aws-cdk-lib 2.171.1__py3-none-any.whl → 2.173.0__py3-none-any.whl

aws_cdk/__init__.py

@@ -2266,6 +2266,167 @@ class ArnFormat(enum.Enum):
     '''
 
 
+class AspectApplication(
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.AspectApplication",
+):
+    '''Object respresenting an Aspect application.
+
+    Stores the Aspect, the pointer to the construct it was applied
+    to, and the priority value of that Aspect.
+
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        import aws_cdk as cdk
+        import constructs as constructs
+        
+        # aspect: cdk.IAspect
+        # construct: constructs.Construct
+        
+        aspect_application = cdk.AspectApplication(construct, aspect, 123)
+    '''
+
+    def __init__(
+        self,
+        construct: _constructs_77d1e7e8.IConstruct,
+        aspect: "IAspect",
+        priority: jsii.Number,
+    ) -> None:
+        '''Initializes AspectApplication object.
+
+        :param construct: -
+        :param aspect: -
+        :param priority: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__9e9e7eccccdbb57b560afbe6d0b0f0653f49bc2cf8739189ca2dfd2305348a44)
+            check_type(argname="argument construct", value=construct, expected_type=type_hints["construct"])
+            check_type(argname="argument aspect", value=aspect, expected_type=type_hints["aspect"])
+            check_type(argname="argument priority", value=priority, expected_type=type_hints["priority"])
+        jsii.create(self.__class__, self, [construct, aspect, priority])
+
+    @builtins.property
+    @jsii.member(jsii_name="aspect")
+    def aspect(self) -> "IAspect":
+        '''The Aspect that was applied.'''
+        return typing.cast("IAspect", jsii.get(self, "aspect"))
+
+    @builtins.property
+    @jsii.member(jsii_name="construct")
+    def construct(self) -> _constructs_77d1e7e8.IConstruct:
+        '''The construct that the Aspect was applied to.'''
+        return typing.cast(_constructs_77d1e7e8.IConstruct, jsii.get(self, "construct"))
+
+    @builtins.property
+    @jsii.member(jsii_name="priority")
+    def priority(self) -> jsii.Number:
+        '''Gets the priority value.
+
+        Sets the priority value.
+        '''
+        return typing.cast(jsii.Number, jsii.get(self, "priority"))
+
+    @priority.setter
+    def priority(self, value: jsii.Number) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__5caf783430302b32bfab31d65627bb13dae6c0e9f42b0a5443818db8b0503d54)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "priority", value) # pyright: ignore[reportArgumentType]
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.AspectOptions",
+    jsii_struct_bases=[],
+    name_mapping={"priority": "priority"},
+)
+class AspectOptions:
+    def __init__(self, *, priority: typing.Optional[jsii.Number] = None) -> None:
+        '''Options when Applying an Aspect.
+
+        :param priority: The priority value to apply on an Aspect. Priority must be a non-negative integer. Default: - AspectPriority.DEFAULT
+
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            import aws_cdk as cdk
+            
+            aspect_options = cdk.AspectOptions(
+                priority=123
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1761263abda35b4b2f599d4ff5122c0e7ad15a95af4498d9c6e04e78bc4a4b76)
+            check_type(argname="argument priority", value=priority, expected_type=type_hints["priority"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if priority is not None:
+            self._values["priority"] = priority
+
+    @builtins.property
+    def priority(self) -> typing.Optional[jsii.Number]:
+        '''The priority value to apply on an Aspect.
+
+        Priority must be a non-negative integer.
+
+        :default: - AspectPriority.DEFAULT
+        '''
+        result = self._values.get("priority")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "AspectOptions(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+class AspectPriority(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.AspectPriority"):
+    '''Default Priority values for Aspects.
+
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        import aws_cdk as cdk
+        
+        aspect_priority = cdk.AspectPriority()
+    '''
+
+    def __init__(self) -> None:
+        jsii.create(self.__class__, self, [])
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="DEFAULT")
+    def DEFAULT(cls) -> jsii.Number:
+        '''Default priority for Aspects that are applied without a priority.'''
+        return typing.cast(jsii.Number, jsii.sget(cls, "DEFAULT"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="MUTATING")
+    def MUTATING(cls) -> jsii.Number:
+        '''Suggested priority for Aspects that mutate the construct tree.'''
+        return typing.cast(jsii.Number, jsii.sget(cls, "MUTATING"))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="READONLY")
+    def READONLY(cls) -> jsii.Number:
+        '''Suggested priority for Aspects that only read the construct tree.'''
+        return typing.cast(jsii.Number, jsii.sget(cls, "READONLY"))
+
+
 class Aspects(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.Aspects"):
     '''Aspects can be applied to CDK tree scopes and can operate on the tree before synthesis.
 
@@ -2312,15 +2473,23 @@ class Aspects(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.Aspects"):
         return typing.cast("Aspects", jsii.sinvoke(cls, "of", [scope]))
 
     @jsii.member(jsii_name="add")
-    def add(self, aspect: "IAspect") -> None:
+    def add(
+        self,
+        aspect: "IAspect",
+        *,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
         '''Adds an aspect to apply this scope before synthesis.
 
         :param aspect: The aspect to add.
+        :param priority: The priority value to apply on an Aspect. Priority must be a non-negative integer. Default: - AspectPriority.DEFAULT
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__3a0ed518e4a98c831b3b8dcdf7981d87fff56769689b00526e1e9d8df1b39f84)
             check_type(argname="argument aspect", value=aspect, expected_type=type_hints["aspect"])
-        return typing.cast(None, jsii.invoke(self, "add", [aspect]))
+        options = AspectOptions(priority=priority)
+
+        return typing.cast(None, jsii.invoke(self, "add", [aspect, options]))
 
     @builtins.property
     @jsii.member(jsii_name="all")
@@ -2328,6 +2497,15 @@ class Aspects(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.Aspects"):
         '''The list of aspects which were directly applied on this scope.'''
         return typing.cast(typing.List["IAspect"], jsii.get(self, "all"))
 
+    @builtins.property
+    @jsii.member(jsii_name="applied")
+    def applied(self) -> typing.List[AspectApplication]:
+        '''The list of aspects with priority which were directly applied on this scope.
+
+        Also returns inherited Aspects of this node.
+        '''
+        return typing.cast(typing.List[AspectApplication], jsii.get(self, "applied"))
+
 
 @jsii.enum(jsii_type="aws-cdk-lib.AssetHashType")
 class AssetHashType(enum.Enum):
@@ -5081,16 +5259,16 @@ class CfnGuardHookProps:
     ) -> None:
         '''Properties for defining a ``CfnGuardHook``.
 
-        :param alias: The typename alias for the hook.
-        :param execution_role: IAM Role ARN.
-        :param failure_mode: Attribute to specify CloudFormation behavior on hook failure. Default: - "WARN"
-        :param hook_status: Attribute to specify which stacks this hook applies to or should get invoked for. Default: - "DISABLED"
-        :param rule_location: S3 Source Location for the Guard files.
-        :param target_operations: Which operations should this Hook run against? Resource changes, stacks or change sets.
-        :param log_bucket: S3 Bucket where the guard validate report will be uploaded to.
-        :param options: 
-        :param stack_filters: Filters to allow hooks to target specific stack attributes.
-        :param target_filters: 
+        :param alias: The type name alias for the Hook. This alias must be unique per account and Region. The alias must be in the form ``Name1::Name2::Name3`` and must not begin with ``AWS`` . For example, ``Private::Guard::MyTestHook`` .
+        :param execution_role: The IAM role that the Hook assumes to retrieve your Guard rules from S3 and optionally write a detailed Guard output report back.
+        :param failure_mode: Specifies how the Hook responds when rules fail their evaluation. - ``FAIL`` : Prevents the action from proceeding. This is helpful for enforcing strict compliance or security policies. - ``WARN`` : Issues warnings to users but allows actions to continue. This is useful for non-critical validations or informational checks. Default: - "WARN"
+        :param hook_status: Specifies if the Hook is ``ENABLED`` or ``DISABLED`` . Default: - "DISABLED"
+        :param rule_location: Specifies the S3 location of your Guard rules.
+        :param target_operations: Specifies which type of operation the Hook is run against. Valid values: ``STACK`` | ``RESOURCE`` | ``CHANGE_SET`` | ``CLOUD_CONTROL``
+        :param log_bucket: Specifies the name of an S3 bucket to store the Guard output report. This report contains the results of your Guard rule validations.
+        :param options: Specifies the S3 location of your input parameters.
+        :param stack_filters: Specifies the stack level filters for the Hook.
+        :param target_filters: Specifies the target filters for the Hook.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html
         :exampleMetadata: fixture=_generated
@@ -5175,7 +5353,9 @@ class CfnGuardHookProps:
 
     @builtins.property
     def alias(self) -> builtins.str:
-        '''The typename alias for the hook.
+        '''The type name alias for the Hook. This alias must be unique per account and Region.
+
+        The alias must be in the form ``Name1::Name2::Name3`` and must not begin with ``AWS`` . For example, ``Private::Guard::MyTestHook`` .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-alias
         '''
@@ -5185,7 +5365,7 @@ class CfnGuardHookProps:
 
     @builtins.property
     def execution_role(self) -> builtins.str:
-        '''IAM Role ARN.
+        '''The IAM role that the Hook assumes to retrieve your Guard rules from S3 and optionally write a detailed Guard output report back.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-executionrole
         '''
@@ -5195,7 +5375,10 @@ class CfnGuardHookProps:
 
     @builtins.property
     def failure_mode(self) -> builtins.str:
-        '''Attribute to specify CloudFormation behavior on hook failure.
+        '''Specifies how the Hook responds when rules fail their evaluation.
+
+        - ``FAIL`` : Prevents the action from proceeding. This is helpful for enforcing strict compliance or security policies.
+        - ``WARN`` : Issues warnings to users but allows actions to continue. This is useful for non-critical validations or informational checks.
 
         :default: - "WARN"
 
@@ -5207,7 +5390,7 @@ class CfnGuardHookProps:
 
     @builtins.property
     def hook_status(self) -> builtins.str:
-        '''Attribute to specify which stacks this hook applies to or should get invoked for.
+        '''Specifies if the Hook is ``ENABLED`` or ``DISABLED`` .
 
         :default: - "DISABLED"
 
@@ -5221,7 +5404,7 @@ class CfnGuardHookProps:
     def rule_location(
         self,
     ) -> typing.Union["IResolvable", "CfnGuardHook.S3LocationProperty"]:
-        '''S3 Source Location for the Guard files.
+        '''Specifies the S3 location of your Guard rules.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-rulelocation
         '''
@@ -5231,9 +5414,9 @@ class CfnGuardHookProps:
 
     @builtins.property
     def target_operations(self) -> typing.List[builtins.str]:
-        '''Which operations should this Hook run against?
+        '''Specifies which type of operation the Hook is run against.
 
-        Resource changes, stacks or change sets.
+        Valid values: ``STACK`` | ``RESOURCE`` | ``CHANGE_SET`` | ``CLOUD_CONTROL``
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-targetoperations
         '''
@@ -5243,7 +5426,9 @@ class CfnGuardHookProps:
 
     @builtins.property
     def log_bucket(self) -> typing.Optional[builtins.str]:
-        '''S3 Bucket where the guard validate report will be uploaded to.
+        '''Specifies the name of an S3 bucket to store the Guard output report.
+
+        This report contains the results of your Guard rule validations.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-logbucket
         '''
@@ -5254,7 +5439,8 @@ class CfnGuardHookProps:
     def options(
         self,
     ) -> typing.Optional[typing.Union["IResolvable", "CfnGuardHook.OptionsProperty"]]:
-        '''
+        '''Specifies the S3 location of your input parameters.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-options
         '''
         result = self._values.get("options")
@@ -5264,7 +5450,7 @@ class CfnGuardHookProps:
     def stack_filters(
         self,
     ) -> typing.Optional[typing.Union["IResolvable", "CfnGuardHook.StackFiltersProperty"]]:
-        '''Filters to allow hooks to target specific stack attributes.
+        '''Specifies the stack level filters for the Hook.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-stackfilters
         '''
@@ -5275,7 +5461,8 @@ class CfnGuardHookProps:
     def target_filters(
         self,
     ) -> typing.Optional[typing.Union["IResolvable", "CfnGuardHook.TargetFiltersProperty"]]:
-        '''
+        '''Specifies the target filters for the Hook.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html#cfn-cloudformation-guardhook-targetfilters
         '''
         result = self._values.get("target_filters")
@@ -5372,7 +5559,7 @@ class CfnHookDefaultVersionProps:
     ) -> None:
         '''Properties for defining a ``CfnHookDefaultVersion``.
 
-        :param type_name: The name of the hook. You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
+        :param type_name: The name of the Hook. You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
         :param type_version_arn: The version ID of the type configuration. You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
         :param version_id: The version ID of the type specified. You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
 
@@ -5406,7 +5593,7 @@ class CfnHookDefaultVersionProps:
 
     @builtins.property
     def type_name(self) -> typing.Optional[builtins.str]:
-        '''The name of the hook.
+        '''The name of the Hook.
 
         You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
 
@@ -5544,10 +5731,10 @@ class CfnHookTypeConfigProps:
     ) -> None:
         '''Properties for defining a ``CfnHookTypeConfig``.
 
-        :param configuration: Specifies the activated hook type configuration, in this AWS account and AWS Region . You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
-        :param configuration_alias: Specifies the activated hook type configuration, in this AWS account and AWS Region . Defaults to ``default`` alias. Hook types currently support default configuration alias. Default: - "default"
-        :param type_arn: The Amazon Resource Number (ARN) for the hook to set ``Configuration`` for. You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
-        :param type_name: The unique name for your hook. Specifies a three-part namespace for your hook, with a recommended pattern of ``Organization::Service::Hook`` . You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
+        :param configuration: Specifies the activated Hook type configuration, in this AWS account and AWS Region . You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
+        :param configuration_alias: Specifies the activated Hook type configuration, in this AWS account and AWS Region . Defaults to ``default`` alias. Hook types currently support default configuration alias. Default: - "default"
+        :param type_arn: The Amazon Resource Number (ARN) for the Hook to set ``Configuration`` for. You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
+        :param type_name: The unique name for your Hook. Specifies a three-part namespace for your Hook, with a recommended pattern of ``Organization::Service::Hook`` . You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hooktypeconfig.html
         :exampleMetadata: fixture=_generated
@@ -5585,7 +5772,7 @@ class CfnHookTypeConfigProps:
 
     @builtins.property
     def configuration(self) -> builtins.str:
-        '''Specifies the activated hook type configuration, in this AWS account and AWS Region .
+        '''Specifies the activated Hook type configuration, in this AWS account and AWS Region .
 
         You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
 
@@ -5597,7 +5784,7 @@ class CfnHookTypeConfigProps:
 
     @builtins.property
     def configuration_alias(self) -> typing.Optional[builtins.str]:
-        '''Specifies the activated hook type configuration, in this AWS account and AWS Region .
+        '''Specifies the activated Hook type configuration, in this AWS account and AWS Region .
 
         Defaults to ``default`` alias. Hook types currently support default configuration alias.
 
@@ -5610,7 +5797,7 @@ class CfnHookTypeConfigProps:
 
     @builtins.property
     def type_arn(self) -> typing.Optional[builtins.str]:
-        '''The Amazon Resource Number (ARN) for the hook to set ``Configuration`` for.
+        '''The Amazon Resource Number (ARN) for the Hook to set ``Configuration`` for.
 
         You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
 
@@ -5621,9 +5808,9 @@ class CfnHookTypeConfigProps:
 
     @builtins.property
     def type_name(self) -> typing.Optional[builtins.str]:
-        '''The unique name for your hook.
+        '''The unique name for your Hook.
 
-        Specifies a three-part namespace for your hook, with a recommended pattern of ``Organization::Service::Hook`` .
+        Specifies a three-part namespace for your Hook, with a recommended pattern of ``Organization::Service::Hook`` .
 
         You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
 
@@ -5665,9 +5852,9 @@ class CfnHookVersionProps:
     ) -> None:
         '''Properties for defining a ``CfnHookVersion``.
 
-        :param schema_handler_package: A URL to the Amazon S3 bucket containing the hook project package that contains the necessary files for the hook you want to register. For information on generating a schema handler package for the resource you want to register, see `submit <https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/resource-type-cli-submit.html>`_ in the *CloudFormation CLI User Guide for Extension Development* . .. epigraph:: The user registering the resource must be able to access the package in the S3 bucket. That's, the user must have `GetObject <https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html>`_ permissions for the schema handler package. For more information, see `Actions, Resources, and Condition Keys for Amazon S3 <https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazons3.html>`_ in the *AWS Identity and Access Management User Guide* .
+        :param schema_handler_package: A URL to the Amazon S3 bucket containing the Hook project package that contains the necessary files for the Hook you want to register. For information on generating a schema handler package for the resource you want to register, see `submit <https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/resource-type-cli-submit.html>`_ in the *CloudFormation CLI User Guide for Extension Development* . .. epigraph:: The user registering the resource must be able to access the package in the S3 bucket. That's, the user must have `GetObject <https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html>`_ permissions for the schema handler package. For more information, see `Actions, Resources, and Condition Keys for Amazon S3 <https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazons3.html>`_ in the *AWS Identity and Access Management User Guide* .
         :param type_name: The unique name for your hook. Specifies a three-part namespace for your hook, with a recommended pattern of ``Organization::Service::Hook`` . .. epigraph:: The following organization namespaces are reserved and can't be used in your hook type names: - ``Alexa`` - ``AMZN`` - ``Amazon`` - ``ASK`` - ``AWS`` - ``Custom`` - ``Dev``
-        :param execution_role_arn: The Amazon Resource Name (ARN) of the task execution role that grants the hook permission.
+        :param execution_role_arn: The Amazon Resource Name (ARN) of the task execution role that grants the Hook permission.
         :param logging_config: Contains logging configuration information for an extension.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookversion.html
@@ -5708,7 +5895,7 @@ class CfnHookVersionProps:
 
     @builtins.property
     def schema_handler_package(self) -> builtins.str:
-        '''A URL to the Amazon S3 bucket containing the hook project package that contains the necessary files for the hook you want to register.
+        '''A URL to the Amazon S3 bucket containing the Hook project package that contains the necessary files for the Hook you want to register.
 
         For information on generating a schema handler package for the resource you want to register, see `submit <https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/resource-type-cli-submit.html>`_ in the *CloudFormation CLI User Guide for Extension Development* .
         .. epigraph::
@@ -5746,7 +5933,7 @@ class CfnHookVersionProps:
 
     @builtins.property
     def execution_role_arn(self) -> typing.Optional[builtins.str]:
-        '''The Amazon Resource Name (ARN) of the task execution role that grants the hook permission.
+        '''The Amazon Resource Name (ARN) of the task execution role that grants the Hook permission.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookversion.html#cfn-cloudformation-hookversion-executionrolearn
         '''
@@ -5863,14 +6050,14 @@ class CfnLambdaHookProps:
     ) -> None:
         '''Properties for defining a ``CfnLambdaHook``.
 
-        :param alias: The typename alias for the hook.
-        :param execution_role: IAM Role ARN.
-        :param failure_mode: Attribute to specify CloudFormation behavior on hook failure.
-        :param hook_status: Attribute to specify which stacks this hook applies to or should get invoked for. Default: - "ENABLED"
-        :param lambda_function: Amazon Resource Name (ARN), Partial ARN, name, version, or alias of the Lambda function to invoke with this hook.
-        :param target_operations: Which operations should this Hook run against? Resource changes, stacks or change sets.
-        :param stack_filters: Filters to allow hooks to target specific stack attributes.
-        :param target_filters: 
+        :param alias: The type name alias for the Hook. This alias must be unique per account and Region. The alias must be in the form ``Name1::Name2::Name3`` and must not begin with ``AWS`` . For example, ``Private::Lambda::MyTestHook`` .
+        :param execution_role: The IAM role that the Hook assumes to invoke your Lambda function.
+        :param failure_mode: Specifies how the Hook responds when the Lambda function invoked by the Hook returns a ``FAILED`` response. - ``FAIL`` : Prevents the action from proceeding. This is helpful for enforcing strict compliance or security policies. - ``WARN`` : Issues warnings to users but allows actions to continue. This is useful for non-critical validations or informational checks.
+        :param hook_status: Specifies if the Hook is ``ENABLED`` or ``DISABLED`` . Default: - "ENABLED"
+        :param lambda_function: Specifies the Lambda function for the Hook. You can use:. - The full Amazon Resource Name (ARN) without a suffix. - A qualified ARN with a version or alias suffix.
+        :param target_operations: Specifies which type of operation the Hook is run against. Valid values: ``STACK`` | ``RESOURCE`` | ``CHANGE_SET`` | ``CLOUD_CONTROL``
+        :param stack_filters: Specifies the stack level filters for the Hook.
+        :param target_filters: Specifies the target filters for the Hook.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-lambdahook.html
         :exampleMetadata: fixture=_generated
@@ -5935,7 +6122,9 @@ class CfnLambdaHookProps:
 
     @builtins.property
     def alias(self) -> builtins.str:
-        '''The typename alias for the hook.
+        '''The type name alias for the Hook. This alias must be unique per account and Region.
+
+        The alias must be in the form ``Name1::Name2::Name3`` and must not begin with ``AWS`` . For example, ``Private::Lambda::MyTestHook`` .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-lambdahook.html#cfn-cloudformation-lambdahook-alias
         '''
@@ -5945,7 +6134,7 @@ class CfnLambdaHookProps:
 
     @builtins.property
     def execution_role(self) -> builtins.str:
-        '''IAM Role ARN.
+        '''The IAM role that the Hook assumes to invoke your Lambda function.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-lambdahook.html#cfn-cloudformation-lambdahook-executionrole
         '''
@@ -5955,7 +6144,10 @@ class CfnLambdaHookProps:
 
     @builtins.property
     def failure_mode(self) -> builtins.str:
-        '''Attribute to specify CloudFormation behavior on hook failure.
+        '''Specifies how the Hook responds when the Lambda function invoked by the Hook returns a ``FAILED`` response.
+
+        - ``FAIL`` : Prevents the action from proceeding. This is helpful for enforcing strict compliance or security policies.
+        - ``WARN`` : Issues warnings to users but allows actions to continue. This is useful for non-critical validations or informational checks.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-lambdahook.html#cfn-cloudformation-lambdahook-failuremode
         '''
@@ -5965,7 +6157,7 @@ class CfnLambdaHookProps:
 
     @builtins.property
     def hook_status(self) -> builtins.str:
-        '''Attribute to specify which stacks this hook applies to or should get invoked for.
+        '''Specifies if the Hook is ``ENABLED`` or ``DISABLED`` .
 
         :default: - "ENABLED"
 
@@ -5977,7 +6169,10 @@ class CfnLambdaHookProps:
 
     @builtins.property
     def lambda_function(self) -> builtins.str:
-        '''Amazon Resource Name (ARN), Partial ARN, name, version, or alias of the Lambda function to invoke with this hook.
+        '''Specifies the Lambda function for the Hook. You can use:.
+
+        - The full Amazon Resource Name (ARN) without a suffix.
+        - A qualified ARN with a version or alias suffix.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-lambdahook.html#cfn-cloudformation-lambdahook-lambdafunction
         '''
@@ -5987,9 +6182,9 @@ class CfnLambdaHookProps:
 
     @builtins.property
     def target_operations(self) -> typing.List[builtins.str]:
-        '''Which operations should this Hook run against?
+        '''Specifies which type of operation the Hook is run against.
 
-        Resource changes, stacks or change sets.
+        Valid values: ``STACK`` | ``RESOURCE`` | ``CHANGE_SET`` | ``CLOUD_CONTROL``
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-lambdahook.html#cfn-cloudformation-lambdahook-targetoperations
         '''
@@ -6001,7 +6196,7 @@ class CfnLambdaHookProps:
     def stack_filters(
         self,
     ) -> typing.Optional[typing.Union["IResolvable", "CfnLambdaHook.StackFiltersProperty"]]:
-        '''Filters to allow hooks to target specific stack attributes.
+        '''Specifies the stack level filters for the Hook.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-lambdahook.html#cfn-cloudformation-lambdahook-stackfilters
         '''
@@ -6012,7 +6207,8 @@ class CfnLambdaHookProps:
     def target_filters(
         self,
     ) -> typing.Optional[typing.Union["IResolvable", "CfnLambdaHook.TargetFiltersProperty"]]:
-        '''
+        '''Specifies the target filters for the Hook.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-lambdahook.html#cfn-cloudformation-lambdahook-targetfilters
         '''
         result = self._values.get("target_filters")
@@ -13136,6 +13332,48 @@ class Environment:
         )
 
 
+class Errors(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.Errors"):
+    '''Helper to check if an error is a SynthesisErrors.
+
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        import aws_cdk as cdk
+        
+        errors = cdk.Errors()
+    '''
+
+    def __init__(self) -> None:
+        jsii.create(self.__class__, self, [])
+
+    @jsii.member(jsii_name="isConstructError")
+    @builtins.classmethod
+    def is_construct_error(cls, x: typing.Any) -> builtins.bool:
+        '''Test whether the given errors is a ConstructionError.
+
+        :param x: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__0c62bc5a6fe032556ae3c32e105ddaad3f4ca89286fd26884af6347d3364c5ae)
+            check_type(argname="argument x", value=x, expected_type=type_hints["x"])
+        return typing.cast(builtins.bool, jsii.sinvoke(cls, "isConstructError", [x]))
+
+    @jsii.member(jsii_name="isValidationError")
+    @builtins.classmethod
+    def is_validation_error(cls, x: typing.Any) -> builtins.bool:
+        '''Test whether the given error is a ValidationError.
+
+        :param x: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c9afe20487c547932befb7a2f6567c38793e8d7df55f47046e1cfb408408d733)
+            check_type(argname="argument x", value=x, expected_type=type_hints["x"])
+        return typing.cast(builtins.bool, jsii.sinvoke(cls, "isValidationError", [x]))
+
+
 class Expiration(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.Expiration"):
     '''Represents a date of expiration.
 
@@ -22030,6 +22268,7 @@ class Stage(
     def synth(
         self,
         *,
+        aspect_stabilization: typing.Optional[builtins.bool] = None,
         error_on_duplicate_synth: typing.Optional[builtins.bool] = None,
         force: typing.Optional[builtins.bool] = None,
         skip_validation: typing.Optional[builtins.bool] = None,
@@ -22040,12 +22279,14 @@ class Stage(
         Once an assembly has been synthesized, it cannot be modified. Subsequent
         calls will return the same assembly.
 
+        :param aspect_stabilization: Whether or not run the stabilization loop while invoking Aspects. The stabilization loop runs multiple passes of the construct tree when invoking Aspects. Without the stabilization loop, Aspects that are created by other Aspects are not run and new nodes that are created at higher points on the construct tree by an Aspect will not inherit their parent aspects. Default: false
         :param error_on_duplicate_synth: Whether or not to throw a warning instead of an error if the construct tree has been mutated since the last synth. Default: true
         :param force: Force a re-synth, even if the stage has already been synthesized. This is used by tests to allow for incremental verification of the output. Do not use in production. Default: false
         :param skip_validation: Should we skip construct validation. Default: - false
         :param validate_on_synthesis: Whether the stack should be validated after synthesis to check for error metadata. Default: - false
         '''
         options = StageSynthesisOptions(
+            aspect_stabilization=aspect_stabilization,
             error_on_duplicate_synth=error_on_duplicate_synth,
             force=force,
             skip_validation=skip_validation,
@@ -22289,6 +22530,7 @@ class StageProps:
     jsii_type="aws-cdk-lib.StageSynthesisOptions",
     jsii_struct_bases=[],
     name_mapping={
+        "aspect_stabilization": "aspectStabilization",
         "error_on_duplicate_synth": "errorOnDuplicateSynth",
         "force": "force",
         "skip_validation": "skipValidation",
@@ -22299,6 +22541,7 @@ class StageSynthesisOptions:
     def __init__(
         self,
         *,
+        aspect_stabilization: typing.Optional[builtins.bool] = None,
         error_on_duplicate_synth: typing.Optional[builtins.bool] = None,
         force: typing.Optional[builtins.bool] = None,
         skip_validation: typing.Optional[builtins.bool] = None,
@@ -22306,6 +22549,7 @@ class StageSynthesisOptions:
     ) -> None:
         '''Options for assembly synthesis.
 
+        :param aspect_stabilization: Whether or not run the stabilization loop while invoking Aspects. The stabilization loop runs multiple passes of the construct tree when invoking Aspects. Without the stabilization loop, Aspects that are created by other Aspects are not run and new nodes that are created at higher points on the construct tree by an Aspect will not inherit their parent aspects. Default: false
         :param error_on_duplicate_synth: Whether or not to throw a warning instead of an error if the construct tree has been mutated since the last synth. Default: true
         :param force: Force a re-synth, even if the stage has already been synthesized. This is used by tests to allow for incremental verification of the output. Do not use in production. Default: false
         :param skip_validation: Should we skip construct validation. Default: - false
@@ -22320,6 +22564,7 @@ class StageSynthesisOptions:
             import aws_cdk as cdk
             
             stage_synthesis_options = cdk.StageSynthesisOptions(
+                aspect_stabilization=False,
                 error_on_duplicate_synth=False,
                 force=False,
                 skip_validation=False,
@@ -22328,11 +22573,14 @@ class StageSynthesisOptions:
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__e8b2b0462b32cc3d2ec10c615bf94a3122bcdd5b1e2c521fb377665ba9a5a618)
+            check_type(argname="argument aspect_stabilization", value=aspect_stabilization, expected_type=type_hints["aspect_stabilization"])
             check_type(argname="argument error_on_duplicate_synth", value=error_on_duplicate_synth, expected_type=type_hints["error_on_duplicate_synth"])
             check_type(argname="argument force", value=force, expected_type=type_hints["force"])
             check_type(argname="argument skip_validation", value=skip_validation, expected_type=type_hints["skip_validation"])
             check_type(argname="argument validate_on_synthesis", value=validate_on_synthesis, expected_type=type_hints["validate_on_synthesis"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if aspect_stabilization is not None:
+            self._values["aspect_stabilization"] = aspect_stabilization
         if error_on_duplicate_synth is not None:
             self._values["error_on_duplicate_synth"] = error_on_duplicate_synth
         if force is not None:
@@ -22342,6 +22590,20 @@ class StageSynthesisOptions:
         if validate_on_synthesis is not None:
             self._values["validate_on_synthesis"] = validate_on_synthesis
 
+    @builtins.property
+    def aspect_stabilization(self) -> typing.Optional[builtins.bool]:
+        '''Whether or not run the stabilization loop while invoking Aspects.
+
+        The stabilization loop runs multiple passes of the construct tree when invoking
+        Aspects. Without the stabilization loop, Aspects that are created by other Aspects
+        are not run and new nodes that are created at higher points on the construct tree by
+        an Aspect will not inherit their parent aspects.
+
+        :default: false
+        '''
+        result = self._values.get("aspect_stabilization")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def error_on_duplicate_synth(self) -> typing.Optional[builtins.bool]:
         '''Whether or not to throw a warning instead of an error if the construct tree has been mutated since the last synth.
@@ -27903,7 +28165,9 @@ class CfnGuardHook(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.CfnGuardHook",
 ):
-    '''This is a CloudFormation resource for activating the first-party AWS::Hooks::GuardHook.
+    '''The ``AWS::CloudFormation::GuardHook`` resource creates a Guard Hook with the specified attributes within your CloudFormation template.
+
+    Using the Guard domain specific language (DSL), you can author Hooks to evaluate your resources before allowing stack creation, modification, or deletion. For more information, see `Guard Hooks <https://docs.aws.amazon.com/cloudformation-cli/latest/hooks-userguide/guard-hooks.html>`_ in the *AWS CloudFormation Hooks User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-guardhook.html
     :cloudformationResource: AWS::CloudFormation::GuardHook
@@ -27978,16 +28242,16 @@ class CfnGuardHook(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param alias: The typename alias for the hook.
-        :param execution_role: IAM Role ARN.
-        :param failure_mode: Attribute to specify CloudFormation behavior on hook failure. Default: - "WARN"
-        :param hook_status: Attribute to specify which stacks this hook applies to or should get invoked for. Default: - "DISABLED"
-        :param rule_location: S3 Source Location for the Guard files.
-        :param target_operations: Which operations should this Hook run against? Resource changes, stacks or change sets.
-        :param log_bucket: S3 Bucket where the guard validate report will be uploaded to.
-        :param options: 
-        :param stack_filters: Filters to allow hooks to target specific stack attributes.
-        :param target_filters: 
+        :param alias: The type name alias for the Hook. This alias must be unique per account and Region. The alias must be in the form ``Name1::Name2::Name3`` and must not begin with ``AWS`` . For example, ``Private::Guard::MyTestHook`` .
+        :param execution_role: The IAM role that the Hook assumes to retrieve your Guard rules from S3 and optionally write a detailed Guard output report back.
+        :param failure_mode: Specifies how the Hook responds when rules fail their evaluation. - ``FAIL`` : Prevents the action from proceeding. This is helpful for enforcing strict compliance or security policies. - ``WARN`` : Issues warnings to users but allows actions to continue. This is useful for non-critical validations or informational checks. Default: - "WARN"
+        :param hook_status: Specifies if the Hook is ``ENABLED`` or ``DISABLED`` . Default: - "DISABLED"
+        :param rule_location: Specifies the S3 location of your Guard rules.
+        :param target_operations: Specifies which type of operation the Hook is run against. Valid values: ``STACK`` | ``RESOURCE`` | ``CHANGE_SET`` | ``CLOUD_CONTROL``
+        :param log_bucket: Specifies the name of an S3 bucket to store the Guard output report. This report contains the results of your Guard rule validations.
+        :param options: Specifies the S3 location of your input parameters.
+        :param stack_filters: Specifies the stack level filters for the Hook.
+        :param target_filters: Specifies the target filters for the Hook.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__af8d2663a8bac5046ca50537b031b46f870c6edd4948ed8528ca4e3ff9367b17)
@@ -28041,7 +28305,7 @@ class CfnGuardHook(
     @builtins.property
     @jsii.member(jsii_name="attrHookArn")
     def attr_hook_arn(self) -> builtins.str:
-        '''The Amazon Resource Name (ARN) of the activated hook.
+        '''Returns the ARN of a Guard Hook.
 
         :cloudformationAttribute: HookArn
         '''
@@ -28055,7 +28319,10 @@ class CfnGuardHook(
     @builtins.property
     @jsii.member(jsii_name="alias")
     def alias(self) -> builtins.str:
-        '''The typename alias for the hook.'''
+        '''The type name alias for the Hook.
+
+        This alias must be unique per account and Region.
+        '''
         return typing.cast(builtins.str, jsii.get(self, "alias"))
 
     @alias.setter
@@ -28068,7 +28335,7 @@ class CfnGuardHook(
     @builtins.property
     @jsii.member(jsii_name="executionRole")
     def execution_role(self) -> builtins.str:
-        '''IAM Role ARN.'''
+        '''The IAM role that the Hook assumes to retrieve your Guard rules from S3 and optionally write a detailed Guard output report back.'''
         return typing.cast(builtins.str, jsii.get(self, "executionRole"))
 
     @execution_role.setter
@@ -28081,7 +28348,7 @@ class CfnGuardHook(
     @builtins.property
     @jsii.member(jsii_name="failureMode")
     def failure_mode(self) -> builtins.str:
-        '''Attribute to specify CloudFormation behavior on hook failure.'''
+        '''Specifies how the Hook responds when rules fail their evaluation.'''
         return typing.cast(builtins.str, jsii.get(self, "failureMode"))
 
     @failure_mode.setter
@@ -28094,7 +28361,7 @@ class CfnGuardHook(
     @builtins.property
     @jsii.member(jsii_name="hookStatus")
     def hook_status(self) -> builtins.str:
-        '''Attribute to specify which stacks this hook applies to or should get invoked for.'''
+        '''Specifies if the Hook is ``ENABLED`` or ``DISABLED`` .'''
         return typing.cast(builtins.str, jsii.get(self, "hookStatus"))
 
     @hook_status.setter
@@ -28109,7 +28376,7 @@ class CfnGuardHook(
     def rule_location(
         self,
     ) -> typing.Union[IResolvable, "CfnGuardHook.S3LocationProperty"]:
-        '''S3 Source Location for the Guard files.'''
+        '''Specifies the S3 location of your Guard rules.'''
         return typing.cast(typing.Union[IResolvable, "CfnGuardHook.S3LocationProperty"], jsii.get(self, "ruleLocation"))
 
     @rule_location.setter
@@ -28125,7 +28392,7 @@ class CfnGuardHook(
     @builtins.property
     @jsii.member(jsii_name="targetOperations")
     def target_operations(self) -> typing.List[builtins.str]:
-        '''Which operations should this Hook run against?'''
+        '''Specifies which type of operation the Hook is run against.'''
         return typing.cast(typing.List[builtins.str], jsii.get(self, "targetOperations"))
 
     @target_operations.setter
@@ -28138,7 +28405,7 @@ class CfnGuardHook(
     @builtins.property
     @jsii.member(jsii_name="logBucket")
     def log_bucket(self) -> typing.Optional[builtins.str]:
-        '''S3 Bucket where the guard validate report will be uploaded to.'''
+        '''Specifies the name of an S3 bucket to store the Guard output report.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "logBucket"))
 
     @log_bucket.setter
@@ -28153,6 +28420,7 @@ class CfnGuardHook(
     def options(
         self,
     ) -> typing.Optional[typing.Union[IResolvable, "CfnGuardHook.OptionsProperty"]]:
+        '''Specifies the S3 location of your input parameters.'''
         return typing.cast(typing.Optional[typing.Union[IResolvable, "CfnGuardHook.OptionsProperty"]], jsii.get(self, "options"))
 
     @options.setter
@@ -28170,7 +28438,7 @@ class CfnGuardHook(
     def stack_filters(
         self,
     ) -> typing.Optional[typing.Union[IResolvable, "CfnGuardHook.StackFiltersProperty"]]:
-        '''Filters to allow hooks to target specific stack attributes.'''
+        '''Specifies the stack level filters for the Hook.'''
         return typing.cast(typing.Optional[typing.Union[IResolvable, "CfnGuardHook.StackFiltersProperty"]], jsii.get(self, "stackFilters"))
 
     @stack_filters.setter
@@ -28188,6 +28456,7 @@ class CfnGuardHook(
     def target_filters(
         self,
     ) -> typing.Optional[typing.Union[IResolvable, "CfnGuardHook.TargetFiltersProperty"]]:
+        '''Specifies the target filters for the Hook.'''
         return typing.cast(typing.Optional[typing.Union[IResolvable, "CfnGuardHook.TargetFiltersProperty"]], jsii.get(self, "targetFilters"))
 
     @target_filters.setter
@@ -28211,8 +28480,9 @@ class CfnGuardHook(
             *,
             input_params: typing.Optional[typing.Union[IResolvable, typing.Union["CfnGuardHook.S3LocationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         ) -> None:
-            '''
-            :param input_params: S3 Source Location for the Guard files.
+            '''Specifies the input parameters for a Guard Hook.
+
+            :param input_params: Specifies the S3 location where your input parameters are located.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-options.html
             :exampleMetadata: fixture=_generated
@@ -28243,7 +28513,7 @@ class CfnGuardHook(
         def input_params(
             self,
         ) -> typing.Optional[typing.Union[IResolvable, "CfnGuardHook.S3LocationProperty"]]:
-            '''S3 Source Location for the Guard files.
+            '''Specifies the S3 location where your input parameters are located.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-options.html#cfn-cloudformation-guardhook-options-inputparams
             '''
@@ -28273,10 +28543,10 @@ class CfnGuardHook(
             uri: builtins.str,
             version_id: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''S3 Source Location for the Guard files.
+            '''Specifies the S3 location where your Guard rules or input parameters are located.
 
-            :param uri: S3 uri of Guard files.
-            :param version_id: S3 object version.
+            :param uri: Specifies the S3 path to the file containing your Guard rules or input parameters (in the form ``s3://<bucket name>/<file name>`` ). For Guard rules, the object stored in S3 must have one of the following file extensions: ``.guard`` , ``.zip`` , or ``.tar.gz`` . For input parameters, the object stored in S3 must have one of the following file extensions: ``.yaml`` , ``.json`` , ``.zip`` , or ``.tar.gz`` .
+            :param version_id: For S3 buckets with versioning enabled, specifies the unique ID of the S3 object version to download your Guard rules or input parameters from. The Guard Hook downloads files from S3 every time the Hook is invoked. To prevent accidental changes or deletions, we recommend using a version when configuring your Guard Hook.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-s3location.html
             :exampleMetadata: fixture=_generated
@@ -28306,7 +28576,11 @@ class CfnGuardHook(
 
         @builtins.property
         def uri(self) -> builtins.str:
-            '''S3 uri of Guard files.
+            '''Specifies the S3 path to the file containing your Guard rules or input parameters (in the form ``s3://<bucket name>/<file name>`` ).
+
+            For Guard rules, the object stored in S3 must have one of the following file extensions: ``.guard`` , ``.zip`` , or ``.tar.gz`` .
+
+            For input parameters, the object stored in S3 must have one of the following file extensions: ``.yaml`` , ``.json`` , ``.zip`` , or ``.tar.gz`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-s3location.html#cfn-cloudformation-guardhook-s3location-uri
             '''
@@ -28316,7 +28590,9 @@ class CfnGuardHook(
 
         @builtins.property
         def version_id(self) -> typing.Optional[builtins.str]:
-            '''S3 object version.
+            '''For S3 buckets with versioning enabled, specifies the unique ID of the S3 object version to download your Guard rules or input parameters from.
+
+            The Guard Hook downloads files from S3 every time the Hook is invoked. To prevent accidental changes or deletions, we recommend using a version when configuring your Guard Hook.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-s3location.html#cfn-cloudformation-guardhook-s3location-versionid
             '''
@@ -28351,11 +28627,15 @@ class CfnGuardHook(
             stack_names: typing.Optional[typing.Union[IResolvable, typing.Union["CfnGuardHook.StackNamesProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             stack_roles: typing.Optional[typing.Union[IResolvable, typing.Union["CfnGuardHook.StackRolesProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         ) -> None:
-            '''Filters to allow hooks to target specific stack attributes.
+            '''The ``StackFilters`` property type specifies stack level filters for a Hook.
+
+            The ``StackNames`` or ``StackRoles`` properties are optional. However, you must specify at least one of these properties.
 
-            :param filtering_criteria: Attribute to specify the filtering behavior. ANY will make the Hook pass if one filter matches. ALL will make the Hook pass if all filters match Default: - "ALL"
-            :param stack_names: List of stack names as filters.
-            :param stack_roles: List of stack roles that are performing the stack operations.
+            For more information, see `AWS CloudFormation Hooks stack level filters <https://docs.aws.amazon.com/cloudformation-cli/latest/hooks-userguide/hooks-stack-level-filtering.html>`_ .
+
+            :param filtering_criteria: The filtering criteria. - All stack names and stack roles ( ``All`` ): The Hook will only be invoked when all specified filters match. - Any stack names and stack roles ( ``Any`` ): The Hook will be invoked if at least one of the specified filters match. Default: - "ALL"
+            :param stack_names: Includes or excludes specific stacks from Hook invocations.
+            :param stack_roles: Includes or excludes specific stacks from Hook invocations based on their associated IAM roles.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-stackfilters.html
             :exampleMetadata: fixture=_generated
@@ -28395,9 +28675,10 @@ class CfnGuardHook(
 
         @builtins.property
         def filtering_criteria(self) -> builtins.str:
-            '''Attribute to specify the filtering behavior.
+            '''The filtering criteria.
 
-            ANY will make the Hook pass if one filter matches. ALL will make the Hook pass if all filters match
+            - All stack names and stack roles ( ``All`` ): The Hook will only be invoked when all specified filters match.
+            - Any stack names and stack roles ( ``Any`` ): The Hook will be invoked if at least one of the specified filters match.
 
             :default: - "ALL"
 
@@ -28411,7 +28692,7 @@ class CfnGuardHook(
         def stack_names(
             self,
         ) -> typing.Optional[typing.Union[IResolvable, "CfnGuardHook.StackNamesProperty"]]:
-            '''List of stack names as filters.
+            '''Includes or excludes specific stacks from Hook invocations.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-stackfilters.html#cfn-cloudformation-guardhook-stackfilters-stacknames
             '''
@@ -28422,7 +28703,7 @@ class CfnGuardHook(
         def stack_roles(
             self,
         ) -> typing.Optional[typing.Union[IResolvable, "CfnGuardHook.StackRolesProperty"]]:
-            '''List of stack roles that are performing the stack operations.
+            '''Includes or excludes specific stacks from Hook invocations based on their associated IAM roles.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-stackfilters.html#cfn-cloudformation-guardhook-stackfilters-stackroles
             '''
@@ -28452,10 +28733,12 @@ class CfnGuardHook(
             exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
             include: typing.Optional[typing.Sequence[builtins.str]] = None,
         ) -> None:
-            '''List of stack names as filters.
+            '''Specifies the stack names for the ``StackFilters`` property type to include or exclude specific stacks from Hook invocations.
+
+            For more information, see `AWS CloudFormation Hooks stack level filters <https://docs.aws.amazon.com/cloudformation-cli/latest/hooks-userguide/hooks-stack-level-filtering.html>`_ .
 
-            :param exclude: List of stack names that the hook is going to be excluded from.
-            :param include: List of stack names that the hook is going to target.
+            :param exclude: The stack names to exclude. All stacks except those listed here will invoke the Hook.
+            :param include: The stack names to include. Only the stacks specified in this list will invoke the Hook.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-stacknames.html
             :exampleMetadata: fixture=_generated
@@ -28483,7 +28766,9 @@ class CfnGuardHook(
 
         @builtins.property
         def exclude(self) -> typing.Optional[typing.List[builtins.str]]:
-            '''List of stack names that the hook is going to be excluded from.
+            '''The stack names to exclude.
+
+            All stacks except those listed here will invoke the Hook.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-stacknames.html#cfn-cloudformation-guardhook-stacknames-exclude
             '''
@@ -28492,7 +28777,9 @@ class CfnGuardHook(
 
         @builtins.property
         def include(self) -> typing.Optional[typing.List[builtins.str]]:
-            '''List of stack names that the hook is going to target.
+            '''The stack names to include.
+
+            Only the stacks specified in this list will invoke the Hook.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-stacknames.html#cfn-cloudformation-guardhook-stacknames-include
             '''
@@ -28522,10 +28809,12 @@ class CfnGuardHook(
             exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
             include: typing.Optional[typing.Sequence[builtins.str]] = None,
         ) -> None:
-            '''List of stack roles that are performing the stack operations.
+            '''Specifies the stack roles for the ``StackFilters`` property type to include or exclude specific stacks from Hook invocations based on their associated IAM roles.
 
-            :param exclude: List of stack roles that the hook is going to be excluded from.
-            :param include: List of stack roles that the hook is going to target.
+            For more information, see `AWS CloudFormation Hooks stack level filters <https://docs.aws.amazon.com/cloudformation-cli/latest/hooks-userguide/hooks-stack-level-filtering.html>`_ .
+
+            :param exclude: The IAM role ARNs for stacks you want to exclude. The Hook will be invoked on all stacks except those initiated by the specified roles.
+            :param include: The IAM role ARNs to target stacks associated with these roles. Only stack operations initiated by these roles will invoke the Hook.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-stackroles.html
             :exampleMetadata: fixture=_generated
@@ -28553,7 +28842,9 @@ class CfnGuardHook(
 
         @builtins.property
         def exclude(self) -> typing.Optional[typing.List[builtins.str]]:
-            '''List of stack roles that the hook is going to be excluded from.
+            '''The IAM role ARNs for stacks you want to exclude.
+
+            The Hook will be invoked on all stacks except those initiated by the specified roles.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-stackroles.html#cfn-cloudformation-guardhook-stackroles-exclude
             '''
@@ -28562,7 +28853,9 @@ class CfnGuardHook(
 
         @builtins.property
         def include(self) -> typing.Optional[typing.List[builtins.str]]:
-            '''List of stack roles that the hook is going to target.
+            '''The IAM role ARNs to target stacks associated with these roles.
+
+            Only stack operations initiated by these roles will invoke the Hook.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-stackroles.html#cfn-cloudformation-guardhook-stackroles-include
             '''
@@ -28597,7 +28890,10 @@ class CfnGuardHook(
             invocation_points: typing.Optional[typing.Sequence[builtins.str]] = None,
             target_names: typing.Optional[typing.Sequence[builtins.str]] = None,
         ) -> None:
-            '''
+            '''The ``TargetFilters`` property type specifies the target filters for the Hook.
+
+            For more information, see `AWS CloudFormation Hook target filters <https://docs.aws.amazon.com/cloudformation-cli/latest/hooks-userguide/specify-hook-configuration-targetfilters.html>`_ .
+
             :param actions: List of actions that the hook is going to target.
             :param invocation_points: List of invocation points that the hook is going to target.
             :param target_names: List of type names that the hook is going to target.
@@ -28675,9 +28971,9 @@ class CfnHookDefaultVersion(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.CfnHookDefaultVersion",
 ):
-    '''The ``HookDefaultVersion`` resource specifies the default version of the hook.
+    '''The ``HookDefaultVersion`` resource specifies the default version of the Hook.
 
-    The default version of the hook is used in CloudFormation operations for this AWS account and AWS Region .
+    The default version of the Hook is used in CloudFormation operations for this AWS account and AWS Region .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookdefaultversion.html
     :cloudformationResource: AWS::CloudFormation::HookDefaultVersion
@@ -28708,7 +29004,7 @@ class CfnHookDefaultVersion(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param type_name: The name of the hook. You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
+        :param type_name: The name of the Hook. You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
         :param type_version_arn: The version ID of the type configuration. You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
         :param version_id: The version ID of the type specified. You must specify either ``TypeVersionArn`` , or ``TypeName`` and ``VersionId`` .
         '''
@@ -28771,7 +29067,7 @@ class CfnHookDefaultVersion(
     @builtins.property
     @jsii.member(jsii_name="typeName")
     def type_name(self) -> typing.Optional[builtins.str]:
-        '''The name of the hook.'''
+        '''The name of the Hook.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "typeName"))
 
     @type_name.setter
@@ -28814,7 +29110,7 @@ class CfnHookTypeConfig(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.CfnHookTypeConfig",
 ):
-    '''The ``HookTypeConfig`` resource specifies the configuration of a hook.
+    '''The ``HookTypeConfig`` resource specifies the configuration of a Hook.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hooktypeconfig.html
     :cloudformationResource: AWS::CloudFormation::HookTypeConfig
@@ -28849,10 +29145,10 @@ class CfnHookTypeConfig(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param configuration: Specifies the activated hook type configuration, in this AWS account and AWS Region . You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
-        :param configuration_alias: Specifies the activated hook type configuration, in this AWS account and AWS Region . Defaults to ``default`` alias. Hook types currently support default configuration alias. Default: - "default"
-        :param type_arn: The Amazon Resource Number (ARN) for the hook to set ``Configuration`` for. You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
-        :param type_name: The unique name for your hook. Specifies a three-part namespace for your hook, with a recommended pattern of ``Organization::Service::Hook`` . You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
+        :param configuration: Specifies the activated Hook type configuration, in this AWS account and AWS Region . You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
+        :param configuration_alias: Specifies the activated Hook type configuration, in this AWS account and AWS Region . Defaults to ``default`` alias. Hook types currently support default configuration alias. Default: - "default"
+        :param type_arn: The Amazon Resource Number (ARN) for the Hook to set ``Configuration`` for. You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
+        :param type_name: The unique name for your Hook. Specifies a three-part namespace for your Hook, with a recommended pattern of ``Organization::Service::Hook`` . You must specify either ``TypeName`` and ``Configuration`` or ``TypeArn`` and ``Configuration`` .
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__440c58795f3a6a77584c4efc0cb756d094deee80919471d9fe116992443f4255)
@@ -28900,7 +29196,7 @@ class CfnHookTypeConfig(
     @builtins.property
     @jsii.member(jsii_name="attrConfigurationArn")
     def attr_configuration_arn(self) -> builtins.str:
-        '''The Amazon Resource Number (ARN) of the activated hook type configuration, in this account and Region.
+        '''The Amazon Resource Number (ARN) of the activated Hook type configuration, in this account and Region.
 
         :cloudformationAttribute: ConfigurationArn
         '''
@@ -28914,7 +29210,7 @@ class CfnHookTypeConfig(
     @builtins.property
     @jsii.member(jsii_name="configuration")
     def configuration(self) -> builtins.str:
-        '''Specifies the activated hook type configuration, in this AWS account and AWS Region .'''
+        '''Specifies the activated Hook type configuration, in this AWS account and AWS Region .'''
         return typing.cast(builtins.str, jsii.get(self, "configuration"))
 
     @configuration.setter
@@ -28927,7 +29223,7 @@ class CfnHookTypeConfig(
     @builtins.property
     @jsii.member(jsii_name="configurationAlias")
     def configuration_alias(self) -> typing.Optional[builtins.str]:
-        '''Specifies the activated hook type configuration, in this AWS account and AWS Region .'''
+        '''Specifies the activated Hook type configuration, in this AWS account and AWS Region .'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "configurationAlias"))
 
     @configuration_alias.setter
@@ -28940,7 +29236,7 @@ class CfnHookTypeConfig(
     @builtins.property
     @jsii.member(jsii_name="typeArn")
     def type_arn(self) -> typing.Optional[builtins.str]:
-        '''The Amazon Resource Number (ARN) for the hook to set ``Configuration`` for.'''
+        '''The Amazon Resource Number (ARN) for the Hook to set ``Configuration`` for.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "typeArn"))
 
     @type_arn.setter
@@ -28953,7 +29249,7 @@ class CfnHookTypeConfig(
     @builtins.property
     @jsii.member(jsii_name="typeName")
     def type_name(self) -> typing.Optional[builtins.str]:
-        '''The unique name for your hook.'''
+        '''The unique name for your Hook.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "typeName"))
 
     @type_name.setter
@@ -28970,7 +29266,7 @@ class CfnHookVersion(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.CfnHookVersion",
 ):
-    '''The ``HookVersion`` resource publishes new or first hook version to the AWS CloudFormation registry.
+    '''The ``HookVersion`` resource publishes new or first Hook version to the AWS CloudFormation registry.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-hookversion.html
     :cloudformationResource: AWS::CloudFormation::HookVersion
@@ -29008,9 +29304,9 @@ class CfnHookVersion(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param schema_handler_package: A URL to the Amazon S3 bucket containing the hook project package that contains the necessary files for the hook you want to register. For information on generating a schema handler package for the resource you want to register, see `submit <https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/resource-type-cli-submit.html>`_ in the *CloudFormation CLI User Guide for Extension Development* . .. epigraph:: The user registering the resource must be able to access the package in the S3 bucket. That's, the user must have `GetObject <https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html>`_ permissions for the schema handler package. For more information, see `Actions, Resources, and Condition Keys for Amazon S3 <https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazons3.html>`_ in the *AWS Identity and Access Management User Guide* .
+        :param schema_handler_package: A URL to the Amazon S3 bucket containing the Hook project package that contains the necessary files for the Hook you want to register. For information on generating a schema handler package for the resource you want to register, see `submit <https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/resource-type-cli-submit.html>`_ in the *CloudFormation CLI User Guide for Extension Development* . .. epigraph:: The user registering the resource must be able to access the package in the S3 bucket. That's, the user must have `GetObject <https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html>`_ permissions for the schema handler package. For more information, see `Actions, Resources, and Condition Keys for Amazon S3 <https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazons3.html>`_ in the *AWS Identity and Access Management User Guide* .
         :param type_name: The unique name for your hook. Specifies a three-part namespace for your hook, with a recommended pattern of ``Organization::Service::Hook`` . .. epigraph:: The following organization namespaces are reserved and can't be used in your hook type names: - ``Alexa`` - ``AMZN`` - ``Amazon`` - ``ASK`` - ``AWS`` - ``Custom`` - ``Dev``
-        :param execution_role_arn: The Amazon Resource Name (ARN) of the task execution role that grants the hook permission.
+        :param execution_role_arn: The Amazon Resource Name (ARN) of the task execution role that grants the Hook permission.
         :param logging_config: Contains logging configuration information for an extension.
         '''
         if __debug__:
@@ -29059,7 +29355,7 @@ class CfnHookVersion(
     @builtins.property
     @jsii.member(jsii_name="attrArn")
     def attr_arn(self) -> builtins.str:
-        '''The Amazon Resource Name (ARN) of the hook.
+        '''The Amazon Resource Name (ARN) of the Hook.
 
         :cloudformationAttribute: Arn
         '''
@@ -29068,7 +29364,7 @@ class CfnHookVersion(
     @builtins.property
     @jsii.member(jsii_name="attrIsDefaultVersion")
     def attr_is_default_version(self) -> IResolvable:
-        '''Whether the specified hook version is set as the default version.
+        '''Whether the specified Hook version is set as the default version.
 
         :cloudformationAttribute: IsDefaultVersion
         '''
@@ -29077,7 +29373,7 @@ class CfnHookVersion(
     @builtins.property
     @jsii.member(jsii_name="attrTypeArn")
     def attr_type_arn(self) -> builtins.str:
-        '''The Amazon Resource Number (ARN) assigned to this version of the hook.
+        '''The Amazon Resource Number (ARN) assigned to this version of the Hook.
 
         :cloudformationAttribute: TypeArn
         '''
@@ -29086,7 +29382,7 @@ class CfnHookVersion(
     @builtins.property
     @jsii.member(jsii_name="attrVersionId")
     def attr_version_id(self) -> builtins.str:
-        '''The ID of this version of the hook.
+        '''The ID of this version of the Hook.
 
         :cloudformationAttribute: VersionId
         '''
@@ -29114,7 +29410,7 @@ class CfnHookVersion(
     @builtins.property
     @jsii.member(jsii_name="schemaHandlerPackage")
     def schema_handler_package(self) -> builtins.str:
-        '''A URL to the Amazon S3 bucket containing the hook project package that contains the necessary files for the hook you want to register.'''
+        '''A URL to the Amazon S3 bucket containing the Hook project package that contains the necessary files for the Hook you want to register.'''
         return typing.cast(builtins.str, jsii.get(self, "schemaHandlerPackage"))
 
     @schema_handler_package.setter
@@ -29140,7 +29436,7 @@ class CfnHookVersion(
     @builtins.property
     @jsii.member(jsii_name="executionRoleArn")
     def execution_role_arn(self) -> typing.Optional[builtins.str]:
-        '''The Amazon Resource Name (ARN) of the task execution role that grants the hook permission.'''
+        '''The Amazon Resource Name (ARN) of the task execution role that grants the Hook permission.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "executionRoleArn"))
 
     @execution_role_arn.setter
@@ -29339,7 +29635,9 @@ class CfnLambdaHook(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.CfnLambdaHook",
 ):
-    '''This is a CloudFormation resource for the first-party AWS::Hooks::LambdaHook.
+    '''The ``AWS::CloudFormation::LambdaHook`` resource creates a Lambda Hook with the specified attributes within your CloudFormation template.
+
+    You can use a Lambda Hook to evaluate your resources before allowing stack creation, modification, or deletion. This resource forwards requests for resource evaluation to a Lambda function. For more information, see `Lambda Hooks <https://docs.aws.amazon.com/cloudformation-cli/latest/hooks-userguide/lambda-hooks.html>`_ in the *AWS CloudFormation Hooks User Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-lambdahook.html
     :cloudformationResource: AWS::CloudFormation::LambdaHook
@@ -29398,14 +29696,14 @@ class CfnLambdaHook(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param alias: The typename alias for the hook.
-        :param execution_role: IAM Role ARN.
-        :param failure_mode: Attribute to specify CloudFormation behavior on hook failure.
-        :param hook_status: Attribute to specify which stacks this hook applies to or should get invoked for. Default: - "ENABLED"
-        :param lambda_function: Amazon Resource Name (ARN), Partial ARN, name, version, or alias of the Lambda function to invoke with this hook.
-        :param target_operations: Which operations should this Hook run against? Resource changes, stacks or change sets.
-        :param stack_filters: Filters to allow hooks to target specific stack attributes.
-        :param target_filters: 
+        :param alias: The type name alias for the Hook. This alias must be unique per account and Region. The alias must be in the form ``Name1::Name2::Name3`` and must not begin with ``AWS`` . For example, ``Private::Lambda::MyTestHook`` .
+        :param execution_role: The IAM role that the Hook assumes to invoke your Lambda function.
+        :param failure_mode: Specifies how the Hook responds when the Lambda function invoked by the Hook returns a ``FAILED`` response. - ``FAIL`` : Prevents the action from proceeding. This is helpful for enforcing strict compliance or security policies. - ``WARN`` : Issues warnings to users but allows actions to continue. This is useful for non-critical validations or informational checks.
+        :param hook_status: Specifies if the Hook is ``ENABLED`` or ``DISABLED`` . Default: - "ENABLED"
+        :param lambda_function: Specifies the Lambda function for the Hook. You can use:. - The full Amazon Resource Name (ARN) without a suffix. - A qualified ARN with a version or alias suffix.
+        :param target_operations: Specifies which type of operation the Hook is run against. Valid values: ``STACK`` | ``RESOURCE`` | ``CHANGE_SET`` | ``CLOUD_CONTROL``
+        :param stack_filters: Specifies the stack level filters for the Hook.
+        :param target_filters: Specifies the target filters for the Hook.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__407b4a631e3a832f02376728222302ded8f1ba90d2538b0469e5b99641f17447)
@@ -29457,7 +29755,7 @@ class CfnLambdaHook(
     @builtins.property
     @jsii.member(jsii_name="attrHookArn")
     def attr_hook_arn(self) -> builtins.str:
-        '''The Amazon Resource Name (ARN) of the activated hook.
+        '''Returns the ARN of a Lambda Hook.
 
         :cloudformationAttribute: HookArn
         '''
@@ -29471,7 +29769,10 @@ class CfnLambdaHook(
     @builtins.property
     @jsii.member(jsii_name="alias")
     def alias(self) -> builtins.str:
-        '''The typename alias for the hook.'''
+        '''The type name alias for the Hook.
+
+        This alias must be unique per account and Region.
+        '''
         return typing.cast(builtins.str, jsii.get(self, "alias"))
 
     @alias.setter
@@ -29484,7 +29785,7 @@ class CfnLambdaHook(
     @builtins.property
     @jsii.member(jsii_name="executionRole")
     def execution_role(self) -> builtins.str:
-        '''IAM Role ARN.'''
+        '''The IAM role that the Hook assumes to invoke your Lambda function.'''
         return typing.cast(builtins.str, jsii.get(self, "executionRole"))
 
     @execution_role.setter
@@ -29497,7 +29798,7 @@ class CfnLambdaHook(
     @builtins.property
     @jsii.member(jsii_name="failureMode")
     def failure_mode(self) -> builtins.str:
-        '''Attribute to specify CloudFormation behavior on hook failure.'''
+        '''Specifies how the Hook responds when the Lambda function invoked by the Hook returns a ``FAILED`` response.'''
         return typing.cast(builtins.str, jsii.get(self, "failureMode"))
 
     @failure_mode.setter
@@ -29510,7 +29811,7 @@ class CfnLambdaHook(
     @builtins.property
     @jsii.member(jsii_name="hookStatus")
     def hook_status(self) -> builtins.str:
-        '''Attribute to specify which stacks this hook applies to or should get invoked for.'''
+        '''Specifies if the Hook is ``ENABLED`` or ``DISABLED`` .'''
         return typing.cast(builtins.str, jsii.get(self, "hookStatus"))
 
     @hook_status.setter
@@ -29523,7 +29824,10 @@ class CfnLambdaHook(
     @builtins.property
     @jsii.member(jsii_name="lambdaFunction")
     def lambda_function(self) -> builtins.str:
-        '''Amazon Resource Name (ARN), Partial ARN, name, version, or alias of the Lambda function to invoke with this hook.'''
+        '''Specifies the Lambda function for the Hook.
+
+        You can use:.
+        '''
         return typing.cast(builtins.str, jsii.get(self, "lambdaFunction"))
 
     @lambda_function.setter
@@ -29536,7 +29840,7 @@ class CfnLambdaHook(
     @builtins.property
     @jsii.member(jsii_name="targetOperations")
     def target_operations(self) -> typing.List[builtins.str]:
-        '''Which operations should this Hook run against?'''
+        '''Specifies which type of operation the Hook is run against.'''
         return typing.cast(typing.List[builtins.str], jsii.get(self, "targetOperations"))
 
     @target_operations.setter
@@ -29551,7 +29855,7 @@ class CfnLambdaHook(
     def stack_filters(
         self,
     ) -> typing.Optional[typing.Union[IResolvable, "CfnLambdaHook.StackFiltersProperty"]]:
-        '''Filters to allow hooks to target specific stack attributes.'''
+        '''Specifies the stack level filters for the Hook.'''
         return typing.cast(typing.Optional[typing.Union[IResolvable, "CfnLambdaHook.StackFiltersProperty"]], jsii.get(self, "stackFilters"))
 
     @stack_filters.setter
@@ -29569,6 +29873,7 @@ class CfnLambdaHook(
     def target_filters(
         self,
     ) -> typing.Optional[typing.Union[IResolvable, "CfnLambdaHook.TargetFiltersProperty"]]:
+        '''Specifies the target filters for the Hook.'''
         return typing.cast(typing.Optional[typing.Union[IResolvable, "CfnLambdaHook.TargetFiltersProperty"]], jsii.get(self, "targetFilters"))
 
     @target_filters.setter
@@ -29598,11 +29903,15 @@ class CfnLambdaHook(
             stack_names: typing.Optional[typing.Union[IResolvable, typing.Union["CfnLambdaHook.StackNamesProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             stack_roles: typing.Optional[typing.Union[IResolvable, typing.Union["CfnLambdaHook.StackRolesProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         ) -> None:
-            '''Filters to allow hooks to target specific stack attributes.
+            '''The ``StackFilters`` property type specifies stack level filters for a Hook.
+
+            The ``StackNames`` or ``StackRoles`` properties are optional. However, you must specify at least one of these properties.
+
+            For more information, see `AWS CloudFormation Hooks stack level filters <https://docs.aws.amazon.com/cloudformation-cli/latest/hooks-userguide/hooks-stack-level-filtering.html>`_ .
 
-            :param filtering_criteria: Attribute to specify the filtering behavior. ANY will make the Hook pass if one filter matches. ALL will make the Hook pass if all filters match Default: - "ALL"
-            :param stack_names: List of stack names as filters.
-            :param stack_roles: List of stack roles that are performing the stack operations.
+            :param filtering_criteria: The filtering criteria. - All stack names and stack roles ( ``All`` ): The Hook will only be invoked when all specified filters match. - Any stack names and stack roles ( ``Any`` ): The Hook will be invoked if at least one of the specified filters match. Default: - "ALL"
+            :param stack_names: Includes or excludes specific stacks from Hook invocations.
+            :param stack_roles: Includes or excludes specific stacks from Hook invocations based on their associated IAM roles.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-stackfilters.html
             :exampleMetadata: fixture=_generated
@@ -29642,9 +29951,10 @@ class CfnLambdaHook(
 
         @builtins.property
         def filtering_criteria(self) -> builtins.str:
-            '''Attribute to specify the filtering behavior.
+            '''The filtering criteria.
 
-            ANY will make the Hook pass if one filter matches. ALL will make the Hook pass if all filters match
+            - All stack names and stack roles ( ``All`` ): The Hook will only be invoked when all specified filters match.
+            - Any stack names and stack roles ( ``Any`` ): The Hook will be invoked if at least one of the specified filters match.
 
             :default: - "ALL"
 
@@ -29658,7 +29968,7 @@ class CfnLambdaHook(
         def stack_names(
             self,
         ) -> typing.Optional[typing.Union[IResolvable, "CfnLambdaHook.StackNamesProperty"]]:
-            '''List of stack names as filters.
+            '''Includes or excludes specific stacks from Hook invocations.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-stackfilters.html#cfn-cloudformation-lambdahook-stackfilters-stacknames
             '''
@@ -29669,7 +29979,7 @@ class CfnLambdaHook(
         def stack_roles(
             self,
         ) -> typing.Optional[typing.Union[IResolvable, "CfnLambdaHook.StackRolesProperty"]]:
-            '''List of stack roles that are performing the stack operations.
+            '''Includes or excludes specific stacks from Hook invocations based on their associated IAM roles.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-stackfilters.html#cfn-cloudformation-lambdahook-stackfilters-stackroles
             '''
@@ -29699,10 +30009,12 @@ class CfnLambdaHook(
             exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
             include: typing.Optional[typing.Sequence[builtins.str]] = None,
         ) -> None:
-            '''List of stack names as filters.
+            '''Specifies the stack names for the ``StackFilters`` property type to include or exclude specific stacks from Hook invocations.
 
-            :param exclude: List of stack names that the hook is going to be excluded from.
-            :param include: List of stack names that the hook is going to target.
+            For more information, see `AWS CloudFormation Hooks stack level filters <https://docs.aws.amazon.com/cloudformation-cli/latest/hooks-userguide/hooks-stack-level-filtering.html>`_ .
+
+            :param exclude: The stack names to exclude. All stacks except those listed here will invoke the Hook.
+            :param include: The stack names to include. Only the stacks specified in this list will invoke the Hook.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-stacknames.html
             :exampleMetadata: fixture=_generated
@@ -29730,7 +30042,9 @@ class CfnLambdaHook(
 
         @builtins.property
         def exclude(self) -> typing.Optional[typing.List[builtins.str]]:
-            '''List of stack names that the hook is going to be excluded from.
+            '''The stack names to exclude.
+
+            All stacks except those listed here will invoke the Hook.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-stacknames.html#cfn-cloudformation-lambdahook-stacknames-exclude
             '''
@@ -29739,7 +30053,9 @@ class CfnLambdaHook(
 
         @builtins.property
         def include(self) -> typing.Optional[typing.List[builtins.str]]:
-            '''List of stack names that the hook is going to target.
+            '''The stack names to include.
+
+            Only the stacks specified in this list will invoke the Hook.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-stacknames.html#cfn-cloudformation-lambdahook-stacknames-include
             '''
@@ -29769,10 +30085,12 @@ class CfnLambdaHook(
             exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
             include: typing.Optional[typing.Sequence[builtins.str]] = None,
         ) -> None:
-            '''List of stack roles that are performing the stack operations.
+            '''Specifies the stack roles for the ``StackFilters`` property type to include or exclude specific stacks from Hook invocations based on their associated IAM roles.
 
-            :param exclude: List of stack roles that the hook is going to be excluded from.
-            :param include: List of stack roles that the hook is going to target.
+            For more information, see `AWS CloudFormation Hooks stack level filters <https://docs.aws.amazon.com/cloudformation-cli/latest/hooks-userguide/hooks-stack-level-filtering.html>`_ .
+
+            :param exclude: The IAM role ARNs for stacks you want to exclude. The Hook will be invoked on all stacks except those initiated by the specified roles.
+            :param include: The IAM role ARNs to target stacks associated with these roles. Only stack operations initiated by these roles will invoke the Hook.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-stackroles.html
             :exampleMetadata: fixture=_generated
@@ -29800,7 +30118,9 @@ class CfnLambdaHook(
 
         @builtins.property
         def exclude(self) -> typing.Optional[typing.List[builtins.str]]:
-            '''List of stack roles that the hook is going to be excluded from.
+            '''The IAM role ARNs for stacks you want to exclude.
+
+            The Hook will be invoked on all stacks except those initiated by the specified roles.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-stackroles.html#cfn-cloudformation-lambdahook-stackroles-exclude
             '''
@@ -29809,7 +30129,9 @@ class CfnLambdaHook(
 
         @builtins.property
         def include(self) -> typing.Optional[typing.List[builtins.str]]:
-            '''List of stack roles that the hook is going to target.
+            '''The IAM role ARNs to target stacks associated with these roles.
+
+            Only stack operations initiated by these roles will invoke the Hook.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-stackroles.html#cfn-cloudformation-lambdahook-stackroles-include
             '''
@@ -29844,7 +30166,10 @@ class CfnLambdaHook(
             invocation_points: typing.Optional[typing.Sequence[builtins.str]] = None,
             target_names: typing.Optional[typing.Sequence[builtins.str]] = None,
         ) -> None:
-            '''
+            '''The ``TargetFilters`` property type specifies the target filters for the Hook.
+
+            For more information, see `AWS CloudFormation Hook target filters <https://docs.aws.amazon.com/cloudformation-cli/latest/hooks-userguide/specify-hook-configuration-targetfilters.html>`_ .
+
             :param actions: List of actions that the hook is going to target.
             :param invocation_points: List of invocation points that the hook is going to target.
             :param target_names: List of type names that the hook is going to target.
@@ -35625,6 +35950,9 @@ __all__ = [
     "Arn",
     "ArnComponents",
     "ArnFormat",
+    "AspectApplication",
+    "AspectOptions",
+    "AspectPriority",
     "Aspects",
     "AssetHashType",
     "AssetManifestBuilder",
@@ -35749,6 +36077,7 @@ __all__ = [
     "Duration",
     "EncodingOptions",
     "Environment",
+    "Errors",
     "Expiration",
     "ExportValueOptions",
     "FeatureFlags",
@@ -35993,6 +36322,7 @@ __all__ = [
     "aws_inspector",
     "aws_inspectorv2",
     "aws_internetmonitor",
+    "aws_invoicing",
     "aws_iot",
     "aws_iot1click",
     "aws_iotanalytics",
@@ -36283,6 +36613,7 @@ from . import aws_imagebuilder
 from . import aws_inspector
 from . import aws_inspectorv2
 from . import aws_internetmonitor
+from . import aws_invoicing
 from . import aws_iot
 from . import aws_iot1click
 from . import aws_iotanalytics
@@ -36531,6 +36862,27 @@ def _typecheckingstub__4565cb9b5469dd4d4c1d23e54f8933087065a599bfce16e56da30ffbc
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__9e9e7eccccdbb57b560afbe6d0b0f0653f49bc2cf8739189ca2dfd2305348a44(
+    construct: _constructs_77d1e7e8.IConstruct,
+    aspect: IAspect,
+    priority: jsii.Number,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__5caf783430302b32bfab31d65627bb13dae6c0e9f42b0a5443818db8b0503d54(
+    value: jsii.Number,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__1761263abda35b4b2f599d4ff5122c0e7ad15a95af4498d9c6e04e78bc4a4b76(
+    *,
+    priority: typing.Optional[jsii.Number] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__c08382b7db1bf0c2efa4c2d0aa06e663a1761fa93a12226a128ebaac5b577314(
     scope: _constructs_77d1e7e8.IConstruct,
 ) -> None:
@@ -36539,6 +36891,8 @@ def _typecheckingstub__c08382b7db1bf0c2efa4c2d0aa06e663a1761fa93a12226a128ebaac5
 
 def _typecheckingstub__3a0ed518e4a98c831b3b8dcdf7981d87fff56769689b00526e1e9d8df1b39f84(
     aspect: IAspect,
+    *,
+    priority: typing.Optional[jsii.Number] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -37739,6 +38093,18 @@ def _typecheckingstub__779551ef0a4b144070fd2c3e88ff076e32ad12d30facdc65a940b7a87
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__0c62bc5a6fe032556ae3c32e105ddaad3f4ca89286fd26884af6347d3364c5ae(
+    x: typing.Any,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__c9afe20487c547932befb7a2f6567c38793e8d7df55f47046e1cfb408408d733(
+    x: typing.Any,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__086ea26442655ff69dcf03ab98e8412412bd4dc9ce30d181e3a559323dcede99(
     t: Duration,
 ) -> None:
@@ -39102,6 +39468,7 @@ def _typecheckingstub__c519a1aa0534921a8dfdfa69ddc24b52c09a7eb52fc889f7fb96b737e
 
 def _typecheckingstub__e8b2b0462b32cc3d2ec10c615bf94a3122bcdd5b1e2c521fb377665ba9a5a618(
     *,
+    aspect_stabilization: typing.Optional[builtins.bool] = None,
     error_on_duplicate_synth: typing.Optional[builtins.bool] = None,
     force: typing.Optional[builtins.bool] = None,
     skip_validation: typing.Optional[builtins.bool] = None,