feat: Route53 Resolver Endpoint L2 implementation

src/aws-route53resolver/index.ts

@@ -0,0 +1,2 @@
+export * from './resolver-endpoint';
+export * from './resolver-rule';

src/aws-route53resolver/private/multi-default-port-connections.ts

@@ -0,0 +1,43 @@
+import {
+  Connections,
+  ConnectionsProps,
+  IConnectable,
+  Port,
+} from 'aws-cdk-lib/aws-ec2';
+
+export interface MultiDefaultPortConnectionsProps extends ConnectionsProps {
+  readonly defaultPorts?: Port[];
+}
+export class MultiDefaultPortConnections extends Connections {
+  readonly defaultPorts?: Port[];
+  constructor(props?: MultiDefaultPortConnectionsProps) {
+    super(props);
+    this.defaultPorts = props?.defaultPorts;
+  }
+  allowDefaultPortFrom(
+    other: IConnectable,
+    description?: string | undefined,
+  ): void {
+    this.defaultPorts?.forEach((port) =>
+      super.allowFrom(other, port, description),
+    );
+  }
+  allowDefaultPortFromAnyIpv4(description?: string | undefined): void {
+    this.defaultPorts?.forEach((port) =>
+      super.allowFromAnyIpv4(port, description),
+    );
+  }
+  allowDefaultPortInternally(description?: string | undefined): void {
+    this.defaultPorts?.forEach((port) =>
+      super.allowInternally(port, description),
+    );
+  }
+  allowDefaultPortTo(
+    other: IConnectable,
+    description?: string | undefined,
+  ): void {
+    this.defaultPorts?.forEach((port) =>
+      super.allowTo(other, port, description),
+    );
+  }
+}

src/aws-route53resolver/protocol.ts

@@ -0,0 +1,24 @@
+/**
+ * The protocols you want to use for the endpoint.
+ * DoH-FIPS is applicable for inbound endpoints only.
+ */
+export enum Protocol {
+  /**
+   * The data is relayed using the Route 53 Resolver without additional encryption.
+   * While the data cannot be read by external parties, it can be viewed within the AWS networks.
+   */
+  DO_53 = 'Do53',
+  /**
+   * The data is transmitted over an encrypted HTTPS session.
+   * DoH adds an added level of security where data can't be decrypted by unauthorized users,
+   * and can't be read by anyone except the intended recipient.
+   */
+  DO_H = 'DoH',
+  /**
+   * The data is transmitted over an encrypted HTTPS session that is compliant with the FIPS 140-2 cryptographic standard.
+   * Supported for inbound endpoints only.
+   *
+   * @see https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-2.pdf
+   */
+  DO_H_FIPS = 'DoH-FIPS',
+}