aws-cdk-lib 2.181.1__py3-none-any.whl → 2.183.0__py3-none-any.whl

aws_cdk/__init__.py

@@ -1539,6 +1539,7 @@ from .cloud_assembly_schema import (
     AssetManifestOptions as _AssetManifestOptions_73b93270,
     AvailabilityZonesContextQuery as _AvailabilityZonesContextQuery_715a9fea,
     BootstrapRole as _BootstrapRole_9b326056,
+    CcApiContextQuery as _CcApiContextQuery_7347fbd4,
     ContextProvider as _ContextProvider_fa789bb5,
     DockerImageDestination as _DockerImageDestination_132046c7,
     DockerImageSource as _DockerImageSource_5db2cfa3,
@@ -2347,7 +2348,7 @@ class AspectOptions:
     def __init__(self, *, priority: typing.Optional[jsii.Number] = None) -> None:
         '''Options when Applying an Aspect.
 
-        :param priority: The priority value to apply on an Aspect. Priority must be a non-negative integer. Default: - AspectPriority.DEFAULT
+        :param priority: The priority value to apply on an Aspect. Priority must be a non-negative integer. Aspects that have same priority value are not guaranteed to be executed in a consistent order. Default: AspectPriority.DEFAULT
 
         :exampleMetadata: fixture=_generated
 
@@ -2370,11 +2371,12 @@ class AspectOptions:
 
     @builtins.property
     def priority(self) -> typing.Optional[jsii.Number]:
-        '''The priority value to apply on an Aspect.
+        '''The priority value to apply on an Aspect. Priority must be a non-negative integer.
 
-        Priority must be a non-negative integer.
+        Aspects that have same priority value are not guaranteed to be
+        executed in a consistent order.
 
-        :default: - AspectPriority.DEFAULT
+        :default: AspectPriority.DEFAULT
         '''
         result = self._values.get("priority")
         return typing.cast(typing.Optional[jsii.Number], result)
@@ -2482,7 +2484,7 @@ class Aspects(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.Aspects"):
         '''Adds an aspect to apply this scope before synthesis.
 
         :param aspect: The aspect to add.
-        :param priority: The priority value to apply on an Aspect. Priority must be a non-negative integer. Default: - AspectPriority.DEFAULT
+        :param priority: The priority value to apply on an Aspect. Priority must be a non-negative integer. Aspects that have same priority value are not guaranteed to be executed in a consistent order. Default: AspectPriority.DEFAULT
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__3a0ed518e4a98c831b3b8dcdf7981d87fff56769689b00526e1e9d8df1b39f84)
@@ -5316,6 +5318,13 @@ class CfnGuardHookProps:
                     )
                 ),
                 target_filters=cdk.CfnGuardHook.TargetFiltersProperty(
+                    targets=[cdk.CfnGuardHook.HookTargetProperty(
+                        action="action",
+                        invocation_point="invocationPoint",
+                        target_name="targetName"
+                    )],
+            
+                    # the properties below are optional
                     actions=["actions"],
                     invocation_points=["invocationPoints"],
                     target_names=["targetNames"]
@@ -6109,6 +6118,13 @@ class CfnLambdaHookProps:
                     )
                 ),
                 target_filters=cdk.CfnLambdaHook.TargetFiltersProperty(
+                    targets=[cdk.CfnLambdaHook.HookTargetProperty(
+                        action="action",
+                        invocation_point="invocationPoint",
+                        target_name="targetName"
+                    )],
+            
+                    # the properties below are optional
                     actions=["actions"],
                     invocation_points=["invocationPoints"],
                     target_names=["targetNames"]
@@ -8840,7 +8856,7 @@ class CfnStackProps:
         '''Properties for defining a ``CfnStack``.
 
         :param notification_arns: The Amazon SNS topic ARNs to publish stack related events. You can find your Amazon SNS topic ARNs using the Amazon SNS console or your Command Line Interface (CLI).
-        :param parameters: The set value pairs that represent the parameters passed to CloudFormation when this nested stack is created. Each parameter has a name corresponding to a parameter defined in the embedded template and a value representing the value that you want to set for the parameter. .. epigraph:: If you use the ``Ref`` function to pass a parameter value to a nested stack, comma-delimited list parameters must be of type ``String`` . In other words, you can't pass values that are of type ``CommaDelimitedList`` to nested stacks. Conditional. Required if the nested stack requires input parameters. Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
+        :param parameters: The set value pairs that represent the parameters passed to CloudFormation when this nested stack is created. Each parameter has a name corresponding to a parameter defined in the embedded template and a value representing the value that you want to set for the parameter. .. epigraph:: If you use the ``Ref`` function to pass a parameter value to a nested stack, comma-delimited list parameters must be of type ``String`` . In other words, you can't pass values that are of type ``CommaDelimitedList`` to nested stacks. Required if the nested stack requires input parameters. Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
         :param tags: Key-value pairs to associate with this stack. CloudFormation also propagates these tags to the resources created in the stack. A maximum number of 50 tags can be specified.
         :param template_url: The URL of a file containing the template body. The URL must point to a template (max size: 1 MB) that's located in an Amazon S3 bucket. The location for an Amazon S3 bucket must start with ``https://`` . Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
         :param timeout_in_minutes: The length of time, in minutes, that CloudFormation waits for the nested stack to reach the ``CREATE_COMPLETE`` state. The default is no timeout. When CloudFormation detects that the nested stack has reached the ``CREATE_COMPLETE`` state, it marks the nested stack resource as ``CREATE_COMPLETE`` in the parent stack and resumes creating the parent stack. If the timeout period expires before the nested stack reaches ``CREATE_COMPLETE`` , CloudFormation marks the nested stack as failed and rolls back both the nested stack and parent stack. Updates aren't supported.
@@ -8908,7 +8924,7 @@ class CfnStackProps:
 
            If you use the ``Ref`` function to pass a parameter value to a nested stack, comma-delimited list parameters must be of type ``String`` . In other words, you can't pass values that are of type ``CommaDelimitedList`` to nested stacks.
 
-        Conditional. Required if the nested stack requires input parameters.
+        Required if the nested stack requires input parameters.
 
         Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
 
@@ -9010,13 +9026,13 @@ class CfnStackSetProps:
         '''Properties for defining a ``CfnStackSet``.
 
         :param permission_model: Describes how the IAM roles required for stack set operations are created. - With ``SELF_MANAGED`` permissions, you must create the administrator and execution roles required to deploy to target accounts. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . - With ``SERVICE_MANAGED`` permissions, StackSets automatically creates the IAM roles required to deploy to accounts managed by AWS Organizations . For more information, see `Activate trusted access for stack sets with AWS Organizations <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-activate-trusted-access.html>`_ in the *AWS CloudFormation User Guide* .
-        :param stack_set_name: The name to associate with the stack set. The name must be unique in the Region where you create your stack set. .. epigraph:: The ``StackSetName`` property is required.
-        :param administration_role_arn: The Amazon Resource Number (ARN) of the IAM role to use to create this stack set. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. Use customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . *Minimum* : ``20`` *Maximum* : ``2048``
-        :param auto_deployment: [ ``Service-managed`` permissions] Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU).
-        :param call_as: [Service-managed permissions] Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account. By default, ``SELF`` is specified. Use ``SELF`` for stack sets with self-managed permissions. - To create a stack set with service-managed permissions while signed in to the management account, specify ``SELF`` . - To create a stack set with service-managed permissions while signed in to a delegated administrator account, specify ``DELEGATED_ADMIN`` . Your AWS account must be registered as a delegated admin in the management account. For more information, see `Register a delegated administrator <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html>`_ in the *AWS CloudFormation User Guide* . Stack sets with service-managed permissions are created in the management account, including stack sets that are created by delegated administrators. *Valid Values* : ``SELF`` | ``DELEGATED_ADMIN``
+        :param stack_set_name: The name to associate with the stack set. The name must be unique in the Region where you create your stack set.
+        :param administration_role_arn: The Amazon Resource Number (ARN) of the IAM role to use to create this stack set. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. Use customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . Valid only if the permissions model is ``SELF_MANAGED`` .
+        :param auto_deployment: Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU). For more information, see `Manage automatic deployments for CloudFormation StackSets that use service-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-manage-auto-deployment.html>`_ in the *AWS CloudFormation User Guide* . Required if the permissions model is ``SERVICE_MANAGED`` . (Not used with self-managed permissions.)
+        :param call_as: Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account. By default, ``SELF`` is specified. Use ``SELF`` for stack sets with self-managed permissions. - To create a stack set with service-managed permissions while signed in to the management account, specify ``SELF`` . - To create a stack set with service-managed permissions while signed in to a delegated administrator account, specify ``DELEGATED_ADMIN`` . Your AWS account must be registered as a delegated admin in the management account. For more information, see `Register a delegated administrator <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html>`_ in the *AWS CloudFormation User Guide* . Stack sets with service-managed permissions are created in the management account, including stack sets that are created by delegated administrators. Valid only if the permissions model is ``SERVICE_MANAGED`` .
         :param capabilities: The capabilities that are allowed in the stack set. Some stack set templates might include resources that can affect permissions in your AWS account —for example, by creating new IAM users. For more information, see `Acknowledging IAM resources in CloudFormation templates <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities>`_ in the *AWS CloudFormation User Guide* .
-        :param description: A description of the stack set. *Minimum* : ``1`` *Maximum* : ``1024``
-        :param execution_role_name: The name of the IAM execution role to use to create the stack set. If you don't specify an execution role, CloudFormation uses the ``AWSCloudFormationStackSetExecutionRole`` role for the stack set operation. *Minimum* : ``1`` *Maximum* : ``64`` *Pattern* : ``[a-zA-Z_0-9+=,.@-]+``
+        :param description: A description of the stack set.
+        :param execution_role_name: The name of the IAM execution role to use to create the stack set. If you don't specify an execution role, CloudFormation uses the ``AWSCloudFormationStackSetExecutionRole`` role for the stack set operation. Valid only if the permissions model is ``SELF_MANAGED`` . *Pattern* : ``[a-zA-Z_0-9+=,.@-]+``
         :param managed_execution: Describes whether StackSets performs non-conflicting operations concurrently and queues conflicting operations. When active, StackSets performs non-conflicting operations concurrently and queues conflicting operations. After conflicting operations finish, StackSets starts queued operations in request order. .. epigraph:: If there are already running or queued operations, StackSets queues all incoming operations even if they are non-conflicting. You can't modify your stack set's execution configuration while there are running or queued operations for that stack set. When inactive (default), StackSets performs one operation at a time in request order.
         :param operation_preferences: The user-specified preferences for how CloudFormation performs a stack set operation.
         :param parameters: The input parameters for the stack set template.
@@ -9153,9 +9169,6 @@ class CfnStackSetProps:
         '''The name to associate with the stack set.
 
         The name must be unique in the Region where you create your stack set.
-        .. epigraph::
-
-           The ``StackSetName`` property is required.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html#cfn-cloudformation-stackset-stacksetname
         '''
@@ -9171,9 +9184,7 @@ class CfnStackSetProps:
 
         Use customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* .
 
-        *Minimum* : ``20``
-
-        *Maximum* : ``2048``
+        Valid only if the permissions model is ``SELF_MANAGED`` .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html#cfn-cloudformation-stackset-administrationrolearn
         '''
@@ -9184,7 +9195,11 @@ class CfnStackSetProps:
     def auto_deployment(
         self,
     ) -> typing.Optional[typing.Union["IResolvable", "CfnStackSet.AutoDeploymentProperty"]]:
-        '''[ ``Service-managed`` permissions] Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU).
+        '''Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU).
+
+        For more information, see `Manage automatic deployments for CloudFormation StackSets that use service-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-manage-auto-deployment.html>`_ in the *AWS CloudFormation User Guide* .
+
+        Required if the permissions model is ``SERVICE_MANAGED`` . (Not used with self-managed permissions.)
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html#cfn-cloudformation-stackset-autodeployment
         '''
@@ -9193,7 +9208,7 @@ class CfnStackSetProps:
 
     @builtins.property
     def call_as(self) -> typing.Optional[builtins.str]:
-        '''[Service-managed permissions] Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account.
+        '''Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account.
 
         By default, ``SELF`` is specified. Use ``SELF`` for stack sets with self-managed permissions.
 
@@ -9204,7 +9219,7 @@ class CfnStackSetProps:
 
         Stack sets with service-managed permissions are created in the management account, including stack sets that are created by delegated administrators.
 
-        *Valid Values* : ``SELF`` | ``DELEGATED_ADMIN``
+        Valid only if the permissions model is ``SERVICE_MANAGED`` .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html#cfn-cloudformation-stackset-callas
         '''
@@ -9226,10 +9241,6 @@ class CfnStackSetProps:
     def description(self) -> typing.Optional[builtins.str]:
         '''A description of the stack set.
 
-        *Minimum* : ``1``
-
-        *Maximum* : ``1024``
-
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html#cfn-cloudformation-stackset-description
         '''
         result = self._values.get("description")
@@ -9241,9 +9252,7 @@ class CfnStackSetProps:
 
         If you don't specify an execution role, CloudFormation uses the ``AWSCloudFormationStackSetExecutionRole`` role for the stack set operation.
 
-        *Minimum* : ``1``
-
-        *Maximum* : ``64``
+        Valid only if the permissions model is ``SELF_MANAGED`` .
 
         *Pattern* : ``[a-zA-Z_0-9+=,.@-]+``
 
@@ -18154,6 +18163,151 @@ class LazyStringValueOptions:
         )
 
 
+class MissingRemovalPolicies(
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.MissingRemovalPolicies",
+):
+    '''Manages removal policies for resources without existing policies within a construct scope.
+
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        import aws_cdk as cdk
+        
+        missing_removal_policies = cdk.MissingRemovalPolicies.of(self)
+    '''
+
+    @jsii.member(jsii_name="of")
+    @builtins.classmethod
+    def of(cls, scope: _constructs_77d1e7e8.IConstruct) -> "MissingRemovalPolicies":
+        '''Returns the missing removal policies API for the given scope.
+
+        :param scope: The scope.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__53b49b542fe09ce9b0aa527b531ee0b1e7f57e7e0c6e23c2483a0b347d813ebb)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+        return typing.cast("MissingRemovalPolicies", jsii.sinvoke(cls, "of", [scope]))
+
+    @jsii.member(jsii_name="apply")
+    def apply(
+        self,
+        policy: "RemovalPolicy",
+        *,
+        apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Apply a removal policy only to resources without existing policies within this scope.
+
+        :param policy: The removal policy to apply.
+        :param apply_to_resource_types: Apply the removal policy only to specific resource types. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - apply to all resources
+        :param exclude_resource_types: Exclude specific resource types from the removal policy. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - no exclusions
+        :param priority: The priority to use when applying this policy. The priority affects only the order in which aspects are applied during synthesis. For RemovalPolicies, the last applied policy will override previous ones. NOTE: Priority does NOT determine which policy "wins" when there are conflicts. The order of application determines the final policy, with later policies overriding earlier ones. Default: - AspectPriority.MUTATING
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b3f1229a84cb5fdb052e8db135be3d25670d9793cf44ddc71d8134240bed0efc)
+            check_type(argname="argument policy", value=policy, expected_type=type_hints["policy"])
+        props = RemovalPolicyProps(
+            apply_to_resource_types=apply_to_resource_types,
+            exclude_resource_types=exclude_resource_types,
+            priority=priority,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "apply", [policy, props]))
+
+    @jsii.member(jsii_name="destroy")
+    def destroy(
+        self,
+        *,
+        apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Apply DESTROY removal policy only to resources without existing policies within this scope.
+
+        :param apply_to_resource_types: Apply the removal policy only to specific resource types. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - apply to all resources
+        :param exclude_resource_types: Exclude specific resource types from the removal policy. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - no exclusions
+        :param priority: The priority to use when applying this policy. The priority affects only the order in which aspects are applied during synthesis. For RemovalPolicies, the last applied policy will override previous ones. NOTE: Priority does NOT determine which policy "wins" when there are conflicts. The order of application determines the final policy, with later policies overriding earlier ones. Default: - AspectPriority.MUTATING
+        '''
+        props = RemovalPolicyProps(
+            apply_to_resource_types=apply_to_resource_types,
+            exclude_resource_types=exclude_resource_types,
+            priority=priority,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "destroy", [props]))
+
+    @jsii.member(jsii_name="retain")
+    def retain(
+        self,
+        *,
+        apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Apply RETAIN removal policy only to resources without existing policies within this scope.
+
+        :param apply_to_resource_types: Apply the removal policy only to specific resource types. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - apply to all resources
+        :param exclude_resource_types: Exclude specific resource types from the removal policy. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - no exclusions
+        :param priority: The priority to use when applying this policy. The priority affects only the order in which aspects are applied during synthesis. For RemovalPolicies, the last applied policy will override previous ones. NOTE: Priority does NOT determine which policy "wins" when there are conflicts. The order of application determines the final policy, with later policies overriding earlier ones. Default: - AspectPriority.MUTATING
+        '''
+        props = RemovalPolicyProps(
+            apply_to_resource_types=apply_to_resource_types,
+            exclude_resource_types=exclude_resource_types,
+            priority=priority,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "retain", [props]))
+
+    @jsii.member(jsii_name="retainOnUpdateOrDelete")
+    def retain_on_update_or_delete(
+        self,
+        *,
+        apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Apply RETAIN_ON_UPDATE_OR_DELETE removal policy only to resources without existing policies within this scope.
+
+        :param apply_to_resource_types: Apply the removal policy only to specific resource types. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - apply to all resources
+        :param exclude_resource_types: Exclude specific resource types from the removal policy. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - no exclusions
+        :param priority: The priority to use when applying this policy. The priority affects only the order in which aspects are applied during synthesis. For RemovalPolicies, the last applied policy will override previous ones. NOTE: Priority does NOT determine which policy "wins" when there are conflicts. The order of application determines the final policy, with later policies overriding earlier ones. Default: - AspectPriority.MUTATING
+        '''
+        props = RemovalPolicyProps(
+            apply_to_resource_types=apply_to_resource_types,
+            exclude_resource_types=exclude_resource_types,
+            priority=priority,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "retainOnUpdateOrDelete", [props]))
+
+    @jsii.member(jsii_name="snapshot")
+    def snapshot(
+        self,
+        *,
+        apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Apply SNAPSHOT removal policy only to resources without existing policies within this scope.
+
+        :param apply_to_resource_types: Apply the removal policy only to specific resource types. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - apply to all resources
+        :param exclude_resource_types: Exclude specific resource types from the removal policy. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - no exclusions
+        :param priority: The priority to use when applying this policy. The priority affects only the order in which aspects are applied during synthesis. For RemovalPolicies, the last applied policy will override previous ones. NOTE: Priority does NOT determine which policy "wins" when there are conflicts. The order of application determines the final policy, with later policies overriding earlier ones. Default: - AspectPriority.MUTATING
+        '''
+        props = RemovalPolicyProps(
+            apply_to_resource_types=apply_to_resource_types,
+            exclude_resource_types=exclude_resource_types,
+            priority=priority,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "snapshot", [props]))
+
+
 class Names(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.Names"):
     '''Functions for devising unique names for constructs.
 
@@ -19030,6 +19184,148 @@ class _ReferenceProxy(Reference):
 typing.cast(typing.Any, Reference).__jsii_proxy_class__ = lambda : _ReferenceProxy
 
 
+class RemovalPolicies(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.RemovalPolicies"):
+    '''Manages removal policies for all resources within a construct scope, overriding any existing policies by default.
+
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        import aws_cdk as cdk
+        
+        removal_policies = cdk.RemovalPolicies.of(self)
+    '''
+
+    @jsii.member(jsii_name="of")
+    @builtins.classmethod
+    def of(cls, scope: _constructs_77d1e7e8.IConstruct) -> "RemovalPolicies":
+        '''Returns the removal policies API for the given scope.
+
+        :param scope: The scope.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__16fdd678fafc26c9e1ca2d269cac449744dcfd65a4b8fce227879a53407f64f2)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+        return typing.cast("RemovalPolicies", jsii.sinvoke(cls, "of", [scope]))
+
+    @jsii.member(jsii_name="apply")
+    def apply(
+        self,
+        policy: "RemovalPolicy",
+        *,
+        apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Apply a removal policy to all resources within this scope, overriding any existing policies.
+
+        :param policy: The removal policy to apply.
+        :param apply_to_resource_types: Apply the removal policy only to specific resource types. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - apply to all resources
+        :param exclude_resource_types: Exclude specific resource types from the removal policy. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - no exclusions
+        :param priority: The priority to use when applying this policy. The priority affects only the order in which aspects are applied during synthesis. For RemovalPolicies, the last applied policy will override previous ones. NOTE: Priority does NOT determine which policy "wins" when there are conflicts. The order of application determines the final policy, with later policies overriding earlier ones. Default: - AspectPriority.MUTATING
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__d1a6f380a312346d77f5859f328e14cef3d77e7eb99ba0dffc2dd7da58b9b0ca)
+            check_type(argname="argument policy", value=policy, expected_type=type_hints["policy"])
+        props = RemovalPolicyProps(
+            apply_to_resource_types=apply_to_resource_types,
+            exclude_resource_types=exclude_resource_types,
+            priority=priority,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "apply", [policy, props]))
+
+    @jsii.member(jsii_name="destroy")
+    def destroy(
+        self,
+        *,
+        apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Apply DESTROY removal policy to all resources within this scope.
+
+        :param apply_to_resource_types: Apply the removal policy only to specific resource types. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - apply to all resources
+        :param exclude_resource_types: Exclude specific resource types from the removal policy. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - no exclusions
+        :param priority: The priority to use when applying this policy. The priority affects only the order in which aspects are applied during synthesis. For RemovalPolicies, the last applied policy will override previous ones. NOTE: Priority does NOT determine which policy "wins" when there are conflicts. The order of application determines the final policy, with later policies overriding earlier ones. Default: - AspectPriority.MUTATING
+        '''
+        props = RemovalPolicyProps(
+            apply_to_resource_types=apply_to_resource_types,
+            exclude_resource_types=exclude_resource_types,
+            priority=priority,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "destroy", [props]))
+
+    @jsii.member(jsii_name="retain")
+    def retain(
+        self,
+        *,
+        apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Apply RETAIN removal policy to all resources within this scope.
+
+        :param apply_to_resource_types: Apply the removal policy only to specific resource types. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - apply to all resources
+        :param exclude_resource_types: Exclude specific resource types from the removal policy. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - no exclusions
+        :param priority: The priority to use when applying this policy. The priority affects only the order in which aspects are applied during synthesis. For RemovalPolicies, the last applied policy will override previous ones. NOTE: Priority does NOT determine which policy "wins" when there are conflicts. The order of application determines the final policy, with later policies overriding earlier ones. Default: - AspectPriority.MUTATING
+        '''
+        props = RemovalPolicyProps(
+            apply_to_resource_types=apply_to_resource_types,
+            exclude_resource_types=exclude_resource_types,
+            priority=priority,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "retain", [props]))
+
+    @jsii.member(jsii_name="retainOnUpdateOrDelete")
+    def retain_on_update_or_delete(
+        self,
+        *,
+        apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Apply RETAIN_ON_UPDATE_OR_DELETE removal policy to all resources within this scope.
+
+        :param apply_to_resource_types: Apply the removal policy only to specific resource types. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - apply to all resources
+        :param exclude_resource_types: Exclude specific resource types from the removal policy. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - no exclusions
+        :param priority: The priority to use when applying this policy. The priority affects only the order in which aspects are applied during synthesis. For RemovalPolicies, the last applied policy will override previous ones. NOTE: Priority does NOT determine which policy "wins" when there are conflicts. The order of application determines the final policy, with later policies overriding earlier ones. Default: - AspectPriority.MUTATING
+        '''
+        props = RemovalPolicyProps(
+            apply_to_resource_types=apply_to_resource_types,
+            exclude_resource_types=exclude_resource_types,
+            priority=priority,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "retainOnUpdateOrDelete", [props]))
+
+    @jsii.member(jsii_name="snapshot")
+    def snapshot(
+        self,
+        *,
+        apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Apply SNAPSHOT removal policy to all resources within this scope.
+
+        :param apply_to_resource_types: Apply the removal policy only to specific resource types. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - apply to all resources
+        :param exclude_resource_types: Exclude specific resource types from the removal policy. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - no exclusions
+        :param priority: The priority to use when applying this policy. The priority affects only the order in which aspects are applied during synthesis. For RemovalPolicies, the last applied policy will override previous ones. NOTE: Priority does NOT determine which policy "wins" when there are conflicts. The order of application determines the final policy, with later policies overriding earlier ones. Default: - AspectPriority.MUTATING
+        '''
+        props = RemovalPolicyProps(
+            apply_to_resource_types=apply_to_resource_types,
+            exclude_resource_types=exclude_resource_types,
+            priority=priority,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "snapshot", [props]))
+
+
 @jsii.enum(jsii_type="aws-cdk-lib.RemovalPolicy")
 class RemovalPolicy(enum.Enum):
     '''Possible values for a resource's Removal Policy.
@@ -19205,6 +19501,106 @@ class RemovalPolicyOptions:
         )
 
 
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.RemovalPolicyProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "apply_to_resource_types": "applyToResourceTypes",
+        "exclude_resource_types": "excludeResourceTypes",
+        "priority": "priority",
+    },
+)
+class RemovalPolicyProps:
+    def __init__(
+        self,
+        *,
+        apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Properties for applying a removal policy.
+
+        :param apply_to_resource_types: Apply the removal policy only to specific resource types. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - apply to all resources
+        :param exclude_resource_types: Exclude specific resource types from the removal policy. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - no exclusions
+        :param priority: The priority to use when applying this policy. The priority affects only the order in which aspects are applied during synthesis. For RemovalPolicies, the last applied policy will override previous ones. NOTE: Priority does NOT determine which policy "wins" when there are conflicts. The order of application determines the final policy, with later policies overriding earlier ones. Default: - AspectPriority.MUTATING
+
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            import aws_cdk as cdk
+            
+            removal_policy_props = cdk.RemovalPolicyProps(
+                apply_to_resource_types=["applyToResourceTypes"],
+                exclude_resource_types=["excludeResourceTypes"],
+                priority=123
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c5c7fd6f5b115619c0c625e32cc15eb9bdbfb4931f25b97d8db03b7037bf1a39)
+            check_type(argname="argument apply_to_resource_types", value=apply_to_resource_types, expected_type=type_hints["apply_to_resource_types"])
+            check_type(argname="argument exclude_resource_types", value=exclude_resource_types, expected_type=type_hints["exclude_resource_types"])
+            check_type(argname="argument priority", value=priority, expected_type=type_hints["priority"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if apply_to_resource_types is not None:
+            self._values["apply_to_resource_types"] = apply_to_resource_types
+        if exclude_resource_types is not None:
+            self._values["exclude_resource_types"] = exclude_resource_types
+        if priority is not None:
+            self._values["priority"] = priority
+
+    @builtins.property
+    def apply_to_resource_types(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''Apply the removal policy only to specific resource types.
+
+        Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket').
+
+        :default: - apply to all resources
+        '''
+        result = self._values.get("apply_to_resource_types")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+    @builtins.property
+    def exclude_resource_types(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''Exclude specific resource types from the removal policy.
+
+        Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket').
+
+        :default: - no exclusions
+        '''
+        result = self._values.get("exclude_resource_types")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+    @builtins.property
+    def priority(self) -> typing.Optional[jsii.Number]:
+        '''The priority to use when applying this policy.
+
+        The priority affects only the order in which aspects are applied during synthesis.
+        For RemovalPolicies, the last applied policy will override previous ones.
+
+        NOTE: Priority does NOT determine which policy "wins" when there are conflicts.
+        The order of application determines the final policy, with later policies
+        overriding earlier ones.
+
+        :default: - AspectPriority.MUTATING
+        '''
+        result = self._values.get("priority")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "RemovalPolicyProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.implements(IAspect)
 class RemoveTag(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.RemoveTag"):
     '''The RemoveTag Aspect will handle removing tags from this node and children.
@@ -21213,7 +21609,7 @@ class Stack(
         self,
         *,
         key: builtins.str,
-        props: typing.Union[typing.Union[_AmiContextQuery_74bf4b1b, typing.Dict[builtins.str, typing.Any]], typing.Union[_AvailabilityZonesContextQuery_715a9fea, typing.Dict[builtins.str, typing.Any]], typing.Union[_HostedZoneContextQuery_8e6ca28f, typing.Dict[builtins.str, typing.Any]], typing.Union[_SSMParameterContextQuery_675de122, typing.Dict[builtins.str, typing.Any]], typing.Union[_VpcContextQuery_a193c650, typing.Dict[builtins.str, typing.Any]], typing.Union[_EndpointServiceAvailabilityZonesContextQuery_ea3ca0d1, typing.Dict[builtins.str, typing.Any]], typing.Union[_LoadBalancerContextQuery_cb08d67c, typing.Dict[builtins.str, typing.Any]], typing.Union[_LoadBalancerListenerContextQuery_0eaf3c16, typing.Dict[builtins.str, typing.Any]], typing.Union[_SecurityGroupContextQuery_e772f3e6, typing.Dict[builtins.str, typing.Any]], typing.Union[_KeyContextQuery_3ac6128d, typing.Dict[builtins.str, typing.Any]], typing.Union[_PluginContextQuery_31a9d073, typing.Dict[builtins.str, typing.Any]]],
+        props: typing.Union[typing.Union[_AmiContextQuery_74bf4b1b, typing.Dict[builtins.str, typing.Any]], typing.Union[_AvailabilityZonesContextQuery_715a9fea, typing.Dict[builtins.str, typing.Any]], typing.Union[_HostedZoneContextQuery_8e6ca28f, typing.Dict[builtins.str, typing.Any]], typing.Union[_SSMParameterContextQuery_675de122, typing.Dict[builtins.str, typing.Any]], typing.Union[_VpcContextQuery_a193c650, typing.Dict[builtins.str, typing.Any]], typing.Union[_EndpointServiceAvailabilityZonesContextQuery_ea3ca0d1, typing.Dict[builtins.str, typing.Any]], typing.Union[_LoadBalancerContextQuery_cb08d67c, typing.Dict[builtins.str, typing.Any]], typing.Union[_LoadBalancerListenerContextQuery_0eaf3c16, typing.Dict[builtins.str, typing.Any]], typing.Union[_SecurityGroupContextQuery_e772f3e6, typing.Dict[builtins.str, typing.Any]], typing.Union[_KeyContextQuery_3ac6128d, typing.Dict[builtins.str, typing.Any]], typing.Union[_CcApiContextQuery_7347fbd4, typing.Dict[builtins.str, typing.Any]], typing.Union[_PluginContextQuery_31a9d073, typing.Dict[builtins.str, typing.Any]]],
         provider: _ContextProvider_fa789bb5,
     ) -> None:
         '''Indicate that a context key was expected.
@@ -28370,6 +28766,13 @@ class CfnGuardHook(
                 )
             ),
             target_filters=cdk.CfnGuardHook.TargetFiltersProperty(
+                targets=[cdk.CfnGuardHook.HookTargetProperty(
+                    action="action",
+                    invocation_point="invocationPoint",
+                    target_name="targetName"
+                )],
+        
+                # the properties below are optional
                 actions=["actions"],
                 invocation_points=["invocationPoints"],
                 target_names=["targetNames"]
@@ -28623,6 +29026,98 @@ class CfnGuardHook(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "targetFilters", value) # pyright: ignore[reportArgumentType]
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.CfnGuardHook.HookTargetProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "action": "action",
+            "invocation_point": "invocationPoint",
+            "target_name": "targetName",
+        },
+    )
+    class HookTargetProperty:
+        def __init__(
+            self,
+            *,
+            action: builtins.str,
+            invocation_point: builtins.str,
+            target_name: builtins.str,
+        ) -> None:
+            '''Hook targets are the destination where hooks will be invoked against.
+
+            :param action: Target actions are the type of operation hooks will be executed at.
+            :param invocation_point: Invocation points are the point in provisioning workflow where hooks will be executed.
+            :param target_name: Type name of hook target. Hook targets are the destination where hooks will be invoked against.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-hooktarget.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                import aws_cdk as cdk
+                
+                hook_target_property = cdk.CfnGuardHook.HookTargetProperty(
+                    action="action",
+                    invocation_point="invocationPoint",
+                    target_name="targetName"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__db8b1657d3f3b07986674bc25e9dc656a6052c212816bc8d02a3be486b3ec2bf)
+                check_type(argname="argument action", value=action, expected_type=type_hints["action"])
+                check_type(argname="argument invocation_point", value=invocation_point, expected_type=type_hints["invocation_point"])
+                check_type(argname="argument target_name", value=target_name, expected_type=type_hints["target_name"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "action": action,
+                "invocation_point": invocation_point,
+                "target_name": target_name,
+            }
+
+        @builtins.property
+        def action(self) -> builtins.str:
+            '''Target actions are the type of operation hooks will be executed at.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-hooktarget.html#cfn-cloudformation-guardhook-hooktarget-action
+            '''
+            result = self._values.get("action")
+            assert result is not None, "Required property 'action' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def invocation_point(self) -> builtins.str:
+            '''Invocation points are the point in provisioning workflow where hooks will be executed.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-hooktarget.html#cfn-cloudformation-guardhook-hooktarget-invocationpoint
+            '''
+            result = self._values.get("invocation_point")
+            assert result is not None, "Required property 'invocation_point' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def target_name(self) -> builtins.str:
+            '''Type name of hook target.
+
+            Hook targets are the destination where hooks will be invoked against.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-hooktarget.html#cfn-cloudformation-guardhook-hooktarget-targetname
+            '''
+            result = self._values.get("target_name")
+            assert result is not None, "Required property 'target_name' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "HookTargetProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.CfnGuardHook.OptionsProperty",
         jsii_struct_bases=[],
@@ -29031,6 +29526,7 @@ class CfnGuardHook(
         jsii_type="aws-cdk-lib.CfnGuardHook.TargetFiltersProperty",
         jsii_struct_bases=[],
         name_mapping={
+            "targets": "targets",
             "actions": "actions",
             "invocation_points": "invocationPoints",
             "target_names": "targetNames",
@@ -29040,6 +29536,7 @@ class CfnGuardHook(
         def __init__(
             self,
             *,
+            targets: typing.Union[IResolvable, typing.Sequence[typing.Union[IResolvable, typing.Union["CfnGuardHook.HookTargetProperty", typing.Dict[builtins.str, typing.Any]]]]],
             actions: typing.Optional[typing.Sequence[builtins.str]] = None,
             invocation_points: typing.Optional[typing.Sequence[builtins.str]] = None,
             target_names: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -29048,6 +29545,7 @@ class CfnGuardHook(
 
             For more information, see `AWS CloudFormation Hook target filters <https://docs.aws.amazon.com/cloudformation-cli/latest/hooks-userguide/hooks-target-filtering.html>`_ .
 
+            :param targets: List of hook targets.
             :param actions: List of actions that the hook is going to target.
             :param invocation_points: List of invocation points that the hook is going to target.
             :param target_names: List of type names that the hook is going to target.
@@ -29062,6 +29560,13 @@ class CfnGuardHook(
                 import aws_cdk as cdk
                 
                 target_filters_property = cdk.CfnGuardHook.TargetFiltersProperty(
+                    targets=[cdk.CfnGuardHook.HookTargetProperty(
+                        action="action",
+                        invocation_point="invocationPoint",
+                        target_name="targetName"
+                    )],
+                
+                    # the properties below are optional
                     actions=["actions"],
                     invocation_points=["invocationPoints"],
                     target_names=["targetNames"]
@@ -29069,10 +29574,13 @@ class CfnGuardHook(
             '''
             if __debug__:
                 type_hints = typing.get_type_hints(_typecheckingstub__54414c99414c15df123d19676b346d63fe72e646cc3c7110b2d4267650dcc681)
+                check_type(argname="argument targets", value=targets, expected_type=type_hints["targets"])
                 check_type(argname="argument actions", value=actions, expected_type=type_hints["actions"])
                 check_type(argname="argument invocation_points", value=invocation_points, expected_type=type_hints["invocation_points"])
                 check_type(argname="argument target_names", value=target_names, expected_type=type_hints["target_names"])
-            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "targets": targets,
+            }
             if actions is not None:
                 self._values["actions"] = actions
             if invocation_points is not None:
@@ -29080,6 +29588,18 @@ class CfnGuardHook(
             if target_names is not None:
                 self._values["target_names"] = target_names
 
+        @builtins.property
+        def targets(
+            self,
+        ) -> typing.Union[IResolvable, typing.List[typing.Union[IResolvable, "CfnGuardHook.HookTargetProperty"]]]:
+            '''List of hook targets.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-targetfilters.html#cfn-cloudformation-guardhook-targetfilters-targets
+            '''
+            result = self._values.get("targets")
+            assert result is not None, "Required property 'targets' is missing"
+            return typing.cast(typing.Union[IResolvable, typing.List[typing.Union[IResolvable, "CfnGuardHook.HookTargetProperty"]]], result)
+
         @builtins.property
         def actions(self) -> typing.Optional[typing.List[builtins.str]]:
             '''List of actions that the hook is going to target.
@@ -29838,6 +30358,13 @@ class CfnLambdaHook(
                 )
             ),
             target_filters=cdk.CfnLambdaHook.TargetFiltersProperty(
+                targets=[cdk.CfnLambdaHook.HookTargetProperty(
+                    action="action",
+                    invocation_point="invocationPoint",
+                    target_name="targetName"
+                )],
+        
+                # the properties below are optional
                 actions=["actions"],
                 invocation_points=["invocationPoints"],
                 target_names=["targetNames"]
@@ -30052,6 +30579,98 @@ class CfnLambdaHook(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "targetFilters", value) # pyright: ignore[reportArgumentType]
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.CfnLambdaHook.HookTargetProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "action": "action",
+            "invocation_point": "invocationPoint",
+            "target_name": "targetName",
+        },
+    )
+    class HookTargetProperty:
+        def __init__(
+            self,
+            *,
+            action: builtins.str,
+            invocation_point: builtins.str,
+            target_name: builtins.str,
+        ) -> None:
+            '''Hook targets are the destination where hooks will be invoked against.
+
+            :param action: Target actions are the type of operation hooks will be executed at.
+            :param invocation_point: Invocation points are the point in provisioning workflow where hooks will be executed.
+            :param target_name: Type name of hook target. Hook targets are the destination where hooks will be invoked against.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-hooktarget.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                import aws_cdk as cdk
+                
+                hook_target_property = cdk.CfnLambdaHook.HookTargetProperty(
+                    action="action",
+                    invocation_point="invocationPoint",
+                    target_name="targetName"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__f5099edf768971d322b0fcf34f784be6ab8e56dbcfdc245fafbda2e7e677d4d3)
+                check_type(argname="argument action", value=action, expected_type=type_hints["action"])
+                check_type(argname="argument invocation_point", value=invocation_point, expected_type=type_hints["invocation_point"])
+                check_type(argname="argument target_name", value=target_name, expected_type=type_hints["target_name"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "action": action,
+                "invocation_point": invocation_point,
+                "target_name": target_name,
+            }
+
+        @builtins.property
+        def action(self) -> builtins.str:
+            '''Target actions are the type of operation hooks will be executed at.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-hooktarget.html#cfn-cloudformation-lambdahook-hooktarget-action
+            '''
+            result = self._values.get("action")
+            assert result is not None, "Required property 'action' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def invocation_point(self) -> builtins.str:
+            '''Invocation points are the point in provisioning workflow where hooks will be executed.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-hooktarget.html#cfn-cloudformation-lambdahook-hooktarget-invocationpoint
+            '''
+            result = self._values.get("invocation_point")
+            assert result is not None, "Required property 'invocation_point' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def target_name(self) -> builtins.str:
+            '''Type name of hook target.
+
+            Hook targets are the destination where hooks will be invoked against.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-hooktarget.html#cfn-cloudformation-lambdahook-hooktarget-targetname
+            '''
+            result = self._values.get("target_name")
+            assert result is not None, "Required property 'target_name' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "HookTargetProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.CfnLambdaHook.StackFiltersProperty",
         jsii_struct_bases=[],
@@ -30319,6 +30938,7 @@ class CfnLambdaHook(
         jsii_type="aws-cdk-lib.CfnLambdaHook.TargetFiltersProperty",
         jsii_struct_bases=[],
         name_mapping={
+            "targets": "targets",
             "actions": "actions",
             "invocation_points": "invocationPoints",
             "target_names": "targetNames",
@@ -30328,6 +30948,7 @@ class CfnLambdaHook(
         def __init__(
             self,
             *,
+            targets: typing.Union[IResolvable, typing.Sequence[typing.Union[IResolvable, typing.Union["CfnLambdaHook.HookTargetProperty", typing.Dict[builtins.str, typing.Any]]]]],
             actions: typing.Optional[typing.Sequence[builtins.str]] = None,
             invocation_points: typing.Optional[typing.Sequence[builtins.str]] = None,
             target_names: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -30336,6 +30957,7 @@ class CfnLambdaHook(
 
             For more information, see `AWS CloudFormation Hook target filters <https://docs.aws.amazon.com/cloudformation-cli/latest/hooks-userguide/hooks-target-filtering.html>`_ .
 
+            :param targets: List of hook targets.
             :param actions: List of actions that the hook is going to target.
             :param invocation_points: List of invocation points that the hook is going to target.
             :param target_names: List of type names that the hook is going to target.
@@ -30350,6 +30972,13 @@ class CfnLambdaHook(
                 import aws_cdk as cdk
                 
                 target_filters_property = cdk.CfnLambdaHook.TargetFiltersProperty(
+                    targets=[cdk.CfnLambdaHook.HookTargetProperty(
+                        action="action",
+                        invocation_point="invocationPoint",
+                        target_name="targetName"
+                    )],
+                
+                    # the properties below are optional
                     actions=["actions"],
                     invocation_points=["invocationPoints"],
                     target_names=["targetNames"]
@@ -30357,10 +30986,13 @@ class CfnLambdaHook(
             '''
             if __debug__:
                 type_hints = typing.get_type_hints(_typecheckingstub__b1e4952bfed38df912ad6c5f8fe2d6ef91fc6d169fea5f1c2f78a373ec7eb8a4)
+                check_type(argname="argument targets", value=targets, expected_type=type_hints["targets"])
                 check_type(argname="argument actions", value=actions, expected_type=type_hints["actions"])
                 check_type(argname="argument invocation_points", value=invocation_points, expected_type=type_hints["invocation_points"])
                 check_type(argname="argument target_names", value=target_names, expected_type=type_hints["target_names"])
-            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "targets": targets,
+            }
             if actions is not None:
                 self._values["actions"] = actions
             if invocation_points is not None:
@@ -30368,6 +31000,18 @@ class CfnLambdaHook(
             if target_names is not None:
                 self._values["target_names"] = target_names
 
+        @builtins.property
+        def targets(
+            self,
+        ) -> typing.Union[IResolvable, typing.List[typing.Union[IResolvable, "CfnLambdaHook.HookTargetProperty"]]]:
+            '''List of hook targets.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-targetfilters.html#cfn-cloudformation-lambdahook-targetfilters-targets
+            '''
+            result = self._values.get("targets")
+            assert result is not None, "Required property 'targets' is missing"
+            return typing.cast(typing.Union[IResolvable, typing.List[typing.Union[IResolvable, "CfnLambdaHook.HookTargetProperty"]]], result)
+
         @builtins.property
         def actions(self) -> typing.Optional[typing.List[builtins.str]]:
             '''List of actions that the hook is going to target.
@@ -31896,7 +32540,7 @@ class CfnStack(CfnResource, metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.CfnS
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param notification_arns: The Amazon SNS topic ARNs to publish stack related events. You can find your Amazon SNS topic ARNs using the Amazon SNS console or your Command Line Interface (CLI).
-        :param parameters: The set value pairs that represent the parameters passed to CloudFormation when this nested stack is created. Each parameter has a name corresponding to a parameter defined in the embedded template and a value representing the value that you want to set for the parameter. .. epigraph:: If you use the ``Ref`` function to pass a parameter value to a nested stack, comma-delimited list parameters must be of type ``String`` . In other words, you can't pass values that are of type ``CommaDelimitedList`` to nested stacks. Conditional. Required if the nested stack requires input parameters. Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
+        :param parameters: The set value pairs that represent the parameters passed to CloudFormation when this nested stack is created. Each parameter has a name corresponding to a parameter defined in the embedded template and a value representing the value that you want to set for the parameter. .. epigraph:: If you use the ``Ref`` function to pass a parameter value to a nested stack, comma-delimited list parameters must be of type ``String`` . In other words, you can't pass values that are of type ``CommaDelimitedList`` to nested stacks. Required if the nested stack requires input parameters. Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
         :param tags: Key-value pairs to associate with this stack. CloudFormation also propagates these tags to the resources created in the stack. A maximum number of 50 tags can be specified.
         :param template_url: The URL of a file containing the template body. The URL must point to a template (max size: 1 MB) that's located in an Amazon S3 bucket. The location for an Amazon S3 bucket must start with ``https://`` . Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
         :param timeout_in_minutes: The length of time, in minutes, that CloudFormation waits for the nested stack to reach the ``CREATE_COMPLETE`` state. The default is no timeout. When CloudFormation detects that the nested stack has reached the ``CREATE_COMPLETE`` state, it marks the nested stack resource as ``CREATE_COMPLETE`` in the parent stack and resumes creating the parent stack. If the timeout period expires before the nested stack reaches ``CREATE_COMPLETE`` , CloudFormation marks the nested stack as failed and rolls back both the nested stack and parent stack. Updates aren't supported.
@@ -32313,13 +32957,13 @@ class CfnStackSet(
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param permission_model: Describes how the IAM roles required for stack set operations are created. - With ``SELF_MANAGED`` permissions, you must create the administrator and execution roles required to deploy to target accounts. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . - With ``SERVICE_MANAGED`` permissions, StackSets automatically creates the IAM roles required to deploy to accounts managed by AWS Organizations . For more information, see `Activate trusted access for stack sets with AWS Organizations <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-activate-trusted-access.html>`_ in the *AWS CloudFormation User Guide* .
-        :param stack_set_name: The name to associate with the stack set. The name must be unique in the Region where you create your stack set. .. epigraph:: The ``StackSetName`` property is required.
-        :param administration_role_arn: The Amazon Resource Number (ARN) of the IAM role to use to create this stack set. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. Use customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . *Minimum* : ``20`` *Maximum* : ``2048``
-        :param auto_deployment: [ ``Service-managed`` permissions] Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU).
-        :param call_as: [Service-managed permissions] Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account. By default, ``SELF`` is specified. Use ``SELF`` for stack sets with self-managed permissions. - To create a stack set with service-managed permissions while signed in to the management account, specify ``SELF`` . - To create a stack set with service-managed permissions while signed in to a delegated administrator account, specify ``DELEGATED_ADMIN`` . Your AWS account must be registered as a delegated admin in the management account. For more information, see `Register a delegated administrator <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html>`_ in the *AWS CloudFormation User Guide* . Stack sets with service-managed permissions are created in the management account, including stack sets that are created by delegated administrators. *Valid Values* : ``SELF`` | ``DELEGATED_ADMIN``
+        :param stack_set_name: The name to associate with the stack set. The name must be unique in the Region where you create your stack set.
+        :param administration_role_arn: The Amazon Resource Number (ARN) of the IAM role to use to create this stack set. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. Use customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . Valid only if the permissions model is ``SELF_MANAGED`` .
+        :param auto_deployment: Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU). For more information, see `Manage automatic deployments for CloudFormation StackSets that use service-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-manage-auto-deployment.html>`_ in the *AWS CloudFormation User Guide* . Required if the permissions model is ``SERVICE_MANAGED`` . (Not used with self-managed permissions.)
+        :param call_as: Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account. By default, ``SELF`` is specified. Use ``SELF`` for stack sets with self-managed permissions. - To create a stack set with service-managed permissions while signed in to the management account, specify ``SELF`` . - To create a stack set with service-managed permissions while signed in to a delegated administrator account, specify ``DELEGATED_ADMIN`` . Your AWS account must be registered as a delegated admin in the management account. For more information, see `Register a delegated administrator <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html>`_ in the *AWS CloudFormation User Guide* . Stack sets with service-managed permissions are created in the management account, including stack sets that are created by delegated administrators. Valid only if the permissions model is ``SERVICE_MANAGED`` .
         :param capabilities: The capabilities that are allowed in the stack set. Some stack set templates might include resources that can affect permissions in your AWS account —for example, by creating new IAM users. For more information, see `Acknowledging IAM resources in CloudFormation templates <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities>`_ in the *AWS CloudFormation User Guide* .
-        :param description: A description of the stack set. *Minimum* : ``1`` *Maximum* : ``1024``
-        :param execution_role_name: The name of the IAM execution role to use to create the stack set. If you don't specify an execution role, CloudFormation uses the ``AWSCloudFormationStackSetExecutionRole`` role for the stack set operation. *Minimum* : ``1`` *Maximum* : ``64`` *Pattern* : ``[a-zA-Z_0-9+=,.@-]+``
+        :param description: A description of the stack set.
+        :param execution_role_name: The name of the IAM execution role to use to create the stack set. If you don't specify an execution role, CloudFormation uses the ``AWSCloudFormationStackSetExecutionRole`` role for the stack set operation. Valid only if the permissions model is ``SELF_MANAGED`` . *Pattern* : ``[a-zA-Z_0-9+=,.@-]+``
         :param managed_execution: Describes whether StackSets performs non-conflicting operations concurrently and queues conflicting operations. When active, StackSets performs non-conflicting operations concurrently and queues conflicting operations. After conflicting operations finish, StackSets starts queued operations in request order. .. epigraph:: If there are already running or queued operations, StackSets queues all incoming operations even if they are non-conflicting. You can't modify your stack set's execution configuration while there are running or queued operations for that stack set. When inactive (default), StackSets performs one operation at a time in request order.
         :param operation_preferences: The user-specified preferences for how CloudFormation performs a stack set operation.
         :param parameters: The input parameters for the stack set template.
@@ -32446,7 +33090,7 @@ class CfnStackSet(
     def auto_deployment(
         self,
     ) -> typing.Optional[typing.Union[IResolvable, "CfnStackSet.AutoDeploymentProperty"]]:
-        '''[ ``Service-managed`` permissions] Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU).'''
+        '''Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU).'''
         return typing.cast(typing.Optional[typing.Union[IResolvable, "CfnStackSet.AutoDeploymentProperty"]], jsii.get(self, "autoDeployment"))
 
     @auto_deployment.setter
@@ -32462,7 +33106,7 @@ class CfnStackSet(
     @builtins.property
     @jsii.member(jsii_name="callAs")
     def call_as(self) -> typing.Optional[builtins.str]:
-        '''[Service-managed permissions] Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account.'''
+        '''Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "callAs"))
 
     @call_as.setter
@@ -36292,6 +36936,7 @@ __all__ = [
     "LazyListValueOptions",
     "LazyStringValueOptions",
     "LegacyStackSynthesizer",
+    "MissingRemovalPolicies",
     "Names",
     "NestedStack",
     "NestedStackProps",
@@ -36304,8 +36949,10 @@ __all__ = [
     "PolicyViolatingResourceBeta1",
     "PolicyViolationBeta1",
     "Reference",
+    "RemovalPolicies",
     "RemovalPolicy",
     "RemovalPolicyOptions",
+    "RemovalPolicyProps",
     "RemoveTag",
     "ResolutionTypeHint",
     "ResolveChangeContextOptions",
@@ -36462,6 +37109,7 @@ __all__ = [
     "aws_frauddetector",
     "aws_fsx",
     "aws_gamelift",
+    "aws_gameliftstreams",
     "aws_globalaccelerator",
     "aws_globalaccelerator_endpoints",
     "aws_glue",
@@ -36755,6 +37403,7 @@ from . import aws_forecast
 from . import aws_frauddetector
 from . import aws_fsx
 from . import aws_gamelift
+from . import aws_gameliftstreams
 from . import aws_globalaccelerator
 from . import aws_globalaccelerator_endpoints
 from . import aws_glue
@@ -39033,6 +39682,22 @@ def _typecheckingstub__283fa3218deb31c702af8ec0f581964e58afe471191dd394e1567cb4d
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__53b49b542fe09ce9b0aa527b531ee0b1e7f57e7e0c6e23c2483a0b347d813ebb(
+    scope: _constructs_77d1e7e8.IConstruct,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b3f1229a84cb5fdb052e8db135be3d25670d9793cf44ddc71d8134240bed0efc(
+    policy: RemovalPolicy,
+    *,
+    apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+    exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+    priority: typing.Optional[jsii.Number] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__569ac5c6adbac9575b4137a0343aea0625df007d849957bfacf2e65a01153962(
     node: _constructs_77d1e7e8.Node,
 ) -> None:
@@ -39124,6 +39789,22 @@ def _typecheckingstub__46271c1d495743d8b70cfe27766a83a4dfd7bc3e4cf9af80b7823e48a
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__16fdd678fafc26c9e1ca2d269cac449744dcfd65a4b8fce227879a53407f64f2(
+    scope: _constructs_77d1e7e8.IConstruct,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__d1a6f380a312346d77f5859f328e14cef3d77e7eb99ba0dffc2dd7da58b9b0ca(
+    policy: RemovalPolicy,
+    *,
+    apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+    exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+    priority: typing.Optional[jsii.Number] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__cf59d09830cb04cd8d888f7fcdf115e700dad2a3650ac4a9beaed76aea901790(
     *,
     apply_to_update_replace_policy: typing.Optional[builtins.bool] = None,
@@ -39132,6 +39813,15 @@ def _typecheckingstub__cf59d09830cb04cd8d888f7fcdf115e700dad2a3650ac4a9beaed76ae
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__c5c7fd6f5b115619c0c625e32cc15eb9bdbfb4931f25b97d8db03b7037bf1a39(
+    *,
+    apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+    exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+    priority: typing.Optional[jsii.Number] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__944c89fd9e400a7d6e966cc04588226988866735f42049e619d446afc77d54c6(
     key: builtins.str,
     *,
@@ -40198,6 +40888,15 @@ def _typecheckingstub__2c07d8e25f948404b7d403a52c44adfd2f8e72c8f2562df3d53c28d24
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__db8b1657d3f3b07986674bc25e9dc656a6052c212816bc8d02a3be486b3ec2bf(
+    *,
+    action: builtins.str,
+    invocation_point: builtins.str,
+    target_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__fc8b5f7d5493afa375ed8c4a6ed28a6b7a5188af9fc0a1ab0a10e79d528a33a1(
     *,
     input_params: typing.Optional[typing.Union[IResolvable, typing.Union[CfnGuardHook.S3LocationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -40240,6 +40939,7 @@ def _typecheckingstub__38f57021d7e9ce2c114dd9e04b76ad13f99d241effea8d0e3f3391d84
 
 def _typecheckingstub__54414c99414c15df123d19676b346d63fe72e646cc3c7110b2d4267650dcc681(
     *,
+    targets: typing.Union[IResolvable, typing.Sequence[typing.Union[IResolvable, typing.Union[CfnGuardHook.HookTargetProperty, typing.Dict[builtins.str, typing.Any]]]]],
     actions: typing.Optional[typing.Sequence[builtins.str]] = None,
     invocation_points: typing.Optional[typing.Sequence[builtins.str]] = None,
     target_names: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -40483,6 +41183,15 @@ def _typecheckingstub__b3f0452e1487a1c5085ea420b80ea51e64c7defd79084c39a9f38bc17
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__f5099edf768971d322b0fcf34f784be6ab8e56dbcfdc245fafbda2e7e677d4d3(
+    *,
+    action: builtins.str,
+    invocation_point: builtins.str,
+    target_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__84b989a5da45d0bad88a9ecf93b8aa1724884132ffa59bcc73894e0c44565050(
     *,
     filtering_criteria: builtins.str,
@@ -40510,6 +41219,7 @@ def _typecheckingstub__4d69101af7797194522cb8e9463486ca30f37bb88a63e6a6a008a687c
 
 def _typecheckingstub__b1e4952bfed38df912ad6c5f8fe2d6ef91fc6d169fea5f1c2f78a373ec7eb8a4(
     *,
+    targets: typing.Union[IResolvable, typing.Sequence[typing.Union[IResolvable, typing.Union[CfnLambdaHook.HookTargetProperty, typing.Dict[builtins.str, typing.Any]]]]],
     actions: typing.Optional[typing.Sequence[builtins.str]] = None,
     invocation_points: typing.Optional[typing.Sequence[builtins.str]] = None,
     target_names: typing.Optional[typing.Sequence[builtins.str]] = None,