aws-cdk-lib 2.195.0__py3-none-any.whl → 2.224.0__py3-none-any.whl

aws_cdk/aws_servicecatalog/__init__.py

@@ -629,14 +629,49 @@ from ..aws_iam import (
     IRole as _IRole_235f5d8e,
     IUser as _IUser_c32311f7,
 )
-from ..aws_kms import IKey as _IKey_5f11635f
 from ..aws_s3 import IBucket as _IBucket_42e086fd
 from ..aws_s3_assets import AssetOptions as _AssetOptions_2aa69621
 from ..aws_s3_deployment import ServerSideEncryption as _ServerSideEncryption_50ddf705
 from ..aws_sns import ITopic as _ITopic_9eca4852
+from ..interfaces.aws_iam import IRoleRef as _IRoleRef_8400221f
+from ..interfaces.aws_kms import IKeyRef as _IKeyRef_d4fc6ef3
+from ..interfaces.aws_servicecatalog import (
+    AcceptedPortfolioShareReference as _AcceptedPortfolioShareReference_5a5fad2c,
+    CloudFormationProductReference as _CloudFormationProductReference_a9bb7050,
+    CloudFormationProvisionedProductReference as _CloudFormationProvisionedProductReference_cc99c3e1,
+    IAcceptedPortfolioShareRef as _IAcceptedPortfolioShareRef_56b3caed,
+    ICloudFormationProductRef as _ICloudFormationProductRef_d59b8740,
+    ICloudFormationProvisionedProductRef as _ICloudFormationProvisionedProductRef_8065ca55,
+    ILaunchNotificationConstraintRef as _ILaunchNotificationConstraintRef_9fe9869c,
+    ILaunchRoleConstraintRef as _ILaunchRoleConstraintRef_e359a2bb,
+    ILaunchTemplateConstraintRef as _ILaunchTemplateConstraintRef_5f25ac94,
+    IPortfolioPrincipalAssociationRef as _IPortfolioPrincipalAssociationRef_1e487bc3,
+    IPortfolioProductAssociationRef as _IPortfolioProductAssociationRef_3f352f5c,
+    IPortfolioRef as _IPortfolioRef_a19e4bd0,
+    IPortfolioShareRef as _IPortfolioShareRef_02a1808a,
+    IResourceUpdateConstraintRef as _IResourceUpdateConstraintRef_6a0e13ed,
+    IServiceActionAssociationRef as _IServiceActionAssociationRef_0e9e58e8,
+    IServiceActionRef as _IServiceActionRef_ab991e2b,
+    IStackSetConstraintRef as _IStackSetConstraintRef_5b78280d,
+    ITagOptionAssociationRef as _ITagOptionAssociationRef_ba745ddc,
+    ITagOptionRef as _ITagOptionRef_bd4d9e5c,
+    LaunchNotificationConstraintReference as _LaunchNotificationConstraintReference_bb0fbb25,
+    LaunchRoleConstraintReference as _LaunchRoleConstraintReference_81c64491,
+    LaunchTemplateConstraintReference as _LaunchTemplateConstraintReference_ec83b407,
+    PortfolioPrincipalAssociationReference as _PortfolioPrincipalAssociationReference_94cd9217,
+    PortfolioProductAssociationReference as _PortfolioProductAssociationReference_92cc7707,
+    PortfolioReference as _PortfolioReference_7a849941,
+    PortfolioShareReference as _PortfolioShareReference_b73c7783,
+    ResourceUpdateConstraintReference as _ResourceUpdateConstraintReference_7c332e17,
+    ServiceActionAssociationReference as _ServiceActionAssociationReference_b0ac9c14,
+    ServiceActionReference as _ServiceActionReference_eb2df408,
+    StackSetConstraintReference as _StackSetConstraintReference_378fddb5,
+    TagOptionAssociationReference as _TagOptionAssociationReference_0801788b,
+    TagOptionReference as _TagOptionReference_ef49ef9d,
+)
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IAcceptedPortfolioShareRef_56b3caed)
 class CfnAcceptedPortfolioShare(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -670,7 +705,8 @@ class CfnAcceptedPortfolioShare(
         portfolio_id: builtins.str,
         accept_language: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ServiceCatalog::AcceptedPortfolioShare``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param portfolio_id: The portfolio identifier.
@@ -716,6 +752,12 @@ class CfnAcceptedPortfolioShare(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
+    @builtins.property
+    @jsii.member(jsii_name="acceptedPortfolioShareRef")
+    def accepted_portfolio_share_ref(self) -> _AcceptedPortfolioShareReference_5a5fad2c:
+        '''A reference to a AcceptedPortfolioShare resource.'''
+        return typing.cast(_AcceptedPortfolioShareReference_5a5fad2c, jsii.get(self, "acceptedPortfolioShareRef"))
+
     @builtins.property
     @jsii.member(jsii_name="attrId")
     def attr_id(self) -> builtins.str:
@@ -833,7 +875,7 @@ class CfnAcceptedPortfolioShareProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _ICloudFormationProductRef_d59b8740, _ITaggable_36806126)
 class CfnCloudFormationProduct(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -912,7 +954,8 @@ class CfnCloudFormationProduct(
         support_url: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ServiceCatalog::CloudFormationProduct``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name of the product.
@@ -984,7 +1027,8 @@ class CfnCloudFormationProduct(
     @builtins.property
     @jsii.member(jsii_name="attrId")
     def attr_id(self) -> builtins.str:
-        '''
+        '''The ID of the product, such as prod-tsjbmal34qvek.
+
         :cloudformationAttribute: Id
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrId"))
@@ -1021,6 +1065,12 @@ class CfnCloudFormationProduct(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="cloudFormationProductRef")
+    def cloud_formation_product_ref(self) -> _CloudFormationProductReference_a9bb7050:
+        '''A reference to a CloudFormationProduct resource.'''
+        return typing.cast(_CloudFormationProductReference_a9bb7050, jsii.get(self, "cloudFormationProductRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -1898,7 +1948,7 @@ class CfnCloudFormationProductProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _ICloudFormationProvisionedProductRef_8065ca55, _ITaggable_36806126)
 class CfnCloudFormationProvisionedProduct(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1968,7 +2018,8 @@ class CfnCloudFormationProvisionedProduct(
         provisioning_preferences: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnCloudFormationProvisionedProduct.ProvisioningPreferencesProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ServiceCatalog::CloudFormationProvisionedProduct``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param accept_language: The language code. - ``jp`` - Japanese - ``zh`` - Chinese
@@ -2075,6 +2126,14 @@ class CfnCloudFormationProvisionedProduct(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="cloudFormationProvisionedProductRef")
+    def cloud_formation_provisioned_product_ref(
+        self,
+    ) -> _CloudFormationProvisionedProductReference_cc99c3e1:
+        '''A reference to a CloudFormationProvisionedProduct resource.'''
+        return typing.cast(_CloudFormationProvisionedProductReference_cc99c3e1, jsii.get(self, "cloudFormationProvisionedProductRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -2825,7 +2884,7 @@ class CfnCloudFormationProvisionedProductProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _ILaunchNotificationConstraintRef_9fe9869c)
 class CfnLaunchNotificationConstraint(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -2865,7 +2924,8 @@ class CfnLaunchNotificationConstraint(
         accept_language: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ServiceCatalog::LaunchNotificationConstraint``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param notification_arns: The notification ARNs.
@@ -2921,7 +2981,8 @@ class CfnLaunchNotificationConstraint(
     @builtins.property
     @jsii.member(jsii_name="attrId")
     def attr_id(self) -> builtins.str:
-        '''
+        '''Unique identifier for the constraint.
+
         :cloudformationAttribute: Id
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrId"))
@@ -2931,6 +2992,14 @@ class CfnLaunchNotificationConstraint(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="launchNotificationConstraintRef")
+    def launch_notification_constraint_ref(
+        self,
+    ) -> _LaunchNotificationConstraintReference_bb0fbb25:
+        '''A reference to a LaunchNotificationConstraint resource.'''
+        return typing.cast(_LaunchNotificationConstraintReference_bb0fbb25, jsii.get(self, "launchNotificationConstraintRef"))
+
     @builtins.property
     @jsii.member(jsii_name="notificationArns")
     def notification_arns(self) -> typing.List[builtins.str]:
@@ -3125,7 +3194,7 @@ class CfnLaunchNotificationConstraintProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _ILaunchRoleConstraintRef_e359a2bb)
 class CfnLaunchRoleConstraint(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -3167,7 +3236,8 @@ class CfnLaunchRoleConstraint(
         local_role_name: typing.Optional[builtins.str] = None,
         role_arn: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ServiceCatalog::LaunchRoleConstraint``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param portfolio_id: The portfolio identifier.
@@ -3235,6 +3305,12 @@ class CfnLaunchRoleConstraint(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="launchRoleConstraintRef")
+    def launch_role_constraint_ref(self) -> _LaunchRoleConstraintReference_81c64491:
+        '''A reference to a LaunchRoleConstraint resource.'''
+        return typing.cast(_LaunchRoleConstraintReference_81c64491, jsii.get(self, "launchRoleConstraintRef"))
+
     @builtins.property
     @jsii.member(jsii_name="portfolioId")
     def portfolio_id(self) -> builtins.str:
@@ -3464,7 +3540,7 @@ class CfnLaunchRoleConstraintProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _ILaunchTemplateConstraintRef_5f25ac94)
 class CfnLaunchTemplateConstraint(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -3504,7 +3580,8 @@ class CfnLaunchTemplateConstraint(
         accept_language: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ServiceCatalog::LaunchTemplateConstraint``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param portfolio_id: The portfolio identifier.
@@ -3560,7 +3637,8 @@ class CfnLaunchTemplateConstraint(
     @builtins.property
     @jsii.member(jsii_name="attrId")
     def attr_id(self) -> builtins.str:
-        '''
+        '''Unique identifier for the constraint.
+
         :cloudformationAttribute: Id
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrId"))
@@ -3570,6 +3648,14 @@ class CfnLaunchTemplateConstraint(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="launchTemplateConstraintRef")
+    def launch_template_constraint_ref(
+        self,
+    ) -> _LaunchTemplateConstraintReference_ec83b407:
+        '''A reference to a LaunchTemplateConstraint resource.'''
+        return typing.cast(_LaunchTemplateConstraintReference_ec83b407, jsii.get(self, "launchTemplateConstraintRef"))
+
     @builtins.property
     @jsii.member(jsii_name="portfolioId")
     def portfolio_id(self) -> builtins.str:
@@ -3764,7 +3850,7 @@ class CfnLaunchTemplateConstraintProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IPortfolioRef_a19e4bd0, _ITaggable_36806126)
 class CfnPortfolio(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -3807,7 +3893,8 @@ class CfnPortfolio(
         description: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ServiceCatalog::Portfolio``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param display_name: The name to use for display purposes.
@@ -3830,6 +3917,27 @@ class CfnPortfolio(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromPortfolioId")
+    @builtins.classmethod
+    def from_portfolio_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        portfolio_id: builtins.str,
+    ) -> _IPortfolioRef_a19e4bd0:
+        '''Creates a new IPortfolioRef from a portfolioId.
+
+        :param scope: -
+        :param id: -
+        :param portfolio_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__44128417aff4104adae0046cf0d101d90c4fc22515494313689b7b4561643abc)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument portfolio_id", value=portfolio_id, expected_type=type_hints["portfolio_id"])
+        return typing.cast(_IPortfolioRef_a19e4bd0, jsii.sinvoke(cls, "fromPortfolioId", [scope, id, portfolio_id]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -3883,6 +3991,12 @@ class CfnPortfolio(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="portfolioRef")
+    def portfolio_ref(self) -> _PortfolioReference_7a849941:
+        '''A reference to a Portfolio resource.'''
+        return typing.cast(_PortfolioReference_7a849941, jsii.get(self, "portfolioRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -3955,7 +4069,7 @@ class CfnPortfolio(
         jsii.set(self, "tagsRaw", value) # pyright: ignore[reportArgumentType]
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IPortfolioPrincipalAssociationRef_1e487bc3)
 class CfnPortfolioPrincipalAssociation(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -3974,12 +4088,12 @@ class CfnPortfolioPrincipalAssociation(
         from aws_cdk import aws_servicecatalog as servicecatalog
         
         cfn_portfolio_principal_association = servicecatalog.CfnPortfolioPrincipalAssociation(self, "MyCfnPortfolioPrincipalAssociation",
-            portfolio_id="portfolioId",
-            principal_arn="principalArn",
             principal_type="principalType",
         
             # the properties below are optional
-            accept_language="acceptLanguage"
+            accept_language="acceptLanguage",
+            portfolio_id="portfolioId",
+            principal_arn="principalArn"
         )
     '''
 
@@ -3988,28 +4102,29 @@ class CfnPortfolioPrincipalAssociation(
         scope: _constructs_77d1e7e8.Construct,
         id: builtins.str,
         *,
-        portfolio_id: builtins.str,
-        principal_arn: builtins.str,
         principal_type: builtins.str,
         accept_language: typing.Optional[builtins.str] = None,
+        portfolio_id: typing.Optional[builtins.str] = None,
+        principal_arn: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ServiceCatalog::PortfolioPrincipalAssociation``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param portfolio_id: The portfolio identifier.
-        :param principal_arn: The ARN of the principal ( IAM user, role, or group).
         :param principal_type: The principal type. The supported values are ``IAM`` and ``IAM_PATTERN`` .
         :param accept_language: The language code. - ``jp`` - Japanese - ``zh`` - Chinese
+        :param portfolio_id: The portfolio identifier.
+        :param principal_arn: The ARN of the principal ( IAM user, role, or group).
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__2b8a7d450a71f88f29341f360bc05a021b910027171e4e63c9be6c67c4d53b2a)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = CfnPortfolioPrincipalAssociationProps(
-            portfolio_id=portfolio_id,
-            principal_arn=principal_arn,
             principal_type=principal_type,
             accept_language=accept_language,
+            portfolio_id=portfolio_id,
+            principal_arn=principal_arn,
         )
 
         jsii.create(self.__class__, self, [scope, id, props])
@@ -4044,44 +4159,18 @@ class CfnPortfolioPrincipalAssociation(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
-    @builtins.property
-    @jsii.member(jsii_name="attrId")
-    def attr_id(self) -> builtins.str:
-        '''
-        :cloudformationAttribute: Id
-        '''
-        return typing.cast(builtins.str, jsii.get(self, "attrId"))
-
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
     @builtins.property
-    @jsii.member(jsii_name="portfolioId")
-    def portfolio_id(self) -> builtins.str:
-        '''The portfolio identifier.'''
-        return typing.cast(builtins.str, jsii.get(self, "portfolioId"))
-
-    @portfolio_id.setter
-    def portfolio_id(self, value: builtins.str) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__726706747073f477b14d5b31fa14aba7087b2fc4265414101c6069e458c605ef)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "portfolioId", value) # pyright: ignore[reportArgumentType]
-
-    @builtins.property
-    @jsii.member(jsii_name="principalArn")
-    def principal_arn(self) -> builtins.str:
-        '''The ARN of the principal ( IAM user, role, or group).'''
-        return typing.cast(builtins.str, jsii.get(self, "principalArn"))
-
-    @principal_arn.setter
-    def principal_arn(self, value: builtins.str) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__71c52a4171fa242df45a083617e532d09ea08d89eea6a461f83e7608b28c48bb)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "principalArn", value) # pyright: ignore[reportArgumentType]
+    @jsii.member(jsii_name="portfolioPrincipalAssociationRef")
+    def portfolio_principal_association_ref(
+        self,
+    ) -> _PortfolioPrincipalAssociationReference_94cd9217:
+        '''A reference to a PortfolioPrincipalAssociation resource.'''
+        return typing.cast(_PortfolioPrincipalAssociationReference_94cd9217, jsii.get(self, "portfolioPrincipalAssociationRef"))
 
     @builtins.property
     @jsii.member(jsii_name="principalType")
@@ -4109,32 +4198,58 @@ class CfnPortfolioPrincipalAssociation(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "acceptLanguage", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="portfolioId")
+    def portfolio_id(self) -> typing.Optional[builtins.str]:
+        '''The portfolio identifier.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "portfolioId"))
+
+    @portfolio_id.setter
+    def portfolio_id(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__726706747073f477b14d5b31fa14aba7087b2fc4265414101c6069e458c605ef)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "portfolioId", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="principalArn")
+    def principal_arn(self) -> typing.Optional[builtins.str]:
+        '''The ARN of the principal ( IAM user, role, or group).'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "principalArn"))
+
+    @principal_arn.setter
+    def principal_arn(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__71c52a4171fa242df45a083617e532d09ea08d89eea6a461f83e7608b28c48bb)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "principalArn", value) # pyright: ignore[reportArgumentType]
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_servicecatalog.CfnPortfolioPrincipalAssociationProps",
     jsii_struct_bases=[],
     name_mapping={
-        "portfolio_id": "portfolioId",
-        "principal_arn": "principalArn",
         "principal_type": "principalType",
         "accept_language": "acceptLanguage",
+        "portfolio_id": "portfolioId",
+        "principal_arn": "principalArn",
     },
 )
 class CfnPortfolioPrincipalAssociationProps:
     def __init__(
         self,
         *,
-        portfolio_id: builtins.str,
-        principal_arn: builtins.str,
         principal_type: builtins.str,
         accept_language: typing.Optional[builtins.str] = None,
+        portfolio_id: typing.Optional[builtins.str] = None,
+        principal_arn: typing.Optional[builtins.str] = None,
     ) -> None:
         '''Properties for defining a ``CfnPortfolioPrincipalAssociation``.
 
-        :param portfolio_id: The portfolio identifier.
-        :param principal_arn: The ARN of the principal ( IAM user, role, or group).
         :param principal_type: The principal type. The supported values are ``IAM`` and ``IAM_PATTERN`` .
         :param accept_language: The language code. - ``jp`` - Japanese - ``zh`` - Chinese
+        :param portfolio_id: The portfolio identifier.
+        :param principal_arn: The ARN of the principal ( IAM user, role, or group).
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-portfolioprincipalassociation.html
         :exampleMetadata: fixture=_generated
@@ -4146,47 +4261,29 @@ class CfnPortfolioPrincipalAssociationProps:
             from aws_cdk import aws_servicecatalog as servicecatalog
             
             cfn_portfolio_principal_association_props = servicecatalog.CfnPortfolioPrincipalAssociationProps(
-                portfolio_id="portfolioId",
-                principal_arn="principalArn",
                 principal_type="principalType",
             
                 # the properties below are optional
-                accept_language="acceptLanguage"
+                accept_language="acceptLanguage",
+                portfolio_id="portfolioId",
+                principal_arn="principalArn"
             )
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__86aa94ae9b8977b851184740615709136e8ab87d84e565bd4ed1c37202e743af)
-            check_type(argname="argument portfolio_id", value=portfolio_id, expected_type=type_hints["portfolio_id"])
-            check_type(argname="argument principal_arn", value=principal_arn, expected_type=type_hints["principal_arn"])
             check_type(argname="argument principal_type", value=principal_type, expected_type=type_hints["principal_type"])
             check_type(argname="argument accept_language", value=accept_language, expected_type=type_hints["accept_language"])
+            check_type(argname="argument portfolio_id", value=portfolio_id, expected_type=type_hints["portfolio_id"])
+            check_type(argname="argument principal_arn", value=principal_arn, expected_type=type_hints["principal_arn"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
-            "portfolio_id": portfolio_id,
-            "principal_arn": principal_arn,
             "principal_type": principal_type,
         }
         if accept_language is not None:
             self._values["accept_language"] = accept_language
-
-    @builtins.property
-    def portfolio_id(self) -> builtins.str:
-        '''The portfolio identifier.
-
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-portfolioprincipalassociation.html#cfn-servicecatalog-portfolioprincipalassociation-portfolioid
-        '''
-        result = self._values.get("portfolio_id")
-        assert result is not None, "Required property 'portfolio_id' is missing"
-        return typing.cast(builtins.str, result)
-
-    @builtins.property
-    def principal_arn(self) -> builtins.str:
-        '''The ARN of the principal ( IAM user, role, or group).
-
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-portfolioprincipalassociation.html#cfn-servicecatalog-portfolioprincipalassociation-principalarn
-        '''
-        result = self._values.get("principal_arn")
-        assert result is not None, "Required property 'principal_arn' is missing"
-        return typing.cast(builtins.str, result)
+        if portfolio_id is not None:
+            self._values["portfolio_id"] = portfolio_id
+        if principal_arn is not None:
+            self._values["principal_arn"] = principal_arn
 
     @builtins.property
     def principal_type(self) -> builtins.str:
@@ -4212,6 +4309,24 @@ class CfnPortfolioPrincipalAssociationProps:
         result = self._values.get("accept_language")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def portfolio_id(self) -> typing.Optional[builtins.str]:
+        '''The portfolio identifier.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-portfolioprincipalassociation.html#cfn-servicecatalog-portfolioprincipalassociation-portfolioid
+        '''
+        result = self._values.get("portfolio_id")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def principal_arn(self) -> typing.Optional[builtins.str]:
+        '''The ARN of the principal ( IAM user, role, or group).
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-portfolioprincipalassociation.html#cfn-servicecatalog-portfolioprincipalassociation-principalarn
+        '''
+        result = self._values.get("principal_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -4224,7 +4339,7 @@ class CfnPortfolioPrincipalAssociationProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IPortfolioProductAssociationRef_3f352f5c)
 class CfnPortfolioProductAssociation(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -4245,11 +4360,9 @@ class CfnPortfolioProductAssociation(
         from aws_cdk import aws_servicecatalog as servicecatalog
         
         cfn_portfolio_product_association = servicecatalog.CfnPortfolioProductAssociation(self, "MyCfnPortfolioProductAssociation",
+            accept_language="acceptLanguage",
             portfolio_id="portfolioId",
             product_id="productId",
-        
-            # the properties below are optional
-            accept_language="acceptLanguage",
             source_portfolio_id="sourcePortfolioId"
         )
     '''
@@ -4259,17 +4372,18 @@ class CfnPortfolioProductAssociation(
         scope: _constructs_77d1e7e8.Construct,
         id: builtins.str,
         *,
-        portfolio_id: builtins.str,
-        product_id: builtins.str,
         accept_language: typing.Optional[builtins.str] = None,
+        portfolio_id: typing.Optional[builtins.str] = None,
+        product_id: typing.Optional[builtins.str] = None,
         source_portfolio_id: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ServiceCatalog::PortfolioProductAssociation``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
+        :param accept_language: The language code. - ``jp`` - Japanese - ``zh`` - Chinese
         :param portfolio_id: The portfolio identifier.
         :param product_id: The product identifier.
-        :param accept_language: The language code. - ``jp`` - Japanese - ``zh`` - Chinese
         :param source_portfolio_id: The identifier of the source portfolio.
         '''
         if __debug__:
@@ -4277,9 +4391,9 @@ class CfnPortfolioProductAssociation(
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = CfnPortfolioProductAssociationProps(
+            accept_language=accept_language,
             portfolio_id=portfolio_id,
             product_id=product_id,
-            accept_language=accept_language,
             source_portfolio_id=source_portfolio_id,
         )
 
@@ -4315,27 +4429,40 @@ class CfnPortfolioProductAssociation(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
-    @builtins.property
-    @jsii.member(jsii_name="attrId")
-    def attr_id(self) -> builtins.str:
-        '''
-        :cloudformationAttribute: Id
-        '''
-        return typing.cast(builtins.str, jsii.get(self, "attrId"))
-
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="portfolioProductAssociationRef")
+    def portfolio_product_association_ref(
+        self,
+    ) -> _PortfolioProductAssociationReference_92cc7707:
+        '''A reference to a PortfolioProductAssociation resource.'''
+        return typing.cast(_PortfolioProductAssociationReference_92cc7707, jsii.get(self, "portfolioProductAssociationRef"))
+
+    @builtins.property
+    @jsii.member(jsii_name="acceptLanguage")
+    def accept_language(self) -> typing.Optional[builtins.str]:
+        '''The language code.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "acceptLanguage"))
+
+    @accept_language.setter
+    def accept_language(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c7d396eed36a68172694b616bafad7ef385373f22a1d8c3dc49608d69ec9e526)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "acceptLanguage", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="portfolioId")
-    def portfolio_id(self) -> builtins.str:
+    def portfolio_id(self) -> typing.Optional[builtins.str]:
         '''The portfolio identifier.'''
-        return typing.cast(builtins.str, jsii.get(self, "portfolioId"))
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "portfolioId"))
 
     @portfolio_id.setter
-    def portfolio_id(self, value: builtins.str) -> None:
+    def portfolio_id(self, value: typing.Optional[builtins.str]) -> None:
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__19f425d3e28d58e160bed9adb81d5653e2000512b6a76bfcf27a70e272988f14)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
@@ -4343,30 +4470,17 @@ class CfnPortfolioProductAssociation(
 
     @builtins.property
     @jsii.member(jsii_name="productId")
-    def product_id(self) -> builtins.str:
+    def product_id(self) -> typing.Optional[builtins.str]:
         '''The product identifier.'''
-        return typing.cast(builtins.str, jsii.get(self, "productId"))
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "productId"))
 
     @product_id.setter
-    def product_id(self, value: builtins.str) -> None:
+    def product_id(self, value: typing.Optional[builtins.str]) -> None:
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__3098433a8204e6c52183ab4756af784eb3f510cb7bdb7fe68b7c21ef9e4d78cf)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "productId", value) # pyright: ignore[reportArgumentType]
 
-    @builtins.property
-    @jsii.member(jsii_name="acceptLanguage")
-    def accept_language(self) -> typing.Optional[builtins.str]:
-        '''The language code.'''
-        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "acceptLanguage"))
-
-    @accept_language.setter
-    def accept_language(self, value: typing.Optional[builtins.str]) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__c7d396eed36a68172694b616bafad7ef385373f22a1d8c3dc49608d69ec9e526)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "acceptLanguage", value) # pyright: ignore[reportArgumentType]
-
     @builtins.property
     @jsii.member(jsii_name="sourcePortfolioId")
     def source_portfolio_id(self) -> typing.Optional[builtins.str]:
@@ -4385,9 +4499,9 @@ class CfnPortfolioProductAssociation(
     jsii_type="aws-cdk-lib.aws_servicecatalog.CfnPortfolioProductAssociationProps",
     jsii_struct_bases=[],
     name_mapping={
+        "accept_language": "acceptLanguage",
         "portfolio_id": "portfolioId",
         "product_id": "productId",
-        "accept_language": "acceptLanguage",
         "source_portfolio_id": "sourcePortfolioId",
     },
 )
@@ -4395,16 +4509,16 @@ class CfnPortfolioProductAssociationProps:
     def __init__(
         self,
         *,
-        portfolio_id: builtins.str,
-        product_id: builtins.str,
         accept_language: typing.Optional[builtins.str] = None,
+        portfolio_id: typing.Optional[builtins.str] = None,
+        product_id: typing.Optional[builtins.str] = None,
         source_portfolio_id: typing.Optional[builtins.str] = None,
     ) -> None:
         '''Properties for defining a ``CfnPortfolioProductAssociation``.
 
+        :param accept_language: The language code. - ``jp`` - Japanese - ``zh`` - Chinese
         :param portfolio_id: The portfolio identifier.
         :param product_id: The product identifier.
-        :param accept_language: The language code. - ``jp`` - Japanese - ``zh`` - Chinese
         :param source_portfolio_id: The identifier of the source portfolio.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-portfolioproductassociation.html
@@ -4417,59 +4531,56 @@ class CfnPortfolioProductAssociationProps:
             from aws_cdk import aws_servicecatalog as servicecatalog
             
             cfn_portfolio_product_association_props = servicecatalog.CfnPortfolioProductAssociationProps(
+                accept_language="acceptLanguage",
                 portfolio_id="portfolioId",
                 product_id="productId",
-            
-                # the properties below are optional
-                accept_language="acceptLanguage",
                 source_portfolio_id="sourcePortfolioId"
             )
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__97355e439ae20c66a13583fbc70b7a8de7f038ae88e7d60775df912c8ba748c0)
+            check_type(argname="argument accept_language", value=accept_language, expected_type=type_hints["accept_language"])
             check_type(argname="argument portfolio_id", value=portfolio_id, expected_type=type_hints["portfolio_id"])
             check_type(argname="argument product_id", value=product_id, expected_type=type_hints["product_id"])
-            check_type(argname="argument accept_language", value=accept_language, expected_type=type_hints["accept_language"])
             check_type(argname="argument source_portfolio_id", value=source_portfolio_id, expected_type=type_hints["source_portfolio_id"])
-        self._values: typing.Dict[builtins.str, typing.Any] = {
-            "portfolio_id": portfolio_id,
-            "product_id": product_id,
-        }
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
         if accept_language is not None:
             self._values["accept_language"] = accept_language
+        if portfolio_id is not None:
+            self._values["portfolio_id"] = portfolio_id
+        if product_id is not None:
+            self._values["product_id"] = product_id
         if source_portfolio_id is not None:
             self._values["source_portfolio_id"] = source_portfolio_id
 
     @builtins.property
-    def portfolio_id(self) -> builtins.str:
+    def accept_language(self) -> typing.Optional[builtins.str]:
+        '''The language code.
+
+        - ``jp`` - Japanese
+        - ``zh`` - Chinese
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-portfolioproductassociation.html#cfn-servicecatalog-portfolioproductassociation-acceptlanguage
+        '''
+        result = self._values.get("accept_language")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def portfolio_id(self) -> typing.Optional[builtins.str]:
         '''The portfolio identifier.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-portfolioproductassociation.html#cfn-servicecatalog-portfolioproductassociation-portfolioid
         '''
         result = self._values.get("portfolio_id")
-        assert result is not None, "Required property 'portfolio_id' is missing"
-        return typing.cast(builtins.str, result)
+        return typing.cast(typing.Optional[builtins.str], result)
 
     @builtins.property
-    def product_id(self) -> builtins.str:
+    def product_id(self) -> typing.Optional[builtins.str]:
         '''The product identifier.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-portfolioproductassociation.html#cfn-servicecatalog-portfolioproductassociation-productid
         '''
         result = self._values.get("product_id")
-        assert result is not None, "Required property 'product_id' is missing"
-        return typing.cast(builtins.str, result)
-
-    @builtins.property
-    def accept_language(self) -> typing.Optional[builtins.str]:
-        '''The language code.
-
-        - ``jp`` - Japanese
-        - ``zh`` - Chinese
-
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-portfolioproductassociation.html#cfn-servicecatalog-portfolioproductassociation-acceptlanguage
-        '''
-        result = self._values.get("accept_language")
         return typing.cast(typing.Optional[builtins.str], result)
 
     @builtins.property
@@ -4624,7 +4735,7 @@ class CfnPortfolioProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IPortfolioShareRef_02a1808a)
 class CfnPortfolioShare(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -4662,7 +4773,8 @@ class CfnPortfolioShare(
         accept_language: typing.Optional[builtins.str] = None,
         share_tag_options: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ServiceCatalog::PortfolioShare``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param account_id: The AWS account ID. For example, ``123456789012`` .
@@ -4713,19 +4825,17 @@ class CfnPortfolioShare(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
-    @builtins.property
-    @jsii.member(jsii_name="attrId")
-    def attr_id(self) -> builtins.str:
-        '''
-        :cloudformationAttribute: Id
-        '''
-        return typing.cast(builtins.str, jsii.get(self, "attrId"))
-
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="portfolioShareRef")
+    def portfolio_share_ref(self) -> _PortfolioShareReference_b73c7783:
+        '''A reference to a PortfolioShare resource.'''
+        return typing.cast(_PortfolioShareReference_b73c7783, jsii.get(self, "portfolioShareRef"))
+
     @builtins.property
     @jsii.member(jsii_name="accountId")
     def account_id(self) -> builtins.str:
@@ -4900,7 +5010,7 @@ class CfnPortfolioShareProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IResourceUpdateConstraintRef_6a0e13ed)
 class CfnResourceUpdateConstraint(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -4940,7 +5050,8 @@ class CfnResourceUpdateConstraint(
         accept_language: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ServiceCatalog::ResourceUpdateConstraint``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param portfolio_id: The portfolio identifier.
@@ -4996,7 +5107,8 @@ class CfnResourceUpdateConstraint(
     @builtins.property
     @jsii.member(jsii_name="attrId")
     def attr_id(self) -> builtins.str:
-        '''
+        '''Unique identifier for the constraint.
+
         :cloudformationAttribute: Id
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrId"))
@@ -5006,6 +5118,14 @@ class CfnResourceUpdateConstraint(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="resourceUpdateConstraintRef")
+    def resource_update_constraint_ref(
+        self,
+    ) -> _ResourceUpdateConstraintReference_7c332e17:
+        '''A reference to a ResourceUpdateConstraint resource.'''
+        return typing.cast(_ResourceUpdateConstraintReference_7c332e17, jsii.get(self, "resourceUpdateConstraintRef"))
+
     @builtins.property
     @jsii.member(jsii_name="portfolioId")
     def portfolio_id(self) -> builtins.str:
@@ -5202,7 +5322,7 @@ class CfnResourceUpdateConstraintProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IServiceActionRef_ab991e2b)
 class CfnServiceAction(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -5245,7 +5365,8 @@ class CfnServiceAction(
         accept_language: typing.Optional[builtins.str] = None,
         description: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ServiceCatalog::ServiceAction``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param definition: A map that defines the self-service action.
@@ -5314,6 +5435,12 @@ class CfnServiceAction(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="serviceActionRef")
+    def service_action_ref(self) -> _ServiceActionReference_eb2df408:
+        '''A reference to a ServiceAction resource.'''
+        return typing.cast(_ServiceActionReference_eb2df408, jsii.get(self, "serviceActionRef"))
+
     @builtins.property
     @jsii.member(jsii_name="definition")
     def definition(
@@ -5453,7 +5580,7 @@ class CfnServiceAction(
             )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IServiceActionAssociationRef_0e9e58e8)
 class CfnServiceActionAssociation(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -5487,7 +5614,8 @@ class CfnServiceActionAssociation(
         provisioning_artifact_id: builtins.str,
         service_action_id: builtins.str,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ServiceCatalog::ServiceActionAssociation``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param product_id: The product identifier. For example, ``prod-abcdzk7xy33qa`` .
@@ -5541,6 +5669,14 @@ class CfnServiceActionAssociation(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="serviceActionAssociationRef")
+    def service_action_association_ref(
+        self,
+    ) -> _ServiceActionAssociationReference_b0ac9c14:
+        '''A reference to a ServiceActionAssociation resource.'''
+        return typing.cast(_ServiceActionAssociationReference_b0ac9c14, jsii.get(self, "serviceActionAssociationRef"))
+
     @builtins.property
     @jsii.member(jsii_name="productId")
     def product_id(self) -> builtins.str:
@@ -5814,7 +5950,7 @@ class CfnServiceActionProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IStackSetConstraintRef_5b78280d)
 class CfnStackSetConstraint(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -5862,7 +5998,8 @@ class CfnStackSetConstraint(
         stack_instance_control: builtins.str,
         accept_language: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ServiceCatalog::StackSetConstraint``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param account_list: One or more AWS accounts that will have access to the provisioned product.
@@ -5936,6 +6073,12 @@ class CfnStackSetConstraint(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="stackSetConstraintRef")
+    def stack_set_constraint_ref(self) -> _StackSetConstraintReference_378fddb5:
+        '''A reference to a StackSetConstraint resource.'''
+        return typing.cast(_StackSetConstraintReference_378fddb5, jsii.get(self, "stackSetConstraintRef"))
+
     @builtins.property
     @jsii.member(jsii_name="accountList")
     def account_list(self) -> typing.List[builtins.str]:
@@ -6254,7 +6397,7 @@ class CfnStackSetConstraintProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _ITagOptionRef_bd4d9e5c)
 class CfnTagOption(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -6292,7 +6435,8 @@ class CfnTagOption(
         value: builtins.str,
         active: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ServiceCatalog::TagOption``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param key: The TagOption key.
@@ -6351,6 +6495,12 @@ class CfnTagOption(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="tagOptionRef")
+    def tag_option_ref(self) -> _TagOptionReference_ef49ef9d:
+        '''A reference to a TagOption resource.'''
+        return typing.cast(_TagOptionReference_ef49ef9d, jsii.get(self, "tagOptionRef"))
+
     @builtins.property
     @jsii.member(jsii_name="key")
     def key(self) -> builtins.str:
@@ -6396,7 +6546,7 @@ class CfnTagOption(
         jsii.set(self, "active", value) # pyright: ignore[reportArgumentType]
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _ITagOptionAssociationRef_ba745ddc)
 class CfnTagOptionAssociation(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -6425,10 +6575,11 @@ class CfnTagOptionAssociation(
         scope: _constructs_77d1e7e8.Construct,
         id: builtins.str,
         *,
-        resource_id: builtins.str,
-        tag_option_id: builtins.str,
+        resource_id: typing.Optional[builtins.str] = None,
+        tag_option_id: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ServiceCatalog::TagOptionAssociation``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param resource_id: The resource identifier.
@@ -6474,27 +6625,25 @@ class CfnTagOptionAssociation(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
-    @builtins.property
-    @jsii.member(jsii_name="attrId")
-    def attr_id(self) -> builtins.str:
-        '''
-        :cloudformationAttribute: Id
-        '''
-        return typing.cast(builtins.str, jsii.get(self, "attrId"))
-
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="tagOptionAssociationRef")
+    def tag_option_association_ref(self) -> _TagOptionAssociationReference_0801788b:
+        '''A reference to a TagOptionAssociation resource.'''
+        return typing.cast(_TagOptionAssociationReference_0801788b, jsii.get(self, "tagOptionAssociationRef"))
+
     @builtins.property
     @jsii.member(jsii_name="resourceId")
-    def resource_id(self) -> builtins.str:
+    def resource_id(self) -> typing.Optional[builtins.str]:
         '''The resource identifier.'''
-        return typing.cast(builtins.str, jsii.get(self, "resourceId"))
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "resourceId"))
 
     @resource_id.setter
-    def resource_id(self, value: builtins.str) -> None:
+    def resource_id(self, value: typing.Optional[builtins.str]) -> None:
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__471e0b593fbd9d09ee6976802eded33631b789cde5f21fad9622617eeb6305bb)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
@@ -6502,12 +6651,12 @@ class CfnTagOptionAssociation(
 
     @builtins.property
     @jsii.member(jsii_name="tagOptionId")
-    def tag_option_id(self) -> builtins.str:
+    def tag_option_id(self) -> typing.Optional[builtins.str]:
         '''The TagOption identifier.'''
-        return typing.cast(builtins.str, jsii.get(self, "tagOptionId"))
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "tagOptionId"))
 
     @tag_option_id.setter
-    def tag_option_id(self, value: builtins.str) -> None:
+    def tag_option_id(self, value: typing.Optional[builtins.str]) -> None:
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__36b3523e61ec3624717af470321b5a099be0fe767c62edbb115ee12884351d73)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
@@ -6523,8 +6672,8 @@ class CfnTagOptionAssociationProps:
     def __init__(
         self,
         *,
-        resource_id: builtins.str,
-        tag_option_id: builtins.str,
+        resource_id: typing.Optional[builtins.str] = None,
+        tag_option_id: typing.Optional[builtins.str] = None,
     ) -> None:
         '''Properties for defining a ``CfnTagOptionAssociation``.
 
@@ -6549,30 +6698,29 @@ class CfnTagOptionAssociationProps:
             type_hints = typing.get_type_hints(_typecheckingstub__0b40cb505bb578364f2c02a3a08b4793fd747379748d820e8ec767c54ad4bb1f)
             check_type(argname="argument resource_id", value=resource_id, expected_type=type_hints["resource_id"])
             check_type(argname="argument tag_option_id", value=tag_option_id, expected_type=type_hints["tag_option_id"])
-        self._values: typing.Dict[builtins.str, typing.Any] = {
-            "resource_id": resource_id,
-            "tag_option_id": tag_option_id,
-        }
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if resource_id is not None:
+            self._values["resource_id"] = resource_id
+        if tag_option_id is not None:
+            self._values["tag_option_id"] = tag_option_id
 
     @builtins.property
-    def resource_id(self) -> builtins.str:
+    def resource_id(self) -> typing.Optional[builtins.str]:
         '''The resource identifier.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-tagoptionassociation.html#cfn-servicecatalog-tagoptionassociation-resourceid
         '''
         result = self._values.get("resource_id")
-        assert result is not None, "Required property 'resource_id' is missing"
-        return typing.cast(builtins.str, result)
+        return typing.cast(typing.Optional[builtins.str], result)
 
     @builtins.property
-    def tag_option_id(self) -> builtins.str:
+    def tag_option_id(self) -> typing.Optional[builtins.str]:
         '''The TagOption identifier.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-tagoptionassociation.html#cfn-servicecatalog-tagoptionassociation-tagoptionid
         '''
         result = self._values.get("tag_option_id")
-        assert result is not None, "Required property 'tag_option_id' is missing"
-        return typing.cast(builtins.str, result)
+        return typing.cast(typing.Optional[builtins.str], result)
 
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
@@ -7040,7 +7188,7 @@ class CloudFormationTemplate(
         deploy_time: typing.Optional[builtins.bool] = None,
         display_name: typing.Optional[builtins.str] = None,
         readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
-        source_kms_key: typing.Optional[_IKey_5f11635f] = None,
+        source_kms_key: typing.Optional[_IKeyRef_d4fc6ef3] = None,
         asset_hash: typing.Optional[builtins.str] = None,
         asset_hash_type: typing.Optional[_AssetHashType_05b67f2d] = None,
         bundling: typing.Optional[typing.Union[_BundlingOptions_588cc936, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -7372,7 +7520,7 @@ class IPortfolio(_IResource_c80c4260, typing_extensions.Protocol):
         product: "IProduct",
         *,
         accounts: typing.Sequence[builtins.str],
-        admin_role: _IRole_235f5d8e,
+        admin_role: _IRoleRef_8400221f,
         execution_role_name: builtins.str,
         regions: typing.Sequence[builtins.str],
         allow_stack_set_instance_operations: typing.Optional[builtins.bool] = None,
@@ -7622,7 +7770,7 @@ class _IPortfolioProxy(
         product: "IProduct",
         *,
         accounts: typing.Sequence[builtins.str],
-        admin_role: _IRole_235f5d8e,
+        admin_role: _IRoleRef_8400221f,
         execution_role_name: builtins.str,
         regions: typing.Sequence[builtins.str],
         allow_stack_set_instance_operations: typing.Optional[builtins.bool] = None,
@@ -8111,7 +8259,7 @@ class Portfolio(
         product: IProduct,
         *,
         accounts: typing.Sequence[builtins.str],
-        admin_role: _IRole_235f5d8e,
+        admin_role: _IRoleRef_8400221f,
         execution_role_name: builtins.str,
         regions: typing.Sequence[builtins.str],
         allow_stack_set_instance_operations: typing.Optional[builtins.bool] = None,
@@ -8326,6 +8474,12 @@ class Portfolio(
 
         return typing.cast(None, jsii.invoke(self, "shareWithAccount", [account_id, options]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="portfolioArn")
     def portfolio_arn(self) -> builtins.str:
@@ -8833,6 +8987,12 @@ class ProductStackHistory(
             check_type(argname="argument product_version_name", value=product_version_name, expected_type=type_hints["product_version_name"])
         return typing.cast(CloudFormationProductVersion, jsii.invoke(self, "versionFromSnapshot", [product_version_name]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_servicecatalog.ProductStackHistoryProps",
@@ -9153,7 +9313,7 @@ class StackSetsConstraintOptions(CommonConstraintOptions):
         description: typing.Optional[builtins.str] = None,
         message_language: typing.Optional[MessageLanguage] = None,
         accounts: typing.Sequence[builtins.str],
-        admin_role: _IRole_235f5d8e,
+        admin_role: _IRoleRef_8400221f,
         execution_role_name: builtins.str,
         regions: typing.Sequence[builtins.str],
         allow_stack_set_instance_operations: typing.Optional[builtins.bool] = None,
@@ -9238,11 +9398,11 @@ class StackSetsConstraintOptions(CommonConstraintOptions):
         return typing.cast(typing.List[builtins.str], result)
 
     @builtins.property
-    def admin_role(self) -> _IRole_235f5d8e:
+    def admin_role(self) -> _IRoleRef_8400221f:
         '''IAM role used to administer the StackSets configuration.'''
         result = self._values.get("admin_role")
         assert result is not None, "Required property 'admin_role' is missing"
-        return typing.cast(_IRole_235f5d8e, result)
+        return typing.cast(_IRoleRef_8400221f, result)
 
     @builtins.property
     def execution_role_name(self) -> builtins.str:
@@ -9334,6 +9494,12 @@ class TagOptions(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_servicecatalog.TagOptionsProps",
@@ -9742,6 +9908,12 @@ class CloudFormationProduct(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="assetBuckets")
     def asset_buckets(self) -> typing.List[_IBucket_42e086fd]:
@@ -10493,6 +10665,14 @@ def _typecheckingstub__92ae108da2b169227ca9ff5c8793d6e40826005130d9af692285850c9
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__44128417aff4104adae0046cf0d101d90c4fc22515494313689b7b4561643abc(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    portfolio_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__445bcb8d7fa40ab94351986e2668ed98bfac15db2665136953859395a36b4b51(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -10539,10 +10719,10 @@ def _typecheckingstub__2b8a7d450a71f88f29341f360bc05a021b910027171e4e63c9be6c67c
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
     *,
-    portfolio_id: builtins.str,
-    principal_arn: builtins.str,
     principal_type: builtins.str,
     accept_language: typing.Optional[builtins.str] = None,
+    portfolio_id: typing.Optional[builtins.str] = None,
+    principal_arn: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -10559,25 +10739,25 @@ def _typecheckingstub__257e8fbedbaa67aa61288a1f94be02039da4ac33558591be208505deb
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__726706747073f477b14d5b31fa14aba7087b2fc4265414101c6069e458c605ef(
+def _typecheckingstub__66dbe3deef345271ae1cfb35b0e313622b15892928d8581127c03e117db33585(
     value: builtins.str,
 ) -> None:
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__71c52a4171fa242df45a083617e532d09ea08d89eea6a461f83e7608b28c48bb(
-    value: builtins.str,
+def _typecheckingstub__1390265bc6b4e797f81f5a56c99acfec9dceeb8b223c28fc92f325ebf1ee9136(
+    value: typing.Optional[builtins.str],
 ) -> None:
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__66dbe3deef345271ae1cfb35b0e313622b15892928d8581127c03e117db33585(
-    value: builtins.str,
+def _typecheckingstub__726706747073f477b14d5b31fa14aba7087b2fc4265414101c6069e458c605ef(
+    value: typing.Optional[builtins.str],
 ) -> None:
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__1390265bc6b4e797f81f5a56c99acfec9dceeb8b223c28fc92f325ebf1ee9136(
+def _typecheckingstub__71c52a4171fa242df45a083617e532d09ea08d89eea6a461f83e7608b28c48bb(
     value: typing.Optional[builtins.str],
 ) -> None:
     """Type checking stubs"""
@@ -10585,10 +10765,10 @@ def _typecheckingstub__1390265bc6b4e797f81f5a56c99acfec9dceeb8b223c28fc92f325ebf
 
 def _typecheckingstub__86aa94ae9b8977b851184740615709136e8ab87d84e565bd4ed1c37202e743af(
     *,
-    portfolio_id: builtins.str,
-    principal_arn: builtins.str,
     principal_type: builtins.str,
     accept_language: typing.Optional[builtins.str] = None,
+    portfolio_id: typing.Optional[builtins.str] = None,
+    principal_arn: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -10597,9 +10777,9 @@ def _typecheckingstub__25cb0daf817ffe74f2f0c38badd3f1db5ae0cb2012f78855ecb4495b5
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
     *,
-    portfolio_id: builtins.str,
-    product_id: builtins.str,
     accept_language: typing.Optional[builtins.str] = None,
+    portfolio_id: typing.Optional[builtins.str] = None,
+    product_id: typing.Optional[builtins.str] = None,
     source_portfolio_id: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
@@ -10617,19 +10797,19 @@ def _typecheckingstub__32a7d6ef335f62572e1892401cb2c591da9aaabfd6b667b07c91465fd
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__19f425d3e28d58e160bed9adb81d5653e2000512b6a76bfcf27a70e272988f14(
-    value: builtins.str,
+def _typecheckingstub__c7d396eed36a68172694b616bafad7ef385373f22a1d8c3dc49608d69ec9e526(
+    value: typing.Optional[builtins.str],
 ) -> None:
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__3098433a8204e6c52183ab4756af784eb3f510cb7bdb7fe68b7c21ef9e4d78cf(
-    value: builtins.str,
+def _typecheckingstub__19f425d3e28d58e160bed9adb81d5653e2000512b6a76bfcf27a70e272988f14(
+    value: typing.Optional[builtins.str],
 ) -> None:
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__c7d396eed36a68172694b616bafad7ef385373f22a1d8c3dc49608d69ec9e526(
+def _typecheckingstub__3098433a8204e6c52183ab4756af784eb3f510cb7bdb7fe68b7c21ef9e4d78cf(
     value: typing.Optional[builtins.str],
 ) -> None:
     """Type checking stubs"""
@@ -10643,9 +10823,9 @@ def _typecheckingstub__add8959ef934f6895a130b9409bc0e69af9956f656deb01b88086944d
 
 def _typecheckingstub__97355e439ae20c66a13583fbc70b7a8de7f038ae88e7d60775df912c8ba748c0(
     *,
-    portfolio_id: builtins.str,
-    product_id: builtins.str,
     accept_language: typing.Optional[builtins.str] = None,
+    portfolio_id: typing.Optional[builtins.str] = None,
+    product_id: typing.Optional[builtins.str] = None,
     source_portfolio_id: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
@@ -11053,8 +11233,8 @@ def _typecheckingstub__a574b3e75b877de4dcfa7d8a2517237604ed1f3dd3d7cac2ea2238f67
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
     *,
-    resource_id: builtins.str,
-    tag_option_id: builtins.str,
+    resource_id: typing.Optional[builtins.str] = None,
+    tag_option_id: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -11072,21 +11252,21 @@ def _typecheckingstub__be21e5622bd6d44a3621a1eb8b311fd50ef6c4f7295cfaa5b45c24780
     pass
 
 def _typecheckingstub__471e0b593fbd9d09ee6976802eded33631b789cde5f21fad9622617eeb6305bb(
-    value: builtins.str,
+    value: typing.Optional[builtins.str],
 ) -> None:
     """Type checking stubs"""
     pass
 
 def _typecheckingstub__36b3523e61ec3624717af470321b5a099be0fe767c62edbb115ee12884351d73(
-    value: builtins.str,
+    value: typing.Optional[builtins.str],
 ) -> None:
     """Type checking stubs"""
     pass
 
 def _typecheckingstub__0b40cb505bb578364f2c02a3a08b4793fd747379748d820e8ec767c54ad4bb1f(
     *,
-    resource_id: builtins.str,
-    tag_option_id: builtins.str,
+    resource_id: typing.Optional[builtins.str] = None,
+    tag_option_id: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -11133,7 +11313,7 @@ def _typecheckingstub__8e0d542f4ba87cd0da3d994035ba4c030fc0e065bd6d2e49190b0063a
     deploy_time: typing.Optional[builtins.bool] = None,
     display_name: typing.Optional[builtins.str] = None,
     readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
-    source_kms_key: typing.Optional[_IKey_5f11635f] = None,
+    source_kms_key: typing.Optional[_IKeyRef_d4fc6ef3] = None,
     asset_hash: typing.Optional[builtins.str] = None,
     asset_hash_type: typing.Optional[_AssetHashType_05b67f2d] = None,
     bundling: typing.Optional[typing.Union[_BundlingOptions_588cc936, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -11214,7 +11394,7 @@ def _typecheckingstub__26098f9e0fde27192a559080d63e8828bfb4e14ef6b9be20e8966e85b
     product: IProduct,
     *,
     accounts: typing.Sequence[builtins.str],
-    admin_role: _IRole_235f5d8e,
+    admin_role: _IRoleRef_8400221f,
     execution_role_name: builtins.str,
     regions: typing.Sequence[builtins.str],
     allow_stack_set_instance_operations: typing.Optional[builtins.bool] = None,
@@ -11354,7 +11534,7 @@ def _typecheckingstub__d481848480e2cdfaf8e4296725880ac9e39bc268e6db00ee6b9f7f45c
     product: IProduct,
     *,
     accounts: typing.Sequence[builtins.str],
-    admin_role: _IRole_235f5d8e,
+    admin_role: _IRoleRef_8400221f,
     execution_role_name: builtins.str,
     regions: typing.Sequence[builtins.str],
     allow_stack_set_instance_operations: typing.Optional[builtins.bool] = None,
@@ -11545,7 +11725,7 @@ def _typecheckingstub__1387553eccc6e9ab98ba5fb751351089515cc923a65a4149c029cee2a
     description: typing.Optional[builtins.str] = None,
     message_language: typing.Optional[MessageLanguage] = None,
     accounts: typing.Sequence[builtins.str],
-    admin_role: _IRole_235f5d8e,
+    admin_role: _IRoleRef_8400221f,
     execution_role_name: builtins.str,
     regions: typing.Sequence[builtins.str],
     allow_stack_set_instance_operations: typing.Optional[builtins.bool] = None,
@@ -11622,3 +11802,6 @@ def _typecheckingstub__386164543716d63390e1491aeeeb20318fd10f2bb48e8a9c33e28a0de
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IPortfolio, IProduct]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])