aws-cdk-lib 2.200.2__py3-none-any.whl → 2.224.0__py3-none-any.whl

aws_cdk/aws_opsworkscm/__init__.py

@@ -67,9 +67,12 @@ from .. import (
     TagManager as _TagManager_0a598cb3,
     TreeInspector as _TreeInspector_488e0dd5,
 )
+from ..interfaces.aws_opsworkscm import (
+    IServerRef as _IServerRef_62338428, ServerReference as _ServerReference_8c1e5305
+)
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IServerRef_62338428, _ITaggable_36806126)
 class CfnServer(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -77,7 +80,7 @@ class CfnServer(
 ):
     '''The ``AWS::OpsWorksCM::Server`` resource creates an AWS OpsWorks for Chef Automate or OpsWorks for Puppet Enterprise configuration management server.
 
-    For more information, see `Create a Chef Automate Server in AWS CloudFormation <https://docs.aws.amazon.com/opsworks/latest/userguide/opscm-create-server-cfn.html>`_ or `Create a Puppet Enterprise Master in AWS CloudFormation <https://docs.aws.amazon.com/opsworks/latest/userguide/opspup-create-server-cfn.html>`_ in the *AWS OpsWorks User Guide* , and `CreateServer <https://docs.aws.amazon.com/opsworks-cm/latest/APIReference/API_CreateServer.html>`_ in the *AWS OpsWorks CM API Reference* .
+    For more information, see `Create a Chef Automate Server in AWS CloudFormation <https://docs.aws.amazon.com/opsworks/latest/userguide/opscm-create-server-cfn.html>`_ or `Create a Puppet Enterprise Master in AWS CloudFormation <https://docs.aws.amazon.com/opsworks/latest/userguide/opspup-create-server-cfn.html>`_ in the *OpsWorks User Guide* , and `CreateServer <https://docs.aws.amazon.com/opsworks-cm/latest/APIReference/API_CreateServer.html>`_ in the *AWS OpsWorks CM API Reference* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opsworkscm-server.html
     :cloudformationResource: AWS::OpsWorksCM::Server
@@ -113,7 +116,6 @@ class CfnServer(
             preferred_backup_window="preferredBackupWindow",
             preferred_maintenance_window="preferredMaintenanceWindow",
             security_group_ids=["securityGroupIds"],
-            server_name="serverName",
             subnet_ids=["subnetIds"],
             tags=[CfnTag(
                 key="key",
@@ -145,16 +147,16 @@ class CfnServer(
         preferred_backup_window: typing.Optional[builtins.str] = None,
         preferred_maintenance_window: typing.Optional[builtins.str] = None,
         security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
-        server_name: typing.Optional[builtins.str] = None,
         subnet_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::OpsWorksCM::Server``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param instance_profile_arn: The ARN of the instance profile that your Amazon EC2 instances use.
         :param instance_type: The Amazon EC2 instance type to use. For example, ``m5.large`` .
-        :param service_role_arn: The service role that the AWS OpsWorks CM service backend uses to work with your account. Although the AWS OpsWorks management console typically creates the service role for you, if you are using the AWS CLI or API commands, run the service-role-creation.yaml AWS CloudFormation template, located at https://s3.amazonaws.com/opsworks-cm-us-east-1-prod-default-assets/misc/opsworks-cm-roles.yaml. This template creates a CloudFormation stack that includes the service role and instance profile that you need.
+        :param service_role_arn: The service role that the AWS OpsWorks CM service backend uses to work with your account.
         :param associate_public_ip_address: Associate a public IP address with a server that you are launching. Valid values are ``true`` or ``false`` . The default value is ``true`` .
         :param backup_id: If you specify this field, AWS OpsWorks CM creates the server by using the backup represented by BackupId.
         :param backup_retention_count: The number of automated backups that you want to keep. Whenever a new backup is created, AWS OpsWorks CM deletes the oldest backups if this number is exceeded. The default value is ``1`` .
@@ -170,7 +172,6 @@ class CfnServer(
         :param preferred_backup_window: The start time for a one-hour period during which AWS OpsWorks CM backs up application-level data on your server if automated backups are enabled. Valid values must be specified in one of the following formats: - ``HH:MM`` for daily backups - ``DDD:HH:MM`` for weekly backups ``MM`` must be specified as ``00`` . The specified time is in coordinated universal time (UTC). The default value is a random, daily start time. *Example:* ``08:00`` , which represents a daily start time of 08:00 UTC. *Example:* ``Mon:08:00`` , which represents a start time of every Monday at 08:00 UTC. (8:00 a.m.)
         :param preferred_maintenance_window: The start time for a one-hour period each week during which AWS OpsWorks CM performs maintenance on the instance. Valid values must be specified in the following format: ``DDD:HH:MM`` . ``MM`` must be specified as ``00`` . The specified time is in coordinated universal time (UTC). The default value is a random one-hour period on Tuesday, Wednesday, or Friday. See ``TimeWindowDefinition`` for more information. *Example:* ``Mon:08:00`` , which represents a start time of every Monday at 08:00 UTC. (8:00 a.m.)
         :param security_group_ids: A list of security group IDs to attach to the Amazon EC2 instance. If you add this parameter, the specified security groups must be within the VPC that is specified by ``SubnetIds`` . If you do not specify this parameter, AWS OpsWorks CM creates one new security group that uses TCP ports 22 and 443, open to 0.0.0.0/0 (everyone).
-        :param server_name: The name of the server. The server name must be unique within your AWS account, within each region. Server names must start with a letter; then letters, numbers, or hyphens (-) are allowed, up to a maximum of 40 characters.
         :param subnet_ids: The IDs of subnets in which to launch the server EC2 instance. Amazon EC2-Classic customers: This field is required. All servers must run within a VPC. The VPC must have "Auto Assign Public IP" enabled. EC2-VPC customers: This field is optional. If you do not specify subnet IDs, your EC2 instances are created in a default subnet that is selected by Amazon EC2. If you specify subnet IDs, the VPC must have "Auto Assign Public IP" enabled. For more information about supported Amazon EC2 platforms, see `Supported Platforms <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-supported-platforms.html>`_ .
         :param tags: A map that contains tag keys and tag values to attach to an AWS OpsWorks for Chef Automate or OpsWorks for Puppet Enterprise server. - The key cannot be empty. - The key can be a maximum of 127 characters, and can contain only Unicode letters, numbers, or separators, or the following special characters: `+ - = . _ : /
         '''
@@ -197,7 +198,6 @@ class CfnServer(
             preferred_backup_window=preferred_backup_window,
             preferred_maintenance_window=preferred_maintenance_window,
             security_group_ids=security_group_ids,
-            server_name=server_name,
             subnet_ids=subnet_ids,
             tags=tags,
         )
@@ -257,8 +257,7 @@ class CfnServer(
     @builtins.property
     @jsii.member(jsii_name="attrServerName")
     def attr_server_name(self) -> builtins.str:
-        '''The name of the server.
-
+        '''
         :cloudformationAttribute: ServerName
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrServerName"))
@@ -268,6 +267,12 @@ class CfnServer(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="serverRef")
+    def server_ref(self) -> _ServerReference_8c1e5305:
+        '''A reference to a Server resource.'''
+        return typing.cast(_ServerReference_8c1e5305, jsii.get(self, "serverRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -529,19 +534,6 @@ class CfnServer(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "securityGroupIds", value) # pyright: ignore[reportArgumentType]
 
-    @builtins.property
-    @jsii.member(jsii_name="serverName")
-    def server_name(self) -> typing.Optional[builtins.str]:
-        '''The name of the server.'''
-        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "serverName"))
-
-    @server_name.setter
-    def server_name(self, value: typing.Optional[builtins.str]) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__0fdc9b0c6ccfb79b318a5321a2bdb7586f084e301b627e9b708804bad96c9238)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "serverName", value) # pyright: ignore[reportArgumentType]
-
     @builtins.property
     @jsii.member(jsii_name="subnetIds")
     def subnet_ids(self) -> typing.Optional[typing.List[builtins.str]]:
@@ -687,7 +679,6 @@ class CfnServer(
         "preferred_backup_window": "preferredBackupWindow",
         "preferred_maintenance_window": "preferredMaintenanceWindow",
         "security_group_ids": "securityGroupIds",
-        "server_name": "serverName",
         "subnet_ids": "subnetIds",
         "tags": "tags",
     },
@@ -714,7 +705,6 @@ class CfnServerProps:
         preferred_backup_window: typing.Optional[builtins.str] = None,
         preferred_maintenance_window: typing.Optional[builtins.str] = None,
         security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
-        server_name: typing.Optional[builtins.str] = None,
         subnet_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
@@ -722,7 +712,7 @@ class CfnServerProps:
 
         :param instance_profile_arn: The ARN of the instance profile that your Amazon EC2 instances use.
         :param instance_type: The Amazon EC2 instance type to use. For example, ``m5.large`` .
-        :param service_role_arn: The service role that the AWS OpsWorks CM service backend uses to work with your account. Although the AWS OpsWorks management console typically creates the service role for you, if you are using the AWS CLI or API commands, run the service-role-creation.yaml AWS CloudFormation template, located at https://s3.amazonaws.com/opsworks-cm-us-east-1-prod-default-assets/misc/opsworks-cm-roles.yaml. This template creates a CloudFormation stack that includes the service role and instance profile that you need.
+        :param service_role_arn: The service role that the AWS OpsWorks CM service backend uses to work with your account.
         :param associate_public_ip_address: Associate a public IP address with a server that you are launching. Valid values are ``true`` or ``false`` . The default value is ``true`` .
         :param backup_id: If you specify this field, AWS OpsWorks CM creates the server by using the backup represented by BackupId.
         :param backup_retention_count: The number of automated backups that you want to keep. Whenever a new backup is created, AWS OpsWorks CM deletes the oldest backups if this number is exceeded. The default value is ``1`` .
@@ -738,7 +728,6 @@ class CfnServerProps:
         :param preferred_backup_window: The start time for a one-hour period during which AWS OpsWorks CM backs up application-level data on your server if automated backups are enabled. Valid values must be specified in one of the following formats: - ``HH:MM`` for daily backups - ``DDD:HH:MM`` for weekly backups ``MM`` must be specified as ``00`` . The specified time is in coordinated universal time (UTC). The default value is a random, daily start time. *Example:* ``08:00`` , which represents a daily start time of 08:00 UTC. *Example:* ``Mon:08:00`` , which represents a start time of every Monday at 08:00 UTC. (8:00 a.m.)
         :param preferred_maintenance_window: The start time for a one-hour period each week during which AWS OpsWorks CM performs maintenance on the instance. Valid values must be specified in the following format: ``DDD:HH:MM`` . ``MM`` must be specified as ``00`` . The specified time is in coordinated universal time (UTC). The default value is a random one-hour period on Tuesday, Wednesday, or Friday. See ``TimeWindowDefinition`` for more information. *Example:* ``Mon:08:00`` , which represents a start time of every Monday at 08:00 UTC. (8:00 a.m.)
         :param security_group_ids: A list of security group IDs to attach to the Amazon EC2 instance. If you add this parameter, the specified security groups must be within the VPC that is specified by ``SubnetIds`` . If you do not specify this parameter, AWS OpsWorks CM creates one new security group that uses TCP ports 22 and 443, open to 0.0.0.0/0 (everyone).
-        :param server_name: The name of the server. The server name must be unique within your AWS account, within each region. Server names must start with a letter; then letters, numbers, or hyphens (-) are allowed, up to a maximum of 40 characters.
         :param subnet_ids: The IDs of subnets in which to launch the server EC2 instance. Amazon EC2-Classic customers: This field is required. All servers must run within a VPC. The VPC must have "Auto Assign Public IP" enabled. EC2-VPC customers: This field is optional. If you do not specify subnet IDs, your EC2 instances are created in a default subnet that is selected by Amazon EC2. If you specify subnet IDs, the VPC must have "Auto Assign Public IP" enabled. For more information about supported Amazon EC2 platforms, see `Supported Platforms <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-supported-platforms.html>`_ .
         :param tags: A map that contains tag keys and tag values to attach to an AWS OpsWorks for Chef Automate or OpsWorks for Puppet Enterprise server. - The key cannot be empty. - The key can be a maximum of 127 characters, and can contain only Unicode letters, numbers, or separators, or the following special characters: `+ - = . _ : /
 
@@ -775,7 +764,6 @@ class CfnServerProps:
                 preferred_backup_window="preferredBackupWindow",
                 preferred_maintenance_window="preferredMaintenanceWindow",
                 security_group_ids=["securityGroupIds"],
-                server_name="serverName",
                 subnet_ids=["subnetIds"],
                 tags=[CfnTag(
                     key="key",
@@ -803,7 +791,6 @@ class CfnServerProps:
             check_type(argname="argument preferred_backup_window", value=preferred_backup_window, expected_type=type_hints["preferred_backup_window"])
             check_type(argname="argument preferred_maintenance_window", value=preferred_maintenance_window, expected_type=type_hints["preferred_maintenance_window"])
             check_type(argname="argument security_group_ids", value=security_group_ids, expected_type=type_hints["security_group_ids"])
-            check_type(argname="argument server_name", value=server_name, expected_type=type_hints["server_name"])
             check_type(argname="argument subnet_ids", value=subnet_ids, expected_type=type_hints["subnet_ids"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
@@ -841,8 +828,6 @@ class CfnServerProps:
             self._values["preferred_maintenance_window"] = preferred_maintenance_window
         if security_group_ids is not None:
             self._values["security_group_ids"] = security_group_ids
-        if server_name is not None:
-            self._values["server_name"] = server_name
         if subnet_ids is not None:
             self._values["subnet_ids"] = subnet_ids
         if tags is not None:
@@ -874,8 +859,6 @@ class CfnServerProps:
     def service_role_arn(self) -> builtins.str:
         '''The service role that the AWS OpsWorks CM service backend uses to work with your account.
 
-        Although the AWS OpsWorks management console typically creates the service role for you, if you are using the AWS CLI or API commands, run the service-role-creation.yaml AWS CloudFormation template, located at https://s3.amazonaws.com/opsworks-cm-us-east-1-prod-default-assets/misc/opsworks-cm-roles.yaml. This template creates a CloudFormation stack that includes the service role and instance profile that you need.
-
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opsworkscm-server.html#cfn-opsworkscm-server-servicerolearn
         '''
         result = self._values.get("service_role_arn")
@@ -1071,17 +1054,6 @@ class CfnServerProps:
         result = self._values.get("security_group_ids")
         return typing.cast(typing.Optional[typing.List[builtins.str]], result)
 
-    @builtins.property
-    def server_name(self) -> typing.Optional[builtins.str]:
-        '''The name of the server.
-
-        The server name must be unique within your AWS account, within each region. Server names must start with a letter; then letters, numbers, or hyphens (-) are allowed, up to a maximum of 40 characters.
-
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opsworkscm-server.html#cfn-opsworkscm-server-servername
-        '''
-        result = self._values.get("server_name")
-        return typing.cast(typing.Optional[builtins.str], result)
-
     @builtins.property
     def subnet_ids(self) -> typing.Optional[typing.List[builtins.str]]:
         '''The IDs of subnets in which to launch the server EC2 instance.
@@ -1157,7 +1129,6 @@ def _typecheckingstub__4fcf3005231c62e7682797d2e25d33ceb0c0b9602a2f2ffe6a7c3dabf
     preferred_backup_window: typing.Optional[builtins.str] = None,
     preferred_maintenance_window: typing.Optional[builtins.str] = None,
     security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
-    server_name: typing.Optional[builtins.str] = None,
     subnet_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
@@ -1284,12 +1255,6 @@ def _typecheckingstub__d7663e937d0fabd66d40de7584fca886669aae87261a418b199493778
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__0fdc9b0c6ccfb79b318a5321a2bdb7586f084e301b627e9b708804bad96c9238(
-    value: typing.Optional[builtins.str],
-) -> None:
-    """Type checking stubs"""
-    pass
-
 def _typecheckingstub__e6d133d8dd209b40a7f4c3900293e312fe8b95abc9cfff43e88a6fd1608b595b(
     value: typing.Optional[typing.List[builtins.str]],
 ) -> None:
@@ -1330,7 +1295,6 @@ def _typecheckingstub__6f3d9a63c768f1a40206835320dfa128b267da1fa702fbb4ecd8ac94b
     preferred_backup_window: typing.Optional[builtins.str] = None,
     preferred_maintenance_window: typing.Optional[builtins.str] = None,
     security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
-    server_name: typing.Optional[builtins.str] = None,
     subnet_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:

aws_cdk/aws_organizations/__init__.py

@@ -67,9 +67,21 @@ from .. import (
     TagManager as _TagManager_0a598cb3,
     TreeInspector as _TreeInspector_488e0dd5,
 )
+from ..interfaces.aws_organizations import (
+    AccountReference as _AccountReference_aedc6357,
+    IAccountRef as _IAccountRef_ee273c41,
+    IOrganizationRef as _IOrganizationRef_74d1fc09,
+    IOrganizationalUnitRef as _IOrganizationalUnitRef_1eee9aae,
+    IPolicyRef as _IPolicyRef_f285244f,
+    IResourcePolicyRef as _IResourcePolicyRef_10723097,
+    OrganizationReference as _OrganizationReference_fc9037cc,
+    OrganizationalUnitReference as _OrganizationalUnitReference_bb42755f,
+    PolicyReference as _PolicyReference_b6a2b56e,
+    ResourcePolicyReference as _ResourcePolicyReference_3ac39914,
+)
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IAccountRef_ee273c41, _ITaggable_36806126)
 class CfnAccount(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -147,7 +159,8 @@ class CfnAccount(
         role_name: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::Organizations::Account``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param account_name: The account name given to the account when it was created.
@@ -200,6 +213,12 @@ class CfnAccount(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
+    @builtins.property
+    @jsii.member(jsii_name="accountRef")
+    def account_ref(self) -> _AccountReference_aedc6357:
+        '''A reference to a Account resource.'''
+        return typing.cast(_AccountReference_aedc6357, jsii.get(self, "accountRef"))
+
     @builtins.property
     @jsii.member(jsii_name="attrAccountId")
     def attr_account_id(self) -> builtins.str:
@@ -244,6 +263,19 @@ class CfnAccount(
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrJoinedTimestamp"))
 
+    @builtins.property
+    @jsii.member(jsii_name="attrState")
+    def attr_state(self) -> builtins.str:
+        '''Each state represents a specific phase in the account lifecycle.
+
+        Use this information to manage account access, automate workflows, or trigger actions based on account state changes.
+
+        For more information about account states and their implications, see `Monitor the state of your AWS accounts <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_account_state.html>`_ in the *AWS Organizations User Guide* .
+
+        :cloudformationAttribute: State
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrState"))
+
     @builtins.property
     @jsii.member(jsii_name="attrStatus")
     def attr_status(self) -> builtins.str:
@@ -489,7 +521,7 @@ class CfnAccountProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IOrganizationRef_74d1fc09)
 class CfnOrganization(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -530,7 +562,8 @@ class CfnOrganization(
         *,
         feature_set: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::Organizations::Organization``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param feature_set: Specifies the feature set supported by the new organization. Each feature set supports different levels of functionality. - ``ALL`` In addition to all the features supported by the consolidated billing feature set, the management account gains access to advanced features that give you more control over accounts in your organization. For more information, see `All features <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#feature-set-all>`_ in the *AWS Organizations User Guide* . - ``CONSOLIDATED_BILLING`` All member accounts have their bills consolidated to and paid by the management account. For more information, see `Consolidated billing <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#feature-set-cb-only>`_ in the *AWS Organizations User Guide* . .. epigraph:: The consolidated billing feature feature set isn't available for organizations in the AWS GovCloud (US) Region. If you don't specify this property, the default value is ``ALL`` . Default: - "ALL"
@@ -632,6 +665,12 @@ class CfnOrganization(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="organizationRef")
+    def organization_ref(self) -> _OrganizationReference_fc9037cc:
+        '''A reference to a Organization resource.'''
+        return typing.cast(_OrganizationReference_fc9037cc, jsii.get(self, "organizationRef"))
+
     @builtins.property
     @jsii.member(jsii_name="featureSet")
     def feature_set(self) -> typing.Optional[builtins.str]:
@@ -712,7 +751,7 @@ class CfnOrganizationProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IOrganizationalUnitRef_1eee9aae, _ITaggable_36806126)
 class CfnOrganizationalUnit(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -759,7 +798,8 @@ class CfnOrganizationalUnit(
         parent_id: builtins.str,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::Organizations::OrganizationalUnit``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The friendly name of this OU. The `regex pattern <https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex>`_ that is used to validate this parameter is a string of any of the characters in the ASCII character range.
@@ -831,6 +871,12 @@ class CfnOrganizationalUnit(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="organizationalUnitRef")
+    def organizational_unit_ref(self) -> _OrganizationalUnitReference_bb42755f:
+        '''A reference to a OrganizationalUnit resource.'''
+        return typing.cast(_OrganizationalUnitReference_bb42755f, jsii.get(self, "organizationalUnitRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -985,7 +1031,7 @@ class CfnOrganizationalUnitProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IPolicyRef_f285244f, _ITaggable_36806126)
 class CfnPolicy(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1041,7 +1087,8 @@ class CfnPolicy(
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         target_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::Organizations::Policy``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param content: The policy text content. You can specify the policy content as a JSON object or a JSON string. .. epigraph:: When you specify the policy content as a JSON string, you can't perform drift detection on the CloudFormation stack. For this reason, we recommend specifying the policy content as a JSON object instead. The text that you supply must adhere to the rules of the policy type you specify in the ``Type`` parameter. The following AWS Organizations quotas are enforced for the maximum size of a policy document: - Service control policies: 5,120 characters - Resource control policies: 5,120 characters - Declarative policies: 10,000 characters - Backup policies: 10,000 characters - Tag policies: 10,000 characters - Chat applications policies: 10,000 characters - AI services opt-out policies: 2,500 characters For more information about Organizations service quotas, see `Quotas for AWS Organizations <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html>`_ in the *AWS Organizations User Guide* .
@@ -1134,6 +1181,12 @@ class CfnPolicy(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="policyRef")
+    def policy_ref(self) -> _PolicyReference_b6a2b56e:
+        '''A reference to a Policy resource.'''
+        return typing.cast(_PolicyReference_b6a2b56e, jsii.get(self, "policyRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -1399,7 +1452,7 @@ class CfnPolicyProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IResourcePolicyRef_10723097, _ITaggable_36806126)
 class CfnResourcePolicy(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1442,7 +1495,8 @@ class CfnResourcePolicy(
         content: typing.Any,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::Organizations::ResourcePolicy``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param content: The policy text of the organization resource policy. You can specify the resource policy content as a JSON object or a JSON string. .. epigraph:: When you specify the resource policy content as a JSON string, you can't perform drift detection on the CloudFormation stack. For this reason, we recommend specifying the resource policy content as a JSON object instead.
@@ -1513,6 +1567,12 @@ class CfnResourcePolicy(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="resourcePolicyRef")
+    def resource_policy_ref(self) -> _ResourcePolicyReference_3ac39914:
+        '''A reference to a ResourcePolicy resource.'''
+        return typing.cast(_ResourcePolicyReference_3ac39914, jsii.get(self, "resourcePolicyRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3: