aws-cdk-lib 2.200.2__py3-none-any.whl → 2.224.0__py3-none-any.whl

aws_cdk/aws_servicediscovery/__init__.py

@@ -209,6 +209,18 @@ from .. import (
 )
 from ..aws_ec2 import IVpc as _IVpc_f30d5663
 from ..aws_elasticloadbalancingv2 import ILoadBalancerV2 as _ILoadBalancerV2_4c5c0fbb
+from ..interfaces.aws_servicediscovery import (
+    HttpNamespaceReference as _HttpNamespaceReference_2edf16fb,
+    IHttpNamespaceRef as _IHttpNamespaceRef_68a0c4c4,
+    IInstanceRef as _IInstanceRef_e05d45e9,
+    IPrivateDnsNamespaceRef as _IPrivateDnsNamespaceRef_19402306,
+    IPublicDnsNamespaceRef as _IPublicDnsNamespaceRef_1d27bfe2,
+    IServiceRef as _IServiceRef_687c8f74,
+    InstanceReference as _InstanceReference_6f952041,
+    PrivateDnsNamespaceReference as _PrivateDnsNamespaceReference_1bf1c3c8,
+    PublicDnsNamespaceReference as _PublicDnsNamespaceReference_ff5b938d,
+    ServiceReference as _ServiceReference_bb8f24e4,
+)
 
 
 @jsii.data_type(
@@ -497,17 +509,17 @@ class BaseServiceProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IHttpNamespaceRef_68a0c4c4, _ITaggable_36806126)
 class CfnHttpNamespace(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_servicediscovery.CfnHttpNamespace",
 ):
-    '''The ``HttpNamespace`` resource is an AWS Cloud Map resource type that contains information about an HTTP namespace.
+    '''Creates an HTTP namespace.
 
-    Service instances that you register using an HTTP namespace can be discovered using a ``DiscoverInstances`` request but can't be discovered using DNS.
+    Service instances registered using an HTTP namespace can be discovered using a ``DiscoverInstances`` request but can't be discovered using DNS.
 
-    For the current quota on the number of namespaces that you can create using the same AWS account, see `AWS Cloud Map quotas <https://docs.aws.amazon.com/cloud-map/latest/dg/cloud-map-limits.html>`_ in the ** .
+    For the current quota on the number of namespaces that you can create using the same AWS account , see `AWS Cloud Map quotas <https://docs.aws.amazon.com/cloud-map/latest/dg/cloud-map-limits.html>`_ in the *AWS Cloud Map Developer Guide* .
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicediscovery-httpnamespace.html
     :cloudformationResource: AWS::ServiceDiscovery::HttpNamespace
@@ -540,7 +552,8 @@ class CfnHttpNamespace(
         description: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ServiceDiscovery::HttpNamespace``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name that you want to assign to this namespace.
@@ -608,6 +621,12 @@ class CfnHttpNamespace(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="httpNamespaceRef")
+    def http_namespace_ref(self) -> _HttpNamespaceReference_2edf16fb:
+        '''A reference to a HttpNamespace resource.'''
+        return typing.cast(_HttpNamespaceReference_2edf16fb, jsii.get(self, "httpNamespaceRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -748,7 +767,7 @@ class CfnHttpNamespaceProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IInstanceRef_e05d45e9)
 class CfnInstance(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -786,11 +805,12 @@ class CfnInstance(
         service_id: builtins.str,
         instance_id: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ServiceDiscovery::Instance``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param instance_attributes: A string map that contains the following information for the service that you specify in ``ServiceId`` :. - The attributes that apply to the records that are defined in the service. - For each attribute, the applicable value. Supported attribute keys include the following: - **AWS_ALIAS_DNS_NAME** - If you want AWS Cloud Map to create a Route 53 alias record that routes traffic to an Elastic Load Balancing load balancer, specify the DNS name that is associated with the load balancer. For information about how to get the DNS name, see `AliasTarget->DNSName <https://docs.aws.amazon.com/Route53/latest/APIReference/API_AliasTarget.html#Route53-Type-AliasTarget-DNSName>`_ in the *Route 53 API Reference* . Note the following: - The configuration for the service that is specified by ``ServiceId`` must include settings for an ``A`` record, an ``AAAA`` record, or both. - In the service that is specified by ``ServiceId`` , the value of ``RoutingPolicy`` must be ``WEIGHTED`` . - If the service that is specified by ``ServiceId`` includes ``HealthCheckConfig`` settings, AWS Cloud Map will create the health check, but it won't associate the health check with the alias record. - Auto naming currently doesn't support creating alias records that route traffic to AWS resources other than ELB load balancers. - If you specify a value for ``AWS_ALIAS_DNS_NAME`` , don't specify values for any of the ``AWS_INSTANCE`` attributes. - **AWS_EC2_INSTANCE_ID** - *HTTP namespaces only.* The Amazon EC2 instance ID for the instance. The ``AWS_INSTANCE_IPV4`` attribute contains the primary private IPv4 address. When creating resources with a type of `AWS::ServiceDiscovery::Instance <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicediscovery-instance.html>`_ , if the ``AWS_EC2_INSTANCE_ID`` attribute is specified, the only other attribute that can be specified is ``AWS_INIT_HEALTH_STATUS`` . After the resource has been created, the ``AWS_INSTANCE_IPV4`` attribute contains the primary private IPv4 address. - **AWS_INIT_HEALTH_STATUS** - If the service configuration includes ``HealthCheckCustomConfig`` , when creating resources with a type of `AWS::ServiceDiscovery::Instance <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicediscovery-instance.html>`_ you can optionally use ``AWS_INIT_HEALTH_STATUS`` to specify the initial status of the custom health check, ``HEALTHY`` or ``UNHEALTHY`` . If you don't specify a value for ``AWS_INIT_HEALTH_STATUS`` , the initial status is ``HEALTHY`` . This attribute can only be used when creating resources and will not be seen on existing resources. - **AWS_INSTANCE_CNAME** - If the service configuration includes a ``CNAME`` record, the domain name that you want Route 53 to return in response to DNS queries, for example, ``example.com`` . This value is required if the service specified by ``ServiceId`` includes settings for an ``CNAME`` record. - **AWS_INSTANCE_IPV4** - If the service configuration includes an ``A`` record, the IPv4 address that you want Route 53 to return in response to DNS queries, for example, ``192.0.2.44`` . This value is required if the service specified by ``ServiceId`` includes settings for an ``A`` record. If the service includes settings for an ``SRV`` record, you must specify a value for ``AWS_INSTANCE_IPV4`` , ``AWS_INSTANCE_IPV6`` , or both. - **AWS_INSTANCE_IPV6** - If the service configuration includes an ``AAAA`` record, the IPv6 address that you want Route 53 to return in response to DNS queries, for example, ``2001:0db8:85a3:0000:0000:abcd:0001:2345`` . This value is required if the service specified by ``ServiceId`` includes settings for an ``AAAA`` record. If the service includes settings for an ``SRV`` record, you must specify a value for ``AWS_INSTANCE_IPV4`` , ``AWS_INSTANCE_IPV6`` , or both. - **AWS_INSTANCE_PORT** - If the service includes an ``SRV`` record, the value that you want Route 53 to return for the port. If the service includes ``HealthCheckConfig`` , the port on the endpoint that you want Route 53 to send requests to. This value is required if you specified settings for an ``SRV`` record or a Route 53 health check when you created the service.
-        :param service_id: The ID of the service that you want to use for settings for the instance.
+        :param service_id: The ID or Amazon Resource Name (ARN) of the service that you want to use for settings for the instance. For services created in a shared namespace, specify the service ARN. For more information about shared namespaces, see `Cross-account AWS Cloud Map namespace sharing <https://docs.aws.amazon.com/cloud-map/latest/dg/sharing-namespaces.html>`_ in the *AWS Cloud Map Developer Guide* .
         :param instance_id: An identifier that you want to associate with the instance. Note the following:. - If the service that's specified by ``ServiceId`` includes settings for an ``SRV`` record, the value of ``InstanceId`` is automatically included as part of the value for the ``SRV`` record. For more information, see `DnsRecord > Type <https://docs.aws.amazon.com/cloud-map/latest/api/API_DnsRecord.html#cloudmap-Type-DnsRecord-Type>`_ . - You can use this value to update an existing instance. - To register a new instance, you must specify a value that's unique among instances that you register by using the same service. - If you specify an existing ``InstanceId`` and ``ServiceId`` , AWS Cloud Map updates the existing DNS records, if any. If there's also an existing health check, AWS Cloud Map deletes the old health check and creates a new one. .. epigraph:: The health check isn't deleted immediately, so it will still appear for a while if you submit a ``ListHealthChecks`` request, for example. .. epigraph:: Do not include sensitive information in ``InstanceId`` if the namespace is discoverable by public DNS queries and any ``Type`` member of ``DnsRecord`` for the service contains ``SRV`` because the ``InstanceId`` is discoverable by public DNS queries.
         '''
         if __debug__:
@@ -840,6 +860,12 @@ class CfnInstance(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="instanceRef")
+    def instance_ref(self) -> _InstanceReference_6f952041:
+        '''A reference to a Instance resource.'''
+        return typing.cast(_InstanceReference_6f952041, jsii.get(self, "instanceRef"))
+
     @builtins.property
     @jsii.member(jsii_name="instanceAttributes")
     def instance_attributes(self) -> typing.Any:
@@ -856,7 +882,7 @@ class CfnInstance(
     @builtins.property
     @jsii.member(jsii_name="serviceId")
     def service_id(self) -> builtins.str:
-        '''The ID of the service that you want to use for settings for the instance.'''
+        '''The ID or Amazon Resource Name (ARN) of the service that you want to use for settings for the instance.'''
         return typing.cast(builtins.str, jsii.get(self, "serviceId"))
 
     @service_id.setter
@@ -903,7 +929,7 @@ class CfnInstanceProps:
         '''Properties for defining a ``CfnInstance``.
 
         :param instance_attributes: A string map that contains the following information for the service that you specify in ``ServiceId`` :. - The attributes that apply to the records that are defined in the service. - For each attribute, the applicable value. Supported attribute keys include the following: - **AWS_ALIAS_DNS_NAME** - If you want AWS Cloud Map to create a Route 53 alias record that routes traffic to an Elastic Load Balancing load balancer, specify the DNS name that is associated with the load balancer. For information about how to get the DNS name, see `AliasTarget->DNSName <https://docs.aws.amazon.com/Route53/latest/APIReference/API_AliasTarget.html#Route53-Type-AliasTarget-DNSName>`_ in the *Route 53 API Reference* . Note the following: - The configuration for the service that is specified by ``ServiceId`` must include settings for an ``A`` record, an ``AAAA`` record, or both. - In the service that is specified by ``ServiceId`` , the value of ``RoutingPolicy`` must be ``WEIGHTED`` . - If the service that is specified by ``ServiceId`` includes ``HealthCheckConfig`` settings, AWS Cloud Map will create the health check, but it won't associate the health check with the alias record. - Auto naming currently doesn't support creating alias records that route traffic to AWS resources other than ELB load balancers. - If you specify a value for ``AWS_ALIAS_DNS_NAME`` , don't specify values for any of the ``AWS_INSTANCE`` attributes. - **AWS_EC2_INSTANCE_ID** - *HTTP namespaces only.* The Amazon EC2 instance ID for the instance. The ``AWS_INSTANCE_IPV4`` attribute contains the primary private IPv4 address. When creating resources with a type of `AWS::ServiceDiscovery::Instance <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicediscovery-instance.html>`_ , if the ``AWS_EC2_INSTANCE_ID`` attribute is specified, the only other attribute that can be specified is ``AWS_INIT_HEALTH_STATUS`` . After the resource has been created, the ``AWS_INSTANCE_IPV4`` attribute contains the primary private IPv4 address. - **AWS_INIT_HEALTH_STATUS** - If the service configuration includes ``HealthCheckCustomConfig`` , when creating resources with a type of `AWS::ServiceDiscovery::Instance <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicediscovery-instance.html>`_ you can optionally use ``AWS_INIT_HEALTH_STATUS`` to specify the initial status of the custom health check, ``HEALTHY`` or ``UNHEALTHY`` . If you don't specify a value for ``AWS_INIT_HEALTH_STATUS`` , the initial status is ``HEALTHY`` . This attribute can only be used when creating resources and will not be seen on existing resources. - **AWS_INSTANCE_CNAME** - If the service configuration includes a ``CNAME`` record, the domain name that you want Route 53 to return in response to DNS queries, for example, ``example.com`` . This value is required if the service specified by ``ServiceId`` includes settings for an ``CNAME`` record. - **AWS_INSTANCE_IPV4** - If the service configuration includes an ``A`` record, the IPv4 address that you want Route 53 to return in response to DNS queries, for example, ``192.0.2.44`` . This value is required if the service specified by ``ServiceId`` includes settings for an ``A`` record. If the service includes settings for an ``SRV`` record, you must specify a value for ``AWS_INSTANCE_IPV4`` , ``AWS_INSTANCE_IPV6`` , or both. - **AWS_INSTANCE_IPV6** - If the service configuration includes an ``AAAA`` record, the IPv6 address that you want Route 53 to return in response to DNS queries, for example, ``2001:0db8:85a3:0000:0000:abcd:0001:2345`` . This value is required if the service specified by ``ServiceId`` includes settings for an ``AAAA`` record. If the service includes settings for an ``SRV`` record, you must specify a value for ``AWS_INSTANCE_IPV4`` , ``AWS_INSTANCE_IPV6`` , or both. - **AWS_INSTANCE_PORT** - If the service includes an ``SRV`` record, the value that you want Route 53 to return for the port. If the service includes ``HealthCheckConfig`` , the port on the endpoint that you want Route 53 to send requests to. This value is required if you specified settings for an ``SRV`` record or a Route 53 health check when you created the service.
-        :param service_id: The ID of the service that you want to use for settings for the instance.
+        :param service_id: The ID or Amazon Resource Name (ARN) of the service that you want to use for settings for the instance. For services created in a shared namespace, specify the service ARN. For more information about shared namespaces, see `Cross-account AWS Cloud Map namespace sharing <https://docs.aws.amazon.com/cloud-map/latest/dg/sharing-namespaces.html>`_ in the *AWS Cloud Map Developer Guide* .
         :param instance_id: An identifier that you want to associate with the instance. Note the following:. - If the service that's specified by ``ServiceId`` includes settings for an ``SRV`` record, the value of ``InstanceId`` is automatically included as part of the value for the ``SRV`` record. For more information, see `DnsRecord > Type <https://docs.aws.amazon.com/cloud-map/latest/api/API_DnsRecord.html#cloudmap-Type-DnsRecord-Type>`_ . - You can use this value to update an existing instance. - To register a new instance, you must specify a value that's unique among instances that you register by using the same service. - If you specify an existing ``InstanceId`` and ``ServiceId`` , AWS Cloud Map updates the existing DNS records, if any. If there's also an existing health check, AWS Cloud Map deletes the old health check and creates a new one. .. epigraph:: The health check isn't deleted immediately, so it will still appear for a while if you submit a ``ListHealthChecks`` request, for example. .. epigraph:: Do not include sensitive information in ``InstanceId`` if the namespace is discoverable by public DNS queries and any ``Type`` member of ``DnsRecord`` for the service contains ``SRV`` because the ``InstanceId`` is discoverable by public DNS queries.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicediscovery-instance.html
@@ -983,7 +1009,9 @@ class CfnInstanceProps:
 
     @builtins.property
     def service_id(self) -> builtins.str:
-        '''The ID of the service that you want to use for settings for the instance.
+        '''The ID or Amazon Resource Name (ARN) of the service that you want to use for settings for the instance.
+
+        For services created in a shared namespace, specify the service ARN. For more information about shared namespaces, see `Cross-account AWS Cloud Map namespace sharing <https://docs.aws.amazon.com/cloud-map/latest/dg/sharing-namespaces.html>`_ in the *AWS Cloud Map Developer Guide* .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicediscovery-instance.html#cfn-servicediscovery-instance-serviceid
         '''
@@ -1024,7 +1052,7 @@ class CfnInstanceProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IPrivateDnsNamespaceRef_19402306, _ITaggable_36806126)
 class CfnPrivateDnsNamespace(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1075,7 +1103,8 @@ class CfnPrivateDnsNamespace(
         properties: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnPrivateDnsNamespace.PropertiesProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ServiceDiscovery::PrivateDnsNamespace``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name that you want to assign to this namespace. When you create a private DNS namespace, AWS Cloud Map automatically creates an Amazon Route 53 private hosted zone that has the same name as the namespace.
@@ -1160,6 +1189,12 @@ class CfnPrivateDnsNamespace(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="privateDnsNamespaceRef")
+    def private_dns_namespace_ref(self) -> _PrivateDnsNamespaceReference_1bf1c3c8:
+        '''A reference to a PrivateDnsNamespace resource.'''
+        return typing.cast(_PrivateDnsNamespaceReference_1bf1c3c8, jsii.get(self, "privateDnsNamespaceRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -1548,7 +1583,7 @@ class CfnPrivateDnsNamespaceProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IPublicDnsNamespaceRef_1d27bfe2, _ITaggable_36806126)
 class CfnPublicDnsNamespace(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1600,7 +1635,8 @@ class CfnPublicDnsNamespace(
         properties: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnPublicDnsNamespace.PropertiesProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ServiceDiscovery::PublicDnsNamespace``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param name: The name that you want to assign to this namespace. .. epigraph:: Do not include sensitive information in the name. The name is publicly available using DNS queries.
@@ -1680,6 +1716,12 @@ class CfnPublicDnsNamespace(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="publicDnsNamespaceRef")
+    def public_dns_namespace_ref(self) -> _PublicDnsNamespaceReference_ff5b938d:
+        '''A reference to a PublicDnsNamespace resource.'''
+        return typing.cast(_PublicDnsNamespaceReference_ff5b938d, jsii.get(self, "publicDnsNamespaceRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -2041,21 +2083,13 @@ class CfnPublicDnsNamespaceProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IServiceRef_687c8f74, _ITaggable_36806126)
 class CfnService(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_servicediscovery.CfnService",
 ):
-    '''A complex type that contains information about a service, which defines the configuration of the following entities:.
-
-    - For public and private DNS namespaces, one of the following combinations of DNS records in Amazon Route 53:
-    - A
-    - AAAA
-    - A and AAAA
-    - SRV
-    - CNAME
-    - Optionally, a health check
+    '''A complex type that contains information about the specified service.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicediscovery-service.html
     :cloudformationResource: AWS::ServiceDiscovery::Service
@@ -2117,7 +2151,8 @@ class CfnService(
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         type: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::ServiceDiscovery::Service``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param description: The description of the service.
@@ -2125,8 +2160,8 @@ class CfnService(
         :param health_check_config: *Public DNS and HTTP namespaces only.* A complex type that contains settings for an optional health check. If you specify settings for a health check, AWS Cloud Map associates the health check with the records that you specify in ``DnsConfig`` . For information about the charges for health checks, see `Amazon Route 53 Pricing <https://docs.aws.amazon.com/route53/pricing/>`_ .
         :param health_check_custom_config: A complex type that contains information about an optional custom health check. .. epigraph:: If you specify a health check configuration, you can specify either ``HealthCheckCustomConfig`` or ``HealthCheckConfig`` but not both.
         :param name: The name of the service.
-        :param namespace_id: The ID of the namespace that was used to create the service. .. epigraph:: You must specify a value for ``NamespaceId`` either for the service properties or for `DnsConfig <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-servicediscovery-service-dnsconfig.html>`_ . Don't specify a value in both places.
-        :param service_attributes: A string map that contains the following information for the service:. - The attributes that apply to the service - For each attribute, the applicable value. You can specify a total of 30 attributes.
+        :param namespace_id: The ID or Amazon Resource Name (ARN) of the namespace that you want to use to create the service. For namespaces shared with your AWS account, specify the namespace ARN. For more information about shared namespaces, see `Cross-account AWS Cloud Map namespace sharing <https://docs.aws.amazon.com/cloud-map/latest/dg/sharing-namespaces.html>`_ in the *AWS Cloud Map Developer Guide* .
+        :param service_attributes: A complex type that contains information about attributes associated with a specific service.
         :param tags: The tags for the service. Each tag consists of a key and an optional value, both of which you define. Tag keys can have a maximum character length of 128 characters, and tag values can have a maximum length of 256 characters.
         :param type: If present, specifies that the service instances are only discoverable using the ``DiscoverInstances`` API operation. No DNS records is registered for the service instances. The only valid value is ``HTTP`` .
         '''
@@ -2148,6 +2183,48 @@ class CfnService(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromServiceArn")
+    @builtins.classmethod
+    def from_service_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _IServiceRef_687c8f74:
+        '''Creates a new IServiceRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__50690470e73ef7cd3ff20a5dbdb67420dca6af2d45267b098383607637aac22e)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_IServiceRef_687c8f74, jsii.sinvoke(cls, "fromServiceArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromServiceId")
+    @builtins.classmethod
+    def from_service_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        service_id: builtins.str,
+    ) -> _IServiceRef_687c8f74:
+        '''Creates a new IServiceRef from a serviceId.
+
+        :param scope: -
+        :param id: -
+        :param service_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__bc01dac739c93292486dd4ca3d1b7f12acb51088c4fe602fe2714b29f96f7ffc)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument service_id", value=service_id, expected_type=type_hints["service_id"])
+        return typing.cast(_IServiceRef_687c8f74, jsii.sinvoke(cls, "fromServiceId", [scope, id, service_id]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -2210,6 +2287,12 @@ class CfnService(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="serviceRef")
+    def service_ref(self) -> _ServiceReference_bb8f24e4:
+        '''A reference to a Service resource.'''
+        return typing.cast(_ServiceReference_bb8f24e4, jsii.get(self, "serviceRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -2299,7 +2382,7 @@ class CfnService(
     @builtins.property
     @jsii.member(jsii_name="namespaceId")
     def namespace_id(self) -> typing.Optional[builtins.str]:
-        '''The ID of the namespace that was used to create the service.'''
+        '''The ID or Amazon Resource Name (ARN) of the namespace that you want to use to create the service.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "namespaceId"))
 
     @namespace_id.setter
@@ -2312,7 +2395,7 @@ class CfnService(
     @builtins.property
     @jsii.member(jsii_name="serviceAttributes")
     def service_attributes(self) -> typing.Any:
-        '''A string map that contains the following information for the service:.'''
+        '''A complex type that contains information about attributes associated with a specific service.'''
         return typing.cast(typing.Any, jsii.get(self, "serviceAttributes"))
 
     @service_attributes.setter
@@ -2368,7 +2451,7 @@ class CfnService(
             '''A complex type that contains information about the Amazon Route 53 DNS records that you want AWS Cloud Map to create when you register an instance.
 
             :param dns_records: An array that contains one ``DnsRecord`` object for each Route 53 DNS record that you want AWS Cloud Map to create when you register an instance. .. epigraph:: The record type of a service can't be updated directly and can only be changed by deleting the service and recreating it with a new ``DnsConfig`` .
-            :param namespace_id: The ID of the namespace to use for DNS configuration. .. epigraph:: You must specify a value for ``NamespaceId`` either for ``DnsConfig`` or for the `service properties <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicediscovery-service.html>`_ . Don't specify a value in both places.
+            :param namespace_id: *Use NamespaceId in `Service <https://docs.aws.amazon.com/cloud-map/latest/api/API_Service.html>`_ instead.*. The ID of the namespace to use for DNS configuration.
             :param routing_policy: The routing policy that you want to apply to all Route 53 DNS records that AWS Cloud Map creates when you register an instance and specify this service. .. epigraph:: If you want to use this service to register instances that create alias records, specify ``WEIGHTED`` for the routing policy. You can specify the following values: - **MULTIVALUE** - If you define a health check for the service and the health check is healthy, Route 53 returns the applicable value for up to eight instances. For example, suppose that the service includes configurations for one ``A`` record and a health check. You use the service to register 10 instances. Route 53 responds to DNS queries with IP addresses for up to eight healthy instances. If fewer than eight instances are healthy, Route 53 responds to every DNS query with the IP addresses for all of the healthy instances. If you don't define a health check for the service, Route 53 assumes that all instances are healthy and returns the values for up to eight instances. For more information about the multivalue routing policy, see `Multivalue Answer Routing <https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html#routing-policy-multivalue>`_ in the *Route 53 Developer Guide* . - **WEIGHTED** - Route 53 returns the applicable value from one randomly selected instance from among the instances that you registered using the same service. Currently, all records have the same weight, so you can't route more or less traffic to any instances. For example, suppose that the service includes configurations for one ``A`` record and a health check. You use the service to register 10 instances. Route 53 responds to DNS queries with the IP address for one randomly selected instance from among the healthy instances. If no instances are healthy, Route 53 responds to DNS queries as if all of the instances were healthy. If you don't define a health check for the service, Route 53 assumes that all instances are healthy and returns the applicable value for one randomly selected instance. For more information about the weighted routing policy, see `Weighted Routing <https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html#routing-policy-weighted>`_ in the *Route 53 Developer Guide* .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-servicediscovery-service-dnsconfig.html
@@ -2422,11 +2505,9 @@ class CfnService(
 
         @builtins.property
         def namespace_id(self) -> typing.Optional[builtins.str]:
-            '''The ID of the namespace to use for DNS configuration.
+            '''*Use NamespaceId in `Service <https://docs.aws.amazon.com/cloud-map/latest/api/API_Service.html>`_ instead.*.
 
-            .. epigraph::
-
-               You must specify a value for ``NamespaceId`` either for ``DnsConfig`` or for the `service properties <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicediscovery-service.html>`_ . Don't specify a value in both places.
+            The ID of the namespace to use for DNS configuration.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-servicediscovery-service-dnsconfig.html#cfn-servicediscovery-service-dnsconfig-namespaceid
             '''
@@ -2844,8 +2925,8 @@ class CfnServiceProps:
         :param health_check_config: *Public DNS and HTTP namespaces only.* A complex type that contains settings for an optional health check. If you specify settings for a health check, AWS Cloud Map associates the health check with the records that you specify in ``DnsConfig`` . For information about the charges for health checks, see `Amazon Route 53 Pricing <https://docs.aws.amazon.com/route53/pricing/>`_ .
         :param health_check_custom_config: A complex type that contains information about an optional custom health check. .. epigraph:: If you specify a health check configuration, you can specify either ``HealthCheckCustomConfig`` or ``HealthCheckConfig`` but not both.
         :param name: The name of the service.
-        :param namespace_id: The ID of the namespace that was used to create the service. .. epigraph:: You must specify a value for ``NamespaceId`` either for the service properties or for `DnsConfig <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-servicediscovery-service-dnsconfig.html>`_ . Don't specify a value in both places.
-        :param service_attributes: A string map that contains the following information for the service:. - The attributes that apply to the service - For each attribute, the applicable value. You can specify a total of 30 attributes.
+        :param namespace_id: The ID or Amazon Resource Name (ARN) of the namespace that you want to use to create the service. For namespaces shared with your AWS account, specify the namespace ARN. For more information about shared namespaces, see `Cross-account AWS Cloud Map namespace sharing <https://docs.aws.amazon.com/cloud-map/latest/dg/sharing-namespaces.html>`_ in the *AWS Cloud Map Developer Guide* .
+        :param service_attributes: A complex type that contains information about attributes associated with a specific service.
         :param tags: The tags for the service. Each tag consists of a key and an optional value, both of which you define. Tag keys can have a maximum character length of 128 characters, and tag values can have a maximum length of 256 characters.
         :param type: If present, specifies that the service instances are only discoverable using the ``DiscoverInstances`` API operation. No DNS records is registered for the service instances. The only valid value is ``HTTP`` .
 
@@ -2986,11 +3067,9 @@ class CfnServiceProps:
 
     @builtins.property
     def namespace_id(self) -> typing.Optional[builtins.str]:
-        '''The ID of the namespace that was used to create the service.
-
-        .. epigraph::
+        '''The ID or Amazon Resource Name (ARN) of the namespace that you want to use to create the service.
 
-           You must specify a value for ``NamespaceId`` either for the service properties or for `DnsConfig <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-servicediscovery-service-dnsconfig.html>`_ . Don't specify a value in both places.
+        For namespaces shared with your AWS account, specify the namespace ARN. For more information about shared namespaces, see `Cross-account AWS Cloud Map namespace sharing <https://docs.aws.amazon.com/cloud-map/latest/dg/sharing-namespaces.html>`_ in the *AWS Cloud Map Developer Guide* .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicediscovery-service.html#cfn-servicediscovery-service-namespaceid
         '''
@@ -2999,12 +3078,7 @@ class CfnServiceProps:
 
     @builtins.property
     def service_attributes(self) -> typing.Any:
-        '''A string map that contains the following information for the service:.
-
-        - The attributes that apply to the service
-        - For each attribute, the applicable value.
-
-        You can specify a total of 30 attributes.
+        '''A complex type that contains information about attributes associated with a specific service.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicediscovery-service.html#cfn-servicediscovery-service-serviceattributes
         '''
@@ -7235,6 +7309,22 @@ def _typecheckingstub__fe683ec1ba955070fa4b5c6770ac570af81044f6f1cfff34bc3ffffe7
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__50690470e73ef7cd3ff20a5dbdb67420dca6af2d45267b098383607637aac22e(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__bc01dac739c93292486dd4ca3d1b7f12acb51088c4fe602fe2714b29f96f7ffc(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    service_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__713d7d0bfb1535bc7ed461a8b2f884bc1b329dfad1a3b802e34adb9b36e4a4b1(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -7769,3 +7859,6 @@ def _typecheckingstub__4e06c8eb4a7b8eb3eb86fe9c0459adfec82993a2f3f5fe56a2c3b52b2
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IHttpNamespace, IInstance, INamespace, IPrivateDnsNamespace, IPublicDnsNamespace, IService]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])