feat: update L1 CloudFormation resource definitions

[aws-cdk-automation]

Updates the L1 CloudFormation resource definitions with the latest changes from @aws-cdk/aws-service-spec

L1 CloudFormation resource definition changes:

├[~] service aws-apigateway
│ └ resources
│    ├[~]  resource AWS::ApiGateway::Authorizer
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["AuthorizerId"]
│    ├[~]  resource AWS::ApiGateway::Deployment
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["DeploymentId"]
│    ├[~]  resource AWS::ApiGateway::DocumentationPart
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["DocumentationPartId"]
│    ├[~]  resource AWS::ApiGateway::Model
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["Name"]
│    ├[~]  resource AWS::ApiGateway::RequestValidator
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["RequestValidatorId"]
│    ├[~]  resource AWS::ApiGateway::Resource
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["ResourceId"]
│    └[~]  resource AWS::ApiGateway::Stage
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["StageName"]
├[~] service aws-apigatewayv2
│ └ resources
│    ├[~]  resource AWS::ApiGatewayV2::ApiMapping
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["ApiMappingId"]
│    ├[~]  resource AWS::ApiGatewayV2::Authorizer
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["AuthorizerId"]
│    ├[~]  resource AWS::ApiGatewayV2::Deployment
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["DeploymentId"]
│    ├[~]  resource AWS::ApiGatewayV2::Integration
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["IntegrationId"]
│    ├[~]  resource AWS::ApiGatewayV2::IntegrationResponse
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["IntegrationResponseId"]
│    ├[~]  resource AWS::ApiGatewayV2::Model
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["ModelId"]
│    ├[~]  resource AWS::ApiGatewayV2::Route
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["RouteId"]
│    ├[~]  resource AWS::ApiGatewayV2::RouteResponse
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["RouteResponseId"]
│    └[~]  resource AWS::ApiGatewayV2::Stage
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["StageName"]
├[~] service aws-appconfig
│ └ resources
│    ├[~]  resource AWS::AppConfig::ConfigurationProfile
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["ConfigurationProfileId"]
│    ├[~]  resource AWS::AppConfig::Environment
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["EnvironmentId"]
│    └[~]  resource AWS::AppConfig::HostedConfigurationVersion
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["VersionNumber"]
├[~] service aws-appmesh
│ └ resources
│    ├[~]  resource AWS::AppMesh::GatewayRoute
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["Arn"]
│    ├[~]  resource AWS::AppMesh::Mesh
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["Arn"]
│    ├[~]  resource AWS::AppMesh::Route
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["Arn"]
│    ├[~]  resource AWS::AppMesh::VirtualGateway
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["Arn"]
│    ├[~]  resource AWS::AppMesh::VirtualNode
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["Arn"]
│    ├[~]  resource AWS::AppMesh::VirtualRouter
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["Arn"]
│    └[~]  resource AWS::AppMesh::VirtualService
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["Arn"]
├[~] service aws-appsync
│ └ resources
│    ├[~]  resource AWS::AppSync::ApiKey
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["Arn"]
│    └[~]  resource AWS::AppSync::GraphQLApi
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["Arn"]
├[~] service aws-arcregionswitch
│ └ resources
│    └[~]  resource AWS::ARCRegionSwitch::Plan
│       ├ properties
│       │  └[+] ReportConfiguration: ReportConfiguration
│       └ types
│          ├[+]  type DocumentDbConfiguration
│          │  ├      name: DocumentDbConfiguration
│          │  └ properties
│          │     ├ TimeoutMinutes: number (default=60)
│          │     ├ CrossAccountRole: string
│          │     ├ ExternalId: string
│          │     ├ Behavior: string (required)
│          │     ├ GlobalClusterIdentifier: string (required)
│          │     ├ DatabaseClusterArns: Array<string> (required)
│          │     └ Ungraceful: DocumentDbUngraceful
│          ├[+]  type DocumentDbUngraceful
│          │  ├      name: DocumentDbUngraceful
│          │  └ properties
│          │     └ Ungraceful: string
│          ├[~] type ExecutionBlockConfiguration
│          │ └ properties
│          │    └[+] DocumentDbConfig: DocumentDbConfiguration
│          ├[+]  type ReportConfiguration
│          │  ├      name: ReportConfiguration
│          │  └ properties
│          │     └ ReportOutput: Array<ReportOutputConfiguration>
│          ├[+]  type ReportOutputConfiguration
│          │  ├      name: ReportOutputConfiguration
│          │  └ properties
│          │     └ S3Configuration: S3ReportOutputConfiguration (required)
│          └[+]  type S3ReportOutputConfiguration
│             ├      name: S3ReportOutputConfiguration
│             └ properties
│                ├ BucketPath: string
│                └ BucketOwner: string
├[~] service aws-autoscaling
│ └ resources
│    └[~]  resource AWS::AutoScaling::AutoScalingGroup
│       ├ properties
│       │  └ InstanceLifecyclePolicy: (documentation changed)
│       └ types
│          ├[~] type InstanceLifecyclePolicy
│          │ ├      - documentation: undefined
│          │ │      + documentation: The instance lifecycle policy for the Auto Scaling group. This policy controls instance behavior when an instance transitions through its lifecycle states. Configure retention triggers to specify when instances should move to a `Retained` state instead of automatic termination.
│          │ │      For more information, see [Control instance retention with instance lifecycle policies](https://docs.aws.amazon.com/autoscaling/ec2/userguide/instance-lifecycle-policy.html) in the *Amazon EC2 Auto Scaling User Guide* .
│          │ └ properties
│          │    └ RetentionTriggers: (documentation changed)
│          ├[~] type LaunchTemplateOverrides
│          │ └ properties
│          │    └ ImageId: (documentation changed)
│          └[~] type RetentionTriggers
│            ├      - documentation: undefined
│            │      + documentation: Defines the specific triggers that cause instances to be retained in a Retained state rather than terminated. Each trigger corresponds to a different failure scenario during the instance lifecycle. This allows fine-grained control over when to preserve instances for manual intervention.
│            └ properties
│               └ TerminateHookAbandon: (documentation changed)
├[~] service aws-batch
│ └ resources
│    └[~]  resource AWS::Batch::JobDefinition
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["JobDefinitionArn"]
├[~] service aws-billingconductor
│ └ resources
│    └[~]  resource AWS::BillingConductor::BillingGroup
│       └ types
│          └[~] type AccountGrouping
│            └ properties
│               └ ResponsibilityTransferArn: (documentation changed)
├[+] service aws-cases
│ ├      capitalized: Cases
│ │      cloudFormationNamespace: AWS::Cases
│ │      name: aws-cases
│ │      shortName: cases
│ └ resources
│    ├ resource AWS::Cases::CaseRule
│    │ ├      name: CaseRule
│    │ │      cloudFormationType: AWS::Cases::CaseRule
│    │ │      documentation: Creates a new case rule. In the Amazon Connect admin website, case rules are known as *case field conditions* . For more information about case field conditions, see [Add case field conditions to a case template](https://docs.aws.amazon.com/connect/latest/adminguide/case-field-conditions.html) .
│    │ │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ │      primaryIdentifier: ["CaseRuleArn"]
│    │ ├ properties
│    │ │  ├ Description: string
│    │ │  ├ DomainId: string (immutable)
│    │ │  ├ Name: string (required)
│    │ │  ├ Rule: CaseRuleDetails (required)
│    │ │  └ Tags: Array<tag>
│    │ ├ attributes
│    │ │  ├ CaseRuleId: string
│    │ │  ├ CreatedTime: string
│    │ │  ├ LastModifiedTime: string
│    │ │  └ CaseRuleArn: string
│    │ └ types
│    │    ├ type BooleanCondition
│    │    │ ├      documentation: Boolean condition for a rule. In the Amazon Connect admin website, case rules are known as *case field conditions* . For more information about case field conditions, see [Add case field conditions to a case template](https://docs.aws.amazon.com/connect/latest/adminguide/case-field-conditions.html) .
│    │    │ │      name: BooleanCondition
│    │    │ └ properties
│    │    │    ├ EqualTo: BooleanOperands
│    │    │    └ NotEqualTo: BooleanOperands
│    │    ├ type BooleanOperands
│    │    │ ├      documentation: Boolean operands for a condition. In the Amazon Connect admin website, case rules are known as *case field conditions* . For more information about case field conditions, see [Add case field conditions to a case template](https://docs.aws.amazon.com/connect/latest/adminguide/case-field-conditions.html) .
│    │    │ │      name: BooleanOperands
│    │    │ └ properties
│    │    │    ├ OperandOne: OperandOne (required)
│    │    │    ├ OperandTwo: OperandTwo (required)
│    │    │    └ Result: boolean (required)
│    │    ├ type CaseRuleDetails
│    │    │ ├      documentation: Represents what rule type should take place, under what conditions. In the Amazon Connect admin website, case rules are known as *case field conditions* . For more information about case field conditions, see [Add case field conditions to a case template](https://docs.aws.amazon.com/connect/latest/adminguide/case-field-conditions.html) .
│    │    │ │      name: CaseRuleDetails
│    │    │ └ properties
│    │    │    ├ Required: RequiredCaseRule
│    │    │    └ Hidden: HiddenCaseRule
│    │    ├ type HiddenCaseRule
│    │    │ ├      documentation: A rule that controls field visibility based on conditions. Fields can be shown or hidden dynamically based on values in other fields.
│    │    │ │      name: HiddenCaseRule
│    │    │ └ properties
│    │    │    ├ DefaultValue: boolean (required)
│    │    │    └ Conditions: Array<BooleanCondition> (required)
│    │    ├ type OperandOne
│    │    │ ├      documentation: Represents the left hand operand in the condition. In the Amazon Connect admin website, case rules are known as *case field conditions* . For more information about case field conditions, see [Add case field conditions to a case template](https://docs.aws.amazon.com/connect/latest/adminguide/case-field-conditions.html) .
│    │    │ │      name: OperandOne
│    │    │ └ properties
│    │    │    └ FieldId: string (required)
│    │    ├ type OperandTwo
│    │    │ ├      documentation: Represents the right hand operand in the condition. In the Amazon Connect admin website, case rules are known as *case field conditions* . For more information about case field conditions, see [Add case field conditions to a case template](https://docs.aws.amazon.com/connect/latest/adminguide/case-field-conditions.html) .
│    │    │ │      name: OperandTwo
│    │    │ └ properties
│    │    │    ├ StringValue: string
│    │    │    ├ BooleanValue: boolean
│    │    │    ├ DoubleValue: number
│    │    │    └ EmptyValue: json
│    │    └ type RequiredCaseRule
│    │      ├      documentation: Required rule type, used to indicate whether a field is required. In the Amazon Connect admin website, case rules are known as *case field conditions* . For more information about case field conditions, see [Add case field conditions to a case template](https://docs.aws.amazon.com/connect/latest/adminguide/case-field-conditions.html) .
│    │      │      name: RequiredCaseRule
│    │      └ properties
│    │         ├ DefaultValue: boolean (required)
│    │         └ Conditions: Array<BooleanCondition> (required)
│    ├ resource AWS::Cases::Domain
│    │ ├      name: Domain
│    │ │      cloudFormationType: AWS::Cases::Domain
│    │ │      documentation: Creates a domain, which is a container for all case data, such as cases, fields, templates and layouts. Each Amazon Connect instance can be associated with only one Cases domain.
│    │ │      > This will not associate your connect instance to Cases domain. Instead, use the Amazon Connect [CreateIntegrationAssociation](https://docs.aws.amazon.com/connect/latest/APIReference/API_CreateIntegrationAssociation.html) API. You need specific IAM permissions to successfully associate the Cases domain. For more information, see [Onboard to Cases](https://docs.aws.amazon.com/connect/latest/adminguide/required-permissions-iam-cases.html#onboard-cases-iam) .
│    │ │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ │      arnTemplate: arn:${Partition}:cases:${Region}:${Account}:domain/${DomainId}
│    │ │      primaryIdentifier: ["DomainArn"]
│    │ ├ properties
│    │ │  ├ Name: string (required, immutable)
│    │ │  └ Tags: Array<tag>
│    │ └ attributes
│    │    ├ CreatedTime: string
│    │    ├ DomainArn: string
│    │    ├ DomainId: string
│    │    └ DomainStatus: string
│    ├ resource AWS::Cases::Field
│    │ ├      name: Field
│    │ │      cloudFormationType: AWS::Cases::Field
│    │ │      documentation: Creates a field in the Cases domain. This field is used to define the case object model (that is, defines what data can be captured on cases) in a Cases domain.
│    │ │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ │      primaryIdentifier: ["FieldArn"]
│    │ ├ properties
│    │ │  ├ Description: string
│    │ │  ├ DomainId: string (immutable)
│    │ │  ├ Name: string (required)
│    │ │  ├ Tags: Array<tag>
│    │ │  └ Type: string (required, immutable)
│    │ └ attributes
│    │    ├ FieldArn: string
│    │    ├ FieldId: string
│    │    ├ Namespace: string
│    │    ├ CreatedTime: string
│    │    └ LastModifiedTime: string
│    ├ resource AWS::Cases::Layout
│    │ ├      name: Layout
│    │ │      cloudFormationType: AWS::Cases::Layout
│    │ │      documentation: Creates a layout in the Cases domain. Layouts define the following configuration in the top section and More Info tab of the Cases user interface:
│    │ │      - Fields to display to the users
│    │ │      - Field ordering
│    │ │      > Title and Status fields cannot be part of layouts since they are not configurable.
│    │ │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ │      primaryIdentifier: ["LayoutArn"]
│    │ ├ properties
│    │ │  ├ Content: LayoutContent (required)
│    │ │  ├ DomainId: string (immutable)
│    │ │  ├ Name: string (required)
│    │ │  └ Tags: Array<tag>
│    │ ├ attributes
│    │ │  ├ CreatedTime: string
│    │ │  ├ LastModifiedTime: string
│    │ │  ├ LayoutArn: string
│    │ │  └ LayoutId: string
│    │ └ types
│    │    ├ type BasicLayout
│    │    │ ├      documentation: Content specific to `BasicLayout` type. It configures fields in the top panel and More Info tab of agent application.
│    │    │ │      name: BasicLayout
│    │    │ └ properties
│    │    │    ├ TopPanel: LayoutSections
│    │    │    └ MoreInfo: LayoutSections
│    │    ├ type FieldGroup
│    │    │ ├      documentation: Object for a group of fields and associated properties.
│    │    │ │      name: FieldGroup
│    │    │ └ properties
│    │    │    ├ Name: string
│    │    │    └ Fields: Array<FieldItem> (required)
│    │    ├ type FieldItem
│    │    │ ├      documentation: Object for field related information.
│    │    │ │      name: FieldItem
│    │    │ └ properties
│    │    │    └ Id: string (required)
│    │    ├ type LayoutContent
│    │    │ ├      documentation: Object to store union of different versions of layout content.
│    │    │ │      name: LayoutContent
│    │    │ └ properties
│    │    │    └ Basic: BasicLayout (required)
│    │    ├ type LayoutSections
│    │    │ ├      documentation: Ordered list containing different kinds of sections that can be added. A LayoutSections object can only contain one section.
│    │    │ │      name: LayoutSections
│    │    │ └ properties
│    │    │    └ Sections: Array<Section>
│    │    └ type Section
│    │      ├      documentation: This represents a sections within a panel or tab of the page layout.
│    │      │      name: Section
│    │      └ properties
│    │         └ FieldGroup: FieldGroup (required)
│    └ resource AWS::Cases::Template
│      ├      name: Template
│      │      cloudFormationType: AWS::Cases::Template
│      │      documentation: Creates a template in the Cases domain. This template is used to define the case object model (that is, to define what data can be captured on cases) in a Cases domain. A template must have a unique name within a domain, and it must reference existing field IDs and layout IDs. Additionally, multiple fields with same IDs are not allowed within the same Template. A template can be either Active or Inactive, as indicated by its status. Inactive templates cannot be used to create cases.
│      │      Other template APIs are:
│      │      - [DeleteTemplate](https://docs.aws.amazon.com/connect/latest/APIReference/API_connect-cases_DeleteTemplate.html)
│      │      - [GetTemplate](https://docs.aws.amazon.com/connect/latest/APIReference/API_connect-cases_GetTemplate.html)
│      │      - [ListTemplates](https://docs.aws.amazon.com/connect/latest/APIReference/API_connect-cases_ListTemplates.html)
│      │      - [UpdateTemplate](https://docs.aws.amazon.com/connect/latest/APIReference/API_connect-cases_UpdateTemplate.html)
│      │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│      │      primaryIdentifier: ["TemplateArn"]
│      ├ properties
│      │  ├ DomainId: string (immutable)
│      │  ├ Name: string (required)
│      │  ├ Description: string
│      │  ├ LayoutConfiguration: LayoutConfiguration
│      │  ├ RequiredFields: Array<RequiredField>
│      │  ├ Rules: Array<TemplateRule>
│      │  ├ Status: string
│      │  └ Tags: Array<tag>
│      ├ attributes
│      │  ├ CreatedTime: string
│      │  ├ LastModifiedTime: string
│      │  ├ TemplateArn: string
│      │  └ TemplateId: string
│      └ types
│         ├ type LayoutConfiguration
│         │ ├      documentation: Object to store configuration of layouts associated to the template.
│         │ │      name: LayoutConfiguration
│         │ └ properties
│         │    └ DefaultLayout: string
│         ├ type RequiredField
│         │ ├      documentation: List of fields that must have a value provided to create a case.
│         │ │      name: RequiredField
│         │ └ properties
│         │    └ FieldId: string (required)
│         └ type TemplateRule
│           ├      documentation: An association representing a case rule acting upon a field. In the Amazon Connect admin website, case rules are known as *case field conditions* . For more information about case field conditions, see [Add case field conditions to a case template](https://docs.aws.amazon.com/connect/latest/adminguide/case-field-conditions.html) .
│           │      name: TemplateRule
│           └ properties
│              ├ CaseRuleId: string (required)
│              └ FieldId: string
├[~] service aws-cloudwatch
│ └ resources
│    └[~]  resource AWS::CloudWatch::InsightRule
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["Arn"]
├[~] service aws-codebuild
│ └ resources
│    ├[~]  resource AWS::CodeBuild::Project
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["Name"]
│    └[~]  resource AWS::CodeBuild::ReportGroup
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["Arn"]
├[~] service aws-codedeploy
│ └ resources
│    └[~]  resource AWS::CodeDeploy::DeploymentGroup
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["DeploymentGroupName"]
├[~] service aws-codepipeline
│ └ resources
│    └[~]  resource AWS::CodePipeline::Webhook
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["Name"]
├[~] service aws-cognito
│ └ resources
│    ├[~]  resource AWS::Cognito::UserPoolClient
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["ClientId"]
│    ├[~]  resource AWS::Cognito::UserPoolDomain
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["Domain"]
│    ├[~]  resource AWS::Cognito::UserPoolGroup
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["GroupName"]
│    ├[~]  resource AWS::Cognito::UserPoolIdentityProvider
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["ProviderName"]
│    ├[~]  resource AWS::Cognito::UserPoolResourceServer
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["Identifier"]
│    └[~]  resource AWS::Cognito::UserPoolUser
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["Username"]
├[~] service aws-connect
│ └ resources
│    ├[~]  resource AWS::Connect::ContactFlowModule
│    │  ├ properties
│    │  │  ├[+] ExternalInvocationConfiguration: ExternalInvocationConfiguration
│    │  │  └[+] Settings: string
│    │  └ types
│    │     └[+]  type ExternalInvocationConfiguration
│    │        ├      documentation: The external invocation configuration for the flow module
│    │        │      name: ExternalInvocationConfiguration
│    │        └ properties
│    │           └ Enabled: boolean (required)
│    └[~]  resource AWS::Connect::HoursOfOperation
│       ├ properties
│       │  ├[+] ChildHoursOfOperations: Array<HoursOfOperationsIdentifier>
│       │  └[+] ParentHoursOfOperations: Array<HoursOfOperationsIdentifier>
│       └ types
│          ├[~] type HoursOfOperationOverride
│          │ └ properties
│          │    ├[+] OverrideType: string
│          │    └[+] RecurrenceConfig: RecurrenceConfig
│          ├[+]  type HoursOfOperationsIdentifier
│          │  ├      documentation: Identifier for hours of operation.
│          │  │      name: HoursOfOperationsIdentifier
│          │  └ properties
│          │     ├ Name: string
│          │     └ Id: string (required)
│          ├[+]  type RecurrenceConfig
│          │  ├      documentation: Configuration for recurring hours of operation overrides.
│          │  │      name: RecurrenceConfig
│          │  └ properties
│          │     └ RecurrencePattern: RecurrencePattern (required)
│          └[+]  type RecurrencePattern
│             ├      documentation: Pattern for recurring hours of operation overrides.
│             │      name: RecurrencePattern
│             └ properties
│                ├ Frequency: string
│                ├ Interval: integer
│                ├ ByMonth: Array<integer>
│                ├ ByMonthDay: Array<integer>
│                └ ByWeekdayOccurrence: Array<integer>
├[~] service aws-dax
│ └ resources
│    ├[~]  resource AWS::DAX::Cluster
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["ClusterName"]
│    ├[~]  resource AWS::DAX::ParameterGroup
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["ParameterGroupName"]
│    └[~]  resource AWS::DAX::SubnetGroup
│       └      - primaryIdentifier: ["SubnetGroupName"]
│              + primaryIdentifier: ["Id"]
│              - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["SubnetGroupName"]
├[~] service aws-directoryservice
│ └ resources
│    └[~]  resource AWS::DirectoryService::MicrosoftAD
│       └      - arnTemplate: arn:${Partition}:ds:${Region}:${Account}:${DirectoryId}
│              + arnTemplate: arn:${Partition}:ds:${Region}:${Account}:directory/${DirectoryId}
├[~] service aws-dms
│ └ resources
│    └[~]  resource AWS::DMS::EventSubscription
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["SubscriptionName"]
├[~] service aws-ec2
│ └ resources
│    ├[~]  resource AWS::EC2::ClientVpnEndpoint
│    │  └ properties
│    │     ├[+] EndpointIpAddressType: string (immutable)
│    │     └[+] TrafficIpAddressType: string (immutable)
│    ├[~]  resource AWS::EC2::EC2Fleet
│    │  └ types
│    │     └[~] type FleetLaunchTemplateOverridesRequest
│    │       └ properties
│    │          └ AvailabilityZone: (documentation changed)
│    ├[~]  resource AWS::EC2::EIP
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["PublicIp"]
│    ├[~]  resource AWS::EC2::SpotFleet
│    │  └ types
│    │     └[~] type LaunchTemplateOverrides
│    │       └ properties
│    │          └ AvailabilityZone: (documentation changed)
│    ├[~]  resource AWS::EC2::TransitGatewayMeteringPolicy
│    │  └      - arnTemplate: undefined
│    │         + arnTemplate: arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-metering-policy/${TransitGatewayMeteringPolicyId}
│    ├[~]  resource AWS::EC2::VPCEncryptionControl
│    │  └      - arnTemplate: undefined
│    │         + arnTemplate: arn:${Partition}:ec2:${Region}:${Account}:vpc-encryption-control/${VpcEncryptionControlId}
│    ├[~]  resource AWS::EC2::VPNConcentrator
│    │  ├      - arnTemplate: undefined
│    │  │      + arnTemplate: arn:${Partition}:ec2:${Region}:${Account}:vpn-concentrator/${VpnConcentratorId}
│    │  └ attributes
│    │     └ VpnConcentratorId: (documentation changed)
│    └[~]  resource AWS::EC2::VPNConnection
│       └ properties
│          ├ TunnelBandwidth: (documentation changed)
│          └ VpnConcentratorId: (documentation changed)
├[~] service aws-ecs
│ └ resources
│    ├[~]  resource AWS::ECS::CapacityProvider
│    │  └ types
│    │     └[~] type InstanceLaunchTemplate
│    │       └ properties
│    │          └[+] CapacityOptionType: string
│    ├[~]  resource AWS::ECS::ExpressGatewayService
│    │  ├ attributes
│    │  │  ├ ECSManagedResourceArns.AutoScaling.ApplicationAutoScalingPolicies: (documentation changed)
│    │  │  ├ ECSManagedResourceArns.AutoScaling.ScalableTarget: (documentation changed)
│    │  │  ├ ECSManagedResourceArns.IngressPath.CertificateArn: (documentation changed)
│    │  │  ├ ECSManagedResourceArns.IngressPath.ListenerArn: (documentation changed)
│    │  │  ├ ECSManagedResourceArns.IngressPath.ListenerRuleArn: (documentation changed)
│    │  │  ├ ECSManagedResourceArns.IngressPath.LoadBalancerArn: (documentation changed)
│    │  │  ├ ECSManagedResourceArns.IngressPath.LoadBalancerSecurityGroups: (documentation changed)
│    │  │  ├ ECSManagedResourceArns.IngressPath.TargetGroupArns: (documentation changed)
│    │  │  ├ ECSManagedResourceArns.LogGroups: (documentation changed)
│    │  │  ├ ECSManagedResourceArns.MetricAlarms: (documentation changed)
│    │  │  ├ ECSManagedResourceArns.ServiceSecurityGroups: (documentation changed)
│    │  │  └ Endpoint: (documentation changed)
│    │  └ types
│    │     ├[~] type AutoScalingArns
│    │     │ └ properties
│    │     │    ├ ApplicationAutoScalingPolicies: (documentation changed)
│    │     │    └ ScalableTarget: (documentation changed)
│    │     ├[~] type ECSManagedResourceArns
│    │     │ └ properties
│    │     │    ├ LogGroups: (documentation changed)
│    │     │    ├ MetricAlarms: (documentation changed)
│    │     │    └ ServiceSecurityGroups: (documentation changed)
│    │     └[~] type IngressPathArns
│    │       └ properties
│    │          ├ CertificateArn: (documentation changed)
│    │          ├ ListenerArn: (documentation changed)
│    │          ├ ListenerRuleArn: (documentation changed)
│    │          ├ LoadBalancerArn: (documentation changed)
│    │          ├ LoadBalancerSecurityGroups: (documentation changed)
│    │          └ TargetGroupArns: (documentation changed)
│    └[~]  resource AWS::ECS::Service
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["ServiceArn"]
├[~] service aws-elasticache
│ └ resources
│    ├[~]  resource AWS::ElastiCache::CacheCluster
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["ClusterName"]
│    └[~]  resource AWS::ElastiCache::User
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["UserName"]
├[~] service aws-elasticloadbalancing
│ └ resources
│    └[~]  resource AWS::ElasticLoadBalancing::LoadBalancer
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["LoadBalancerName"]
├[~] service aws-elasticsearch
│ └ resources
│    └[~]  resource AWS::Elasticsearch::Domain
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["DomainName"]
├[~] service aws-emr
│ └ resources
│    └[~]  resource AWS::EMR::Step
│       └ properties
│          ├[+] EncryptionKeyArn: string (immutable)
│          └[+] LogUri: string (immutable)
├[~] service aws-events
│ └ resources
│    └[~]  resource AWS::Events::Rule
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["EventBusName","Name"]
├[~] service aws-eventschemas
│ └ resources
│    └[~]  resource AWS::EventSchemas::RegistryPolicy
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["RegistryName"]
├[~] service aws-gameliftstreams
│ └ resources
│    └[~]  resource AWS::GameLiftStreams::StreamGroup
│       ├ properties
│       │  └ StreamClass: (documentation changed)
│       └ types
│          └[~] type LocationConfiguration
│            └ properties
│               ├ AlwaysOnCapacity: (documentation changed)
│               └ OnDemandCapacity: (documentation changed)
├[~] service aws-glue
│ └ resources
│    ├[~]  resource AWS::Glue::DevEndpoint
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["EndpointName"]
│    └[~]  resource AWS::Glue::Workflow
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["Name"]
├[~] service aws-groundstation
│ └ resources
│    └[~]  resource AWS::GroundStation::DataflowEndpointGroupV2
│       ├      - documentation: Resource Type definition for AWS Ground Station DataflowEndpointGroupV2
│       │      + documentation: Creates a `DataflowEndpoint` group containing the specified list of Ground Station Agent based endpoints.
│       │      The `name` field in each endpoint is used in your mission profile `DataflowEndpointConfig` to specify which endpoints to use during a contact.
│       │      When a contact uses multiple `DataflowEndpointConfig` objects, each `Config` must match a `DataflowEndpoint` in the same group.
│       │      - arnTemplate: undefined
│       │      + arnTemplate: arn:${Partition}:groundstation:${Region}:${Account}:dataflow-endpoint-group/${DataflowEndpointGroupId}
│       ├ properties
│       │  ├ ContactPostPassDurationSeconds: (documentation changed)
│       │  ├ ContactPrePassDurationSeconds: (documentation changed)
│       │  ├ Endpoints: (documentation changed)
│       │  └ Tags: (documentation changed)
│       ├ attributes
│       │  └ EndpointDetails: (documentation changed)
│       └ types
│          ├[~] type ConnectionDetails
│          │ ├      - documentation: Socket address of an uplink or downlink agent endpoint with an optional mtu.
│          │ │      + documentation: Egress address of AgentEndpoint with an optional mtu.
│          │ └ properties
│          │    └ SocketAddress: (documentation changed)
│          ├[~] type CreateEndpointDetails
│          │ ├      - documentation: undefined
│          │ │      + documentation: Endpoint definition used for creating a dataflow endpoint
│          │ └ properties
│          │    ├ DownlinkAwsGroundStationAgentEndpoint: (documentation changed)
│          │    └ UplinkAwsGroundStationAgentEndpoint: (documentation changed)
│          ├[~] type DownlinkAwsGroundStationAgentEndpoint
│          │ ├      - documentation: Information about DownlinkAwsGroundStationAgentEndpoint used for create
│          │ │      + documentation: Definition for a downlink agent endpoint
│          │ └ properties
│          │    ├ DataflowDetails: (documentation changed)
│          │    └ Name: (documentation changed)
│          ├[~] type DownlinkAwsGroundStationAgentEndpointDetails
│          │ ├      - documentation: Information about DownlinkAwsGroundStationAgentEndpoint
│          │ │      + documentation: Details for a downlink agent endpoint
│          │ └ properties
│          │    ├ AgentStatus: (documentation changed)
│          │    ├ AuditResults: (documentation changed)
│          │    ├ DataflowDetails: (documentation changed)
│          │    └ Name: (documentation changed)
│          ├[~] type DownlinkConnectionDetails
│          │ ├      - documentation: Connection details for downlink, from ground station to agent, and customer to agent
│          │ │      + documentation: Connection details for Ground Station to Agent and Agent to customer
│          │ └ properties
│          │    ├ AgentIpAndPortAddress: (documentation changed)
│          │    └ EgressAddressAndPort: (documentation changed)
│          ├[~] type DownlinkDataflowDetails
│          │ ├      - documentation: Dataflow details for downlink
│          │ │      + documentation: Dataflow details for a downlink endpoint
│          │ └ properties
│          │    └ AgentConnectionDetails: (documentation changed)
│          ├[~] type EndpointDetails
│          │ ├      - documentation: undefined
│          │ │      + documentation: Information about the endpoint details.
│          │ └ properties
│          │    ├ DownlinkAwsGroundStationAgentEndpoint: (documentation changed)
│          │    └ UplinkAwsGroundStationAgentEndpoint: (documentation changed)
│          ├[~] type RangedConnectionDetails
│          │ ├      - documentation: Socket address of an uplink or downlink agent endpoint with a port range and an optional mtu.
│          │ │      + documentation: Ingress address of AgentEndpoint with a port range and an optional mtu.
│          │ └ properties
│          │    └ SocketAddress: (documentation changed)
│          ├[~] type RangedSocketAddress
│          │ └ properties
│          │    └ PortRange: (documentation changed)
│          ├[~] type SocketAddress
│          │ ├      - documentation: undefined
│          │ │      + documentation: Information about the socket address.
│          │ └ properties
│          │    └ Name: (documentation changed)
│          ├[~] type UplinkAwsGroundStationAgentEndpoint
│          │ ├      - documentation: Information about UplinkAwsGroundStationAgentEndpoint used for create
│          │ │      + documentation: Definition for an uplink agent endpoint
│          │ └ properties
│          │    ├ DataflowDetails: (documentation changed)
│          │    └ Name: (documentation changed)
│          ├[~] type UplinkAwsGroundStationAgentEndpointDetails
│          │ ├      - documentation: Information about UplinkAwsGroundStationAgentEndpoint
│          │ │      + documentation: Details for an uplink agent endpoint
│          │ └ properties
│          │    ├ AgentStatus: (documentation changed)
│          │    ├ AuditResults: (documentation changed)
│          │    ├ DataflowDetails: (documentation changed)
│          │    └ Name: (documentation changed)
│          ├[~] type UplinkConnectionDetails
│          │ ├      - documentation: Connection details for uplink, from ground station to agent, and customer to agent
│          │ │      + documentation: Connection details for customer to Agent and Agent to Ground Station
│          │ └ properties
│          │    ├ AgentIpAndPortAddress: (documentation changed)
│          │    └ IngressAddressAndPort: (documentation changed)
│          └[~] type UplinkDataflowDetails
│            ├      - documentation: Dataflow details for uplink
│            │      + documentation: Dataflow details for an uplink endpoint
│            └ properties
│               └ AgentConnectionDetails: (documentation changed)
├[~] service aws-iot
│ └ resources
│    ├[~]  resource AWS::IoT::Policy
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["PolicyName"]
│    └[~]  resource AWS::IoT::TopicRule
│       └ types
│          ├[+]  type BatchConfig
│          │  ├      name: BatchConfig
│          │  └ properties
│          │     ├ MaxBatchOpenMs: integer
│          │     ├ MaxBatchSize: integer
│          │     └ MaxBatchSizeBytes: integer
│          └[~] type HttpAction
│            └ properties
│               ├[+] BatchConfig: BatchConfig
│               └[+] EnableBatching: boolean
├[~] service aws-kafkaconnect
│ └ resources
│    └[~]  resource AWS::KafkaConnect::Connector
│       └ properties
│          └ NetworkType: (documentation changed)
├[~] service aws-lex
│ └ resources
│    └[~]  resource AWS::Lex::Bot
│       └ types
│          ├[~] type IntentDisambiguationSettings
│          │ ├      - documentation: undefined
│          │ │      + documentation: Configures the Intent Disambiguation feature that helps resolve ambiguous user inputs when multiple intents could match. When enabled, the system presents clarifying questions to users, helping them specify their exact intent for improved conversation accuracy.
│          │ └ properties
│          │    ├ CustomDisambiguationMessage: (documentation changed)
│          │    ├ Enabled: (documentation changed)
│          │    └ MaxDisambiguationIntents: (documentation changed)
│          ├[~] type NluImprovementSpecification
│          │ └ properties
│          │    ├ AssistedNluMode: (documentation changed)
│          │    └ IntentDisambiguationSettings: (documentation changed)
│          ├[~] type SpeechFoundationModel
│          │ ├      - documentation: undefined
│          │ │      + documentation: Configuration for a foundation model used for speech synthesis and recognition capabilities.
│          │ └ properties
│          │    └ VoiceId: (documentation changed)
│          └[~] type UnifiedSpeechSettings
│            ├      - documentation: undefined
│            │      + documentation: Unified configuration settings that combine speech recognition and synthesis capabilities.
│            └ properties
│               └ SpeechFoundationModel: (documentation changed)
├[~] service aws-logs
│ └ resources
│    ├[~]  resource AWS::Logs::LogGroup
│    │  └ properties
│    │     └[+] DeletionProtectionEnabled: boolean (default=false)
│    ├[~]  resource AWS::Logs::LogStream
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["LogStreamName"]
│    └[~]  resource AWS::Logs::SubscriptionFilter
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["FilterName"]
├[~] service aws-mediaconvert
│ └ resources
│    ├[~]  resource AWS::MediaConvert::JobTemplate
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["Name"]
│    ├[~]  resource AWS::MediaConvert::Preset
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["Name"]
│    └[~]  resource AWS::MediaConvert::Queue
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["Name"]
├[~] service aws-mediatailor
│ └ resources
│    └[~]  resource AWS::MediaTailor::PlaybackConfiguration
│       ├ properties
│       │  └[+] AdDecisionServerConfiguration: AdDecisionServerConfiguration
│       └ types
│          ├[+]  type AdDecisionServerConfiguration
│          │  ├      documentation: The configuration for the request to the specified Ad Decision Server URL.
│          │  │      name: AdDecisionServerConfiguration
│          │  └ properties
│          │     └ HttpRequest: HttpRequest (required)
│          └[+]  type HttpRequest
│             ├      documentation: The configuration for the request to the Ad Decision Server URL.
│             │      name: HttpRequest
│             └ properties
│                ├ HttpMethod: string
│                ├ Body: string
│                ├ Headers: Map<string, string>
│                └ CompressRequest: string
├[~] service aws-observabilityadmin
│ └ resources
│    ├[~]  resource AWS::ObservabilityAdmin::S3TableIntegration
│    │  ├ properties
│    │  │  ├ LogSources: (documentation changed)
│    │  │  ├ RoleArn: (documentation changed)
│    │  │  └ Tags: (documentation changed)
│    │  ├ attributes
│    │  │  └ Arn: (documentation changed)
│    │  └ types
│    │     ├[~] type EncryptionConfig
│    │     │ ├      - documentation: Encryption configuration for the S3 Table Integration
│    │     │ │      + documentation: Defines the encryption configuration for S3 Table integrations, including the encryption algorithm and KMS key settings.
│    │     │ └ properties
│    │     │    ├ KmsKeyArn: (documentation changed)
│    │     │    └ SseAlgorithm: (documentation changed)
│    │     └[~] type LogSource
│    │       ├      - documentation: CloudWatch Logs data source to associate with the S3 Table Integration
│    │       │      + documentation: A data source with an S3 Table integration for query access in the `logs` namespace.
│    │       └ properties
│    │          ├ Identifier: (documentation changed)
│    │          ├ Name: (documentation changed)
│    │          └ Type: (documentation changed)
│    └[~]  resource AWS::ObservabilityAdmin::TelemetryPipelines
│       ├      - documentation: Resource Type definition for AWS::ObservabilityAdmin::TelemetryPipelines
│       │      + documentation: Creates a telemetry pipeline for processing and transforming telemetry data. The pipeline defines how data flows from sources through processors to destinations, enabling data transformation and delivering capabilities.
│       │      **Using CloudWatch as a pipeline source** The following is an example of a `Body` property value for the `Configuration` object. { "Type": "AWS::ObservabilityAdmin::TelemetryPipelines", "Properties": { "Configuration": { "Body": "pipeline:\n source:\n cloudwatch_logs:\n log_event_metadata:\n data_source_name: \"my_data_source\"\n data_source_type: \"default\"\n aws:\n sts_role_arn: \"arn:aws:iam::123456789012:role/MyPipelineAccessRole\"\n processor:\n - parse_json: {}\n sink:\n - cloudwatch_logs:\n log_group: \"@original\"" } }
│       │      } Type: AWS::ObservabilityAdmin::TelemetryPipelines
│       │      Properties: Configuration: Body: | pipeline: source: cloudwatch_logs: log_event_metadata: data_source_name: "my_data_source" data_source_type: "default" aws: sts_role_arn: "arn:aws:iam::123456789012:role/MyPipelineAccessRole" processor: - parse_json: {} sink: - cloudwatch_logs: log_group: "@original" **Using Amazon S3 as a pipeline source** The following is an example of a `Body` property value for the `Configuration` object. { "Type": "AWS::ObservabilityAdmin::TelemetryPipelines", "Properties": { "Configuration": { "Body": "pipeline:\n source:\n s3:\n sqs:\n visibility_timeout: \"PT60S\"\n visibility_duplication_protection: true\n maximum_messages: 10\n queue_url: \"https://sqs.us-east-1.amazonaws.com/123456789012/my-sqs-queue\"\n notification_type: \"sqs\"\n codec:\n ndjson: {}\n aws:\n region: \"us-east-1\"\n sts_role_arn: \"arn:aws:iam::123456789012:role/MyAccessRole\"\n data_source_name: \"crowdstrike_falcon\"\n processor:\n - ocsf:\n version: \"1.5\"\n mapping_version: \"1.5.0\"\n schema:\n crowdstrike_falcon:\n sink:\n - cloudwatch_logs:\n log_group: \"my-log-group\"" } }
│       │      } Type: AWS::ObservabilityAdmin::TelemetryPipelines
│       │      Properties: Configuration: Body: | pipeline: source: s3: sqs: visibility_timeout: "PT60S" visibility_duplication_protection: true maximum_messages: 10 queue_url: "https://sqs.us-east-1.amazonaws.com/123456789012/my-sqs-queue" notification_type: "sqs" codec: ndjson: {} aws: region: "us-east-1" sts_role_arn: "arn:aws:iam::123456789012:role/MyAccessRole" data_source_name: "crowdstrike_falcon" processor: - ocsf: version: "1.5" mapping_version: "1.5.0" schema: crowdstrike_falcon: sink: - cloudwatch_logs: log_group: "my-log-group"
│       ├ properties
│       │  ├ Configuration: (documentation changed)
│       │  ├ Name: (documentation changed)
│       │  └ Tags: (documentation changed)
│       ├ attributes
│       │  ├ Arn: (documentation changed)
│       │  ├ PipelineIdentifier: (documentation changed)
│       │  └ Status: (documentation changed)
│       └ types
│          └[~] type TelemetryPipeline
│            └ properties
│               └ Configuration: (documentation changed)
├[~] service aws-odb
│ └ resources
│    └[~]  resource AWS::ODB::OdbPeeringConnection
│       ├ properties
│       │  └ DisplayName: - string (immutable)
│       │                 + string
│       └ attributes
│          └ PeerNetworkCidrs: (documentation changed)
├[~] service aws-pinpoint
│ └ resources
│    ├[~]  resource AWS::Pinpoint::EmailTemplate
│    │  └      - arnTemplate: arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/${TemplateName}/VOICE
│    │         + arnTemplate: arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/${TemplateName}/EMAIL
│    └[~]  resource AWS::Pinpoint::SmsTemplate
│       └      - arnTemplate: arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/${TemplateName}/VOICE
│              + arnTemplate: arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/${TemplateName}/SMS
├[~] service aws-quicksight
│ └ resources
│    └[~]  resource AWS::QuickSight::Dashboard
│       └ types
│          ├[~] type FreeFormLayoutElement
│          │ └ properties
│          │    ├[+] BorderRadius: string
│          │    └[+] Padding: string
│          ├[~] type FreeFormLayoutElementBorderStyle
│          │ └ properties
│          │    └[+] Width: string
│          ├[~] type GridLayoutElement
│          │ └ properties
│          │    ├[+] BackgroundStyle: GridLayoutElementBackgroundStyle
│          │    ├[+] BorderRadius: string
│          │    ├[+] BorderStyle: GridLayoutElementBorderStyle
│          │    ├[+] LoadingAnimation: LoadingAnimation
│          │    ├[+] Padding: string
│          │    └[+] SelectedBorderStyle: GridLayoutElementBorderStyle
│          ├[+]  type GridLayoutElementBackgroundStyle
│          │  ├      documentation: The background style configuration of a grid layout element.
│          │  │      name: GridLayoutElementBackgroundStyle
│          │  └ properties
│          │     ├ Color: string
│          │     └ Visibility: string
│          └[+]  type GridLayoutElementBorderStyle
│             ├      documentation: The border style configuration of a grid layout element.
│             │      name: GridLayoutElementBorderStyle
│             └ properties
│                ├ Color: string
│                ├ Visibility: string
│                └ Width: string
├[~] service aws-ram
│ └ resources
│    └[~]  resource AWS::RAM::Permission
│       └      - arnTemplate: arn:${Partition}:ram::${Account}:permission/${ResourcePath}
│              + arnTemplate: arn:${Partition}:ram:${Region}:${Account}:permission/${ResourcePath}
├[~] service aws-route53
│ └ resources
│    └[~]  resource AWS::Route53::RecordSet
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["Name"]
├[~] service aws-sagemaker
│ └ resources
│    └[~]  resource AWS::SageMaker::Device
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["DeviceFleetName"]
├[~] service aws-secretsmanager
│ └ resources
│    ├[~]  resource AWS::SecretsManager::ResourcePolicy
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["SecretId"]
│    └[~]  resource AWS::SecretsManager::SecretTargetAttachment
│       └      - cfnRefIdentifier: undefined
│              + cfnRefIdentifier: ["SecretId"]
├[~] service aws-securityhub
│ └ resources
│    └[~]  resource AWS::SecurityHub::ConnectorV2
│       ├ attributes
│       │  ├[-] Provider.JiraCloud.AuthStatus: string
│       │  ├[-] Provider.JiraCloud.AuthUrl: string
│       │  ├[-] Provider.JiraCloud.CloudId: string
│       │  ├[-] Provider.JiraCloud.Domain: string
│       │  └[-] Provider.ServiceNow.AuthStatus: string
│       └ types
│          ├[-]  type JiraCloud
│          │  ├      documentation: Information about the configuration and status of a Jira Cloud integration.
│          │  │      name: JiraCloud
│          │  └ properties
│          │     ├ ProjectKey: string (required)
│          │     ├ CloudId: string
│          │     ├ Domain: string
│          │     ├ AuthUrl: string
│          │     └ AuthStatus: string
│          ├[+]  type JiraCloudProviderConfiguration
│          │  ├      documentation: The initial configuration settings required to establish an integration between Security Hub CSPM and Jira Cloud.
│          │  │      name: JiraCloudProviderConfiguration
│          │  └ properties
│          │     └ ProjectKey: string (required)
│          ├[~] type Provider
│          │ └ properties
│          │    ├ JiraCloud: - JiraCloud
│          │    │            + JiraCloudProviderConfiguration
│          │    └ ServiceNow: - ServiceNow
│          │                  + ServiceNowProviderConfiguration
│          ├[-]  type ServiceNow
│          │  ├      documentation: Information about a ServiceNow ITSM integration.
│          │  │      name: ServiceNow
│          │  └ properties
│          │     ├ InstanceName: string (required, immutable)
│          │     ├ SecretArn: string (required)
│          │     └ AuthStatus: string
│          └[+]  type ServiceNowProviderConfiguration
│             ├      documentation: The initial configuration settings required to establish an integration between Security Hub CSPM and ServiceNow ITSM.
│             │      name: ServiceNowProviderConfiguration
│             └ properties
│                ├ InstanceName: string (required, immutable)
│                └ SecretArn: string (required)
├[~] service aws-ses
│ └ resources
│    ├[~]  resource AWS::SES::MultiRegionEndpoint
│    │  └ types
│    │     ├[~] type Details
│    │     │ └ properties
│    │     │    └ RouteDetails: (documentation changed)
│    │     └[~] type RouteDetailsItems
│    │       ├      - documentation: undefined
│    │       │      + documentation: An object that contains route configuration. Includes secondary region name.
│    │       └ properties
│    │          └ Region: (documentation changed)
│    ├[~]  resource AWS::SES::ReceiptRuleSet
│    │  └      - cfnRefIdentifier: undefined
│    │         + cfnRefIdentifier: ["RuleSetName"]
│    └[~]  resource AWS::SES::Tenant
│       ├      - documentation: Resource Type definition for AWS::SES::Tenant
│       │      + documentation: Create a tenant.
│       │      *Tenants* are logical containers that group related SES resources together. Each tenant can have its own set of resources like email identities, configuration sets, and templates, along with reputation metrics and sending status. This helps isolate and manage email sending for different customers or business units within your Amazon SES API v2 account.
│       ├ properties
│       │  ├ Tags: (documentation changed)
│       │  └ TenantName: (documentation changed)
│       ├ attributes
│       │  └ Arn: (documentation changed)
│       └ types
│          └[~] type ResourceAssociation
│            ├      - documentation: The resource to associate with the tenant
│            │      + documentation: The resource to associate with the tenant.
│            └ properties
│               └ ResourceArn: (documentation changed)
├[~] service aws-ssm
│ └ resources
│    ├[~]  resource AWS::SSM::MaintenanceWindowTarget
│    │  ├      - cfnRefIdentifier: undefined
│    │  │      + cfnRefIdentifier: ["WindowTargetId"]
│    │  └ attributes
│    │     └[-] Id: string
│    └[~]  resource AWS::SSM::MaintenanceWindowTask
│       ├      - cfnRefIdentifier: undefined
│       │      + cfnRefIdentifier: ["WindowTaskId"]
│       └ attributes
│          └ WindowTaskId: (documentation changed)
├[~] service aws-wisdom
│ └ resources
│    └[~]  resource AWS::Wisdom::AssistantAssociation
│       └ types
│          ├[~] type AssociationData
│          │ └ properties
│          │    ├[+] ExternalBedrockKnowledgeBaseConfig: ExternalBedrockKnowledgeBaseConfig
│          │    └ KnowledgeBaseId: - string (required, immutable)
│          │                       + string (immutable)
│          └[+]  type ExternalBedrockKnowledgeBaseConfig
│             ├      name: ExternalBedrockKnowledgeBaseConfig
│             └ properties
│                ├ BedrockKnowledgeBaseArn: string (required)
│                └ AccessRoleArn: string (required)
└[~] service aws-workspacesweb
  └ resources
     └[~]  resource AWS::WorkSpacesWeb::UserSettings
        └ properties
           └[+] WebAuthnAllowed: string

CHANGES TO L1 RESOURCES: L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-securityhub: AWS::SecurityHub::ConnectorV2: Provider.JiraCloud.AuthStatus attribute removed.
aws-securityhub: AWS::SecurityHub::ConnectorV2: Provider.JiraCloud.AuthUrl attribute removed.
aws-securityhub: AWS::SecurityHub::ConnectorV2: Provider.JiraCloud.CloudId attribute removed.
aws-securityhub: AWS::SecurityHub::ConnectorV2: Provider.JiraCloud.Domain attribute removed.
aws-securityhub: AWS::SecurityHub::ConnectorV2: Provider.ServiceNow.AuthStatus attribute removed.
aws-securityhub: AWS::SecurityHub::ConnectorV2: JiraCloud type removed, replaced by JiraCloudProviderConfiguration.
aws-securityhub: AWS::SecurityHub::ConnectorV2: ServiceNow type removed, replaced by ServiceNowProviderConfiguration.
aws-ssm: AWS::SSM::MaintenanceWindowTarget: Id attribute removed.

[kumvprat]

Checked :

• AWS::SSM::MaintenanceWindowTask : The existing PrimaryIdentifier Id property is being renamed to WindowTaskId
• AWS::SecurityHub::ConnectorV2: Unusable properties removed

[kumvprat]

@Mergifyio refresh

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[mergify]

refresh

✅ Pull request refreshed

[mergify]

Merge Queue Status

✅ The pull request has been merged at fb2fe68

This pull request spent 6 seconds in the queue, with no time running CI.
The checks were run in-place.

Required conditions to merge

• #approved-reviews-by >= 1 [🛡 GitHub branch protection]
  • feat: update L1 CloudFormation resource definitions #36477
• #changes-requested-reviews-by = 0 [🛡 GitHub branch protection]
  • feat: update L1 CloudFormation resource definitions #36477
• any of [🛡 GitHub branch protection]:
  • check-success = validate-pr
  • check-neutral = validate-pr
  • check-skipped = validate-pr
• any of [🛡 GitHub branch protection]:
  • check-success = build
  • check-neutral = build
  • check-skipped = build

[github-actions]

Comments on closed issues and PRs are hard for our team to see.
If you need help, please open a new issue that references this one.