aws-cdk-lib 2.220.0__py3-none-any.whl → 2.221.0__py3-none-any.whl

aws_cdk/aws_ec2/__init__.py

@@ -2951,6 +2951,9 @@ class AcceleratorManufacturer(enum.Enum):
             propagate_tags=ecs.PropagateManagedInstancesTags.CAPACITY_PROVIDER
         )
         
+        # Optionally configure security group rules using IConnectable interface
+        mi_capacity_provider.connections.allow_from(ec2.Peer.ipv4(vpc.vpc_cidr_block), ec2.Port.tcp(80))
+        
         # Add the capacity provider to the cluster
         cluster.add_managed_instances_capacity_provider(mi_capacity_provider)
         
@@ -6693,7 +6696,7 @@ class CfnCapacityReservationProps:
         :param instance_platform: The type of operating system for which to reserve capacity.
         :param instance_type: The instance type for which to reserve capacity. .. epigraph:: You can request future-dated Capacity Reservations for instance types in the C, M, R, I, T, and G instance families only. For more information, see `Instance types <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html>`_ in the *Amazon EC2 User Guide* .
         :param availability_zone: The Availability Zone in which to create the Capacity Reservation.
-        :param availability_zone_id: The Availability Zone ID of the Capacity Reservation.
+        :param availability_zone_id: The ID of the Availability Zone in which the capacity is reserved.
         :param ebs_optimized: Indicates whether the Capacity Reservation supports EBS-optimized instances. This optimization provides dedicated throughput to Amazon EBS and an optimized configuration stack to provide optimal I/O performance. This optimization isn't available with all instance types. Additional usage charges apply when using an EBS- optimized instance.
         :param end_date: The date and time at which the Capacity Reservation expires. When a Capacity Reservation expires, the reserved capacity is released and you can no longer launch instances into it. The Capacity Reservation's state changes to ``expired`` when it reaches its end date and time. You must provide an ``EndDate`` value if ``EndDateType`` is ``limited`` . Omit ``EndDate`` if ``EndDateType`` is ``unlimited`` . If the ``EndDateType`` is ``limited`` , the Capacity Reservation is cancelled within an hour from the specified time. For example, if you specify 5/31/2019, 13:30:55, the Capacity Reservation is guaranteed to end between 13:30:55 and 14:30:55 on 5/31/2019. If you are requesting a future-dated Capacity Reservation, you can't specify an end date and time that is within the commitment duration.
         :param end_date_type: Indicates the way in which the Capacity Reservation ends. A Capacity Reservation can have one of the following end types: - ``unlimited`` - The Capacity Reservation remains active until you explicitly cancel it. Do not provide an ``EndDate`` if the ``EndDateType`` is ``unlimited`` . - ``limited`` - The Capacity Reservation expires automatically at a specified date and time. You must provide an ``EndDate`` value if the ``EndDateType`` value is ``limited`` .
@@ -6840,7 +6843,7 @@ class CfnCapacityReservationProps:
 
     @builtins.property
     def availability_zone_id(self) -> typing.Optional[builtins.str]:
-        '''The Availability Zone ID of the Capacity Reservation.
+        '''The ID of the Availability Zone in which the capacity is reserved.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-capacityreservation.html#cfn-ec2-capacityreservation-availabilityzoneid
         '''
@@ -12856,6 +12859,7 @@ class CfnLocalGatewayVirtualInterfaceProps:
         "secondary_private_ip_addresses": "secondaryPrivateIpAddresses",
         "subnet_id": "subnetId",
         "tags": "tags",
+        "vpc_id": "vpcId",
     },
 )
 class CfnNatGatewayProps:
@@ -12871,6 +12875,7 @@ class CfnNatGatewayProps:
         secondary_private_ip_addresses: typing.Optional[typing.Sequence[builtins.str]] = None,
         subnet_id: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+        vpc_id: typing.Optional[builtins.str] = None,
     ) -> None:
         '''Properties for defining a ``CfnNatGateway``.
 
@@ -12883,6 +12888,7 @@ class CfnNatGatewayProps:
         :param secondary_private_ip_addresses: Secondary private IPv4 addresses. For more information about secondary addresses, see `Create a NAT gateway <https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-creating>`_ in the *Amazon Virtual Private Cloud User Guide* . ``SecondaryPrivateIpAddressCount`` and ``SecondaryPrivateIpAddresses`` cannot be set at the same time.
         :param subnet_id: The ID of the subnet in which the NAT gateway is located.
         :param tags: The tags for the NAT gateway.
+        :param vpc_id: The ID of the VPC in which the NAT gateway is located.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-natgateway.html
         :exampleMetadata: fixture=_generated
@@ -12905,7 +12911,8 @@ class CfnNatGatewayProps:
                 tags=[CfnTag(
                     key="key",
                     value="value"
-                )]
+                )],
+                vpc_id="vpcId"
             )
         '''
         if __debug__:
@@ -12919,6 +12926,7 @@ class CfnNatGatewayProps:
             check_type(argname="argument secondary_private_ip_addresses", value=secondary_private_ip_addresses, expected_type=type_hints["secondary_private_ip_addresses"])
             check_type(argname="argument subnet_id", value=subnet_id, expected_type=type_hints["subnet_id"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
+            check_type(argname="argument vpc_id", value=vpc_id, expected_type=type_hints["vpc_id"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if allocation_id is not None:
             self._values["allocation_id"] = allocation_id
@@ -12938,6 +12946,8 @@ class CfnNatGatewayProps:
             self._values["subnet_id"] = subnet_id
         if tags is not None:
             self._values["tags"] = tags
+        if vpc_id is not None:
+            self._values["vpc_id"] = vpc_id
 
     @builtins.property
     def allocation_id(self) -> typing.Optional[builtins.str]:
@@ -13040,6 +13050,15 @@ class CfnNatGatewayProps:
         result = self._values.get("tags")
         return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
 
+    @builtins.property
+    def vpc_id(self) -> typing.Optional[builtins.str]:
+        '''The ID of the VPC in which the NAT gateway is located.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-natgateway.html#cfn-ec2-natgateway-vpcid
+        '''
+        result = self._values.get("vpc_id")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -23095,11 +23114,11 @@ class CfnVolumeProps:
         :param availability_zone: The ID of the Availability Zone in which to create the volume. For example, ``us-east-1a`` . Either ``AvailabilityZone`` or ``AvailabilityZoneId`` must be specified, but not both.
         :param auto_enable_io: Indicates whether the volume is auto-enabled for I/O operations. By default, Amazon EBS disables I/O to the volume from attached EC2 instances when it determines that a volume's data is potentially inconsistent. If the consistency of the volume is not a concern, and you prefer that the volume be made available immediately if it's impaired, you can configure the volume to automatically enable I/O.
         :param encrypted: Indicates whether the volume should be encrypted. The effect of setting the encryption state to ``true`` depends on the volume origin (new or from a snapshot), starting encryption state, ownership, and whether encryption by default is enabled. For more information, see `Encryption by default <https://docs.aws.amazon.com/ebs/latest/userguide/work-with-ebs-encr.html#encryption-by-default>`_ in the *Amazon EBS User Guide* . Encrypted Amazon EBS volumes must be attached to instances that support Amazon EBS encryption. For more information, see `Supported instance types <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption-requirements.html#ebs-encryption_supported_instances>`_ .
-        :param iops: The number of I/O operations per second (IOPS). For ``gp3`` , ``io1`` , and ``io2`` volumes, this represents the number of IOPS that are provisioned for the volume. For ``gp2`` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. The following are the supported values for each volume type: - ``gp3`` : 3,000 - 80,000 IOPS - ``io1`` : 100 - 64,000 IOPS - ``io2`` : 100 - 256,000 IOPS For ``io2`` volumes, you can achieve up to 256,000 IOPS on `instances built on the Nitro System <https://docs.aws.amazon.com/ec2/latest/instancetypes/ec2-nitro-instances.html>`_ . On other instances, you can achieve performance up to 32,000 IOPS. This parameter is required for ``io1`` and ``io2`` volumes. The default for ``gp3`` volumes is 3,000 IOPS. This parameter is not supported for ``gp2`` , ``st1`` , ``sc1`` , or ``standard`` volumes.
+        :param iops: The number of I/O operations per second (IOPS) to provision for the volume. Required for ``io1`` and ``io2`` volumes. Optional for ``gp3`` volumes. Omit for all other volume types. Valid ranges: - gp3: ``3,000`` ( *default* ) ``- 80,000`` IOPS - io1: ``100 - 64,000`` IOPS - io2: ``100 - 256,000`` IOPS .. epigraph:: `Instances built on the Nitro System <https://docs.aws.amazon.com/ec2/latest/instancetypes/ec2-nitro-instances.html>`_ can support up to 256,000 IOPS. Other instances can support up to 32,000 IOPS.
         :param kms_key_id: The identifier of the AWS KMS key to use for Amazon EBS encryption. If ``KmsKeyId`` is specified, the encrypted state must be ``true`` . If you omit this property and your account is enabled for encryption by default, or *Encrypted* is set to ``true`` , then the volume is encrypted using the default key specified for your account. If your account does not have a default key, then the volume is encrypted using the AWS managed key . Alternatively, if you want to specify a different key, you can specify one of the following: - Key ID. For example, 1234abcd-12ab-34cd-56ef-1234567890ab. - Key alias. Specify the alias for the key, prefixed with ``alias/`` . For example, for a key with the alias ``my_cmk`` , use ``alias/my_cmk`` . Or to specify the AWS managed key , use ``alias/aws/ebs`` . - Key ARN. For example, arn:aws:kms:us-east-1:012345678910:key/1234abcd-12ab-34cd-56ef-1234567890ab. - Alias ARN. For example, arn:aws:kms:us-east-1:012345678910:alias/ExampleAlias.
         :param multi_attach_enabled: Indicates whether Amazon EBS Multi-Attach is enabled. AWS CloudFormation does not currently support updating a single-attach volume to be multi-attach enabled, updating a multi-attach enabled volume to be single-attach, or updating the size or number of I/O operations per second (IOPS) of a multi-attach enabled volume.
         :param outpost_arn: The Amazon Resource Name (ARN) of the Outpost.
-        :param size: The size of the volume, in GiBs. You must specify either a snapshot ID or a volume size. If you specify a snapshot, the default is the snapshot size. You can specify a volume size that is equal to or larger than the snapshot size. The following are the supported volumes sizes for each volume type: - ``gp2`` : 1 - 16,384 GiB - ``gp3`` : 1 - 65,536 GiB - ``io1`` : 4 - 16,384 GiB - ``io2`` : 4 - 65,536 GiB - ``st1`` and ``sc1`` : 125 - 16,384 GiB - ``standard`` : 1 - 1024 GiB
+        :param size: The size of the volume, in GiBs. You must specify either a snapshot ID or a volume size. If you specify a snapshot, the default is the snapshot size, and you can specify a volume size that is equal to or larger than the snapshot size. Valid sizes: - gp2: ``1 - 16,384`` GiB - gp3: ``1 - 65,536`` GiB - io1: ``4 - 16,384`` GiB - io2: ``4 - 65,536`` GiB - st1 and sc1: ``125 - 16,384`` GiB - standard: ``1 - 1024`` GiB
         :param snapshot_id: The snapshot from which to create the volume. You must specify either a snapshot ID or a volume size.
         :param tags: The tags to apply to the volume during creation.
         :param throughput: The throughput to provision for a volume, with a maximum of 1,000 MiB/s. This parameter is valid only for ``gp3`` volumes. The default value is 125. Valid Range: Minimum value of 125. Maximum value of 1000.
@@ -23221,19 +23240,19 @@ class CfnVolumeProps:
 
     @builtins.property
     def iops(self) -> typing.Optional[jsii.Number]:
-        '''The number of I/O operations per second (IOPS).
+        '''The number of I/O operations per second (IOPS) to provision for the volume.
 
-        For ``gp3`` , ``io1`` , and ``io2`` volumes, this represents the number of IOPS that are provisioned for the volume. For ``gp2`` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting.
+        Required for ``io1`` and ``io2`` volumes. Optional for ``gp3`` volumes. Omit for all other volume types.
 
-        The following are the supported values for each volume type:
+        Valid ranges:
 
-        - ``gp3`` : 3,000 - 80,000 IOPS
-        - ``io1`` : 100 - 64,000 IOPS
-        - ``io2`` : 100 - 256,000 IOPS
+        - gp3: ``3,000`` ( *default* ) ``- 80,000`` IOPS
+        - io1: ``100 - 64,000`` IOPS
+        - io2: ``100 - 256,000`` IOPS
 
-        For ``io2`` volumes, you can achieve up to 256,000 IOPS on `instances built on the Nitro System <https://docs.aws.amazon.com/ec2/latest/instancetypes/ec2-nitro-instances.html>`_ . On other instances, you can achieve performance up to 32,000 IOPS.
+        .. epigraph::
 
-        This parameter is required for ``io1`` and ``io2`` volumes. The default for ``gp3`` volumes is 3,000 IOPS. This parameter is not supported for ``gp2`` , ``st1`` , ``sc1`` , or ``standard`` volumes.
+           `Instances built on the Nitro System <https://docs.aws.amazon.com/ec2/latest/instancetypes/ec2-nitro-instances.html>`_ can support up to 256,000 IOPS. Other instances can support up to 32,000 IOPS.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-volume.html#cfn-ec2-volume-iops
         '''
@@ -23286,16 +23305,16 @@ class CfnVolumeProps:
     def size(self) -> typing.Optional[jsii.Number]:
         '''The size of the volume, in GiBs.
 
-        You must specify either a snapshot ID or a volume size. If you specify a snapshot, the default is the snapshot size. You can specify a volume size that is equal to or larger than the snapshot size.
+        You must specify either a snapshot ID or a volume size. If you specify a snapshot, the default is the snapshot size, and you can specify a volume size that is equal to or larger than the snapshot size.
 
-        The following are the supported volumes sizes for each volume type:
+        Valid sizes:
 
-        - ``gp2`` : 1 - 16,384 GiB
-        - ``gp3`` : 1 - 65,536 GiB
-        - ``io1`` : 4 - 16,384 GiB
-        - ``io2`` : 4 - 65,536 GiB
-        - ``st1`` and ``sc1`` : 125 - 16,384 GiB
-        - ``standard`` : 1 - 1024 GiB
+        - gp2: ``1 - 16,384`` GiB
+        - gp3: ``1 - 65,536`` GiB
+        - io1: ``4 - 16,384`` GiB
+        - io2: ``4 - 65,536`` GiB
+        - st1 and sc1: ``125 - 16,384`` GiB
+        - standard: ``1 - 1024`` GiB
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-volume.html#cfn-ec2-volume-size
         '''
@@ -26037,6 +26056,9 @@ class CpuManufacturer(enum.Enum):
             propagate_tags=ecs.PropagateManagedInstancesTags.CAPACITY_PROVIDER
         )
         
+        # Optionally configure security group rules using IConnectable interface
+        mi_capacity_provider.connections.allow_from(ec2.Peer.ipv4(vpc.vpc_cidr_block), ec2.Port.tcp(80))
+        
         # Add the capacity provider to the cluster
         cluster.add_managed_instances_capacity_provider(mi_capacity_provider)
         
@@ -38749,6 +38771,9 @@ class InstanceRequirementsConfig:
                 propagate_tags=ecs.PropagateManagedInstancesTags.CAPACITY_PROVIDER
             )
             
+            # Optionally configure security group rules using IConnectable interface
+            mi_capacity_provider.connections.allow_from(ec2.Peer.ipv4(vpc.vpc_cidr_block), ec2.Port.tcp(80))
+            
             # Add the capacity provider to the cluster
             cluster.add_managed_instances_capacity_provider(mi_capacity_provider)
             
@@ -47390,7 +47415,7 @@ class Peer(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_ec2.Peer"):
         
         cluster = msk.Cluster(self, "Cluster",
             cluster_name="myCluster",
-            kafka_version=msk.KafkaVersion.V4_0_X_KRAFT,
+            kafka_version=msk.KafkaVersion.V4_1_X_KRAFT,
             vpc=vpc
         )
         
@@ -47712,20 +47737,25 @@ class Port(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_ec2.Port"):
 
     Example::
 
-        # vpc: ec2.Vpc
+        # load_balancer: elbv2.ApplicationLoadBalancer
         
-        cluster = msk.Cluster(self, "Cluster",
-            cluster_name="myCluster",
-            kafka_version=msk.KafkaVersion.V4_0_X_KRAFT,
+        
+        vpc = ec2.Vpc(self, "MyVPC")
+        fleet = codebuild.Fleet(self, "MyProject",
+            compute_type=codebuild.FleetComputeType.MEDIUM,
+            environment_type=codebuild.EnvironmentType.LINUX_CONTAINER,
+            base_capacity=1,
             vpc=vpc
         )
         
-        cluster.connections.allow_from(
-            ec2.Peer.ipv4("1.2.3.4/8"),
-            ec2.Port.tcp(2181))
-        cluster.connections.allow_from(
-            ec2.Peer.ipv4("1.2.3.4/8"),
-            ec2.Port.tcp(9094))
+        fleet.connections.allow_to(load_balancer, ec2.Port.tcp(443))
+        
+        project = codebuild.Project(self, "MyProject",
+            environment=codebuild.BuildEnvironment(
+                fleet=fleet
+            ),
+            build_spec=codebuild.BuildSpec.from_object({})
+        )
     '''
 
     def __init__(
@@ -59011,7 +59041,7 @@ class CfnCapacityReservation(
         :param instance_platform: The type of operating system for which to reserve capacity.
         :param instance_type: The instance type for which to reserve capacity. .. epigraph:: You can request future-dated Capacity Reservations for instance types in the C, M, R, I, T, and G instance families only. For more information, see `Instance types <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html>`_ in the *Amazon EC2 User Guide* .
         :param availability_zone: The Availability Zone in which to create the Capacity Reservation.
-        :param availability_zone_id: The Availability Zone ID of the Capacity Reservation.
+        :param availability_zone_id: The ID of the Availability Zone in which the capacity is reserved.
         :param ebs_optimized: Indicates whether the Capacity Reservation supports EBS-optimized instances. This optimization provides dedicated throughput to Amazon EBS and an optimized configuration stack to provide optimal I/O performance. This optimization isn't available with all instance types. Additional usage charges apply when using an EBS- optimized instance.
         :param end_date: The date and time at which the Capacity Reservation expires. When a Capacity Reservation expires, the reserved capacity is released and you can no longer launch instances into it. The Capacity Reservation's state changes to ``expired`` when it reaches its end date and time. You must provide an ``EndDate`` value if ``EndDateType`` is ``limited`` . Omit ``EndDate`` if ``EndDateType`` is ``unlimited`` . If the ``EndDateType`` is ``limited`` , the Capacity Reservation is cancelled within an hour from the specified time. For example, if you specify 5/31/2019, 13:30:55, the Capacity Reservation is guaranteed to end between 13:30:55 and 14:30:55 on 5/31/2019. If you are requesting a future-dated Capacity Reservation, you can't specify an end date and time that is within the commitment duration.
         :param end_date_type: Indicates the way in which the Capacity Reservation ends. A Capacity Reservation can have one of the following end types: - ``unlimited`` - The Capacity Reservation remains active until you explicitly cancel it. Do not provide an ``EndDate`` if the ``EndDateType`` is ``unlimited`` . - ``limited`` - The Capacity Reservation expires automatically at a specified date and time. You must provide an ``EndDate`` value if the ``EndDateType`` value is ``limited`` .
@@ -59180,7 +59210,7 @@ class CfnCapacityReservation(
     @builtins.property
     @jsii.member(jsii_name="attrCreateDate")
     def attr_create_date(self) -> builtins.str:
-        '''The date and time at which the Capacity Reservation was created.
+        '''The date and time the Capacity Reservation was created.
 
         :cloudformationAttribute: CreateDate
         '''
@@ -59238,7 +59268,7 @@ class CfnCapacityReservation(
     @builtins.property
     @jsii.member(jsii_name="attrStartDate")
     def attr_start_date(self) -> builtins.str:
-        '''The date and time at which the Capacity Reservation was started.
+        '''The date and time the Capacity Reservation was started.
 
         :cloudformationAttribute: StartDate
         '''
@@ -59359,7 +59389,7 @@ class CfnCapacityReservation(
     @builtins.property
     @jsii.member(jsii_name="availabilityZoneId")
     def availability_zone_id(self) -> typing.Optional[builtins.str]:
-        '''The Availability Zone ID of the Capacity Reservation.'''
+        '''The ID of the Availability Zone in which the capacity is reserved.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "availabilityZoneId"))
 
     @availability_zone_id.setter
@@ -81498,7 +81528,8 @@ class CfnNatGateway(
             tags=[CfnTag(
                 key="key",
                 value="value"
-            )]
+            )],
+            vpc_id="vpcId"
         )
     '''
 
@@ -81516,6 +81547,7 @@ class CfnNatGateway(
         secondary_private_ip_addresses: typing.Optional[typing.Sequence[builtins.str]] = None,
         subnet_id: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+        vpc_id: typing.Optional[builtins.str] = None,
     ) -> None:
         '''
         :param scope: Scope in which this resource is defined.
@@ -81529,6 +81561,7 @@ class CfnNatGateway(
         :param secondary_private_ip_addresses: Secondary private IPv4 addresses. For more information about secondary addresses, see `Create a NAT gateway <https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-creating>`_ in the *Amazon Virtual Private Cloud User Guide* . ``SecondaryPrivateIpAddressCount`` and ``SecondaryPrivateIpAddresses`` cannot be set at the same time.
         :param subnet_id: The ID of the subnet in which the NAT gateway is located.
         :param tags: The tags for the NAT gateway.
+        :param vpc_id: The ID of the VPC in which the NAT gateway is located.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__4d23f1a46df0174ce142c0ff05ac9cb901ecac30141c8b466b44569b409414aa)
@@ -81544,6 +81577,7 @@ class CfnNatGateway(
             secondary_private_ip_addresses=secondary_private_ip_addresses,
             subnet_id=subnet_id,
             tags=tags,
+            vpc_id=vpc_id,
         )
 
         jsii.create(self.__class__, self, [scope, id, props])
@@ -81599,6 +81633,14 @@ class CfnNatGateway(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
+    @builtins.property
+    @jsii.member(jsii_name="attrEniId")
+    def attr_eni_id(self) -> builtins.str:
+        '''
+        :cloudformationAttribute: EniId
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrEniId"))
+
     @builtins.property
     @jsii.member(jsii_name="attrNatGatewayId")
     def attr_nat_gateway_id(self) -> builtins.str:
@@ -81753,6 +81795,19 @@ class CfnNatGateway(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "tagsRaw", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="vpcId")
+    def vpc_id(self) -> typing.Optional[builtins.str]:
+        '''The ID of the VPC in which the NAT gateway is located.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "vpcId"))
+
+    @vpc_id.setter
+    def vpc_id(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1a7629fb99b0083bc9b9f7b7909bf15223816d1751b43e5e09c5e00cb6f63a09)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "vpcId", value) # pyright: ignore[reportArgumentType]
+
 
 @jsii.implements(_IInspectable_c2943556, INetworkAclRef, _ITaggable_36806126)
 class CfnNetworkAcl(
@@ -110987,11 +111042,11 @@ class CfnVolume(
         :param availability_zone: The ID of the Availability Zone in which to create the volume. For example, ``us-east-1a`` . Either ``AvailabilityZone`` or ``AvailabilityZoneId`` must be specified, but not both.
         :param auto_enable_io: Indicates whether the volume is auto-enabled for I/O operations. By default, Amazon EBS disables I/O to the volume from attached EC2 instances when it determines that a volume's data is potentially inconsistent. If the consistency of the volume is not a concern, and you prefer that the volume be made available immediately if it's impaired, you can configure the volume to automatically enable I/O.
         :param encrypted: Indicates whether the volume should be encrypted. The effect of setting the encryption state to ``true`` depends on the volume origin (new or from a snapshot), starting encryption state, ownership, and whether encryption by default is enabled. For more information, see `Encryption by default <https://docs.aws.amazon.com/ebs/latest/userguide/work-with-ebs-encr.html#encryption-by-default>`_ in the *Amazon EBS User Guide* . Encrypted Amazon EBS volumes must be attached to instances that support Amazon EBS encryption. For more information, see `Supported instance types <https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption-requirements.html#ebs-encryption_supported_instances>`_ .
-        :param iops: The number of I/O operations per second (IOPS). For ``gp3`` , ``io1`` , and ``io2`` volumes, this represents the number of IOPS that are provisioned for the volume. For ``gp2`` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. The following are the supported values for each volume type: - ``gp3`` : 3,000 - 80,000 IOPS - ``io1`` : 100 - 64,000 IOPS - ``io2`` : 100 - 256,000 IOPS For ``io2`` volumes, you can achieve up to 256,000 IOPS on `instances built on the Nitro System <https://docs.aws.amazon.com/ec2/latest/instancetypes/ec2-nitro-instances.html>`_ . On other instances, you can achieve performance up to 32,000 IOPS. This parameter is required for ``io1`` and ``io2`` volumes. The default for ``gp3`` volumes is 3,000 IOPS. This parameter is not supported for ``gp2`` , ``st1`` , ``sc1`` , or ``standard`` volumes.
+        :param iops: The number of I/O operations per second (IOPS) to provision for the volume. Required for ``io1`` and ``io2`` volumes. Optional for ``gp3`` volumes. Omit for all other volume types. Valid ranges: - gp3: ``3,000`` ( *default* ) ``- 80,000`` IOPS - io1: ``100 - 64,000`` IOPS - io2: ``100 - 256,000`` IOPS .. epigraph:: `Instances built on the Nitro System <https://docs.aws.amazon.com/ec2/latest/instancetypes/ec2-nitro-instances.html>`_ can support up to 256,000 IOPS. Other instances can support up to 32,000 IOPS.
         :param kms_key_id: The identifier of the AWS KMS key to use for Amazon EBS encryption. If ``KmsKeyId`` is specified, the encrypted state must be ``true`` . If you omit this property and your account is enabled for encryption by default, or *Encrypted* is set to ``true`` , then the volume is encrypted using the default key specified for your account. If your account does not have a default key, then the volume is encrypted using the AWS managed key . Alternatively, if you want to specify a different key, you can specify one of the following: - Key ID. For example, 1234abcd-12ab-34cd-56ef-1234567890ab. - Key alias. Specify the alias for the key, prefixed with ``alias/`` . For example, for a key with the alias ``my_cmk`` , use ``alias/my_cmk`` . Or to specify the AWS managed key , use ``alias/aws/ebs`` . - Key ARN. For example, arn:aws:kms:us-east-1:012345678910:key/1234abcd-12ab-34cd-56ef-1234567890ab. - Alias ARN. For example, arn:aws:kms:us-east-1:012345678910:alias/ExampleAlias.
         :param multi_attach_enabled: Indicates whether Amazon EBS Multi-Attach is enabled. AWS CloudFormation does not currently support updating a single-attach volume to be multi-attach enabled, updating a multi-attach enabled volume to be single-attach, or updating the size or number of I/O operations per second (IOPS) of a multi-attach enabled volume.
         :param outpost_arn: The Amazon Resource Name (ARN) of the Outpost.
-        :param size: The size of the volume, in GiBs. You must specify either a snapshot ID or a volume size. If you specify a snapshot, the default is the snapshot size. You can specify a volume size that is equal to or larger than the snapshot size. The following are the supported volumes sizes for each volume type: - ``gp2`` : 1 - 16,384 GiB - ``gp3`` : 1 - 65,536 GiB - ``io1`` : 4 - 16,384 GiB - ``io2`` : 4 - 65,536 GiB - ``st1`` and ``sc1`` : 125 - 16,384 GiB - ``standard`` : 1 - 1024 GiB
+        :param size: The size of the volume, in GiBs. You must specify either a snapshot ID or a volume size. If you specify a snapshot, the default is the snapshot size, and you can specify a volume size that is equal to or larger than the snapshot size. Valid sizes: - gp2: ``1 - 16,384`` GiB - gp3: ``1 - 65,536`` GiB - io1: ``4 - 16,384`` GiB - io2: ``4 - 65,536`` GiB - st1 and sc1: ``125 - 16,384`` GiB - standard: ``1 - 1024`` GiB
         :param snapshot_id: The snapshot from which to create the volume. You must specify either a snapshot ID or a volume size.
         :param tags: The tags to apply to the volume during creation.
         :param throughput: The throughput to provision for a volume, with a maximum of 1,000 MiB/s. This parameter is valid only for ``gp3`` volumes. The default value is 125. Valid Range: Minimum value of 125. Maximum value of 1000.
@@ -111152,7 +111207,7 @@ class CfnVolume(
     @builtins.property
     @jsii.member(jsii_name="iops")
     def iops(self) -> typing.Optional[jsii.Number]:
-        '''The number of I/O operations per second (IOPS).'''
+        '''The number of I/O operations per second (IOPS) to provision for the volume.'''
         return typing.cast(typing.Optional[jsii.Number], jsii.get(self, "iops"))
 
     @iops.setter
@@ -121486,6 +121541,7 @@ def _typecheckingstub__1aba83edf7a8e3f14e1d4f9ca76c7049f7f7c569d2ffb43bcad65b330
     secondary_private_ip_addresses: typing.Optional[typing.Sequence[builtins.str]] = None,
     subnet_id: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    vpc_id: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -128951,6 +129007,7 @@ def _typecheckingstub__4d23f1a46df0174ce142c0ff05ac9cb901ecac30141c8b466b44569b4
     secondary_private_ip_addresses: typing.Optional[typing.Sequence[builtins.str]] = None,
     subnet_id: typing.Optional[builtins.str] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    vpc_id: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -129029,6 +129086,12 @@ def _typecheckingstub__76a6a3daaab575df04de03efcf802de9ee1357d57a0474a96922bc7d4
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__1a7629fb99b0083bc9b9f7b7909bf15223816d1751b43e5e09c5e00cb6f63a09(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__63ab91eb0620cbae6ae1a944345b6c561c70134e58fe810193ad3be248faf08e(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
@@ -135674,3 +135737,6 @@ def _typecheckingstub__08d76813e07f02784a1108bd81a7030a5244d286c7db7897110323a0d
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [ICapacityReservationFleetRef, ICapacityReservationRef, ICarrierGatewayRef, IClientVpnAuthorizationRuleRef, IClientVpnConnectionHandler, IClientVpnEndpoint, IClientVpnEndpointRef, IClientVpnRouteRef, IClientVpnTargetNetworkAssociationRef, IConnectable, ICustomerGatewayRef, IDHCPOptionsRef, IEC2FleetRef, IEIPAssociationRef, IEIPRef, IEgressOnlyInternetGatewayRef, IEnclaveCertificateIamRoleAssociationRef, IFlowLog, IFlowLogRef, IGatewayRouteTableAssociationRef, IGatewayVpcEndpoint, IGatewayVpcEndpointService, IHostRef, IIPAMAllocationRef, IIPAMPoolCidrRef, IIPAMPoolRef, IIPAMRef, IIPAMResourceDiscoveryAssociationRef, IIPAMResourceDiscoveryRef, IIPAMScopeRef, IInstance, IInstanceConnectEndpointRef, IInstanceRef, IInterfaceVpcEndpoint, IInterfaceVpcEndpointService, IInternetGatewayRef, IIpAddresses, IIpPoolRouteTableAssociationRef, IIpv6Addresses, IKeyPair, IKeyPairRef, ILaunchTemplate, ILaunchTemplateRef, ILocalGatewayRouteRef, ILocalGatewayRouteTableRef, ILocalGatewayRouteTableVPCAssociationRef, ILocalGatewayRouteTableVirtualInterfaceGroupAssociationRef, ILocalGatewayVirtualInterfaceGroupRef, ILocalGatewayVirtualInterfaceRef, IMachineImage, INatGatewayRef, INetworkAcl, INetworkAclEntry, INetworkAclEntryRef, INetworkAclRef, INetworkInsightsAccessScopeAnalysisRef, INetworkInsightsAccessScopeRef, INetworkInsightsAnalysisRef, INetworkInsightsPathRef, INetworkInterfaceAttachmentRef, INetworkInterfacePermissionRef, INetworkInterfaceRef, INetworkPerformanceMetricSubscriptionRef, IPeer, IPlacementGroup, IPlacementGroupRef, IPrefixList, IPrefixListRef, IPrivateSubnet, IPublicSubnet, IRouteRef, IRouteServerAssociationRef, IRouteServerEndpointRef, IRouteServerPeerRef, IRouteServerPropagationRef, IRouteServerRef, IRouteTable, IRouteTableRef, ISecurityGroup, ISecurityGroupEgressRef, ISecurityGroupIngressRef, ISecurityGroupRef, ISecurityGroupVpcAssociationRef, ISnapshotBlockPublicAccessRef, ISpotFleetRef, ISubnet, ISubnetCidrBlockRef, ISubnetNetworkAclAssociation, ISubnetNetworkAclAssociationRef, ISubnetRef, ISubnetRouteTableAssociationRef, ITrafficMirrorFilterRef, ITrafficMirrorFilterRuleRef, ITrafficMirrorSessionRef, ITrafficMirrorTargetRef, ITransitGatewayAttachmentRef, ITransitGatewayConnectPeerRef, ITransitGatewayConnectRef, ITransitGatewayMulticastDomainAssociationRef, ITransitGatewayMulticastDomainRef, ITransitGatewayMulticastGroupMemberRef, ITransitGatewayMulticastGroupSourceRef, ITransitGatewayPeeringAttachmentRef, ITransitGatewayRef, ITransitGatewayRouteRef, ITransitGatewayRouteTableAssociationRef, ITransitGatewayRouteTablePropagationRef, ITransitGatewayRouteTableRef, ITransitGatewayVpcAttachmentRef, IVPCBlockPublicAccessExclusionRef, IVPCBlockPublicAccessOptionsRef, IVPCCidrBlockRef, IVPCDHCPOptionsAssociationRef, IVPCEndpointConnectionNotificationRef, IVPCEndpointRef, IVPCEndpointServicePermissionsRef, IVPCEndpointServiceRef, IVPCGatewayAttachmentRef, IVPCPeeringConnectionRef, IVPCRef, IVPNConnectionRef, IVPNConnectionRouteRef, IVPNGatewayRef, IVPNGatewayRoutePropagationRef, IVerifiedAccessEndpointRef, IVerifiedAccessGroupRef, IVerifiedAccessInstanceRef, IVerifiedAccessTrustProviderRef, IVolume, IVolumeAttachmentRef, IVolumeRef, IVpc, IVpcEndpoint, IVpcEndpointService, IVpcEndpointServiceLoadBalancer, IVpnConnection, IVpnGateway]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])