aws-cdk-lib 2.147.3__py3-none-any.whl → 2.148.1__py3-none-any.whl

aws_cdk/aws_codeartifact/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # AWS::CodeArtifact Construct Library
 
 This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.
@@ -104,7 +104,7 @@ class CfnDomain(
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param domain_name: A string that specifies the name of the requested domain.
-        :param encryption_key: The ARN of an AWS Key Management Service (AWS KMS) key associated with a domain.
+        :param encryption_key: The key used to encrypt the domain.
         :param permissions_policy_document: The document that defines the resource policy that is set on a domain.
         :param tags: A list of tags to be applied to the domain.
         '''
@@ -214,7 +214,7 @@ class CfnDomain(
     @builtins.property
     @jsii.member(jsii_name="encryptionKey")
     def encryption_key(self) -> typing.Optional[builtins.str]:
-        '''The ARN of an AWS Key Management Service (AWS KMS) key associated with a domain.'''
+        '''The key used to encrypt the domain.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "encryptionKey"))
 
     @encryption_key.setter
@@ -273,7 +273,7 @@ class CfnDomainProps:
         '''Properties for defining a ``CfnDomain``.
 
         :param domain_name: A string that specifies the name of the requested domain.
-        :param encryption_key: The ARN of an AWS Key Management Service (AWS KMS) key associated with a domain.
+        :param encryption_key: The key used to encrypt the domain.
         :param permissions_policy_document: The document that defines the resource policy that is set on a domain.
         :param tags: A list of tags to be applied to the domain.
 
@@ -328,7 +328,7 @@ class CfnDomainProps:
 
     @builtins.property
     def encryption_key(self) -> typing.Optional[builtins.str]:
-        '''The ARN of an AWS Key Management Service (AWS KMS) key associated with a domain.
+        '''The key used to encrypt the domain.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codeartifact-domain.html#cfn-codeartifact-domain-encryptionkey
         '''
@@ -1122,7 +1122,7 @@ class CfnRepository(
         :param domain_name: The name of the domain that contains the repository.
         :param repository_name: The name of an upstream repository.
         :param description: A text description of the repository.
-        :param domain_owner: The 12-digit account ID of the AWS account that owns the domain.
+        :param domain_owner: The 12-digit account number of the AWS account that owns the domain that contains the repository. It does not include dashes or spaces.
         :param external_connections: An array of external connections associated with the repository. For more information, see `Supported external connection repositories <https://docs.aws.amazon.com/codeartifact/latest/ug/external-connection.html#supported-public-repositories>`_ in the *CodeArtifact user guide* .
         :param permissions_policy_document: The document that defines the resource policy that is set on a repository.
         :param tags: A list of tags to be applied to the repository.
@@ -1264,7 +1264,7 @@ class CfnRepository(
     @builtins.property
     @jsii.member(jsii_name="domainOwner")
     def domain_owner(self) -> typing.Optional[builtins.str]:
-        '''The 12-digit account ID of the AWS account that owns the domain.'''
+        '''The 12-digit account number of the AWS account that owns the domain that contains the repository.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "domainOwner"))
 
     @domain_owner.setter
@@ -1362,7 +1362,7 @@ class CfnRepositoryProps:
         :param domain_name: The name of the domain that contains the repository.
         :param repository_name: The name of an upstream repository.
         :param description: A text description of the repository.
-        :param domain_owner: The 12-digit account ID of the AWS account that owns the domain.
+        :param domain_owner: The 12-digit account number of the AWS account that owns the domain that contains the repository. It does not include dashes or spaces.
         :param external_connections: An array of external connections associated with the repository. For more information, see `Supported external connection repositories <https://docs.aws.amazon.com/codeartifact/latest/ug/external-connection.html#supported-public-repositories>`_ in the *CodeArtifact user guide* .
         :param permissions_policy_document: The document that defines the resource policy that is set on a repository.
         :param tags: A list of tags to be applied to the repository.
@@ -1453,7 +1453,9 @@ class CfnRepositoryProps:
 
     @builtins.property
     def domain_owner(self) -> typing.Optional[builtins.str]:
-        '''The 12-digit account ID of the AWS account that owns the domain.
+        '''The 12-digit account number of the AWS account that owns the domain that contains the repository.
+
+        It does not include dashes or spaces.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codeartifact-repository.html#cfn-codeartifact-repository-domainowner
         '''

aws_cdk/aws_codebuild/__init__.py

@@ -1,4 +1,4 @@
-'''
+r'''
 # AWS CodeBuild Construct Library
 
 AWS CodeBuild is a fully managed continuous integration service that compiles
@@ -952,6 +952,23 @@ codebuild.Project(self, "MyProject",
     concurrent_build_limit=1
 )
 ```
+
+## Visibility
+
+When you can specify the visibility of the project builds. This setting controls whether the builds are publicly readable or remain private.
+
+Visibility options:
+
+* `PUBLIC_READ`: The project builds are visible to the public.
+* `PRIVATE`: The project builds are not visible to the public.
+
+Examples:
+
+```python
+codebuild.Project(self, "MyProject",
+    visibility=codebuild.ProjectVisibility.PUBLIC_READ
+)
+```
 '''
 from pkgutil import extend_path
 __path__ = extend_path(__path__, __name__)
@@ -2829,6 +2846,9 @@ class CfnProject(
                     # the properties below are optional
                     exclude_matched_pattern=False
                 )]],
+                scope_configuration=codebuild.CfnProject.ScopeConfigurationProperty(
+                    name="name"
+                ),
                 webhook=False
             ),
             visibility="visibility",
@@ -4906,6 +4926,7 @@ class CfnProject(
         name_mapping={
             "build_type": "buildType",
             "filter_groups": "filterGroups",
+            "scope_configuration": "scopeConfiguration",
             "webhook": "webhook",
         },
     )
@@ -4915,6 +4936,7 @@ class CfnProject(
             *,
             build_type: typing.Optional[builtins.str] = None,
             filter_groups: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnProject.WebhookFilterProperty", typing.Dict[builtins.str, typing.Any]]]]]]]] = None,
+            scope_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnProject.ScopeConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             webhook: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         ) -> None:
             '''``ProjectTriggers`` is a property of the `AWS CodeBuild Project <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codebuild-project.html>`_ resource that specifies webhooks that trigger an AWS CodeBuild build.
@@ -4925,6 +4947,7 @@ class CfnProject(
 
             :param build_type: Specifies the type of build this webhook will trigger. Allowed values are:. - **BUILD** - A single build - **BUILD_BATCH** - A batch build
             :param filter_groups: A list of lists of ``WebhookFilter`` objects used to determine which webhook events are triggered. At least one ``WebhookFilter`` in the array must specify ``EVENT`` as its type.
+            :param scope_configuration: 
             :param webhook: Specifies whether or not to begin automatically rebuilding the source code every time a code change is pushed to the repository.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-codebuild-project-projecttriggers.html
@@ -4945,6 +4968,9 @@ class CfnProject(
                         # the properties below are optional
                         exclude_matched_pattern=False
                     )]],
+                    scope_configuration=codebuild.CfnProject.ScopeConfigurationProperty(
+                        name="name"
+                    ),
                     webhook=False
                 )
             '''
@@ -4952,12 +4978,15 @@ class CfnProject(
                 type_hints = typing.get_type_hints(_typecheckingstub__d2709928946ab49717544a38f5b4471ef55c9bf0ed8e39f24de9210b8c729a70)
                 check_type(argname="argument build_type", value=build_type, expected_type=type_hints["build_type"])
                 check_type(argname="argument filter_groups", value=filter_groups, expected_type=type_hints["filter_groups"])
+                check_type(argname="argument scope_configuration", value=scope_configuration, expected_type=type_hints["scope_configuration"])
                 check_type(argname="argument webhook", value=webhook, expected_type=type_hints["webhook"])
             self._values: typing.Dict[builtins.str, typing.Any] = {}
             if build_type is not None:
                 self._values["build_type"] = build_type
             if filter_groups is not None:
                 self._values["filter_groups"] = filter_groups
+            if scope_configuration is not None:
+                self._values["scope_configuration"] = scope_configuration
             if webhook is not None:
                 self._values["webhook"] = webhook
 
@@ -4986,6 +5015,16 @@ class CfnProject(
             result = self._values.get("filter_groups")
             return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnProject.WebhookFilterProperty"]]]]]], result)
 
+        @builtins.property
+        def scope_configuration(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnProject.ScopeConfigurationProperty"]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-codebuild-project-projecttriggers.html#cfn-codebuild-project-projecttriggers-scopeconfiguration
+            '''
+            result = self._values.get("scope_configuration")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnProject.ScopeConfigurationProperty"]], result)
+
         @builtins.property
         def webhook(
             self,
@@ -5194,6 +5233,56 @@ class CfnProject(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_codebuild.CfnProject.ScopeConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={"name": "name"},
+    )
+    class ScopeConfigurationProperty:
+        def __init__(self, *, name: builtins.str) -> None:
+            '''
+            :param name: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-codebuild-project-scopeconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_codebuild as codebuild
+                
+                scope_configuration_property = codebuild.CfnProject.ScopeConfigurationProperty(
+                    name="name"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__32a108f04a81dd1f44ef69553884cac321bd7631e9997ac93f2e0891bca04d74)
+                check_type(argname="argument name", value=name, expected_type=type_hints["name"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "name": name,
+            }
+
+        @builtins.property
+        def name(self) -> builtins.str:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-codebuild-project-scopeconfiguration.html#cfn-codebuild-project-scopeconfiguration-name
+            '''
+            result = self._values.get("name")
+            assert result is not None, "Required property 'name' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "ScopeConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_codebuild.CfnProject.SourceAuthProperty",
         jsii_struct_bases=[],
@@ -5653,7 +5742,7 @@ class CfnProject(
                The Webhook feature isn't available in AWS CloudFormation for GitHub Enterprise projects. Use the AWS CLI or AWS CodeBuild console to create the webhook.
 
             :param pattern: For a ``WebHookFilter`` that uses ``EVENT`` type, a comma-separated string that specifies one or more events. For example, the webhook filter ``PUSH, PULL_REQUEST_CREATED, PULL_REQUEST_UPDATED`` allows all push, pull request created, and pull request updated events to trigger a build. For a ``WebHookFilter`` that uses any of the other filter types, a regular expression pattern. For example, a ``WebHookFilter`` that uses ``HEAD_REF`` for its ``type`` and the pattern ``^refs/heads/`` triggers a build when the head reference is a branch with a reference name ``refs/heads/branch-name`` .
-            :param type: The type of webhook filter. There are nine webhook filter types: ``EVENT`` , ``ACTOR_ACCOUNT_ID`` , ``HEAD_REF`` , ``BASE_REF`` , ``FILE_PATH`` , ``COMMIT_MESSAGE`` , ``TAG_NAME`` , ``RELEASE_NAME`` , and ``WORKFLOW_NAME`` . - EVENT - A webhook event triggers a build when the provided ``pattern`` matches one of nine event types: ``PUSH`` , ``PULL_REQUEST_CREATED`` , ``PULL_REQUEST_UPDATED`` , ``PULL_REQUEST_CLOSED`` , ``PULL_REQUEST_REOPENED`` , ``PULL_REQUEST_MERGED`` , ``RELEASED`` , ``PRERELEASED`` , and ``WORKFLOW_JOB_QUEUED`` . The ``EVENT`` patterns are specified as a comma-separated string. For example, ``PUSH, PULL_REQUEST_CREATED, PULL_REQUEST_UPDATED`` filters all push, pull request created, and pull request updated events. .. epigraph:: Types ``PULL_REQUEST_REOPENED`` and ``WORKFLOW_JOB_QUEUED`` work with GitHub and GitHub Enterprise only. Types ``RELEASED`` and ``PRERELEASED`` work with GitHub only. - ACTOR_ACCOUNT_ID - A webhook event triggers a build when a GitHub, GitHub Enterprise, or Bitbucket account ID matches the regular expression ``pattern`` . - HEAD_REF - A webhook event triggers a build when the head reference matches the regular expression ``pattern`` . For example, ``refs/heads/branch-name`` and ``refs/tags/tag-name`` . .. epigraph:: Works with GitHub and GitHub Enterprise push, GitHub and GitHub Enterprise pull request, Bitbucket push, and Bitbucket pull request events. - BASE_REF - A webhook event triggers a build when the base reference matches the regular expression ``pattern`` . For example, ``refs/heads/branch-name`` . .. epigraph:: Works with pull request events only. - FILE_PATH - A webhook triggers a build when the path of a changed file matches the regular expression ``pattern`` . .. epigraph:: Works with GitHub and Bitbucket events push and pull requests events. Also works with GitHub Enterprise push events, but does not work with GitHub Enterprise pull request events. - COMMIT_MESSAGE - A webhook triggers a build when the head commit message matches the regular expression ``pattern`` . .. epigraph:: Works with GitHub and Bitbucket events push and pull requests events. Also works with GitHub Enterprise push events, but does not work with GitHub Enterprise pull request events. - TAG_NAME - A webhook triggers a build when the tag name of the release matches the regular expression ``pattern`` . .. epigraph:: Works with ``RELEASED`` and ``PRERELEASED`` events only. - RELEASE_NAME - A webhook triggers a build when the release name matches the regular expression ``pattern`` . .. epigraph:: Works with ``RELEASED`` and ``PRERELEASED`` events only. - WORKFLOW_NAME - A webhook triggers a build when the workflow name matches the regular expression ``pattern`` . .. epigraph:: Works with ``WORKFLOW_JOB_QUEUED`` events only.
+            :param type: The type of webhook filter. There are nine webhook filter types: ``EVENT`` , ``ACTOR_ACCOUNT_ID`` , ``HEAD_REF`` , ``BASE_REF`` , ``FILE_PATH`` , ``COMMIT_MESSAGE`` , ``TAG_NAME`` , ``RELEASE_NAME`` , and ``WORKFLOW_NAME`` . - EVENT - A webhook event triggers a build when the provided ``pattern`` matches one of nine event types: ``PUSH`` , ``PULL_REQUEST_CREATED`` , ``PULL_REQUEST_UPDATED`` , ``PULL_REQUEST_CLOSED`` , ``PULL_REQUEST_REOPENED`` , ``PULL_REQUEST_MERGED`` , ``RELEASED`` , ``PRERELEASED`` , and ``WORKFLOW_JOB_QUEUED`` . The ``EVENT`` patterns are specified as a comma-separated string. For example, ``PUSH, PULL_REQUEST_CREATED, PULL_REQUEST_UPDATED`` filters all push, pull request created, and pull request updated events. .. epigraph:: Types ``PULL_REQUEST_REOPENED`` and ``WORKFLOW_JOB_QUEUED`` work with GitHub and GitHub Enterprise only. Types ``RELEASED`` and ``PRERELEASED`` work with GitHub only. - ACTOR_ACCOUNT_ID - A webhook event triggers a build when a GitHub, GitHub Enterprise, or Bitbucket account ID matches the regular expression ``pattern`` . - HEAD_REF - A webhook event triggers a build when the head reference matches the regular expression ``pattern`` . For example, ``refs/heads/branch-name`` and ``refs/tags/tag-name`` . .. epigraph:: Works with GitHub and GitHub Enterprise push, GitHub and GitHub Enterprise pull request, Bitbucket push, and Bitbucket pull request events. - BASE_REF - A webhook event triggers a build when the base reference matches the regular expression ``pattern`` . For example, ``refs/heads/branch-name`` . .. epigraph:: Works with pull request events only. - FILE_PATH - A webhook triggers a build when the path of a changed file matches the regular expression ``pattern`` . .. epigraph:: Works with GitHub and Bitbucket events push and pull requests events. Also works with GitHub Enterprise push events, but does not work with GitHub Enterprise pull request events. - COMMIT_MESSAGE - A webhook triggers a build when the head commit message matches the regular expression ``pattern`` . .. epigraph:: Works with GitHub and Bitbucket events push and pull requests events. Also works with GitHub Enterprise push events, but does not work with GitHub Enterprise pull request events. - TAG_NAME - A webhook triggers a build when the tag name of the release matches the regular expression ``pattern`` . .. epigraph:: Works with ``RELEASED`` and ``PRERELEASED`` events only. - RELEASE_NAME - A webhook triggers a build when the release name matches the regular expression ``pattern`` . .. epigraph:: Works with ``RELEASED`` and ``PRERELEASED`` events only. - REPOSITORY_NAME - A webhook triggers a build when the repository name matches the regular expression pattern. .. epigraph:: Works with GitHub global or organization webhooks only. - WORKFLOW_NAME - A webhook triggers a build when the workflow name matches the regular expression ``pattern`` . .. epigraph:: Works with ``WORKFLOW_JOB_QUEUED`` events only.
             :param exclude_matched_pattern: Used to indicate that the ``pattern`` determines which webhook events do not trigger a build. If true, then a webhook event that does not match the ``pattern`` triggers a build. If false, then a webhook event that matches the ``pattern`` triggers a build.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-codebuild-project-webhookfilter.html
@@ -5756,6 +5845,13 @@ class CfnProject(
 
                Works with ``RELEASED`` and ``PRERELEASED`` events only.
 
+            - REPOSITORY_NAME
+            - A webhook triggers a build when the repository name matches the regular expression pattern.
+
+            .. epigraph::
+
+               Works with GitHub global or organization webhooks only.
+
             - WORKFLOW_NAME
             - A webhook triggers a build when the workflow name matches the regular expression ``pattern`` .
 
@@ -6061,6 +6157,9 @@ class CfnProjectProps:
                         # the properties below are optional
                         exclude_matched_pattern=False
                     )]],
+                    scope_configuration=codebuild.CfnProject.ScopeConfigurationProperty(
+                        name="name"
+                    ),
                     webhook=False
                 ),
                 visibility="visibility",
@@ -7438,6 +7537,7 @@ class CloudWatchLoggingOptions:
         "ssm_session_permissions": "ssmSessionPermissions",
         "subnet_selection": "subnetSelection",
         "timeout": "timeout",
+        "visibility": "visibility",
         "vpc": "vpc",
     },
 )
@@ -7465,6 +7565,7 @@ class CommonProjectProps:
         ssm_session_permissions: typing.Optional[builtins.bool] = None,
         subnet_selection: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
         timeout: typing.Optional[_Duration_4839e8c3] = None,
+        visibility: typing.Optional["ProjectVisibility"] = None,
         vpc: typing.Optional[_IVpc_f30d5663] = None,
     ) -> None:
         '''
@@ -7488,6 +7589,7 @@ class CommonProjectProps:
         :param ssm_session_permissions: Add the permissions necessary for debugging builds with SSM Session Manager. If the following prerequisites have been met: - The necessary permissions have been added by setting this flag to true. - The build image has the SSM agent installed (true for default CodeBuild images). - The build is started with `debugSessionEnabled <https://docs.aws.amazon.com/codebuild/latest/APIReference/API_StartBuild.html#CodeBuild-StartBuild-request-debugSessionEnabled>`_ set to true. Then the build container can be paused and inspected using Session Manager by invoking the ``codebuild-breakpoint`` command somewhere during the build. ``codebuild-breakpoint`` commands will be ignored if the build is not started with ``debugSessionEnabled=true``. Default: false
         :param subnet_selection: Where to place the network interfaces within the VPC. To access AWS services, your CodeBuild project needs to be in one of the following types of subnets: 1. Subnets with access to the internet (of type PRIVATE_WITH_EGRESS). 2. Private subnets unconnected to the internet, but with `VPC endpoints <https://docs.aws.amazon.com/codebuild/latest/userguide/use-vpc-endpoints-with-codebuild.html>`_ for the necessary services. If you don't specify a subnet selection, the default behavior is to use PRIVATE_WITH_EGRESS subnets first if they exist, then PRIVATE_WITHOUT_EGRESS, and finally PUBLIC subnets. If your VPC doesn't have PRIVATE_WITH_EGRESS subnets but you need AWS service access, add VPC Endpoints to your private subnets. Default: - private subnets if available else public subnets
         :param timeout: The number of minutes after which AWS CodeBuild stops the build if it's not complete. For valid values, see the timeoutInMinutes field in the AWS CodeBuild User Guide. Default: Duration.hours(1)
+        :param visibility: Specifies the visibility of the project's builds. Default: - no visibility is set
         :param vpc: VPC network to place codebuild network interfaces. Specify this if the codebuild project needs to access resources in a VPC. Default: - No VPC is specified.
 
         :exampleMetadata: fixture=_generated
@@ -7585,6 +7687,7 @@ class CommonProjectProps:
                     subnet_type=ec2.SubnetType.PRIVATE_ISOLATED
                 ),
                 timeout=cdk.Duration.minutes(30),
+                visibility=codebuild.ProjectVisibility.PUBLIC_READ,
                 vpc=vpc
             )
         '''
@@ -7616,6 +7719,7 @@ class CommonProjectProps:
             check_type(argname="argument ssm_session_permissions", value=ssm_session_permissions, expected_type=type_hints["ssm_session_permissions"])
             check_type(argname="argument subnet_selection", value=subnet_selection, expected_type=type_hints["subnet_selection"])
             check_type(argname="argument timeout", value=timeout, expected_type=type_hints["timeout"])
+            check_type(argname="argument visibility", value=visibility, expected_type=type_hints["visibility"])
             check_type(argname="argument vpc", value=vpc, expected_type=type_hints["vpc"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if allow_all_outbound is not None:
@@ -7658,6 +7762,8 @@ class CommonProjectProps:
             self._values["subnet_selection"] = subnet_selection
         if timeout is not None:
             self._values["timeout"] = timeout
+        if visibility is not None:
+            self._values["visibility"] = visibility
         if vpc is not None:
             self._values["vpc"] = vpc
 
@@ -7893,7 +7999,7 @@ class CommonProjectProps:
 
         :default: - private subnets if available else public subnets
 
-        :see: https://docs.aws.amazon.com/codebuild/latest/userguide/vpc-support.html for more details.
+        :see: https://docs.aws.amazon.com/codebuild/latest/userguide/vpc-support.html
         '''
         result = self._values.get("subnet_selection")
         return typing.cast(typing.Optional[_SubnetSelection_e57d76df], result)
@@ -7910,6 +8016,15 @@ class CommonProjectProps:
         result = self._values.get("timeout")
         return typing.cast(typing.Optional[_Duration_4839e8c3], result)
 
+    @builtins.property
+    def visibility(self) -> typing.Optional["ProjectVisibility"]:
+        '''Specifies the visibility of the project's builds.
+
+        :default: - no visibility is set
+        '''
+        result = self._values.get("visibility")
+        return typing.cast(typing.Optional["ProjectVisibility"], result)
+
     @builtins.property
     def vpc(self) -> typing.Optional[_IVpc_f30d5663]:
         '''VPC network to place codebuild network interfaces.
@@ -11196,7 +11311,7 @@ class LinuxBuildImage(
     @jsii.python.classproperty
     @jsii.member(jsii_name="AMAZON_LINUX_2_ARM_3")
     def AMAZON_LINUX_2_ARM_3(cls) -> IBuildImage:
-        '''Image "aws/codebuild/amazonlinux2-aarch64-standard:2.0".
+        '''Image "aws/codebuild/amazonlinux2-aarch64-standard:3.0".
 
         :see: {LinuxArmBuildImage.AMAZON_LINUX_2_STANDARD_3_0}
         '''
@@ -11644,6 +11759,7 @@ class PhaseChangeEvent(
         "ssm_session_permissions": "ssmSessionPermissions",
         "subnet_selection": "subnetSelection",
         "timeout": "timeout",
+        "visibility": "visibility",
         "vpc": "vpc",
     },
 )
@@ -11671,6 +11787,7 @@ class PipelineProjectProps(CommonProjectProps):
         ssm_session_permissions: typing.Optional[builtins.bool] = None,
         subnet_selection: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
         timeout: typing.Optional[_Duration_4839e8c3] = None,
+        visibility: typing.Optional["ProjectVisibility"] = None,
         vpc: typing.Optional[_IVpc_f30d5663] = None,
     ) -> None:
         '''
@@ -11694,6 +11811,7 @@ class PipelineProjectProps(CommonProjectProps):
         :param ssm_session_permissions: Add the permissions necessary for debugging builds with SSM Session Manager. If the following prerequisites have been met: - The necessary permissions have been added by setting this flag to true. - The build image has the SSM agent installed (true for default CodeBuild images). - The build is started with `debugSessionEnabled <https://docs.aws.amazon.com/codebuild/latest/APIReference/API_StartBuild.html#CodeBuild-StartBuild-request-debugSessionEnabled>`_ set to true. Then the build container can be paused and inspected using Session Manager by invoking the ``codebuild-breakpoint`` command somewhere during the build. ``codebuild-breakpoint`` commands will be ignored if the build is not started with ``debugSessionEnabled=true``. Default: false
         :param subnet_selection: Where to place the network interfaces within the VPC. To access AWS services, your CodeBuild project needs to be in one of the following types of subnets: 1. Subnets with access to the internet (of type PRIVATE_WITH_EGRESS). 2. Private subnets unconnected to the internet, but with `VPC endpoints <https://docs.aws.amazon.com/codebuild/latest/userguide/use-vpc-endpoints-with-codebuild.html>`_ for the necessary services. If you don't specify a subnet selection, the default behavior is to use PRIVATE_WITH_EGRESS subnets first if they exist, then PRIVATE_WITHOUT_EGRESS, and finally PUBLIC subnets. If your VPC doesn't have PRIVATE_WITH_EGRESS subnets but you need AWS service access, add VPC Endpoints to your private subnets. Default: - private subnets if available else public subnets
         :param timeout: The number of minutes after which AWS CodeBuild stops the build if it's not complete. For valid values, see the timeoutInMinutes field in the AWS CodeBuild User Guide. Default: Duration.hours(1)
+        :param visibility: Specifies the visibility of the project's builds. Default: - no visibility is set
         :param vpc: VPC network to place codebuild network interfaces. Specify this if the codebuild project needs to access resources in a VPC. Default: - No VPC is specified.
 
         :exampleMetadata: infused
@@ -11781,6 +11899,7 @@ class PipelineProjectProps(CommonProjectProps):
             check_type(argname="argument ssm_session_permissions", value=ssm_session_permissions, expected_type=type_hints["ssm_session_permissions"])
             check_type(argname="argument subnet_selection", value=subnet_selection, expected_type=type_hints["subnet_selection"])
             check_type(argname="argument timeout", value=timeout, expected_type=type_hints["timeout"])
+            check_type(argname="argument visibility", value=visibility, expected_type=type_hints["visibility"])
             check_type(argname="argument vpc", value=vpc, expected_type=type_hints["vpc"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if allow_all_outbound is not None:
@@ -11823,6 +11942,8 @@ class PipelineProjectProps(CommonProjectProps):
             self._values["subnet_selection"] = subnet_selection
         if timeout is not None:
             self._values["timeout"] = timeout
+        if visibility is not None:
+            self._values["visibility"] = visibility
         if vpc is not None:
             self._values["vpc"] = vpc
 
@@ -12058,7 +12179,7 @@ class PipelineProjectProps(CommonProjectProps):
 
         :default: - private subnets if available else public subnets
 
-        :see: https://docs.aws.amazon.com/codebuild/latest/userguide/vpc-support.html for more details.
+        :see: https://docs.aws.amazon.com/codebuild/latest/userguide/vpc-support.html
         '''
         result = self._values.get("subnet_selection")
         return typing.cast(typing.Optional[_SubnetSelection_e57d76df], result)
@@ -12075,6 +12196,15 @@ class PipelineProjectProps(CommonProjectProps):
         result = self._values.get("timeout")
         return typing.cast(typing.Optional[_Duration_4839e8c3], result)
 
+    @builtins.property
+    def visibility(self) -> typing.Optional["ProjectVisibility"]:
+        '''Specifies the visibility of the project's builds.
+
+        :default: - no visibility is set
+        '''
+        result = self._values.get("visibility")
+        return typing.cast(typing.Optional["ProjectVisibility"], result)
+
     @builtins.property
     def vpc(self) -> typing.Optional[_IVpc_f30d5663]:
         '''VPC network to place codebuild network interfaces.
@@ -12154,6 +12284,7 @@ class Project(
         ssm_session_permissions: typing.Optional[builtins.bool] = None,
         subnet_selection: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
         timeout: typing.Optional[_Duration_4839e8c3] = None,
+        visibility: typing.Optional["ProjectVisibility"] = None,
         vpc: typing.Optional[_IVpc_f30d5663] = None,
     ) -> None:
         '''
@@ -12183,6 +12314,7 @@ class Project(
         :param ssm_session_permissions: Add the permissions necessary for debugging builds with SSM Session Manager. If the following prerequisites have been met: - The necessary permissions have been added by setting this flag to true. - The build image has the SSM agent installed (true for default CodeBuild images). - The build is started with `debugSessionEnabled <https://docs.aws.amazon.com/codebuild/latest/APIReference/API_StartBuild.html#CodeBuild-StartBuild-request-debugSessionEnabled>`_ set to true. Then the build container can be paused and inspected using Session Manager by invoking the ``codebuild-breakpoint`` command somewhere during the build. ``codebuild-breakpoint`` commands will be ignored if the build is not started with ``debugSessionEnabled=true``. Default: false
         :param subnet_selection: Where to place the network interfaces within the VPC. To access AWS services, your CodeBuild project needs to be in one of the following types of subnets: 1. Subnets with access to the internet (of type PRIVATE_WITH_EGRESS). 2. Private subnets unconnected to the internet, but with `VPC endpoints <https://docs.aws.amazon.com/codebuild/latest/userguide/use-vpc-endpoints-with-codebuild.html>`_ for the necessary services. If you don't specify a subnet selection, the default behavior is to use PRIVATE_WITH_EGRESS subnets first if they exist, then PRIVATE_WITHOUT_EGRESS, and finally PUBLIC subnets. If your VPC doesn't have PRIVATE_WITH_EGRESS subnets but you need AWS service access, add VPC Endpoints to your private subnets. Default: - private subnets if available else public subnets
         :param timeout: The number of minutes after which AWS CodeBuild stops the build if it's not complete. For valid values, see the timeoutInMinutes field in the AWS CodeBuild User Guide. Default: Duration.hours(1)
+        :param visibility: Specifies the visibility of the project's builds. Default: - no visibility is set
         :param vpc: VPC network to place codebuild network interfaces. Specify this if the codebuild project needs to access resources in a VPC. Default: - No VPC is specified.
         '''
         if __debug__:
@@ -12214,6 +12346,7 @@ class Project(
             ssm_session_permissions=ssm_session_permissions,
             subnet_selection=subnet_selection,
             timeout=timeout,
+            visibility=visibility,
             vpc=vpc,
         )
 
@@ -13127,6 +13260,7 @@ class ProjectNotifyOnOptions(_NotificationRuleOptions_dff73281):
         "ssm_session_permissions": "ssmSessionPermissions",
         "subnet_selection": "subnetSelection",
         "timeout": "timeout",
+        "visibility": "visibility",
         "vpc": "vpc",
         "artifacts": "artifacts",
         "secondary_artifacts": "secondaryArtifacts",
@@ -13158,6 +13292,7 @@ class ProjectProps(CommonProjectProps):
         ssm_session_permissions: typing.Optional[builtins.bool] = None,
         subnet_selection: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
         timeout: typing.Optional[_Duration_4839e8c3] = None,
+        visibility: typing.Optional["ProjectVisibility"] = None,
         vpc: typing.Optional[_IVpc_f30d5663] = None,
         artifacts: typing.Optional[IArtifacts] = None,
         secondary_artifacts: typing.Optional[typing.Sequence[IArtifacts]] = None,
@@ -13185,6 +13320,7 @@ class ProjectProps(CommonProjectProps):
         :param ssm_session_permissions: Add the permissions necessary for debugging builds with SSM Session Manager. If the following prerequisites have been met: - The necessary permissions have been added by setting this flag to true. - The build image has the SSM agent installed (true for default CodeBuild images). - The build is started with `debugSessionEnabled <https://docs.aws.amazon.com/codebuild/latest/APIReference/API_StartBuild.html#CodeBuild-StartBuild-request-debugSessionEnabled>`_ set to true. Then the build container can be paused and inspected using Session Manager by invoking the ``codebuild-breakpoint`` command somewhere during the build. ``codebuild-breakpoint`` commands will be ignored if the build is not started with ``debugSessionEnabled=true``. Default: false
         :param subnet_selection: Where to place the network interfaces within the VPC. To access AWS services, your CodeBuild project needs to be in one of the following types of subnets: 1. Subnets with access to the internet (of type PRIVATE_WITH_EGRESS). 2. Private subnets unconnected to the internet, but with `VPC endpoints <https://docs.aws.amazon.com/codebuild/latest/userguide/use-vpc-endpoints-with-codebuild.html>`_ for the necessary services. If you don't specify a subnet selection, the default behavior is to use PRIVATE_WITH_EGRESS subnets first if they exist, then PRIVATE_WITHOUT_EGRESS, and finally PUBLIC subnets. If your VPC doesn't have PRIVATE_WITH_EGRESS subnets but you need AWS service access, add VPC Endpoints to your private subnets. Default: - private subnets if available else public subnets
         :param timeout: The number of minutes after which AWS CodeBuild stops the build if it's not complete. For valid values, see the timeoutInMinutes field in the AWS CodeBuild User Guide. Default: Duration.hours(1)
+        :param visibility: Specifies the visibility of the project's builds. Default: - no visibility is set
         :param vpc: VPC network to place codebuild network interfaces. Specify this if the codebuild project needs to access resources in a VPC. Default: - No VPC is specified.
         :param artifacts: Defines where build artifacts will be stored. Could be: PipelineBuildArtifacts, NoArtifacts and S3Artifacts. Default: NoArtifacts
         :param secondary_artifacts: The secondary artifacts for the Project. Can also be added after the Project has been created by using the ``Project#addSecondaryArtifact`` method. Default: - No secondary artifacts.
@@ -13237,6 +13373,7 @@ class ProjectProps(CommonProjectProps):
             check_type(argname="argument ssm_session_permissions", value=ssm_session_permissions, expected_type=type_hints["ssm_session_permissions"])
             check_type(argname="argument subnet_selection", value=subnet_selection, expected_type=type_hints["subnet_selection"])
             check_type(argname="argument timeout", value=timeout, expected_type=type_hints["timeout"])
+            check_type(argname="argument visibility", value=visibility, expected_type=type_hints["visibility"])
             check_type(argname="argument vpc", value=vpc, expected_type=type_hints["vpc"])
             check_type(argname="argument artifacts", value=artifacts, expected_type=type_hints["artifacts"])
             check_type(argname="argument secondary_artifacts", value=secondary_artifacts, expected_type=type_hints["secondary_artifacts"])
@@ -13283,6 +13420,8 @@ class ProjectProps(CommonProjectProps):
             self._values["subnet_selection"] = subnet_selection
         if timeout is not None:
             self._values["timeout"] = timeout
+        if visibility is not None:
+            self._values["visibility"] = visibility
         if vpc is not None:
             self._values["vpc"] = vpc
         if artifacts is not None:
@@ -13526,7 +13665,7 @@ class ProjectProps(CommonProjectProps):
 
         :default: - private subnets if available else public subnets
 
-        :see: https://docs.aws.amazon.com/codebuild/latest/userguide/vpc-support.html for more details.
+        :see: https://docs.aws.amazon.com/codebuild/latest/userguide/vpc-support.html
         '''
         result = self._values.get("subnet_selection")
         return typing.cast(typing.Optional[_SubnetSelection_e57d76df], result)
@@ -13543,6 +13682,15 @@ class ProjectProps(CommonProjectProps):
         result = self._values.get("timeout")
         return typing.cast(typing.Optional[_Duration_4839e8c3], result)
 
+    @builtins.property
+    def visibility(self) -> typing.Optional["ProjectVisibility"]:
+        '''Specifies the visibility of the project's builds.
+
+        :default: - no visibility is set
+        '''
+        result = self._values.get("visibility")
+        return typing.cast(typing.Optional["ProjectVisibility"], result)
+
     @builtins.property
     def vpc(self) -> typing.Optional[_IVpc_f30d5663]:
         '''VPC network to place codebuild network interfaces.
@@ -13615,6 +13763,25 @@ class ProjectProps(CommonProjectProps):
         )
 
 
+@jsii.enum(jsii_type="aws-cdk-lib.aws_codebuild.ProjectVisibility")
+class ProjectVisibility(enum.Enum):
+    '''Specifies the visibility of the project's builds.
+
+    :exampleMetadata: infused
+
+    Example::
+
+        codebuild.Project(self, "MyProject",
+            visibility=codebuild.ProjectVisibility.PUBLIC_READ
+        )
+    '''
+
+    PUBLIC_READ = "PUBLIC_READ"
+    '''The project builds are visible to the public.'''
+    PRIVATE = "PRIVATE"
+    '''The project builds are not visible to the public.'''
+
+
 @jsii.implements(IReportGroup)
 class ReportGroup(
     _Resource_45bc6135,
@@ -14535,6 +14702,9 @@ class SourceConfig:
                         # the properties below are optional
                         exclude_matched_pattern=False
                     )]],
+                    scope_configuration=codebuild.CfnProject.ScopeConfigurationProperty(
+                        name="name"
+                    ),
                     webhook=False
                 ),
                 source_version="sourceVersion"
@@ -16594,6 +16764,7 @@ class PipelineProject(
         ssm_session_permissions: typing.Optional[builtins.bool] = None,
         subnet_selection: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
         timeout: typing.Optional[_Duration_4839e8c3] = None,
+        visibility: typing.Optional[ProjectVisibility] = None,
         vpc: typing.Optional[_IVpc_f30d5663] = None,
     ) -> None:
         '''
@@ -16619,6 +16790,7 @@ class PipelineProject(
         :param ssm_session_permissions: Add the permissions necessary for debugging builds with SSM Session Manager. If the following prerequisites have been met: - The necessary permissions have been added by setting this flag to true. - The build image has the SSM agent installed (true for default CodeBuild images). - The build is started with `debugSessionEnabled <https://docs.aws.amazon.com/codebuild/latest/APIReference/API_StartBuild.html#CodeBuild-StartBuild-request-debugSessionEnabled>`_ set to true. Then the build container can be paused and inspected using Session Manager by invoking the ``codebuild-breakpoint`` command somewhere during the build. ``codebuild-breakpoint`` commands will be ignored if the build is not started with ``debugSessionEnabled=true``. Default: false
         :param subnet_selection: Where to place the network interfaces within the VPC. To access AWS services, your CodeBuild project needs to be in one of the following types of subnets: 1. Subnets with access to the internet (of type PRIVATE_WITH_EGRESS). 2. Private subnets unconnected to the internet, but with `VPC endpoints <https://docs.aws.amazon.com/codebuild/latest/userguide/use-vpc-endpoints-with-codebuild.html>`_ for the necessary services. If you don't specify a subnet selection, the default behavior is to use PRIVATE_WITH_EGRESS subnets first if they exist, then PRIVATE_WITHOUT_EGRESS, and finally PUBLIC subnets. If your VPC doesn't have PRIVATE_WITH_EGRESS subnets but you need AWS service access, add VPC Endpoints to your private subnets. Default: - private subnets if available else public subnets
         :param timeout: The number of minutes after which AWS CodeBuild stops the build if it's not complete. For valid values, see the timeoutInMinutes field in the AWS CodeBuild User Guide. Default: Duration.hours(1)
+        :param visibility: Specifies the visibility of the project's builds. Default: - no visibility is set
         :param vpc: VPC network to place codebuild network interfaces. Specify this if the codebuild project needs to access resources in a VPC. Default: - No VPC is specified.
         '''
         if __debug__:
@@ -16646,6 +16818,7 @@ class PipelineProject(
             ssm_session_permissions=ssm_session_permissions,
             subnet_selection=subnet_selection,
             timeout=timeout,
+            visibility=visibility,
             vpc=vpc,
         )
 
@@ -16817,6 +16990,7 @@ __all__ = [
     "ProjectNotificationEvents",
     "ProjectNotifyOnOptions",
     "ProjectProps",
+    "ProjectVisibility",
     "ReportGroup",
     "ReportGroupProps",
     "ReportGroupType",
@@ -17376,6 +17550,7 @@ def _typecheckingstub__d2709928946ab49717544a38f5b4471ef55c9bf0ed8e39f24de9210b8
     *,
     build_type: typing.Optional[builtins.str] = None,
     filter_groups: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnProject.WebhookFilterProperty, typing.Dict[builtins.str, typing.Any]]]]]]]] = None,
+    scope_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnProject.ScopeConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     webhook: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
 ) -> None:
     """Type checking stubs"""
@@ -17398,6 +17573,13 @@ def _typecheckingstub__339e3977bff464cdbd76e63b42bfebb18a64e99f952fa16884abebf8e
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__32a108f04a81dd1f44ef69553884cac321bd7631e9997ac93f2e0891bca04d74(
+    *,
+    name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__a37ee10766869fc2953074d8f15f2cd5d5621a31e8f93f638987dfd92e7c5f37(
     *,
     type: builtins.str,
@@ -17645,6 +17827,7 @@ def _typecheckingstub__45bdedf6c9b38dcb0797768fa0fdec382e282ebd8679405f7dd9df6cb
     ssm_session_permissions: typing.Optional[builtins.bool] = None,
     subnet_selection: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
     timeout: typing.Optional[_Duration_4839e8c3] = None,
+    visibility: typing.Optional[ProjectVisibility] = None,
     vpc: typing.Optional[_IVpc_f30d5663] = None,
 ) -> None:
     """Type checking stubs"""
@@ -18100,6 +18283,7 @@ def _typecheckingstub__cad18ebbb1c05a6adb06360d9baca4a0658b2f85c2078bc257ed8d4f8
     ssm_session_permissions: typing.Optional[builtins.bool] = None,
     subnet_selection: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
     timeout: typing.Optional[_Duration_4839e8c3] = None,
+    visibility: typing.Optional[ProjectVisibility] = None,
     vpc: typing.Optional[_IVpc_f30d5663] = None,
 ) -> None:
     """Type checking stubs"""
@@ -18133,6 +18317,7 @@ def _typecheckingstub__98b7b3a6b3dbe1931f04b0f953f1ae252e81da8d9335e78d6f3748d71
     ssm_session_permissions: typing.Optional[builtins.bool] = None,
     subnet_selection: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
     timeout: typing.Optional[_Duration_4839e8c3] = None,
+    visibility: typing.Optional[ProjectVisibility] = None,
     vpc: typing.Optional[_IVpc_f30d5663] = None,
 ) -> None:
     """Type checking stubs"""
@@ -18353,6 +18538,7 @@ def _typecheckingstub__98a249849c6dd1146c8e8d845c1f535b7a85df68782d9f343764b4470
     ssm_session_permissions: typing.Optional[builtins.bool] = None,
     subnet_selection: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
     timeout: typing.Optional[_Duration_4839e8c3] = None,
+    visibility: typing.Optional[ProjectVisibility] = None,
     vpc: typing.Optional[_IVpc_f30d5663] = None,
     artifacts: typing.Optional[IArtifacts] = None,
     secondary_artifacts: typing.Optional[typing.Sequence[IArtifacts]] = None,
@@ -18648,6 +18834,7 @@ def _typecheckingstub__cb5f1bed2a9bb9c41d6f93b4b1a4c9ce7347295312e04439f922446ae
     ssm_session_permissions: typing.Optional[builtins.bool] = None,
     subnet_selection: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
     timeout: typing.Optional[_Duration_4839e8c3] = None,
+    visibility: typing.Optional[ProjectVisibility] = None,
     vpc: typing.Optional[_IVpc_f30d5663] = None,
 ) -> None:
     """Type checking stubs"""