Skip to content

Conversation

@aws-cdk-automation
Copy link
Collaborator

Updates the L1 CloudFormation resource definitions with the latest changes from @aws-cdk/aws-service-spec

L1 CloudFormation resource definition changes:

├[~] service aws-appstream
│ └ resources
│    ├[~]  resource AWS::AppStream::Fleet
│    │  └ properties
│    │     └ InstanceType: (documentation changed)
│    └[~]  resource AWS::AppStream::ImageBuilder
│       └ properties
│          └ InstanceType: (documentation changed)
├[~] service aws-aps
│ └ resources
│    └[~]  resource AWS::APS::AnomalyDetector
│       ├      - documentation: AnomalyDetector schema for cloudformation.
│       │      + documentation: Anomaly detection uses the Random Cut Forest algorithm for time-series analysis. The anomaly detector analyzes Amazon Managed Service for Prometheus metrics to identify unusual patterns and behaviors.
│       ├ properties
│       │  ├ Alias: (documentation changed)
│       │  ├ Configuration: (documentation changed)
│       │  ├ EvaluationIntervalInSeconds: (documentation changed)
│       │  ├ Labels: (documentation changed)
│       │  ├ MissingDataAction: (documentation changed)
│       │  └ Tags: (documentation changed)
│       ├ attributes
│       │  └ Arn: (documentation changed)
│       └ types
│          ├[~] type AnomalyDetectorConfiguration
│          │ ├      - documentation: undefined
│          │ │      + documentation: The configuration for the anomaly detection algorithm.
│          │ └ properties
│          │    └ RandomCutForest: (documentation changed)
│          ├[~] type IgnoreNearExpected
│          │ ├      - documentation: undefined
│          │ │      + documentation: Configuration for threshold settings that determine when values near expected values should be ignored during anomaly detection.
│          │ └ properties
│          │    ├ Amount: (documentation changed)
│          │    └ Ratio: (documentation changed)
│          ├[~] type Label
│          │ ├      - documentation: A key-value pair to provide meta-data and multi-dimensional data analysis for filtering and aggregation.
│          │ │      + documentation: The Amazon Managed Service for Prometheus metric labels associated with the anomaly detector.
│          │ └ properties
│          │    ├ Key: (documentation changed)
│          │    └ Value: (documentation changed)
│          ├[~] type MissingDataAction
│          │ ├      - documentation: undefined
│          │ │      + documentation: Specifies the action to take when data is missing during anomaly detection evaluation.
│          │ └ properties
│          │    ├ MarkAsAnomaly: (documentation changed)
│          │    └ Skip: (documentation changed)
│          └[~] type RandomCutForestConfiguration
│            ├      - documentation: undefined
│            │      + documentation: Configuration for the Random Cut Forest algorithm used for anomaly detection in time-series data.
│            └ properties
│               ├ IgnoreNearExpectedFromAbove: (documentation changed)
│               ├ IgnoreNearExpectedFromBelow: (documentation changed)
│               ├ Query: (documentation changed)
│               ├ SampleSize: (documentation changed)
│               └ ShingleSize: (documentation changed)
├[~] service aws-arcregionswitch
│ └ resources
│    └[~]  resource AWS::ARCRegionSwitch::Plan
│       └ attributes
│          └ HealthChecksForPlan: (documentation changed)
├[~] service aws-backup
│ └ resources
│    └[~]  resource AWS::Backup::LogicallyAirGappedBackupVault
│       └ properties
│          └[+] MpaApprovalTeamArn: string
├[~] service aws-batch
│ └ resources
│    └[~]  resource AWS::Batch::JobDefinition
│       ├ properties
│       │  └ ResourceRetentionPolicy: (documentation changed)
│       └ types
│          └[~] type ResourceRetentionPolicy
│            ├      - documentation: undefined
│            │      + documentation: Specifies the resource retention policy settings for a job definition.
│            └ properties
│               └ SkipDeregisterOnUpdate: (documentation changed)
├[~] service aws-bedrockagentcore
│ └ resources
│    └[+]  resource AWS::BedrockAgentCore::WorkloadIdentity
│       ├      name: WorkloadIdentity
│       │      cloudFormationType: AWS::BedrockAgentCore::WorkloadIdentity
│       │      documentation: Creates a workload identity for Amazon Bedrock AgentCore. A workload identity provides OAuth2-based authentication for resources associated with agent runtimes.
│       │      For more information about using workload identities in Amazon Bedrock AgentCore, see [Managing workload identities](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/workload-identity.html) .
│       │      See the *Properties* section below for descriptions of both the required and optional properties.
│       │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│       ├ properties
│       │  ├ Name: string (required, immutable)
│       │  ├ AllowedResourceOauth2ReturnUrls: Array<string>
│       │  └ Tags: Array<tag>
│       └ attributes
│          ├ WorkloadIdentityArn: string
│          ├ CreatedTime: number
│          └ LastUpdatedTime: number
├[~] service aws-cleanrooms
│ └ resources
│    ├[~]  resource AWS::CleanRooms::Collaboration
│    │  └ properties
│    │     └[+] AllowedResultRegions: Array<string> (immutable)
│    ├[~]  resource AWS::CleanRooms::ConfiguredTable
│    │  ├ properties
│    │  │  └ AllowedColumns: (documentation changed)
│    │  └ types
│    │     ├[~] type AthenaTableReference
│    │     │ └ properties
│    │     │    └[+] Region: string
│    │     └[~] type GlueTableReference
│    │       └ properties
│    │          └[+] Region: string
│    └[~]  resource AWS::CleanRooms::PrivacyBudgetTemplate
│       └ types
│          ├[+]  type BudgetParameter
│          │  ├      documentation: Individual budget parameter configuration that defines specific budget allocation settings for access budgets.
│          │  │      name: BudgetParameter
│          │  └ properties
│          │     ├ Type: string (required)
│          │     ├ Budget: integer (required)
│          │     └ AutoRefresh: string
│          └[~] type Parameters
│            └ properties
│               ├[+] BudgetParameters: Array<BudgetParameter>
│               ├ Epsilon: - integer (required)
│               │          + integer
│               ├[+] ResourceArn: string (immutable)
│               └ UsersNoisePerQuery: - integer (required)
│                                     + integer
├[~] service aws-cloudfront
│ └ resources
│    ├[~]  resource AWS::CloudFront::AnycastIpList
│    │  ├ properties
│    │  │  └ IpAddressType: (documentation changed)
│    │  └ types
│    │     └[~] type AnycastIpList
│    │       └ properties
│    │          └ IpAddressType: (documentation changed)
│    ├[~]  resource AWS::CloudFront::Distribution
│    │  └ types
│    │     └[~] type VpcOriginConfig
│    │       └ properties
│    │          └ OwnerAccountId: (documentation changed)
│    └[~]  resource AWS::CloudFront::VpcOrigin
│       └ attributes
│          └ AccountId: (documentation changed)
├[~] service aws-cognito
│ └ resources
│    └[+]  resource AWS::Cognito::Terms
│       ├      name: Terms
│       │      cloudFormationType: AWS::Cognito::Terms
│       │      documentation: Resource Type definition for AWS::Cognito::Terms
│       ├ properties
│       │  ├ UserPoolId: string (required, immutable)
│       │  ├ ClientId: string (immutable)
│       │  ├ TermsName: string (required)
│       │  ├ TermsSource: string (required)
│       │  ├ Enforcement: string (required)
│       │  └ Links: Map<string, string> (required)
│       └ attributes
│          └ TermsId: string
├[~] service aws-connect
│ └ resources
│    └[~]  resource AWS::Connect::SecurityProfile
│       ├ properties
│       │  └[+] GranularAccessControlConfiguration: GranularAccessControlConfiguration
│       └ types
│          ├[+]  type DataTableAccessControlConfiguration
│          │  ├      documentation: Defines the access control configuration for data tables.
│          │  │      name: DataTableAccessControlConfiguration
│          │  └ properties
│          │     └ PrimaryAttributeAccessControlConfiguration: PrimaryAttributeAccessControlConfigurationItem
│          ├[+]  type GranularAccessControlConfiguration
│          │  ├      name: GranularAccessControlConfiguration
│          │  └ properties
│          │     └ DataTableAccessControlConfiguration: DataTableAccessControlConfiguration
│          ├[+]  type PrimaryAttributeAccessControlConfigurationItem
│          │  ├      documentation: Contains the configuration for record-based access control.
│          │  │      name: PrimaryAttributeAccessControlConfigurationItem
│          │  └ properties
│          │     └ PrimaryAttributeValues: Array<PrimaryAttributeValue> (required)
│          └[+]  type PrimaryAttributeValue
│             ├      documentation: An object defining the access control for a specific attribute and its values.
│             │      name: PrimaryAttributeValue
│             └ properties
│                ├ AccessType: string (required)
│                ├ AttributeName: string (required)
│                └ Values: Array<string> (required)
├[~] service aws-datazone
│ └ resources
│    └[~]  resource AWS::DataZone::Connection
│       ├ properties
│       │  └[+] Scope: string (immutable)
│       └ types
│          ├[+]  type AmazonQPropertiesInput
│          │  ├      documentation: Amazon Q properties of the connection.
│          │  │      name: AmazonQPropertiesInput
│          │  └ properties
│          │     ├ IsEnabled: boolean
│          │     ├ AuthMode: string
│          │     └ ProfileArn: string
│          └[~] type ConnectionPropertiesInput
│            └ properties
│               └[+] AmazonQProperties: AmazonQPropertiesInput
├[~] service aws-directoryservice
│ └ resources
│    └[~]  resource AWS::DirectoryService::MicrosoftAD
│       └      - arnTemplate: arn:${Partition}:ds:${Region}:${Account}:${DirectoryId}
│              + arnTemplate: arn:${Partition}:ds:${Region}:${Account}:directory/${DirectoryId}
├[~] service aws-dynamodb
│ └ resources
│    └[~]  resource AWS::DynamoDB::GlobalTable
│       └ types
│          └[~] type ReplicaStreamSpecification
│            └ properties
│               └ ResourcePolicy: - ResourcePolicy (required)
│                                 + ResourcePolicy
├[~] service aws-ec2
│ └ resources
│    └[~]  resource AWS::EC2::CapacityManagerDataExport
│       └      - arnTemplate: undefined
│              + arnTemplate: arn:${Partition}:ec2:${Region}:${Account}:capacity-manager-data-export/${CapacityManagerDataExportId}
├[~] service aws-ecs
│ └ resources
│    ├[~]  resource AWS::ECS::Cluster
│    │  └ types
│    │     └[~] type CapacityProviderStrategyItem
│    │       └ properties
│    │          ├ Base: (documentation changed)
│    │          ├ CapacityProvider: (documentation changed)
│    │          └ Weight: (documentation changed)
│    ├[~]  resource AWS::ECS::ClusterCapacityProviderAssociations
│    │  └ types
│    │     └[~] type CapacityProviderStrategy
│    │       └ properties
│    │          ├ Base: (documentation changed)
│    │          ├ CapacityProvider: (documentation changed)
│    │          └ Weight: (documentation changed)
│    ├[~]  resource AWS::ECS::Service
│    │  └ types
│    │     ├[~] type CanaryConfiguration
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Configuration for a canary deployment strategy that shifts a fixed percentage of traffic to the new service revision, waits for a specified bake time, then shifts the remaining traffic.
│    │     │ │      The following validation applies only to Canary deployments created through AWS CloudFormation . AWS CloudFormation operations time out after 36 hours. Canary deployments can approach this limit because of their extended duration. This can cause AWS CloudFormation to roll back the deployment. To prevent timeout-related rollbacks, AWS CloudFormation rejects deployments when the calculated deployment time exceeds 33 hours based on your template configuration:
│    │     │ │      `BakeTimeInMinutes + CanaryBakeTimeInMinutes`
│    │     │ │      Additional backend processes (such as task scaling and running lifecycle hooks) can extend deployment time beyond these calculations. Even deployments under the 33-hour threshold might still time out if these processes cause the total duration to exceed 36 hours.
│    │     │ └ properties
│    │     │    ├ CanaryBakeTimeInMinutes: (documentation changed)
│    │     │    └ CanaryPercent: (documentation changed)
│    │     ├[~] type CapacityProviderStrategyItem
│    │     │ └ properties
│    │     │    ├ Base: (documentation changed)
│    │     │    ├ CapacityProvider: (documentation changed)
│    │     │    └ Weight: (documentation changed)
│    │     ├[~] type DeploymentConfiguration
│    │     │ └ properties
│    │     │    ├ CanaryConfiguration: (documentation changed)
│    │     │    └ LinearConfiguration: (documentation changed)
│    │     ├[~] type LinearConfiguration
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Configuration for a linear deployment strategy that shifts production traffic in equal percentage increments with configurable wait times between each step until 100 percent of traffic is shifted to the new service revision.
│    │     │ │      The following validation applies only to Linear deployments created through AWS CloudFormation . AWS CloudFormation operations time out after 36 hours. Linear deployments can approach this limit because of their extended duration. This can cause AWS CloudFormation to roll back the deployment. To prevent timeout-related rollbacks, AWS CloudFormation rejects deployments when the calculated deployment time exceeds 33 hours based on your template configuration:
│    │     │ │      `BakeTimeInMinutes + (StepBakeTimeInMinutes × Number of deployment steps)`
│    │     │ │      Where the number of deployment steps is calculated as follows:
│    │     │ │      - *If `StepPercent` evenly divides by 100* : The number of deployment steps equals `(100 ÷ StepPercent) - 1`
│    │     │ │      - *Otherwise* : The number of deployment steps equals the floor of `100 ÷ StepPercent` . For example, if `StepPercent` is 11, the number of deployment steps is 9 (not 9.1).
│    │     │ │      This calculation reflects that AWS CloudFormation doesn't apply the step bake time after the final traffic shift reaches 100%. For example, with a `StepPercent` of 50%, there are actually two traffic shifts, but only one deployment step is counted for validation purposes because the bake time is applied only after the first 50% shift, not after reaching 100%.
│    │     │ │      Additional backend processes (such as task scaling and running lifecycle hooks) can extend deployment time beyond these calculations. Even deployments under the 33-hour threshold might still time out if these processes cause the total duration to exceed 36 hours.
│    │     │ └ properties
│    │     │    ├ StepBakeTimeInMinutes: (documentation changed)
│    │     │    └ StepPercent: (documentation changed)
│    │     ├[~] type ServiceConnectAccessLogConfiguration
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Configuration for Service Connect access logging. Access logs provide detailed information about requests made to your service, including request patterns, response codes, and timing data for debugging and monitoring purposes.
│    │     │ │      > To enable access logs, you must also specify a `logConfiguration` in the `serviceConnectConfiguration` .
│    │     │ └ properties
│    │     │    ├ Format: (documentation changed)
│    │     │    └ IncludeQueryParameters: (documentation changed)
│    │     └[~] type ServiceConnectConfiguration
│    │       └ properties
│    │          └ AccessLogConfiguration: (documentation changed)
│    ├[~]  resource AWS::ECS::TaskDefinition
│    │  ├ properties
│    │  │  ├ PidMode: (documentation changed)
│    │  │  └ RuntimePlatform: (documentation changed)
│    │  └ types
│    │     ├[~] type ContainerDefinition
│    │     │ └ properties
│    │     │    └ Cpu: (documentation changed)
│    │     └[~] type RuntimePlatform
│    │       └ properties
│    │          └ CpuArchitecture: (documentation changed)
│    └[~]  resource AWS::ECS::TaskSet
│       └ types
│          └[~] type CapacityProviderStrategyItem
│            └ properties
│               ├ Base: (documentation changed)
│               ├ CapacityProvider: (documentation changed)
│               └ Weight: (documentation changed)
├[~] service aws-glue
│ └ resources
│    └[+]  resource AWS::Glue::IntegrationResourceProperty
│       ├      name: IntegrationResourceProperty
│       │      cloudFormationType: AWS::Glue::IntegrationResourceProperty
│       │      documentation: Resource Type definition for AWS::Glue::IntegrationResourceProperty
│       │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│       ├ properties
│       │  ├ ResourceArn: string (required, immutable)
│       │  ├ SourceProcessingProperties: SourceProcessingProperties
│       │  ├ TargetProcessingProperties: TargetProcessingProperties
│       │  └ Tags: Array<tag>
│       ├ attributes
│       │  └ ResourcePropertyArn: string
│       └ types
│          ├ type SourceProcessingProperties
│          │ ├      documentation: The resource properties associated with the integration source.
│          │ │      name: SourceProcessingProperties
│          │ └ properties
│          │    └ RoleArn: string (required)
│          └ type TargetProcessingProperties
│            ├      documentation: The resource properties associated with the integration target.
│            │      name: TargetProcessingProperties
│            └ properties
│               ├ RoleArn: string (required)
│               ├ KmsArn: string
│               ├ ConnectionName: string
│               └ EventBusArn: string
├[~] service aws-kendra
│ └ resources
│    └[~]  resource AWS::Kendra::DataSource
│       └ types
│          ├[~] type DataSourceConfiguration
│          │ └ properties
│          │    └ WorkDocsConfiguration: (documentation changed)
│          └[~] type WorkDocsConfiguration
│            ├      - documentation: Provides the configuration information to connect to Amazon WorkDocs as your data source.
│            │      Amazon WorkDocs connector is available in Oregon, North Virginia, Sydney, Singapore and Ireland regions.
│            │      + documentation: Provides the configuration information to connect to WorkDocs as your data source.
│            │      WorkDocs connector is available in Oregon, North Virginia, Sydney, Singapore and Ireland regions.
│            └ properties
│               ├ ExclusionPatterns: (documentation changed)
│               ├ FieldMappings: (documentation changed)
│               ├ InclusionPatterns: (documentation changed)
│               ├ OrganizationId: (documentation changed)
│               └ UseChangeLog: (documentation changed)
├[~] service aws-kinesis
│ └ resources
│    └[~]  resource AWS::Kinesis::Stream
│       └ properties
│          └[+] MaxRecordSizeInKiB: integer
├[~] service aws-lambda
│ └ resources
│    └[~]  resource AWS::Lambda::Permission
│       └ properties
│          └ InvokedViaFunctionUrl: (documentation changed)
├[~] service aws-location
│ └ resources
│    └[~]  resource AWS::Location::APIKey
│       └ types
│          ├[+]  type AndroidApp
│          │  ├      name: AndroidApp
│          │  └ properties
│          │     ├ Package: string (required)
│          │     └ CertificateFingerprint: string (required)
│          ├[~] type ApiKeyRestrictions
│          │ └ properties
│          │    ├[+] AllowAndroidApps: Array<AndroidApp>
│          │    └[+] AllowAppleApps: Array<AppleApp>
│          └[+]  type AppleApp
│             ├      name: AppleApp
│             └ properties
│                └ BundleId: string (required)
├[~] service aws-networkfirewall
│ └ resources
│    ├[~]  resource AWS::NetworkFirewall::Firewall
│    │  └ attributes
│    │     └ TransitGatewayAttachmentId: (documentation changed)
│    └[~]  resource AWS::NetworkFirewall::FirewallPolicy
│       └ types
│          └[~] type FirewallPolicy
│            └ properties
│               └ EnableTLSSessionHolding: (documentation changed)
├[~] service aws-opensearchserverless
│ └ resources
│    └[~]  resource AWS::OpenSearchServerless::Collection
│       ├ properties
│       │  └ StandbyReplicas: - string
│       │                     + string (immutable)
│       └ attributes
│          └[+] KmsKeyArn: string
├[~] service aws-pinpoint
│ └ resources
│    ├[~]  resource AWS::Pinpoint::InAppTemplate
│    │  └      - arnTemplate: arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/${TemplateName}/VOICE
│    │         + arnTemplate: arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/${TemplateName}/PUSH
│    └[~]  resource AWS::Pinpoint::SmsTemplate
│       └      - arnTemplate: arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/${TemplateName}/SMS
│              + arnTemplate: arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/${TemplateName}/PUSH
├[~] service aws-qbusiness
│ └ resources
│    └[~]  resource AWS::QBusiness::Application
│       ├ properties
│       │  └ QuickSightConfiguration: (documentation changed)
│       └ types
│          └[~] type QuickSightConfiguration
│            ├      - documentation: The Amazon QuickSight configuration for an Amazon Q Business application that uses QuickSight as the identity provider. For more information, see [Creating an Amazon QuickSight integrated application](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/create-quicksight-integrated-application.html) .
│            │      + documentation: The Amazon Quick Suite configuration for an Amazon Q Business application that uses Quick Suite as the identity provider. For more information, see [Creating an Amazon Quick Suite integrated application](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/create-quicksight-integrated-application.html) .
│            └ properties
│               └ ClientNamespace: (documentation changed)
├[~] service aws-quicksight
│ └ resources
│    ├[~]  resource AWS::QuickSight::Analysis
│    │  └ types
│    │     └[~] type SheetDefinition
│    │       └ properties
│    │          └ Name: (documentation changed)
│    ├[~]  resource AWS::QuickSight::Dashboard
│    │  └ types
│    │     └[~] type SheetDefinition
│    │       └ properties
│    │          └ Name: (documentation changed)
│    ├[~]  resource AWS::QuickSight::DataSet
│    │  ├ properties
│    │  │  ├[+] DataPrepConfiguration: DataPrepConfiguration
│    │  │  ├ LogicalTableMap: - Map<string, LogicalTable>
│    │  │  │                  + Map<string, LogicalTable> (deprecated=WARN)
│    │  │  │                  (documentation changed)
│    │  │  ├ RowLevelPermissionDataSet: - RowLevelPermissionDataSet
│    │  │  │                            + RowLevelPermissionDataSet (deprecated=WARN)
│    │  │  │                            (documentation changed)
│    │  │  ├ RowLevelPermissionTagConfiguration: - RowLevelPermissionTagConfiguration
│    │  │  │                                     + RowLevelPermissionTagConfiguration (deprecated=WARN)
│    │  │  │                                     (documentation changed)
│    │  │  └[+] SemanticModelConfiguration: SemanticModelConfiguration
│    │  └ types
│    │     ├[+]  type AggregateOperation
│    │     │  ├      name: AggregateOperation
│    │     │  └ properties
│    │     │     ├ GroupByColumnNames: Array<string>
│    │     │     ├ Alias: string (required)
│    │     │     ├ Aggregations: Array<Aggregation> (required)
│    │     │     └ Source: TransformOperationSource (required)
│    │     ├[+]  type Aggregation
│    │     │  ├      name: Aggregation
│    │     │  └ properties
│    │     │     ├ AggregationFunction: DataPrepAggregationFunction (required)
│    │     │     ├ NewColumnName: string (required)
│    │     │     └ NewColumnId: string (required)
│    │     ├[+]  type AppendedColumn
│    │     │  ├      name: AppendedColumn
│    │     │  └ properties
│    │     │     ├ ColumnName: string (required)
│    │     │     └ NewColumnId: string (required)
│    │     ├[+]  type AppendOperation
│    │     │  ├      name: AppendOperation
│    │     │  └ properties
│    │     │     ├ AppendedColumns: Array<AppendedColumn> (required)
│    │     │     ├ SecondSource: TransformOperationSource
│    │     │     ├ Alias: string (required)
│    │     │     └ FirstSource: TransformOperationSource
│    │     ├[~] type CastColumnTypeOperation
│    │     │ └ properties
│    │     │    └ ColumnName: - string
│    │     │                  + string (required)
│    │     ├[+]  type CastColumnTypesOperation
│    │     │  ├      name: CastColumnTypesOperation
│    │     │  └ properties
│    │     │     ├ CastColumnTypeOperations: Array<CastColumnTypeOperation> (required)
│    │     │     ├ Alias: string (required)
│    │     │     └ Source: TransformOperationSource (required)
│    │     ├[+]  type ColumnToUnpivot
│    │     │  ├      name: ColumnToUnpivot
│    │     │  └ properties
│    │     │     ├ ColumnName: string
│    │     │     └ NewValue: string
│    │     ├[~] type CreateColumnsOperation
│    │     │ └ properties
│    │     │    ├[+] Alias: string
│    │     │    ├ Columns: - Array<CalculatedColumn>
│    │     │    │          + Array<CalculatedColumn> (required)
│    │     │    └[+] Source: TransformOperationSource
│    │     ├[~] type CustomSql
│    │     │ └ properties
│    │     │    └ Columns: - Array<InputColumn>
│    │     │               + Array<InputColumn> (required)
│    │     ├[+]  type DataPrepAggregationFunction
│    │     │  ├      name: DataPrepAggregationFunction
│    │     │  └ properties
│    │     │     ├ PercentileAggregation: DataPrepPercentileAggregationFunction
│    │     │     ├ SimpleAggregation: DataPrepSimpleAggregationFunction
│    │     │     └ ListAggregation: DataPrepListAggregationFunction
│    │     ├[+]  type DataPrepConfiguration
│    │     │  ├      name: DataPrepConfiguration
│    │     │  └ properties
│    │     │     ├ DestinationTableMap: Map<string, DestinationTable> (required)
│    │     │     ├ TransformStepMap: Map<string, TransformStep> (required)
│    │     │     └ SourceTableMap: Map<string, SourceTable> (required)
│    │     ├[+]  type DataPrepListAggregationFunction
│    │     │  ├      name: DataPrepListAggregationFunction
│    │     │  └ properties
│    │     │     ├ Distinct: boolean (required, default=false)
│    │     │     ├ InputColumnName: string
│    │     │     └ Separator: string (required)
│    │     ├[+]  type DataPrepPercentileAggregationFunction
│    │     │  ├      name: DataPrepPercentileAggregationFunction
│    │     │  └ properties
│    │     │     ├ InputColumnName: string
│    │     │     └ PercentileValue: number (required, default=0)
│    │     ├[+]  type DataPrepSimpleAggregationFunction
│    │     │  ├      name: DataPrepSimpleAggregationFunction
│    │     │  └ properties
│    │     │     ├ FunctionType: string (required)
│    │     │     └ InputColumnName: string
│    │     ├[+]  type DataSetColumnIdMapping
│    │     │  ├      name: DataSetColumnIdMapping
│    │     │  └ properties
│    │     │     ├ SourceColumnId: string (required)
│    │     │     └ TargetColumnId: string (required)
│    │     ├[+]  type DataSetDateComparisonFilterCondition
│    │     │  ├      name: DataSetDateComparisonFilterCondition
│    │     │  └ properties
│    │     │     ├ Operator: string (required)
│    │     │     └ Value: DataSetDateFilterValue
│    │     ├[+]  type DataSetDateFilterCondition
│    │     │  ├      name: DataSetDateFilterCondition
│    │     │  └ properties
│    │     │     ├ ColumnName: string
│    │     │     ├ RangeFilterCondition: DataSetDateRangeFilterCondition
│    │     │     └ ComparisonFilterCondition: DataSetDateComparisonFilterCondition
│    │     ├[+]  type DataSetDateFilterValue
│    │     │  ├      name: DataSetDateFilterValue
│    │     │  └ properties
│    │     │     └ StaticValue: string
│    │     ├[+]  type DataSetDateRangeFilterCondition
│    │     │  ├      name: DataSetDateRangeFilterCondition
│    │     │  └ properties
│    │     │     ├ IncludeMaximum: boolean
│    │     │     ├ RangeMinimum: DataSetDateFilterValue
│    │     │     ├ RangeMaximum: DataSetDateFilterValue
│    │     │     └ IncludeMinimum: boolean
│    │     ├[+]  type DataSetNumericComparisonFilterCondition
│    │     │  ├      name: DataSetNumericComparisonFilterCondition
│    │     │  └ properties
│    │     │     ├ Operator: string (required)
│    │     │     └ Value: DataSetNumericFilterValue
│    │     ├[+]  type DataSetNumericFilterCondition
│    │     │  ├      name: DataSetNumericFilterCondition
│    │     │  └ properties
│    │     │     ├ ColumnName: string
│    │     │     ├ RangeFilterCondition: DataSetNumericRangeFilterCondition
│    │     │     └ ComparisonFilterCondition: DataSetNumericComparisonFilterCondition
│    │     ├[+]  type DataSetNumericFilterValue
│    │     │  ├      name: DataSetNumericFilterValue
│    │     │  └ properties
│    │     │     └ StaticValue: number
│    │     ├[+]  type DataSetNumericRangeFilterCondition
│    │     │  ├      name: DataSetNumericRangeFilterCondition
│    │     │  └ properties
│    │     │     ├ IncludeMaximum: boolean
│    │     │     ├ RangeMinimum: DataSetNumericFilterValue
│    │     │     ├ RangeMaximum: DataSetNumericFilterValue
│    │     │     └ IncludeMinimum: boolean
│    │     ├[+]  type DataSetStringComparisonFilterCondition
│    │     │  ├      name: DataSetStringComparisonFilterCondition
│    │     │  └ properties
│    │     │     ├ Operator: string (required)
│    │     │     └ Value: DataSetStringFilterValue
│    │     ├[+]  type DataSetStringFilterCondition
│    │     │  ├      name: DataSetStringFilterCondition
│    │     │  └ properties
│    │     │     ├ ColumnName: string
│    │     │     ├ ComparisonFilterCondition: DataSetStringComparisonFilterCondition
│    │     │     └ ListFilterCondition: DataSetStringListFilterCondition
│    │     ├[+]  type DataSetStringFilterValue
│    │     │  ├      name: DataSetStringFilterValue
│    │     │  └ properties
│    │     │     └ StaticValue: string
│    │     ├[+]  type DataSetStringListFilterCondition
│    │     │  ├      name: DataSetStringListFilterCondition
│    │     │  └ properties
│    │     │     ├ Operator: string (required)
│    │     │     └ Values: DataSetStringListFilterValue
│    │     ├[+]  type DataSetStringListFilterValue
│    │     │  ├      name: DataSetStringListFilterValue
│    │     │  └ properties
│    │     │     └ StaticValues: Array<string>
│    │     ├[+]  type DestinationTable
│    │     │  ├      name: DestinationTable
│    │     │  └ properties
│    │     │     ├ Alias: string (required)
│    │     │     └ Source: DestinationTableSource (required)
│    │     ├[+]  type DestinationTableSource
│    │     │  ├      name: DestinationTableSource
│    │     │  └ properties
│    │     │     └ TransformOperationId: string (required)
│    │     ├[~] type FilterOperation
│    │     │ └ properties
│    │     │    ├[+] DateFilterCondition: DataSetDateFilterCondition
│    │     │    ├[+] NumericFilterCondition: DataSetNumericFilterCondition
│    │     │    └[+] StringFilterCondition: DataSetStringFilterCondition
│    │     ├[+]  type FiltersOperation
│    │     │  ├      name: FiltersOperation
│    │     │  └ properties
│    │     │     ├ FilterOperations: Array<FilterOperation> (required)
│    │     │     ├ Alias: string (required)
│    │     │     └ Source: TransformOperationSource (required)
│    │     ├[+]  type ImportTableOperation
│    │     │  ├      name: ImportTableOperation
│    │     │  └ properties
│    │     │     ├ Alias: string (required)
│    │     │     └ Source: ImportTableOperationSource (required)
│    │     ├[+]  type ImportTableOperationSource
│    │     │  ├      name: ImportTableOperationSource
│    │     │  └ properties
│    │     │     ├ SourceTableId: string (required)
│    │     │     └ ColumnIdMappings: Array<DataSetColumnIdMapping>
│    │     ├[~] type InputColumn
│    │     │ └ properties
│    │     │    └[+] Id: string
│    │     ├[~] type IntegerDatasetParameterDefaultValues
│    │     │ └ properties
│    │     │    └ StaticValues: - Array<number>
│    │     │                    + Array<integer> ⇐ Array<number>
│    │     ├[+]  type JoinOperandProperties
│    │     │  ├      name: JoinOperandProperties
│    │     │  └ properties
│    │     │     └ OutputColumnNameOverrides: Array<OutputColumnNameOverride> (required)
│    │     ├[+]  type JoinOperation
│    │     │  ├      name: JoinOperation
│    │     │  └ properties
│    │     │     ├ OnClause: string (required)
│    │     │     ├ Type: string (required)
│    │     │     ├ RightOperandProperties: JoinOperandProperties
│    │     │     ├ LeftOperandProperties: JoinOperandProperties
│    │     │     ├ Alias: string (required)
│    │     │     ├ LeftOperand: TransformOperationSource (required)
│    │     │     └ RightOperand: TransformOperationSource (required)
│    │     ├[~] type LogicalTable
│    │     │ ├      - documentation: A *logical table* is a unit that joins and that data transformations operate on. A logical table has a source, which can be either a physical table or result of a join. When a logical table points to a physical table, the logical table acts as a mutable copy of that physical table through transform operations.
│    │     │ │      + documentation: <p>A <i>logical table</i> is a unit that joins and that data
│    │     │ │                  transformations operate on. A logical table has a source, which can be either a physical
│    │     │ │                  table or result of a join. When a logical table points to a physical table, the logical
│    │     │ │                  table acts as a mutable copy of that physical table through transform operations.</p>
│    │     │ └ properties
│    │     │    ├ Alias: (documentation changed)
│    │     │    ├ DataTransforms: (documentation changed)
│    │     │    └ Source: - LogicalTableSource
│    │     │              + LogicalTableSource (required)
│    │     │              (documentation changed)
│    │     ├[~] type NewDefaultValues
│    │     │ └ properties
│    │     │    └ IntegerStaticValues: - Array<number>
│    │     │                           + Array<integer> ⇐ Array<number>
│    │     ├[~] type OutputColumn
│    │     │ └ properties
│    │     │    └[+] Id: string
│    │     ├[+]  type OutputColumnNameOverride
│    │     │  ├      name: OutputColumnNameOverride
│    │     │  └ properties
│    │     │     ├ OutputColumnName: string (required)
│    │     │     └ SourceColumnName: string
│    │     ├[+]  type ParentDataSet
│    │     │  ├      name: ParentDataSet
│    │     │  └ properties
│    │     │     ├ InputColumns: Array<InputColumn> (required)
│    │     │     └ DataSetArn: string (required)
│    │     ├[~] type PhysicalTable
│    │     │ └ properties
│    │     │    └[+] SaaSTable: SaaSTable
│    │     ├[+]  type PivotConfiguration
│    │     │  ├      name: PivotConfiguration
│    │     │  └ properties
│    │     │     ├ LabelColumnName: string
│    │     │     └ PivotedLabels: Array<PivotedLabel> (required)
│    │     ├[+]  type PivotedLabel
│    │     │  ├      name: PivotedLabel
│    │     │  └ properties
│    │     │     ├ NewColumnName: string (required)
│    │     │     ├ NewColumnId: string (required)
│    │     │     └ LabelName: string (required)
│    │     ├[+]  type PivotOperation
│    │     │  ├      name: PivotOperation
│    │     │  └ properties
│    │     │     ├ PivotConfiguration: PivotConfiguration (required)
│    │     │     ├ GroupByColumnNames: Array<string>
│    │     │     ├ Alias: string (required)
│    │     │     ├ ValueColumnConfiguration: ValueColumnConfiguration (required)
│    │     │     └ Source: TransformOperationSource (required)
│    │     ├[~] type ProjectOperation
│    │     │ └ properties
│    │     │    ├[+] Alias: string
│    │     │    └[+] Source: TransformOperationSource
│    │     ├[~] type RelationalTable
│    │     │ └ properties
│    │     │    └ InputColumns: - Array<InputColumn>
│    │     │                    + Array<InputColumn> (required)
│    │     ├[~] type RenameColumnOperation
│    │     │ └ properties
│    │     │    ├ ColumnName: - string
│    │     │    │             + string (required)
│    │     │    └ NewColumnName: - string
│    │     │                     + string (required)
│    │     ├[+]  type RenameColumnsOperation
│    │     │  ├      name: RenameColumnsOperation
│    │     │  └ properties
│    │     │     ├ Alias: string (required)
│    │     │     ├ RenameColumnOperations: Array<RenameColumnOperation> (required)
│    │     │     └ Source: TransformOperationSource (required)
│    │     ├[+]  type RowLevelPermissionConfiguration
│    │     │  ├      name: RowLevelPermissionConfiguration
│    │     │  └ properties
│    │     │     ├ TagConfiguration: RowLevelPermissionTagConfiguration
│    │     │     └ RowLevelPermissionDataSet: RowLevelPermissionDataSet
│    │     ├[~] type RowLevelPermissionTagRule
│    │     │ └ properties
│    │     │    └ ColumnName: - string
│    │     │                  + string (required)
│    │     ├[~] type S3Source
│    │     │ └ properties
│    │     │    └ InputColumns: - Array<InputColumn>
│    │     │                    + Array<InputColumn> (required)
│    │     ├[+]  type SaaSTable
│    │     │  ├      name: SaaSTable
│    │     │  └ properties
│    │     │     ├ DataSourceArn: string (required)
│    │     │     ├ InputColumns: Array<InputColumn> (required)
│    │     │     └ TablePath: Array<TablePathElement> (required)
│    │     ├[+]  type SemanticModelConfiguration
│    │     │  ├      name: SemanticModelConfiguration
│    │     │  └ properties
│    │     │     └ TableMap: Map<string, SemanticTable>
│    │     ├[+]  type SemanticTable
│    │     │  ├      name: SemanticTable
│    │     │  └ properties
│    │     │     ├ Alias: string (required)
│    │     │     ├ DestinationTableId: string (required)
│    │     │     └ RowLevelPermissionConfiguration: RowLevelPermissionConfiguration
│    │     ├[+]  type SourceTable
│    │     │  ├      name: SourceTable
│    │     │  └ properties
│    │     │     ├ PhysicalTableId: string
│    │     │     └ DataSet: ParentDataSet
│    │     ├[+]  type TablePathElement
│    │     │  ├      name: TablePathElement
│    │     │  └ properties
│    │     │     ├ Id: string
│    │     │     └ Name: string
│    │     ├[+]  type TransformOperationSource
│    │     │  ├      name: TransformOperationSource
│    │     │  └ properties
│    │     │     ├ TransformOperationId: string (required)
│    │     │     └ ColumnIdMappings: Array<DataSetColumnIdMapping>
│    │     ├[+]  type TransformStep
│    │     │  ├      name: TransformStep
│    │     │  └ properties
│    │     │     ├ ProjectStep: ProjectOperation
│    │     │     ├ CreateColumnsStep: CreateColumnsOperation
│    │     │     ├ RenameColumnsStep: RenameColumnsOperation
│    │     │     ├ CastColumnTypesStep: CastColumnTypesOperation
│    │     │     ├ ImportTableStep: ImportTableOperation
│    │     │     ├ UnpivotStep: UnpivotOperation
│    │     │     ├ JoinStep: JoinOperation
│    │     │     ├ AppendStep: AppendOperation
│    │     │     ├ FiltersStep: FiltersOperation
│    │     │     ├ AggregateStep: AggregateOperation
│    │     │     └ PivotStep: PivotOperation
│    │     ├[~] type UniqueKey
│    │     │ └ properties
│    │     │    └ ColumnNames: - Array<string>
│    │     │                   + Array<string> (required)
│    │     ├[+]  type UnpivotOperation
│    │     │  ├      name: UnpivotOperation
│    │     │  └ properties
│    │     │     ├ UnpivotedLabelColumnName: string (required)
│    │     │     ├ ColumnsToUnpivot: Array<ColumnToUnpivot> (required)
│    │     │     ├ UnpivotedLabelColumnId: string (required)
│    │     │     ├ Alias: string (required)
│    │     │     ├ UnpivotedValueColumnId: string (required)
│    │     │     ├ UnpivotedValueColumnName: string (required)
│    │     │     └ Source: TransformOperationSource (required)
│    │     └[+]  type ValueColumnConfiguration
│    │        ├      name: ValueColumnConfiguration
│    │        └ properties
│    │           └ AggregationFunction: DataPrepAggregationFunction
│    └[~]  resource AWS::QuickSight::Template
│       └ types
│          └[~] type SheetDefinition
│            └ properties
│               └ Name: (documentation changed)
├[~] service aws-rtbfabric
│ └ resources
│    ├[~]  resource AWS::RTBFabric::Link
│    │  ├      - documentation: Resource Type definition for AWS::RTBFabric::Link Resource Type
│    │  │      + documentation: Creates a new link between gateways.
│    │  │      Establishes a connection that allows gateways to communicate and exchange bid requests and responses.
│    │  ├ properties
│    │  │  ├ GatewayId: (documentation changed)
│    │  │  ├ HttpResponderAllowed: (documentation changed)
│    │  │  ├ LinkAttributes: (documentation changed)
│    │  │  ├ LinkLogSettings: (documentation changed)
│    │  │  ├ PeerGatewayId: (documentation changed)
│    │  │  └ Tags: (documentation changed)
│    │  ├ attributes
│    │  │  └ LinkId: (documentation changed)
│    │  └ types
│    │     ├[~] type Action
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Describes a bid action.
│    │     │ └ properties
│    │     │    ├ HeaderTag: (documentation changed)
│    │     │    └ NoBid: (documentation changed)
│    │     ├[~] type ApplicationLogs
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Describes the configuration of a link application log.
│    │     │ └ properties
│    │     │    └ LinkApplicationLogSampling: (documentation changed)
│    │     ├[~] type Filter
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Describes the configuration of a filter.
│    │     │ └ properties
│    │     │    └ Criteria: (documentation changed)
│    │     ├[~] type FilterCriterion
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Describes the criteria for a filter.
│    │     │ └ properties
│    │     │    ├ Path: (documentation changed)
│    │     │    └ Values: (documentation changed)
│    │     ├[~] type HeaderTagAction
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Describes the header tag for a bid action.
│    │     │ └ properties
│    │     │    ├ Name: (documentation changed)
│    │     │    └ Value: (documentation changed)
│    │     ├[~] type LinkApplicationLogSampling
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Describes a link application log sample.
│    │     │ └ properties
│    │     │    ├ ErrorLog: (documentation changed)
│    │     │    └ FilterLog: (documentation changed)
│    │     ├[~] type LinkAttributes
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Describes the attributes of a link.
│    │     │ └ properties
│    │     │    ├ CustomerProvidedId: (documentation changed)
│    │     │    └ ResponderErrorMasking: (documentation changed)
│    │     ├[~] type LinkLogSettings
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Describes the settings for a link log.
│    │     │ └ properties
│    │     │    └ ApplicationLogs: (documentation changed)
│    │     ├[~] type ModuleConfiguration
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Describes the configuration of a module.
│    │     │ └ properties
│    │     │    ├ DependsOn: (documentation changed)
│    │     │    ├ ModuleParameters: (documentation changed)
│    │     │    ├ Name: (documentation changed)
│    │     │    └ Version: (documentation changed)
│    │     ├[~] type ModuleParameters
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Describes the parameters of a module.
│    │     │ └ properties
│    │     │    ├ NoBid: (documentation changed)
│    │     │    └ OpenRtbAttribute: (documentation changed)
│    │     ├[~] type NoBidAction
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Describes a no bid action.
│    │     │ └ properties
│    │     │    └ NoBidReasonCode: (documentation changed)
│    │     ├[~] type NoBidModuleParameters
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Describes the parameters of a no bid module.
│    │     │ └ properties
│    │     │    ├ PassThroughPercentage: (documentation changed)
│    │     │    ├ Reason: (documentation changed)
│    │     │    └ ReasonCode: (documentation changed)
│    │     ├[~] type OpenRtbAttributeModuleParameters
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Describes the parameters of an open RTB attribute module.
│    │     │ └ properties
│    │     │    ├ Action: (documentation changed)
│    │     │    ├ FilterConfiguration: (documentation changed)
│    │     │    ├ FilterType: (documentation changed)
│    │     │    └ HoldbackPercentage: (documentation changed)
│    │     └[~] type ResponderErrorMaskingForHttpCode
│    │       ├      - documentation: undefined
│    │       │      + documentation: Describes the masking for HTTP error codes.
│    │       └ properties
│    │          ├ Action: (documentation changed)
│    │          ├ HttpCode: (documentation changed)
│    │          ├ LoggingTypes: (documentation changed)
│    │          └ ResponseLoggingPercentage: (documentation changed)
│    ├[~]  resource AWS::RTBFabric::RequesterGateway
│    │  ├      - documentation: Resource Type definition for AWS::RTBFabric::RequesterGateway Resource Type.
│    │  │      + documentation: Creates a requester gateway.
│    │  └ properties
│    │     ├ Description: (documentation changed)
│    │     ├ SecurityGroupIds: (documentation changed)
│    │     ├ SubnetIds: (documentation changed)
│    │     ├ Tags: (documentation changed)
│    │     └ VpcId: (documentation changed)
│    └[~]  resource AWS::RTBFabric::ResponderGateway
│       ├      - documentation: Resource Type definition for AWS::RTBFabric::ResponderGateway Resource Type
│       │      + documentation: Creates a responder gateway.
│       │      > A domain name or managed endpoint is required.
│       ├ properties
│       │  ├ Description: (documentation changed)
│       │  ├ DomainName: (documentation changed)
│       │  ├ ManagedEndpointConfiguration: (documentation changed)
│       │  ├ Port: (documentation changed)
│       │  ├ Protocol: (documentation changed)
│       │  ├ SecurityGroupIds: (documentation changed)
│       │  ├ SubnetIds: (documentation changed)
│       │  ├ Tags: (documentation changed)
│       │  ├ TrustStoreConfiguration: (documentation changed)
│       │  └ VpcId: (documentation changed)
│       └ types
│          ├[~] type AutoScalingGroupsConfiguration
│          │ ├      - documentation: undefined
│          │ │      + documentation: Describes the configuration of an auto scaling group.
│          │ └ properties
│          │    ├ AutoScalingGroupNameList: (documentation changed)
│          │    └ RoleArn: (documentation changed)
│          ├[~] type EksEndpointsConfiguration
│          │ ├      - documentation: undefined
│          │ │      + documentation: Describes the configuration of an Amazon Elastic Kubernetes Service endpoint.
│          │ └ properties
│          │    ├ ClusterApiServerCaCertificateChain: (documentation changed)
│          │    ├ ClusterApiServerEndpointUri: (documentation changed)
│          │    ├ ClusterName: (documentation changed)
│          │    ├ EndpointsResourceName: (documentation changed)
│          │    ├ EndpointsResourceNamespace: (documentation changed)
│          │    └ RoleArn: (documentation changed)
│          ├[~] type ManagedEndpointConfiguration
│          │ ├      - documentation: undefined
│          │ │      + documentation: Describes the configuration of a managed endpoint.
│          │ └ properties
│          │    ├ AutoScalingGroupsConfiguration: (documentation changed)
│          │    └ EksEndpointsConfiguration: (documentation changed)
│          └[~] type TrustStoreConfiguration
│            ├      - documentation: undefined
│            │      + documentation: Describes the configuration of a trust store.
│            └ properties
│               └ CertificateAuthorityCertificates: (documentation changed)
├[~] service aws-s3vectors
│ └ resources
│    ├[~]  resource AWS::S3Vectors::Index
│    │  ├      - documentation: Resource Type definition for AWS::S3Vectors::Index
│    │  │      + documentation: The `AWS::S3Vectors::Index` resource defines a vector index within an Amazon S3 vector bucket. For more information, see [Creating a vector index in a vector bucket](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-vectors-create-index.html) in the *Amazon Simple Storage Service User Guide* .
│    │  │      You must specify either `VectorBucketName` or `VectorBucketArn` to identify the bucket that contains the index.
│    │  │      To control how AWS CloudFormation handles the vector index when the stack is deleted, you can set a deletion policy for your index. You can choose to *retain* the index or to *delete* the index. For more information, see [DeletionPolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html) .
│    │  │      - **Permissions** - The required permissions for CloudFormation to use are based on the operations that are performed on the stack.
│    │  │      - Create
│    │  │      - s3vectors:CreateIndex
│    │  │      - s3vectors:GetIndex
│    │  │      - Read
│    │  │      - s3vectors:GetIndex
│    │  │      - Delete
│    │  │      - s3vectors:DeleteIndex
│    │  │      - s3vectors:GetIndex
│    │  │      - List
│    │  │      - s3vectors:ListIndexes
│    │  ├ properties
│    │  │  ├ DataType: (documentation changed)
│    │  │  ├ Dimension: (documentation changed)
│    │  │  ├ DistanceMetric: (documentation changed)
│    │  │  ├ IndexName: (documentation changed)
│    │  │  └ VectorBucketArn: (documentation changed)
│    │  ├ attributes
│    │  │  ├ CreationTime: (documentation changed)
│    │  │  └ IndexArn: (documentation changed)
│    │  └ types
│    │     └[~] type MetadataConfiguration
│    │       ├      - documentation: The metadata configuration for the vector index.
│    │       │      + documentation: The metadata configuration for the vector index. This configuration allows you to specify which metadata keys should be treated as non-filterable.
│    │       └ properties
│    │          └ NonFilterableMetadataKeys: (documentation changed)
│    ├[~]  resource AWS::S3Vectors::VectorBucket
│    │  ├      - documentation: Resource Type definition for AWS::S3Vectors::VectorBucket
│    │  │      + documentation: Defines an Amazon S3 vector bucket in the same AWS Region where you create the AWS CloudFormation stack.
│    │  │      Vector buckets are specialized storage containers designed for storing and managing vector data used in machine learning and AI applications. They provide optimized storage and retrieval capabilities for high-dimensional vector data.
│    │  │      To control how AWS CloudFormation handles the bucket when the stack is deleted, you can set a deletion policy for your bucket. You can choose to *retain* the bucket or to *delete* the bucket. For more information, see [DeletionPolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html) .
│    │  │      > You can only delete empty vector buckets. Deletion fails for buckets that have contents. 
│    │  │      - **Permissions** - The required permissions for CloudFormation to use are based on the operations that are performed on the stack.
│    │  │      - Create
│    │  │      - s3vectors:CreateVectorBucket
│    │  │      - s3vectors:GetVectorBucket
│    │  │      - kms:GenerateDataKey (if using KMS encryption)
│    │  │      - Read
│    │  │      - s3vectors:GetVectorBucket
│    │  │      - kms:GenerateDataKey (if using KMS encryption)
│    │  │      - Delete
│    │  │      - s3vectors:DeleteVectorBucket
│    │  │      - s3vectors:GetVectorBucket
│    │  │      - kms:GenerateDataKey (if using KMS encryption)
│    │  │      - List
│    │  │      - s3vectors:ListVectorBuckets
│    │  │      - kms:GenerateDataKey (if using KMS encryption)
│    │  │      - arnTemplate: undefined
│    │  │      + arnTemplate: arn:${Partition}:s3vectors:${Region}:${Account}:bucket/${BucketName}
│    │  ├ properties
│    │  │  └ VectorBucketName: (documentation changed)
│    │  ├ attributes
│    │  │  ├ CreationTime: (documentation changed)
│    │  │  └ VectorBucketArn: (documentation changed)
│    │  └ types
│    │     └[~] type EncryptionConfiguration
│    │       ├      - documentation: The encryption configuration for the vector bucket.
│    │       │      + documentation: Specifies the encryption configuration for the vector bucket. By default, all new vectors in Amazon S3 vector buckets use server-side encryption with Amazon S3 managed keys (SSE-S3), specifically AES256.
│    │       └ properties
│    │          ├ KmsKeyArn: (documentation changed)
│    │          └ SseType: (documentation changed)
│    └[~]  resource AWS::S3Vectors::VectorBucketPolicy
│       ├      - documentation: Resource Type definition for AWS::S3Vectors::VectorBucketPolicy
│       │      + documentation: The `AWS::S3Vectors::VectorBucketPolicy` resource defines an Amazon S3 vector bucket policy to control access to an Amazon S3 vector bucket.
│       │      Vector bucket policies are written in JSON and allow you to grant or deny permissions across all (or a subset of) objects within a vector bucket.
│       │      You must specify either `VectorBucketName` or `VectorBucketArn` to identify the target bucket.
│       │      To control how AWS CloudFormation handles the vector bucket policy when the stack is deleted, you can set a deletion policy for your policy. You can choose to *retain* the policy or to *delete* the policy. For more information, see [DeletionPolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html) .
│       │      - **Permissions** - The required permissions for CloudFormation to use are based on the operations that are performed on the stack.
│       │      - Create
│       │      - s3vectors:GetVectorBucketPolicy
│       │      - s3vectors:PutVectorBucketPolicy
│       │      - Read
│       │      - s3vectors:GetVectorBucketPolicy
│       │      - Update
│       │      - s3vectors:GetVectorBucketPolicy
│       │      - s3vectors:PutVectorBucketPolicy
│       │      - Delete
│       │      - s3vectors:GetVectorBucketPolicy
│       │      - s3vectors:DeleteVectorBucketPolicy
│       │      - List
│       │      - s3vectors:GetVectorBucketPolicy
│       │      - s3vectors:ListVectorBuckets
│       └ properties
│          ├ Policy: (documentation changed)
│          ├ VectorBucketArn: (documentation changed)
│          └ VectorBucketName: (documentation changed)
├[~] service aws-servicecatalog
│ └ resources
│    ├[~]  resource AWS::ServiceCatalog::CloudFormationProduct
│    │  ├ attributes
│    │  │  └ Id: (documentation changed)
│    │  └ types
│    │     ├[+]  type Info
│    │     │  ├      documentation: Specify the template source with one of the following options, but not both. Keys accepted: [ LoadTemplateFromURL, ImportFromPhysicalId ] The URL of the AWS CloudFormation template in Amazon S3 in JSON format. Specify the URL in JSON format as follows:
│    │     │  │      "LoadTemplateFromURL": "https://s3.amazonaws.com/cf-templates-ozkq9d3hgiq2-us-east-1/..."
│    │     │  │      ImportFromPhysicalId: The physical id of the resource that contains the template. Currently only supports AWS CloudFormation stack arn. Specify the physical id in JSON format as follows: ImportFromPhysicalId: "arn:aws:cloudformation:[us-east-1]:[accountId]:stack/[StackName]/[resourceId]
│    │     │  │      name: Info
│    │     │  └ properties
│    │     │     ├ LoadTemplateFromURL: string
│    │     │     └ ImportFromPhysicalId: string
│    │     └[~] type ProvisioningArtifactProperties
│    │       └ properties
│    │          └ Info: - json (required)
│    │                  + Info ⇐ json (required)
│    └[~]  resource AWS::ServiceCatalog::PortfolioPrincipalAssociation
│       └ attributes
│          └[-] Id: string
├[~] service aws-ses
│ └ resources
│    └[+]  resource AWS::SES::MultiRegionEndpoint
│       ├      name: MultiRegionEndpoint
│       │      cloudFormationType: AWS::SES::MultiRegionEndpoint
│       │      documentation: Creates a multi-region endpoint (global-endpoint).
│       │      The primary region is going to be the AWS-Region where the operation is executed. The secondary region has to be provided in request's parameters. From the data flow standpoint there is no difference between primary and secondary regions - sending traffic will be split equally between the two. The primary region is the region where the resource has been created and where it can be managed.
│       │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│       ├ properties
│       │  ├ EndpointName: string (required, immutable)
│       │  ├ Tags: Array<tag>
│       │  └ Details: Details (required, immutable)
│       └ types
│          ├ type Details
│          │ ├      documentation: An object that contains configuration details of multi-region endpoint (global-endpoint).
│          │ │      name: Details
│          │ └ properties
│          │    └ RouteDetails: Array<RouteDetailsItems> (required)
│          └ type RouteDetailsItems
│            ├      name: RouteDetailsItems
│            └ properties
│               └ Region: string (required)
└[~] service aws-wafv2
  └ resources
     └[~]  resource AWS::WAFv2::WebACL
        ├ properties
        │  └[+] ApplicationConfig: ApplicationConfig
        └ types
           ├[+]  type ApplicationAttribute
           │  ├      documentation: Application details defined during the web ACL creation process. Application attributes help AWS WAF give recommendations for protection packs.
           │  │      name: ApplicationAttribute
           │  └ properties
           │     ├ Name: string (required)
           │     └ Values: Array<string> (required)
           └[+]  type ApplicationConfig
              ├      documentation: A list of `ApplicationAttribute` s that contains information about the application.
              │      name: ApplicationConfig
              └ properties
                 └ Attributes: Array<ApplicationAttribute> (required)

Updates the L1 CloudFormation resource definitions with the latest changes from `@aws-cdk/aws-service-spec`
@aws-cdk-automation aws-cdk-automation added contribution/core This is a PR that came from AWS. dependencies This issue is a problem in a dependency or a pull request that updates a dependency file. pr-linter/exempt-readme The PR linter will not require README changes pr-linter/exempt-test The PR linter will not require test changes pr-linter/exempt-integ-test The PR linter will not require integ test changes labels Nov 10, 2025
@aws-cdk-automation aws-cdk-automation requested review from a team November 10, 2025 10:28
@github-actions github-actions bot added the p2 label Nov 10, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

contribution/core This is a PR that came from AWS. dependencies This issue is a problem in a dependency or a pull request that updates a dependency file. p2 pr-linter/exempt-integ-test The PR linter will not require integ test changes pr-linter/exempt-readme The PR linter will not require README changes pr-linter/exempt-test The PR linter will not require test changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant