aws-cdk-lib 2.218.0__py3-none-any.whl → 2.220.0__py3-none-any.whl

aws_cdk/aws_ec2/__init__.py

@@ -1422,6 +1422,21 @@ endpoint = vpc.add_client_vpn_endpoint("Endpoint",
 )
 ```
 
+To control whether clients are automatically disconnected when the maximum session duration is reached, use the `disconnectOnSessionTimeout` prop.
+By default (`true`), clients are disconnected and must manually reconnect.
+Set to `false` to allow automatic reconnection attempts:
+
+```python
+endpoint = vpc.add_client_vpn_endpoint("Endpoint",
+    cidr="10.100.0.0/16",
+    server_certificate_arn="arn:aws:acm:us-east-1:123456789012:certificate/server-certificate-id",
+    client_certificate_arn="arn:aws:acm:us-east-1:123456789012:certificate/client-certificate-id",
+    disconnect_on_session_timeout=False
+)
+```
+
+Detail information about maximum VPN session duration timeout can be found in the [AWS documentation](https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/cvpn-working-max-duration.html).
+
 ## Instances
 
 You can use the `Instance` class to start up a single EC2 instance. For production setups, we recommend
@@ -2903,6 +2918,225 @@ from ..aws_s3_assets import (
 from ..aws_ssm import IStringParameter as _IStringParameter_f2b707f9
 
 
+@jsii.enum(jsii_type="aws-cdk-lib.aws_ec2.AcceleratorManufacturer")
+class AcceleratorManufacturer(enum.Enum):
+    '''Supported hardware accelerator manufacturers.
+
+    Restricts instance selection to accelerators from a particular vendor.
+    Useful for choosing specific ecosystems (e.g., NVIDIA CUDA, AWS chips).
+
+    :exampleMetadata: infused
+
+    Example::
+
+        # vpc: ec2.Vpc
+        # infrastructure_role: iam.Role
+        # instance_profile: iam.InstanceProfile
+        
+        
+        cluster = ecs.Cluster(self, "Cluster", vpc=vpc)
+        
+        # Create a Managed Instances Capacity Provider
+        mi_capacity_provider = ecs.ManagedInstancesCapacityProvider(self, "MICapacityProvider",
+            infrastructure_role=infrastructure_role,
+            ec2_instance_profile=instance_profile,
+            subnets=vpc.private_subnets,
+            security_groups=[ec2.SecurityGroup(self, "MISecurityGroup", vpc=vpc)],
+            instance_requirements=ec2.InstanceRequirementsConfig(
+                v_cpu_count_min=1,
+                memory_min=Size.gibibytes(2),
+                cpu_manufacturers=[ec2.CpuManufacturer.INTEL],
+                accelerator_manufacturers=[ec2.AcceleratorManufacturer.NVIDIA]
+            ),
+            propagate_tags=ecs.PropagateManagedInstancesTags.CAPACITY_PROVIDER
+        )
+        
+        # Add the capacity provider to the cluster
+        cluster.add_managed_instances_capacity_provider(mi_capacity_provider)
+        
+        task_definition = ecs.Ec2TaskDefinition(self, "TaskDef")
+        
+        task_definition.add_container("web",
+            image=ecs.ContainerImage.from_registry("amazon/amazon-ecs-sample"),
+            memory_reservation_mi_b=256
+        )
+        
+        ecs.Ec2Service(self, "EC2Service",
+            cluster=cluster,
+            task_definition=task_definition,
+            min_healthy_percent=100,
+            capacity_provider_strategies=[ecs.CapacityProviderStrategy(
+                capacity_provider=mi_capacity_provider.capacity_provider_name,
+                weight=1
+            )
+            ]
+        )
+    '''
+
+    AWS = "AWS"
+    '''Amazon Web Services (e.g., Inferentia, Trainium accelerators).'''
+    AMD = "AMD"
+    '''AMD (e.g., Radeon Pro V520 GPU).'''
+    NVIDIA = "NVIDIA"
+    '''NVIDIA (e.g., A100, V100, T4, K80, M60 GPUs).'''
+    XILINX = "XILINX"
+    '''Xilinx (e.g., VU9P FPGA).'''
+
+
+@jsii.enum(jsii_type="aws-cdk-lib.aws_ec2.AcceleratorName")
+class AcceleratorName(enum.Enum):
+    '''Specific hardware accelerator models supported by EC2.
+
+    Defines exact accelerator models that can be required or excluded
+    when selecting instance types.
+
+    :exampleMetadata: infused
+
+    Example::
+
+        # infrastructure_role: iam.Role
+        # instance_profile: iam.InstanceProfile
+        # vpc: ec2.Vpc
+        
+        
+        mi_capacity_provider = ecs.ManagedInstancesCapacityProvider(self, "MICapacityProvider",
+            infrastructure_role=infrastructure_role,
+            ec2_instance_profile=instance_profile,
+            subnets=vpc.private_subnets,
+            instance_requirements=ec2.InstanceRequirementsConfig(
+                # Required: CPU and memory constraints
+                v_cpu_count_min=2,
+                v_cpu_count_max=8,
+                memory_min=Size.gibibytes(4),
+                memory_max=Size.gibibytes(32),
+        
+                # CPU preferences
+                cpu_manufacturers=[ec2.CpuManufacturer.INTEL, ec2.CpuManufacturer.AMD],
+                instance_generations=[ec2.InstanceGeneration.CURRENT],
+        
+                # Instance type filtering
+                allowed_instance_types=["m5.*", "c5.*"],
+        
+                # Performance characteristics
+                burstable_performance=ec2.BurstablePerformance.EXCLUDED,
+                bare_metal=ec2.BareMetal.EXCLUDED,
+        
+                # Accelerator requirements (for ML/AI workloads)
+                accelerator_types=[ec2.AcceleratorType.GPU],
+                accelerator_manufacturers=[ec2.AcceleratorManufacturer.NVIDIA],
+                accelerator_names=[ec2.AcceleratorName.T4, ec2.AcceleratorName.V100],
+                accelerator_count_min=1,
+        
+                # Storage requirements
+                local_storage=ec2.LocalStorage.REQUIRED,
+                local_storage_types=[ec2.LocalStorageType.SSD],
+                total_local_storage_gBMin=100,
+        
+                # Network requirements
+                network_interface_count_min=2,
+                network_bandwidth_gbps_min=10,
+        
+                # Cost optimization
+                on_demand_max_price_percentage_over_lowest_price=10
+            )
+        )
+    '''
+
+    A100 = "A100"
+    '''NVIDIA A100 GPU.'''
+    K80 = "K80"
+    '''NVIDIA K80 GPU.'''
+    M60 = "M60"
+    '''NVIDIA M60 GPU.'''
+    RADEON_PRO_V520 = "RADEON_PRO_V520"
+    '''AMD Radeon Pro V520 GPU.'''
+    T4 = "T4"
+    '''NVIDIA T4 GPU.'''
+    V100 = "V100"
+    '''NVIDIA V100 GPU.'''
+    VU9P = "VU9P"
+    '''Xilinx VU9P FPGA.'''
+
+
+@jsii.enum(jsii_type="aws-cdk-lib.aws_ec2.AcceleratorType")
+class AcceleratorType(enum.Enum):
+    '''Hardware accelerator categories available for EC2 instances.
+
+    Defines the general type of hardware accelerator that can be attached
+    to an instance, typically used in instance requirement specifications
+    (e.g., GPUs for compute-intensive tasks, FPGAs for custom logic, or
+    inference chips for ML workloads).
+
+    :exampleMetadata: infused
+
+    Example::
+
+        # infrastructure_role: iam.Role
+        # instance_profile: iam.InstanceProfile
+        # vpc: ec2.Vpc
+        
+        
+        mi_capacity_provider = ecs.ManagedInstancesCapacityProvider(self, "MICapacityProvider",
+            infrastructure_role=infrastructure_role,
+            ec2_instance_profile=instance_profile,
+            subnets=vpc.private_subnets,
+            instance_requirements=ec2.InstanceRequirementsConfig(
+                # Required: CPU and memory constraints
+                v_cpu_count_min=2,
+                v_cpu_count_max=8,
+                memory_min=Size.gibibytes(4),
+                memory_max=Size.gibibytes(32),
+        
+                # CPU preferences
+                cpu_manufacturers=[ec2.CpuManufacturer.INTEL, ec2.CpuManufacturer.AMD],
+                instance_generations=[ec2.InstanceGeneration.CURRENT],
+        
+                # Instance type filtering
+                allowed_instance_types=["m5.*", "c5.*"],
+        
+                # Performance characteristics
+                burstable_performance=ec2.BurstablePerformance.EXCLUDED,
+                bare_metal=ec2.BareMetal.EXCLUDED,
+        
+                # Accelerator requirements (for ML/AI workloads)
+                accelerator_types=[ec2.AcceleratorType.GPU],
+                accelerator_manufacturers=[ec2.AcceleratorManufacturer.NVIDIA],
+                accelerator_names=[ec2.AcceleratorName.T4, ec2.AcceleratorName.V100],
+                accelerator_count_min=1,
+        
+                # Storage requirements
+                local_storage=ec2.LocalStorage.REQUIRED,
+                local_storage_types=[ec2.LocalStorageType.SSD],
+                total_local_storage_gBMin=100,
+        
+                # Network requirements
+                network_interface_count_min=2,
+                network_bandwidth_gbps_min=10,
+        
+                # Cost optimization
+                on_demand_max_price_percentage_over_lowest_price=10
+            )
+        )
+    '''
+
+    GPU = "GPU"
+    '''Graphics Processing Unit accelerators, such as NVIDIA GPUs.
+
+    Commonly used for machine learning training, graphics rendering,
+    or high-performance parallel computing.
+    '''
+    FPGA = "FPGA"
+    '''Field Programmable Gate Array accelerators, such as Xilinx FPGAs.
+
+    Used for hardware-level customization and specialized workloads.
+    '''
+    INFERENCE = "INFERENCE"
+    '''Inference accelerators, such as AWS Inferentia.
+
+    Purpose-built for efficient machine learning inference.
+    '''
+
+
 class AclCidr(
     metaclass=jsii.JSIIAbstractClass,
     jsii_type="aws-cdk-lib.aws_ec2.AclCidr",
@@ -5368,6 +5602,80 @@ class AwsIpamProps:
         )
 
 
+@jsii.enum(jsii_type="aws-cdk-lib.aws_ec2.BareMetal")
+class BareMetal(enum.Enum):
+    '''Bare metal support requirements for EC2 instances.
+
+    Controls whether selected instance types must, may, or must not
+    be bare metal variants (i.e., instances that run directly on
+    physical hardware without a hypervisor).
+
+    :exampleMetadata: infused
+
+    Example::
+
+        # infrastructure_role: iam.Role
+        # instance_profile: iam.InstanceProfile
+        # vpc: ec2.Vpc
+        
+        
+        mi_capacity_provider = ecs.ManagedInstancesCapacityProvider(self, "MICapacityProvider",
+            infrastructure_role=infrastructure_role,
+            ec2_instance_profile=instance_profile,
+            subnets=vpc.private_subnets,
+            instance_requirements=ec2.InstanceRequirementsConfig(
+                # Required: CPU and memory constraints
+                v_cpu_count_min=2,
+                v_cpu_count_max=8,
+                memory_min=Size.gibibytes(4),
+                memory_max=Size.gibibytes(32),
+        
+                # CPU preferences
+                cpu_manufacturers=[ec2.CpuManufacturer.INTEL, ec2.CpuManufacturer.AMD],
+                instance_generations=[ec2.InstanceGeneration.CURRENT],
+        
+                # Instance type filtering
+                allowed_instance_types=["m5.*", "c5.*"],
+        
+                # Performance characteristics
+                burstable_performance=ec2.BurstablePerformance.EXCLUDED,
+                bare_metal=ec2.BareMetal.EXCLUDED,
+        
+                # Accelerator requirements (for ML/AI workloads)
+                accelerator_types=[ec2.AcceleratorType.GPU],
+                accelerator_manufacturers=[ec2.AcceleratorManufacturer.NVIDIA],
+                accelerator_names=[ec2.AcceleratorName.T4, ec2.AcceleratorName.V100],
+                accelerator_count_min=1,
+        
+                # Storage requirements
+                local_storage=ec2.LocalStorage.REQUIRED,
+                local_storage_types=[ec2.LocalStorageType.SSD],
+                total_local_storage_gBMin=100,
+        
+                # Network requirements
+                network_interface_count_min=2,
+                network_bandwidth_gbps_min=10,
+        
+                # Cost optimization
+                on_demand_max_price_percentage_over_lowest_price=10
+            )
+        )
+    '''
+
+    INCLUDED = "INCLUDED"
+    '''Bare metal instance types are allowed, but non-bare-metal (virtualized) types may also be selected.'''
+    REQUIRED = "REQUIRED"
+    '''Only bare metal instance types are allowed.
+
+    Non-bare-metal types will be excluded from selection.
+    '''
+    EXCLUDED = "EXCLUDED"
+    '''Bare metal instance types are disallowed.
+
+    Only non-bare-metal types may be selected.
+    '''
+
+
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_ec2.BastionHostLinuxProps",
     jsii_struct_bases=[],
@@ -5866,6 +6174,79 @@ class BlockDeviceVolume(
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "virtualName"))
 
 
+@jsii.enum(jsii_type="aws-cdk-lib.aws_ec2.BurstablePerformance")
+class BurstablePerformance(enum.Enum):
+    '''Burstable CPU performance requirements for EC2 instances.
+
+    Controls whether selected instance types must, may, or must not
+    support burstable vCPU performance (e.g., T3, T4g families).
+
+    :exampleMetadata: infused
+
+    Example::
+
+        # infrastructure_role: iam.Role
+        # instance_profile: iam.InstanceProfile
+        # vpc: ec2.Vpc
+        
+        
+        mi_capacity_provider = ecs.ManagedInstancesCapacityProvider(self, "MICapacityProvider",
+            infrastructure_role=infrastructure_role,
+            ec2_instance_profile=instance_profile,
+            subnets=vpc.private_subnets,
+            instance_requirements=ec2.InstanceRequirementsConfig(
+                # Required: CPU and memory constraints
+                v_cpu_count_min=2,
+                v_cpu_count_max=8,
+                memory_min=Size.gibibytes(4),
+                memory_max=Size.gibibytes(32),
+        
+                # CPU preferences
+                cpu_manufacturers=[ec2.CpuManufacturer.INTEL, ec2.CpuManufacturer.AMD],
+                instance_generations=[ec2.InstanceGeneration.CURRENT],
+        
+                # Instance type filtering
+                allowed_instance_types=["m5.*", "c5.*"],
+        
+                # Performance characteristics
+                burstable_performance=ec2.BurstablePerformance.EXCLUDED,
+                bare_metal=ec2.BareMetal.EXCLUDED,
+        
+                # Accelerator requirements (for ML/AI workloads)
+                accelerator_types=[ec2.AcceleratorType.GPU],
+                accelerator_manufacturers=[ec2.AcceleratorManufacturer.NVIDIA],
+                accelerator_names=[ec2.AcceleratorName.T4, ec2.AcceleratorName.V100],
+                accelerator_count_min=1,
+        
+                # Storage requirements
+                local_storage=ec2.LocalStorage.REQUIRED,
+                local_storage_types=[ec2.LocalStorageType.SSD],
+                total_local_storage_gBMin=100,
+        
+                # Network requirements
+                network_interface_count_min=2,
+                network_bandwidth_gbps_min=10,
+        
+                # Cost optimization
+                on_demand_max_price_percentage_over_lowest_price=10
+            )
+        )
+    '''
+
+    INCLUDED = "INCLUDED"
+    '''Burstable-performance instance types are allowed, but non-burstable types may also be selected.'''
+    REQUIRED = "REQUIRED"
+    '''Only burstable-performance instance types are allowed.
+
+    Non-burstable types will be excluded from selection.
+    '''
+    EXCLUDED = "EXCLUDED"
+    '''Burstable-performance instance types are disallowed.
+
+    Only non-burstable types may be selected.
+    '''
+
+
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_ec2.CapacityReservationFleetReference",
     jsii_struct_bases=[],
@@ -12174,6 +12555,294 @@ class CfnLocalGatewayRouteTableVirtualInterfaceGroupAssociationProps:
         )
 
 
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_ec2.CfnLocalGatewayVirtualInterfaceGroupProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "local_gateway_id": "localGatewayId",
+        "local_bgp_asn": "localBgpAsn",
+        "local_bgp_asn_extended": "localBgpAsnExtended",
+        "tags": "tags",
+    },
+)
+class CfnLocalGatewayVirtualInterfaceGroupProps:
+    def __init__(
+        self,
+        *,
+        local_gateway_id: builtins.str,
+        local_bgp_asn: typing.Optional[jsii.Number] = None,
+        local_bgp_asn_extended: typing.Optional[jsii.Number] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnLocalGatewayVirtualInterfaceGroup``.
+
+        :param local_gateway_id: The ID of the local gateway.
+        :param local_bgp_asn: The Autonomous System Number(ASN) for the local Border Gateway Protocol (BGP).
+        :param local_bgp_asn_extended: The extended 32-bit ASN for the local BGP configuration.
+        :param tags: The tags assigned to the virtual interface group.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-localgatewayvirtualinterfacegroup.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_ec2 as ec2
+            
+            cfn_local_gateway_virtual_interface_group_props = ec2.CfnLocalGatewayVirtualInterfaceGroupProps(
+                local_gateway_id="localGatewayId",
+            
+                # the properties below are optional
+                local_bgp_asn=123,
+                local_bgp_asn_extended=123,
+                tags=[CfnTag(
+                    key="key",
+                    value="value"
+                )]
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__f7ce4c591b68ccf10989a9f20fd3c6f1fc55f0f986e5272574d1a8263ccb9638)
+            check_type(argname="argument local_gateway_id", value=local_gateway_id, expected_type=type_hints["local_gateway_id"])
+            check_type(argname="argument local_bgp_asn", value=local_bgp_asn, expected_type=type_hints["local_bgp_asn"])
+            check_type(argname="argument local_bgp_asn_extended", value=local_bgp_asn_extended, expected_type=type_hints["local_bgp_asn_extended"])
+            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "local_gateway_id": local_gateway_id,
+        }
+        if local_bgp_asn is not None:
+            self._values["local_bgp_asn"] = local_bgp_asn
+        if local_bgp_asn_extended is not None:
+            self._values["local_bgp_asn_extended"] = local_bgp_asn_extended
+        if tags is not None:
+            self._values["tags"] = tags
+
+    @builtins.property
+    def local_gateway_id(self) -> builtins.str:
+        '''The ID of the local gateway.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-localgatewayvirtualinterfacegroup.html#cfn-ec2-localgatewayvirtualinterfacegroup-localgatewayid
+        '''
+        result = self._values.get("local_gateway_id")
+        assert result is not None, "Required property 'local_gateway_id' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def local_bgp_asn(self) -> typing.Optional[jsii.Number]:
+        '''The Autonomous System Number(ASN) for the local Border Gateway Protocol (BGP).
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-localgatewayvirtualinterfacegroup.html#cfn-ec2-localgatewayvirtualinterfacegroup-localbgpasn
+        '''
+        result = self._values.get("local_bgp_asn")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    @builtins.property
+    def local_bgp_asn_extended(self) -> typing.Optional[jsii.Number]:
+        '''The extended 32-bit ASN for the local BGP configuration.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-localgatewayvirtualinterfacegroup.html#cfn-ec2-localgatewayvirtualinterfacegroup-localbgpasnextended
+        '''
+        result = self._values.get("local_bgp_asn_extended")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    @builtins.property
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''The tags assigned to the virtual interface group.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-localgatewayvirtualinterfacegroup.html#cfn-ec2-localgatewayvirtualinterfacegroup-tags
+        '''
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnLocalGatewayVirtualInterfaceGroupProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_ec2.CfnLocalGatewayVirtualInterfaceProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "local_address": "localAddress",
+        "local_gateway_virtual_interface_group_id": "localGatewayVirtualInterfaceGroupId",
+        "outpost_lag_id": "outpostLagId",
+        "peer_address": "peerAddress",
+        "vlan": "vlan",
+        "peer_bgp_asn": "peerBgpAsn",
+        "peer_bgp_asn_extended": "peerBgpAsnExtended",
+        "tags": "tags",
+    },
+)
+class CfnLocalGatewayVirtualInterfaceProps:
+    def __init__(
+        self,
+        *,
+        local_address: builtins.str,
+        local_gateway_virtual_interface_group_id: builtins.str,
+        outpost_lag_id: builtins.str,
+        peer_address: builtins.str,
+        vlan: jsii.Number,
+        peer_bgp_asn: typing.Optional[jsii.Number] = None,
+        peer_bgp_asn_extended: typing.Optional[jsii.Number] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnLocalGatewayVirtualInterface``.
+
+        :param local_address: The local address.
+        :param local_gateway_virtual_interface_group_id: The ID of the local gateway virtual interface group.
+        :param outpost_lag_id: The Outpost LAG ID.
+        :param peer_address: The peer address.
+        :param vlan: The ID of the VLAN.
+        :param peer_bgp_asn: The peer BGP ASN.
+        :param peer_bgp_asn_extended: The extended 32-bit ASN of the BGP peer for use with larger ASN values.
+        :param tags: The tags assigned to the virtual interface.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-localgatewayvirtualinterface.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_ec2 as ec2
+            
+            cfn_local_gateway_virtual_interface_props = ec2.CfnLocalGatewayVirtualInterfaceProps(
+                local_address="localAddress",
+                local_gateway_virtual_interface_group_id="localGatewayVirtualInterfaceGroupId",
+                outpost_lag_id="outpostLagId",
+                peer_address="peerAddress",
+                vlan=123,
+            
+                # the properties below are optional
+                peer_bgp_asn=123,
+                peer_bgp_asn_extended=123,
+                tags=[CfnTag(
+                    key="key",
+                    value="value"
+                )]
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__f937f1e5478df1249afd18165f33effb63a12f7ed00b1831a2fbee04cab4c28a)
+            check_type(argname="argument local_address", value=local_address, expected_type=type_hints["local_address"])
+            check_type(argname="argument local_gateway_virtual_interface_group_id", value=local_gateway_virtual_interface_group_id, expected_type=type_hints["local_gateway_virtual_interface_group_id"])
+            check_type(argname="argument outpost_lag_id", value=outpost_lag_id, expected_type=type_hints["outpost_lag_id"])
+            check_type(argname="argument peer_address", value=peer_address, expected_type=type_hints["peer_address"])
+            check_type(argname="argument vlan", value=vlan, expected_type=type_hints["vlan"])
+            check_type(argname="argument peer_bgp_asn", value=peer_bgp_asn, expected_type=type_hints["peer_bgp_asn"])
+            check_type(argname="argument peer_bgp_asn_extended", value=peer_bgp_asn_extended, expected_type=type_hints["peer_bgp_asn_extended"])
+            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "local_address": local_address,
+            "local_gateway_virtual_interface_group_id": local_gateway_virtual_interface_group_id,
+            "outpost_lag_id": outpost_lag_id,
+            "peer_address": peer_address,
+            "vlan": vlan,
+        }
+        if peer_bgp_asn is not None:
+            self._values["peer_bgp_asn"] = peer_bgp_asn
+        if peer_bgp_asn_extended is not None:
+            self._values["peer_bgp_asn_extended"] = peer_bgp_asn_extended
+        if tags is not None:
+            self._values["tags"] = tags
+
+    @builtins.property
+    def local_address(self) -> builtins.str:
+        '''The local address.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-localgatewayvirtualinterface.html#cfn-ec2-localgatewayvirtualinterface-localaddress
+        '''
+        result = self._values.get("local_address")
+        assert result is not None, "Required property 'local_address' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def local_gateway_virtual_interface_group_id(self) -> builtins.str:
+        '''The ID of the local gateway virtual interface group.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-localgatewayvirtualinterface.html#cfn-ec2-localgatewayvirtualinterface-localgatewayvirtualinterfacegroupid
+        '''
+        result = self._values.get("local_gateway_virtual_interface_group_id")
+        assert result is not None, "Required property 'local_gateway_virtual_interface_group_id' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def outpost_lag_id(self) -> builtins.str:
+        '''The Outpost LAG ID.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-localgatewayvirtualinterface.html#cfn-ec2-localgatewayvirtualinterface-outpostlagid
+        '''
+        result = self._values.get("outpost_lag_id")
+        assert result is not None, "Required property 'outpost_lag_id' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def peer_address(self) -> builtins.str:
+        '''The peer address.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-localgatewayvirtualinterface.html#cfn-ec2-localgatewayvirtualinterface-peeraddress
+        '''
+        result = self._values.get("peer_address")
+        assert result is not None, "Required property 'peer_address' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def vlan(self) -> jsii.Number:
+        '''The ID of the VLAN.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-localgatewayvirtualinterface.html#cfn-ec2-localgatewayvirtualinterface-vlan
+        '''
+        result = self._values.get("vlan")
+        assert result is not None, "Required property 'vlan' is missing"
+        return typing.cast(jsii.Number, result)
+
+    @builtins.property
+    def peer_bgp_asn(self) -> typing.Optional[jsii.Number]:
+        '''The peer BGP ASN.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-localgatewayvirtualinterface.html#cfn-ec2-localgatewayvirtualinterface-peerbgpasn
+        '''
+        result = self._values.get("peer_bgp_asn")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    @builtins.property
+    def peer_bgp_asn_extended(self) -> typing.Optional[jsii.Number]:
+        '''The extended 32-bit ASN of the BGP peer for use with larger ASN values.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-localgatewayvirtualinterface.html#cfn-ec2-localgatewayvirtualinterface-peerbgpasnextended
+        '''
+        result = self._values.get("peer_bgp_asn_extended")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    @builtins.property
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''The tags assigned to the virtual interface.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-localgatewayvirtualinterface.html#cfn-ec2-localgatewayvirtualinterface-tags
+        '''
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnLocalGatewayVirtualInterfaceProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_ec2.CfnNatGatewayProps",
     jsii_struct_bases=[],
@@ -19914,7 +20583,7 @@ class CfnVPCEndpointProps:
 
         For CloudFormation templates in YAML, you can provide the policy in JSON or YAML format. For example, if you have a JSON policy, you can convert it to YAML before including it in the YAML template, and AWS CloudFormation converts the policy to JSON format before calling the API actions for AWS PrivateLink . Alternatively, you can include the JSON directly in the YAML, as shown in the following ``Properties`` section:
 
-        ``Properties: VpcEndpointType: 'Interface' ServiceName: !Sub 'com.amazonaws.${AWS::Region}.logs' PolicyDocument: '{ "Version":"2012-10-17", "Statement": [{ "Effect":"Allow", "Principal":"*", "Action":["logs:Describe*","logs:Get*","logs:List*","logs:FilterLogEvents"], "Resource":"*" }] }'``
+        ``Properties: VpcEndpointType: 'Interface' ServiceName: !Sub 'com.amazonaws.${AWS::Region}.logs' PolicyDocument: '{ "Version":"2012-10-17",  "Statement": [{ "Effect":"Allow", "Principal":"*", "Action":["logs:Describe*","logs:Get*","logs:List*","logs:FilterLogEvents"], "Resource":"*" }] }'``
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcendpoint.html#cfn-ec2-vpcendpoint-policydocument
         '''
@@ -22426,11 +23095,11 @@ class CfnVolumeProps:
         :param availability_zone: The ID of the Availability Zone in which to create the volume. For example, ``us-east-1a`` . Either ``AvailabilityZone`` or ``AvailabilityZoneId`` must be specified, but not both.
         :param auto_enable_io: Indicates whether the volume is auto-enabled for I/O operations. By default, Amazon EBS disables I/O to the volume from attached EC2 instances when it determines that a volume's data is potentially inconsistent. If the consistency of the volume is not a concern, and you prefer that the volume be made available immediately if it's impaired, you can configure the volume to automatically enable I/O.
         :param encrypted: Indicates whether the volume should be encrypted. The effect of setting the encryption state to ``true`` depends on the volume origin (new or from a snapshot), starting encryption state, ownership, and whether encryption by default is enabled. For more information, see `Encryption by default <https://docs.aws.amazon.com/ebs/latest/userguide/work-with-ebs-encr.html#encryption-by-default>`_ in the *Amazon EBS User Guide* . Encrypted Amazon EBS volumes must be attached to instances that support Amazon EBS encryption. For more information, see `Supported instance types <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption-requirements.html#ebs-encryption_supported_instances>`_ .
-        :param iops: The number of I/O operations per second (IOPS). For ``gp3`` , ``io1`` , and ``io2`` volumes, this represents the number of IOPS that are provisioned for the volume. For ``gp2`` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. The following are the supported values for each volume type: - ``gp3`` : 3,000 - 16,000 IOPS - ``io1`` : 100 - 64,000 IOPS - ``io2`` : 100 - 256,000 IOPS For ``io2`` volumes, you can achieve up to 256,000 IOPS on `instances built on the Nitro System <https://docs.aws.amazon.com/ec2/latest/instancetypes/ec2-nitro-instances.html>`_ . On other instances, you can achieve performance up to 32,000 IOPS. This parameter is required for ``io1`` and ``io2`` volumes. The default for ``gp3`` volumes is 3,000 IOPS. This parameter is not supported for ``gp2`` , ``st1`` , ``sc1`` , or ``standard`` volumes.
+        :param iops: The number of I/O operations per second (IOPS). For ``gp3`` , ``io1`` , and ``io2`` volumes, this represents the number of IOPS that are provisioned for the volume. For ``gp2`` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. The following are the supported values for each volume type: - ``gp3`` : 3,000 - 80,000 IOPS - ``io1`` : 100 - 64,000 IOPS - ``io2`` : 100 - 256,000 IOPS For ``io2`` volumes, you can achieve up to 256,000 IOPS on `instances built on the Nitro System <https://docs.aws.amazon.com/ec2/latest/instancetypes/ec2-nitro-instances.html>`_ . On other instances, you can achieve performance up to 32,000 IOPS. This parameter is required for ``io1`` and ``io2`` volumes. The default for ``gp3`` volumes is 3,000 IOPS. This parameter is not supported for ``gp2`` , ``st1`` , ``sc1`` , or ``standard`` volumes.
         :param kms_key_id: The identifier of the AWS KMS key to use for Amazon EBS encryption. If ``KmsKeyId`` is specified, the encrypted state must be ``true`` . If you omit this property and your account is enabled for encryption by default, or *Encrypted* is set to ``true`` , then the volume is encrypted using the default key specified for your account. If your account does not have a default key, then the volume is encrypted using the AWS managed key . Alternatively, if you want to specify a different key, you can specify one of the following: - Key ID. For example, 1234abcd-12ab-34cd-56ef-1234567890ab. - Key alias. Specify the alias for the key, prefixed with ``alias/`` . For example, for a key with the alias ``my_cmk`` , use ``alias/my_cmk`` . Or to specify the AWS managed key , use ``alias/aws/ebs`` . - Key ARN. For example, arn:aws:kms:us-east-1:012345678910:key/1234abcd-12ab-34cd-56ef-1234567890ab. - Alias ARN. For example, arn:aws:kms:us-east-1:012345678910:alias/ExampleAlias.
         :param multi_attach_enabled: Indicates whether Amazon EBS Multi-Attach is enabled. AWS CloudFormation does not currently support updating a single-attach volume to be multi-attach enabled, updating a multi-attach enabled volume to be single-attach, or updating the size or number of I/O operations per second (IOPS) of a multi-attach enabled volume.
         :param outpost_arn: The Amazon Resource Name (ARN) of the Outpost.
-        :param size: The size of the volume, in GiBs. You must specify either a snapshot ID or a volume size. If you specify a snapshot, the default is the snapshot size. You can specify a volume size that is equal to or larger than the snapshot size. The following are the supported volumes sizes for each volume type: - ``gp2`` and ``gp3`` : 1 - 16,384 GiB - ``io1`` : 4 - 16,384 GiB - ``io2`` : 4 - 65,536 GiB - ``st1`` and ``sc1`` : 125 - 16,384 GiB - ``standard`` : 1 - 1024 GiB
+        :param size: The size of the volume, in GiBs. You must specify either a snapshot ID or a volume size. If you specify a snapshot, the default is the snapshot size. You can specify a volume size that is equal to or larger than the snapshot size. The following are the supported volumes sizes for each volume type: - ``gp2`` : 1 - 16,384 GiB - ``gp3`` : 1 - 65,536 GiB - ``io1`` : 4 - 16,384 GiB - ``io2`` : 4 - 65,536 GiB - ``st1`` and ``sc1`` : 125 - 16,384 GiB - ``standard`` : 1 - 1024 GiB
         :param snapshot_id: The snapshot from which to create the volume. You must specify either a snapshot ID or a volume size.
         :param tags: The tags to apply to the volume during creation.
         :param throughput: The throughput to provision for a volume, with a maximum of 1,000 MiB/s. This parameter is valid only for ``gp3`` volumes. The default value is 125. Valid Range: Minimum value of 125. Maximum value of 1000.
@@ -22558,7 +23227,7 @@ class CfnVolumeProps:
 
         The following are the supported values for each volume type:
 
-        - ``gp3`` : 3,000 - 16,000 IOPS
+        - ``gp3`` : 3,000 - 80,000 IOPS
         - ``io1`` : 100 - 64,000 IOPS
         - ``io2`` : 100 - 256,000 IOPS
 
@@ -22621,7 +23290,8 @@ class CfnVolumeProps:
 
         The following are the supported volumes sizes for each volume type:
 
-        - ``gp2`` and ``gp3`` : 1 - 16,384 GiB
+        - ``gp2`` : 1 - 16,384 GiB
+        - ``gp3`` : 1 - 65,536 GiB
         - ``io1`` : 4 - 16,384 GiB
         - ``io2`` : 4 - 65,536 GiB
         - ``st1`` and ``sc1`` : 125 - 16,384 GiB
@@ -23159,6 +23829,7 @@ class ClientVpnEndpointAttributes:
         "client_login_banner": "clientLoginBanner",
         "client_route_enforcement_options": "clientRouteEnforcementOptions",
         "description": "description",
+        "disconnect_on_session_timeout": "disconnectOnSessionTimeout",
         "dns_servers": "dnsServers",
         "logging": "logging",
         "log_group": "logGroup",
@@ -23185,6 +23856,7 @@ class ClientVpnEndpointOptions:
         client_login_banner: typing.Optional[builtins.str] = None,
         client_route_enforcement_options: typing.Optional[typing.Union[ClientRouteEnforcementOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         description: typing.Optional[builtins.str] = None,
+        disconnect_on_session_timeout: typing.Optional[builtins.bool] = None,
         dns_servers: typing.Optional[typing.Sequence[builtins.str]] = None,
         logging: typing.Optional[builtins.bool] = None,
         log_group: typing.Optional[_ILogGroup_3c4fa718] = None,
@@ -23208,6 +23880,7 @@ class ClientVpnEndpointOptions:
         :param client_login_banner: Customizable text that will be displayed in a banner on AWS provided clients when a VPN session is established. UTF-8 encoded characters only. Maximum of 1400 characters. Default: - no banner is presented to the client
         :param client_route_enforcement_options: Options for Client Route Enforcement. Client Route Enforcement is a feature of Client VPN that helps enforce administrator defined routes on devices connected through the VPN. This feature helps improve your security posture by ensuring that network traffic originating from a connected client is not inadvertently sent outside the VPN tunnel. Default: undefined - AWS Client VPN default setting is disable client route enforcement
         :param description: A brief description of the Client VPN endpoint. Default: - no description
+        :param disconnect_on_session_timeout: Indicates whether the client VPN session is disconnected after the maximum ``sessionTimeout`` is reached. If ``true``, users are prompted to reconnect client VPN. If ``false``, client VPN attempts to reconnect automatically. Default: undefined - AWS Client VPN default is true
         :param dns_servers: Information about the DNS servers to be used for DNS resolution. A Client VPN endpoint can have up to two DNS servers. Default: - use the DNS address configured on the device
         :param logging: Whether to enable connections logging. Default: true
         :param log_group: A CloudWatch Logs log group for connection logging. Default: - a new group is created
@@ -23225,16 +23898,13 @@ class ClientVpnEndpointOptions:
 
         Example::
 
-            endpoint = vpc.add_client_vpn_endpoint("Endpoint",
+            vpc.add_client_vpn_endpoint("Endpoint",
                 cidr="10.100.0.0/16",
                 server_certificate_arn="arn:aws:acm:us-east-1:123456789012:certificate/server-certificate-id",
-                user_based_authentication=ec2.ClientVpnUserBasedAuthentication.federated(saml_provider),
-                authorize_all_users_to_vpc_cidr=False
-            )
-            
-            endpoint.add_authorization_rule("Rule",
-                cidr="10.0.10.0/32",
-                group_id="group-id"
+                # Mutual authentication
+                client_certificate_arn="arn:aws:acm:us-east-1:123456789012:certificate/client-certificate-id",
+                # User-based authentication
+                user_based_authentication=ec2.ClientVpnUserBasedAuthentication.federated(saml_provider)
             )
         '''
         if isinstance(client_route_enforcement_options, dict):
@@ -23251,6 +23921,7 @@ class ClientVpnEndpointOptions:
             check_type(argname="argument client_login_banner", value=client_login_banner, expected_type=type_hints["client_login_banner"])
             check_type(argname="argument client_route_enforcement_options", value=client_route_enforcement_options, expected_type=type_hints["client_route_enforcement_options"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument disconnect_on_session_timeout", value=disconnect_on_session_timeout, expected_type=type_hints["disconnect_on_session_timeout"])
             check_type(argname="argument dns_servers", value=dns_servers, expected_type=type_hints["dns_servers"])
             check_type(argname="argument logging", value=logging, expected_type=type_hints["logging"])
             check_type(argname="argument log_group", value=log_group, expected_type=type_hints["log_group"])
@@ -23279,6 +23950,8 @@ class ClientVpnEndpointOptions:
             self._values["client_route_enforcement_options"] = client_route_enforcement_options
         if description is not None:
             self._values["description"] = description
+        if disconnect_on_session_timeout is not None:
+            self._values["disconnect_on_session_timeout"] = disconnect_on_session_timeout
         if dns_servers is not None:
             self._values["dns_servers"] = dns_servers
         if logging is not None:
@@ -23399,6 +24072,20 @@ class ClientVpnEndpointOptions:
         result = self._values.get("description")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def disconnect_on_session_timeout(self) -> typing.Optional[builtins.bool]:
+        '''Indicates whether the client VPN session is disconnected after the maximum ``sessionTimeout`` is reached.
+
+        If ``true``, users are prompted to reconnect client VPN.
+        If ``false``, client VPN attempts to reconnect automatically.
+
+        :default: undefined - AWS Client VPN default is true
+
+        :see: https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/cvpn-working-max-duration.html
+        '''
+        result = self._values.get("disconnect_on_session_timeout")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def dns_servers(self) -> typing.Optional[typing.List[builtins.str]]:
         '''Information about the DNS servers to be used for DNS resolution.
@@ -23539,6 +24226,7 @@ class ClientVpnEndpointOptions:
         "client_login_banner": "clientLoginBanner",
         "client_route_enforcement_options": "clientRouteEnforcementOptions",
         "description": "description",
+        "disconnect_on_session_timeout": "disconnectOnSessionTimeout",
         "dns_servers": "dnsServers",
         "logging": "logging",
         "log_group": "logGroup",
@@ -23566,6 +24254,7 @@ class ClientVpnEndpointProps(ClientVpnEndpointOptions):
         client_login_banner: typing.Optional[builtins.str] = None,
         client_route_enforcement_options: typing.Optional[typing.Union[ClientRouteEnforcementOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         description: typing.Optional[builtins.str] = None,
+        disconnect_on_session_timeout: typing.Optional[builtins.bool] = None,
         dns_servers: typing.Optional[typing.Sequence[builtins.str]] = None,
         logging: typing.Optional[builtins.bool] = None,
         log_group: typing.Optional[_ILogGroup_3c4fa718] = None,
@@ -23590,6 +24279,7 @@ class ClientVpnEndpointProps(ClientVpnEndpointOptions):
         :param client_login_banner: Customizable text that will be displayed in a banner on AWS provided clients when a VPN session is established. UTF-8 encoded characters only. Maximum of 1400 characters. Default: - no banner is presented to the client
         :param client_route_enforcement_options: Options for Client Route Enforcement. Client Route Enforcement is a feature of Client VPN that helps enforce administrator defined routes on devices connected through the VPN. This feature helps improve your security posture by ensuring that network traffic originating from a connected client is not inadvertently sent outside the VPN tunnel. Default: undefined - AWS Client VPN default setting is disable client route enforcement
         :param description: A brief description of the Client VPN endpoint. Default: - no description
+        :param disconnect_on_session_timeout: Indicates whether the client VPN session is disconnected after the maximum ``sessionTimeout`` is reached. If ``true``, users are prompted to reconnect client VPN. If ``false``, client VPN attempts to reconnect automatically. Default: undefined - AWS Client VPN default is true
         :param dns_servers: Information about the DNS servers to be used for DNS resolution. A Client VPN endpoint can have up to two DNS servers. Default: - use the DNS address configured on the device
         :param logging: Whether to enable connections logging. Default: true
         :param log_group: A CloudWatch Logs log group for connection logging. Default: - a new group is created
@@ -23636,6 +24326,7 @@ class ClientVpnEndpointProps(ClientVpnEndpointOptions):
                     enforced=False
                 ),
                 description="description",
+                disconnect_on_session_timeout=False,
                 dns_servers=["dnsServers"],
                 logging=False,
                 log_group=log_group,
@@ -23671,6 +24362,7 @@ class ClientVpnEndpointProps(ClientVpnEndpointOptions):
             check_type(argname="argument client_login_banner", value=client_login_banner, expected_type=type_hints["client_login_banner"])
             check_type(argname="argument client_route_enforcement_options", value=client_route_enforcement_options, expected_type=type_hints["client_route_enforcement_options"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument disconnect_on_session_timeout", value=disconnect_on_session_timeout, expected_type=type_hints["disconnect_on_session_timeout"])
             check_type(argname="argument dns_servers", value=dns_servers, expected_type=type_hints["dns_servers"])
             check_type(argname="argument logging", value=logging, expected_type=type_hints["logging"])
             check_type(argname="argument log_group", value=log_group, expected_type=type_hints["log_group"])
@@ -23701,6 +24393,8 @@ class ClientVpnEndpointProps(ClientVpnEndpointOptions):
             self._values["client_route_enforcement_options"] = client_route_enforcement_options
         if description is not None:
             self._values["description"] = description
+        if disconnect_on_session_timeout is not None:
+            self._values["disconnect_on_session_timeout"] = disconnect_on_session_timeout
         if dns_servers is not None:
             self._values["dns_servers"] = dns_servers
         if logging is not None:
@@ -23821,6 +24515,20 @@ class ClientVpnEndpointProps(ClientVpnEndpointOptions):
         result = self._values.get("description")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def disconnect_on_session_timeout(self) -> typing.Optional[builtins.bool]:
+        '''Indicates whether the client VPN session is disconnected after the maximum ``sessionTimeout`` is reached.
+
+        If ``true``, users are prompted to reconnect client VPN.
+        If ``false``, client VPN attempts to reconnect automatically.
+
+        :default: undefined - AWS Client VPN default is true
+
+        :see: https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/cvpn-working-max-duration.html
+        '''
+        result = self._values.get("disconnect_on_session_timeout")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def dns_servers(self) -> typing.Optional[typing.List[builtins.str]]:
         '''Information about the DNS servers to be used for DNS resolution.
@@ -25297,6 +26005,70 @@ class CpuCredits(enum.Enum):
     '''
 
 
+@jsii.enum(jsii_type="aws-cdk-lib.aws_ec2.CpuManufacturer")
+class CpuManufacturer(enum.Enum):
+    '''CPU manufacturers supported by EC2 instances.
+
+    Restricts the acceptable CPU vendor for selected instance types.
+
+    :exampleMetadata: infused
+
+    Example::
+
+        # vpc: ec2.Vpc
+        # infrastructure_role: iam.Role
+        # instance_profile: iam.InstanceProfile
+        
+        
+        cluster = ecs.Cluster(self, "Cluster", vpc=vpc)
+        
+        # Create a Managed Instances Capacity Provider
+        mi_capacity_provider = ecs.ManagedInstancesCapacityProvider(self, "MICapacityProvider",
+            infrastructure_role=infrastructure_role,
+            ec2_instance_profile=instance_profile,
+            subnets=vpc.private_subnets,
+            security_groups=[ec2.SecurityGroup(self, "MISecurityGroup", vpc=vpc)],
+            instance_requirements=ec2.InstanceRequirementsConfig(
+                v_cpu_count_min=1,
+                memory_min=Size.gibibytes(2),
+                cpu_manufacturers=[ec2.CpuManufacturer.INTEL],
+                accelerator_manufacturers=[ec2.AcceleratorManufacturer.NVIDIA]
+            ),
+            propagate_tags=ecs.PropagateManagedInstancesTags.CAPACITY_PROVIDER
+        )
+        
+        # Add the capacity provider to the cluster
+        cluster.add_managed_instances_capacity_provider(mi_capacity_provider)
+        
+        task_definition = ecs.Ec2TaskDefinition(self, "TaskDef")
+        
+        task_definition.add_container("web",
+            image=ecs.ContainerImage.from_registry("amazon/amazon-ecs-sample"),
+            memory_reservation_mi_b=256
+        )
+        
+        ecs.Ec2Service(self, "EC2Service",
+            cluster=cluster,
+            task_definition=task_definition,
+            min_healthy_percent=100,
+            capacity_provider_strategies=[ecs.CapacityProviderStrategy(
+                capacity_provider=mi_capacity_provider.capacity_provider_name,
+                weight=1
+            )
+            ]
+        )
+    '''
+
+    INTEL = "INTEL"
+    '''Intel CPUs (e.g., Xeon families).'''
+    AMD = "AMD"
+    '''AMD CPUs (e.g., EPYC families).'''
+    AWS = "AWS"
+    '''AWS-designed CPUs (e.g., Graviton families).'''
+    APPLE = "APPLE"
+    '''Apple CPUs (e.g., M1, M2).'''
+
+
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_ec2.CreateIpv6CidrBlocksRequest",
     jsii_struct_bases=[],
@@ -29291,6 +30063,100 @@ class _ILocalGatewayRouteTableVirtualInterfaceGroupAssociationRefProxy(
 typing.cast(typing.Any, ILocalGatewayRouteTableVirtualInterfaceGroupAssociationRef).__jsii_proxy_class__ = lambda : _ILocalGatewayRouteTableVirtualInterfaceGroupAssociationRefProxy
 
 
+@jsii.interface(jsii_type="aws-cdk-lib.aws_ec2.ILocalGatewayVirtualInterfaceGroupRef")
+class ILocalGatewayVirtualInterfaceGroupRef(
+    _constructs_77d1e7e8.IConstruct,
+    typing_extensions.Protocol,
+):
+    '''(experimental) Indicates that this resource can be referenced as a LocalGatewayVirtualInterfaceGroup.
+
+    :stability: experimental
+    '''
+
+    @builtins.property
+    @jsii.member(jsii_name="localGatewayVirtualInterfaceGroupRef")
+    def local_gateway_virtual_interface_group_ref(
+        self,
+    ) -> "LocalGatewayVirtualInterfaceGroupReference":
+        '''(experimental) A reference to a LocalGatewayVirtualInterfaceGroup resource.
+
+        :stability: experimental
+        '''
+        ...
+
+
+class _ILocalGatewayVirtualInterfaceGroupRefProxy(
+    jsii.proxy_for(_constructs_77d1e7e8.IConstruct), # type: ignore[misc]
+):
+    '''(experimental) Indicates that this resource can be referenced as a LocalGatewayVirtualInterfaceGroup.
+
+    :stability: experimental
+    '''
+
+    __jsii_type__: typing.ClassVar[str] = "aws-cdk-lib.aws_ec2.ILocalGatewayVirtualInterfaceGroupRef"
+
+    @builtins.property
+    @jsii.member(jsii_name="localGatewayVirtualInterfaceGroupRef")
+    def local_gateway_virtual_interface_group_ref(
+        self,
+    ) -> "LocalGatewayVirtualInterfaceGroupReference":
+        '''(experimental) A reference to a LocalGatewayVirtualInterfaceGroup resource.
+
+        :stability: experimental
+        '''
+        return typing.cast("LocalGatewayVirtualInterfaceGroupReference", jsii.get(self, "localGatewayVirtualInterfaceGroupRef"))
+
+# Adding a "__jsii_proxy_class__(): typing.Type" function to the interface
+typing.cast(typing.Any, ILocalGatewayVirtualInterfaceGroupRef).__jsii_proxy_class__ = lambda : _ILocalGatewayVirtualInterfaceGroupRefProxy
+
+
+@jsii.interface(jsii_type="aws-cdk-lib.aws_ec2.ILocalGatewayVirtualInterfaceRef")
+class ILocalGatewayVirtualInterfaceRef(
+    _constructs_77d1e7e8.IConstruct,
+    typing_extensions.Protocol,
+):
+    '''(experimental) Indicates that this resource can be referenced as a LocalGatewayVirtualInterface.
+
+    :stability: experimental
+    '''
+
+    @builtins.property
+    @jsii.member(jsii_name="localGatewayVirtualInterfaceRef")
+    def local_gateway_virtual_interface_ref(
+        self,
+    ) -> "LocalGatewayVirtualInterfaceReference":
+        '''(experimental) A reference to a LocalGatewayVirtualInterface resource.
+
+        :stability: experimental
+        '''
+        ...
+
+
+class _ILocalGatewayVirtualInterfaceRefProxy(
+    jsii.proxy_for(_constructs_77d1e7e8.IConstruct), # type: ignore[misc]
+):
+    '''(experimental) Indicates that this resource can be referenced as a LocalGatewayVirtualInterface.
+
+    :stability: experimental
+    '''
+
+    __jsii_type__: typing.ClassVar[str] = "aws-cdk-lib.aws_ec2.ILocalGatewayVirtualInterfaceRef"
+
+    @builtins.property
+    @jsii.member(jsii_name="localGatewayVirtualInterfaceRef")
+    def local_gateway_virtual_interface_ref(
+        self,
+    ) -> "LocalGatewayVirtualInterfaceReference":
+        '''(experimental) A reference to a LocalGatewayVirtualInterface resource.
+
+        :stability: experimental
+        '''
+        return typing.cast("LocalGatewayVirtualInterfaceReference", jsii.get(self, "localGatewayVirtualInterfaceRef"))
+
+# Adding a "__jsii_proxy_class__(): typing.Type" function to the interface
+typing.cast(typing.Any, ILocalGatewayVirtualInterfaceRef).__jsii_proxy_class__ = lambda : _ILocalGatewayVirtualInterfaceRefProxy
+
+
 @jsii.interface(jsii_type="aws-cdk-lib.aws_ec2.IMachineImage")
 class IMachineImage(typing_extensions.Protocol):
     '''Interface for classes that can select an appropriate machine image to use.'''
@@ -32913,6 +33779,7 @@ class IVpc(_IResource_c80c4260, IVPCRef, typing_extensions.Protocol):
         client_login_banner: typing.Optional[builtins.str] = None,
         client_route_enforcement_options: typing.Optional[typing.Union[ClientRouteEnforcementOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         description: typing.Optional[builtins.str] = None,
+        disconnect_on_session_timeout: typing.Optional[builtins.bool] = None,
         dns_servers: typing.Optional[typing.Sequence[builtins.str]] = None,
         logging: typing.Optional[builtins.bool] = None,
         log_group: typing.Optional[_ILogGroup_3c4fa718] = None,
@@ -32937,6 +33804,7 @@ class IVpc(_IResource_c80c4260, IVPCRef, typing_extensions.Protocol):
         :param client_login_banner: Customizable text that will be displayed in a banner on AWS provided clients when a VPN session is established. UTF-8 encoded characters only. Maximum of 1400 characters. Default: - no banner is presented to the client
         :param client_route_enforcement_options: Options for Client Route Enforcement. Client Route Enforcement is a feature of Client VPN that helps enforce administrator defined routes on devices connected through the VPN. This feature helps improve your security posture by ensuring that network traffic originating from a connected client is not inadvertently sent outside the VPN tunnel. Default: undefined - AWS Client VPN default setting is disable client route enforcement
         :param description: A brief description of the Client VPN endpoint. Default: - no description
+        :param disconnect_on_session_timeout: Indicates whether the client VPN session is disconnected after the maximum ``sessionTimeout`` is reached. If ``true``, users are prompted to reconnect client VPN. If ``false``, client VPN attempts to reconnect automatically. Default: undefined - AWS Client VPN default is true
         :param dns_servers: Information about the DNS servers to be used for DNS resolution. A Client VPN endpoint can have up to two DNS servers. Default: - use the DNS address configured on the device
         :param logging: Whether to enable connections logging. Default: true
         :param log_group: A CloudWatch Logs log group for connection logging. Default: - a new group is created
@@ -33164,6 +34032,7 @@ class _IVpcProxy(
         client_login_banner: typing.Optional[builtins.str] = None,
         client_route_enforcement_options: typing.Optional[typing.Union[ClientRouteEnforcementOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         description: typing.Optional[builtins.str] = None,
+        disconnect_on_session_timeout: typing.Optional[builtins.bool] = None,
         dns_servers: typing.Optional[typing.Sequence[builtins.str]] = None,
         logging: typing.Optional[builtins.bool] = None,
         log_group: typing.Optional[_ILogGroup_3c4fa718] = None,
@@ -33188,6 +34057,7 @@ class _IVpcProxy(
         :param client_login_banner: Customizable text that will be displayed in a banner on AWS provided clients when a VPN session is established. UTF-8 encoded characters only. Maximum of 1400 characters. Default: - no banner is presented to the client
         :param client_route_enforcement_options: Options for Client Route Enforcement. Client Route Enforcement is a feature of Client VPN that helps enforce administrator defined routes on devices connected through the VPN. This feature helps improve your security posture by ensuring that network traffic originating from a connected client is not inadvertently sent outside the VPN tunnel. Default: undefined - AWS Client VPN default setting is disable client route enforcement
         :param description: A brief description of the Client VPN endpoint. Default: - no description
+        :param disconnect_on_session_timeout: Indicates whether the client VPN session is disconnected after the maximum ``sessionTimeout`` is reached. If ``true``, users are prompted to reconnect client VPN. If ``false``, client VPN attempts to reconnect automatically. Default: undefined - AWS Client VPN default is true
         :param dns_servers: Information about the DNS servers to be used for DNS resolution. A Client VPN endpoint can have up to two DNS servers. Default: - use the DNS address configured on the device
         :param logging: Whether to enable connections logging. Default: true
         :param log_group: A CloudWatch Logs log group for connection logging. Default: - a new group is created
@@ -33213,6 +34083,7 @@ class _IVpcProxy(
             client_login_banner=client_login_banner,
             client_route_enforcement_options=client_route_enforcement_options,
             description=description,
+            disconnect_on_session_timeout=disconnect_on_session_timeout,
             dns_servers=dns_servers,
             logging=logging,
             log_group=log_group,
@@ -36366,6 +37237,14 @@ class InstanceClass(enum.Enum):
     '''Compute optimized instances based on Intel Xeon Scalable (Sapphire Rapids) processors, 7th generation C7i-flex instances efficiently use compute resources to deliver a baseline level of performance with the ability to scale up to the full compute performance a majority of the time.'''
     C7I_FLEX = "C7I_FLEX"
     '''Compute optimized instances based on Intel Xeon Scalable (Sapphire Rapids) processors, 7th generation C7i-flex instances efficiently use compute resources to deliver a baseline level of performance with the ability to scale up to the full compute performance a majority of the time.'''
+    COMPUTE8_INTEL = "COMPUTE8_INTEL"
+    '''Compute optimized instances based on custom Intel Xeon 6 processors, available only on AWS, 8th generation.'''
+    C8I = "C8I"
+    '''Compute optimized instances based on custom Intel Xeon 6 processors, available only on AWS, 8th generation.'''
+    COMPUTE8_INTEL_FLEX = "COMPUTE8_INTEL_FLEX"
+    '''Compute optimized instances based on custom Intel Xeon 6 processors, available only on AWS, 8th generation C8i-flex instances efficiently use compute resources to deliver a baseline level of performance with the ability to scale up to the full compute performance a majority of the time.'''
+    C8I_FLEX = "C8I_FLEX"
+    '''Compute optimized instances based on custom Intel Xeon 6 processors, available only on AWS, 8th generation C8i-flex instances efficiently use compute resources to deliver a baseline level of performance with the ability to scale up to the full compute performance a majority of the time.'''
     COMPUTE7_AMD = "COMPUTE7_AMD"
     '''Compute optimized instances based on 4th generation AMD EPYC (codename Genoa), 7th generation.'''
     C7A = "C7A"
@@ -36664,6 +37543,10 @@ class InstanceClass(enum.Enum):
     '''Standard instances based on 4th generation AMD EPYC (codename Genoa), 7th generation.'''
     M7A = "M7A"
     '''Standard instances based on 4th generation AMD EPYC (codename Genoa), 7th generation.'''
+    STANDARD8_AMD = "STANDARD8_AMD"
+    '''Standard instances based on 5th generation AMD EPYC (formerly code named Turin), 8th generation.'''
+    M8A = "M8A"
+    '''Standard instances based on 5th generation AMD EPYC (formerly code named Turin), 8th generation.'''
     HIGH_COMPUTE_MEMORY1 = "HIGH_COMPUTE_MEMORY1"
     '''High memory and compute capacity instances, 1st generation.'''
     Z1D = "Z1D"
@@ -36775,6 +37658,71 @@ class InstanceConnectEndpointReference:
         )
 
 
+@jsii.enum(jsii_type="aws-cdk-lib.aws_ec2.InstanceGeneration")
+class InstanceGeneration(enum.Enum):
+    '''Instance generation categories for EC2.
+
+    Determines whether the instance type must belong to the latest
+    (current) generation or to an older (previous) generation.
+
+    :exampleMetadata: infused
+
+    Example::
+
+        # infrastructure_role: iam.Role
+        # instance_profile: iam.InstanceProfile
+        # vpc: ec2.Vpc
+        
+        
+        mi_capacity_provider = ecs.ManagedInstancesCapacityProvider(self, "MICapacityProvider",
+            infrastructure_role=infrastructure_role,
+            ec2_instance_profile=instance_profile,
+            subnets=vpc.private_subnets,
+            instance_requirements=ec2.InstanceRequirementsConfig(
+                # Required: CPU and memory constraints
+                v_cpu_count_min=2,
+                v_cpu_count_max=8,
+                memory_min=Size.gibibytes(4),
+                memory_max=Size.gibibytes(32),
+        
+                # CPU preferences
+                cpu_manufacturers=[ec2.CpuManufacturer.INTEL, ec2.CpuManufacturer.AMD],
+                instance_generations=[ec2.InstanceGeneration.CURRENT],
+        
+                # Instance type filtering
+                allowed_instance_types=["m5.*", "c5.*"],
+        
+                # Performance characteristics
+                burstable_performance=ec2.BurstablePerformance.EXCLUDED,
+                bare_metal=ec2.BareMetal.EXCLUDED,
+        
+                # Accelerator requirements (for ML/AI workloads)
+                accelerator_types=[ec2.AcceleratorType.GPU],
+                accelerator_manufacturers=[ec2.AcceleratorManufacturer.NVIDIA],
+                accelerator_names=[ec2.AcceleratorName.T4, ec2.AcceleratorName.V100],
+                accelerator_count_min=1,
+        
+                # Storage requirements
+                local_storage=ec2.LocalStorage.REQUIRED,
+                local_storage_types=[ec2.LocalStorageType.SSD],
+                total_local_storage_gBMin=100,
+        
+                # Network requirements
+                network_interface_count_min=2,
+                network_bandwidth_gbps_min=10,
+        
+                # Cost optimization
+                on_demand_max_price_percentage_over_lowest_price=10
+            )
+        )
+    '''
+
+    CURRENT = "CURRENT"
+    '''Current generation instances (latest families).'''
+    PREVIOUS = "PREVIOUS"
+    '''Previous generation instances (older families).'''
+
+
 @jsii.enum(jsii_type="aws-cdk-lib.aws_ec2.InstanceInitiatedShutdownBehavior")
 class InstanceInitiatedShutdownBehavior(enum.Enum):
     '''Provides the options for specifying the instance initiated shutdown behavior.
@@ -37653,6 +38601,676 @@ class InstanceRequireImdsv2AspectProps:
         )
 
 
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_ec2.InstanceRequirementsConfig",
+    jsii_struct_bases=[],
+    name_mapping={
+        "memory_min": "memoryMin",
+        "v_cpu_count_min": "vCpuCountMin",
+        "accelerator_count_max": "acceleratorCountMax",
+        "accelerator_count_min": "acceleratorCountMin",
+        "accelerator_manufacturers": "acceleratorManufacturers",
+        "accelerator_names": "acceleratorNames",
+        "accelerator_total_memory_max": "acceleratorTotalMemoryMax",
+        "accelerator_total_memory_min": "acceleratorTotalMemoryMin",
+        "accelerator_types": "acceleratorTypes",
+        "allowed_instance_types": "allowedInstanceTypes",
+        "bare_metal": "bareMetal",
+        "baseline_ebs_bandwidth_mbps_max": "baselineEbsBandwidthMbpsMax",
+        "baseline_ebs_bandwidth_mbps_min": "baselineEbsBandwidthMbpsMin",
+        "burstable_performance": "burstablePerformance",
+        "cpu_manufacturers": "cpuManufacturers",
+        "excluded_instance_types": "excludedInstanceTypes",
+        "instance_generations": "instanceGenerations",
+        "local_storage": "localStorage",
+        "local_storage_types": "localStorageTypes",
+        "max_spot_price_as_percentage_of_optimal_on_demand_price": "maxSpotPriceAsPercentageOfOptimalOnDemandPrice",
+        "memory_max": "memoryMax",
+        "memory_per_v_cpu_max": "memoryPerVCpuMax",
+        "memory_per_v_cpu_min": "memoryPerVCpuMin",
+        "network_bandwidth_gbps_max": "networkBandwidthGbpsMax",
+        "network_bandwidth_gbps_min": "networkBandwidthGbpsMin",
+        "network_interface_count_max": "networkInterfaceCountMax",
+        "network_interface_count_min": "networkInterfaceCountMin",
+        "on_demand_max_price_percentage_over_lowest_price": "onDemandMaxPricePercentageOverLowestPrice",
+        "require_hibernate_support": "requireHibernateSupport",
+        "spot_max_price_percentage_over_lowest_price": "spotMaxPricePercentageOverLowestPrice",
+        "total_local_storage_gb_max": "totalLocalStorageGBMax",
+        "total_local_storage_gb_min": "totalLocalStorageGBMin",
+        "v_cpu_count_max": "vCpuCountMax",
+    },
+)
+class InstanceRequirementsConfig:
+    def __init__(
+        self,
+        *,
+        memory_min: _Size_7b441c34,
+        v_cpu_count_min: jsii.Number,
+        accelerator_count_max: typing.Optional[jsii.Number] = None,
+        accelerator_count_min: typing.Optional[jsii.Number] = None,
+        accelerator_manufacturers: typing.Optional[typing.Sequence[AcceleratorManufacturer]] = None,
+        accelerator_names: typing.Optional[typing.Sequence[AcceleratorName]] = None,
+        accelerator_total_memory_max: typing.Optional[_Size_7b441c34] = None,
+        accelerator_total_memory_min: typing.Optional[_Size_7b441c34] = None,
+        accelerator_types: typing.Optional[typing.Sequence[AcceleratorType]] = None,
+        allowed_instance_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        bare_metal: typing.Optional[BareMetal] = None,
+        baseline_ebs_bandwidth_mbps_max: typing.Optional[jsii.Number] = None,
+        baseline_ebs_bandwidth_mbps_min: typing.Optional[jsii.Number] = None,
+        burstable_performance: typing.Optional[BurstablePerformance] = None,
+        cpu_manufacturers: typing.Optional[typing.Sequence[CpuManufacturer]] = None,
+        excluded_instance_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        instance_generations: typing.Optional[typing.Sequence[InstanceGeneration]] = None,
+        local_storage: typing.Optional["LocalStorage"] = None,
+        local_storage_types: typing.Optional[typing.Sequence["LocalStorageType"]] = None,
+        max_spot_price_as_percentage_of_optimal_on_demand_price: typing.Optional[jsii.Number] = None,
+        memory_max: typing.Optional[_Size_7b441c34] = None,
+        memory_per_v_cpu_max: typing.Optional[_Size_7b441c34] = None,
+        memory_per_v_cpu_min: typing.Optional[_Size_7b441c34] = None,
+        network_bandwidth_gbps_max: typing.Optional[jsii.Number] = None,
+        network_bandwidth_gbps_min: typing.Optional[jsii.Number] = None,
+        network_interface_count_max: typing.Optional[jsii.Number] = None,
+        network_interface_count_min: typing.Optional[jsii.Number] = None,
+        on_demand_max_price_percentage_over_lowest_price: typing.Optional[jsii.Number] = None,
+        require_hibernate_support: typing.Optional[builtins.bool] = None,
+        spot_max_price_percentage_over_lowest_price: typing.Optional[jsii.Number] = None,
+        total_local_storage_gb_max: typing.Optional[jsii.Number] = None,
+        total_local_storage_gb_min: typing.Optional[jsii.Number] = None,
+        v_cpu_count_max: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''The attributes for the instance types for a mixed instances policy.
+
+        When you specify multiple attributes, you get instance types that satisfy all of the specified attributes. If you specify multiple values for an attribute, you get instance types that satisfy any of the specified values.
+
+        To limit the list of instance types from which Amazon EC2 can identify matching instance types, you can use one of the following parameters, but not both in the same request:
+
+        - AllowedInstanceTypes - The instance types to include in the list. All other instance types are ignored, even if they match your specified attributes.
+        - ExcludedInstanceTypes - The instance types to exclude from the list, even if they match your specified attributes.
+
+        Note: You must specify VCpuCount and MemoryMiB. All other attributes are optional. Any unspecified optional attribute is set to its default.
+
+        :param memory_min: The minimum instance memory size for an instance type, in MiB. Required: Yes
+        :param v_cpu_count_min: The minimum number of vCPUs for an instance type. Required: Yes
+        :param accelerator_count_max: The maximum number of accelerators (GPUs, FPGAs, or AWS Inferentia chips) for an instance type. To exclude accelerator-enabled instance types, set Max to 0. Default: - No minimum or maximum limits
+        :param accelerator_count_min: The minimum number of accelerators (GPUs, FPGAs, or AWS Inferentia chips) for an instance type. To exclude accelerator-enabled instance types, set acceleratorCountMax to 0. Default: - No minimum or maximum limits
+        :param accelerator_manufacturers: Indicates whether instance types must have accelerators by specific manufacturers. - For instance types with NVIDIA devices, specify nvidia. - For instance types with AMD devices, specify amd. - For instance types with AWS devices, specify amazon-web-services. - For instance types with Xilinx devices, specify xilinx. Default: - Any manufacturer
+        :param accelerator_names: Lists the accelerators that must be on an instance type. - For instance types with NVIDIA A100 GPUs, specify a100. - For instance types with NVIDIA V100 GPUs, specify v100. - For instance types with NVIDIA K80 GPUs, specify k80. - For instance types with NVIDIA T4 GPUs, specify t4. - For instance types with NVIDIA M60 GPUs, specify m60. - For instance types with AMD Radeon Pro V520 GPUs, specify radeon-pro-v520. - For instance types with Xilinx VU9P FPGAs, specify vu9p. Default: - Any accelerator
+        :param accelerator_total_memory_max: The maximum total memory size for the accelerators on an instance type, in MiB. Default: - No minimum or maximum limits
+        :param accelerator_total_memory_min: The minimum total memory size for the accelerators on an instance type, in MiB. Default: - No minimum or maximum limits
+        :param accelerator_types: Lists the accelerator types that must be on an instance type. - For instance types with GPU accelerators, specify gpu. - For instance types with FPGA accelerators, specify fpga. - For instance types with inference accelerators, specify inference. Default: - Any accelerator type
+        :param allowed_instance_types: The instance types to apply your specified attributes against. All other instance types are ignored, even if they match your specified attributes. You can use strings with one or more wild cards, represented by an asterisk (*), to allow an instance type, size, or generation. The following are examples: m5.8xlarge, c5*.*, m5a.*, r*, *3*. For example, if you specify c5*, Amazon EC2 Auto Scaling will allow the entire C5 instance family, which includes all C5a and C5n instance types. If you specify m5a.*, Amazon EC2 Auto Scaling will allow all the M5a instance types, but not the M5n instance types. Note: If you specify AllowedInstanceTypes, you can't specify ExcludedInstanceTypes. Default: - All instance types
+        :param bare_metal: Indicates whether bare metal instance types are included, excluded, or required. Default: - excluded
+        :param baseline_ebs_bandwidth_mbps_max: The maximum baseline bandwidth performance for an instance type, in Mbps. For more information, see Amazon EBS–optimized instances in the Amazon EC2 User Guide. Default: - No minimum or maximum limits
+        :param baseline_ebs_bandwidth_mbps_min: The minimum baseline bandwidth performance for an instance type, in Mbps. For more information, see Amazon EBS–optimized instances in the Amazon EC2 User Guide. Default: - No minimum or maximum limits
+        :param burstable_performance: Indicates whether burstable performance instance types are included, excluded, or required. For more information, see Burstable performance instances in the Amazon EC2 User Guide. Default: - excluded
+        :param cpu_manufacturers: Lists which specific CPU manufacturers to include. - For instance types with Intel CPUs, specify intel. - For instance types with AMD CPUs, specify amd. - For instance types with AWS CPUs, specify amazon-web-services. - For instance types with Apple CPUs, specify apple. Note: Don't confuse the CPU hardware manufacturer with the CPU hardware architecture. Instances will be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you specify in your launch template. Default: - Any manufacturer
+        :param excluded_instance_types: The instance types to exclude. You can use strings with one or more wild cards, represented by an asterisk (*), to exclude an instance family, type, size, or generation. The following are examples: m5.8xlarge, c5*.*, m5a.*, r*, *3*. For example, if you specify c5*, you are excluding the entire C5 instance family, which includes all C5a and C5n instance types. If you specify m5a.*, Amazon EC2 Auto Scaling will exclude all the M5a instance types, but not the M5n instance types. Note: If you specify ExcludedInstanceTypes, you can't specify AllowedInstanceTypes. Default: - No excluded instance types
+        :param instance_generations: Indicates whether current or previous generation instance types are included. - For current generation instance types, specify current. The current generation includes EC2 instance types currently recommended for use. This typically includes the latest two to three generations in each instance family. For more information, see Instance types in the Amazon EC2 User Guide. - For previous generation instance types, specify previous. Default: - Any current or previous generation
+        :param local_storage: Indicates whether instance types with instance store volumes are included, excluded, or required. For more information, see Amazon EC2 instance store in the Amazon EC2 User Guide. Default: - included
+        :param local_storage_types: Indicates the type of local storage that is required. - For instance types with hard disk drive (HDD) storage, specify hdd. - For instance types with solid state drive (SSD) storage, specify ssd. Default: - Any local storage type
+        :param max_spot_price_as_percentage_of_optimal_on_demand_price: [Price protection] The price protection threshold for Spot Instances, as a percentage of an identified On-Demand price. The identified On-Demand price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified price is from either the lowest priced current generation instance types or, failing that, the lowest priced previous generation instance types that match your attributes. When Amazon EC2 Auto Scaling selects instance types with your attributes, we will exclude instance types whose price exceeds your specified threshold. The parameter accepts an integer, which Amazon EC2 Auto Scaling interprets as a percentage. If you set DesiredCapacityType to vcpu or memory-mib, the price protection threshold is based on the per-vCPU or per-memory price instead of the per instance price. Note: Only one of SpotMaxPricePercentageOverLowestPrice or MaxSpotPriceAsPercentageOfOptimalOnDemandPrice can be specified. If you don't specify either, Amazon EC2 Auto Scaling will automatically apply optimal price protection to consistently select from a wide range of instance types. To indicate no price protection threshold for Spot Instances, meaning you want to consider all instance types that match your attributes, include one of these parameters and specify a high value, such as 999999. Default: - Automatic optimal price protection
+        :param memory_max: The maximum instance memory size for an instance type, in MiB. Default: - No maximum limit
+        :param memory_per_v_cpu_max: The maximum amount of memory per vCPU for an instance type, in GiB. Default: - No minimum or maximum limits
+        :param memory_per_v_cpu_min: The minimum amount of memory per vCPU for an instance type, in GiB. Default: - No minimum or maximum limits
+        :param network_bandwidth_gbps_max: The maximum amount of network bandwidth, in gigabits per second (Gbps). Default: - No minimum or maximum limits
+        :param network_bandwidth_gbps_min: The minimum amount of network bandwidth, in gigabits per second (Gbps). Default: - No minimum or maximum limits
+        :param network_interface_count_max: The maximum number of network interfaces for an instance type. Default: - No minimum or maximum limits
+        :param network_interface_count_min: The minimum number of network interfaces for an instance type. Default: - No minimum or maximum limits
+        :param on_demand_max_price_percentage_over_lowest_price: [Price protection] The price protection threshold for On-Demand Instances, as a percentage higher than an identified On-Demand price. The identified On-Demand price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified price is from either the lowest priced current generation instance types or, failing that, the lowest priced previous generation instance types that match your attributes. When Amazon EC2 Auto Scaling selects instance types with your attributes, we will exclude instance types whose price exceeds your specified threshold. The parameter accepts an integer, which Amazon EC2 Auto Scaling interprets as a percentage. To turn off price protection, specify a high value, such as 999999. If you set DesiredCapacityType to vcpu or memory-mib, the price protection threshold is applied based on the per-vCPU or per-memory price instead of the per instance price. Default: - 20
+        :param require_hibernate_support: Indicates whether instance types must provide On-Demand Instance hibernation support. Default: - false
+        :param spot_max_price_percentage_over_lowest_price: [Price protection] The price protection threshold for Spot Instances, as a percentage higher than an identified Spot price. The identified Spot price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified price is from either the lowest priced current generation instance types or, failing that, the lowest priced previous generation instance types that match your attributes. When Amazon EC2 Auto Scaling selects instance types with your attributes, we will exclude instance types whose price exceeds your specified threshold. The parameter accepts an integer, which Amazon EC2 Auto Scaling interprets as a percentage. If you set DesiredCapacityType to vcpu or memory-mib, the price protection threshold is based on the per-vCPU or per-memory price instead of the per instance price. Note: Only one of SpotMaxPricePercentageOverLowestPrice or MaxSpotPriceAsPercentageOfOptimalOnDemandPrice can be specified. If you don't specify either, Amazon EC2 Auto Scaling will automatically apply optimal price protection to consistently select from a wide range of instance types. To indicate no price protection threshold for Spot Instances, meaning you want to consider all instance types that match your attributes, include one of these parameters and specify a high value, such as 999999. Default: - Automatic optimal price protection
+        :param total_local_storage_gb_max: The maximum total local storage size for an instance type, in GB. Default: - No minimum or maximum limits
+        :param total_local_storage_gb_min: The minimum total local storage size for an instance type, in GB. Default: - No minimum or maximum limits
+        :param v_cpu_count_max: The maximum number of vCPUs for an instance type. Default: - No maximum limit
+
+        :exampleMetadata: infused
+
+        Example::
+
+            # vpc: ec2.Vpc
+            # infrastructure_role: iam.Role
+            # instance_profile: iam.InstanceProfile
+            
+            
+            cluster = ecs.Cluster(self, "Cluster", vpc=vpc)
+            
+            # Create a Managed Instances Capacity Provider
+            mi_capacity_provider = ecs.ManagedInstancesCapacityProvider(self, "MICapacityProvider",
+                infrastructure_role=infrastructure_role,
+                ec2_instance_profile=instance_profile,
+                subnets=vpc.private_subnets,
+                security_groups=[ec2.SecurityGroup(self, "MISecurityGroup", vpc=vpc)],
+                instance_requirements=ec2.InstanceRequirementsConfig(
+                    v_cpu_count_min=1,
+                    memory_min=Size.gibibytes(2),
+                    cpu_manufacturers=[ec2.CpuManufacturer.INTEL],
+                    accelerator_manufacturers=[ec2.AcceleratorManufacturer.NVIDIA]
+                ),
+                propagate_tags=ecs.PropagateManagedInstancesTags.CAPACITY_PROVIDER
+            )
+            
+            # Add the capacity provider to the cluster
+            cluster.add_managed_instances_capacity_provider(mi_capacity_provider)
+            
+            task_definition = ecs.Ec2TaskDefinition(self, "TaskDef")
+            
+            task_definition.add_container("web",
+                image=ecs.ContainerImage.from_registry("amazon/amazon-ecs-sample"),
+                memory_reservation_mi_b=256
+            )
+            
+            ecs.Ec2Service(self, "EC2Service",
+                cluster=cluster,
+                task_definition=task_definition,
+                min_healthy_percent=100,
+                capacity_provider_strategies=[ecs.CapacityProviderStrategy(
+                    capacity_provider=mi_capacity_provider.capacity_provider_name,
+                    weight=1
+                )
+                ]
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__ec2256eb42c017c1221986108df1dba524eae16d4aaf51d7503ce5b1f919f3cd)
+            check_type(argname="argument memory_min", value=memory_min, expected_type=type_hints["memory_min"])
+            check_type(argname="argument v_cpu_count_min", value=v_cpu_count_min, expected_type=type_hints["v_cpu_count_min"])
+            check_type(argname="argument accelerator_count_max", value=accelerator_count_max, expected_type=type_hints["accelerator_count_max"])
+            check_type(argname="argument accelerator_count_min", value=accelerator_count_min, expected_type=type_hints["accelerator_count_min"])
+            check_type(argname="argument accelerator_manufacturers", value=accelerator_manufacturers, expected_type=type_hints["accelerator_manufacturers"])
+            check_type(argname="argument accelerator_names", value=accelerator_names, expected_type=type_hints["accelerator_names"])
+            check_type(argname="argument accelerator_total_memory_max", value=accelerator_total_memory_max, expected_type=type_hints["accelerator_total_memory_max"])
+            check_type(argname="argument accelerator_total_memory_min", value=accelerator_total_memory_min, expected_type=type_hints["accelerator_total_memory_min"])
+            check_type(argname="argument accelerator_types", value=accelerator_types, expected_type=type_hints["accelerator_types"])
+            check_type(argname="argument allowed_instance_types", value=allowed_instance_types, expected_type=type_hints["allowed_instance_types"])
+            check_type(argname="argument bare_metal", value=bare_metal, expected_type=type_hints["bare_metal"])
+            check_type(argname="argument baseline_ebs_bandwidth_mbps_max", value=baseline_ebs_bandwidth_mbps_max, expected_type=type_hints["baseline_ebs_bandwidth_mbps_max"])
+            check_type(argname="argument baseline_ebs_bandwidth_mbps_min", value=baseline_ebs_bandwidth_mbps_min, expected_type=type_hints["baseline_ebs_bandwidth_mbps_min"])
+            check_type(argname="argument burstable_performance", value=burstable_performance, expected_type=type_hints["burstable_performance"])
+            check_type(argname="argument cpu_manufacturers", value=cpu_manufacturers, expected_type=type_hints["cpu_manufacturers"])
+            check_type(argname="argument excluded_instance_types", value=excluded_instance_types, expected_type=type_hints["excluded_instance_types"])
+            check_type(argname="argument instance_generations", value=instance_generations, expected_type=type_hints["instance_generations"])
+            check_type(argname="argument local_storage", value=local_storage, expected_type=type_hints["local_storage"])
+            check_type(argname="argument local_storage_types", value=local_storage_types, expected_type=type_hints["local_storage_types"])
+            check_type(argname="argument max_spot_price_as_percentage_of_optimal_on_demand_price", value=max_spot_price_as_percentage_of_optimal_on_demand_price, expected_type=type_hints["max_spot_price_as_percentage_of_optimal_on_demand_price"])
+            check_type(argname="argument memory_max", value=memory_max, expected_type=type_hints["memory_max"])
+            check_type(argname="argument memory_per_v_cpu_max", value=memory_per_v_cpu_max, expected_type=type_hints["memory_per_v_cpu_max"])
+            check_type(argname="argument memory_per_v_cpu_min", value=memory_per_v_cpu_min, expected_type=type_hints["memory_per_v_cpu_min"])
+            check_type(argname="argument network_bandwidth_gbps_max", value=network_bandwidth_gbps_max, expected_type=type_hints["network_bandwidth_gbps_max"])
+            check_type(argname="argument network_bandwidth_gbps_min", value=network_bandwidth_gbps_min, expected_type=type_hints["network_bandwidth_gbps_min"])
+            check_type(argname="argument network_interface_count_max", value=network_interface_count_max, expected_type=type_hints["network_interface_count_max"])
+            check_type(argname="argument network_interface_count_min", value=network_interface_count_min, expected_type=type_hints["network_interface_count_min"])
+            check_type(argname="argument on_demand_max_price_percentage_over_lowest_price", value=on_demand_max_price_percentage_over_lowest_price, expected_type=type_hints["on_demand_max_price_percentage_over_lowest_price"])
+            check_type(argname="argument require_hibernate_support", value=require_hibernate_support, expected_type=type_hints["require_hibernate_support"])
+            check_type(argname="argument spot_max_price_percentage_over_lowest_price", value=spot_max_price_percentage_over_lowest_price, expected_type=type_hints["spot_max_price_percentage_over_lowest_price"])
+            check_type(argname="argument total_local_storage_gb_max", value=total_local_storage_gb_max, expected_type=type_hints["total_local_storage_gb_max"])
+            check_type(argname="argument total_local_storage_gb_min", value=total_local_storage_gb_min, expected_type=type_hints["total_local_storage_gb_min"])
+            check_type(argname="argument v_cpu_count_max", value=v_cpu_count_max, expected_type=type_hints["v_cpu_count_max"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "memory_min": memory_min,
+            "v_cpu_count_min": v_cpu_count_min,
+        }
+        if accelerator_count_max is not None:
+            self._values["accelerator_count_max"] = accelerator_count_max
+        if accelerator_count_min is not None:
+            self._values["accelerator_count_min"] = accelerator_count_min
+        if accelerator_manufacturers is not None:
+            self._values["accelerator_manufacturers"] = accelerator_manufacturers
+        if accelerator_names is not None:
+            self._values["accelerator_names"] = accelerator_names
+        if accelerator_total_memory_max is not None:
+            self._values["accelerator_total_memory_max"] = accelerator_total_memory_max
+        if accelerator_total_memory_min is not None:
+            self._values["accelerator_total_memory_min"] = accelerator_total_memory_min
+        if accelerator_types is not None:
+            self._values["accelerator_types"] = accelerator_types
+        if allowed_instance_types is not None:
+            self._values["allowed_instance_types"] = allowed_instance_types
+        if bare_metal is not None:
+            self._values["bare_metal"] = bare_metal
+        if baseline_ebs_bandwidth_mbps_max is not None:
+            self._values["baseline_ebs_bandwidth_mbps_max"] = baseline_ebs_bandwidth_mbps_max
+        if baseline_ebs_bandwidth_mbps_min is not None:
+            self._values["baseline_ebs_bandwidth_mbps_min"] = baseline_ebs_bandwidth_mbps_min
+        if burstable_performance is not None:
+            self._values["burstable_performance"] = burstable_performance
+        if cpu_manufacturers is not None:
+            self._values["cpu_manufacturers"] = cpu_manufacturers
+        if excluded_instance_types is not None:
+            self._values["excluded_instance_types"] = excluded_instance_types
+        if instance_generations is not None:
+            self._values["instance_generations"] = instance_generations
+        if local_storage is not None:
+            self._values["local_storage"] = local_storage
+        if local_storage_types is not None:
+            self._values["local_storage_types"] = local_storage_types
+        if max_spot_price_as_percentage_of_optimal_on_demand_price is not None:
+            self._values["max_spot_price_as_percentage_of_optimal_on_demand_price"] = max_spot_price_as_percentage_of_optimal_on_demand_price
+        if memory_max is not None:
+            self._values["memory_max"] = memory_max
+        if memory_per_v_cpu_max is not None:
+            self._values["memory_per_v_cpu_max"] = memory_per_v_cpu_max
+        if memory_per_v_cpu_min is not None:
+            self._values["memory_per_v_cpu_min"] = memory_per_v_cpu_min
+        if network_bandwidth_gbps_max is not None:
+            self._values["network_bandwidth_gbps_max"] = network_bandwidth_gbps_max
+        if network_bandwidth_gbps_min is not None:
+            self._values["network_bandwidth_gbps_min"] = network_bandwidth_gbps_min
+        if network_interface_count_max is not None:
+            self._values["network_interface_count_max"] = network_interface_count_max
+        if network_interface_count_min is not None:
+            self._values["network_interface_count_min"] = network_interface_count_min
+        if on_demand_max_price_percentage_over_lowest_price is not None:
+            self._values["on_demand_max_price_percentage_over_lowest_price"] = on_demand_max_price_percentage_over_lowest_price
+        if require_hibernate_support is not None:
+            self._values["require_hibernate_support"] = require_hibernate_support
+        if spot_max_price_percentage_over_lowest_price is not None:
+            self._values["spot_max_price_percentage_over_lowest_price"] = spot_max_price_percentage_over_lowest_price
+        if total_local_storage_gb_max is not None:
+            self._values["total_local_storage_gb_max"] = total_local_storage_gb_max
+        if total_local_storage_gb_min is not None:
+            self._values["total_local_storage_gb_min"] = total_local_storage_gb_min
+        if v_cpu_count_max is not None:
+            self._values["v_cpu_count_max"] = v_cpu_count_max
+
+    @builtins.property
+    def memory_min(self) -> _Size_7b441c34:
+        '''The minimum instance memory size for an instance type, in MiB.
+
+        Required: Yes
+        '''
+        result = self._values.get("memory_min")
+        assert result is not None, "Required property 'memory_min' is missing"
+        return typing.cast(_Size_7b441c34, result)
+
+    @builtins.property
+    def v_cpu_count_min(self) -> jsii.Number:
+        '''The minimum number of vCPUs for an instance type.
+
+        Required: Yes
+        '''
+        result = self._values.get("v_cpu_count_min")
+        assert result is not None, "Required property 'v_cpu_count_min' is missing"
+        return typing.cast(jsii.Number, result)
+
+    @builtins.property
+    def accelerator_count_max(self) -> typing.Optional[jsii.Number]:
+        '''The maximum number of accelerators (GPUs, FPGAs, or AWS Inferentia chips) for an instance type.
+
+        To exclude accelerator-enabled instance types, set Max to 0.
+
+        :default: - No minimum or maximum limits
+        '''
+        result = self._values.get("accelerator_count_max")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    @builtins.property
+    def accelerator_count_min(self) -> typing.Optional[jsii.Number]:
+        '''The minimum number of accelerators (GPUs, FPGAs, or AWS Inferentia chips) for an instance type.
+
+        To exclude accelerator-enabled instance types, set acceleratorCountMax to 0.
+
+        :default: - No minimum or maximum limits
+        '''
+        result = self._values.get("accelerator_count_min")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    @builtins.property
+    def accelerator_manufacturers(
+        self,
+    ) -> typing.Optional[typing.List[AcceleratorManufacturer]]:
+        '''Indicates whether instance types must have accelerators by specific manufacturers.
+
+        - For instance types with NVIDIA devices, specify nvidia.
+        - For instance types with AMD devices, specify amd.
+        - For instance types with AWS devices, specify amazon-web-services.
+        - For instance types with Xilinx devices, specify xilinx.
+
+        :default: - Any manufacturer
+        '''
+        result = self._values.get("accelerator_manufacturers")
+        return typing.cast(typing.Optional[typing.List[AcceleratorManufacturer]], result)
+
+    @builtins.property
+    def accelerator_names(self) -> typing.Optional[typing.List[AcceleratorName]]:
+        '''Lists the accelerators that must be on an instance type.
+
+        - For instance types with NVIDIA A100 GPUs, specify a100.
+        - For instance types with NVIDIA V100 GPUs, specify v100.
+        - For instance types with NVIDIA K80 GPUs, specify k80.
+        - For instance types with NVIDIA T4 GPUs, specify t4.
+        - For instance types with NVIDIA M60 GPUs, specify m60.
+        - For instance types with AMD Radeon Pro V520 GPUs, specify radeon-pro-v520.
+        - For instance types with Xilinx VU9P FPGAs, specify vu9p.
+
+        :default: - Any accelerator
+        '''
+        result = self._values.get("accelerator_names")
+        return typing.cast(typing.Optional[typing.List[AcceleratorName]], result)
+
+    @builtins.property
+    def accelerator_total_memory_max(self) -> typing.Optional[_Size_7b441c34]:
+        '''The maximum total memory size for the accelerators on an instance type, in MiB.
+
+        :default: - No minimum or maximum limits
+        '''
+        result = self._values.get("accelerator_total_memory_max")
+        return typing.cast(typing.Optional[_Size_7b441c34], result)
+
+    @builtins.property
+    def accelerator_total_memory_min(self) -> typing.Optional[_Size_7b441c34]:
+        '''The minimum total memory size for the accelerators on an instance type, in MiB.
+
+        :default: - No minimum or maximum limits
+        '''
+        result = self._values.get("accelerator_total_memory_min")
+        return typing.cast(typing.Optional[_Size_7b441c34], result)
+
+    @builtins.property
+    def accelerator_types(self) -> typing.Optional[typing.List[AcceleratorType]]:
+        '''Lists the accelerator types that must be on an instance type.
+
+        - For instance types with GPU accelerators, specify gpu.
+        - For instance types with FPGA accelerators, specify fpga.
+        - For instance types with inference accelerators, specify inference.
+
+        :default: - Any accelerator type
+        '''
+        result = self._values.get("accelerator_types")
+        return typing.cast(typing.Optional[typing.List[AcceleratorType]], result)
+
+    @builtins.property
+    def allowed_instance_types(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''The instance types to apply your specified attributes against.
+
+        All other instance types are ignored, even if they match your specified attributes.
+
+        You can use strings with one or more wild cards, represented by an asterisk (*), to allow an instance type, size, or generation. The following are examples: m5.8xlarge, c5*.*, m5a.*, r*, *3*.
+
+        For example, if you specify c5*, Amazon EC2 Auto Scaling will allow the entire C5 instance family, which includes all C5a and C5n instance types. If you specify m5a.*, Amazon EC2 Auto Scaling will allow all the M5a instance types, but not the M5n instance types.
+
+        Note: If you specify AllowedInstanceTypes, you can't specify ExcludedInstanceTypes.
+
+        :default: - All instance types
+        '''
+        result = self._values.get("allowed_instance_types")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+    @builtins.property
+    def bare_metal(self) -> typing.Optional[BareMetal]:
+        '''Indicates whether bare metal instance types are included, excluded, or required.
+
+        :default: - excluded
+        '''
+        result = self._values.get("bare_metal")
+        return typing.cast(typing.Optional[BareMetal], result)
+
+    @builtins.property
+    def baseline_ebs_bandwidth_mbps_max(self) -> typing.Optional[jsii.Number]:
+        '''The maximum baseline bandwidth performance for an instance type, in Mbps.
+
+        For more information, see Amazon EBS–optimized instances in the Amazon EC2 User Guide.
+
+        :default: - No minimum or maximum limits
+        '''
+        result = self._values.get("baseline_ebs_bandwidth_mbps_max")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    @builtins.property
+    def baseline_ebs_bandwidth_mbps_min(self) -> typing.Optional[jsii.Number]:
+        '''The minimum baseline bandwidth performance for an instance type, in Mbps.
+
+        For more information, see Amazon EBS–optimized instances in the Amazon EC2 User Guide.
+
+        :default: - No minimum or maximum limits
+        '''
+        result = self._values.get("baseline_ebs_bandwidth_mbps_min")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    @builtins.property
+    def burstable_performance(self) -> typing.Optional[BurstablePerformance]:
+        '''Indicates whether burstable performance instance types are included, excluded, or required.
+
+        For more information, see Burstable performance instances in the Amazon EC2 User Guide.
+
+        :default: - excluded
+        '''
+        result = self._values.get("burstable_performance")
+        return typing.cast(typing.Optional[BurstablePerformance], result)
+
+    @builtins.property
+    def cpu_manufacturers(self) -> typing.Optional[typing.List[CpuManufacturer]]:
+        '''Lists which specific CPU manufacturers to include.
+
+        - For instance types with Intel CPUs, specify intel.
+        - For instance types with AMD CPUs, specify amd.
+        - For instance types with AWS CPUs, specify amazon-web-services.
+        - For instance types with Apple CPUs, specify apple.
+
+        Note: Don't confuse the CPU hardware manufacturer with the CPU hardware architecture. Instances will be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you specify in your launch template.
+
+        :default: - Any manufacturer
+        '''
+        result = self._values.get("cpu_manufacturers")
+        return typing.cast(typing.Optional[typing.List[CpuManufacturer]], result)
+
+    @builtins.property
+    def excluded_instance_types(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''The instance types to exclude.
+
+        You can use strings with one or more wild cards, represented by an asterisk (*), to exclude an instance family, type, size, or generation. The following are examples: m5.8xlarge, c5*.*, m5a.*, r*, *3*.
+
+        For example, if you specify c5*, you are excluding the entire C5 instance family, which includes all C5a and C5n instance types. If you specify m5a.*, Amazon EC2 Auto Scaling will exclude all the M5a instance types, but not the M5n instance types.
+
+        Note: If you specify ExcludedInstanceTypes, you can't specify AllowedInstanceTypes.
+
+        :default: - No excluded instance types
+        '''
+        result = self._values.get("excluded_instance_types")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+    @builtins.property
+    def instance_generations(self) -> typing.Optional[typing.List[InstanceGeneration]]:
+        '''Indicates whether current or previous generation instance types are included.
+
+        - For current generation instance types, specify current. The current generation includes EC2 instance types currently recommended for use. This typically includes the latest two to three generations in each instance family. For more information, see Instance types in the Amazon EC2 User Guide.
+        - For previous generation instance types, specify previous.
+
+        :default: - Any current or previous generation
+        '''
+        result = self._values.get("instance_generations")
+        return typing.cast(typing.Optional[typing.List[InstanceGeneration]], result)
+
+    @builtins.property
+    def local_storage(self) -> typing.Optional["LocalStorage"]:
+        '''Indicates whether instance types with instance store volumes are included, excluded, or required.
+
+        For more information, see Amazon EC2 instance store in the Amazon EC2 User Guide.
+
+        :default: - included
+        '''
+        result = self._values.get("local_storage")
+        return typing.cast(typing.Optional["LocalStorage"], result)
+
+    @builtins.property
+    def local_storage_types(self) -> typing.Optional[typing.List["LocalStorageType"]]:
+        '''Indicates the type of local storage that is required.
+
+        - For instance types with hard disk drive (HDD) storage, specify hdd.
+        - For instance types with solid state drive (SSD) storage, specify ssd.
+
+        :default: - Any local storage type
+        '''
+        result = self._values.get("local_storage_types")
+        return typing.cast(typing.Optional[typing.List["LocalStorageType"]], result)
+
+    @builtins.property
+    def max_spot_price_as_percentage_of_optimal_on_demand_price(
+        self,
+    ) -> typing.Optional[jsii.Number]:
+        '''[Price protection] The price protection threshold for Spot Instances, as a percentage of an identified On-Demand price.
+
+        The identified On-Demand price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified price is from either the lowest priced current generation instance types or, failing that, the lowest priced previous generation instance types that match your attributes. When Amazon EC2 Auto Scaling selects instance types with your attributes, we will exclude instance types whose price exceeds your specified threshold.
+
+        The parameter accepts an integer, which Amazon EC2 Auto Scaling interprets as a percentage.
+
+        If you set DesiredCapacityType to vcpu or memory-mib, the price protection threshold is based on the per-vCPU or per-memory price instead of the per instance price.
+
+        Note: Only one of SpotMaxPricePercentageOverLowestPrice or MaxSpotPriceAsPercentageOfOptimalOnDemandPrice can be specified. If you don't specify either, Amazon EC2 Auto Scaling will automatically apply optimal price protection to consistently select from a wide range of instance types. To indicate no price protection threshold for Spot Instances, meaning you want to consider all instance types that match your attributes, include one of these parameters and specify a high value, such as 999999.
+
+        :default: - Automatic optimal price protection
+        '''
+        result = self._values.get("max_spot_price_as_percentage_of_optimal_on_demand_price")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    @builtins.property
+    def memory_max(self) -> typing.Optional[_Size_7b441c34]:
+        '''The maximum instance memory size for an instance type, in MiB.
+
+        :default: - No maximum limit
+        '''
+        result = self._values.get("memory_max")
+        return typing.cast(typing.Optional[_Size_7b441c34], result)
+
+    @builtins.property
+    def memory_per_v_cpu_max(self) -> typing.Optional[_Size_7b441c34]:
+        '''The maximum amount of memory per vCPU for an instance type, in GiB.
+
+        :default: - No minimum or maximum limits
+        '''
+        result = self._values.get("memory_per_v_cpu_max")
+        return typing.cast(typing.Optional[_Size_7b441c34], result)
+
+    @builtins.property
+    def memory_per_v_cpu_min(self) -> typing.Optional[_Size_7b441c34]:
+        '''The minimum amount of memory per vCPU for an instance type, in GiB.
+
+        :default: - No minimum or maximum limits
+        '''
+        result = self._values.get("memory_per_v_cpu_min")
+        return typing.cast(typing.Optional[_Size_7b441c34], result)
+
+    @builtins.property
+    def network_bandwidth_gbps_max(self) -> typing.Optional[jsii.Number]:
+        '''The maximum amount of network bandwidth, in gigabits per second (Gbps).
+
+        :default: - No minimum or maximum limits
+        '''
+        result = self._values.get("network_bandwidth_gbps_max")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    @builtins.property
+    def network_bandwidth_gbps_min(self) -> typing.Optional[jsii.Number]:
+        '''The minimum amount of network bandwidth, in gigabits per second (Gbps).
+
+        :default: - No minimum or maximum limits
+        '''
+        result = self._values.get("network_bandwidth_gbps_min")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    @builtins.property
+    def network_interface_count_max(self) -> typing.Optional[jsii.Number]:
+        '''The maximum number of network interfaces for an instance type.
+
+        :default: - No minimum or maximum limits
+        '''
+        result = self._values.get("network_interface_count_max")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    @builtins.property
+    def network_interface_count_min(self) -> typing.Optional[jsii.Number]:
+        '''The minimum number of network interfaces for an instance type.
+
+        :default: - No minimum or maximum limits
+        '''
+        result = self._values.get("network_interface_count_min")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    @builtins.property
+    def on_demand_max_price_percentage_over_lowest_price(
+        self,
+    ) -> typing.Optional[jsii.Number]:
+        '''[Price protection] The price protection threshold for On-Demand Instances, as a percentage higher than an identified On-Demand price.
+
+        The identified On-Demand price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified price is from either the lowest priced current generation instance types or, failing that, the lowest priced previous generation instance types that match your attributes. When Amazon EC2 Auto Scaling selects instance types with your attributes, we will exclude instance types whose price exceeds your specified threshold.
+
+        The parameter accepts an integer, which Amazon EC2 Auto Scaling interprets as a percentage.
+
+        To turn off price protection, specify a high value, such as 999999.
+
+        If you set DesiredCapacityType to vcpu or memory-mib, the price protection threshold is applied based on the per-vCPU or per-memory price instead of the per instance price.
+
+        :default: - 20
+        '''
+        result = self._values.get("on_demand_max_price_percentage_over_lowest_price")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    @builtins.property
+    def require_hibernate_support(self) -> typing.Optional[builtins.bool]:
+        '''Indicates whether instance types must provide On-Demand Instance hibernation support.
+
+        :default: - false
+        '''
+        result = self._values.get("require_hibernate_support")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def spot_max_price_percentage_over_lowest_price(
+        self,
+    ) -> typing.Optional[jsii.Number]:
+        '''[Price protection] The price protection threshold for Spot Instances, as a percentage higher than an identified Spot price.
+
+        The identified Spot price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified price is from either the lowest priced current generation instance types or, failing that, the lowest priced previous generation instance types that match your attributes. When Amazon EC2 Auto Scaling selects instance types with your attributes, we will exclude instance types whose price exceeds your specified threshold.
+
+        The parameter accepts an integer, which Amazon EC2 Auto Scaling interprets as a percentage.
+
+        If you set DesiredCapacityType to vcpu or memory-mib, the price protection threshold is based on the per-vCPU or per-memory price instead of the per instance price.
+
+        Note: Only one of SpotMaxPricePercentageOverLowestPrice or MaxSpotPriceAsPercentageOfOptimalOnDemandPrice can be specified. If you don't specify either, Amazon EC2 Auto Scaling will automatically apply optimal price protection to consistently select from a wide range of instance types. To indicate no price protection threshold for Spot Instances, meaning you want to consider all instance types that match your attributes, include one of these parameters and specify a high value, such as 999999.
+
+        :default: - Automatic optimal price protection
+        '''
+        result = self._values.get("spot_max_price_percentage_over_lowest_price")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    @builtins.property
+    def total_local_storage_gb_max(self) -> typing.Optional[jsii.Number]:
+        '''The maximum total local storage size for an instance type, in GB.
+
+        :default: - No minimum or maximum limits
+        '''
+        result = self._values.get("total_local_storage_gb_max")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    @builtins.property
+    def total_local_storage_gb_min(self) -> typing.Optional[jsii.Number]:
+        '''The minimum total local storage size for an instance type, in GB.
+
+        :default: - No minimum or maximum limits
+        '''
+        result = self._values.get("total_local_storage_gb_min")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    @builtins.property
+    def v_cpu_count_max(self) -> typing.Optional[jsii.Number]:
+        '''The maximum number of vCPUs for an instance type.
+
+        :default: - No maximum limit
+        '''
+        result = self._values.get("v_cpu_count_max")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "InstanceRequirementsConfig(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.enum(jsii_type="aws-cdk-lib.aws_ec2.InstanceSize")
 class InstanceSize(enum.Enum):
     '''What size of instance to use.
@@ -38124,6 +39742,16 @@ class InterfaceVpcEndpointAwsService(
     def BEDROCK_AGENT_RUNTIME(cls) -> "InterfaceVpcEndpointAwsService":
         return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "BEDROCK_AGENT_RUNTIME"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="BEDROCK_AGENTCORE")
+    def BEDROCK_AGENTCORE(cls) -> "InterfaceVpcEndpointAwsService":
+        return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "BEDROCK_AGENTCORE"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="BEDROCK_AGENTCORE_GATEWAY")
+    def BEDROCK_AGENTCORE_GATEWAY(cls) -> "InterfaceVpcEndpointAwsService":
+        return typing.cast("InterfaceVpcEndpointAwsService", jsii.sget(cls, "BEDROCK_AGENTCORE_GATEWAY"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="BEDROCK_DATA_AUTOMATION")
     def BEDROCK_DATA_AUTOMATION(cls) -> "InterfaceVpcEndpointAwsService":
@@ -42446,6 +44074,262 @@ class LocalGatewayRouteTableVirtualInterfaceGroupAssociationReference:
         )
 
 
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_ec2.LocalGatewayVirtualInterfaceGroupReference",
+    jsii_struct_bases=[],
+    name_mapping={
+        "local_gateway_virtual_interface_group_arn": "localGatewayVirtualInterfaceGroupArn",
+        "local_gateway_virtual_interface_group_id": "localGatewayVirtualInterfaceGroupId",
+    },
+)
+class LocalGatewayVirtualInterfaceGroupReference:
+    def __init__(
+        self,
+        *,
+        local_gateway_virtual_interface_group_arn: builtins.str,
+        local_gateway_virtual_interface_group_id: builtins.str,
+    ) -> None:
+        '''A reference to a LocalGatewayVirtualInterfaceGroup resource.
+
+        :param local_gateway_virtual_interface_group_arn: The ARN of the LocalGatewayVirtualInterfaceGroup resource.
+        :param local_gateway_virtual_interface_group_id: The LocalGatewayVirtualInterfaceGroupId of the LocalGatewayVirtualInterfaceGroup resource.
+
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_ec2 as ec2
+            
+            local_gateway_virtual_interface_group_reference = ec2.LocalGatewayVirtualInterfaceGroupReference(
+                local_gateway_virtual_interface_group_arn="localGatewayVirtualInterfaceGroupArn",
+                local_gateway_virtual_interface_group_id="localGatewayVirtualInterfaceGroupId"
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c5749867b83865efb222663d0629d4ad2212132a3d659cf6e5b6eefb44fdc1b9)
+            check_type(argname="argument local_gateway_virtual_interface_group_arn", value=local_gateway_virtual_interface_group_arn, expected_type=type_hints["local_gateway_virtual_interface_group_arn"])
+            check_type(argname="argument local_gateway_virtual_interface_group_id", value=local_gateway_virtual_interface_group_id, expected_type=type_hints["local_gateway_virtual_interface_group_id"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "local_gateway_virtual_interface_group_arn": local_gateway_virtual_interface_group_arn,
+            "local_gateway_virtual_interface_group_id": local_gateway_virtual_interface_group_id,
+        }
+
+    @builtins.property
+    def local_gateway_virtual_interface_group_arn(self) -> builtins.str:
+        '''The ARN of the LocalGatewayVirtualInterfaceGroup resource.'''
+        result = self._values.get("local_gateway_virtual_interface_group_arn")
+        assert result is not None, "Required property 'local_gateway_virtual_interface_group_arn' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def local_gateway_virtual_interface_group_id(self) -> builtins.str:
+        '''The LocalGatewayVirtualInterfaceGroupId of the LocalGatewayVirtualInterfaceGroup resource.'''
+        result = self._values.get("local_gateway_virtual_interface_group_id")
+        assert result is not None, "Required property 'local_gateway_virtual_interface_group_id' is missing"
+        return typing.cast(builtins.str, result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "LocalGatewayVirtualInterfaceGroupReference(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_ec2.LocalGatewayVirtualInterfaceReference",
+    jsii_struct_bases=[],
+    name_mapping={
+        "local_gateway_virtual_interface_id": "localGatewayVirtualInterfaceId",
+    },
+)
+class LocalGatewayVirtualInterfaceReference:
+    def __init__(self, *, local_gateway_virtual_interface_id: builtins.str) -> None:
+        '''A reference to a LocalGatewayVirtualInterface resource.
+
+        :param local_gateway_virtual_interface_id: The LocalGatewayVirtualInterfaceId of the LocalGatewayVirtualInterface resource.
+
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_ec2 as ec2
+            
+            local_gateway_virtual_interface_reference = ec2.LocalGatewayVirtualInterfaceReference(
+                local_gateway_virtual_interface_id="localGatewayVirtualInterfaceId"
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__370c12dc1c7162c4f581d58e74af3136efcbc6bf0ba1e90bcab50deb09c4733f)
+            check_type(argname="argument local_gateway_virtual_interface_id", value=local_gateway_virtual_interface_id, expected_type=type_hints["local_gateway_virtual_interface_id"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "local_gateway_virtual_interface_id": local_gateway_virtual_interface_id,
+        }
+
+    @builtins.property
+    def local_gateway_virtual_interface_id(self) -> builtins.str:
+        '''The LocalGatewayVirtualInterfaceId of the LocalGatewayVirtualInterface resource.'''
+        result = self._values.get("local_gateway_virtual_interface_id")
+        assert result is not None, "Required property 'local_gateway_virtual_interface_id' is missing"
+        return typing.cast(builtins.str, result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "LocalGatewayVirtualInterfaceReference(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.enum(jsii_type="aws-cdk-lib.aws_ec2.LocalStorage")
+class LocalStorage(enum.Enum):
+    '''Local storage support requirements for EC2 instances.
+
+    Controls whether selected instance types must, may, or must not
+    include directly attached local storage (instance store).
+
+    :exampleMetadata: infused
+
+    Example::
+
+        # infrastructure_role: iam.Role
+        # instance_profile: iam.InstanceProfile
+        # vpc: ec2.Vpc
+        
+        
+        mi_capacity_provider = ecs.ManagedInstancesCapacityProvider(self, "MICapacityProvider",
+            infrastructure_role=infrastructure_role,
+            ec2_instance_profile=instance_profile,
+            subnets=vpc.private_subnets,
+            instance_requirements=ec2.InstanceRequirementsConfig(
+                # Required: CPU and memory constraints
+                v_cpu_count_min=2,
+                v_cpu_count_max=8,
+                memory_min=Size.gibibytes(4),
+                memory_max=Size.gibibytes(32),
+        
+                # CPU preferences
+                cpu_manufacturers=[ec2.CpuManufacturer.INTEL, ec2.CpuManufacturer.AMD],
+                instance_generations=[ec2.InstanceGeneration.CURRENT],
+        
+                # Instance type filtering
+                allowed_instance_types=["m5.*", "c5.*"],
+        
+                # Performance characteristics
+                burstable_performance=ec2.BurstablePerformance.EXCLUDED,
+                bare_metal=ec2.BareMetal.EXCLUDED,
+        
+                # Accelerator requirements (for ML/AI workloads)
+                accelerator_types=[ec2.AcceleratorType.GPU],
+                accelerator_manufacturers=[ec2.AcceleratorManufacturer.NVIDIA],
+                accelerator_names=[ec2.AcceleratorName.T4, ec2.AcceleratorName.V100],
+                accelerator_count_min=1,
+        
+                # Storage requirements
+                local_storage=ec2.LocalStorage.REQUIRED,
+                local_storage_types=[ec2.LocalStorageType.SSD],
+                total_local_storage_gBMin=100,
+        
+                # Network requirements
+                network_interface_count_min=2,
+                network_bandwidth_gbps_min=10,
+        
+                # Cost optimization
+                on_demand_max_price_percentage_over_lowest_price=10
+            )
+        )
+    '''
+
+    INCLUDED = "INCLUDED"
+    '''Instance types with local storage are allowed, but types without local storage may also be selected.'''
+    REQUIRED = "REQUIRED"
+    '''Only instance types with local storage are allowed.
+
+    Types without local storage will be excluded.
+    '''
+    EXCLUDED = "EXCLUDED"
+    '''Instance types with local storage are disallowed.
+
+    Only types without local storage may be selected.
+    '''
+
+
+@jsii.enum(jsii_type="aws-cdk-lib.aws_ec2.LocalStorageType")
+class LocalStorageType(enum.Enum):
+    '''Types of local storage available for EC2 instances.
+
+    Specifies the physical medium used for local (instance store) storage.
+
+    :exampleMetadata: infused
+
+    Example::
+
+        # infrastructure_role: iam.Role
+        # instance_profile: iam.InstanceProfile
+        # vpc: ec2.Vpc
+        
+        
+        mi_capacity_provider = ecs.ManagedInstancesCapacityProvider(self, "MICapacityProvider",
+            infrastructure_role=infrastructure_role,
+            ec2_instance_profile=instance_profile,
+            subnets=vpc.private_subnets,
+            instance_requirements=ec2.InstanceRequirementsConfig(
+                # Required: CPU and memory constraints
+                v_cpu_count_min=2,
+                v_cpu_count_max=8,
+                memory_min=Size.gibibytes(4),
+                memory_max=Size.gibibytes(32),
+        
+                # CPU preferences
+                cpu_manufacturers=[ec2.CpuManufacturer.INTEL, ec2.CpuManufacturer.AMD],
+                instance_generations=[ec2.InstanceGeneration.CURRENT],
+        
+                # Instance type filtering
+                allowed_instance_types=["m5.*", "c5.*"],
+        
+                # Performance characteristics
+                burstable_performance=ec2.BurstablePerformance.EXCLUDED,
+                bare_metal=ec2.BareMetal.EXCLUDED,
+        
+                # Accelerator requirements (for ML/AI workloads)
+                accelerator_types=[ec2.AcceleratorType.GPU],
+                accelerator_manufacturers=[ec2.AcceleratorManufacturer.NVIDIA],
+                accelerator_names=[ec2.AcceleratorName.T4, ec2.AcceleratorName.V100],
+                accelerator_count_min=1,
+        
+                # Storage requirements
+                local_storage=ec2.LocalStorage.REQUIRED,
+                local_storage_types=[ec2.LocalStorageType.SSD],
+                total_local_storage_gBMin=100,
+        
+                # Network requirements
+                network_interface_count_min=2,
+                network_bandwidth_gbps_min=10,
+        
+                # Cost optimization
+                on_demand_max_price_percentage_over_lowest_price=10
+            )
+        )
+    '''
+
+    HDD = "HDD"
+    '''Hard disk drive storage.'''
+    SSD = "SSD"
+    '''Solid state drive storage.'''
+
+
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_ec2.LocationPackageOptions",
     jsii_struct_bases=[],
@@ -52982,6 +54866,7 @@ class Vpc(
         client_login_banner: typing.Optional[builtins.str] = None,
         client_route_enforcement_options: typing.Optional[typing.Union[ClientRouteEnforcementOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         description: typing.Optional[builtins.str] = None,
+        disconnect_on_session_timeout: typing.Optional[builtins.bool] = None,
         dns_servers: typing.Optional[typing.Sequence[builtins.str]] = None,
         logging: typing.Optional[builtins.bool] = None,
         log_group: typing.Optional[_ILogGroup_3c4fa718] = None,
@@ -53006,6 +54891,7 @@ class Vpc(
         :param client_login_banner: Customizable text that will be displayed in a banner on AWS provided clients when a VPN session is established. UTF-8 encoded characters only. Maximum of 1400 characters. Default: - no banner is presented to the client
         :param client_route_enforcement_options: Options for Client Route Enforcement. Client Route Enforcement is a feature of Client VPN that helps enforce administrator defined routes on devices connected through the VPN. This feature helps improve your security posture by ensuring that network traffic originating from a connected client is not inadvertently sent outside the VPN tunnel. Default: undefined - AWS Client VPN default setting is disable client route enforcement
         :param description: A brief description of the Client VPN endpoint. Default: - no description
+        :param disconnect_on_session_timeout: Indicates whether the client VPN session is disconnected after the maximum ``sessionTimeout`` is reached. If ``true``, users are prompted to reconnect client VPN. If ``false``, client VPN attempts to reconnect automatically. Default: undefined - AWS Client VPN default is true
         :param dns_servers: Information about the DNS servers to be used for DNS resolution. A Client VPN endpoint can have up to two DNS servers. Default: - use the DNS address configured on the device
         :param logging: Whether to enable connections logging. Default: true
         :param log_group: A CloudWatch Logs log group for connection logging. Default: - a new group is created
@@ -53031,6 +54917,7 @@ class Vpc(
             client_login_banner=client_login_banner,
             client_route_enforcement_options=client_route_enforcement_options,
             description=description,
+            disconnect_on_session_timeout=disconnect_on_session_timeout,
             dns_servers=dns_servers,
             logging=logging,
             log_group=log_group,
@@ -61947,10 +63834,10 @@ class CfnEC2Fleet(
 
             :param delete_on_termination: Indicates whether the EBS volume is deleted on instance termination. For more information, see `Preserving Amazon EBS volumes on instance termination <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/terminating-instances.html#preserving-volumes-on-termination>`_ in the *Amazon EC2 User Guide* .
             :param encrypted: Indicates whether the encryption state of an EBS volume is changed while being restored from a backing snapshot. The effect of setting the encryption state to ``true`` depends on the volume origin (new or from a snapshot), starting encryption state, ownership, and whether encryption by default is enabled. For more information, see `Amazon EBS encryption <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption.html#encryption-parameters>`_ in the *Amazon EBS User Guide* . In no case can you remove encryption from an encrypted volume. Encrypted volumes can only be attached to instances that support Amazon EBS encryption. For more information, see `Supported instance types <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption-requirements.html#ebs-encryption_supported_instances>`_ . - If you are creating a block device mapping for a *new (empty) volume* , you can include this parameter, and specify either ``true`` for an encrypted volume, or ``false`` for an unencrypted volume. If you omit this parameter, it defaults to ``false`` (unencrypted). - If you are creating a block device mapping from an *existing encrypted or unencrypted snapshot* , you must omit this parameter. If you include this parameter, the request will fail, regardless of the value that you specify. - If you are creating a block device mapping from an *existing unencrypted volume* , you can include this parameter, but you must specify ``false`` . If you specify ``true`` , the request will fail. In this case, we recommend that you omit the parameter. - If you are creating a block device mapping from an *existing encrypted volume* , you can include this parameter, and specify either ``true`` or ``false`` . However, if you specify ``false`` , the parameter is ignored and the block device mapping is always encrypted. In this case, we recommend that you omit the parameter.
-            :param iops: The number of I/O operations per second (IOPS). For ``gp3`` , ``io1`` , and ``io2`` volumes, this represents the number of IOPS that are provisioned for the volume. For ``gp2`` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. The following are the supported values for each volume type: - ``gp3`` : 3,000 - 16,000 IOPS - ``io1`` : 100 - 64,000 IOPS - ``io2`` : 100 - 256,000 IOPS For ``io2`` volumes, you can achieve up to 256,000 IOPS on `instances built on the Nitro System <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html#ec2-nitro-instances>`_ . On other instances, you can achieve performance up to 32,000 IOPS. This parameter is required for ``io1`` and ``io2`` volumes. The default for ``gp3`` volumes is 3,000 IOPS.
+            :param iops: The number of I/O operations per second (IOPS). For ``gp3`` , ``io1`` , and ``io2`` volumes, this represents the number of IOPS that are provisioned for the volume. For ``gp2`` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. The following are the supported values for each volume type: - ``gp3`` : 3,000 - 80,000 IOPS - ``io1`` : 100 - 64,000 IOPS - ``io2`` : 100 - 256,000 IOPS For ``io2`` volumes, you can achieve up to 256,000 IOPS on `instances built on the Nitro System <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html#ec2-nitro-instances>`_ . On other instances, you can achieve performance up to 32,000 IOPS. This parameter is required for ``io1`` and ``io2`` volumes. The default for ``gp3`` volumes is 3,000 IOPS.
             :param kms_key_id: Identifier (key ID, key alias, key ARN, or alias ARN) of the customer managed KMS key to use for EBS encryption. This parameter is only supported on ``BlockDeviceMapping`` objects called by `RunInstances <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html>`_ , `RequestSpotFleet <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RequestSpotFleet.html>`_ , and `RequestSpotInstances <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RequestSpotInstances.html>`_ .
             :param snapshot_id: The ID of the snapshot.
-            :param volume_size: The size of the volume, in GiBs. You must specify either a snapshot ID or a volume size. If you specify a snapshot, the default is the snapshot size. You can specify a volume size that is equal to or larger than the snapshot size. The following are the supported sizes for each volume type: - ``gp2`` and ``gp3`` : 1 - 16,384 GiB - ``io1`` : 4 - 16,384 GiB - ``io2`` : 4 - 65,536 GiB - ``st1`` and ``sc1`` : 125 - 16,384 GiB - ``standard`` : 1 - 1024 GiB
+            :param volume_size: The size of the volume, in GiBs. You must specify either a snapshot ID or a volume size. If you specify a snapshot, the default is the snapshot size. You can specify a volume size that is equal to or larger than the snapshot size. The following are the supported sizes for each volume type: - ``gp2`` : 1 - 16,384 GiB - ``gp3`` : 1 - 65,536 GiB - ``io1`` : 4 - 16,384 GiB - ``io2`` : 4 - 65,536 GiB - ``st1`` and ``sc1`` : 125 - 16,384 GiB - ``standard`` : 1 - 1024 GiB
             :param volume_type: The volume type. For more information, see `Amazon EBS volume types <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-volume-types.html>`_ in the *Amazon EBS User Guide* .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-ec2fleet-ebsblockdevice.html
@@ -62040,7 +63927,7 @@ class CfnEC2Fleet(
 
             The following are the supported values for each volume type:
 
-            - ``gp3`` : 3,000 - 16,000 IOPS
+            - ``gp3`` : 3,000 - 80,000 IOPS
             - ``io1`` : 100 - 64,000 IOPS
             - ``io2`` : 100 - 256,000 IOPS
 
@@ -62081,7 +63968,8 @@ class CfnEC2Fleet(
 
             The following are the supported sizes for each volume type:
 
-            - ``gp2`` and ``gp3`` : 1 - 16,384 GiB
+            - ``gp2`` : 1 - 16,384 GiB
+            - ``gp3`` : 1 - 65,536 GiB
             - ``io1`` : 4 - 16,384 GiB
             - ``io2`` : 4 - 65,536 GiB
             - ``st1`` and ``sc1`` : 125 - 16,384 GiB
@@ -73746,12 +75634,12 @@ class CfnLaunchTemplate(
 
             :param delete_on_termination: Indicates whether the EBS volume is deleted on instance termination.
             :param encrypted: Indicates whether the EBS volume is encrypted. Encrypted volumes can only be attached to instances that support Amazon EBS encryption. If you are creating a volume from a snapshot, you can't specify an encryption value.
-            :param iops: The number of I/O operations per second (IOPS). For ``gp3`` , ``io1`` , and ``io2`` volumes, this represents the number of IOPS that are provisioned for the volume. For ``gp2`` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. The following are the supported values for each volume type: - ``gp3`` : 3,000 - 16,000 IOPS - ``io1`` : 100 - 64,000 IOPS - ``io2`` : 100 - 256,000 IOPS For ``io2`` volumes, you can achieve up to 256,000 IOPS on `instances built on the Nitro System <https://docs.aws.amazon.com/ec2/latest/instancetypes/ec2-nitro-instances.html>`_ . On other instances, you can achieve performance up to 32,000 IOPS. This parameter is supported for ``io1`` , ``io2`` , and ``gp3`` volumes only.
+            :param iops: The number of I/O operations per second (IOPS). For ``gp3`` , ``io1`` , and ``io2`` volumes, this represents the number of IOPS that are provisioned for the volume. For ``gp2`` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. The following are the supported values for each volume type: - ``gp3`` : 3,000 - 80,000 IOPS - ``io1`` : 100 - 64,000 IOPS - ``io2`` : 100 - 256,000 IOPS For ``io2`` volumes, you can achieve up to 256,000 IOPS on `instances built on the Nitro System <https://docs.aws.amazon.com/ec2/latest/instancetypes/ec2-nitro-instances.html>`_ . On other instances, you can achieve performance up to 32,000 IOPS. This parameter is supported for ``io1`` , ``io2`` , and ``gp3`` volumes only.
             :param kms_key_id: Identifier (key ID, key alias, key ARN, or alias ARN) of the customer managed KMS key to use for EBS encryption.
             :param snapshot_id: The ID of the snapshot.
-            :param throughput: The throughput to provision for a ``gp3`` volume, with a maximum of 1,000 MiB/s. Valid Range: Minimum value of 125. Maximum value of 1000.
+            :param throughput: The throughput to provision for a ``gp3`` volume, with a maximum of 2,000 MiB/s. Valid Range: Minimum value of 125. Maximum value of 2,000.
             :param volume_initialization_rate: Specifies the Amazon EBS Provisioned Rate for Volume Initialization (volume initialization rate), in MiB/s, at which to download the snapshot blocks from Amazon S3 to the volume. This is also known as *volume initialization* . Specifying a volume initialization rate ensures that the volume is initialized at a predictable and consistent rate after creation. This parameter is supported only for volumes created from snapshots. Omit this parameter if: - You want to create the volume using fast snapshot restore. You must specify a snapshot that is enabled for fast snapshot restore. In this case, the volume is fully initialized at creation. .. epigraph:: If you specify a snapshot that is enabled for fast snapshot restore and a volume initialization rate, the volume will be initialized at the specified rate instead of fast snapshot restore. - You want to create a volume that is initialized at the default rate. For more information, see `Initialize Amazon EBS volumes <https://docs.aws.amazon.com/ebs/latest/userguide/initalize-volume.html>`_ in the *Amazon EC2 User Guide* . Valid range: 100 - 300 MiB/s
-            :param volume_size: The size of the volume, in GiBs. You must specify either a snapshot ID or a volume size. The following are the supported volumes sizes for each volume type: - ``gp2`` and ``gp3`` : 1 - 16,384 GiB - ``io1`` : 4 - 16,384 GiB - ``io2`` : 4 - 65,536 GiB - ``st1`` and ``sc1`` : 125 - 16,384 GiB - ``standard`` : 1 - 1024 GiB
+            :param volume_size: The size of the volume, in GiBs. You must specify either a snapshot ID or a volume size. The following are the supported volumes sizes for each volume type: - ``gp2`` : 1 - 16,384 GiB - ``gp3`` : 1 - 65,536 GiB - ``io1`` : 4 - 16,384 GiB - ``io2`` : 4 - 65,536 GiB - ``st1`` and ``sc1`` : 125 - 16,384 GiB - ``standard`` : 1 - 1024 GiB
             :param volume_type: The volume type. For more information, see `Amazon EBS volume types <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-volume-types.html>`_ in the *Amazon EBS User Guide* .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-ebs.html
@@ -73838,7 +75726,7 @@ class CfnLaunchTemplate(
 
             The following are the supported values for each volume type:
 
-            - ``gp3`` : 3,000 - 16,000 IOPS
+            - ``gp3`` : 3,000 - 80,000 IOPS
             - ``io1`` : 100 - 64,000 IOPS
             - ``io2`` : 100 - 256,000 IOPS
 
@@ -73871,9 +75759,9 @@ class CfnLaunchTemplate(
 
         @builtins.property
         def throughput(self) -> typing.Optional[jsii.Number]:
-            '''The throughput to provision for a ``gp3`` volume, with a maximum of 1,000 MiB/s.
+            '''The throughput to provision for a ``gp3`` volume, with a maximum of 2,000 MiB/s.
 
-            Valid Range: Minimum value of 125. Maximum value of 1000.
+            Valid Range: Minimum value of 125. Maximum value of 2,000.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-ebs.html#cfn-ec2-launchtemplate-ebs-throughput
             '''
@@ -73911,7 +75799,8 @@ class CfnLaunchTemplate(
 
             You must specify either a snapshot ID or a volume size. The following are the supported volumes sizes for each volume type:
 
-            - ``gp2`` and ``gp3`` : 1 - 16,384 GiB
+            - ``gp2`` : 1 - 16,384 GiB
+            - ``gp3`` : 1 - 65,536 GiB
             - ``io1`` : 4 - 16,384 GiB
             - ``io2`` : 4 - 65,536 GiB
             - ``st1`` and ``sc1`` : 125 - 16,384 GiB
@@ -79021,6 +80910,555 @@ class CfnLocalGatewayRouteTableVirtualInterfaceGroupAssociation(
         jsii.set(self, "tagsRaw", value) # pyright: ignore[reportArgumentType]
 
 
+@jsii.implements(_IInspectable_c2943556, ILocalGatewayVirtualInterfaceRef, _ITaggableV2_4e6798f8)
+class CfnLocalGatewayVirtualInterface(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_ec2.CfnLocalGatewayVirtualInterface",
+):
+    '''Describes a local gateway virtual interface.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-localgatewayvirtualinterface.html
+    :cloudformationResource: AWS::EC2::LocalGatewayVirtualInterface
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_ec2 as ec2
+        
+        cfn_local_gateway_virtual_interface = ec2.CfnLocalGatewayVirtualInterface(self, "MyCfnLocalGatewayVirtualInterface",
+            local_address="localAddress",
+            local_gateway_virtual_interface_group_id="localGatewayVirtualInterfaceGroupId",
+            outpost_lag_id="outpostLagId",
+            peer_address="peerAddress",
+            vlan=123,
+        
+            # the properties below are optional
+            peer_bgp_asn=123,
+            peer_bgp_asn_extended=123,
+            tags=[CfnTag(
+                key="key",
+                value="value"
+            )]
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        local_address: builtins.str,
+        local_gateway_virtual_interface_group_id: builtins.str,
+        outpost_lag_id: builtins.str,
+        peer_address: builtins.str,
+        vlan: jsii.Number,
+        peer_bgp_asn: typing.Optional[jsii.Number] = None,
+        peer_bgp_asn_extended: typing.Optional[jsii.Number] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param local_address: The local address.
+        :param local_gateway_virtual_interface_group_id: The ID of the local gateway virtual interface group.
+        :param outpost_lag_id: The Outpost LAG ID.
+        :param peer_address: The peer address.
+        :param vlan: The ID of the VLAN.
+        :param peer_bgp_asn: The peer BGP ASN.
+        :param peer_bgp_asn_extended: The extended 32-bit ASN of the BGP peer for use with larger ASN values.
+        :param tags: The tags assigned to the virtual interface.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__2aa88d11229e60744af7610169f28b3d5625cb154fd34b95efb791e8bfccfc63)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnLocalGatewayVirtualInterfaceProps(
+            local_address=local_address,
+            local_gateway_virtual_interface_group_id=local_gateway_virtual_interface_group_id,
+            outpost_lag_id=outpost_lag_id,
+            peer_address=peer_address,
+            vlan=vlan,
+            peer_bgp_asn=peer_bgp_asn,
+            peer_bgp_asn_extended=peer_bgp_asn_extended,
+            tags=tags,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="fromLocalGatewayVirtualInterfaceId")
+    @builtins.classmethod
+    def from_local_gateway_virtual_interface_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        local_gateway_virtual_interface_id: builtins.str,
+    ) -> ILocalGatewayVirtualInterfaceRef:
+        '''Creates a new ILocalGatewayVirtualInterfaceRef from a localGatewayVirtualInterfaceId.
+
+        :param scope: -
+        :param id: -
+        :param local_gateway_virtual_interface_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__7e3e16f72affac0d04131f323309fd5617e7cabcdedcd19ac8ade915c112fa06)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument local_gateway_virtual_interface_id", value=local_gateway_virtual_interface_id, expected_type=type_hints["local_gateway_virtual_interface_id"])
+        return typing.cast(ILocalGatewayVirtualInterfaceRef, jsii.sinvoke(cls, "fromLocalGatewayVirtualInterfaceId", [scope, id, local_gateway_virtual_interface_id]))
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__94977590a9f1d2767ea0830e9b759c542b741cd7dac530ebefe8f70c31670444)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__095a3726e61c66bed12ad64205be51561583ad09436d79a570b9239072336539)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrConfigurationState")
+    def attr_configuration_state(self) -> builtins.str:
+        '''The current state of the local gateway virtual interface.
+
+        :cloudformationAttribute: ConfigurationState
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrConfigurationState"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrLocalBgpAsn")
+    def attr_local_bgp_asn(self) -> jsii.Number:
+        '''The Border Gateway Protocol (BGP) Autonomous System Number (ASN) of the local gateway.
+
+        :cloudformationAttribute: LocalBgpAsn
+        '''
+        return typing.cast(jsii.Number, jsii.get(self, "attrLocalBgpAsn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrLocalGatewayId")
+    def attr_local_gateway_id(self) -> builtins.str:
+        '''The ID of the local gateway.
+
+        :cloudformationAttribute: LocalGatewayId
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrLocalGatewayId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrLocalGatewayVirtualInterfaceId")
+    def attr_local_gateway_virtual_interface_id(self) -> builtins.str:
+        '''The ID of the virtual interface.
+
+        :cloudformationAttribute: LocalGatewayVirtualInterfaceId
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrLocalGatewayVirtualInterfaceId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrOwnerId")
+    def attr_owner_id(self) -> builtins.str:
+        '''The ID of the AWS account that owns the local gateway virtual interface.
+
+        :cloudformationAttribute: OwnerId
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrOwnerId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cdkTagManager")
+    def cdk_tag_manager(self) -> _TagManager_0a598cb3:
+        '''Tag Manager which manages the tags for this resource.'''
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="localGatewayVirtualInterfaceRef")
+    def local_gateway_virtual_interface_ref(
+        self,
+    ) -> LocalGatewayVirtualInterfaceReference:
+        '''A reference to a LocalGatewayVirtualInterface resource.'''
+        return typing.cast(LocalGatewayVirtualInterfaceReference, jsii.get(self, "localGatewayVirtualInterfaceRef"))
+
+    @builtins.property
+    @jsii.member(jsii_name="localAddress")
+    def local_address(self) -> builtins.str:
+        '''The local address.'''
+        return typing.cast(builtins.str, jsii.get(self, "localAddress"))
+
+    @local_address.setter
+    def local_address(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__aea0d3e37c3a8dd56ec78450277d740b869a461b084be05fe5b483cc3069cf1d)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "localAddress", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="localGatewayVirtualInterfaceGroupId")
+    def local_gateway_virtual_interface_group_id(self) -> builtins.str:
+        '''The ID of the local gateway virtual interface group.'''
+        return typing.cast(builtins.str, jsii.get(self, "localGatewayVirtualInterfaceGroupId"))
+
+    @local_gateway_virtual_interface_group_id.setter
+    def local_gateway_virtual_interface_group_id(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__6022f5909fe462f9f3785e9d5d0bfec37b4fbdc32098ff0ed5b117e2095af317)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "localGatewayVirtualInterfaceGroupId", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="outpostLagId")
+    def outpost_lag_id(self) -> builtins.str:
+        '''The Outpost LAG ID.'''
+        return typing.cast(builtins.str, jsii.get(self, "outpostLagId"))
+
+    @outpost_lag_id.setter
+    def outpost_lag_id(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__d9e0940225d24f5768baac171eb4d7a02583d63a1dbff31fafd812a6612cf377)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "outpostLagId", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="peerAddress")
+    def peer_address(self) -> builtins.str:
+        '''The peer address.'''
+        return typing.cast(builtins.str, jsii.get(self, "peerAddress"))
+
+    @peer_address.setter
+    def peer_address(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c55a99d7a9d8ce108f6383103a39169fa8ff7dbefa5fa9da14d3fdc18b33f56d)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "peerAddress", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="vlan")
+    def vlan(self) -> jsii.Number:
+        '''The ID of the VLAN.'''
+        return typing.cast(jsii.Number, jsii.get(self, "vlan"))
+
+    @vlan.setter
+    def vlan(self, value: jsii.Number) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__876a548873295da57ca1d79ac22c64da6f6bb90a671ef5e7e35327fa50455921)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "vlan", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="peerBgpAsn")
+    def peer_bgp_asn(self) -> typing.Optional[jsii.Number]:
+        '''The peer BGP ASN.'''
+        return typing.cast(typing.Optional[jsii.Number], jsii.get(self, "peerBgpAsn"))
+
+    @peer_bgp_asn.setter
+    def peer_bgp_asn(self, value: typing.Optional[jsii.Number]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__0c59092a20afba0573e2b1509528b6946b674912bc181e34599b6b4caf2d6fc6)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "peerBgpAsn", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="peerBgpAsnExtended")
+    def peer_bgp_asn_extended(self) -> typing.Optional[jsii.Number]:
+        '''The extended 32-bit ASN of the BGP peer for use with larger ASN values.'''
+        return typing.cast(typing.Optional[jsii.Number], jsii.get(self, "peerBgpAsnExtended"))
+
+    @peer_bgp_asn_extended.setter
+    def peer_bgp_asn_extended(self, value: typing.Optional[jsii.Number]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__f3cce6d05d44bd0efd48f94e34176bb44563507d53cdce3a678259de4fe36b18)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "peerBgpAsnExtended", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="tags")
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''The tags assigned to the virtual interface.'''
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
+
+    @tags.setter
+    def tags(self, value: typing.Optional[typing.List[_CfnTag_f6864754]]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__eb087b9b572ca18afe9a40645f05ba591d2e3255ff50d614f2090fe641563ff1)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
+
+
+@jsii.implements(_IInspectable_c2943556, ILocalGatewayVirtualInterfaceGroupRef, _ITaggableV2_4e6798f8)
+class CfnLocalGatewayVirtualInterfaceGroup(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_ec2.CfnLocalGatewayVirtualInterfaceGroup",
+):
+    '''Describes a local gateway virtual interface group.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-localgatewayvirtualinterfacegroup.html
+    :cloudformationResource: AWS::EC2::LocalGatewayVirtualInterfaceGroup
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_ec2 as ec2
+        
+        cfn_local_gateway_virtual_interface_group = ec2.CfnLocalGatewayVirtualInterfaceGroup(self, "MyCfnLocalGatewayVirtualInterfaceGroup",
+            local_gateway_id="localGatewayId",
+        
+            # the properties below are optional
+            local_bgp_asn=123,
+            local_bgp_asn_extended=123,
+            tags=[CfnTag(
+                key="key",
+                value="value"
+            )]
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        local_gateway_id: builtins.str,
+        local_bgp_asn: typing.Optional[jsii.Number] = None,
+        local_bgp_asn_extended: typing.Optional[jsii.Number] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param local_gateway_id: The ID of the local gateway.
+        :param local_bgp_asn: The Autonomous System Number(ASN) for the local Border Gateway Protocol (BGP).
+        :param local_bgp_asn_extended: The extended 32-bit ASN for the local BGP configuration.
+        :param tags: The tags assigned to the virtual interface group.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__f4428e70a4cdbb5cb8cdf0b9a30ee1c62e12bf1982546a8f6fceda85eb1710d8)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnLocalGatewayVirtualInterfaceGroupProps(
+            local_gateway_id=local_gateway_id,
+            local_bgp_asn=local_bgp_asn,
+            local_bgp_asn_extended=local_bgp_asn_extended,
+            tags=tags,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="fromLocalGatewayVirtualInterfaceGroupArn")
+    @builtins.classmethod
+    def from_local_gateway_virtual_interface_group_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> ILocalGatewayVirtualInterfaceGroupRef:
+        '''Creates a new ILocalGatewayVirtualInterfaceGroupRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__d5a9b6710adb36dfbe12ad180d73bda56451914c2f050b2f3087ad3bcbc2d6fa)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(ILocalGatewayVirtualInterfaceGroupRef, jsii.sinvoke(cls, "fromLocalGatewayVirtualInterfaceGroupArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromLocalGatewayVirtualInterfaceGroupId")
+    @builtins.classmethod
+    def from_local_gateway_virtual_interface_group_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        local_gateway_virtual_interface_group_id: builtins.str,
+    ) -> ILocalGatewayVirtualInterfaceGroupRef:
+        '''Creates a new ILocalGatewayVirtualInterfaceGroupRef from a localGatewayVirtualInterfaceGroupId.
+
+        :param scope: -
+        :param id: -
+        :param local_gateway_virtual_interface_group_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__6c41061042437440fce590eb8d2e84ca2e31260fbb48f45a79f28c068eb57cf4)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument local_gateway_virtual_interface_group_id", value=local_gateway_virtual_interface_group_id, expected_type=type_hints["local_gateway_virtual_interface_group_id"])
+        return typing.cast(ILocalGatewayVirtualInterfaceGroupRef, jsii.sinvoke(cls, "fromLocalGatewayVirtualInterfaceGroupId", [scope, id, local_gateway_virtual_interface_group_id]))
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__2cb275542481a92dcc0981a31e5b84f30303479387a077892f0ce93929c8683e)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__18212f2fc4e751f496b0f978560864ecefabe558ebf8ffcccfafbd83fcc076f9)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrConfigurationState")
+    def attr_configuration_state(self) -> builtins.str:
+        '''The current state of the local gateway virtual interface group.
+
+        :cloudformationAttribute: ConfigurationState
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrConfigurationState"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrLocalGatewayVirtualInterfaceGroupArn")
+    def attr_local_gateway_virtual_interface_group_arn(self) -> builtins.str:
+        '''The Amazon Resource Number (ARN) of the local gateway virtual interface group.
+
+        :cloudformationAttribute: LocalGatewayVirtualInterfaceGroupArn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrLocalGatewayVirtualInterfaceGroupArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrLocalGatewayVirtualInterfaceGroupId")
+    def attr_local_gateway_virtual_interface_group_id(self) -> builtins.str:
+        '''The ID of the virtual interface group.
+
+        :cloudformationAttribute: LocalGatewayVirtualInterfaceGroupId
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrLocalGatewayVirtualInterfaceGroupId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrLocalGatewayVirtualInterfaceIds")
+    def attr_local_gateway_virtual_interface_ids(self) -> typing.List[builtins.str]:
+        '''The IDs of the virtual interfaces.
+
+        :cloudformationAttribute: LocalGatewayVirtualInterfaceIds
+        '''
+        return typing.cast(typing.List[builtins.str], jsii.get(self, "attrLocalGatewayVirtualInterfaceIds"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrOwnerId")
+    def attr_owner_id(self) -> builtins.str:
+        '''The ID of the AWS account that owns the local gateway virtual interface group.
+
+        :cloudformationAttribute: OwnerId
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrOwnerId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cdkTagManager")
+    def cdk_tag_manager(self) -> _TagManager_0a598cb3:
+        '''Tag Manager which manages the tags for this resource.'''
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="localGatewayVirtualInterfaceGroupRef")
+    def local_gateway_virtual_interface_group_ref(
+        self,
+    ) -> LocalGatewayVirtualInterfaceGroupReference:
+        '''A reference to a LocalGatewayVirtualInterfaceGroup resource.'''
+        return typing.cast(LocalGatewayVirtualInterfaceGroupReference, jsii.get(self, "localGatewayVirtualInterfaceGroupRef"))
+
+    @builtins.property
+    @jsii.member(jsii_name="localGatewayId")
+    def local_gateway_id(self) -> builtins.str:
+        '''The ID of the local gateway.'''
+        return typing.cast(builtins.str, jsii.get(self, "localGatewayId"))
+
+    @local_gateway_id.setter
+    def local_gateway_id(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__72980886c0b232d5cbf6c82b702ca8e8bad15827fe4b8c5a6125cccfd17a038f)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "localGatewayId", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="localBgpAsn")
+    def local_bgp_asn(self) -> typing.Optional[jsii.Number]:
+        '''The Autonomous System Number(ASN) for the local Border Gateway Protocol (BGP).'''
+        return typing.cast(typing.Optional[jsii.Number], jsii.get(self, "localBgpAsn"))
+
+    @local_bgp_asn.setter
+    def local_bgp_asn(self, value: typing.Optional[jsii.Number]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__e17efd4cdc854aef38d95618d445b062d3dff94405b26cd2e5bf702d043d63c5)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "localBgpAsn", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="localBgpAsnExtended")
+    def local_bgp_asn_extended(self) -> typing.Optional[jsii.Number]:
+        '''The extended 32-bit ASN for the local BGP configuration.'''
+        return typing.cast(typing.Optional[jsii.Number], jsii.get(self, "localBgpAsnExtended"))
+
+    @local_bgp_asn_extended.setter
+    def local_bgp_asn_extended(self, value: typing.Optional[jsii.Number]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__451e90a51f0d03f4296d1a4075273832941693edd09aeac29656d7364ee7c634)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "localBgpAsnExtended", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="tags")
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''The tags assigned to the virtual interface group.'''
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
+
+    @tags.setter
+    def tags(self, value: typing.Optional[typing.List[_CfnTag_f6864754]]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c5e51302d318cef13096e5600090018d23258317ba4cb12507e944c98443851e)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "tags", value) # pyright: ignore[reportArgumentType]
+
+
 @jsii.implements(_IInspectable_c2943556, INatGatewayRef, _ITaggable_36806126)
 class CfnNatGateway(
     _CfnResource_9df397a6,
@@ -90975,9 +93413,9 @@ class CfnSpotFleet(
 
             :param delete_on_termination: Indicates whether the EBS volume is deleted on instance termination. For more information, see `Preserving Amazon EBS volumes on instance termination <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/terminating-instances.html#preserving-volumes-on-termination>`_ in the *Amazon EC2 User Guide* .
             :param encrypted: Indicates whether the encryption state of an EBS volume is changed while being restored from a backing snapshot. The effect of setting the encryption state to ``true`` depends on the volume origin (new or from a snapshot), starting encryption state, ownership, and whether encryption by default is enabled. For more information, see `Amazon EBS Encryption <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html#encryption-parameters>`_ in the *Amazon EC2 User Guide* . In no case can you remove encryption from an encrypted volume. Encrypted volumes can only be attached to instances that support Amazon EBS encryption. For more information, see `Supported Instance Types <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html#EBSEncryption_supported_instances>`_ . This parameter is not returned by `DescribeImageAttribute <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeImageAttribute.html>`_ .
-            :param iops: The number of I/O operations per second (IOPS). For ``gp3`` , ``io1`` , and ``io2`` volumes, this represents the number of IOPS that are provisioned for the volume. For ``gp2`` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. The following are the supported values for each volume type: - ``gp3`` : 3,000 - 16,000 IOPS - ``io1`` : 100 - 64,000 IOPS - ``io2`` : 100 - 256,000 IOPS For ``io2`` volumes, you can achieve up to 256,000 IOPS on `instances built on the Nitro System <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html#ec2-nitro-instances>`_ . On other instances, you can achieve performance up to 32,000 IOPS. This parameter is required for ``io1`` and ``io2`` volumes. The default for ``gp3`` volumes is 3,000 IOPS.
+            :param iops: The number of I/O operations per second (IOPS). For ``gp3`` , ``io1`` , and ``io2`` volumes, this represents the number of IOPS that are provisioned for the volume. For ``gp2`` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. The following are the supported values for each volume type: - ``gp3`` : 3,000 - 80,000 IOPS - ``io1`` : 100 - 64,000 IOPS - ``io2`` : 100 - 256,000 IOPS For ``io2`` volumes, you can achieve up to 256,000 IOPS on `instances built on the Nitro System <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html#ec2-nitro-instances>`_ . On other instances, you can achieve performance up to 32,000 IOPS. This parameter is required for ``io1`` and ``io2`` volumes. The default for ``gp3`` volumes is 3,000 IOPS.
             :param snapshot_id: The ID of the snapshot.
-            :param volume_size: The size of the volume, in GiBs. You must specify either a snapshot ID or a volume size. If you specify a snapshot, the default is the snapshot size. You can specify a volume size that is equal to or larger than the snapshot size. The following are the supported sizes for each volume type: - ``gp2`` and ``gp3`` : 1 - 16,384 GiB - ``io1`` : 4 - 16,384 GiB - ``io2`` : 4 - 65,536 GiB - ``st1`` and ``sc1`` : 125 - 16,384 GiB - ``standard`` : 1 - 1024 GiB
+            :param volume_size: The size of the volume, in GiBs. You must specify either a snapshot ID or a volume size. If you specify a snapshot, the default is the snapshot size. You can specify a volume size that is equal to or larger than the snapshot size. The following are the supported sizes for each volume type: - ``gp2`` : 1 - 16,384 GiB - ``gp3`` : 1 - 65,536 GiB - ``io1`` : 4 - 16,384 GiB - ``io2`` : 4 - 65,536 GiB - ``st1`` and ``sc1`` : 125 - 16,384 GiB - ``standard`` : 1 - 1024 GiB
             :param volume_type: The volume type. For more information, see `Amazon EBS volume types <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-volume-types.html>`_ in the *Amazon EBS User Guide* .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-spotfleet-ebsblockdevice.html
@@ -91060,7 +93498,7 @@ class CfnSpotFleet(
 
             The following are the supported values for each volume type:
 
-            - ``gp3`` : 3,000 - 16,000 IOPS
+            - ``gp3`` : 3,000 - 80,000 IOPS
             - ``io1`` : 100 - 64,000 IOPS
             - ``io2`` : 100 - 256,000 IOPS
 
@@ -91090,7 +93528,8 @@ class CfnSpotFleet(
 
             The following are the supported sizes for each volume type:
 
-            - ``gp2`` and ``gp3`` : 1 - 16,384 GiB
+            - ``gp2`` : 1 - 16,384 GiB
+            - ``gp3`` : 1 - 65,536 GiB
             - ``io1`` : 4 - 16,384 GiB
             - ``io2`` : 4 - 65,536 GiB
             - ``st1`` and ``sc1`` : 125 - 16,384 GiB
@@ -108548,11 +110987,11 @@ class CfnVolume(
         :param availability_zone: The ID of the Availability Zone in which to create the volume. For example, ``us-east-1a`` . Either ``AvailabilityZone`` or ``AvailabilityZoneId`` must be specified, but not both.
         :param auto_enable_io: Indicates whether the volume is auto-enabled for I/O operations. By default, Amazon EBS disables I/O to the volume from attached EC2 instances when it determines that a volume's data is potentially inconsistent. If the consistency of the volume is not a concern, and you prefer that the volume be made available immediately if it's impaired, you can configure the volume to automatically enable I/O.
         :param encrypted: Indicates whether the volume should be encrypted. The effect of setting the encryption state to ``true`` depends on the volume origin (new or from a snapshot), starting encryption state, ownership, and whether encryption by default is enabled. For more information, see `Encryption by default <https://docs.aws.amazon.com/ebs/latest/userguide/work-with-ebs-encr.html#encryption-by-default>`_ in the *Amazon EBS User Guide* . Encrypted Amazon EBS volumes must be attached to instances that support Amazon EBS encryption. For more information, see `Supported instance types <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption-requirements.html#ebs-encryption_supported_instances>`_ .
-        :param iops: The number of I/O operations per second (IOPS). For ``gp3`` , ``io1`` , and ``io2`` volumes, this represents the number of IOPS that are provisioned for the volume. For ``gp2`` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. The following are the supported values for each volume type: - ``gp3`` : 3,000 - 16,000 IOPS - ``io1`` : 100 - 64,000 IOPS - ``io2`` : 100 - 256,000 IOPS For ``io2`` volumes, you can achieve up to 256,000 IOPS on `instances built on the Nitro System <https://docs.aws.amazon.com/ec2/latest/instancetypes/ec2-nitro-instances.html>`_ . On other instances, you can achieve performance up to 32,000 IOPS. This parameter is required for ``io1`` and ``io2`` volumes. The default for ``gp3`` volumes is 3,000 IOPS. This parameter is not supported for ``gp2`` , ``st1`` , ``sc1`` , or ``standard`` volumes.
+        :param iops: The number of I/O operations per second (IOPS). For ``gp3`` , ``io1`` , and ``io2`` volumes, this represents the number of IOPS that are provisioned for the volume. For ``gp2`` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. The following are the supported values for each volume type: - ``gp3`` : 3,000 - 80,000 IOPS - ``io1`` : 100 - 64,000 IOPS - ``io2`` : 100 - 256,000 IOPS For ``io2`` volumes, you can achieve up to 256,000 IOPS on `instances built on the Nitro System <https://docs.aws.amazon.com/ec2/latest/instancetypes/ec2-nitro-instances.html>`_ . On other instances, you can achieve performance up to 32,000 IOPS. This parameter is required for ``io1`` and ``io2`` volumes. The default for ``gp3`` volumes is 3,000 IOPS. This parameter is not supported for ``gp2`` , ``st1`` , ``sc1`` , or ``standard`` volumes.
         :param kms_key_id: The identifier of the AWS KMS key to use for Amazon EBS encryption. If ``KmsKeyId`` is specified, the encrypted state must be ``true`` . If you omit this property and your account is enabled for encryption by default, or *Encrypted* is set to ``true`` , then the volume is encrypted using the default key specified for your account. If your account does not have a default key, then the volume is encrypted using the AWS managed key . Alternatively, if you want to specify a different key, you can specify one of the following: - Key ID. For example, 1234abcd-12ab-34cd-56ef-1234567890ab. - Key alias. Specify the alias for the key, prefixed with ``alias/`` . For example, for a key with the alias ``my_cmk`` , use ``alias/my_cmk`` . Or to specify the AWS managed key , use ``alias/aws/ebs`` . - Key ARN. For example, arn:aws:kms:us-east-1:012345678910:key/1234abcd-12ab-34cd-56ef-1234567890ab. - Alias ARN. For example, arn:aws:kms:us-east-1:012345678910:alias/ExampleAlias.
         :param multi_attach_enabled: Indicates whether Amazon EBS Multi-Attach is enabled. AWS CloudFormation does not currently support updating a single-attach volume to be multi-attach enabled, updating a multi-attach enabled volume to be single-attach, or updating the size or number of I/O operations per second (IOPS) of a multi-attach enabled volume.
         :param outpost_arn: The Amazon Resource Name (ARN) of the Outpost.
-        :param size: The size of the volume, in GiBs. You must specify either a snapshot ID or a volume size. If you specify a snapshot, the default is the snapshot size. You can specify a volume size that is equal to or larger than the snapshot size. The following are the supported volumes sizes for each volume type: - ``gp2`` and ``gp3`` : 1 - 16,384 GiB - ``io1`` : 4 - 16,384 GiB - ``io2`` : 4 - 65,536 GiB - ``st1`` and ``sc1`` : 125 - 16,384 GiB - ``standard`` : 1 - 1024 GiB
+        :param size: The size of the volume, in GiBs. You must specify either a snapshot ID or a volume size. If you specify a snapshot, the default is the snapshot size. You can specify a volume size that is equal to or larger than the snapshot size. The following are the supported volumes sizes for each volume type: - ``gp2`` : 1 - 16,384 GiB - ``gp3`` : 1 - 65,536 GiB - ``io1`` : 4 - 16,384 GiB - ``io2`` : 4 - 65,536 GiB - ``st1`` and ``sc1`` : 125 - 16,384 GiB - ``standard`` : 1 - 1024 GiB
         :param snapshot_id: The snapshot from which to create the volume. You must specify either a snapshot ID or a volume size.
         :param tags: The tags to apply to the volume during creation.
         :param throughput: The throughput to provision for a volume, with a maximum of 1,000 MiB/s. This parameter is valid only for ``gp3`` volumes. The default value is 125. Valid Range: Minimum value of 125. Maximum value of 1000.
@@ -116873,6 +119312,7 @@ class ClientVpnEndpoint(
         client_login_banner: typing.Optional[builtins.str] = None,
         client_route_enforcement_options: typing.Optional[typing.Union[ClientRouteEnforcementOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         description: typing.Optional[builtins.str] = None,
+        disconnect_on_session_timeout: typing.Optional[builtins.bool] = None,
         dns_servers: typing.Optional[typing.Sequence[builtins.str]] = None,
         logging: typing.Optional[builtins.bool] = None,
         log_group: typing.Optional[_ILogGroup_3c4fa718] = None,
@@ -116898,6 +119338,7 @@ class ClientVpnEndpoint(
         :param client_login_banner: Customizable text that will be displayed in a banner on AWS provided clients when a VPN session is established. UTF-8 encoded characters only. Maximum of 1400 characters. Default: - no banner is presented to the client
         :param client_route_enforcement_options: Options for Client Route Enforcement. Client Route Enforcement is a feature of Client VPN that helps enforce administrator defined routes on devices connected through the VPN. This feature helps improve your security posture by ensuring that network traffic originating from a connected client is not inadvertently sent outside the VPN tunnel. Default: undefined - AWS Client VPN default setting is disable client route enforcement
         :param description: A brief description of the Client VPN endpoint. Default: - no description
+        :param disconnect_on_session_timeout: Indicates whether the client VPN session is disconnected after the maximum ``sessionTimeout`` is reached. If ``true``, users are prompted to reconnect client VPN. If ``false``, client VPN attempts to reconnect automatically. Default: undefined - AWS Client VPN default is true
         :param dns_servers: Information about the DNS servers to be used for DNS resolution. A Client VPN endpoint can have up to two DNS servers. Default: - use the DNS address configured on the device
         :param logging: Whether to enable connections logging. Default: true
         :param log_group: A CloudWatch Logs log group for connection logging. Default: - a new group is created
@@ -116925,6 +119366,7 @@ class ClientVpnEndpoint(
             client_login_banner=client_login_banner,
             client_route_enforcement_options=client_route_enforcement_options,
             description=description,
+            disconnect_on_session_timeout=disconnect_on_session_timeout,
             dns_servers=dns_servers,
             logging=logging,
             log_group=log_group,
@@ -117561,6 +120003,9 @@ class PublicSubnet(
 
 
 __all__ = [
+    "AcceleratorManufacturer",
+    "AcceleratorName",
+    "AcceleratorType",
     "AclCidr",
     "AclCidrConfig",
     "AclIcmp",
@@ -117598,10 +120043,12 @@ __all__ = [
     "ApplyCloudFormationInitOptions",
     "AttachInitOptions",
     "AwsIpamProps",
+    "BareMetal",
     "BastionHostLinux",
     "BastionHostLinuxProps",
     "BlockDevice",
     "BlockDeviceVolume",
+    "BurstablePerformance",
     "CapacityReservationFleetReference",
     "CapacityReservationReference",
     "CarrierGatewayReference",
@@ -117673,6 +120120,10 @@ __all__ = [
     "CfnLocalGatewayRouteTableVPCAssociationProps",
     "CfnLocalGatewayRouteTableVirtualInterfaceGroupAssociation",
     "CfnLocalGatewayRouteTableVirtualInterfaceGroupAssociationProps",
+    "CfnLocalGatewayVirtualInterface",
+    "CfnLocalGatewayVirtualInterfaceGroup",
+    "CfnLocalGatewayVirtualInterfaceGroupProps",
+    "CfnLocalGatewayVirtualInterfaceProps",
     "CfnNatGateway",
     "CfnNatGatewayProps",
     "CfnNetworkAcl",
@@ -117837,6 +120288,7 @@ __all__ = [
     "Connections",
     "ConnectionsProps",
     "CpuCredits",
+    "CpuManufacturer",
     "CreateIpv6CidrBlocksRequest",
     "CustomerGatewayReference",
     "DHCPOptionsReference",
@@ -117924,6 +120376,8 @@ __all__ = [
     "ILocalGatewayRouteTableRef",
     "ILocalGatewayRouteTableVPCAssociationRef",
     "ILocalGatewayRouteTableVirtualInterfaceGroupAssociationRef",
+    "ILocalGatewayVirtualInterfaceGroupRef",
+    "ILocalGatewayVirtualInterfaceRef",
     "IMachineImage",
     "INatGatewayRef",
     "INetworkAcl",
@@ -118041,11 +120495,13 @@ __all__ = [
     "InstanceArchitecture",
     "InstanceClass",
     "InstanceConnectEndpointReference",
+    "InstanceGeneration",
     "InstanceInitiatedShutdownBehavior",
     "InstanceProps",
     "InstanceReference",
     "InstanceRequireImdsv2Aspect",
     "InstanceRequireImdsv2AspectProps",
+    "InstanceRequirementsConfig",
     "InstanceSize",
     "InstanceType",
     "InterfaceVpcEndpoint",
@@ -118081,6 +120537,10 @@ __all__ = [
     "LocalGatewayRouteTableReference",
     "LocalGatewayRouteTableVPCAssociationReference",
     "LocalGatewayRouteTableVirtualInterfaceGroupAssociationReference",
+    "LocalGatewayVirtualInterfaceGroupReference",
+    "LocalGatewayVirtualInterfaceReference",
+    "LocalStorage",
+    "LocalStorageType",
     "LocationPackageOptions",
     "LogFormat",
     "LookupMachineImage",
@@ -118991,6 +121451,30 @@ def _typecheckingstub__b9a8cd9288a52b6663080797430bf0981183639ee7ad7887a7ff932d0
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__f7ce4c591b68ccf10989a9f20fd3c6f1fc55f0f986e5272574d1a8263ccb9638(
+    *,
+    local_gateway_id: builtins.str,
+    local_bgp_asn: typing.Optional[jsii.Number] = None,
+    local_bgp_asn_extended: typing.Optional[jsii.Number] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__f937f1e5478df1249afd18165f33effb63a12f7ed00b1831a2fbee04cab4c28a(
+    *,
+    local_address: builtins.str,
+    local_gateway_virtual_interface_group_id: builtins.str,
+    outpost_lag_id: builtins.str,
+    peer_address: builtins.str,
+    vlan: jsii.Number,
+    peer_bgp_asn: typing.Optional[jsii.Number] = None,
+    peer_bgp_asn_extended: typing.Optional[jsii.Number] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__1aba83edf7a8e3f14e1d4f9ca76c7049f7f7c569d2ffb43bcad65b330ee9a581(
     *,
     allocation_id: typing.Optional[builtins.str] = None,
@@ -119860,6 +122344,7 @@ def _typecheckingstub__73f8593e2e6199f8ae542cff4cbe02f0be09fd9043b8072cbb652d5b0
     client_login_banner: typing.Optional[builtins.str] = None,
     client_route_enforcement_options: typing.Optional[typing.Union[ClientRouteEnforcementOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     description: typing.Optional[builtins.str] = None,
+    disconnect_on_session_timeout: typing.Optional[builtins.bool] = None,
     dns_servers: typing.Optional[typing.Sequence[builtins.str]] = None,
     logging: typing.Optional[builtins.bool] = None,
     log_group: typing.Optional[_ILogGroup_3c4fa718] = None,
@@ -119886,6 +122371,7 @@ def _typecheckingstub__8e89ba9082e1bc80500c526e8522c5a90e2a91bd17d985f5932611e0b
     client_login_banner: typing.Optional[builtins.str] = None,
     client_route_enforcement_options: typing.Optional[typing.Union[ClientRouteEnforcementOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     description: typing.Optional[builtins.str] = None,
+    disconnect_on_session_timeout: typing.Optional[builtins.bool] = None,
     dns_servers: typing.Optional[typing.Sequence[builtins.str]] = None,
     logging: typing.Optional[builtins.bool] = None,
     log_group: typing.Optional[_ILogGroup_3c4fa718] = None,
@@ -120400,6 +122886,7 @@ def _typecheckingstub__19cdaa7bec0f733a863944b2be6c76392b1e518714158a913370b8de7
     client_login_banner: typing.Optional[builtins.str] = None,
     client_route_enforcement_options: typing.Optional[typing.Union[ClientRouteEnforcementOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     description: typing.Optional[builtins.str] = None,
+    disconnect_on_session_timeout: typing.Optional[builtins.bool] = None,
     dns_servers: typing.Optional[typing.Sequence[builtins.str]] = None,
     logging: typing.Optional[builtins.bool] = None,
     log_group: typing.Optional[_ILogGroup_3c4fa718] = None,
@@ -120948,6 +123435,45 @@ def _typecheckingstub__a9326e8778e870d6503548ff3c5ed500440af6b908992d24dc8f76fa8
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__ec2256eb42c017c1221986108df1dba524eae16d4aaf51d7503ce5b1f919f3cd(
+    *,
+    memory_min: _Size_7b441c34,
+    v_cpu_count_min: jsii.Number,
+    accelerator_count_max: typing.Optional[jsii.Number] = None,
+    accelerator_count_min: typing.Optional[jsii.Number] = None,
+    accelerator_manufacturers: typing.Optional[typing.Sequence[AcceleratorManufacturer]] = None,
+    accelerator_names: typing.Optional[typing.Sequence[AcceleratorName]] = None,
+    accelerator_total_memory_max: typing.Optional[_Size_7b441c34] = None,
+    accelerator_total_memory_min: typing.Optional[_Size_7b441c34] = None,
+    accelerator_types: typing.Optional[typing.Sequence[AcceleratorType]] = None,
+    allowed_instance_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+    bare_metal: typing.Optional[BareMetal] = None,
+    baseline_ebs_bandwidth_mbps_max: typing.Optional[jsii.Number] = None,
+    baseline_ebs_bandwidth_mbps_min: typing.Optional[jsii.Number] = None,
+    burstable_performance: typing.Optional[BurstablePerformance] = None,
+    cpu_manufacturers: typing.Optional[typing.Sequence[CpuManufacturer]] = None,
+    excluded_instance_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+    instance_generations: typing.Optional[typing.Sequence[InstanceGeneration]] = None,
+    local_storage: typing.Optional[LocalStorage] = None,
+    local_storage_types: typing.Optional[typing.Sequence[LocalStorageType]] = None,
+    max_spot_price_as_percentage_of_optimal_on_demand_price: typing.Optional[jsii.Number] = None,
+    memory_max: typing.Optional[_Size_7b441c34] = None,
+    memory_per_v_cpu_max: typing.Optional[_Size_7b441c34] = None,
+    memory_per_v_cpu_min: typing.Optional[_Size_7b441c34] = None,
+    network_bandwidth_gbps_max: typing.Optional[jsii.Number] = None,
+    network_bandwidth_gbps_min: typing.Optional[jsii.Number] = None,
+    network_interface_count_max: typing.Optional[jsii.Number] = None,
+    network_interface_count_min: typing.Optional[jsii.Number] = None,
+    on_demand_max_price_percentage_over_lowest_price: typing.Optional[jsii.Number] = None,
+    require_hibernate_support: typing.Optional[builtins.bool] = None,
+    spot_max_price_percentage_over_lowest_price: typing.Optional[jsii.Number] = None,
+    total_local_storage_gb_max: typing.Optional[jsii.Number] = None,
+    total_local_storage_gb_min: typing.Optional[jsii.Number] = None,
+    v_cpu_count_max: typing.Optional[jsii.Number] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__f9e12e553c32475e068e0d7318afcf27197468eae438a6b5020d7d6a0231705f(
     instance_type_identifier: builtins.str,
 ) -> None:
@@ -121199,6 +123725,21 @@ def _typecheckingstub__cd535e63329c308e9914cf9956b0964a6259b4c4557b9d3c8637793be
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__c5749867b83865efb222663d0629d4ad2212132a3d659cf6e5b6eefb44fdc1b9(
+    *,
+    local_gateway_virtual_interface_group_arn: builtins.str,
+    local_gateway_virtual_interface_group_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__370c12dc1c7162c4f581d58e74af3136efcbc6bf0ba1e90bcab50deb09c4733f(
+    *,
+    local_gateway_virtual_interface_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__adb9aead901a9e42e17ecf53f0a66db93e64d4cc2e633a62de1a847f4c40aa01(
     *,
     key: typing.Optional[builtins.str] = None,
@@ -122358,6 +124899,7 @@ def _typecheckingstub__04f8b7e933af74b695401b45c9c6b308e4684ecde3cb9a2a1e358a336
     client_login_banner: typing.Optional[builtins.str] = None,
     client_route_enforcement_options: typing.Optional[typing.Union[ClientRouteEnforcementOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     description: typing.Optional[builtins.str] = None,
+    disconnect_on_session_timeout: typing.Optional[builtins.bool] = None,
     dns_servers: typing.Optional[typing.Sequence[builtins.str]] = None,
     logging: typing.Optional[builtins.bool] = None,
     log_group: typing.Optional[_ILogGroup_3c4fa718] = None,
@@ -126248,6 +128790,154 @@ def _typecheckingstub__3480fc1fb89ce602f4bc2bf15c99da71be91c04a233e81dcafb2795f1
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__2aa88d11229e60744af7610169f28b3d5625cb154fd34b95efb791e8bfccfc63(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    local_address: builtins.str,
+    local_gateway_virtual_interface_group_id: builtins.str,
+    outpost_lag_id: builtins.str,
+    peer_address: builtins.str,
+    vlan: jsii.Number,
+    peer_bgp_asn: typing.Optional[jsii.Number] = None,
+    peer_bgp_asn_extended: typing.Optional[jsii.Number] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__7e3e16f72affac0d04131f323309fd5617e7cabcdedcd19ac8ade915c112fa06(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    local_gateway_virtual_interface_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__94977590a9f1d2767ea0830e9b759c542b741cd7dac530ebefe8f70c31670444(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__095a3726e61c66bed12ad64205be51561583ad09436d79a570b9239072336539(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__aea0d3e37c3a8dd56ec78450277d740b869a461b084be05fe5b483cc3069cf1d(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__6022f5909fe462f9f3785e9d5d0bfec37b4fbdc32098ff0ed5b117e2095af317(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__d9e0940225d24f5768baac171eb4d7a02583d63a1dbff31fafd812a6612cf377(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__c55a99d7a9d8ce108f6383103a39169fa8ff7dbefa5fa9da14d3fdc18b33f56d(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__876a548873295da57ca1d79ac22c64da6f6bb90a671ef5e7e35327fa50455921(
+    value: jsii.Number,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__0c59092a20afba0573e2b1509528b6946b674912bc181e34599b6b4caf2d6fc6(
+    value: typing.Optional[jsii.Number],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__f3cce6d05d44bd0efd48f94e34176bb44563507d53cdce3a678259de4fe36b18(
+    value: typing.Optional[jsii.Number],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__eb087b9b572ca18afe9a40645f05ba591d2e3255ff50d614f2090fe641563ff1(
+    value: typing.Optional[typing.List[_CfnTag_f6864754]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__f4428e70a4cdbb5cb8cdf0b9a30ee1c62e12bf1982546a8f6fceda85eb1710d8(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    local_gateway_id: builtins.str,
+    local_bgp_asn: typing.Optional[jsii.Number] = None,
+    local_bgp_asn_extended: typing.Optional[jsii.Number] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__d5a9b6710adb36dfbe12ad180d73bda56451914c2f050b2f3087ad3bcbc2d6fa(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__6c41061042437440fce590eb8d2e84ca2e31260fbb48f45a79f28c068eb57cf4(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    local_gateway_virtual_interface_group_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__2cb275542481a92dcc0981a31e5b84f30303479387a077892f0ce93929c8683e(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__18212f2fc4e751f496b0f978560864ecefabe558ebf8ffcccfafbd83fcc076f9(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__72980886c0b232d5cbf6c82b702ca8e8bad15827fe4b8c5a6125cccfd17a038f(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__e17efd4cdc854aef38d95618d445b062d3dff94405b26cd2e5bf702d043d63c5(
+    value: typing.Optional[jsii.Number],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__451e90a51f0d03f4296d1a4075273832941693edd09aeac29656d7364ee7c634(
+    value: typing.Optional[jsii.Number],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__c5e51302d318cef13096e5600090018d23258317ba4cb12507e944c98443851e(
+    value: typing.Optional[typing.List[_CfnTag_f6864754]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__4d23f1a46df0174ce142c0ff05ac9cb901ecac30141c8b466b44569b409414aa(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
@@ -132839,6 +135529,7 @@ def _typecheckingstub__9a2422e1dfabadbd7f572317ed37670a87714b6f36fe9da2a01f1e26e
     client_login_banner: typing.Optional[builtins.str] = None,
     client_route_enforcement_options: typing.Optional[typing.Union[ClientRouteEnforcementOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     description: typing.Optional[builtins.str] = None,
+    disconnect_on_session_timeout: typing.Optional[builtins.bool] = None,
     dns_servers: typing.Optional[typing.Sequence[builtins.str]] = None,
     logging: typing.Optional[builtins.bool] = None,
     log_group: typing.Optional[_ILogGroup_3c4fa718] = None,