aws-cdk-lib 2.167.2__py3-none-any.whl → 2.168.0__py3-none-any.whl

aws_cdk/aws_cloudformation/__init__.py

@@ -256,17 +256,15 @@ class CfnCustomResourceProps:
 
 
 @jsii.implements(_IInspectable_c2943556)
-class CfnHookDefaultVersion(
+class CfnGuardHook(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
-    jsii_type="aws-cdk-lib.aws_cloudformation.CfnHookDefaultVersion",
+    jsii_type="aws-cdk-lib.aws_cloudformation.CfnGuardHook",
 ):
-    '''The ``HookDefaultVersion`` resource specifies the default version of the hook.
-
-    The default version of the hook is used in CloudFormation operations for this AWS account and AWS Region .
+    '''This is a CloudFormation resource for activating the first-party AWS::Hooks::GuardHook.
 
-    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookdefaultversion.html
-    :cloudformationResource: AWS::CloudFormation::HookDefaultVersion
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html
+    :cloudformationResource: AWS::CloudFormation::GuardHook
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -275,10 +273,47 @@ class CfnHookDefaultVersion(
         # The values are placeholders you should change.
         from aws_cdk import aws_cloudformation as cloudformation
         
-        cfn_hook_default_version = cloudformation.CfnHookDefaultVersion(self, "MyCfnHookDefaultVersion",
-            type_name="typeName",
-            type_version_arn="typeVersionArn",
-            version_id="versionId"
+        cfn_guard_hook = cloudformation.CfnGuardHook(self, "MyCfnGuardHook",
+            alias="alias",
+            execution_role="executionRole",
+            failure_mode="failureMode",
+            hook_status="hookStatus",
+            rule_location=cloudformation.CfnGuardHook.S3LocationProperty(
+                uri="uri",
+        
+                # the properties below are optional
+                version_id="versionId"
+            ),
+            target_operations=["targetOperations"],
+        
+            # the properties below are optional
+            log_bucket="logBucket",
+            options=cloudformation.CfnGuardHook.OptionsProperty(
+                input_params=cloudformation.CfnGuardHook.S3LocationProperty(
+                    uri="uri",
+        
+                    # the properties below are optional
+                    version_id="versionId"
+                )
+            ),
+            stack_filters=cloudformation.CfnGuardHook.StackFiltersProperty(
+                filtering_criteria="filteringCriteria",
+        
+                # the properties below are optional
+                stack_names=cloudformation.CfnGuardHook.StackNamesProperty(
+                    exclude=["exclude"],
+                    include=["include"]
+                ),
+                stack_roles=cloudformation.CfnGuardHook.StackRolesProperty(
+                    exclude=["exclude"],
+                    include=["include"]
+                )
+            ),
+            target_filters=cloudformation.CfnGuardHook.TargetFiltersProperty(
+                actions=["actions"],
+                invocation_points=["invocationPoints"],
+                target_names=["targetNames"]
+            )
         )
     '''
 
@@ -287,25 +322,46 @@ class CfnHookDefaultVersion(
         scope: _constructs_77d1e7e8.Construct,
         id: builtins.str,
         *,
-        type_name: typing.Optional[builtins.str] = None,
-        type_version_arn: typing.Optional[builtins.str] = None,
-        version_id: typing.Optional[builtins.str] = None,
+        alias: builtins.str,
+        execution_role: builtins.str,
+        failure_mode: builtins.str,
+        hook_status: builtins.str,
+        rule_location: typing.Union[_IResolvable_da3f097b, typing.Union["CfnGuardHook.S3LocationProperty", typing.Dict[builtins.str, typing.Any]]],
+        target_operations: typing.Sequence[builtins.str],
+        log_bucket: typing.Optional[builtins.str] = None,
+        options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnGuardHook.OptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        stack_filters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnGuardHook.StackFiltersProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        target_filters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnGuardHook.TargetFiltersProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param type_name: The name of the hook. You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
-        :param type_version_arn: The version ID of the type configuration. You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
-        :param version_id: The version ID of the type specified. You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
-        '''
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__0b8bde9f1f98ed0500179dfc97dcadf56e8ff1be4dde185bebd99abe71d79167)
+        :param alias: The typename alias for the hook.
+        :param execution_role: IAM Role ARN.
+        :param failure_mode: Attribute to specify CloudFormation behavior on hook failure. Default: - "WARN"
+        :param hook_status: Attribute to specify which stacks this hook applies to or should get invoked for. Default: - "DISABLED"
+        :param rule_location: S3 Source Location for the Guard files.
+        :param target_operations: Which operations should this Hook run against? Resource changes, stacks or change sets.
+        :param log_bucket: S3 Bucket where the guard validate report will be uploaded to.
+        :param options: 
+        :param stack_filters: Filters to allow hooks to target specific stack attributes.
+        :param target_filters: 
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__03161d7a487fda6efdcca08ffddf765149d688cda393f699958050fcb318e260)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
-        props = CfnHookDefaultVersionProps(
-            type_name=type_name,
-            type_version_arn=type_version_arn,
-            version_id=version_id,
+        props = CfnGuardHookProps(
+            alias=alias,
+            execution_role=execution_role,
+            failure_mode=failure_mode,
+            hook_status=hook_status,
+            rule_location=rule_location,
+            target_operations=target_operations,
+            log_bucket=log_bucket,
+            options=options,
+            stack_filters=stack_filters,
+            target_filters=target_filters,
         )
 
         jsii.create(self.__class__, self, [scope, id, props])
@@ -317,7 +373,7 @@ class CfnHookDefaultVersion(
         :param inspector: tree inspector to collect and process attributes.
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__9d3cffde5405816d6a41ef681bf2c43df8b5bde2710721ee16254bf382423108)
+            type_hints = typing.get_type_hints(_typecheckingstub__cec1fe7bbc90cf36ac842edcc8d50015b2dc2f2875aeb7e6253ff7c4e15aa338)
             check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
         return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
 
@@ -330,7 +386,7 @@ class CfnHookDefaultVersion(
         :param props: -
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__50c67f0fb346e88146ee0ab601fd70c28799c458260663e325a155a6150756f9)
+            type_hints = typing.get_type_hints(_typecheckingstub__f393185921422ec7e6581035e32a48e6114791074a5875d86aeed9dcd2841a82)
             check_type(argname="argument props", value=props, expected_type=type_hints["props"])
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
 
@@ -341,13 +397,13 @@ class CfnHookDefaultVersion(
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
     @builtins.property
-    @jsii.member(jsii_name="attrArn")
-    def attr_arn(self) -> builtins.str:
-        '''The Amazon Resource Number (ARN) of the activated extension, in this account and Region.
+    @jsii.member(jsii_name="attrHookArn")
+    def attr_hook_arn(self) -> builtins.str:
+        '''The Amazon Resource Name (ARN) of the activated hook.
 
-        :cloudformationAttribute: Arn
+        :cloudformationAttribute: HookArn
         '''
-        return typing.cast(builtins.str, jsii.get(self, "attrArn"))
+        return typing.cast(builtins.str, jsii.get(self, "attrHookArn"))
 
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
@@ -355,196 +411,1437 @@ class CfnHookDefaultVersion(
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
     @builtins.property
-    @jsii.member(jsii_name="typeName")
-    def type_name(self) -> typing.Optional[builtins.str]:
-        '''The name of the hook.'''
-        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "typeName"))
+    @jsii.member(jsii_name="alias")
+    def alias(self) -> builtins.str:
+        '''The typename alias for the hook.'''
+        return typing.cast(builtins.str, jsii.get(self, "alias"))
 
-    @type_name.setter
-    def type_name(self, value: typing.Optional[builtins.str]) -> None:
+    @alias.setter
+    def alias(self, value: builtins.str) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__c985f39fb842ecd8d503cc1ff86e00864e1fc45b5962d3fc9c66a7b136ac654a)
+            type_hints = typing.get_type_hints(_typecheckingstub__77b1f76eb29c770288d0795c8dc53027c60e7bad04fcf11f03ad76a14e18731c)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "typeName", value) # pyright: ignore[reportArgumentType]
+        jsii.set(self, "alias", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
-    @jsii.member(jsii_name="typeVersionArn")
-    def type_version_arn(self) -> typing.Optional[builtins.str]:
-        '''The version ID of the type configuration.'''
-        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "typeVersionArn"))
+    @jsii.member(jsii_name="executionRole")
+    def execution_role(self) -> builtins.str:
+        '''IAM Role ARN.'''
+        return typing.cast(builtins.str, jsii.get(self, "executionRole"))
 
-    @type_version_arn.setter
-    def type_version_arn(self, value: typing.Optional[builtins.str]) -> None:
+    @execution_role.setter
+    def execution_role(self, value: builtins.str) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__b8fff96e0ddbd71a4aa46a88a0873bb65a9aad21cdec8f8be8016c745e513d99)
+            type_hints = typing.get_type_hints(_typecheckingstub__22a699f491c232b68e87da58b1e3798c0c543c42e6139bd091d5bc13dc38d691)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "typeVersionArn", value) # pyright: ignore[reportArgumentType]
+        jsii.set(self, "executionRole", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
-    @jsii.member(jsii_name="versionId")
-    def version_id(self) -> typing.Optional[builtins.str]:
-        '''The version ID of the type specified.'''
-        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "versionId"))
+    @jsii.member(jsii_name="failureMode")
+    def failure_mode(self) -> builtins.str:
+        '''Attribute to specify CloudFormation behavior on hook failure.'''
+        return typing.cast(builtins.str, jsii.get(self, "failureMode"))
 
-    @version_id.setter
-    def version_id(self, value: typing.Optional[builtins.str]) -> None:
+    @failure_mode.setter
+    def failure_mode(self, value: builtins.str) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__b9f9bb2d06c69bb7ef45feaaed611f94d81b89f367a377c829ab1e52ed8d53a0)
+            type_hints = typing.get_type_hints(_typecheckingstub__b51f06fa6d9c4bf815a03971bd117bd21aae0f56f3bcf6320d101a6affb4ee5e)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "versionId", value) # pyright: ignore[reportArgumentType]
+        jsii.set(self, "failureMode", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="hookStatus")
+    def hook_status(self) -> builtins.str:
+        '''Attribute to specify which stacks this hook applies to or should get invoked for.'''
+        return typing.cast(builtins.str, jsii.get(self, "hookStatus"))
 
-@jsii.data_type(
-    jsii_type="aws-cdk-lib.aws_cloudformation.CfnHookDefaultVersionProps",
-    jsii_struct_bases=[],
-    name_mapping={
-        "type_name": "typeName",
-        "type_version_arn": "typeVersionArn",
-        "version_id": "versionId",
-    },
-)
-class CfnHookDefaultVersionProps:
-    def __init__(
+    @hook_status.setter
+    def hook_status(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__45f72bea4f6d1a361234e272fa8b7591203fb732d4833409397c312ef2b338ee)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "hookStatus", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="ruleLocation")
+    def rule_location(
         self,
-        *,
-        type_name: typing.Optional[builtins.str] = None,
-        type_version_arn: typing.Optional[builtins.str] = None,
-        version_id: typing.Optional[builtins.str] = None,
+    ) -> typing.Union[_IResolvable_da3f097b, "CfnGuardHook.S3LocationProperty"]:
+        '''S3 Source Location for the Guard files.'''
+        return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnGuardHook.S3LocationProperty"], jsii.get(self, "ruleLocation"))
+
+    @rule_location.setter
+    def rule_location(
+        self,
+        value: typing.Union[_IResolvable_da3f097b, "CfnGuardHook.S3LocationProperty"],
     ) -> None:
-        '''Properties for defining a ``CfnHookDefaultVersion``.
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__5c9be7db879b9401cebdd59ef44b8e74245c171bce7b83e3ff646a725e30990d)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "ruleLocation", value) # pyright: ignore[reportArgumentType]
 
-        :param type_name: The name of the hook. You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
-        :param type_version_arn: The version ID of the type configuration. You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
-        :param version_id: The version ID of the type specified. You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
+    @builtins.property
+    @jsii.member(jsii_name="targetOperations")
+    def target_operations(self) -> typing.List[builtins.str]:
+        '''Which operations should this Hook run against?'''
+        return typing.cast(typing.List[builtins.str], jsii.get(self, "targetOperations"))
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookdefaultversion.html
-        :exampleMetadata: fixture=_generated
+    @target_operations.setter
+    def target_operations(self, value: typing.List[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__158f2ec6b05d1bd8c5c76f62f2e4432b1caba87154d6a9367d1a4ffc6508d382)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "targetOperations", value) # pyright: ignore[reportArgumentType]
 
-        Example::
+    @builtins.property
+    @jsii.member(jsii_name="logBucket")
+    def log_bucket(self) -> typing.Optional[builtins.str]:
+        '''S3 Bucket where the guard validate report will be uploaded to.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "logBucket"))
 
-            # The code below shows an example of how to instantiate this type.
-            # The values are placeholders you should change.
-            from aws_cdk import aws_cloudformation as cloudformation
-            
-            cfn_hook_default_version_props = cloudformation.CfnHookDefaultVersionProps(
-                type_name="typeName",
-                type_version_arn="typeVersionArn",
-                version_id="versionId"
-            )
-        '''
+    @log_bucket.setter
+    def log_bucket(self, value: typing.Optional[builtins.str]) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__86e582779d0fb8b475195467d988078f1c65515c6a403bf9dc6b5ef8aced149f)
-            check_type(argname="argument type_name", value=type_name, expected_type=type_hints["type_name"])
-            check_type(argname="argument type_version_arn", value=type_version_arn, expected_type=type_hints["type_version_arn"])
-            check_type(argname="argument version_id", value=version_id, expected_type=type_hints["version_id"])
-        self._values: typing.Dict[builtins.str, typing.Any] = {}
-        if type_name is not None:
-            self._values["type_name"] = type_name
-        if type_version_arn is not None:
-            self._values["type_version_arn"] = type_version_arn
-        if version_id is not None:
-            self._values["version_id"] = version_id
+            type_hints = typing.get_type_hints(_typecheckingstub__52841a36e60ee2e4dda1b97a80d4d8afdce08c6923b2bff3915731c490cc1fef)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "logBucket", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
-    def type_name(self) -> typing.Optional[builtins.str]:
-        '''The name of the hook.
+    @jsii.member(jsii_name="options")
+    def options(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnGuardHook.OptionsProperty"]]:
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnGuardHook.OptionsProperty"]], jsii.get(self, "options"))
 
-        You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
+    @options.setter
+    def options(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnGuardHook.OptionsProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__aa51fffdbd416f8c3f134e2ce1d54eb8592c7e9ab1fb1773814e14a6e9c3908c)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "options", value) # pyright: ignore[reportArgumentType]
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookdefaultversion.html#cfn-cloudformation-hookdefaultversion-typename
-        '''
-        result = self._values.get("type_name")
-        return typing.cast(typing.Optional[builtins.str], result)
+    @builtins.property
+    @jsii.member(jsii_name="stackFilters")
+    def stack_filters(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnGuardHook.StackFiltersProperty"]]:
+        '''Filters to allow hooks to target specific stack attributes.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnGuardHook.StackFiltersProperty"]], jsii.get(self, "stackFilters"))
+
+    @stack_filters.setter
+    def stack_filters(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnGuardHook.StackFiltersProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__ba8e46c4263c84d663638542ea2e36bf64d6c580e18d333b70f96cde334f3311)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "stackFilters", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
-    def type_version_arn(self) -> typing.Optional[builtins.str]:
-        '''The version ID of the type configuration.
+    @jsii.member(jsii_name="targetFilters")
+    def target_filters(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnGuardHook.TargetFiltersProperty"]]:
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnGuardHook.TargetFiltersProperty"]], jsii.get(self, "targetFilters"))
 
-        You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
+    @target_filters.setter
+    def target_filters(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnGuardHook.TargetFiltersProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c81e70f0acb044921c8947467f93bf3568ecf5bceb007dbfd1211e597c8deb39)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "targetFilters", value) # pyright: ignore[reportArgumentType]
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookdefaultversion.html#cfn-cloudformation-hookdefaultversion-typeversionarn
-        '''
-        result = self._values.get("type_version_arn")
-        return typing.cast(typing.Optional[builtins.str], result)
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_cloudformation.CfnGuardHook.OptionsProperty",
+        jsii_struct_bases=[],
+        name_mapping={"input_params": "inputParams"},
+    )
+    class OptionsProperty:
+        def __init__(
+            self,
+            *,
+            input_params: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnGuardHook.S3LocationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        ) -> None:
+            '''
+            :param input_params: S3 Source Location for the Guard files.
 
-    @builtins.property
-    def version_id(self) -> typing.Optional[builtins.str]:
-        '''The version ID of the type specified.
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-options.html
+            :exampleMetadata: fixture=_generated
 
-        You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
+            Example::
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookdefaultversion.html#cfn-cloudformation-hookdefaultversion-versionid
-        '''
-        result = self._values.get("version_id")
-        return typing.cast(typing.Optional[builtins.str], result)
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_cloudformation as cloudformation
+                
+                options_property = cloudformation.CfnGuardHook.OptionsProperty(
+                    input_params=cloudformation.CfnGuardHook.S3LocationProperty(
+                        uri="uri",
+                
+                        # the properties below are optional
+                        version_id="versionId"
+                    )
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__9b598c3b73355c67dcc3aa78319cd2f0d94b1f77b3311af71cc07b20334e0eca)
+                check_type(argname="argument input_params", value=input_params, expected_type=type_hints["input_params"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if input_params is not None:
+                self._values["input_params"] = input_params
 
-    def __eq__(self, rhs: typing.Any) -> builtins.bool:
-        return isinstance(rhs, self.__class__) and rhs._values == self._values
+        @builtins.property
+        def input_params(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnGuardHook.S3LocationProperty"]]:
+            '''S3 Source Location for the Guard files.
 
-    def __ne__(self, rhs: typing.Any) -> builtins.bool:
-        return not (rhs == self)
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-options.html#cfn-cloudformation-guardhook-options-inputparams
+            '''
+            result = self._values.get("input_params")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnGuardHook.S3LocationProperty"]], result)
 
-    def __repr__(self) -> str:
-        return "CfnHookDefaultVersionProps(%s)" % ", ".join(
-            k + "=" + repr(v) for k, v in self._values.items()
-        )
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
 
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
 
-@jsii.implements(_IInspectable_c2943556)
-class CfnHookTypeConfig(
-    _CfnResource_9df397a6,
-    metaclass=jsii.JSIIMeta,
-    jsii_type="aws-cdk-lib.aws_cloudformation.CfnHookTypeConfig",
-):
-    '''The ``HookTypeConfig`` resource specifies the configuration of a hook.
+        def __repr__(self) -> str:
+            return "OptionsProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
 
-    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hooktypeconfig.html
-    :cloudformationResource: AWS::CloudFormation::HookTypeConfig
-    :exampleMetadata: fixture=_generated
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_cloudformation.CfnGuardHook.S3LocationProperty",
+        jsii_struct_bases=[],
+        name_mapping={"uri": "uri", "version_id": "versionId"},
+    )
+    class S3LocationProperty:
+        def __init__(
+            self,
+            *,
+            uri: builtins.str,
+            version_id: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''S3 Source Location for the Guard files.
 
-    Example::
+            :param uri: S3 uri of Guard files.
+            :param version_id: S3 object version.
 
-        # The code below shows an example of how to instantiate this type.
-        # The values are placeholders you should change.
-        from aws_cdk import aws_cloudformation as cloudformation
-        
-        cfn_hook_type_config = cloudformation.CfnHookTypeConfig(self, "MyCfnHookTypeConfig",
-            configuration="configuration",
-        
-            # the properties below are optional
-            configuration_alias="configurationAlias",
-            type_arn="typeArn",
-            type_name="typeName"
-        )
-    '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-s3location.html
+            :exampleMetadata: fixture=_generated
 
-    def __init__(
-        self,
-        scope: _constructs_77d1e7e8.Construct,
-        id: builtins.str,
-        *,
-        configuration: builtins.str,
-        configuration_alias: typing.Optional[builtins.str] = None,
-        type_arn: typing.Optional[builtins.str] = None,
-        type_name: typing.Optional[builtins.str] = None,
-    ) -> None:
-        '''
-        :param scope: Scope in which this resource is defined.
-        :param id: Construct identifier for this resource (unique in its scope).
-        :param configuration: Specifies the activated hook type configuration, in this AWS account and AWS Region . You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
-        :param configuration_alias: Specifies the activated hook type configuration, in this AWS account and AWS Region . Defaults to ``default`` alias. Hook types currently support default configuration alias. Default: - "default"
-        :param type_arn: The Amazon Resource Number (ARN) for the hook to set ``Configuration`` for. You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
-        :param type_name: The unique name for your hook. Specifies a three-part namespace for your hook, with a recommended pattern of ``Organization::Service::Hook`` . You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
-        '''
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__1aa75e15214f256047fa6d0b79cceb9720316dd5d5524cca649ba63b4b4613e3)
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_cloudformation as cloudformation
+                
+                s3_location_property = cloudformation.CfnGuardHook.S3LocationProperty(
+                    uri="uri",
+                
+                    # the properties below are optional
+                    version_id="versionId"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__a1f9db65edb886b53a3ae52ab45b8328981676b11f96b8f1aabfebc3198bc5e5)
+                check_type(argname="argument uri", value=uri, expected_type=type_hints["uri"])
+                check_type(argname="argument version_id", value=version_id, expected_type=type_hints["version_id"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "uri": uri,
+            }
+            if version_id is not None:
+                self._values["version_id"] = version_id
+
+        @builtins.property
+        def uri(self) -> builtins.str:
+            '''S3 uri of Guard files.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-s3location.html#cfn-cloudformation-guardhook-s3location-uri
+            '''
+            result = self._values.get("uri")
+            assert result is not None, "Required property 'uri' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def version_id(self) -> typing.Optional[builtins.str]:
+            '''S3 object version.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-s3location.html#cfn-cloudformation-guardhook-s3location-versionid
+            '''
+            result = self._values.get("version_id")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "S3LocationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_cloudformation.CfnGuardHook.StackFiltersProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "filtering_criteria": "filteringCriteria",
+            "stack_names": "stackNames",
+            "stack_roles": "stackRoles",
+        },
+    )
+    class StackFiltersProperty:
+        def __init__(
+            self,
+            *,
+            filtering_criteria: builtins.str,
+            stack_names: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnGuardHook.StackNamesProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+            stack_roles: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnGuardHook.StackRolesProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        ) -> None:
+            '''Filters to allow hooks to target specific stack attributes.
+
+            :param filtering_criteria: Attribute to specify the filtering behavior. ANY will make the Hook pass if one filter matches. ALL will make the Hook pass if all filters match Default: - "ALL"
+            :param stack_names: List of stack names as filters.
+            :param stack_roles: List of stack roles that are performing the stack operations.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-stackfilters.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_cloudformation as cloudformation
+                
+                stack_filters_property = cloudformation.CfnGuardHook.StackFiltersProperty(
+                    filtering_criteria="filteringCriteria",
+                
+                    # the properties below are optional
+                    stack_names=cloudformation.CfnGuardHook.StackNamesProperty(
+                        exclude=["exclude"],
+                        include=["include"]
+                    ),
+                    stack_roles=cloudformation.CfnGuardHook.StackRolesProperty(
+                        exclude=["exclude"],
+                        include=["include"]
+                    )
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__1fdbc46050746c029db2f505b946b969ecb2a8c0835d3e20724e224a2c12d45b)
+                check_type(argname="argument filtering_criteria", value=filtering_criteria, expected_type=type_hints["filtering_criteria"])
+                check_type(argname="argument stack_names", value=stack_names, expected_type=type_hints["stack_names"])
+                check_type(argname="argument stack_roles", value=stack_roles, expected_type=type_hints["stack_roles"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "filtering_criteria": filtering_criteria,
+            }
+            if stack_names is not None:
+                self._values["stack_names"] = stack_names
+            if stack_roles is not None:
+                self._values["stack_roles"] = stack_roles
+
+        @builtins.property
+        def filtering_criteria(self) -> builtins.str:
+            '''Attribute to specify the filtering behavior.
+
+            ANY will make the Hook pass if one filter matches. ALL will make the Hook pass if all filters match
+
+            :default: - "ALL"
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-stackfilters.html#cfn-cloudformation-guardhook-stackfilters-filteringcriteria
+            '''
+            result = self._values.get("filtering_criteria")
+            assert result is not None, "Required property 'filtering_criteria' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def stack_names(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnGuardHook.StackNamesProperty"]]:
+            '''List of stack names as filters.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-stackfilters.html#cfn-cloudformation-guardhook-stackfilters-stacknames
+            '''
+            result = self._values.get("stack_names")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnGuardHook.StackNamesProperty"]], result)
+
+        @builtins.property
+        def stack_roles(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnGuardHook.StackRolesProperty"]]:
+            '''List of stack roles that are performing the stack operations.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-stackfilters.html#cfn-cloudformation-guardhook-stackfilters-stackroles
+            '''
+            result = self._values.get("stack_roles")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnGuardHook.StackRolesProperty"]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "StackFiltersProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_cloudformation.CfnGuardHook.StackNamesProperty",
+        jsii_struct_bases=[],
+        name_mapping={"exclude": "exclude", "include": "include"},
+    )
+    class StackNamesProperty:
+        def __init__(
+            self,
+            *,
+            exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
+            include: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''List of stack names as filters.
+
+            :param exclude: List of stack names that the hook is going to be excluded from.
+            :param include: List of stack names that the hook is going to target.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-stacknames.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_cloudformation as cloudformation
+                
+                stack_names_property = cloudformation.CfnGuardHook.StackNamesProperty(
+                    exclude=["exclude"],
+                    include=["include"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__57a38a30a3ccc5bb6875c74d99f0b1fe3ed5384017a5fee82f653914194e31c5)
+                check_type(argname="argument exclude", value=exclude, expected_type=type_hints["exclude"])
+                check_type(argname="argument include", value=include, expected_type=type_hints["include"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if exclude is not None:
+                self._values["exclude"] = exclude
+            if include is not None:
+                self._values["include"] = include
+
+        @builtins.property
+        def exclude(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''List of stack names that the hook is going to be excluded from.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-stacknames.html#cfn-cloudformation-guardhook-stacknames-exclude
+            '''
+            result = self._values.get("exclude")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        @builtins.property
+        def include(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''List of stack names that the hook is going to target.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-stacknames.html#cfn-cloudformation-guardhook-stacknames-include
+            '''
+            result = self._values.get("include")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "StackNamesProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_cloudformation.CfnGuardHook.StackRolesProperty",
+        jsii_struct_bases=[],
+        name_mapping={"exclude": "exclude", "include": "include"},
+    )
+    class StackRolesProperty:
+        def __init__(
+            self,
+            *,
+            exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
+            include: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''List of stack roles that are performing the stack operations.
+
+            :param exclude: List of stack roles that the hook is going to be excluded from.
+            :param include: List of stack roles that the hook is going to target.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-stackroles.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_cloudformation as cloudformation
+                
+                stack_roles_property = cloudformation.CfnGuardHook.StackRolesProperty(
+                    exclude=["exclude"],
+                    include=["include"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__19a166b14cd31cea92d76fbca0808b1b44774459a4d29121e91c2e20cd466e21)
+                check_type(argname="argument exclude", value=exclude, expected_type=type_hints["exclude"])
+                check_type(argname="argument include", value=include, expected_type=type_hints["include"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if exclude is not None:
+                self._values["exclude"] = exclude
+            if include is not None:
+                self._values["include"] = include
+
+        @builtins.property
+        def exclude(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''List of stack roles that the hook is going to be excluded from.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-stackroles.html#cfn-cloudformation-guardhook-stackroles-exclude
+            '''
+            result = self._values.get("exclude")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        @builtins.property
+        def include(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''List of stack roles that the hook is going to target.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-stackroles.html#cfn-cloudformation-guardhook-stackroles-include
+            '''
+            result = self._values.get("include")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "StackRolesProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_cloudformation.CfnGuardHook.TargetFiltersProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "actions": "actions",
+            "invocation_points": "invocationPoints",
+            "target_names": "targetNames",
+        },
+    )
+    class TargetFiltersProperty:
+        def __init__(
+            self,
+            *,
+            actions: typing.Optional[typing.Sequence[builtins.str]] = None,
+            invocation_points: typing.Optional[typing.Sequence[builtins.str]] = None,
+            target_names: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''
+            :param actions: List of actions that the hook is going to target.
+            :param invocation_points: List of invocation points that the hook is going to target.
+            :param target_names: List of type names that the hook is going to target.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-targetfilters.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_cloudformation as cloudformation
+                
+                target_filters_property = cloudformation.CfnGuardHook.TargetFiltersProperty(
+                    actions=["actions"],
+                    invocation_points=["invocationPoints"],
+                    target_names=["targetNames"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__378b3973374e7523256c5da2187494f5d2cfb4d85e28b4cc20e0b03edb7a4395)
+                check_type(argname="argument actions", value=actions, expected_type=type_hints["actions"])
+                check_type(argname="argument invocation_points", value=invocation_points, expected_type=type_hints["invocation_points"])
+                check_type(argname="argument target_names", value=target_names, expected_type=type_hints["target_names"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if actions is not None:
+                self._values["actions"] = actions
+            if invocation_points is not None:
+                self._values["invocation_points"] = invocation_points
+            if target_names is not None:
+                self._values["target_names"] = target_names
+
+        @builtins.property
+        def actions(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''List of actions that the hook is going to target.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-targetfilters.html#cfn-cloudformation-guardhook-targetfilters-actions
+            '''
+            result = self._values.get("actions")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        @builtins.property
+        def invocation_points(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''List of invocation points that the hook is going to target.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-targetfilters.html#cfn-cloudformation-guardhook-targetfilters-invocationpoints
+            '''
+            result = self._values.get("invocation_points")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        @builtins.property
+        def target_names(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''List of type names that the hook is going to target.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-targetfilters.html#cfn-cloudformation-guardhook-targetfilters-targetnames
+            '''
+            result = self._values.get("target_names")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "TargetFiltersProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_cloudformation.CfnGuardHookProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "alias": "alias",
+        "execution_role": "executionRole",
+        "failure_mode": "failureMode",
+        "hook_status": "hookStatus",
+        "rule_location": "ruleLocation",
+        "target_operations": "targetOperations",
+        "log_bucket": "logBucket",
+        "options": "options",
+        "stack_filters": "stackFilters",
+        "target_filters": "targetFilters",
+    },
+)
+class CfnGuardHookProps:
+    def __init__(
+        self,
+        *,
+        alias: builtins.str,
+        execution_role: builtins.str,
+        failure_mode: builtins.str,
+        hook_status: builtins.str,
+        rule_location: typing.Union[_IResolvable_da3f097b, typing.Union[CfnGuardHook.S3LocationProperty, typing.Dict[builtins.str, typing.Any]]],
+        target_operations: typing.Sequence[builtins.str],
+        log_bucket: typing.Optional[builtins.str] = None,
+        options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnGuardHook.OptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        stack_filters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnGuardHook.StackFiltersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        target_filters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnGuardHook.TargetFiltersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnGuardHook``.
+
+        :param alias: The typename alias for the hook.
+        :param execution_role: IAM Role ARN.
+        :param failure_mode: Attribute to specify CloudFormation behavior on hook failure. Default: - "WARN"
+        :param hook_status: Attribute to specify which stacks this hook applies to or should get invoked for. Default: - "DISABLED"
+        :param rule_location: S3 Source Location for the Guard files.
+        :param target_operations: Which operations should this Hook run against? Resource changes, stacks or change sets.
+        :param log_bucket: S3 Bucket where the guard validate report will be uploaded to.
+        :param options: 
+        :param stack_filters: Filters to allow hooks to target specific stack attributes.
+        :param target_filters: 
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_cloudformation as cloudformation
+            
+            cfn_guard_hook_props = cloudformation.CfnGuardHookProps(
+                alias="alias",
+                execution_role="executionRole",
+                failure_mode="failureMode",
+                hook_status="hookStatus",
+                rule_location=cloudformation.CfnGuardHook.S3LocationProperty(
+                    uri="uri",
+            
+                    # the properties below are optional
+                    version_id="versionId"
+                ),
+                target_operations=["targetOperations"],
+            
+                # the properties below are optional
+                log_bucket="logBucket",
+                options=cloudformation.CfnGuardHook.OptionsProperty(
+                    input_params=cloudformation.CfnGuardHook.S3LocationProperty(
+                        uri="uri",
+            
+                        # the properties below are optional
+                        version_id="versionId"
+                    )
+                ),
+                stack_filters=cloudformation.CfnGuardHook.StackFiltersProperty(
+                    filtering_criteria="filteringCriteria",
+            
+                    # the properties below are optional
+                    stack_names=cloudformation.CfnGuardHook.StackNamesProperty(
+                        exclude=["exclude"],
+                        include=["include"]
+                    ),
+                    stack_roles=cloudformation.CfnGuardHook.StackRolesProperty(
+                        exclude=["exclude"],
+                        include=["include"]
+                    )
+                ),
+                target_filters=cloudformation.CfnGuardHook.TargetFiltersProperty(
+                    actions=["actions"],
+                    invocation_points=["invocationPoints"],
+                    target_names=["targetNames"]
+                )
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__102e29368f2c52ece5c053d50bb54873288bc91ca7d6f01a1ad3bb84ffdc3b76)
+            check_type(argname="argument alias", value=alias, expected_type=type_hints["alias"])
+            check_type(argname="argument execution_role", value=execution_role, expected_type=type_hints["execution_role"])
+            check_type(argname="argument failure_mode", value=failure_mode, expected_type=type_hints["failure_mode"])
+            check_type(argname="argument hook_status", value=hook_status, expected_type=type_hints["hook_status"])
+            check_type(argname="argument rule_location", value=rule_location, expected_type=type_hints["rule_location"])
+            check_type(argname="argument target_operations", value=target_operations, expected_type=type_hints["target_operations"])
+            check_type(argname="argument log_bucket", value=log_bucket, expected_type=type_hints["log_bucket"])
+            check_type(argname="argument options", value=options, expected_type=type_hints["options"])
+            check_type(argname="argument stack_filters", value=stack_filters, expected_type=type_hints["stack_filters"])
+            check_type(argname="argument target_filters", value=target_filters, expected_type=type_hints["target_filters"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "alias": alias,
+            "execution_role": execution_role,
+            "failure_mode": failure_mode,
+            "hook_status": hook_status,
+            "rule_location": rule_location,
+            "target_operations": target_operations,
+        }
+        if log_bucket is not None:
+            self._values["log_bucket"] = log_bucket
+        if options is not None:
+            self._values["options"] = options
+        if stack_filters is not None:
+            self._values["stack_filters"] = stack_filters
+        if target_filters is not None:
+            self._values["target_filters"] = target_filters
+
+    @builtins.property
+    def alias(self) -> builtins.str:
+        '''The typename alias for the hook.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-alias
+        '''
+        result = self._values.get("alias")
+        assert result is not None, "Required property 'alias' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def execution_role(self) -> builtins.str:
+        '''IAM Role ARN.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-executionrole
+        '''
+        result = self._values.get("execution_role")
+        assert result is not None, "Required property 'execution_role' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def failure_mode(self) -> builtins.str:
+        '''Attribute to specify CloudFormation behavior on hook failure.
+
+        :default: - "WARN"
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-failuremode
+        '''
+        result = self._values.get("failure_mode")
+        assert result is not None, "Required property 'failure_mode' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def hook_status(self) -> builtins.str:
+        '''Attribute to specify which stacks this hook applies to or should get invoked for.
+
+        :default: - "DISABLED"
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-hookstatus
+        '''
+        result = self._values.get("hook_status")
+        assert result is not None, "Required property 'hook_status' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def rule_location(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, CfnGuardHook.S3LocationProperty]:
+        '''S3 Source Location for the Guard files.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-rulelocation
+        '''
+        result = self._values.get("rule_location")
+        assert result is not None, "Required property 'rule_location' is missing"
+        return typing.cast(typing.Union[_IResolvable_da3f097b, CfnGuardHook.S3LocationProperty], result)
+
+    @builtins.property
+    def target_operations(self) -> typing.List[builtins.str]:
+        '''Which operations should this Hook run against?
+
+        Resource changes, stacks or change sets.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-targetoperations
+        '''
+        result = self._values.get("target_operations")
+        assert result is not None, "Required property 'target_operations' is missing"
+        return typing.cast(typing.List[builtins.str], result)
+
+    @builtins.property
+    def log_bucket(self) -> typing.Optional[builtins.str]:
+        '''S3 Bucket where the guard validate report will be uploaded to.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-logbucket
+        '''
+        result = self._values.get("log_bucket")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def options(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnGuardHook.OptionsProperty]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-options
+        '''
+        result = self._values.get("options")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnGuardHook.OptionsProperty]], result)
+
+    @builtins.property
+    def stack_filters(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnGuardHook.StackFiltersProperty]]:
+        '''Filters to allow hooks to target specific stack attributes.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-stackfilters
+        '''
+        result = self._values.get("stack_filters")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnGuardHook.StackFiltersProperty]], result)
+
+    @builtins.property
+    def target_filters(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnGuardHook.TargetFiltersProperty]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-targetfilters
+        '''
+        result = self._values.get("target_filters")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnGuardHook.TargetFiltersProperty]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnGuardHookProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.implements(_IInspectable_c2943556)
+class CfnHookDefaultVersion(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_cloudformation.CfnHookDefaultVersion",
+):
+    '''The ``HookDefaultVersion`` resource specifies the default version of the hook.
+
+    The default version of the hook is used in CloudFormation operations for this AWS account and AWS Region .
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookdefaultversion.html
+    :cloudformationResource: AWS::CloudFormation::HookDefaultVersion
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_cloudformation as cloudformation
+        
+        cfn_hook_default_version = cloudformation.CfnHookDefaultVersion(self, "MyCfnHookDefaultVersion",
+            type_name="typeName",
+            type_version_arn="typeVersionArn",
+            version_id="versionId"
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        type_name: typing.Optional[builtins.str] = None,
+        type_version_arn: typing.Optional[builtins.str] = None,
+        version_id: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param type_name: The name of the hook. You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
+        :param type_version_arn: The version ID of the type configuration. You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
+        :param version_id: The version ID of the type specified. You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__0b8bde9f1f98ed0500179dfc97dcadf56e8ff1be4dde185bebd99abe71d79167)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnHookDefaultVersionProps(
+            type_name=type_name,
+            type_version_arn=type_version_arn,
+            version_id=version_id,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__9d3cffde5405816d6a41ef681bf2c43df8b5bde2710721ee16254bf382423108)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__50c67f0fb346e88146ee0ab601fd70c28799c458260663e325a155a6150756f9)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrArn")
+    def attr_arn(self) -> builtins.str:
+        '''The Amazon Resource Number (ARN) of the activated extension, in this account and Region.
+
+        :cloudformationAttribute: Arn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="typeName")
+    def type_name(self) -> typing.Optional[builtins.str]:
+        '''The name of the hook.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "typeName"))
+
+    @type_name.setter
+    def type_name(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c985f39fb842ecd8d503cc1ff86e00864e1fc45b5962d3fc9c66a7b136ac654a)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "typeName", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="typeVersionArn")
+    def type_version_arn(self) -> typing.Optional[builtins.str]:
+        '''The version ID of the type configuration.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "typeVersionArn"))
+
+    @type_version_arn.setter
+    def type_version_arn(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b8fff96e0ddbd71a4aa46a88a0873bb65a9aad21cdec8f8be8016c745e513d99)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "typeVersionArn", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="versionId")
+    def version_id(self) -> typing.Optional[builtins.str]:
+        '''The version ID of the type specified.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "versionId"))
+
+    @version_id.setter
+    def version_id(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b9f9bb2d06c69bb7ef45feaaed611f94d81b89f367a377c829ab1e52ed8d53a0)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "versionId", value) # pyright: ignore[reportArgumentType]
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_cloudformation.CfnHookDefaultVersionProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "type_name": "typeName",
+        "type_version_arn": "typeVersionArn",
+        "version_id": "versionId",
+    },
+)
+class CfnHookDefaultVersionProps:
+    def __init__(
+        self,
+        *,
+        type_name: typing.Optional[builtins.str] = None,
+        type_version_arn: typing.Optional[builtins.str] = None,
+        version_id: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnHookDefaultVersion``.
+
+        :param type_name: The name of the hook. You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
+        :param type_version_arn: The version ID of the type configuration. You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
+        :param version_id: The version ID of the type specified. You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookdefaultversion.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_cloudformation as cloudformation
+            
+            cfn_hook_default_version_props = cloudformation.CfnHookDefaultVersionProps(
+                type_name="typeName",
+                type_version_arn="typeVersionArn",
+                version_id="versionId"
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__86e582779d0fb8b475195467d988078f1c65515c6a403bf9dc6b5ef8aced149f)
+            check_type(argname="argument type_name", value=type_name, expected_type=type_hints["type_name"])
+            check_type(argname="argument type_version_arn", value=type_version_arn, expected_type=type_hints["type_version_arn"])
+            check_type(argname="argument version_id", value=version_id, expected_type=type_hints["version_id"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if type_name is not None:
+            self._values["type_name"] = type_name
+        if type_version_arn is not None:
+            self._values["type_version_arn"] = type_version_arn
+        if version_id is not None:
+            self._values["version_id"] = version_id
+
+    @builtins.property
+    def type_name(self) -> typing.Optional[builtins.str]:
+        '''The name of the hook.
+
+        You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookdefaultversion.html#cfn-cloudformation-hookdefaultversion-typename
+        '''
+        result = self._values.get("type_name")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def type_version_arn(self) -> typing.Optional[builtins.str]:
+        '''The version ID of the type configuration.
+
+        You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookdefaultversion.html#cfn-cloudformation-hookdefaultversion-typeversionarn
+        '''
+        result = self._values.get("type_version_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def version_id(self) -> typing.Optional[builtins.str]:
+        '''The version ID of the type specified.
+
+        You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookdefaultversion.html#cfn-cloudformation-hookdefaultversion-versionid
+        '''
+        result = self._values.get("version_id")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnHookDefaultVersionProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.implements(_IInspectable_c2943556)
+class CfnHookTypeConfig(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_cloudformation.CfnHookTypeConfig",
+):
+    '''The ``HookTypeConfig`` resource specifies the configuration of a hook.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hooktypeconfig.html
+    :cloudformationResource: AWS::CloudFormation::HookTypeConfig
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_cloudformation as cloudformation
+        
+        cfn_hook_type_config = cloudformation.CfnHookTypeConfig(self, "MyCfnHookTypeConfig",
+            configuration="configuration",
+        
+            # the properties below are optional
+            configuration_alias="configurationAlias",
+            type_arn="typeArn",
+            type_name="typeName"
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        configuration: builtins.str,
+        configuration_alias: typing.Optional[builtins.str] = None,
+        type_arn: typing.Optional[builtins.str] = None,
+        type_name: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param configuration: Specifies the activated hook type configuration, in this AWS account and AWS Region . You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
+        :param configuration_alias: Specifies the activated hook type configuration, in this AWS account and AWS Region . Defaults to ``default`` alias. Hook types currently support default configuration alias. Default: - "default"
+        :param type_arn: The Amazon Resource Number (ARN) for the hook to set ``Configuration`` for. You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
+        :param type_name: The unique name for your hook. Specifies a three-part namespace for your hook, with a recommended pattern of ``Organization::Service::Hook`` . You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1aa75e15214f256047fa6d0b79cceb9720316dd5d5524cca649ba63b4b4613e3)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnHookTypeConfigProps(
+            configuration=configuration,
+            configuration_alias=configuration_alias,
+            type_arn=type_arn,
+            type_name=type_name,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__64d031e26b8bd0eeb56b31d7de08efef921b07640fe30239018c4b9b54f75af3)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__152138584317142b159bc64a674adbec428e62f1899b9285a49a4b8e3bb752bd)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrConfigurationArn")
+    def attr_configuration_arn(self) -> builtins.str:
+        '''The Amazon Resource Number (ARN) of the activated hook type configuration, in this account and Region.
+
+        :cloudformationAttribute: ConfigurationArn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrConfigurationArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="configuration")
+    def configuration(self) -> builtins.str:
+        '''Specifies the activated hook type configuration, in this AWS account and AWS Region .'''
+        return typing.cast(builtins.str, jsii.get(self, "configuration"))
+
+    @configuration.setter
+    def configuration(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__3847791ddd5530d8a9d2144538417d1a4cf5fb909bd613d41c5905e02d37bb9a)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "configuration", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="configurationAlias")
+    def configuration_alias(self) -> typing.Optional[builtins.str]:
+        '''Specifies the activated hook type configuration, in this AWS account and AWS Region .'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "configurationAlias"))
+
+    @configuration_alias.setter
+    def configuration_alias(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__649cdf62ea09d9e4b72042f283c05b766e052006f59f2d05f9a6d2eab2ea396a)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "configurationAlias", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="typeArn")
+    def type_arn(self) -> typing.Optional[builtins.str]:
+        '''The Amazon Resource Number (ARN) for the hook to set ``Configuration`` for.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "typeArn"))
+
+    @type_arn.setter
+    def type_arn(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b787dd89e7baba7e0a6ac2766dafcb836d4d6e45724a95c5ca1fdbd30ebd66b1)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "typeArn", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="typeName")
+    def type_name(self) -> typing.Optional[builtins.str]:
+        '''The unique name for your hook.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "typeName"))
+
+    @type_name.setter
+    def type_name(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__84b67709252725d1f5ed0113558f6ddd94c0f17e7aadee85cf241f59a8eb5585)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "typeName", value) # pyright: ignore[reportArgumentType]
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_cloudformation.CfnHookTypeConfigProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "configuration": "configuration",
+        "configuration_alias": "configurationAlias",
+        "type_arn": "typeArn",
+        "type_name": "typeName",
+    },
+)
+class CfnHookTypeConfigProps:
+    def __init__(
+        self,
+        *,
+        configuration: builtins.str,
+        configuration_alias: typing.Optional[builtins.str] = None,
+        type_arn: typing.Optional[builtins.str] = None,
+        type_name: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnHookTypeConfig``.
+
+        :param configuration: Specifies the activated hook type configuration, in this AWS account and AWS Region . You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
+        :param configuration_alias: Specifies the activated hook type configuration, in this AWS account and AWS Region . Defaults to ``default`` alias. Hook types currently support default configuration alias. Default: - "default"
+        :param type_arn: The Amazon Resource Number (ARN) for the hook to set ``Configuration`` for. You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
+        :param type_name: The unique name for your hook. Specifies a three-part namespace for your hook, with a recommended pattern of ``Organization::Service::Hook`` . You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hooktypeconfig.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_cloudformation as cloudformation
+            
+            cfn_hook_type_config_props = cloudformation.CfnHookTypeConfigProps(
+                configuration="configuration",
+            
+                # the properties below are optional
+                configuration_alias="configurationAlias",
+                type_arn="typeArn",
+                type_name="typeName"
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__ef5f9608def2c7b14e7449a6bceadbd90b6e5242e86707d305d4923d050f8f9a)
+            check_type(argname="argument configuration", value=configuration, expected_type=type_hints["configuration"])
+            check_type(argname="argument configuration_alias", value=configuration_alias, expected_type=type_hints["configuration_alias"])
+            check_type(argname="argument type_arn", value=type_arn, expected_type=type_hints["type_arn"])
+            check_type(argname="argument type_name", value=type_name, expected_type=type_hints["type_name"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "configuration": configuration,
+        }
+        if configuration_alias is not None:
+            self._values["configuration_alias"] = configuration_alias
+        if type_arn is not None:
+            self._values["type_arn"] = type_arn
+        if type_name is not None:
+            self._values["type_name"] = type_name
+
+    @builtins.property
+    def configuration(self) -> builtins.str:
+        '''Specifies the activated hook type configuration, in this AWS account and AWS Region .
+
+        You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hooktypeconfig.html#cfn-cloudformation-hooktypeconfig-configuration
+        '''
+        result = self._values.get("configuration")
+        assert result is not None, "Required property 'configuration' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def configuration_alias(self) -> typing.Optional[builtins.str]:
+        '''Specifies the activated hook type configuration, in this AWS account and AWS Region .
+
+        Defaults to ``default`` alias. Hook types currently support default configuration alias.
+
+        :default: - "default"
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hooktypeconfig.html#cfn-cloudformation-hooktypeconfig-configurationalias
+        '''
+        result = self._values.get("configuration_alias")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def type_arn(self) -> typing.Optional[builtins.str]:
+        '''The Amazon Resource Number (ARN) for the hook to set ``Configuration`` for.
+
+        You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hooktypeconfig.html#cfn-cloudformation-hooktypeconfig-typearn
+        '''
+        result = self._values.get("type_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def type_name(self) -> typing.Optional[builtins.str]:
+        '''The unique name for your hook.
+
+        Specifies a three-part namespace for your hook, with a recommended pattern of ``Organization::Service::Hook`` .
+
+        You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hooktypeconfig.html#cfn-cloudformation-hooktypeconfig-typename
+        '''
+        result = self._values.get("type_name")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnHookTypeConfigProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.implements(_IInspectable_c2943556)
+class CfnHookVersion(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_cloudformation.CfnHookVersion",
+):
+    '''The ``HookVersion`` resource publishes new or first hook version to the AWS CloudFormation registry.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookversion.html
+    :cloudformationResource: AWS::CloudFormation::HookVersion
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_cloudformation as cloudformation
+        
+        cfn_hook_version = cloudformation.CfnHookVersion(self, "MyCfnHookVersion",
+            schema_handler_package="schemaHandlerPackage",
+            type_name="typeName",
+        
+            # the properties below are optional
+            execution_role_arn="executionRoleArn",
+            logging_config=cloudformation.CfnHookVersion.LoggingConfigProperty(
+                log_group_name="logGroupName",
+                log_role_arn="logRoleArn"
+            )
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        schema_handler_package: builtins.str,
+        type_name: builtins.str,
+        execution_role_arn: typing.Optional[builtins.str] = None,
+        logging_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnHookVersion.LoggingConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param schema_handler_package: A URL to the Amazon S3 bucket containing the hook project package that contains the necessary files for the hook you want to register. For information on generating a schema handler package for the resource you want to register, see `submit <https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/resource-type-cli-submit.html>`_ in the *CloudFormation CLI User Guide for Extension Development* . .. epigraph:: The user registering the resource must be able to access the package in the S3 bucket. That's, the user must have `GetObject <https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html>`_ permissions for the schema handler package. For more information, see `Actions, Resources, and Condition Keys for Amazon S3 <https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazons3.html>`_ in the *AWS Identity and Access Management User Guide* .
+        :param type_name: The unique name for your hook. Specifies a three-part namespace for your hook, with a recommended pattern of ``Organization::Service::Hook`` . .. epigraph:: The following organization namespaces are reserved and can't be used in your hook type names: - ``Alexa`` - ``AMZN`` - ``Amazon`` - ``ASK`` - ``AWS`` - ``Custom`` - ``Dev``
+        :param execution_role_arn: The Amazon Resource Name (ARN) of the task execution role that grants the hook permission.
+        :param logging_config: Contains logging configuration information for an extension.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__291bd220d9e7cd7e2d0ca851a8919b3ac012e0d7a45a664cf291d6381de23d73)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
-        props = CfnHookTypeConfigProps(
-            configuration=configuration,
-            configuration_alias=configuration_alias,
-            type_arn=type_arn,
+        props = CfnHookVersionProps(
+            schema_handler_package=schema_handler_package,
             type_name=type_name,
+            execution_role_arn=execution_role_arn,
+            logging_config=logging_config,
         )
 
         jsii.create(self.__class__, self, [scope, id, props])
@@ -556,7 +1853,7 @@ class CfnHookTypeConfig(
         :param inspector: tree inspector to collect and process attributes.
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__64d031e26b8bd0eeb56b31d7de08efef921b07640fe30239018c4b9b54f75af3)
+            type_hints = typing.get_type_hints(_typecheckingstub__19d9ff1b2b94a1214e3523199f203ce84bb6818d8221d1c9c8864607fd68ed54)
             check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
         return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
 
@@ -569,7 +1866,7 @@ class CfnHookTypeConfig(
         :param props: -
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__152138584317142b159bc64a674adbec428e62f1899b9285a49a4b8e3bb752bd)
+            type_hints = typing.get_type_hints(_typecheckingstub__373bbf4ceb7d1c3f9739457d175b6e990bef886865f570c651e71104ae299479)
             check_type(argname="argument props", value=props, expected_type=type_hints["props"])
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
 
@@ -580,13 +1877,54 @@ class CfnHookTypeConfig(
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
     @builtins.property
-    @jsii.member(jsii_name="attrConfigurationArn")
-    def attr_configuration_arn(self) -> builtins.str:
-        '''The Amazon Resource Number (ARN) of the activated hook type configuration, in this account and Region.
+    @jsii.member(jsii_name="attrArn")
+    def attr_arn(self) -> builtins.str:
+        '''The Amazon Resource Name (ARN) of the hook.
 
-        :cloudformationAttribute: ConfigurationArn
+        :cloudformationAttribute: Arn
         '''
-        return typing.cast(builtins.str, jsii.get(self, "attrConfigurationArn"))
+        return typing.cast(builtins.str, jsii.get(self, "attrArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrIsDefaultVersion")
+    def attr_is_default_version(self) -> _IResolvable_da3f097b:
+        '''Whether the specified hook version is set as the default version.
+
+        :cloudformationAttribute: IsDefaultVersion
+        '''
+        return typing.cast(_IResolvable_da3f097b, jsii.get(self, "attrIsDefaultVersion"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrTypeArn")
+    def attr_type_arn(self) -> builtins.str:
+        '''The Amazon Resource Number (ARN) assigned to this version of the hook.
+
+        :cloudformationAttribute: TypeArn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrTypeArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrVersionId")
+    def attr_version_id(self) -> builtins.str:
+        '''The ID of this version of the hook.
+
+        :cloudformationAttribute: VersionId
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrVersionId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrVisibility")
+    def attr_visibility(self) -> builtins.str:
+        '''The scope at which the resource is visible and usable in CloudFormation operations.
+
+        Valid values include:
+
+        - ``PRIVATE`` : The resource is only visible and usable within the account in which it's registered. CloudFormation marks any resources you register as ``PRIVATE`` .
+        - ``PUBLIC`` : The resource is publicly visible and usable within any Amazon account.
+
+        :cloudformationAttribute: Visibility
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrVisibility"))
 
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
@@ -594,85 +1932,160 @@ class CfnHookTypeConfig(
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
     @builtins.property
-    @jsii.member(jsii_name="configuration")
-    def configuration(self) -> builtins.str:
-        '''Specifies the activated hook type configuration, in this AWS account and AWS Region .'''
-        return typing.cast(builtins.str, jsii.get(self, "configuration"))
+    @jsii.member(jsii_name="schemaHandlerPackage")
+    def schema_handler_package(self) -> builtins.str:
+        '''A URL to the Amazon S3 bucket containing the hook project package that contains the necessary files for the hook you want to register.'''
+        return typing.cast(builtins.str, jsii.get(self, "schemaHandlerPackage"))
 
-    @configuration.setter
-    def configuration(self, value: builtins.str) -> None:
+    @schema_handler_package.setter
+    def schema_handler_package(self, value: builtins.str) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__3847791ddd5530d8a9d2144538417d1a4cf5fb909bd613d41c5905e02d37bb9a)
+            type_hints = typing.get_type_hints(_typecheckingstub__0efb96dfc84b17d40a50018cd6d23e3c296865fd07b6996b365c17a092ce873c)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "configuration", value) # pyright: ignore[reportArgumentType]
+        jsii.set(self, "schemaHandlerPackage", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="typeName")
+    def type_name(self) -> builtins.str:
+        '''The unique name for your hook.'''
+        return typing.cast(builtins.str, jsii.get(self, "typeName"))
+
+    @type_name.setter
+    def type_name(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__30df538b23952e625e940e55d9e80b1642e22eea6fc3b3850d26f16b544d134d)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "typeName", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="executionRoleArn")
+    def execution_role_arn(self) -> typing.Optional[builtins.str]:
+        '''The Amazon Resource Name (ARN) of the task execution role that grants the hook permission.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "executionRoleArn"))
+
+    @execution_role_arn.setter
+    def execution_role_arn(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__2cb4f09410ca3ef9c85888607e8ac924121a6fe32ab21f62e93aa2cc02b1130a)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "executionRoleArn", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="loggingConfig")
+    def logging_config(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnHookVersion.LoggingConfigProperty"]]:
+        '''Contains logging configuration information for an extension.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnHookVersion.LoggingConfigProperty"]], jsii.get(self, "loggingConfig"))
+
+    @logging_config.setter
+    def logging_config(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnHookVersion.LoggingConfigProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__2b1199d24d006c1117662bdfbc72f2cbbbd5b4d4138b339988fd36100745a337)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "loggingConfig", value) # pyright: ignore[reportArgumentType]
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_cloudformation.CfnHookVersion.LoggingConfigProperty",
+        jsii_struct_bases=[],
+        name_mapping={"log_group_name": "logGroupName", "log_role_arn": "logRoleArn"},
+    )
+    class LoggingConfigProperty:
+        def __init__(
+            self,
+            *,
+            log_group_name: typing.Optional[builtins.str] = None,
+            log_role_arn: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''The ``LoggingConfig`` property type specifies logging configuration information for an extension.
+
+            :param log_group_name: The Amazon CloudWatch Logs group to which CloudFormation sends error logging information when invoking the extension's handlers.
+            :param log_role_arn: The Amazon Resource Name (ARN) of the role that CloudFormation should assume when sending log entries to CloudWatch Logs.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-hookversion-loggingconfig.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_cloudformation as cloudformation
+                
+                logging_config_property = cloudformation.CfnHookVersion.LoggingConfigProperty(
+                    log_group_name="logGroupName",
+                    log_role_arn="logRoleArn"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__c3186540a164984c66b6fb1ac418c16e60743db883585e9275304381fae9a1cf)
+                check_type(argname="argument log_group_name", value=log_group_name, expected_type=type_hints["log_group_name"])
+                check_type(argname="argument log_role_arn", value=log_role_arn, expected_type=type_hints["log_role_arn"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if log_group_name is not None:
+                self._values["log_group_name"] = log_group_name
+            if log_role_arn is not None:
+                self._values["log_role_arn"] = log_role_arn
 
-    @builtins.property
-    @jsii.member(jsii_name="configurationAlias")
-    def configuration_alias(self) -> typing.Optional[builtins.str]:
-        '''Specifies the activated hook type configuration, in this AWS account and AWS Region .'''
-        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "configurationAlias"))
+        @builtins.property
+        def log_group_name(self) -> typing.Optional[builtins.str]:
+            '''The Amazon CloudWatch Logs group to which CloudFormation sends error logging information when invoking the extension's handlers.
 
-    @configuration_alias.setter
-    def configuration_alias(self, value: typing.Optional[builtins.str]) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__649cdf62ea09d9e4b72042f283c05b766e052006f59f2d05f9a6d2eab2ea396a)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "configurationAlias", value) # pyright: ignore[reportArgumentType]
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-hookversion-loggingconfig.html#cfn-cloudformation-hookversion-loggingconfig-loggroupname
+            '''
+            result = self._values.get("log_group_name")
+            return typing.cast(typing.Optional[builtins.str], result)
 
-    @builtins.property
-    @jsii.member(jsii_name="typeArn")
-    def type_arn(self) -> typing.Optional[builtins.str]:
-        '''The Amazon Resource Number (ARN) for the hook to set ``Configuration`` for.'''
-        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "typeArn"))
+        @builtins.property
+        def log_role_arn(self) -> typing.Optional[builtins.str]:
+            '''The Amazon Resource Name (ARN) of the role that CloudFormation should assume when sending log entries to CloudWatch Logs.
 
-    @type_arn.setter
-    def type_arn(self, value: typing.Optional[builtins.str]) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__b787dd89e7baba7e0a6ac2766dafcb836d4d6e45724a95c5ca1fdbd30ebd66b1)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "typeArn", value) # pyright: ignore[reportArgumentType]
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-hookversion-loggingconfig.html#cfn-cloudformation-hookversion-loggingconfig-logrolearn
+            '''
+            result = self._values.get("log_role_arn")
+            return typing.cast(typing.Optional[builtins.str], result)
 
-    @builtins.property
-    @jsii.member(jsii_name="typeName")
-    def type_name(self) -> typing.Optional[builtins.str]:
-        '''The unique name for your hook.'''
-        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "typeName"))
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
 
-    @type_name.setter
-    def type_name(self, value: typing.Optional[builtins.str]) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__84b67709252725d1f5ed0113558f6ddd94c0f17e7aadee85cf241f59a8eb5585)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "typeName", value) # pyright: ignore[reportArgumentType]
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "LoggingConfigProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
 
 
 @jsii.data_type(
-    jsii_type="aws-cdk-lib.aws_cloudformation.CfnHookTypeConfigProps",
+    jsii_type="aws-cdk-lib.aws_cloudformation.CfnHookVersionProps",
     jsii_struct_bases=[],
     name_mapping={
-        "configuration": "configuration",
-        "configuration_alias": "configurationAlias",
-        "type_arn": "typeArn",
+        "schema_handler_package": "schemaHandlerPackage",
         "type_name": "typeName",
+        "execution_role_arn": "executionRoleArn",
+        "logging_config": "loggingConfig",
     },
 )
-class CfnHookTypeConfigProps:
+class CfnHookVersionProps:
     def __init__(
         self,
         *,
-        configuration: builtins.str,
-        configuration_alias: typing.Optional[builtins.str] = None,
-        type_arn: typing.Optional[builtins.str] = None,
-        type_name: typing.Optional[builtins.str] = None,
+        schema_handler_package: builtins.str,
+        type_name: builtins.str,
+        execution_role_arn: typing.Optional[builtins.str] = None,
+        logging_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnHookVersion.LoggingConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''Properties for defining a ``CfnHookTypeConfig``.
+        '''Properties for defining a ``CfnHookVersion``.
 
-        :param configuration: Specifies the activated hook type configuration, in this AWS account and AWS Region . You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
-        :param configuration_alias: Specifies the activated hook type configuration, in this AWS account and AWS Region . Defaults to ``default`` alias. Hook types currently support default configuration alias. Default: - "default"
-        :param type_arn: The Amazon Resource Number (ARN) for the hook to set ``Configuration`` for. You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
-        :param type_name: The unique name for your hook. Specifies a three-part namespace for your hook, with a recommended pattern of ``Organization::Service::Hook`` . You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
+        :param schema_handler_package: A URL to the Amazon S3 bucket containing the hook project package that contains the necessary files for the hook you want to register. For information on generating a schema handler package for the resource you want to register, see `submit <https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/resource-type-cli-submit.html>`_ in the *CloudFormation CLI User Guide for Extension Development* . .. epigraph:: The user registering the resource must be able to access the package in the S3 bucket. That's, the user must have `GetObject <https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html>`_ permissions for the schema handler package. For more information, see `Actions, Resources, and Condition Keys for Amazon S3 <https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazons3.html>`_ in the *AWS Identity and Access Management User Guide* .
+        :param type_name: The unique name for your hook. Specifies a three-part namespace for your hook, with a recommended pattern of ``Organization::Service::Hook`` . .. epigraph:: The following organization namespaces are reserved and can't be used in your hook type names: - ``Alexa`` - ``AMZN`` - ``Amazon`` - ``ASK`` - ``AWS`` - ``Custom`` - ``Dev``
+        :param execution_role_arn: The Amazon Resource Name (ARN) of the task execution role that grants the hook permission.
+        :param logging_config: Contains logging configuration information for an extension.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hooktypeconfig.html
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookversion.html
         :exampleMetadata: fixture=_generated
 
         Example::
@@ -681,79 +2094,90 @@ class CfnHookTypeConfigProps:
             # The values are placeholders you should change.
             from aws_cdk import aws_cloudformation as cloudformation
             
-            cfn_hook_type_config_props = cloudformation.CfnHookTypeConfigProps(
-                configuration="configuration",
+            cfn_hook_version_props = cloudformation.CfnHookVersionProps(
+                schema_handler_package="schemaHandlerPackage",
+                type_name="typeName",
             
                 # the properties below are optional
-                configuration_alias="configurationAlias",
-                type_arn="typeArn",
-                type_name="typeName"
+                execution_role_arn="executionRoleArn",
+                logging_config=cloudformation.CfnHookVersion.LoggingConfigProperty(
+                    log_group_name="logGroupName",
+                    log_role_arn="logRoleArn"
+                )
             )
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__ef5f9608def2c7b14e7449a6bceadbd90b6e5242e86707d305d4923d050f8f9a)
-            check_type(argname="argument configuration", value=configuration, expected_type=type_hints["configuration"])
-            check_type(argname="argument configuration_alias", value=configuration_alias, expected_type=type_hints["configuration_alias"])
-            check_type(argname="argument type_arn", value=type_arn, expected_type=type_hints["type_arn"])
+            type_hints = typing.get_type_hints(_typecheckingstub__7a9bb2ef202f6ed27272b4d9787339d2a26c63beb648e39f3c4977200bcc65b1)
+            check_type(argname="argument schema_handler_package", value=schema_handler_package, expected_type=type_hints["schema_handler_package"])
             check_type(argname="argument type_name", value=type_name, expected_type=type_hints["type_name"])
+            check_type(argname="argument execution_role_arn", value=execution_role_arn, expected_type=type_hints["execution_role_arn"])
+            check_type(argname="argument logging_config", value=logging_config, expected_type=type_hints["logging_config"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
-            "configuration": configuration,
+            "schema_handler_package": schema_handler_package,
+            "type_name": type_name,
         }
-        if configuration_alias is not None:
-            self._values["configuration_alias"] = configuration_alias
-        if type_arn is not None:
-            self._values["type_arn"] = type_arn
-        if type_name is not None:
-            self._values["type_name"] = type_name
+        if execution_role_arn is not None:
+            self._values["execution_role_arn"] = execution_role_arn
+        if logging_config is not None:
+            self._values["logging_config"] = logging_config
 
     @builtins.property
-    def configuration(self) -> builtins.str:
-        '''Specifies the activated hook type configuration, in this AWS account and AWS Region .
+    def schema_handler_package(self) -> builtins.str:
+        '''A URL to the Amazon S3 bucket containing the hook project package that contains the necessary files for the hook you want to register.
 
-        You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
+        For information on generating a schema handler package for the resource you want to register, see `submit <https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/resource-type-cli-submit.html>`_ in the *CloudFormation CLI User Guide for Extension Development* .
+        .. epigraph::
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hooktypeconfig.html#cfn-cloudformation-hooktypeconfig-configuration
+           The user registering the resource must be able to access the package in the S3 bucket. That's, the user must have `GetObject <https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html>`_ permissions for the schema handler package. For more information, see `Actions, Resources, and Condition Keys for Amazon S3 <https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazons3.html>`_ in the *AWS Identity and Access Management User Guide* .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookversion.html#cfn-cloudformation-hookversion-schemahandlerpackage
         '''
-        result = self._values.get("configuration")
-        assert result is not None, "Required property 'configuration' is missing"
+        result = self._values.get("schema_handler_package")
+        assert result is not None, "Required property 'schema_handler_package' is missing"
         return typing.cast(builtins.str, result)
 
     @builtins.property
-    def configuration_alias(self) -> typing.Optional[builtins.str]:
-        '''Specifies the activated hook type configuration, in this AWS account and AWS Region .
+    def type_name(self) -> builtins.str:
+        '''The unique name for your hook.
 
-        Defaults to ``default`` alias. Hook types currently support default configuration alias.
+        Specifies a three-part namespace for your hook, with a recommended pattern of ``Organization::Service::Hook`` .
+        .. epigraph::
 
-        :default: - "default"
+           The following organization namespaces are reserved and can't be used in your hook type names:
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hooktypeconfig.html#cfn-cloudformation-hooktypeconfig-configurationalias
+           - ``Alexa``
+           - ``AMZN``
+           - ``Amazon``
+           - ``ASK``
+           - ``AWS``
+           - ``Custom``
+           - ``Dev``
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookversion.html#cfn-cloudformation-hookversion-typename
         '''
-        result = self._values.get("configuration_alias")
-        return typing.cast(typing.Optional[builtins.str], result)
+        result = self._values.get("type_name")
+        assert result is not None, "Required property 'type_name' is missing"
+        return typing.cast(builtins.str, result)
 
     @builtins.property
-    def type_arn(self) -> typing.Optional[builtins.str]:
-        '''The Amazon Resource Number (ARN) for the hook to set ``Configuration`` for.
-
-        You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
+    def execution_role_arn(self) -> typing.Optional[builtins.str]:
+        '''The Amazon Resource Name (ARN) of the task execution role that grants the hook permission.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hooktypeconfig.html#cfn-cloudformation-hooktypeconfig-typearn
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookversion.html#cfn-cloudformation-hookversion-executionrolearn
         '''
-        result = self._values.get("type_arn")
+        result = self._values.get("execution_role_arn")
         return typing.cast(typing.Optional[builtins.str], result)
 
     @builtins.property
-    def type_name(self) -> typing.Optional[builtins.str]:
-        '''The unique name for your hook.
-
-        Specifies a three-part namespace for your hook, with a recommended pattern of ``Organization::Service::Hook`` .
-
-        You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
+    def logging_config(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnHookVersion.LoggingConfigProperty]]:
+        '''Contains logging configuration information for an extension.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hooktypeconfig.html#cfn-cloudformation-hooktypeconfig-typename
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookversion.html#cfn-cloudformation-hookversion-loggingconfig
         '''
-        result = self._values.get("type_name")
-        return typing.cast(typing.Optional[builtins.str], result)
+        result = self._values.get("logging_config")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnHookVersion.LoggingConfigProperty]], result)
 
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
@@ -762,21 +2186,21 @@ class CfnHookTypeConfigProps:
         return not (rhs == self)
 
     def __repr__(self) -> str:
-        return "CfnHookTypeConfigProps(%s)" % ", ".join(
+        return "CfnHookVersionProps(%s)" % ", ".join(
             k + "=" + repr(v) for k, v in self._values.items()
         )
 
 
 @jsii.implements(_IInspectable_c2943556)
-class CfnHookVersion(
+class CfnLambdaHook(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
-    jsii_type="aws-cdk-lib.aws_cloudformation.CfnHookVersion",
+    jsii_type="aws-cdk-lib.aws_cloudformation.CfnLambdaHook",
 ):
-    '''The ``HookVersion`` resource publishes new or first hook version to the AWS CloudFormation registry.
+    '''This is a CloudFormation resource for the first-party AWS::Hooks::LambdaHook.
 
-    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookversion.html
-    :cloudformationResource: AWS::CloudFormation::HookVersion
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-lambdahook.html
+    :cloudformationResource: AWS::CloudFormation::LambdaHook
     :exampleMetadata: fixture=_generated
 
     Example::
@@ -785,15 +2209,32 @@ class CfnHookVersion(
         # The values are placeholders you should change.
         from aws_cdk import aws_cloudformation as cloudformation
         
-        cfn_hook_version = cloudformation.CfnHookVersion(self, "MyCfnHookVersion",
-            schema_handler_package="schemaHandlerPackage",
-            type_name="typeName",
+        cfn_lambda_hook = cloudformation.CfnLambdaHook(self, "MyCfnLambdaHook",
+            alias="alias",
+            execution_role="executionRole",
+            failure_mode="failureMode",
+            hook_status="hookStatus",
+            lambda_function="lambdaFunction",
+            target_operations=["targetOperations"],
         
             # the properties below are optional
-            execution_role_arn="executionRoleArn",
-            logging_config=cloudformation.CfnHookVersion.LoggingConfigProperty(
-                log_group_name="logGroupName",
-                log_role_arn="logRoleArn"
+            stack_filters=cloudformation.CfnLambdaHook.StackFiltersProperty(
+                filtering_criteria="filteringCriteria",
+        
+                # the properties below are optional
+                stack_names=cloudformation.CfnLambdaHook.StackNamesProperty(
+                    exclude=["exclude"],
+                    include=["include"]
+                ),
+                stack_roles=cloudformation.CfnLambdaHook.StackRolesProperty(
+                    exclude=["exclude"],
+                    include=["include"]
+                )
+            ),
+            target_filters=cloudformation.CfnLambdaHook.TargetFiltersProperty(
+                actions=["actions"],
+                invocation_points=["invocationPoints"],
+                target_names=["targetNames"]
             )
         )
     '''
@@ -803,28 +2244,40 @@ class CfnHookVersion(
         scope: _constructs_77d1e7e8.Construct,
         id: builtins.str,
         *,
-        schema_handler_package: builtins.str,
-        type_name: builtins.str,
-        execution_role_arn: typing.Optional[builtins.str] = None,
-        logging_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnHookVersion.LoggingConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        alias: builtins.str,
+        execution_role: builtins.str,
+        failure_mode: builtins.str,
+        hook_status: builtins.str,
+        lambda_function: builtins.str,
+        target_operations: typing.Sequence[builtins.str],
+        stack_filters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnLambdaHook.StackFiltersProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        target_filters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnLambdaHook.TargetFiltersProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param schema_handler_package: A URL to the Amazon S3 bucket containing the hook project package that contains the necessary files for the hook you want to register. For information on generating a schema handler package for the resource you want to register, see `submit <https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/resource-type-cli-submit.html>`_ in the *CloudFormation CLI User Guide for Extension Development* . .. epigraph:: The user registering the resource must be able to access the package in the S3 bucket. That's, the user must have `GetObject <https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html>`_ permissions for the schema handler package. For more information, see `Actions, Resources, and Condition Keys for Amazon S3 <https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazons3.html>`_ in the *AWS Identity and Access Management User Guide* .
-        :param type_name: The unique name for your hook. Specifies a three-part namespace for your hook, with a recommended pattern of ``Organization::Service::Hook`` . .. epigraph:: The following organization namespaces are reserved and can't be used in your hook type names: - ``Alexa`` - ``AMZN`` - ``Amazon`` - ``ASK`` - ``AWS`` - ``Custom`` - ``Dev``
-        :param execution_role_arn: The Amazon Resource Name (ARN) of the task execution role that grants the hook permission.
-        :param logging_config: Contains logging configuration information for an extension.
+        :param alias: The typename alias for the hook.
+        :param execution_role: IAM Role ARN.
+        :param failure_mode: Attribute to specify CloudFormation behavior on hook failure.
+        :param hook_status: Attribute to specify which stacks this hook applies to or should get invoked for. Default: - "ENABLED"
+        :param lambda_function: Amazon Resource Name (ARN), Partial ARN, name, version, or alias of the Lambda function to invoke with this hook.
+        :param target_operations: Which operations should this Hook run against? Resource changes, stacks or change sets.
+        :param stack_filters: Filters to allow hooks to target specific stack attributes.
+        :param target_filters: 
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__291bd220d9e7cd7e2d0ca851a8919b3ac012e0d7a45a664cf291d6381de23d73)
+            type_hints = typing.get_type_hints(_typecheckingstub__fec9ac58a382959177810e26366e5dddc9f912aaf73b09411981c9ecbce1010a)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
-        props = CfnHookVersionProps(
-            schema_handler_package=schema_handler_package,
-            type_name=type_name,
-            execution_role_arn=execution_role_arn,
-            logging_config=logging_config,
+        props = CfnLambdaHookProps(
+            alias=alias,
+            execution_role=execution_role,
+            failure_mode=failure_mode,
+            hook_status=hook_status,
+            lambda_function=lambda_function,
+            target_operations=target_operations,
+            stack_filters=stack_filters,
+            target_filters=target_filters,
         )
 
         jsii.create(self.__class__, self, [scope, id, props])
@@ -836,7 +2289,7 @@ class CfnHookVersion(
         :param inspector: tree inspector to collect and process attributes.
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__19d9ff1b2b94a1214e3523199f203ce84bb6818d8221d1c9c8864607fd68ed54)
+            type_hints = typing.get_type_hints(_typecheckingstub__809877a17bb251e60b67455af692a3e858d54a83a7fd506fc495b0e744c5fa80)
             check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
         return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
 
@@ -849,7 +2302,7 @@ class CfnHookVersion(
         :param props: -
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__373bbf4ceb7d1c3f9739457d175b6e990bef886865f570c651e71104ae299479)
+            type_hints = typing.get_type_hints(_typecheckingstub__25c057aed795d732097fbba6a4f084b53c5450d05b120d849b723c67df1943a3)
             check_type(argname="argument props", value=props, expected_type=type_hints["props"])
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
 
@@ -860,135 +2313,156 @@ class CfnHookVersion(
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
     @builtins.property
-    @jsii.member(jsii_name="attrArn")
-    def attr_arn(self) -> builtins.str:
-        '''The Amazon Resource Name (ARN) of the hook.
-
-        :cloudformationAttribute: Arn
-        '''
-        return typing.cast(builtins.str, jsii.get(self, "attrArn"))
-
-    @builtins.property
-    @jsii.member(jsii_name="attrIsDefaultVersion")
-    def attr_is_default_version(self) -> _IResolvable_da3f097b:
-        '''Whether the specified hook version is set as the default version.
+    @jsii.member(jsii_name="attrHookArn")
+    def attr_hook_arn(self) -> builtins.str:
+        '''The Amazon Resource Name (ARN) of the activated hook.
 
-        :cloudformationAttribute: IsDefaultVersion
+        :cloudformationAttribute: HookArn
         '''
-        return typing.cast(_IResolvable_da3f097b, jsii.get(self, "attrIsDefaultVersion"))
+        return typing.cast(builtins.str, jsii.get(self, "attrHookArn"))
 
     @builtins.property
-    @jsii.member(jsii_name="attrTypeArn")
-    def attr_type_arn(self) -> builtins.str:
-        '''The Amazon Resource Number (ARN) assigned to this version of the hook.
-
-        :cloudformationAttribute: TypeArn
-        '''
-        return typing.cast(builtins.str, jsii.get(self, "attrTypeArn"))
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
     @builtins.property
-    @jsii.member(jsii_name="attrVersionId")
-    def attr_version_id(self) -> builtins.str:
-        '''The ID of this version of the hook.
+    @jsii.member(jsii_name="alias")
+    def alias(self) -> builtins.str:
+        '''The typename alias for the hook.'''
+        return typing.cast(builtins.str, jsii.get(self, "alias"))
 
-        :cloudformationAttribute: VersionId
-        '''
-        return typing.cast(builtins.str, jsii.get(self, "attrVersionId"))
+    @alias.setter
+    def alias(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__30abbe1ec21200e639fa9f73b28a52e34aaa86d2d4428d4582a901ca4590f2f2)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "alias", value) # pyright: ignore[reportArgumentType]
 
-    @builtins.property
-    @jsii.member(jsii_name="attrVisibility")
-    def attr_visibility(self) -> builtins.str:
-        '''The scope at which the resource is visible and usable in CloudFormation operations.
+    @builtins.property
+    @jsii.member(jsii_name="executionRole")
+    def execution_role(self) -> builtins.str:
+        '''IAM Role ARN.'''
+        return typing.cast(builtins.str, jsii.get(self, "executionRole"))
 
-        Valid values include:
+    @execution_role.setter
+    def execution_role(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__74a69bae63a6117a8c7657e3cce5476b0a9029fb6ee2a7bc15a93cd8537ab7b5)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "executionRole", value) # pyright: ignore[reportArgumentType]
 
-        - ``PRIVATE`` : The resource is only visible and usable within the account in which it's registered. CloudFormation marks any resources you register as ``PRIVATE`` .
-        - ``PUBLIC`` : The resource is publicly visible and usable within any Amazon account.
+    @builtins.property
+    @jsii.member(jsii_name="failureMode")
+    def failure_mode(self) -> builtins.str:
+        '''Attribute to specify CloudFormation behavior on hook failure.'''
+        return typing.cast(builtins.str, jsii.get(self, "failureMode"))
 
-        :cloudformationAttribute: Visibility
-        '''
-        return typing.cast(builtins.str, jsii.get(self, "attrVisibility"))
+    @failure_mode.setter
+    def failure_mode(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__6284d889406f9c2de7868256183b7b1b36de24fc4d20e156592d9cef8cc351cd)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "failureMode", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
-    @jsii.member(jsii_name="cfnProperties")
-    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
-        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+    @jsii.member(jsii_name="hookStatus")
+    def hook_status(self) -> builtins.str:
+        '''Attribute to specify which stacks this hook applies to or should get invoked for.'''
+        return typing.cast(builtins.str, jsii.get(self, "hookStatus"))
+
+    @hook_status.setter
+    def hook_status(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1181d91ff3fd0986b5a5a6bb0a1eff2b0d58f9287a5a8e6d041fc0788e69a1b9)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "hookStatus", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
-    @jsii.member(jsii_name="schemaHandlerPackage")
-    def schema_handler_package(self) -> builtins.str:
-        '''A URL to the Amazon S3 bucket containing the hook project package that contains the necessary files for the hook you want to register.'''
-        return typing.cast(builtins.str, jsii.get(self, "schemaHandlerPackage"))
+    @jsii.member(jsii_name="lambdaFunction")
+    def lambda_function(self) -> builtins.str:
+        '''Amazon Resource Name (ARN), Partial ARN, name, version, or alias of the Lambda function to invoke with this hook.'''
+        return typing.cast(builtins.str, jsii.get(self, "lambdaFunction"))
 
-    @schema_handler_package.setter
-    def schema_handler_package(self, value: builtins.str) -> None:
+    @lambda_function.setter
+    def lambda_function(self, value: builtins.str) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__0efb96dfc84b17d40a50018cd6d23e3c296865fd07b6996b365c17a092ce873c)
+            type_hints = typing.get_type_hints(_typecheckingstub__8282c1280b41b55a28b532b0432b552d017237738107063dd37f45a932e0ccc3)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "schemaHandlerPackage", value) # pyright: ignore[reportArgumentType]
+        jsii.set(self, "lambdaFunction", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
-    @jsii.member(jsii_name="typeName")
-    def type_name(self) -> builtins.str:
-        '''The unique name for your hook.'''
-        return typing.cast(builtins.str, jsii.get(self, "typeName"))
+    @jsii.member(jsii_name="targetOperations")
+    def target_operations(self) -> typing.List[builtins.str]:
+        '''Which operations should this Hook run against?'''
+        return typing.cast(typing.List[builtins.str], jsii.get(self, "targetOperations"))
 
-    @type_name.setter
-    def type_name(self, value: builtins.str) -> None:
+    @target_operations.setter
+    def target_operations(self, value: typing.List[builtins.str]) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__30df538b23952e625e940e55d9e80b1642e22eea6fc3b3850d26f16b544d134d)
+            type_hints = typing.get_type_hints(_typecheckingstub__2cec88f2fd3131502965b66fc309237a615288eee912b64bbde3b05563645394)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "typeName", value) # pyright: ignore[reportArgumentType]
+        jsii.set(self, "targetOperations", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
-    @jsii.member(jsii_name="executionRoleArn")
-    def execution_role_arn(self) -> typing.Optional[builtins.str]:
-        '''The Amazon Resource Name (ARN) of the task execution role that grants the hook permission.'''
-        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "executionRoleArn"))
+    @jsii.member(jsii_name="stackFilters")
+    def stack_filters(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLambdaHook.StackFiltersProperty"]]:
+        '''Filters to allow hooks to target specific stack attributes.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLambdaHook.StackFiltersProperty"]], jsii.get(self, "stackFilters"))
 
-    @execution_role_arn.setter
-    def execution_role_arn(self, value: typing.Optional[builtins.str]) -> None:
+    @stack_filters.setter
+    def stack_filters(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLambdaHook.StackFiltersProperty"]],
+    ) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__2cb4f09410ca3ef9c85888607e8ac924121a6fe32ab21f62e93aa2cc02b1130a)
+            type_hints = typing.get_type_hints(_typecheckingstub__10bf8f291e923bd29e844f030043f31cdea31b613c9c8ad9eb3cd27ec79c080e)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "executionRoleArn", value) # pyright: ignore[reportArgumentType]
+        jsii.set(self, "stackFilters", value) # pyright: ignore[reportArgumentType]
 
     @builtins.property
-    @jsii.member(jsii_name="loggingConfig")
-    def logging_config(
+    @jsii.member(jsii_name="targetFilters")
+    def target_filters(
         self,
-    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnHookVersion.LoggingConfigProperty"]]:
-        '''Contains logging configuration information for an extension.'''
-        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnHookVersion.LoggingConfigProperty"]], jsii.get(self, "loggingConfig"))
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLambdaHook.TargetFiltersProperty"]]:
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLambdaHook.TargetFiltersProperty"]], jsii.get(self, "targetFilters"))
 
-    @logging_config.setter
-    def logging_config(
+    @target_filters.setter
+    def target_filters(
         self,
-        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnHookVersion.LoggingConfigProperty"]],
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLambdaHook.TargetFiltersProperty"]],
     ) -> None:
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__2b1199d24d006c1117662bdfbc72f2cbbbd5b4d4138b339988fd36100745a337)
+            type_hints = typing.get_type_hints(_typecheckingstub__37d3897a58b7133587d59ce7b2fc6e7c7f4c5ad1b3b3d9020dc5181c79c8e2d0)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "loggingConfig", value) # pyright: ignore[reportArgumentType]
+        jsii.set(self, "targetFilters", value) # pyright: ignore[reportArgumentType]
 
     @jsii.data_type(
-        jsii_type="aws-cdk-lib.aws_cloudformation.CfnHookVersion.LoggingConfigProperty",
+        jsii_type="aws-cdk-lib.aws_cloudformation.CfnLambdaHook.StackFiltersProperty",
         jsii_struct_bases=[],
-        name_mapping={"log_group_name": "logGroupName", "log_role_arn": "logRoleArn"},
+        name_mapping={
+            "filtering_criteria": "filteringCriteria",
+            "stack_names": "stackNames",
+            "stack_roles": "stackRoles",
+        },
     )
-    class LoggingConfigProperty:
+    class StackFiltersProperty:
         def __init__(
             self,
             *,
-            log_group_name: typing.Optional[builtins.str] = None,
-            log_role_arn: typing.Optional[builtins.str] = None,
+            filtering_criteria: builtins.str,
+            stack_names: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnLambdaHook.StackNamesProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+            stack_roles: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnLambdaHook.StackRolesProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         ) -> None:
-            '''The ``LoggingConfig`` property type specifies logging configuration information for an extension.
+            '''Filters to allow hooks to target specific stack attributes.
 
-            :param log_group_name: The Amazon CloudWatch Logs group to which CloudFormation sends error logging information when invoking the extension's handlers.
-            :param log_role_arn: The Amazon Resource Name (ARN) of the role that CloudFormation should assume when sending log entries to CloudWatch Logs.
+            :param filtering_criteria: Attribute to specify the filtering behavior. ANY will make the Hook pass if one filter matches. ALL will make the Hook pass if all filters match Default: - "ALL"
+            :param stack_names: List of stack names as filters.
+            :param stack_roles: List of stack roles that are performing the stack operations.
 
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-hookversion-loggingconfig.html
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-stackfilters.html
             :exampleMetadata: fixture=_generated
 
             Example::
@@ -997,38 +2471,138 @@ class CfnHookVersion(
                 # The values are placeholders you should change.
                 from aws_cdk import aws_cloudformation as cloudformation
                 
-                logging_config_property = cloudformation.CfnHookVersion.LoggingConfigProperty(
-                    log_group_name="logGroupName",
-                    log_role_arn="logRoleArn"
+                stack_filters_property = cloudformation.CfnLambdaHook.StackFiltersProperty(
+                    filtering_criteria="filteringCriteria",
+                
+                    # the properties below are optional
+                    stack_names=cloudformation.CfnLambdaHook.StackNamesProperty(
+                        exclude=["exclude"],
+                        include=["include"]
+                    ),
+                    stack_roles=cloudformation.CfnLambdaHook.StackRolesProperty(
+                        exclude=["exclude"],
+                        include=["include"]
+                    )
                 )
             '''
             if __debug__:
-                type_hints = typing.get_type_hints(_typecheckingstub__c3186540a164984c66b6fb1ac418c16e60743db883585e9275304381fae9a1cf)
-                check_type(argname="argument log_group_name", value=log_group_name, expected_type=type_hints["log_group_name"])
-                check_type(argname="argument log_role_arn", value=log_role_arn, expected_type=type_hints["log_role_arn"])
+                type_hints = typing.get_type_hints(_typecheckingstub__1c6825aca96c1ce7eaa02a7e659917eb747e2a75121b6c5d50ef421a9261e58e)
+                check_type(argname="argument filtering_criteria", value=filtering_criteria, expected_type=type_hints["filtering_criteria"])
+                check_type(argname="argument stack_names", value=stack_names, expected_type=type_hints["stack_names"])
+                check_type(argname="argument stack_roles", value=stack_roles, expected_type=type_hints["stack_roles"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "filtering_criteria": filtering_criteria,
+            }
+            if stack_names is not None:
+                self._values["stack_names"] = stack_names
+            if stack_roles is not None:
+                self._values["stack_roles"] = stack_roles
+
+        @builtins.property
+        def filtering_criteria(self) -> builtins.str:
+            '''Attribute to specify the filtering behavior.
+
+            ANY will make the Hook pass if one filter matches. ALL will make the Hook pass if all filters match
+
+            :default: - "ALL"
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-stackfilters.html#cfn-cloudformation-lambdahook-stackfilters-filteringcriteria
+            '''
+            result = self._values.get("filtering_criteria")
+            assert result is not None, "Required property 'filtering_criteria' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def stack_names(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLambdaHook.StackNamesProperty"]]:
+            '''List of stack names as filters.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-stackfilters.html#cfn-cloudformation-lambdahook-stackfilters-stacknames
+            '''
+            result = self._values.get("stack_names")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLambdaHook.StackNamesProperty"]], result)
+
+        @builtins.property
+        def stack_roles(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLambdaHook.StackRolesProperty"]]:
+            '''List of stack roles that are performing the stack operations.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-stackfilters.html#cfn-cloudformation-lambdahook-stackfilters-stackroles
+            '''
+            result = self._values.get("stack_roles")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnLambdaHook.StackRolesProperty"]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "StackFiltersProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_cloudformation.CfnLambdaHook.StackNamesProperty",
+        jsii_struct_bases=[],
+        name_mapping={"exclude": "exclude", "include": "include"},
+    )
+    class StackNamesProperty:
+        def __init__(
+            self,
+            *,
+            exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
+            include: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''List of stack names as filters.
+
+            :param exclude: List of stack names that the hook is going to be excluded from.
+            :param include: List of stack names that the hook is going to target.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-stacknames.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_cloudformation as cloudformation
+                
+                stack_names_property = cloudformation.CfnLambdaHook.StackNamesProperty(
+                    exclude=["exclude"],
+                    include=["include"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__b7566684a011915bedffb46298f71959895c8280827b3628a664f48b68aa5599)
+                check_type(argname="argument exclude", value=exclude, expected_type=type_hints["exclude"])
+                check_type(argname="argument include", value=include, expected_type=type_hints["include"])
             self._values: typing.Dict[builtins.str, typing.Any] = {}
-            if log_group_name is not None:
-                self._values["log_group_name"] = log_group_name
-            if log_role_arn is not None:
-                self._values["log_role_arn"] = log_role_arn
+            if exclude is not None:
+                self._values["exclude"] = exclude
+            if include is not None:
+                self._values["include"] = include
 
         @builtins.property
-        def log_group_name(self) -> typing.Optional[builtins.str]:
-            '''The Amazon CloudWatch Logs group to which CloudFormation sends error logging information when invoking the extension's handlers.
+        def exclude(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''List of stack names that the hook is going to be excluded from.
 
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-hookversion-loggingconfig.html#cfn-cloudformation-hookversion-loggingconfig-loggroupname
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-stacknames.html#cfn-cloudformation-lambdahook-stacknames-exclude
             '''
-            result = self._values.get("log_group_name")
-            return typing.cast(typing.Optional[builtins.str], result)
+            result = self._values.get("exclude")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
 
         @builtins.property
-        def log_role_arn(self) -> typing.Optional[builtins.str]:
-            '''The Amazon Resource Name (ARN) of the role that CloudFormation should assume when sending log entries to CloudWatch Logs.
+        def include(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''List of stack names that the hook is going to target.
 
-            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-hookversion-loggingconfig.html#cfn-cloudformation-hookversion-loggingconfig-logrolearn
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-stacknames.html#cfn-cloudformation-lambdahook-stacknames-include
             '''
-            result = self._values.get("log_role_arn")
-            return typing.cast(typing.Optional[builtins.str], result)
+            result = self._values.get("include")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
 
         def __eq__(self, rhs: typing.Any) -> builtins.bool:
             return isinstance(rhs, self.__class__) and rhs._values == self._values
@@ -1037,38 +2611,208 @@ class CfnHookVersion(
             return not (rhs == self)
 
         def __repr__(self) -> str:
-            return "LoggingConfigProperty(%s)" % ", ".join(
+            return "StackNamesProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_cloudformation.CfnLambdaHook.StackRolesProperty",
+        jsii_struct_bases=[],
+        name_mapping={"exclude": "exclude", "include": "include"},
+    )
+    class StackRolesProperty:
+        def __init__(
+            self,
+            *,
+            exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
+            include: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''List of stack roles that are performing the stack operations.
+
+            :param exclude: List of stack roles that the hook is going to be excluded from.
+            :param include: List of stack roles that the hook is going to target.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-stackroles.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_cloudformation as cloudformation
+                
+                stack_roles_property = cloudformation.CfnLambdaHook.StackRolesProperty(
+                    exclude=["exclude"],
+                    include=["include"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__5b3429ffb1654464d2c3e5029831647a0bf3172b44a425681964d5585c6cf02c)
+                check_type(argname="argument exclude", value=exclude, expected_type=type_hints["exclude"])
+                check_type(argname="argument include", value=include, expected_type=type_hints["include"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if exclude is not None:
+                self._values["exclude"] = exclude
+            if include is not None:
+                self._values["include"] = include
+
+        @builtins.property
+        def exclude(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''List of stack roles that the hook is going to be excluded from.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-stackroles.html#cfn-cloudformation-lambdahook-stackroles-exclude
+            '''
+            result = self._values.get("exclude")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        @builtins.property
+        def include(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''List of stack roles that the hook is going to target.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-stackroles.html#cfn-cloudformation-lambdahook-stackroles-include
+            '''
+            result = self._values.get("include")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "StackRolesProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_cloudformation.CfnLambdaHook.TargetFiltersProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "actions": "actions",
+            "invocation_points": "invocationPoints",
+            "target_names": "targetNames",
+        },
+    )
+    class TargetFiltersProperty:
+        def __init__(
+            self,
+            *,
+            actions: typing.Optional[typing.Sequence[builtins.str]] = None,
+            invocation_points: typing.Optional[typing.Sequence[builtins.str]] = None,
+            target_names: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''
+            :param actions: List of actions that the hook is going to target.
+            :param invocation_points: List of invocation points that the hook is going to target.
+            :param target_names: List of type names that the hook is going to target.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-targetfilters.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_cloudformation as cloudformation
+                
+                target_filters_property = cloudformation.CfnLambdaHook.TargetFiltersProperty(
+                    actions=["actions"],
+                    invocation_points=["invocationPoints"],
+                    target_names=["targetNames"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__6b7d133718b35659d76ef50f7b0d36492c3da19aa89cd0ec0d90af415b1383ba)
+                check_type(argname="argument actions", value=actions, expected_type=type_hints["actions"])
+                check_type(argname="argument invocation_points", value=invocation_points, expected_type=type_hints["invocation_points"])
+                check_type(argname="argument target_names", value=target_names, expected_type=type_hints["target_names"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if actions is not None:
+                self._values["actions"] = actions
+            if invocation_points is not None:
+                self._values["invocation_points"] = invocation_points
+            if target_names is not None:
+                self._values["target_names"] = target_names
+
+        @builtins.property
+        def actions(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''List of actions that the hook is going to target.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-targetfilters.html#cfn-cloudformation-lambdahook-targetfilters-actions
+            '''
+            result = self._values.get("actions")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        @builtins.property
+        def invocation_points(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''List of invocation points that the hook is going to target.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-targetfilters.html#cfn-cloudformation-lambdahook-targetfilters-invocationpoints
+            '''
+            result = self._values.get("invocation_points")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        @builtins.property
+        def target_names(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''List of type names that the hook is going to target.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-targetfilters.html#cfn-cloudformation-lambdahook-targetfilters-targetnames
+            '''
+            result = self._values.get("target_names")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "TargetFiltersProperty(%s)" % ", ".join(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
 
 @jsii.data_type(
-    jsii_type="aws-cdk-lib.aws_cloudformation.CfnHookVersionProps",
+    jsii_type="aws-cdk-lib.aws_cloudformation.CfnLambdaHookProps",
     jsii_struct_bases=[],
     name_mapping={
-        "schema_handler_package": "schemaHandlerPackage",
-        "type_name": "typeName",
-        "execution_role_arn": "executionRoleArn",
-        "logging_config": "loggingConfig",
+        "alias": "alias",
+        "execution_role": "executionRole",
+        "failure_mode": "failureMode",
+        "hook_status": "hookStatus",
+        "lambda_function": "lambdaFunction",
+        "target_operations": "targetOperations",
+        "stack_filters": "stackFilters",
+        "target_filters": "targetFilters",
     },
-)
-class CfnHookVersionProps:
-    def __init__(
-        self,
-        *,
-        schema_handler_package: builtins.str,
-        type_name: builtins.str,
-        execution_role_arn: typing.Optional[builtins.str] = None,
-        logging_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnHookVersion.LoggingConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
-    ) -> None:
-        '''Properties for defining a ``CfnHookVersion``.
-
-        :param schema_handler_package: A URL to the Amazon S3 bucket containing the hook project package that contains the necessary files for the hook you want to register. For information on generating a schema handler package for the resource you want to register, see `submit <https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/resource-type-cli-submit.html>`_ in the *CloudFormation CLI User Guide for Extension Development* . .. epigraph:: The user registering the resource must be able to access the package in the S3 bucket. That's, the user must have `GetObject <https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html>`_ permissions for the schema handler package. For more information, see `Actions, Resources, and Condition Keys for Amazon S3 <https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazons3.html>`_ in the *AWS Identity and Access Management User Guide* .
-        :param type_name: The unique name for your hook. Specifies a three-part namespace for your hook, with a recommended pattern of ``Organization::Service::Hook`` . .. epigraph:: The following organization namespaces are reserved and can't be used in your hook type names: - ``Alexa`` - ``AMZN`` - ``Amazon`` - ``ASK`` - ``AWS`` - ``Custom`` - ``Dev``
-        :param execution_role_arn: The Amazon Resource Name (ARN) of the task execution role that grants the hook permission.
-        :param logging_config: Contains logging configuration information for an extension.
-
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookversion.html
+)
+class CfnLambdaHookProps:
+    def __init__(
+        self,
+        *,
+        alias: builtins.str,
+        execution_role: builtins.str,
+        failure_mode: builtins.str,
+        hook_status: builtins.str,
+        lambda_function: builtins.str,
+        target_operations: typing.Sequence[builtins.str],
+        stack_filters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLambdaHook.StackFiltersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        target_filters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLambdaHook.TargetFiltersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnLambdaHook``.
+
+        :param alias: The typename alias for the hook.
+        :param execution_role: IAM Role ARN.
+        :param failure_mode: Attribute to specify CloudFormation behavior on hook failure.
+        :param hook_status: Attribute to specify which stacks this hook applies to or should get invoked for. Default: - "ENABLED"
+        :param lambda_function: Amazon Resource Name (ARN), Partial ARN, name, version, or alias of the Lambda function to invoke with this hook.
+        :param target_operations: Which operations should this Hook run against? Resource changes, stacks or change sets.
+        :param stack_filters: Filters to allow hooks to target specific stack attributes.
+        :param target_filters: 
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-lambdahook.html
         :exampleMetadata: fixture=_generated
 
         Example::
@@ -1077,90 +2821,142 @@ class CfnHookVersionProps:
             # The values are placeholders you should change.
             from aws_cdk import aws_cloudformation as cloudformation
             
-            cfn_hook_version_props = cloudformation.CfnHookVersionProps(
-                schema_handler_package="schemaHandlerPackage",
-                type_name="typeName",
+            cfn_lambda_hook_props = cloudformation.CfnLambdaHookProps(
+                alias="alias",
+                execution_role="executionRole",
+                failure_mode="failureMode",
+                hook_status="hookStatus",
+                lambda_function="lambdaFunction",
+                target_operations=["targetOperations"],
             
                 # the properties below are optional
-                execution_role_arn="executionRoleArn",
-                logging_config=cloudformation.CfnHookVersion.LoggingConfigProperty(
-                    log_group_name="logGroupName",
-                    log_role_arn="logRoleArn"
+                stack_filters=cloudformation.CfnLambdaHook.StackFiltersProperty(
+                    filtering_criteria="filteringCriteria",
+            
+                    # the properties below are optional
+                    stack_names=cloudformation.CfnLambdaHook.StackNamesProperty(
+                        exclude=["exclude"],
+                        include=["include"]
+                    ),
+                    stack_roles=cloudformation.CfnLambdaHook.StackRolesProperty(
+                        exclude=["exclude"],
+                        include=["include"]
+                    )
+                ),
+                target_filters=cloudformation.CfnLambdaHook.TargetFiltersProperty(
+                    actions=["actions"],
+                    invocation_points=["invocationPoints"],
+                    target_names=["targetNames"]
                 )
             )
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__7a9bb2ef202f6ed27272b4d9787339d2a26c63beb648e39f3c4977200bcc65b1)
-            check_type(argname="argument schema_handler_package", value=schema_handler_package, expected_type=type_hints["schema_handler_package"])
-            check_type(argname="argument type_name", value=type_name, expected_type=type_hints["type_name"])
-            check_type(argname="argument execution_role_arn", value=execution_role_arn, expected_type=type_hints["execution_role_arn"])
-            check_type(argname="argument logging_config", value=logging_config, expected_type=type_hints["logging_config"])
+            type_hints = typing.get_type_hints(_typecheckingstub__08ef8befa45effdca3c0a1b699ffb2fae0aaed2060b19e128bdcc021cfcb0b95)
+            check_type(argname="argument alias", value=alias, expected_type=type_hints["alias"])
+            check_type(argname="argument execution_role", value=execution_role, expected_type=type_hints["execution_role"])
+            check_type(argname="argument failure_mode", value=failure_mode, expected_type=type_hints["failure_mode"])
+            check_type(argname="argument hook_status", value=hook_status, expected_type=type_hints["hook_status"])
+            check_type(argname="argument lambda_function", value=lambda_function, expected_type=type_hints["lambda_function"])
+            check_type(argname="argument target_operations", value=target_operations, expected_type=type_hints["target_operations"])
+            check_type(argname="argument stack_filters", value=stack_filters, expected_type=type_hints["stack_filters"])
+            check_type(argname="argument target_filters", value=target_filters, expected_type=type_hints["target_filters"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
-            "schema_handler_package": schema_handler_package,
-            "type_name": type_name,
+            "alias": alias,
+            "execution_role": execution_role,
+            "failure_mode": failure_mode,
+            "hook_status": hook_status,
+            "lambda_function": lambda_function,
+            "target_operations": target_operations,
         }
-        if execution_role_arn is not None:
-            self._values["execution_role_arn"] = execution_role_arn
-        if logging_config is not None:
-            self._values["logging_config"] = logging_config
+        if stack_filters is not None:
+            self._values["stack_filters"] = stack_filters
+        if target_filters is not None:
+            self._values["target_filters"] = target_filters
 
     @builtins.property
-    def schema_handler_package(self) -> builtins.str:
-        '''A URL to the Amazon S3 bucket containing the hook project package that contains the necessary files for the hook you want to register.
+    def alias(self) -> builtins.str:
+        '''The typename alias for the hook.
 
-        For information on generating a schema handler package for the resource you want to register, see `submit <https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/resource-type-cli-submit.html>`_ in the *CloudFormation CLI User Guide for Extension Development* .
-        .. epigraph::
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-lambdahook.html#cfn-cloudformation-lambdahook-alias
+        '''
+        result = self._values.get("alias")
+        assert result is not None, "Required property 'alias' is missing"
+        return typing.cast(builtins.str, result)
 
-           The user registering the resource must be able to access the package in the S3 bucket. That's, the user must have `GetObject <https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html>`_ permissions for the schema handler package. For more information, see `Actions, Resources, and Condition Keys for Amazon S3 <https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazons3.html>`_ in the *AWS Identity and Access Management User Guide* .
+    @builtins.property
+    def execution_role(self) -> builtins.str:
+        '''IAM Role ARN.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookversion.html#cfn-cloudformation-hookversion-schemahandlerpackage
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-lambdahook.html#cfn-cloudformation-lambdahook-executionrole
         '''
-        result = self._values.get("schema_handler_package")
-        assert result is not None, "Required property 'schema_handler_package' is missing"
+        result = self._values.get("execution_role")
+        assert result is not None, "Required property 'execution_role' is missing"
         return typing.cast(builtins.str, result)
 
     @builtins.property
-    def type_name(self) -> builtins.str:
-        '''The unique name for your hook.
+    def failure_mode(self) -> builtins.str:
+        '''Attribute to specify CloudFormation behavior on hook failure.
 
-        Specifies a three-part namespace for your hook, with a recommended pattern of ``Organization::Service::Hook`` .
-        .. epigraph::
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-lambdahook.html#cfn-cloudformation-lambdahook-failuremode
+        '''
+        result = self._values.get("failure_mode")
+        assert result is not None, "Required property 'failure_mode' is missing"
+        return typing.cast(builtins.str, result)
 
-           The following organization namespaces are reserved and can't be used in your hook type names:
+    @builtins.property
+    def hook_status(self) -> builtins.str:
+        '''Attribute to specify which stacks this hook applies to or should get invoked for.
 
-           - ``Alexa``
-           - ``AMZN``
-           - ``Amazon``
-           - ``ASK``
-           - ``AWS``
-           - ``Custom``
-           - ``Dev``
+        :default: - "ENABLED"
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookversion.html#cfn-cloudformation-hookversion-typename
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-lambdahook.html#cfn-cloudformation-lambdahook-hookstatus
         '''
-        result = self._values.get("type_name")
-        assert result is not None, "Required property 'type_name' is missing"
+        result = self._values.get("hook_status")
+        assert result is not None, "Required property 'hook_status' is missing"
         return typing.cast(builtins.str, result)
 
     @builtins.property
-    def execution_role_arn(self) -> typing.Optional[builtins.str]:
-        '''The Amazon Resource Name (ARN) of the task execution role that grants the hook permission.
+    def lambda_function(self) -> builtins.str:
+        '''Amazon Resource Name (ARN), Partial ARN, name, version, or alias of the Lambda function to invoke with this hook.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookversion.html#cfn-cloudformation-hookversion-executionrolearn
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-lambdahook.html#cfn-cloudformation-lambdahook-lambdafunction
         '''
-        result = self._values.get("execution_role_arn")
-        return typing.cast(typing.Optional[builtins.str], result)
+        result = self._values.get("lambda_function")
+        assert result is not None, "Required property 'lambda_function' is missing"
+        return typing.cast(builtins.str, result)
 
     @builtins.property
-    def logging_config(
+    def target_operations(self) -> typing.List[builtins.str]:
+        '''Which operations should this Hook run against?
+
+        Resource changes, stacks or change sets.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-lambdahook.html#cfn-cloudformation-lambdahook-targetoperations
+        '''
+        result = self._values.get("target_operations")
+        assert result is not None, "Required property 'target_operations' is missing"
+        return typing.cast(typing.List[builtins.str], result)
+
+    @builtins.property
+    def stack_filters(
         self,
-    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnHookVersion.LoggingConfigProperty]]:
-        '''Contains logging configuration information for an extension.
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnLambdaHook.StackFiltersProperty]]:
+        '''Filters to allow hooks to target specific stack attributes.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookversion.html#cfn-cloudformation-hookversion-loggingconfig
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-lambdahook.html#cfn-cloudformation-lambdahook-stackfilters
         '''
-        result = self._values.get("logging_config")
-        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnHookVersion.LoggingConfigProperty]], result)
+        result = self._values.get("stack_filters")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnLambdaHook.StackFiltersProperty]], result)
+
+    @builtins.property
+    def target_filters(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnLambdaHook.TargetFiltersProperty]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-lambdahook.html#cfn-cloudformation-lambdahook-targetfilters
+        '''
+        result = self._values.get("target_filters")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnLambdaHook.TargetFiltersProperty]], result)
 
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
@@ -1169,7 +2965,7 @@ class CfnHookVersionProps:
         return not (rhs == self)
 
     def __repr__(self) -> str:
-        return "CfnHookVersionProps(%s)" % ", ".join(
+        return "CfnLambdaHookProps(%s)" % ", ".join(
             k + "=" + repr(v) for k, v in self._values.items()
         )
 
@@ -6188,12 +7984,16 @@ class CfnWaitConditionProps:
 __all__ = [
     "CfnCustomResource",
     "CfnCustomResourceProps",
+    "CfnGuardHook",
+    "CfnGuardHookProps",
     "CfnHookDefaultVersion",
     "CfnHookDefaultVersionProps",
     "CfnHookTypeConfig",
     "CfnHookTypeConfigProps",
     "CfnHookVersion",
     "CfnHookVersionProps",
+    "CfnLambdaHook",
+    "CfnLambdaHookProps",
     "CfnMacro",
     "CfnMacroProps",
     "CfnModuleDefaultVersion",
@@ -6264,6 +8064,161 @@ def _typecheckingstub__f766b9f5ea2582bff4d2cb33b19a38fbdabfbe380c61d04a056e8e0d2
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__03161d7a487fda6efdcca08ffddf765149d688cda393f699958050fcb318e260(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    alias: builtins.str,
+    execution_role: builtins.str,
+    failure_mode: builtins.str,
+    hook_status: builtins.str,
+    rule_location: typing.Union[_IResolvable_da3f097b, typing.Union[CfnGuardHook.S3LocationProperty, typing.Dict[builtins.str, typing.Any]]],
+    target_operations: typing.Sequence[builtins.str],
+    log_bucket: typing.Optional[builtins.str] = None,
+    options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnGuardHook.OptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    stack_filters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnGuardHook.StackFiltersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    target_filters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnGuardHook.TargetFiltersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__cec1fe7bbc90cf36ac842edcc8d50015b2dc2f2875aeb7e6253ff7c4e15aa338(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__f393185921422ec7e6581035e32a48e6114791074a5875d86aeed9dcd2841a82(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__77b1f76eb29c770288d0795c8dc53027c60e7bad04fcf11f03ad76a14e18731c(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__22a699f491c232b68e87da58b1e3798c0c543c42e6139bd091d5bc13dc38d691(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b51f06fa6d9c4bf815a03971bd117bd21aae0f56f3bcf6320d101a6affb4ee5e(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__45f72bea4f6d1a361234e272fa8b7591203fb732d4833409397c312ef2b338ee(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__5c9be7db879b9401cebdd59ef44b8e74245c171bce7b83e3ff646a725e30990d(
+    value: typing.Union[_IResolvable_da3f097b, CfnGuardHook.S3LocationProperty],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__158f2ec6b05d1bd8c5c76f62f2e4432b1caba87154d6a9367d1a4ffc6508d382(
+    value: typing.List[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__52841a36e60ee2e4dda1b97a80d4d8afdce08c6923b2bff3915731c490cc1fef(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__aa51fffdbd416f8c3f134e2ce1d54eb8592c7e9ab1fb1773814e14a6e9c3908c(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnGuardHook.OptionsProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__ba8e46c4263c84d663638542ea2e36bf64d6c580e18d333b70f96cde334f3311(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnGuardHook.StackFiltersProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__c81e70f0acb044921c8947467f93bf3568ecf5bceb007dbfd1211e597c8deb39(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnGuardHook.TargetFiltersProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__9b598c3b73355c67dcc3aa78319cd2f0d94b1f77b3311af71cc07b20334e0eca(
+    *,
+    input_params: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnGuardHook.S3LocationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__a1f9db65edb886b53a3ae52ab45b8328981676b11f96b8f1aabfebc3198bc5e5(
+    *,
+    uri: builtins.str,
+    version_id: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__1fdbc46050746c029db2f505b946b969ecb2a8c0835d3e20724e224a2c12d45b(
+    *,
+    filtering_criteria: builtins.str,
+    stack_names: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnGuardHook.StackNamesProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    stack_roles: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnGuardHook.StackRolesProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__57a38a30a3ccc5bb6875c74d99f0b1fe3ed5384017a5fee82f653914194e31c5(
+    *,
+    exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
+    include: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__19a166b14cd31cea92d76fbca0808b1b44774459a4d29121e91c2e20cd466e21(
+    *,
+    exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
+    include: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__378b3973374e7523256c5da2187494f5d2cfb4d85e28b4cc20e0b03edb7a4395(
+    *,
+    actions: typing.Optional[typing.Sequence[builtins.str]] = None,
+    invocation_points: typing.Optional[typing.Sequence[builtins.str]] = None,
+    target_names: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__102e29368f2c52ece5c053d50bb54873288bc91ca7d6f01a1ad3bb84ffdc3b76(
+    *,
+    alias: builtins.str,
+    execution_role: builtins.str,
+    failure_mode: builtins.str,
+    hook_status: builtins.str,
+    rule_location: typing.Union[_IResolvable_da3f097b, typing.Union[CfnGuardHook.S3LocationProperty, typing.Dict[builtins.str, typing.Any]]],
+    target_operations: typing.Sequence[builtins.str],
+    log_bucket: typing.Optional[builtins.str] = None,
+    options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnGuardHook.OptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    stack_filters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnGuardHook.StackFiltersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    target_filters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnGuardHook.TargetFiltersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__0b8bde9f1f98ed0500179dfc97dcadf56e8ff1be4dde185bebd99abe71d79167(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
@@ -6438,6 +8393,130 @@ def _typecheckingstub__7a9bb2ef202f6ed27272b4d9787339d2a26c63beb648e39f3c4977200
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__fec9ac58a382959177810e26366e5dddc9f912aaf73b09411981c9ecbce1010a(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    alias: builtins.str,
+    execution_role: builtins.str,
+    failure_mode: builtins.str,
+    hook_status: builtins.str,
+    lambda_function: builtins.str,
+    target_operations: typing.Sequence[builtins.str],
+    stack_filters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLambdaHook.StackFiltersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    target_filters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLambdaHook.TargetFiltersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__809877a17bb251e60b67455af692a3e858d54a83a7fd506fc495b0e744c5fa80(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__25c057aed795d732097fbba6a4f084b53c5450d05b120d849b723c67df1943a3(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__30abbe1ec21200e639fa9f73b28a52e34aaa86d2d4428d4582a901ca4590f2f2(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__74a69bae63a6117a8c7657e3cce5476b0a9029fb6ee2a7bc15a93cd8537ab7b5(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__6284d889406f9c2de7868256183b7b1b36de24fc4d20e156592d9cef8cc351cd(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__1181d91ff3fd0986b5a5a6bb0a1eff2b0d58f9287a5a8e6d041fc0788e69a1b9(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__8282c1280b41b55a28b532b0432b552d017237738107063dd37f45a932e0ccc3(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__2cec88f2fd3131502965b66fc309237a615288eee912b64bbde3b05563645394(
+    value: typing.List[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__10bf8f291e923bd29e844f030043f31cdea31b613c9c8ad9eb3cd27ec79c080e(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnLambdaHook.StackFiltersProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__37d3897a58b7133587d59ce7b2fc6e7c7f4c5ad1b3b3d9020dc5181c79c8e2d0(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnLambdaHook.TargetFiltersProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__1c6825aca96c1ce7eaa02a7e659917eb747e2a75121b6c5d50ef421a9261e58e(
+    *,
+    filtering_criteria: builtins.str,
+    stack_names: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLambdaHook.StackNamesProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    stack_roles: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLambdaHook.StackRolesProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b7566684a011915bedffb46298f71959895c8280827b3628a664f48b68aa5599(
+    *,
+    exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
+    include: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__5b3429ffb1654464d2c3e5029831647a0bf3172b44a425681964d5585c6cf02c(
+    *,
+    exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
+    include: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__6b7d133718b35659d76ef50f7b0d36492c3da19aa89cd0ec0d90af415b1383ba(
+    *,
+    actions: typing.Optional[typing.Sequence[builtins.str]] = None,
+    invocation_points: typing.Optional[typing.Sequence[builtins.str]] = None,
+    target_names: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__08ef8befa45effdca3c0a1b699ffb2fae0aaed2060b19e128bdcc021cfcb0b95(
+    *,
+    alias: builtins.str,
+    execution_role: builtins.str,
+    failure_mode: builtins.str,
+    hook_status: builtins.str,
+    lambda_function: builtins.str,
+    target_operations: typing.Sequence[builtins.str],
+    stack_filters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLambdaHook.StackFiltersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    target_filters: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLambdaHook.TargetFiltersProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__459b4551acd819b198938843c729caa68cfe3bcc1ac16be0f4fd2dcd90f33831(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,