aws-cdk-lib 2.181.1__py3-none-any.whl → 2.183.0__py3-none-any.whl

aws_cdk/aws_cloudformation/__init__.py

@@ -316,6 +316,13 @@ class CfnGuardHook(
                 )
             ),
             target_filters=cloudformation.CfnGuardHook.TargetFiltersProperty(
+                targets=[cloudformation.CfnGuardHook.HookTargetProperty(
+                    action="action",
+                    invocation_point="invocationPoint",
+                    target_name="targetName"
+                )],
+        
+                # the properties below are optional
                 actions=["actions"],
                 invocation_points=["invocationPoints"],
                 target_names=["targetNames"]
@@ -569,6 +576,98 @@ class CfnGuardHook(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "targetFilters", value) # pyright: ignore[reportArgumentType]
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_cloudformation.CfnGuardHook.HookTargetProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "action": "action",
+            "invocation_point": "invocationPoint",
+            "target_name": "targetName",
+        },
+    )
+    class HookTargetProperty:
+        def __init__(
+            self,
+            *,
+            action: builtins.str,
+            invocation_point: builtins.str,
+            target_name: builtins.str,
+        ) -> None:
+            '''Hook targets are the destination where hooks will be invoked against.
+
+            :param action: Target actions are the type of operation hooks will be executed at.
+            :param invocation_point: Invocation points are the point in provisioning workflow where hooks will be executed.
+            :param target_name: Type name of hook target. Hook targets are the destination where hooks will be invoked against.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-hooktarget.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_cloudformation as cloudformation
+                
+                hook_target_property = cloudformation.CfnGuardHook.HookTargetProperty(
+                    action="action",
+                    invocation_point="invocationPoint",
+                    target_name="targetName"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__75d10faed01d259a75abfd83308e4f5f99124946f274bb8e8b5c92b0383d91c2)
+                check_type(argname="argument action", value=action, expected_type=type_hints["action"])
+                check_type(argname="argument invocation_point", value=invocation_point, expected_type=type_hints["invocation_point"])
+                check_type(argname="argument target_name", value=target_name, expected_type=type_hints["target_name"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "action": action,
+                "invocation_point": invocation_point,
+                "target_name": target_name,
+            }
+
+        @builtins.property
+        def action(self) -> builtins.str:
+            '''Target actions are the type of operation hooks will be executed at.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-hooktarget.html#cfn-cloudformation-guardhook-hooktarget-action
+            '''
+            result = self._values.get("action")
+            assert result is not None, "Required property 'action' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def invocation_point(self) -> builtins.str:
+            '''Invocation points are the point in provisioning workflow where hooks will be executed.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-hooktarget.html#cfn-cloudformation-guardhook-hooktarget-invocationpoint
+            '''
+            result = self._values.get("invocation_point")
+            assert result is not None, "Required property 'invocation_point' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def target_name(self) -> builtins.str:
+            '''Type name of hook target.
+
+            Hook targets are the destination where hooks will be invoked against.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-hooktarget.html#cfn-cloudformation-guardhook-hooktarget-targetname
+            '''
+            result = self._values.get("target_name")
+            assert result is not None, "Required property 'target_name' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "HookTargetProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_cloudformation.CfnGuardHook.OptionsProperty",
         jsii_struct_bases=[],
@@ -977,6 +1076,7 @@ class CfnGuardHook(
         jsii_type="aws-cdk-lib.aws_cloudformation.CfnGuardHook.TargetFiltersProperty",
         jsii_struct_bases=[],
         name_mapping={
+            "targets": "targets",
             "actions": "actions",
             "invocation_points": "invocationPoints",
             "target_names": "targetNames",
@@ -986,6 +1086,7 @@ class CfnGuardHook(
         def __init__(
             self,
             *,
+            targets: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnGuardHook.HookTargetProperty", typing.Dict[builtins.str, typing.Any]]]]],
             actions: typing.Optional[typing.Sequence[builtins.str]] = None,
             invocation_points: typing.Optional[typing.Sequence[builtins.str]] = None,
             target_names: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -994,6 +1095,7 @@ class CfnGuardHook(
 
             For more information, see `AWS CloudFormation Hook target filters <https://docs.aws.amazon.com/cloudformation-cli/latest/hooks-userguide/hooks-target-filtering.html>`_ .
 
+            :param targets: List of hook targets.
             :param actions: List of actions that the hook is going to target.
             :param invocation_points: List of invocation points that the hook is going to target.
             :param target_names: List of type names that the hook is going to target.
@@ -1008,6 +1110,13 @@ class CfnGuardHook(
                 from aws_cdk import aws_cloudformation as cloudformation
                 
                 target_filters_property = cloudformation.CfnGuardHook.TargetFiltersProperty(
+                    targets=[cloudformation.CfnGuardHook.HookTargetProperty(
+                        action="action",
+                        invocation_point="invocationPoint",
+                        target_name="targetName"
+                    )],
+                
+                    # the properties below are optional
                     actions=["actions"],
                     invocation_points=["invocationPoints"],
                     target_names=["targetNames"]
@@ -1015,10 +1124,13 @@ class CfnGuardHook(
             '''
             if __debug__:
                 type_hints = typing.get_type_hints(_typecheckingstub__378b3973374e7523256c5da2187494f5d2cfb4d85e28b4cc20e0b03edb7a4395)
+                check_type(argname="argument targets", value=targets, expected_type=type_hints["targets"])
                 check_type(argname="argument actions", value=actions, expected_type=type_hints["actions"])
                 check_type(argname="argument invocation_points", value=invocation_points, expected_type=type_hints["invocation_points"])
                 check_type(argname="argument target_names", value=target_names, expected_type=type_hints["target_names"])
-            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "targets": targets,
+            }
             if actions is not None:
                 self._values["actions"] = actions
             if invocation_points is not None:
@@ -1026,6 +1138,18 @@ class CfnGuardHook(
             if target_names is not None:
                 self._values["target_names"] = target_names
 
+        @builtins.property
+        def targets(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnGuardHook.HookTargetProperty"]]]:
+            '''List of hook targets.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-guardhook-targetfilters.html#cfn-cloudformation-guardhook-targetfilters-targets
+            '''
+            result = self._values.get("targets")
+            assert result is not None, "Required property 'targets' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnGuardHook.HookTargetProperty"]]], result)
+
         @builtins.property
         def actions(self) -> typing.Optional[typing.List[builtins.str]]:
             '''List of actions that the hook is going to target.
@@ -1155,6 +1279,13 @@ class CfnGuardHookProps:
                     )
                 ),
                 target_filters=cloudformation.CfnGuardHook.TargetFiltersProperty(
+                    targets=[cloudformation.CfnGuardHook.HookTargetProperty(
+                        action="action",
+                        invocation_point="invocationPoint",
+                        target_name="targetName"
+                    )],
+            
+                    # the properties below are optional
                     actions=["actions"],
                     invocation_points=["invocationPoints"],
                     target_names=["targetNames"]
@@ -2311,6 +2442,13 @@ class CfnLambdaHook(
                 )
             ),
             target_filters=cloudformation.CfnLambdaHook.TargetFiltersProperty(
+                targets=[cloudformation.CfnLambdaHook.HookTargetProperty(
+                    action="action",
+                    invocation_point="invocationPoint",
+                    target_name="targetName"
+                )],
+        
+                # the properties below are optional
                 actions=["actions"],
                 invocation_points=["invocationPoints"],
                 target_names=["targetNames"]
@@ -2525,6 +2663,98 @@ class CfnLambdaHook(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "targetFilters", value) # pyright: ignore[reportArgumentType]
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_cloudformation.CfnLambdaHook.HookTargetProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "action": "action",
+            "invocation_point": "invocationPoint",
+            "target_name": "targetName",
+        },
+    )
+    class HookTargetProperty:
+        def __init__(
+            self,
+            *,
+            action: builtins.str,
+            invocation_point: builtins.str,
+            target_name: builtins.str,
+        ) -> None:
+            '''Hook targets are the destination where hooks will be invoked against.
+
+            :param action: Target actions are the type of operation hooks will be executed at.
+            :param invocation_point: Invocation points are the point in provisioning workflow where hooks will be executed.
+            :param target_name: Type name of hook target. Hook targets are the destination where hooks will be invoked against.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-hooktarget.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_cloudformation as cloudformation
+                
+                hook_target_property = cloudformation.CfnLambdaHook.HookTargetProperty(
+                    action="action",
+                    invocation_point="invocationPoint",
+                    target_name="targetName"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__8bb2b3786e42dc7c05244eb8055bbfbc3f7406193d5d1992ac9505fe3aa580e2)
+                check_type(argname="argument action", value=action, expected_type=type_hints["action"])
+                check_type(argname="argument invocation_point", value=invocation_point, expected_type=type_hints["invocation_point"])
+                check_type(argname="argument target_name", value=target_name, expected_type=type_hints["target_name"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "action": action,
+                "invocation_point": invocation_point,
+                "target_name": target_name,
+            }
+
+        @builtins.property
+        def action(self) -> builtins.str:
+            '''Target actions are the type of operation hooks will be executed at.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-hooktarget.html#cfn-cloudformation-lambdahook-hooktarget-action
+            '''
+            result = self._values.get("action")
+            assert result is not None, "Required property 'action' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def invocation_point(self) -> builtins.str:
+            '''Invocation points are the point in provisioning workflow where hooks will be executed.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-hooktarget.html#cfn-cloudformation-lambdahook-hooktarget-invocationpoint
+            '''
+            result = self._values.get("invocation_point")
+            assert result is not None, "Required property 'invocation_point' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def target_name(self) -> builtins.str:
+            '''Type name of hook target.
+
+            Hook targets are the destination where hooks will be invoked against.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-hooktarget.html#cfn-cloudformation-lambdahook-hooktarget-targetname
+            '''
+            result = self._values.get("target_name")
+            assert result is not None, "Required property 'target_name' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "HookTargetProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_cloudformation.CfnLambdaHook.StackFiltersProperty",
         jsii_struct_bases=[],
@@ -2792,6 +3022,7 @@ class CfnLambdaHook(
         jsii_type="aws-cdk-lib.aws_cloudformation.CfnLambdaHook.TargetFiltersProperty",
         jsii_struct_bases=[],
         name_mapping={
+            "targets": "targets",
             "actions": "actions",
             "invocation_points": "invocationPoints",
             "target_names": "targetNames",
@@ -2801,6 +3032,7 @@ class CfnLambdaHook(
         def __init__(
             self,
             *,
+            targets: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnLambdaHook.HookTargetProperty", typing.Dict[builtins.str, typing.Any]]]]],
             actions: typing.Optional[typing.Sequence[builtins.str]] = None,
             invocation_points: typing.Optional[typing.Sequence[builtins.str]] = None,
             target_names: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -2809,6 +3041,7 @@ class CfnLambdaHook(
 
             For more information, see `AWS CloudFormation Hook target filters <https://docs.aws.amazon.com/cloudformation-cli/latest/hooks-userguide/hooks-target-filtering.html>`_ .
 
+            :param targets: List of hook targets.
             :param actions: List of actions that the hook is going to target.
             :param invocation_points: List of invocation points that the hook is going to target.
             :param target_names: List of type names that the hook is going to target.
@@ -2823,6 +3056,13 @@ class CfnLambdaHook(
                 from aws_cdk import aws_cloudformation as cloudformation
                 
                 target_filters_property = cloudformation.CfnLambdaHook.TargetFiltersProperty(
+                    targets=[cloudformation.CfnLambdaHook.HookTargetProperty(
+                        action="action",
+                        invocation_point="invocationPoint",
+                        target_name="targetName"
+                    )],
+                
+                    # the properties below are optional
                     actions=["actions"],
                     invocation_points=["invocationPoints"],
                     target_names=["targetNames"]
@@ -2830,10 +3070,13 @@ class CfnLambdaHook(
             '''
             if __debug__:
                 type_hints = typing.get_type_hints(_typecheckingstub__6b7d133718b35659d76ef50f7b0d36492c3da19aa89cd0ec0d90af415b1383ba)
+                check_type(argname="argument targets", value=targets, expected_type=type_hints["targets"])
                 check_type(argname="argument actions", value=actions, expected_type=type_hints["actions"])
                 check_type(argname="argument invocation_points", value=invocation_points, expected_type=type_hints["invocation_points"])
                 check_type(argname="argument target_names", value=target_names, expected_type=type_hints["target_names"])
-            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "targets": targets,
+            }
             if actions is not None:
                 self._values["actions"] = actions
             if invocation_points is not None:
@@ -2841,6 +3084,18 @@ class CfnLambdaHook(
             if target_names is not None:
                 self._values["target_names"] = target_names
 
+        @builtins.property
+        def targets(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnLambdaHook.HookTargetProperty"]]]:
+            '''List of hook targets.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-lambdahook-targetfilters.html#cfn-cloudformation-lambdahook-targetfilters-targets
+            '''
+            result = self._values.get("targets")
+            assert result is not None, "Required property 'targets' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnLambdaHook.HookTargetProperty"]]], result)
+
         @builtins.property
         def actions(self) -> typing.Optional[typing.List[builtins.str]]:
             '''List of actions that the hook is going to target.
@@ -2950,6 +3205,13 @@ class CfnLambdaHookProps:
                     )
                 ),
                 target_filters=cloudformation.CfnLambdaHook.TargetFiltersProperty(
+                    targets=[cloudformation.CfnLambdaHook.HookTargetProperty(
+                        action="action",
+                        invocation_point="invocationPoint",
+                        target_name="targetName"
+                    )],
+            
+                    # the properties below are optional
                     actions=["actions"],
                     invocation_points=["invocationPoints"],
                     target_names=["targetNames"]
@@ -5271,7 +5533,7 @@ class CfnStack(
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param notification_arns: The Amazon SNS topic ARNs to publish stack related events. You can find your Amazon SNS topic ARNs using the Amazon SNS console or your Command Line Interface (CLI).
-        :param parameters: The set value pairs that represent the parameters passed to CloudFormation when this nested stack is created. Each parameter has a name corresponding to a parameter defined in the embedded template and a value representing the value that you want to set for the parameter. .. epigraph:: If you use the ``Ref`` function to pass a parameter value to a nested stack, comma-delimited list parameters must be of type ``String`` . In other words, you can't pass values that are of type ``CommaDelimitedList`` to nested stacks. Conditional. Required if the nested stack requires input parameters. Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
+        :param parameters: The set value pairs that represent the parameters passed to CloudFormation when this nested stack is created. Each parameter has a name corresponding to a parameter defined in the embedded template and a value representing the value that you want to set for the parameter. .. epigraph:: If you use the ``Ref`` function to pass a parameter value to a nested stack, comma-delimited list parameters must be of type ``String`` . In other words, you can't pass values that are of type ``CommaDelimitedList`` to nested stacks. Required if the nested stack requires input parameters. Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
         :param tags: Key-value pairs to associate with this stack. CloudFormation also propagates these tags to the resources created in the stack. A maximum number of 50 tags can be specified.
         :param template_url: The URL of a file containing the template body. The URL must point to a template (max size: 1 MB) that's located in an Amazon S3 bucket. The location for an Amazon S3 bucket must start with ``https://`` . Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
         :param timeout_in_minutes: The length of time, in minutes, that CloudFormation waits for the nested stack to reach the ``CREATE_COMPLETE`` state. The default is no timeout. When CloudFormation detects that the nested stack has reached the ``CREATE_COMPLETE`` state, it marks the nested stack resource as ``CREATE_COMPLETE`` in the parent stack and resumes creating the parent stack. If the timeout period expires before the nested stack reaches ``CREATE_COMPLETE`` , CloudFormation marks the nested stack as failed and rolls back both the nested stack and parent stack. Updates aren't supported.
@@ -5610,7 +5872,7 @@ class CfnStackProps:
         '''Properties for defining a ``CfnStack``.
 
         :param notification_arns: The Amazon SNS topic ARNs to publish stack related events. You can find your Amazon SNS topic ARNs using the Amazon SNS console or your Command Line Interface (CLI).
-        :param parameters: The set value pairs that represent the parameters passed to CloudFormation when this nested stack is created. Each parameter has a name corresponding to a parameter defined in the embedded template and a value representing the value that you want to set for the parameter. .. epigraph:: If you use the ``Ref`` function to pass a parameter value to a nested stack, comma-delimited list parameters must be of type ``String`` . In other words, you can't pass values that are of type ``CommaDelimitedList`` to nested stacks. Conditional. Required if the nested stack requires input parameters. Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
+        :param parameters: The set value pairs that represent the parameters passed to CloudFormation when this nested stack is created. Each parameter has a name corresponding to a parameter defined in the embedded template and a value representing the value that you want to set for the parameter. .. epigraph:: If you use the ``Ref`` function to pass a parameter value to a nested stack, comma-delimited list parameters must be of type ``String`` . In other words, you can't pass values that are of type ``CommaDelimitedList`` to nested stacks. Required if the nested stack requires input parameters. Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
         :param tags: Key-value pairs to associate with this stack. CloudFormation also propagates these tags to the resources created in the stack. A maximum number of 50 tags can be specified.
         :param template_url: The URL of a file containing the template body. The URL must point to a template (max size: 1 MB) that's located in an Amazon S3 bucket. The location for an Amazon S3 bucket must start with ``https://`` . Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
         :param timeout_in_minutes: The length of time, in minutes, that CloudFormation waits for the nested stack to reach the ``CREATE_COMPLETE`` state. The default is no timeout. When CloudFormation detects that the nested stack has reached the ``CREATE_COMPLETE`` state, it marks the nested stack resource as ``CREATE_COMPLETE`` in the parent stack and resumes creating the parent stack. If the timeout period expires before the nested stack reaches ``CREATE_COMPLETE`` , CloudFormation marks the nested stack as failed and rolls back both the nested stack and parent stack. Updates aren't supported.
@@ -5678,7 +5940,7 @@ class CfnStackProps:
 
            If you use the ``Ref`` function to pass a parameter value to a nested stack, comma-delimited list parameters must be of type ``String`` . In other words, you can't pass values that are of type ``CommaDelimitedList`` to nested stacks.
 
-        Conditional. Required if the nested stack requires input parameters.
+        Required if the nested stack requires input parameters.
 
         Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
 
@@ -5838,13 +6100,13 @@ class CfnStackSet(
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param permission_model: Describes how the IAM roles required for stack set operations are created. - With ``SELF_MANAGED`` permissions, you must create the administrator and execution roles required to deploy to target accounts. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . - With ``SERVICE_MANAGED`` permissions, StackSets automatically creates the IAM roles required to deploy to accounts managed by AWS Organizations . For more information, see `Activate trusted access for stack sets with AWS Organizations <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-activate-trusted-access.html>`_ in the *AWS CloudFormation User Guide* .
-        :param stack_set_name: The name to associate with the stack set. The name must be unique in the Region where you create your stack set. .. epigraph:: The ``StackSetName`` property is required.
-        :param administration_role_arn: The Amazon Resource Number (ARN) of the IAM role to use to create this stack set. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. Use customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . *Minimum* : ``20`` *Maximum* : ``2048``
-        :param auto_deployment: [ ``Service-managed`` permissions] Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU).
-        :param call_as: [Service-managed permissions] Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account. By default, ``SELF`` is specified. Use ``SELF`` for stack sets with self-managed permissions. - To create a stack set with service-managed permissions while signed in to the management account, specify ``SELF`` . - To create a stack set with service-managed permissions while signed in to a delegated administrator account, specify ``DELEGATED_ADMIN`` . Your AWS account must be registered as a delegated admin in the management account. For more information, see `Register a delegated administrator <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html>`_ in the *AWS CloudFormation User Guide* . Stack sets with service-managed permissions are created in the management account, including stack sets that are created by delegated administrators. *Valid Values* : ``SELF`` | ``DELEGATED_ADMIN``
+        :param stack_set_name: The name to associate with the stack set. The name must be unique in the Region where you create your stack set.
+        :param administration_role_arn: The Amazon Resource Number (ARN) of the IAM role to use to create this stack set. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. Use customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . Valid only if the permissions model is ``SELF_MANAGED`` .
+        :param auto_deployment: Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU). For more information, see `Manage automatic deployments for CloudFormation StackSets that use service-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-manage-auto-deployment.html>`_ in the *AWS CloudFormation User Guide* . Required if the permissions model is ``SERVICE_MANAGED`` . (Not used with self-managed permissions.)
+        :param call_as: Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account. By default, ``SELF`` is specified. Use ``SELF`` for stack sets with self-managed permissions. - To create a stack set with service-managed permissions while signed in to the management account, specify ``SELF`` . - To create a stack set with service-managed permissions while signed in to a delegated administrator account, specify ``DELEGATED_ADMIN`` . Your AWS account must be registered as a delegated admin in the management account. For more information, see `Register a delegated administrator <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html>`_ in the *AWS CloudFormation User Guide* . Stack sets with service-managed permissions are created in the management account, including stack sets that are created by delegated administrators. Valid only if the permissions model is ``SERVICE_MANAGED`` .
         :param capabilities: The capabilities that are allowed in the stack set. Some stack set templates might include resources that can affect permissions in your AWS account —for example, by creating new IAM users. For more information, see `Acknowledging IAM resources in CloudFormation templates <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities>`_ in the *AWS CloudFormation User Guide* .
-        :param description: A description of the stack set. *Minimum* : ``1`` *Maximum* : ``1024``
-        :param execution_role_name: The name of the IAM execution role to use to create the stack set. If you don't specify an execution role, CloudFormation uses the ``AWSCloudFormationStackSetExecutionRole`` role for the stack set operation. *Minimum* : ``1`` *Maximum* : ``64`` *Pattern* : ``[a-zA-Z_0-9+=,.@-]+``
+        :param description: A description of the stack set.
+        :param execution_role_name: The name of the IAM execution role to use to create the stack set. If you don't specify an execution role, CloudFormation uses the ``AWSCloudFormationStackSetExecutionRole`` role for the stack set operation. Valid only if the permissions model is ``SELF_MANAGED`` . *Pattern* : ``[a-zA-Z_0-9+=,.@-]+``
         :param managed_execution: Describes whether StackSets performs non-conflicting operations concurrently and queues conflicting operations. When active, StackSets performs non-conflicting operations concurrently and queues conflicting operations. After conflicting operations finish, StackSets starts queued operations in request order. .. epigraph:: If there are already running or queued operations, StackSets queues all incoming operations even if they are non-conflicting. You can't modify your stack set's execution configuration while there are running or queued operations for that stack set. When inactive (default), StackSets performs one operation at a time in request order.
         :param operation_preferences: The user-specified preferences for how CloudFormation performs a stack set operation.
         :param parameters: The input parameters for the stack set template.
@@ -5971,7 +6233,7 @@ class CfnStackSet(
     def auto_deployment(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnStackSet.AutoDeploymentProperty"]]:
-        '''[ ``Service-managed`` permissions] Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU).'''
+        '''Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU).'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnStackSet.AutoDeploymentProperty"]], jsii.get(self, "autoDeployment"))
 
     @auto_deployment.setter
@@ -5987,7 +6249,7 @@ class CfnStackSet(
     @builtins.property
     @jsii.member(jsii_name="callAs")
     def call_as(self) -> typing.Optional[builtins.str]:
-        '''[Service-managed permissions] Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account.'''
+        '''Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "callAs"))
 
     @call_as.setter
@@ -6820,13 +7082,13 @@ class CfnStackSetProps:
         '''Properties for defining a ``CfnStackSet``.
 
         :param permission_model: Describes how the IAM roles required for stack set operations are created. - With ``SELF_MANAGED`` permissions, you must create the administrator and execution roles required to deploy to target accounts. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . - With ``SERVICE_MANAGED`` permissions, StackSets automatically creates the IAM roles required to deploy to accounts managed by AWS Organizations . For more information, see `Activate trusted access for stack sets with AWS Organizations <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-activate-trusted-access.html>`_ in the *AWS CloudFormation User Guide* .
-        :param stack_set_name: The name to associate with the stack set. The name must be unique in the Region where you create your stack set. .. epigraph:: The ``StackSetName`` property is required.
-        :param administration_role_arn: The Amazon Resource Number (ARN) of the IAM role to use to create this stack set. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. Use customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . *Minimum* : ``20`` *Maximum* : ``2048``
-        :param auto_deployment: [ ``Service-managed`` permissions] Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU).
-        :param call_as: [Service-managed permissions] Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account. By default, ``SELF`` is specified. Use ``SELF`` for stack sets with self-managed permissions. - To create a stack set with service-managed permissions while signed in to the management account, specify ``SELF`` . - To create a stack set with service-managed permissions while signed in to a delegated administrator account, specify ``DELEGATED_ADMIN`` . Your AWS account must be registered as a delegated admin in the management account. For more information, see `Register a delegated administrator <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html>`_ in the *AWS CloudFormation User Guide* . Stack sets with service-managed permissions are created in the management account, including stack sets that are created by delegated administrators. *Valid Values* : ``SELF`` | ``DELEGATED_ADMIN``
+        :param stack_set_name: The name to associate with the stack set. The name must be unique in the Region where you create your stack set.
+        :param administration_role_arn: The Amazon Resource Number (ARN) of the IAM role to use to create this stack set. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. Use customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . Valid only if the permissions model is ``SELF_MANAGED`` .
+        :param auto_deployment: Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU). For more information, see `Manage automatic deployments for CloudFormation StackSets that use service-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-manage-auto-deployment.html>`_ in the *AWS CloudFormation User Guide* . Required if the permissions model is ``SERVICE_MANAGED`` . (Not used with self-managed permissions.)
+        :param call_as: Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account. By default, ``SELF`` is specified. Use ``SELF`` for stack sets with self-managed permissions. - To create a stack set with service-managed permissions while signed in to the management account, specify ``SELF`` . - To create a stack set with service-managed permissions while signed in to a delegated administrator account, specify ``DELEGATED_ADMIN`` . Your AWS account must be registered as a delegated admin in the management account. For more information, see `Register a delegated administrator <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html>`_ in the *AWS CloudFormation User Guide* . Stack sets with service-managed permissions are created in the management account, including stack sets that are created by delegated administrators. Valid only if the permissions model is ``SERVICE_MANAGED`` .
         :param capabilities: The capabilities that are allowed in the stack set. Some stack set templates might include resources that can affect permissions in your AWS account —for example, by creating new IAM users. For more information, see `Acknowledging IAM resources in CloudFormation templates <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities>`_ in the *AWS CloudFormation User Guide* .
-        :param description: A description of the stack set. *Minimum* : ``1`` *Maximum* : ``1024``
-        :param execution_role_name: The name of the IAM execution role to use to create the stack set. If you don't specify an execution role, CloudFormation uses the ``AWSCloudFormationStackSetExecutionRole`` role for the stack set operation. *Minimum* : ``1`` *Maximum* : ``64`` *Pattern* : ``[a-zA-Z_0-9+=,.@-]+``
+        :param description: A description of the stack set.
+        :param execution_role_name: The name of the IAM execution role to use to create the stack set. If you don't specify an execution role, CloudFormation uses the ``AWSCloudFormationStackSetExecutionRole`` role for the stack set operation. Valid only if the permissions model is ``SELF_MANAGED`` . *Pattern* : ``[a-zA-Z_0-9+=,.@-]+``
         :param managed_execution: Describes whether StackSets performs non-conflicting operations concurrently and queues conflicting operations. When active, StackSets performs non-conflicting operations concurrently and queues conflicting operations. After conflicting operations finish, StackSets starts queued operations in request order. .. epigraph:: If there are already running or queued operations, StackSets queues all incoming operations even if they are non-conflicting. You can't modify your stack set's execution configuration while there are running or queued operations for that stack set. When inactive (default), StackSets performs one operation at a time in request order.
         :param operation_preferences: The user-specified preferences for how CloudFormation performs a stack set operation.
         :param parameters: The input parameters for the stack set template.
@@ -6963,9 +7225,6 @@ class CfnStackSetProps:
         '''The name to associate with the stack set.
 
         The name must be unique in the Region where you create your stack set.
-        .. epigraph::
-
-           The ``StackSetName`` property is required.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html#cfn-cloudformation-stackset-stacksetname
         '''
@@ -6981,9 +7240,7 @@ class CfnStackSetProps:
 
         Use customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* .
 
-        *Minimum* : ``20``
-
-        *Maximum* : ``2048``
+        Valid only if the permissions model is ``SELF_MANAGED`` .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html#cfn-cloudformation-stackset-administrationrolearn
         '''
@@ -6994,7 +7251,11 @@ class CfnStackSetProps:
     def auto_deployment(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnStackSet.AutoDeploymentProperty]]:
-        '''[ ``Service-managed`` permissions] Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU).
+        '''Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU).
+
+        For more information, see `Manage automatic deployments for CloudFormation StackSets that use service-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-manage-auto-deployment.html>`_ in the *AWS CloudFormation User Guide* .
+
+        Required if the permissions model is ``SERVICE_MANAGED`` . (Not used with self-managed permissions.)
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html#cfn-cloudformation-stackset-autodeployment
         '''
@@ -7003,7 +7264,7 @@ class CfnStackSetProps:
 
     @builtins.property
     def call_as(self) -> typing.Optional[builtins.str]:
-        '''[Service-managed permissions] Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account.
+        '''Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account.
 
         By default, ``SELF`` is specified. Use ``SELF`` for stack sets with self-managed permissions.
 
@@ -7014,7 +7275,7 @@ class CfnStackSetProps:
 
         Stack sets with service-managed permissions are created in the management account, including stack sets that are created by delegated administrators.
 
-        *Valid Values* : ``SELF`` | ``DELEGATED_ADMIN``
+        Valid only if the permissions model is ``SERVICE_MANAGED`` .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html#cfn-cloudformation-stackset-callas
         '''
@@ -7036,10 +7297,6 @@ class CfnStackSetProps:
     def description(self) -> typing.Optional[builtins.str]:
         '''A description of the stack set.
 
-        *Minimum* : ``1``
-
-        *Maximum* : ``1024``
-
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html#cfn-cloudformation-stackset-description
         '''
         result = self._values.get("description")
@@ -7051,9 +7308,7 @@ class CfnStackSetProps:
 
         If you don't specify an execution role, CloudFormation uses the ``AWSCloudFormationStackSetExecutionRole`` role for the stack set operation.
 
-        *Minimum* : ``1``
-
-        *Maximum* : ``64``
+        Valid only if the permissions model is ``SELF_MANAGED`` .
 
         *Pattern* : ``[a-zA-Z_0-9+=,.@-]+``
 
@@ -8276,6 +8531,15 @@ def _typecheckingstub__c81e70f0acb044921c8947467f93bf3568ecf5bceb007dbfd1211e597
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__75d10faed01d259a75abfd83308e4f5f99124946f274bb8e8b5c92b0383d91c2(
+    *,
+    action: builtins.str,
+    invocation_point: builtins.str,
+    target_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__9b598c3b73355c67dcc3aa78319cd2f0d94b1f77b3311af71cc07b20334e0eca(
     *,
     input_params: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnGuardHook.S3LocationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -8318,6 +8582,7 @@ def _typecheckingstub__19a166b14cd31cea92d76fbca0808b1b44774459a4d29121e91c2e20c
 
 def _typecheckingstub__378b3973374e7523256c5da2187494f5d2cfb4d85e28b4cc20e0b03edb7a4395(
     *,
+    targets: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnGuardHook.HookTargetProperty, typing.Dict[builtins.str, typing.Any]]]]],
     actions: typing.Optional[typing.Sequence[builtins.str]] = None,
     invocation_points: typing.Optional[typing.Sequence[builtins.str]] = None,
     target_names: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -8591,6 +8856,15 @@ def _typecheckingstub__37d3897a58b7133587d59ce7b2fc6e7c7f4c5ad1b3b3d9020dc5181c7
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__8bb2b3786e42dc7c05244eb8055bbfbc3f7406193d5d1992ac9505fe3aa580e2(
+    *,
+    action: builtins.str,
+    invocation_point: builtins.str,
+    target_name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__1c6825aca96c1ce7eaa02a7e659917eb747e2a75121b6c5d50ef421a9261e58e(
     *,
     filtering_criteria: builtins.str,
@@ -8618,6 +8892,7 @@ def _typecheckingstub__5b3429ffb1654464d2c3e5029831647a0bf3172b44a425681964d5585
 
 def _typecheckingstub__6b7d133718b35659d76ef50f7b0d36492c3da19aa89cd0ec0d90af415b1383ba(
     *,
+    targets: typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnLambdaHook.HookTargetProperty, typing.Dict[builtins.str, typing.Any]]]]],
     actions: typing.Optional[typing.Sequence[builtins.str]] = None,
     invocation_points: typing.Optional[typing.Sequence[builtins.str]] = None,
     target_names: typing.Optional[typing.Sequence[builtins.str]] = None,

aws_cdk/aws_cloudfront/__init__.py

@@ -8841,6 +8841,7 @@ class CfnDistribution(
             An origin is the location where content is stored, and from which CloudFront gets content to serve to viewers. To specify an origin:
 
             - Use ``S3OriginConfig`` to specify an Amazon S3 bucket that is not configured with static website hosting.
+            - Use ``VpcOriginConfig`` to specify a VPC origin.
             - Use ``CustomOriginConfig`` to specify all other kinds of origins, including:
             - An Amazon S3 bucket that is configured with static website hosting
             - An Elastic Load Balancing load balancer