aws-cdk-lib 2.219.0__py3-none-any.whl → 2.221.0__py3-none-any.whl

aws_cdk/aws_billingconductor/__init__.py

@@ -3343,3 +3343,6 @@ def _typecheckingstub__0f3be0f4100fb92bfec0156ed2357fb7eb28b01d7081db0419a1583b1
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IBillingGroupRef, ICustomLineItemRef, IPricingPlanRef, IPricingRuleRef]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/aws_budgets/__init__.py

@@ -3873,3 +3873,6 @@ def _typecheckingstub__53b54f7e3522aacd600ff090e6221f615565664782c185bdcb801f95f
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IBudgetRef, IBudgetsActionRef]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/aws_cassandra/__init__.py

@@ -3529,3 +3529,6 @@ def _typecheckingstub__54b1c8332ddb6073a9eb0924c6e34b60d337092a8c288e7dba5abbe35
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IKeyspaceRef, ITableRef, ITypeRef]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/aws_ce/__init__.py

@@ -2097,3 +2097,6 @@ def _typecheckingstub__8ebb0ce3955d4416c7a704b1a825b845e02eef926e8c0da3592ea7cce
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IAnomalyMonitorRef, IAnomalySubscriptionRef, ICostCategoryRef]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/aws_certificatemanager/__init__.py

@@ -3241,3 +3241,6 @@ def _typecheckingstub__ba22afa55d26d44bc7ab216beab4c3cde2bb1d3e614622e603aa02f7a
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IAccountRef, ICertificate, ICertificateRef]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/aws_chatbot/__init__.py

@@ -3361,3 +3361,6 @@ def _typecheckingstub__4fdcebb1f70802057ca456714a5cc7c631ffe294962d8635781dfb0f0
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [ICustomActionRef, IMicrosoftTeamsChannelConfigurationRef, ISlackChannelConfiguration, ISlackChannelConfigurationRef]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/aws_cleanrooms/__init__.py

@@ -11544,3 +11544,6 @@ def _typecheckingstub__1938eceb4a5ecd53da864bdcbc38554516e8fa365c0dec957d0fe1a8b
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IAnalysisTemplateRef, ICollaborationRef, IConfiguredTableAssociationRef, IConfiguredTableRef, IIdMappingTableRef, IIdNamespaceAssociationRef, IMembershipRef, IPrivacyBudgetTemplateRef]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/aws_cleanroomsml/__init__.py

@@ -1077,3 +1077,6 @@ def _typecheckingstub__960bc53c7c406ea248f393051fd58abbf5074d22e0eb6439f849d7558
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [ITrainingDatasetRef]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/aws_cloud9/__init__.py

@@ -927,3 +927,6 @@ def _typecheckingstub__1f170b124bae07e704d39551c1b3c66810f3a968e777ec40f4c806bb7
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IEnvironmentEC2Ref]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/aws_cloudformation/__init__.py

@@ -11647,3 +11647,6 @@ def _typecheckingstub__fac51adf50f1e69f50b22b703890060df479a7e66c5118fead502297e
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [ICustomResourceRef, IGuardHookRef, IHookDefaultVersionRef, IHookTypeConfigRef, IHookVersionRef, ILambdaHookRef, IMacroRef, IModuleDefaultVersionRef, IModuleVersionRef, IPublicTypeVersionRef, IPublisherRef, IResourceDefaultVersionRef, IResourceVersionRef, IStackRef, IStackSetRef, ITypeActivationRef, IWaitConditionHandleRef, IWaitConditionRef]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/aws_cloudfront/__init__.py

@@ -3265,7 +3265,12 @@ class CachedMethods(
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_cloudfront.CfnAnycastIpListProps",
     jsii_struct_bases=[],
-    name_mapping={"ip_count": "ipCount", "name": "name", "tags": "tags"},
+    name_mapping={
+        "ip_count": "ipCount",
+        "name": "name",
+        "ip_address_type": "ipAddressType",
+        "tags": "tags",
+    },
 )
 class CfnAnycastIpListProps:
     def __init__(
@@ -3273,12 +3278,14 @@ class CfnAnycastIpListProps:
         *,
         ip_count: jsii.Number,
         name: builtins.str,
+        ip_address_type: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Union["CfnAnycastIpList.TagsProperty", typing.Dict[builtins.str, typing.Any]]] = None,
     ) -> None:
         '''Properties for defining a ``CfnAnycastIpList``.
 
         :param ip_count: The number of IP addresses in the Anycast static IP list.
         :param name: The name of the Anycast static IP list.
+        :param ip_address_type: 
         :param tags: A complex type that contains zero or more ``Tag`` elements.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-anycastiplist.html
@@ -3295,6 +3302,7 @@ class CfnAnycastIpListProps:
                 name="name",
             
                 # the properties below are optional
+                ip_address_type="ipAddressType",
                 tags=cloudfront.CfnAnycastIpList.TagsProperty(
                     items=[CfnTag(
                         key="key",
@@ -3309,11 +3317,14 @@ class CfnAnycastIpListProps:
             type_hints = typing.get_type_hints(_typecheckingstub__0531888e60306e7fdb982a8f30e2606d9c2f13802b9db82d7dcaa3a2728264ee)
             check_type(argname="argument ip_count", value=ip_count, expected_type=type_hints["ip_count"])
             check_type(argname="argument name", value=name, expected_type=type_hints["name"])
+            check_type(argname="argument ip_address_type", value=ip_address_type, expected_type=type_hints["ip_address_type"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "ip_count": ip_count,
             "name": name,
         }
+        if ip_address_type is not None:
+            self._values["ip_address_type"] = ip_address_type
         if tags is not None:
             self._values["tags"] = tags
 
@@ -3337,6 +3348,14 @@ class CfnAnycastIpListProps:
         assert result is not None, "Required property 'name' is missing"
         return typing.cast(builtins.str, result)
 
+    @builtins.property
+    def ip_address_type(self) -> typing.Optional[builtins.str]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-anycastiplist.html#cfn-cloudfront-anycastiplist-ipaddresstype
+        '''
+        result = self._values.get("ip_address_type")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def tags(self) -> typing.Optional["CfnAnycastIpList.TagsProperty"]:
         '''A complex type that contains zero or more ``Tag`` elements.
@@ -13457,6 +13476,7 @@ class SecurityPolicyProtocol(enum.Enum):
     TLS_V1_2_2018 = "TLS_V1_2_2018"
     TLS_V1_2_2019 = "TLS_V1_2_2019"
     TLS_V1_2_2021 = "TLS_V1_2_2021"
+    TLS_V1_2_2025 = "TLS_V1_2_2025"
     TLS_V1_3_2025 = "TLS_V1_3_2025"
 
 
@@ -14790,6 +14810,7 @@ class CfnAnycastIpList(
             name="name",
         
             # the properties below are optional
+            ip_address_type="ipAddressType",
             tags=cloudfront.CfnAnycastIpList.TagsProperty(
                 items=[CfnTag(
                     key="key",
@@ -14806,6 +14827,7 @@ class CfnAnycastIpList(
         *,
         ip_count: jsii.Number,
         name: builtins.str,
+        ip_address_type: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Union["CfnAnycastIpList.TagsProperty", typing.Dict[builtins.str, typing.Any]]] = None,
     ) -> None:
         '''
@@ -14813,13 +14835,16 @@ class CfnAnycastIpList(
         :param id: Construct identifier for this resource (unique in its scope).
         :param ip_count: The number of IP addresses in the Anycast static IP list.
         :param name: The name of the Anycast static IP list.
+        :param ip_address_type: 
         :param tags: A complex type that contains zero or more ``Tag`` elements.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__2b13827b228b7c298a17121364286edab0de8f14fd459f83803e07a1c878948b)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
-        props = CfnAnycastIpListProps(ip_count=ip_count, name=name, tags=tags)
+        props = CfnAnycastIpListProps(
+            ip_count=ip_count, name=name, ip_address_type=ip_address_type, tags=tags
+        )
 
         jsii.create(self.__class__, self, [scope, id, props])
 
@@ -14925,6 +14950,18 @@ class CfnAnycastIpList(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "name", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="ipAddressType")
+    def ip_address_type(self) -> typing.Optional[builtins.str]:
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "ipAddressType"))
+
+    @ip_address_type.setter
+    def ip_address_type(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__bdda08ac166df373a10568e7cb5f553dce85744030b95b9b2c0b38cd83c4b095)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "ipAddressType", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> typing.Optional["CfnAnycastIpList.TagsProperty"]:
@@ -14949,6 +14986,7 @@ class CfnAnycastIpList(
             "last_modified_time": "lastModifiedTime",
             "name": "name",
             "status": "status",
+            "ip_address_type": "ipAddressType",
         },
     )
     class AnycastIpListProperty:
@@ -14962,6 +15000,7 @@ class CfnAnycastIpList(
             last_modified_time: builtins.str,
             name: builtins.str,
             status: builtins.str,
+            ip_address_type: typing.Optional[builtins.str] = None,
         ) -> None:
             '''An Anycast static IP list.
 
@@ -14974,6 +15013,7 @@ class CfnAnycastIpList(
             :param last_modified_time: The last time the Anycast static IP list was modified.
             :param name: The name of the Anycast static IP list.
             :param status: The status of the Anycast static IP list. Valid values: ``Deployed`` , ``Deploying`` , or ``Failed`` .
+            :param ip_address_type: 
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-anycastiplist-anycastiplist.html
             :exampleMetadata: fixture=_generated
@@ -14991,7 +15031,10 @@ class CfnAnycastIpList(
                     ip_count=123,
                     last_modified_time="lastModifiedTime",
                     name="name",
-                    status="status"
+                    status="status",
+                
+                    # the properties below are optional
+                    ip_address_type="ipAddressType"
                 )
             '''
             if __debug__:
@@ -15003,6 +15046,7 @@ class CfnAnycastIpList(
                 check_type(argname="argument last_modified_time", value=last_modified_time, expected_type=type_hints["last_modified_time"])
                 check_type(argname="argument name", value=name, expected_type=type_hints["name"])
                 check_type(argname="argument status", value=status, expected_type=type_hints["status"])
+                check_type(argname="argument ip_address_type", value=ip_address_type, expected_type=type_hints["ip_address_type"])
             self._values: typing.Dict[builtins.str, typing.Any] = {
                 "anycast_ips": anycast_ips,
                 "arn": arn,
@@ -15012,6 +15056,8 @@ class CfnAnycastIpList(
                 "name": name,
                 "status": status,
             }
+            if ip_address_type is not None:
+                self._values["ip_address_type"] = ip_address_type
 
         @builtins.property
         def anycast_ips(self) -> typing.List[builtins.str]:
@@ -15085,6 +15131,14 @@ class CfnAnycastIpList(
             assert result is not None, "Required property 'status' is missing"
             return typing.cast(builtins.str, result)
 
+        @builtins.property
+        def ip_address_type(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-anycastiplist-anycastiplist.html#cfn-cloudfront-anycastiplist-anycastiplist-ipaddresstype
+            '''
+            result = self._values.get("ip_address_type")
+            return typing.cast(typing.Optional[builtins.str], result)
+
         def __eq__(self, rhs: typing.Any) -> builtins.bool:
             return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -32141,6 +32195,7 @@ def _typecheckingstub__0531888e60306e7fdb982a8f30e2606d9c2f13802b9db82d7dcaa3a27
     *,
     ip_count: jsii.Number,
     name: builtins.str,
+    ip_address_type: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Union[CfnAnycastIpList.TagsProperty, typing.Dict[builtins.str, typing.Any]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -33130,6 +33185,7 @@ def _typecheckingstub__2b13827b228b7c298a17121364286edab0de8f14fd459f83803e07a1c
     *,
     ip_count: jsii.Number,
     name: builtins.str,
+    ip_address_type: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Union[CfnAnycastIpList.TagsProperty, typing.Dict[builtins.str, typing.Any]]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -33159,6 +33215,12 @@ def _typecheckingstub__ac37e78a6ea86b3ef0227ef8ab78147385ce1b63a99049def4d84be02
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__bdda08ac166df373a10568e7cb5f553dce85744030b95b9b2c0b38cd83c4b095(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__b1d1dfdc7936ba000dfdec659315150c3bf594d4b2b99b2d3b37e510f78d7e57(
     value: typing.Optional[CfnAnycastIpList.TagsProperty],
 ) -> None:
@@ -33174,6 +33236,7 @@ def _typecheckingstub__52438d74e9c64ccb0851ad4bbbcc3d1dab9c3fa5daeefa73f0df7ada7
     last_modified_time: builtins.str,
     name: builtins.str,
     status: builtins.str,
+    ip_address_type: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -35048,3 +35111,6 @@ def _typecheckingstub__5989cbf7079014eacde0ab3a45d42fc3fb56a2cf17ecfbacd7bc46da0
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IAnycastIpListRef, ICachePolicy, ICachePolicyRef, ICloudFrontOriginAccessIdentityRef, IConnectionGroupRef, IContinuousDeploymentPolicyRef, IDistribution, IDistributionRef, IDistributionTenantRef, IFunction, IFunctionRef, IKeyGroup, IKeyGroupRef, IKeyValueStore, IKeyValueStoreRef, IMonitoringSubscriptionRef, IOrigin, IOriginAccessControl, IOriginAccessControlRef, IOriginAccessIdentity, IOriginRequestPolicy, IOriginRequestPolicyRef, IPublicKey, IPublicKeyRef, IRealtimeLogConfig, IRealtimeLogConfigRef, IResponseHeadersPolicy, IResponseHeadersPolicyRef, IStreamingDistributionRef, IVpcOrigin, IVpcOriginRef]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])

aws_cdk/aws_cloudfront/experimental/__init__.py

@@ -499,6 +499,7 @@ class EdgeFunction(
         action: typing.Optional[builtins.str] = None,
         event_source_token: typing.Optional[builtins.str] = None,
         function_url_auth_type: typing.Optional[_FunctionUrlAuthType_9c7b2c86] = None,
+        invoked_via_function_url: typing.Optional[builtins.bool] = None,
         organization_id: typing.Optional[builtins.str] = None,
         scope: typing.Optional[_constructs_77d1e7e8.Construct] = None,
         source_account: typing.Optional[builtins.str] = None,
@@ -511,6 +512,7 @@ class EdgeFunction(
         :param action: The Lambda actions that you want to allow in this statement. For example, you can specify lambda:CreateFunction to specify a certain action, or use a wildcard (``lambda:*``) to grant permission to all Lambda actions. For a list of actions, see Actions and Condition Context Keys for AWS Lambda in the IAM User Guide. Default: 'lambda:InvokeFunction'
         :param event_source_token: A unique token that must be supplied by the principal invoking the function. Default: - The caller would not need to present a token.
         :param function_url_auth_type: The authType for the function URL that you are granting permissions for. Default: - No functionUrlAuthType
+        :param invoked_via_function_url: The condition key for limiting the scope of lambda:InvokeFunction action to Function URL only. When set to true, it restricts the principal in this policy to perform invokes for the resource only via Function URLs. Default: - false
         :param organization_id: The organization you want to grant permissions to. Use this ONLY if you need to grant permissions to a subset of the organization. If you want to grant permissions to the entire organization, sending the organization principal through the ``principal`` property will suffice. You can use this property to ensure that all source principals are owned by a specific organization. Default: - No organizationId
         :param scope: The scope to which the permission constructs be attached. The default is the Lambda function construct itself, but this would need to be different in cases such as cross-stack references where the Permissions would need to sit closer to the consumer of this permission (i.e., the caller). Default: - The instance of lambda.IFunction
         :param source_account: The AWS account ID (without hyphens) of the source owner. For example, if you specify an S3 bucket in the SourceArn property, this value is the bucket owner's account ID. You can use this property to ensure that all source principals are owned by a specific account.
@@ -524,6 +526,7 @@ class EdgeFunction(
             action=action,
             event_source_token=event_source_token,
             function_url_auth_type=function_url_auth_type,
+            invoked_via_function_url=invoked_via_function_url,
             organization_id=organization_id,
             scope=scope,
             source_account=source_account,
@@ -2196,6 +2199,7 @@ def _typecheckingstub__2eb22d84593be3f12d95da9b201a03a4c5bc3b744aa1e4ce7f555d5cd
     action: typing.Optional[builtins.str] = None,
     event_source_token: typing.Optional[builtins.str] = None,
     function_url_auth_type: typing.Optional[_FunctionUrlAuthType_9c7b2c86] = None,
+    invoked_via_function_url: typing.Optional[builtins.bool] = None,
     organization_id: typing.Optional[builtins.str] = None,
     scope: typing.Optional[_constructs_77d1e7e8.Construct] = None,
     source_account: typing.Optional[builtins.str] = None,

aws_cdk/aws_cloudfront_origins/__init__.py

@@ -851,6 +851,41 @@ cloudfront.Distribution(self, "Distribution",
 )
 ```
 
+### Configuring IP Address Type
+
+You can specify which IP protocol CloudFront uses when connecting to your Lambda Function URL origin. By default, CloudFront uses IPv4 only.
+
+```python
+import aws_cdk.aws_lambda as lambda_
+from aws_cdk.aws_cloudfront import OriginIpAddressType
+
+# fn: lambda.Function
+
+fn_url = fn.add_function_url(auth_type=lambda_.FunctionUrlAuthType.NONE)
+
+# Uses default IPv4 only
+cloudfront.Distribution(self, "Distribution",
+    default_behavior=cloudfront.BehaviorOptions(
+        origin=origins.FunctionUrlOrigin(fn_url)
+    )
+)
+
+# Explicitly specify IP address type
+cloudfront.Distribution(self, "Distribution",
+    default_behavior=cloudfront.BehaviorOptions(
+        origin=origins.FunctionUrlOrigin(fn_url,
+            ip_address_type=OriginIpAddressType.DUALSTACK
+        )
+    )
+)
+```
+
+Supported values for `ipAddressType`:
+
+* `OriginIpAddressType.IPV4` - CloudFront uses IPv4 only to connect to the origin (default)
+* `OriginIpAddressType.IPV6` - CloudFront uses IPv6 only to connect to the origin
+* `OriginIpAddressType.DUALSTACK` - CloudFront uses both IPv4 and IPv6 to connect to the origin
+
 ### Lambda Function URL with Origin Access Control (OAC)
 
 You can configure the Lambda Function URL with Origin Access Control (OAC) for enhanced security. When using OAC with Signing SIGV4_ALWAYS, it is recommended to set the Lambda Function URL authType to AWS_IAM to ensure proper authorization.
@@ -972,16 +1007,18 @@ class FunctionUrlOrigin(
     Example::
 
         import aws_cdk.aws_lambda as lambda_
+        
         # fn: lambda.Function
         
+        fn_url = fn.add_function_url(auth_type=lambda_.FunctionUrlAuthType.NONE)
         
-        fn_url = fn.add_function_url(
-            auth_type=lambda_.FunctionUrlAuthType.AWS_IAM
-        )
-        
-        cloudfront.Distribution(self, "MyDistribution",
+        cloudfront.Distribution(self, "Distribution",
             default_behavior=cloudfront.BehaviorOptions(
-                origin=origins.FunctionUrlOrigin.with_origin_access_control(fn_url)
+                origin=origins.FunctionUrlOrigin(fn_url,
+                    read_timeout=Duration.seconds(30),
+                    response_completion_timeout=Duration.seconds(90),
+                    keepalive_timeout=Duration.seconds(45)
+                )
             )
         )
     '''
@@ -990,6 +1027,7 @@ class FunctionUrlOrigin(
         self,
         lambda_function_url: _IFunctionUrl_1a74cd94,
         *,
+        ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
         keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
         read_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_path: typing.Optional[builtins.str] = None,
@@ -1004,6 +1042,7 @@ class FunctionUrlOrigin(
     ) -> None:
         '''
         :param lambda_function_url: -
+        :param ip_address_type: Specifies which IP protocol CloudFront uses when connecting to your origin. If your origin uses both IPv4 and IPv6 protocols, you can choose dualstack to help optimize reliability. Default: OriginIpAddressType.IPV4
         :param keepalive_timeout: Specifies how long, in seconds, CloudFront persists its connection to the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(5)
         :param read_timeout: Specifies how long, in seconds, CloudFront waits for a response from the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(30)
         :param origin_path: An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin. Must begin, but not end, with '/' (e.g., '/production/images'). Default: '/'
@@ -1020,6 +1059,7 @@ class FunctionUrlOrigin(
             type_hints = typing.get_type_hints(_typecheckingstub__fcda903697b26acfe2149a285d5a64619682b675affb52f4ae2d1aca46c8f1c3)
             check_type(argname="argument lambda_function_url", value=lambda_function_url, expected_type=type_hints["lambda_function_url"])
         props = FunctionUrlOriginProps(
+            ip_address_type=ip_address_type,
             keepalive_timeout=keepalive_timeout,
             read_timeout=read_timeout,
             origin_path=origin_path,
@@ -1042,6 +1082,7 @@ class FunctionUrlOrigin(
         lambda_function_url: _IFunctionUrl_1a74cd94,
         *,
         origin_access_control: typing.Optional[_IOriginAccessControl_82a6fe5a] = None,
+        ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
         keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
         read_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_path: typing.Optional[builtins.str] = None,
@@ -1058,6 +1099,7 @@ class FunctionUrlOrigin(
 
         :param lambda_function_url: -
         :param origin_access_control: An optional Origin Access Control. Default: - an Origin Access Control will be created.
+        :param ip_address_type: Specifies which IP protocol CloudFront uses when connecting to your origin. If your origin uses both IPv4 and IPv6 protocols, you can choose dualstack to help optimize reliability. Default: OriginIpAddressType.IPV4
         :param keepalive_timeout: Specifies how long, in seconds, CloudFront persists its connection to the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(5)
         :param read_timeout: Specifies how long, in seconds, CloudFront waits for a response from the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(30)
         :param origin_path: An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin. Must begin, but not end, with '/' (e.g., '/production/images'). Default: '/'
@@ -1075,6 +1117,7 @@ class FunctionUrlOrigin(
             check_type(argname="argument lambda_function_url", value=lambda_function_url, expected_type=type_hints["lambda_function_url"])
         props = FunctionUrlOriginWithOACProps(
             origin_access_control=origin_access_control,
+            ip_address_type=ip_address_type,
             keepalive_timeout=keepalive_timeout,
             read_timeout=read_timeout,
             origin_path=origin_path,
@@ -1316,6 +1359,7 @@ class FunctionUrlOriginBaseProps(_OriginProps_0675928d):
         "origin_shield_region": "originShieldRegion",
         "response_completion_timeout": "responseCompletionTimeout",
         "origin_path": "originPath",
+        "ip_address_type": "ipAddressType",
         "keepalive_timeout": "keepaliveTimeout",
         "read_timeout": "readTimeout",
     },
@@ -1333,6 +1377,7 @@ class FunctionUrlOriginProps(_OriginProps_0675928d):
         origin_shield_region: typing.Optional[builtins.str] = None,
         response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_path: typing.Optional[builtins.str] = None,
+        ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
         keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
         read_timeout: typing.Optional[_Duration_4839e8c3] = None,
     ) -> None:
@@ -1347,6 +1392,7 @@ class FunctionUrlOriginProps(_OriginProps_0675928d):
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
         :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         :param origin_path: An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin. Must begin, but not end, with '/' (e.g., '/production/images'). Default: '/'
+        :param ip_address_type: Specifies which IP protocol CloudFront uses when connecting to your origin. If your origin uses both IPv4 and IPv6 protocols, you can choose dualstack to help optimize reliability. Default: OriginIpAddressType.IPV4
         :param keepalive_timeout: Specifies how long, in seconds, CloudFront persists its connection to the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(5)
         :param read_timeout: Specifies how long, in seconds, CloudFront waits for a response from the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(30)
 
@@ -1381,6 +1427,7 @@ class FunctionUrlOriginProps(_OriginProps_0675928d):
             check_type(argname="argument origin_shield_region", value=origin_shield_region, expected_type=type_hints["origin_shield_region"])
             check_type(argname="argument response_completion_timeout", value=response_completion_timeout, expected_type=type_hints["response_completion_timeout"])
             check_type(argname="argument origin_path", value=origin_path, expected_type=type_hints["origin_path"])
+            check_type(argname="argument ip_address_type", value=ip_address_type, expected_type=type_hints["ip_address_type"])
             check_type(argname="argument keepalive_timeout", value=keepalive_timeout, expected_type=type_hints["keepalive_timeout"])
             check_type(argname="argument read_timeout", value=read_timeout, expected_type=type_hints["read_timeout"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
@@ -1402,6 +1449,8 @@ class FunctionUrlOriginProps(_OriginProps_0675928d):
             self._values["response_completion_timeout"] = response_completion_timeout
         if origin_path is not None:
             self._values["origin_path"] = origin_path
+        if ip_address_type is not None:
+            self._values["ip_address_type"] = ip_address_type
         if keepalive_timeout is not None:
             self._values["keepalive_timeout"] = keepalive_timeout
         if read_timeout is not None:
@@ -1506,6 +1555,17 @@ class FunctionUrlOriginProps(_OriginProps_0675928d):
         result = self._values.get("origin_path")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def ip_address_type(self) -> typing.Optional[_OriginIpAddressType_1c01e1a0]:
+        '''Specifies which IP protocol CloudFront uses when connecting to your origin.
+
+        If your origin uses both IPv4 and IPv6 protocols, you can choose dualstack to help optimize reliability.
+
+        :default: OriginIpAddressType.IPV4
+        '''
+        result = self._values.get("ip_address_type")
+        return typing.cast(typing.Optional[_OriginIpAddressType_1c01e1a0], result)
+
     @builtins.property
     def keepalive_timeout(self) -> typing.Optional[_Duration_4839e8c3]:
         '''Specifies how long, in seconds, CloudFront persists its connection to the origin.
@@ -1559,6 +1619,7 @@ class FunctionUrlOriginProps(_OriginProps_0675928d):
         "origin_shield_region": "originShieldRegion",
         "response_completion_timeout": "responseCompletionTimeout",
         "origin_path": "originPath",
+        "ip_address_type": "ipAddressType",
         "keepalive_timeout": "keepaliveTimeout",
         "read_timeout": "readTimeout",
         "origin_access_control": "originAccessControl",
@@ -1577,6 +1638,7 @@ class FunctionUrlOriginWithOACProps(FunctionUrlOriginProps):
         origin_shield_region: typing.Optional[builtins.str] = None,
         response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_path: typing.Optional[builtins.str] = None,
+        ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
         keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
         read_timeout: typing.Optional[_Duration_4839e8c3] = None,
         origin_access_control: typing.Optional[_IOriginAccessControl_82a6fe5a] = None,
@@ -1592,6 +1654,7 @@ class FunctionUrlOriginWithOACProps(FunctionUrlOriginProps):
         :param origin_shield_region: When you enable Origin Shield in the AWS Region that has the lowest latency to your origin, you can get better network performance. Default: - origin shield not enabled
         :param response_completion_timeout: The time that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection. Valid values are 1-3600 seconds, inclusive. Default: undefined - AWS CloudFront default is not enforcing a maximum value
         :param origin_path: An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin. Must begin, but not end, with '/' (e.g., '/production/images'). Default: '/'
+        :param ip_address_type: Specifies which IP protocol CloudFront uses when connecting to your origin. If your origin uses both IPv4 and IPv6 protocols, you can choose dualstack to help optimize reliability. Default: OriginIpAddressType.IPV4
         :param keepalive_timeout: Specifies how long, in seconds, CloudFront persists its connection to the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(5)
         :param read_timeout: Specifies how long, in seconds, CloudFront waits for a response from the origin. The valid range is from 1 to 180 seconds, inclusive. Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time. Default: Duration.seconds(30)
         :param origin_access_control: An optional Origin Access Control. Default: - an Origin Access Control will be created.
@@ -1634,6 +1697,7 @@ class FunctionUrlOriginWithOACProps(FunctionUrlOriginProps):
             check_type(argname="argument origin_shield_region", value=origin_shield_region, expected_type=type_hints["origin_shield_region"])
             check_type(argname="argument response_completion_timeout", value=response_completion_timeout, expected_type=type_hints["response_completion_timeout"])
             check_type(argname="argument origin_path", value=origin_path, expected_type=type_hints["origin_path"])
+            check_type(argname="argument ip_address_type", value=ip_address_type, expected_type=type_hints["ip_address_type"])
             check_type(argname="argument keepalive_timeout", value=keepalive_timeout, expected_type=type_hints["keepalive_timeout"])
             check_type(argname="argument read_timeout", value=read_timeout, expected_type=type_hints["read_timeout"])
             check_type(argname="argument origin_access_control", value=origin_access_control, expected_type=type_hints["origin_access_control"])
@@ -1656,6 +1720,8 @@ class FunctionUrlOriginWithOACProps(FunctionUrlOriginProps):
             self._values["response_completion_timeout"] = response_completion_timeout
         if origin_path is not None:
             self._values["origin_path"] = origin_path
+        if ip_address_type is not None:
+            self._values["ip_address_type"] = ip_address_type
         if keepalive_timeout is not None:
             self._values["keepalive_timeout"] = keepalive_timeout
         if read_timeout is not None:
@@ -1762,6 +1828,17 @@ class FunctionUrlOriginWithOACProps(FunctionUrlOriginProps):
         result = self._values.get("origin_path")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def ip_address_type(self) -> typing.Optional[_OriginIpAddressType_1c01e1a0]:
+        '''Specifies which IP protocol CloudFront uses when connecting to your origin.
+
+        If your origin uses both IPv4 and IPv6 protocols, you can choose dualstack to help optimize reliability.
+
+        :default: OriginIpAddressType.IPV4
+        '''
+        result = self._values.get("ip_address_type")
+        return typing.cast(typing.Optional[_OriginIpAddressType_1c01e1a0], result)
+
     @builtins.property
     def keepalive_timeout(self) -> typing.Optional[_Duration_4839e8c3]:
         '''Specifies how long, in seconds, CloudFront persists its connection to the origin.
@@ -5770,6 +5847,7 @@ publication.publish()
 def _typecheckingstub__fcda903697b26acfe2149a285d5a64619682b675affb52f4ae2d1aca46c8f1c3(
     lambda_function_url: _IFunctionUrl_1a74cd94,
     *,
+    ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
     keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
     read_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_path: typing.Optional[builtins.str] = None,
@@ -5789,6 +5867,7 @@ def _typecheckingstub__b4d59b7721f41be7903dbcffeddd34d596392d2c8d2a4110f31a4dacd
     lambda_function_url: _IFunctionUrl_1a74cd94,
     *,
     origin_access_control: typing.Optional[_IOriginAccessControl_82a6fe5a] = None,
+    ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
     keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
     read_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_path: typing.Optional[builtins.str] = None,
@@ -5830,6 +5909,7 @@ def _typecheckingstub__56d340a9ac5dd93c6aa22cb98bcbc860fb23f8d247b53c2cd1a51ecd8
     origin_shield_region: typing.Optional[builtins.str] = None,
     response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_path: typing.Optional[builtins.str] = None,
+    ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
     keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
     read_timeout: typing.Optional[_Duration_4839e8c3] = None,
 ) -> None:
@@ -5847,6 +5927,7 @@ def _typecheckingstub__56968af993436ccfcac0aa6a57169f1a033078c10740d435d086816ad
     origin_shield_region: typing.Optional[builtins.str] = None,
     response_completion_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_path: typing.Optional[builtins.str] = None,
+    ip_address_type: typing.Optional[_OriginIpAddressType_1c01e1a0] = None,
     keepalive_timeout: typing.Optional[_Duration_4839e8c3] = None,
     read_timeout: typing.Optional[_Duration_4839e8c3] = None,
     origin_access_control: typing.Optional[_IOriginAccessControl_82a6fe5a] = None,

aws_cdk/aws_cloudtrail/__init__.py

@@ -6556,3 +6556,6 @@ def _typecheckingstub__c36e7d325732c46967fd652ce7b5b56b5b548efaa4c260b4d0918a84e
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IChannelRef, IDashboardRef, IEventDataStoreRef, IResourcePolicyRef, ITrailRef]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])