aws-cdk-lib 2.200.2__py3-none-any.whl → 2.224.0__py3-none-any.whl

aws_cdk/aws_codebuild/__init__.py

@@ -261,9 +261,72 @@ codebuild.Project(self, "Project",
 )
 ```
 
-Note that two different CodeBuild Projects using the same S3 bucket will *not*
-share their cache: each Project will get a unique file in the S3 bucket to store
-the cache in.
+If you want to [share the same cache between multiple projects](https://docs.aws.amazon.com/codebuild/latest/userguide/caching-s3.html#caching-s3-sharing), you must must do the following:
+
+* Use the same `cacheNamespace`.
+* Specify the same cache key.
+* Define identical cache paths.
+* Use the same Amazon S3 buckets and `pathPrefix` if set.
+
+```python
+# source_bucket: s3.Bucket
+# my_caching_bucket: s3.Bucket
+
+
+codebuild.Project(self, "ProjectA",
+    source=codebuild.Source.s3(
+        bucket=source_bucket,
+        path="path/to/source-a.zip"
+    ),
+    # configure the same bucket and path prefix
+    cache=codebuild.Cache.bucket(my_caching_bucket,
+        prefix="cache",
+        # use the same cache namespace
+        cache_namespace="cache-namespace"
+    ),
+    build_spec=codebuild.BuildSpec.from_object({
+        "version": "0.2",
+        "phases": {
+            "build": {
+                "commands": ["..."]
+            }
+        },
+        # specify the same cache key and paths
+        "cache": {
+            "key": "unique-key",
+            "paths": ["/root/cachedir/**/*"
+            ]
+        }
+    })
+)
+
+codebuild.Project(self, "ProjectB",
+    source=codebuild.Source.s3(
+        bucket=source_bucket,
+        path="path/to/source-b.zip"
+    ),
+    # configure the same bucket and path prefix
+    cache=codebuild.Cache.bucket(my_caching_bucket,
+        prefix="cache",
+        # use the same cache namespace
+        cache_namespace="cache-namespace"
+    ),
+    build_spec=codebuild.BuildSpec.from_object({
+        "version": "0.2",
+        "phases": {
+            "build": {
+                "commands": ["..."]
+            }
+        },
+        # specify the same cache key and paths
+        "cache": {
+            "key": "unique-key",
+            "paths": ["/root/cachedir/**/*"
+            ]
+        }
+    })
+)
+```
 
 ### Local Caching
 
@@ -313,6 +376,7 @@ can use the `environment` property to customize the build environment:
   details on how to define build images.
 * `certificate` defines the location of a PEM encoded certificate to import.
 * `computeType` defines the instance type used for the build.
+* `dockerServer` defines the docker server used for the build.
 * `privileged` can be set to `true` to allow privileged access.
 * `environmentVariables` can be set at this level (and also at the project
   level).
@@ -520,6 +584,80 @@ fleet = codebuild.Fleet(self, "MyFleet",
 )
 ```
 
+### Custom instance types
+
+You can use [specific EC2 instance
+types](https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-compute-types.html#environment-reserved-capacity.instance-types)
+for your fleet by setting the `computeType` to `CUSTOM_INSTANCE_TYPE`.  This
+allows you to specify the `instanceType` in `computeConfiguration`. Only certain
+EC2 instance types are supported; see the linked documentation for details.
+
+```python
+from aws_cdk import Size
+
+
+fleet = codebuild.Fleet(self, "MyFleet",
+    base_capacity=1,
+    compute_type=codebuild.FleetComputeType.CUSTOM_INSTANCE_TYPE,
+    environment_type=codebuild.EnvironmentType.LINUX_CONTAINER,
+    compute_configuration=codebuild.ComputeConfiguration(
+        instance_type=ec2.InstanceType.of(ec2.InstanceClass.T3, ec2.InstanceSize.MEDIUM),
+        # By default, 64 GiB of disk space is included. Any value optionally
+        # specified here is _incremental_ on top of the included disk space.
+        disk=Size.gibibytes(10)
+    )
+)
+```
+
+### Fleet overflow behavior
+
+When your builds exceed the capacity of your fleet, you can specify how CodeBuild should handle the overflow builds by setting the `overflowBehavior` property:
+
+```python
+fleet = codebuild.Fleet(self, "Fleet",
+    compute_type=codebuild.FleetComputeType.MEDIUM,
+    environment_type=codebuild.EnvironmentType.LINUX_CONTAINER,
+    base_capacity=1,
+    overflow_behavior=codebuild.FleetOverflowBehavior.ON_DEMAND
+)
+```
+
+The available overflow behaviors are:
+
+* `QUEUE` (default): Overflow builds wait for existing fleet instances to become available
+* `ON_DEMAND`: Overflow builds run on CodeBuild on-demand instances
+
+Note: If you set overflow behavior to `ON_DEMAND` for a VPC-connected fleet, ensure your VPC settings allow access to public AWS services.
+
+### VPCs
+
+The same considerations that apply to [Project
+VPCs](#definition-of-vpc-configuration-in-codebuild-project) also apply to Fleet
+VPCs.  When using a Fleet in a CodeBuild Project, it is an error to configure a
+VPC on the Project. Configure a VPC on the fleet instead.
+
+```python
+# load_balancer: elbv2.ApplicationLoadBalancer
+
+
+vpc = ec2.Vpc(self, "MyVPC")
+fleet = codebuild.Fleet(self, "MyProject",
+    compute_type=codebuild.FleetComputeType.MEDIUM,
+    environment_type=codebuild.EnvironmentType.LINUX_CONTAINER,
+    base_capacity=1,
+    vpc=vpc
+)
+
+fleet.connections.allow_to(load_balancer, ec2.Port.tcp(443))
+
+project = codebuild.Project(self, "MyProject",
+    environment=codebuild.BuildEnvironment(
+        fleet=fleet
+    ),
+    build_spec=codebuild.BuildSpec.from_object({})
+)
+```
+
 ## Logs
 
 CodeBuild lets you specify an S3 Bucket, CloudWatch Log Group or both to receive logs from your projects.
@@ -1096,6 +1234,7 @@ from ..aws_ec2 import (
     IConnectable as _IConnectable_10015a05,
     ISecurityGroup as _ISecurityGroup_acf8a799,
     IVpc as _IVpc_f30d5663,
+    InstanceType as _InstanceType_f64915b9,
     SubnetSelection as _SubnetSelection_e57d76df,
 )
 from ..aws_ecr import IRepository as _IRepository_e6004aa6
@@ -1124,6 +1263,16 @@ from ..aws_kms import IKey as _IKey_5f11635f
 from ..aws_logs import ILogGroup as _ILogGroup_3c4fa718
 from ..aws_s3 import IBucket as _IBucket_42e086fd
 from ..aws_secretsmanager import ISecret as _ISecret_6e020e6a
+from ..interfaces.aws_codebuild import (
+    FleetReference as _FleetReference_8d121551,
+    IFleetRef as _IFleetRef_31046017,
+    IProjectRef as _IProjectRef_7528e639,
+    IReportGroupRef as _IReportGroupRef_79bc7a1e,
+    ISourceCredentialRef as _ISourceCredentialRef_7f0e7269,
+    ProjectReference as _ProjectReference_40ed5122,
+    ReportGroupReference as _ReportGroupReference_9845652f,
+    SourceCredentialReference as _SourceCredentialReference_97d19067,
+)
 
 
 @jsii.data_type(
@@ -1463,32 +1612,104 @@ class BitBucketSourceCredentialsProps:
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_codebuild.BucketCacheOptions",
     jsii_struct_bases=[],
-    name_mapping={"prefix": "prefix"},
+    name_mapping={"cache_namespace": "cacheNamespace", "prefix": "prefix"},
 )
 class BucketCacheOptions:
-    def __init__(self, *, prefix: typing.Optional[builtins.str] = None) -> None:
+    def __init__(
+        self,
+        *,
+        cache_namespace: typing.Optional[builtins.str] = None,
+        prefix: typing.Optional[builtins.str] = None,
+    ) -> None:
         '''
+        :param cache_namespace: Defines the scope of the cache. You can use this namespace to share a cache across multiple projects. Default: undefined - No cache namespace, which means that the cache is not shared across multiple projects.
         :param prefix: The prefix to use to store the cache in the bucket.
 
-        :exampleMetadata: fixture=_generated
+        :exampleMetadata: infused
 
         Example::
 
-            # The code below shows an example of how to instantiate this type.
-            # The values are placeholders you should change.
-            from aws_cdk import aws_codebuild as codebuild
+            # source_bucket: s3.Bucket
+            # my_caching_bucket: s3.Bucket
+            
+            
+            codebuild.Project(self, "ProjectA",
+                source=codebuild.Source.s3(
+                    bucket=source_bucket,
+                    path="path/to/source-a.zip"
+                ),
+                # configure the same bucket and path prefix
+                cache=codebuild.Cache.bucket(my_caching_bucket,
+                    prefix="cache",
+                    # use the same cache namespace
+                    cache_namespace="cache-namespace"
+                ),
+                build_spec=codebuild.BuildSpec.from_object({
+                    "version": "0.2",
+                    "phases": {
+                        "build": {
+                            "commands": ["..."]
+                        }
+                    },
+                    # specify the same cache key and paths
+                    "cache": {
+                        "key": "unique-key",
+                        "paths": ["/root/cachedir/**/*"
+                        ]
+                    }
+                })
+            )
             
-            bucket_cache_options = codebuild.BucketCacheOptions(
-                prefix="prefix"
+            codebuild.Project(self, "ProjectB",
+                source=codebuild.Source.s3(
+                    bucket=source_bucket,
+                    path="path/to/source-b.zip"
+                ),
+                # configure the same bucket and path prefix
+                cache=codebuild.Cache.bucket(my_caching_bucket,
+                    prefix="cache",
+                    # use the same cache namespace
+                    cache_namespace="cache-namespace"
+                ),
+                build_spec=codebuild.BuildSpec.from_object({
+                    "version": "0.2",
+                    "phases": {
+                        "build": {
+                            "commands": ["..."]
+                        }
+                    },
+                    # specify the same cache key and paths
+                    "cache": {
+                        "key": "unique-key",
+                        "paths": ["/root/cachedir/**/*"
+                        ]
+                    }
+                })
             )
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__0964d02b7c6a99cc65ab53a8ae83bdb47d0901ee8a6f094b815d479e0fd8cb10)
+            check_type(argname="argument cache_namespace", value=cache_namespace, expected_type=type_hints["cache_namespace"])
             check_type(argname="argument prefix", value=prefix, expected_type=type_hints["prefix"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if cache_namespace is not None:
+            self._values["cache_namespace"] = cache_namespace
         if prefix is not None:
             self._values["prefix"] = prefix
 
+    @builtins.property
+    def cache_namespace(self) -> typing.Optional[builtins.str]:
+        '''Defines the scope of the cache.
+
+        You can use this namespace to share a cache across multiple projects.
+
+        :default: undefined - No cache namespace, which means that the cache is not shared across multiple projects.
+
+        :see: https://docs.aws.amazon.com/codebuild/latest/userguide/caching-s3.html#caching-s3-sharing
+        '''
+        result = self._values.get("cache_namespace")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def prefix(self) -> typing.Optional[builtins.str]:
         '''The prefix to use to store the cache in the bucket.'''
@@ -1514,6 +1735,7 @@ class BucketCacheOptions:
         "build_image": "buildImage",
         "certificate": "certificate",
         "compute_type": "computeType",
+        "docker_server": "dockerServer",
         "environment_variables": "environmentVariables",
         "fleet": "fleet",
         "privileged": "privileged",
@@ -1526,6 +1748,7 @@ class BuildEnvironment:
         build_image: typing.Optional["IBuildImage"] = None,
         certificate: typing.Optional[typing.Union["BuildEnvironmentCertificate", typing.Dict[builtins.str, typing.Any]]] = None,
         compute_type: typing.Optional["ComputeType"] = None,
+        docker_server: typing.Optional[typing.Union["DockerServerOptions", typing.Dict[builtins.str, typing.Any]]] = None,
         environment_variables: typing.Optional[typing.Mapping[builtins.str, typing.Union["BuildEnvironmentVariable", typing.Dict[builtins.str, typing.Any]]]] = None,
         fleet: typing.Optional["IFleet"] = None,
         privileged: typing.Optional[builtins.bool] = None,
@@ -1534,6 +1757,7 @@ class BuildEnvironment:
         :param build_image: The image used for the builds. Default: LinuxBuildImage.STANDARD_7_0
         :param certificate: The location of the PEM-encoded certificate for the build project. Default: - No external certificate is added to the project
         :param compute_type: The type of compute to use for this build. See the ``ComputeType`` enum for the possible values. Default: taken from ``#buildImage#defaultComputeType``
+        :param docker_server: The Docker server configuration CodeBuild use to build your Docker image. Default: - Doesn't use remote docker server
         :param environment_variables: The environment variables that your builds can use.
         :param fleet: Fleet resource for a reserved capacity CodeBuild project. Fleets allow for process builds or tests to run immediately and reduces build durations, by reserving compute resources for your projects. You will be charged for the resources in the fleet, even if they are idle. Default: - No fleet will be attached to the project, which will remain on-demand.
         :param privileged: Indicates how the project builds Docker images. Specify true to enable running the Docker daemon inside a Docker container. This value must be set to true only if this build project will be used to build Docker images, and the specified build environment image is not one provided by AWS CodeBuild with Docker support. Otherwise, all associated builds that attempt to interact with the Docker daemon will fail. Default: false
@@ -1571,11 +1795,14 @@ class BuildEnvironment:
         '''
         if isinstance(certificate, dict):
             certificate = BuildEnvironmentCertificate(**certificate)
+        if isinstance(docker_server, dict):
+            docker_server = DockerServerOptions(**docker_server)
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__ba89ab1467720a2862905a012ed6b6da7a2294a6ebfc22557f6a64dcecf8f434)
             check_type(argname="argument build_image", value=build_image, expected_type=type_hints["build_image"])
             check_type(argname="argument certificate", value=certificate, expected_type=type_hints["certificate"])
             check_type(argname="argument compute_type", value=compute_type, expected_type=type_hints["compute_type"])
+            check_type(argname="argument docker_server", value=docker_server, expected_type=type_hints["docker_server"])
             check_type(argname="argument environment_variables", value=environment_variables, expected_type=type_hints["environment_variables"])
             check_type(argname="argument fleet", value=fleet, expected_type=type_hints["fleet"])
             check_type(argname="argument privileged", value=privileged, expected_type=type_hints["privileged"])
@@ -1586,6 +1813,8 @@ class BuildEnvironment:
             self._values["certificate"] = certificate
         if compute_type is not None:
             self._values["compute_type"] = compute_type
+        if docker_server is not None:
+            self._values["docker_server"] = docker_server
         if environment_variables is not None:
             self._values["environment_variables"] = environment_variables
         if fleet is not None:
@@ -1622,6 +1851,20 @@ class BuildEnvironment:
         result = self._values.get("compute_type")
         return typing.cast(typing.Optional["ComputeType"], result)
 
+    @builtins.property
+    def docker_server(self) -> typing.Optional["DockerServerOptions"]:
+        '''The Docker server configuration CodeBuild use to build your Docker image.
+
+        :default: - Doesn't use remote docker server
+
+        :note:
+
+        Security groups configured for Docker servers should allow ingress network traffic
+        from the VPC configured in the project. They should allow ingress on port 9876.
+        '''
+        result = self._values.get("docker_server")
+        return typing.cast(typing.Optional["DockerServerOptions"], result)
+
     @builtins.property
     def environment_variables(
         self,
@@ -2103,31 +2346,57 @@ class Cache(
 
     Example::
 
-        # my_caching_bucket: s3.Bucket
+        # vpc: ec2.Vpc
+        # my_security_group: ec2.SecurityGroup
         
+        pipelines.CodeBuildStep("Synth",
+            # ...standard ShellStep props...
+            commands=[],
+            env={},
         
-        codebuild.Project(self, "Project",
-            source=codebuild.Source.bit_bucket(
-                owner="awslabs",
-                repo="aws-cdk"
+            # If you are using a CodeBuildStep explicitly, set the 'cdk.out' directory
+            # to be the synth step's output.
+            primary_output_directory="cdk.out",
+        
+            # Control the name of the project
+            project_name="MyProject",
+        
+            # Control parts of the BuildSpec other than the regular 'build' and 'install' commands
+            partial_build_spec=codebuild.BuildSpec.from_object({
+                "version": "0.2"
+            }),
+        
+            # Control the build environment
+            build_environment=codebuild.BuildEnvironment(
+                compute_type=codebuild.ComputeType.LARGE,
+                privileged=True,
+                docker_server=codebuild.DockerServerOptions(
+                    compute_type=codebuild.DockerServerComputeType.SMALL,
+                    security_groups=[my_security_group]
+                )
             ),
+            timeout=Duration.minutes(90),
+            file_system_locations=[
+                codebuild.FileSystemLocation.efs(
+                    identifier="myidentifier2",
+                    location="myclodation.mydnsroot.com:/loc",
+                    mount_point="/media",
+                    mount_options="opts"
+                )
+            ],
         
-            cache=codebuild.Cache.bucket(my_caching_bucket),
+            # Control Elastic Network Interface creation
+            vpc=vpc,
+            subnet_selection=ec2.SubnetSelection(subnet_type=ec2.SubnetType.PRIVATE_WITH_EGRESS),
+            security_groups=[my_security_group],
         
-            # BuildSpec with a 'cache' section necessary for S3 caching. This can
-            # also come from 'buildspec.yml' in your source.
-            build_spec=codebuild.BuildSpec.from_object({
-                "version": "0.2",
-                "phases": {
-                    "build": {
-                        "commands": ["..."]
-                    }
-                },
-                "cache": {
-                    "paths": ["/root/cachedir/**/*"
-                    ]
-                }
-            })
+            # Control caching
+            cache=codebuild.Cache.bucket(s3.Bucket(self, "Cache")),
+        
+            # Additional policy statements for the execution role
+            role_policy_statements=[
+                iam.PolicyStatement()
+            ]
         )
     '''
 
@@ -2140,17 +2409,19 @@ class Cache(
         cls,
         bucket: _IBucket_42e086fd,
         *,
+        cache_namespace: typing.Optional[builtins.str] = None,
         prefix: typing.Optional[builtins.str] = None,
     ) -> "Cache":
         '''Create an S3 caching strategy.
 
         :param bucket: the S3 bucket to use for caching.
+        :param cache_namespace: Defines the scope of the cache. You can use this namespace to share a cache across multiple projects. Default: undefined - No cache namespace, which means that the cache is not shared across multiple projects.
         :param prefix: The prefix to use to store the cache in the bucket.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__17e53da7d0dcdb63a4024e7a2681ef7faa68be13f710db0f237c0a06196e2279)
             check_type(argname="argument bucket", value=bucket, expected_type=type_hints["bucket"])
-        options = BucketCacheOptions(prefix=prefix)
+        options = BucketCacheOptions(cache_namespace=cache_namespace, prefix=prefix)
 
         return typing.cast("Cache", jsii.sinvoke(cls, "bucket", [bucket, options]))
 
@@ -2179,7 +2450,7 @@ class _CacheProxy(Cache):
 typing.cast(typing.Any, Cache).__jsii_proxy_class__ = lambda : _CacheProxy
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IFleetRef_31046017, _ITaggableV2_4e6798f8)
 class CfnFleet(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -2258,7 +2529,8 @@ class CfnFleet(
         scaling_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnFleet.ScalingConfigurationInputProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::CodeBuild::Fleet``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param base_capacity: The initial number of machines allocated to the compute fleet, which defines the number of builds that can run in parallel.
@@ -2345,6 +2617,12 @@ class CfnFleet(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="fleetRef")
+    def fleet_ref(self) -> _FleetReference_8d121551:
+        '''A reference to a Fleet resource.'''
+        return typing.cast(_FleetReference_8d121551, jsii.get(self, "fleetRef"))
+
     @builtins.property
     @jsii.member(jsii_name="baseCapacity")
     def base_capacity(self) -> typing.Optional[jsii.Number]:
@@ -3390,7 +3668,7 @@ class CfnFleetProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IProjectRef_7528e639, _ITaggable_36806126)
 class CfnProject(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -3593,6 +3871,12 @@ class CfnProject(
                     # the properties below are optional
                     exclude_matched_pattern=False
                 )]],
+                pull_request_build_policy=codebuild.CfnProject.PullRequestBuildPolicyProperty(
+                    requires_comment_approval="requiresCommentApproval",
+        
+                    # the properties below are optional
+                    approver_roles=["approverRoles"]
+                ),
                 scope_configuration=codebuild.CfnProject.ScopeConfigurationProperty(
                     name="name",
         
@@ -3642,7 +3926,8 @@ class CfnProject(
         visibility: typing.Optional[builtins.str] = None,
         vpc_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnProject.VpcConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::CodeBuild::Project``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param artifacts: ``Artifacts`` is a property of the `AWS::CodeBuild::Project <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codebuild-project.html>`_ resource that specifies output settings for artifacts generated by an AWS CodeBuild build.
@@ -3757,6 +4042,12 @@ class CfnProject(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="projectRef")
+    def project_ref(self) -> _ProjectReference_40ed5122:
+        '''A reference to a Project resource.'''
+        return typing.cast(_ProjectReference_40ed5122, jsii.get(self, "projectRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -5821,6 +6112,7 @@ class CfnProject(
         name_mapping={
             "build_type": "buildType",
             "filter_groups": "filterGroups",
+            "pull_request_build_policy": "pullRequestBuildPolicy",
             "scope_configuration": "scopeConfiguration",
             "webhook": "webhook",
         },
@@ -5831,6 +6123,7 @@ class CfnProject(
             *,
             build_type: typing.Optional[builtins.str] = None,
             filter_groups: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnProject.WebhookFilterProperty", typing.Dict[builtins.str, typing.Any]]]]]]]] = None,
+            pull_request_build_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnProject.PullRequestBuildPolicyProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             scope_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnProject.ScopeConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             webhook: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         ) -> None:
@@ -5842,6 +6135,7 @@ class CfnProject(
 
             :param build_type: Specifies the type of build this webhook will trigger. Allowed values are:. - **BUILD** - A single build - **BUILD_BATCH** - A batch build
             :param filter_groups: A list of lists of ``WebhookFilter`` objects used to determine which webhook events are triggered. At least one ``WebhookFilter`` in the array must specify ``EVENT`` as its type.
+            :param pull_request_build_policy: 
             :param scope_configuration: Contains configuration information about the scope for a webhook.
             :param webhook: Specifies whether or not to begin automatically rebuilding the source code every time a code change is pushed to the repository.
 
@@ -5863,6 +6157,12 @@ class CfnProject(
                         # the properties below are optional
                         exclude_matched_pattern=False
                     )]],
+                    pull_request_build_policy=codebuild.CfnProject.PullRequestBuildPolicyProperty(
+                        requires_comment_approval="requiresCommentApproval",
+                
+                        # the properties below are optional
+                        approver_roles=["approverRoles"]
+                    ),
                     scope_configuration=codebuild.CfnProject.ScopeConfigurationProperty(
                         name="name",
                 
@@ -5877,6 +6177,7 @@ class CfnProject(
                 type_hints = typing.get_type_hints(_typecheckingstub__d2709928946ab49717544a38f5b4471ef55c9bf0ed8e39f24de9210b8c729a70)
                 check_type(argname="argument build_type", value=build_type, expected_type=type_hints["build_type"])
                 check_type(argname="argument filter_groups", value=filter_groups, expected_type=type_hints["filter_groups"])
+                check_type(argname="argument pull_request_build_policy", value=pull_request_build_policy, expected_type=type_hints["pull_request_build_policy"])
                 check_type(argname="argument scope_configuration", value=scope_configuration, expected_type=type_hints["scope_configuration"])
                 check_type(argname="argument webhook", value=webhook, expected_type=type_hints["webhook"])
             self._values: typing.Dict[builtins.str, typing.Any] = {}
@@ -5884,6 +6185,8 @@ class CfnProject(
                 self._values["build_type"] = build_type
             if filter_groups is not None:
                 self._values["filter_groups"] = filter_groups
+            if pull_request_build_policy is not None:
+                self._values["pull_request_build_policy"] = pull_request_build_policy
             if scope_configuration is not None:
                 self._values["scope_configuration"] = scope_configuration
             if webhook is not None:
@@ -5914,6 +6217,16 @@ class CfnProject(
             result = self._values.get("filter_groups")
             return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnProject.WebhookFilterProperty"]]]]]], result)
 
+        @builtins.property
+        def pull_request_build_policy(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnProject.PullRequestBuildPolicyProperty"]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-codebuild-project-projecttriggers.html#cfn-codebuild-project-projecttriggers-pullrequestbuildpolicy
+            '''
+            result = self._values.get("pull_request_build_policy")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnProject.PullRequestBuildPolicyProperty"]], result)
+
         @builtins.property
         def scope_configuration(
             self,
@@ -5947,6 +6260,79 @@ class CfnProject(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_codebuild.CfnProject.PullRequestBuildPolicyProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "requires_comment_approval": "requiresCommentApproval",
+            "approver_roles": "approverRoles",
+        },
+    )
+    class PullRequestBuildPolicyProperty:
+        def __init__(
+            self,
+            *,
+            requires_comment_approval: builtins.str,
+            approver_roles: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''
+            :param requires_comment_approval: 
+            :param approver_roles: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-codebuild-project-pullrequestbuildpolicy.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_codebuild as codebuild
+                
+                pull_request_build_policy_property = codebuild.CfnProject.PullRequestBuildPolicyProperty(
+                    requires_comment_approval="requiresCommentApproval",
+                
+                    # the properties below are optional
+                    approver_roles=["approverRoles"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__dc1eee42ab44fe674f81f814cf0b3916fe0be36f2eb0f8f6b963c3bbd44441fd)
+                check_type(argname="argument requires_comment_approval", value=requires_comment_approval, expected_type=type_hints["requires_comment_approval"])
+                check_type(argname="argument approver_roles", value=approver_roles, expected_type=type_hints["approver_roles"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "requires_comment_approval": requires_comment_approval,
+            }
+            if approver_roles is not None:
+                self._values["approver_roles"] = approver_roles
+
+        @builtins.property
+        def requires_comment_approval(self) -> builtins.str:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-codebuild-project-pullrequestbuildpolicy.html#cfn-codebuild-project-pullrequestbuildpolicy-requirescommentapproval
+            '''
+            result = self._values.get("requires_comment_approval")
+            assert result is not None, "Required property 'requires_comment_approval' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def approver_roles(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-codebuild-project-pullrequestbuildpolicy.html#cfn-codebuild-project-pullrequestbuildpolicy-approverroles
+            '''
+            result = self._values.get("approver_roles")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "PullRequestBuildPolicyProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_codebuild.CfnProject.RegistryCredentialProperty",
         jsii_struct_bases=[],
@@ -7107,6 +7493,12 @@ class CfnProjectProps:
                         # the properties below are optional
                         exclude_matched_pattern=False
                     )]],
+                    pull_request_build_policy=codebuild.CfnProject.PullRequestBuildPolicyProperty(
+                        requires_comment_approval="requiresCommentApproval",
+            
+                        # the properties below are optional
+                        approver_roles=["approverRoles"]
+                    ),
                     scope_configuration=codebuild.CfnProject.ScopeConfigurationProperty(
                         name="name",
             
@@ -7508,7 +7900,7 @@ class CfnProjectProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IReportGroupRef_79bc7a1e, _ITaggable_36806126)
 class CfnReportGroup(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -7567,7 +7959,8 @@ class CfnReportGroup(
         name: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::CodeBuild::ReportGroup``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param export_config: Information about the destination where the raw data of this ``ReportGroup`` is exported.
@@ -7642,6 +8035,12 @@ class CfnReportGroup(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="reportGroupRef")
+    def report_group_ref(self) -> _ReportGroupReference_9845652f:
+        '''A reference to a ReportGroup resource.'''
+        return typing.cast(_ReportGroupReference_9845652f, jsii.get(self, "reportGroupRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -8118,7 +8517,7 @@ class CfnReportGroupProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _ISourceCredentialRef_7f0e7269)
 class CfnSourceCredential(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -8161,7 +8560,8 @@ class CfnSourceCredential(
         token: builtins.str,
         username: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::CodeBuild::SourceCredential``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param auth_type: The type of authentication used by the credentials. Valid options are OAUTH, BASIC_AUTH, PERSONAL_ACCESS_TOKEN, CODECONNECTIONS, or SECRETS_MANAGER.
@@ -8225,6 +8625,12 @@ class CfnSourceCredential(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="sourceCredentialRef")
+    def source_credential_ref(self) -> _SourceCredentialReference_97d19067:
+        '''A reference to a SourceCredential resource.'''
+        return typing.cast(_SourceCredentialReference_97d19067, jsii.get(self, "sourceCredentialRef"))
+
     @builtins.property
     @jsii.member(jsii_name="authType")
     def auth_type(self) -> builtins.str:
@@ -8606,6 +9012,12 @@ class CommonProjectProps:
                         object_key="objectKey"
                     ),
                     compute_type=codebuild.ComputeType.SMALL,
+                    docker_server=codebuild.DockerServerOptions(
+                        compute_type=codebuild.DockerServerComputeType.SMALL,
+            
+                        # the properties below are optional
+                        security_groups=[security_group]
+                    ),
                     environment_variables={
                         "environment_variables_key": codebuild.BuildEnvironmentVariable(
                             value=value,
@@ -9036,6 +9448,7 @@ class CommonProjectProps:
     jsii_struct_bases=[],
     name_mapping={
         "disk": "disk",
+        "instance_type": "instanceType",
         "machine_type": "machineType",
         "memory": "memory",
         "v_cpu": "vCpu",
@@ -9046,23 +9459,18 @@ class ComputeConfiguration:
         self,
         *,
         disk: typing.Optional[_Size_7b441c34] = None,
+        instance_type: typing.Optional[_InstanceType_f64915b9] = None,
         machine_type: typing.Optional["MachineType"] = None,
         memory: typing.Optional[_Size_7b441c34] = None,
         v_cpu: typing.Optional[jsii.Number] = None,
     ) -> None:
         '''The compute configuration for the fleet.
 
-        Despite what the CloudFormation schema says, the numeric properties (disk, memory, vCpu) are not optional.
-        An ``undefined`` value will cause the CloudFormation deployment to fail, e.g.
-        .. epigraph::
-
-           Cannot invoke "java.lang.Integer.intValue()" because the return value of "software.amazon.codebuild.fleet.ComputeConfiguration.getMemory()" is null
-           Therefore, these properties default value is set to 0.
-
-        :param disk: The amount of disk space of the instance type included in your fleet. Default: - No requirement, the actual value will be based on the other selected configuration properties
-        :param machine_type: The machine type of the instance type included in your fleet. Default: - No requirement, the actual value will be based on the other selected configuration properties
-        :param memory: The amount of memory of the instance type included in your fleet. Default: - No requirement, the actual value will be based on the other selected configuration properties
-        :param v_cpu: The number of vCPUs of the instance type included in your fleet. Default: - No requirement, the actual value will be based on the other selected configuration properties
+        :param disk: When using ATTRIBUTE_BASED, the amount of disk space of the instance type included in your fleet. When using CUSTOM_INSTANCE_TYPE, the additional amount of disk space to provision over the 64GB included by default. Default: - No requirement, the actual value will be based on the other selected configuration properties
+        :param instance_type: When using CUSTOM_INSTANCE_TYPE, the EC2 instance type to use for fleet instances. Not all instance types are supported by CodeBuild. If you use a disallowed type, the CloudFormation deployment will fail. Default: none
+        :param machine_type: When using ATTRIBUTE_BASED, the machine type of the instance type included in your fleet. Default: - No requirement, the actual value will be based on the other selected configuration properties
+        :param memory: When using ATTRIBUTE_BASED, the amount of memory of the instance type included in your fleet. Default: - No requirement, the actual value will be based on the other selected configuration properties
+        :param v_cpu: When using ATTRIBUTE_BASED, the number of vCPUs of the instance type included in your fleet. Default: - No requirement, the actual value will be based on the other selected configuration properties
 
         :exampleMetadata: infused
 
@@ -9086,12 +9494,15 @@ class ComputeConfiguration:
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__b104977b55c72c0577553444ac08838cdefde5acef91d6c00ad996d1c464b61b)
             check_type(argname="argument disk", value=disk, expected_type=type_hints["disk"])
+            check_type(argname="argument instance_type", value=instance_type, expected_type=type_hints["instance_type"])
             check_type(argname="argument machine_type", value=machine_type, expected_type=type_hints["machine_type"])
             check_type(argname="argument memory", value=memory, expected_type=type_hints["memory"])
             check_type(argname="argument v_cpu", value=v_cpu, expected_type=type_hints["v_cpu"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if disk is not None:
             self._values["disk"] = disk
+        if instance_type is not None:
+            self._values["instance_type"] = instance_type
         if machine_type is not None:
             self._values["machine_type"] = machine_type
         if memory is not None:
@@ -9101,16 +9512,34 @@ class ComputeConfiguration:
 
     @builtins.property
     def disk(self) -> typing.Optional[_Size_7b441c34]:
-        '''The amount of disk space of the instance type included in your fleet.
+        '''When using ATTRIBUTE_BASED, the amount of disk space of the instance type included in your fleet.
+
+        When using CUSTOM_INSTANCE_TYPE,
+        the additional amount of disk space to provision over the 64GB included by
+        default.
 
         :default: - No requirement, the actual value will be based on the other selected configuration properties
         '''
         result = self._values.get("disk")
         return typing.cast(typing.Optional[_Size_7b441c34], result)
 
+    @builtins.property
+    def instance_type(self) -> typing.Optional[_InstanceType_f64915b9]:
+        '''When using CUSTOM_INSTANCE_TYPE, the EC2 instance type to use for fleet instances.
+
+        Not all instance types are supported by CodeBuild. If you use a disallowed type, the
+        CloudFormation deployment will fail.
+
+        :default: none
+
+        :see: https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-compute-types.html#environment-reserved-capacity.instance-types
+        '''
+        result = self._values.get("instance_type")
+        return typing.cast(typing.Optional[_InstanceType_f64915b9], result)
+
     @builtins.property
     def machine_type(self) -> typing.Optional["MachineType"]:
-        '''The machine type of the instance type included in your fleet.
+        '''When using ATTRIBUTE_BASED, the machine type of the instance type included in your fleet.
 
         :default: - No requirement, the actual value will be based on the other selected configuration properties
         '''
@@ -9119,7 +9548,7 @@ class ComputeConfiguration:
 
     @builtins.property
     def memory(self) -> typing.Optional[_Size_7b441c34]:
-        '''The amount of memory of the instance type included in your fleet.
+        '''When using ATTRIBUTE_BASED, the amount of memory of the instance type included in your fleet.
 
         :default: - No requirement, the actual value will be based on the other selected configuration properties
         '''
@@ -9128,7 +9557,7 @@ class ComputeConfiguration:
 
     @builtins.property
     def v_cpu(self) -> typing.Optional[jsii.Number]:
-        '''The number of vCPUs of the instance type included in your fleet.
+        '''When using ATTRIBUTE_BASED, the number of vCPUs of the instance type included in your fleet.
 
         :default: - No requirement, the actual value will be based on the other selected configuration properties
         '''
@@ -9179,7 +9608,11 @@ class ComputeType(enum.Enum):
             # Control the build environment
             build_environment=codebuild.BuildEnvironment(
                 compute_type=codebuild.ComputeType.LARGE,
-                privileged=True
+                privileged=True,
+                docker_server=codebuild.DockerServerOptions(
+                    compute_type=codebuild.DockerServerComputeType.SMALL,
+                    security_groups=[my_security_group]
+                )
             ),
             timeout=Duration.minutes(90),
             file_system_locations=[
@@ -9217,6 +9650,7 @@ class ComputeType(enum.Enum):
     LAMBDA_8GB = "LAMBDA_8GB"
     LAMBDA_10GB = "LAMBDA_10GB"
     ATTRIBUTE_BASED = "ATTRIBUTE_BASED"
+    CUSTOM_INSTANCE_TYPE = "CUSTOM_INSTANCE_TYPE"
 
 
 @jsii.data_type(
@@ -9245,20 +9679,229 @@ class DockerImageOptions:
             )
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__a9bdff78eb0c7b03d745a4a031a5cd7fe7b54a46e7733dc247bae3735e3c5300)
-            check_type(argname="argument secrets_manager_credentials", value=secrets_manager_credentials, expected_type=type_hints["secrets_manager_credentials"])
-        self._values: typing.Dict[builtins.str, typing.Any] = {}
-        if secrets_manager_credentials is not None:
-            self._values["secrets_manager_credentials"] = secrets_manager_credentials
+            type_hints = typing.get_type_hints(_typecheckingstub__a9bdff78eb0c7b03d745a4a031a5cd7fe7b54a46e7733dc247bae3735e3c5300)
+            check_type(argname="argument secrets_manager_credentials", value=secrets_manager_credentials, expected_type=type_hints["secrets_manager_credentials"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if secrets_manager_credentials is not None:
+            self._values["secrets_manager_credentials"] = secrets_manager_credentials
+
+    @builtins.property
+    def secrets_manager_credentials(self) -> typing.Optional[_ISecret_6e020e6a]:
+        '''The credentials, stored in Secrets Manager, used for accessing the repository holding the image, if the repository is private.
+
+        :default: no credentials will be used (we assume the repository is public)
+        '''
+        result = self._values.get("secrets_manager_credentials")
+        return typing.cast(typing.Optional[_ISecret_6e020e6a], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "DockerImageOptions(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.enum(jsii_type="aws-cdk-lib.aws_codebuild.DockerServerComputeType")
+class DockerServerComputeType(enum.Enum):
+    '''Docker server compute type.
+
+    :see: https://docs.aws.amazon.com/codebuild/latest/APIReference/API_DockerServer.html
+    :exampleMetadata: infused
+
+    Example::
+
+        # vpc: ec2.Vpc
+        # my_security_group: ec2.SecurityGroup
+        
+        pipelines.CodeBuildStep("Synth",
+            # ...standard ShellStep props...
+            commands=[],
+            env={},
+        
+            # If you are using a CodeBuildStep explicitly, set the 'cdk.out' directory
+            # to be the synth step's output.
+            primary_output_directory="cdk.out",
+        
+            # Control the name of the project
+            project_name="MyProject",
+        
+            # Control parts of the BuildSpec other than the regular 'build' and 'install' commands
+            partial_build_spec=codebuild.BuildSpec.from_object({
+                "version": "0.2"
+            }),
+        
+            # Control the build environment
+            build_environment=codebuild.BuildEnvironment(
+                compute_type=codebuild.ComputeType.LARGE,
+                privileged=True,
+                docker_server=codebuild.DockerServerOptions(
+                    compute_type=codebuild.DockerServerComputeType.SMALL,
+                    security_groups=[my_security_group]
+                )
+            ),
+            timeout=Duration.minutes(90),
+            file_system_locations=[
+                codebuild.FileSystemLocation.efs(
+                    identifier="myidentifier2",
+                    location="myclodation.mydnsroot.com:/loc",
+                    mount_point="/media",
+                    mount_options="opts"
+                )
+            ],
+        
+            # Control Elastic Network Interface creation
+            vpc=vpc,
+            subnet_selection=ec2.SubnetSelection(subnet_type=ec2.SubnetType.PRIVATE_WITH_EGRESS),
+            security_groups=[my_security_group],
+        
+            # Control caching
+            cache=codebuild.Cache.bucket(s3.Bucket(self, "Cache")),
+        
+            # Additional policy statements for the execution role
+            role_policy_statements=[
+                iam.PolicyStatement()
+            ]
+        )
+    '''
+
+    SMALL = "SMALL"
+    '''BUILD_GENERAL1_SMALL.'''
+    MEDIUM = "MEDIUM"
+    '''BUILD_GENERAL1_MEDIUM.'''
+    LARGE = "LARGE"
+    '''BUILD_GENERAL1_LARGE.'''
+    X_LARGE = "X_LARGE"
+    '''BUILD_GENERAL1_XLARGE.'''
+    X2_LARGE = "X2_LARGE"
+    '''BUILD_GENERAL1_2XLARGE.'''
+    ATTRIBUTE_BASED_COMPUTE = "ATTRIBUTE_BASED_COMPUTE"
+    '''ATTRIBUTE_BASED_COMPUTE.'''
+    BUILD_LAMBDA_10GB = "BUILD_LAMBDA_10GB"
+    '''BUILD_LAMBDA_10GB.'''
+    BUILD_LAMBDA_1GB = "BUILD_LAMBDA_1GB"
+    '''BUILD_LAMBDA_1GB.'''
+    BUILD_LAMBDA_2GB = "BUILD_LAMBDA_2GB"
+    '''BUILD_LAMBDA_2GB.'''
+    BUILD_LAMBDA_4GB = "BUILD_LAMBDA_4GB"
+    '''BUILD_LAMBDA_4GB.'''
+    BUILD_LAMBDA_8GB = "BUILD_LAMBDA_8GB"
+    '''BUILD_LAMBDA_8GB.'''
+    CUSTOM_INSTANCE_TYPE = "CUSTOM_INSTANCE_TYPE"
+    '''CUSTOM_INSTANCE_TYPE.'''
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_codebuild.DockerServerOptions",
+    jsii_struct_bases=[],
+    name_mapping={"compute_type": "computeType", "security_groups": "securityGroups"},
+)
+class DockerServerOptions:
+    def __init__(
+        self,
+        *,
+        compute_type: DockerServerComputeType,
+        security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
+    ) -> None:
+        '''The Docker server configuration CodeBuild use to build your Docker image.
+
+        :param compute_type: The type of compute to use for the docker server. See the ``DockerServerComputeType`` enum for the possible values.
+        :param security_groups: A list of maximum 5 security groups. Default: - no security group
+
+        :exampleMetadata: infused
+
+        Example::
+
+            # vpc: ec2.Vpc
+            # my_security_group: ec2.SecurityGroup
+            
+            pipelines.CodeBuildStep("Synth",
+                # ...standard ShellStep props...
+                commands=[],
+                env={},
+            
+                # If you are using a CodeBuildStep explicitly, set the 'cdk.out' directory
+                # to be the synth step's output.
+                primary_output_directory="cdk.out",
+            
+                # Control the name of the project
+                project_name="MyProject",
+            
+                # Control parts of the BuildSpec other than the regular 'build' and 'install' commands
+                partial_build_spec=codebuild.BuildSpec.from_object({
+                    "version": "0.2"
+                }),
+            
+                # Control the build environment
+                build_environment=codebuild.BuildEnvironment(
+                    compute_type=codebuild.ComputeType.LARGE,
+                    privileged=True,
+                    docker_server=codebuild.DockerServerOptions(
+                        compute_type=codebuild.DockerServerComputeType.SMALL,
+                        security_groups=[my_security_group]
+                    )
+                ),
+                timeout=Duration.minutes(90),
+                file_system_locations=[
+                    codebuild.FileSystemLocation.efs(
+                        identifier="myidentifier2",
+                        location="myclodation.mydnsroot.com:/loc",
+                        mount_point="/media",
+                        mount_options="opts"
+                    )
+                ],
+            
+                # Control Elastic Network Interface creation
+                vpc=vpc,
+                subnet_selection=ec2.SubnetSelection(subnet_type=ec2.SubnetType.PRIVATE_WITH_EGRESS),
+                security_groups=[my_security_group],
+            
+                # Control caching
+                cache=codebuild.Cache.bucket(s3.Bucket(self, "Cache")),
+            
+                # Additional policy statements for the execution role
+                role_policy_statements=[
+                    iam.PolicyStatement()
+                ]
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__8bccff12ec36edc5d021d9eb1ffae1d3988acc0341d9bddf9be2fd3bbff8e402)
+            check_type(argname="argument compute_type", value=compute_type, expected_type=type_hints["compute_type"])
+            check_type(argname="argument security_groups", value=security_groups, expected_type=type_hints["security_groups"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "compute_type": compute_type,
+        }
+        if security_groups is not None:
+            self._values["security_groups"] = security_groups
 
     @builtins.property
-    def secrets_manager_credentials(self) -> typing.Optional[_ISecret_6e020e6a]:
-        '''The credentials, stored in Secrets Manager, used for accessing the repository holding the image, if the repository is private.
+    def compute_type(self) -> DockerServerComputeType:
+        '''The type of compute to use for the docker server.
 
-        :default: no credentials will be used (we assume the repository is public)
+        See the ``DockerServerComputeType`` enum for the possible values.
         '''
-        result = self._values.get("secrets_manager_credentials")
-        return typing.cast(typing.Optional[_ISecret_6e020e6a], result)
+        result = self._values.get("compute_type")
+        assert result is not None, "Required property 'compute_type' is missing"
+        return typing.cast(DockerServerComputeType, result)
+
+    @builtins.property
+    def security_groups(self) -> typing.Optional[typing.List[_ISecurityGroup_acf8a799]]:
+        '''A list of maximum 5 security groups.
+
+        :default: - no security group
+
+        :note:
+
+        Security groups configured for Docker servers should allow ingress network traffic
+        from the VPC configured in the project. They should allow ingress on port 9876.
+        '''
+        result = self._values.get("security_groups")
+        return typing.cast(typing.Optional[typing.List[_ISecurityGroup_acf8a799]], result)
 
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
@@ -9267,7 +9910,7 @@ class DockerImageOptions:
         return not (rhs == self)
 
     def __repr__(self) -> str:
-        return "DockerImageOptions(%s)" % ", ".join(
+        return "DockerServerOptions(%s)" % ", ".join(
             k + "=" + repr(v) for k, v in self._values.items()
         )
 
@@ -9384,16 +10027,18 @@ class EnvironmentType(enum.Enum):
 
     Example::
 
-        fleet = codebuild.Fleet(self, "Fleet",
-            compute_type=codebuild.FleetComputeType.MEDIUM,
-            environment_type=codebuild.EnvironmentType.LINUX_CONTAINER,
-            base_capacity=1
-        )
+        from aws_cdk import Size
         
-        codebuild.Project(self, "Project",
-            environment=codebuild.BuildEnvironment(
-                fleet=fleet,
-                build_image=codebuild.LinuxBuildImage.STANDARD_7_0
+        
+        fleet = codebuild.Fleet(self, "MyFleet",
+            base_capacity=1,
+            compute_type=codebuild.FleetComputeType.CUSTOM_INSTANCE_TYPE,
+            environment_type=codebuild.EnvironmentType.LINUX_CONTAINER,
+            compute_configuration=codebuild.ComputeConfiguration(
+                instance_type=ec2.InstanceType.of(ec2.InstanceClass.T3, ec2.InstanceSize.MEDIUM),
+                # By default, 64 GiB of disk space is included. Any value optionally
+                # specified here is _incremental_ on top of the included disk space.
+                disk=Size.gibibytes(10)
             )
         )
     '''
@@ -9853,7 +10498,7 @@ class FilterGroup(
 
 @jsii.enum(jsii_type="aws-cdk-lib.aws_codebuild.FleetComputeType")
 class FleetComputeType(enum.Enum):
-    '''Fleet build machine compute type. Subset of Fleet compatible {@link ComputeType} values.
+    '''Fleet build machine compute type. Subset of Fleet compatible ComputeType values.
 
     The allocated memory, vCPU count and disk space of the build machine for a
     given compute type are dependent on the environment type.
@@ -9864,16 +10509,18 @@ class FleetComputeType(enum.Enum):
 
     Example::
 
-        fleet = codebuild.Fleet(self, "Fleet",
-            compute_type=codebuild.FleetComputeType.MEDIUM,
-            environment_type=codebuild.EnvironmentType.LINUX_CONTAINER,
-            base_capacity=1
-        )
+        from aws_cdk import Size
         
-        codebuild.Project(self, "Project",
-            environment=codebuild.BuildEnvironment(
-                fleet=fleet,
-                build_image=codebuild.LinuxBuildImage.STANDARD_7_0
+        
+        fleet = codebuild.Fleet(self, "MyFleet",
+            base_capacity=1,
+            compute_type=codebuild.FleetComputeType.CUSTOM_INSTANCE_TYPE,
+            environment_type=codebuild.EnvironmentType.LINUX_CONTAINER,
+            compute_configuration=codebuild.ComputeConfiguration(
+                instance_type=ec2.InstanceType.of(ec2.InstanceClass.T3, ec2.InstanceSize.MEDIUM),
+                # By default, 64 GiB of disk space is included. Any value optionally
+                # specified here is _incremental_ on top of the included disk space.
+                disk=Size.gibibytes(10)
             )
         )
     '''
@@ -9881,32 +10528,32 @@ class FleetComputeType(enum.Enum):
     SMALL = "SMALL"
     '''Small compute type.
 
-    May not be available for all environment types, see
-    {@link https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-compute-types.html#environment.types docs}
-    for more information.
+    May not be available for all environment types.
+
+    :see: https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-compute-types.html#environment.types
     '''
     MEDIUM = "MEDIUM"
     '''Medium compute type.
 
-    May not be available for all environment types, see
-    {@link https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-compute-types.html#environment.types docs}
-    for more information.
+    May not be available for all environment types.
+
+    :see: https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-compute-types.html#environment.types
     '''
     LARGE = "LARGE"
     '''Large compute type.'''
     X_LARGE = "X_LARGE"
     '''Extra Large compute type.
 
-    May not be available for all environment types, see
-    {@link https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-compute-types.html#environment.types docs}
-    for more information.
+    May not be available for all environment types.
+
+    :see: https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-compute-types.html#environment.types
     '''
     X2_LARGE = "X2_LARGE"
     '''Extra, Extra Large compute type.
 
-    May not be available for all environment types, see
-    {@link https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-compute-types.html#environment.types docs}
-    for more information.
+    May not be available for all environment types.
+
+    :see: https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-compute-types.html#environment.types
     '''
     ATTRIBUTE_BASED = "ATTRIBUTE_BASED"
     '''Specify the amount of vCPUs, memory, disk space, and the type of machine.
@@ -9915,6 +10562,36 @@ class FleetComputeType(enum.Enum):
 
     :see: https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-compute-types.html#environment-reserved-capacity.types
     '''
+    CUSTOM_INSTANCE_TYPE = "CUSTOM_INSTANCE_TYPE"
+    '''Specify a specific EC2 instance type to use for compute.
+
+    You must set ``instanceType`` on ``computeConfiguration``, and optionally set a
+    ``disk`` size if the provided 64GB is insufficient.
+
+    :see: https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-compute-types.html#environment-reserved-capacity.instance-types
+    '''
+
+
+@jsii.enum(jsii_type="aws-cdk-lib.aws_codebuild.FleetOverflowBehavior")
+class FleetOverflowBehavior(enum.Enum):
+    '''The compute fleet overflow behavior.
+
+    :exampleMetadata: infused
+
+    Example::
+
+        fleet = codebuild.Fleet(self, "Fleet",
+            compute_type=codebuild.FleetComputeType.MEDIUM,
+            environment_type=codebuild.EnvironmentType.LINUX_CONTAINER,
+            base_capacity=1,
+            overflow_behavior=codebuild.FleetOverflowBehavior.ON_DEMAND
+        )
+    '''
+
+    QUEUE = "QUEUE"
+    '''Overflow builds wait for existing fleet instances to become available.'''
+    ON_DEMAND = "ON_DEMAND"
+    '''Overflow builds run on CodeBuild on-demand instances.'''
 
 
 @jsii.data_type(
@@ -9926,6 +10603,11 @@ class FleetComputeType(enum.Enum):
         "environment_type": "environmentType",
         "compute_configuration": "computeConfiguration",
         "fleet_name": "fleetName",
+        "overflow_behavior": "overflowBehavior",
+        "role": "role",
+        "security_groups": "securityGroups",
+        "subnet_selection": "subnetSelection",
+        "vpc": "vpc",
     },
 )
 class FleetProps:
@@ -9937,34 +10619,48 @@ class FleetProps:
         environment_type: EnvironmentType,
         compute_configuration: typing.Optional[typing.Union[ComputeConfiguration, typing.Dict[builtins.str, typing.Any]]] = None,
         fleet_name: typing.Optional[builtins.str] = None,
+        overflow_behavior: typing.Optional[FleetOverflowBehavior] = None,
+        role: typing.Optional[_IRole_235f5d8e] = None,
+        security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
+        subnet_selection: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
+        vpc: typing.Optional[_IVpc_f30d5663] = None,
     ) -> None:
-        '''Construction properties of a CodeBuild {@link Fleet}.
+        '''Construction properties of a CodeBuild Fleet.
 
         :param base_capacity: The number of machines allocated to the compute fleet. Defines the number of builds that can run in parallel. Minimum value of 1.
         :param compute_type: The instance type of the compute fleet.
         :param environment_type: The build environment (operating system/architecture/accelerator) type made available to projects using this fleet.
-        :param compute_configuration: The compute configuration of the compute fleet. This is only required if ``computeType`` is set to ATTRIBUTE_BASED. Default: - do not specify compute configuration
+        :param compute_configuration: The compute configuration of the compute fleet. This is only permitted if ``computeType`` is set to ATTRIBUTE_BASED or CUSTOM_INSTANCE_TYPE. In such cases, this is required. Default: - do not specify compute configuration
         :param fleet_name: The name of the Fleet. Default: - CloudFormation generated name
+        :param overflow_behavior: The compute fleet overflow behavior. For overflow behavior ``QUEUE``, overflow builds need to wait on the existing fleet instances to become available. For overflow behavior ``ON_DEMAND``, overflow builds run on CodeBuild on-demand. Default: undefined - AWS CodeBuild default behavior is QUEUE
+        :param role: Service Role assumed by Fleet instances. This Role is not used by Project builds running on Fleet instances; Project builds assume the ``role`` on Project instead. Default: - A role will be created if any permissions are granted
+        :param security_groups: What security groups to associate with the fleet's network interfaces. If none are provided, one will be created automatically. Only used if ``vpc`` is supplied. Default: - A security group will be automatically created.
+        :param subnet_selection: Where to place the network interfaces within the VPC. To access AWS services, your fleet needs to be in one of the following types of subnets: 1. Subnets with access to the internet (of type PRIVATE_WITH_EGRESS). 2. Private subnets unconnected to the internet, but with `VPC endpoints <https://docs.aws.amazon.com/codebuild/latest/userguide/use-vpc-endpoints-with-codebuild.html>`_ for the necessary services. If you don't specify a subnet selection, the default behavior is to use PRIVATE_WITH_EGRESS subnets first if they exist, then PRIVATE_WITHOUT_EGRESS, and finally PUBLIC subnets. If your VPC doesn't have PRIVATE_WITH_EGRESS subnets but you need AWS service access, add VPC Endpoints to your private subnets. Default: - private subnets if available else public subnets
+        :param vpc: VPC network to place fleet instance network interfaces. Specify this if the fleet needs to access resources in a VPC. Default: - No VPC is specified.
 
         :exampleMetadata: infused
 
         Example::
 
-            fleet = codebuild.Fleet(self, "Fleet",
-                compute_type=codebuild.FleetComputeType.MEDIUM,
-                environment_type=codebuild.EnvironmentType.LINUX_CONTAINER,
-                base_capacity=1
-            )
+            from aws_cdk import Size
             
-            codebuild.Project(self, "Project",
-                environment=codebuild.BuildEnvironment(
-                    fleet=fleet,
-                    build_image=codebuild.LinuxBuildImage.STANDARD_7_0
+            
+            fleet = codebuild.Fleet(self, "MyFleet",
+                base_capacity=1,
+                compute_type=codebuild.FleetComputeType.CUSTOM_INSTANCE_TYPE,
+                environment_type=codebuild.EnvironmentType.LINUX_CONTAINER,
+                compute_configuration=codebuild.ComputeConfiguration(
+                    instance_type=ec2.InstanceType.of(ec2.InstanceClass.T3, ec2.InstanceSize.MEDIUM),
+                    # By default, 64 GiB of disk space is included. Any value optionally
+                    # specified here is _incremental_ on top of the included disk space.
+                    disk=Size.gibibytes(10)
                 )
             )
         '''
         if isinstance(compute_configuration, dict):
             compute_configuration = ComputeConfiguration(**compute_configuration)
+        if isinstance(subnet_selection, dict):
+            subnet_selection = _SubnetSelection_e57d76df(**subnet_selection)
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__e7911aefc20674030e6eb6a13611d08046f9412fc45f97ff43a4ecf7591a2d5d)
             check_type(argname="argument base_capacity", value=base_capacity, expected_type=type_hints["base_capacity"])
@@ -9972,6 +10668,11 @@ class FleetProps:
             check_type(argname="argument environment_type", value=environment_type, expected_type=type_hints["environment_type"])
             check_type(argname="argument compute_configuration", value=compute_configuration, expected_type=type_hints["compute_configuration"])
             check_type(argname="argument fleet_name", value=fleet_name, expected_type=type_hints["fleet_name"])
+            check_type(argname="argument overflow_behavior", value=overflow_behavior, expected_type=type_hints["overflow_behavior"])
+            check_type(argname="argument role", value=role, expected_type=type_hints["role"])
+            check_type(argname="argument security_groups", value=security_groups, expected_type=type_hints["security_groups"])
+            check_type(argname="argument subnet_selection", value=subnet_selection, expected_type=type_hints["subnet_selection"])
+            check_type(argname="argument vpc", value=vpc, expected_type=type_hints["vpc"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "base_capacity": base_capacity,
             "compute_type": compute_type,
@@ -9981,6 +10682,16 @@ class FleetProps:
             self._values["compute_configuration"] = compute_configuration
         if fleet_name is not None:
             self._values["fleet_name"] = fleet_name
+        if overflow_behavior is not None:
+            self._values["overflow_behavior"] = overflow_behavior
+        if role is not None:
+            self._values["role"] = role
+        if security_groups is not None:
+            self._values["security_groups"] = security_groups
+        if subnet_selection is not None:
+            self._values["subnet_selection"] = subnet_selection
+        if vpc is not None:
+            self._values["vpc"] = vpc
 
     @builtins.property
     def base_capacity(self) -> jsii.Number:
@@ -10013,7 +10724,8 @@ class FleetProps:
     def compute_configuration(self) -> typing.Optional[ComputeConfiguration]:
         '''The compute configuration of the compute fleet.
 
-        This is only required if ``computeType`` is set to ATTRIBUTE_BASED.
+        This is only permitted if ``computeType`` is set to ATTRIBUTE_BASED or
+        CUSTOM_INSTANCE_TYPE. In such cases, this is required.
 
         :default: - do not specify compute configuration
 
@@ -10031,6 +10743,73 @@ class FleetProps:
         result = self._values.get("fleet_name")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def overflow_behavior(self) -> typing.Optional[FleetOverflowBehavior]:
+        '''The compute fleet overflow behavior.
+
+        For overflow behavior ``QUEUE``, overflow builds need to wait on the existing fleet instances to become available.
+
+        For overflow behavior ``ON_DEMAND``, overflow builds run on CodeBuild on-demand.
+
+        :default: undefined - AWS CodeBuild default behavior is QUEUE
+        '''
+        result = self._values.get("overflow_behavior")
+        return typing.cast(typing.Optional[FleetOverflowBehavior], result)
+
+    @builtins.property
+    def role(self) -> typing.Optional[_IRole_235f5d8e]:
+        '''Service Role assumed by Fleet instances.
+
+        This Role is not used by Project builds running on Fleet instances; Project
+        builds assume the ``role`` on Project instead.
+
+        :default: - A role will be created if any permissions are granted
+        '''
+        result = self._values.get("role")
+        return typing.cast(typing.Optional[_IRole_235f5d8e], result)
+
+    @builtins.property
+    def security_groups(self) -> typing.Optional[typing.List[_ISecurityGroup_acf8a799]]:
+        '''What security groups to associate with the fleet's network interfaces. If none are provided, one will be created automatically.
+
+        Only used if ``vpc`` is supplied.
+
+        :default: - A security group will be automatically created.
+        '''
+        result = self._values.get("security_groups")
+        return typing.cast(typing.Optional[typing.List[_ISecurityGroup_acf8a799]], result)
+
+    @builtins.property
+    def subnet_selection(self) -> typing.Optional[_SubnetSelection_e57d76df]:
+        '''Where to place the network interfaces within the VPC.
+
+        To access AWS services, your fleet needs to be in one of the following types of subnets:
+
+        1. Subnets with access to the internet (of type PRIVATE_WITH_EGRESS).
+        2. Private subnets unconnected to the internet, but with `VPC endpoints <https://docs.aws.amazon.com/codebuild/latest/userguide/use-vpc-endpoints-with-codebuild.html>`_ for the necessary services.
+
+        If you don't specify a subnet selection, the default behavior is to use PRIVATE_WITH_EGRESS subnets first if they exist,
+        then PRIVATE_WITHOUT_EGRESS, and finally PUBLIC subnets. If your VPC doesn't have PRIVATE_WITH_EGRESS subnets but you need
+        AWS service access, add VPC Endpoints to your private subnets.
+
+        :default: - private subnets if available else public subnets
+
+        :see: https://docs.aws.amazon.com/codebuild/latest/userguide/vpc-support.html
+        '''
+        result = self._values.get("subnet_selection")
+        return typing.cast(typing.Optional[_SubnetSelection_e57d76df], result)
+
+    @builtins.property
+    def vpc(self) -> typing.Optional[_IVpc_f30d5663]:
+        '''VPC network to place fleet instance network interfaces.
+
+        Specify this if the fleet needs to access resources in a VPC.
+
+        :default: - No VPC is specified.
+        '''
+        result = self._values.get("vpc")
+        return typing.cast(typing.Optional[_IVpc_f30d5663], result)
+
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -10394,6 +11173,7 @@ class IBuildImage(typing_extensions.Protocol):
         build_image: typing.Optional["IBuildImage"] = None,
         certificate: typing.Optional[typing.Union[BuildEnvironmentCertificate, typing.Dict[builtins.str, typing.Any]]] = None,
         compute_type: typing.Optional[ComputeType] = None,
+        docker_server: typing.Optional[typing.Union[DockerServerOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         environment_variables: typing.Optional[typing.Mapping[builtins.str, typing.Union[BuildEnvironmentVariable, typing.Dict[builtins.str, typing.Any]]]] = None,
         fleet: typing.Optional["IFleet"] = None,
         privileged: typing.Optional[builtins.bool] = None,
@@ -10403,6 +11183,7 @@ class IBuildImage(typing_extensions.Protocol):
         :param build_image: The image used for the builds. Default: LinuxBuildImage.STANDARD_7_0
         :param certificate: The location of the PEM-encoded certificate for the build project. Default: - No external certificate is added to the project
         :param compute_type: The type of compute to use for this build. See the ``ComputeType`` enum for the possible values. Default: taken from ``#buildImage#defaultComputeType``
+        :param docker_server: The Docker server configuration CodeBuild use to build your Docker image. Default: - Doesn't use remote docker server
         :param environment_variables: The environment variables that your builds can use.
         :param fleet: Fleet resource for a reserved capacity CodeBuild project. Fleets allow for process builds or tests to run immediately and reduces build durations, by reserving compute resources for your projects. You will be charged for the resources in the fleet, even if they are idle. Default: - No fleet will be attached to the project, which will remain on-demand.
         :param privileged: Indicates how the project builds Docker images. Specify true to enable running the Docker daemon inside a Docker container. This value must be set to true only if this build project will be used to build Docker images, and the specified build environment image is not one provided by AWS CodeBuild with Docker support. Otherwise, all associated builds that attempt to interact with the Docker daemon will fail. Default: false
@@ -10485,6 +11266,7 @@ class _IBuildImageProxy:
         build_image: typing.Optional[IBuildImage] = None,
         certificate: typing.Optional[typing.Union[BuildEnvironmentCertificate, typing.Dict[builtins.str, typing.Any]]] = None,
         compute_type: typing.Optional[ComputeType] = None,
+        docker_server: typing.Optional[typing.Union[DockerServerOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         environment_variables: typing.Optional[typing.Mapping[builtins.str, typing.Union[BuildEnvironmentVariable, typing.Dict[builtins.str, typing.Any]]]] = None,
         fleet: typing.Optional["IFleet"] = None,
         privileged: typing.Optional[builtins.bool] = None,
@@ -10494,6 +11276,7 @@ class _IBuildImageProxy:
         :param build_image: The image used for the builds. Default: LinuxBuildImage.STANDARD_7_0
         :param certificate: The location of the PEM-encoded certificate for the build project. Default: - No external certificate is added to the project
         :param compute_type: The type of compute to use for this build. See the ``ComputeType`` enum for the possible values. Default: taken from ``#buildImage#defaultComputeType``
+        :param docker_server: The Docker server configuration CodeBuild use to build your Docker image. Default: - Doesn't use remote docker server
         :param environment_variables: The environment variables that your builds can use.
         :param fleet: Fleet resource for a reserved capacity CodeBuild project. Fleets allow for process builds or tests to run immediately and reduces build durations, by reserving compute resources for your projects. You will be charged for the resources in the fleet, even if they are idle. Default: - No fleet will be attached to the project, which will remain on-demand.
         :param privileged: Indicates how the project builds Docker images. Specify true to enable running the Docker daemon inside a Docker container. This value must be set to true only if this build project will be used to build Docker images, and the specified build environment image is not one provided by AWS CodeBuild with Docker support. Otherwise, all associated builds that attempt to interact with the Docker daemon will fail. Default: false
@@ -10502,6 +11285,7 @@ class _IBuildImageProxy:
             build_image=build_image,
             certificate=certificate,
             compute_type=compute_type,
+            docker_server=docker_server,
             environment_variables=environment_variables,
             fleet=fleet,
             privileged=privileged,
@@ -10564,8 +11348,13 @@ typing.cast(typing.Any, IFileSystemLocation).__jsii_proxy_class__ = lambda : _IF
 
 
 @jsii.interface(jsii_type="aws-cdk-lib.aws_codebuild.IFleet")
-class IFleet(_IResource_c80c4260, typing_extensions.Protocol):
-    '''Represents a {@link Fleet} for a reserved capacity CodeBuild project.'''
+class IFleet(
+    _IResource_c80c4260,
+    _IGrantable_71c4f5de,
+    _IConnectable_10015a05,
+    typing_extensions.Protocol,
+):
+    '''Represents a Fleet for a reserved capacity CodeBuild project.'''
 
     @builtins.property
     @jsii.member(jsii_name="computeType")
@@ -10603,8 +11392,10 @@ class IFleet(_IResource_c80c4260, typing_extensions.Protocol):
 
 class _IFleetProxy(
     jsii.proxy_for(_IResource_c80c4260), # type: ignore[misc]
+    jsii.proxy_for(_IGrantable_71c4f5de), # type: ignore[misc]
+    jsii.proxy_for(_IConnectable_10015a05), # type: ignore[misc]
 ):
-    '''Represents a {@link Fleet} for a reserved capacity CodeBuild project.'''
+    '''Represents a Fleet for a reserved capacity CodeBuild project.'''
 
     __jsii_type__: typing.ClassVar[str] = "aws-cdk-lib.aws_codebuild.IFleet"
 
@@ -10704,6 +11495,7 @@ class IProject(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -10711,12 +11503,14 @@ class IProject(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''
         :param metric_name: The name of the metric.
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -10724,6 +11518,7 @@ class IProject(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :return: a CloudWatch metric associated with this build project.
         '''
@@ -10736,6 +11531,7 @@ class IProject(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -10743,6 +11539,7 @@ class IProject(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Measures the number of builds triggered.
 
@@ -10753,6 +11550,7 @@ class IProject(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -10760,6 +11558,7 @@ class IProject(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: sum over 5 minutes
         '''
@@ -10772,6 +11571,7 @@ class IProject(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -10779,6 +11579,7 @@ class IProject(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Measures the duration of all builds over time.
 
@@ -10789,6 +11590,7 @@ class IProject(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -10796,6 +11598,7 @@ class IProject(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: average over 5 minutes
         '''
@@ -10808,6 +11611,7 @@ class IProject(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -10815,6 +11619,7 @@ class IProject(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Measures the number of builds that failed because of client error or because of a timeout.
 
@@ -10825,6 +11630,7 @@ class IProject(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -10832,6 +11638,7 @@ class IProject(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: sum over 5 minutes
         '''
@@ -10844,6 +11651,7 @@ class IProject(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -10851,6 +11659,7 @@ class IProject(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Measures the number of successful builds.
 
@@ -10861,6 +11670,7 @@ class IProject(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -10868,6 +11678,7 @@ class IProject(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: sum over 5 minutes
         '''
@@ -11168,6 +11979,7 @@ class _IProjectProxy(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -11175,12 +11987,14 @@ class _IProjectProxy(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''
         :param metric_name: The name of the metric.
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -11188,6 +12002,7 @@ class _IProjectProxy(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :return: a CloudWatch metric associated with this build project.
         '''
@@ -11198,6 +12013,7 @@ class _IProjectProxy(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -11205,6 +12021,7 @@ class _IProjectProxy(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metric", [metric_name, props]))
@@ -11216,6 +12033,7 @@ class _IProjectProxy(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -11223,6 +12041,7 @@ class _IProjectProxy(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Measures the number of builds triggered.
 
@@ -11233,6 +12052,7 @@ class _IProjectProxy(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -11240,6 +12060,7 @@ class _IProjectProxy(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: sum over 5 minutes
         '''
@@ -11247,6 +12068,7 @@ class _IProjectProxy(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -11254,6 +12076,7 @@ class _IProjectProxy(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricBuilds", [props]))
@@ -11265,6 +12088,7 @@ class _IProjectProxy(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -11272,6 +12096,7 @@ class _IProjectProxy(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Measures the duration of all builds over time.
 
@@ -11282,6 +12107,7 @@ class _IProjectProxy(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -11289,6 +12115,7 @@ class _IProjectProxy(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: average over 5 minutes
         '''
@@ -11296,6 +12123,7 @@ class _IProjectProxy(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -11303,6 +12131,7 @@ class _IProjectProxy(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricDuration", [props]))
@@ -11314,6 +12143,7 @@ class _IProjectProxy(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -11321,6 +12151,7 @@ class _IProjectProxy(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Measures the number of builds that failed because of client error or because of a timeout.
 
@@ -11331,6 +12162,7 @@ class _IProjectProxy(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -11338,6 +12170,7 @@ class _IProjectProxy(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: sum over 5 minutes
         '''
@@ -11345,6 +12178,7 @@ class _IProjectProxy(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -11352,6 +12186,7 @@ class _IProjectProxy(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricFailedBuilds", [props]))
@@ -11363,6 +12198,7 @@ class _IProjectProxy(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -11370,6 +12206,7 @@ class _IProjectProxy(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Measures the number of successful builds.
 
@@ -11380,6 +12217,7 @@ class _IProjectProxy(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -11387,6 +12225,7 @@ class _IProjectProxy(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: sum over 5 minutes
         '''
@@ -11394,6 +12233,7 @@ class _IProjectProxy(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -11401,6 +12241,7 @@ class _IProjectProxy(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricSucceededBuilds", [props]))
@@ -12020,6 +12861,7 @@ class LinuxArmBuildImage(
         build_image: typing.Optional[IBuildImage] = None,
         certificate: typing.Optional[typing.Union[BuildEnvironmentCertificate, typing.Dict[builtins.str, typing.Any]]] = None,
         compute_type: typing.Optional[ComputeType] = None,
+        docker_server: typing.Optional[typing.Union[DockerServerOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         environment_variables: typing.Optional[typing.Mapping[builtins.str, typing.Union[BuildEnvironmentVariable, typing.Dict[builtins.str, typing.Any]]]] = None,
         fleet: typing.Optional[IFleet] = None,
         privileged: typing.Optional[builtins.bool] = None,
@@ -12029,6 +12871,7 @@ class LinuxArmBuildImage(
         :param build_image: The image used for the builds. Default: LinuxBuildImage.STANDARD_7_0
         :param certificate: The location of the PEM-encoded certificate for the build project. Default: - No external certificate is added to the project
         :param compute_type: The type of compute to use for this build. See the ``ComputeType`` enum for the possible values. Default: taken from ``#buildImage#defaultComputeType``
+        :param docker_server: The Docker server configuration CodeBuild use to build your Docker image. Default: - Doesn't use remote docker server
         :param environment_variables: The environment variables that your builds can use.
         :param fleet: Fleet resource for a reserved capacity CodeBuild project. Fleets allow for process builds or tests to run immediately and reduces build durations, by reserving compute resources for your projects. You will be charged for the resources in the fleet, even if they are idle. Default: - No fleet will be attached to the project, which will remain on-demand.
         :param privileged: Indicates how the project builds Docker images. Specify true to enable running the Docker daemon inside a Docker container. This value must be set to true only if this build project will be used to build Docker images, and the specified build environment image is not one provided by AWS CodeBuild with Docker support. Otherwise, all associated builds that attempt to interact with the Docker daemon will fail. Default: false
@@ -12037,6 +12880,7 @@ class LinuxArmBuildImage(
             build_image=build_image,
             certificate=certificate,
             compute_type=compute_type,
+            docker_server=docker_server,
             environment_variables=environment_variables,
             fleet=fleet,
             privileged=privileged,
@@ -12155,6 +12999,7 @@ class LinuxArmLambdaBuildImage(
         build_image: typing.Optional[IBuildImage] = None,
         certificate: typing.Optional[typing.Union[BuildEnvironmentCertificate, typing.Dict[builtins.str, typing.Any]]] = None,
         compute_type: typing.Optional[ComputeType] = None,
+        docker_server: typing.Optional[typing.Union[DockerServerOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         environment_variables: typing.Optional[typing.Mapping[builtins.str, typing.Union[BuildEnvironmentVariable, typing.Dict[builtins.str, typing.Any]]]] = None,
         fleet: typing.Optional[IFleet] = None,
         privileged: typing.Optional[builtins.bool] = None,
@@ -12164,6 +13009,7 @@ class LinuxArmLambdaBuildImage(
         :param build_image: The image used for the builds. Default: LinuxBuildImage.STANDARD_7_0
         :param certificate: The location of the PEM-encoded certificate for the build project. Default: - No external certificate is added to the project
         :param compute_type: The type of compute to use for this build. See the ``ComputeType`` enum for the possible values. Default: taken from ``#buildImage#defaultComputeType``
+        :param docker_server: The Docker server configuration CodeBuild use to build your Docker image. Default: - Doesn't use remote docker server
         :param environment_variables: The environment variables that your builds can use.
         :param fleet: Fleet resource for a reserved capacity CodeBuild project. Fleets allow for process builds or tests to run immediately and reduces build durations, by reserving compute resources for your projects. You will be charged for the resources in the fleet, even if they are idle. Default: - No fleet will be attached to the project, which will remain on-demand.
         :param privileged: Indicates how the project builds Docker images. Specify true to enable running the Docker daemon inside a Docker container. This value must be set to true only if this build project will be used to build Docker images, and the specified build environment image is not one provided by AWS CodeBuild with Docker support. Otherwise, all associated builds that attempt to interact with the Docker daemon will fail. Default: false
@@ -12172,6 +13018,7 @@ class LinuxArmLambdaBuildImage(
             build_image=build_image,
             certificate=certificate,
             compute_type=compute_type,
+            docker_server=docker_server,
             environment_variables=environment_variables,
             fleet=fleet,
             privileged=privileged,
@@ -12502,6 +13349,7 @@ class LinuxBuildImage(
         build_image: typing.Optional[IBuildImage] = None,
         certificate: typing.Optional[typing.Union[BuildEnvironmentCertificate, typing.Dict[builtins.str, typing.Any]]] = None,
         compute_type: typing.Optional[ComputeType] = None,
+        docker_server: typing.Optional[typing.Union[DockerServerOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         environment_variables: typing.Optional[typing.Mapping[builtins.str, typing.Union[BuildEnvironmentVariable, typing.Dict[builtins.str, typing.Any]]]] = None,
         fleet: typing.Optional[IFleet] = None,
         privileged: typing.Optional[builtins.bool] = None,
@@ -12511,6 +13359,7 @@ class LinuxBuildImage(
         :param build_image: The image used for the builds. Default: LinuxBuildImage.STANDARD_7_0
         :param certificate: The location of the PEM-encoded certificate for the build project. Default: - No external certificate is added to the project
         :param compute_type: The type of compute to use for this build. See the ``ComputeType`` enum for the possible values. Default: taken from ``#buildImage#defaultComputeType``
+        :param docker_server: The Docker server configuration CodeBuild use to build your Docker image. Default: - Doesn't use remote docker server
         :param environment_variables: The environment variables that your builds can use.
         :param fleet: Fleet resource for a reserved capacity CodeBuild project. Fleets allow for process builds or tests to run immediately and reduces build durations, by reserving compute resources for your projects. You will be charged for the resources in the fleet, even if they are idle. Default: - No fleet will be attached to the project, which will remain on-demand.
         :param privileged: Indicates how the project builds Docker images. Specify true to enable running the Docker daemon inside a Docker container. This value must be set to true only if this build project will be used to build Docker images, and the specified build environment image is not one provided by AWS CodeBuild with Docker support. Otherwise, all associated builds that attempt to interact with the Docker daemon will fail. Default: false
@@ -12519,6 +13368,7 @@ class LinuxBuildImage(
             build_image=build_image,
             certificate=certificate,
             compute_type=compute_type,
+            docker_server=docker_server,
             environment_variables=environment_variables,
             fleet=fleet,
             privileged=privileged,
@@ -12770,6 +13620,7 @@ class LinuxLambdaBuildImage(
         build_image: typing.Optional[IBuildImage] = None,
         certificate: typing.Optional[typing.Union[BuildEnvironmentCertificate, typing.Dict[builtins.str, typing.Any]]] = None,
         compute_type: typing.Optional[ComputeType] = None,
+        docker_server: typing.Optional[typing.Union[DockerServerOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         environment_variables: typing.Optional[typing.Mapping[builtins.str, typing.Union[BuildEnvironmentVariable, typing.Dict[builtins.str, typing.Any]]]] = None,
         fleet: typing.Optional[IFleet] = None,
         privileged: typing.Optional[builtins.bool] = None,
@@ -12779,6 +13630,7 @@ class LinuxLambdaBuildImage(
         :param build_image: The image used for the builds. Default: LinuxBuildImage.STANDARD_7_0
         :param certificate: The location of the PEM-encoded certificate for the build project. Default: - No external certificate is added to the project
         :param compute_type: The type of compute to use for this build. See the ``ComputeType`` enum for the possible values. Default: taken from ``#buildImage#defaultComputeType``
+        :param docker_server: The Docker server configuration CodeBuild use to build your Docker image. Default: - Doesn't use remote docker server
         :param environment_variables: The environment variables that your builds can use.
         :param fleet: Fleet resource for a reserved capacity CodeBuild project. Fleets allow for process builds or tests to run immediately and reduces build durations, by reserving compute resources for your projects. You will be charged for the resources in the fleet, even if they are idle. Default: - No fleet will be attached to the project, which will remain on-demand.
         :param privileged: Indicates how the project builds Docker images. Specify true to enable running the Docker daemon inside a Docker container. This value must be set to true only if this build project will be used to build Docker images, and the specified build environment image is not one provided by AWS CodeBuild with Docker support. Otherwise, all associated builds that attempt to interact with the Docker daemon will fail. Default: false
@@ -12787,6 +13639,7 @@ class LinuxLambdaBuildImage(
             build_image=build_image,
             certificate=certificate,
             compute_type=compute_type,
+            docker_server=docker_server,
             environment_variables=environment_variables,
             fleet=fleet,
             privileged=privileged,
@@ -13239,6 +14092,7 @@ class MacBuildImage(
         build_image: typing.Optional[IBuildImage] = None,
         certificate: typing.Optional[typing.Union[BuildEnvironmentCertificate, typing.Dict[builtins.str, typing.Any]]] = None,
         compute_type: typing.Optional[ComputeType] = None,
+        docker_server: typing.Optional[typing.Union[DockerServerOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         environment_variables: typing.Optional[typing.Mapping[builtins.str, typing.Union[BuildEnvironmentVariable, typing.Dict[builtins.str, typing.Any]]]] = None,
         fleet: typing.Optional[IFleet] = None,
         privileged: typing.Optional[builtins.bool] = None,
@@ -13248,6 +14102,7 @@ class MacBuildImage(
         :param build_image: The image used for the builds. Default: LinuxBuildImage.STANDARD_7_0
         :param certificate: The location of the PEM-encoded certificate for the build project. Default: - No external certificate is added to the project
         :param compute_type: The type of compute to use for this build. See the ``ComputeType`` enum for the possible values. Default: taken from ``#buildImage#defaultComputeType``
+        :param docker_server: The Docker server configuration CodeBuild use to build your Docker image. Default: - Doesn't use remote docker server
         :param environment_variables: The environment variables that your builds can use.
         :param fleet: Fleet resource for a reserved capacity CodeBuild project. Fleets allow for process builds or tests to run immediately and reduces build durations, by reserving compute resources for your projects. You will be charged for the resources in the fleet, even if they are idle. Default: - No fleet will be attached to the project, which will remain on-demand.
         :param privileged: Indicates how the project builds Docker images. Specify true to enable running the Docker daemon inside a Docker container. This value must be set to true only if this build project will be used to build Docker images, and the specified build environment image is not one provided by AWS CodeBuild with Docker support. Otherwise, all associated builds that attempt to interact with the Docker daemon will fail. Default: false
@@ -13256,6 +14111,7 @@ class MacBuildImage(
             build_image=build_image,
             certificate=certificate,
             compute_type=compute_type,
+            docker_server=docker_server,
             environment_variables=environment_variables,
             fleet=fleet,
             privileged=privileged,
@@ -14193,6 +15049,7 @@ class Project(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -14200,12 +15057,14 @@ class Project(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''
         :param metric_name: The name of the metric.
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -14213,6 +15072,7 @@ class Project(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :return: a CloudWatch metric associated with this build project.
         '''
@@ -14223,6 +15083,7 @@ class Project(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -14230,6 +15091,7 @@ class Project(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metric", [metric_name, props]))
@@ -14241,6 +15103,7 @@ class Project(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -14248,6 +15111,7 @@ class Project(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Measures the number of builds triggered.
 
@@ -14258,6 +15122,7 @@ class Project(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -14265,6 +15130,7 @@ class Project(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: sum over 5 minutes
         '''
@@ -14272,6 +15138,7 @@ class Project(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -14279,6 +15146,7 @@ class Project(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricBuilds", [props]))
@@ -14290,6 +15158,7 @@ class Project(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -14297,6 +15166,7 @@ class Project(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Measures the duration of all builds over time.
 
@@ -14307,6 +15177,7 @@ class Project(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -14314,6 +15185,7 @@ class Project(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: average over 5 minutes
         '''
@@ -14321,6 +15193,7 @@ class Project(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -14328,6 +15201,7 @@ class Project(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricDuration", [props]))
@@ -14339,6 +15213,7 @@ class Project(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -14346,6 +15221,7 @@ class Project(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Measures the number of builds that failed because of client error or because of a timeout.
 
@@ -14356,6 +15232,7 @@ class Project(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -14363,6 +15240,7 @@ class Project(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: sum over 5 minutes
         '''
@@ -14370,6 +15248,7 @@ class Project(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -14377,6 +15256,7 @@ class Project(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricFailedBuilds", [props]))
@@ -14388,6 +15268,7 @@ class Project(
         account: typing.Optional[builtins.str] = None,
         color: typing.Optional[builtins.str] = None,
         dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        id: typing.Optional[builtins.str] = None,
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
@@ -14395,6 +15276,7 @@ class Project(
         stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
+        visible: typing.Optional[builtins.bool] = None,
     ) -> _Metric_e396a4dc:
         '''Measures the number of successful builds.
 
@@ -14405,6 +15287,7 @@ class Project(
         :param account: Account which this metric comes from. Default: - Deployment account.
         :param color: The hex color code, prefixed with '#' (e.g. '#00ff00'), to use when this metric is rendered on a graph. The ``Color`` class has a set of standard colors that can be used here. Default: - Automatic color
         :param dimensions_map: Dimensions of the metric. Default: - No dimensions.
+        :param id: Unique identifier for this metric when used in dashboard widgets. The id can be used as a variable to represent this metric in math expressions. Valid characters are letters, numbers, and underscore. The first character must be a lowercase letter. Default: - No ID
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
@@ -14412,6 +15295,7 @@ class Project(
         :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
+        :param visible: Whether this metric should be visible in dashboard graphs. Setting this to false is useful when you want to hide raw metrics that are used in math expressions, and show only the expression results. Default: true
 
         :default: sum over 5 minutes
         '''
@@ -14419,6 +15303,7 @@ class Project(
             account=account,
             color=color,
             dimensions_map=dimensions_map,
+            id=id,
             label=label,
             period=period,
             region=region,
@@ -14426,6 +15311,7 @@ class Project(
             stack_region=stack_region,
             statistic=statistic,
             unit=unit,
+            visible=visible,
         )
 
         return typing.cast(_Metric_e396a4dc, jsii.invoke(self, "metricSucceededBuilds", [props]))
@@ -16127,12 +17013,31 @@ class Source(
 
     Example::
 
-        project = codebuild.Project(self, "MyProject",
-            build_spec=codebuild.BuildSpec.from_source_filename("my-buildspec.yml"),
-            source=codebuild.Source.git_hub(
+        # my_caching_bucket: s3.Bucket
+        
+        
+        codebuild.Project(self, "Project",
+            source=codebuild.Source.bit_bucket(
                 owner="awslabs",
                 repo="aws-cdk"
-            )
+            ),
+        
+            cache=codebuild.Cache.bucket(my_caching_bucket),
+        
+            # BuildSpec with a 'cache' section necessary for S3 caching. This can
+            # also come from 'buildspec.yml' in your source.
+            build_spec=codebuild.BuildSpec.from_object({
+                "version": "0.2",
+                "phases": {
+                    "build": {
+                        "commands": ["..."]
+                    }
+                },
+                "cache": {
+                    "paths": ["/root/cachedir/**/*"
+                    ]
+                }
+            })
         )
     '''
 
@@ -16455,6 +17360,12 @@ class SourceConfig:
                         # the properties below are optional
                         exclude_matched_pattern=False
                     )]],
+                    pull_request_build_policy=codebuild.CfnProject.PullRequestBuildPolicyProperty(
+                        requires_comment_approval="requiresCommentApproval",
+            
+                        # the properties below are optional
+                        approver_roles=["approverRoles"]
+                    ),
                     scope_configuration=codebuild.CfnProject.ScopeConfigurationProperty(
                         name="name",
             
@@ -16868,6 +17779,7 @@ class WindowsBuildImage(
         build_image: typing.Optional[IBuildImage] = None,
         certificate: typing.Optional[typing.Union[BuildEnvironmentCertificate, typing.Dict[builtins.str, typing.Any]]] = None,
         compute_type: typing.Optional[ComputeType] = None,
+        docker_server: typing.Optional[typing.Union[DockerServerOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         environment_variables: typing.Optional[typing.Mapping[builtins.str, typing.Union[BuildEnvironmentVariable, typing.Dict[builtins.str, typing.Any]]]] = None,
         fleet: typing.Optional[IFleet] = None,
         privileged: typing.Optional[builtins.bool] = None,
@@ -16877,6 +17789,7 @@ class WindowsBuildImage(
         :param build_image: The image used for the builds. Default: LinuxBuildImage.STANDARD_7_0
         :param certificate: The location of the PEM-encoded certificate for the build project. Default: - No external certificate is added to the project
         :param compute_type: The type of compute to use for this build. See the ``ComputeType`` enum for the possible values. Default: taken from ``#buildImage#defaultComputeType``
+        :param docker_server: The Docker server configuration CodeBuild use to build your Docker image. Default: - Doesn't use remote docker server
         :param environment_variables: The environment variables that your builds can use.
         :param fleet: Fleet resource for a reserved capacity CodeBuild project. Fleets allow for process builds or tests to run immediately and reduces build durations, by reserving compute resources for your projects. You will be charged for the resources in the fleet, even if they are idle. Default: - No fleet will be attached to the project, which will remain on-demand.
         :param privileged: Indicates how the project builds Docker images. Specify true to enable running the Docker daemon inside a Docker container. This value must be set to true only if this build project will be used to build Docker images, and the specified build environment image is not one provided by AWS CodeBuild with Docker support. Otherwise, all associated builds that attempt to interact with the Docker daemon will fail. Default: false
@@ -16885,6 +17798,7 @@ class WindowsBuildImage(
             build_image=build_image,
             certificate=certificate,
             compute_type=compute_type,
+            docker_server=docker_server,
             environment_variables=environment_variables,
             fleet=fleet,
             privileged=privileged,
@@ -17547,6 +18461,11 @@ class Fleet(
         environment_type: EnvironmentType,
         compute_configuration: typing.Optional[typing.Union[ComputeConfiguration, typing.Dict[builtins.str, typing.Any]]] = None,
         fleet_name: typing.Optional[builtins.str] = None,
+        overflow_behavior: typing.Optional[FleetOverflowBehavior] = None,
+        role: typing.Optional[_IRole_235f5d8e] = None,
+        security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
+        subnet_selection: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
+        vpc: typing.Optional[_IVpc_f30d5663] = None,
     ) -> None:
         '''
         :param scope: -
@@ -17554,8 +18473,13 @@ class Fleet(
         :param base_capacity: The number of machines allocated to the compute fleet. Defines the number of builds that can run in parallel. Minimum value of 1.
         :param compute_type: The instance type of the compute fleet.
         :param environment_type: The build environment (operating system/architecture/accelerator) type made available to projects using this fleet.
-        :param compute_configuration: The compute configuration of the compute fleet. This is only required if ``computeType`` is set to ATTRIBUTE_BASED. Default: - do not specify compute configuration
+        :param compute_configuration: The compute configuration of the compute fleet. This is only permitted if ``computeType`` is set to ATTRIBUTE_BASED or CUSTOM_INSTANCE_TYPE. In such cases, this is required. Default: - do not specify compute configuration
         :param fleet_name: The name of the Fleet. Default: - CloudFormation generated name
+        :param overflow_behavior: The compute fleet overflow behavior. For overflow behavior ``QUEUE``, overflow builds need to wait on the existing fleet instances to become available. For overflow behavior ``ON_DEMAND``, overflow builds run on CodeBuild on-demand. Default: undefined - AWS CodeBuild default behavior is QUEUE
+        :param role: Service Role assumed by Fleet instances. This Role is not used by Project builds running on Fleet instances; Project builds assume the ``role`` on Project instead. Default: - A role will be created if any permissions are granted
+        :param security_groups: What security groups to associate with the fleet's network interfaces. If none are provided, one will be created automatically. Only used if ``vpc`` is supplied. Default: - A security group will be automatically created.
+        :param subnet_selection: Where to place the network interfaces within the VPC. To access AWS services, your fleet needs to be in one of the following types of subnets: 1. Subnets with access to the internet (of type PRIVATE_WITH_EGRESS). 2. Private subnets unconnected to the internet, but with `VPC endpoints <https://docs.aws.amazon.com/codebuild/latest/userguide/use-vpc-endpoints-with-codebuild.html>`_ for the necessary services. If you don't specify a subnet selection, the default behavior is to use PRIVATE_WITH_EGRESS subnets first if they exist, then PRIVATE_WITHOUT_EGRESS, and finally PUBLIC subnets. If your VPC doesn't have PRIVATE_WITH_EGRESS subnets but you need AWS service access, add VPC Endpoints to your private subnets. Default: - private subnets if available else public subnets
+        :param vpc: VPC network to place fleet instance network interfaces. Specify this if the fleet needs to access resources in a VPC. Default: - No VPC is specified.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__68e9f035c12fa2c35bc62bc8d306e3651814bea9f53875aeea43b85f6612b957)
@@ -17567,6 +18491,11 @@ class Fleet(
             environment_type=environment_type,
             compute_configuration=compute_configuration,
             fleet_name=fleet_name,
+            overflow_behavior=overflow_behavior,
+            role=role,
+            security_groups=security_groups,
+            subnet_selection=subnet_selection,
+            vpc=vpc,
         )
 
         jsii.create(self.__class__, self, [scope, id, props])
@@ -17607,6 +18536,12 @@ class Fleet(
         '''
         return typing.cast(FleetComputeType, jsii.get(self, "computeType"))
 
+    @builtins.property
+    @jsii.member(jsii_name="connections")
+    def connections(self) -> _Connections_0f31fce8:
+        '''The network connections associated with this Fleet's security group(s) in the configured VPC.'''
+        return typing.cast(_Connections_0f31fce8, jsii.get(self, "connections"))
+
     @builtins.property
     @jsii.member(jsii_name="environmentType")
     def environment_type(self) -> EnvironmentType:
@@ -17625,6 +18560,12 @@ class Fleet(
         '''The name of the fleet.'''
         return typing.cast(builtins.str, jsii.get(self, "fleetName"))
 
+    @builtins.property
+    @jsii.member(jsii_name="grantPrincipal")
+    def grant_principal(self) -> _IPrincipal_539bb2fd:
+        '''The grant principal for this Fleet's service role.'''
+        return typing.cast(_IPrincipal_539bb2fd, jsii.get(self, "grantPrincipal"))
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_codebuild.GitHubEnterpriseSourceProps",
@@ -18297,6 +19238,7 @@ class LinuxGpuBuildImage(
         build_image: typing.Optional[IBuildImage] = None,
         certificate: typing.Optional[typing.Union[BuildEnvironmentCertificate, typing.Dict[builtins.str, typing.Any]]] = None,
         compute_type: typing.Optional[ComputeType] = None,
+        docker_server: typing.Optional[typing.Union[DockerServerOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         environment_variables: typing.Optional[typing.Mapping[builtins.str, typing.Union[BuildEnvironmentVariable, typing.Dict[builtins.str, typing.Any]]]] = None,
         fleet: typing.Optional[IFleet] = None,
         privileged: typing.Optional[builtins.bool] = None,
@@ -18306,6 +19248,7 @@ class LinuxGpuBuildImage(
         :param build_image: The image used for the builds. Default: LinuxBuildImage.STANDARD_7_0
         :param certificate: The location of the PEM-encoded certificate for the build project. Default: - No external certificate is added to the project
         :param compute_type: The type of compute to use for this build. See the ``ComputeType`` enum for the possible values. Default: taken from ``#buildImage#defaultComputeType``
+        :param docker_server: The Docker server configuration CodeBuild use to build your Docker image. Default: - Doesn't use remote docker server
         :param environment_variables: The environment variables that your builds can use.
         :param fleet: Fleet resource for a reserved capacity CodeBuild project. Fleets allow for process builds or tests to run immediately and reduces build durations, by reserving compute resources for your projects. You will be charged for the resources in the fleet, even if they are idle. Default: - No fleet will be attached to the project, which will remain on-demand.
         :param privileged: Indicates how the project builds Docker images. Specify true to enable running the Docker daemon inside a Docker container. This value must be set to true only if this build project will be used to build Docker images, and the specified build environment image is not one provided by AWS CodeBuild with Docker support. Otherwise, all associated builds that attempt to interact with the Docker daemon will fail. Default: false
@@ -18314,6 +19257,7 @@ class LinuxGpuBuildImage(
             build_image=build_image,
             certificate=certificate,
             compute_type=compute_type,
+            docker_server=docker_server,
             environment_variables=environment_variables,
             fleet=fleet,
             privileged=privileged,
@@ -18736,6 +19680,8 @@ __all__ = [
     "ComputeConfiguration",
     "ComputeType",
     "DockerImageOptions",
+    "DockerServerComputeType",
+    "DockerServerOptions",
     "EfsFileSystemLocationProps",
     "EnvironmentType",
     "EventAction",
@@ -18744,6 +19690,7 @@ __all__ = [
     "FilterGroup",
     "Fleet",
     "FleetComputeType",
+    "FleetOverflowBehavior",
     "FleetProps",
     "GitHubEnterpriseSourceCredentials",
     "GitHubEnterpriseSourceCredentialsProps",
@@ -18843,6 +19790,7 @@ def _typecheckingstub__ebef68770fb5be7ec641650b4d069caf22f7652724d683d64610af210
 
 def _typecheckingstub__0964d02b7c6a99cc65ab53a8ae83bdb47d0901ee8a6f094b815d479e0fd8cb10(
     *,
+    cache_namespace: typing.Optional[builtins.str] = None,
     prefix: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
@@ -18853,6 +19801,7 @@ def _typecheckingstub__ba89ab1467720a2862905a012ed6b6da7a2294a6ebfc22557f6a64dce
     build_image: typing.Optional[IBuildImage] = None,
     certificate: typing.Optional[typing.Union[BuildEnvironmentCertificate, typing.Dict[builtins.str, typing.Any]]] = None,
     compute_type: typing.Optional[ComputeType] = None,
+    docker_server: typing.Optional[typing.Union[DockerServerOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     environment_variables: typing.Optional[typing.Mapping[builtins.str, typing.Union[BuildEnvironmentVariable, typing.Dict[builtins.str, typing.Any]]]] = None,
     fleet: typing.Optional[IFleet] = None,
     privileged: typing.Optional[builtins.bool] = None,
@@ -18909,6 +19858,7 @@ def _typecheckingstub__4da3d788faa6a5e8ccf7b7a0f950b8fdc88fa2e5bd876f8b662b8fce2
 def _typecheckingstub__17e53da7d0dcdb63a4024e7a2681ef7faa68be13f710db0f237c0a06196e2279(
     bucket: _IBucket_42e086fd,
     *,
+    cache_namespace: typing.Optional[builtins.str] = None,
     prefix: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
@@ -19430,12 +20380,21 @@ def _typecheckingstub__d2709928946ab49717544a38f5b4471ef55c9bf0ed8e39f24de9210b8
     *,
     build_type: typing.Optional[builtins.str] = None,
     filter_groups: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnProject.WebhookFilterProperty, typing.Dict[builtins.str, typing.Any]]]]]]]] = None,
+    pull_request_build_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnProject.PullRequestBuildPolicyProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     scope_configuration: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnProject.ScopeConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     webhook: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
 ) -> None:
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__dc1eee42ab44fe674f81f814cf0b3916fe0be36f2eb0f8f6b963c3bbd44441fd(
+    *,
+    requires_comment_approval: builtins.str,
+    approver_roles: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__34506e4fd8833ff5e97909e986461de67b898a74b028bcfb34d1d8c370d767a9(
     *,
     credential: builtins.str,
@@ -19720,6 +20679,7 @@ def _typecheckingstub__45bdedf6c9b38dcb0797768fa0fdec382e282ebd8679405f7dd9df6cb
 def _typecheckingstub__b104977b55c72c0577553444ac08838cdefde5acef91d6c00ad996d1c464b61b(
     *,
     disk: typing.Optional[_Size_7b441c34] = None,
+    instance_type: typing.Optional[_InstanceType_f64915b9] = None,
     machine_type: typing.Optional[MachineType] = None,
     memory: typing.Optional[_Size_7b441c34] = None,
     v_cpu: typing.Optional[jsii.Number] = None,
@@ -19734,6 +20694,14 @@ def _typecheckingstub__a9bdff78eb0c7b03d745a4a031a5cd7fe7b54a46e7733dc247bae3735
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__8bccff12ec36edc5d021d9eb1ffae1d3988acc0341d9bddf9be2fd3bbff8e402(
+    *,
+    compute_type: DockerServerComputeType,
+    security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__5e31ab4d2021a08b378a108a4cf8be7380dc920a7da37c6f6661a0becb8b4190(
     *,
     identifier: builtins.str,
@@ -19872,6 +20840,11 @@ def _typecheckingstub__e7911aefc20674030e6eb6a13611d08046f9412fc45f97ff43a4ecf75
     environment_type: EnvironmentType,
     compute_configuration: typing.Optional[typing.Union[ComputeConfiguration, typing.Dict[builtins.str, typing.Any]]] = None,
     fleet_name: typing.Optional[builtins.str] = None,
+    overflow_behavior: typing.Optional[FleetOverflowBehavior] = None,
+    role: typing.Optional[_IRole_235f5d8e] = None,
+    security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
+    subnet_selection: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
+    vpc: typing.Optional[_IVpc_f30d5663] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -19940,6 +20913,7 @@ def _typecheckingstub__4f7884de76ff7cb0ba58cc48d1d7bc265a2e8da34c1f3bde4ea5a96e3
     account: typing.Optional[builtins.str] = None,
     color: typing.Optional[builtins.str] = None,
     dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    id: typing.Optional[builtins.str] = None,
     label: typing.Optional[builtins.str] = None,
     period: typing.Optional[_Duration_4839e8c3] = None,
     region: typing.Optional[builtins.str] = None,
@@ -19947,6 +20921,7 @@ def _typecheckingstub__4f7884de76ff7cb0ba58cc48d1d7bc265a2e8da34c1f3bde4ea5a96e3
     stack_region: typing.Optional[builtins.str] = None,
     statistic: typing.Optional[builtins.str] = None,
     unit: typing.Optional[_Unit_61bc6f70] = None,
+    visible: typing.Optional[builtins.bool] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -20354,6 +21329,7 @@ def _typecheckingstub__685fd8fff031c8a93196b514789bd4f8ac1a27018ed911a6883d21b80
     account: typing.Optional[builtins.str] = None,
     color: typing.Optional[builtins.str] = None,
     dimensions_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    id: typing.Optional[builtins.str] = None,
     label: typing.Optional[builtins.str] = None,
     period: typing.Optional[_Duration_4839e8c3] = None,
     region: typing.Optional[builtins.str] = None,
@@ -20361,6 +21337,7 @@ def _typecheckingstub__685fd8fff031c8a93196b514789bd4f8ac1a27018ed911a6883d21b80
     stack_region: typing.Optional[builtins.str] = None,
     statistic: typing.Optional[builtins.str] = None,
     unit: typing.Optional[_Unit_61bc6f70] = None,
+    visible: typing.Optional[builtins.bool] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -20698,6 +21675,11 @@ def _typecheckingstub__68e9f035c12fa2c35bc62bc8d306e3651814bea9f53875aeea43b85f6
     environment_type: EnvironmentType,
     compute_configuration: typing.Optional[typing.Union[ComputeConfiguration, typing.Dict[builtins.str, typing.Any]]] = None,
     fleet_name: typing.Optional[builtins.str] = None,
+    overflow_behavior: typing.Optional[FleetOverflowBehavior] = None,
+    role: typing.Optional[_IRole_235f5d8e] = None,
+    security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
+    subnet_selection: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
+    vpc: typing.Optional[_IVpc_f30d5663] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -20821,3 +21803,6 @@ def _typecheckingstub__46c4f8162c8c90fb4a8d6f2f387d760a9758070e5641bccf8adf015eb
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IArtifacts, IBindableBuildImage, IBuildImage, IFileSystemLocation, IFleet, IProject, IReportGroup, ISource]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])