@aws-cdk/aws-imagebuilder-alpha 2.232.2-alpha.0 → 2.234.0-alpha.0

package/.jsii

@@ -11,7 +11,7 @@
     "yaml": "1.10.2"
   },
   "dependencies": {
-    "aws-cdk-lib": "^2.232.2",
+    "aws-cdk-lib": "^2.234.0",
     "constructs": "^10.0.0"
   },
   "dependencyClosure": {
@@ -645,6 +645,19 @@
             }
           }
         },
+        "aws-cdk-lib.aws_cases": {
+          "targets": {
+            "dotnet": {
+              "namespace": "Amazon.CDK.AWS.Cases"
+            },
+            "java": {
+              "package": "software.amazon.awscdk.services.cases"
+            },
+            "python": {
+              "module": "aws_cdk.aws_cases"
+            }
+          }
+        },
         "aws-cdk-lib.aws_cassandra": {
           "targets": {
             "dotnet": {
@@ -4609,6 +4622,22 @@
             }
           }
         },
+        "aws-cdk-lib.interfaces.aws_cases": {
+          "targets": {
+            "dotnet": {
+              "namespace": "Amazon.CDK.Interfaces.Cases"
+            },
+            "go": {
+              "packageName": "interfacesawscases"
+            },
+            "java": {
+              "package": "software.amazon.awscdk.interfaces.cases"
+            },
+            "python": {
+              "module": "aws_cdk.interfaces.aws_cases"
+            }
+          }
+        },
         "aws-cdk-lib.interfaces.aws_cassandra": {
           "targets": {
             "dotnet": {
@@ -8444,7 +8473,7 @@
     "stability": "experimental"
   },
   "homepage": "https://github.com/aws/aws-cdk",
-  "jsiiVersion": "5.9.14 (build 9fc28bd)",
+  "jsiiVersion": "5.9.22 (build b81c634)",
   "keywords": [
     "aws",
     "cdk",
@@ -8465,7 +8494,7 @@
   },
   "name": "@aws-cdk/aws-imagebuilder-alpha",
   "readme": {
-    "markdown": "# EC2 Image Builder Construct Library\n\n<!--BEGIN STABILITY BANNER-->\n\n---\n\n![cdk-constructs: Experimental](https://img.shields.io/badge/cdk--constructs-experimental-important.svg?style=for-the-badge)\n\n> The APIs of higher level constructs in this module are experimental and under active development.\n> They are subject to non-backward compatible changes or removal in any future version. These are\n> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be\n> announced in the release notes. This means that while you may use them, you may need to update\n> your source code when upgrading to a newer version of this package.\n\n---\n\n<!--END STABILITY BANNER-->\n\nThis module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.\n\n## README\n\n[Amazon EC2 Image Builder](https://docs.aws.amazon.com/imagebuilder/latest/userguide/what-is-image-builder.html) is a\nfully managed AWS service that helps you automate the creation, management, and deployment of customized, secure, and\nup-to-date server images. You can use Image Builder to create Amazon Machine Images (AMIs) and container images for use\nacross AWS Regions.\n\nThis module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project. It allows you to define\nImage Builder pipelines, images, recipes, components, workflows, and lifecycle policies.\nA component defines the sequence of steps required to customize an instance during image creation (build component) or\ntest an instance launched from the created image (test component). Components are created from declarative YAML or JSON\ndocuments that describe runtime configuration for building, validating, or testing instances. Components are included\nwhen added to the image recipe or container recipe for an image build.\n\nEC2 Image Builder supports AWS-managed components for common tasks, AWS Marketplace components, and custom components\nthat you create. Components run during specific workflow phases: build and validate phases during the build stage, and\ntest phase during the test stage.\n\n### Image Pipeline\n\nAn image pipeline provides the automation framework for building secure AMIs and container images. The pipeline\norchestrates the entire image creation process by combining an image recipe or container recipe with infrastructure\nconfiguration and distribution configuration. Pipelines can run on a schedule or be triggered manually, and they manage\nthe build, test, and distribution phases automatically.\n\n#### Image Pipeline Basic Usage\n\nCreate a simple AMI pipeline with just an image recipe:\n\n```ts\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'MyImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  )\n});\n\nconst imagePipeline = new imagebuilder.ImagePipeline(this, 'MyImagePipeline', {\n  recipe: exampleImageRecipe\n});\n```\n\nCreate a simple container pipeline with just a container recipe:\n\n```ts\nconst containerRecipe = new imagebuilder.ContainerRecipe(this, 'MyContainerRecipe', {\n  baseImage: imagebuilder.BaseContainerImage.fromDockerHub('amazonlinux', 'latest'),\n  targetRepository: imagebuilder.Repository.fromEcr(\n    ecr.Repository.fromRepositoryName(this, 'Repository', 'my-container-repo')\n  )\n});\n\nconst containerPipeline = new imagebuilder.ImagePipeline(this, 'MyContainerPipeline', {\n  recipe: exampleContainerRecipe\n});\n```\n\n#### Image Pipeline Scheduling\n\n##### Manual Pipeline Execution\n\nCreate a pipeline that runs only when manually triggered:\n\n```ts\nconst manualPipeline = new imagebuilder.ImagePipeline(this, 'ManualPipeline', {\n  imagePipelineName: 'my-manual-pipeline',\n  description: 'Pipeline triggered manually for production builds',\n  recipe: exampleImageRecipe\n  // No schedule property - manual execution only\n});\n\n// Grant Lambda function permission to trigger the pipeline\nmanualPipeline.grantStartExecution(lambdaRole);\n```\n\n##### Automated Pipeline Scheduling\n\nSchedule a pipeline to run automatically using cron expressions:\n\n```ts\nconst weeklyPipeline = new imagebuilder.ImagePipeline(this, 'WeeklyPipeline', {\n  imagePipelineName: 'weekly-build-pipeline',\n  recipe: exampleImageRecipe,\n  schedule: {\n    expression: events.Schedule.cron({\n      minute: '0',\n      hour: '6',\n      weekDay: 'MON'\n    })\n  }\n});\n```\n\nUse rate expressions for regular intervals:\n\n```ts\nconst dailyPipeline = new imagebuilder.ImagePipeline(this, 'DailyPipeline', {\n  recipe: exampleContainerRecipe,\n  schedule: {\n    expression: events.Schedule.rate(Duration.days(1))\n  }\n});\n```\n\n##### Pipeline Schedule Configuration\n\nConfigure advanced scheduling options:\n\n```ts\nconst advancedSchedulePipeline = new imagebuilder.ImagePipeline(this, 'AdvancedSchedulePipeline', {\n  recipe: exampleImageRecipe,\n  schedule: {\n    expression: events.Schedule.rate(Duration.days(7)),\n    // Only trigger when dependencies are updated (new base images, components, etc.)\n    startCondition: imagebuilder.ScheduleStartCondition.EXPRESSION_MATCH_AND_DEPENDENCY_UPDATES_AVAILABLE,\n    // Automatically disable after 3 consecutive failures\n    autoDisableFailureCount: 3\n  },\n  // Start enabled\n  status: imagebuilder.ImagePipelineStatus.ENABLED\n});\n```\n\n#### Image Pipeline Configuration\n\n##### Infrastructure and Distribution in Image Pipelines\n\nConfigure custom infrastructure and distribution settings:\n\n```ts\nconst infrastructureConfiguration = new imagebuilder.InfrastructureConfiguration(this, 'Infrastructure', {\n  infrastructureConfigurationName: 'production-infrastructure',\n  instanceTypes: [\n    ec2.InstanceType.of(ec2.InstanceClass.COMPUTE7_INTEL, ec2.InstanceSize.LARGE)\n  ],\n  vpc: vpc,\n  subnetSelection: { subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS }\n});\n\nconst distributionConfiguration = new imagebuilder.DistributionConfiguration(this, 'Distribution');\ndistributionConfiguration.addAmiDistributions({\n  amiName: 'production-ami-{{ imagebuilder:buildDate }}',\n  amiTargetAccountIds: ['123456789012', '098765432109']\n});\n\nconst productionPipeline = new imagebuilder.ImagePipeline(this, 'ProductionPipeline', {\n  recipe: exampleImageRecipe,\n  infrastructureConfiguration: infrastructureConfiguration,\n  distributionConfiguration: distributionConfiguration\n});\n```\n\n##### Pipeline Logging Configuration\n\nConfigure custom CloudWatch log groups for pipeline and image logs:\n\n```ts\nconst pipelineLogGroup = new logs.LogGroup(this, 'PipelineLogGroup', {\n  logGroupName: '/custom/imagebuilder/pipeline/logs',\n  retention: logs.RetentionDays.ONE_MONTH\n});\n\nconst imageLogGroup = new logs.LogGroup(this, 'ImageLogGroup', {\n  logGroupName: '/custom/imagebuilder/image/logs',\n  retention: logs.RetentionDays.ONE_WEEK\n});\n\nconst loggedPipeline = new imagebuilder.ImagePipeline(this, 'LoggedPipeline', {\n  recipe: exampleImageRecipe,\n  imagePipelineLogGroup: pipelineLogGroup,\n  imageLogGroup: imageLogGroup\n});\n```\n\n##### Workflow Integration in Image Pipelines\n\nUse AWS-managed workflows for common pipeline phases:\n\n```ts\nconst workflowPipeline = new imagebuilder.ImagePipeline(this, 'WorkflowPipeline', {\n  recipe: exampleImageRecipe,\n  workflows: [\n    { workflow: imagebuilder.AwsManagedWorkflow.buildImage(this, 'BuildWorkflow') },\n    { workflow: imagebuilder.AwsManagedWorkflow.testImage(this, 'TestWorkflow') }\n  ]\n});\n```\n\nFor container pipelines, use container-specific workflows:\n\n```ts\nconst containerWorkflowPipeline = new imagebuilder.ImagePipeline(this, 'ContainerWorkflowPipeline', {\n  recipe: exampleContainerRecipe,\n  workflows: [\n    { workflow: imagebuilder.AwsManagedWorkflow.buildContainer(this, 'BuildContainer') },\n    { workflow: imagebuilder.AwsManagedWorkflow.testContainer(this, 'TestContainer') },\n    { workflow: imagebuilder.AwsManagedWorkflow.distributeContainer(this, 'DistributeContainer') }\n  ]\n});\n```\n\n##### Advanced Features in Image Pipelines\n\nConfigure image scanning for container pipelines:\n\n```ts\nconst scanningRepository = new ecr.Repository(this, 'ScanningRepo');\n\nconst scannedContainerPipeline = new imagebuilder.ImagePipeline(this, 'ScannedContainerPipeline', {\n  recipe: exampleContainerRecipe,\n  imageScanningEnabled: true,\n  imageScanningEcrRepository: scanningRepository,\n  imageScanningEcrTags: ['security-scan', 'latest']\n});\n```\n\nControl metadata collection and testing:\n\n```ts\nconst controlledPipeline = new imagebuilder.ImagePipeline(this, 'ControlledPipeline', {\n  recipe: exampleImageRecipe,\n  enhancedImageMetadataEnabled: true,  // Collect detailed OS and package info\n  imageTestsEnabled: false  // Skip testing phase for faster builds\n});\n```\n\n#### Image Pipeline Events\n\n##### Pipeline Event Handling\n\nHandle specific pipeline events:\n\n```ts\n// Monitor CVE detection\nexamplePipeline.onCVEDetected('CVEAlert', {\n  target: new targets.SnsTopic(topic)\n});\n\n// Handle pipeline auto-disable events\nexamplePipeline.onImagePipelineAutoDisabled('PipelineDisabledAlert', {\n  target: new targets.LambdaFunction(lambdaFunction)\n});\n```\n\n#### Importing Image Pipelines\n\nReference existing pipelines created outside CDK:\n\n```ts\n// Import by name\nconst existingPipelineByName = imagebuilder.ImagePipeline.fromImagePipelineName(\n  this,\n  'ExistingPipelineByName',\n  'my-existing-pipeline'\n);\n\n// Import by ARN\nconst existingPipelineByArn = imagebuilder.ImagePipeline.fromImagePipelineArn(\n  this,\n  'ExistingPipelineByArn',\n  'arn:aws:imagebuilder:us-east-1:123456789012:image-pipeline/imported-pipeline'\n);\n\n// Grant permissions to imported pipelines\nconst automationRole = new iam.Role(this, 'AutomationRole', {\n  assumedBy: new iam.ServicePrincipal('lambda.amazonaws.com')\n});\n\nexistingPipelineByName.grantStartExecution(automationRole);\nexistingPipelineByArn.grantRead(lambdaRole);\n```\n\n### Image\n\nAn image is the output resource created by Image Builder, consisting of an AMI or container image plus metadata such as\nversion, platform, and creation details. Images are used as base images for future builds and can be shared across AWS\naccounts. While images are the output from image pipeline executions, they can also be created in an ad-hoc manner\noutside a pipeline, defined as a standalone resource.\n\n#### Image Basic Usage\n\nCreate a simple AMI-based image from an image recipe:\n\n```ts\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'MyImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  )\n});\n\nconst amiImage = new imagebuilder.Image(this, 'MyAmiImage', {\n  recipe: imageRecipe\n});\n```\n\nCreate a simple container image from a container recipe:\n\n```ts\nconst containerRecipe = new imagebuilder.ContainerRecipe(this, 'MyContainerRecipe', {\n  baseImage: imagebuilder.BaseContainerImage.fromDockerHub('amazonlinux', 'latest'),\n  targetRepository: imagebuilder.Repository.fromEcr(\n    ecr.Repository.fromRepositoryName(this, 'Repository', 'my-container-repo')\n  )\n});\n\nconst containerImage = new imagebuilder.Image(this, 'MyContainerImage', {\n  recipe: containerRecipe\n});\n```\n\n#### AWS-Managed Images\n\n##### Pre-defined OS Images\n\nUse AWS-managed images for common operating systems:\n\n```ts\n// Amazon Linux 2023 AMI for x86_64\nconst amazonLinux2023Ami = imagebuilder.AmazonManagedImage.amazonLinux2023(this, 'AmazonLinux2023', {\n  imageType: imagebuilder.ImageType.AMI,\n  imageArchitecture: imagebuilder.ImageArchitecture.X86_64\n});\n\n// Ubuntu 22.04 AMI for ARM64\nconst ubuntu2204Ami = imagebuilder.AmazonManagedImage.ubuntuServer2204(this, 'Ubuntu2204', {\n  imageType: imagebuilder.ImageType.AMI,\n  imageArchitecture: imagebuilder.ImageArchitecture.ARM64\n});\n\n// Windows Server 2022 Full AMI\nconst windows2022Ami = imagebuilder.AmazonManagedImage.windowsServer2022Full(this, 'Windows2022', {\n  imageType: imagebuilder.ImageType.AMI,\n  imageArchitecture: imagebuilder.ImageArchitecture.X86_64\n});\n\n// Use as base image in recipe\nconst managedImageRecipe = new imagebuilder.ImageRecipe(this, 'ManagedImageRecipe', {\n  baseImage: amazonLinux2023Ami.toBaseImage()\n});\n```\n\n##### Custom AWS-Managed Images\n\nImport AWS-managed images by name or attributes:\n\n```ts\n// Import by name\nconst managedImageByName = imagebuilder.AmazonManagedImage.fromAmazonManagedImageName(\n  this,\n  'ManagedImageByName',\n  'amazon-linux-2023-x86'\n);\n\n// Import by attributes with specific version\nconst managedImageByAttributes = imagebuilder.AmazonManagedImage.fromAmazonManagedImageAttributes(this, 'ManagedImageByAttributes', {\n  imageName: 'ubuntu-server-22-lts-x86',\n  imageVersion: '2024.11.25'\n});\n```\n\n#### Image Configuration\n\n##### Infrastructure and Distribution in Images\n\nConfigure custom infrastructure and distribution settings:\n\n```ts\nconst infrastructureConfiguration = new imagebuilder.InfrastructureConfiguration(this, 'Infrastructure', {\n  infrastructureConfigurationName: 'production-infrastructure',\n  instanceTypes: [\n    ec2.InstanceType.of(ec2.InstanceClass.COMPUTE7_INTEL, ec2.InstanceSize.LARGE)\n  ],\n  vpc: vpc,\n  subnetSelection: { subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS }\n});\n\nconst distributionConfiguration = new imagebuilder.DistributionConfiguration(this, 'Distribution');\ndistributionConfiguration.addAmiDistributions({\n  amiName: 'production-ami-{{ imagebuilder:buildDate }}',\n  amiTargetAccountIds: ['123456789012', '098765432109']\n});\n\nconst productionImage = new imagebuilder.Image(this, 'ProductionImage', {\n  recipe: exampleImageRecipe,\n  infrastructureConfiguration: infrastructureConfiguration,\n  distributionConfiguration: distributionConfiguration\n});\n```\n\n##### Logging Configuration\n\nConfigure custom CloudWatch log groups for image builds:\n\n```ts\nconst logGroup = new logs.LogGroup(this, 'ImageLogGroup', {\n  logGroupName: '/custom/imagebuilder/image/logs',\n  retention: logs.RetentionDays.ONE_MONTH\n});\n\nconst loggedImage = new imagebuilder.Image(this, 'LoggedImage', {\n  recipe: exampleImageRecipe,\n  logGroup: logGroup\n});\n```\n\n##### Workflow Integration in Images\n\nUse workflows for custom build, test, and distribution processes:\n\n```ts\nconst imageWithWorkflows = new imagebuilder.Image(this, 'ImageWithWorkflows', {\n  recipe: exampleImageRecipe,\n  workflows: [\n    { workflow: imagebuilder.AwsManagedWorkflow.buildImage(this, 'BuildWorkflow') },\n    { workflow: imagebuilder.AwsManagedWorkflow.testImage(this, 'TestWorkflow') }\n  ]\n});\n```\n\n##### Advanced Features in Images\n\nConfigure image scanning, metadata collection, and testing:\n\n```ts\nconst scanningRepository = new ecr.Repository(this, 'ScanningRepository');\n\nconst advancedContainerImage = new imagebuilder.Image(this, 'AdvancedContainerImage', {\n  recipe: exampleContainerRecipe,\n  imageScanningEnabled: true,\n  imageScanningEcrRepository: scanningRepository,\n  imageScanningEcrTags: ['security-scan', 'latest'],\n  enhancedImageMetadataEnabled: true,\n  imageTestsEnabled: false  // Skip testing for faster builds\n});\n```\n\n#### Importing Images\n\nReference existing images created outside CDK:\n\n```ts\n// Import by name\nconst existingImageByName = imagebuilder.Image.fromImageName(\n  this,\n  'ExistingImageByName',\n  'my-existing-image'\n);\n\n// Import by ARN\nconst existingImageByArn = imagebuilder.Image.fromImageArn(\n  this,\n  'ExistingImageByArn',\n  'arn:aws:imagebuilder:us-east-1:123456789012:image/imported-image/1.0.0'\n);\n\n// Import by attributes\nconst existingImageByAttributes = imagebuilder.Image.fromImageAttributes(this, 'ExistingImageByAttributes', {\n  imageName: 'shared-base-image',\n  imageVersion: '2024.11.25'\n});\n\n// Grant permissions to imported images\nconst role = new iam.Role(this, 'ImageAccessRole', {\n  assumedBy: new iam.ServicePrincipal('lambda.amazonaws.com')\n});\n\nexistingImageByName.grantRead(role);\nexistingImageByArn.grant(role, 'imagebuilder:GetImage', 'imagebuilder:ListImagePackages');\n```\n\n### Image Recipe\n\n#### Image Recipe Basic Usage\n\nCreate an image recipe with the required base image:\n\n```ts\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'MyImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  )\n});\n```\n\n#### Image Recipe Base Images\n\nTo create a recipe, you have to select a base image to build and customize from. This base image can be referenced from\nvarious sources, such as from SSM parameters, AWS Marketplace products, and AMI IDs directly.\n\n##### SSM Parameters\n\nUsing SSM parameter references:\n\n```ts\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'SsmImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  )\n});\n\n// Using an SSM parameter construct\nconst parameter = ssm.StringParameter.fromStringParameterName(\n  this,\n  'BaseImageParameter',\n  '/aws/service/ami-windows-latest/Windows_Server-2022-English-Full-Base'\n);\nconst windowsRecipe = new imagebuilder.ImageRecipe(this, 'WindowsImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameter(parameter)\n});\n```\n\n##### AMI IDs\n\nWhen you have a specific AMI to use:\n\n```ts\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'AmiImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromAmiId('ami-12345678')\n});\n```\n\n##### Marketplace Images\n\nFor marketplace base images:\n\n```ts\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'MarketplaceImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromMarketplaceProductId('prod-1234567890abcdef0')\n});\n```\n\n#### Image Recipe Components\n\nComponents from various sources, such as custom-owned, AWS-owned, or AWS Marketplace-owned, can optionally be included\nin recipes. For parameterized components, you are able to provide the parameters to use in the recipe, which will be\napplied during the image build when executing components.\n\n##### Custom Components in Image Recipes\n\nAdd your own components to the recipe:\n\n```ts\nconst customComponent = new imagebuilder.Component(this, 'MyComponent', {\n  platform: imagebuilder.Platform.LINUX,\n  data: imagebuilder.ComponentData.fromJsonObject({\n    schemaVersion: imagebuilder.ComponentSchemaVersion.V1_0,\n    phases: [\n      {\n        name: imagebuilder.ComponentPhaseName.BUILD,\n        steps: [\n          {\n            name: 'install-app',\n            action: imagebuilder.ComponentAction.EXECUTE_BASH,\n            inputs: {\n              commands: ['yum install -y my-application']\n            }\n          }\n        ]\n      }\n    ]\n  })\n});\n\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'ComponentImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  ),\n  components: [\n    {\n      component: customComponent\n    }\n  ]\n});\n```\n\n##### AWS-Managed Components in Image Recipes\n\nUse pre-built AWS components:\n\n```ts\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'AmazonManagedImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  ),\n  components: [\n    {\n      component: imagebuilder.AwsManagedComponent.updateOS(this, 'UpdateOS', {\n        platform: imagebuilder.Platform.LINUX\n      })\n    },\n    {\n      component: imagebuilder.AwsManagedComponent.awsCliV2(this, 'AwsCli', {\n        platform: imagebuilder.Platform.LINUX\n      })\n    }\n  ]\n});\n```\n\n##### Component Parameters in Image Recipes\n\nPass parameters to components that accept them:\n\n```ts\nconst parameterizedComponent = imagebuilder.Component.fromComponentName(\n  this,\n  'ParameterizedComponent',\n  'my-parameterized-component'\n);\n\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'ParameterizedImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  ),\n  components: [\n    {\n      component: parameterizedComponent,\n      parameters: {\n        environment: imagebuilder.ComponentParameterValue.fromString('production'),\n        version: imagebuilder.ComponentParameterValue.fromString('1.0.0')\n      }\n    }\n  ]\n});\n```\n\n#### Image Recipe Configuration\n\n##### Block Device Configuration\n\nConfigure storage for the build instance:\n\n```ts\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'BlockDeviceImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  ),\n  blockDevices: [\n    {\n      deviceName: '/dev/sda1',\n      volume: ec2.BlockDeviceVolume.ebs(100, {\n        encrypted: true,\n        volumeType: ec2.EbsDeviceVolumeType.GENERAL_PURPOSE_SSD_GP3\n      })\n    }\n  ]\n});\n```\n\n##### AMI Tagging\n\nTag the output AMI:\n\n```ts\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'TaggedImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  ),\n  amiTags: {\n    Environment: 'Production',\n    Application: 'WebServer',\n    Owner: 'DevOps Team'\n  }\n});\n```\n\n### Container Recipe\n\nA container recipe is similar to an image recipe but specifically for container images. It defines the base container\nimage and components applied to produce the desired configuration for the output container image. Container recipes work\nwith Docker images from DockerHub, Amazon ECR, or Amazon-managed container images as starting points.\n\n#### Container Recipe Basic Usage\n\nCreate a container recipe with the required base image and target repository:\n\n```ts\nconst containerRecipe = new imagebuilder.ContainerRecipe(this, 'MyContainerRecipe', {\n  baseImage: imagebuilder.BaseContainerImage.fromDockerHub('amazonlinux', 'latest'),\n  targetRepository: imagebuilder.Repository.fromEcr(\n    ecr.Repository.fromRepositoryName(this, 'Repository', 'my-container-repo')\n  )\n});\n```\n\n#### Container Recipe Base Images\n\n##### DockerHub Images\n\nUsing public Docker Hub images:\n\n```ts\nconst containerRecipe = new imagebuilder.ContainerRecipe(this, 'DockerHubContainerRecipe', {\n  baseImage: imagebuilder.BaseContainerImage.fromDockerHub('amazonlinux', 'latest'),\n  targetRepository: imagebuilder.Repository.fromEcr(\n    ecr.Repository.fromRepositoryName(this, 'Repository', 'my-container-repo')\n  )\n});\n```\n\n##### ECR Images\n\nUsing images from your own ECR repositories:\n\n```ts\nconst sourceRepo = ecr.Repository.fromRepositoryName(this, 'SourceRepo', 'my-base-image');\nconst targetRepo = ecr.Repository.fromRepositoryName(this, 'TargetRepo', 'my-container-repo');\n\nconst containerRecipe = new imagebuilder.ContainerRecipe(this, 'EcrContainerRecipe', {\n  baseImage: imagebuilder.BaseContainerImage.fromEcr(sourceRepo, '1.0.0'),\n  targetRepository: imagebuilder.Repository.fromEcr(targetRepo)\n});\n```\n\n##### ECR Public Images\n\nUsing images from Amazon ECR Public:\n\n```ts\nconst containerRecipe = new imagebuilder.ContainerRecipe(this, 'EcrPublicContainerRecipe', {\n  baseImage: imagebuilder.BaseContainerImage.fromEcrPublic('amazonlinux', 'amazonlinux', '2023'),\n  targetRepository: imagebuilder.Repository.fromEcr(\n    ecr.Repository.fromRepositoryName(this, 'Repository', 'my-container-repo')\n  )\n});\n```\n\n#### Container Recipe Components\n\n##### Custom Components in Container Recipes\n\nAdd your own components to the container recipe:\n\n```ts\nconst customComponent = new imagebuilder.Component(this, 'MyComponent', {\n  platform: imagebuilder.Platform.LINUX,\n  data: imagebuilder.ComponentData.fromJsonObject({\n    schemaVersion: imagebuilder.ComponentSchemaVersion.V1_0,\n    phases: [\n      {\n        name: imagebuilder.ComponentPhaseName.BUILD,\n        steps: [\n          {\n            name: 'install-app',\n            action: imagebuilder.ComponentAction.EXECUTE_BASH,\n            inputs: {\n              commands: ['yum install -y my-container-application']\n            }\n          }\n        ]\n      }\n    ]\n  })\n});\n\nconst containerRecipe = new imagebuilder.ContainerRecipe(this, 'ComponentContainerRecipe', {\n  baseImage: imagebuilder.BaseContainerImage.fromDockerHub('amazonlinux', 'latest'),\n  targetRepository: imagebuilder.Repository.fromEcr(\n    ecr.Repository.fromRepositoryName(this, 'Repository', 'my-container-repo')\n  ),\n  components: [\n    {\n      component: customComponent\n    }\n  ]\n});\n```\n\n##### AWS-Managed Components in Container Recipes\n\nUse pre-built AWS components:\n\n```ts\nconst containerRecipe = new imagebuilder.ContainerRecipe(this, 'AwsManagedContainerRecipe', {\n  baseImage: imagebuilder.BaseContainerImage.fromDockerHub('amazonlinux', 'latest'),\n  targetRepository: imagebuilder.Repository.fromEcr(\n    ecr.Repository.fromRepositoryName(this, 'Repository', 'my-container-repo')\n  ),\n  components: [\n    {\n      component: imagebuilder.AwsManagedComponent.updateOS(this, 'UpdateOS', {\n        platform: imagebuilder.Platform.LINUX\n      })\n    },\n    {\n      component: imagebuilder.AwsManagedComponent.awsCliV2(this, 'AwsCli', {\n        platform: imagebuilder.Platform.LINUX\n      })\n    }\n  ]\n});\n```\n\n#### Container Recipe Configuration\n\n##### Custom Dockerfile\n\nProvide your own Dockerfile template:\n\n```ts\nconst containerRecipe = new imagebuilder.ContainerRecipe(this, 'CustomDockerfileContainerRecipe', {\n  baseImage: imagebuilder.BaseContainerImage.fromDockerHub('amazonlinux', 'latest'),\n  targetRepository: imagebuilder.Repository.fromEcr(\n    ecr.Repository.fromRepositoryName(this, 'Repository', 'my-container-repo')\n  ),\n  dockerfile: imagebuilder.DockerfileData.fromInline(`\nFROM {{{ imagebuilder:parentImage }}}\nCMD [\"echo\", \"Hello, world!\"]\n{{{ imagebuilder:environments }}}\n{{{ imagebuilder:components }}}\n`)\n});\n```\n\n##### Instance Configuration\n\nConfigure the build instance:\n\n```ts\nconst containerRecipe = new imagebuilder.ContainerRecipe(this, 'InstanceConfigContainerRecipe', {\n  baseImage: imagebuilder.BaseContainerImage.fromDockerHub('amazonlinux', 'latest'),\n  targetRepository: imagebuilder.Repository.fromEcr(\n    ecr.Repository.fromRepositoryName(this, 'Repository', 'my-container-repo')\n  ),\n  // Custom ECS-optimized AMI for building\n  instanceImage: imagebuilder.ContainerInstanceImage.fromSsmParameterName(\n    '/aws/service/ecs/optimized-ami/amazon-linux-2023/recommended/image_id'\n  ),\n  // Additional storage for build process\n  instanceBlockDevices: [\n    {\n      deviceName: '/dev/xvda',\n      volume: ec2.BlockDeviceVolume.ebs(50, {\n        encrypted: true,\n        volumeType: ec2.EbsDeviceVolumeType.GENERAL_PURPOSE_SSD_GP3\n      })\n    }\n  ]\n});\n```\n\n### Component\n\nA component defines the sequence of steps required to customize an instance during image creation (build component) or\ntest an instance launched from the created image (test component). Components are created from declarative YAML or JSON\ndocuments that describe runtime configuration for building, validating, or testing instances. Components are included\nwhen added to the image recipe or container recipe for an image build.\n\nEC2 Image Builder supports AWS-managed components for common tasks, AWS Marketplace components, and custom components\nthat you create. Components run during specific workflow phases: build and validate phases during the build stage, and\ntest phase during the test stage.\n\n#### Basic Component Usage\n\nCreate a component with the required properties: platform and component data.\n\n```ts\nconst component = new imagebuilder.Component(this, 'MyComponent', {\n  platform: imagebuilder.Platform.LINUX,\n  data: imagebuilder.ComponentData.fromJsonObject({\n    schemaVersion: imagebuilder.ComponentSchemaVersion.V1_0,\n    phases: [\n      {\n        name: imagebuilder.ComponentPhaseName.BUILD,\n        steps: [\n          {\n            name: 'install-app',\n            action: imagebuilder.ComponentAction.EXECUTE_BASH,\n            inputs: {\n              commands: ['echo \"Installing my application...\"', 'yum update -y'],\n            },\n          },\n        ],\n      },\n    ],\n  }),\n});\n```\n\n#### Component Data Sources\n\n##### Inline Component Data\n\nUse `ComponentData.fromInline()` for existing YAML/JSON definitions:\n\n```ts\nconst component = new imagebuilder.Component(this, 'InlineComponent', {\n  platform: imagebuilder.Platform.LINUX,\n  data: imagebuilder.ComponentData.fromInline(`\nname: my-component\nschemaVersion: 1.0\nphases:\n  - name: build\n    steps:\n      - name: update-os\n        action: ExecuteBash\n        inputs:\n          commands: ['yum update -y']\n`)\n});\n```\n\n##### JSON Object Component Data\n\nMost developer-friendly approach using objects:\n\n```ts\n\nconst component = new imagebuilder.Component(this, 'JsonComponent', {\n  platform: imagebuilder.Platform.LINUX,\n  data: imagebuilder.ComponentData.fromJsonObject({\n    schemaVersion: imagebuilder.ComponentSchemaVersion.V1_0,\n    phases: [\n      {\n        name: imagebuilder.ComponentPhaseName.BUILD,\n        steps: [\n          {\n            name: 'configure-app',\n            action: imagebuilder.ComponentAction.CREATE_FILE,\n            inputs: {\n              path: '/etc/myapp/config.json',\n              content: '{\"env\": \"production\"}'\n            }\n          }\n        ]\n      }\n    ]\n  })\n});\n```\n\n##### Structured Component Document\n\nFor type-safe, CDK-native definitions with enhanced properties like `timeout` and `onFailure`.\n\n###### Defining a component step\n\nYou can define steps in the component which will be executed in order when the component is applied:\n\n```ts\nconst step: imagebuilder.ComponentDocumentStep = {\n  name: 'configure-app',\n  action: imagebuilder.ComponentAction.CREATE_FILE,\n  inputs: imagebuilder.ComponentStepInputs.fromObject({\n    path: '/etc/myapp/config.json',\n    content: '{\"env\": \"production\"}'\n  })\n};\n```\n\n###### Defining a component phase\n\nPhases group steps together, which run in sequence when building, validating or testing in the component:\n\n```ts\nconst phase: imagebuilder.ComponentDocumentPhase = {\n  name: imagebuilder.ComponentPhaseName.BUILD,\n  steps: [\n    {\n      name: 'configure-app',\n      action: imagebuilder.ComponentAction.CREATE_FILE,\n      inputs: imagebuilder.ComponentStepInputs.fromObject({\n        path: '/etc/myapp/config.json',\n        content: '{\"env\": \"production\"}'\n      })\n    }\n  ]\n};\n```\n\n###### Defining a component\n\nThe component data defines all steps across the provided phases to execute during the build:\n\n```ts\nconst component = new imagebuilder.Component(this, 'StructuredComponent', {\n  platform: imagebuilder.Platform.LINUX,\n  data: imagebuilder.ComponentData.fromComponentDocumentJsonObject({\n    schemaVersion: imagebuilder.ComponentSchemaVersion.V1_0,\n    phases: [\n      {\n        name: imagebuilder.ComponentPhaseName.BUILD,\n        steps: [\n          {\n            name: 'install-with-timeout',\n            action: imagebuilder.ComponentAction.EXECUTE_BASH,\n            timeout: Duration.minutes(10),\n            onFailure: imagebuilder.ComponentOnFailure.CONTINUE,\n            inputs: imagebuilder.ComponentStepInputs.fromObject({\n              commands: ['./install-script.sh']\n            })\n          }\n        ]\n      }\n    ]\n  })\n});\n```\n\n##### S3 Component Data\n\nFor those components you want to upload or have uploaded to S3:\n\n```ts\n// Upload a local file\nconst componentFromAsset = new imagebuilder.Component(this, 'AssetComponent', {\n  platform: imagebuilder.Platform.LINUX,\n  data: imagebuilder.ComponentData.fromAsset(this, 'ComponentAsset', './my-component.yml'),\n});\n\n// Reference an existing S3 object\nconst bucket = s3.Bucket.fromBucketName(this, 'ComponentBucket', 'my-components-bucket');\nconst componentFromS3 = new imagebuilder.Component(this, 'S3Component', {\n  platform: imagebuilder.Platform.LINUX,\n  data: imagebuilder.ComponentData.fromS3(bucket, 'components/my-component.yml'),\n});\n```\n\n#### Encrypt component data with a KMS key\n\nYou can encrypt component data with a KMS key, so that only principals with access to decrypt with the key are able to\naccess the component data.\n\n```ts\nconst component = new imagebuilder.Component(this, 'EncryptedComponent', {\n  platform: imagebuilder.Platform.LINUX,\n  kmsKey: new kms.Key(this, 'ComponentKey'),\n  data: imagebuilder.ComponentData.fromJsonObject({\n    schemaVersion: imagebuilder.ComponentSchemaVersion.V1_0,\n    phases: [\n      {\n        name: imagebuilder.ComponentPhaseName.BUILD,\n        steps: [\n          {\n            name: 'secure-setup',\n            action: imagebuilder.ComponentAction.EXECUTE_BASH,\n            inputs: {\n              commands: ['echo \"This component data is encrypted with KMS\"']\n            }\n          }\n        ]\n      }\n    ]\n  })\n});\n```\n\n#### AWS-Managed Components\n\nAWS provides a collection of managed components for common tasks:\n\n```ts\n// Install AWS CLI v2\nconst awsCliComponent = imagebuilder.AwsManagedComponent.awsCliV2(this, 'AwsCli', {\n  platform: imagebuilder.Platform.LINUX\n});\n\n// Update the operating system\nconst updateComponent = imagebuilder.AwsManagedComponent.updateOS(this, 'UpdateOS', {\n  platform: imagebuilder.Platform.LINUX\n});\n\n// Reference any AWS-managed component by name\nconst customAwsComponent = imagebuilder.AwsManagedComponent.fromAwsManagedComponentName(\n  this,\n  'CloudWatchAgent',\n  'amazon-cloudwatch-agent-linux'\n);\n```\n\n#### AWS Marketplace Components\n\nYou can reference AWS Marketplace components using the marketplace component name and its product ID:\n\n```ts\nconst marketplaceComponent = imagebuilder.AwsMarketplaceComponent.fromAwsMarketplaceComponentAttributes(\n  this,\n  'MarketplaceComponent',\n  {\n    componentName: 'my-marketplace-component',\n    marketplaceProductId: 'prod-1234567890abcdef0',\n  }\n);\n```\n\n### Infrastructure Configuration\n\nInfrastructure configuration defines the compute resources and environment settings used during the image building\nprocess. This includes instance types, IAM instance profile, VPC settings, subnets, security groups, SNS topics for\nnotifications, logging configuration, and troubleshooting settings like whether to terminate instances on failure or\nkeep them running for debugging. These settings are applied to builds when included in an image or an image pipeline.\n\n```ts\nconst infrastructureConfiguration = new imagebuilder.InfrastructureConfiguration(this, 'InfrastructureConfiguration', {\n  infrastructureConfigurationName: 'test-infrastructure-configuration',\n  description: 'An Infrastructure Configuration',\n  // Optional - instance types to use for build/test\n  instanceTypes: [\n    ec2.InstanceType.of(ec2.InstanceClass.STANDARD7_INTEL, ec2.InstanceSize.LARGE),\n    ec2.InstanceType.of(ec2.InstanceClass.BURSTABLE3, ec2.InstanceSize.LARGE)\n  ],\n  // Optional - create an instance profile with necessary permissions\n  instanceProfile: new iam.InstanceProfile(this, 'InstanceProfile', {\n    instanceProfileName: 'test-instance-profile',\n    role: new iam.Role(this, 'InstanceProfileRole', {\n      assumedBy: iam.ServicePrincipal.fromStaticServicePrincipleName('ec2.amazonaws.com'),\n      managedPolicies: [\n        iam.ManagedPolicy.fromAwsManagedPolicyName('AmazonSSMManagedInstanceCore'),\n        iam.ManagedPolicy.fromAwsManagedPolicyName('EC2InstanceProfileForImageBuilder')\n      ]\n    })\n  }),\n  // Use VPC network configuration\n  vpc,\n  subnetSelection: { subnetType: ec2.SubnetType.PUBLIC },\n  securityGroups: [ec2.SecurityGroup.fromSecurityGroupId(this, 'SecurityGroup', vpc.vpcDefaultSecurityGroup)],\n  keyPair: ec2.KeyPair.fromKeyPairName(this, 'KeyPair', 'imagebuilder-instance-key-pair'),\n  terminateInstanceOnFailure: true,\n  // Optional - IMDSv2 settings\n  httpTokens: imagebuilder.HttpTokens.REQUIRED,\n  httpPutResponseHopLimit: 1,\n  // Optional - publish image completion messages to an SNS topic\n  notificationTopic: sns.Topic.fromTopicArn(\n    this,\n    'Topic',\n    this.formatArn({ service: 'sns', resource: 'image-builder-topic' })\n  ),\n  // Optional - log settings. Logging is enabled by default\n  logging: {\n    s3Bucket: s3.Bucket.fromBucketName(this, 'LogBucket', `imagebuilder-logging-${Aws.ACCOUNT_ID}`),\n    s3KeyPrefix: 'imagebuilder-logs'\n  },\n  // Optional - host placement settings\n  ec2InstanceAvailabilityZone: Stack.of(this).availabilityZones[0],\n  ec2InstanceHostId: dedicatedHost.attrHostId,\n  ec2InstanceTenancy: imagebuilder.Tenancy.HOST,\n  resourceTags: {\n    Environment: 'production'\n  }\n});\n```\n\n### Distribution Configuration\n\nDistribution configuration defines how and where your built images are distributed after successful creation. For AMIs,\nthis includes target AWS Regions, KMS encryption keys, account sharing permissions, License Manager associations, and\nlaunch template configurations. For container images, it specifies the target Amazon ECR repositories across regions.\nA distribution configuration can be associated with an image or an image pipeline to define these distribution settings\nfor image builds.\n\n#### AMI Distributions\n\nAMI distributions can be defined to copy and modify AMIs in different accounts and regions, and apply them to launch\ntemplates, SSM parameters, etc.:\n\n```ts\nconst distributionConfiguration = new imagebuilder.DistributionConfiguration(this, 'DistributionConfiguration', {\n  distributionConfigurationName: 'test-distribution-configuration',\n  description: 'A Distribution Configuration',\n  amiDistributions: [\n    {\n      // Distribute AMI to us-east-2 and publish the AMI ID to an SSM parameter\n      region: 'us-east-2',\n      ssmParameters: [\n        {\n          parameter: ssm.StringParameter.fromStringParameterAttributes(this, 'CrossRegionParameter', {\n            parameterName: '/imagebuilder/ami',\n            forceDynamicReference: true\n          })\n        }\n      ]\n    }\n  ]\n});\n\n// For AMI-based image builds - add an AMI distribution in the current region\ndistributionConfiguration.addAmiDistributions({\n  amiName: 'imagebuilder-{{ imagebuilder:buildDate }}',\n  amiDescription: 'Build AMI',\n  amiKmsKey: kms.Key.fromLookup(this, 'ComponentKey', { aliasName: 'alias/distribution-encryption-key' }),\n  // Copy the AMI to different accounts\n  amiTargetAccountIds: ['123456789012', '098765432109'],\n  // Add launch permissions on the AMI\n  amiLaunchPermission: {\n    organizationArns: [\n      this.formatArn({ region: '', service: 'organizations', resource: 'organization', resourceName: 'o-1234567abc' })\n    ],\n    organizationalUnitArns: [\n      this.formatArn({\n        region: '',\n        service: 'organizations',\n        resource: 'ou',\n        resourceName: 'o-1234567abc/ou-a123-b4567890'\n      })\n    ],\n    isPublicUserGroup: true,\n    accountIds: ['234567890123']\n  },\n  // Attach tags to the AMI\n  amiTags: {\n    Environment: 'production',\n    Version: '{{ imagebuilder:buildVersion }}'\n  },\n  // Optional - publish the distributed AMI ID to an SSM parameter\n  ssmParameters: [\n    {\n      parameter: ssm.StringParameter.fromStringParameterAttributes(this, 'Parameter', {\n        parameterName: '/imagebuilder/ami',\n        forceDynamicReference: true\n      })\n    },\n    {\n      amiAccount: '098765432109',\n      dataType: ssm.ParameterDataType.TEXT,\n      parameter: ssm.StringParameter.fromStringParameterAttributes(this, 'CrossAccountParameter', {\n        parameterName: 'imagebuilder-prod-ami',\n        forceDynamicReference: true\n      })\n    }\n  ],\n  // Optional - create a new launch template version with the distributed AMI ID\n  launchTemplates: [\n    {\n      launchTemplate: ec2.LaunchTemplate.fromLaunchTemplateAttributes(this, 'LaunchTemplate', {\n        launchTemplateId: 'lt-1234'\n      }),\n      setDefaultVersion: true\n    },\n    {\n      accountId: '123456789012',\n      launchTemplate: ec2.LaunchTemplate.fromLaunchTemplateAttributes(this, 'CrossAccountLaunchTemplate', {\n        launchTemplateId: 'lt-5678'\n      }),\n      setDefaultVersion: true\n    }\n  ],\n  // Optional - enable Fast Launch on an imported launch template\n  fastLaunchConfigurations: [\n    {\n      enabled: true,\n      launchTemplate: ec2.LaunchTemplate.fromLaunchTemplateAttributes(this, 'FastLaunchLT', {\n        launchTemplateName: 'fast-launch-lt'\n      }),\n      maxParallelLaunches: 10,\n      targetSnapshotCount: 2\n    }\n  ],\n  // Optional - license configurations to apply to the AMI\n  licenseConfigurationArns: [\n    'arn:aws:license-manager:us-west-2:123456789012:license-configuration:lic-abcdefghijklmnopqrstuvwxyz'\n  ]\n});\n```\n\n#### Container Distributions\n\n##### Container repositories\n\nContainer distributions can be configured to distribute to ECR repositories:\n\n```ts\nconst ecrRepository = ecr.Repository.fromRepositoryName(this, 'ECRRepository', 'my-repo');\nconst imageBuilderRepository = imagebuilder.Repository.fromEcr(ecrRepository);\n```\n\n##### Defining a container distribution\n\nYou can configure the container repositories as well as the description and tags applied to the distributed container\nimages:\n\n```ts\nconst ecrRepository = ecr.Repository.fromRepositoryName(this, 'ECRRepository', 'my-repo');\nconst containerRepository = imagebuilder.Repository.fromEcr(ecrRepository);\nconst containerDistributionConfiguration = new imagebuilder.DistributionConfiguration(\n  this,\n  'ContainerDistributionConfiguration'\n);\n\ncontainerDistributionConfiguration.addContainerDistributions({\n  containerRepository,\n  containerDescription: 'Test container image',\n  containerTags: ['latest', 'latest-1.0']\n});\n```\n\n### Workflow\n\nWorkflows define the sequence of steps that Image Builder performs during image creation. There are three workflow\ntypes: BUILD (image building), TEST (testing images), and DISTRIBUTION (distributing container images).\n\n#### Basic Workflow Usage\n\nCreate a workflow with the required properties: workflow type and workflow data.\n\n```ts\nconst workflow = new imagebuilder.Workflow(this, 'MyWorkflow', {\n  workflowType: imagebuilder.WorkflowType.BUILD,\n  data: imagebuilder.WorkflowData.fromJsonObject({\n    schemaVersion: imagebuilder.WorkflowSchemaVersion.V1_0,\n    steps: [\n      {\n        name: 'LaunchBuildInstance',\n        action: imagebuilder.WorkflowAction.LAUNCH_INSTANCE,\n        onFailure: imagebuilder.WorkflowOnFailure.ABORT,\n        inputs: {\n          waitFor: 'ssmAgent',\n        },\n      },\n      {\n        name: 'ExecuteComponents',\n        action: imagebuilder.WorkflowAction.EXECUTE_COMPONENTS,\n        onFailure: imagebuilder.WorkflowOnFailure.ABORT,\n        inputs: {\n          'instanceId': 'i-123',\n        },\n      },\n      {\n        name: 'CreateImage',\n        action: imagebuilder.WorkflowAction.CREATE_IMAGE,\n        onFailure: imagebuilder.WorkflowOnFailure.ABORT,\n        inputs: {\n          'instanceId': 'i-123',\n        },\n      },\n      {\n        name: 'TerminateInstance',\n        action: imagebuilder.WorkflowAction.TERMINATE_INSTANCE,\n        onFailure: imagebuilder.WorkflowOnFailure.CONTINUE,\n        inputs: {\n          'instanceId': 'i-123',\n        },\n      },\n    ],\n    outputs: [\n      {\n        name: 'ImageId',\n        value: '$.stepOutputs.CreateImage.imageId',\n      },\n    ],\n  }),\n});\n```\n\n#### Workflow Data Sources\n\n##### Inline Workflow Data\n\nUse `WorkflowData.fromInline()` for existing YAML/JSON definitions:\n\n```ts\nconst workflow = new imagebuilder.Workflow(this, 'InlineWorkflow', {\n  workflowType: imagebuilder.WorkflowType.TEST,\n  data: imagebuilder.WorkflowData.fromInline(`\nschemaVersion: 1.0\nsteps:\n  - name: LaunchTestInstance\n    action: LaunchInstance\n    onFailure: Abort\n    inputs:\n      waitFor: ssmAgent\n  - name: RunTests\n    action: RunCommand\n    onFailure: Abort\n    inputs:\n      instanceId.$: \"$.stepOutputs.LaunchTestInstance.instanceId\"\n      commands: ['./run-tests.sh']\n  - name: TerminateTestInstance\n    action: TerminateInstance\n    onFailure: Continue\n    inputs:\n      instanceId.$: \"$.stepOutputs.LaunchTestInstance.instanceId\"\n`),\n});\n```\n\n##### JSON Object Workflow Data\n\nMost developer-friendly approach using JavaScript objects:\n\n```ts\nconst workflow = new imagebuilder.Workflow(this, 'JsonWorkflow', {\n  workflowType: imagebuilder.WorkflowType.BUILD,\n  data: imagebuilder.WorkflowData.fromJsonObject({\n    schemaVersion: imagebuilder.WorkflowSchemaVersion.V1_0,\n    steps: [\n      {\n        name: 'LaunchBuildInstance',\n        action: imagebuilder.WorkflowAction.LAUNCH_INSTANCE,\n        onFailure: imagebuilder.WorkflowOnFailure.ABORT,\n        inputs: {\n          waitFor: 'ssmAgent'\n        }\n      },\n      {\n        name: 'ExecuteComponents',\n        action: imagebuilder.WorkflowAction.EXECUTE_COMPONENTS,\n        onFailure: imagebuilder.WorkflowOnFailure.ABORT,\n        inputs: {\n          'instanceId': 'i-123'\n        }\n      },\n      {\n        name: 'CreateImage',\n        action: imagebuilder.WorkflowAction.CREATE_IMAGE,\n        onFailure: imagebuilder.WorkflowOnFailure.ABORT,\n        inputs: {\n          'instanceId': 'i-123'\n        }\n      },\n      {\n        name: 'TerminateInstance',\n        action: imagebuilder.WorkflowAction.TERMINATE_INSTANCE,\n        onFailure: imagebuilder.WorkflowOnFailure.CONTINUE,\n        inputs: {\n          'instanceId': 'i-123'\n        }\n      }\n    ],\n    outputs: [\n      {\n        name: 'ImageId',\n        value: '$.stepOutputs.CreateImage.imageId'\n      }\n    ]\n  })\n});\n```\n\n##### S3 Workflow Data\n\nFor those workflows you want to upload or have uploaded to S3:\n\n```ts\n// Upload a local file\nconst workflowFromAsset = new imagebuilder.Workflow(this, 'AssetWorkflow', {\n  workflowType: imagebuilder.WorkflowType.BUILD,\n  data: imagebuilder.WorkflowData.fromAsset(this, 'WorkflowAsset', './my-workflow.yml'),\n});\n\n// Reference an existing S3 object\nconst bucket = s3.Bucket.fromBucketName(this, 'WorkflowBucket', 'my-workflows-bucket');\nconst workflowFromS3 = new imagebuilder.Workflow(this, 'S3Workflow', {\n  workflowType: imagebuilder.WorkflowType.BUILD,\n  data: imagebuilder.WorkflowData.fromS3(bucket, 'workflows/my-workflow.yml'),\n});\n```\n\n#### Encrypt workflow data with a KMS key\n\nYou can encrypt workflow data with a KMS key, so that only principals with access to decrypt with the key are able to\naccess the workflow data.\n\n```ts\nconst workflow = new imagebuilder.Workflow(this, 'EncryptedWorkflow', {\n  workflowType: imagebuilder.WorkflowType.BUILD,\n  kmsKey: new kms.Key(this, 'WorkflowKey'),\n  data: imagebuilder.WorkflowData.fromJsonObject({\n    schemaVersion: imagebuilder.WorkflowSchemaVersion.V1_0,\n    steps: [\n      {\n        name: 'LaunchBuildInstance',\n        action: imagebuilder.WorkflowAction.LAUNCH_INSTANCE,\n        onFailure: imagebuilder.WorkflowOnFailure.ABORT,\n        inputs: {\n          waitFor: 'ssmAgent',\n        },\n      },\n      {\n        name: 'CreateImage',\n        action: imagebuilder.WorkflowAction.CREATE_IMAGE,\n        onFailure: imagebuilder.WorkflowOnFailure.ABORT,\n        inputs: {\n          'instanceId': 'i-123',\n        },\n      },\n      {\n        name: 'TerminateInstance',\n        action: imagebuilder.WorkflowAction.TERMINATE_INSTANCE,\n        onFailure: imagebuilder.WorkflowOnFailure.CONTINUE,\n        inputs: {\n          'instanceId': 'i-123',\n        },\n      },\n    ],\n    outputs: [\n      {\n        name: 'ImageId',\n        value: '$.stepOutputs.CreateImage.imageId',\n      },\n    ],\n  }),\n});\n```\n\n#### AWS-Managed Workflows\n\nAWS provides a collection of workflows for common scenarios:\n\n```ts\n// Build workflows\nconst buildImageWorkflow = imagebuilder.AwsManagedWorkflow.buildImage(this, 'BuildImage');\nconst buildContainerWorkflow = imagebuilder.AwsManagedWorkflow.buildContainer(this, 'BuildContainer');\n\n// Test workflows\nconst testImageWorkflow = imagebuilder.AwsManagedWorkflow.testImage(this, 'TestImage');\nconst testContainerWorkflow = imagebuilder.AwsManagedWorkflow.testContainer(this, 'TestContainer');\n\n// Distribution workflows\nconst distributeContainerWorkflow = imagebuilder.AwsManagedWorkflow.distributeContainer(this, 'DistributeContainer');\n```\n\n### Lifecycle Policy\n\nLifecycle policies help you manage the retention and cleanup of Image Builder resources automatically. These policies\ndefine rules for deprecating or deleting old image versions, managing AMI snapshots, and controlling resource costs by\nremoving unused images based on age, count, or other criteria.\n\n#### Lifecycle Policy Basic Usage\n\nCreate a lifecycle policy to automatically delete old AMI images after 30 days:\n\n```ts\nconst lifecyclePolicy = new imagebuilder.LifecyclePolicy(this, 'MyLifecyclePolicy', {\n  resourceType: imagebuilder.LifecyclePolicyResourceType.AMI_IMAGE,\n  details: [\n    {\n      action: { type: imagebuilder.LifecyclePolicyActionType.DELETE },\n      filter: { ageFilter: { age: Duration.days(30) } }\n    }\n  ],\n  resourceSelection: {\n    tags: { Environment: 'development' }\n  }\n});\n```\n\nCreate a lifecycle policy to keep only the 10 most recent container images:\n\n```ts\nconst containerLifecyclePolicy = new imagebuilder.LifecyclePolicy(this, 'ContainerLifecyclePolicy', {\n  resourceType: imagebuilder.LifecyclePolicyResourceType.CONTAINER_IMAGE,\n  details: [\n    {\n      action: { type: imagebuilder.LifecyclePolicyActionType.DELETE },\n      filter: { countFilter: { count: 10 } }\n    }\n  ],\n  resourceSelection: {\n    tags: { Application: 'web-app' }\n  }\n});\n```\n\n#### Lifecycle Policy Resource Selection\n\n##### Tag-Based Resource Selection\n\nApply lifecycle policies to images with specific tags:\n\n```ts\nconst tagBasedPolicy = new imagebuilder.LifecyclePolicy(this, 'TagBasedPolicy', {\n  resourceType: imagebuilder.LifecyclePolicyResourceType.AMI_IMAGE,\n  details: [\n    {\n      action: { type: imagebuilder.LifecyclePolicyActionType.DELETE },\n      filter: { ageFilter: { age: Duration.days(90) } }\n    }\n  ],\n  resourceSelection: {\n    tags: {\n      Environment: 'staging',\n      Team: 'backend'\n    }\n  }\n});\n```\n\n##### Recipe-Based Resource Selection\n\nApply lifecycle policies to specific image or container recipes:\n\n```ts\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'MyImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  )\n});\n\nconst containerRecipe = new imagebuilder.ContainerRecipe(this, 'MyContainerRecipe', {\n  baseImage: imagebuilder.BaseContainerImage.fromDockerHub('amazonlinux', 'latest'),\n  targetRepository: imagebuilder.Repository.fromEcr(\n    ecr.Repository.fromRepositoryName(this, 'Repository', 'my-container-repo')\n  )\n});\n\nconst recipeBasedPolicy = new imagebuilder.LifecyclePolicy(this, 'RecipeBasedPolicy', {\n  resourceType: imagebuilder.LifecyclePolicyResourceType.AMI_IMAGE,\n  details: [\n    {\n      action: { type: imagebuilder.LifecyclePolicyActionType.DELETE },\n      filter: { countFilter: { count: 5 } }\n    }\n  ],\n  resourceSelection: {\n    recipes: [imageRecipe, containerRecipe]\n  }\n});\n```\n\n#### Lifecycle Policy Rules\n\n##### Age-Based Rules\n\nDelete images older than a specific time period:\n\n```ts\nconst ageBasedPolicy = new imagebuilder.LifecyclePolicy(this, 'AgeBasedPolicy', {\n  resourceType: imagebuilder.LifecyclePolicyResourceType.AMI_IMAGE,\n  details: [\n    {\n      action: {\n        type: imagebuilder.LifecyclePolicyActionType.DELETE,\n        includeAmis: true,\n        includeSnapshots: true\n      },\n      filter: {\n        ageFilter: {\n          age: Duration.days(60),\n          retainAtLeast: 3  // Always keep at least 3 images\n        }\n      }\n    }\n  ],\n  resourceSelection: {\n    tags: { Environment: 'testing' }\n  }\n});\n```\n\n##### Count-Based Rules\n\nKeep only a specific number of the most recent images:\n\n```ts\nconst countBasedPolicy = new imagebuilder.LifecyclePolicy(this, 'CountBasedPolicy', {\n  resourceType: imagebuilder.LifecyclePolicyResourceType.CONTAINER_IMAGE,\n  details: [\n    {\n      action: { type: imagebuilder.LifecyclePolicyActionType.DELETE },\n      filter: { countFilter: { count: 15 } }  // Keep only the 15 most recent images\n    }\n  ],\n  resourceSelection: {\n    tags: { Application: 'microservice' }\n  }\n});\n```\n\n##### Multiple Lifecycle Rules\n\nImplement a graduated approach with multiple actions:\n\n```ts\nconst graduatedPolicy = new imagebuilder.LifecyclePolicy(this, 'GraduatedPolicy', {\n  resourceType: imagebuilder.LifecyclePolicyResourceType.AMI_IMAGE,\n  details: [\n    {\n      // First: Deprecate images after 30 days\n      action: {\n        type: imagebuilder.LifecyclePolicyActionType.DEPRECATE,\n        includeAmis: true\n      },\n      filter: {\n        ageFilter: {\n          age: Duration.days(30),\n          retainAtLeast: 5\n        }\n      }\n    },\n    {\n      // Second: Disable images after 60 days\n      action: {\n        type: imagebuilder.LifecyclePolicyActionType.DISABLE,\n        includeAmis: true\n      },\n      filter: {\n        ageFilter: {\n          age: Duration.days(60),\n          retainAtLeast: 3\n        }\n      }\n    },\n    {\n      // Finally: Delete images after 90 days\n      action: {\n        type: imagebuilder.LifecyclePolicyActionType.DELETE,\n        includeAmis: true,\n        includeSnapshots: true\n      },\n      filter: {\n        ageFilter: {\n          age: Duration.days(90),\n          retainAtLeast: 1\n        }\n      }\n    }\n  ],\n  resourceSelection: {\n    tags: { Environment: 'production' }\n  }\n});\n```\n\n#### Lifecycle Policy Exclusion Rules\n\n##### AMI Exclusion Rules\n\nExclude specific AMIs from lifecycle actions based on various criteria:\n\n```ts\nconst excludeAmisPolicy = new imagebuilder.LifecyclePolicy(this, 'ExcludeAmisPolicy', {\n  resourceType: imagebuilder.LifecyclePolicyResourceType.AMI_IMAGE,\n  details: [\n    {\n      action: { type: imagebuilder.LifecyclePolicyActionType.DELETE },\n      filter: { ageFilter: { age: Duration.days(30) } },\n      exclusionRules: {\n        amiExclusionRules: {\n          isPublic: true,  // Exclude public AMIs\n          lastLaunched: Duration.days(7),  // Exclude AMIs launched in last 7 days\n          regions: ['us-west-2', 'eu-west-1'],  // Exclude AMIs in specific regions\n          sharedAccounts: ['123456789012'],  // Exclude AMIs shared with specific accounts\n          tags: {\n            Protected: 'true',\n            Environment: 'production'\n          }\n        }\n      }\n    }\n  ],\n  resourceSelection: {\n    tags: { Team: 'infrastructure' }\n  }\n});\n```\n\n##### Image Exclusion Rules\n\nExclude Image Builder images with protective tags:\n\n```ts\nconst excludeImagesPolicy = new imagebuilder.LifecyclePolicy(this, 'ExcludeImagesPolicy', {\n  resourceType: imagebuilder.LifecyclePolicyResourceType.CONTAINER_IMAGE,\n  details: [\n    {\n      action: { type: imagebuilder.LifecyclePolicyActionType.DELETE },\n      filter: { countFilter: { count: 20 } },\n      exclusionRules: {\n        imageExclusionRules: {\n          tags: {\n            DoNotDelete: 'true',\n            Critical: 'baseline'\n          }\n        }\n      }\n    }\n  ],\n  resourceSelection: {\n    tags: { Application: 'frontend' }\n  }\n});\n```\n\n#### Advanced Lifecycle Configuration\n\n##### Custom Execution Roles\n\nProvide your own IAM execution role with specific permissions:\n\n```ts\nconst executionRole = new iam.Role(this, 'LifecycleExecutionRole', {\n  assumedBy: new iam.ServicePrincipal('imagebuilder.amazonaws.com'),\n  managedPolicies: [\n    iam.ManagedPolicy.fromAwsManagedPolicyName('service-role/EC2ImageBuilderLifecycleExecutionPolicy')\n  ]\n});\n\nconst customRolePolicy = new imagebuilder.LifecyclePolicy(this, 'CustomRolePolicy', {\n  resourceType: imagebuilder.LifecyclePolicyResourceType.AMI_IMAGE,\n  executionRole: executionRole,\n  details: [\n    {\n      action: { type: imagebuilder.LifecyclePolicyActionType.DELETE },\n      filter: { ageFilter: { age: Duration.days(45) } }\n    }\n  ],\n  resourceSelection: {\n    tags: { Environment: 'development' }\n  }\n});\n```\n\n##### Lifecycle Policy Status\n\nControl whether the lifecycle policy is active:\n\n```ts\nconst disabledPolicy = new imagebuilder.LifecyclePolicy(this, 'DisabledPolicy', {\n  lifecyclePolicyName: 'my-disabled-policy',\n  description: 'A lifecycle policy that is temporarily disabled',\n  status: imagebuilder.LifecyclePolicyStatus.DISABLED,\n  resourceType: imagebuilder.LifecyclePolicyResourceType.AMI_IMAGE,\n  details: [\n    {\n      action: { type: imagebuilder.LifecyclePolicyActionType.DELETE },\n      filter: { ageFilter: { age: Duration.days(30) } }\n    }\n  ],\n  resourceSelection: {\n    tags: { Environment: 'testing' }\n  },\n  tags: {\n    Owner: 'DevOps',\n    CostCenter: 'Engineering'\n  }\n});\n```\n\n##### Importing Lifecycle Policies\n\nReference lifecycle policies created outside CDK:\n\n```ts\n// Import by name\nconst importedByName = imagebuilder.LifecyclePolicy.fromLifecyclePolicyName(\n  this,\n  'ImportedByName',\n  'existing-lifecycle-policy'\n);\n\n// Import by ARN\nconst importedByArn = imagebuilder.LifecyclePolicy.fromLifecyclePolicyArn(\n  this,\n  'ImportedByArn',\n  'arn:aws:imagebuilder:us-east-1:123456789012:lifecycle-policy/my-policy'\n);\n\nimportedByName.grantRead(lambdaRole);\nimportedByArn.grant(lambdaRole, 'imagebuilder:UpdateLifecyclePolicy');\n```\n"
+    "markdown": "# EC2 Image Builder Construct Library\n\n<!--BEGIN STABILITY BANNER-->\n\n---\n\n![cdk-constructs: Experimental](https://img.shields.io/badge/cdk--constructs-experimental-important.svg?style=for-the-badge)\n\n> The APIs of higher level constructs in this module are experimental and under active development.\n> They are subject to non-backward compatible changes or removal in any future version. These are\n> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be\n> announced in the release notes. This means that while you may use them, you may need to update\n> your source code when upgrading to a newer version of this package.\n\n---\n\n<!--END STABILITY BANNER-->\n\nThis module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.\n\n## README\n\n[Amazon EC2 Image Builder](https://docs.aws.amazon.com/imagebuilder/latest/userguide/what-is-image-builder.html) is a\nfully managed AWS service that helps you automate the creation, management, and deployment of customized, secure, and\nup-to-date server images. You can use Image Builder to create Amazon Machine Images (AMIs) and container images for use\nacross AWS Regions.\n\nThis module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project. It allows you to define\nImage Builder pipelines, images, recipes, components, workflows, and lifecycle policies.\nA component defines the sequence of steps required to customize an instance during image creation (build component) or\ntest an instance launched from the created image (test component). Components are created from declarative YAML or JSON\ndocuments that describe runtime configuration for building, validating, or testing instances. Components are included\nwhen added to the image recipe or container recipe for an image build.\n\nEC2 Image Builder supports AWS-managed components for common tasks, AWS Marketplace components, and custom components\nthat you create. Components run during specific workflow phases: build and validate phases during the build stage, and\ntest phase during the test stage.\n\n### Image Pipeline\n\nAn image pipeline provides the automation framework for building secure AMIs and container images. The pipeline\norchestrates the entire image creation process by combining an image recipe or container recipe with infrastructure\nconfiguration and distribution configuration. Pipelines can run on a schedule or be triggered manually, and they manage\nthe build, test, and distribution phases automatically.\n\n#### Image Pipeline Basic Usage\n\nCreate a simple AMI pipeline with just an image recipe:\n\n```ts\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'MyImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  )\n});\n\nconst imagePipeline = new imagebuilder.ImagePipeline(this, 'MyImagePipeline', {\n  recipe: exampleImageRecipe\n});\n```\n\nCreate a simple container pipeline with just a container recipe:\n\n```ts\nconst containerRecipe = new imagebuilder.ContainerRecipe(this, 'MyContainerRecipe', {\n  baseImage: imagebuilder.BaseContainerImage.fromDockerHub('amazonlinux', 'latest'),\n  targetRepository: imagebuilder.Repository.fromEcr(\n    ecr.Repository.fromRepositoryName(this, 'Repository', 'my-container-repo')\n  )\n});\n\nconst containerPipeline = new imagebuilder.ImagePipeline(this, 'MyContainerPipeline', {\n  recipe: exampleContainerRecipe\n});\n```\n\n#### Image Pipeline Scheduling\n\n##### Manual Pipeline Execution\n\nCreate a pipeline that runs only when manually triggered:\n\n```ts\nconst manualPipeline = new imagebuilder.ImagePipeline(this, 'ManualPipeline', {\n  imagePipelineName: 'my-manual-pipeline',\n  description: 'Pipeline triggered manually for production builds',\n  recipe: exampleImageRecipe\n  // No schedule property - manual execution only\n});\n\n// Grant Lambda function permission to trigger the pipeline\nmanualPipeline.grantStartExecution(lambdaRole);\n```\n\n##### Automated Pipeline Scheduling\n\nSchedule a pipeline to run automatically using cron expressions:\n\n```ts\nconst weeklyPipeline = new imagebuilder.ImagePipeline(this, 'WeeklyPipeline', {\n  imagePipelineName: 'weekly-build-pipeline',\n  recipe: exampleImageRecipe,\n  schedule: {\n    expression: events.Schedule.cron({\n      minute: '0',\n      hour: '6',\n      weekDay: 'MON'\n    })\n  }\n});\n```\n\nUse rate expressions for regular intervals:\n\n```ts\nconst dailyPipeline = new imagebuilder.ImagePipeline(this, 'DailyPipeline', {\n  recipe: exampleContainerRecipe,\n  schedule: {\n    expression: events.Schedule.rate(Duration.days(1))\n  }\n});\n```\n\n##### Pipeline Schedule Configuration\n\nConfigure advanced scheduling options:\n\n```ts\nconst advancedSchedulePipeline = new imagebuilder.ImagePipeline(this, 'AdvancedSchedulePipeline', {\n  recipe: exampleImageRecipe,\n  schedule: {\n    expression: events.Schedule.rate(Duration.days(7)),\n    // Only trigger when dependencies are updated (new base images, components, etc.)\n    startCondition: imagebuilder.ScheduleStartCondition.EXPRESSION_MATCH_AND_DEPENDENCY_UPDATES_AVAILABLE,\n    // Automatically disable after 3 consecutive failures\n    autoDisableFailureCount: 3\n  },\n  // Start enabled\n  status: imagebuilder.ImagePipelineStatus.ENABLED\n});\n```\n\n#### Image Pipeline Configuration\n\n##### Infrastructure and Distribution in Image Pipelines\n\nConfigure custom infrastructure and distribution settings:\n\n```ts\nconst infrastructureConfiguration = new imagebuilder.InfrastructureConfiguration(this, 'Infrastructure', {\n  infrastructureConfigurationName: 'production-infrastructure',\n  instanceTypes: [\n    ec2.InstanceType.of(ec2.InstanceClass.COMPUTE7_INTEL, ec2.InstanceSize.LARGE)\n  ],\n  vpc: vpc,\n  subnetSelection: { subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS }\n});\n\nconst distributionConfiguration = new imagebuilder.DistributionConfiguration(this, 'Distribution');\ndistributionConfiguration.addAmiDistributions({\n  amiName: 'production-ami-{{ imagebuilder:buildDate }}',\n  amiTargetAccountIds: ['123456789012', '098765432109']\n});\n\nconst productionPipeline = new imagebuilder.ImagePipeline(this, 'ProductionPipeline', {\n  recipe: exampleImageRecipe,\n  infrastructureConfiguration: infrastructureConfiguration,\n  distributionConfiguration: distributionConfiguration\n});\n```\n\n##### Pipeline Logging Configuration\n\nConfigure custom CloudWatch log groups for pipeline and image logs:\n\n```ts\nconst pipelineLogGroup = new logs.LogGroup(this, 'PipelineLogGroup', {\n  logGroupName: '/custom/imagebuilder/pipeline/logs',\n  retention: logs.RetentionDays.ONE_MONTH\n});\n\nconst imageLogGroup = new logs.LogGroup(this, 'ImageLogGroup', {\n  logGroupName: '/custom/imagebuilder/image/logs',\n  retention: logs.RetentionDays.ONE_WEEK\n});\n\nconst loggedPipeline = new imagebuilder.ImagePipeline(this, 'LoggedPipeline', {\n  recipe: exampleImageRecipe,\n  imagePipelineLogGroup: pipelineLogGroup,\n  imageLogGroup: imageLogGroup\n});\n```\n\n##### Workflow Integration in Image Pipelines\n\nUse AWS-managed workflows for common pipeline phases:\n\n```ts\nconst workflowPipeline = new imagebuilder.ImagePipeline(this, 'WorkflowPipeline', {\n  recipe: exampleImageRecipe,\n  workflows: [\n    { workflow: imagebuilder.AmazonManagedWorkflow.buildImage(this, 'BuildWorkflow') },\n    { workflow: imagebuilder.AmazonManagedWorkflow.testImage(this, 'TestWorkflow') }\n  ]\n});\n```\n\nFor container pipelines, use container-specific workflows:\n\n```ts\nconst containerWorkflowPipeline = new imagebuilder.ImagePipeline(this, 'ContainerWorkflowPipeline', {\n  recipe: exampleContainerRecipe,\n  workflows: [\n    { workflow: imagebuilder.AmazonManagedWorkflow.buildContainer(this, 'BuildContainer') },\n    { workflow: imagebuilder.AmazonManagedWorkflow.testContainer(this, 'TestContainer') },\n    { workflow: imagebuilder.AmazonManagedWorkflow.distributeContainer(this, 'DistributeContainer') }\n  ]\n});\n```\n\n##### Advanced Features in Image Pipelines\n\nConfigure image scanning for container pipelines:\n\n```ts\nconst scanningRepository = new ecr.Repository(this, 'ScanningRepo');\n\nconst scannedContainerPipeline = new imagebuilder.ImagePipeline(this, 'ScannedContainerPipeline', {\n  recipe: exampleContainerRecipe,\n  imageScanningEnabled: true,\n  imageScanningEcrRepository: scanningRepository,\n  imageScanningEcrTags: ['security-scan', 'latest']\n});\n```\n\nControl metadata collection and testing:\n\n```ts\nconst controlledPipeline = new imagebuilder.ImagePipeline(this, 'ControlledPipeline', {\n  recipe: exampleImageRecipe,\n  enhancedImageMetadataEnabled: true,  // Collect detailed OS and package info\n  imageTestsEnabled: false  // Skip testing phase for faster builds\n});\n```\n\n#### Image Pipeline Events\n\n##### Pipeline Event Handling\n\nHandle specific pipeline events:\n\n```ts\n// Monitor CVE detection\nexamplePipeline.onCVEDetected('CVEAlert', {\n  target: new targets.SnsTopic(topic)\n});\n\n// Handle pipeline auto-disable events\nexamplePipeline.onImagePipelineAutoDisabled('PipelineDisabledAlert', {\n  target: new targets.LambdaFunction(lambdaFunction)\n});\n```\n\n#### Importing Image Pipelines\n\nReference existing pipelines created outside CDK:\n\n```ts\n// Import by name\nconst existingPipelineByName = imagebuilder.ImagePipeline.fromImagePipelineName(\n  this,\n  'ExistingPipelineByName',\n  'my-existing-pipeline'\n);\n\n// Import by ARN\nconst existingPipelineByArn = imagebuilder.ImagePipeline.fromImagePipelineArn(\n  this,\n  'ExistingPipelineByArn',\n  'arn:aws:imagebuilder:us-east-1:123456789012:image-pipeline/imported-pipeline'\n);\n\n// Grant permissions to imported pipelines\nconst automationRole = new iam.Role(this, 'AutomationRole', {\n  assumedBy: new iam.ServicePrincipal('lambda.amazonaws.com')\n});\n\nexistingPipelineByName.grantStartExecution(automationRole);\nexistingPipelineByArn.grantRead(lambdaRole);\n```\n\n### Image\n\nAn image is the output resource created by Image Builder, consisting of an AMI or container image plus metadata such as\nversion, platform, and creation details. Images are used as base images for future builds and can be shared across AWS\naccounts. While images are the output from image pipeline executions, they can also be created in an ad-hoc manner\noutside a pipeline, defined as a standalone resource.\n\n#### Image Basic Usage\n\nCreate a simple AMI-based image from an image recipe:\n\n```ts\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'MyImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  )\n});\n\nconst amiImage = new imagebuilder.Image(this, 'MyAmiImage', {\n  recipe: imageRecipe\n});\n```\n\nCreate a simple container image from a container recipe:\n\n```ts\nconst containerRecipe = new imagebuilder.ContainerRecipe(this, 'MyContainerRecipe', {\n  baseImage: imagebuilder.BaseContainerImage.fromDockerHub('amazonlinux', 'latest'),\n  targetRepository: imagebuilder.Repository.fromEcr(\n    ecr.Repository.fromRepositoryName(this, 'Repository', 'my-container-repo')\n  )\n});\n\nconst containerImage = new imagebuilder.Image(this, 'MyContainerImage', {\n  recipe: containerRecipe\n});\n```\n\n#### AWS-Managed Images\n\n##### Pre-defined OS Images\n\nUse AWS-managed images for common operating systems:\n\n```ts\n// Amazon Linux 2023 AMI for x86_64\nconst amazonLinux2023Ami = imagebuilder.AmazonManagedImage.amazonLinux2023(this, 'AmazonLinux2023', {\n  imageType: imagebuilder.ImageType.AMI,\n  imageArchitecture: imagebuilder.ImageArchitecture.X86_64\n});\n\n// Ubuntu 22.04 AMI for ARM64\nconst ubuntu2204Ami = imagebuilder.AmazonManagedImage.ubuntuServer2204(this, 'Ubuntu2204', {\n  imageType: imagebuilder.ImageType.AMI,\n  imageArchitecture: imagebuilder.ImageArchitecture.ARM64\n});\n\n// Windows Server 2022 Full AMI\nconst windows2022Ami = imagebuilder.AmazonManagedImage.windowsServer2022Full(this, 'Windows2022', {\n  imageType: imagebuilder.ImageType.AMI,\n  imageArchitecture: imagebuilder.ImageArchitecture.X86_64\n});\n\n// Use as base image in recipe\nconst managedImageRecipe = new imagebuilder.ImageRecipe(this, 'ManagedImageRecipe', {\n  baseImage: amazonLinux2023Ami.toBaseImage()\n});\n```\n\n##### Custom AWS-Managed Images\n\nImport AWS-managed images by name or attributes:\n\n```ts\n// Import by name\nconst managedImageByName = imagebuilder.AmazonManagedImage.fromAmazonManagedImageName(\n  this,\n  'ManagedImageByName',\n  'amazon-linux-2023-x86'\n);\n\n// Import by attributes with specific version\nconst managedImageByAttributes = imagebuilder.AmazonManagedImage.fromAmazonManagedImageAttributes(this, 'ManagedImageByAttributes', {\n  imageName: 'ubuntu-server-22-lts-x86',\n  imageVersion: '2024.11.25'\n});\n```\n\n#### Image Configuration\n\n##### Infrastructure and Distribution in Images\n\nConfigure custom infrastructure and distribution settings:\n\n```ts\nconst infrastructureConfiguration = new imagebuilder.InfrastructureConfiguration(this, 'Infrastructure', {\n  infrastructureConfigurationName: 'production-infrastructure',\n  instanceTypes: [\n    ec2.InstanceType.of(ec2.InstanceClass.COMPUTE7_INTEL, ec2.InstanceSize.LARGE)\n  ],\n  vpc: vpc,\n  subnetSelection: { subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS }\n});\n\nconst distributionConfiguration = new imagebuilder.DistributionConfiguration(this, 'Distribution');\ndistributionConfiguration.addAmiDistributions({\n  amiName: 'production-ami-{{ imagebuilder:buildDate }}',\n  amiTargetAccountIds: ['123456789012', '098765432109']\n});\n\nconst productionImage = new imagebuilder.Image(this, 'ProductionImage', {\n  recipe: exampleImageRecipe,\n  infrastructureConfiguration: infrastructureConfiguration,\n  distributionConfiguration: distributionConfiguration\n});\n```\n\n##### Logging Configuration\n\nConfigure custom CloudWatch log groups for image builds:\n\n```ts\nconst logGroup = new logs.LogGroup(this, 'ImageLogGroup', {\n  logGroupName: '/custom/imagebuilder/image/logs',\n  retention: logs.RetentionDays.ONE_MONTH\n});\n\nconst loggedImage = new imagebuilder.Image(this, 'LoggedImage', {\n  recipe: exampleImageRecipe,\n  logGroup: logGroup\n});\n```\n\n##### Workflow Integration in Images\n\nUse workflows for custom build, test, and distribution processes:\n\n```ts\nconst imageWithWorkflows = new imagebuilder.Image(this, 'ImageWithWorkflows', {\n  recipe: exampleImageRecipe,\n  workflows: [\n    { workflow: imagebuilder.AmazonManagedWorkflow.buildImage(this, 'BuildWorkflow') },\n    { workflow: imagebuilder.AmazonManagedWorkflow.testImage(this, 'TestWorkflow') }\n  ]\n});\n```\n\n##### Advanced Features in Images\n\nConfigure image scanning, metadata collection, and testing:\n\n```ts\nconst scanningRepository = new ecr.Repository(this, 'ScanningRepository');\n\nconst advancedContainerImage = new imagebuilder.Image(this, 'AdvancedContainerImage', {\n  recipe: exampleContainerRecipe,\n  imageScanningEnabled: true,\n  imageScanningEcrRepository: scanningRepository,\n  imageScanningEcrTags: ['security-scan', 'latest'],\n  enhancedImageMetadataEnabled: true,\n  imageTestsEnabled: false  // Skip testing for faster builds\n});\n```\n\n#### Importing Images\n\nReference existing images created outside CDK:\n\n```ts\n// Import by name\nconst existingImageByName = imagebuilder.Image.fromImageName(\n  this,\n  'ExistingImageByName',\n  'my-existing-image'\n);\n\n// Import by ARN\nconst existingImageByArn = imagebuilder.Image.fromImageArn(\n  this,\n  'ExistingImageByArn',\n  'arn:aws:imagebuilder:us-east-1:123456789012:image/imported-image/1.0.0'\n);\n\n// Import by attributes\nconst existingImageByAttributes = imagebuilder.Image.fromImageAttributes(this, 'ExistingImageByAttributes', {\n  imageName: 'shared-base-image',\n  imageVersion: '2024.11.25'\n});\n\n// Grant permissions to imported images\nconst role = new iam.Role(this, 'ImageAccessRole', {\n  assumedBy: new iam.ServicePrincipal('lambda.amazonaws.com')\n});\n\nexistingImageByName.grantRead(role);\nexistingImageByArn.grant(role, 'imagebuilder:GetImage', 'imagebuilder:ListImagePackages');\n```\n\n### Image Recipe\n\n#### Image Recipe Basic Usage\n\nCreate an image recipe with the required base image:\n\n```ts\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'MyImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  )\n});\n```\n\n#### Image Recipe Base Images\n\nTo create a recipe, you have to select a base image to build and customize from. This base image can be referenced from\nvarious sources, such as from SSM parameters, AWS Marketplace products, and AMI IDs directly.\n\n##### SSM Parameters\n\nUsing SSM parameter references:\n\n```ts\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'SsmImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  )\n});\n\n// Using an SSM parameter construct\nconst parameter = ssm.StringParameter.fromStringParameterName(\n  this,\n  'BaseImageParameter',\n  '/aws/service/ami-windows-latest/Windows_Server-2022-English-Full-Base'\n);\nconst windowsRecipe = new imagebuilder.ImageRecipe(this, 'WindowsImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameter(parameter)\n});\n```\n\n##### AMI IDs\n\nWhen you have a specific AMI to use:\n\n```ts\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'AmiImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromAmiId('ami-12345678')\n});\n```\n\n##### Marketplace Images\n\nFor marketplace base images:\n\n```ts\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'MarketplaceImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromMarketplaceProductId('prod-1234567890abcdef0')\n});\n```\n\n#### Image Recipe Components\n\nComponents from various sources, such as custom-owned, AWS-owned, or AWS Marketplace-owned, can optionally be included\nin recipes. For parameterized components, you are able to provide the parameters to use in the recipe, which will be\napplied during the image build when executing components.\n\n##### Custom Components in Image Recipes\n\nAdd your own components to the recipe:\n\n```ts\nconst customComponent = new imagebuilder.Component(this, 'MyComponent', {\n  platform: imagebuilder.Platform.LINUX,\n  data: imagebuilder.ComponentData.fromJsonObject({\n    schemaVersion: imagebuilder.ComponentSchemaVersion.V1_0,\n    phases: [\n      {\n        name: imagebuilder.ComponentPhaseName.BUILD,\n        steps: [\n          {\n            name: 'install-app',\n            action: imagebuilder.ComponentAction.EXECUTE_BASH,\n            inputs: {\n              commands: ['yum install -y my-application']\n            }\n          }\n        ]\n      }\n    ]\n  })\n});\n\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'ComponentImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  ),\n  components: [\n    {\n      component: customComponent\n    }\n  ]\n});\n```\n\n##### AWS-Managed Components in Image Recipes\n\nUse pre-built AWS components:\n\n```ts\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'AmazonManagedImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  ),\n  components: [\n    {\n      component: imagebuilder.AmazonManagedComponent.updateOs(this, 'UpdateOS', {\n        platform: imagebuilder.Platform.LINUX\n      })\n    },\n    {\n      component: imagebuilder.AmazonManagedComponent.awsCliV2(this, 'AwsCli', {\n        platform: imagebuilder.Platform.LINUX\n      })\n    }\n  ]\n});\n```\n\n##### Component Parameters in Image Recipes\n\nPass parameters to components that accept them:\n\n```ts\nconst parameterizedComponent = imagebuilder.Component.fromComponentName(\n  this,\n  'ParameterizedComponent',\n  'my-parameterized-component'\n);\n\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'ParameterizedImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  ),\n  components: [\n    {\n      component: parameterizedComponent,\n      parameters: {\n        environment: imagebuilder.ComponentParameterValue.fromString('production'),\n        version: imagebuilder.ComponentParameterValue.fromString('1.0.0')\n      }\n    }\n  ]\n});\n```\n\n#### Image Recipe Configuration\n\n##### Block Device Configuration\n\nConfigure storage for the build instance:\n\n```ts\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'BlockDeviceImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  ),\n  blockDevices: [\n    {\n      deviceName: '/dev/sda1',\n      volume: ec2.BlockDeviceVolume.ebs(100, {\n        encrypted: true,\n        volumeType: ec2.EbsDeviceVolumeType.GENERAL_PURPOSE_SSD_GP3\n      })\n    }\n  ]\n});\n```\n\n##### AMI Tagging\n\nTag the output AMI:\n\n```ts\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'TaggedImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  ),\n  amiTags: {\n    Environment: 'Production',\n    Application: 'WebServer',\n    Owner: 'DevOps Team'\n  }\n});\n```\n\n### Container Recipe\n\nA container recipe is similar to an image recipe but specifically for container images. It defines the base container\nimage and components applied to produce the desired configuration for the output container image. Container recipes work\nwith Docker images from DockerHub, Amazon ECR, or Amazon-managed container images as starting points.\n\n#### Container Recipe Basic Usage\n\nCreate a container recipe with the required base image and target repository:\n\n```ts\nconst containerRecipe = new imagebuilder.ContainerRecipe(this, 'MyContainerRecipe', {\n  baseImage: imagebuilder.BaseContainerImage.fromDockerHub('amazonlinux', 'latest'),\n  targetRepository: imagebuilder.Repository.fromEcr(\n    ecr.Repository.fromRepositoryName(this, 'Repository', 'my-container-repo')\n  )\n});\n```\n\n#### Container Recipe Base Images\n\n##### DockerHub Images\n\nUsing public Docker Hub images:\n\n```ts\nconst containerRecipe = new imagebuilder.ContainerRecipe(this, 'DockerHubContainerRecipe', {\n  baseImage: imagebuilder.BaseContainerImage.fromDockerHub('amazonlinux', 'latest'),\n  targetRepository: imagebuilder.Repository.fromEcr(\n    ecr.Repository.fromRepositoryName(this, 'Repository', 'my-container-repo')\n  )\n});\n```\n\n##### ECR Images\n\nUsing images from your own ECR repositories:\n\n```ts\nconst sourceRepo = ecr.Repository.fromRepositoryName(this, 'SourceRepo', 'my-base-image');\nconst targetRepo = ecr.Repository.fromRepositoryName(this, 'TargetRepo', 'my-container-repo');\n\nconst containerRecipe = new imagebuilder.ContainerRecipe(this, 'EcrContainerRecipe', {\n  baseImage: imagebuilder.BaseContainerImage.fromEcr(sourceRepo, '1.0.0'),\n  targetRepository: imagebuilder.Repository.fromEcr(targetRepo)\n});\n```\n\n##### ECR Public Images\n\nUsing images from Amazon ECR Public:\n\n```ts\nconst containerRecipe = new imagebuilder.ContainerRecipe(this, 'EcrPublicContainerRecipe', {\n  baseImage: imagebuilder.BaseContainerImage.fromEcrPublic('amazonlinux', 'amazonlinux', '2023'),\n  targetRepository: imagebuilder.Repository.fromEcr(\n    ecr.Repository.fromRepositoryName(this, 'Repository', 'my-container-repo')\n  )\n});\n```\n\n#### Container Recipe Components\n\n##### Custom Components in Container Recipes\n\nAdd your own components to the container recipe:\n\n```ts\nconst customComponent = new imagebuilder.Component(this, 'MyComponent', {\n  platform: imagebuilder.Platform.LINUX,\n  data: imagebuilder.ComponentData.fromJsonObject({\n    schemaVersion: imagebuilder.ComponentSchemaVersion.V1_0,\n    phases: [\n      {\n        name: imagebuilder.ComponentPhaseName.BUILD,\n        steps: [\n          {\n            name: 'install-app',\n            action: imagebuilder.ComponentAction.EXECUTE_BASH,\n            inputs: {\n              commands: ['yum install -y my-container-application']\n            }\n          }\n        ]\n      }\n    ]\n  })\n});\n\nconst containerRecipe = new imagebuilder.ContainerRecipe(this, 'ComponentContainerRecipe', {\n  baseImage: imagebuilder.BaseContainerImage.fromDockerHub('amazonlinux', 'latest'),\n  targetRepository: imagebuilder.Repository.fromEcr(\n    ecr.Repository.fromRepositoryName(this, 'Repository', 'my-container-repo')\n  ),\n  components: [\n    {\n      component: customComponent\n    }\n  ]\n});\n```\n\n##### AWS-Managed Components in Container Recipes\n\nUse pre-built AWS components:\n\n```ts\nconst containerRecipe = new imagebuilder.ContainerRecipe(this, 'AmazonManagedContainerRecipe', {\n  baseImage: imagebuilder.BaseContainerImage.fromDockerHub('amazonlinux', 'latest'),\n  targetRepository: imagebuilder.Repository.fromEcr(\n    ecr.Repository.fromRepositoryName(this, 'Repository', 'my-container-repo')\n  ),\n  components: [\n    {\n      component: imagebuilder.AmazonManagedComponent.updateOs(this, 'UpdateOS', {\n        platform: imagebuilder.Platform.LINUX\n      })\n    },\n    {\n      component: imagebuilder.AmazonManagedComponent.awsCliV2(this, 'AwsCli', {\n        platform: imagebuilder.Platform.LINUX\n      })\n    }\n  ]\n});\n```\n\n#### Container Recipe Configuration\n\n##### Custom Dockerfile\n\nProvide your own Dockerfile template:\n\n```ts\nconst containerRecipe = new imagebuilder.ContainerRecipe(this, 'CustomDockerfileContainerRecipe', {\n  baseImage: imagebuilder.BaseContainerImage.fromDockerHub('amazonlinux', 'latest'),\n  targetRepository: imagebuilder.Repository.fromEcr(\n    ecr.Repository.fromRepositoryName(this, 'Repository', 'my-container-repo')\n  ),\n  dockerfile: imagebuilder.DockerfileData.fromInline(`\nFROM {{{ imagebuilder:parentImage }}}\nCMD [\"echo\", \"Hello, world!\"]\n{{{ imagebuilder:environments }}}\n{{{ imagebuilder:components }}}\n`)\n});\n```\n\n##### Instance Configuration\n\nConfigure the build instance:\n\n```ts\nconst containerRecipe = new imagebuilder.ContainerRecipe(this, 'InstanceConfigContainerRecipe', {\n  baseImage: imagebuilder.BaseContainerImage.fromDockerHub('amazonlinux', 'latest'),\n  targetRepository: imagebuilder.Repository.fromEcr(\n    ecr.Repository.fromRepositoryName(this, 'Repository', 'my-container-repo')\n  ),\n  // Custom ECS-optimized AMI for building\n  instanceImage: imagebuilder.ContainerInstanceImage.fromSsmParameterName(\n    '/aws/service/ecs/optimized-ami/amazon-linux-2023/recommended/image_id'\n  ),\n  // Additional storage for build process\n  instanceBlockDevices: [\n    {\n      deviceName: '/dev/xvda',\n      volume: ec2.BlockDeviceVolume.ebs(50, {\n        encrypted: true,\n        volumeType: ec2.EbsDeviceVolumeType.GENERAL_PURPOSE_SSD_GP3\n      })\n    }\n  ]\n});\n```\n\n### Component\n\nA component defines the sequence of steps required to customize an instance during image creation (build component) or\ntest an instance launched from the created image (test component). Components are created from declarative YAML or JSON\ndocuments that describe runtime configuration for building, validating, or testing instances. Components are included\nwhen added to the image recipe or container recipe for an image build.\n\nEC2 Image Builder supports AWS-managed components for common tasks, AWS Marketplace components, and custom components\nthat you create. Components run during specific workflow phases: build and validate phases during the build stage, and\ntest phase during the test stage.\n\n#### Basic Component Usage\n\nCreate a component with the required properties: platform and component data.\n\n```ts\nconst component = new imagebuilder.Component(this, 'MyComponent', {\n  platform: imagebuilder.Platform.LINUX,\n  data: imagebuilder.ComponentData.fromJsonObject({\n    schemaVersion: imagebuilder.ComponentSchemaVersion.V1_0,\n    phases: [\n      {\n        name: imagebuilder.ComponentPhaseName.BUILD,\n        steps: [\n          {\n            name: 'install-app',\n            action: imagebuilder.ComponentAction.EXECUTE_BASH,\n            inputs: {\n              commands: ['echo \"Installing my application...\"', 'yum update -y'],\n            },\n          },\n        ],\n      },\n    ],\n  }),\n});\n```\n\n#### Component Data Sources\n\n##### Inline Component Data\n\nUse `ComponentData.fromInline()` for existing YAML/JSON definitions:\n\n```ts\nconst component = new imagebuilder.Component(this, 'InlineComponent', {\n  platform: imagebuilder.Platform.LINUX,\n  data: imagebuilder.ComponentData.fromInline(`\nname: my-component\nschemaVersion: 1.0\nphases:\n  - name: build\n    steps:\n      - name: update-os\n        action: ExecuteBash\n        inputs:\n          commands: ['yum update -y']\n`)\n});\n```\n\n##### JSON Object Component Data\n\nMost developer-friendly approach using objects:\n\n```ts\n\nconst component = new imagebuilder.Component(this, 'JsonComponent', {\n  platform: imagebuilder.Platform.LINUX,\n  data: imagebuilder.ComponentData.fromJsonObject({\n    schemaVersion: imagebuilder.ComponentSchemaVersion.V1_0,\n    phases: [\n      {\n        name: imagebuilder.ComponentPhaseName.BUILD,\n        steps: [\n          {\n            name: 'configure-app',\n            action: imagebuilder.ComponentAction.CREATE_FILE,\n            inputs: {\n              path: '/etc/myapp/config.json',\n              content: '{\"env\": \"production\"}'\n            }\n          }\n        ]\n      }\n    ]\n  })\n});\n```\n\n##### Structured Component Document\n\nFor type-safe, CDK-native definitions with enhanced properties like `timeout` and `onFailure`.\n\n###### Defining a component step\n\nYou can define steps in the component which will be executed in order when the component is applied:\n\n```ts\nconst step: imagebuilder.ComponentDocumentStep = {\n  name: 'configure-app',\n  action: imagebuilder.ComponentAction.CREATE_FILE,\n  inputs: imagebuilder.ComponentStepInputs.fromObject({\n    path: '/etc/myapp/config.json',\n    content: '{\"env\": \"production\"}'\n  })\n};\n```\n\n###### Defining a component phase\n\nPhases group steps together, which run in sequence when building, validating or testing in the component:\n\n```ts\nconst phase: imagebuilder.ComponentDocumentPhase = {\n  name: imagebuilder.ComponentPhaseName.BUILD,\n  steps: [\n    {\n      name: 'configure-app',\n      action: imagebuilder.ComponentAction.CREATE_FILE,\n      inputs: imagebuilder.ComponentStepInputs.fromObject({\n        path: '/etc/myapp/config.json',\n        content: '{\"env\": \"production\"}'\n      })\n    }\n  ]\n};\n```\n\n###### Defining a component\n\nThe component data defines all steps across the provided phases to execute during the build:\n\n```ts\nconst component = new imagebuilder.Component(this, 'StructuredComponent', {\n  platform: imagebuilder.Platform.LINUX,\n  data: imagebuilder.ComponentData.fromComponentDocumentJsonObject({\n    schemaVersion: imagebuilder.ComponentSchemaVersion.V1_0,\n    phases: [\n      {\n        name: imagebuilder.ComponentPhaseName.BUILD,\n        steps: [\n          {\n            name: 'install-with-timeout',\n            action: imagebuilder.ComponentAction.EXECUTE_BASH,\n            timeout: Duration.minutes(10),\n            onFailure: imagebuilder.ComponentOnFailure.CONTINUE,\n            inputs: imagebuilder.ComponentStepInputs.fromObject({\n              commands: ['./install-script.sh']\n            })\n          }\n        ]\n      }\n    ]\n  })\n});\n```\n\n##### S3 Component Data\n\nFor those components you want to upload or have uploaded to S3:\n\n```ts\n// Upload a local file\nconst componentFromAsset = new imagebuilder.Component(this, 'AssetComponent', {\n  platform: imagebuilder.Platform.LINUX,\n  data: imagebuilder.ComponentData.fromAsset(this, 'ComponentAsset', './my-component.yml'),\n});\n\n// Reference an existing S3 object\nconst bucket = s3.Bucket.fromBucketName(this, 'ComponentBucket', 'my-components-bucket');\nconst componentFromS3 = new imagebuilder.Component(this, 'S3Component', {\n  platform: imagebuilder.Platform.LINUX,\n  data: imagebuilder.ComponentData.fromS3(bucket, 'components/my-component.yml'),\n});\n```\n\n#### Encrypt component data with a KMS key\n\nYou can encrypt component data with a KMS key, so that only principals with access to decrypt with the key are able to\naccess the component data.\n\n```ts\nconst component = new imagebuilder.Component(this, 'EncryptedComponent', {\n  platform: imagebuilder.Platform.LINUX,\n  kmsKey: new kms.Key(this, 'ComponentKey'),\n  data: imagebuilder.ComponentData.fromJsonObject({\n    schemaVersion: imagebuilder.ComponentSchemaVersion.V1_0,\n    phases: [\n      {\n        name: imagebuilder.ComponentPhaseName.BUILD,\n        steps: [\n          {\n            name: 'secure-setup',\n            action: imagebuilder.ComponentAction.EXECUTE_BASH,\n            inputs: {\n              commands: ['echo \"This component data is encrypted with KMS\"']\n            }\n          }\n        ]\n      }\n    ]\n  })\n});\n```\n\n#### AWS-Managed Components\n\nAWS provides a collection of managed components for common tasks:\n\n```ts\n// Install AWS CLI v2\nconst awsCliComponent = imagebuilder.AmazonManagedComponent.awsCliV2(this, 'AwsCli', {\n  platform: imagebuilder.Platform.LINUX\n});\n\n// Update the operating system\nconst updateComponent = imagebuilder.AmazonManagedComponent.updateOs(this, 'UpdateOS', {\n  platform: imagebuilder.Platform.LINUX\n});\n\n// Reference any AWS-managed component by name\nconst customAwsComponent = imagebuilder.AmazonManagedComponent.fromAmazonManagedComponentName(\n  this,\n  'CloudWatchAgent',\n  'amazon-cloudwatch-agent-linux'\n);\n```\n\n#### AWS Marketplace Components\n\nYou can reference AWS Marketplace components using the marketplace component name and its product ID:\n\n```ts\nconst marketplaceComponent = imagebuilder.AwsMarketplaceComponent.fromAwsMarketplaceComponentAttributes(\n  this,\n  'MarketplaceComponent',\n  {\n    componentName: 'my-marketplace-component',\n    marketplaceProductId: 'prod-1234567890abcdef0',\n  }\n);\n```\n\n### Infrastructure Configuration\n\nInfrastructure configuration defines the compute resources and environment settings used during the image building\nprocess. This includes instance types, IAM instance profile, VPC settings, subnets, security groups, SNS topics for\nnotifications, logging configuration, and troubleshooting settings like whether to terminate instances on failure or\nkeep them running for debugging. These settings are applied to builds when included in an image or an image pipeline.\n\n```ts\nconst infrastructureConfiguration = new imagebuilder.InfrastructureConfiguration(this, 'InfrastructureConfiguration', {\n  infrastructureConfigurationName: 'test-infrastructure-configuration',\n  description: 'An Infrastructure Configuration',\n  // Optional - instance types to use for build/test\n  instanceTypes: [\n    ec2.InstanceType.of(ec2.InstanceClass.STANDARD7_INTEL, ec2.InstanceSize.LARGE),\n    ec2.InstanceType.of(ec2.InstanceClass.BURSTABLE3, ec2.InstanceSize.LARGE)\n  ],\n  // Optional - create an instance profile with necessary permissions\n  instanceProfile: new iam.InstanceProfile(this, 'InstanceProfile', {\n    instanceProfileName: 'test-instance-profile',\n    role: new iam.Role(this, 'InstanceProfileRole', {\n      assumedBy: iam.ServicePrincipal.fromStaticServicePrincipleName('ec2.amazonaws.com'),\n      managedPolicies: [\n        iam.ManagedPolicy.fromAwsManagedPolicyName('AmazonSSMManagedInstanceCore'),\n        iam.ManagedPolicy.fromAwsManagedPolicyName('EC2InstanceProfileForImageBuilder')\n      ]\n    })\n  }),\n  // Use VPC network configuration\n  vpc,\n  subnetSelection: { subnetType: ec2.SubnetType.PUBLIC },\n  securityGroups: [ec2.SecurityGroup.fromSecurityGroupId(this, 'SecurityGroup', vpc.vpcDefaultSecurityGroup)],\n  keyPair: ec2.KeyPair.fromKeyPairName(this, 'KeyPair', 'imagebuilder-instance-key-pair'),\n  terminateInstanceOnFailure: true,\n  // Optional - IMDSv2 settings\n  httpTokens: imagebuilder.HttpTokens.REQUIRED,\n  httpPutResponseHopLimit: 1,\n  // Optional - publish image completion messages to an SNS topic\n  notificationTopic: sns.Topic.fromTopicArn(\n    this,\n    'Topic',\n    this.formatArn({ service: 'sns', resource: 'image-builder-topic' })\n  ),\n  // Optional - log settings. Logging is enabled by default\n  logging: {\n    s3Bucket: s3.Bucket.fromBucketName(this, 'LogBucket', `imagebuilder-logging-${Aws.ACCOUNT_ID}`),\n    s3KeyPrefix: 'imagebuilder-logs'\n  },\n  // Optional - host placement settings\n  ec2InstanceAvailabilityZone: Stack.of(this).availabilityZones[0],\n  ec2InstanceHostId: dedicatedHost.attrHostId,\n  ec2InstanceTenancy: imagebuilder.Tenancy.HOST,\n  resourceTags: {\n    Environment: 'production'\n  }\n});\n```\n\n### Distribution Configuration\n\nDistribution configuration defines how and where your built images are distributed after successful creation. For AMIs,\nthis includes target AWS Regions, KMS encryption keys, account sharing permissions, License Manager associations, and\nlaunch template configurations. For container images, it specifies the target Amazon ECR repositories across regions.\nA distribution configuration can be associated with an image or an image pipeline to define these distribution settings\nfor image builds.\n\n#### AMI Distributions\n\nAMI distributions can be defined to copy and modify AMIs in different accounts and regions, and apply them to launch\ntemplates, SSM parameters, etc.:\n\n```ts\nconst distributionConfiguration = new imagebuilder.DistributionConfiguration(this, 'DistributionConfiguration', {\n  distributionConfigurationName: 'test-distribution-configuration',\n  description: 'A Distribution Configuration',\n  amiDistributions: [\n    {\n      // Distribute AMI to us-east-2 and publish the AMI ID to an SSM parameter\n      region: 'us-east-2',\n      ssmParameters: [\n        {\n          parameter: ssm.StringParameter.fromStringParameterAttributes(this, 'CrossRegionParameter', {\n            parameterName: '/imagebuilder/ami',\n            forceDynamicReference: true\n          })\n        }\n      ]\n    }\n  ]\n});\n\n// For AMI-based image builds - add an AMI distribution in the current region\ndistributionConfiguration.addAmiDistributions({\n  amiName: 'imagebuilder-{{ imagebuilder:buildDate }}',\n  amiDescription: 'Build AMI',\n  amiKmsKey: kms.Key.fromLookup(this, 'ComponentKey', { aliasName: 'alias/distribution-encryption-key' }),\n  // Copy the AMI to different accounts\n  amiTargetAccountIds: ['123456789012', '098765432109'],\n  // Add launch permissions on the AMI\n  amiLaunchPermission: {\n    organizationArns: [\n      this.formatArn({ region: '', service: 'organizations', resource: 'organization', resourceName: 'o-1234567abc' })\n    ],\n    organizationalUnitArns: [\n      this.formatArn({\n        region: '',\n        service: 'organizations',\n        resource: 'ou',\n        resourceName: 'o-1234567abc/ou-a123-b4567890'\n      })\n    ],\n    isPublicUserGroup: true,\n    accountIds: ['234567890123']\n  },\n  // Attach tags to the AMI\n  amiTags: {\n    Environment: 'production',\n    Version: '{{ imagebuilder:buildVersion }}'\n  },\n  // Optional - publish the distributed AMI ID to an SSM parameter\n  ssmParameters: [\n    {\n      parameter: ssm.StringParameter.fromStringParameterAttributes(this, 'Parameter', {\n        parameterName: '/imagebuilder/ami',\n        forceDynamicReference: true\n      })\n    },\n    {\n      amiAccount: '098765432109',\n      dataType: ssm.ParameterDataType.TEXT,\n      parameter: ssm.StringParameter.fromStringParameterAttributes(this, 'CrossAccountParameter', {\n        parameterName: 'imagebuilder-prod-ami',\n        forceDynamicReference: true\n      })\n    }\n  ],\n  // Optional - create a new launch template version with the distributed AMI ID\n  launchTemplates: [\n    {\n      launchTemplate: ec2.LaunchTemplate.fromLaunchTemplateAttributes(this, 'LaunchTemplate', {\n        launchTemplateId: 'lt-1234'\n      }),\n      setDefaultVersion: true\n    },\n    {\n      accountId: '123456789012',\n      launchTemplate: ec2.LaunchTemplate.fromLaunchTemplateAttributes(this, 'CrossAccountLaunchTemplate', {\n        launchTemplateId: 'lt-5678'\n      }),\n      setDefaultVersion: true\n    }\n  ],\n  // Optional - enable Fast Launch on an imported launch template\n  fastLaunchConfigurations: [\n    {\n      enabled: true,\n      launchTemplate: ec2.LaunchTemplate.fromLaunchTemplateAttributes(this, 'FastLaunchLT', {\n        launchTemplateName: 'fast-launch-lt'\n      }),\n      maxParallelLaunches: 10,\n      targetSnapshotCount: 2\n    }\n  ],\n  // Optional - license configurations to apply to the AMI\n  licenseConfigurationArns: [\n    'arn:aws:license-manager:us-west-2:123456789012:license-configuration:lic-abcdefghijklmnopqrstuvwxyz'\n  ]\n});\n```\n\n#### Container Distributions\n\n##### Container repositories\n\nContainer distributions can be configured to distribute to ECR repositories:\n\n```ts\nconst ecrRepository = ecr.Repository.fromRepositoryName(this, 'ECRRepository', 'my-repo');\nconst imageBuilderRepository = imagebuilder.Repository.fromEcr(ecrRepository);\n```\n\n##### Defining a container distribution\n\nYou can configure the container repositories as well as the description and tags applied to the distributed container\nimages:\n\n```ts\nconst ecrRepository = ecr.Repository.fromRepositoryName(this, 'ECRRepository', 'my-repo');\nconst containerRepository = imagebuilder.Repository.fromEcr(ecrRepository);\nconst containerDistributionConfiguration = new imagebuilder.DistributionConfiguration(\n  this,\n  'ContainerDistributionConfiguration'\n);\n\ncontainerDistributionConfiguration.addContainerDistributions({\n  containerRepository,\n  containerDescription: 'Test container image',\n  containerTags: ['latest', 'latest-1.0']\n});\n```\n\n### Workflow\n\nWorkflows define the sequence of steps that Image Builder performs during image creation. There are three workflow\ntypes: BUILD (image building), TEST (testing images), and DISTRIBUTION (distributing container images).\n\n#### Basic Workflow Usage\n\nCreate a workflow with the required properties: workflow type and workflow data.\n\n```ts\nconst workflow = new imagebuilder.Workflow(this, 'MyWorkflow', {\n  workflowType: imagebuilder.WorkflowType.BUILD,\n  data: imagebuilder.WorkflowData.fromJsonObject({\n    schemaVersion: imagebuilder.WorkflowSchemaVersion.V1_0,\n    steps: [\n      {\n        name: 'LaunchBuildInstance',\n        action: imagebuilder.WorkflowAction.LAUNCH_INSTANCE,\n        onFailure: imagebuilder.WorkflowOnFailure.ABORT,\n        inputs: {\n          waitFor: 'ssmAgent',\n        },\n      },\n      {\n        name: 'ExecuteComponents',\n        action: imagebuilder.WorkflowAction.EXECUTE_COMPONENTS,\n        onFailure: imagebuilder.WorkflowOnFailure.ABORT,\n        inputs: {\n          'instanceId': 'i-123',\n        },\n      },\n      {\n        name: 'CreateImage',\n        action: imagebuilder.WorkflowAction.CREATE_IMAGE,\n        onFailure: imagebuilder.WorkflowOnFailure.ABORT,\n        inputs: {\n          'instanceId': 'i-123',\n        },\n      },\n      {\n        name: 'TerminateInstance',\n        action: imagebuilder.WorkflowAction.TERMINATE_INSTANCE,\n        onFailure: imagebuilder.WorkflowOnFailure.CONTINUE,\n        inputs: {\n          'instanceId': 'i-123',\n        },\n      },\n    ],\n    outputs: [\n      {\n        name: 'ImageId',\n        value: '$.stepOutputs.CreateImage.imageId',\n      },\n    ],\n  }),\n});\n```\n\n#### Workflow Data Sources\n\n##### Inline Workflow Data\n\nUse `WorkflowData.fromInline()` for existing YAML/JSON definitions:\n\n```ts\nconst workflow = new imagebuilder.Workflow(this, 'InlineWorkflow', {\n  workflowType: imagebuilder.WorkflowType.TEST,\n  data: imagebuilder.WorkflowData.fromInline(`\nschemaVersion: 1.0\nsteps:\n  - name: LaunchTestInstance\n    action: LaunchInstance\n    onFailure: Abort\n    inputs:\n      waitFor: ssmAgent\n  - name: RunTests\n    action: RunCommand\n    onFailure: Abort\n    inputs:\n      instanceId.$: \"$.stepOutputs.LaunchTestInstance.instanceId\"\n      commands: ['./run-tests.sh']\n  - name: TerminateTestInstance\n    action: TerminateInstance\n    onFailure: Continue\n    inputs:\n      instanceId.$: \"$.stepOutputs.LaunchTestInstance.instanceId\"\n`),\n});\n```\n\n##### JSON Object Workflow Data\n\nMost developer-friendly approach using JavaScript objects:\n\n```ts\nconst workflow = new imagebuilder.Workflow(this, 'JsonWorkflow', {\n  workflowType: imagebuilder.WorkflowType.BUILD,\n  data: imagebuilder.WorkflowData.fromJsonObject({\n    schemaVersion: imagebuilder.WorkflowSchemaVersion.V1_0,\n    steps: [\n      {\n        name: 'LaunchBuildInstance',\n        action: imagebuilder.WorkflowAction.LAUNCH_INSTANCE,\n        onFailure: imagebuilder.WorkflowOnFailure.ABORT,\n        inputs: {\n          waitFor: 'ssmAgent'\n        }\n      },\n      {\n        name: 'ExecuteComponents',\n        action: imagebuilder.WorkflowAction.EXECUTE_COMPONENTS,\n        onFailure: imagebuilder.WorkflowOnFailure.ABORT,\n        inputs: {\n          'instanceId': 'i-123'\n        }\n      },\n      {\n        name: 'CreateImage',\n        action: imagebuilder.WorkflowAction.CREATE_IMAGE,\n        onFailure: imagebuilder.WorkflowOnFailure.ABORT,\n        inputs: {\n          'instanceId': 'i-123'\n        }\n      },\n      {\n        name: 'TerminateInstance',\n        action: imagebuilder.WorkflowAction.TERMINATE_INSTANCE,\n        onFailure: imagebuilder.WorkflowOnFailure.CONTINUE,\n        inputs: {\n          'instanceId': 'i-123'\n        }\n      }\n    ],\n    outputs: [\n      {\n        name: 'ImageId',\n        value: '$.stepOutputs.CreateImage.imageId'\n      }\n    ]\n  })\n});\n```\n\n##### S3 Workflow Data\n\nFor those workflows you want to upload or have uploaded to S3:\n\n```ts\n// Upload a local file\nconst workflowFromAsset = new imagebuilder.Workflow(this, 'AssetWorkflow', {\n  workflowType: imagebuilder.WorkflowType.BUILD,\n  data: imagebuilder.WorkflowData.fromAsset(this, 'WorkflowAsset', './my-workflow.yml'),\n});\n\n// Reference an existing S3 object\nconst bucket = s3.Bucket.fromBucketName(this, 'WorkflowBucket', 'my-workflows-bucket');\nconst workflowFromS3 = new imagebuilder.Workflow(this, 'S3Workflow', {\n  workflowType: imagebuilder.WorkflowType.BUILD,\n  data: imagebuilder.WorkflowData.fromS3(bucket, 'workflows/my-workflow.yml'),\n});\n```\n\n#### Encrypt workflow data with a KMS key\n\nYou can encrypt workflow data with a KMS key, so that only principals with access to decrypt with the key are able to\naccess the workflow data.\n\n```ts\nconst workflow = new imagebuilder.Workflow(this, 'EncryptedWorkflow', {\n  workflowType: imagebuilder.WorkflowType.BUILD,\n  kmsKey: new kms.Key(this, 'WorkflowKey'),\n  data: imagebuilder.WorkflowData.fromJsonObject({\n    schemaVersion: imagebuilder.WorkflowSchemaVersion.V1_0,\n    steps: [\n      {\n        name: 'LaunchBuildInstance',\n        action: imagebuilder.WorkflowAction.LAUNCH_INSTANCE,\n        onFailure: imagebuilder.WorkflowOnFailure.ABORT,\n        inputs: {\n          waitFor: 'ssmAgent',\n        },\n      },\n      {\n        name: 'CreateImage',\n        action: imagebuilder.WorkflowAction.CREATE_IMAGE,\n        onFailure: imagebuilder.WorkflowOnFailure.ABORT,\n        inputs: {\n          'instanceId': 'i-123',\n        },\n      },\n      {\n        name: 'TerminateInstance',\n        action: imagebuilder.WorkflowAction.TERMINATE_INSTANCE,\n        onFailure: imagebuilder.WorkflowOnFailure.CONTINUE,\n        inputs: {\n          'instanceId': 'i-123',\n        },\n      },\n    ],\n    outputs: [\n      {\n        name: 'ImageId',\n        value: '$.stepOutputs.CreateImage.imageId',\n      },\n    ],\n  }),\n});\n```\n\n#### AWS-Managed Workflows\n\nAWS provides a collection of workflows for common scenarios:\n\n```ts\n// Build workflows\nconst buildImageWorkflow = imagebuilder.AmazonManagedWorkflow.buildImage(this, 'BuildImage');\nconst buildContainerWorkflow = imagebuilder.AmazonManagedWorkflow.buildContainer(this, 'BuildContainer');\n\n// Test workflows\nconst testImageWorkflow = imagebuilder.AmazonManagedWorkflow.testImage(this, 'TestImage');\nconst testContainerWorkflow = imagebuilder.AmazonManagedWorkflow.testContainer(this, 'TestContainer');\n\n// Distribution workflows\nconst distributeContainerWorkflow = imagebuilder.AmazonManagedWorkflow.distributeContainer(this, 'DistributeContainer');\n```\n\n### Lifecycle Policy\n\nLifecycle policies help you manage the retention and cleanup of Image Builder resources automatically. These policies\ndefine rules for deprecating or deleting old image versions, managing AMI snapshots, and controlling resource costs by\nremoving unused images based on age, count, or other criteria.\n\n#### Lifecycle Policy Basic Usage\n\nCreate a lifecycle policy to automatically delete old AMI images after 30 days:\n\n```ts\nconst lifecyclePolicy = new imagebuilder.LifecyclePolicy(this, 'MyLifecyclePolicy', {\n  resourceType: imagebuilder.LifecyclePolicyResourceType.AMI_IMAGE,\n  details: [\n    {\n      action: { type: imagebuilder.LifecyclePolicyActionType.DELETE },\n      filter: { ageFilter: { age: Duration.days(30) } }\n    }\n  ],\n  resourceSelection: {\n    tags: { Environment: 'development' }\n  }\n});\n```\n\nCreate a lifecycle policy to keep only the 10 most recent container images:\n\n```ts\nconst containerLifecyclePolicy = new imagebuilder.LifecyclePolicy(this, 'ContainerLifecyclePolicy', {\n  resourceType: imagebuilder.LifecyclePolicyResourceType.CONTAINER_IMAGE,\n  details: [\n    {\n      action: { type: imagebuilder.LifecyclePolicyActionType.DELETE },\n      filter: { countFilter: { count: 10 } }\n    }\n  ],\n  resourceSelection: {\n    tags: { Application: 'web-app' }\n  }\n});\n```\n\n#### Lifecycle Policy Resource Selection\n\n##### Tag-Based Resource Selection\n\nApply lifecycle policies to images with specific tags:\n\n```ts\nconst tagBasedPolicy = new imagebuilder.LifecyclePolicy(this, 'TagBasedPolicy', {\n  resourceType: imagebuilder.LifecyclePolicyResourceType.AMI_IMAGE,\n  details: [\n    {\n      action: { type: imagebuilder.LifecyclePolicyActionType.DELETE },\n      filter: { ageFilter: { age: Duration.days(90) } }\n    }\n  ],\n  resourceSelection: {\n    tags: {\n      Environment: 'staging',\n      Team: 'backend'\n    }\n  }\n});\n```\n\n##### Recipe-Based Resource Selection\n\nApply lifecycle policies to specific image or container recipes:\n\n```ts\nconst imageRecipe = new imagebuilder.ImageRecipe(this, 'MyImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  )\n});\n\nconst containerRecipe = new imagebuilder.ContainerRecipe(this, 'MyContainerRecipe', {\n  baseImage: imagebuilder.BaseContainerImage.fromDockerHub('amazonlinux', 'latest'),\n  targetRepository: imagebuilder.Repository.fromEcr(\n    ecr.Repository.fromRepositoryName(this, 'Repository', 'my-container-repo')\n  )\n});\n\nconst recipeBasedPolicy = new imagebuilder.LifecyclePolicy(this, 'RecipeBasedPolicy', {\n  resourceType: imagebuilder.LifecyclePolicyResourceType.AMI_IMAGE,\n  details: [\n    {\n      action: { type: imagebuilder.LifecyclePolicyActionType.DELETE },\n      filter: { countFilter: { count: 5 } }\n    }\n  ],\n  resourceSelection: {\n    recipes: [imageRecipe, containerRecipe]\n  }\n});\n```\n\n#### Lifecycle Policy Rules\n\n##### Age-Based Rules\n\nDelete images older than a specific time period:\n\n```ts\nconst ageBasedPolicy = new imagebuilder.LifecyclePolicy(this, 'AgeBasedPolicy', {\n  resourceType: imagebuilder.LifecyclePolicyResourceType.AMI_IMAGE,\n  details: [\n    {\n      action: {\n        type: imagebuilder.LifecyclePolicyActionType.DELETE,\n        includeAmis: true,\n        includeSnapshots: true\n      },\n      filter: {\n        ageFilter: {\n          age: Duration.days(60),\n          retainAtLeast: 3  // Always keep at least 3 images\n        }\n      }\n    }\n  ],\n  resourceSelection: {\n    tags: { Environment: 'testing' }\n  }\n});\n```\n\n##### Count-Based Rules\n\nKeep only a specific number of the most recent images:\n\n```ts\nconst countBasedPolicy = new imagebuilder.LifecyclePolicy(this, 'CountBasedPolicy', {\n  resourceType: imagebuilder.LifecyclePolicyResourceType.CONTAINER_IMAGE,\n  details: [\n    {\n      action: { type: imagebuilder.LifecyclePolicyActionType.DELETE },\n      filter: { countFilter: { count: 15 } }  // Keep only the 15 most recent images\n    }\n  ],\n  resourceSelection: {\n    tags: { Application: 'microservice' }\n  }\n});\n```\n\n##### Multiple Lifecycle Rules\n\nImplement a graduated approach with multiple actions:\n\n```ts\nconst graduatedPolicy = new imagebuilder.LifecyclePolicy(this, 'GraduatedPolicy', {\n  resourceType: imagebuilder.LifecyclePolicyResourceType.AMI_IMAGE,\n  details: [\n    {\n      // First: Deprecate images after 30 days\n      action: {\n        type: imagebuilder.LifecyclePolicyActionType.DEPRECATE,\n        includeAmis: true\n      },\n      filter: {\n        ageFilter: {\n          age: Duration.days(30),\n          retainAtLeast: 5\n        }\n      }\n    },\n    {\n      // Second: Disable images after 60 days\n      action: {\n        type: imagebuilder.LifecyclePolicyActionType.DISABLE,\n        includeAmis: true\n      },\n      filter: {\n        ageFilter: {\n          age: Duration.days(60),\n          retainAtLeast: 3\n        }\n      }\n    },\n    {\n      // Finally: Delete images after 90 days\n      action: {\n        type: imagebuilder.LifecyclePolicyActionType.DELETE,\n        includeAmis: true,\n        includeSnapshots: true\n      },\n      filter: {\n        ageFilter: {\n          age: Duration.days(90),\n          retainAtLeast: 1\n        }\n      }\n    }\n  ],\n  resourceSelection: {\n    tags: { Environment: 'production' }\n  }\n});\n```\n\n#### Lifecycle Policy Exclusion Rules\n\n##### AMI Exclusion Rules\n\nExclude specific AMIs from lifecycle actions based on various criteria:\n\n```ts\nconst excludeAmisPolicy = new imagebuilder.LifecyclePolicy(this, 'ExcludeAmisPolicy', {\n  resourceType: imagebuilder.LifecyclePolicyResourceType.AMI_IMAGE,\n  details: [\n    {\n      action: { type: imagebuilder.LifecyclePolicyActionType.DELETE },\n      filter: { ageFilter: { age: Duration.days(30) } },\n      exclusionRules: {\n        amiExclusionRules: {\n          isPublic: true,  // Exclude public AMIs\n          lastLaunched: Duration.days(7),  // Exclude AMIs launched in last 7 days\n          regions: ['us-west-2', 'eu-west-1'],  // Exclude AMIs in specific regions\n          sharedAccounts: ['123456789012'],  // Exclude AMIs shared with specific accounts\n          tags: {\n            Protected: 'true',\n            Environment: 'production'\n          }\n        }\n      }\n    }\n  ],\n  resourceSelection: {\n    tags: { Team: 'infrastructure' }\n  }\n});\n```\n\n##### Image Exclusion Rules\n\nExclude Image Builder images with protective tags:\n\n```ts\nconst excludeImagesPolicy = new imagebuilder.LifecyclePolicy(this, 'ExcludeImagesPolicy', {\n  resourceType: imagebuilder.LifecyclePolicyResourceType.CONTAINER_IMAGE,\n  details: [\n    {\n      action: { type: imagebuilder.LifecyclePolicyActionType.DELETE },\n      filter: { countFilter: { count: 20 } },\n      exclusionRules: {\n        imageExclusionRules: {\n          tags: {\n            DoNotDelete: 'true',\n            Critical: 'baseline'\n          }\n        }\n      }\n    }\n  ],\n  resourceSelection: {\n    tags: { Application: 'frontend' }\n  }\n});\n```\n\n#### Advanced Lifecycle Configuration\n\n##### Custom Execution Roles\n\nProvide your own IAM execution role with specific permissions:\n\n```ts\nconst executionRole = new iam.Role(this, 'LifecycleExecutionRole', {\n  assumedBy: new iam.ServicePrincipal('imagebuilder.amazonaws.com'),\n  managedPolicies: [\n    iam.ManagedPolicy.fromAwsManagedPolicyName('service-role/EC2ImageBuilderLifecycleExecutionPolicy')\n  ]\n});\n\nconst customRolePolicy = new imagebuilder.LifecyclePolicy(this, 'CustomRolePolicy', {\n  resourceType: imagebuilder.LifecyclePolicyResourceType.AMI_IMAGE,\n  executionRole: executionRole,\n  details: [\n    {\n      action: { type: imagebuilder.LifecyclePolicyActionType.DELETE },\n      filter: { ageFilter: { age: Duration.days(45) } }\n    }\n  ],\n  resourceSelection: {\n    tags: { Environment: 'development' }\n  }\n});\n```\n\n##### Lifecycle Policy Status\n\nControl whether the lifecycle policy is active:\n\n```ts\nconst disabledPolicy = new imagebuilder.LifecyclePolicy(this, 'DisabledPolicy', {\n  lifecyclePolicyName: 'my-disabled-policy',\n  description: 'A lifecycle policy that is temporarily disabled',\n  status: imagebuilder.LifecyclePolicyStatus.DISABLED,\n  resourceType: imagebuilder.LifecyclePolicyResourceType.AMI_IMAGE,\n  details: [\n    {\n      action: { type: imagebuilder.LifecyclePolicyActionType.DELETE },\n      filter: { ageFilter: { age: Duration.days(30) } }\n    }\n  ],\n  resourceSelection: {\n    tags: { Environment: 'testing' }\n  },\n  tags: {\n    Owner: 'DevOps',\n    CostCenter: 'Engineering'\n  }\n});\n```\n\n##### Importing Lifecycle Policies\n\nReference lifecycle policies created outside CDK:\n\n```ts\n// Import by name\nconst importedByName = imagebuilder.LifecyclePolicy.fromLifecyclePolicyName(\n  this,\n  'ImportedByName',\n  'existing-lifecycle-policy'\n);\n\n// Import by ARN\nconst importedByArn = imagebuilder.LifecyclePolicy.fromLifecyclePolicyArn(\n  this,\n  'ImportedByArn',\n  'arn:aws:imagebuilder:us-east-1:123456789012:lifecycle-policy/my-policy'\n);\n\nimportedByName.grantRead(lambdaRole);\nimportedByArn.grant(lambdaRole, 'imagebuilder:UpdateLifecyclePolicy');\n```\n"
   },
   "repository": {
     "directory": "packages/@aws-cdk/aws-imagebuilder-alpha",
@@ -8503,17 +8532,18 @@
     }
   },
   "types": {
-    "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImage": {
+    "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedComponent": {
+      "abstract": true,
       "assembly": "@aws-cdk/aws-imagebuilder-alpha",
       "docs": {
         "stability": "experimental",
-        "summary": "Helper class for working with Amazon-managed images.",
-        "example": "// Amazon Linux 2023 AMI for x86_64\nconst amazonLinux2023Ami = imagebuilder.AmazonManagedImage.amazonLinux2023(this, 'AmazonLinux2023', {\n  imageType: imagebuilder.ImageType.AMI,\n  imageArchitecture: imagebuilder.ImageArchitecture.X86_64\n});\n\n// Ubuntu 22.04 AMI for ARM64\nconst ubuntu2204Ami = imagebuilder.AmazonManagedImage.ubuntuServer2204(this, 'Ubuntu2204', {\n  imageType: imagebuilder.ImageType.AMI,\n  imageArchitecture: imagebuilder.ImageArchitecture.ARM64\n});\n\n// Windows Server 2022 Full AMI\nconst windows2022Ami = imagebuilder.AmazonManagedImage.windowsServer2022Full(this, 'Windows2022', {\n  imageType: imagebuilder.ImageType.AMI,\n  imageArchitecture: imagebuilder.ImageArchitecture.X86_64\n});\n\n// Use as base image in recipe\nconst managedImageRecipe = new imagebuilder.ImageRecipe(this, 'ManagedImageRecipe', {\n  baseImage: amazonLinux2023Ami.toBaseImage()\n});",
+        "summary": "Helper class for working with Amazon-managed components.",
+        "example": "const imageRecipe = new imagebuilder.ImageRecipe(this, 'AmazonManagedImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  ),\n  components: [\n    {\n      component: imagebuilder.AmazonManagedComponent.updateOs(this, 'UpdateOS', {\n        platform: imagebuilder.Platform.LINUX\n      })\n    },\n    {\n      component: imagebuilder.AmazonManagedComponent.awsCliV2(this, 'AwsCli', {\n        platform: imagebuilder.Platform.LINUX\n      })\n    }\n  ]\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
       },
-      "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImage",
+      "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedComponent",
       "initializer": {
         "docs": {
           "stability": "experimental"
@@ -8521,21 +8551,20 @@
       },
       "kind": "class",
       "locationInModule": {
-        "filename": "lib/amazon-managed-image.ts",
-        "line": 54
+        "filename": "lib/amazon-managed-component.ts",
+        "line": 49
       },
       "methods": [
         {
           "docs": {
-            "see": "https://gallery.ecr.aws/amazonlinux/amazonlinux",
             "stability": "experimental",
-            "summary": "Imports the Amazon Linux 2 Amazon-managed image."
+            "summary": "Imports the AWS CLI v2 Amazon-managed component."
           },
           "locationInModule": {
-            "filename": "lib/amazon-managed-image.ts",
-            "line": 65
+            "filename": "lib/amazon-managed-component.ts",
+            "line": 57
           },
-          "name": "amazonLinux2",
+          "name": "awsCliV2",
           "parameters": [
             {
               "docs": {
@@ -8557,32 +8586,31 @@
             },
             {
               "docs": {
-                "summary": "The Amazon-managed image attributes."
+                "summary": "The Amazon-managed component options."
               },
               "name": "opts",
               "type": {
-                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageOptions"
+                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedComponentOptions"
               }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IImage"
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IComponent"
             }
           },
           "static": true
         },
         {
           "docs": {
-            "see": "https://gallery.ecr.aws/amazonlinux/amazonlinux",
             "stability": "experimental",
-            "summary": "Imports the Amazon Linux 2023 Amazon-managed image."
+            "summary": "Imports an Amazon-managed component from its attributes."
           },
           "locationInModule": {
-            "filename": "lib/amazon-managed-image.ts",
-            "line": 79
+            "filename": "lib/amazon-managed-component.ts",
+            "line": 125
           },
-          "name": "amazonLinux2023",
+          "name": "fromAmazonManagedComponentAttributes",
           "parameters": [
             {
               "docs": {
@@ -8604,17 +8632,17 @@
             },
             {
               "docs": {
-                "summary": "The Amazon-managed image attributes."
+                "summary": "The Amazon-managed component attributes."
               },
-              "name": "opts",
+              "name": "attrs",
               "type": {
-                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageOptions"
+                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedComponentAttributes"
               }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IImage"
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IComponent"
             }
           },
           "static": true
@@ -8622,13 +8650,13 @@
         {
           "docs": {
             "stability": "experimental",
-            "summary": "Imports an Amazon-managed image from its attributes."
+            "summary": "Imports an Amazon-managed component from its name."
           },
           "locationInModule": {
-            "filename": "lib/amazon-managed-image.ts",
-            "line": 276
+            "filename": "lib/amazon-managed-component.ts",
+            "line": 148
           },
-          "name": "fromAmazonManagedImageAttributes",
+          "name": "fromAmazonManagedComponentName",
           "parameters": [
             {
               "docs": {
@@ -8650,17 +8678,17 @@
             },
             {
               "docs": {
-                "summary": "- The Amazon-managed image attributes."
+                "summary": "- The name of the Amazon-managed component."
               },
-              "name": "attrs",
+              "name": "amazonManagedComponentName",
               "type": {
-                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageAttributes"
+                "primitive": "string"
               }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IImage"
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IComponent"
             }
           },
           "static": true
@@ -8668,13 +8696,13 @@
         {
           "docs": {
             "stability": "experimental",
-            "summary": "Imports an Amazon-managed image from its name."
+            "summary": "Imports the hello world Amazon-managed component."
           },
           "locationInModule": {
-            "filename": "lib/amazon-managed-image.ts",
-            "line": 300
+            "filename": "lib/amazon-managed-component.ts",
+            "line": 68
           },
-          "name": "fromAmazonManagedImageName",
+          "name": "helloWorld",
           "parameters": [
             {
               "docs": {
@@ -8696,32 +8724,31 @@
             },
             {
               "docs": {
-                "summary": "- The name of the Amazon-managed image."
+                "summary": "The Amazon-managed component options."
               },
-              "name": "amazonManagedImageName",
+              "name": "opts",
               "type": {
-                "primitive": "string"
+                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedComponentOptions"
               }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IImage"
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IComponent"
             }
           },
           "static": true
         },
         {
           "docs": {
-            "see": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-mac-instances.html",
             "stability": "experimental",
-            "summary": "Imports the macOS 14 Amazon-managed image."
+            "summary": "Imports the Python 3 Amazon-managed component."
           },
           "locationInModule": {
-            "filename": "lib/amazon-managed-image.ts",
-            "line": 252
+            "filename": "lib/amazon-managed-component.ts",
+            "line": 79
           },
-          "name": "macOS14",
+          "name": "python3",
           "parameters": [
             {
               "docs": {
@@ -8743,32 +8770,31 @@
             },
             {
               "docs": {
-                "summary": "The Amazon-managed image attributes."
+                "summary": "The Amazon-managed component options."
               },
               "name": "opts",
               "type": {
-                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageOptions"
+                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedComponentOptions"
               }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IImage"
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IComponent"
             }
           },
           "static": true
         },
         {
           "docs": {
-            "see": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-mac-instances.html",
             "stability": "experimental",
-            "summary": "Imports the macOS 15 Amazon-managed image."
+            "summary": "Imports the reboot Amazon-managed component."
           },
           "locationInModule": {
-            "filename": "lib/amazon-managed-image.ts",
-            "line": 265
+            "filename": "lib/amazon-managed-component.ts",
+            "line": 90
           },
-          "name": "macOS15",
+          "name": "reboot",
           "parameters": [
             {
               "docs": {
@@ -8790,32 +8816,32 @@
             },
             {
               "docs": {
-                "summary": "The Amazon-managed image attributes."
+                "summary": "The Amazon-managed component options."
               },
               "name": "opts",
               "type": {
-                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageOptions"
+                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedComponentOptions"
               }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IImage"
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IComponent"
             }
           },
           "static": true
         },
         {
           "docs": {
-            "see": "https://aws.amazon.com/partners/redhat/faqs",
+            "see": "https://docs.aws.amazon.com/imagebuilder/latest/userguide/ib-stig.html",
             "stability": "experimental",
-            "summary": "Imports the Red Hat Enterprise Linux 10 Amazon-managed image."
+            "summary": "Imports the STIG hardening Amazon-managed component."
           },
           "locationInModule": {
-            "filename": "lib/amazon-managed-image.ts",
-            "line": 92
+            "filename": "lib/amazon-managed-component.ts",
+            "line": 103
           },
-          "name": "redHatEnterpriseLinux10",
+          "name": "stigBuild",
           "parameters": [
             {
               "docs": {
@@ -8837,32 +8863,31 @@
             },
             {
               "docs": {
-                "summary": "The Amazon-managed image attributes."
+                "summary": "The Amazon-managed component options."
               },
               "name": "opts",
               "type": {
-                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageOptions"
+                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedComponentOptions"
               }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IImage"
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IComponent"
             }
           },
           "static": true
         },
         {
           "docs": {
-            "see": "https://aws.amazon.com/linux/commercial-linux/faqs/",
             "stability": "experimental",
-            "summary": "Imports the SUSE Linux Enterprise Server 15 Amazon-managed image."
+            "summary": "Imports the OS update Amazon-managed component."
           },
           "locationInModule": {
-            "filename": "lib/amazon-managed-image.ts",
-            "line": 105
+            "filename": "lib/amazon-managed-component.ts",
+            "line": 114
           },
-          "name": "suseLinuxEnterpriseServer15",
+          "name": "updateOs",
           "parameters": [
             {
               "docs": {
@@ -8884,32 +8909,170 @@
             },
             {
               "docs": {
-                "summary": "The Amazon-managed image attributes."
+                "summary": "The Amazon-managed component attributes."
               },
               "name": "opts",
               "type": {
-                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageOptions"
+                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedComponentOptions"
               }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IImage"
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IComponent"
             }
           },
           "static": true
+        }
+      ],
+      "name": "AmazonManagedComponent",
+      "symbolId": "lib/amazon-managed-component:AmazonManagedComponent"
+    },
+    "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedComponentAttributes": {
+      "assembly": "@aws-cdk/aws-imagebuilder-alpha",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Properties for an EC2 Image Builder Amazon-managed component.",
+        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as imagebuilder_alpha from '@aws-cdk/aws-imagebuilder-alpha';\nconst amazonManagedComponentAttributes: imagebuilder_alpha.AmazonManagedComponentAttributes = {\n  componentName: 'componentName',\n\n  // the properties below are optional\n  componentVersion: 'componentVersion',\n};",
+        "custom": {
+          "exampleMetadata": "fixture=_generated"
+        }
+      },
+      "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedComponentAttributes",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "lib/amazon-managed-component.ts",
+        "line": 10
+      },
+      "name": "AmazonManagedComponentAttributes",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "The name of the Amazon-managed component."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/amazon-managed-component.ts",
+            "line": 14
+          },
+          "name": "componentName",
+          "type": {
+            "primitive": "string"
+          }
         },
         {
+          "abstract": true,
           "docs": {
-            "see": "https://hub.docker.com/_/ubuntu",
+            "default": "- the latest version of the component, x.x.x",
             "stability": "experimental",
-            "summary": "Imports the Ubuntu 22.04 Amazon-managed image."
+            "summary": "The version of the Amazon-managed component."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/amazon-managed-component.ts",
+            "line": 21
+          },
+          "name": "componentVersion",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "lib/amazon-managed-component:AmazonManagedComponentAttributes"
+    },
+    "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedComponentOptions": {
+      "assembly": "@aws-cdk/aws-imagebuilder-alpha",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Options for selecting a predefined Amazon-managed image.",
+        "example": "const imageRecipe = new imagebuilder.ImageRecipe(this, 'AmazonManagedImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  ),\n  components: [\n    {\n      component: imagebuilder.AmazonManagedComponent.updateOs(this, 'UpdateOS', {\n        platform: imagebuilder.Platform.LINUX\n      })\n    },\n    {\n      component: imagebuilder.AmazonManagedComponent.awsCliV2(this, 'AwsCli', {\n        platform: imagebuilder.Platform.LINUX\n      })\n    }\n  ]\n});",
+        "custom": {
+          "exampleMetadata": "infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedComponentOptions",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "lib/amazon-managed-component.ts",
+        "line": 27
+      },
+      "name": "AmazonManagedComponentOptions",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "The platform of the Amazon-managed component."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/amazon-managed-component.ts",
+            "line": 31
+          },
+          "name": "platform",
+          "type": {
+            "fqn": "@aws-cdk/aws-imagebuilder-alpha.Platform"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- the latest version of the component, x.x.x",
+            "stability": "experimental",
+            "summary": "The version of the Amazon-managed component."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/amazon-managed-component.ts",
+            "line": 38
+          },
+          "name": "componentVersion",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "lib/amazon-managed-component:AmazonManagedComponentOptions"
+    },
+    "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImage": {
+      "assembly": "@aws-cdk/aws-imagebuilder-alpha",
+      "docs": {
+        "stability": "experimental",
+        "summary": "Helper class for working with Amazon-managed images.",
+        "example": "// Amazon Linux 2023 AMI for x86_64\nconst amazonLinux2023Ami = imagebuilder.AmazonManagedImage.amazonLinux2023(this, 'AmazonLinux2023', {\n  imageType: imagebuilder.ImageType.AMI,\n  imageArchitecture: imagebuilder.ImageArchitecture.X86_64\n});\n\n// Ubuntu 22.04 AMI for ARM64\nconst ubuntu2204Ami = imagebuilder.AmazonManagedImage.ubuntuServer2204(this, 'Ubuntu2204', {\n  imageType: imagebuilder.ImageType.AMI,\n  imageArchitecture: imagebuilder.ImageArchitecture.ARM64\n});\n\n// Windows Server 2022 Full AMI\nconst windows2022Ami = imagebuilder.AmazonManagedImage.windowsServer2022Full(this, 'Windows2022', {\n  imageType: imagebuilder.ImageType.AMI,\n  imageArchitecture: imagebuilder.ImageArchitecture.X86_64\n});\n\n// Use as base image in recipe\nconst managedImageRecipe = new imagebuilder.ImageRecipe(this, 'ManagedImageRecipe', {\n  baseImage: amazonLinux2023Ami.toBaseImage()\n});",
+        "custom": {
+          "exampleMetadata": "infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImage",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        }
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "lib/amazon-managed-image.ts",
+        "line": 54
+      },
+      "methods": [
+        {
+          "docs": {
+            "see": "https://gallery.ecr.aws/amazonlinux/amazonlinux",
+            "stability": "experimental",
+            "summary": "Imports the Amazon Linux 2 Amazon-managed image."
           },
           "locationInModule": {
             "filename": "lib/amazon-managed-image.ts",
-            "line": 119
+            "line": 65
           },
-          "name": "ubuntuServer2204",
+          "name": "amazonLinux2",
           "parameters": [
             {
               "docs": {
@@ -8948,15 +9111,15 @@
         },
         {
           "docs": {
-            "see": "https://hub.docker.com/_/ubuntu",
+            "see": "https://gallery.ecr.aws/amazonlinux/amazonlinux",
             "stability": "experimental",
-            "summary": "Imports the Ubuntu 24.04 Amazon-managed image."
+            "summary": "Imports the Amazon Linux 2023 Amazon-managed image."
           },
           "locationInModule": {
             "filename": "lib/amazon-managed-image.ts",
-            "line": 133
+            "line": 79
           },
-          "name": "ubuntuServer2404",
+          "name": "amazonLinux2023",
           "parameters": [
             {
               "docs": {
@@ -8995,15 +9158,14 @@
         },
         {
           "docs": {
-            "see": "https://hub.docker.com/r/microsoft/windows-servercore",
             "stability": "experimental",
-            "summary": "Imports the Windows Server 2016 Core Amazon-managed image."
+            "summary": "Imports an Amazon-managed image from its attributes."
           },
           "locationInModule": {
             "filename": "lib/amazon-managed-image.ts",
-            "line": 147
+            "line": 276
           },
-          "name": "windowsServer2016Core",
+          "name": "fromAmazonManagedImageAttributes",
           "parameters": [
             {
               "docs": {
@@ -9025,11 +9187,11 @@
             },
             {
               "docs": {
-                "summary": "The Amazon-managed image attributes."
+                "summary": "- The Amazon-managed image attributes."
               },
-              "name": "opts",
+              "name": "attrs",
               "type": {
-                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageOptions"
+                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageAttributes"
               }
             }
           ],
@@ -9042,15 +9204,14 @@
         },
         {
           "docs": {
-            "see": "https://docs.aws.amazon.com/ec2/latest/windows-ami-reference/index.html",
             "stability": "experimental",
-            "summary": "Imports the Windows Server 2016 Full Amazon-managed image."
+            "summary": "Imports an Amazon-managed image from its name."
           },
           "locationInModule": {
             "filename": "lib/amazon-managed-image.ts",
-            "line": 160
+            "line": 300
           },
-          "name": "windowsServer2016Full",
+          "name": "fromAmazonManagedImageName",
           "parameters": [
             {
               "docs": {
@@ -9072,11 +9233,11 @@
             },
             {
               "docs": {
-                "summary": "The Amazon-managed image attributes."
+                "summary": "- The name of the Amazon-managed image."
               },
-              "name": "opts",
+              "name": "amazonManagedImageName",
               "type": {
-                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageOptions"
+                "primitive": "string"
               }
             }
           ],
@@ -9089,15 +9250,15 @@
         },
         {
           "docs": {
-            "see": "https://hub.docker.com/r/microsoft/windows-servercore",
+            "see": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-mac-instances.html",
             "stability": "experimental",
-            "summary": "Imports the Windows Server 2019 Core Amazon-managed image."
+            "summary": "Imports the macOS 14 Amazon-managed image."
           },
           "locationInModule": {
             "filename": "lib/amazon-managed-image.ts",
-            "line": 174
+            "line": 252
           },
-          "name": "windowsServer2019Core",
+          "name": "macOS14",
           "parameters": [
             {
               "docs": {
@@ -9136,15 +9297,15 @@
         },
         {
           "docs": {
-            "see": "https://docs.aws.amazon.com/ec2/latest/windows-ami-reference/index.html",
+            "see": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-mac-instances.html",
             "stability": "experimental",
-            "summary": "Imports the Windows Server 2019 Full Amazon-managed image."
+            "summary": "Imports the macOS 15 Amazon-managed image."
           },
           "locationInModule": {
             "filename": "lib/amazon-managed-image.ts",
-            "line": 187
+            "line": 265
           },
-          "name": "windowsServer2019Full",
+          "name": "macOS15",
           "parameters": [
             {
               "docs": {
@@ -9183,15 +9344,15 @@
         },
         {
           "docs": {
-            "see": "https://docs.aws.amazon.com/ec2/latest/windows-ami-reference/index.html",
+            "see": "https://aws.amazon.com/partners/redhat/faqs",
             "stability": "experimental",
-            "summary": "Imports the Windows Server 2022 Core Amazon-managed image."
+            "summary": "Imports the Red Hat Enterprise Linux 10 Amazon-managed image."
           },
           "locationInModule": {
             "filename": "lib/amazon-managed-image.ts",
-            "line": 200
+            "line": 92
           },
-          "name": "windowsServer2022Core",
+          "name": "redHatEnterpriseLinux10",
           "parameters": [
             {
               "docs": {
@@ -9230,15 +9391,15 @@
         },
         {
           "docs": {
-            "see": "https://docs.aws.amazon.com/ec2/latest/windows-ami-reference/index.html",
+            "see": "https://aws.amazon.com/linux/commercial-linux/faqs/",
             "stability": "experimental",
-            "summary": "Imports the Windows Server 2022 Full Amazon-managed image."
+            "summary": "Imports the SUSE Linux Enterprise Server 15 Amazon-managed image."
           },
           "locationInModule": {
             "filename": "lib/amazon-managed-image.ts",
-            "line": 213
+            "line": 105
           },
-          "name": "windowsServer2022Full",
+          "name": "suseLinuxEnterpriseServer15",
           "parameters": [
             {
               "docs": {
@@ -9277,15 +9438,15 @@
         },
         {
           "docs": {
-            "see": "https://docs.aws.amazon.com/ec2/latest/windows-ami-reference/index.html",
+            "see": "https://hub.docker.com/_/ubuntu",
             "stability": "experimental",
-            "summary": "Imports the Windows Server 2025 Core Amazon-managed image."
+            "summary": "Imports the Ubuntu 22.04 Amazon-managed image."
           },
           "locationInModule": {
             "filename": "lib/amazon-managed-image.ts",
-            "line": 226
+            "line": 119
           },
-          "name": "windowsServer2025Core",
+          "name": "ubuntuServer2204",
           "parameters": [
             {
               "docs": {
@@ -9324,15 +9485,15 @@
         },
         {
           "docs": {
-            "see": "https://docs.aws.amazon.com/ec2/latest/windows-ami-reference/index.html",
+            "see": "https://hub.docker.com/_/ubuntu",
             "stability": "experimental",
-            "summary": "Imports the Windows Server 2025 Full Amazon-managed image."
+            "summary": "Imports the Ubuntu 24.04 Amazon-managed image."
           },
           "locationInModule": {
             "filename": "lib/amazon-managed-image.ts",
-            "line": 239
+            "line": 133
           },
-          "name": "windowsServer2025Full",
+          "name": "ubuntuServer2404",
           "parameters": [
             {
               "docs": {
@@ -9368,361 +9529,419 @@
             }
           },
           "static": true
-        }
-      ],
-      "name": "AmazonManagedImage",
-      "symbolId": "lib/amazon-managed-image:AmazonManagedImage"
-    },
-    "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageAttributes": {
-      "assembly": "@aws-cdk/aws-imagebuilder-alpha",
-      "datatype": true,
-      "docs": {
-        "stability": "experimental",
-        "summary": "Attributes for importing an Amazon-managed image by name (and optionally a version).",
-        "example": "// Import by name\nconst managedImageByName = imagebuilder.AmazonManagedImage.fromAmazonManagedImageName(\n  this,\n  'ManagedImageByName',\n  'amazon-linux-2023-x86'\n);\n\n// Import by attributes with specific version\nconst managedImageByAttributes = imagebuilder.AmazonManagedImage.fromAmazonManagedImageAttributes(this, 'ManagedImageByAttributes', {\n  imageName: 'ubuntu-server-22-lts-x86',\n  imageVersion: '2024.11.25'\n});",
-        "custom": {
-          "exampleMetadata": "infused"
-        }
-      },
-      "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageAttributes",
-      "kind": "interface",
-      "locationInModule": {
-        "filename": "lib/amazon-managed-image.ts",
-        "line": 9
-      },
-      "name": "AmazonManagedImageAttributes",
-      "properties": [
-        {
-          "abstract": true,
-          "docs": {
-            "remarks": "The provided name must be normalized by converting all alphabetical\ncharacters to lowercase, and replacing all spaces and underscores with hyphens.",
-            "stability": "experimental",
-            "summary": "The name of the Amazon-managed image."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/amazon-managed-image.ts",
-            "line": 14
-          },
-          "name": "imageName",
-          "type": {
-            "primitive": "string"
-          }
         },
         {
-          "abstract": true,
           "docs": {
-            "default": "x.x.x",
+            "see": "https://hub.docker.com/r/microsoft/windows-servercore",
             "stability": "experimental",
-            "summary": "The version of the Amazon-managed image."
+            "summary": "Imports the Windows Server 2016 Core Amazon-managed image."
           },
-          "immutable": true,
           "locationInModule": {
             "filename": "lib/amazon-managed-image.ts",
-            "line": 21
-          },
-          "name": "imageVersion",
-          "optional": true,
-          "type": {
-            "primitive": "string"
-          }
-        }
-      ],
-      "symbolId": "lib/amazon-managed-image:AmazonManagedImageAttributes"
-    },
-    "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageOptions": {
-      "assembly": "@aws-cdk/aws-imagebuilder-alpha",
-      "datatype": true,
-      "docs": {
-        "stability": "experimental",
-        "summary": "Options for selecting a predefined Amazon-managed image.",
-        "example": "// Amazon Linux 2023 AMI for x86_64\nconst amazonLinux2023Ami = imagebuilder.AmazonManagedImage.amazonLinux2023(this, 'AmazonLinux2023', {\n  imageType: imagebuilder.ImageType.AMI,\n  imageArchitecture: imagebuilder.ImageArchitecture.X86_64\n});\n\n// Ubuntu 22.04 AMI for ARM64\nconst ubuntu2204Ami = imagebuilder.AmazonManagedImage.ubuntuServer2204(this, 'Ubuntu2204', {\n  imageType: imagebuilder.ImageType.AMI,\n  imageArchitecture: imagebuilder.ImageArchitecture.ARM64\n});\n\n// Windows Server 2022 Full AMI\nconst windows2022Ami = imagebuilder.AmazonManagedImage.windowsServer2022Full(this, 'Windows2022', {\n  imageType: imagebuilder.ImageType.AMI,\n  imageArchitecture: imagebuilder.ImageArchitecture.X86_64\n});\n\n// Use as base image in recipe\nconst managedImageRecipe = new imagebuilder.ImageRecipe(this, 'ManagedImageRecipe', {\n  baseImage: amazonLinux2023Ami.toBaseImage()\n});",
-        "custom": {
-          "exampleMetadata": "infused"
-        }
-      },
-      "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageOptions",
-      "kind": "interface",
-      "locationInModule": {
-        "filename": "lib/amazon-managed-image.ts",
-        "line": 27
-      },
-      "name": "AmazonManagedImageOptions",
-      "properties": [
-        {
-          "abstract": true,
-          "docs": {
-            "stability": "experimental",
-            "summary": "The architecture of the Amazon-managed image."
+            "line": 147
           },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/amazon-managed-image.ts",
-            "line": 31
+          "name": "windowsServer2016Core",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The construct scope."
+              },
+              "name": "scope",
+              "type": {
+                "fqn": "constructs.Construct"
+              }
+            },
+            {
+              "docs": {
+                "summary": "Identifier of the construct."
+              },
+              "name": "id",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "The Amazon-managed image attributes."
+              },
+              "name": "opts",
+              "type": {
+                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IImage"
+            }
           },
-          "name": "imageArchitecture",
-          "type": {
-            "fqn": "@aws-cdk/aws-imagebuilder-alpha.ImageArchitecture"
-          }
+          "static": true
         },
         {
-          "abstract": true,
           "docs": {
+            "see": "https://docs.aws.amazon.com/ec2/latest/windows-ami-reference/index.html",
             "stability": "experimental",
-            "summary": "The type of the Amazon-managed image."
+            "summary": "Imports the Windows Server 2016 Full Amazon-managed image."
           },
-          "immutable": true,
           "locationInModule": {
             "filename": "lib/amazon-managed-image.ts",
-            "line": 36
+            "line": 160
           },
-          "name": "imageType",
-          "type": {
-            "fqn": "@aws-cdk/aws-imagebuilder-alpha.ImageType"
-          }
+          "name": "windowsServer2016Full",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The construct scope."
+              },
+              "name": "scope",
+              "type": {
+                "fqn": "constructs.Construct"
+              }
+            },
+            {
+              "docs": {
+                "summary": "Identifier of the construct."
+              },
+              "name": "id",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "The Amazon-managed image attributes."
+              },
+              "name": "opts",
+              "type": {
+                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IImage"
+            }
+          },
+          "static": true
         },
         {
-          "abstract": true,
           "docs": {
-            "default": "x.x.x",
+            "see": "https://hub.docker.com/r/microsoft/windows-servercore",
             "stability": "experimental",
-            "summary": "The version of the Amazon-managed image."
+            "summary": "Imports the Windows Server 2019 Core Amazon-managed image."
           },
-          "immutable": true,
           "locationInModule": {
             "filename": "lib/amazon-managed-image.ts",
-            "line": 43
+            "line": 174
           },
-          "name": "imageVersion",
-          "optional": true,
-          "type": {
-            "primitive": "string"
-          }
-        }
-      ],
-      "symbolId": "lib/amazon-managed-image:AmazonManagedImageOptions"
-    },
-    "@aws-cdk/aws-imagebuilder-alpha.AmiDistribution": {
-      "assembly": "@aws-cdk/aws-imagebuilder-alpha",
-      "datatype": true,
-      "docs": {
-        "stability": "experimental",
-        "summary": "The regional distribution settings to use for an AMI build.",
-        "example": "const infrastructureConfiguration = new imagebuilder.InfrastructureConfiguration(this, 'Infrastructure', {\n  infrastructureConfigurationName: 'production-infrastructure',\n  instanceTypes: [\n    ec2.InstanceType.of(ec2.InstanceClass.COMPUTE7_INTEL, ec2.InstanceSize.LARGE)\n  ],\n  vpc: vpc,\n  subnetSelection: { subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS }\n});\n\nconst distributionConfiguration = new imagebuilder.DistributionConfiguration(this, 'Distribution');\ndistributionConfiguration.addAmiDistributions({\n  amiName: 'production-ami-{{ imagebuilder:buildDate }}',\n  amiTargetAccountIds: ['123456789012', '098765432109']\n});\n\nconst productionPipeline = new imagebuilder.ImagePipeline(this, 'ProductionPipeline', {\n  recipe: exampleImageRecipe,\n  infrastructureConfiguration: infrastructureConfiguration,\n  distributionConfiguration: distributionConfiguration\n});",
-        "custom": {
-          "exampleMetadata": "infused"
-        }
-      },
-      "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmiDistribution",
-      "kind": "interface",
-      "locationInModule": {
-        "filename": "lib/distribution-configuration.ts",
-        "line": 188
-      },
-      "name": "AmiDistribution",
-      "properties": [
-        {
-          "abstract": true,
-          "docs": {
-            "default": "None",
-            "stability": "experimental",
-            "summary": "The description of the AMI."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/distribution-configuration.ts",
-            "line": 208
-          },
-          "name": "amiDescription",
-          "optional": true,
-          "type": {
-            "primitive": "string"
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "default": "None",
-            "stability": "experimental",
-            "summary": "The KMS key to encrypt the distributed AMI with."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/distribution-configuration.ts",
-            "line": 215
-          },
-          "name": "amiKmsKey",
-          "optional": true,
-          "type": {
-            "fqn": "aws-cdk-lib.aws_kms.IKey"
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "default": "None",
-            "stability": "experimental",
-            "summary": "The launch permissions for the AMI, defining which principals are allowed to access the AMI."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/distribution-configuration.ts",
-            "line": 222
-          },
-          "name": "amiLaunchPermission",
-          "optional": true,
-          "type": {
-            "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmiLaunchPermission"
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "default": "A name is generated from the image recipe name",
-            "stability": "experimental",
-            "summary": "The name to use for the distributed AMIs."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/distribution-configuration.ts",
-            "line": 229
+          "name": "windowsServer2019Core",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The construct scope."
+              },
+              "name": "scope",
+              "type": {
+                "fqn": "constructs.Construct"
+              }
+            },
+            {
+              "docs": {
+                "summary": "Identifier of the construct."
+              },
+              "name": "id",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "The Amazon-managed image attributes."
+              },
+              "name": "opts",
+              "type": {
+                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IImage"
+            }
           },
-          "name": "amiName",
-          "optional": true,
-          "type": {
-            "primitive": "string"
-          }
+          "static": true
         },
         {
-          "abstract": true,
           "docs": {
-            "default": "None",
+            "see": "https://docs.aws.amazon.com/ec2/latest/windows-ami-reference/index.html",
             "stability": "experimental",
-            "summary": "The tags to apply to the distributed AMIs."
+            "summary": "Imports the Windows Server 2019 Full Amazon-managed image."
           },
-          "immutable": true,
           "locationInModule": {
-            "filename": "lib/distribution-configuration.ts",
-            "line": 201
+            "filename": "lib/amazon-managed-image.ts",
+            "line": 187
           },
-          "name": "amiTags",
-          "optional": true,
-          "type": {
-            "collection": {
-              "elementtype": {
+          "name": "windowsServer2019Full",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The construct scope."
+              },
+              "name": "scope",
+              "type": {
+                "fqn": "constructs.Construct"
+              }
+            },
+            {
+              "docs": {
+                "summary": "Identifier of the construct."
+              },
+              "name": "id",
+              "type": {
                 "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "The Amazon-managed image attributes."
               },
-              "kind": "map"
+              "name": "opts",
+              "type": {
+                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageOptions"
+              }
             }
-          }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IImage"
+            }
+          },
+          "static": true
         },
         {
-          "abstract": true,
           "docs": {
-            "default": "None",
+            "see": "https://docs.aws.amazon.com/ec2/latest/windows-ami-reference/index.html",
             "stability": "experimental",
-            "summary": "The account IDs to copy the output AMI to."
+            "summary": "Imports the Windows Server 2022 Core Amazon-managed image."
           },
-          "immutable": true,
           "locationInModule": {
-            "filename": "lib/distribution-configuration.ts",
-            "line": 236
+            "filename": "lib/amazon-managed-image.ts",
+            "line": 200
           },
-          "name": "amiTargetAccountIds",
-          "optional": true,
-          "type": {
-            "collection": {
-              "elementtype": {
+          "name": "windowsServer2022Core",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The construct scope."
+              },
+              "name": "scope",
+              "type": {
+                "fqn": "constructs.Construct"
+              }
+            },
+            {
+              "docs": {
+                "summary": "Identifier of the construct."
+              },
+              "name": "id",
+              "type": {
                 "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "The Amazon-managed image attributes."
               },
-              "kind": "array"
+              "name": "opts",
+              "type": {
+                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageOptions"
+              }
             }
-          }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IImage"
+            }
+          },
+          "static": true
         },
         {
-          "abstract": true,
           "docs": {
-            "default": "None",
-            "see": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_EnableFastLaunch.html",
+            "see": "https://docs.aws.amazon.com/ec2/latest/windows-ami-reference/index.html",
             "stability": "experimental",
-            "summary": "The fast launch configurations to use for enabling EC2 Fast Launch on the distributed Windows AMI."
+            "summary": "Imports the Windows Server 2022 Full Amazon-managed image."
           },
-          "immutable": true,
           "locationInModule": {
-            "filename": "lib/distribution-configuration.ts",
-            "line": 258
+            "filename": "lib/amazon-managed-image.ts",
+            "line": 213
           },
-          "name": "fastLaunchConfigurations",
-          "optional": true,
-          "type": {
-            "collection": {
-              "elementtype": {
-                "fqn": "@aws-cdk/aws-imagebuilder-alpha.FastLaunchConfiguration"
+          "name": "windowsServer2022Full",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The construct scope."
               },
-              "kind": "array"
+              "name": "scope",
+              "type": {
+                "fqn": "constructs.Construct"
+              }
+            },
+            {
+              "docs": {
+                "summary": "Identifier of the construct."
+              },
+              "name": "id",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "The Amazon-managed image attributes."
+              },
+              "name": "opts",
+              "type": {
+                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageOptions"
+              }
             }
-          }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IImage"
+            }
+          },
+          "static": true
         },
         {
-          "abstract": true,
           "docs": {
-            "default": "None",
+            "see": "https://docs.aws.amazon.com/ec2/latest/windows-ami-reference/index.html",
             "stability": "experimental",
-            "summary": "The launch templates to apply the distributed AMI to."
+            "summary": "Imports the Windows Server 2025 Core Amazon-managed image."
           },
-          "immutable": true,
           "locationInModule": {
-            "filename": "lib/distribution-configuration.ts",
-            "line": 250
+            "filename": "lib/amazon-managed-image.ts",
+            "line": 226
           },
-          "name": "launchTemplates",
-          "optional": true,
-          "type": {
-            "collection": {
-              "elementtype": {
-                "fqn": "@aws-cdk/aws-imagebuilder-alpha.LaunchTemplateConfiguration"
+          "name": "windowsServer2025Core",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The construct scope."
               },
-              "kind": "array"
+              "name": "scope",
+              "type": {
+                "fqn": "constructs.Construct"
+              }
+            },
+            {
+              "docs": {
+                "summary": "Identifier of the construct."
+              },
+              "name": "id",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "The Amazon-managed image attributes."
+              },
+              "name": "opts",
+              "type": {
+                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageOptions"
+              }
             }
-          }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IImage"
+            }
+          },
+          "static": true
         },
         {
-          "abstract": true,
           "docs": {
-            "default": "None",
+            "see": "https://docs.aws.amazon.com/ec2/latest/windows-ami-reference/index.html",
             "stability": "experimental",
-            "summary": "The License Manager license configuration ARNs to apply to the distributed AMIs."
+            "summary": "Imports the Windows Server 2025 Full Amazon-managed image."
           },
-          "immutable": true,
           "locationInModule": {
-            "filename": "lib/distribution-configuration.ts",
-            "line": 265
+            "filename": "lib/amazon-managed-image.ts",
+            "line": 239
           },
-          "name": "licenseConfigurationArns",
-          "optional": true,
-          "type": {
-            "collection": {
-              "elementtype": {
+          "name": "windowsServer2025Full",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The construct scope."
+              },
+              "name": "scope",
+              "type": {
+                "fqn": "constructs.Construct"
+              }
+            },
+            {
+              "docs": {
+                "summary": "Identifier of the construct."
+              },
+              "name": "id",
+              "type": {
                 "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "The Amazon-managed image attributes."
               },
-              "kind": "array"
+              "name": "opts",
+              "type": {
+                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageOptions"
+              }
             }
-          }
-        },
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IImage"
+            }
+          },
+          "static": true
+        }
+      ],
+      "name": "AmazonManagedImage",
+      "symbolId": "lib/amazon-managed-image:AmazonManagedImage"
+    },
+    "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageAttributes": {
+      "assembly": "@aws-cdk/aws-imagebuilder-alpha",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Attributes for importing an Amazon-managed image by name (and optionally a version).",
+        "example": "// Import by name\nconst managedImageByName = imagebuilder.AmazonManagedImage.fromAmazonManagedImageName(\n  this,\n  'ManagedImageByName',\n  'amazon-linux-2023-x86'\n);\n\n// Import by attributes with specific version\nconst managedImageByAttributes = imagebuilder.AmazonManagedImage.fromAmazonManagedImageAttributes(this, 'ManagedImageByAttributes', {\n  imageName: 'ubuntu-server-22-lts-x86',\n  imageVersion: '2024.11.25'\n});",
+        "custom": {
+          "exampleMetadata": "infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageAttributes",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "lib/amazon-managed-image.ts",
+        "line": 9
+      },
+      "name": "AmazonManagedImageAttributes",
+      "properties": [
         {
           "abstract": true,
           "docs": {
-            "default": "The current region is used",
+            "remarks": "The provided name must be normalized by converting all alphabetical\ncharacters to lowercase, and replacing all spaces and underscores with hyphens.",
             "stability": "experimental",
-            "summary": "The target region to distribute AMIs to."
+            "summary": "The name of the Amazon-managed image."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "lib/distribution-configuration.ts",
-            "line": 194
+            "filename": "lib/amazon-managed-image.ts",
+            "line": 14
           },
-          "name": "region",
-          "optional": true,
+          "name": "imageName",
           "type": {
             "primitive": "string"
           }
@@ -9730,151 +9949,107 @@
         {
           "abstract": true,
           "docs": {
-            "default": "None",
+            "default": "x.x.x",
             "stability": "experimental",
-            "summary": "The SSM parameters to create or update for the distributed AMIs."
+            "summary": "The version of the Amazon-managed image."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "lib/distribution-configuration.ts",
-            "line": 243
+            "filename": "lib/amazon-managed-image.ts",
+            "line": 21
           },
-          "name": "ssmParameters",
+          "name": "imageVersion",
           "optional": true,
           "type": {
-            "collection": {
-              "elementtype": {
-                "fqn": "@aws-cdk/aws-imagebuilder-alpha.SSMParameterConfigurations"
-              },
-              "kind": "array"
-            }
+            "primitive": "string"
           }
         }
       ],
-      "symbolId": "lib/distribution-configuration:AmiDistribution"
+      "symbolId": "lib/amazon-managed-image:AmazonManagedImageAttributes"
     },
-    "@aws-cdk/aws-imagebuilder-alpha.AmiLaunchPermission": {
+    "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageOptions": {
       "assembly": "@aws-cdk/aws-imagebuilder-alpha",
       "datatype": true,
       "docs": {
         "stability": "experimental",
-        "summary": "The launch permissions for the AMI, defining which principals are allowed to access the AMI.",
-        "example": "const distributionConfiguration = new imagebuilder.DistributionConfiguration(this, 'DistributionConfiguration', {\n  distributionConfigurationName: 'test-distribution-configuration',\n  description: 'A Distribution Configuration',\n  amiDistributions: [\n    {\n      // Distribute AMI to us-east-2 and publish the AMI ID to an SSM parameter\n      region: 'us-east-2',\n      ssmParameters: [\n        {\n          parameter: ssm.StringParameter.fromStringParameterAttributes(this, 'CrossRegionParameter', {\n            parameterName: '/imagebuilder/ami',\n            forceDynamicReference: true\n          })\n        }\n      ]\n    }\n  ]\n});\n\n// For AMI-based image builds - add an AMI distribution in the current region\ndistributionConfiguration.addAmiDistributions({\n  amiName: 'imagebuilder-{{ imagebuilder:buildDate }}',\n  amiDescription: 'Build AMI',\n  amiKmsKey: kms.Key.fromLookup(this, 'ComponentKey', { aliasName: 'alias/distribution-encryption-key' }),\n  // Copy the AMI to different accounts\n  amiTargetAccountIds: ['123456789012', '098765432109'],\n  // Add launch permissions on the AMI\n  amiLaunchPermission: {\n    organizationArns: [\n      this.formatArn({ region: '', service: 'organizations', resource: 'organization', resourceName: 'o-1234567abc' })\n    ],\n    organizationalUnitArns: [\n      this.formatArn({\n        region: '',\n        service: 'organizations',\n        resource: 'ou',\n        resourceName: 'o-1234567abc/ou-a123-b4567890'\n      })\n    ],\n    isPublicUserGroup: true,\n    accountIds: ['234567890123']\n  },\n  // Attach tags to the AMI\n  amiTags: {\n    Environment: 'production',\n    Version: '{{ imagebuilder:buildVersion }}'\n  },\n  // Optional - publish the distributed AMI ID to an SSM parameter\n  ssmParameters: [\n    {\n      parameter: ssm.StringParameter.fromStringParameterAttributes(this, 'Parameter', {\n        parameterName: '/imagebuilder/ami',\n        forceDynamicReference: true\n      })\n    },\n    {\n      amiAccount: '098765432109',\n      dataType: ssm.ParameterDataType.TEXT,\n      parameter: ssm.StringParameter.fromStringParameterAttributes(this, 'CrossAccountParameter', {\n        parameterName: 'imagebuilder-prod-ami',\n        forceDynamicReference: true\n      })\n    }\n  ],\n  // Optional - create a new launch template version with the distributed AMI ID\n  launchTemplates: [\n    {\n      launchTemplate: ec2.LaunchTemplate.fromLaunchTemplateAttributes(this, 'LaunchTemplate', {\n        launchTemplateId: 'lt-1234'\n      }),\n      setDefaultVersion: true\n    },\n    {\n      accountId: '123456789012',\n      launchTemplate: ec2.LaunchTemplate.fromLaunchTemplateAttributes(this, 'CrossAccountLaunchTemplate', {\n        launchTemplateId: 'lt-5678'\n      }),\n      setDefaultVersion: true\n    }\n  ],\n  // Optional - enable Fast Launch on an imported launch template\n  fastLaunchConfigurations: [\n    {\n      enabled: true,\n      launchTemplate: ec2.LaunchTemplate.fromLaunchTemplateAttributes(this, 'FastLaunchLT', {\n        launchTemplateName: 'fast-launch-lt'\n      }),\n      maxParallelLaunches: 10,\n      targetSnapshotCount: 2\n    }\n  ],\n  // Optional - license configurations to apply to the AMI\n  licenseConfigurationArns: [\n    'arn:aws:license-manager:us-west-2:123456789012:license-configuration:lic-abcdefghijklmnopqrstuvwxyz'\n  ]\n});",
+        "summary": "Options for selecting a predefined Amazon-managed image.",
+        "example": "// Amazon Linux 2023 AMI for x86_64\nconst amazonLinux2023Ami = imagebuilder.AmazonManagedImage.amazonLinux2023(this, 'AmazonLinux2023', {\n  imageType: imagebuilder.ImageType.AMI,\n  imageArchitecture: imagebuilder.ImageArchitecture.X86_64\n});\n\n// Ubuntu 22.04 AMI for ARM64\nconst ubuntu2204Ami = imagebuilder.AmazonManagedImage.ubuntuServer2204(this, 'Ubuntu2204', {\n  imageType: imagebuilder.ImageType.AMI,\n  imageArchitecture: imagebuilder.ImageArchitecture.ARM64\n});\n\n// Windows Server 2022 Full AMI\nconst windows2022Ami = imagebuilder.AmazonManagedImage.windowsServer2022Full(this, 'Windows2022', {\n  imageType: imagebuilder.ImageType.AMI,\n  imageArchitecture: imagebuilder.ImageArchitecture.X86_64\n});\n\n// Use as base image in recipe\nconst managedImageRecipe = new imagebuilder.ImageRecipe(this, 'ManagedImageRecipe', {\n  baseImage: amazonLinux2023Ami.toBaseImage()\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
       },
-      "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmiLaunchPermission",
+      "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedImageOptions",
       "kind": "interface",
       "locationInModule": {
-        "filename": "lib/distribution-configuration.ts",
-        "line": 54
+        "filename": "lib/amazon-managed-image.ts",
+        "line": 27
       },
-      "name": "AmiLaunchPermission",
+      "name": "AmazonManagedImageOptions",
       "properties": [
         {
           "abstract": true,
           "docs": {
-            "default": "None",
-            "stability": "experimental",
-            "summary": "The AWS account IDs to share the AMI with."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/distribution-configuration.ts",
-            "line": 90
-          },
-          "name": "accountIds",
-          "optional": true,
-          "type": {
-            "collection": {
-              "elementtype": {
-                "primitive": "string"
-              },
-              "kind": "array"
-            }
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "default": "false",
-            "remarks": "WARNING: Making an AMI public exposes it to any AWS account globally.\n Ensure the AMI does not contain:\n - Sensitive data or credentials\n - Proprietary software or configurations\n - Internal network information or security settings\n\nFor more information on blocking public access for AMIs, see: [Understand block public access for AMIs](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/block-public-access-to-amis.html)",
             "stability": "experimental",
-            "summary": "Whether to make the AMI public. Block public access for AMIs must be disabled to make the AMI public."
+            "summary": "The architecture of the Amazon-managed image."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "lib/distribution-configuration.ts",
-            "line": 83
+            "filename": "lib/amazon-managed-image.ts",
+            "line": 31
           },
-          "name": "isPublicUserGroup",
-          "optional": true,
+          "name": "imageArchitecture",
           "type": {
-            "primitive": "boolean"
+            "fqn": "@aws-cdk/aws-imagebuilder-alpha.ImageArchitecture"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "None",
             "stability": "experimental",
-            "summary": "The ARNs for the AWS Organizations organizational units to share the AMI with."
+            "summary": "The type of the Amazon-managed image."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "lib/distribution-configuration.ts",
-            "line": 60
+            "filename": "lib/amazon-managed-image.ts",
+            "line": 36
           },
-          "name": "organizationalUnitArns",
-          "optional": true,
-          "type": {
-            "collection": {
-              "elementtype": {
-                "primitive": "string"
-              },
-              "kind": "array"
-            }
+          "name": "imageType",
+          "type": {
+            "fqn": "@aws-cdk/aws-imagebuilder-alpha.ImageType"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "None",
+            "default": "x.x.x",
             "stability": "experimental",
-            "summary": "The ARNs for the AWS Organization that you want to share the AMI with."
+            "summary": "The version of the Amazon-managed image."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "lib/distribution-configuration.ts",
-            "line": 67
+            "filename": "lib/amazon-managed-image.ts",
+            "line": 43
           },
-          "name": "organizationArns",
+          "name": "imageVersion",
           "optional": true,
           "type": {
-            "collection": {
-              "elementtype": {
-                "primitive": "string"
-              },
-              "kind": "array"
-            }
+            "primitive": "string"
           }
         }
       ],
-      "symbolId": "lib/distribution-configuration:AmiLaunchPermission"
+      "symbolId": "lib/amazon-managed-image:AmazonManagedImageOptions"
     },
-    "@aws-cdk/aws-imagebuilder-alpha.AwsManagedComponent": {
-      "abstract": true,
+    "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedWorkflow": {
       "assembly": "@aws-cdk/aws-imagebuilder-alpha",
       "docs": {
         "stability": "experimental",
-        "summary": "Helper class for working with AWS-managed components.",
-        "example": "const imageRecipe = new imagebuilder.ImageRecipe(this, 'AmazonManagedImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  ),\n  components: [\n    {\n      component: imagebuilder.AwsManagedComponent.updateOS(this, 'UpdateOS', {\n        platform: imagebuilder.Platform.LINUX\n      })\n    },\n    {\n      component: imagebuilder.AwsManagedComponent.awsCliV2(this, 'AwsCli', {\n        platform: imagebuilder.Platform.LINUX\n      })\n    }\n  ]\n});",
+        "summary": "Helper class for working with Amazon-managed workflows.",
+        "example": "const containerWorkflowPipeline = new imagebuilder.ImagePipeline(this, 'ContainerWorkflowPipeline', {\n  recipe: exampleContainerRecipe,\n  workflows: [\n    { workflow: imagebuilder.AmazonManagedWorkflow.buildContainer(this, 'BuildContainer') },\n    { workflow: imagebuilder.AmazonManagedWorkflow.testContainer(this, 'TestContainer') },\n    { workflow: imagebuilder.AmazonManagedWorkflow.distributeContainer(this, 'DistributeContainer') }\n  ]\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
       },
-      "fqn": "@aws-cdk/aws-imagebuilder-alpha.AwsManagedComponent",
+      "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedWorkflow",
       "initializer": {
         "docs": {
           "stability": "experimental"
@@ -9882,20 +10057,20 @@
       },
       "kind": "class",
       "locationInModule": {
-        "filename": "lib/component.ts",
-        "line": 859
+        "filename": "lib/amazon-managed-workflow.ts",
+        "line": 24
       },
       "methods": [
         {
           "docs": {
             "stability": "experimental",
-            "summary": "Imports the AWS CLI v2 AWS-managed component."
+            "summary": "Imports the build-container Amazon-managed workflow."
           },
           "locationInModule": {
-            "filename": "lib/component.ts",
-            "line": 867
+            "filename": "lib/amazon-managed-workflow.ts",
+            "line": 31
           },
-          "name": "awsCliV2",
+          "name": "buildContainer",
           "parameters": [
             {
               "docs": {
@@ -9914,20 +10089,11 @@
               "type": {
                 "primitive": "string"
               }
-            },
-            {
-              "docs": {
-                "summary": "The AWS-managed component attributes."
-              },
-              "name": "attrs",
-              "type": {
-                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AwsManagedComponentAttributes"
-              }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IComponent"
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IWorkflow"
             }
           },
           "static": true
@@ -9935,13 +10101,13 @@
         {
           "docs": {
             "stability": "experimental",
-            "summary": "Imports an AWS-managed component from its attributes."
+            "summary": "Imports the build-image AWS-managed workflow."
           },
           "locationInModule": {
-            "filename": "lib/component.ts",
-            "line": 1037
+            "filename": "lib/amazon-managed-workflow.ts",
+            "line": 44
           },
-          "name": "fromAwsManagedComponentAttributes",
+          "name": "buildImage",
           "parameters": [
             {
               "docs": {
@@ -9960,20 +10126,11 @@
               "type": {
                 "primitive": "string"
               }
-            },
-            {
-              "docs": {
-                "summary": "The AWS-managed component attributes."
-              },
-              "name": "attrs",
-              "type": {
-                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AwsManagedComponentAttributes"
-              }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IComponent"
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IWorkflow"
             }
           },
           "static": true
@@ -9981,13 +10138,13 @@
         {
           "docs": {
             "stability": "experimental",
-            "summary": "Imports an AWS-managed component from its name."
+            "summary": "Imports the distribute-container AWS-managed workflow."
           },
           "locationInModule": {
-            "filename": "lib/component.ts",
-            "line": 1071
+            "filename": "lib/amazon-managed-workflow.ts",
+            "line": 57
           },
-          "name": "fromAwsManagedComponentName",
+          "name": "distributeContainer",
           "parameters": [
             {
               "docs": {
@@ -10006,20 +10163,11 @@
               "type": {
                 "primitive": "string"
               }
-            },
-            {
-              "docs": {
-                "summary": "- The name of the AWS-managed component."
-              },
-              "name": "awsManagedComponentName",
-              "type": {
-                "primitive": "string"
-              }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IComponent"
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IWorkflow"
             }
           },
           "static": true
@@ -10027,13 +10175,13 @@
         {
           "docs": {
             "stability": "experimental",
-            "summary": "Imports the hello world AWS-managed component."
+            "summary": "Imports the distribute-image AWS-managed workflow."
           },
           "locationInModule": {
-            "filename": "lib/component.ts",
-            "line": 895
+            "filename": "lib/amazon-managed-workflow.ts",
+            "line": 70
           },
-          "name": "helloWorld",
+          "name": "distributeImage",
           "parameters": [
             {
               "docs": {
@@ -10052,20 +10200,11 @@
               "type": {
                 "primitive": "string"
               }
-            },
-            {
-              "docs": {
-                "summary": "The AWS-managed component attributes."
-              },
-              "name": "attrs",
-              "type": {
-                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AwsManagedComponentAttributes"
-              }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IComponent"
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IWorkflow"
             }
           },
           "static": true
@@ -10073,13 +10212,13 @@
         {
           "docs": {
             "stability": "experimental",
-            "summary": "Imports the Python 3 AWS-managed component."
+            "summary": "Imports an AWS-managed workflow from its attributes."
           },
           "locationInModule": {
-            "filename": "lib/component.ts",
-            "line": 923
+            "filename": "lib/amazon-managed-workflow.ts",
+            "line": 110
           },
-          "name": "python3",
+          "name": "fromAmazonManagedWorkflowAttributes",
           "parameters": [
             {
               "docs": {
@@ -10101,17 +10240,17 @@
             },
             {
               "docs": {
-                "summary": "The AWS-managed component attributes."
+                "summary": "The attributes of the AWS-managed workflow."
               },
               "name": "attrs",
               "type": {
-                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AwsManagedComponentAttributes"
+                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedWorkflowAttributes"
               }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IComponent"
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IWorkflow"
             }
           },
           "static": true
@@ -10119,13 +10258,13 @@
         {
           "docs": {
             "stability": "experimental",
-            "summary": "Imports the reboot AWS-managed component."
+            "summary": "Imports the test-container AWS-managed workflow."
           },
           "locationInModule": {
-            "filename": "lib/component.ts",
-            "line": 951
+            "filename": "lib/amazon-managed-workflow.ts",
+            "line": 83
           },
-          "name": "reboot",
+          "name": "testContainer",
           "parameters": [
             {
               "docs": {
@@ -10144,35 +10283,25 @@
               "type": {
                 "primitive": "string"
               }
-            },
-            {
-              "docs": {
-                "summary": "The AWS-managed component attributes."
-              },
-              "name": "attrs",
-              "type": {
-                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AwsManagedComponentAttributes"
-              }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IComponent"
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IWorkflow"
             }
           },
           "static": true
         },
         {
           "docs": {
-            "see": "https://docs.aws.amazon.com/imagebuilder/latest/userguide/ib-stig.html",
             "stability": "experimental",
-            "summary": "Imports the STIG hardening AWS-managed component."
+            "summary": "Imports the test-image AWS-managed workflow."
           },
           "locationInModule": {
-            "filename": "lib/component.ts",
-            "line": 981
+            "filename": "lib/amazon-managed-workflow.ts",
+            "line": 96
           },
-          "name": "stigBuild",
+          "name": "testImage",
           "parameters": [
             {
               "docs": {
@@ -10191,107 +10320,105 @@
               "type": {
                 "primitive": "string"
               }
-            },
-            {
-              "docs": {
-                "summary": "The AWS-managed component attributes."
-              },
-              "name": "attrs",
-              "type": {
-                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AwsManagedComponentAttributes"
-              }
             }
           ],
           "returns": {
             "type": {
-              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IComponent"
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IWorkflow"
             }
           },
           "static": true
-        },
+        }
+      ],
+      "name": "AmazonManagedWorkflow",
+      "symbolId": "lib/amazon-managed-workflow:AmazonManagedWorkflow"
+    },
+    "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedWorkflowAttributes": {
+      "assembly": "@aws-cdk/aws-imagebuilder-alpha",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Properties for an EC2 Image Builder Amazon-managed workflow.",
+        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as imagebuilder_alpha from '@aws-cdk/aws-imagebuilder-alpha';\nconst amazonManagedWorkflowAttributes: imagebuilder_alpha.AmazonManagedWorkflowAttributes = {\n  workflowName: 'workflowName',\n  workflowType: imagebuilder_alpha.WorkflowType.BUILD,\n};",
+        "custom": {
+          "exampleMetadata": "fixture=_generated"
+        }
+      },
+      "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmazonManagedWorkflowAttributes",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "lib/amazon-managed-workflow.ts",
+        "line": 9
+      },
+      "name": "AmazonManagedWorkflowAttributes",
+      "properties": [
         {
+          "abstract": true,
           "docs": {
             "stability": "experimental",
-            "summary": "Imports the OS update AWS-managed component."
+            "summary": "The name of the Amazon-managed workflow."
           },
+          "immutable": true,
           "locationInModule": {
-            "filename": "lib/component.ts",
-            "line": 1009
+            "filename": "lib/amazon-managed-workflow.ts",
+            "line": 13
           },
-          "name": "updateOS",
-          "parameters": [
-            {
-              "docs": {
-                "summary": "The construct scope."
-              },
-              "name": "scope",
-              "type": {
-                "fqn": "constructs.Construct"
-              }
-            },
-            {
-              "docs": {
-                "summary": "Identifier of the construct."
-              },
-              "name": "id",
-              "type": {
-                "primitive": "string"
-              }
-            },
-            {
-              "docs": {
-                "summary": "The AWS-managed component attributes."
-              },
-              "name": "attrs",
-              "type": {
-                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AwsManagedComponentAttributes"
-              }
-            }
-          ],
-          "returns": {
-            "type": {
-              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IComponent"
-            }
+          "name": "workflowName",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "The type of the Amazon-managed workflow."
           },
-          "static": true
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/amazon-managed-workflow.ts",
+            "line": 18
+          },
+          "name": "workflowType",
+          "type": {
+            "fqn": "@aws-cdk/aws-imagebuilder-alpha.WorkflowType"
+          }
         }
       ],
-      "name": "AwsManagedComponent",
-      "symbolId": "lib/component:AwsManagedComponent"
+      "symbolId": "lib/amazon-managed-workflow:AmazonManagedWorkflowAttributes"
     },
-    "@aws-cdk/aws-imagebuilder-alpha.AwsManagedComponentAttributes": {
+    "@aws-cdk/aws-imagebuilder-alpha.AmiDistribution": {
       "assembly": "@aws-cdk/aws-imagebuilder-alpha",
       "datatype": true,
       "docs": {
         "stability": "experimental",
-        "summary": "Properties for an EC2 Image Builder AWS-managed component.",
-        "example": "const imageRecipe = new imagebuilder.ImageRecipe(this, 'AmazonManagedImageRecipe', {\n  baseImage: imagebuilder.BaseImage.fromSsmParameterName(\n    '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'\n  ),\n  components: [\n    {\n      component: imagebuilder.AwsManagedComponent.updateOS(this, 'UpdateOS', {\n        platform: imagebuilder.Platform.LINUX\n      })\n    },\n    {\n      component: imagebuilder.AwsManagedComponent.awsCliV2(this, 'AwsCli', {\n        platform: imagebuilder.Platform.LINUX\n      })\n    }\n  ]\n});",
+        "summary": "The regional distribution settings to use for an AMI build.",
+        "example": "const infrastructureConfiguration = new imagebuilder.InfrastructureConfiguration(this, 'Infrastructure', {\n  infrastructureConfigurationName: 'production-infrastructure',\n  instanceTypes: [\n    ec2.InstanceType.of(ec2.InstanceClass.COMPUTE7_INTEL, ec2.InstanceSize.LARGE)\n  ],\n  vpc: vpc,\n  subnetSelection: { subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS }\n});\n\nconst distributionConfiguration = new imagebuilder.DistributionConfiguration(this, 'Distribution');\ndistributionConfiguration.addAmiDistributions({\n  amiName: 'production-ami-{{ imagebuilder:buildDate }}',\n  amiTargetAccountIds: ['123456789012', '098765432109']\n});\n\nconst productionPipeline = new imagebuilder.ImagePipeline(this, 'ProductionPipeline', {\n  recipe: exampleImageRecipe,\n  infrastructureConfiguration: infrastructureConfiguration,\n  distributionConfiguration: distributionConfiguration\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
       },
-      "fqn": "@aws-cdk/aws-imagebuilder-alpha.AwsManagedComponentAttributes",
+      "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmiDistribution",
       "kind": "interface",
       "locationInModule": {
-        "filename": "lib/component.ts",
-        "line": 155
+        "filename": "lib/distribution-configuration.ts",
+        "line": 188
       },
-      "name": "AwsManagedComponentAttributes",
+      "name": "AmiDistribution",
       "properties": [
         {
           "abstract": true,
           "docs": {
-            "default": "- none if using  the pre-defined managed component methods, otherwise a platform is required when using\n  `this.fromAwsManagedComponentAttributes()`",
-            "remarks": "The name of the AWS-managed component. This is a required attribute when using the\n`this.fromAwsManagedComponentAttributes()` method. This parameter should not be provided when\nusing the pre-defined managed component methods, such as `AwsManagedComponent.updateOS()` and\n`AwsManagedComponent.reboot()`.",
+            "default": "None",
             "stability": "experimental",
-            "summary": "The name of the AWS-managed component."
+            "summary": "The description of the AMI."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "lib/component.ts",
-            "line": 167
+            "filename": "lib/distribution-configuration.ts",
+            "line": 208
           },
-          "name": "componentName",
+          "name": "amiDescription",
           "optional": true,
           "type": {
             "primitive": "string"
@@ -10300,353 +10427,326 @@
         {
           "abstract": true,
           "docs": {
-            "default": "- the latest version of the component, x.x.x",
+            "default": "None",
             "stability": "experimental",
-            "summary": "The version of the AWS-managed component."
+            "summary": "The KMS key to encrypt the distributed AMI with."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "lib/component.ts",
-            "line": 174
+            "filename": "lib/distribution-configuration.ts",
+            "line": 215
           },
-          "name": "componentVersion",
+          "name": "amiKmsKey",
           "optional": true,
           "type": {
-            "primitive": "string"
+            "fqn": "aws-cdk-lib.aws_kms.IKey"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "- none if using `this.fromAwsManagedComponentAttributes()`, otherwise a platform is\n  required when using the pre-defined managed component methods",
-            "remarks": "This is a required attribute when using the pre-defined managed\ncomponent methods, such as `AwsManagedComponent.updateOS()` and `AwsManagedComponent.reboot()`. This parameter\nshould not be provided when using the `this.fromAwsManagedComponentAttributes()` method.",
+            "default": "None",
             "stability": "experimental",
-            "summary": "The platform of the AWS-managed component."
+            "summary": "The launch permissions for the AMI, defining which principals are allowed to access the AMI."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "lib/component.ts",
-            "line": 184
+            "filename": "lib/distribution-configuration.ts",
+            "line": 222
           },
-          "name": "platform",
+          "name": "amiLaunchPermission",
           "optional": true,
           "type": {
-            "fqn": "@aws-cdk/aws-imagebuilder-alpha.Platform"
+            "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmiLaunchPermission"
           }
-        }
-      ],
-      "symbolId": "lib/component:AwsManagedComponentAttributes"
-    },
-    "@aws-cdk/aws-imagebuilder-alpha.AwsManagedWorkflow": {
-      "assembly": "@aws-cdk/aws-imagebuilder-alpha",
-      "docs": {
-        "stability": "experimental",
-        "summary": "Helper class for working with AWS-managed workflows.",
-        "example": "const containerWorkflowPipeline = new imagebuilder.ImagePipeline(this, 'ContainerWorkflowPipeline', {\n  recipe: exampleContainerRecipe,\n  workflows: [\n    { workflow: imagebuilder.AwsManagedWorkflow.buildContainer(this, 'BuildContainer') },\n    { workflow: imagebuilder.AwsManagedWorkflow.testContainer(this, 'TestContainer') },\n    { workflow: imagebuilder.AwsManagedWorkflow.distributeContainer(this, 'DistributeContainer') }\n  ]\n});",
-        "custom": {
-          "exampleMetadata": "infused"
-        }
-      },
-      "fqn": "@aws-cdk/aws-imagebuilder-alpha.AwsManagedWorkflow",
-      "initializer": {
-        "docs": {
-          "stability": "experimental"
-        }
-      },
-      "kind": "class",
-      "locationInModule": {
-        "filename": "lib/workflow.ts",
-        "line": 577
-      },
-      "methods": [
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "A name is generated from the image recipe name",
+            "stability": "experimental",
+            "summary": "The name to use for the distributed AMIs."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/distribution-configuration.ts",
+            "line": 229
+          },
+          "name": "amiName",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
         {
+          "abstract": true,
           "docs": {
+            "default": "None",
             "stability": "experimental",
-            "summary": "Imports the build-container AWS-managed workflow."
+            "summary": "The tags to apply to the distributed AMIs."
           },
+          "immutable": true,
           "locationInModule": {
-            "filename": "lib/workflow.ts",
-            "line": 584
+            "filename": "lib/distribution-configuration.ts",
+            "line": 201
           },
-          "name": "buildContainer",
-          "parameters": [
-            {
-              "docs": {
-                "summary": "The construct scope."
-              },
-              "name": "scope",
-              "type": {
-                "fqn": "constructs.Construct"
-              }
-            },
-            {
-              "docs": {
-                "summary": "Identifier of the construct."
-              },
-              "name": "id",
-              "type": {
+          "name": "amiTags",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
                 "primitive": "string"
-              }
-            }
-          ],
-          "returns": {
-            "type": {
-              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IWorkflow"
+              },
+              "kind": "map"
             }
-          },
-          "static": true
+          }
         },
         {
+          "abstract": true,
           "docs": {
+            "default": "None",
             "stability": "experimental",
-            "summary": "Imports the build-image AWS-managed workflow."
+            "summary": "The account IDs to copy the output AMI to."
           },
+          "immutable": true,
           "locationInModule": {
-            "filename": "lib/workflow.ts",
-            "line": 597
+            "filename": "lib/distribution-configuration.ts",
+            "line": 236
           },
-          "name": "buildImage",
-          "parameters": [
-            {
-              "docs": {
-                "summary": "The construct scope."
-              },
-              "name": "scope",
-              "type": {
-                "fqn": "constructs.Construct"
-              }
-            },
-            {
-              "docs": {
-                "summary": "Identifier of the construct."
-              },
-              "name": "id",
-              "type": {
+          "name": "amiTargetAccountIds",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
                 "primitive": "string"
-              }
-            }
-          ],
-          "returns": {
-            "type": {
-              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IWorkflow"
+              },
+              "kind": "array"
             }
-          },
-          "static": true
+          }
         },
         {
+          "abstract": true,
           "docs": {
+            "default": "None",
+            "see": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_EnableFastLaunch.html",
             "stability": "experimental",
-            "summary": "Imports the distribute-container AWS-managed workflow."
+            "summary": "The fast launch configurations to use for enabling EC2 Fast Launch on the distributed Windows AMI."
           },
+          "immutable": true,
           "locationInModule": {
-            "filename": "lib/workflow.ts",
-            "line": 610
+            "filename": "lib/distribution-configuration.ts",
+            "line": 258
           },
-          "name": "distributeContainer",
-          "parameters": [
-            {
-              "docs": {
-                "summary": "The construct scope."
-              },
-              "name": "scope",
-              "type": {
-                "fqn": "constructs.Construct"
-              }
-            },
-            {
-              "docs": {
-                "summary": "Identifier of the construct."
+          "name": "fastLaunchConfigurations",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "fqn": "@aws-cdk/aws-imagebuilder-alpha.FastLaunchConfiguration"
               },
-              "name": "id",
-              "type": {
-                "primitive": "string"
-              }
-            }
-          ],
-          "returns": {
-            "type": {
-              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IWorkflow"
+              "kind": "array"
             }
-          },
-          "static": true
+          }
         },
         {
+          "abstract": true,
           "docs": {
+            "default": "None",
             "stability": "experimental",
-            "summary": "Imports an AWS-managed workflow from its attributes."
+            "summary": "The launch templates to apply the distributed AMI to."
           },
+          "immutable": true,
           "locationInModule": {
-            "filename": "lib/workflow.ts",
-            "line": 650
+            "filename": "lib/distribution-configuration.ts",
+            "line": 250
           },
-          "name": "fromAwsManagedWorkflowAttributes",
-          "parameters": [
-            {
-              "docs": {
-                "summary": "The construct scope."
-              },
-              "name": "scope",
-              "type": {
-                "fqn": "constructs.Construct"
-              }
-            },
-            {
-              "docs": {
-                "summary": "Identifier of the construct."
-              },
-              "name": "id",
-              "type": {
-                "primitive": "string"
-              }
-            },
-            {
-              "docs": {
-                "summary": "The attributes of the AWS-managed workflow."
+          "name": "launchTemplates",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "fqn": "@aws-cdk/aws-imagebuilder-alpha.LaunchTemplateConfiguration"
               },
-              "name": "attrs",
-              "type": {
-                "fqn": "@aws-cdk/aws-imagebuilder-alpha.AwsManagedWorkflowAttributes"
-              }
-            }
-          ],
-          "returns": {
-            "type": {
-              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IWorkflow"
+              "kind": "array"
             }
-          },
-          "static": true
+          }
         },
         {
+          "abstract": true,
           "docs": {
+            "default": "None",
             "stability": "experimental",
-            "summary": "Imports the test-container AWS-managed workflow."
+            "summary": "The License Manager license configuration ARNs to apply to the distributed AMIs."
           },
+          "immutable": true,
           "locationInModule": {
-            "filename": "lib/workflow.ts",
-            "line": 623
+            "filename": "lib/distribution-configuration.ts",
+            "line": 265
           },
-          "name": "testContainer",
-          "parameters": [
-            {
-              "docs": {
-                "summary": "The construct scope."
-              },
-              "name": "scope",
-              "type": {
-                "fqn": "constructs.Construct"
-              }
-            },
-            {
-              "docs": {
-                "summary": "Identifier of the construct."
-              },
-              "name": "id",
-              "type": {
+          "name": "licenseConfigurationArns",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
                 "primitive": "string"
-              }
-            }
-          ],
-          "returns": {
-            "type": {
-              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IWorkflow"
+              },
+              "kind": "array"
             }
-          },
-          "static": true
+          }
         },
         {
+          "abstract": true,
           "docs": {
+            "default": "The current region is used",
             "stability": "experimental",
-            "summary": "Imports the test-image AWS-managed workflow."
+            "summary": "The target region to distribute AMIs to."
           },
+          "immutable": true,
           "locationInModule": {
-            "filename": "lib/workflow.ts",
-            "line": 636
+            "filename": "lib/distribution-configuration.ts",
+            "line": 194
           },
-          "name": "testImage",
-          "parameters": [
-            {
-              "docs": {
-                "summary": "The construct scope."
-              },
-              "name": "scope",
-              "type": {
-                "fqn": "constructs.Construct"
-              }
-            },
-            {
-              "docs": {
-                "summary": "Identifier of the construct."
+          "name": "region",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "None",
+            "stability": "experimental",
+            "summary": "The SSM parameters to create or update for the distributed AMIs."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/distribution-configuration.ts",
+            "line": 243
+          },
+          "name": "ssmParameters",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "fqn": "@aws-cdk/aws-imagebuilder-alpha.SSMParameterConfigurations"
               },
-              "name": "id",
-              "type": {
-                "primitive": "string"
-              }
-            }
-          ],
-          "returns": {
-            "type": {
-              "fqn": "@aws-cdk/aws-imagebuilder-alpha.IWorkflow"
+              "kind": "array"
             }
-          },
-          "static": true
+          }
         }
       ],
-      "name": "AwsManagedWorkflow",
-      "symbolId": "lib/workflow:AwsManagedWorkflow"
+      "symbolId": "lib/distribution-configuration:AmiDistribution"
     },
-    "@aws-cdk/aws-imagebuilder-alpha.AwsManagedWorkflowAttributes": {
+    "@aws-cdk/aws-imagebuilder-alpha.AmiLaunchPermission": {
       "assembly": "@aws-cdk/aws-imagebuilder-alpha",
       "datatype": true,
       "docs": {
         "stability": "experimental",
-        "summary": "Properties for an EC2 Image Builder AWS-managed workflow.",
-        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as imagebuilder_alpha from '@aws-cdk/aws-imagebuilder-alpha';\nconst awsManagedWorkflowAttributes: imagebuilder_alpha.AwsManagedWorkflowAttributes = {\n  workflowName: 'workflowName',\n  workflowType: imagebuilder_alpha.WorkflowType.BUILD,\n};",
+        "summary": "The launch permissions for the AMI, defining which principals are allowed to access the AMI.",
+        "example": "const distributionConfiguration = new imagebuilder.DistributionConfiguration(this, 'DistributionConfiguration', {\n  distributionConfigurationName: 'test-distribution-configuration',\n  description: 'A Distribution Configuration',\n  amiDistributions: [\n    {\n      // Distribute AMI to us-east-2 and publish the AMI ID to an SSM parameter\n      region: 'us-east-2',\n      ssmParameters: [\n        {\n          parameter: ssm.StringParameter.fromStringParameterAttributes(this, 'CrossRegionParameter', {\n            parameterName: '/imagebuilder/ami',\n            forceDynamicReference: true\n          })\n        }\n      ]\n    }\n  ]\n});\n\n// For AMI-based image builds - add an AMI distribution in the current region\ndistributionConfiguration.addAmiDistributions({\n  amiName: 'imagebuilder-{{ imagebuilder:buildDate }}',\n  amiDescription: 'Build AMI',\n  amiKmsKey: kms.Key.fromLookup(this, 'ComponentKey', { aliasName: 'alias/distribution-encryption-key' }),\n  // Copy the AMI to different accounts\n  amiTargetAccountIds: ['123456789012', '098765432109'],\n  // Add launch permissions on the AMI\n  amiLaunchPermission: {\n    organizationArns: [\n      this.formatArn({ region: '', service: 'organizations', resource: 'organization', resourceName: 'o-1234567abc' })\n    ],\n    organizationalUnitArns: [\n      this.formatArn({\n        region: '',\n        service: 'organizations',\n        resource: 'ou',\n        resourceName: 'o-1234567abc/ou-a123-b4567890'\n      })\n    ],\n    isPublicUserGroup: true,\n    accountIds: ['234567890123']\n  },\n  // Attach tags to the AMI\n  amiTags: {\n    Environment: 'production',\n    Version: '{{ imagebuilder:buildVersion }}'\n  },\n  // Optional - publish the distributed AMI ID to an SSM parameter\n  ssmParameters: [\n    {\n      parameter: ssm.StringParameter.fromStringParameterAttributes(this, 'Parameter', {\n        parameterName: '/imagebuilder/ami',\n        forceDynamicReference: true\n      })\n    },\n    {\n      amiAccount: '098765432109',\n      dataType: ssm.ParameterDataType.TEXT,\n      parameter: ssm.StringParameter.fromStringParameterAttributes(this, 'CrossAccountParameter', {\n        parameterName: 'imagebuilder-prod-ami',\n        forceDynamicReference: true\n      })\n    }\n  ],\n  // Optional - create a new launch template version with the distributed AMI ID\n  launchTemplates: [\n    {\n      launchTemplate: ec2.LaunchTemplate.fromLaunchTemplateAttributes(this, 'LaunchTemplate', {\n        launchTemplateId: 'lt-1234'\n      }),\n      setDefaultVersion: true\n    },\n    {\n      accountId: '123456789012',\n      launchTemplate: ec2.LaunchTemplate.fromLaunchTemplateAttributes(this, 'CrossAccountLaunchTemplate', {\n        launchTemplateId: 'lt-5678'\n      }),\n      setDefaultVersion: true\n    }\n  ],\n  // Optional - enable Fast Launch on an imported launch template\n  fastLaunchConfigurations: [\n    {\n      enabled: true,\n      launchTemplate: ec2.LaunchTemplate.fromLaunchTemplateAttributes(this, 'FastLaunchLT', {\n        launchTemplateName: 'fast-launch-lt'\n      }),\n      maxParallelLaunches: 10,\n      targetSnapshotCount: 2\n    }\n  ],\n  // Optional - license configurations to apply to the AMI\n  licenseConfigurationArns: [\n    'arn:aws:license-manager:us-west-2:123456789012:license-configuration:lic-abcdefghijklmnopqrstuvwxyz'\n  ]\n});",
         "custom": {
-          "exampleMetadata": "fixture=_generated"
+          "exampleMetadata": "infused"
         }
       },
-      "fqn": "@aws-cdk/aws-imagebuilder-alpha.AwsManagedWorkflowAttributes",
+      "fqn": "@aws-cdk/aws-imagebuilder-alpha.AmiLaunchPermission",
       "kind": "interface",
       "locationInModule": {
-        "filename": "lib/workflow.ts",
-        "line": 165
+        "filename": "lib/distribution-configuration.ts",
+        "line": 54
       },
-      "name": "AwsManagedWorkflowAttributes",
+      "name": "AmiLaunchPermission",
       "properties": [
         {
           "abstract": true,
           "docs": {
+            "default": "None",
             "stability": "experimental",
-            "summary": "The name of the AWS-managed workflow."
+            "summary": "The AWS account IDs to share the AMI with."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "lib/workflow.ts",
-            "line": 169
+            "filename": "lib/distribution-configuration.ts",
+            "line": 90
           },
-          "name": "workflowName",
+          "name": "accountIds",
+          "optional": true,
           "type": {
-            "primitive": "string"
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
           }
         },
         {
           "abstract": true,
           "docs": {
+            "default": "false",
+            "remarks": "WARNING: Making an AMI public exposes it to any AWS account globally.\n Ensure the AMI does not contain:\n - Sensitive data or credentials\n - Proprietary software or configurations\n - Internal network information or security settings\n\nFor more information on blocking public access for AMIs, see: [Understand block public access for AMIs](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/block-public-access-to-amis.html)",
             "stability": "experimental",
-            "summary": "The type of the AWS-managed workflow."
+            "summary": "Whether to make the AMI public. Block public access for AMIs must be disabled to make the AMI public."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "lib/workflow.ts",
-            "line": 174
+            "filename": "lib/distribution-configuration.ts",
+            "line": 83
           },
-          "name": "workflowType",
+          "name": "isPublicUserGroup",
+          "optional": true,
           "type": {
-            "fqn": "@aws-cdk/aws-imagebuilder-alpha.WorkflowType"
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "None",
+            "stability": "experimental",
+            "summary": "The ARNs for the AWS Organizations organizational units to share the AMI with."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/distribution-configuration.ts",
+            "line": 60
+          },
+          "name": "organizationalUnitArns",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "None",
+            "stability": "experimental",
+            "summary": "The ARNs for the AWS Organization that you want to share the AMI with."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/distribution-configuration.ts",
+            "line": 67
+          },
+          "name": "organizationArns",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
           }
         }
       ],
-      "symbolId": "lib/workflow:AwsManagedWorkflowAttributes"
+      "symbolId": "lib/distribution-configuration:AmiLaunchPermission"
     },
     "@aws-cdk/aws-imagebuilder-alpha.AwsMarketplaceComponent": {
       "assembly": "@aws-cdk/aws-imagebuilder-alpha",
@@ -10667,7 +10767,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/component.ts",
-        "line": 1107
+        "line": 852
       },
       "methods": [
         {
@@ -10677,7 +10777,7 @@
           },
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 1115
+            "line": 860
           },
           "name": "fromAwsMarketplaceComponentAttributes",
           "parameters": [
@@ -10735,7 +10835,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/component.ts",
-        "line": 190
+        "line": 155
       },
       "name": "AwsMarketplaceComponentAttributes",
       "properties": [
@@ -10749,7 +10849,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 194
+            "line": 159
           },
           "name": "componentName",
           "type": {
@@ -10765,7 +10865,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 199
+            "line": 164
           },
           "name": "marketplaceProductId",
           "type": {
@@ -10782,7 +10882,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 206
+            "line": 171
           },
           "name": "componentVersion",
           "optional": true,
@@ -11270,7 +11370,7 @@
         },
         "locationInModule": {
           "filename": "lib/component.ts",
-          "line": 1284
+          "line": 1029
         },
         "parameters": [
           {
@@ -11299,7 +11399,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/component.ts",
-        "line": 1180
+        "line": 925
       },
       "methods": [
         {
@@ -11309,7 +11409,7 @@
           },
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 1188
+            "line": 933
           },
           "name": "fromComponentArn",
           "parameters": [
@@ -11347,7 +11447,7 @@
           },
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 1205
+            "line": 950
           },
           "name": "fromComponentAttributes",
           "parameters": [
@@ -11385,7 +11485,7 @@
           },
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 1196
+            "line": 941
           },
           "name": "fromComponentName",
           "parameters": [
@@ -11422,7 +11522,7 @@
           },
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 1251
+            "line": 996
           },
           "name": "isComponent",
           "parameters": [
@@ -11447,7 +11547,7 @@
           },
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 1156
+            "line": 901
           },
           "name": "grant",
           "overrides": "@aws-cdk/aws-imagebuilder-alpha.IComponent",
@@ -11486,7 +11586,7 @@
           },
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 1170
+            "line": 915
           },
           "name": "grantRead",
           "overrides": "@aws-cdk/aws-imagebuilder-alpha.IComponent",
@@ -11519,7 +11619,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 1183
+            "line": 928
           },
           "name": "PROPERTY_INJECTION_ID",
           "static": true,
@@ -11535,7 +11635,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 1258
+            "line": 1003
           },
           "name": "componentArn",
           "overrides": "@aws-cdk/aws-imagebuilder-alpha.IComponent",
@@ -11551,7 +11651,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 1263
+            "line": 1008
           },
           "name": "componentName",
           "overrides": "@aws-cdk/aws-imagebuilder-alpha.IComponent",
@@ -11570,7 +11670,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 1280
+            "line": 1025
           },
           "name": "componentType",
           "type": {
@@ -11585,7 +11685,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 1268
+            "line": 1013
           },
           "name": "componentVersion",
           "overrides": "@aws-cdk/aws-imagebuilder-alpha.IComponent",
@@ -11601,7 +11701,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 1273
+            "line": 1018
           },
           "name": "encrypted",
           "type": {
@@ -11615,7 +11715,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 1282
+            "line": 1027
           },
           "name": "kmsKey",
           "optional": true,
@@ -11641,7 +11741,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/component.ts",
-        "line": 425
+        "line": 390
       },
       "members": [
         {
@@ -12012,7 +12112,7 @@
         },
         "locationInModule": {
           "filename": "lib/component.ts",
-          "line": 392
+          "line": 357
         },
         "parameters": [
           {
@@ -12033,7 +12133,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/component.ts",
-        "line": 372
+        "line": 337
       },
       "methods": [
         {
@@ -12043,7 +12143,7 @@
           },
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 378
+            "line": 343
           },
           "name": "fromString",
           "parameters": [
@@ -12075,7 +12175,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 385
+            "line": 350
           },
           "name": "type",
           "type": {
@@ -12090,7 +12190,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 390
+            "line": 355
           },
           "name": "value",
           "type": {
@@ -12115,25 +12215,12 @@
       "initializer": {
         "docs": {
           "stability": "experimental"
-        },
-        "locationInModule": {
-          "filename": "lib/component.ts",
-          "line": 796
-        },
-        "parameters": [
-          {
-            "name": "value",
-            "type": {
-              "primitive": "string"
-            }
-          }
-        ],
-        "protected": true
+        }
       },
       "kind": "class",
       "locationInModule": {
         "filename": "lib/component.ts",
-        "line": 704
+        "line": 690
       },
       "methods": [
         {
@@ -12143,7 +12230,7 @@
           },
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 713
+            "line": 699
           },
           "name": "fromAsset",
           "parameters": [
@@ -12199,7 +12286,7 @@
           },
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 748
+            "line": 734
           },
           "name": "fromComponentDocumentJsonObject",
           "parameters": [
@@ -12227,7 +12314,7 @@
           },
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 782
+            "line": 768
           },
           "name": "fromInline",
           "parameters": [
@@ -12255,7 +12342,7 @@
           },
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 738
+            "line": 724
           },
           "name": "fromJsonObject",
           "parameters": [
@@ -12288,7 +12375,7 @@
           },
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 729
+            "line": 715
           },
           "name": "fromS3",
           "parameters": [
@@ -12317,43 +12404,87 @@
             }
           },
           "static": true
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "- For inline components, data is the component text\n- For S3-backed components, uri is the S3 URL",
+            "stability": "experimental",
+            "summary": "The rendered component data value, for use in CloudFormation."
+          },
+          "locationInModule": {
+            "filename": "lib/component.ts",
+            "line": 777
+          },
+          "name": "render",
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.ComponentDataConfig"
+            }
+          }
         }
       ],
       "name": "ComponentData",
+      "symbolId": "lib/component:ComponentData"
+    },
+    "@aws-cdk/aws-imagebuilder-alpha.ComponentDataConfig": {
+      "assembly": "@aws-cdk/aws-imagebuilder-alpha",
+      "datatype": true,
+      "docs": {
+        "remarks": "- For inline components, data is the component text\n- For S3-backed components, uri is the S3 URL",
+        "stability": "experimental",
+        "summary": "The rendered component data value, for use in CloudFormation.",
+        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as imagebuilder_alpha from '@aws-cdk/aws-imagebuilder-alpha';\nconst componentDataConfig: imagebuilder_alpha.ComponentDataConfig = {\n  data: 'data',\n  uri: 'uri',\n};",
+        "custom": {
+          "exampleMetadata": "fixture=_generated"
+        }
+      },
+      "fqn": "@aws-cdk/aws-imagebuilder-alpha.ComponentDataConfig",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "lib/component.ts",
+        "line": 671
+      },
+      "name": "ComponentDataConfig",
       "properties": [
         {
           "abstract": true,
           "docs": {
+            "default": "- none if uri is set",
             "stability": "experimental",
-            "summary": "Indicates that the provided component data is an S3 reference."
+            "summary": "The rendered component data, for use in CloudFormation."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 789
+            "line": 677
           },
-          "name": "isS3Reference",
+          "name": "data",
+          "optional": true,
           "type": {
-            "primitive": "boolean"
+            "primitive": "string"
           }
         },
         {
+          "abstract": true,
           "docs": {
+            "default": "- none if data is set",
             "stability": "experimental",
-            "summary": "The resulting inline string or S3 URL which references the component data."
+            "summary": "The rendered component data URI, for use in CloudFormation."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 794
+            "line": 684
           },
-          "name": "value",
+          "name": "uri",
+          "optional": true,
           "type": {
             "primitive": "string"
           }
         }
       ],
-      "symbolId": "lib/component:ComponentData"
+      "symbolId": "lib/component:ComponentDataConfig"
     },
     "@aws-cdk/aws-imagebuilder-alpha.ComponentDocument": {
       "assembly": "@aws-cdk/aws-imagebuilder-alpha",
@@ -12370,7 +12501,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/component.ts",
-        "line": 212
+        "line": 177
       },
       "name": "ComponentDocument",
       "properties": [
@@ -12383,7 +12514,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 221
+            "line": 186
           },
           "name": "phases",
           "type": {
@@ -12404,7 +12535,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 216
+            "line": 181
           },
           "name": "schemaVersion",
           "type": {
@@ -12421,7 +12552,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 242
+            "line": 207
           },
           "name": "constants",
           "optional": true,
@@ -12444,7 +12575,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 235
+            "line": 200
           },
           "name": "description",
           "optional": true,
@@ -12462,7 +12593,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 228
+            "line": 193
           },
           "name": "name",
           "optional": true,
@@ -12480,7 +12611,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 249
+            "line": 214
           },
           "name": "parameters",
           "optional": true,
@@ -12512,7 +12643,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/component.ts",
-        "line": 353
+        "line": 318
       },
       "name": "ComponentDocumentForLoop",
       "properties": [
@@ -12526,7 +12657,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 361
+            "line": 326
           },
           "name": "end",
           "type": {
@@ -12543,7 +12674,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 357
+            "line": 322
           },
           "name": "start",
           "type": {
@@ -12560,7 +12691,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 366
+            "line": 331
           },
           "name": "updateBy",
           "type": {
@@ -12585,7 +12716,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/component.ts",
-        "line": 325
+        "line": 290
       },
       "name": "ComponentDocumentLoop",
       "properties": [
@@ -12599,7 +12730,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 339
+            "line": 304
           },
           "name": "for",
           "optional": true,
@@ -12617,7 +12748,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 346
+            "line": 311
           },
           "name": "forEach",
           "optional": true,
@@ -12640,7 +12771,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 331
+            "line": 296
           },
           "name": "name",
           "optional": true,
@@ -12666,7 +12797,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/component.ts",
-        "line": 401
+        "line": 366
       },
       "name": "ComponentDocumentParameterDefinition",
       "properties": [
@@ -12679,7 +12810,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 405
+            "line": 370
           },
           "name": "type",
           "type": {
@@ -12696,7 +12827,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 412
+            "line": 377
           },
           "name": "default",
           "optional": true,
@@ -12714,7 +12845,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 419
+            "line": 384
           },
           "name": "description",
           "optional": true,
@@ -12740,7 +12871,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/component.ts",
-        "line": 256
+        "line": 221
       },
       "name": "ComponentDocumentPhase",
       "properties": [
@@ -12753,7 +12884,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 260
+            "line": 225
           },
           "name": "name",
           "type": {
@@ -12769,7 +12900,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 265
+            "line": 230
           },
           "name": "steps",
           "type": {
@@ -12799,7 +12930,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/component.ts",
-        "line": 272
+        "line": 237
       },
       "name": "ComponentDocumentStep",
       "properties": [
@@ -12812,7 +12943,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 281
+            "line": 246
           },
           "name": "action",
           "type": {
@@ -12829,7 +12960,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 288
+            "line": 253
           },
           "name": "inputs",
           "type": {
@@ -12845,7 +12976,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 276
+            "line": 241
           },
           "name": "name",
           "type": {
@@ -12864,7 +12995,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 298
+            "line": 263
           },
           "name": "if",
           "optional": true,
@@ -12882,7 +13013,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 305
+            "line": 270
           },
           "name": "loop",
           "optional": true,
@@ -12900,7 +13031,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 319
+            "line": 284
           },
           "name": "onFailure",
           "optional": true,
@@ -12918,7 +13049,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 312
+            "line": 277
           },
           "name": "timeout",
           "optional": true,
@@ -12943,7 +13074,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/component.ts",
-        "line": 582
+        "line": 547
       },
       "members": [
         {
@@ -12981,7 +13112,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/component.ts",
-        "line": 602
+        "line": 567
       },
       "members": [
         {
@@ -13103,7 +13234,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/component.ts",
-        "line": 612
+        "line": 577
       },
       "members": [
         {
@@ -13347,7 +13478,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/component.ts",
-        "line": 639
+        "line": 604
       },
       "members": [
         {
@@ -13378,7 +13509,7 @@
         },
         "locationInModule": {
           "filename": "lib/component.ts",
-          "line": 696
+          "line": 661
         },
         "parameters": [
           {
@@ -13393,7 +13524,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/component.ts",
-        "line": 681
+        "line": 646
       },
       "methods": [
         {
@@ -13403,7 +13534,7 @@
           },
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 687
+            "line": 652
           },
           "name": "fromObject",
           "parameters": [
@@ -13440,7 +13571,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 694
+            "line": 659
           },
           "name": "ifCondition",
           "type": {
@@ -13467,7 +13598,7 @@
         },
         "locationInModule": {
           "filename": "lib/component.ts",
-          "line": 673
+          "line": 638
         },
         "parameters": [
           {
@@ -13482,7 +13613,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/component.ts",
-        "line": 649
+        "line": 614
       },
       "methods": [
         {
@@ -13492,7 +13623,7 @@
           },
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 664
+            "line": 629
           },
           "name": "fromList",
           "parameters": [
@@ -13530,7 +13661,7 @@
           },
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 655
+            "line": 620
           },
           "name": "fromObject",
           "parameters": [
@@ -13567,7 +13698,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 671
+            "line": 636
           },
           "name": "inputs",
           "type": {
@@ -17679,7 +17810,7 @@
         "see": "https://docs.aws.amazon.com/imagebuilder/latest/userguide/manage-pipelines.html",
         "stability": "experimental",
         "summary": "Represents an EC2 Image Builder Image Pipeline.",
-        "example": "const workflowPipeline = new imagebuilder.ImagePipeline(this, 'WorkflowPipeline', {\n  recipe: exampleImageRecipe,\n  workflows: [\n    { workflow: imagebuilder.AwsManagedWorkflow.buildImage(this, 'BuildWorkflow') },\n    { workflow: imagebuilder.AwsManagedWorkflow.testImage(this, 'TestWorkflow') }\n  ]\n});",
+        "example": "const workflowPipeline = new imagebuilder.ImagePipeline(this, 'WorkflowPipeline', {\n  recipe: exampleImageRecipe,\n  workflows: [\n    { workflow: imagebuilder.AmazonManagedWorkflow.buildImage(this, 'BuildWorkflow') },\n    { workflow: imagebuilder.AmazonManagedWorkflow.testImage(this, 'TestWorkflow') }\n  ]\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
@@ -18356,7 +18487,7 @@
       "docs": {
         "stability": "experimental",
         "summary": "Properties for creating an Image Pipeline resource.",
-        "example": "const workflowPipeline = new imagebuilder.ImagePipeline(this, 'WorkflowPipeline', {\n  recipe: exampleImageRecipe,\n  workflows: [\n    { workflow: imagebuilder.AwsManagedWorkflow.buildImage(this, 'BuildWorkflow') },\n    { workflow: imagebuilder.AwsManagedWorkflow.testImage(this, 'TestWorkflow') }\n  ]\n});",
+        "example": "const workflowPipeline = new imagebuilder.ImagePipeline(this, 'WorkflowPipeline', {\n  recipe: exampleImageRecipe,\n  workflows: [\n    { workflow: imagebuilder.AmazonManagedWorkflow.buildImage(this, 'BuildWorkflow') },\n    { workflow: imagebuilder.AmazonManagedWorkflow.testImage(this, 'TestWorkflow') }\n  ]\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
@@ -22492,7 +22623,7 @@
         },
         "locationInModule": {
           "filename": "lib/component.ts",
-          "line": 810
+          "line": 787
         },
         "parameters": [
           {
@@ -22513,7 +22644,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/component.ts",
-        "line": 804
+        "line": 783
       },
       "methods": [
         {
@@ -22523,7 +22654,7 @@
           },
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 822
+            "line": 806
           },
           "name": "grantPut",
           "parameters": [
@@ -22550,7 +22681,7 @@
           },
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 831
+            "line": 815
           },
           "name": "grantRead",
           "parameters": [
@@ -22569,6 +22700,23 @@
               "fqn": "aws-cdk-lib.aws_iam.Grant"
             }
           }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The rendered component data text, for use in CloudFormation."
+          },
+          "locationInModule": {
+            "filename": "lib/component.ts",
+            "line": 797
+          },
+          "name": "render",
+          "overrides": "@aws-cdk/aws-imagebuilder-alpha.ComponentData",
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-imagebuilder-alpha.ComponentDataConfig"
+            }
+          }
         }
       ],
       "name": "S3ComponentData",
@@ -22580,7 +22728,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 807
+            "line": 784
           },
           "name": "bucket",
           "protected": true,
@@ -22588,22 +22736,6 @@
             "fqn": "aws-cdk-lib.aws_s3.IBucket"
           }
         },
-        {
-          "docs": {
-            "stability": "experimental",
-            "summary": "Indicates that the provided component data is an S3 reference."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "lib/component.ts",
-            "line": 805
-          },
-          "name": "isS3Reference",
-          "overrides": "@aws-cdk/aws-imagebuilder-alpha.ComponentData",
-          "type": {
-            "primitive": "boolean"
-          }
-        },
         {
           "docs": {
             "stability": "experimental"
@@ -22611,7 +22743,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/component.ts",
-            "line": 808
+            "line": 785
           },
           "name": "key",
           "protected": true,
@@ -22791,7 +22923,7 @@
         },
         "locationInModule": {
           "filename": "lib/workflow.ts",
-          "line": 431
+          "line": 416
         },
         "parameters": [
           {
@@ -22812,7 +22944,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/workflow.ts",
-        "line": 427
+        "line": 412
       },
       "methods": [
         {
@@ -22822,7 +22954,7 @@
           },
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 450
+            "line": 435
           },
           "name": "grantPut",
           "parameters": [
@@ -22849,7 +22981,7 @@
           },
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 459
+            "line": 444
           },
           "name": "grantRead",
           "parameters": [
@@ -22876,7 +23008,7 @@
           },
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 441
+            "line": 426
           },
           "name": "render",
           "overrides": "@aws-cdk/aws-imagebuilder-alpha.WorkflowData",
@@ -22896,7 +23028,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 428
+            "line": 413
           },
           "name": "bucket",
           "protected": true,
@@ -22911,7 +23043,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 429
+            "line": 414
           },
           "name": "key",
           "protected": true,
@@ -23094,7 +23226,7 @@
         },
         "locationInModule": {
           "filename": "lib/workflow.ts",
-          "line": 844
+          "line": 731
         },
         "parameters": [
           {
@@ -23123,7 +23255,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/workflow.ts",
-        "line": 726
+        "line": 613
       },
       "methods": [
         {
@@ -23133,7 +23265,7 @@
           },
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 734
+            "line": 621
           },
           "name": "fromWorkflowArn",
           "parameters": [
@@ -23171,7 +23303,7 @@
           },
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 743
+            "line": 630
           },
           "name": "fromWorkflowAttributes",
           "parameters": [
@@ -23208,7 +23340,7 @@
           },
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 820
+            "line": 707
           },
           "name": "isWorkflow",
           "parameters": [
@@ -23233,7 +23365,7 @@
           },
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 702
+            "line": 589
           },
           "name": "grant",
           "overrides": "@aws-cdk/aws-imagebuilder-alpha.IWorkflow",
@@ -23272,7 +23404,7 @@
           },
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 716
+            "line": 603
           },
           "name": "grantRead",
           "overrides": "@aws-cdk/aws-imagebuilder-alpha.IWorkflow",
@@ -23305,7 +23437,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 729
+            "line": 616
           },
           "name": "PROPERTY_INJECTION_ID",
           "static": true,
@@ -23321,7 +23453,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 827
+            "line": 714
           },
           "name": "workflowArn",
           "overrides": "@aws-cdk/aws-imagebuilder-alpha.IWorkflow",
@@ -23337,7 +23469,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 832
+            "line": 719
           },
           "name": "workflowName",
           "overrides": "@aws-cdk/aws-imagebuilder-alpha.IWorkflow",
@@ -23353,7 +23485,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 837
+            "line": 724
           },
           "name": "workflowType",
           "overrides": "@aws-cdk/aws-imagebuilder-alpha.IWorkflow",
@@ -23369,7 +23501,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 842
+            "line": 729
           },
           "name": "workflowVersion",
           "overrides": "@aws-cdk/aws-imagebuilder-alpha.IWorkflow",
@@ -23394,7 +23526,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/workflow.ts",
-        "line": 180
+        "line": 165
       },
       "members": [
         {
@@ -23629,7 +23761,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/workflow.ts",
-        "line": 545
+        "line": 530
       },
       "name": "WorkflowConfiguration",
       "properties": [
@@ -23642,7 +23774,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 549
+            "line": 534
           },
           "name": "workflow",
           "type": {
@@ -23659,7 +23791,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 556
+            "line": 541
           },
           "name": "onFailure",
           "optional": true,
@@ -23678,7 +23810,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 564
+            "line": 549
           },
           "name": "parallelGroup",
           "optional": true,
@@ -23696,7 +23828,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 571
+            "line": 556
           },
           "name": "parameters",
           "optional": true,
@@ -23732,7 +23864,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/workflow.ts",
-        "line": 368
+        "line": 353
       },
       "methods": [
         {
@@ -23742,7 +23874,7 @@
           },
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 377
+            "line": 362
           },
           "name": "fromAsset",
           "parameters": [
@@ -23798,7 +23930,7 @@
           },
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 412
+            "line": 397
           },
           "name": "fromInline",
           "parameters": [
@@ -23826,7 +23958,7 @@
           },
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 402
+            "line": 387
           },
           "name": "fromJsonObject",
           "parameters": [
@@ -23859,7 +23991,7 @@
           },
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 393
+            "line": 378
           },
           "name": "fromS3",
           "parameters": [
@@ -23898,7 +24030,7 @@
           },
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 421
+            "line": 406
           },
           "name": "render",
           "returns": {
@@ -23927,7 +24059,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/workflow.ts",
-        "line": 349
+        "line": 334
       },
       "name": "WorkflowDataConfig",
       "properties": [
@@ -23941,7 +24073,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 355
+            "line": 340
           },
           "name": "data",
           "optional": true,
@@ -23959,7 +24091,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 362
+            "line": 347
           },
           "name": "uri",
           "optional": true,
@@ -23984,7 +24116,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/workflow.ts",
-        "line": 277
+        "line": 262
       },
       "members": [
         {
@@ -24015,7 +24147,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/workflow.ts",
-        "line": 292
+        "line": 277
       },
       "members": [
         {
@@ -24067,7 +24199,7 @@
         },
         "locationInModule": {
           "filename": "lib/workflow.ts",
-          "line": 537
+          "line": 522
         },
         "parameters": [
           {
@@ -24087,7 +24219,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/workflow.ts",
-        "line": 496
+        "line": 481
       },
       "methods": [
         {
@@ -24097,7 +24229,7 @@
           },
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 502
+            "line": 487
           },
           "name": "fromBoolean",
           "parameters": [
@@ -24125,7 +24257,7 @@
           },
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 511
+            "line": 496
           },
           "name": "fromInteger",
           "parameters": [
@@ -24153,7 +24285,7 @@
           },
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 519
+            "line": 504
           },
           "name": "fromString",
           "parameters": [
@@ -24181,7 +24313,7 @@
           },
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 528
+            "line": 513
           },
           "name": "fromStringList",
           "parameters": [
@@ -24218,7 +24350,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/workflow.ts",
-            "line": 535
+            "line": 520
           },
           "name": "value",
           "type": {
@@ -24415,7 +24547,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/workflow.ts",
-        "line": 317
+        "line": 302
       },
       "members": [
         {
@@ -24443,7 +24575,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "lib/workflow.ts",
-        "line": 327
+        "line": 312
       },
       "members": [
         {
@@ -24472,6 +24604,6 @@
       "symbolId": "lib/workflow:WorkflowType"
     }
   },
-  "version": "2.232.2-alpha.0",
+  "version": "2.234.0-alpha.0",
   "fingerprint": "**********"
 }