aws-cdk-lib 2.182.0__py3-none-any.whl → 2.183.0__py3-none-any.whl

aws_cdk/__init__.py

@@ -8856,7 +8856,7 @@ class CfnStackProps:
         '''Properties for defining a ``CfnStack``.
 
         :param notification_arns: The Amazon SNS topic ARNs to publish stack related events. You can find your Amazon SNS topic ARNs using the Amazon SNS console or your Command Line Interface (CLI).
-        :param parameters: The set value pairs that represent the parameters passed to CloudFormation when this nested stack is created. Each parameter has a name corresponding to a parameter defined in the embedded template and a value representing the value that you want to set for the parameter. .. epigraph:: If you use the ``Ref`` function to pass a parameter value to a nested stack, comma-delimited list parameters must be of type ``String`` . In other words, you can't pass values that are of type ``CommaDelimitedList`` to nested stacks. Conditional. Required if the nested stack requires input parameters. Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
+        :param parameters: The set value pairs that represent the parameters passed to CloudFormation when this nested stack is created. Each parameter has a name corresponding to a parameter defined in the embedded template and a value representing the value that you want to set for the parameter. .. epigraph:: If you use the ``Ref`` function to pass a parameter value to a nested stack, comma-delimited list parameters must be of type ``String`` . In other words, you can't pass values that are of type ``CommaDelimitedList`` to nested stacks. Required if the nested stack requires input parameters. Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
         :param tags: Key-value pairs to associate with this stack. CloudFormation also propagates these tags to the resources created in the stack. A maximum number of 50 tags can be specified.
         :param template_url: The URL of a file containing the template body. The URL must point to a template (max size: 1 MB) that's located in an Amazon S3 bucket. The location for an Amazon S3 bucket must start with ``https://`` . Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
         :param timeout_in_minutes: The length of time, in minutes, that CloudFormation waits for the nested stack to reach the ``CREATE_COMPLETE`` state. The default is no timeout. When CloudFormation detects that the nested stack has reached the ``CREATE_COMPLETE`` state, it marks the nested stack resource as ``CREATE_COMPLETE`` in the parent stack and resumes creating the parent stack. If the timeout period expires before the nested stack reaches ``CREATE_COMPLETE`` , CloudFormation marks the nested stack as failed and rolls back both the nested stack and parent stack. Updates aren't supported.
@@ -8924,7 +8924,7 @@ class CfnStackProps:
 
            If you use the ``Ref`` function to pass a parameter value to a nested stack, comma-delimited list parameters must be of type ``String`` . In other words, you can't pass values that are of type ``CommaDelimitedList`` to nested stacks.
 
-        Conditional. Required if the nested stack requires input parameters.
+        Required if the nested stack requires input parameters.
 
         Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
 
@@ -9026,13 +9026,13 @@ class CfnStackSetProps:
         '''Properties for defining a ``CfnStackSet``.
 
         :param permission_model: Describes how the IAM roles required for stack set operations are created. - With ``SELF_MANAGED`` permissions, you must create the administrator and execution roles required to deploy to target accounts. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . - With ``SERVICE_MANAGED`` permissions, StackSets automatically creates the IAM roles required to deploy to accounts managed by AWS Organizations . For more information, see `Activate trusted access for stack sets with AWS Organizations <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-activate-trusted-access.html>`_ in the *AWS CloudFormation User Guide* .
-        :param stack_set_name: The name to associate with the stack set. The name must be unique in the Region where you create your stack set. .. epigraph:: The ``StackSetName`` property is required.
-        :param administration_role_arn: The Amazon Resource Number (ARN) of the IAM role to use to create this stack set. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. Use customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . *Minimum* : ``20`` *Maximum* : ``2048``
-        :param auto_deployment: [ ``Service-managed`` permissions] Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU).
-        :param call_as: [Service-managed permissions] Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account. By default, ``SELF`` is specified. Use ``SELF`` for stack sets with self-managed permissions. - To create a stack set with service-managed permissions while signed in to the management account, specify ``SELF`` . - To create a stack set with service-managed permissions while signed in to a delegated administrator account, specify ``DELEGATED_ADMIN`` . Your AWS account must be registered as a delegated admin in the management account. For more information, see `Register a delegated administrator <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html>`_ in the *AWS CloudFormation User Guide* . Stack sets with service-managed permissions are created in the management account, including stack sets that are created by delegated administrators. *Valid Values* : ``SELF`` | ``DELEGATED_ADMIN``
+        :param stack_set_name: The name to associate with the stack set. The name must be unique in the Region where you create your stack set.
+        :param administration_role_arn: The Amazon Resource Number (ARN) of the IAM role to use to create this stack set. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. Use customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . Valid only if the permissions model is ``SELF_MANAGED`` .
+        :param auto_deployment: Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU). For more information, see `Manage automatic deployments for CloudFormation StackSets that use service-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-manage-auto-deployment.html>`_ in the *AWS CloudFormation User Guide* . Required if the permissions model is ``SERVICE_MANAGED`` . (Not used with self-managed permissions.)
+        :param call_as: Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account. By default, ``SELF`` is specified. Use ``SELF`` for stack sets with self-managed permissions. - To create a stack set with service-managed permissions while signed in to the management account, specify ``SELF`` . - To create a stack set with service-managed permissions while signed in to a delegated administrator account, specify ``DELEGATED_ADMIN`` . Your AWS account must be registered as a delegated admin in the management account. For more information, see `Register a delegated administrator <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html>`_ in the *AWS CloudFormation User Guide* . Stack sets with service-managed permissions are created in the management account, including stack sets that are created by delegated administrators. Valid only if the permissions model is ``SERVICE_MANAGED`` .
         :param capabilities: The capabilities that are allowed in the stack set. Some stack set templates might include resources that can affect permissions in your AWS account —for example, by creating new IAM users. For more information, see `Acknowledging IAM resources in CloudFormation templates <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities>`_ in the *AWS CloudFormation User Guide* .
-        :param description: A description of the stack set. *Minimum* : ``1`` *Maximum* : ``1024``
-        :param execution_role_name: The name of the IAM execution role to use to create the stack set. If you don't specify an execution role, CloudFormation uses the ``AWSCloudFormationStackSetExecutionRole`` role for the stack set operation. *Minimum* : ``1`` *Maximum* : ``64`` *Pattern* : ``[a-zA-Z_0-9+=,.@-]+``
+        :param description: A description of the stack set.
+        :param execution_role_name: The name of the IAM execution role to use to create the stack set. If you don't specify an execution role, CloudFormation uses the ``AWSCloudFormationStackSetExecutionRole`` role for the stack set operation. Valid only if the permissions model is ``SELF_MANAGED`` . *Pattern* : ``[a-zA-Z_0-9+=,.@-]+``
         :param managed_execution: Describes whether StackSets performs non-conflicting operations concurrently and queues conflicting operations. When active, StackSets performs non-conflicting operations concurrently and queues conflicting operations. After conflicting operations finish, StackSets starts queued operations in request order. .. epigraph:: If there are already running or queued operations, StackSets queues all incoming operations even if they are non-conflicting. You can't modify your stack set's execution configuration while there are running or queued operations for that stack set. When inactive (default), StackSets performs one operation at a time in request order.
         :param operation_preferences: The user-specified preferences for how CloudFormation performs a stack set operation.
         :param parameters: The input parameters for the stack set template.
@@ -9169,9 +9169,6 @@ class CfnStackSetProps:
         '''The name to associate with the stack set.
 
         The name must be unique in the Region where you create your stack set.
-        .. epigraph::
-
-           The ``StackSetName`` property is required.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html#cfn-cloudformation-stackset-stacksetname
         '''
@@ -9187,9 +9184,7 @@ class CfnStackSetProps:
 
         Use customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* .
 
-        *Minimum* : ``20``
-
-        *Maximum* : ``2048``
+        Valid only if the permissions model is ``SELF_MANAGED`` .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html#cfn-cloudformation-stackset-administrationrolearn
         '''
@@ -9200,7 +9195,11 @@ class CfnStackSetProps:
     def auto_deployment(
         self,
     ) -> typing.Optional[typing.Union["IResolvable", "CfnStackSet.AutoDeploymentProperty"]]:
-        '''[ ``Service-managed`` permissions] Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU).
+        '''Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU).
+
+        For more information, see `Manage automatic deployments for CloudFormation StackSets that use service-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-manage-auto-deployment.html>`_ in the *AWS CloudFormation User Guide* .
+
+        Required if the permissions model is ``SERVICE_MANAGED`` . (Not used with self-managed permissions.)
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html#cfn-cloudformation-stackset-autodeployment
         '''
@@ -9209,7 +9208,7 @@ class CfnStackSetProps:
 
     @builtins.property
     def call_as(self) -> typing.Optional[builtins.str]:
-        '''[Service-managed permissions] Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account.
+        '''Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account.
 
         By default, ``SELF`` is specified. Use ``SELF`` for stack sets with self-managed permissions.
 
@@ -9220,7 +9219,7 @@ class CfnStackSetProps:
 
         Stack sets with service-managed permissions are created in the management account, including stack sets that are created by delegated administrators.
 
-        *Valid Values* : ``SELF`` | ``DELEGATED_ADMIN``
+        Valid only if the permissions model is ``SERVICE_MANAGED`` .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html#cfn-cloudformation-stackset-callas
         '''
@@ -9242,10 +9241,6 @@ class CfnStackSetProps:
     def description(self) -> typing.Optional[builtins.str]:
         '''A description of the stack set.
 
-        *Minimum* : ``1``
-
-        *Maximum* : ``1024``
-
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-stackset.html#cfn-cloudformation-stackset-description
         '''
         result = self._values.get("description")
@@ -9257,9 +9252,7 @@ class CfnStackSetProps:
 
         If you don't specify an execution role, CloudFormation uses the ``AWSCloudFormationStackSetExecutionRole`` role for the stack set operation.
 
-        *Minimum* : ``1``
-
-        *Maximum* : ``64``
+        Valid only if the permissions model is ``SELF_MANAGED`` .
 
         *Pattern* : ``[a-zA-Z_0-9+=,.@-]+``
 
@@ -18170,6 +18163,151 @@ class LazyStringValueOptions:
         )
 
 
+class MissingRemovalPolicies(
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.MissingRemovalPolicies",
+):
+    '''Manages removal policies for resources without existing policies within a construct scope.
+
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        import aws_cdk as cdk
+        
+        missing_removal_policies = cdk.MissingRemovalPolicies.of(self)
+    '''
+
+    @jsii.member(jsii_name="of")
+    @builtins.classmethod
+    def of(cls, scope: _constructs_77d1e7e8.IConstruct) -> "MissingRemovalPolicies":
+        '''Returns the missing removal policies API for the given scope.
+
+        :param scope: The scope.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__53b49b542fe09ce9b0aa527b531ee0b1e7f57e7e0c6e23c2483a0b347d813ebb)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+        return typing.cast("MissingRemovalPolicies", jsii.sinvoke(cls, "of", [scope]))
+
+    @jsii.member(jsii_name="apply")
+    def apply(
+        self,
+        policy: "RemovalPolicy",
+        *,
+        apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Apply a removal policy only to resources without existing policies within this scope.
+
+        :param policy: The removal policy to apply.
+        :param apply_to_resource_types: Apply the removal policy only to specific resource types. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - apply to all resources
+        :param exclude_resource_types: Exclude specific resource types from the removal policy. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - no exclusions
+        :param priority: The priority to use when applying this policy. The priority affects only the order in which aspects are applied during synthesis. For RemovalPolicies, the last applied policy will override previous ones. NOTE: Priority does NOT determine which policy "wins" when there are conflicts. The order of application determines the final policy, with later policies overriding earlier ones. Default: - AspectPriority.MUTATING
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b3f1229a84cb5fdb052e8db135be3d25670d9793cf44ddc71d8134240bed0efc)
+            check_type(argname="argument policy", value=policy, expected_type=type_hints["policy"])
+        props = RemovalPolicyProps(
+            apply_to_resource_types=apply_to_resource_types,
+            exclude_resource_types=exclude_resource_types,
+            priority=priority,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "apply", [policy, props]))
+
+    @jsii.member(jsii_name="destroy")
+    def destroy(
+        self,
+        *,
+        apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Apply DESTROY removal policy only to resources without existing policies within this scope.
+
+        :param apply_to_resource_types: Apply the removal policy only to specific resource types. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - apply to all resources
+        :param exclude_resource_types: Exclude specific resource types from the removal policy. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - no exclusions
+        :param priority: The priority to use when applying this policy. The priority affects only the order in which aspects are applied during synthesis. For RemovalPolicies, the last applied policy will override previous ones. NOTE: Priority does NOT determine which policy "wins" when there are conflicts. The order of application determines the final policy, with later policies overriding earlier ones. Default: - AspectPriority.MUTATING
+        '''
+        props = RemovalPolicyProps(
+            apply_to_resource_types=apply_to_resource_types,
+            exclude_resource_types=exclude_resource_types,
+            priority=priority,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "destroy", [props]))
+
+    @jsii.member(jsii_name="retain")
+    def retain(
+        self,
+        *,
+        apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Apply RETAIN removal policy only to resources without existing policies within this scope.
+
+        :param apply_to_resource_types: Apply the removal policy only to specific resource types. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - apply to all resources
+        :param exclude_resource_types: Exclude specific resource types from the removal policy. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - no exclusions
+        :param priority: The priority to use when applying this policy. The priority affects only the order in which aspects are applied during synthesis. For RemovalPolicies, the last applied policy will override previous ones. NOTE: Priority does NOT determine which policy "wins" when there are conflicts. The order of application determines the final policy, with later policies overriding earlier ones. Default: - AspectPriority.MUTATING
+        '''
+        props = RemovalPolicyProps(
+            apply_to_resource_types=apply_to_resource_types,
+            exclude_resource_types=exclude_resource_types,
+            priority=priority,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "retain", [props]))
+
+    @jsii.member(jsii_name="retainOnUpdateOrDelete")
+    def retain_on_update_or_delete(
+        self,
+        *,
+        apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Apply RETAIN_ON_UPDATE_OR_DELETE removal policy only to resources without existing policies within this scope.
+
+        :param apply_to_resource_types: Apply the removal policy only to specific resource types. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - apply to all resources
+        :param exclude_resource_types: Exclude specific resource types from the removal policy. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - no exclusions
+        :param priority: The priority to use when applying this policy. The priority affects only the order in which aspects are applied during synthesis. For RemovalPolicies, the last applied policy will override previous ones. NOTE: Priority does NOT determine which policy "wins" when there are conflicts. The order of application determines the final policy, with later policies overriding earlier ones. Default: - AspectPriority.MUTATING
+        '''
+        props = RemovalPolicyProps(
+            apply_to_resource_types=apply_to_resource_types,
+            exclude_resource_types=exclude_resource_types,
+            priority=priority,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "retainOnUpdateOrDelete", [props]))
+
+    @jsii.member(jsii_name="snapshot")
+    def snapshot(
+        self,
+        *,
+        apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Apply SNAPSHOT removal policy only to resources without existing policies within this scope.
+
+        :param apply_to_resource_types: Apply the removal policy only to specific resource types. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - apply to all resources
+        :param exclude_resource_types: Exclude specific resource types from the removal policy. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - no exclusions
+        :param priority: The priority to use when applying this policy. The priority affects only the order in which aspects are applied during synthesis. For RemovalPolicies, the last applied policy will override previous ones. NOTE: Priority does NOT determine which policy "wins" when there are conflicts. The order of application determines the final policy, with later policies overriding earlier ones. Default: - AspectPriority.MUTATING
+        '''
+        props = RemovalPolicyProps(
+            apply_to_resource_types=apply_to_resource_types,
+            exclude_resource_types=exclude_resource_types,
+            priority=priority,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "snapshot", [props]))
+
+
 class Names(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.Names"):
     '''Functions for devising unique names for constructs.
 
@@ -19046,6 +19184,148 @@ class _ReferenceProxy(Reference):
 typing.cast(typing.Any, Reference).__jsii_proxy_class__ = lambda : _ReferenceProxy
 
 
+class RemovalPolicies(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.RemovalPolicies"):
+    '''Manages removal policies for all resources within a construct scope, overriding any existing policies by default.
+
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        import aws_cdk as cdk
+        
+        removal_policies = cdk.RemovalPolicies.of(self)
+    '''
+
+    @jsii.member(jsii_name="of")
+    @builtins.classmethod
+    def of(cls, scope: _constructs_77d1e7e8.IConstruct) -> "RemovalPolicies":
+        '''Returns the removal policies API for the given scope.
+
+        :param scope: The scope.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__16fdd678fafc26c9e1ca2d269cac449744dcfd65a4b8fce227879a53407f64f2)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+        return typing.cast("RemovalPolicies", jsii.sinvoke(cls, "of", [scope]))
+
+    @jsii.member(jsii_name="apply")
+    def apply(
+        self,
+        policy: "RemovalPolicy",
+        *,
+        apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Apply a removal policy to all resources within this scope, overriding any existing policies.
+
+        :param policy: The removal policy to apply.
+        :param apply_to_resource_types: Apply the removal policy only to specific resource types. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - apply to all resources
+        :param exclude_resource_types: Exclude specific resource types from the removal policy. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - no exclusions
+        :param priority: The priority to use when applying this policy. The priority affects only the order in which aspects are applied during synthesis. For RemovalPolicies, the last applied policy will override previous ones. NOTE: Priority does NOT determine which policy "wins" when there are conflicts. The order of application determines the final policy, with later policies overriding earlier ones. Default: - AspectPriority.MUTATING
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__d1a6f380a312346d77f5859f328e14cef3d77e7eb99ba0dffc2dd7da58b9b0ca)
+            check_type(argname="argument policy", value=policy, expected_type=type_hints["policy"])
+        props = RemovalPolicyProps(
+            apply_to_resource_types=apply_to_resource_types,
+            exclude_resource_types=exclude_resource_types,
+            priority=priority,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "apply", [policy, props]))
+
+    @jsii.member(jsii_name="destroy")
+    def destroy(
+        self,
+        *,
+        apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Apply DESTROY removal policy to all resources within this scope.
+
+        :param apply_to_resource_types: Apply the removal policy only to specific resource types. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - apply to all resources
+        :param exclude_resource_types: Exclude specific resource types from the removal policy. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - no exclusions
+        :param priority: The priority to use when applying this policy. The priority affects only the order in which aspects are applied during synthesis. For RemovalPolicies, the last applied policy will override previous ones. NOTE: Priority does NOT determine which policy "wins" when there are conflicts. The order of application determines the final policy, with later policies overriding earlier ones. Default: - AspectPriority.MUTATING
+        '''
+        props = RemovalPolicyProps(
+            apply_to_resource_types=apply_to_resource_types,
+            exclude_resource_types=exclude_resource_types,
+            priority=priority,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "destroy", [props]))
+
+    @jsii.member(jsii_name="retain")
+    def retain(
+        self,
+        *,
+        apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Apply RETAIN removal policy to all resources within this scope.
+
+        :param apply_to_resource_types: Apply the removal policy only to specific resource types. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - apply to all resources
+        :param exclude_resource_types: Exclude specific resource types from the removal policy. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - no exclusions
+        :param priority: The priority to use when applying this policy. The priority affects only the order in which aspects are applied during synthesis. For RemovalPolicies, the last applied policy will override previous ones. NOTE: Priority does NOT determine which policy "wins" when there are conflicts. The order of application determines the final policy, with later policies overriding earlier ones. Default: - AspectPriority.MUTATING
+        '''
+        props = RemovalPolicyProps(
+            apply_to_resource_types=apply_to_resource_types,
+            exclude_resource_types=exclude_resource_types,
+            priority=priority,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "retain", [props]))
+
+    @jsii.member(jsii_name="retainOnUpdateOrDelete")
+    def retain_on_update_or_delete(
+        self,
+        *,
+        apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Apply RETAIN_ON_UPDATE_OR_DELETE removal policy to all resources within this scope.
+
+        :param apply_to_resource_types: Apply the removal policy only to specific resource types. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - apply to all resources
+        :param exclude_resource_types: Exclude specific resource types from the removal policy. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - no exclusions
+        :param priority: The priority to use when applying this policy. The priority affects only the order in which aspects are applied during synthesis. For RemovalPolicies, the last applied policy will override previous ones. NOTE: Priority does NOT determine which policy "wins" when there are conflicts. The order of application determines the final policy, with later policies overriding earlier ones. Default: - AspectPriority.MUTATING
+        '''
+        props = RemovalPolicyProps(
+            apply_to_resource_types=apply_to_resource_types,
+            exclude_resource_types=exclude_resource_types,
+            priority=priority,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "retainOnUpdateOrDelete", [props]))
+
+    @jsii.member(jsii_name="snapshot")
+    def snapshot(
+        self,
+        *,
+        apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Apply SNAPSHOT removal policy to all resources within this scope.
+
+        :param apply_to_resource_types: Apply the removal policy only to specific resource types. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - apply to all resources
+        :param exclude_resource_types: Exclude specific resource types from the removal policy. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - no exclusions
+        :param priority: The priority to use when applying this policy. The priority affects only the order in which aspects are applied during synthesis. For RemovalPolicies, the last applied policy will override previous ones. NOTE: Priority does NOT determine which policy "wins" when there are conflicts. The order of application determines the final policy, with later policies overriding earlier ones. Default: - AspectPriority.MUTATING
+        '''
+        props = RemovalPolicyProps(
+            apply_to_resource_types=apply_to_resource_types,
+            exclude_resource_types=exclude_resource_types,
+            priority=priority,
+        )
+
+        return typing.cast(None, jsii.invoke(self, "snapshot", [props]))
+
+
 @jsii.enum(jsii_type="aws-cdk-lib.RemovalPolicy")
 class RemovalPolicy(enum.Enum):
     '''Possible values for a resource's Removal Policy.
@@ -19221,6 +19501,106 @@ class RemovalPolicyOptions:
         )
 
 
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.RemovalPolicyProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "apply_to_resource_types": "applyToResourceTypes",
+        "exclude_resource_types": "excludeResourceTypes",
+        "priority": "priority",
+    },
+)
+class RemovalPolicyProps:
+    def __init__(
+        self,
+        *,
+        apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+        priority: typing.Optional[jsii.Number] = None,
+    ) -> None:
+        '''Properties for applying a removal policy.
+
+        :param apply_to_resource_types: Apply the removal policy only to specific resource types. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - apply to all resources
+        :param exclude_resource_types: Exclude specific resource types from the removal policy. Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket'). Default: - no exclusions
+        :param priority: The priority to use when applying this policy. The priority affects only the order in which aspects are applied during synthesis. For RemovalPolicies, the last applied policy will override previous ones. NOTE: Priority does NOT determine which policy "wins" when there are conflicts. The order of application determines the final policy, with later policies overriding earlier ones. Default: - AspectPriority.MUTATING
+
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            import aws_cdk as cdk
+            
+            removal_policy_props = cdk.RemovalPolicyProps(
+                apply_to_resource_types=["applyToResourceTypes"],
+                exclude_resource_types=["excludeResourceTypes"],
+                priority=123
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c5c7fd6f5b115619c0c625e32cc15eb9bdbfb4931f25b97d8db03b7037bf1a39)
+            check_type(argname="argument apply_to_resource_types", value=apply_to_resource_types, expected_type=type_hints["apply_to_resource_types"])
+            check_type(argname="argument exclude_resource_types", value=exclude_resource_types, expected_type=type_hints["exclude_resource_types"])
+            check_type(argname="argument priority", value=priority, expected_type=type_hints["priority"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if apply_to_resource_types is not None:
+            self._values["apply_to_resource_types"] = apply_to_resource_types
+        if exclude_resource_types is not None:
+            self._values["exclude_resource_types"] = exclude_resource_types
+        if priority is not None:
+            self._values["priority"] = priority
+
+    @builtins.property
+    def apply_to_resource_types(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''Apply the removal policy only to specific resource types.
+
+        Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket').
+
+        :default: - apply to all resources
+        '''
+        result = self._values.get("apply_to_resource_types")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+    @builtins.property
+    def exclude_resource_types(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''Exclude specific resource types from the removal policy.
+
+        Can be a CloudFormation resource type string (e.g., 'AWS::S3::Bucket').
+
+        :default: - no exclusions
+        '''
+        result = self._values.get("exclude_resource_types")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+    @builtins.property
+    def priority(self) -> typing.Optional[jsii.Number]:
+        '''The priority to use when applying this policy.
+
+        The priority affects only the order in which aspects are applied during synthesis.
+        For RemovalPolicies, the last applied policy will override previous ones.
+
+        NOTE: Priority does NOT determine which policy "wins" when there are conflicts.
+        The order of application determines the final policy, with later policies
+        overriding earlier ones.
+
+        :default: - AspectPriority.MUTATING
+        '''
+        result = self._values.get("priority")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "RemovalPolicyProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.implements(IAspect)
 class RemoveTag(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.RemoveTag"):
     '''The RemoveTag Aspect will handle removing tags from this node and children.
@@ -32160,7 +32540,7 @@ class CfnStack(CfnResource, metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.CfnS
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param notification_arns: The Amazon SNS topic ARNs to publish stack related events. You can find your Amazon SNS topic ARNs using the Amazon SNS console or your Command Line Interface (CLI).
-        :param parameters: The set value pairs that represent the parameters passed to CloudFormation when this nested stack is created. Each parameter has a name corresponding to a parameter defined in the embedded template and a value representing the value that you want to set for the parameter. .. epigraph:: If you use the ``Ref`` function to pass a parameter value to a nested stack, comma-delimited list parameters must be of type ``String`` . In other words, you can't pass values that are of type ``CommaDelimitedList`` to nested stacks. Conditional. Required if the nested stack requires input parameters. Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
+        :param parameters: The set value pairs that represent the parameters passed to CloudFormation when this nested stack is created. Each parameter has a name corresponding to a parameter defined in the embedded template and a value representing the value that you want to set for the parameter. .. epigraph:: If you use the ``Ref`` function to pass a parameter value to a nested stack, comma-delimited list parameters must be of type ``String`` . In other words, you can't pass values that are of type ``CommaDelimitedList`` to nested stacks. Required if the nested stack requires input parameters. Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
         :param tags: Key-value pairs to associate with this stack. CloudFormation also propagates these tags to the resources created in the stack. A maximum number of 50 tags can be specified.
         :param template_url: The URL of a file containing the template body. The URL must point to a template (max size: 1 MB) that's located in an Amazon S3 bucket. The location for an Amazon S3 bucket must start with ``https://`` . Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.
         :param timeout_in_minutes: The length of time, in minutes, that CloudFormation waits for the nested stack to reach the ``CREATE_COMPLETE`` state. The default is no timeout. When CloudFormation detects that the nested stack has reached the ``CREATE_COMPLETE`` state, it marks the nested stack resource as ``CREATE_COMPLETE`` in the parent stack and resumes creating the parent stack. If the timeout period expires before the nested stack reaches ``CREATE_COMPLETE`` , CloudFormation marks the nested stack as failed and rolls back both the nested stack and parent stack. Updates aren't supported.
@@ -32577,13 +32957,13 @@ class CfnStackSet(
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param permission_model: Describes how the IAM roles required for stack set operations are created. - With ``SELF_MANAGED`` permissions, you must create the administrator and execution roles required to deploy to target accounts. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . - With ``SERVICE_MANAGED`` permissions, StackSets automatically creates the IAM roles required to deploy to accounts managed by AWS Organizations . For more information, see `Activate trusted access for stack sets with AWS Organizations <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-activate-trusted-access.html>`_ in the *AWS CloudFormation User Guide* .
-        :param stack_set_name: The name to associate with the stack set. The name must be unique in the Region where you create your stack set. .. epigraph:: The ``StackSetName`` property is required.
-        :param administration_role_arn: The Amazon Resource Number (ARN) of the IAM role to use to create this stack set. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. Use customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . *Minimum* : ``20`` *Maximum* : ``2048``
-        :param auto_deployment: [ ``Service-managed`` permissions] Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU).
-        :param call_as: [Service-managed permissions] Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account. By default, ``SELF`` is specified. Use ``SELF`` for stack sets with self-managed permissions. - To create a stack set with service-managed permissions while signed in to the management account, specify ``SELF`` . - To create a stack set with service-managed permissions while signed in to a delegated administrator account, specify ``DELEGATED_ADMIN`` . Your AWS account must be registered as a delegated admin in the management account. For more information, see `Register a delegated administrator <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html>`_ in the *AWS CloudFormation User Guide* . Stack sets with service-managed permissions are created in the management account, including stack sets that are created by delegated administrators. *Valid Values* : ``SELF`` | ``DELEGATED_ADMIN``
+        :param stack_set_name: The name to associate with the stack set. The name must be unique in the Region where you create your stack set.
+        :param administration_role_arn: The Amazon Resource Number (ARN) of the IAM role to use to create this stack set. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. Use customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account. For more information, see `Grant self-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html>`_ in the *AWS CloudFormation User Guide* . Valid only if the permissions model is ``SELF_MANAGED`` .
+        :param auto_deployment: Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU). For more information, see `Manage automatic deployments for CloudFormation StackSets that use service-managed permissions <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-manage-auto-deployment.html>`_ in the *AWS CloudFormation User Guide* . Required if the permissions model is ``SERVICE_MANAGED`` . (Not used with self-managed permissions.)
+        :param call_as: Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account. By default, ``SELF`` is specified. Use ``SELF`` for stack sets with self-managed permissions. - To create a stack set with service-managed permissions while signed in to the management account, specify ``SELF`` . - To create a stack set with service-managed permissions while signed in to a delegated administrator account, specify ``DELEGATED_ADMIN`` . Your AWS account must be registered as a delegated admin in the management account. For more information, see `Register a delegated administrator <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html>`_ in the *AWS CloudFormation User Guide* . Stack sets with service-managed permissions are created in the management account, including stack sets that are created by delegated administrators. Valid only if the permissions model is ``SERVICE_MANAGED`` .
         :param capabilities: The capabilities that are allowed in the stack set. Some stack set templates might include resources that can affect permissions in your AWS account —for example, by creating new IAM users. For more information, see `Acknowledging IAM resources in CloudFormation templates <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities>`_ in the *AWS CloudFormation User Guide* .
-        :param description: A description of the stack set. *Minimum* : ``1`` *Maximum* : ``1024``
-        :param execution_role_name: The name of the IAM execution role to use to create the stack set. If you don't specify an execution role, CloudFormation uses the ``AWSCloudFormationStackSetExecutionRole`` role for the stack set operation. *Minimum* : ``1`` *Maximum* : ``64`` *Pattern* : ``[a-zA-Z_0-9+=,.@-]+``
+        :param description: A description of the stack set.
+        :param execution_role_name: The name of the IAM execution role to use to create the stack set. If you don't specify an execution role, CloudFormation uses the ``AWSCloudFormationStackSetExecutionRole`` role for the stack set operation. Valid only if the permissions model is ``SELF_MANAGED`` . *Pattern* : ``[a-zA-Z_0-9+=,.@-]+``
         :param managed_execution: Describes whether StackSets performs non-conflicting operations concurrently and queues conflicting operations. When active, StackSets performs non-conflicting operations concurrently and queues conflicting operations. After conflicting operations finish, StackSets starts queued operations in request order. .. epigraph:: If there are already running or queued operations, StackSets queues all incoming operations even if they are non-conflicting. You can't modify your stack set's execution configuration while there are running or queued operations for that stack set. When inactive (default), StackSets performs one operation at a time in request order.
         :param operation_preferences: The user-specified preferences for how CloudFormation performs a stack set operation.
         :param parameters: The input parameters for the stack set template.
@@ -32710,7 +33090,7 @@ class CfnStackSet(
     def auto_deployment(
         self,
     ) -> typing.Optional[typing.Union[IResolvable, "CfnStackSet.AutoDeploymentProperty"]]:
-        '''[ ``Service-managed`` permissions] Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU).'''
+        '''Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU).'''
         return typing.cast(typing.Optional[typing.Union[IResolvable, "CfnStackSet.AutoDeploymentProperty"]], jsii.get(self, "autoDeployment"))
 
     @auto_deployment.setter
@@ -32726,7 +33106,7 @@ class CfnStackSet(
     @builtins.property
     @jsii.member(jsii_name="callAs")
     def call_as(self) -> typing.Optional[builtins.str]:
-        '''[Service-managed permissions] Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account.'''
+        '''Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "callAs"))
 
     @call_as.setter
@@ -36556,6 +36936,7 @@ __all__ = [
     "LazyListValueOptions",
     "LazyStringValueOptions",
     "LegacyStackSynthesizer",
+    "MissingRemovalPolicies",
     "Names",
     "NestedStack",
     "NestedStackProps",
@@ -36568,8 +36949,10 @@ __all__ = [
     "PolicyViolatingResourceBeta1",
     "PolicyViolationBeta1",
     "Reference",
+    "RemovalPolicies",
     "RemovalPolicy",
     "RemovalPolicyOptions",
+    "RemovalPolicyProps",
     "RemoveTag",
     "ResolutionTypeHint",
     "ResolveChangeContextOptions",
@@ -36726,6 +37109,7 @@ __all__ = [
     "aws_frauddetector",
     "aws_fsx",
     "aws_gamelift",
+    "aws_gameliftstreams",
     "aws_globalaccelerator",
     "aws_globalaccelerator_endpoints",
     "aws_glue",
@@ -37019,6 +37403,7 @@ from . import aws_forecast
 from . import aws_frauddetector
 from . import aws_fsx
 from . import aws_gamelift
+from . import aws_gameliftstreams
 from . import aws_globalaccelerator
 from . import aws_globalaccelerator_endpoints
 from . import aws_glue
@@ -39297,6 +39682,22 @@ def _typecheckingstub__283fa3218deb31c702af8ec0f581964e58afe471191dd394e1567cb4d
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__53b49b542fe09ce9b0aa527b531ee0b1e7f57e7e0c6e23c2483a0b347d813ebb(
+    scope: _constructs_77d1e7e8.IConstruct,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b3f1229a84cb5fdb052e8db135be3d25670d9793cf44ddc71d8134240bed0efc(
+    policy: RemovalPolicy,
+    *,
+    apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+    exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+    priority: typing.Optional[jsii.Number] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__569ac5c6adbac9575b4137a0343aea0625df007d849957bfacf2e65a01153962(
     node: _constructs_77d1e7e8.Node,
 ) -> None:
@@ -39388,6 +39789,22 @@ def _typecheckingstub__46271c1d495743d8b70cfe27766a83a4dfd7bc3e4cf9af80b7823e48a
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__16fdd678fafc26c9e1ca2d269cac449744dcfd65a4b8fce227879a53407f64f2(
+    scope: _constructs_77d1e7e8.IConstruct,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__d1a6f380a312346d77f5859f328e14cef3d77e7eb99ba0dffc2dd7da58b9b0ca(
+    policy: RemovalPolicy,
+    *,
+    apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+    exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+    priority: typing.Optional[jsii.Number] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__cf59d09830cb04cd8d888f7fcdf115e700dad2a3650ac4a9beaed76aea901790(
     *,
     apply_to_update_replace_policy: typing.Optional[builtins.bool] = None,
@@ -39396,6 +39813,15 @@ def _typecheckingstub__cf59d09830cb04cd8d888f7fcdf115e700dad2a3650ac4a9beaed76ae
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__c5c7fd6f5b115619c0c625e32cc15eb9bdbfb4931f25b97d8db03b7037bf1a39(
+    *,
+    apply_to_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+    exclude_resource_types: typing.Optional[typing.Sequence[builtins.str]] = None,
+    priority: typing.Optional[jsii.Number] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__944c89fd9e400a7d6e966cc04588226988866735f42049e619d446afc77d54c6(
     key: builtins.str,
     *,