agent-claw: automated task changes

cdk/node_modules/aws-cdk-lib/aws-route53/lib/alias-record-target.d.ts

@@ -0,0 +1,31 @@
+import type { IHostedZone } from './hosted-zone-ref';
+import type { IRecordSet } from './record-set';
+/**
+ * Classes that are valid alias record targets, like CloudFront distributions and load
+ * balancers, should implement this interface.
+ */
+export interface IAliasRecordTarget {
+    /**
+     * Return hosted zone ID and DNS name, usable for Route53 alias targets
+     */
+    bind(record: IRecordSet, zone?: IHostedZone): AliasRecordTargetConfig;
+}
+/**
+ * Represents the properties of an alias target destination.
+ */
+export interface AliasRecordTargetConfig {
+    /**
+     * Hosted zone ID of the target
+     */
+    readonly hostedZoneId: string;
+    /**
+     * DNS name of the target
+     */
+    readonly dnsName: string;
+    /**
+     * Evaluate the target health
+     *
+     * @default - no health check configuration
+     */
+    readonly evaluateTargetHealth?: boolean;
+}

cdk/node_modules/aws-cdk-lib/aws-route53/lib/alias-record-target.js

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0});

cdk/node_modules/aws-cdk-lib/aws-route53/lib/cidr-routing-config.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Properties for configuring CIDR routing in Route 53 resource record set objects.
+ */
+export interface CidrRoutingConfigProps {
+    /**
+     * The CIDR collection ID.
+     */
+    readonly collectionId: string;
+    /**
+     * The CIDR collection location name.
+     *
+     * @default `*`
+     */
+    readonly locationName?: string;
+}
+/**
+ * Configuration for CIDR routing in Route 53 resource record set objects.
+ *
+ * @see https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53-recordset.html#cfn-route53-recordset-cidrroutingconfig
+ */
+export declare class CidrRoutingConfig {
+    /**
+     * Creates a new instance of CidrRoutingConfig
+     */
+    static create(props: CidrRoutingConfigProps): CidrRoutingConfig;
+    /**
+     * Creates a new instance of CidrRoutingConfig for default CIDR record. This method defines the locationName as `*`.
+     * @param collectionId The CIDR collection ID.
+     * @returns A new instance of CidrRoutingConfig with the default location name as `*`.
+     */
+    static withDefaultLocationName(collectionId: string): CidrRoutingConfig;
+    /**
+     * The CIDR collection ID.
+     */
+    readonly collectionId: string;
+    /**
+     * The CIDR collection location name.
+     */
+    readonly locationName: string;
+    private constructor();
+}

cdk/node_modules/aws-cdk-lib/aws-route53/lib/cidr-routing-config.js

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.CidrRoutingConfig=void 0;var jsiiDeprecationWarnings=()=>{var tmp=require("../../.warnings.jsii.js");return jsiiDeprecationWarnings=()=>tmp,tmp};const JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti");var core_1=()=>{var tmp=require("../../core");return core_1=()=>tmp,tmp},literal_string_1=()=>{var tmp=require("../../core/lib/private/literal-string");return literal_string_1=()=>tmp,tmp};class CidrRoutingConfig{static[JSII_RTTI_SYMBOL_1]={fqn:"aws-cdk-lib.aws_route53.CidrRoutingConfig",version:"2.252.0"};static create(props){try{jsiiDeprecationWarnings().aws_cdk_lib_aws_route53_CidrRoutingConfigProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.create),error}return new CidrRoutingConfig(props)}static withDefaultLocationName(collectionId){return new CidrRoutingConfig({collectionId,locationName:"*"})}collectionId;locationName;constructor(props){const COLLECTION_ID_REGEX=/^[0-9a-f]{8}-(?:[0-9a-f]{4}-){3}[0-9a-f]{12}$/,LOCATION_NAME_REGEX=/^[0-9A-Za-z_\-\*]{1,16}$/;if(!core_1().Token.isUnresolved(props.collectionId)&&!COLLECTION_ID_REGEX.test(props.collectionId))throw new(core_1()).UnscopedValidationError((0,literal_string_1().lit)`IsRequiredCollectionidRequiredValid`,`collectionId(${props.collectionId}) is required and must be a valid UUID in the format: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx(8-4-4-4-12 hexadecimal digits)`);if(!core_1().Token.isUnresolved(props.locationName)&&(!props.locationName||!LOCATION_NAME_REGEX.test(props.locationName)))throw new(core_1()).UnscopedValidationError((0,literal_string_1().lit)`IsRequiredLocationnameRequired116`,`locationName(${props.locationName}) is required and must be 1-16 characters long, containing only letters, numbers, underscores, hyphens, or asterisks`);this.collectionId=props.collectionId,this.locationName=props.locationName??"*"}}exports.CidrRoutingConfig=CidrRoutingConfig;

cdk/node_modules/aws-cdk-lib/aws-route53/lib/geo-location.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Routing based on geographical location.
+ */
+export declare class GeoLocation {
+    readonly continentCode: Continent | undefined;
+    readonly countryCode: string | undefined;
+    readonly subdivisionCode: string | undefined;
+    /**
+     * Geolocation resource record based on continent code.
+     * @param continentCode Continent.
+     * @returns Continent-based geolocation record
+     */
+    static continent(continentCode: Continent): GeoLocation;
+    /**
+     * Geolocation resource record based on country code.
+     * @param countryCode Two-letter, uppercase country code for the country.
+     * See ISO 3166-1-alpha-2 code on the *International Organization for Standardization* website
+     * @see https://docs.aws.amazon.com/Route53/latest/APIReference/API_GeoLocation.html#Route53-Type-GeoLocation-CountryCode
+     * @see https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2
+     * @returns Country-based geolocation record
+     */
+    static country(countryCode: string): GeoLocation;
+    /**
+     * Geolocation resource record based on subdivision code (e.g. state of the United States).
+     * @param subdivisionCode Code of the subdivision (e.g. state of the United States)
+     * @param countryCode Country code (ISO 3166-1-alpha-2) of this record, by default US (United States).
+     * @see https://pe.usps.com/text/pub28/28apb.htm
+     * @see https://docs.aws.amazon.com/Route53/latest/APIReference/API_GeoLocation.html#Route53-Type-GeoLocation-SubdivisionCode
+     */
+    static subdivision(subdivisionCode: string, countryCode?: string): GeoLocation;
+    /**
+     * Default (wildcard) routing record if no specific geolocation record is found.
+     * @returns Wildcard routing record
+     */
+    static default(): GeoLocation;
+    private static COUNTRY_REGEX;
+    private static COUNTRY_FOR_SUBDIVISION_REGEX;
+    private static SUBDIVISION_REGEX;
+    private static validateCountry;
+    private static validateCountryForSubdivision;
+    private static validateSubDivision;
+    private constructor();
+}
+/**
+ * Continents for geolocation routing.
+ */
+export declare enum Continent {
+    /**
+     * Africa
+     */
+    AFRICA = "AF",
+    /**
+     * Antarctica
+     */
+    ANTARCTICA = "AN",
+    /**
+     * Asia
+     */
+    ASIA = "AS",
+    /**
+     * Europe
+     */
+    EUROPE = "EU",
+    /**
+     * Oceania
+     */
+    OCEANIA = "OC",
+    /**
+     * North America
+     */
+    NORTH_AMERICA = "NA",
+    /**
+     * South America
+     */
+    SOUTH_AMERICA = "SA"
+}

cdk/node_modules/aws-cdk-lib/aws-route53/lib/geo-location.js

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.Continent=exports.GeoLocation=void 0;var jsiiDeprecationWarnings=()=>{var tmp=require("../../.warnings.jsii.js");return jsiiDeprecationWarnings=()=>tmp,tmp};const JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti");var errors_1=()=>{var tmp=require("../../core/lib/errors");return errors_1=()=>tmp,tmp},literal_string_1=()=>{var tmp=require("../../core/lib/private/literal-string");return literal_string_1=()=>tmp,tmp};class GeoLocation{continentCode;countryCode;subdivisionCode;static[JSII_RTTI_SYMBOL_1]={fqn:"aws-cdk-lib.aws_route53.GeoLocation",version:"2.252.0"};static continent(continentCode){try{jsiiDeprecationWarnings().aws_cdk_lib_aws_route53_Continent(continentCode)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.continent),error}return new GeoLocation(continentCode,void 0,void 0)}static country(countryCode){return new GeoLocation(void 0,countryCode,void 0)}static subdivision(subdivisionCode,countryCode="US"){return new GeoLocation(void 0,countryCode,subdivisionCode)}static default(){return new GeoLocation(void 0,"*",void 0)}static COUNTRY_REGEX=/(^[A-Z]{2}|^\*{1})$/;static COUNTRY_FOR_SUBDIVISION_REGEX=/\b(?:UA|US)\b/;static SUBDIVISION_REGEX=/^[A-Z0-9]{1,3}$/;static validateCountry(country){if(!GeoLocation.COUNTRY_REGEX.test(country))throw new(errors_1()).UnscopedValidationError((0,literal_string_1().lit)`InvalidCountryFormatCountry`,`Invalid country format for country: ${country}, country should be two-letter and uppercase country ISO 3166-1-alpha-2 code`)}static validateCountryForSubdivision(country){if(!GeoLocation.COUNTRY_FOR_SUBDIVISION_REGEX.test(country))throw new(errors_1()).UnscopedValidationError((0,literal_string_1().lit)`InvalidCountrySubdivisionsGeolocation`,`Invalid country for subdivisions geolocation: ${country}, only UA (Ukraine) and US (United states) are supported`)}static validateSubDivision(subDivision){if(!GeoLocation.SUBDIVISION_REGEX.test(subDivision))throw new(errors_1()).UnscopedValidationError((0,literal_string_1().lit)`InvalidSubdivisionFormatSubdivision`,`Invalid subdivision format for subdivision: ${subDivision}, subdivision should be alphanumeric and between 1 and 3 characters`)}constructor(continentCode,countryCode,subdivisionCode){this.continentCode=continentCode,this.countryCode=countryCode,this.subdivisionCode=subdivisionCode,subdivisionCode&&countryCode&&(GeoLocation.validateCountryForSubdivision(countryCode),GeoLocation.validateSubDivision(subdivisionCode)),countryCode&&GeoLocation.validateCountry(countryCode)}}exports.GeoLocation=GeoLocation;var Continent;(function(Continent2){Continent2.AFRICA="AF",Continent2.ANTARCTICA="AN",Continent2.ASIA="AS",Continent2.EUROPE="EU",Continent2.OCEANIA="OC",Continent2.NORTH_AMERICA="NA",Continent2.SOUTH_AMERICA="SA"})(Continent||(exports.Continent=Continent={}));

cdk/node_modules/aws-cdk-lib/aws-route53/lib/health-check.d.ts

@@ -0,0 +1,263 @@
+import type { Construct } from 'constructs';
+import type { IResource } from '../../core';
+import { Duration, Resource } from '../../core';
+import type { HealthCheckReference, IHealthCheckRef } from '../../interfaces/generated/aws-route53-interfaces.generated';
+/**
+ * Imported or created health check
+ */
+export interface IHealthCheck extends IResource, IHealthCheckRef {
+    /**
+     * The ID of the health check.
+     *
+     * @attribute
+     */
+    readonly healthCheckId: string;
+}
+/**
+ * The type of health check to be associated with the record.
+ */
+export declare enum HealthCheckType {
+    /**
+     * HTTP health check
+     *
+     * Route 53 tries to establish a TCP connection. If successful, Route 53 submits an HTTP request and waits for an HTTP status code of 200 or greater and less than 400.
+     */
+    HTTP = "HTTP",
+    /**
+     * HTTPS health check
+     *
+     * Route 53 tries to establish a TCP connection. If successful, Route 53 submits an HTTPS request and waits for an HTTP status code of 200 or greater and less than 400.
+     */
+    HTTPS = "HTTPS",
+    /**
+     * HTTP health check with string matching
+     *
+     * Route 53 tries to establish a TCP connection. If successful, Route 53 submits an HTTP request and searches the first 5,120 bytes of the response body for the string that you specify in SearchString.
+     */
+    HTTP_STR_MATCH = "HTTP_STR_MATCH",
+    /**
+     * HTTPS health check with string matching
+     *
+     * Route 53 tries to establish a TCP connection. If successful, Route 53 submits an HTTPS request and searches the first 5,120 bytes of the response body for the string that you specify in SearchString.
+     */
+    HTTPS_STR_MATCH = "HTTPS_STR_MATCH",
+    /**
+     * TCP health check
+     *
+     * Route 53 tries to establish a TCP connection.
+     */
+    TCP = "TCP",
+    /**
+     * CloudWatch metric health check
+     *
+     * The health check is associated with a CloudWatch alarm. If the state of the alarm is OK, the health check is considered healthy. If the state is ALARM, the health check is considered unhealthy. If CloudWatch doesn't have sufficient data to determine whether the state is OK or ALARM, the health check status depends on the setting for InsufficientDataHealthStatus: Healthy, Unhealthy, or LastKnownStatus.
+     */
+    CLOUDWATCH_METRIC = "CLOUDWATCH_METRIC",
+    /**
+     * Calculated health check
+     *
+     * For health checks that monitor the status of other health checks, Route 53 adds up the number of health checks that Route 53 health checkers consider to be healthy and compares that number with the value of HealthThreshold.
+     */
+    CALCULATED = "CALCULATED",
+    /**
+     * Recovery control health check
+     *
+     * The health check is associated with a Route53 Application Recovery Controller routing control. If the routing control state is ON, the health check is considered healthy. If the state is OFF, the health check is considered unhealthy.
+     */
+    RECOVERY_CONTROL = "RECOVERY_CONTROL"
+}
+/**
+ * Properties for a new health check.
+ */
+export interface HealthCheckProps {
+    /**
+     * The type of health check to be associated with the record.
+     */
+    readonly type: HealthCheckType;
+    /**
+     * CloudWatch alarm that you want Amazon Route 53 health checkers to use to determine whether the specified health check is healthy.
+     *
+     * @default - if the type is CLOUDWATCH_METRIC, this property is required. Otherwise, it is not configured.
+     */
+    readonly alarmIdentifier?: AlarmIdentifier;
+    /**
+     * A list of health checks to monitor for this 'CALCULATED' health check.
+     *
+     * @default - if the type is CALCULATED, this property is required. Otherwise, it is not configured.
+     */
+    readonly childHealthChecks?: IHealthCheck[];
+    /**
+     * Specify whether you want Amazon Route 53 to send the value of FullyQualifiedDomainName to the endpoint in the client_hello message during TLS negotiation. This allows the endpoint to respond to HTTPS health check requests with the applicable SSL/TLS certificate.
+     *
+     * @default - if the type is HTTPS or HTTPS_STR_MATCH, this property default value is true. Otherwise, it is not configured.
+     */
+    readonly enableSNI?: boolean;
+    /**
+     * The number of consecutive health checks that an endpoint must pass or fail for Amazon Route 53 to change the current status of the endpoint from unhealthy to healthy or vice versa.
+     *
+     * @default - if the type is CALCULATED it's not configured
+     * - if the type is CLOUDWATCH_METRIC it's not configured
+     * - otherwise, the default value is 3.
+     */
+    readonly failureThreshold?: number;
+    /**
+     * Fully qualified domain name of the endpoint to be checked.
+     *
+     * Amazon Route 53 behavior depends on whether you specify a value for IPAddress.
+     *
+     * If you specify a value for IPAddress:
+     *
+     * Amazon Route 53 sends health check requests to the specified IPv4 or IPv6 address and passes the value of FullyQualifiedDomainName in the Host header for all health checks except TCP health checks. This is typically the fully qualified DNS name of the endpoint on which you want Route 53 to perform health checks.
+     * Note: If you specify a value for Port property other than 80 or 443, Route 53 will construct the value for Host header as FullyQualifiedDomainName:Port.
+     *
+     * If you don't specify a value for IPAddress:
+     *
+     * Route 53 sends a DNS request to the domain that you specify for FullyQualifiedDomainName at the interval that you specify for RequestInterval. Using an IPv4 address that DNS returns, Route 53 then checks the health of the endpoint.
+     *
+     * Additionally, if the type of the health check is HTTP, HTTPS, HTTP_STR_MATCH, or HTTPS_STR_MATCH, Route 53 passes the value of FullyQualifiedDomainName in the Host header, as it does when you specify value for IPAddress. If the type is TCP, Route 53 doesn't pass a Host header.
+     *
+     * @default - not configured
+     */
+    readonly fqdn?: string;
+    /**
+     * The number of child health checks that are associated with a CALCULATED health that Amazon Route 53 must consider healthy for the CALCULATED health check to be considered healthy.
+     *
+     * @default - if the type is CALCULATED, the default value is number of child health checks. Otherwise, it is not configured.
+     */
+    readonly healthThreshold?: number;
+    /**
+     * The status of the health check when CloudWatch has insufficient data about the state of associated alarm.
+     *
+     * @default - if the type is CLOUDWATCH_METRIC, the default value is InsufficientDataHealthStatus.LAST_KNOWN_STATUS. Otherwise, it is not configured.
+     */
+    readonly insufficientDataHealthStatus?: InsufficientDataHealthStatusEnum;
+    /**
+     * Specify whether you want Amazon Route 53 to invert the status of a health check, so a health check that would normally be considered unhealthy is considered healthy, and vice versa.
+     *
+     * @default false
+     */
+    readonly inverted?: boolean;
+    /**
+     * The IPv4 or IPv6 IP address for the endpoint that you want Amazon Route 53 to perform health checks on. If you don't specify a value for IPAddress, Route 53 sends a DNS request to resolve the domain name that you specify in FullyQualifiedDomainName at the interval that you specify in RequestInterval. Using an IPv4 address that DNS returns, Route 53 then checks the health of the endpoint.
+     *
+     * @default - not configured
+     */
+    readonly ipAddress?: string;
+    /**
+     * Specify whether you want Amazon Route 53 to measure the latency between health checkers in multiple AWS regions and your endpoint, and to display CloudWatch latency graphs on the Health Checks page in the Route 53 console.
+     *
+     * @default - if the type is CALCULATED it's not configured
+     * - if the type is CLOUDWATCH_METRIC it's not configured
+     * - otherwise, the default value is false.
+     */
+    readonly measureLatency?: boolean;
+    /**
+     * The port on the endpoint that you want Amazon Route 53 to perform health checks on.
+     *
+     * @default - if the type is HTTP or HTTP_STR_MATCH, the default value is 80.
+     * - if the type is HTTPS or HTTPS_STR_MATCH, the default value is 443.
+     * - otherwise, it is not configured.
+     */
+    readonly port?: number;
+    /**
+     * An array of region identifiers that you want Amazon Route 53 health checkers to check the health of the endpoint from.
+     *
+     * Please refer to the CloudFormation documentation for the most up-to-date list of regions. @see https://docs.aws.amazon.com/Route53/latest/APIReference/API_HealthCheckConfig.html
+     *
+     * @default - if the type is CALCULATED, CLOUDWATCH_METRIC, or RECOVERY_CONTROL, this property is not configured.
+     * - otherwise, the default value will be set by CloudFormation itself and will include all valid regions. Please refer to the CloudFormation documentation for the most up-to-date list of regions.
+     */
+    readonly regions?: string[];
+    /**
+     * The duration between the time that Amazon Route 53 gets a response from your endpoint and the time that it sends the next health check request. Each Route 53 health checker makes requests at this interval.
+     *
+     * @default - if the type is CALCULATED it's not configured
+     * - if the type is CLOUDWATCH_METRIC it's not configured
+     * - otherwise, the default value is 30 seconds.
+     */
+    readonly requestInterval?: Duration;
+    /**
+     * The path that you want Amazon Route 53 to request when performing health checks. The path can be any value for which your endpoint will return an HTTP status code of 2xx or 3xx when the endpoint is healthy, for example the file /docs/route53-health-check.html. Route 53 automatically adds the DNS name for the service and a leading forward slash (/) character.
+     *
+     * @default - if the type is HTTP, HTTPS, HTTP_STR_MATCH, or HTTPS_STR_MATCH, the default value is empty string.
+     * - otherwise, it is not configured.
+     */
+    readonly resourcePath?: string;
+    /**
+     * The Amazon Resource Name (ARN) of the Route 53 Application Recovery Controller routing control that you want Amazon Route 53 health checkers to use to determine whether the specified health check is healthy.
+     *
+     * @default - if the type is RECOVERY_CONTROL, this property is required. Otherwise, it is not configured.
+     */
+    readonly routingControl?: string;
+    /**
+     * The string that you want Amazon Route 53 to search for in the response body from the specified resource. If the string appears in the response body, Route 53 considers the resource healthy.
+     *
+     * Route 53 considers case when searching for SearchString in the response body.
+     *
+     * @default - if the type is HTTP_STR_MATCH or HTTPS_STR_MATCH, this property is required. Otherwise, it is not configured.
+     */
+    readonly searchString?: string;
+}
+/**
+ * Amazon Route 53 health checks monitor the health and performance of your web applications, web servers, and other resources. Each health check that you create can monitor one of the following:
+ * - The health of a resource, such as a web server,
+ * - The status of other health checks, and
+ * - The CloudWatch alarm that you specify,
+ * - The status of an Amazon Route 53 routing control.
+ */
+export declare class HealthCheck extends Resource implements IHealthCheck {
+    /**
+     * Uniquely identifies this class.
+     */
+    static readonly PROPERTY_INJECTION_ID: string;
+    /**
+     * Import an existing health check into this CDK app.
+     *
+     * @param scope The parent creating construct (usually `this`).
+     * @param id The construct's name.
+     * @param healthCheckId ID of the health check.
+     * @returns a reference to the existing health check.
+     */
+    static fromHealthCheckId(scope: Construct, id: string, healthCheckId: string): IHealthCheck;
+    readonly healthCheckId: string;
+    get healthCheckRef(): HealthCheckReference;
+    /**
+     * Creates a new health check.
+     *
+     * @param scope The parent creating construct (usually `this`).
+     * @param id The construct's name.
+     * @param props the properties of the new health check.
+     * @returns a reference to the newly created health check.
+     */
+    constructor(scope: Construct, id: string, props: HealthCheckProps);
+}
+/**
+ * The status of the health check when CloudWatch has insufficient data about the state of associated alarm.
+ */
+export declare enum InsufficientDataHealthStatusEnum {
+    /**
+     * Route 53 health check status will be healthy.
+     */
+    HEALTHY = "Healthy",
+    /**
+     * Route 53 health check status will be unhealthy.
+     */
+    UNHEALTHY = "Unhealthy",
+    /**
+     * Route 53 health check status will be the status of the health check before Route 53 had insufficient data.
+     */
+    LAST_KNOWN_STATUS = "LastKnownStatus"
+}
+/**
+ * A CloudWatch alarm that you want Amazon Route 53 health checker to use to determine whether this health check is healthy.
+ */
+export interface AlarmIdentifier {
+    /**
+     * The region of the CloudWatch alarm that you want Amazon Route 53 health checkers to use to determine whether this health check is healthy.
+     */
+    readonly region: string;
+    /**
+     * The name of the CloudWatch alarm that you want Amazon Route 53 health checkers to use to determine whether this health check is healthy.
+     */
+    readonly name: string;
+}

cdk/node_modules/aws-cdk-lib/aws-route53/lib/hosted-zone-grants.d.ts

@@ -0,0 +1,19 @@
+import type { GrantDelegationOptions, INamedHostedZoneRef } from './hosted-zone-ref';
+import type { IGrantable } from '../../aws-iam';
+import type { Grant } from '../../aws-iam/lib/grant';
+/**
+ * Collection of grant methods for a INamedHostedZoneRef
+ */
+export declare class HostedZoneGrants {
+    private readonly hostedZone;
+    /**
+     * Creates grants for INamedHostedZoneRef
+     *
+     */
+    static fromHostedZone(hostedZone: INamedHostedZoneRef): HostedZoneGrants;
+    private constructor();
+    /**
+     * Grant permissions to add delegation records to this zone
+     */
+    delegation(grantee: IGrantable, delegationOptions?: GrantDelegationOptions): Grant;
+}

cdk/node_modules/aws-cdk-lib/aws-route53/lib/hosted-zone-grants.js

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.HostedZoneGrants=void 0;var jsiiDeprecationWarnings=()=>{var tmp=require("../../.warnings.jsii.js");return jsiiDeprecationWarnings=()=>tmp,tmp};const JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti");var util_1=()=>{var tmp=require("./util");return util_1=()=>tmp,tmp};class HostedZoneGrants{hostedZone;static[JSII_RTTI_SYMBOL_1]={fqn:"aws-cdk-lib.aws_route53.HostedZoneGrants",version:"2.252.0"};static fromHostedZone(hostedZone){try{jsiiDeprecationWarnings().aws_cdk_lib_aws_route53_INamedHostedZoneRef(hostedZone)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromHostedZone),error}return new HostedZoneGrants(hostedZone)}constructor(hostedZone){this.hostedZone=hostedZone}delegation(grantee,delegationOptions){try{jsiiDeprecationWarnings().aws_cdk_lib_aws_iam_IGrantable(grantee),jsiiDeprecationWarnings().aws_cdk_lib_aws_route53_GrantDelegationOptions(delegationOptions)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.delegation),error}return(0,util_1().makeGrantDelegation)(grantee,this.hostedZone,delegationOptions)}}exports.HostedZoneGrants=HostedZoneGrants;

cdk/node_modules/aws-cdk-lib/aws-route53/lib/hosted-zone-provider.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Zone properties for looking up the Hosted Zone
+ */
+export interface HostedZoneProviderProps {
+    /**
+     * The zone domain e.g. example.com
+     */
+    readonly domainName: string;
+    /**
+     * Whether the zone that is being looked up is a private hosted zone
+     *
+     * @default false
+     */
+    readonly privateZone?: boolean;
+    /**
+     * Specifies the ID of the VPC associated with a private hosted zone.
+     *
+     * If a VPC ID is provided and privateZone is false, no results will be returned
+     * and an error will be raised
+     *
+     * @default - No VPC ID
+     */
+    readonly vpcId?: string;
+}

cdk/node_modules/aws-cdk-lib/aws-route53/lib/hosted-zone-provider.js

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0});

cdk/node_modules/aws-cdk-lib/aws-route53/lib/hosted-zone-ref.d.ts

@@ -0,0 +1,81 @@
+import type * as iam from '../../aws-iam';
+import type { IResource } from '../../core';
+import type { IHostedZoneRef } from '../../interfaces/generated/aws-route53-interfaces.generated';
+export interface INamedHostedZoneRef extends IHostedZoneRef {
+    readonly name: string;
+}
+/**
+ * Imported or created hosted zone
+ */
+export interface IHostedZone extends IResource, INamedHostedZoneRef {
+    /**
+     * ID of this hosted zone, such as "Z23ABC4XYZL05B"
+     *
+     * @attribute
+     */
+    readonly hostedZoneId: string;
+    /**
+     * FQDN of this hosted zone
+     */
+    readonly zoneName: string;
+    /**
+     * ARN of this hosted zone, such as arn:${Partition}:route53:::hostedzone/${Id}
+     *
+     * @attribute
+     */
+    readonly hostedZoneArn: string;
+    /**
+     * Returns the set of name servers for the specific hosted zone. For example:
+     * ns1.example.com.
+     *
+     * This attribute will be undefined for private hosted zones or hosted zones imported from another stack.
+     *
+     * @attribute
+     */
+    readonly hostedZoneNameServers?: string[];
+    /**
+     * Grant permissions to add delegation records to this zone
+     */
+    grantDelegation(grantee: iam.IGrantable, options?: GrantDelegationOptions): iam.Grant;
+}
+/**
+ * Options for the delegation permissions granted
+ */
+export interface GrantDelegationOptions {
+    /**
+     * List of hosted zone names to allow delegation to in the grant permissions.
+     * If the delegated zone name contains an unresolved token,
+     * it must resolve to a zone name that satisfies the requirements according to the documentation:
+     * https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/specifying-conditions-route53.html#route53_rrset_conditionkeys_normalization
+     *
+     * > All letters must be lowercase.
+     * > The DNS name must be without the trailing dot.
+     * > Characters other than a–z, 0–9, - (hyphen), _ (underscore), and . (period, as a delimiter between labels) must use escape codes in the format \three-digit octal code. For example, \052 is the octal code for character *.
+     *
+     * @default the grant allows delegation to any hosted zone
+     */
+    readonly delegatedZoneNames?: string[];
+}
+/**
+ * Reference to a hosted zone
+ */
+export interface HostedZoneAttributes {
+    /**
+     * Identifier of the hosted zone
+     */
+    readonly hostedZoneId: string;
+    /**
+     * Name of the hosted zone
+     */
+    readonly zoneName: string;
+}
+/**
+ * Reference to a public hosted zone
+ */
+export interface PublicHostedZoneAttributes extends HostedZoneAttributes {
+}
+/**
+ * Reference to a private hosted zone
+ */
+export interface PrivateHostedZoneAttributes extends HostedZoneAttributes {
+}

cdk/node_modules/aws-cdk-lib/aws-route53/lib/hosted-zone-ref.js

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0});

cdk/node_modules/aws-cdk-lib/aws-route53/lib/hosted-zone.d.ts

@@ -0,0 +1,321 @@
+import type { Construct } from 'constructs';
+import { HostedZoneGrants } from './hosted-zone-grants';
+import type { HostedZoneProviderProps } from './hosted-zone-provider';
+import type { GrantDelegationOptions, HostedZoneAttributes, IHostedZone, PublicHostedZoneAttributes, PrivateHostedZoneAttributes } from './hosted-zone-ref';
+import type { IKeySigningKey } from './key-signing-key';
+import type { HostedZoneReference } from './route53.generated';
+import { CfnHostedZone } from './route53.generated';
+import type * as ec2 from '../../aws-ec2';
+import * as iam from '../../aws-iam';
+import type * as kms from '../../aws-kms';
+import type { Duration } from '../../core';
+import { Resource } from '../../core';
+/**
+ * Common properties to create a Route 53 hosted zone
+ */
+export interface CommonHostedZoneProps {
+    /**
+     * The name of the domain. For resource record types that include a domain
+     * name, specify a fully qualified domain name.
+     */
+    readonly zoneName: string;
+    /**
+     * Whether to add a trailing dot to the zone name.
+     *
+     * @default true
+     */
+    readonly addTrailingDot?: boolean;
+    /**
+     * Any comments that you want to include about the hosted zone.
+     *
+     * @default none
+     */
+    readonly comment?: string;
+    /**
+     * The Amazon Resource Name (ARN) for the log group that you want Amazon Route 53 to send query logs to.
+     *
+     * @default disabled
+     */
+    readonly queryLogsLogGroupArn?: string;
+}
+/**
+ * Properties of a new hosted zone
+ */
+export interface HostedZoneProps extends CommonHostedZoneProps {
+    /**
+     * A VPC that you want to associate with this hosted zone. When you specify
+     * this property, a private hosted zone will be created.
+     *
+     * You can associate additional VPCs to this private zone using `addVpc(vpc)`.
+     *
+     * @default public (no VPCs associated)
+     */
+    readonly vpcs?: ec2.IVpc[];
+}
+/**
+ * Options for enabling key signing from a hosted zone.
+ */
+export interface ZoneSigningOptions {
+    /**
+     * The customer-managed KMS key that that will be used to sign the records.
+     *
+     * The KMS Key must be unique for each KSK within a hosted zone. Additionally, the
+     * KMS key must be an asymetric customer-managed key using the ECC_NIST_P256 algorithm.
+     *
+     * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-configuring-dnssec-cmk-requirements.html
+     */
+    readonly kmsKey: kms.IKey;
+    /**
+     * The name for the key signing key.
+     *
+     * This name must be unique within a hosted zone.
+     *
+     * @default an autogenerated name
+     */
+    readonly keySigningKeyName?: string;
+}
+/**
+ * Container for records, and records contain information about how to route traffic for a
+ * specific domain, such as example.com and its subdomains (acme.example.com, zenith.example.com)
+ */
+export declare class HostedZone extends Resource implements IHostedZone {
+    /** Uniquely identifies this class. */
+    static readonly PROPERTY_INJECTION_ID: string;
+    get hostedZoneArn(): string;
+    /**
+     * FQDN of this hosted zone
+     */
+    get name(): string;
+    /**
+     * Import a Route 53 hosted zone defined either outside the CDK, or in a different CDK stack
+     *
+     * Use when hosted zone ID is known. If a HostedZone is imported with this method the zoneName cannot be referenced.
+     * If the zoneName is needed then the HostedZone should be imported with `fromHostedZoneAttributes()` or `fromLookup()`
+     *
+     * @param scope the parent Construct for this Construct
+     * @param id  the logical name of this Construct
+     * @param hostedZoneId the ID of the hosted zone to import
+     */
+    static fromHostedZoneId(scope: Construct, id: string, hostedZoneId: string): IHostedZone;
+    /**
+     * Imports a hosted zone from another stack.
+     *
+     * Use when both hosted zone ID and hosted zone name are known.
+     *
+     * @param scope the parent Construct for this Construct
+     * @param id  the logical name of this Construct
+     * @param attrs the HostedZoneAttributes (hosted zone ID and hosted zone name)
+     */
+    static fromHostedZoneAttributes(scope: Construct, id: string, attrs: HostedZoneAttributes): IHostedZone;
+    /**
+     * Lookup a hosted zone in the current account/region based on query parameters.
+     * Requires environment, you must specify env for the stack.
+     *
+     * Use to easily query hosted zones.
+     *
+     * @see https://docs.aws.amazon.com/cdk/latest/guide/environments.html
+     */
+    static fromLookup(scope: Construct, id: string, query: HostedZoneProviderProps): IHostedZone;
+    readonly hostedZoneId: string;
+    readonly zoneName: string;
+    readonly hostedZoneNameServers?: string[];
+    /**
+     * VPCs to which this hosted zone will be added
+     */
+    protected readonly vpcs: CfnHostedZone.VPCProperty[];
+    /**
+     * The key signing key used to sign the hosted zone.
+     */
+    private keySigningKey?;
+    /**
+     * Grants helper for this hosted zone
+     */
+    readonly grants: HostedZoneGrants;
+    constructor(scope: Construct, id: string, props: HostedZoneProps);
+    get hostedZoneRef(): HostedZoneReference;
+    /**
+     * Add another VPC to this private hosted zone.
+     *
+     * @param vpc the other VPC to add.
+     */
+    addVpc(vpc: ec2.IVpc): void;
+    /**
+     * [disable-awslint:no-grants]
+     */
+    grantDelegation(grantee: iam.IGrantable, options?: GrantDelegationOptions): iam.Grant;
+    /**
+     * Enable DNSSEC for this hosted zone.
+     *
+     * This will create a key signing key with the given options and enable DNSSEC signing
+     * for the hosted zone.
+     */
+    enableDnssec(options: ZoneSigningOptions): IKeySigningKey;
+}
+/**
+ * Construction properties for a PublicHostedZone.
+ */
+export interface PublicHostedZoneProps extends CommonHostedZoneProps {
+    /**
+     * Whether to create a CAA record to restrict certificate authorities allowed
+     * to issue certificates for this domain to Amazon only.
+     *
+     * @default false
+     */
+    readonly caaAmazon?: boolean;
+    /**
+     * Whether to enable accelerated recovery for this hosted zone.
+     *
+     * Accelerated recovery reduces the time to recovery when a hosted zone
+     * becomes unavailable due to DNS resolution issues.
+     *
+     * This feature is only available for public hosted zones.
+     *
+     * @default - no accelerated recovery
+     * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/accelerated-recovery.html
+     */
+    readonly acceleratedRecoveryEnabled?: boolean;
+    /**
+     * A principal which is trusted to assume a role for zone delegation
+     *
+     * If supplied, this will create a Role in the same account as the Hosted
+     * Zone, which can be assumed by the `CrossAccountZoneDelegationRecord` to
+     * create a delegation record to a zone in a different account.
+     *
+     * Be sure to indicate the account(s) that you trust to create delegation
+     * records, using either `iam.AccountPrincipal` or `iam.OrganizationPrincipal`.
+     *
+     * If you are planning to use `iam.ServicePrincipal`s here, be sure to include
+     * region-specific service principals for every opt-in region you are going to
+     * be delegating to; or don't use this feature and create separate roles
+     * with appropriate permissions for every opt-in region instead.
+     *
+     * @default - No delegation configuration
+     * @deprecated Create the Role yourself and call `hostedZone.grantDelegation()`.
+     */
+    readonly crossAccountZoneDelegationPrincipal?: iam.IPrincipal;
+    /**
+     * The name of the role created for cross account delegation
+     *
+     * @default - A role name is generated automatically
+     * @deprecated Create the Role yourself and call `hostedZone.grantDelegation()`.
+     */
+    readonly crossAccountZoneDelegationRoleName?: string;
+}
+/**
+ * Represents a Route 53 public hosted zone
+ */
+export interface IPublicHostedZone extends IHostedZone {
+}
+/**
+ * Create a Route53 public hosted zone.
+ *
+ * @resource AWS::Route53::HostedZone
+ */
+export declare class PublicHostedZone extends HostedZone implements IPublicHostedZone {
+    /**
+     * Uniquely identifies this class.
+     */
+    static readonly PROPERTY_INJECTION_ID: string;
+    /**
+     * Import a Route 53 public hosted zone defined either outside the CDK, or in a different CDK stack
+     *
+     * Use when hosted zone ID is known. If a PublicHostedZone is imported with this method the zoneName cannot be referenced.
+     * If the zoneName is needed then the PublicHostedZone should be imported with `fromPublicHostedZoneAttributes()`.
+     *
+     * @param scope the parent Construct for this Construct
+     * @param id the logical name of this Construct
+     * @param publicHostedZoneId the ID of the public hosted zone to import
+     */
+    static fromPublicHostedZoneId(scope: Construct, id: string, publicHostedZoneId: string): IPublicHostedZone;
+    /**
+     * Imports a public hosted zone from another stack.
+     *
+     * Use when both hosted zone ID and hosted zone name are known.
+     *
+     * @param scope the parent Construct for this Construct
+     * @param id  the logical name of this Construct
+     * @param attrs the PublicHostedZoneAttributes (hosted zone ID and hosted zone name)
+     */
+    static fromPublicHostedZoneAttributes(scope: Construct, id: string, attrs: PublicHostedZoneAttributes): IPublicHostedZone;
+    /**
+     * Role for cross account zone delegation
+     */
+    readonly crossAccountZoneDelegationRole?: iam.Role;
+    constructor(scope: Construct, id: string, props: PublicHostedZoneProps);
+    addVpc(_vpc: ec2.IVpc): void;
+    /**
+     * Adds a delegation from this zone to a designated zone.
+     *
+     * @param delegate the zone being delegated to.
+     * @param opts     options for creating the DNS record, if any.
+     */
+    addDelegation(delegate: IPublicHostedZone, opts?: ZoneDelegationOptions): void;
+}
+/**
+ * Options available when creating a delegation relationship from one PublicHostedZone to another.
+ */
+export interface ZoneDelegationOptions {
+    /**
+     * A comment to add on the DNS record created to incorporate the delegation.
+     *
+     * @default none
+     */
+    readonly comment?: string;
+    /**
+     * The TTL (Time To Live) of the DNS delegation record in DNS caches.
+     *
+     * @default 172800
+     */
+    readonly ttl?: Duration;
+}
+/**
+ * Properties to create a Route 53 private hosted zone
+ */
+export interface PrivateHostedZoneProps extends CommonHostedZoneProps {
+    /**
+     * A VPC that you want to associate with this hosted zone.
+     *
+     * Private hosted zones must be associated with at least one VPC. You can
+     * associated additional VPCs using `addVpc(vpc)`.
+     */
+    readonly vpc: ec2.IVpc;
+}
+/**
+ * Represents a Route 53 private hosted zone
+ */
+export interface IPrivateHostedZone extends IHostedZone {
+}
+/**
+ * Create a Route53 private hosted zone for use in one or more VPCs.
+ *
+ * Note that `enableDnsHostnames` and `enableDnsSupport` must have been enabled
+ * for the VPC you're configuring for private hosted zones.
+ *
+ * @resource AWS::Route53::HostedZone
+ */
+export declare class PrivateHostedZone extends HostedZone implements IPrivateHostedZone {
+    /** Uniquely identifies this class. */
+    static readonly PROPERTY_INJECTION_ID: string;
+    /**
+     * Import a Route 53 private hosted zone defined either outside the CDK, or in a different CDK stack
+     *
+     * Use when hosted zone ID is known. If a HostedZone is imported with this method the zoneName cannot be referenced.
+     * If the zoneName is needed then you cannot import a PrivateHostedZone.
+     *
+     * @param scope the parent Construct for this Construct
+     * @param id the logical name of this Construct
+     * @param privateHostedZoneId the ID of the private hosted zone to import
+     */
+    static fromPrivateHostedZoneId(scope: Construct, id: string, privateHostedZoneId: string): IPrivateHostedZone;
+    /**
+     * Imports a private hosted zone from another stack.
+     *
+     * Use when both hosted zone ID and hosted zone name are known.
+     *
+     * @param scope the parent Construct for this Construct
+     * @param id  the logical name of this Construct
+     * @param attrs the PrivateHostedZoneAttributes (hosted zone ID and hosted zone name)
+     */
+    static fromPrivateHostedZoneAttributes(scope: Construct, id: string, attrs: PrivateHostedZoneAttributes): IPrivateHostedZone;
+    constructor(scope: Construct, id: string, props: PrivateHostedZoneProps);
+}

cdk/node_modules/aws-cdk-lib/aws-route53/lib/index.d.ts

@@ -0,0 +1,12 @@
+export * from './alias-record-target';
+export * from './hosted-zone';
+export * from './hosted-zone-grants';
+export * from './hosted-zone-provider';
+export * from './hosted-zone-ref';
+export * from './key-signing-key';
+export * from './record-set';
+export * from './vpc-endpoint-service-domain-name';
+export * from './cidr-routing-config';
+export * from './geo-location';
+export * from './health-check';
+export * from './route53.generated';

cdk/node_modules/aws-cdk-lib/aws-route53/lib/key-signing-key.d.ts

@@ -0,0 +1,106 @@
+import type { Construct } from 'constructs';
+import type { IHostedZone } from './hosted-zone-ref';
+import type * as kms from '../../aws-kms';
+import type { IResource } from '../../core';
+import { Resource } from '../../core';
+import type { IKeySigningKeyRef, KeySigningKeyReference } from '../../interfaces/generated/aws-route53-interfaces.generated';
+/**
+ * Properties for constructing a Key Signing Key.
+ */
+export interface KeySigningKeyProps {
+    /**
+     * The hosted zone that this key will be used to sign.
+     */
+    readonly hostedZone: IHostedZone;
+    /**
+     * The customer-managed KMS key that that will be used to sign the records.
+     *
+     * The KMS Key must be unique for each KSK within a hosted zone. Additionally, the
+     * KMS key must be an asymetric customer-managed key using the ECC_NIST_P256 algorithm.
+     *
+     * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-configuring-dnssec-cmk-requirements.html
+     */
+    readonly kmsKey: kms.IKey;
+    /**
+     * The name for the key signing key.
+     *
+     * This name must be unique within a hosted zone.
+     *
+     * @default an autogenerated name
+     */
+    readonly keySigningKeyName?: string;
+    /**
+     * The status of the key signing key.
+     *
+     * @default ACTIVE
+     */
+    readonly status?: KeySigningKeyStatus;
+}
+/**
+ * The status for a Key Signing Key.
+ */
+export declare enum KeySigningKeyStatus {
+    /** The KSK is being used for signing. */
+    ACTIVE = "ACTIVE",
+    /** The KSK is not being used for signing. */
+    INACTIVE = "INACTIVE"
+}
+/**
+ * A Key Signing Key for a Route 53 Hosted Zone.
+ */
+export interface IKeySigningKey extends IResource, IKeySigningKeyRef {
+    /**
+     * The hosted zone that the key signing key signs.
+     *
+     * @attribute
+     */
+    readonly hostedZone: IHostedZone;
+    /**
+     * The name of the key signing key.
+     *
+     * @attribute
+     */
+    readonly keySigningKeyName: string;
+    /**
+     * The ID of the key signing key, derived from the hosted zone ID and its name.
+     *
+     * @attribute
+     */
+    readonly keySigningKeyId: string;
+}
+/**
+ * The attributes of a key signing key.
+ */
+export interface KeySigningKeyAttributes {
+    /**
+     * The hosted zone that the key signing key signs.
+     *
+     * @attribute
+     */
+    readonly hostedZone: IHostedZone;
+    /**
+     * The name of the key signing key.
+     *
+     * @attribute
+     */
+    readonly keySigningKeyName: string;
+}
+/**
+ * A Key Signing Key for a Route 53 Hosted Zone.
+ *
+ * @resource AWS::Route53::KeySigningKey
+ */
+export declare class KeySigningKey extends Resource implements IKeySigningKey {
+    /** Uniquely identifies this class. */
+    static readonly PROPERTY_INJECTION_ID: string;
+    /**
+     * Imports a key signing key from its attributes.
+     */
+    static fromKeySigningKeyAttributes(scope: Construct, id: string, attrs: KeySigningKeyAttributes): IKeySigningKey;
+    readonly hostedZone: IHostedZone;
+    readonly keySigningKeyName: string;
+    readonly keySigningKeyId: string;
+    get keySigningKeyRef(): KeySigningKeyReference;
+    constructor(scope: Construct, id: string, props: KeySigningKeyProps);
+    private grantKeyPermissionsForZone;
+}

cdk/node_modules/aws-cdk-lib/aws-route53/lib/record-set.d.ts

@@ -0,0 +1,877 @@
+import { Construct } from 'constructs';
+import type { IAliasRecordTarget } from './alias-record-target';
+import type { CidrRoutingConfig } from './cidr-routing-config';
+import type { GeoLocation } from './geo-location';
+import type { IHealthCheck } from './health-check';
+import type { IHostedZone } from './hosted-zone-ref';
+import * as iam from '../../aws-iam';
+import type { IResource, RemovalPolicy } from '../../core';
+import { Duration, Resource } from '../../core';
+import type { IRecordSetRef, RecordSetReference } from '../../interfaces/generated/aws-route53-interfaces.generated';
+/**
+ * A record set
+ */
+export interface IRecordSet extends IResource, IRecordSetRef {
+    /**
+     * The domain name of the record
+     */
+    readonly domainName: string;
+}
+/**
+ * The record type.
+ */
+export declare enum RecordType {
+    /**
+     * route traffic to a resource, such as a web server, using an IPv4 address in dotted decimal
+     * notation
+     *
+     * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#AFormat
+     */
+    A = "A",
+    /**
+     * route traffic to a resource, such as a web server, using an IPv6 address in colon-separated
+     * hexadecimal format
+     *
+     * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#AAAAFormat
+     */
+    AAAA = "AAAA",
+    /**
+     * A CAA record specifies which certificate authorities (CAs) are allowed to issue certificates
+     * for a domain or subdomain
+     *
+     * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#CAAFormat
+     */
+    CAA = "CAA",
+    /**
+     * A CNAME record maps DNS queries for the name of the current record, such as acme.example.com,
+     * to another domain (example.com or example.net) or subdomain (acme.example.com or zenith.example.org).
+     *
+     * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#CNAMEFormat
+     */
+    CNAME = "CNAME",
+    /**
+     * A delegation signer (DS) record refers a zone key for a delegated subdomain zone.
+     *
+     * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#DSFormat
+     */
+    DS = "DS",
+    /**
+     * An HTTPS resource record is a form of the Service Binding (SVCB) DNS record that provides extended configuration information,
+     * enabling a client to easily and securely connect to a service with an HTTP protocol.
+     * The configuration information is provided in parameters that allow the connection in one DNS query, rather than necessitating multiple DNS queries.
+     *
+     * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#HTTPSFormat
+     */
+    HTTPS = "HTTPS",
+    /**
+     * An MX record specifies the names of your mail servers and, if you have two or more mail servers,
+     * the priority order.
+     *
+     * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#MXFormat
+     */
+    MX = "MX",
+    /**
+     * A Name Authority Pointer (NAPTR) is a type of record that is used by Dynamic Delegation Discovery
+     * System (DDDS) applications to convert one value to another or to replace one value with another.
+     * For example, one common use is to convert phone numbers into SIP URIs.
+     *
+     * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#NAPTRFormat
+     */
+    NAPTR = "NAPTR",
+    /**
+     * An NS record identifies the name servers for the hosted zone
+     *
+     * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#NSFormat
+     */
+    NS = "NS",
+    /**
+     * A PTR record maps an IP address to the corresponding domain name.
+     *
+     * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#PTRFormat
+     */
+    PTR = "PTR",
+    /**
+     * A start of authority (SOA) record provides information about a domain and the corresponding Amazon
+     * Route 53 hosted zone
+     *
+     * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#SOAFormat
+     */
+    SOA = "SOA",
+    /**
+     * SPF records were formerly used to verify the identity of the sender of email messages.
+     * Instead of an SPF record, we recommend that you create a TXT record that contains the applicable value.
+     *
+     * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#SPFFormat
+     */
+    SPF = "SPF",
+    /**
+     * An SRV record Value element consists of four space-separated values. The first three values are
+     * decimal numbers representing priority, weight, and port. The fourth value is a domain name.
+     *
+     * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#SRVFormat
+     */
+    SRV = "SRV",
+    /**
+     * A Secure Shell fingerprint record (SSHFP) identifies SSH keys associated with the domain name.
+     * SSHFP records must be secured with DNSSEC for a chain of trust to be established.
+     *
+     * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#SSHFPFormat
+     */
+    SSHFP = "SSHFP",
+    /**
+     * You use an SVCB record to deliver configuration information for accessing service endpoints.
+     * The SVCB is a generic DNS record and can be used to negotiate parameters for a variety of application protocols.
+     *
+     * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#SVCBFormat
+     */
+    SVCB = "SVCB",
+    /**
+     * You use a TLSA record to use DNS-Based Authentication of Named Entities (DANE).
+     * A TLSA record associates a certificate/public key with a Transport Layer Security (TLS) endpoint, and clients can validate the certificate/public key using a TLSA record signed with DNSSEC.
+     *
+     * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#TLSAFormat
+     */
+    TLSA = "TLSA",
+    /**
+     * A TXT record contains one or more strings that are enclosed in double quotation marks (").
+     *
+     * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#TXTFormat
+     */
+    TXT = "TXT"
+}
+/**
+ * The failover policy.
+ * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy-failover.html
+ */
+export declare enum Failover {
+    /**
+     * The primary resource record set determines how Route 53 responds to DNS queries when
+     * the primary resource is healthy.
+     */
+    PRIMARY = "PRIMARY",
+    /**
+     * The secondary resource record set determines how Route 53 responds to DNS queries when
+     * the primary resource is unhealthy.
+     */
+    SECONDARY = "SECONDARY"
+}
+/**
+ * Options for a RecordSet.
+ */
+export interface RecordSetOptions {
+    /**
+     * The hosted zone in which to define the new record.
+     */
+    readonly zone: IHostedZone;
+    /**
+     * The geographical origin for this record to return DNS records based on the user's location.
+     */
+    readonly geoLocation?: GeoLocation;
+    /**
+     * The subdomain name for this record. This should be relative to the zone root name.
+     *
+     * For example, if you want to create a record for acme.example.com, specify
+     * "acme".
+     *
+     * You can also specify the fully qualified domain name which terminates with a
+     * ".". For example, "acme.example.com.".
+     *
+     * @default zone root
+     */
+    readonly recordName?: string;
+    /**
+     * The resource record cache time to live (TTL).
+     *
+     * @default Duration.minutes(30)
+     */
+    readonly ttl?: Duration;
+    /**
+     * A comment to add on the record.
+     *
+     * @default no comment
+     */
+    readonly comment?: string;
+    /**
+     * Whether to delete the same record set in the hosted zone if it already exists (dangerous!)
+     *
+     * This allows to deploy a new record set while minimizing the downtime because the
+     * new record set will be created immediately after the existing one is deleted. It
+     * also avoids "manual" actions to delete existing record sets.
+     *
+     * > **N.B.:** this feature is dangerous, use with caution! It can only be used safely when
+     * > `deleteExisting` is set to `true` as soon as the resource is added to the stack. Changing
+     * > an existing Record Set's `deleteExisting` property from `false -> true` after deployment
+     * > will delete the record!
+     *
+     * @deprecated This property is dangerous and can lead to unintended record deletion in case of deployment failure.
+     * @default false
+     */
+    readonly deleteExisting?: boolean;
+    /**
+     * Among resource record sets that have the same combination of DNS name and type,
+     * a value that determines the proportion of DNS queries that Amazon Route 53 responds to using the current resource record set.
+     *
+     * Route 53 calculates the sum of the weights for the resource record sets that have the same combination of DNS name and type.
+     * Route 53 then responds to queries based on the ratio of a resource's weight to the total.
+     *
+     * This value can be a number between 0 and 255.
+     *
+     * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy-weighted.html
+     *
+     * @default - Do not set weighted routing
+     */
+    readonly weight?: number;
+    /**
+     * The Amazon EC2 Region where you created the resource that this resource record set refers to.
+     * The resource typically is an AWS resource, such as an EC2 instance or an ELB load balancer,
+     * and is referred to by an IP address or a DNS domain name, depending on the record type.
+     *
+     * When Amazon Route 53 receives a DNS query for a domain name and type for which you have created latency resource record sets,
+     * Route 53 selects the latency resource record set that has the lowest latency between the end user and the associated Amazon EC2 Region.
+     * Route 53 then returns the value that is associated with the selected resource record set.
+     *
+     * @see https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53-recordset.html#cfn-route53-recordset-region
+     *
+     * @default - Do not set latency based routing
+     */
+    readonly region?: string;
+    /**
+     * Whether to return multiple values, such as IP addresses for your web servers, in response to DNS queries.
+     *
+     * @default false
+     */
+    readonly multiValueAnswer?: boolean;
+    /**
+     * A string used to distinguish between different records with the same combination of DNS name and type.
+     * It can only be set when either weight or geoLocation is defined.
+     *
+     * This parameter must be between 1 and 128 characters in length.
+     *
+     * @default - Auto generated string
+     */
+    readonly setIdentifier?: string;
+    /**
+     * The health check to associate with the record set.
+     *
+     * Route53 will return this record set in response to DNS queries only if the health check is passing.
+     *
+     * @default - No health check configured
+     */
+    readonly healthCheck?: IHealthCheck;
+    /**
+     * The object that is specified in resource record set object when you are linking a resource record set to a CIDR location.
+     *
+     * A LocationName with an asterisk “*” can be used to create a default CIDR record. CollectionId is still required for default record.
+     *
+     * @see https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53-recordset.html#cfn-route53-recordset-cidrroutingconfig
+     * @default - No CIDR routing configured
+     */
+    readonly cidrRoutingConfig?: CidrRoutingConfig;
+    /**
+     * Failover configuration for the record set.
+     *
+     * To configure failover, you add the Failover element to two resource record sets.
+     * For one resource record set, you specify PRIMARY as the value for Failover;
+     * for the other resource record set, you specify SECONDARY.
+     *
+     * You must also include the HealthCheckId element for PRIMARY configurations.
+     *
+     * @default - No failover configuration
+     * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy-failover.html
+     */
+    readonly failover?: Failover;
+}
+/**
+ * Type union for a record that accepts multiple types of target.
+ */
+export declare class RecordTarget {
+    readonly values?: string[] | undefined;
+    readonly aliasTarget?: IAliasRecordTarget | undefined;
+    /**
+     * Use string values as target.
+     */
+    static fromValues(...values: string[]): RecordTarget;
+    /**
+     * Use an alias as target.
+     */
+    static fromAlias(aliasTarget: IAliasRecordTarget): RecordTarget;
+    /**
+     * Use ip addresses as target.
+     */
+    static fromIpAddresses(...ipAddresses: string[]): RecordTarget;
+    /**
+     *
+     * @param values correspond with the chosen record type (e.g. for 'A' Type, specify one or more IP addresses)
+     * @param aliasTarget alias for targets such as CloudFront distribution to route traffic to
+     */
+    protected constructor(values?: string[] | undefined, aliasTarget?: IAliasRecordTarget | undefined);
+}
+/**
+ * Construction properties for a RecordSet.
+ */
+export interface RecordSetProps extends RecordSetOptions {
+    /**
+     * The record type.
+     */
+    readonly recordType: RecordType;
+    /**
+     * The target for this record, either `RecordTarget.fromValues()` or
+     * `RecordTarget.fromAlias()`.
+     */
+    readonly target: RecordTarget;
+}
+/**
+ * A record set.
+ */
+export declare class RecordSet extends Resource implements IRecordSet {
+    /** Uniquely identifies this class. */
+    static readonly PROPERTY_INJECTION_ID: string;
+    readonly domainName: string;
+    private readonly geoLocation?;
+    private readonly weight?;
+    private readonly region?;
+    private readonly multiValueAnswer?;
+    private readonly failover?;
+    get recordSetRef(): RecordSetReference;
+    constructor(scope: Construct, id: string, props: RecordSetProps);
+    private configureSetIdentifier;
+    private createIdentifier;
+}
+/**
+ * Construction properties for a ARecord.
+ */
+export interface ARecordProps extends RecordSetOptions {
+    /**
+     * The target.
+     */
+    readonly target: RecordTarget;
+}
+/**
+ * Construction properties to import existing ARecord as target.
+ */
+export interface ARecordAttrs extends RecordSetOptions {
+    /**
+     * Existing A record DNS name to set RecordTarget
+     */
+    readonly targetDNS: string;
+}
+/**
+ * A DNS A record
+ *
+ * @resource AWS::Route53::RecordSet
+ */
+export declare class ARecord extends RecordSet {
+    /** Uniquely identifies this class. */
+    static readonly PROPERTY_INJECTION_ID: string;
+    /**
+     * Creates new A record of type alias with target set to an existing A Record DNS.
+     * Use when the target A record is created outside of CDK
+     * For records created as part of CDK use @aws-cdk-lib/aws-route53-targets/route53-record.ts
+     * @param scope the parent Construct for this Construct
+     * @param id Logical Id of the resource
+     * @param attrs the ARecordAttributes (Target Arecord DNS name and HostedZone)
+     * @returns AWS::Route53::RecordSet of type A with target alias set to existing A record
+     */
+    static fromARecordAttributes(scope: Construct, id: string, attrs: ARecordAttrs): ARecord;
+    constructor(scope: Construct, id: string, props: ARecordProps);
+}
+/**
+ * Construction properties for a AaaaRecord.
+ */
+export interface AaaaRecordProps extends RecordSetOptions {
+    /**
+     * The target.
+     */
+    readonly target: RecordTarget;
+}
+/**
+ * A DNS AAAA record
+ *
+ * @resource AWS::Route53::RecordSet
+ */
+export declare class AaaaRecord extends RecordSet {
+    /** Uniquely identifies this class. */
+    static readonly PROPERTY_INJECTION_ID: string;
+    constructor(scope: Construct, id: string, props: AaaaRecordProps);
+}
+/**
+ * Construction properties for a CnameRecord.
+ */
+export interface CnameRecordProps extends RecordSetOptions {
+    /**
+     * The domain name of the target that this record should point to.
+     */
+    readonly domainName: string;
+}
+/**
+ * A DNS CNAME record
+ *
+ * @resource AWS::Route53::RecordSet
+ */
+export declare class CnameRecord extends RecordSet {
+    /** Uniquely identifies this class. */
+    static readonly PROPERTY_INJECTION_ID: string;
+    constructor(scope: Construct, id: string, props: CnameRecordProps);
+}
+/**
+ * Construction properties for a TxtRecord.
+ */
+export interface TxtRecordProps extends RecordSetOptions {
+    /**
+     * The text values.
+     */
+    readonly values: string[];
+}
+/**
+ * A DNS TXT record
+ *
+ * @resource AWS::Route53::RecordSet
+ */
+export declare class TxtRecord extends RecordSet {
+    /** Uniquely identifies this class. */
+    static readonly PROPERTY_INJECTION_ID: string;
+    constructor(scope: Construct, id: string, props: TxtRecordProps);
+}
+/**
+ * Properties for a SRV record value.
+ */
+export interface SrvRecordValue {
+    /**
+     * The priority.
+     */
+    readonly priority: number;
+    /**
+     * The weight.
+     */
+    readonly weight: number;
+    /**
+     * The port.
+     */
+    readonly port: number;
+    /**
+     * The server host name.
+     */
+    readonly hostName: string;
+}
+/**
+ * Construction properties for a SrvRecord.
+ */
+export interface SrvRecordProps extends RecordSetOptions {
+    /**
+     * The values.
+     */
+    readonly values: SrvRecordValue[];
+}
+/**
+ * A DNS SRV record
+ *
+ * @resource AWS::Route53::RecordSet
+ */
+export declare class SrvRecord extends RecordSet {
+    /** Uniquely identifies this class. */
+    static readonly PROPERTY_INJECTION_ID: string;
+    constructor(scope: Construct, id: string, props: SrvRecordProps);
+}
+/**
+ * The CAA tag.
+ */
+export declare enum CaaTag {
+    /**
+     * Explicity authorizes a single certificate authority to issue a
+     * certificate (any type) for the hostname.
+     */
+    ISSUE = "issue",
+    /**
+     * Explicity authorizes a single certificate authority to issue a
+     * wildcard certificate (and only wildcard) for the hostname.
+     */
+    ISSUEWILD = "issuewild",
+    /**
+     * Specifies a URL to which a certificate authority may report policy
+     * violations.
+     */
+    IODEF = "iodef"
+}
+/**
+ * Properties for a CAA record value.
+ */
+export interface CaaRecordValue {
+    /**
+     * The flag.
+     */
+    readonly flag: number;
+    /**
+     * The tag.
+     */
+    readonly tag: CaaTag;
+    /**
+     * The value associated with the tag.
+     */
+    readonly value: string;
+}
+/**
+ * Construction properties for a CaaRecord.
+ */
+export interface CaaRecordProps extends RecordSetOptions {
+    /**
+     * The values.
+     */
+    readonly values: CaaRecordValue[];
+}
+/**
+ * A DNS CAA record
+ *
+ * @resource AWS::Route53::RecordSet
+ */
+export declare class CaaRecord extends RecordSet {
+    /** Uniquely identifies this class. */
+    static readonly PROPERTY_INJECTION_ID: string;
+    constructor(scope: Construct, id: string, props: CaaRecordProps);
+}
+/**
+ * Construction properties for a CaaAmazonRecord.
+ */
+export interface CaaAmazonRecordProps extends RecordSetOptions {
+}
+/**
+ * A DNS Amazon CAA record.
+ *
+ * A CAA record to restrict certificate authorities allowed
+ * to issue certificates for a domain to Amazon only.
+ *
+ * @resource AWS::Route53::RecordSet
+ */
+export declare class CaaAmazonRecord extends CaaRecord {
+    /** Uniquely identifies this class. */
+    static readonly PROPERTY_INJECTION_ID: string;
+    constructor(scope: Construct, id: string, props: CaaAmazonRecordProps);
+}
+/**
+ * Properties for a MX record value.
+ */
+export interface MxRecordValue {
+    /**
+     * The priority.
+     */
+    readonly priority: number;
+    /**
+     * The mail server host name.
+     */
+    readonly hostName: string;
+}
+/**
+ * Construction properties for a MxRecord.
+ */
+export interface MxRecordProps extends RecordSetOptions {
+    /**
+     * The values.
+     */
+    readonly values: MxRecordValue[];
+}
+/**
+ * A DNS MX record
+ *
+ * @resource AWS::Route53::RecordSet
+ */
+export declare class MxRecord extends RecordSet {
+    /** Uniquely identifies this class. */
+    static readonly PROPERTY_INJECTION_ID: string;
+    constructor(scope: Construct, id: string, props: MxRecordProps);
+}
+/**
+ * Construction properties for a NSRecord.
+ */
+export interface NsRecordProps extends RecordSetOptions {
+    /**
+     * The NS values.
+     */
+    readonly values: string[];
+}
+/**
+ * A DNS NS record
+ *
+ * @resource AWS::Route53::RecordSet
+ */
+export declare class NsRecord extends RecordSet {
+    /** Uniquely identifies this class. */
+    static readonly PROPERTY_INJECTION_ID: string;
+    constructor(scope: Construct, id: string, props: NsRecordProps);
+}
+/**
+ * Construction properties for a DSRecord.
+ */
+export interface DsRecordProps extends RecordSetOptions {
+    /**
+     * The DS values.
+     */
+    readonly values: string[];
+}
+/**
+ * A DNS DS record
+ *
+ * @resource AWS::Route53::RecordSet
+ */
+export declare class DsRecord extends RecordSet {
+    /** Uniquely identifies this class. */
+    static readonly PROPERTY_INJECTION_ID: string;
+    constructor(scope: Construct, id: string, props: DsRecordProps);
+}
+/**
+ * The ALPN protocol identifier.
+ */
+export declare class Alpn {
+    readonly protocol: string;
+    /** HTTP/1.1 */
+    static readonly HTTP1_1: Alpn;
+    /** HTTP2 */
+    static readonly H2: Alpn;
+    /** HTTP3 (QUIC) */
+    static readonly H3: Alpn;
+    /**
+     * A custom ALPN protocol identifier.
+     * @param protocol The ALPN protocol identifier.
+     */
+    static of(protocol: string): Alpn;
+    /**
+     * @param protocol The ALPN protocol identifier.
+     */
+    private constructor();
+}
+/**
+ * Common properties of an SVCB and an HTTPS record value.
+ */
+interface SvcbRecordValueCommonProps {
+    /**
+     * Indicates mandatory keys.
+     *
+     * @default - No mandatory keys
+     */
+    readonly mandatory?: string[];
+    /**
+     * Indicates the set of Application-Layer Protocol Negotiation (ALPN) protocol identifiers
+     * and associated transport protocols supported by this service endpoint.
+     *
+     * @default - No ALPN protocol identifiers
+     */
+    readonly alpn?: Alpn[];
+    /**
+     * Indicates no default ALPN protocol identifiers.
+     * The `alpn` parameter must be supplied together.
+     *
+     * @default false
+     */
+    readonly noDefaultAlpn?: boolean;
+    /**
+     * The alternative port number.
+     *
+     * @default - Use the default port
+     */
+    readonly port?: number;
+    /**
+     * Conveys that clients may use to reach the service.
+     *
+     * @default - No hints.
+     */
+    readonly ipv4hint?: string[];
+    /**
+     * Conveys that clients may use to reach the service.
+     *
+     * @default - No hints.
+     */
+    readonly ipv6hint?: string[];
+}
+/**
+ * Base properties of an SVCB and an HTTPS record value.
+ */
+interface SvcbRecordValueBaseProps extends SvcbRecordValueCommonProps {
+    /**
+     * The priority.
+     */
+    readonly priority: number;
+    /**
+     * The domain name of the alternative endpoint.
+     */
+    readonly targetName: string;
+}
+/**
+ * Represents an SVCB and an HTTPS record value.
+ */
+declare abstract class SvcbRecordValueBase {
+    private readonly props;
+    protected constructor(props: SvcbRecordValueBaseProps);
+    /**
+     * Returns the string representation of SVCB and HTTPS record value.
+     */
+    toString(): string;
+}
+/**
+ * Base properties of an SVCB ServiceMode record value.
+ */
+export interface SvcbRecordServiceModeProps extends SvcbRecordValueCommonProps {
+    /**
+     * The priority.
+     *
+     * @default 1
+     */
+    readonly priority?: number;
+    /**
+     * The domain name of the alternative endpoint.
+     *
+     * @default '.' - The record name of the record itself
+     */
+    readonly targetName?: string;
+}
+/**
+ * Represents an SVCB record value.
+ */
+export declare class SvcbRecordValue extends SvcbRecordValueBase {
+    /**
+     * An SVCB AliasMode record value.
+     *
+     * @param targetName The domain name of the alternative endpoint.
+     */
+    static alias(targetName: string): SvcbRecordValue;
+    /**
+     * An SVCB ServiceMode record value.
+     */
+    static service(props?: SvcbRecordServiceModeProps): SvcbRecordValue;
+    private constructor();
+}
+/**
+ * Construction properties for an SvcbRecord.
+ */
+export interface SvcbRecordProps extends RecordSetOptions {
+    /**
+     * The values.
+     */
+    readonly values: SvcbRecordValue[];
+}
+/**
+ * A DNS SVCB record
+ *
+ * @resource AWS::Route53::RecordSet
+ */
+export declare class SvcbRecord extends RecordSet {
+    /** Uniquely identifies this class. */
+    static readonly PROPERTY_INJECTION_ID: string;
+    constructor(scope: Construct, id: string, props: SvcbRecordProps);
+}
+/**
+ * Properties of an HTTPS ServiceMode record.
+ */
+export interface HttpsRecordServiceModeProps extends SvcbRecordServiceModeProps {
+}
+/**
+ * Represents an HTTPS record value.
+ */
+export declare class HttpsRecordValue extends SvcbRecordValueBase {
+    /**
+     * An HTTPS AliasMode record value.
+     *
+     * @param targetName The domain name of the alternative endpoint.
+     */
+    static alias(targetName: string): HttpsRecordValue;
+    /**
+     * An HTTPS ServiceMode record value.
+     */
+    static service(props?: HttpsRecordServiceModeProps): HttpsRecordValue;
+    private constructor();
+}
+/**
+ * Construction properties for an HttpsRecord.
+ */
+export interface HttpsRecordProps extends RecordSetOptions {
+    /**
+     * The values.
+     *
+     * @default - Specify exactly one of either `values` or `target`.
+     */
+    readonly values?: HttpsRecordValue[];
+    /**
+     * The target (mostly used as an alias target to CloudFront).
+     *
+     * @default - Specify exactly one of either `values` or `target`.
+     */
+    readonly target?: RecordTarget;
+}
+/**
+ * A DNS HTTPS record
+ *
+ * @resource AWS::Route53::RecordSet
+ */
+export declare class HttpsRecord extends RecordSet {
+    /** Uniquely identifies this class. */
+    static readonly PROPERTY_INJECTION_ID: string;
+    constructor(scope: Construct, id: string, props: HttpsRecordProps);
+}
+/**
+ * Construction properties for a ZoneDelegationRecord
+ */
+export interface ZoneDelegationRecordProps extends RecordSetOptions {
+    /**
+     * The name servers to report in the delegation records.
+     */
+    readonly nameServers: string[];
+}
+/**
+ * A record to delegate further lookups to a different set of name servers.
+ */
+export declare class ZoneDelegationRecord extends RecordSet {
+    /** Uniquely identifies this class. */
+    static readonly PROPERTY_INJECTION_ID: string;
+    constructor(scope: Construct, id: string, props: ZoneDelegationRecordProps);
+}
+/**
+ * Construction properties for a CrossAccountZoneDelegationRecord
+ */
+export interface CrossAccountZoneDelegationRecordProps {
+    /**
+     * The zone to be delegated
+     */
+    readonly delegatedZone: IHostedZone;
+    /**
+     * The hosted zone name in the parent account
+     *
+     * @default - no zone name
+     */
+    readonly parentHostedZoneName?: string;
+    /**
+     * The hosted zone id in the parent account
+     *
+     * @default - no zone id
+     */
+    readonly parentHostedZoneId?: string;
+    /**
+     * The delegation role in the parent account
+     */
+    readonly delegationRole: iam.IRoleRef;
+    /**
+     * The resource record cache time to live (TTL).
+     *
+     * @default Duration.days(2)
+     */
+    readonly ttl?: Duration;
+    /**
+     * The removal policy to apply to the record set.
+     *
+     * @default RemovalPolicy.DESTROY
+     */
+    readonly removalPolicy?: RemovalPolicy;
+    /**
+     * Region from which to obtain temporary credentials.
+     *
+     * @default - the Route53 signing region in the current partition
+     */
+    readonly assumeRoleRegion?: string;
+}
+/**
+ * A Cross Account Zone Delegation record. This construct uses custom resource lambda that calls Route53
+ * ChangeResourceRecordSets API to upsert a NS record into the `parentHostedZone`.
+ *
+ * WARNING: The default removal policy of this resource is DESTROY, therefore, if this resource's logical ID changes or
+ * if this resource is removed from the stack, the existing NS record will be removed.
+ */
+export declare class CrossAccountZoneDelegationRecord extends Construct {
+    constructor(scope: Construct, id: string, props: CrossAccountZoneDelegationRecordProps);
+}
+export {};

cdk/node_modules/aws-cdk-lib/aws-route53/lib/route53-canned-metrics.generated.d.ts

@@ -0,0 +1,38 @@
+export interface MetricWithDims<D> {
+    readonly namespace: string;
+    readonly metricName: string;
+    readonly statistic: string;
+    readonly dimensionsMap: D;
+}
+export declare class Route53Metrics {
+    static healthCheckPercentageHealthyAverage(this: void, dimensions: {
+        HealthCheckId: string;
+    }): MetricWithDims<{
+        HealthCheckId: string;
+    }>;
+    static connectionTimeAverage(this: void, dimensions: {
+        HealthCheckId: string;
+    }): MetricWithDims<{
+        HealthCheckId: string;
+    }>;
+    static healthCheckStatusMinimum(this: void, dimensions: {
+        HealthCheckId: string;
+    }): MetricWithDims<{
+        HealthCheckId: string;
+    }>;
+    static sslHandshakeTimeAverage(this: void, dimensions: {
+        HealthCheckId: string;
+    }): MetricWithDims<{
+        HealthCheckId: string;
+    }>;
+    static childHealthCheckHealthyCountAverage(this: void, dimensions: {
+        HealthCheckId: string;
+    }): MetricWithDims<{
+        HealthCheckId: string;
+    }>;
+    static timeToFirstByteAverage(this: void, dimensions: {
+        HealthCheckId: string;
+    }): MetricWithDims<{
+        HealthCheckId: string;
+    }>;
+}

cdk/node_modules/aws-cdk-lib/aws-route53/lib/route53-canned-metrics.generated.js

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.Route53Metrics=void 0;class Route53Metrics{static healthCheckPercentageHealthyAverage(dimensions){return{namespace:"AWS/Route53",metricName:"HealthCheckPercentageHealthy",dimensionsMap:dimensions,statistic:"Average"}}static connectionTimeAverage(dimensions){return{namespace:"AWS/Route53",metricName:"ConnectionTime",dimensionsMap:dimensions,statistic:"Average"}}static healthCheckStatusMinimum(dimensions){return{namespace:"AWS/Route53",metricName:"HealthCheckStatus",dimensionsMap:dimensions,statistic:"Minimum"}}static sslHandshakeTimeAverage(dimensions){return{namespace:"AWS/Route53",metricName:"SSLHandshakeTime",dimensionsMap:dimensions,statistic:"Average"}}static childHealthCheckHealthyCountAverage(dimensions){return{namespace:"AWS/Route53",metricName:"ChildHealthCheckHealthyCount",dimensionsMap:dimensions,statistic:"Average"}}static timeToFirstByteAverage(dimensions){return{namespace:"AWS/Route53",metricName:"TimeToFirstByte",dimensionsMap:dimensions,statistic:"Average"}}}exports.Route53Metrics=Route53Metrics;

cdk/node_modules/aws-cdk-lib/aws-route53/lib/util.d.ts

@@ -0,0 +1,30 @@
+import type { Construct } from 'constructs';
+import type { GrantDelegationOptions, IHostedZone, INamedHostedZoneRef } from './hosted-zone-ref';
+import * as iam from '../../aws-iam';
+/**
+ * Validates a zone name is valid by Route53 specific naming rules,
+ * and that there is no trailing dot in the name.
+ *
+ * @param zoneName the zone name to be validated.
+ * @returns +zoneName+
+ * @throws ValidationError if the name is not valid.
+ */
+export declare function validateZoneName(zoneName: string): void;
+/**
+ * Route53 requires the record names are specified as fully qualified names, but this
+ * forces lots of redundant work on the user (repeating the zone name over and over).
+ * This function allows the user to be lazier and offers a nicer experience, by
+ * qualifying relative names appropriately:
+ *
+ * @param providedName the user-specified name of the record.
+ * @param zoneName   the fully-qualified name of the zone the record will be created in.
+ *
+ * @returns <ul>
+ *        <li>If +providedName+ ends with a +.+, use it as-is</li>
+ *        <li>If +providedName+ ends with or equals +zoneName+, append a trailing +.+</li>
+ *        <li>Otherwise, append +.+, +zoneName+ and a trailing +.+</li>
+ *      </ul>
+ */
+export declare function determineFullyQualifiedDomainName(providedName: string, hostedZone: IHostedZone): string;
+export declare function makeHostedZoneArn(construct: Construct, hostedZoneId: string): string;
+export declare function makeGrantDelegation(grantee: iam.IGrantable, hostedZone: INamedHostedZoneRef, delegationOptions?: GrantDelegationOptions): iam.Grant;

cdk/node_modules/aws-cdk-lib/aws-route53/lib/util.js

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.validateZoneName=validateZoneName,exports.determineFullyQualifiedDomainName=determineFullyQualifiedDomainName,exports.makeHostedZoneArn=makeHostedZoneArn,exports.makeGrantDelegation=makeGrantDelegation;var iam=()=>{var tmp=require("../../aws-iam");return iam=()=>tmp,tmp},core_1=()=>{var tmp=require("../../core");return core_1=()=>tmp,tmp},literal_string_1=()=>{var tmp=require("../../core/lib/private/literal-string");return literal_string_1=()=>tmp,tmp};function validateZoneName(zoneName){if(zoneName.length>255)throw new(core_1()).UnscopedValidationError((0,literal_string_1().lit)`ZoneNameTooLong`,"zone name cannot be more than 255 bytes long");if(zoneName.split(".").find(label=>label.length>63))throw new(core_1()).UnscopedValidationError((0,literal_string_1().lit)`ZoneLabelTooLong`,"zone name labels cannot be more than 63 bytes long");if(!zoneName.match(/^[a-z0-9!"#$%&'()*+,/:;<=>?@[\\\]^_`{|}~.-]+$/i))throw new(core_1()).UnscopedValidationError((0,literal_string_1().lit)`InvalidZoneNameCharacters`,"zone names can only contain a-z, 0-9, -, ! \" # $ % & ' ( ) * + , - / : ; < = > ? @ [  ] ^ _ ` { | } ~ .")}function determineFullyQualifiedDomainName(providedName,hostedZone){if(providedName.endsWith("."))return providedName;const hostedZoneName=stripTrailingDot(hostedZone.zoneName),suffix=`.${hostedZoneName}`;return providedName.endsWith(suffix)||providedName===hostedZoneName?`${providedName}.`:`${providedName}${suffix}.`}function makeHostedZoneArn(construct,hostedZoneId){return core_1().Stack.of(construct).formatArn({account:"",region:"",service:"route53",resource:"hostedzone",resourceName:hostedZoneId})}function stripTrailingDot(zoneName){return zoneName.endsWith(".")?zoneName.substring(0,zoneName.length-1):zoneName}const octalConversionIgnoreRegex=/[a-z0-9-_\\.]/;function octalEncodeDelegatedZoneName(delegatedZoneName){return core_1().Token.isUnresolved(delegatedZoneName)?delegatedZoneName:delegatedZoneName.split("").map(c=>octalConversionIgnoreRegex.test(c)?c:"\\"+c.charCodeAt(0).toString(8).padStart(3,"0")).join("")}function validateDelegatedZoneName(parentZoneName,delegatedZoneName){if(delegatedZoneName.endsWith("."))throw new(core_1()).UnscopedValidationError((0,literal_string_1().lit)`DelegatedZoneNameTrailingPeriod`,`Error while validating delegate zone name '${delegatedZoneName}': delegated zone name cannot have a trailing period`);if(core_1().Token.isUnresolved(delegatedZoneName))return;if(validateZoneName(delegatedZoneName),delegatedZoneName.toLowerCase()!==delegatedZoneName)throw new(core_1()).UnscopedValidationError((0,literal_string_1().lit)`DelegatedZoneNameUppercase`,`Error while validating delegate zone name '${delegatedZoneName}': delegated zone name cannot contain uppercase characters`);if(core_1().Token.isUnresolved(parentZoneName))return;const parentZoneNameNoTrailingDot=stripTrailingDot(parentZoneName);if(!delegatedZoneName.endsWith(parentZoneNameNoTrailingDot))throw new(core_1()).UnscopedValidationError((0,literal_string_1().lit)`DelegatedZoneNameNotSuffixed`,`Error while validating delegate zone name '${delegatedZoneName}': delegated zone name must be suffixed by parent zone name`);if(delegatedZoneName===parentZoneNameNoTrailingDot)throw new(core_1()).UnscopedValidationError((0,literal_string_1().lit)`DelegatedZoneNameSameAsParent`,`Error while validating delegate zone name '${delegatedZoneName}': delegated zone name cannot be the same as the parent zone name`)}function makeGrantDelegation(grantee,hostedZone,delegationOptions){const delegatedZoneNames=delegationOptions?.delegatedZoneNames?.map(delegatedZoneName=>(validateDelegatedZoneName(hostedZone.name,delegatedZoneName),octalEncodeDelegatedZoneName(delegatedZoneName))),g1=iam().Grant.addToPrincipal({grantee,actions:["route53:ChangeResourceRecordSets"],resourceArns:[makeHostedZoneArn(hostedZone,hostedZone.hostedZoneRef.hostedZoneId)],conditions:{"ForAllValues:StringEquals":{"route53:ChangeResourceRecordSetsRecordTypes":["NS"],"route53:ChangeResourceRecordSetsActions":["UPSERT","DELETE"],...delegationOptions?.delegatedZoneNames?{"route53:ChangeResourceRecordSetsNormalizedRecordNames":delegatedZoneNames}:{}}}}),g2=iam().Grant.addToPrincipal({grantee,actions:["route53:ListHostedZonesByName"],resourceArns:["*"]});return g1.combine(g2)}

cdk/node_modules/aws-cdk-lib/aws-route53/lib/vpc-endpoint-service-domain-name.d.ts

@@ -0,0 +1,48 @@
+import { Construct } from 'constructs';
+import type { IVPCEndpointServiceRef } from '../../aws-ec2';
+import type { IPublicHostedZone } from '../lib';
+/**
+ * Properties to configure a VPC Endpoint Service domain name
+ */
+export interface VpcEndpointServiceDomainNameProps {
+    /**
+     * The VPC Endpoint Service to configure Private DNS for
+     */
+    readonly endpointService: IVPCEndpointServiceRef;
+    /**
+     * The domain name to use.
+     *
+     * This domain name must be owned by this account (registered through Route53),
+     * or delegated to this account. Domain ownership will be verified by AWS before
+     * private DNS can be used.
+     * @see https://docs.aws.amazon.com/vpc/latest/userguide/endpoint-services-dns-validation.html
+     */
+    readonly domainName: string;
+    /**
+     * The public hosted zone to use for the domain.
+     */
+    readonly publicHostedZone: IPublicHostedZone;
+}
+/**
+ * A Private DNS configuration for a VPC endpoint service.
+ */
+export declare class VpcEndpointServiceDomainName extends Construct {
+    private static readonly endpointServices;
+    private static readonly endpointServicesMap;
+    /**
+     * The domain name associated with the private DNS configuration
+     */
+    domainName: string;
+    constructor(scope: Construct, id: string, props: VpcEndpointServiceDomainNameProps);
+    private validateProps;
+    /**
+     * Sets up Custom Resources to make AWS calls to set up Private DNS on an endpoint service,
+     * returning the values to use in a TxtRecord, which AWS uses to verify domain ownership.
+     */
+    private getPrivateDnsConfiguration;
+    /**
+     * Creates a Route53 entry and a Custom Resource which explicitly tells AWS to verify ownership
+     * of the domain name attached to an endpoint service.
+     */
+    private verifyPrivateDnsConfiguration;
+}