CloudFormation Template Schema upgrade (#439)

https://github.com/aws-cloudformation/cloudformation-template-schema/tree/main Co-authored-by: kddejong <[email protected]> Co-authored-by: Kevin DeJong <[email protected]>
aws-cloudformation · Feb 12, 2025 · b4fc268 · b4fc268
1 parent 48314fb
commit b4fc268
Show file tree

Hide file tree

Showing 169 changed files with 14,689 additions and 10,240 deletions.
diff --git a/server/schema/resources.schema.json b/server/schema/resources.schema.json
diff --git a/server/schema/resources/aws-acmpca-certificateauthority.json b/server/schema/resources/aws-acmpca-certificateauthority.json
@@ -473,7 +473,11 @@
     "tagOnCreate": true,
     "tagUpdatable": true,
     "cloudFormationSystemTags": false,
-    "tagProperty": "/properties/Tags"
+    "tagProperty": "/properties/Tags",
+    "permissions": [
+      "acm-pca:TagCertificateAuthority",
+      "acm-pca:UntagCertificateAuthority"
+    ]
   },
   "additionalProperties": false,
   "required": [
@@ -490,7 +494,6 @@
     "/properties/Subject",
     "/properties/Subject",
     "/properties/CsrExtensions",
-    "/properties/Tags",
     "/properties/RevocationConfiguration",
     "/properties/KeyStorageSecurityStandard"
   ],
@@ -523,7 +526,6 @@
     },
     "update": {
       "permissions": [
-        "acm-pca:ListTags",
         "acm-pca:TagCertificateAuthority",
         "acm-pca:UntagCertificateAuthority",
         "acm-pca:UpdateCertificateAuthority"

diff --git a/server/schema/resources/aws-appflow-flow.json b/server/schema/resources/aws-appflow-flow.json
@@ -1873,6 +1873,7 @@
     },
     "update": {
       "permissions": [
+        "appflow:DescribeFlow",
         "appflow:UpdateFlow",
         "appflow:StartFlow",
         "appflow:StopFlow",
@@ -1904,7 +1905,13 @@
     "taggable": true,
     "tagOnCreate": true,
     "tagUpdatable": false,
-    "cloudFormationSystemTags": false
+    "cloudFormationSystemTags": false,
+    "tagProperty": "/properties/Tags",
+    "permissions": [
+      "appflow:TagResource",
+      "appflow:UntagResource",
+      "appflow:ListTagsForResource"
+    ]
   },
   "attributes": {
     "FlowArn": {

diff --git a/server/schema/resources/aws-aps-rulegroupsnamespace.json b/server/schema/resources/aws-aps-rulegroupsnamespace.json
@@ -82,7 +82,11 @@
     "tagOnCreate": true,
     "tagUpdatable": true,
     "cloudFormationSystemTags": true,
-    "tagProperty": "/properties/Tags"
+    "tagProperty": "/properties/Tags",
+    "permissions": [
+      "aps:TagResource",
+      "aps:UntagResource"
+    ]
   },
   "primaryIdentifier": [
     "/properties/Arn"

diff --git a/server/schema/resources/aws-aps-scraper.json b/server/schema/resources/aws-aps-scraper.json
@@ -49,6 +49,24 @@
       "additionalProperties": false,
       "markdownDescription": "Scraper configuration\n\n---\n\nRequired: No  \nUpdate requires: No interruption\n"
     },
+    "RoleConfiguration": {
+      "description": "Role configuration",
+      "type": "object",
+      "properties": {
+        "SourceRoleArn": {
+          "description": "IAM Role in source account",
+          "type": "string",
+          "markdownDescription": "IAM Role in source account\n\n---\n\nRequired: No  \nType: String  \nUpdate requires: No interruption\n"
+        },
+        "TargetRoleArn": {
+          "description": "IAM Role in the target account",
+          "type": "string",
+          "markdownDescription": "IAM Role in the target account\n\n---\n\nRequired: No  \nType: String  \nUpdate requires: No interruption\n"
+        }
+      },
+      "additionalProperties": false,
+      "markdownDescription": "Role configuration\n\n---\n\nRequired: No  \nUpdate requires: No interruption\n"
+    },
     "Source": {
       "description": "Scraper metrics source",
       "type": "object",
@@ -171,6 +189,9 @@
     "ScrapeConfiguration": {
       "$ref": "#/definitions/ScrapeConfiguration"
     },
+    "RoleConfiguration": {
+      "$ref": "#/definitions/RoleConfiguration"
+    },
     "Source": {
       "$ref": "#/definitions/Source"
     },
@@ -207,7 +228,11 @@
     "tagOnCreate": true,
     "tagUpdatable": true,
     "cloudFormationSystemTags": true,
-    "tagProperty": "/properties/Tags"
+    "tagProperty": "/properties/Tags",
+    "permissions": [
+      "aps:TagResource",
+      "aps:UntagResource"
+    ]
   },
   "primaryIdentifier": [
     "/properties/Arn"
@@ -224,7 +249,8 @@
         "eks:DescribeCluster",
         "ec2:DescribeSubnets",
         "ec2:DescribeSecurityGroups",
-        "iam:CreateServiceLinkedRole"
+        "iam:CreateServiceLinkedRole",
+        "iam:PassRole"
       ]
     },
     "read": {
@@ -241,7 +267,8 @@
         "aps:DescribeWorkspace",
         "aps:TagResource",
         "aps:UntagResource",
-        "aps:ListTagsForResource"
+        "aps:ListTagsForResource",
+        "iam:PassRole"
       ]
     },
     "delete": {

diff --git a/server/schema/resources/aws-aps-workspace.json b/server/schema/resources/aws-aps-workspace.json
@@ -113,7 +113,11 @@
     "tagOnCreate": true,
     "tagUpdatable": true,
     "cloudFormationSystemTags": true,
-    "tagProperty": "/properties/Tags"
+    "tagProperty": "/properties/Tags",
+    "permissions": [
+      "aps:TagResource",
+      "aps:UntagResource"
+    ]
   },
   "primaryIdentifier": [
     "/properties/Arn"

diff --git a/server/schema/resources/aws-athena-datacatalog.json b/server/schema/resources/aws-athena-datacatalog.json
@@ -112,7 +112,7 @@
     },
     "list": {
       "permissions": [
-        "athena:ListDataCatalog"
+        "athena:ListDataCatalogs"
       ]
     }
   },

diff --git a/server/schema/resources/aws-b2bi-partnership.json b/server/schema/resources/aws-b2bi-partnership.json
@@ -94,13 +94,13 @@
           "type": "string",
           "maxLength": 15,
           "minLength": 2,
-          "markdownDescription": "\n\n---\n\nRequired: No  \nType: String  \nMinimum Length: 2  \nMaximum Length: 15  \nPattern: ^[a-zA-Z0-9]*$  \nUpdate requires: No interruption\n"
+          "markdownDescription": "\n\n---\n\nRequired: No  \nType: String  \nMinimum Length: 2  \nMaximum Length: 15  \nPattern: ^[a-zA-Z0-9 ]*$  \nUpdate requires: No interruption\n"
         },
         "ApplicationReceiverCode": {
           "type": "string",
           "maxLength": 15,
           "minLength": 2,
-          "markdownDescription": "\n\n---\n\nRequired: No  \nType: String  \nMinimum Length: 2  \nMaximum Length: 15  \nPattern: ^[a-zA-Z0-9]*$  \nUpdate requires: No interruption\n"
+          "markdownDescription": "\n\n---\n\nRequired: No  \nType: String  \nMinimum Length: 2  \nMaximum Length: 15  \nPattern: ^[a-zA-Z0-9 ]*$  \nUpdate requires: No interruption\n"
         },
         "ResponsibleAgencyCode": {
           "type": "string",
@@ -125,7 +125,7 @@
           "type": "string",
           "maxLength": 15,
           "minLength": 15,
-          "markdownDescription": "\n\n---\n\nRequired: No  \nType: String  \nMinimum Length: 15  \nMaximum Length: 15  \nPattern: ^[a-zA-Z0-9]*$  \nUpdate requires: No interruption\n"
+          "markdownDescription": "\n\n---\n\nRequired: No  \nType: String  \nMinimum Length: 15  \nMaximum Length: 15  \nPattern: ^[a-zA-Z0-9 ]*$  \nUpdate requires: No interruption\n"
         },
         "ReceiverIdQualifier": {
           "type": "string",
@@ -137,7 +137,7 @@
           "type": "string",
           "maxLength": 15,
           "minLength": 15,
-          "markdownDescription": "\n\n---\n\nRequired: No  \nType: String  \nMinimum Length: 15  \nMaximum Length: 15  \nPattern: ^[a-zA-Z0-9]*$  \nUpdate requires: No interruption\n"
+          "markdownDescription": "\n\n---\n\nRequired: No  \nType: String  \nMinimum Length: 15  \nMaximum Length: 15  \nPattern: ^[a-zA-Z0-9 ]*$  \nUpdate requires: No interruption\n"
         },
         "RepetitionSeparator": {
           "type": "string",

diff --git a/server/schema/resources/aws-backup-backupplan.json b/server/schema/resources/aws-backup-backupplan.json
@@ -116,6 +116,15 @@
           "type": "string",
           "markdownDescription": "\n\n---\n\nRequired: No  \nType: String  \nUpdate requires: No interruption\n"
         },
+        "IndexActions": {
+          "type": "array",
+          "insertionOrder": true,
+          "uniqueItems": false,
+          "items": {
+            "$ref": "#/definitions/IndexActionsResourceType"
+          },
+          "markdownDescription": "\n\n---\n\nRequired: No  \nType: Array  \nUpdate requires: No interruption\n"
+        },
         "RecoveryPointTags": {
           "type": "object",
           "additionalProperties": false,
@@ -186,6 +195,29 @@
       ],
       "markdownDescription": "\n\n---\n\nRequired: No  \nUpdate requires: No interruption\n"
     },
+    "IndexActionsResourceType": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "ResourceTypes": {
+          "$ref": "#/definitions/ResourceTypes"
+        }
+      },
+      "markdownDescription": "\n\n---\n\nRequired: No  \nUpdate requires: No interruption\n"
+    },
+    "ResourceTypes": {
+      "type": "array",
+      "insertionOrder": true,
+      "uniqueItems": true,
+      "items": {
+        "$ref": "#/definitions/ResourceType"
+      },
+      "markdownDescription": "\n\n---\n\nRequired: No  \nType: Array  \nUpdate requires: No interruption\n"
+    },
+    "ResourceType": {
+      "type": "string",
+      "markdownDescription": "\n\n---\n\nRequired: No  \nType: String  \nUpdate requires: No interruption\n"
+    },
     "LifecycleResourceType": {
       "type": "object",
       "additionalProperties": false,

diff --git a/server/schema/resources/aws-backupgateway-hypervisor.json b/server/schema/resources/aws-backupgateway-hypervisor.json
@@ -105,7 +105,6 @@
     "/properties/LogGroupArn",
     "/properties/Name",
     "/properties/Password",
-    "/properties/Tags",
     "/properties/Username"
   ],
   "createOnlyProperties": [
@@ -120,11 +119,17 @@
     "tagOnCreate": true,
     "tagUpdatable": false,
     "cloudFormationSystemTags": true,
-    "tagProperty": "/properties/Tags"
+    "tagProperty": "/properties/Tags",
+    "permissions": [
+      "backup-gateway:UntagResource",
+      "backup-gateway:TagResource",
+      "backup-gateway:ListTagsForResource"
+    ]
   },
   "handlers": {
     "create": {
       "permissions": [
+        "backup-gateway:ListTagsForResource",
         "backup-gateway:ImportHypervisorConfiguration",
         "backup-gateway:GetHypervisor",
         "backup-gateway:ListHypervisors",
@@ -137,7 +142,8 @@
     "read": {
       "permissions": [
         "backup-gateway:GetHypervisor",
-        "backup-gateway:ListHypervisors"
+        "backup-gateway:ListHypervisors",
+        "backup-gateway:ListTagsForResource"
       ]
     },
     "update": {
@@ -146,7 +152,8 @@
         "backup-gateway:GetHypervisor",
         "backup-gateway:ListHypervisors",
         "backup-gateway:ImportHypervisorConfiguration",
-        "backup-gateway:DeleteHypervisor"
+        "backup-gateway:DeleteHypervisor",
+        "backup-gateway:ListTagsForResource"
       ]
     },
     "delete": {

diff --git a/server/schema/resources/aws-batch-jobdefinition.json b/server/schema/resources/aws-batch-jobdefinition.json
@@ -225,6 +225,24 @@
       },
       "markdownDescription": "\n\n---\n\nRequired: No  \nUpdate requires: No interruption\n"
     },
+    "EksPersistentVolumeClaim": {
+      "additionalProperties": false,
+      "type": "object",
+      "properties": {
+        "ReadOnly": {
+          "type": "boolean",
+          "markdownDescription": "\n\n---\n\nRequired: No  \nType: Boolean  \nUpdate requires: No interruption\n"
+        },
+        "ClaimName": {
+          "type": "string",
+          "markdownDescription": "\n\n---\n\nRequired: Yes  \nType: String  \nUpdate requires: No interruption\n"
+        }
+      },
+      "required": [
+        "ClaimName"
+      ],
+      "markdownDescription": "\n\n---\n\nRequired: No  \nUpdate requires: No interruption\n"
+    },
     "NodeProperties": {
       "additionalProperties": false,
       "type": "object",
@@ -692,6 +710,17 @@
       "additionalProperties": false,
       "type": "object",
       "properties": {
+        "Annotations": {
+          "patternProperties": {
+            ".*": {
+              "type": "string",
+              "markdownDescription": "\n\n---\n\nRequired: No  \nType: String  \nUpdate requires: No interruption\n"
+            }
+          },
+          "additionalProperties": false,
+          "type": "object",
+          "markdownDescription": "\n\n---\n\nRequired: No  \nUpdate requires: No interruption\n"
+        },
         "Labels": {
           "patternProperties": {
             ".*": {
@@ -702,6 +731,10 @@
           "additionalProperties": false,
           "type": "object",
           "markdownDescription": "\n\n---\n\nRequired: No  \nUpdate requires: No interruption\n"
+        },
+        "Namespace": {
+          "type": "string",
+          "markdownDescription": "\n\n---\n\nRequired: No  \nType: String  \nUpdate requires: No interruption\n"
         }
       },
       "markdownDescription": "\n\n---\n\nRequired: No  \nUpdate requires: No interruption\n"
@@ -952,6 +985,9 @@
         "HostPath": {
           "$ref": "#/definitions/EksHostPath"
         },
+        "PersistentVolumeClaim": {
+          "$ref": "#/definitions/EksPersistentVolumeClaim"
+        },
         "Name": {
           "type": "string",
           "markdownDescription": "\n\n---\n\nRequired: Yes  \nType: String  \nUpdate requires: No interruption\n"
@@ -974,6 +1010,10 @@
           "type": "boolean",
           "markdownDescription": "\n\n---\n\nRequired: No  \nType: Boolean  \nUpdate requires: No interruption\n"
         },
+        "SubPath": {
+          "type": "string",
+          "markdownDescription": "\n\n---\n\nRequired: No  \nType: String  \nUpdate requires: No interruption\n"
+        },
         "Name": {
           "type": "string",
           "markdownDescription": "\n\n---\n\nRequired: No  \nType: String  \nUpdate requires: No interruption\n"

diff --git a/server/schema/resources/aws-bcmdataexports-export.json b/server/schema/resources/aws-bcmdataexports-export.json
@@ -307,7 +307,12 @@
     "tagOnCreate": true,
     "tagUpdatable": true,
     "cloudFormationSystemTags": false,
-    "tagProperty": "/properties/Tags"
+    "tagProperty": "/properties/Tags",
+    "permissions": [
+      "bcm-data-exports:ListTagsForResource",
+      "bcm-data-exports:TagResource",
+      "bcm-data-exports:UntagResource"
+    ]
   },
   "additionalProperties": false,
   "attributes": {

diff --git a/server/schema/resources/aws-bedrock-datasource.json b/server/schema/resources/aws-bedrock-datasource.json
@@ -135,9 +135,10 @@
         "SALESFORCE",
         "SHAREPOINT",
         "WEB",
-        "CUSTOM"
+        "CUSTOM",
+        "REDSHIFT_METADATA"
       ],
-      "markdownDescription": "The type of the data source location.\n\n---\n\nRequired: No  \nType: String  \nAllowed Values: S3 | CONFLUENCE | SALESFORCE | SHAREPOINT | WEB | CUSTOM  \nUpdate requires: No interruption\n"
+      "markdownDescription": "The type of the data source location.\n\n---\n\nRequired: No  \nType: String  \nAllowed Values: S3 | CONFLUENCE | SALESFORCE | SHAREPOINT | WEB | CUSTOM | REDSHIFT_METADATA  \nUpdate requires: No interruption\n"
     },
     "DataDeletionPolicy": {
       "type": "string",