chore(release): 2.187.0 #33955
Merged
chore(release): 2.187.0 #33955
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
### Issue # (if applicable) Closes #32562 ### Description of changes - EKS Nodegroup support `nodeRepairConfig` ### Checklist - [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md) ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
) ### Issue # (if applicable) `aws-apprunner-alpha` for #32569 ### Description of changes ValidationErrors everywhere ### Describe any new or updated permissions being added n/a ### Description of how you validated changes Existing tests. Exemptions granted as this is basically a refactor of existing code. ### Checklist - [ ] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md) ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
Ran npm-check-updates and yarn upgrade to keep the `yarn.lock` file up-to-date.
Assets created by the AWS Construct Library now use friendly display names. - Assets like stack templates now show a display name like `MyStack Template`. - Assets from `Asset` or `ImageAsset` constructs now show the stack-relative construct path of the asset construct, like `MyConstruct/MyFunction/Code`. These defaults explicitly don't use entire construct paths on purpose, because those will be confusing in combination with the deduplication behavior of assets; if the same asset is added in multiple places in the construct tree, it will be deduplicated (based on the asset hash) and only processed once. The defaults have therefore been chosen to give useful contextual information, without implying a context that will alarm users. For example, it would be confusing for users to see references to `/MyBetaStage/MyStack Template` or `/MyBetaStack/MyFunction/Code` when they were deploying a "prod" environment; but if we used full context paths and the Beta resources were defined first, that would be the default behavior. A `displayName` property is available to override the default if the defaults are undesirable. This property is available for Asset/AssetImage constructs and their helper functions, not for template assets. ## Implementation notes Since in the cloud assembly `displayName` is part of neither asset *source* not asset *destination*, but an additional field, I've had to add a 3rd parameter `Add*AssetOptions` to most of the `add*Asset()` methods and it needs to be forwarded in a number of places. The CDK Pipelines implementation also needed to add the concept of a `displayName` to pipeline graph nodes, since reflecting it in the node IDs had far-reaching consequences (the node ID also affects the construct IDs of constructs that get created, and we don't want to have to recreate these just for a different display name). Uniquification of action names happens at the very last moment, when we put the Pipeline together. `GraphNode.of()` accepts positional parameters so I added a positional optional argument for display name there, but since in TypeScript subclasses have to be structurally compatible with superclasses (😶🌫️) and `Graph.of()` already takes an argument in that position, the type of that argument is now weird. The alternative would be to change the signature to `Graph.of(id, data, <displayName?>, nodes?)`, inserting `displayName`, but even though this is not part of the super public jsii interface this method is still accessible on the semi-public "extend me via TypeScript only" interface and we don't want to unnecessarily break consumers. ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
### Issue # (if applicable) Closes #8461. ### Reason for this change `ecr.Repository` construct does not support lookup method. ### Description of changes - Add `fromLookup` method ### Describe any new or updated permissions being added None ### Description of how you validated changes Add both unit and integ tests. ### Checklist - [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md) ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
…rors (#33912) ### Issue # (if applicable) `aws-kinesisfirehose` for #32569 ### Description of changes ValidationErrors everywhere ### Describe any new or updated permissions being added None ### Description of how you validated changes Existing tests. Exemptions granted as this is a refactor of existing code. ### Checklist - [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md) ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
…te subnets (#33786) ### Issue # (if applicable) Related to one of the related issue for EKS and VPC in #22025 . ### Reason for this change Currently EKS cluster with private endpoint access fails during `cdk synth` operation for a lookedup VPC. investigating further into lookup implementation, the VPC id is first populated through some dummy values including the one for private subnets : ``` { name: 'Private', type: cxapi.VpcSubnetGroupType.PRIVATE, subnets: [ { availabilityZone: 'dummy1a', subnetId: 'p-12345', routeTableId: 'rtb-12345p', cidr: '1.2.3.4/5', }, ``` But there are no dummy values defined for the case of privatesubnetIds : ``` privateSubnetIds: undefined, ``` which results in return of filtering by IDs option as a null object until the values are fully resolved. Reference code: https://github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-ec2/lib/vpc.ts#L2705 ### Description of changes using existing field `isPendingLookup` in the SubnetSelection which is being set on the basis of this.incompleteSubnetDefinition = isIncomplete; where `isIncomplete` is set to false during first pass of cdk synth. So during first synth operation, validation will be skipped. ### Describe any new or updated permissions being added NA ### Description of how you validated changes Added unit test and integration test ### Checklist - [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md) ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
…#33861) Ref * https://aws.amazon.com/about-aws/whats-new/2025/03/amazon-rds-sql-server-minor-version-february-2025/ ```sh % aws rds describe-db-engine-versions --engine sqlserver-ee --query "DBEngineVersions[?EngineVersion=='15.00.4420.2.v1'].[DBEngineVersionDescription,EngineVersion,DBParameterGroupFamily,MajorEngineVersion,Status]" [ [ "SQL Server 2019 15.00.4420.2.v1", "15.00.4420.2.v1", "sqlserver-ee-15.0", "15.00", "available" ] ] ``` ### Checklist - [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md) ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
…tered GA (#33949) ### Reason for this change The `cognito-identitypool` module was recently stabilized to GA in PR #33905. As such, we have no need for the alpha module any more. ### Description of changes ```sh rm -rf aws-cdk/packages/@aws-cdk/aws-cognito-identitypool-alpha ``` ### Description of how you validated changes `yarn install && npx lerna run build --skip-nx-cache` run successfully. ### Checklist - [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md) ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
…ntered GA (#33950) ### Reason for this change The `kinesisfirehose` and `kinesisfirehose-destinations` modules were recently stabilized to GA in PR #33296. As such, we have no need for the alpha module any more. ### Description of changes ```sh rm -rf aws-cdk/packages/@aws-cdk/aws-kinesisfirehose-alpha rm -rf aws-cdk/packages/@aws-cdk/aws-kinesisfirehose-destinations-alpha ``` ### Description of how you validated changes `yarn install && npx lerna run build --skip-nx-cache` run successfully. ### Checklist - [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md) ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
…les (#33951) ### Reason for this change The aws-scheduler-alpha and aws-scheduler-targets-alpha modules have now been [stabilized](#33903) so we can delete the alpha modules. Also update any remaining references to these deprecated alpha modules. ### Description of changes Removed `aws-scheduler-alpha` and `aws-scheduler-targets-alpha` modules from `@aws-cdk` package ### Description of how you validated changes Ran `yarn install` and `npx lerna run build` successfully. Verified all integ tests are passing. ### Checklist - [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md) ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
…1439) ### Issue # (if applicable) Closes #31808 ### Reason for this change It was impossible to start consuming a Kafka topic from a specific point in time. ### Description of changes The user may now set `startingPositionTimestamp` to `ManagedKafkaEventSource` and `SelfManagedKafkaEventSource` to start consuming a Kafka topic from a specific point in time. [Lambda and CloudFormation have supported the functionality for a while](https://aws.amazon.com/about-aws/whats-new/2023/06/aws-lambda-starting-timestamp-kafka-sources/), and other stream event sources like `KinesisEventSource` already had a CDK implementation for it. So, technically, this change is doing nothing new; it is only repeating the pattern that has already been proven to work on other sources. ### Description of how you validated changes The change is tested by adding similar unit tests to other event sources supporting this functionality. ### Checklist - [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md) ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
Updates the L1 CloudFormation resource definitions with the latest changes from `@aws-cdk/aws-service-spec`
**L1 CloudFormation resource definition changes:**
```
├[~] service aws-amplify
│ └ resources
│ ├[~] resource AWS::Amplify::App
│ │ └ properties
│ │ └[+] ComputeRoleArn: string
│ └[~] resource AWS::Amplify::Branch
│ └ properties
│ ├[+] ComputeRoleArn: string
│ └[+] EnableSkewProtection: boolean
├[~] service aws-apigateway
│ └ resources
│ ├[~] resource AWS::ApiGateway::DomainName
│ │ └ types
│ │ └[~] type EndpointConfiguration
│ │ └ properties
│ │ └[+] IpAddressType: string
│ └[~] resource AWS::ApiGateway::RestApi
│ └ types
│ └[~] type EndpointConfiguration
│ └ properties
│ └[+] IpAddressType: string
├[~] service aws-appsync
│ └ resources
│ └[~] resource AWS::AppSync::DomainName
│ ├ properties
│ │ └ Tags: (documentation changed)
│ └ attributes
│ └ DomainNameArn: (documentation changed)
├[~] service aws-bedrock
│ └ resources
│ └[~] resource AWS::Bedrock::DataSource
│ ├ attributes
│ │ └ DataSourceConfiguration.WebConfiguration.CrawlerConfiguration.UserAgentHeader: (documentation changed)
│ └ types
│ ├[~] type BedrockFoundationModelContextEnrichmentConfiguration
│ │ ├ - documentation: Bedrock Foundation Model configuration to be used for Context Enrichment.
│ │ │ + documentation: Context enrichment configuration is used to provide additional context to the RAG application using Amazon Bedrock foundation models.
│ │ └ properties
│ │ ├ EnrichmentStrategyConfiguration: (documentation changed)
│ │ └ ModelArn: (documentation changed)
│ ├[~] type ContextEnrichmentConfiguration
│ │ ├ - documentation: Additional Enrichment Configuration for example when using GraphRag.
│ │ │ + documentation: Context enrichment configuration is used to provide additional context to the RAG application.
│ │ └ properties
│ │ ├ BedrockFoundationModelConfiguration: (documentation changed)
│ │ └ Type: (documentation changed)
│ ├[~] type EnrichmentStrategyConfiguration
│ │ ├ - documentation: Strategy to be used when using Bedrock Foundation Model for Context Enrichment.
│ │ │ + documentation: The strategy used for performing context enrichment.
│ │ └ properties
│ │ └ Method: (documentation changed)
│ ├[~] type VectorIngestionConfiguration
│ │ └ properties
│ │ └ ContextEnrichmentConfiguration: (documentation changed)
│ ├[~] type WebCrawlerConfiguration
│ │ └ properties
│ │ ├ UserAgent: (documentation changed)
│ │ └ UserAgentHeader: (documentation changed)
│ └[~] type WebCrawlerLimits
│ └ properties
│ └ MaxPages: (documentation changed)
├[~] service aws-cassandra
│ └ resources
│ └[~] resource AWS::Cassandra::Keyspace
│ └ types
│ └[~] type ReplicationSpecification
│ └ properties
│ └ RegionList: (documentation changed)
├[~] service aws-cloudtrail
│ └ resources
│ ├[~] resource AWS::CloudTrail::EventDataStore
│ │ └ types
│ │ └[~] type AdvancedFieldSelector
│ │ └ properties
│ │ └ Field: (documentation changed)
│ └[~] resource AWS::CloudTrail::Trail
│ └ types
│ └[~] type AdvancedFieldSelector
│ └ properties
│ └ Field: (documentation changed)
├[~] service aws-config
│ └ resources
│ └[~] resource AWS::Config::ConfigRule
│ └ properties
│ └ Scope: (documentation changed)
├[~] service aws-databrew
│ └ resources
│ └[~] resource AWS::DataBrew::Ruleset
│ └ properties
│ └ Tags: - Array<tag> (immutable)
│ + Array<tag>
├[~] service aws-datazone
│ └ resources
│ ├[~] resource AWS::DataZone::Connection
│ │ ├ - documentation: Connections enables users to connect their DataZone resources (domains, projects, and environments) to external resources/services (data, compute, etc)
│ │ │ + documentation: In Amazon DataZone, a connection enables you to connect your resources (domains, projects, and environments) to external resources and services.
│ │ ├ properties
│ │ │ ├ AwsLocation: (documentation changed)
│ │ │ ├ Description: (documentation changed)
│ │ │ ├ DomainIdentifier: (documentation changed)
│ │ │ ├ EnvironmentIdentifier: (documentation changed)
│ │ │ └ Props: (documentation changed)
│ │ ├ attributes
│ │ │ ├ DomainId: (documentation changed)
│ │ │ ├ DomainUnitId: (documentation changed)
│ │ │ ├ EnvironmentId: (documentation changed)
│ │ │ ├ EnvironmentUserRole: (documentation changed)
│ │ │ ├ ProjectId: (documentation changed)
│ │ │ └ Type: (documentation changed)
│ │ └ types
│ │ ├[~] type AthenaPropertiesInput
│ │ │ ├ - documentation: Athena Properties Input
│ │ │ │ + documentation: The Amazon Athena properties of a connection.
│ │ │ └ properties
│ │ │ └ WorkgroupName: (documentation changed)
│ │ ├[~] type AuthenticationConfigurationInput
│ │ │ ├ - documentation: Authentication Configuration Input
│ │ │ │ + documentation: The authentication configuration of a connection.
│ │ │ └ properties
│ │ │ ├ AuthenticationType: (documentation changed)
│ │ │ ├ BasicAuthenticationCredentials: (documentation changed)
│ │ │ ├ CustomAuthenticationCredentials: (documentation changed)
│ │ │ ├ KmsKeyArn: (documentation changed)
│ │ │ ├ OAuth2Properties: (documentation changed)
│ │ │ └ SecretArn: (documentation changed)
│ │ ├[~] type AuthorizationCodeProperties
│ │ │ ├ - documentation: Authorization Code Properties
│ │ │ │ + documentation: The authorization code properties of a connection.
│ │ │ └ properties
│ │ │ ├ AuthorizationCode: (documentation changed)
│ │ │ └ RedirectUri: (documentation changed)
│ │ ├[~] type AwsLocation
│ │ │ ├ - documentation: AWS Location of project
│ │ │ │ + documentation: The location of a project.
│ │ │ └ properties
│ │ │ ├ AccessRole: (documentation changed)
│ │ │ ├ AwsAccountId: (documentation changed)
│ │ │ ├ AwsRegion: (documentation changed)
│ │ │ └ IamConnectionId: (documentation changed)
│ │ ├[~] type BasicAuthenticationCredentials
│ │ │ ├ - documentation: Basic Authentication Credentials
│ │ │ │ + documentation: The basic authentication credentials of a connection.
│ │ │ └ properties
│ │ │ ├ Password: (documentation changed)
│ │ │ └ UserName: (documentation changed)
│ │ ├[~] type ConnectionPropertiesInput
│ │ │ ├ - documentation: undefined
│ │ │ │ + documentation: The properties of a connection.
│ │ │ └ properties
│ │ │ ├ AthenaProperties: (documentation changed)
│ │ │ ├ GlueProperties: (documentation changed)
│ │ │ ├ HyperPodProperties: (documentation changed)
│ │ │ ├ IamProperties: (documentation changed)
│ │ │ ├ RedshiftProperties: (documentation changed)
│ │ │ ├ SparkEmrProperties: (documentation changed)
│ │ │ └ SparkGlueProperties: (documentation changed)
│ │ ├[~] type GlueConnectionInput
│ │ │ ├ - documentation: Glue Connection Input
│ │ │ │ + documentation: The AWS Glue connecton input.
│ │ │ └ properties
│ │ │ ├ AthenaProperties: (documentation changed)
│ │ │ ├ AuthenticationConfiguration: (documentation changed)
│ │ │ ├ ConnectionProperties: (documentation changed)
│ │ │ ├ ConnectionType: (documentation changed)
│ │ │ ├ Description: (documentation changed)
│ │ │ ├ MatchCriteria: (documentation changed)
│ │ │ ├ Name: (documentation changed)
│ │ │ ├ PhysicalConnectionRequirements: (documentation changed)
│ │ │ ├ PythonProperties: (documentation changed)
│ │ │ ├ SparkProperties: (documentation changed)
│ │ │ ├ ValidateCredentials: (documentation changed)
│ │ │ └ ValidateForComputeEnvironments: (documentation changed)
│ │ ├[~] type GlueOAuth2Credentials
│ │ │ ├ - documentation: Glue OAuth2 Credentials
│ │ │ │ + documentation: The GlueOAuth2 credentials of a connection.
│ │ │ └ properties
│ │ │ ├ AccessToken: (documentation changed)
│ │ │ ├ JwtToken: (documentation changed)
│ │ │ ├ RefreshToken: (documentation changed)
│ │ │ └ UserManagedClientApplicationClientSecret: (documentation changed)
│ │ ├[~] type GluePropertiesInput
│ │ │ ├ - documentation: Glue Properties Input
│ │ │ │ + documentation: The AWS Glue properties of a connection.
│ │ │ └ properties
│ │ │ └ GlueConnectionInput: (documentation changed)
│ │ ├[~] type HyperPodPropertiesInput
│ │ │ ├ - documentation: HyperPod Properties Input
│ │ │ │ + documentation: The hyper pod properties of a AWS Glue properties patch.
│ │ │ └ properties
│ │ │ └ ClusterName: (documentation changed)
│ │ ├[~] type IamPropertiesInput
│ │ │ ├ - documentation: IAM Properties Input
│ │ │ │ + documentation: The IAM properties of a connection.
│ │ │ └ properties
│ │ │ └ GlueLineageSyncEnabled: (documentation changed)
│ │ ├[~] type LineageSyncSchedule
│ │ │ ├ - documentation: Lineage Sync Schedule
│ │ │ │ + documentation: The lineage sync schedule.
│ │ │ └ properties
│ │ │ └ Schedule: (documentation changed)
│ │ ├[~] type OAuth2ClientApplication
│ │ │ ├ - documentation: OAuth2 Client Application
│ │ │ │ + documentation: The OAuth2Client application.
│ │ │ └ properties
│ │ │ ├ AWSManagedClientApplicationReference: (documentation changed)
│ │ │ └ UserManagedClientApplicationClientId: (documentation changed)
│ │ ├[~] type OAuth2Properties
│ │ │ ├ - documentation: OAuth2 Properties
│ │ │ │ + documentation: The OAuth2 properties.
│ │ │ └ properties
│ │ │ ├ AuthorizationCodeProperties: (documentation changed)
│ │ │ ├ OAuth2ClientApplication: (documentation changed)
│ │ │ ├ OAuth2Credentials: (documentation changed)
│ │ │ ├ OAuth2GrantType: (documentation changed)
│ │ │ ├ TokenUrl: (documentation changed)
│ │ │ └ TokenUrlParametersMap: (documentation changed)
│ │ ├[~] type PhysicalConnectionRequirements
│ │ │ ├ - documentation: Physical Connection Requirements
│ │ │ │ + documentation: Physical connection requirements of a connection.
│ │ │ └ properties
│ │ │ ├ AvailabilityZone: (documentation changed)
│ │ │ ├ SecurityGroupIdList: (documentation changed)
│ │ │ ├ SubnetId: (documentation changed)
│ │ │ └ SubnetIdList: (documentation changed)
│ │ ├[~] type RedshiftCredentials
│ │ │ ├ - documentation: undefined
│ │ │ │ + documentation: Amazon Redshift credentials of a connection.
│ │ │ └ properties
│ │ │ ├ SecretArn: (documentation changed)
│ │ │ └ UsernamePassword: (documentation changed)
│ │ ├[~] type RedshiftLineageSyncConfigurationInput
│ │ │ ├ - documentation: Redshift Lineage Sync Configuration Input
│ │ │ │ + documentation: The Amaon Redshift lineage sync configuration.
│ │ │ └ properties
│ │ │ ├ Enabled: (documentation changed)
│ │ │ └ Schedule: (documentation changed)
│ │ ├[~] type RedshiftPropertiesInput
│ │ │ ├ - documentation: Redshift Properties Input
│ │ │ │ + documentation: The Amazon Redshift properties.
│ │ │ └ properties
│ │ │ ├ Credentials: (documentation changed)
│ │ │ ├ DatabaseName: (documentation changed)
│ │ │ ├ Host: (documentation changed)
│ │ │ ├ LineageSync: (documentation changed)
│ │ │ ├ Port: (documentation changed)
│ │ │ └ Storage: (documentation changed)
│ │ ├[~] type RedshiftStorageProperties
│ │ │ ├ - documentation: undefined
│ │ │ │ + documentation: The Amazon Redshift storage properties.
│ │ │ └ properties
│ │ │ ├ ClusterName: (documentation changed)
│ │ │ └ WorkgroupName: (documentation changed)
│ │ ├[~] type SparkEmrPropertiesInput
│ │ │ ├ - documentation: Spark EMR Properties Input.
│ │ │ │ + documentation: The Spark EMR properties.
│ │ │ └ properties
│ │ │ ├ ComputeArn: (documentation changed)
│ │ │ ├ InstanceProfileArn: (documentation changed)
│ │ │ ├ JavaVirtualEnv: (documentation changed)
│ │ │ ├ LogUri: (documentation changed)
│ │ │ ├ PythonVirtualEnv: (documentation changed)
│ │ │ ├ RuntimeRole: (documentation changed)
│ │ │ └ TrustedCertificatesS3Uri: (documentation changed)
│ │ ├[~] type SparkGlueArgs
│ │ │ ├ - documentation: Spark Glue Args.
│ │ │ │ + documentation: The Spark AWS Glue args.
│ │ │ └ properties
│ │ │ └ Connection: (documentation changed)
│ │ ├[~] type SparkGluePropertiesInput
│ │ │ ├ - documentation: Spark Glue Properties Input.
│ │ │ │ + documentation: The Spark AWS Glue properties.
│ │ │ └ properties
│ │ │ ├ AdditionalArgs: (documentation changed)
│ │ │ ├ GlueConnectionName: (documentation changed)
│ │ │ ├ GlueVersion: (documentation changed)
│ │ │ ├ IdleTimeout: (documentation changed)
│ │ │ ├ JavaVirtualEnv: (documentation changed)
│ │ │ ├ NumberOfWorkers: (documentation changed)
│ │ │ ├ PythonVirtualEnv: (documentation changed)
│ │ │ └ WorkerType: (documentation changed)
│ │ └[~] type UsernamePassword
│ │ ├ - documentation: The username and password to be used for authentication.
│ │ │ + documentation: The username and password of a connection.
│ │ └ properties
│ │ ├ Password: (documentation changed)
│ │ └ Username: (documentation changed)
│ └[~] resource AWS::DataZone::EnvironmentActions
│ └ properties
│ ├ Description: (documentation changed)
│ └ Parameters: (documentation changed)
├[~] service aws-detective
│ └ resources
│ └[~] resource AWS::Detective::Graph
│ └ properties
│ └ AutoEnableMembers: (documentation changed)
├[~] service aws-eks
│ └ resources
│ └[~] resource AWS::EKS::Cluster
│ └ properties
│ └[+] Force: boolean (default=false)
├[~] service aws-forecast
│ └ resources
│ └[~] resource AWS::Forecast::Dataset
│ └ types
│ └[~] type EncryptionConfig
│ └ - documentation: An AWS Key Management Service (KMS) key and an AWS Identity and Access Management (IAM) role that Amazon Forecast can assume to access the key. You can specify this optional object in the `CreateDataset` and `CreatePredictor` requests.
│ + documentation: An AWS Key Management Service (KMS) key and an AWS Identity and Access Management (IAM) role that Amazon Forecast can assume to access the key. You can specify this optional object in the [CreateDataset](https://docs.aws.amazon.com/forecast/latest/dg/API_CreateDataset.html) and [CreatePredictor](https://docs.aws.amazon.com/forecast/latest/dg/API_CreatePredictor.html) requests.
├[~] service aws-fsx
│ └ resources
│ └[~] resource AWS::FSx::Volume
│ └ types
│ └[~] type OpenZFSConfiguration
│ └ properties
│ └ CopyTagsToSnapshots: (documentation changed)
├[~] service aws-gamelift
│ └ resources
│ ├[~] resource AWS::GameLift::Build
│ │ └ properties
│ │ └ OperatingSystem: (documentation changed)
│ └[~] resource AWS::GameLift::ContainerGroupDefinition
│ └ properties
│ └ OperatingSystem: (documentation changed)
├[~] service aws-identitystore
│ └ resources
│ ├[~] resource AWS::IdentityStore::Group
│ │ ├ - documentation: A group object, which contains a specified group’s metadata and attributes.
│ │ │ + documentation: A group object that contains the metadata and attributes for a specified group.
│ │ ├ properties
│ │ │ └ Description: (documentation changed)
│ │ └ attributes
│ │ └ GroupId: (documentation changed)
│ └[~] resource AWS::IdentityStore::GroupMembership
│ ├ - documentation: Contains the identifiers for a group, a group member, and a `GroupMembership` object in the identity store.
│ │ + documentation: Creates a relationship between a member and a group. The following identifiers must be specified: `GroupId` , `IdentityStoreId` , and `MemberId` .
│ ├ properties
│ │ └ MemberId: (documentation changed)
│ ├ attributes
│ │ └ MembershipId: (documentation changed)
│ └ types
│ └[~] type MemberId
│ └ - documentation: An object that contains the identifier of a group member. Setting the `UserID` field to the specific identifier for a user indicates that the user is a member of the group.
│ + documentation: An object containing the identifier of a group member.
├[~] service aws-iotsitewise
│ └ resources
│ └[+] resource AWS::IoTSiteWise::Dataset
│ ├ name: Dataset
│ │ cloudFormationType: AWS::IoTSiteWise::Dataset
│ │ documentation: Resource schema for AWS::IoTSiteWise::Dataset.
│ │ tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│ ├ properties
│ │ ├ DatasetName: string (required)
│ │ ├ DatasetDescription: string
│ │ ├ DatasetSource: DatasetSource (required)
│ │ └ Tags: Array<tag>
│ ├ attributes
│ │ ├ DatasetArn: string
│ │ └ DatasetId: string
│ └ types
│ ├ type DatasetSource
│ │ ├ name: DatasetSource
│ │ └ properties
│ │ ├ SourceFormat: string (required)
│ │ ├ SourceType: string (required)
│ │ └ SourceDetail: SourceDetail
│ ├ type KendraSourceDetail
│ │ ├ name: KendraSourceDetail
│ │ └ properties
│ │ ├ KnowledgeBaseArn: string (required)
│ │ └ RoleArn: string (required)
│ └ type SourceDetail
│ ├ name: SourceDetail
│ └ properties
│ └ Kendra: KendraSourceDetail
├[~] service aws-lakeformation
│ └ resources
│ └[~] resource AWS::LakeFormation::DataLakeSettings
│ └ properties
│ └ Parameters: (documentation changed)
├[~] service aws-lambda
│ └ resources
│ ├[~] resource AWS::Lambda::EventInvokeConfig
│ │ └ types
│ │ └[~] type DestinationConfig
│ │ └ properties
│ │ ├ OnFailure: (documentation changed)
│ │ └ OnSuccess: (documentation changed)
│ └[~] resource AWS::Lambda::EventSourceMapping
│ └ properties
│ └ BisectBatchOnFunctionError: (documentation changed)
├[~] service aws-lex
│ └ resources
│ └[~] resource AWS::Lex::Bot
│ └ types
│ ├[+] type BedrockGuardrailConfiguration
│ │ ├ documentation: The guardrail configuration in the Bedrock model specification details.
│ │ │ name: BedrockGuardrailConfiguration
│ │ └ properties
│ │ ├ BedrockGuardrailIdentifier: string
│ │ └ BedrockGuardrailVersion: string
│ ├[+] type BedrockKnowledgeStoreConfiguration
│ │ ├ documentation: Contains details about the configuration of a Amazon Bedrock knowledge base.
│ │ │ name: BedrockKnowledgeStoreConfiguration
│ │ └ properties
│ │ ├ BedrockKnowledgeBaseArn: string
│ │ ├ ExactResponse: boolean
│ │ └ BKBExactResponseFields: BKBExactResponseFields
│ ├[+] type BedrockModelSpecification
│ │ ├ documentation: Contains information about the Amazon Bedrock model used to interpret the prompt used in descriptive bot building.
│ │ │ name: BedrockModelSpecification
│ │ └ properties
│ │ ├ ModelArn: string (required)
│ │ ├ BedrockGuardrailConfiguration: BedrockGuardrailConfiguration
│ │ ├ BedrockTraceStatus: string
│ │ └ BedrockModelCustomPrompt: string
│ ├[+] type BKBExactResponseFields
│ │ ├ documentation: Contains the names of the fields used for an exact response to the user.
│ │ │ name: BKBExactResponseFields
│ │ └ properties
│ │ └ AnswerField: string
│ ├[+] type DataSourceConfiguration
│ │ ├ documentation: Contains details about the configuration of the data source used for the AMAZON.QnAIntent.
│ │ │ name: DataSourceConfiguration
│ │ └ properties
│ │ ├ OpensearchConfiguration: OpensearchConfiguration
│ │ ├ BedrockKnowledgeStoreConfiguration: BedrockKnowledgeStoreConfiguration
│ │ └ KendraConfiguration: QnAKendraConfiguration
│ ├[+] type ExactResponseFields
│ │ ├ documentation: Contains the names of the fields used for an exact response to the user.
│ │ │ name: ExactResponseFields
│ │ └ properties
│ │ ├ QuestionField: string
│ │ └ AnswerField: string
│ ├[~] type Intent
│ │ └ properties
│ │ └[+] QnAIntentConfiguration: QnAIntentConfiguration
│ ├[+] type OpensearchConfiguration
│ │ ├ documentation: Contains details about the configuration of the Amazon OpenSearch Service database used for the AMAZON.QnAIntent.
│ │ │ name: OpensearchConfiguration
│ │ └ properties
│ │ ├ DomainEndpoint: string
│ │ ├ IndexName: string
│ │ ├ IncludeFields: Array<string>
│ │ ├ ExactResponse: boolean
│ │ └ ExactResponseFields: ExactResponseFields
│ ├[+] type QnAIntentConfiguration
│ │ ├ documentation: Details about the the configuration of the built-in Amazon.QnAIntent.
│ │ │ name: QnAIntentConfiguration
│ │ └ properties
│ │ ├ DataSourceConfiguration: DataSourceConfiguration (required)
│ │ └ BedrockModelConfiguration: BedrockModelSpecification (required)
│ └[+] type QnAKendraConfiguration
│ ├ documentation: Contains details about the configuration of the Amazon Kendra index used for the AMAZON.QnAIntent.
│ │ name: QnAKendraConfiguration
│ └ properties
│ ├ KendraIndex: string (required)
│ ├ QueryFilterString: string
│ ├ QueryFilterStringEnabled: boolean (required)
│ └ ExactResponse: boolean (required)
├[~] service aws-mediaconnect
│ └ resources
│ ├[~] resource AWS::MediaConnect::Bridge
│ │ ├ - documentation: The AWS::MediaConnect::Bridge resource defines a connection between your data center’s gateway instances and the cloud. For each bridge, you specify the type of bridge, transport protocol to use, and details for any outputs and failover.
│ │ │ + documentation: The `AWS::MediaConnect::Bridge` resource defines a connection between your data center’s gateway instances and the cloud. For each bridge, you specify the type of bridge, transport protocol to use, and details for any outputs and failover.
│ │ ├ properties
│ │ │ ├ EgressGatewayBridge: (documentation changed)
│ │ │ └ IngressGatewayBridge: (documentation changed)
│ │ └ types
│ │ ├[~] type BridgeNetworkOutput
│ │ │ └ properties
│ │ │ ├ IpAddress: (documentation changed)
│ │ │ ├ Port: (documentation changed)
│ │ │ └ Protocol: (documentation changed)
│ │ ├[~] type BridgeNetworkSource
│ │ │ └ properties
│ │ │ ├ Name: (documentation changed)
│ │ │ └ Protocol: (documentation changed)
│ │ ├[~] type FailoverConfig
│ │ │ └ properties
│ │ │ └ SourcePriority: (documentation changed)
│ │ ├[~] type SourcePriority
│ │ │ └ - documentation: The priority you want to assign to a source. You can have a primary stream and a backup stream or two equally prioritized streams. This setting only applies when Failover Mode is set to FAILOVER.
│ │ │ + documentation: The priority you want to assign to a source. You can have a primary stream and a backup stream or two equally prioritized streams.
│ │ └[~] type VpcInterfaceAttachment
│ │ ├ - documentation: The VPC interface that you want to send your output to.
│ │ │ + documentation: The settings for attaching a VPC interface to an resource.
│ │ └ properties
│ │ └ VpcInterfaceName: (documentation changed)
│ ├[~] resource AWS::MediaConnect::BridgeOutput
│ │ ├ properties
│ │ │ ├ BridgeArn: (documentation changed)
│ │ │ └ NetworkOutput: (documentation changed)
│ │ └ types
│ │ └[~] type BridgeNetworkOutput
│ │ └ properties
│ │ ├ IpAddress: (documentation changed)
│ │ ├ Port: (documentation changed)
│ │ └ Protocol: (documentation changed)
│ ├[~] resource AWS::MediaConnect::BridgeSource
│ │ ├ properties
│ │ │ ├ BridgeArn: (documentation changed)
│ │ │ ├ FlowSource: (documentation changed)
│ │ │ └ NetworkSource: (documentation changed)
│ │ └ types
│ │ ├[~] type BridgeNetworkSource
│ │ │ └ properties
│ │ │ └ Protocol: (documentation changed)
│ │ └[~] type VpcInterfaceAttachment
│ │ ├ - documentation: The VPC interface that you want to send your output to.
│ │ │ + documentation: The settings for attaching a VPC interface to an resource.
│ │ └ properties
│ │ └ VpcInterfaceName: (documentation changed)
│ ├[~] resource AWS::MediaConnect::Flow
│ │ ├ - documentation: The AWS::MediaConnect::Flow resource defines a connection between one or more video sources and one or more outputs. For each flow, you specify the transport protocol to use, encryption information, and details for any outputs or entitlements that you want. AWS Elemental MediaConnect returns an ingest endpoint where you can send your live video as a single unicast stream. The service replicates and distributes the video to every output that you specify, whether inside or outside the AWS Cloud. You can also set up entitlements on a flow to allow other AWS accounts to access your content.
│ │ │ + documentation: The `AWS::MediaConnect::Flow` resource defines a connection between one or more video sources and one or more outputs. For each flow, you specify the transport protocol to use, encryption information, and details for any outputs or entitlements that you want. AWS Elemental MediaConnect returns an ingest endpoint where you can send your live video as a single unicast stream. The service replicates and distributes the video to every output that you specify, whether inside or outside the AWS Cloud. You can also set up entitlements on a flow to allow other AWS accounts to access your content.
│ │ ├ properties
│ │ │ ├[+] FlowSize: string
│ │ │ ├ MediaStreams: (documentation changed)
│ │ │ ├[+] NdiConfig: NdiConfig
│ │ │ └ VpcInterfaces: (documentation changed)
│ │ ├ attributes
│ │ │ ├ EgressIp: (documentation changed)
│ │ │ └[+] FlowNdiMachineName: string
│ │ └ types
│ │ ├[~] type BlackFrames
│ │ │ └ properties
│ │ │ └ State: (documentation changed)
│ │ ├[~] type Encryption
│ │ │ └ properties
│ │ │ ├ RoleArn: (documentation changed)
│ │ │ └ SecretArn: (documentation changed)
│ │ ├[~] type FailoverConfig
│ │ │ └ properties
│ │ │ ├ RecoveryWindow: (documentation changed)
│ │ │ └ SourcePriority: (documentation changed)
│ │ ├[~] type InputConfiguration
│ │ │ └ - documentation: The transport parameters associated with an incoming media stream.
│ │ │ + documentation: The transport parameters that are associated with an incoming media stream.
│ │ ├[~] type Interface
│ │ │ ├ - documentation: The VPC interface that you want to use for the media stream associated with the output.
│ │ │ │ + documentation: The VPC interface that is used for the media stream associated with the source or output.
│ │ │ └ properties
│ │ │ └ Name: (documentation changed)
│ │ ├[~] type Maintenance
│ │ │ └ - documentation: The maintenance setting of a flow. MediaConnect routinely performs maintenance on underlying systems for security, reliability, and operational performance. The maintenance activities include actions such as patching the operating system, updating drivers, or installing software and patches.
│ │ │ You can select the day and time that maintenance events occur. This is called a maintenance window and is used every time a maintenance event is required. To change the day and time, you can edit the maintenance window using `MaintenanceDay` and `MaintenanceStartHour` .
│ │ │ + documentation: The maintenance setting of a flow.
│ │ ├[~] type MediaStream
│ │ │ ├ - documentation: A single track or stream of media that contains video, audio, or ancillary data. After you add a media stream to a flow, you can associate it with sources and outputs on that flow, as long as they use the CDI protocol or the ST 2110 JPEG XS protocol. Each source or output can consist of one or many media streams.
│ │ │ │ + documentation: A media stream represents one component of your content, such as video, audio, or ancillary data. After you add a media stream to your flow, you can associate it with sources and outputs that use the ST 2110 JPEG XS or CDI protocol.
│ │ │ └ properties
│ │ │ └ ClockRate: (documentation changed)
│ │ ├[~] type MediaStreamAttributes
│ │ │ └ properties
│ │ │ └ Fmtp: (documentation changed)
│ │ ├[~] type MediaStreamSourceConfiguration
│ │ │ └ properties
│ │ │ └ EncodingName: (documentation changed)
│ │ ├[+] type NdiConfig
│ │ │ ├ documentation: Specifies the configuration settings for NDI outputs. Required when the flow includes NDI outputs.
│ │ │ │ name: NdiConfig
│ │ │ └ properties
│ │ │ ├ NdiDiscoveryServers: Array<NdiDiscoveryServerConfig>
│ │ │ ├ NdiState: string
│ │ │ └ MachineName: string
│ │ ├[+] type NdiDiscoveryServerConfig
│ │ │ ├ documentation: Specifies the configuration settings for individual NDI discovery servers. A maximum of 3 servers is allowed.
│ │ │ │ name: NdiDiscoveryServerConfig
│ │ │ └ properties
│ │ │ ├ VpcInterfaceAdapter: string (required)
│ │ │ ├ DiscoveryServerAddress: string (required)
│ │ │ └ DiscoveryServerPort: integer
│ │ ├[~] type Source
│ │ │ └ properties
│ │ │ ├ Decryption: (documentation changed)
│ │ │ ├ Description: (documentation changed)
│ │ │ ├ EntitlementArn: (documentation changed)
│ │ │ ├ IngestIp: (documentation changed)
│ │ │ ├ IngestPort: (documentation changed)
│ │ │ ├ MediaStreamSourceConfigurations: (documentation changed)
│ │ │ ├ VpcInterfaceName: (documentation changed)
│ │ │ └ WhitelistCidr: (documentation changed)
│ │ ├[~] type SourceMonitoringConfig
│ │ │ └ - documentation: The `SourceMonitoringConfig` property type specifies the source monitoring settings for an AWS::MediaConnect::Flow.
│ │ │ + documentation: The `SourceMonitoringConfig` property type specifies the source monitoring settings for an `AWS::MediaConnect::Flow` .
│ │ ├[~] type SourcePriority
│ │ │ └ - documentation: The priority you want to assign to a source. You can have a primary stream and a backup stream or two equally prioritized streams. This setting only applies when Failover Mode is set to FAILOVER.
│ │ │ + documentation: The priority you want to assign to a source. You can have a primary stream and a backup stream or two equally prioritized streams.
│ │ ├[~] type VpcInterface
│ │ │ ├ - documentation: The details of a VPC interface.
│ │ │ │ + documentation: The details of a VPC interface.
│ │ │ │ > When configuring VPC interfaces for NDI outputs, keep in mind the following:
│ │ │ │ >
│ │ │ │ > - VPC interfaces must be defined as nested attributes within the `AWS::MediaConnect::Flow` resource, and not within the top-level `AWS::MediaConnect::FlowVpcInterface` resource.
│ │ │ │ > - There's a maximum limit of three VPC interfaces for each flow. If you've already reached this limit, you can't update the flow to use a different VPC interface without first removing an existing one.
│ │ │ │ >
│ │ │ │ > To update your VPC interfaces in this scenario, you must first remove the VPC interface that’s not being used. Next, add the new VPC interfaces. Lastly, update the `VpcInterfaceAdapter` in the `NDIConfig` property. These changes must be performed as separate manual operations and cannot be done through a single template update.
│ │ │ └ properties
│ │ │ ├ Name: (documentation changed)
│ │ │ ├ NetworkInterfaceIds: (documentation changed)
│ │ │ ├ RoleArn: (documentation changed)
│ │ │ ├ SecurityGroupIds: (documentation changed)
│ │ │ └ SubnetId: (documentation changed)
│ │ └[~] type VpcInterfaceAttachment
│ │ ├ - documentation: The VPC interface that you want to send your output to.
│ │ │ + documentation: The settings for attaching a VPC interface to an resource.
│ │ └ properties
│ │ └ VpcInterfaceName: (documentation changed)
│ ├[~] resource AWS::MediaConnect::FlowEntitlement
│ │ ├ - documentation: The AWS::MediaConnect::FlowEntitlement resource defines the permission that an AWS account grants to another AWS account to allow access to the content in a specific AWS Elemental MediaConnect flow. The content originator grants an entitlement to a specific AWS account (the subscriber). When an entitlement is granted, the subscriber can create a flow using the originator's flow as the source. Each flow can have up to 50 entitlements.
│ │ │ + documentation: The `AWS::MediaConnect::FlowEntitlement` resource defines the permission that an AWS account grants to another AWS account to allow access to the content in a specific AWS Elemental MediaConnect flow. The content originator grants an entitlement to a specific AWS account (the subscriber). When an entitlement is granted, the subscriber can create a flow using the originator's flow as the source. Each flow can have up to 50 entitlements.
│ │ ├ properties
│ │ │ └ Encryption: (documentation changed)
│ │ └ types
│ │ └[~] type Encryption
│ │ └ properties
│ │ ├ RoleArn: (documentation changed)
│ │ └ SecretArn: (documentation changed)
│ ├[~] resource AWS::MediaConnect::FlowOutput
│ │ ├ - documentation: The AWS::MediaConnect::FlowOutput resource defines the destination address, protocol, and port that AWS Elemental MediaConnect sends the ingested video to. Each flow can have up to 50 outputs. An output can have the same protocol or a different protocol from the source. The following protocols are supported: RIST, RTP, RTP-FEC, SRT-listener, SRT-caller, Zixi pull, and Zixi push. CDI and ST 2110 JPEG XS protocols are not currently supported by AWS CloudFormation.
│ │ │ + documentation: The `AWS::MediaConnect::FlowOutput` resource defines the destination address, protocol, and port that AWS Elemental MediaConnect sends the ingested video to. Each flow can have up to 50 outputs. An output can have the same protocol or a different protocol from the source. The following protocols are supported: RIST, RTP, RTP-FEC, SRT-listener, SRT-caller, Zixi pull, and Zixi push. CDI and ST 2110 JPEG XS protocols are not currently supported by AWS CloudFormation.
│ │ ├ properties
│ │ │ ├ CidrAllowList: (documentation changed)
│ │ │ ├ Description: (documentation changed)
│ │ │ ├ Encryption: (documentation changed)
│ │ │ ├ MediaStreamOutputConfigurations: (documentation changed)
│ │ │ ├ Name: (documentation changed)
│ │ │ ├[+] NdiProgramName: string
│ │ │ ├[+] NdiSpeedHqQuality: integer
│ │ │ ├ OutputStatus: (documentation changed)
│ │ │ ├ Port: (documentation changed)
│ │ │ ├ RemoteId: (documentation changed)
│ │ │ └ VpcInterfaceAttachment: (documentation changed)
│ │ └ types
│ │ ├[~] type DestinationConfiguration
│ │ │ ├ - documentation: The definition of a media stream that is associated with the output.
│ │ │ │ + documentation: The transport parameters that you want to associate with an outbound media stream.
│ │ │ └ properties
│ │ │ ├ DestinationIp: (documentation changed)
│ │ │ ├ DestinationPort: (documentation changed)
│ │ │ └ Interface: (documentation changed)
│ │ ├[~] type EncodingParameters
│ │ │ └ properties
│ │ │ └ CompressionFactor: (documentation changed)
│ │ ├[~] type Encryption
│ │ │ └ properties
│ │ │ ├ RoleArn: (documentation changed)
│ │ │ └ SecretArn: (documentation changed)
│ │ ├[~] type Interface
│ │ │ ├ - documentation: The VPC interface that you want to use for the media stream associated with the output.
│ │ │ │ + documentation: The VPC interface that is used for the media stream associated with the source or output.
│ │ │ └ properties
│ │ │ └ Name: (documentation changed)
│ │ ├[~] type MediaStreamOutputConfiguration
│ │ │ └ properties
│ │ │ ├ DestinationConfigurations: (documentation changed)
│ │ │ ├ EncodingName: (documentation changed)
│ │ │ └ MediaStreamName: (documentation changed)
│ │ └[~] type VpcInterfaceAttachment
│ │ ├ - documentation: The VPC interface that you want to send your output to.
│ │ │ + documentation: The settings for attaching a VPC interface to an resource.
│ │ └ properties
│ │ └ VpcInterfaceName: (documentation changed)
│ ├[~] resource AWS::MediaConnect::FlowSource
│ │ ├ - documentation: The AWS::MediaConnect::FlowSource resource is usedt to add additional sources to an existing flow. Adding an additional source requires Failover to be enabled. When you enable Failover, the additional source must use the same protocol as the existing source. A source is the external video content that includes configuration information (encryption and source type) and a network address. Each flow has at least one source. A standard source comes from a source other than another AWS Elemental MediaConnect flow, such as an on-premises encoder.
│ │ │ + documentation: The `AWS::MediaConnect::FlowSource` resource is usedt to add additional sources to an existing flow. Adding an additional source requires Failover to be enabled. When you enable Failover, the additional source must use the same protocol as the existing source. A source is the external video content that includes configuration information (encryption and source type) and a network address. Each flow has at least one source. A standard source comes from a source other than another AWS Elemental MediaConnect flow, such as an on-premises encoder.
│ │ ├ properties
│ │ │ ├ Decryption: (documentation changed)
│ │ │ ├ Description: (documentation changed)
│ │ │ ├ EntitlementArn: (documentation changed)
│ │ │ ├ GatewayBridgeSource: (documentation changed)
│ │ │ ├ MaxBitrate: (documentation changed)
│ │ │ ├ VpcInterfaceName: (documentation changed)
│ │ │ └ WhitelistCidr: (documentation changed)
│ │ └ types
│ │ ├[~] type Encryption
│ │ │ └ properties
│ │ │ ├ RoleArn: (documentation changed)
│ │ │ └ SecretArn: (documentation changed)
│ │ └[~] type VpcInterfaceAttachment
│ │ ├ - documentation: The VPC interface that you want to send your output to.
│ │ │ + documentation: The settings for attaching a VPC interface to an resource.
│ │ └ properties
│ │ └ VpcInterfaceName: (documentation changed)
│ ├[~] resource AWS::MediaConnect::FlowVpcInterface
│ │ ├ - documentation: The AWS::MediaConnect::FlowVpcInterface resource is a connection between your AWS Elemental MediaConnect flow and a virtual private cloud (VPC) that you created using the Amazon Virtual Private Cloud service.
│ │ │ To avoid streaming your content over the public internet, you can add up to two VPC interfaces to your flow and use those connections to transfer content between your VPC and MediaConnect.
│ │ │ You can update an existing flow to add a VPC interface. If you haven’t created the flow yet, you must create the flow with a temporary standard source by doing the following:
│ │ │ - Use CloudFormation to create a flow with a standard source that uses to the flow’s public IP address.
│ │ │ - Use CloudFormation to create a VPC interface to add to this flow. This can also be done as part of the previous step.
│ │ │ - After CloudFormation has created the flow and the VPC interface, update the source to point to the VPC interface that you created.
│ │ │ > The previous steps must be undone before the CloudFormation stack can be deleted. Because the source is manually updated in step 3, CloudFormation is not aware of this change. The source must be returned to a standard source before CloudFormation stack deletion.
│ │ │ + documentation: The `AWS::MediaConnect::FlowVpcInterface` resource is a connection between your AWS Elemental MediaConnect flow and a virtual private cloud (VPC) that you created using the Amazon Virtual Private Cloud service.
│ │ │ To avoid streaming your content over the public internet, you can add up to two VPC interfaces to your flow and use those connections to transfer content between your VPC and MediaConnect.
│ │ │ You can update an existing flow to add a VPC interface. If you haven’t created the flow yet, you must create the flow with a temporary standard source by doing the following:
│ │ │ - Use CloudFormation to create a flow with a standard source that uses to the flow’s public IP address.
│ │ │ - Use CloudFormation to create a VPC interface to add to this flow. This can also be done as part of the previous step.
│ │ │ - After CloudFormation has created the flow and the VPC interface, update the source to point to the VPC interface that you created.
│ │ │ > The previous steps must be undone before the CloudFormation stack can be deleted. Because the source is manually updated in step 3, CloudFormation is not aware of this change. The source must be returned to a standard source before CloudFormation stack deletion. > When configuring NDI outputs for your flow, define the VPC interface as a nested attribute within the `AWS::MediaConnect::Flow` resource. Do not use the top-level `AWS::MediaConnect::FlowVpcInterface` resource type to specify NDI configurations.
│ │ └ properties
│ │ ├ Name: (documentation changed)
│ │ ├ SecurityGroupIds: (documentation changed)
│ │ └ SubnetId: (documentation changed)
│ └[~] resource AWS::MediaConnect::Gateway
│ ├ - documentation: The AWS::MediaConnect::Gateway resource is used to create a new gateway. AWS Elemental MediaConnect Gateway is a feature of MediaConnect that allows the deployment of on-premises resources for transporting live video to and from the AWS Cloud. MediaConnect Gateway allows you to contribute live video to the AWS Cloud from on-premises hardware, as well as distribute live video from the AWS Cloud to your local data center.
│ │ + documentation: The `AWS::MediaConnect::Gateway` resource is used to create a new gateway. AWS Elemental MediaConnect Gateway is a feature of MediaConnect that allows the deployment of on-premises resources for transporting live video to and from the AWS Cloud. MediaConnect Gateway allows you to contribute live video to the AWS Cloud from on-premises hardware, as well as distribute live video from the AWS Cloud to your local data center.
│ └ properties
│ ├ Name: (documentation changed)
│ └ Networks: (documentation changed)
├[~] service aws-mwaa
│ └ resources
│ └[~] resource AWS::MWAA::Environment
│ └ properties
│ ├ AirflowVersion: (documentation changed)
│ ├ EnvironmentClass: (documentation changed)
│ └ Schedulers: (documentation changed)
├[~] service aws-networkfirewall
│ └ resources
│ └[~] resource AWS::NetworkFirewall::Firewall
│ └ properties
│ └[+] EnabledAnalysisTypes: Array<string>
├[~] service aws-omics
│ └ resources
│ └[~] resource AWS::Omics::SequenceStore
│ ├ properties
│ │ ├[+] AccessLogLocation: string
│ │ ├[+] ETagAlgorithmFamily: string (immutable)
│ │ ├[+] PropagatedSetLevelTags: Array<string>
│ │ └[+] S3AccessPolicy: json
│ └ attributes
│ ├[+] S3AccessPointArn: string
│ ├[+] S3Uri: string
│ ├[+] Status: string
│ ├[+] StatusMessage: string
│ └[+] UpdateTime: string
├[~] service aws-quicksight
│ └ resources
│ └[~] resource AWS::QuickSight::DataSet
│ ├ properties
│ │ └[+] UseAs: string
│ └ types
│ ├[~] type CreateColumnsOperation
│ │ └ properties
│ │ └ Columns: - Array<CalculatedColumn> (required)
│ │ + Array<CalculatedColumn>
│ ├[~] type DataSetRefreshProperties
│ │ └ properties
│ │ ├[+] FailureConfiguration: RefreshFailureConfiguration
│ │ └ RefreshConfiguration: - RefreshConfiguration (required)
│ │ + RefreshConfiguration
│ ├[+] type RefreshFailureConfiguration
│ │ ├ name: RefreshFailureConfiguration
│ │ └ properties
│ │ └ EmailAlert: RefreshFailureEmailAlert
│ ├[+] type RefreshFailureEmailAlert
│ │ ├ name: RefreshFailureEmailAlert
│ │ └ properties
│ │ └ AlertStatus: string
│ ├[~] type RenameColumnOperation
│ │ └ properties
│ │ └ NewColumnName: - string (required)
│ │ + string
│ ├[~] type S3Source
│ │ └ properties
│ │ ├ InputColumns: - Array<InputColumn> (required)
│ │ │ + Array<InputColumn>
│ │ └ UploadSettings: - json ⇐ UploadSettings
│ │ + UploadSettings
│ └[~] type UploadSettings
│ ├ - documentation: undefined
│ │ + documentation: <p>Information about the format for a source file or files.</p>
│ └ properties
│ ├ ContainsHeader: (documentation changed)
│ ├ Delimiter: (documentation changed)
│ └ StartFromRow: (documentation changed)
├[~] service aws-rds
│ └ resources
│ └[~] resource AWS::RDS::DBInstance
│ ├ properties
│ │ ├[+] AutomaticBackupReplicationRetentionPeriod: integer
│ │ ├ CertificateDetails: (documentation changed)
│ │ └ Endpoint: (documentation changed)
│ └ attributes
│ ├[+] CertificateDetails: CertificateDetails
│ └[+] Endpoint: Endpoint
├[~] service aws-route53
│ └ resources
│ ├[~] resource AWS::Route53::RecordSet
│ │ └ attributes
│ │ └ Id: (documentation changed)
│ └[~] resource AWS::Route53::RecordSetGroup
│ └ attributes
│ └ Id: (documentation changed)
├[~] service aws-route53recoverycontrol
│ └ resources
│ └[~] resource AWS::Route53RecoveryControl::Cluster
│ └ properties
│ └[+] NetworkType: string
├[~] service aws-sagemaker
│ └ resources
│ └[~] resource AWS::SageMaker::Endpoint
│ └ properties
│ └ EndpointName: (documentation changed)
├[~] service aws-securitylake
│ └ resources
│ └[~] resource AWS::SecurityLake::DataLake
│ └ types
│ └[~] type Transitions
│ └ properties
│ └ StorageClass: (documentation changed)
├[~] service aws-sns
│ └ resources
│ └[~] resource AWS::SNS::Subscription
│ └ attributes
│ └ Arn: (documentation changed)
├[~] service aws-systemsmanagersap
│ └ resources
│ └[~] resource AWS::SystemsManagerSAP::Application
│ ├ properties
│ │ └[+] ComponentsInfo: Array<ComponentInfo> (immutable)
│ └ types
│ └[+] type ComponentInfo
│ ├ name: ComponentInfo
│ └ properties
│ ├ ComponentType: string
│ ├ Ec2InstanceId: string
│ └ Sid: string
└[~] service aws-wafv2
└ resources
├[~] resource AWS::WAFv2::RuleGroup
│ └ types
│ ├[~] type FieldToMatch
│ │ └ properties
│ │ └[+] UriFragment: UriFragment
│ └[+] type UriFragment
│ ├ documentation: The path component of the URI Fragment. This is the part of a web request that identifies a fragment uri, for example, /abcd#introduction
│ │ name: UriFragment
│ └ properties
│ └ FallbackBehavior: string
└[~] resource AWS::WAFv2::WebACL
└ types
├[~] type FieldToMatch
│ └ properties
│ └[+] UriFragment: UriFragment
└[+] type UriFragment
├ documentation: The path component of the URI Fragment. This is the part of a web request that identifies a fragment uri, for example, /abcd#introduction
│ name: UriFragment
└ properties
└ FallbackBehavior: string
```
---
Manually retrieved changes, as the GitHub action did not successfully create the PR.
aws-cdk-automation
added
auto-approve
pr/no-squash
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
AWS CodeBuild CI Report
Powered by github-codebuild-logs, available on the AWS Serverless Application Repository |
aws-cdk-automation
added
the
pr/needs-community-review
|
Thank you for contributing! Your pull request will be automatically updated and merged without squashing (do not update manually, and be sure to allow changes to be pushed to your fork). |
|
Comments on closed issues and PRs are hard for our team to see. |
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
10 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
See CHANGELOG