Skip to content

Conversation

@aws-cdk-automation
Copy link
Collaborator

@aws-cdk-automation aws-cdk-automation commented Aug 18, 2025

Updates the L1 CloudFormation resource definitions with the latest changes from @aws-cdk/aws-service-spec

L1 CloudFormation resource definition changes:

├[~] service aws-apigateway
│ └ resources
│    └[~]  resource AWS::ApiGateway::Deployment
│       └ types
│          └[~] type MethodSetting
│            └      - documentation: The `MethodSetting` property type configures settings for all methods in a stage.
│                   The `MethodSettings` property of the [Amazon API Gateway Deployment StageDescription](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-deployment-stagedescription.html) property type contains a list of `MethodSetting` property types.
│                   + documentation: The `MethodSetting` property type configures settings for all methods in a stage. If you modify this property type, you must create a new deployment for your API.
│                   The `MethodSettings` property of the [Amazon API Gateway Deployment StageDescription](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-deployment-stagedescription.html) property type contains a list of `MethodSetting` property types.
├[~] service aws-appintegrations
│ └ resources
│    └[~]  resource AWS::AppIntegrations::Application
│       ├ properties
│       │  ├[+] ApplicationConfig: ApplicationConfig
│       │  ├[+] IframeConfig: IframeConfig
│       │  ├[+] InitializationTimeout: integer
│       │  └[+] IsService: boolean (default=false)
│       └ types
│          ├[+]  type ApplicationConfig
│          │  ├      name: ApplicationConfig
│          │  └ properties
│          │     └ ContactHandling: ContactHandling
│          ├[+]  type ContactHandling
│          │  ├      name: ContactHandling
│          │  └ properties
│          │     └ Scope: string (required)
│          └[+]  type IframeConfig
│             ├      name: IframeConfig
│             └ properties
│                ├ Allow: Array<string>
│                └ Sandbox: Array<string>
├[~] service aws-arcregionswitch
│ └ resources
│    └[~]  resource AWS::ARCRegionSwitch::Plan
│       ├ attributes
│       │  └[+] Route53HealthChecks: Route53HealthChecks
│       └ types
│          └[+]  type Route53HealthChecks
│             ├      name: Route53HealthChecks
│             └ properties
│                ├ HealthCheckIds: Array<string>
│                ├ RecordNames: Array<string>
│                ├ Regions: Array<string>
│                └ HostedZoneIds: Array<string>
├[~] service aws-batch
│ └ resources
│    └[~]  resource AWS::Batch::JobDefinition
│       └ types
│          └[~] type RuntimePlatform
│            └ properties
│               ├ CpuArchitecture: (documentation changed)
│               └ OperatingSystemFamily: (documentation changed)
├[~] service aws-billingconductor
│ └ resources
│    └[~]  resource AWS::BillingConductor::CustomLineItem
│       └ types
│          └[~] type LineItemFilter
│            ├      - documentation: A representation of the line item filter for your custom line item. You can use line item filters to include or exclude specific resource values from the billing group's total cost. For example, if you create a custom line item and you want to filter out a value, such as Savings Plan discounts, you can update `LineItemFilter` to exclude it.
│            │      + documentation: A representation of the line item filter for your custom line item. You can use line item filters to include or exclude specific resource values from the billing group's total cost. For example, if you create a custom line item and you want to filter out a value, such as Savings Plans discounts, you can update `LineItemFilter` to exclude it.
│            └ properties
│               └ Values: (documentation changed)
├[~] service aws-cloudfront
│ └ resources
│    ├[~]  resource AWS::CloudFront::Distribution
│    │  └ types
│    │     └[~] type CustomOriginConfig
│    │       └ properties
│    │          └[+] IpAddressType: string
│    └[~]  resource AWS::CloudFront::Function
│       └ properties
│          └ Name: - string (required)
│                  + string (required, immutable)
├[~] service aws-codebuild
│ └ resources
│    └[~]  resource AWS::CodeBuild::Project
│       └ types
│          ├[~] type ProjectTriggers
│          │ └ properties
│          │    └[+] PullRequestBuildPolicy: PullRequestBuildPolicy
│          └[+]  type PullRequestBuildPolicy
│             ├      name: PullRequestBuildPolicy
│             └ properties
│                ├ RequiresCommentApproval: string (required)
│                └ ApproverRoles: Array<string>
├[~] service aws-codepipeline
│ └ resources
│    └[~]  resource AWS::CodePipeline::Webhook
│       ├ properties
│       │  └ TargetPipelineVersion: - integer (required)
│       │                           + integer
│       └ attributes
│          └ Id: (documentation changed)
├[~] service aws-connect
│ └ resources
│    ├[~]  resource AWS::Connect::PredefinedAttribute
│    │  └ properties
│    │     └ Values: - Values (required)
│    │               + Values
│    └[~]  resource AWS::Connect::User
│       └ types
│          └[~] type UserPhoneConfig
│            └ properties
│               └[+] PersistentConnection: boolean
├[~] service aws-deadline
│ └ resources
│    └[~]  resource AWS::Deadline::Fleet
│       ├ attributes
│       │  └[+] StatusMessage: string
│       └ types
│          ├[~] type ServiceManagedEc2FleetConfiguration
│          │ └ properties
│          │    └ VpcConfiguration: (documentation changed)
│          └[~] type VpcConfiguration
│            ├      - documentation: undefined
│            │      + documentation: The configuration options for a service managed fleet's VPC.
│            └ properties
│               └ ResourceConfigurationArns: (documentation changed)
├[~] service aws-dynamodb
│ └ resources
│    ├[~]  resource AWS::DynamoDB::GlobalTable
│    │  └ types
│    │     └[~] type ContributorInsightsSpecification
│    │       └ properties
│    │          └[+] Mode: string
│    └[~]  resource AWS::DynamoDB::Table
│       └ types
│          └[~] type ContributorInsightsSpecification
│            └ properties
│               └[+] Mode: string
├[~] service aws-ec2
│ └ resources
│    ├[~]  resource AWS::EC2::EC2Fleet
│    │  └ types
│    │     └[~] type Placement
│    │       └ properties
│    │          └ AvailabilityZone: (documentation changed)
│    ├[+]  resource AWS::EC2::IpPoolRouteTableAssociation
│    │  ├      name: IpPoolRouteTableAssociation
│    │  │      cloudFormationType: AWS::EC2::IpPoolRouteTableAssociation
│    │  │      documentation: Resource Type definition for AWS::EC2::IpPoolRouteTableAssociation
│    │  ├ properties
│    │  │  ├ PublicIpv4Pool: string (required, immutable)
│    │  │  └ RouteTableId: string (required, immutable)
│    │  └ attributes
│    │     └ AssociationId: string
│    ├[~]  resource AWS::EC2::LaunchTemplate
│    │  └ types
│    │     ├[~] type ElasticGpuSpecification
│    │     │ ├      - documentation: > Amazon Elastic Graphics reached end of life on January 8, 2024. 
│    │     │ │      Specifies a specification for an Elastic GPU for an Amazon EC2 launch template.
│    │     │ │      `ElasticGpuSpecification` is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html) .
│    │     │ │      + documentation: undefined
│    │     │ └ properties
│    │     │    └ Type: (documentation changed)
│    │     ├[~] type LaunchTemplateData
│    │     │ └ properties
│    │     │    ├ ElasticGpuSpecifications: (documentation changed)
│    │     │    └ ElasticInferenceAccelerators: (documentation changed)
│    │     ├[~] type LaunchTemplateElasticInferenceAccelerator
│    │     │ ├      - documentation: > Amazon Elastic Inference is no longer available. 
│    │     │ │      Specifies an elastic inference accelerator.
│    │     │ │      `LaunchTemplateElasticInferenceAccelerator` is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html) .
│    │     │ │      + documentation: undefined
│    │     │ └ properties
│    │     │    ├ Count: (documentation changed)
│    │     │    └ Type: (documentation changed)
│    │     ├[~] type NetworkInterface
│    │     │ └ properties
│    │     │    └ EnaQueueCount: (documentation changed)
│    │     └[~] type Placement
│    │       └ properties
│    │          └ AvailabilityZone: (documentation changed)
│    └[~]  resource AWS::EC2::Volume
│       └ properties
│          └ AvailabilityZone: (documentation changed)
├[~] service aws-ecs
│ └ resources
│    └[~]  resource AWS::ECS::CapacityProvider
│       └ types
│          └[~] type ManagedScaling
│            └ properties
│               └ MinimumScalingStepSize: (documentation changed)
├[~] service aws-eks
│ └ resources
│    └[~]  resource AWS::EKS::Cluster
│       └ properties
│          └ DeletionProtection: (documentation changed)
├[~] service aws-elasticloadbalancingv2
│ └ resources
│    └[~]  resource AWS::ElasticLoadBalancingV2::LoadBalancer
│       └ types
│          └[~] type LoadBalancerAttribute
│            └ properties
│               └ Key: (documentation changed)
├[~] service aws-gameliftstreams
│ └ resources
│    ├[~]  resource AWS::GameLiftStreams::Application
│    │  └ types
│    │     └[~] type RuntimeEnvironment
│    │       └      - documentation: Configuration settings that identify the operating system for an application resource. This can also include a compatibility layer and other drivers.
│    │              A runtime environment can be one of the following:
│    │              - For Linux applications
│    │              - Ubuntu 22.04 LTS ( `Type=UBUNTU, Version=22_04_LTS` )
│    │              - For Windows applications
│    │              - Microsoft Windows Server 2022 Base ( `Type=WINDOWS, Version=2022` )
│    │              - Proton 8.0-5 ( `Type=PROTON, Version=20241007` )
│    │              - Proton 8.0-2c ( `Type=PROTON, Version=20230704` )
│    │              + documentation: Configuration settings that identify the operating system for an application resource. This can also include a compatibility layer and other drivers.
│    │              A runtime environment can be one of the following:
│    │              - For Linux applications
│    │              - Ubuntu 22.04 LTS ( `Type=UBUNTU, Version=22_04_LTS` )
│    │              - For Windows applications
│    │              - Microsoft Windows Server 2022 Base ( `Type=WINDOWS, Version=2022` )
│    │              - Proton 9.0-2 ( `Type=PROTON, Version=20250516` )
│    │              - Proton 8.0-5 ( `Type=PROTON, Version=20241007` )
│    │              - Proton 8.0-2c ( `Type=PROTON, Version=20230704` )
│    └[~]  resource AWS::GameLiftStreams::StreamGroup
│       ├      - documentation: The `AWS::GameLiftStreams::StreamGroup` resource defines a group of compute resources that will be running and streaming your game. When you create a stream group, you specify the hardware configuration (CPU, GPU, RAM) that will run your game (known as the *stream class* ), the geographical locations where your game can run, and the number of streams that can run simultaneously in each location (known as *stream capacity* ). Stream groups manage how Amazon GameLift Streams allocates resources and handles concurrent streams, allowing you to effectively manage capacity and costs.
│       │      There are two types of stream capacity: always-on and on-demand.
│       │      - *Always-on* : The streaming capacity that is allocated and ready to handle stream requests without delay. You pay for this capacity whether it's in use or not. Best for quickest time from streaming request to streaming session.
│       │      - *On-demand* : The streaming capacity that Amazon GameLift Streams can allocate in response to stream requests, and then de-allocate when the session has terminated. This offers a cost control measure at the expense of a greater startup time (typically under 5 minutes).
│       │      > Application association is not currently supported in AWS CloudFormation . To link additional applications to a stream group, use the Amazon GameLift Streams console or the AWS CLI .
│       │      + documentation: The `AWS::GameLiftStreams::StreamGroup` resource defines a group of compute resources that will be running and streaming your game. When you create a stream group, you specify the hardware configuration (CPU, GPU, RAM) that will run your game (known as the *stream class* ), the geographical locations where your game can run, and the number of streams that can run simultaneously in each location (known as *stream capacity* ). Stream groups manage how Amazon GameLift Streams allocates resources and handles concurrent streams, allowing you to effectively manage capacity and costs.
│       │      There are two types of stream capacity: always-on and on-demand.
│       │      - *Always-on* : The streaming capacity that is allocated and ready to handle stream requests without delay. You pay for this capacity whether it's in use or not. Best for quickest time from streaming request to streaming session. Default is 1 when creating a stream group or adding a location.
│       │      - *On-demand* : The streaming capacity that Amazon GameLift Streams can allocate in response to stream requests, and then de-allocate when the session has terminated. This offers a cost control measure at the expense of a greater startup time (typically under 5 minutes). Default is 0 when creating a stream group or adding a location.
│       │      > Application association is not currently supported in AWS CloudFormation . To link additional applications to a stream group, use the Amazon GameLift Streams console or the AWS CLI .
│       └ types
│          └[~] type LocationConfiguration
│            └ properties
│               ├ AlwaysOnCapacity: (documentation changed)
│               └ OnDemandCapacity: (documentation changed)
├[~] service aws-glue
│ └ resources
│    └[~]  resource AWS::Glue::Job
│       └ properties
│          └ WorkerType: (documentation changed)
├[~] service aws-guardduty
│ └ resources
│    ├[+]  resource AWS::GuardDuty::ThreatEntitySet
│    │  ├      name: ThreatEntitySet
│    │  │      cloudFormationType: AWS::GuardDuty::ThreatEntitySet
│    │  │      documentation: Resource Type definition for AWS::GuardDuty::ThreatEntitySet
│    │  │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │  ├ properties
│    │  │  ├ Format: string (required, immutable)
│    │  │  ├ Activate: boolean
│    │  │  ├ DetectorId: string (immutable)
│    │  │  ├ Name: string
│    │  │  ├ Location: string (required)
│    │  │  ├ ExpectedBucketOwner: string
│    │  │  └ Tags: Array<TagItem>
│    │  ├ attributes
│    │  │  ├ Id: string
│    │  │  ├ Status: string
│    │  │  ├ CreatedAt: string
│    │  │  ├ UpdatedAt: string
│    │  │  └ ErrorDetails: string
│    │  └ types
│    │     └ type TagItem
│    │       ├      name: TagItem
│    │       └ properties
│    │          ├ Key: string (required)
│    │          └ Value: string (required)
│    └[+]  resource AWS::GuardDuty::TrustedEntitySet
│       ├      name: TrustedEntitySet
│       │      cloudFormationType: AWS::GuardDuty::TrustedEntitySet
│       │      documentation: Resource Type definition for AWS::GuardDuty::TrustedEntitySet
│       │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│       ├ properties
│       │  ├ Format: string (required, immutable)
│       │  ├ Activate: boolean
│       │  ├ DetectorId: string (immutable)
│       │  ├ Name: string
│       │  ├ Location: string (required)
│       │  ├ ExpectedBucketOwner: string
│       │  └ Tags: Array<TagItem>
│       ├ attributes
│       │  ├ Id: string
│       │  ├ Status: string
│       │  ├ CreatedAt: string
│       │  ├ UpdatedAt: string
│       │  └ ErrorDetails: string
│       └ types
│          └ type TagItem
│            ├      name: TagItem
│            └ properties
│               ├ Key: string (required)
│               └ Value: string (required)
├[~] service aws-imagebuilder
│ └ resources
│    ├[~]  resource AWS::ImageBuilder::Component
│    │  └ properties
│    │     └ KmsKeyId: (documentation changed)
│    ├[~]  resource AWS::ImageBuilder::ContainerRecipe
│    │  ├ properties
│    │  │  └ KmsKeyId: (documentation changed)
│    │  └ types
│    │     └[~] type EbsInstanceBlockDeviceSpecification
│    │       └ properties
│    │          └ KmsKeyId: (documentation changed)
│    ├[~]  resource AWS::ImageBuilder::DistributionConfiguration
│    │  └ types
│    │     └[~] type AmiDistributionConfiguration
│    │       └ properties
│    │          └ KmsKeyId: (documentation changed)
│    ├[~]  resource AWS::ImageBuilder::ImageRecipe
│    │  └ types
│    │     ├[~] type EbsInstanceBlockDeviceSpecification
│    │     │ └ properties
│    │     │    └ KmsKeyId: (documentation changed)
│    │     └[~] type SystemsManagerAgent
│    │       └ properties
│    │          └ UninstallAfterBuild: (documentation changed)
│    └[~]  resource AWS::ImageBuilder::Workflow
│       └ properties
│          └ KmsKeyId: (documentation changed)
├[~] service aws-inspectorv2
│ └ resources
│    ├[+]  resource AWS::InspectorV2::CodeSecurityIntegration
│    │  ├      name: CodeSecurityIntegration
│    │  │      cloudFormationType: AWS::InspectorV2::CodeSecurityIntegration
│    │  │      documentation: Inspector CodeSecurityIntegration resource schema
│    │  │      tagInformation: {"tagPropertyName":"Tags","variant":"map"}
│    │  ├ properties
│    │  │  ├ Name: string
│    │  │  ├ Type: string
│    │  │  ├ CreateIntegrationDetails: CreateDetails (immutable)
│    │  │  ├ UpdateIntegrationDetails: UpdateDetails
│    │  │  └ Tags: Map<string, string> (immutable)
│    │  ├ attributes
│    │  │  ├ Arn: string
│    │  │  ├ Status: string
│    │  │  ├ StatusReason: string
│    │  │  ├ AuthorizationUrl: string
│    │  │  ├ CreatedAt: string
│    │  │  └ LastUpdatedAt: string
│    │  └ types
│    │     ├ type CreateDetails
│    │     │ ├      name: CreateDetails
│    │     │ └ properties
│    │     │    └ gitlabSelfManaged: CreateGitLabSelfManagedIntegrationDetail (required)
│    │     ├ type CreateGitLabSelfManagedIntegrationDetail
│    │     │ ├      name: CreateGitLabSelfManagedIntegrationDetail
│    │     │ └ properties
│    │     │    ├ instanceUrl: string (required)
│    │     │    └ accessToken: string (required)
│    │     ├ type UpdateDetails
│    │     │ ├      name: UpdateDetails
│    │     │ └ properties
│    │     │    ├ gitlabSelfManaged: UpdateGitLabSelfManagedIntegrationDetail
│    │     │    └ github: UpdateGitHubIntegrationDetail
│    │     ├ type UpdateGitHubIntegrationDetail
│    │     │ ├      name: UpdateGitHubIntegrationDetail
│    │     │ └ properties
│    │     │    ├ code: string (required)
│    │     │    └ installationId: string (required)
│    │     └ type UpdateGitLabSelfManagedIntegrationDetail
│    │       ├      name: UpdateGitLabSelfManagedIntegrationDetail
│    │       └ properties
│    │          └ authCode: string (required)
│    └[+]  resource AWS::InspectorV2::CodeSecurityScanConfiguration
│       ├      name: CodeSecurityScanConfiguration
│       │      cloudFormationType: AWS::InspectorV2::CodeSecurityScanConfiguration
│       │      documentation: Inspector CodeSecurityScanConfiguration resource schema
│       │      tagInformation: {"tagPropertyName":"Tags","variant":"map"}
│       ├ properties
│       │  ├ Name: string (immutable)
│       │  ├ Level: string (immutable)
│       │  ├ Configuration: CodeSecurityScanConfiguration
│       │  ├ ScopeSettings: ScopeSettings (immutable)
│       │  └ Tags: Map<string, string> (immutable)
│       ├ attributes
│       │  └ Arn: string
│       └ types
│          ├ type CodeSecurityScanConfiguration
│          │ ├      name: CodeSecurityScanConfiguration
│          │ └ properties
│          │    ├ periodicScanConfiguration: PeriodicScanConfiguration
│          │    ├ continuousIntegrationScanConfiguration: ContinuousIntegrationScanConfiguration
│          │    └ ruleSetCategories: Array<string> (required)
│          ├ type ContinuousIntegrationScanConfiguration
│          │ ├      name: ContinuousIntegrationScanConfiguration
│          │ └ properties
│          │    └ supportedEvents: Array<string> (required)
│          ├ type PeriodicScanConfiguration
│          │ ├      name: PeriodicScanConfiguration
│          │ └ properties
│          │    ├ frequency: string
│          │    └ frequencyExpression: string
│          └ type ScopeSettings
│            ├      name: ScopeSettings
│            └ properties
│               └ projectSelectionScope: string
├[~] service aws-ivs
│ └ resources
│    └[~]  resource AWS::IVS::Stage
│       └ types
│          └[~] type ThumbnailConfiguration
│            └      - documentation: A complex type that allows you to enable/disable the recording of thumbnails for individual participant recording and modify the interval at which thumbnails are generated for the live session.
│                   + documentation: An object representing a configuration of thumbnails for recorded video.
├[~] service aws-omics
│ └ resources
│    └[~]  resource AWS::Omics::WorkflowVersion
│       └      - documentation: Creates a new workflow version for the workflow that you specify with the `workflowId` parameter.
│              When you create a new version of a workflow, you need to specify the configuration for the new version. It doesn't inherit any configuration values from the workflow.
│              Provide a version name that is unique for this workflow. You cannot change the name after HealthOmics creates the version.
│              > Don’t include any personally identifiable information (PII) in the version name. Version names appear in the workflow version ARN. 
│              For more information, see [Workflow versioning in AWS HealthOmics](https://docs.aws.amazon.com/omics/latest/dev/workflow-versions.html) in the *AWS HealthOmics User Guide* .
│              + documentation: Creates a new workflow version for the workflow that you specify with the `workflowId` parameter.
│              When you create a new version of a workflow, you need to specify the configuration for the new version. It doesn't inherit any configuration values from the workflow.
│              Provide a version name that is unique for this workflow. You cannot change the name after HealthOmics creates the version.
│              > Don't include any personally identifiable information (PII) in the version name. Version names appear in the workflow version ARN. 
│              For more information, see [Workflow versioning in AWS HealthOmics](https://docs.aws.amazon.com/omics/latest/dev/workflow-versions.html) in the *AWS HealthOmics User Guide* .
├[~] service aws-opensearchservice
│ └ resources
│    └[~]  resource AWS::OpenSearchService::Domain
│       └ types
│          ├[~] type AdvancedSecurityOptionsInput
│          │ └ properties
│          │    └[+] IAMFederationOptions: IAMFederationOptions
│          └[+]  type IAMFederationOptions
│             ├      name: IAMFederationOptions
│             └ properties
│                ├ Enabled: boolean
│                ├ RolesKey: string
│                └ SubjectKey: string
├[~] service aws-pcs
│ └ resources
│    ├[~]  resource AWS::PCS::Cluster
│    │  └ types
│    │     ├[~] type Endpoint
│    │     │ └ properties
│    │     │    ├ Ipv6Address: (documentation changed)
│    │     │    └ PrivateIpAddress: (documentation changed)
│    │     └[~] type Networking
│    │       ├      - documentation: TThe networking configuration for the cluster's control plane.
│    │       │      + documentation: The networking configuration for the cluster's control plane.
│    │       └ properties
│    │          └ NetworkType: (documentation changed)
│    └[~]  resource AWS::PCS::Queue
│       └ types
│          └[~] type ErrorInfo
│            └ properties
│               └ Message: (documentation changed)
├[~] service aws-quicksight
│ └ resources
│    └[~]  resource AWS::QuickSight::DataSet
│       └ types
│          ├[~] type CastColumnTypeOperation
│          │ └ properties
│          │    └ ColumnName: - string (required)
│          │                  + string
│          ├[~] type FilterOperation
│          │ └ properties
│          │    └ ConditionExpression: - string (required)
│          │                           + string
│          ├[~] type ProjectOperation
│          │ └ properties
│          │    └ ProjectedColumns: - Array<string> (required)
│          │                        + Array<string>
│          ├[~] type RenameColumnOperation
│          │ └ properties
│          │    └ ColumnName: - string (required)
│          │                  + string
│          ├[~] type RowLevelPermissionTagRule
│          │ └ properties
│          │    └ ColumnName: - string (required)
│          │                  + string
│          └[~] type UniqueKey
│            └ properties
│               └ ColumnNames: - Array<string> (required)
│                              + Array<string>
├[~] service aws-rds
│ └ resources
│    ├[~]  resource AWS::RDS::DBInstance
│    │  └ properties
│    │     └[-] StatusInfos: Array<DBInstanceStatusInfo>
│    └[~]  resource AWS::RDS::DBProxy
│       └ properties
│          └ DebugLogging: (documentation changed)
├[~] service aws-s3express
│ └ resources
│    └[~]  resource AWS::S3Express::AccessPoint
│       └ properties
│          └ Tags: (documentation changed)
├[~] service aws-s3tables
│ └ resources
│    ├[~]  resource AWS::S3Tables::TableBucketPolicy
│    │  └      - documentation: Creates a new maintenance configuration or replaces an existing table bucket policy for a table bucket. For more information, see [Adding a table bucket policy](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables-bucket-policy.html#table-bucket-policy-add) in the *Amazon Simple Storage Service User Guide* .
│    │         - **Permissions** - You must have the `s3tables:PutTableBucketPolicy` permission to use this operation.
│    │         + documentation: Creates a new table bucket policy or replaces an existing table bucket policy for a table bucket. For more information, see [Adding a table bucket policy](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables-bucket-policy.html#table-bucket-policy-add) in the *Amazon Simple Storage Service User Guide* .
│    │         - **Permissions** - You must have the `s3tables:PutTableBucketPolicy` permission to use this operation.
│    └[~]  resource AWS::S3Tables::TablePolicy
│       └      - documentation: Creates a new maintenance configuration or replaces an existing table policy for a table. For more information, see [Adding a table policy](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables-table-policy.html#table-policy-add) in the *Amazon Simple Storage Service User Guide* .
│              - **Permissions** - You must have the `s3tables:PutTablePolicy` permission to use this operation.
│              + documentation: Creates a new table policy or replaces an existing table policy for a table. For more information, see [Adding a table policy](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables-table-policy.html#table-policy-add) in the *Amazon Simple Storage Service User Guide* .
│              - **Permissions** - You must have the `s3tables:PutTablePolicy` permission to use this operation.
├[~] service aws-sagemaker
│ └ resources
│    ├[~]  resource AWS::SageMaker::Cluster
│    │  ├ properties
│    │  │  └[+] NodeProvisioningMode: string
│    │  └ types
│    │     └[~] type ClusterInstanceGroup
│    │       └ properties
│    │          └[+] ImageId: string
│    └[~]  resource AWS::SageMaker::Domain
│       └ types
│          └[~] type UnifiedStudioSettings
│            └ properties
│               └[-] SingleSignOnApplicationArn: string
├[~] service aws-sqs
│ └ resources
│    └[~]  resource AWS::SQS::Queue
│       └ properties
│          └ MaximumMessageSize: (documentation changed)
└[~] service aws-synthetics
  └ resources
     └[~]  resource AWS::Synthetics::Canary
        └ types
           ├[~] type Code
           │ └ properties
           │    └[+] Dependencies: Array<Dependency>
           └[+]  type Dependency
              ├      name: Dependency
              └ properties
                 ├ Type: string
                 └ Reference: string (required)

CHANGES TO L1 RESOURCES: L1 resources are automatically generated from public CloudFormation Resource Schemas. They are build to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

  • aws-rds: AWS::RDS::DBInstance:StatusInfos property is removed.
  • aws-sagemaker: AWS::SageMaker::Domain: SingleSignOnApplicationArn property is removed.
  • aws-cloudfront: AWS::CloudFront::Function: Name property is now set as immutable.

Updates the L1 CloudFormation resource definitions with the latest changes from `@aws-cdk/aws-service-spec`
@aws-cdk-automation aws-cdk-automation added contribution/core This is a PR that came from AWS. dependencies This issue is a problem in a dependency or a pull request that updates a dependency file. pr-linter/exempt-readme The PR linter will not require README changes pr-linter/exempt-test The PR linter will not require test changes pr-linter/exempt-integ-test The PR linter will not require integ test changes labels Aug 18, 2025
@aws-cdk-automation aws-cdk-automation requested a review from a team August 18, 2025 10:28
@github-actions github-actions bot added the p2 label Aug 18, 2025
@aws-cdk-automation aws-cdk-automation requested a review from a team August 18, 2025 10:28
@Abogical Abogical self-assigned this Aug 19, 2025
@mergify
Copy link
Contributor

mergify bot commented Aug 19, 2025

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@mergify
Copy link
Contributor

mergify bot commented Aug 19, 2025

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@mergify mergify bot merged commit d79fd85 into main Aug 19, 2025
22 checks passed
@mergify mergify bot deleted the automation/spec-update branch August 19, 2025 14:46
@github-actions
Copy link
Contributor

Comments on closed issues and PRs are hard for our team to see.
If you need help, please open a new issue that references this one.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Aug 19, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

contribution/core This is a PR that came from AWS. dependencies This issue is a problem in a dependency or a pull request that updates a dependency file. p2 pr-linter/exempt-integ-test The PR linter will not require integ test changes pr-linter/exempt-readme The PR linter will not require README changes pr-linter/exempt-test The PR linter will not require test changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants