aws-cdk-lib 2.97.1__py3-none-any.whl → 2.98.0__py3-none-any.whl

aws_cdk/aws_ec2/__init__.py

@@ -4887,6 +4887,7 @@ class CfnCapacityReservation(
     For more information, see `Capacity Reservations <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-capacity-reservations.html>`_ in the *Amazon EC2 User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-capacityreservation.html
+    :cloudformationResource: AWS::EC2::CapacityReservation
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -5356,6 +5357,7 @@ class CfnCapacityReservationFleet(
     For more information, see `Capacity Reservation Fleets <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cr-fleets.html>`_ in the *Amazon EC2 User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-capacityreservationfleet.html
+    :cloudformationResource: AWS::EC2::CapacityReservationFleet
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -6404,6 +6406,7 @@ class CfnCarrierGateway(
     For more information about carrier gateways, see `Carrier gateways <https://docs.aws.amazon.com/wavelength/latest/developerguide/how-wavelengths-work.html#wavelength-carrier-gateway>`_ in the *AWS Wavelength Developer Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-carriergateway.html
+    :cloudformationResource: AWS::EC2::CarrierGateway
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -6628,6 +6631,7 @@ class CfnClientVpnAuthorizationRule(
     Ingress authorization rules act as firewall rules that grant access to networks. You must configure ingress authorization rules to enable clients to access resources in AWS or on-premises networks.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-clientvpnauthorizationrule.html
+    :cloudformationResource: AWS::EC2::ClientVpnAuthorizationRule
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -6937,6 +6941,7 @@ class CfnClientVpnEndpoint(
     A Client VPN endpoint is the resource you create and configure to enable and manage client VPN sessions. It is the destination endpoint at which all client VPN sessions are terminated.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-clientvpnendpoint.html
+    :cloudformationResource: AWS::EC2::ClientVpnEndpoint
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -8399,6 +8404,7 @@ class CfnClientVpnRoute(
     A target network association must be created before you can specify a route. If you're setting up all the components of a Client VPN endpoint at the same time, you must use the `DependsOn Attribute <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html>`_ to declare a dependency on the ``AWS::EC2::ClientVpnTargetNetworkAssociation`` resource.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-clientvpnroute.html
+    :cloudformationResource: AWS::EC2::ClientVpnRoute
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -8676,6 +8682,7 @@ class CfnClientVpnTargetNetworkAssociation(
     A target network is a subnet in a VPC. You can associate multiple subnets from the same VPC with a Client VPN endpoint. You can associate only one subnet in each Availability Zone. We recommend that you associate at least two subnets to provide Availability Zone redundancy.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-clientvpntargetnetworkassociation.html
+    :cloudformationResource: AWS::EC2::ClientVpnTargetNetworkAssociation
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -8868,6 +8875,7 @@ class CfnCustomerGateway(
     '''Specifies a customer gateway.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-customergateway.html
+    :cloudformationResource: AWS::EC2::CustomerGateway
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -9185,6 +9193,7 @@ class CfnDHCPOptions(
     You must specify at least one of the following properties: ``DomainNameServers`` , ``NetbiosNameServers`` , ``NtpServers`` . If you specify ``NetbiosNameServers`` , you must specify ``NetbiosNodeType`` .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-dhcpoptions.html
+    :cloudformationResource: AWS::EC2::DHCPOptions
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -9536,6 +9545,7 @@ class CfnEC2Fleet(
     An EC2 Fleet can launch multiple instance types across multiple Availability Zones, using the On-Demand Instance, Reserved Instance, and Spot Instance purchasing models together. Using EC2 Fleet, you can define separate On-Demand and Spot capacity targets, specify the instance types that work best for your applications, and specify how Amazon EC2 should distribute your fleet capacity within each purchasing model. For more information, see `Launching an EC2 Fleet <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet.html>`_ in the *Amazon EC2 User Guide for Linux Instances* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ec2fleet.html
+    :cloudformationResource: AWS::EC2::EC2Fleet
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -13180,6 +13190,7 @@ class CfnEIP(
     For more information, see `Elastic IP Addresses <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/elastic-ip-addresses-eip.html>`_ in the *Amazon EC2 User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-eip.html
+    :cloudformationResource: AWS::EC2::EIP
     :exampleMetadata: infused
 
     Example::
@@ -13387,6 +13398,7 @@ class CfnEIPAssociation(
     You must specify ``AllocationId`` and either ``InstanceId`` , ``NetworkInterfaceId`` , or ``PrivateIpAddress`` .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-eipassociation.html
+    :cloudformationResource: AWS::EC2::EIPAssociation
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -13858,7 +13870,10 @@ class CfnEgressOnlyInternetGateway(
 
     An egress-only internet gateway is used to enable outbound communication over IPv6 from instances in your VPC to the internet, and prevents hosts outside of your VPC from initiating an IPv6 connection with your instance.
 
+    For more information, see `Egress-only internet gateway <https://docs.aws.amazon.com/vpc/latest/userguide/egress-only-internet-gateway.html>`_ in the *Amazon VPC User Guide* .
+
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-egressonlyinternetgateway.html
+    :cloudformationResource: AWS::EC2::EgressOnlyInternetGateway
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -14018,6 +14033,7 @@ class CfnEnclaveCertificateIamRoleAssociation(
     To enable the IAM role to access the Amazon S3 object, you must grant it permission to call ``s3:GetObject`` on the Amazon S3 bucket returned by the command. To enable the IAM role to access the KMS key, you must grant it permission to call ``kms:Decrypt`` on the KMS key returned by the command. For more information, see `Grant the role permission to access the certificate and encryption key <https://docs.aws.amazon.com/enclaves/latest/user/nitro-enclave-refapp.html#add-policy>`_ in the *AWS Nitro Enclaves User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-enclavecertificateiamroleassociation.html
+    :cloudformationResource: AWS::EC2::EnclaveCertificateIamRoleAssociation
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -14232,6 +14248,7 @@ class CfnFlowLog(
     To view the log data, use Amazon CloudWatch Logs (CloudWatch Logs) to help troubleshoot connection issues. For example, you can use a flow log to investigate why certain traffic isn't reaching an instance, which can help you diagnose overly restrictive security group rules. For more information, see `VPC Flow Logs <https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html>`_ in the *Amazon VPC User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-flowlog.html
+    :cloudformationResource: AWS::EC2::FlowLog
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -14926,6 +14943,7 @@ class CfnGatewayRouteTableAssociation(
     The gateway and route table must be in the same VPC. This association causes the incoming traffic to the gateway to be routed according to the routes in the route table.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-gatewayroutetableassociation.html
+    :cloudformationResource: AWS::EC2::GatewayRouteTableAssociation
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -15118,6 +15136,7 @@ class CfnHost(
     Because the host is fully dedicated for your use, it can help you address compliance requirements and reduce costs by allowing you to use your existing server-bound software licenses. For more information, see `Dedicated Hosts <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/dedicated-hosts-overview.html>`_ in the *Amazon EC2 User Guide for Linux Instances* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-host.html
+    :cloudformationResource: AWS::EC2::Host
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -15530,6 +15549,7 @@ class CfnIPAM(
     There are AWS Identity and Access Management (IAM) permissions required to fully manage an IPAM in CloudFormation. For more information, see `Example policy <https://docs.aws.amazon.com//vpc/latest/ipam/iam-ipam-policy-examples.html>`_ in the *Amazon VPC IPAM User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipam.html
+    :cloudformationResource: AWS::EC2::IPAM
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -15825,6 +15845,7 @@ class CfnIPAMAllocation(
     '''In IPAM, an allocation is a CIDR assignment from an IPAM pool to another IPAM pool or to a resource.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipamallocation.html
+    :cloudformationResource: AWS::EC2::IPAMAllocation
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -16107,6 +16128,7 @@ class CfnIPAMPool(
     Pools enable you to organize your IP addresses according to your routing and security needs. For example, if you have separate routing and security needs for development and production applications, you can create a pool for each.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipampool.html
+    :cloudformationResource: AWS::EC2::IPAMPool
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -16616,6 +16638,7 @@ class CfnIPAMPoolCidr(
     '''A CIDR provisioned to an IPAM pool.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipampoolcidr.html
+    :cloudformationResource: AWS::EC2::IPAMPoolCidr
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -17320,6 +17343,7 @@ class CfnIPAMResourceDiscovery(
     '''A resource discovery is an IPAM component that enables IPAM to manage and monitor resources that belong to the owning account.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipamresourcediscovery.html
+    :cloudformationResource: AWS::EC2::IPAMResourceDiscovery
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -17588,6 +17612,7 @@ class CfnIPAMResourceDiscoveryAssociation(
     An associated resource discovery is a resource discovery that has been associated with an IPAM. IPAM aggregates the resource CIDRs discovered by the associated resource discovery.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipamresourcediscoveryassociation.html
+    :cloudformationResource: AWS::EC2::IPAMResourceDiscoveryAssociation
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -18016,6 +18041,7 @@ class CfnIPAMScope(
     For more information, see `How IPAM works <https://docs.aws.amazon.com//vpc/latest/ipam/how-it-works-ipam.html>`_ in the *Amazon VPC IPAM User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipamscope.html
+    :cloudformationResource: AWS::EC2::IPAMScope
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -18300,6 +18326,7 @@ class CfnInstance(
     If an Elastic IP address is attached to your instance, AWS CloudFormation reattaches the Elastic IP address after it updates the instance. For more information about updating stacks, see `AWS CloudFormation Stacks Updates <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks.html>`_ .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-instance.html
+    :cloudformationResource: AWS::EC2::Instance
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -21038,6 +21065,7 @@ class CfnInstanceConnectEndpoint(
     An EC2 Instance Connect Endpoint allows you to connect to an instance, without requiring the instance to have a public IPv4 address. For more information, see `Connect to your instances without requiring a public IPv4 address using EC2 Instance Connect Endpoint <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Connect-using-EC2-Instance-Connect-Endpoint.html>`_ in the *Amazon EC2 User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-instanceconnectendpoint.html
+    :cloudformationResource: AWS::EC2::InstanceConnectEndpoint
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -22280,6 +22308,7 @@ class CfnInternetGateway(
     After creating the Internet gateway, you then attach it to a VPC.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-internetgateway.html
+    :cloudformationResource: AWS::EC2::InternetGateway
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -22457,6 +22486,7 @@ class CfnKeyPair(
     When AWS CloudFormation deletes a key pair that was created or imported by a stack, it also deletes the parameter that was used to store the private key material in Parameter Store.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-keypair.html
+    :cloudformationResource: AWS::EC2::KeyPair
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -22809,6 +22839,7 @@ class CfnLaunchTemplate(
     For more information, see `Launch an instance from a launch template <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-templates.html>`_ in the *Amazon EC2 User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html
+    :cloudformationResource: AWS::EC2::LaunchTemplate
     :exampleMetadata: infused
 
     Example::
@@ -27537,7 +27568,7 @@ class CfnLaunchTemplate(
 
             ``TagSpecification`` is a property type of ```TagSpecifications`` <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications>`_ . ```TagSpecifications`` <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications>`_ is a property of `AWS::EC2::LaunchTemplate LaunchTemplateData <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html>`_ .
 
-            :param resource_type: The type of resource to tag. The ``Valid Values`` are all the resource types that can be tagged. However, when creating a launch template, you can specify tags for the following resource types only: ``instance`` | ``volume`` | ``elastic-gpu`` | ``network-interface`` | ``spot-instances-request`` To tag a resource after it has been created, see `CreateTags <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateTags.html>`_ .
+            :param resource_type: The type of resource to tag. Valid Values lists all resource types for Amazon EC2 that can be tagged. When you create a launch template, you can specify tags for the following resource types only: ``instance`` | ``volume`` | ``elastic-gpu`` | ``network-interface`` | ``spot-instances-request`` . If the instance does include the resource type that you specify, the instance launch fails. For example, not all instance types include an Elastic GPU. To tag a resource after it has been created, see `CreateTags <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateTags.html>`_ .
             :param tags: The tags to apply to the resource.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-tagspecification.html
@@ -27571,7 +27602,7 @@ class CfnLaunchTemplate(
         def resource_type(self) -> typing.Optional[builtins.str]:
             '''The type of resource to tag.
 
-            The ``Valid Values`` are all the resource types that can be tagged. However, when creating a launch template, you can specify tags for the following resource types only: ``instance`` | ``volume`` | ``elastic-gpu`` | ``network-interface`` | ``spot-instances-request``
+            Valid Values lists all resource types for Amazon EC2 that can be tagged. When you create a launch template, you can specify tags for the following resource types only: ``instance`` | ``volume`` | ``elastic-gpu`` | ``network-interface`` | ``spot-instances-request`` . If the instance does include the resource type that you specify, the instance launch fails. For example, not all instance types include an Elastic GPU.
 
             To tag a resource after it has been created, see `CreateTags <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateTags.html>`_ .
 
@@ -27894,6 +27925,7 @@ class CfnLocalGatewayRoute(
     - ``NetworkInterfaceId``
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-localgatewayroute.html
+    :cloudformationResource: AWS::EC2::LocalGatewayRoute
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -28170,6 +28202,7 @@ class CfnLocalGatewayRouteTable(
     '''Describes a local gateway route table.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-localgatewayroutetable.html
+    :cloudformationResource: AWS::EC2::LocalGatewayRouteTable
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -28447,6 +28480,7 @@ class CfnLocalGatewayRouteTableVPCAssociation(
     '''Associates the specified VPC with the specified local gateway route table.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-localgatewayroutetablevpcassociation.html
+    :cloudformationResource: AWS::EC2::LocalGatewayRouteTableVPCAssociation
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -28708,6 +28742,7 @@ class CfnLocalGatewayRouteTableVirtualInterfaceGroupAssociation(
     '''Describes an association between a local gateway route table and a virtual interface group.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-localgatewayroutetablevirtualinterfacegroupassociation.html
+    :cloudformationResource: AWS::EC2::LocalGatewayRouteTableVirtualInterfaceGroupAssociation
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -28990,14 +29025,15 @@ class CfnNatGateway(
 
     You can create either a public NAT gateway or a private NAT gateway. The default is a public NAT gateway. If you create a public NAT gateway, you must specify an elastic IP address.
 
-    With a NAT gateway, instances in a private subnet can connect to the internet, other AWS services, or an on-premises network using the IP address of the NAT gateway. For more information, see `NAT Gateways <https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html>`_ in the *Amazon VPC User Guide* .
+    With a NAT gateway, instances in a private subnet can connect to the internet, other AWS services, or an on-premises network using the IP address of the NAT gateway. For more information, see `NAT gateways <https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html>`_ in the *Amazon VPC User Guide* .
 
     If you add a default route ( ``AWS::EC2::Route`` resource) that points to a NAT gateway, specify the NAT gateway ID for the route's ``NatGatewayId`` property.
     .. epigraph::
 
-       When you associate an EIP or secondary EIPs with a public NAT gateway, the network border group of the EIPs must match the network border group of the Availability Zone (AZ) that the public NAT gateway is in. If it's not the same, the NAT gateway will fail to launch. You can see the network border group for the subnet's AZ by viewing the details of the subnet. Similarly, you can view the network border group of an EIP by viewing the details of the EIP address. For more information about network border groups and EIPs, see `Allocate an Elastic IP address <https://docs.aws.amazon.com/vpc/latest/userguide/vpc-eips.html#allocate-eip>`_ in the *Amazon VPC User Guide* .
+       When you associate an Elastic IP address or secondary Elastic IP address with a public NAT gateway, the network border group of the Elastic IP address must match the network border group of the Availability Zone (AZ) that the public NAT gateway is in. Otherwise, the NAT gateway fails to launch. You can see the network border group for the AZ by viewing the details of the subnet. Similarly, you can view the network border group for the Elastic IP address by viewing its details. For more information, see `Allocate an Elastic IP address <https://docs.aws.amazon.com/vpc/latest/userguide/vpc-eips.html#allocate-eip>`_ in the *Amazon VPC User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-natgateway.html
+    :cloudformationResource: AWS::EC2::NatGateway
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -29470,6 +29506,7 @@ class CfnNetworkAcl(
     '''Specifies a network ACL for your VPC.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkacl.html
+    :cloudformationResource: AWS::EC2::NetworkAcl
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -29601,6 +29638,7 @@ class CfnNetworkAclEntry(
     For information about the protocol value, see `Protocol Numbers <https://docs.aws.amazon.com/https://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml>`_ on the Internet Assigned Numbers Authority (IANA) website.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkaclentry.html
+    :cloudformationResource: AWS::EC2::NetworkAclEntry
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -30308,6 +30346,7 @@ class CfnNetworkInsightsAccessScope(
     Network Access Analyzer identifies unintended network access to your resources on AWS . When you start an analysis on a Network Access Scope, Network Access Analyzer produces findings. For more information, see the `Network Access Analyzer User Guide <https://docs.aws.amazon.com/vpc/latest/network-access-analyzer/>`_ .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkinsightsaccessscope.html
+    :cloudformationResource: AWS::EC2::NetworkInsightsAccessScope
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -31063,6 +31102,7 @@ class CfnNetworkInsightsAccessScopeAnalysis(
     '''Describes a Network Access Scope analysis.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkinsightsaccessscopeanalysis.html
+    :cloudformationResource: AWS::EC2::NetworkInsightsAccessScopeAnalysis
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -31507,6 +31547,7 @@ class CfnNetworkInsightsAnalysis(
     '''Specifies a network insights analysis.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkinsightsanalysis.html
+    :cloudformationResource: AWS::EC2::NetworkInsightsAnalysis
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -34891,6 +34932,7 @@ class CfnNetworkInsightsPath(
     VPC Reachability Analyzer enables you to analyze and debug network reachability between two resources in your virtual private cloud (VPC). For more information, see the `Reachability Analyzer User Guide <https://docs.aws.amazon.com/vpc/latest/reachability/what-is-reachability-analyzer.html>`_ .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkinsightspath.html
+    :cloudformationResource: AWS::EC2::NetworkInsightsPath
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -35621,6 +35663,7 @@ class CfnNetworkInterface(
     '''Describes a network interface in an Amazon EC2 instance for AWS CloudFormation .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkinterface.html
+    :cloudformationResource: AWS::EC2::NetworkInterface
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -36266,6 +36309,7 @@ class CfnNetworkInterfaceAttachment(
     You can use this resource type to attach additional network interfaces to an instance without interruption.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkinterfaceattachment.html
+    :cloudformationResource: AWS::EC2::NetworkInterfaceAttachment
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -36545,6 +36589,7 @@ class CfnNetworkInterfacePermission(
     For example, you can grant an AWS authorized partner account permission to attach the specified network interface to an instance in their account.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkinterfacepermission.html
+    :cloudformationResource: AWS::EC2::NetworkInterfacePermission
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -37112,6 +37157,7 @@ class CfnNetworkPerformanceMetricSubscription(
     '''Describes Infrastructure Performance subscriptions.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkperformancemetricsubscription.html
+    :cloudformationResource: AWS::EC2::NetworkPerformanceMetricSubscription
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -37370,6 +37416,7 @@ class CfnPlacementGroup(
     For more information, see `Placement Groups <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/placement-groups.html>`_ in the *Amazon EC2 User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-placementgroup.html
+    :cloudformationResource: AWS::EC2::PlacementGroup
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -37648,6 +37695,7 @@ class CfnPrefixList(
     You can add one or more entries to the prefix list. Each entry consists of a CIDR block and an optional description.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-prefixlist.html
+    :cloudformationResource: AWS::EC2::PrefixList
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -38085,13 +38133,14 @@ class CfnRoute(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_ec2.CfnRoute",
 ):
-    '''Specifies a route in a route table.
+    '''Specifies a route in a route table. For more information, see `Routes <https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Route_Tables.html#route-table-routes>`_ in the *Amazon VPC User Guide* .
 
-    You must specify either ``DestinationCidrBlock`` or ``DestinationIpv6CidrBlock`` , plus the ID of one of the target resources.
+    You must specify either a destination CIDR block or prefix list ID. You must also specify exactly one of the resources as the target.
 
     If you create a route that references a transit gateway in the same template where you create the transit gateway, you must declare a dependency on the transit gateway attachment. The route table cannot use the transit gateway until it has successfully attached to the VPC. Add a `DependsOn Attribute <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html>`_ in the ``AWS::EC2::Route`` resource to explicitly declare a dependency on the ``AWS::EC2::TransitGatewayAttachment`` resource.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-route.html
+    :cloudformationResource: AWS::EC2::Route
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -38700,9 +38749,10 @@ class CfnRouteTable(
 
     After you create a route table, you can add routes and associate the table with a subnet.
 
-    For more information, see `Route Tables <https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Route_Tables.html>`_ in the *Amazon VPC User Guide* .
+    For more information, see `Route tables <https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Route_Tables.html>`_ in the *Amazon VPC User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-routetable.html
+    :cloudformationResource: AWS::EC2::RouteTable
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -38916,6 +38966,7 @@ class CfnSecurityGroup(
        To cross-reference two security groups in the ingress and egress rules of those security groups, use the `AWS::EC2::SecurityGroupEgress <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-security-group-egress.html>`_ and `AWS::EC2::SecurityGroupIngress <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-security-group-ingress.html>`_ resources to define your rules. Do not use the embedded ingress and egress rules in the ``AWS::EC2::SecurityGroup`` . Doing so creates a circular dependency, which AWS CloudFormation doesn't allow.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-securitygroup.html
+    :cloudformationResource: AWS::EC2::SecurityGroup
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -39635,6 +39686,7 @@ class CfnSecurityGroupEgress(
     Use ``AWS::EC2::SecurityGroupIngress`` and ``AWS::EC2::SecurityGroupEgress`` only when necessary, typically to allow security groups to reference each other in ingress and egress rules. Otherwise, use the embedded ingress and egress rules of the security group. For more information, see `Amazon EC2 Security Groups <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.html>`_ .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-securitygroupegress.html
+    :cloudformationResource: AWS::EC2::SecurityGroupEgress
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -40100,6 +40152,7 @@ class CfnSecurityGroupIngress(
     Rule changes are propagated to instances within the security group as quickly as possible. However, a small delay might occur.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-securitygroupingress.html
+    :cloudformationResource: AWS::EC2::SecurityGroupIngress
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -40865,6 +40918,7 @@ class CfnSpotFleet(
        We strongly discourage using the RequestSpotFleet API because it is a legacy API with no planned investment. For options for requesting Spot Instances, see `Which is the best Spot request method to use? <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-best-practices.html#which-spot-request-method-to-use>`_ in the *Amazon EC2 User Guide for Linux Instances* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-spotfleet.html
+    :cloudformationResource: AWS::EC2::SpotFleet
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -45939,6 +45993,7 @@ class CfnSubnet(
     For more information, see `Subnets for your VPC <https://docs.aws.amazon.com/vpc/latest/userguide/configure-subnets.html>`_ in the *Amazon VPC User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-subnet.html
+    :cloudformationResource: AWS::EC2::Subnet
     :exampleMetadata: infused
 
     Example::
@@ -46432,6 +46487,7 @@ class CfnSubnetCidrBlock(
     You can associate a single IPv6 CIDR block with your subnet. An IPv6 CIDR block must have a prefix length of /64.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-subnetcidrblock.html
+    :cloudformationResource: AWS::EC2::SubnetCidrBlock
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -46629,6 +46685,7 @@ class CfnSubnetNetworkAclAssociation(
     When ``AWS::EC2::SubnetNetworkAclAssociation`` resources are created during create or update operations, AWS CloudFormation adopts existing resources that share the same key properties (the properties that contribute to uniquely identify the resource). However, if the operation fails and rolls back, AWS CloudFormation deletes the previously out-of-band resources. You can protect against this behavior by using ``Retain`` deletion policies. For more information, see `DeletionPolicy Attribute <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html>`_ .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-subnetnetworkaclassociation.html
+    :cloudformationResource: AWS::EC2::SubnetNetworkAclAssociation
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -47095,6 +47152,7 @@ class CfnSubnetRouteTableAssociation(
     The subnet and route table must be in the same VPC. This association causes traffic originating from the subnet to be routed according to the routes in the route table. A route table can be associated with multiple subnets. To create a route table, see `AWS::EC2::RouteTable <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-routetable.html>`_ .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-subnetroutetableassociation.html
+    :cloudformationResource: AWS::EC2::SubnetRouteTableAssociation
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -47291,6 +47349,7 @@ class CfnTrafficMirrorFilter(
     By default, no traffic is mirrored. To mirror traffic, use `AWS::EC2::TrafficMirrorFilterRule <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-trafficmirrorfilterrule.html>`_ to add Traffic Mirror rules to the filter. The rules you add define what traffic gets mirrored.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-trafficmirrorfilter.html
+    :cloudformationResource: AWS::EC2::TrafficMirrorFilter
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -47535,6 +47594,7 @@ class CfnTrafficMirrorFilterRule(
     You need the Traffic Mirror filter ID when you create the rule.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-trafficmirrorfilterrule.html
+    :cloudformationResource: AWS::EC2::TrafficMirrorFilterRule
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -48102,6 +48162,7 @@ class CfnTrafficMirrorSession(
     By default, no traffic is mirrored. Use `AWS::EC2::TrafficMirrorFilterRule <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-trafficmirrorfilterrule.html>`_ to specify filter rules that specify the traffic to mirror.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-trafficmirrorsession.html
+    :cloudformationResource: AWS::EC2::TrafficMirrorSession
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -48527,6 +48588,7 @@ class CfnTrafficMirrorTarget(
     To use the target in a Traffic Mirror session, use `AWS::EC2::TrafficMirrorSession <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-trafficmirrorsession.html>`_ .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-trafficmirrortarget.html
+    :cloudformationResource: AWS::EC2::TrafficMirrorTarget
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -48841,6 +48903,7 @@ class CfnTransitGateway(
     When you create a transit gateway, we create a default transit gateway route table and use it as the default association route table and the default propagation route table. You can use `AWS::EC2::TransitGatewayRouteTable <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewayroutetable.html>`_ to create additional transit gateway route tables. If you disable automatic route propagation, we do not create a default transit gateway route table. You can use `AWS::EC2::TransitGatewayRouteTablePropagation <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewayroutetablepropagation.html>`_ to propagate routes from a resource attachment to a transit gateway route table. If you disable automatic associations, you can use `AWS::EC2::TransitGatewayRouteTableAssociation <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewayroutetableassociation.html>`_ to associate a resource attachment with a transit gateway route table.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgateway.html
+    :cloudformationResource: AWS::EC2::TransitGateway
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -49163,6 +49226,7 @@ class CfnTransitGatewayAttachment(
     To update tags for a VPC attachment after creation without replacing the attachment, use `AWS::EC2::TransitGatewayVpcAttachment <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewayvpcattachment.html>`_ instead.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewayattachment.html
+    :cloudformationResource: AWS::EC2::TransitGatewayAttachment
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -49577,6 +49641,7 @@ class CfnTransitGatewayConnect(
     A Connect attachment uses an existing VPC or AWS Direct Connect attachment as the underlying transport mechanism.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewayconnect.html
+    :cloudformationResource: AWS::EC2::TransitGatewayConnect
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -49913,6 +49978,7 @@ class CfnTransitGatewayMulticastDomain(
     The transit gateway must be in the available state before you create a domain.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewaymulticastdomain.html
+    :cloudformationResource: AWS::EC2::TransitGatewayMulticastDomain
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -50178,6 +50244,7 @@ class CfnTransitGatewayMulticastDomainAssociation(
     The transit gateway attachment must be in the available state before you can add a resource.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewaymulticastdomainassociation.html
+    :cloudformationResource: AWS::EC2::TransitGatewayMulticastDomainAssociation
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -50527,6 +50594,7 @@ class CfnTransitGatewayMulticastGroupMember(
     A member is a network interface associated with a supported EC2 instance that receives multicast traffic. For information about supported instances, see `Multicast Consideration <https://docs.aws.amazon.com/vpc/latest/tgw/transit-gateway-limits.html#multicast-limits>`_ in *Amazon VPC Transit Gateways* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewaymulticastgroupmember.html
+    :cloudformationResource: AWS::EC2::TransitGatewayMulticastGroupMember
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -50819,6 +50887,7 @@ class CfnTransitGatewayMulticastGroupSource(
     A multicast source is a network interface attached to a supported instance that sends multicast traffic. For information about supported instances, see `Multicast Considerations <https://docs.aws.amazon.com/vpc/latest/tgw/transit-gateway-limits.html#multicast-limits>`_ in *Amazon VPC Transit Gateways* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewaymulticastgroupsource.html
+    :cloudformationResource: AWS::EC2::TransitGatewayMulticastGroupSource
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -51113,6 +51182,7 @@ class CfnTransitGatewayPeeringAttachment(
     After you create the peering attachment, the owner of the accepter transit gateway must accept the attachment request.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewaypeeringattachment.html
+    :cloudformationResource: AWS::EC2::TransitGatewayPeeringAttachment
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -51788,6 +51858,7 @@ class CfnTransitGatewayRoute(
     '''Specifies a static route for a transit gateway route table.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewayroute.html
+    :cloudformationResource: AWS::EC2::TransitGatewayRoute
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -52061,6 +52132,7 @@ class CfnTransitGatewayRouteTable(
     '''Specifies a route table for a transit gateway.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewayroutetable.html
+    :cloudformationResource: AWS::EC2::TransitGatewayRouteTable
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -52137,7 +52209,7 @@ class CfnTransitGatewayRouteTable(
     @builtins.property
     @jsii.member(jsii_name="attrTransitGatewayRouteTableId")
     def attr_transit_gateway_route_table_id(self) -> builtins.str:
-        '''Transit Gateway Route Table primary identifier.
+        '''The ID of the transit gateway route table.
 
         :cloudformationAttribute: TransitGatewayRouteTableId
         '''
@@ -52194,6 +52266,7 @@ class CfnTransitGatewayRouteTableAssociation(
     Before you can update the route table associated with an attachment, you must disassociate the transit gateway route table that is currently associated with the attachment. First update the stack to remove the associated transit gateway route table, and then update the stack with the ID of the new transit gateway route table to associate.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewayroutetableassociation.html
+    :cloudformationResource: AWS::EC2::TransitGatewayRouteTableAssociation
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -52389,6 +52462,7 @@ class CfnTransitGatewayRouteTablePropagation(
     For more information about enabling transit gateway route propagation, see `EnableTransitGatewayRouteTablePropagation <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_EnableTransitGatewayRouteTablePropagation.html>`_ in the *Amazon EC2 API Reference* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewayroutetablepropagation.html
+    :cloudformationResource: AWS::EC2::TransitGatewayRouteTablePropagation
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -52659,6 +52733,7 @@ class CfnTransitGatewayVpcAttachment(
     '''Specifies a VPC attachment.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewayvpcattachment.html
+    :cloudformationResource: AWS::EC2::TransitGatewayVpcAttachment
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -53139,9 +53214,10 @@ class CfnVPC(
 
     You can optionally request an IPv6 CIDR block for the VPC. You can request an Amazon-provided IPv6 CIDR block from Amazon's pool of IPv6 addresses, or an IPv6 CIDR block from an IPv6 address pool that you provisioned through bring your own IP addresses (BYOIP).
 
-    For more information, see `Virtual private clouds (VPC) <https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/configure-your-vpc.html>`_ in the *Amazon VPC User Guide* .
+    For more information, see `Virtual private clouds (VPC) <https://docs.aws.amazon.com/vpc/latest/userguide/configure-your-vpc.html>`_ in the *Amazon VPC User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpc.html
+    :cloudformationResource: AWS::EC2::VPC
     :exampleMetadata: infused
 
     Example::
@@ -53428,6 +53504,7 @@ class CfnVPCCidrBlock(
     For more information about associating CIDR blocks with your VPC and applicable restrictions, see `VPC and Subnet Sizing <https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Subnets.html#VPC_Sizing>`_ in the *Amazon VPC User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpccidrblock.html
+    :cloudformationResource: AWS::EC2::VPCCidrBlock
     :exampleMetadata: infused
 
     Example::
@@ -53904,6 +53981,7 @@ class CfnVPCDHCPOptionsAssociation(
     After you associate the options with the VPC, any existing instances and all new instances that you launch in that VPC use the options. You don't need to restart or relaunch the instances. They automatically pick up the changes within a few hours, depending on how frequently the instance renews its DHCP lease. You can explicitly renew the lease using the operating system on the instance.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcdhcpoptionsassociation.html
+    :cloudformationResource: AWS::EC2::VPCDHCPOptionsAssociation
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -54088,6 +54166,7 @@ class CfnVPCEndpoint(
     An endpoint of type ``GatewayLoadBalancer`` provides private connectivity between your VPC and virtual appliances from a service provider.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcendpoint.html
+    :cloudformationResource: AWS::EC2::VPCEndpoint
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -54367,6 +54446,7 @@ class CfnVPCEndpointConnectionNotification(
     You can create a connection notification for interface endpoints only.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcendpointconnectionnotification.html
+    :cloudformationResource: AWS::EC2::VPCEndpointConnectionNotification
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -54447,12 +54527,13 @@ class CfnVPCEndpointConnectionNotification(
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
     @builtins.property
-    @jsii.member(jsii_name="attrId")
-    def attr_id(self) -> builtins.str:
-        '''
-        :cloudformationAttribute: Id
+    @jsii.member(jsii_name="attrVpcEndpointConnectionNotificationId")
+    def attr_vpc_endpoint_connection_notification_id(self) -> builtins.str:
+        '''VPC Endpoint Connection ID generated by service.
+
+        :cloudformationAttribute: VPCEndpointConnectionNotificationId
         '''
-        return typing.cast(builtins.str, jsii.get(self, "attrId"))
+        return typing.cast(builtins.str, jsii.get(self, "attrVpcEndpointConnectionNotificationId"))
 
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
@@ -54836,6 +54917,7 @@ class CfnVPCEndpointService(
     For more information, see the `AWS PrivateLink User Guide <https://docs.aws.amazon.com/vpc/latest/privatelink/>`_ .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcendpointservice.html
+    :cloudformationResource: AWS::EC2::VPCEndpointService
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -55024,6 +55106,7 @@ class CfnVPCEndpointServicePermissions(
     If you grant permissions to all principals, the service is public. Any users who know the name of a public service can send a request to attach an endpoint. If the service does not require manual approval, attachments are automatically approved.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcendpointservicepermissions.html
+    :cloudformationResource: AWS::EC2::VPCEndpointServicePermissions
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -55345,6 +55428,7 @@ class CfnVPCGatewayAttachment(
     '''Attaches an internet gateway, or a virtual private gateway to a VPC, enabling connectivity between the internet and the VPC.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcgatewayattachment.html
+    :cloudformationResource: AWS::EC2::VPCGatewayAttachment
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -55587,6 +55671,7 @@ class CfnVPCPeeringConnection(
     If the requester and acceptor VPCs are in the same account, the peering request is accepted without a peering role.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcpeeringconnection.html
+    :cloudformationResource: AWS::EC2::VPCPeeringConnection
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -56125,6 +56210,7 @@ class CfnVPNConnection(
     For more information, see `AWS Site-to-Site VPN <https://docs.aws.amazon.com/vpn/latest/s2svpn/VPC_VPN.html>`_ in the *AWS Site-to-Site VPN User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpnconnection.html
+    :cloudformationResource: AWS::EC2::VPNConnection
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -56619,6 +56705,7 @@ class CfnVPNConnectionRoute(
     For more information, see `AWS Site-to-Site VPN <https://docs.aws.amazon.com/vpn/latest/s2svpn/VPC_VPN.html>`_ in the *AWS Site-to-Site VPN User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpnconnectionroute.html
+    :cloudformationResource: AWS::EC2::VPNConnectionRoute
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -56808,6 +56895,7 @@ class CfnVPNGateway(
     For more information, see `AWS Site-to-Site VPN <https://docs.aws.amazon.com/vpn/latest/s2svpn/VPC_VPN.html>`_ in the *AWS Site-to-Site VPN User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpngateway.html
+    :cloudformationResource: AWS::EC2::VPNGateway
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -57047,6 +57135,7 @@ class CfnVPNGatewayRoutePropagation(
     If you reference a VPN gateway that is in the same template as your VPN gateway route propagation, you must explicitly declare a dependency on the VPN gateway attachment. The ``AWS::EC2::VPNGatewayRoutePropagation`` resource cannot use the VPN gateway until it has successfully attached to the VPC. Add a `DependsOn Attribute <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html>`_ in the ``AWS::EC2::VPNGatewayRoutePropagation`` resource to explicitly declare a dependency on the VPN gateway attachment.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpngatewayroutepropagation.html
+    :cloudformationResource: AWS::EC2::VPNGatewayRoutePropagation
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -57245,6 +57334,7 @@ class CfnVerifiedAccessEndpoint(
     It must be attached to an AWS Verified Access group. An AWS Verified Access endpoint must also have an attached access policy before you attached it to a group.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-verifiedaccessendpoint.html
+    :cloudformationResource: AWS::EC2::VerifiedAccessEndpoint
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -58110,6 +58200,7 @@ class CfnVerifiedAccessGroup(
     '''Describes a Verified Access group.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-verifiedaccessgroup.html
+    :cloudformationResource: AWS::EC2::VerifiedAccessGroup
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -58462,6 +58553,7 @@ class CfnVerifiedAccessInstance(
     '''Describes a Verified Access instance.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-verifiedaccessinstance.html
+    :cloudformationResource: AWS::EC2::VerifiedAccessInstance
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -59365,6 +59457,7 @@ class CfnVerifiedAccessTrustProvider(
     '''Describes a Verified Access trust provider.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-verifiedaccesstrustprovider.html
+    :cloudformationResource: AWS::EC2::VerifiedAccessTrustProvider
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -60049,6 +60142,7 @@ class CfnVolume(
        If you set a deletion policy that creates a snapshot, all tags on the volume are included in the snapshot.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-volume.html
+    :cloudformationResource: AWS::EC2::Volume
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -60373,6 +60467,7 @@ class CfnVolumeAttachment(
     If the root volume is detached from an instance with an AWS Marketplace product code, then the product codes from that volume are no longer associated with the instance.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-volumeattachment.html
+    :cloudformationResource: AWS::EC2::VolumeAttachment
     :exampleMetadata: fixture=_generated
 
     Example::