diff --git a/packages/@aws-cdk/aws-codebuild/README.md b/packages/@aws-cdk/aws-codebuild/README.md
index d4b31c1bf91db..ff73599bca8e4 100644
--- a/packages/@aws-cdk/aws-codebuild/README.md
+++ b/packages/@aws-cdk/aws-codebuild/README.md
@@ -30,7 +30,7 @@ $ npm i @aws-cdk/aws-codebuild
 
 Import it into your code:
 
-```ts
+```ts nofixture
 import * as codebuild from '@aws-cdk/aws-codebuild';
 ```
 
@@ -56,7 +56,6 @@ CodeBuild!`:
 Use an AWS CodeCommit repository as the source of this build:
 
 ```ts
-import * as codebuild from '@aws-cdk/aws-codebuild';
 import * as codecommit from '@aws-cdk/aws-codecommit';
 
 const repository = new codecommit.Repository(this, 'MyRepo', { repositoryName: 'foo' });
@@ -70,10 +69,8 @@ new codebuild.Project(this, 'MyFirstCodeCommitProject', {
 Create a CodeBuild project with an S3 bucket as the source:
 
 ```ts
-import * as codebuild from '@aws-cdk/aws-codebuild';
-import * as s3 from '@aws-cdk/aws-s3';
-
 const bucket = new s3.Bucket(this, 'MyBucket');
+
 new codebuild.Project(this, 'MyProject', {
   source: codebuild.Source.s3({
     bucket: bucket,
@@ -140,7 +137,9 @@ const gitHubSource = codebuild.Source.gitHub({
 CodeBuild Projects can produce Artifacts and upload them to S3. For example:
 
 ```ts
-const project = codebuild.Project(stack, 'MyProject', {
+declare const bucket: s3.Bucket;
+
+const project = new codebuild.Project(this, 'MyProject', {
   buildSpec: codebuild.BuildSpec.fromObject({
     version: '0.2',
   }),
@@ -193,7 +192,7 @@ new codebuild.Project(this, 'Project', {
     owner: 'awslabs',
     repo: 'aws-cdk',
   }),
-  cache: codebuild.Cache.bucket(new Bucket(this, 'Bucket'))
+  cache: codebuild.Cache.bucket(new s3.Bucket(this, 'Bucket'))
 });
 ```
 
@@ -214,7 +213,7 @@ new codebuild.Project(this, 'Project', {
   }),
 
   // Enable Docker AND custom caching
-  cache: codebuild.Cache.local(LocalCacheMode.DOCKER_LAYER, LocalCacheMode.CUSTOM)
+  cache: codebuild.Cache.local(codebuild.LocalCacheMode.DOCKER_LAYER, codebuild.LocalCacheMode.CUSTOM)
 });
 ```
 
@@ -260,6 +259,8 @@ Note that the `WindowsBuildImage` version of the static methods accepts an optio
 which can be either `WindowsImageType.STANDARD`, the default, or `WindowsImageType.SERVER_2019`:
 
 ```ts
+declare const ecrRepository: ecr.Repository;
+
 new codebuild.Project(this, 'Project', {
   environment: {
     buildImage: codebuild.WindowsBuildImage.fromEcrRepository(ecrRepository, 'v1.0', codebuild.WindowsImageType.SERVER_2019),
@@ -269,7 +270,7 @@ new codebuild.Project(this, 'Project', {
       objectKey: 'path/to/cert.pem',
     },
   },
-  ...
+  // ...
 })
 ```
 
@@ -296,7 +297,7 @@ new codebuild.Project(this, 'Project', {
   environment: {
     buildImage: codebuild.LinuxGpuBuildImage.DLC_TENSORFLOW_2_1_0_INFERENCE,
   },
-  ...
+  // ...
 })
 ```
 
@@ -315,7 +316,7 @@ new codebuild.Project(this, 'Project', {
     buildImage: codebuild.LinuxGpuBuildImage.awsDeepLearningContainersImage(
       'tensorflow-inference', '2.1.0-gpu-py36-cu101-ubuntu18.04', '123456789012'),
   },
-  ...
+  // ...
 })
 ```
 
@@ -331,10 +332,9 @@ By default, logs will go to cloudwatch.
 new codebuild.Project(this, 'Project', {
   logging: {
     cloudWatch: {
-      logGroup: new cloudwatch.LogGroup(this, `MyLogGroup`),
+      logGroup: new logs.LogGroup(this, `MyLogGroup`),
     }
   },
-  ...
 })
 ```
 
@@ -347,7 +347,6 @@ new codebuild.Project(this, 'Project', {
       bucket: new s3.Bucket(this, `LogBucket`)
     }
   },
-  ...
 })
 ```
 
@@ -358,7 +357,7 @@ like GitHub:
 
 ```ts
 new codebuild.GitHubSourceCredentials(this, 'CodeBuildGitHubCreds', {
-  accessToken: cdk.SecretValue.secretsManager('my-token'),
+  accessToken: SecretValue.secretsManager('my-token'),
 });
 // GitHub Enterprise is almost the same,
 // except the class is called GitHubEnterpriseSourceCredentials
@@ -368,8 +367,8 @@ and BitBucket:
 
 ```ts
 new codebuild.BitBucketSourceCredentials(this, 'CodeBuildBitBucketCreds', {
-  username: cdk.SecretValue.secretsManager('my-bitbucket-creds', { jsonField: 'username' }),
-  password: cdk.SecretValue.secretsManager('my-bitbucket-creds', { jsonField: 'password' }),
+  username: SecretValue.secretsManager('my-bitbucket-creds', { jsonField: 'username' }),
+  password: SecretValue.secretsManager('my-bitbucket-creds', { jsonField: 'password' }),
 });
 ```
 
@@ -409,8 +408,10 @@ if you'd rather not have those permissions added,
 you can opt out of it when creating the project:
 
 ```ts
+declare const source: codebuild.Source;
+
 const project = new codebuild.Project(this, 'Project', {
-  // ...
+  source,
   grantReportGroupPermissions: false,
 });
 ```
@@ -419,10 +420,13 @@ Alternatively, you can specify an ARN of an existing resource group,
 instead of a simple name, in your buildspec:
 
 ```ts
+declare const source: codebuild.Source;
+
 // create a new ReportGroup
 const reportGroup = new codebuild.ReportGroup(this, 'ReportGroup');
 
 const project = new codebuild.Project(this, 'Project', {
+  source,
   buildSpec: codebuild.BuildSpec.fromObject({
     // ...
     reports: {
@@ -438,6 +442,9 @@ const project = new codebuild.Project(this, 'Project', {
 If you do that, you need to grant the project's role permissions to write reports to that report group:
 
 ```ts
+declare const project: codebuild.Project;
+declare const reportGroup: codebuild.ReportGroup;
+
 reportGroup.grantWrite(project);
 ```
 
@@ -456,8 +463,12 @@ project as a AWS CloudWatch event rule target:
 
 ```ts
 // start build when a commit is pushed
+import * as codecommit from '@aws-cdk/aws-codecommit';
 import * as targets from '@aws-cdk/aws-events-targets';
 
+declare const codeCommitRepository: codecommit.Repository;
+declare const project: codebuild.Project;
+
 codeCommitRepository.onCommit('OnCommit', {
   target: new targets.CodeBuildProject(project),
 });
@@ -469,6 +480,10 @@ To define Amazon CloudWatch event rules for build projects, use one of the `onXx
 methods:
 
 ```ts
+import * as targets from '@aws-cdk/aws-events-targets';
+declare const fn: lambda.Function;
+declare const project: codebuild.Project;
+
 const rule = project.onStateChange('BuildStateChange', {
   target: new targets.LambdaFunction(fn)
 });
@@ -480,7 +495,11 @@ To define CodeStar Notification rules for Projects, use one of the `notifyOnXxx(
 They are very similar to `onXxx()` methods for CloudWatch events:
 
 ```ts
-const target = new chatbot.SlackChannelConfiguration(stack, 'MySlackChannel', {
+import * as chatbot from '@aws-cdk/aws-chatbot';
+
+declare const project: codebuild.Project;
+
+const target = new chatbot.SlackChannelConfiguration(this, 'MySlackChannel', {
   slackChannelConfigurationName: 'YOUR_CHANNEL_NAME',
   slackWorkspaceId: 'YOUR_SLACK_WORKSPACE_ID',
   slackChannelId: 'YOUR_SLACK_CHANNEL_ID',
@@ -495,6 +514,10 @@ CodeBuild Projects can get their sources from multiple places, and produce
 multiple outputs. For example:
 
 ```ts
+import * as codecommit from '@aws-cdk/aws-codecommit';
+declare const repo: codecommit.Repository;
+declare const bucket: s3.Bucket;
+
 const project = new codebuild.Project(this, 'MyProject', {
   secondarySources: [
     codebuild.Source.codeCommit({
@@ -586,6 +609,8 @@ to access the resources that it needs by using the
 For example:
 
 ```ts
+declare const loadBalancer: elbv2.ApplicationLoadBalancer;
+
 const vpc = new ec2.Vpc(this, 'MyVPC');
 const project = new codebuild.Project(this, 'MyProject', {
   vpc: vpc,
@@ -608,7 +633,7 @@ The only supported file system type is `EFS`.
 For example:
 
 ```ts
-new codebuild.Project(stack, 'MyProject', {
+new codebuild.Project(this, 'MyProject', {
   buildSpec: codebuild.BuildSpec.fromObject({
     version: '0.2',
   }),
@@ -635,9 +660,9 @@ It returns an object containing the batch service role that was created,
 or `undefined` if batch builds could not be enabled, for example if the project was imported.
 
 ```ts
-import * as codebuild from '@aws-cdk/aws-codebuild';
+declare const source: codebuild.Source;
 
-const project = new codebuild.Project(this, 'MyProject', { ... });
+const project = new codebuild.Project(this, 'MyProject', { source, });
 
 if (project.enableBatchBuilds()) {
   console.log('Batch builds were enabled');
@@ -652,9 +677,7 @@ The default is 60 minutes.
 An example of overriding the default follows.
 
 ```ts
-import * as codebuild from '@aws-cdk/aws-codebuild';
-
-new codebuild.Project(stack, 'MyProject', {
+new codebuild.Project(this, 'MyProject', {
   timeout: Duration.minutes(90)
 });
 ```
@@ -665,9 +688,7 @@ As an example, to allow your Project to queue for up to thirty (30) minutes befo
 use the following code.
 
 ```ts
-import * as codebuild from '@aws-cdk/aws-codebuild';
-
-new codebuild.Project(stack, 'MyProject', {
+new codebuild.Project(this, 'MyProject', {
   queuedTimeout: Duration.minutes(30)
 });
 ```
@@ -679,9 +700,7 @@ It is possible to limit the maximum concurrent builds to value between 1 and the
 By default there is no explicit limit.
 
 ```ts
-import * as codebuild from '@aws-cdk/aws-codebuild';
-
-new codebuild.Project(stack, 'MyProject', {
+new codebuild.Project(this, 'MyProject', {
   concurrentBuildLimit: 1
 });
 ```
diff --git a/packages/@aws-cdk/aws-codebuild/lib/untrusted-code-boundary-policy.ts b/packages/@aws-cdk/aws-codebuild/lib/untrusted-code-boundary-policy.ts
index 229cb547e7c1f..1a94c521fc08a 100644
--- a/packages/@aws-cdk/aws-codebuild/lib/untrusted-code-boundary-policy.ts
+++ b/packages/@aws-cdk/aws-codebuild/lib/untrusted-code-boundary-policy.ts
@@ -39,7 +39,8 @@ export interface UntrustedCodeBoundaryPolicyProps {
  *
  * @example
  *
- * iam.PermissionsBoundary.of(project).apply(new UntrustedCodeBoundaryPolicy(this, 'Boundary'));
+ * declare const project: codebuild.Project;
+ * iam.PermissionsBoundary.of(project).apply(new codebuild.UntrustedCodeBoundaryPolicy(this, 'Boundary'));
  */
 export class UntrustedCodeBoundaryPolicy extends iam.ManagedPolicy {
   constructor(scope: Construct, id: string, props: UntrustedCodeBoundaryPolicyProps = {}) {