoints. Default: not specified
         :param security_groups: The security groups to associate with this interface VPC endpoint. Default: - a new security group is created
+        :param service_region: The region where the VPC endpoint service is located. Only needs to be specified for cross-region VPC endpoints. Default: - Same region as the interface VPC endpoint
         :param subnets: The subnets in which to create an endpoint network interface. At most one per availability zone. Default: - private subnets
 
         :exampleMetadata: lit=aws-ec2/test/integ.vpc-endpoint.lit.ts infused
@@ -84593,6 +85365,7 @@ class InterfaceVpcEndpointOptions:
             check_type(argname="argument private_dns_enabled", value=private_dns_enabled, expected_type=type_hints["private_dns_enabled"])
             check_type(argname="argument private_dns_only_for_inbound_resolver_endpoint", value=private_dns_only_for_inbound_resolver_endpoint, expected_type=type_hints["private_dns_only_for_inbound_resolver_endpoint"])
             check_type(argname="argument security_groups", value=security_groups, expected_type=type_hints["security_groups"])
+            check_type(argname="argument service_region", value=service_region, expected_type=type_hints["service_region"])
             check_type(argname="argument subnets", value=subnets, expected_type=type_hints["subnets"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "service": service,
@@ -84611,6 +85384,8 @@ class InterfaceVpcEndpointOptions:
             self._values["private_dns_only_for_inbound_resolver_endpoint"] = private_dns_only_for_inbound_resolver_endpoint
         if security_groups is not None:
             self._values["security_groups"] = security_groups
+        if service_region is not None:
+            self._values["service_region"] = service_region
         if subnets is not None:
             self._values["subnets"] = subnets
 
@@ -84698,6 +85473,17 @@ class InterfaceVpcEndpointOptions:
         result = self._values.get("security_groups")
         return typing.cast(typing.Optional[typing.List[ISecurityGroup]], result)
 
+    @builtins.property
+    def service_region(self) -> typing.Optional[builtins.str]:
+        '''The region where the VPC endpoint service is located.
+
+        Only needs to be specified for cross-region VPC endpoints.
+
+        :default: - Same region as the interface VPC endpoint
+        '''
+        result = self._values.get("service_region")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def subnets(self) -> typing.Optional["SubnetSelection"]:
         '''The subnets in which to create an endpoint network interface.
@@ -84734,6 +85520,7 @@ class InterfaceVpcEndpointOptions:
         "private_dns_enabled": "privateDnsEnabled",
         "private_dns_only_for_inbound_resolver_endpoint": "privateDnsOnlyForInboundResolverEndpoint",
         "security_groups": "securityGroups",
+        "service_region": "serviceRegion",
         "subnets": "subnets",
         "vpc": "vpc",
     },
@@ -84750,6 +85537,7 @@ class InterfaceVpcEndpointProps(InterfaceVpcEndpointOptions):
         private_dns_enabled: typing.Optional[builtins.bool] = None,
         private_dns_only_for_inbound_resolver_endpoint: typing.Optional["VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint"] = None,
         security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
+        service_region: typing.Optional[builtins.str] = None,
         subnets: typing.Optional[typing.Union["SubnetSelection", typing.Dict[builtins.str, typing.Any]]] = None,
         vpc: IVpc,
     ) -> None:
@@ -84763,6 +85551,7 @@ class InterfaceVpcEndpointProps(InterfaceVpcEndpointOptions):
         :param private_dns_enabled: Whether to associate a private hosted zone with the specified VPC. This allows you to make requests to the service using its default DNS hostname. Default: set by the instance of IInterfaceVpcEndpointService, or true if not defined by the instance of IInterfaceVpcEndpointService
         :param private_dns_only_for_inbound_resolver_endpoint: Whether to enable private DNS only for inbound endpoints. Default: not specified
         :param security_groups: The security groups to associate with this interface VPC endpoint. Default: - a new security group is created
+        :param service_region: The region where the VPC endpoint service is located. Only needs to be specified for cross-region VPC endpoints. Default: - Same region as the interface VPC endpoint
         :param subnets: The subnets in which to create an endpoint network interface. At most one per availability zone. Default: - private subnets
         :param vpc: The VPC network in which the interface endpoint will be used.
 
@@ -84794,6 +85583,7 @@ class InterfaceVpcEndpointProps(InterfaceVpcEndpointOptions):
             check_type(argname="argument private_dns_enabled", value=private_dns_enabled, expected_type=type_hints["private_dns_enabled"])
             check_type(argname="argument private_dns_only_for_inbound_resolver_endpoint", value=private_dns_only_for_inbound_resolver_endpoint, expected_type=type_hints["private_dns_only_for_inbound_resolver_endpoint"])
             check_type(argname="argument security_groups", value=security_groups, expected_type=type_hints["security_groups"])
+            check_type(argname="argument service_region", value=service_region, expected_type=type_hints["service_region"])
             check_type(argname="argument subnets", value=subnets, expected_type=type_hints["subnets"])
             check_type(argname="argument vpc", value=vpc, expected_type=type_hints["vpc"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
@@ -84814,6 +85604,8 @@ class InterfaceVpcEndpointProps(InterfaceVpcEndpointOptions):
             self._values["private_dns_only_for_inbound_resolver_endpoint"] = private_dns_only_for_inbound_resolver_endpoint
         if security_groups is not None:
             self._values["security_groups"] = security_groups
+        if service_region is not None:
+            self._values["service_region"] = service_region
         if subnets is not None:
             self._values["subnets"] = subnets
 
@@ -84901,6 +85693,17 @@ class InterfaceVpcEndpointProps(InterfaceVpcEndpointOptions):
         result = self._values.get("security_groups")
         return typing.cast(typing.Optional[typing.List[ISecurityGroup]], result)
 
+    @builtins.property
+    def service_region(self) -> typing.Optional[builtins.str]:
+        '''The region where the VPC endpoint service is located.
+
+        Only needs to be specified for cross-region VPC endpoints.
+
+        :default: - Same region as the interface VPC endpoint
+        '''
+        result = self._values.get("service_region")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def subnets(self) -> typing.Optional["SubnetSelection"]:
         '''The subnets in which to create an endpoint network interface.
@@ -95401,6 +96204,7 @@ class Vpc(
         private_dns_enabled: typing.Optional[builtins.bool] = None,
         private_dns_only_for_inbound_resolver_endpoint: typing.Optional["VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint"] = None,
         security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
+        service_region: typing.Optional[builtins.str] = None,
         subnets: typing.Optional[typing.Union[SubnetSelection, typing.Dict[builtins.str, typing.Any]]] = None,
     ) -> "InterfaceVpcEndpoint":
         '''Adds a new interface endpoint to this VPC.
@@ -95414,6 +96218,7 @@ class Vpc(
         :param private_dns_enabled: Whether to associate a private hosted zone with the specified VPC. This allows you to make requests to the service using its default DNS hostname. Default: set by the instance of IInterfaceVpcEndpointService, or true if not defined by the instance of IInterfaceVpcEndpointService
         :param private_dns_only_for_inbound_resolver_endpoint: Whether to enable private DNS only for inbound endpoints. Default: not specified
         :param security_groups: The security groups to associate with this interface VPC endpoint. Default: - a new security group is created
+        :param service_region: The region where the VPC endpoint service is located. Only needs to be specified for cross-region VPC endpoints. Default: - Same region as the interface VPC endpoint
         :param subnets: The subnets in which to create an endpoint network interface. At most one per availability zone. Default: - private subnets
         '''
         if __debug__:
@@ -95428,6 +96233,7 @@ class Vpc(
             private_dns_enabled=private_dns_enabled,
             private_dns_only_for_inbound_resolver_endpoint=private_dns_only_for_inbound_resolver_endpoint,
             security_groups=security_groups,
+            service_region=service_region,
             subnets=subnets,
         )
 
@@ -101655,6 +102461,7 @@ class InterfaceVpcEndpoint(
         private_dns_enabled: typing.Optional[builtins.bool] = None,
         private_dns_only_for_inbound_resolver_endpoint: typing.Optional[VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint] = None,
         security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
+        service_region: typing.Optional[builtins.str] = None,
         subnets: typing.Optional[typing.Union[SubnetSelection, typing.Dict[builtins.str, typing.Any]]] = None,
     ) -> None:
         '''
@@ -101669,6 +102476,7 @@ class InterfaceVpcEndpoint(
         :param private_dns_enabled: Whether to associate a private hosted zone with the specified VPC. This allows you to make requests to the service using its default DNS hostname. Default: set by the instance of IInterfaceVpcEndpointService, or true if not defined by the instance of IInterfaceVpcEndpointService
         :param private_dns_only_for_inbound_resolver_endpoint: Whether to enable private DNS only for inbound endpoints. Default: not specified
         :param security_groups: The security groups to associate with this interface VPC endpoint. Default: - a new security group is created
+        :param service_region: The region where the VPC endpoint service is located. Only needs to be specified for cross-region VPC endpoints. Default: - Same region as the interface VPC endpoint
         :param subnets: The subnets in which to create an endpoint network interface. At most one per availability zone. Default: - private subnets
         '''
         if __debug__:
@@ -101685,6 +102493,7 @@ class InterfaceVpcEndpoint(
             private_dns_enabled=private_dns_enabled,
             private_dns_only_for_inbound_resolver_endpoint=private_dns_only_for_inbound_resolver_endpoint,
             security_groups=security_groups,
+            service_region=service_region,
             subnets=subnets,
         )
 
@@ -104261,6 +105070,8 @@ __all__ = [
     "CfnInstanceProps",
     "CfnInternetGateway",
     "CfnInternetGatewayProps",
+    "CfnIpPoolRouteTableAssociation",
+    "CfnIpPoolRouteTableAssociationProps",
     "CfnKeyPair",
     "CfnKeyPairProps",
     "CfnLaunchTemplate",
@@ -104345,6 +105156,8 @@ __all__ = [
     "CfnTransitGatewayAttachment",
     "CfnTransitGatewayAttachmentProps",
     "CfnTransitGatewayConnect",
+    "CfnTransitGatewayConnectPeer",
+    "CfnTransitGatewayConnectPeerProps",
     "CfnTransitGatewayConnectProps",
     "CfnTransitGatewayMulticastDomain",
     "CfnTransitGatewayMulticastDomainAssociation",
@@ -107910,6 +108723,48 @@ def _typecheckingstub__87a0ecd2999ccef41b6baf7e5e653666a7205cdda8348b4e20f3b1bab
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__d2e346c37572137e6dfe14e676bbcd2ecce12183e9c91e6bac858b8287c38d18(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    public_ipv4_pool: builtins.str,
+    route_table_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__0e8beabfae1e3898fe833fa4f6fec4db49c1797a24c9a17c0a1cc938efbb234d(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__9261e60da0656ce4be4de7b6f7ca910aa7426a27190ff19b86e1fa3fca169b5f(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__9e778f968d1e05ca9a9a12139d6b6122fee2d84c3920b3266bb24123b1125376(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__50b3a9184baeaee59a249d70d1646e9be6be39d5717e3a579744f8bcbd740d9e(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__ca7ebe92862b15a6d48fca22126c61fa57bcf8453d0939d48bb4080583c8ee82(
+    *,
+    public_ipv4_pool: builtins.str,
+    route_table_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__1de6844e799c72712c1e89d9bf245ba313ed7d4d20f1567a28fb58baefc263bd(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
@@ -108358,6 +109213,7 @@ def _typecheckingstub__c599e12c3de63926f26bb5da3afad64e8c60b24c3b563faa2986e88c1
     delete_on_termination: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     description: typing.Optional[builtins.str] = None,
     device_index: typing.Optional[jsii.Number] = None,
+    ena_queue_count: typing.Optional[jsii.Number] = None,
     ena_srd_specification: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLaunchTemplate.EnaSrdSpecificationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     groups: typing.Optional[typing.Sequence[builtins.str]] = None,
     interface_type: typing.Optional[builtins.str] = None,
@@ -108681,7 +109537,6 @@ def _typecheckingstub__4d23f1a46df0174ce142c0ff05ac9cb901ecac30141c8b466b44569b4
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
     *,
-    subnet_id: builtins.str,
     allocation_id: typing.Optional[builtins.str] = None,
     connectivity_type: typing.Optional[builtins.str] = None,
     max_drain_duration_seconds: typing.Optional[jsii.Number] = None,
@@ -108689,6 +109544,7 @@ def _typecheckingstub__4d23f1a46df0174ce142c0ff05ac9cb901ecac30141c8b466b44569b4
     secondary_allocation_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
     secondary_private_ip_address_count: typing.Optional[jsii.Number] = None,
     secondary_private_ip_addresses: typing.Optional[typing.Sequence[builtins.str]] = None,
+    subnet_id: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -108706,12 +109562,6 @@ def _typecheckingstub__ccb9afd936b7ea3bdc26e449176215293a7150d149aecacc164a3b752
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__5ea5b3187b853cfa340b72b2a61dc1a1d7320459e754c328fc7013f403d31c74(
-    value: builtins.str,
-) -> None:
-    """Type checking stubs"""
-    pass
-
 def _typecheckingstub__d4cfe702c80e90b7e94df290ccbd9b1126a59f7167ee8d0b08ead001f4b760be(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -108754,6 +109604,12 @@ def _typecheckingstub__6f95c2f3e513b379e30162aef0ef12684ffddc3d711e6a83303fbb920
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__5ea5b3187b853cfa340b72b2a61dc1a1d7320459e754c328fc7013f403d31c74(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__76a6a3daaab575df04de03efcf802de9ee1357d57a0474a96922bc7d42b638e2(
     value: typing.Optional[typing.List[_CfnTag_f6864754]],
 ) -> None:
@@ -108762,7 +109618,6 @@ def _typecheckingstub__76a6a3daaab575df04de03efcf802de9ee1357d57a0474a96922bc7d4
 
 def _typecheckingstub__1aba83edf7a8e3f14e1d4f9ca76c7049f7f7c569d2ffb43bcad65b330ee9a581(
     *,
-    subnet_id: builtins.str,
     allocation_id: typing.Optional[builtins.str] = None,
     connectivity_type: typing.Optional[builtins.str] = None,
     max_drain_duration_seconds: typing.Optional[jsii.Number] = None,
@@ -108770,6 +109625,7 @@ def _typecheckingstub__1aba83edf7a8e3f14e1d4f9ca76c7049f7f7c569d2ffb43bcad65b330
     secondary_allocation_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
     secondary_private_ip_address_count: typing.Optional[jsii.Number] = None,
     secondary_private_ip_addresses: typing.Optional[typing.Sequence[builtins.str]] = None,
+    subnet_id: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -112097,6 +112953,78 @@ def _typecheckingstub__f28cf9493a9ba4af846e6c741893e0f0824bc477c2f1963741643adc4
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__1f8d207f56975363774b74fa734c1d229d4b0713b4f3516f3314cd9ebcd0e41c(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    connect_peer_configuration: typing.Union[_IResolvable_da3f097b, typing.Union[CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty, typing.Dict[builtins.str, typing.Any]]],
+    transit_gateway_attachment_id: builtins.str,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b94393058454232978c68e76b9895b5f0775d34692c68d57103fafd32b53d66e(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__9f8ed9dcea183e690fe0f56b975179a4ccbc13162e837cb3c510b70d38b0ef94(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__58ed17da8e00760b83a59e1e504bfc8914d4d0783ebb460d52132e6d22c7c5f5(
+    value: typing.Union[_IResolvable_da3f097b, CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b2909b9fd1cf53285718444b2e767681f76b6ed629fb8bd9cac90f9dfa879a82(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__6eada39e62da78a0081621fc2e53f369626e0a8daba2db28d9f8ab73bf02a2fd(
+    value: typing.Optional[typing.List[_CfnTag_f6864754]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__d0f30598b4049c4e4e643a34da7497413353b78ba0ca8e5b1eb98867ba0a56b2(
+    *,
+    bgp_status: typing.Optional[builtins.str] = None,
+    peer_address: typing.Optional[builtins.str] = None,
+    peer_asn: typing.Optional[jsii.Number] = None,
+    transit_gateway_address: typing.Optional[builtins.str] = None,
+    transit_gateway_asn: typing.Optional[jsii.Number] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__ed11c27aeee7d87fa8fd9b18c1c8885352346e3191deb89b80e860c9891e5b56(
+    *,
+    inside_cidr_blocks: typing.Sequence[builtins.str],
+    peer_address: builtins.str,
+    bgp_configurations: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnTransitGatewayConnectPeer.TransitGatewayAttachmentBgpConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+    protocol: typing.Optional[builtins.str] = None,
+    transit_gateway_address: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__32b3081584f3dcc39f1077e0e7bc1b3a6c7b2678c8e23fa6b66e94bc04676ed3(
+    *,
+    connect_peer_configuration: typing.Union[_IResolvable_da3f097b, typing.Union[CfnTransitGatewayConnectPeer.TransitGatewayConnectPeerConfigurationProperty, typing.Dict[builtins.str, typing.Any]]],
+    transit_gateway_attachment_id: builtins.str,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__ae4b1efff7cf5a4fab7c16d5ffad18f9c18dbd0d23dd3fa072685e3264ade5e1(
     *,
     options: typing.Union[_IResolvable_da3f097b, typing.Union[CfnTransitGatewayConnect.TransitGatewayConnectOptionsProperty, typing.Dict[builtins.str, typing.Any]]],
@@ -115155,6 +116083,7 @@ def _typecheckingstub__a8399f0a6a7650e1c02d00770e21cad422b9760a1fdc24465cf546371
     private_dns_enabled: typing.Optional[builtins.bool] = None,
     private_dns_only_for_inbound_resolver_endpoint: typing.Optional[VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint] = None,
     security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
+    service_region: typing.Optional[builtins.str] = None,
     subnets: typing.Optional[typing.Union[SubnetSelection, typing.Dict[builtins.str, typing.Any]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -115770,6 +116699,7 @@ def _typecheckingstub__1a6dd0208e338cbe286ecaa3bcf5f95a5f0a0c1e1b3565ca6de058b5f
     private_dns_enabled: typing.Optional[builtins.bool] = None,
     private_dns_only_for_inbound_resolver_endpoint: typing.Optional[VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint] = None,
     security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
+    service_region: typing.Optional[builtins.str] = None,
     subnets: typing.Optional[typing.Union[SubnetSelection, typing.Dict[builtins.str, typing.Any]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -115785,6 +116715,7 @@ def _typecheckingstub__6606ba3de030c44ce43dee44afe64adc59231bfc542799d1354e0732a
     private_dns_enabled: typing.Optional[builtins.bool] = None,
     private_dns_only_for_inbound_resolver_endpoint: typing.Optional[VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint] = None,
     security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
+    service_region: typing.Optional[builtins.str] = None,
     subnets: typing.Optional[typing.Union[SubnetSelection, typing.Dict[builtins.str, typing.Any]]] = None,
     vpc: IVpc,
 ) -> None:
@@ -117041,6 +117972,7 @@ def _typecheckingstub__00d64fd969958beb796ccf5d1bc5d808fd3e751c9e3c2237abfaf2dbe
     private_dns_enabled: typing.Optional[builtins.bool] = None,
     private_dns_only_for_inbound_resolver_endpoint: typing.Optional[VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint] = None,
     security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
+    service_region: typing.Optional[builtins.str] = None,
     subnets: typing.Optional[typing.Union[SubnetSelection, typing.Dict[builtins.str, typing.Any]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -117631,6 +118563,7 @@ def _typecheckingstub__a11756d82f1033710d89b4b10b111462f7a99734ff79d3648bd84d0e5
     private_dns_enabled: typing.Optional[builtins.bool] = None,
     private_dns_only_for_inbound_resolver_endpoint: typing.Optional[VpcEndpointPrivateDnsOnlyForInboundResolverEndpoint] = None,
     security_groups: typing.Optional[typing.Sequence[ISecurityGroup]] = None,
+    service_region: typing.Optional[builtins.str] = None,
     subnets: typing.Optional[typing.Union[SubnetSelection, typing.Dict[builtins.str, typing.Any]]] = None,
 ) -> None:
     """Type checking stubs"""