feat: update L1 CloudFormation resource definitions (#33906)

Updates the L1 CloudFormation resource definitions with the latest changes from `@aws-cdk/aws-service-spec` **L1 CloudFormation resource definition changes:** ``` ├[~] service aws-amazonmq │ └ resources │ └[~] resource AWS::AmazonMQ::Broker │ └ types │ └[~] type User │ └ properties │ └ JolokiaApiAccess: (documentation changed) ├[~] service aws-apigatewayv2 │ └ resources │ └[~] resource AWS::ApiGatewayV2::DomainName │ └ attributes │ └[+] DomainNameArn: string ├[~] service aws-appconfig │ └ resources │ └[~] resource AWS::AppConfig::ConfigurationProfile │ └ properties │ └ RetrievalRoleArn: (documentation changed) ├[~] service aws-applicationsignals │ └ resources │ ├[~] resource AWS::ApplicationSignals::Discovery │ │ ├ - documentation: Resource Type definition for AWS::ApplicationSignals::Discovery │ │ │ + documentation: Enables this AWS account to be able to use CloudWatch Application Signals by creating the `AWSServiceRoleForCloudWatchApplicationSignals` service-linked role. This service-linked role has the following permissions: │ │ │ - `xray:GetServiceGraph` │ │ │ - `logs:StartQuery` │ │ │ - `logs:GetQueryResults` │ │ │ - `cloudwatch:GetMetricData` │ │ │ - `cloudwatch:ListMetrics` │ │ │ - `tag:GetResources` │ │ │ - `autoscaling:DescribeAutoScalingGroups` │ │ │ After completing this step, you still need to instrument your Java and Python applications to send data to Application Signals. For more information, see [Enabling Application Signals](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Signals-Enable.html) . │ │ └ attributes │ │ └ AccountId: (documentation changed) │ └[~] resource AWS::ApplicationSignals::ServiceLevelObjective │ ├ properties │ │ └[+] ExclusionWindows: Array<ExclusionWindow> │ └ types │ ├[+] type ExclusionWindow │ │ ├ documentation: The core SLO time window exclusion object that includes Window, StartTime, RecurrenceRule, and Reason. │ │ │ name: ExclusionWindow │ │ └ properties │ │ ├ Window: Window (required) │ │ ├ StartTime: string │ │ ├ RecurrenceRule: RecurrenceRule │ │ └ Reason: string (default="No reason") │ ├[+] type RecurrenceRule │ │ ├ documentation: The recurrence rule for the SLO time window exclusion . │ │ │ name: RecurrenceRule │ │ └ properties │ │ └ Expression: string (required) │ ├[~] type RequestBasedSliMetric │ │ └ properties │ │ └ KeyAttributes: (documentation changed) │ └[+] type Window │ ├ documentation: The object that defines the time length of an exclusion window. │ │ name: Window │ └ properties │ ├ DurationUnit: string (required) │ └ Duration: integer (required) ├[~] service aws-appsync │ └ resources │ └[~] resource AWS::AppSync::DomainName │ ├ - tagInformation: undefined │ │ + tagInformation: {"tagPropertyName":"Tags","variant":"standard"} │ ├ properties │ │ └[+] Tags: Array<tag> │ └ attributes │ └[+] DomainNameArn: string ├[~] service aws-bedrock │ └ resources │ ├[~] resource AWS::Bedrock::DataSource │ │ ├ - documentation: Specifies a data source as a resource in a top-level template. Minimally, you must specify the following properties: │ │ │ - Name – Specify a name for the data source. │ │ │ - KnowledgeBaseId – Specify the ID of the knowledge base for the data source to belong to. │ │ │ - DataSourceConfiguration – Specify information about the Amazon S3 bucket containing the data source. The following sub-properties are required: │ │ │ - Type – Specify the value `S3` . │ │ │ For more information about setting up data sources in Amazon Bedrock , see [Set up a data source for your knowledge base](https://docs.aws.amazon.com/bedrock/latest/userguide/knowledge-base-ds.html) . │ │ │ See the *Properties* section below for descriptions of both the required and optional properties. │ │ │ + documentation: > Properties with `__Update requires: Replacement__` can result in the creation of a new data source and deletion of the old one. This can happen if you also change the Name of the data source. │ │ │ Specifies a data source as a resource in a top-level template. Minimally, you must specify the following properties: │ │ │ - Name – Specify a name for the data source. │ │ │ - KnowledgeBaseId – Specify the ID of the knowledge base for the data source to belong to. │ │ │ - DataSourceConfiguration – Specify information about the Amazon S3 bucket containing the data source. The following sub-properties are required: │ │ │ - Type – Specify the value `S3` . │ │ │ For more information about setting up data sources in Amazon Bedrock , see [Set up a data source for your knowledge base](https://docs.aws.amazon.com/bedrock/latest/userguide/knowledge-base-ds.html) . │ │ │ See the *Properties* section below for descriptions of both the required and optional properties. │ │ ├ attributes │ │ │ └[+] DataSourceConfiguration.WebConfiguration.CrawlerConfiguration.UserAgentHeader: string │ │ └ types │ │ ├[+] type BedrockFoundationModelContextEnrichmentConfiguration │ │ │ ├ documentation: Bedrock Foundation Model configuration to be used for Context Enrichment. │ │ │ │ name: BedrockFoundationModelContextEnrichmentConfiguration │ │ │ └ properties │ │ │ ├ EnrichmentStrategyConfiguration: EnrichmentStrategyConfiguration (required) │ │ │ └ ModelArn: string (required) │ │ ├[+] type ContextEnrichmentConfiguration │ │ │ ├ documentation: Additional Enrichment Configuration for example when using GraphRag. │ │ │ │ name: ContextEnrichmentConfiguration │ │ │ └ properties │ │ │ ├ Type: string (required) │ │ │ └ BedrockFoundationModelConfiguration: BedrockFoundationModelContextEnrichmentConfiguration │ │ ├[+] type EnrichmentStrategyConfiguration │ │ │ ├ documentation: Strategy to be used when using Bedrock Foundation Model for Context Enrichment. │ │ │ │ name: EnrichmentStrategyConfiguration │ │ │ └ properties │ │ │ └ Method: string (required) │ │ ├[~] type VectorIngestionConfiguration │ │ │ └ properties │ │ │ └[+] ContextEnrichmentConfiguration: ContextEnrichmentConfiguration │ │ ├[~] type WebCrawlerConfiguration │ │ │ └ properties │ │ │ ├[+] UserAgent: string │ │ │ └[+] UserAgentHeader: string │ │ └[~] type WebCrawlerLimits │ │ └ properties │ │ └[+] MaxPages: integer │ ├[~] resource AWS::Bedrock::Prompt │ │ └ types │ │ ├[~] type SpecificToolChoice │ │ │ └ - documentation: The model must request a specific tool. For example, `{"tool" : {"name" : "Your tool name"}}` . For more information, see [Call a tool with the Converse API](https://docs.aws.amazon.com/bedrock/latest/userguide/tool-use.html) in the Amazon Bedrock User Guide │ │ │ > This field is only supported by Anthropic Claude 3 models. │ │ │ + documentation: The model must request a specific tool. For example, `{"tool" : {"name" : "Your tool name"}}` . For more information, see [Call a tool with the Converse API](https://docs.aws.amazon.com/bedrock/latest/userguide/tool-use.html) in the Amazon Bedrock User Guide │ │ │ > This field is only supported by Amazon Nova models and Anthropic Claude 3 models. │ │ └[~] type ToolChoice │ │ └ properties │ │ └ Tool: (documentation changed) │ └[~] resource AWS::Bedrock::PromptVersion │ └ types │ ├[~] type SpecificToolChoice │ │ └ - documentation: The model must request a specific tool. For example, `{"tool" : {"name" : "Your tool name"}}` . For more information, see [Call a tool with the Converse API](https://docs.aws.amazon.com/bedrock/latest/userguide/tool-use.html) in the Amazon Bedrock User Guide │ │ > This field is only supported by Anthropic Claude 3 models. │ │ + documentation: The model must request a specific tool. For example, `{"tool" : {"name" : "Your tool name"}}` . For more information, see [Call a tool with the Converse API](https://docs.aws.amazon.com/bedrock/latest/userguide/tool-use.html) in the Amazon Bedrock User Guide │ │ > This field is only supported by Amazon Nova models and Anthropic Claude 3 models. │ └[~] type ToolChoice │ └ properties │ └ Tool: (documentation changed) ├[~] service aws-cleanrooms │ └ resources │ ├[~] resource AWS::CleanRooms::Collaboration │ │ └ properties │ │ └ QueryLogStatus: (documentation changed) │ ├[~] resource AWS::CleanRooms::ConfiguredTable │ │ ├ properties │ │ │ └ AnalysisMethod: (documentation changed) │ │ └ types │ │ └[~] type DifferentialPrivacy │ │ └ - documentation: The analysis method for the configured tables. The only valid value is currently `DIRECT_QUERY`. │ │ + documentation: The analysis method allowed for the configured tables. │ │ `DIRECT_QUERY` allows SQL queries to be run directly on this table. │ │ `DIRECT_JOB` allows PySpark jobs to be run directly on this table. │ │ `MULTIPLE` allows both SQL queries and PySpark jobs to be run directly on this table. │ └[~] resource AWS::CleanRooms::Membership │ └ properties │ └ QueryLogStatus: (documentation changed) ├[~] service aws-cloudformation │ └ resources │ └[~] resource AWS::CloudFormation::StackSet │ └ types │ └[~] type OperationPreferences │ └ properties │ └ RegionOrder: (documentation changed) ├[~] service aws-cloudfront │ └ resources │ ├[~] resource AWS::CloudFront::AnycastIpList │ │ └ attributes │ │ └ AnycastIpList: (documentation changed) │ └[~] resource AWS::CloudFront::VpcOrigin │ └ types │ └[~] type VpcOriginEndpointConfig │ └ properties │ └ OriginSSLProtocols: (documentation changed) ├[~] service aws-codeartifact │ └ resources │ └[~] resource AWS::CodeArtifact::PackageGroup │ ├ properties │ │ └ Tags: (documentation changed) │ ├ attributes │ │ └ Arn: (documentation changed) │ └ types │ ├[~] type OriginConfiguration │ │ ├ - documentation: The package group origin configuration that determines how package versions can enter repositories. │ │ │ + documentation: undefined │ │ └ properties │ │ └ Restrictions: (documentation changed) │ ├[~] type Restrictions │ │ ├ - documentation: Contains information about the configured restrictions of the origin controls of a package group. │ │ │ + documentation: undefined │ │ └ properties │ │ ├ ExternalUpstream: (documentation changed) │ │ ├ InternalUpstream: (documentation changed) │ │ └ Publish: (documentation changed) │ └[~] type RestrictionType │ ├ - documentation: The `RestrictionType` property type specifies the package group origin configuration restriction mode, and the repositories when the `RestrictionMode` is set to `ALLOW_SPECIFIC_REPOSITORIES` . │ │ + documentation: undefined │ └ properties │ ├ Repositories: (documentation changed) │ └ RestrictionMode: (documentation changed) ├[~] service aws-connect │ └ resources │ ├[~] resource AWS::Connect::ContactFlow │ │ └ attributes │ │ └ ContactFlowArn: (documentation changed) │ ├[~] resource AWS::Connect::ContactFlowModule │ │ └ attributes │ │ └ ContactFlowModuleArn: (documentation changed) │ └[~] resource AWS::Connect::ContactFlowVersion │ └ attributes │ └ ContactFlowVersionARN: (documentation changed) ├[~] service aws-controltower │ └ resources │ ├[~] resource AWS::ControlTower::EnabledBaseline │ │ ├ - documentation: This resource represents a `Baseline` that has been applied to a target. │ │ │ + documentation: Definition of AWS::ControlTower::EnabledBaseline Resource Type │ │ ├ properties │ │ │ ├ Parameters: (documentation changed) │ │ │ └ Tags: (documentation changed) │ │ ├ attributes │ │ │ └ EnabledBaselineIdentifier: (documentation changed) │ │ └ types │ │ └[~] type Parameter │ │ ├ - documentation: A key-value parameter to an `EnabledBaseline` resource. │ │ │ + documentation: undefined │ │ └ properties │ │ ├ Key: (documentation changed) │ │ └ Value: (documentation changed) │ └[~] resource AWS::ControlTower::EnabledControl │ └ properties │ └ Tags: (documentation changed) ├[~] service aws-datazone │ └ resources │ ├[+] resource AWS::DataZone::Connection │ │ ├ name: Connection │ │ │ cloudFormationType: AWS::DataZone::Connection │ │ │ documentation: Connections enables users to connect their DataZone resources (domains, projects, and environments) to external resources/services (data, compute, etc) │ │ ├ properties │ │ │ ├ AwsLocation: AwsLocation │ │ │ ├ Description: string │ │ │ ├ DomainIdentifier: string (required, immutable) │ │ │ ├ EnvironmentIdentifier: string (required, immutable) │ │ │ ├ Name: string (required, immutable) │ │ │ └ Props: ConnectionPropertiesInput │ │ ├ attributes │ │ │ ├ ConnectionId: string │ │ │ ├ DomainId: string │ │ │ ├ DomainUnitId: string │ │ │ ├ EnvironmentId: string │ │ │ ├ EnvironmentUserRole: string │ │ │ ├ ProjectId: string │ │ │ └ Type: string │ │ └ types │ │ ├ type AthenaPropertiesInput │ │ │ ├ documentation: Athena Properties Input │ │ │ │ name: AthenaPropertiesInput │ │ │ └ properties │ │ │ └ WorkgroupName: string (required) │ │ ├ type AuthenticationConfigurationInput │ │ │ ├ documentation: Authentication Configuration Input │ │ │ │ name: AuthenticationConfigurationInput │ │ │ └ properties │ │ │ ├ AuthenticationType: string │ │ │ ├ OAuth2Properties: OAuth2Properties │ │ │ ├ SecretArn: string │ │ │ ├ KmsKeyArn: string │ │ │ ├ BasicAuthenticationCredentials: BasicAuthenticationCredentials │ │ │ └ CustomAuthenticationCredentials: Map<string, string> │ │ ├ type AuthorizationCodeProperties │ │ │ ├ documentation: Authorization Code Properties │ │ │ │ name: AuthorizationCodeProperties │ │ │ └ properties │ │ │ ├ AuthorizationCode: string │ │ │ └ RedirectUri: string │ │ ├ type AwsLocation │ │ │ ├ documentation: AWS Location of project │ │ │ │ name: AwsLocation │ │ │ └ properties │ │ │ ├ AccessRole: string │ │ │ ├ AwsAccountId: string │ │ │ ├ AwsRegion: string │ │ │ └ IamConnectionId: string │ │ ├ type BasicAuthenticationCredentials │ │ │ ├ documentation: Basic Authentication Credentials │ │ │ │ name: BasicAuthenticationCredentials │ │ │ └ properties │ │ │ ├ UserName: string │ │ │ └ Password: string │ │ ├ type ConnectionPropertiesInput │ │ │ ├ name: ConnectionPropertiesInput │ │ │ └ properties │ │ │ ├ AthenaProperties: AthenaPropertiesInput │ │ │ ├ GlueProperties: GluePropertiesInput │ │ │ ├ HyperPodProperties: HyperPodPropertiesInput │ │ │ ├ IamProperties: IamPropertiesInput │ │ │ ├ RedshiftProperties: RedshiftPropertiesInput │ │ │ ├ SparkEmrProperties: SparkEmrPropertiesInput │ │ │ └ SparkGlueProperties: SparkGluePropertiesInput │ │ ├ type GlueConnectionInput │ │ │ ├ documentation: Glue Connection Input │ │ │ │ name: GlueConnectionInput │ │ │ └ properties │ │ │ ├ ConnectionProperties: Map<string, string> │ │ │ ├ PhysicalConnectionRequirements: PhysicalConnectionRequirements │ │ │ ├ Name: string │ │ │ ├ Description: string │ │ │ ├ ConnectionType: string │ │ │ ├ MatchCriteria: string │ │ │ ├ ValidateCredentials: boolean │ │ │ ├ ValidateForComputeEnvironments: Array<string> │ │ │ ├ SparkProperties: Map<string, string> │ │ │ ├ AthenaProperties: Map<string, string> │ │ │ ├ PythonProperties: Map<string, string> │ │ │ └ AuthenticationConfiguration: AuthenticationConfigurationInput │ │ ├ type GlueOAuth2Credentials │ │ │ ├ documentation: Glue OAuth2 Credentials │ │ │ │ name: GlueOAuth2Credentials │ │ │ └ properties │ │ │ ├ UserManagedClientApplicationClientSecret: string │ │ │ ├ AccessToken: string │ │ │ ├ RefreshToken: string │ │ │ └ JwtToken: string │ │ ├ type GluePropertiesInput │ │ │ ├ documentation: Glue Properties Input │ │ │ │ name: GluePropertiesInput │ │ │ └ properties │ │ │ └ GlueConnectionInput: GlueConnectionInput │ │ ├ type HyperPodPropertiesInput │ │ │ ├ documentation: HyperPod Properties Input │ │ │ │ name: HyperPodPropertiesInput │ │ │ └ properties │ │ │ └ ClusterName: string (required) │ │ ├ type IamPropertiesInput │ │ │ ├ documentation: IAM Properties Input │ │ │ │ name: IamPropertiesInput │ │ │ └ properties │ │ │ └ GlueLineageSyncEnabled: boolean │ │ ├ type LineageSyncSchedule │ │ │ ├ documentation: Lineage Sync Schedule │ │ │ │ name: LineageSyncSchedule │ │ │ └ properties │ │ │ └ Schedule: string │ │ ├ type OAuth2ClientApplication │ │ │ ├ documentation: OAuth2 Client Application │ │ │ │ name: OAuth2ClientApplication │ │ │ └ properties │ │ │ ├ UserManagedClientApplicationClientId: string │ │ │ └ AWSManagedClientApplicationReference: string │ │ ├ type OAuth2Properties │ │ │ ├ documentation: OAuth2 Properties │ │ │ │ name: OAuth2Properties │ │ │ └ properties │ │ │ ├ OAuth2GrantType: string │ │ │ ├ OAuth2ClientApplication: OAuth2ClientApplication │ │ │ ├ TokenUrl: string │ │ │ ├ TokenUrlParametersMap: Map<string, string> │ │ │ ├ AuthorizationCodeProperties: AuthorizationCodeProperties │ │ │ └ OAuth2Credentials: GlueOAuth2Credentials │ │ ├ type PhysicalConnectionRequirements │ │ │ ├ documentation: Physical Connection Requirements │ │ │ │ name: PhysicalConnectionRequirements │ │ │ └ properties │ │ │ ├ SubnetId: string │ │ │ ├ SubnetIdList: Array<string> │ │ │ ├ SecurityGroupIdList: Array<string> │ │ │ └ AvailabilityZone: string │ │ ├ type RedshiftCredentials │ │ │ ├ name: RedshiftCredentials │ │ │ └ properties │ │ │ ├ SecretArn: string │ │ │ └ UsernamePassword: UsernamePassword │ │ ├ type RedshiftLineageSyncConfigurationInput │ │ │ ├ documentation: Redshift Lineage Sync Configuration Input │ │ │ │ name: RedshiftLineageSyncConfigurationInput │ │ │ └ properties │ │ │ ├ Enabled: boolean │ │ │ └ Schedule: LineageSyncSchedule │ │ ├ type RedshiftPropertiesInput │ │ │ ├ documentation: Redshift Properties Input │ │ │ │ name: RedshiftPropertiesInput │ │ │ └ properties │ │ │ ├ Storage: RedshiftStorageProperties │ │ │ ├ DatabaseName: string │ │ │ ├ Host: string │ │ │ ├ Port: number │ │ │ ├ Credentials: RedshiftCredentials │ │ │ └ LineageSync: RedshiftLineageSyncConfigurationInput │ │ ├ type RedshiftStorageProperties │ │ │ ├ name: RedshiftStorageProperties │ │ │ └ properties │ │ │ ├ ClusterName: string │ │ │ └ WorkgroupName: string │ │ ├ type SparkEmrPropertiesInput │ │ │ ├ documentation: Spark EMR Properties Input. │ │ │ │ name: SparkEmrPropertiesInput │ │ │ └ properties │ │ │ ├ ComputeArn: string │ │ │ ├ InstanceProfileArn: string │ │ │ ├ JavaVirtualEnv: string │ │ │ ├ LogUri: string │ │ │ ├ PythonVirtualEnv: string │ │ │ ├ RuntimeRole: string │ │ │ └ TrustedCertificatesS3Uri: string │ │ ├ type SparkGlueArgs │ │ │ ├ documentation: Spark Glue Args. │ │ │ │ name: SparkGlueArgs │ │ │ └ properties │ │ │ └ Connection: string │ │ ├ type SparkGluePropertiesInput │ │ │ ├ documentation: Spark Glue Properties Input. │ │ │ │ name: SparkGluePropertiesInput │ │ │ └ properties │ │ │ ├ AdditionalArgs: SparkGlueArgs │ │ │ ├ GlueConnectionName: string │ │ │ ├ GlueVersion: string │ │ │ ├ IdleTimeout: number │ │ │ ├ JavaVirtualEnv: string │ │ │ ├ NumberOfWorkers: number │ │ │ ├ PythonVirtualEnv: string │ │ │ └ WorkerType: string │ │ └ type UsernamePassword │ │ ├ documentation: The username and password to be used for authentication. │ │ │ name: UsernamePassword │ │ └ properties │ │ ├ Password: string (required) │ │ └ Username: string (required) │ ├[~] resource AWS::DataZone::DataSource │ │ └ properties │ │ └ Type: (documentation changed) │ └[~] resource AWS::DataZone::Domain │ └ attributes │ └[+] RootDomainUnitId: string ├[~] service aws-ec2 │ └ resources │ ├[~] resource AWS::EC2::CapacityReservation │ │ ├ attributes │ │ │ ├[+] CapacityAllocationSet: Array<CapacityAllocation> │ │ │ ├[+] CapacityReservationArn: string │ │ │ ├[+] CapacityReservationFleetId: string │ │ │ ├[+] CommitmentInfo: CommitmentInfo │ │ │ ├[+] CreateDate: string │ │ │ ├[+] DeliveryPreference: string │ │ │ ├[+] OwnerId: string │ │ │ ├[+] ReservationType: string │ │ │ ├[+] StartDate: string │ │ │ └[+] State: string │ │ └ types │ │ ├[+] type CapacityAllocation │ │ │ ├ documentation: Information about instance capacity usage for a Capacity Reservation. │ │ │ │ name: CapacityAllocation │ │ │ └ properties │ │ │ ├ AllocationType: string │ │ │ └ Count: integer │ │ └[+] type CommitmentInfo │ │ ├ documentation: Information about your commitment for a future-dated Capacity Reservation. │ │ │ name: CommitmentInfo │ │ └ properties │ │ ├ CommitmentEndDate: string │ │ └ CommittedInstanceCount: integer │ ├[~] resource AWS::EC2::EC2Fleet │ │ └ types │ │ └[~] type InstanceRequirementsRequest │ │ └ properties │ │ └ AcceleratorTypes: (documentation changed) │ ├[~] resource AWS::EC2::LaunchTemplate │ │ └ types │ │ ├[~] type InstanceRequirements │ │ │ └ properties │ │ │ └ AcceleratorTypes: (documentation changed) │ │ └[~] type NetworkPerformanceOptions │ │ ├ - documentation: undefined │ │ │ + documentation: Contains settings for the network performance options for the instance. │ │ └ properties │ │ └ BandwidthWeighting: (documentation changed) │ ├[~] resource AWS::EC2::SpotFleet │ │ └ types │ │ └[~] type InstanceRequirementsRequest │ │ └ properties │ │ └ AcceleratorTypes: (documentation changed) │ └[~] resource AWS::EC2::VPCEndpointService │ └ properties │ ├ SupportedIpAddressTypes: (documentation changed) │ └[+] SupportedRegions: Array<string> ├[~] service aws-gamelift │ └ resources │ └[~] resource AWS::GameLift::GameSessionQueue │ ├ properties │ │ └ TimeoutInSeconds: (documentation changed) │ └ types │ └[~] type PriorityConfiguration │ └ properties │ └ PriorityOrder: (documentation changed) ├[~] service aws-imagebuilder │ └ resources │ └[~] resource AWS::ImageBuilder::DistributionConfiguration │ └ types │ └[~] type Distribution │ └ properties │ └[-] SsmParameterConfigurations: Array<json> ├[~] service aws-kinesisfirehose │ └ resources │ └[~] resource AWS::KinesisFirehose::DeliveryStream │ └ types │ └[~] type SnowflakeDestinationConfiguration │ └ properties │ └ ProcessingConfiguration: (documentation changed) ├[~] service aws-location │ └ resources │ └[~] resource AWS::Location::APIKey │ └ types │ └[~] type ApiKeyRestrictions │ └ properties │ └ AllowActions: (documentation changed) ├[~] service aws-msk │ └ resources │ └[~] resource AWS::MSK::Configuration │ └ properties │ └ KafkaVersionsList: (documentation changed) ├[~] service aws-networkfirewall │ └ resources │ ├[~] resource AWS::NetworkFirewall::RuleGroup │ │ └ types │ │ └[~] type MatchAttributes │ │ └ properties │ │ ├ DestinationPorts: (documentation changed) │ │ ├ Protocols: (documentation changed) │ │ └ SourcePorts: (documentation changed) │ └[~] resource AWS::NetworkFirewall::TLSInspectionConfiguration │ └ types │ └[~] type ServerCertificateScope │ └ properties │ └ Protocols: (documentation changed) ├[~] service aws-oam │ └ resources │ └[~] resource AWS::Oam::Link │ ├ properties │ │ └ ResourceTypes: (documentation changed) │ └ types │ ├[~] type LinkConfiguration │ │ └ properties │ │ └ LogGroupConfiguration: (documentation changed) │ └[~] type LinkFilter │ ├ - documentation: When used in `MetricConfiguration` this field specifies which metric namespaces are to be shared with the monitoring account │ │ When used in `LogGroupConfiguration` this field specifies which log groups are to share their log events with the monitoring account. Use the term `LogGroupName` and one or more of the following operands. │ │ + documentation: undefined │ └ properties │ └ Filter: (documentation changed) ├[~] service aws-quicksight │ └ resources │ ├[~] resource AWS::QuickSight::Analysis │ │ └ types │ │ └[~] type SheetTextBox │ │ └ properties │ │ └[-] Interactions: json │ ├[~] resource AWS::QuickSight::Dashboard │ │ └ types │ │ └[~] type SheetTextBox │ │ └ properties │ │ └[-] Interactions: json │ └[~] resource AWS::QuickSight::Template │ └ types │ └[~] type SheetTextBox │ └ properties │ └[-] Interactions: json ├[~] service aws-redshiftserverless │ └ resources │ └[~] resource AWS::RedshiftServerless::Workgroup │ ├ properties │ │ ├[+] TrackName: string │ │ └[+] Workgroup: Workgroup │ ├ attributes │ │ ├ Workgroup.BaseCapacity: (documentation changed) │ │ ├[-] Workgroup.MaxCapacity: integer │ │ └[+] Workgroup.TrackName: string │ └ types │ └[~] type Workgroup │ └ properties │ └[+] TrackName: string ├[~] service aws-rum │ └ resources │ └[~] resource AWS::RUM::AppMonitor │ ├ properties │ │ ├[+] DeobfuscationConfiguration: DeobfuscationConfiguration │ │ ├ Domain: - string (required) │ │ │ + string │ │ ├[+] DomainList: Array<string> │ │ └ ResourcePolicy: (documentation changed) │ └ types │ ├[+] type DeobfuscationConfiguration │ │ ├ documentation: A structure that contains the configuration for how an app monitor can deobfuscate stack traces. │ │ │ name: DeobfuscationConfiguration │ │ └ properties │ │ └ JavaScriptSourceMaps: JavaScriptSourceMaps │ ├[+] type JavaScriptSourceMaps │ │ ├ documentation: A structure that contains the configuration for how an app monitor can unminify JavaScript error stack traces using source maps. │ │ │ name: JavaScriptSourceMaps │ │ └ properties │ │ ├ Status: string (required) │ │ └ S3Uri: string │ └[~] type ResourcePolicy │ ├ - documentation: A structure that defines resource policy attached to your app monitor. │ │ + documentation: Use this structure to assign a resource-based policy to a CloudWatch RUM app monitor to control access to it. Each app monitor can have one resource-based policy. The maximum size of the policy is 4 KB. To learn more about using resource policies with RUM, see [Using resource-based policies with CloudWatch RUM](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-resource-policies.html) . │ └ properties │ ├ PolicyDocument: (documentation changed) │ └ PolicyRevisionId: (documentation changed) ├[~] service aws-ssmquicksetup │ └ resources │ └[~] resource AWS::SSMQuickSetup::ConfigurationManager │ └ types │ └[~] type ConfigurationDefinition │ └ properties │ └ Parameters: (documentation changed) ├[~] service aws-timestream │ └ resources │ └[~] resource AWS::Timestream::Table │ └ properties │ └ MagneticStoreWriteProperties: (documentation changed) ├[~] service aws-wafv2 │ └ resources │ └[~] resource AWS::WAFv2::WebACL │ ├ properties │ │ └[+] DataProtectionConfig: DataProtectionConfig │ └ types │ ├[+] type DataProtect │ │ ├ name: DataProtect │ │ └ properties │ │ ├ Field: FieldToProtect (required) │ │ ├ Action: string (required) │ │ ├ ExcludeRateBasedDetails: boolean │ │ └ ExcludeRuleMatchDetails: boolean │ ├[+] type DataProtectionConfig │ │ ├ documentation: Specifies data protection to apply to the web request data for the web ACL. This is a web ACL level data protection option. │ │ │ The data protection that you configure for the web ACL alters the data that's available for any other data collection activity, including your AWS WAF logging destinations, web ACL request sampling, and Amazon Security Lake data collection and management. Your other option for data protection is in the logging configuration, which only affects logging. │ │ │ This is part of the data protection configuration for a web ACL. │ │ │ name: DataProtectionConfig │ │ └ properties │ │ └ DataProtections: Array<DataProtect> (required) │ └[+] type FieldToProtect │ ├ documentation: Specifies a field type and keys to protect in stored web request data. This is part of the data protection configuration for a web ACL. │ │ name: FieldToProtect │ └ properties │ ├ FieldKeys: Array<string> │ └ FieldType: string (required) └[~] service aws-workspacesthinclient └ resources └[~] resource AWS::WorkSpacesThinClient::Environment └ properties └ DeviceCreationTags: (documentation changed) ```

Author: aws-cdk-automation

packages/aws-cdk-lib/package.json

@@ -136,7 +136,7 @@
  },
  "devDependencies": {
  "@aws-cdk/lambda-layer-kubectl-v31": "^2.0.3",
- "@aws-cdk/aws-service-spec": "^0.1.62",
+ "@aws-cdk/aws-service-spec": "^0.1.63",
  "@aws-cdk/cdk-build-tools": "0.0.0",
  "@aws-cdk/custom-resource-handlers": "0.0.0",
  "@aws-cdk/pkglint": "0.0.0",

tools/@aws-cdk/spec2cdk/package.json

@@ -32,9 +32,9 @@
  },
  "license": "Apache-2.0",
  "dependencies": {
- "@aws-cdk/aws-service-spec": "^0.1.62",
- "@aws-cdk/service-spec-importers": "^0.0.72",
- "@aws-cdk/service-spec-types": "^0.0.128",
+ "@aws-cdk/aws-service-spec": "^0.1.63",
+ "@aws-cdk/service-spec-importers": "^0.0.73",
+ "@aws-cdk/service-spec-types": "^0.0.129",
  "@cdklabs/tskb": "^0.0.3",
  "@cdklabs/typewriter": "^0.0.5",
  "camelcase": "^6",

yarn.lock

@@ -66,12 +66,12 @@
  "@aws-cdk/service-spec-types" "^0.0.127"
  "@cdklabs/tskb" "^0.0.3"
 
-"@aws-cdk/aws-service-spec@^0.1.62":
- version "0.1.62"
- resolved "https://registry.npmjs.org/@aws-cdk/aws-service-spec/-/aws-service-spec-0.1.62.tgz#7cb5f186f9805206ac7718f75d4c537d7727dc0d"
- integrity sha512-E6jCjAHagp0OfGfTfGae/kctceuzLyJ+DuWLrmh/dTGVobUVdtObFLCE5X5u7LK2xq0YI9RRsC9pEJtAmD9bmw==
+"@aws-cdk/aws-service-spec@^0.1.63":
+ version "0.1.63"
+ resolved "https://registry.npmjs.org/@aws-cdk/aws-service-spec/-/aws-service-spec-0.1.63.tgz#52a86853fcb102edf042ab79de9be6bada6bc3f0"
+ integrity sha512-5OsuiiRu1hrc02juBAjMDE9oXfjKIuKJ4YCPXX27lFXjBAAvNXLvkjRCJCTmRwVv2/GO3oqouh/Ln3hsvvBDSA==
  dependencies:
- "@aws-cdk/service-spec-types" "^0.0.128"
+ "@aws-cdk/service-spec-types" "^0.0.129"
  "@cdklabs/tskb" "^0.0.3"
 
 "@aws-cdk/cloud-assembly-schema@^40.7.0":
@@ -117,15 +117,15 @@
  resolved "https://registry.npmjs.org/@aws-cdk/lambda-layer-kubectl-v32/-/lambda-layer-kubectl-v32-2.0.3.tgz#b618fc5f5425b4c7ce2544c554d0620666028b49"
  integrity sha512-e6Xs7PuJKeQ7+GAOPQo6G28lw1U3gP4ky8RCOR5QScofutzMwR7FJpaXKPUzIrfJiFkZsfVnhcSI8166i/C2wQ==
 
-"@aws-cdk/service-spec-importers@^0.0.72":
- version "0.0.72"
- resolved "https://registry.npmjs.org/@aws-cdk/service-spec-importers/-/service-spec-importers-0.0.72.tgz#7e184754c82a30d6e4f2fb33185956f024064649"
- integrity sha512-kQnaQcPSZArGzpClbGglP5rlwNGvTTIIOvtEhzS5FrLhqyGWdvsh7rzP0B8y1UPd8imSTjODuh6pp3HAGyGW1w==
+"@aws-cdk/service-spec-importers@^0.0.73":
+ version "0.0.73"
+ resolved "https://registry.npmjs.org/@aws-cdk/service-spec-importers/-/service-spec-importers-0.0.73.tgz#a66dcae3a887f79fca8f7ea3f504db58675278f4"
+ integrity sha512-gUmkWceGmXlZaLEGoJJNbliYzrbiiR9V35//LxuXHpCCadEa+8fLy2bbaYC2hNQdvQtUtvW5j1qlLvXrX0YfAw==
  dependencies:
- "@aws-cdk/service-spec-types" "^0.0.128"
+ "@aws-cdk/service-spec-types" "^0.0.129"
  "@cdklabs/tskb" "^0.0.3"
  ajv "^6"
- canonicalize "^2.0.0"
+ canonicalize "^2.1.0"
  chalk "^4"
  commander "^11.1.0"
  fast-json-patch "^3.1.1"
@@ -140,10 +140,10 @@
  dependencies:
  "@cdklabs/tskb" "^0.0.3"
 
-"@aws-cdk/service-spec-types@^0.0.128":
- version "0.0.128"
- resolved "https://registry.npmjs.org/@aws-cdk/service-spec-types/-/service-spec-types-0.0.128.tgz#7f84406311664e08523501885b4e28d0e8e34f26"
- integrity sha512-wAYyf6xiYXObUR/f83iSd8cQ4TgDuk7h909wgmTMIIWxId1NJGw8o0TvInYjHP0GtXIFGoHoeO2efKsp72YbBw==
+"@aws-cdk/service-spec-types@^0.0.129":
+ version "0.0.129"
+ resolved "https://registry.npmjs.org/@aws-cdk/service-spec-types/-/service-spec-types-0.0.129.tgz#52d495a88a30c1a62b8280a2ebd3674d854be583"
+ integrity sha512-MUWSHlc4df5p34x1ztulhS/7pCUiy9pVjuS6/vWJFkbHDSG/01VqWnELUnPaaWng54tuiHsQUH/jEC3asVLu3g==
  dependencies:
  "@cdklabs/tskb" "^0.0.3"
 
@@ -5784,10 +5784,10 @@ caniuse-lite@^1.0.30001688:
  resolved "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001703.tgz#977cb4920598c158f491ecf4f4f2cfed9e354718"
  integrity sha512-kRlAGTRWgPsOj7oARC9m1okJEXdL/8fekFVcxA8Hl7GH4r/sN4OJn/i6Flde373T50KS7Y37oFbMwlE8+F42kQ==
 
-canonicalize@^2.0.0:
- version "2.0.0"
- resolved "https://registry.npmjs.org/canonicalize/-/canonicalize-2.0.0.tgz#32be2cef4446d67fd5348027a384cae28f17226a"
- integrity sha512-ulDEYPv7asdKvqahuAY35c1selLdzDwHqugK92hfkzvlDCwXRRelDkR+Er33md/PtnpqHemgkuDPanZ4fiYZ8w==
+canonicalize@^2.1.0:
+ version "2.1.0"
+ resolved "https://registry.npmjs.org/canonicalize/-/canonicalize-2.1.0.tgz#92a20ecfb94e96591badf4977dc2fb1bfbc31dc5"
+ integrity sha512-F705O3xrsUtgt98j7leetNhTWPe+5S72rlL5O4jA1pKqBVQ/dT1O1D6PFxmSXvc0SUOinWS57DKx0I3CHrXJHQ==
 
 capital-case@^1.0.4:
  version "1.0.4"