Skip to content

feat: update L1 CloudFormation resource definitions #34497

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
May 20, 2025

Conversation

aws-cdk-automation
Copy link
Collaborator

Updates the L1 CloudFormation resource definitions with the latest changes from @aws-cdk/aws-service-spec

L1 CloudFormation resource definition changes:

├[~] service aws-apigateway
│ └ resources
│    ├[~]  resource AWS::ApiGateway::DomainName
│    │  ├ properties
│    │  │  └[+] RoutingMode: string (default="BASE_PATH_MAPPING_ONLY")
│    │  └ attributes
│    │     └ DomainNameArn: (documentation changed)
│    └[~]  resource AWS::ApiGateway::DomainNameV2
│       └ properties
│          └[+] RoutingMode: string (default="BASE_PATH_MAPPING_ONLY")
├[~] service aws-apigatewayv2
│ └ resources
│    ├[~]  resource AWS::ApiGatewayV2::DomainName
│    │  └ properties
│    │     └[+] RoutingMode: string (default="API_MAPPING_ONLY")
│    └[+]  resource AWS::ApiGatewayV2::RoutingRule
│       ├      name: RoutingRule
│       │      cloudFormationType: AWS::ApiGatewayV2::RoutingRule
│       │      documentation: Schema for AWS::ApiGatewayV2::RoutingRule
│       ├ properties
│       │  ├ DomainNameArn: string (required, immutable)
│       │  ├ Priority: integer (required)
│       │  ├ Conditions: Array<Condition> (required)
│       │  └ Actions: Array<Action> (required)
│       ├ attributes
│       │  ├ RoutingRuleArn: string
│       │  └ RoutingRuleId: string
│       └ types
│          ├ type Action
│          │ ├      name: Action
│          │ └ properties
│          │    └ InvokeApi: ActionInvokeApi (required)
│          ├ type ActionInvokeApi
│          │ ├      name: ActionInvokeApi
│          │ └ properties
│          │    ├ ApiId: string (required)
│          │    ├ Stage: string (required)
│          │    └ StripBasePath: boolean
│          ├ type Condition
│          │ ├      name: Condition
│          │ └ properties
│          │    ├ MatchHeaders: MatchHeaders
│          │    └ MatchBasePaths: MatchBasePaths
│          ├ type MatchBasePaths
│          │ ├      name: MatchBasePaths
│          │ └ properties
│          │    └ AnyOf: Array<string> (required)
│          ├ type MatchHeaders
│          │ ├      name: MatchHeaders
│          │ └ properties
│          │    └ AnyOf: Array<MatchHeaderValue> (required)
│          └ type MatchHeaderValue
│            ├      name: MatchHeaderValue
│            └ properties
│               ├ Header: string (required)
│               └ ValueGlob: string (required)
├[~] service aws-bedrock
│ └ resources
│    └[~]  resource AWS::Bedrock::IntelligentPromptRouter
│       ├      - documentation: Definition of AWS::Bedrock::IntelligentPromptRouter Resource Type
│       │      + documentation: Specifies an intelligent prompt router resource for Amazon Bedrock .
│       ├ properties
│       │  ├ Description: (documentation changed)
│       │  ├ FallbackModel: (documentation changed)
│       │  ├ Models: (documentation changed)
│       │  ├ PromptRouterName: (documentation changed)
│       │  └ Tags: (documentation changed)
│       └ attributes
│          ├ CreatedAt: (documentation changed)
│          ├ PromptRouterArn: (documentation changed)
│          ├ Status: (documentation changed)
│          ├ Type: (documentation changed)
│          └ UpdatedAt: (documentation changed)
├[~] service aws-cloudfront
│ └ resources
│    ├[~]  resource AWS::CloudFront::Distribution
│    │  └ types
│    │     └[~] type Definition
│    │       └      - documentation: undefined
│    │              + documentation: The value that you assigned to the parameter.
│    ├[~]  resource AWS::CloudFront::DistributionTenant
│    │  └ attributes
│    │     └ DomainResults: (documentation changed)
│    └[~]  resource AWS::CloudFront::VpcOrigin
│       └ types
│          └[~] type VpcOriginEndpointConfig
│            └ properties
│               └ OriginSSLProtocols: (documentation changed)
├[~] service aws-codebuild
│ └ resources
│    └[~]  resource AWS::CodeBuild::Fleet
│       └ types
│          └[~] type ComputeConfiguration
│            └ properties
│               └[+] instanceType: string
├[~] service aws-codepipeline
│ └ resources
│    └[~]  resource AWS::CodePipeline::Pipeline
│       └ types
│          └[~] type EnvironmentVariable
│            └ properties
│               └[+] Type: string
├[~] service aws-datasync
│ └ resources
│    └[~]  resource AWS::DataSync::StorageSystem
│       ├      - documentation: The `AWS::DataSync::StorageSystem` resource creates an AWS resource for an on-premises storage system that you want DataSync Discovery to collect information about. For more information, see [discovering your storage with DataSync Discovery.](https://docs.aws.amazon.com/datasync/latest/userguide/understanding-your-storage.html)
│       │      + documentation: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-storagesystem.html
│       ├ properties
│       │  ├ AgentArns: (documentation changed)
│       │  ├ CloudWatchLogGroupArn: (documentation changed)
│       │  ├ Name: (documentation changed)
│       │  ├ ServerConfiguration: (documentation changed)
│       │  ├ ServerCredentials: (documentation changed)
│       │  ├ SystemType: (documentation changed)
│       │  └ Tags: (documentation changed)
│       ├ attributes
│       │  ├ ConnectivityStatus: (documentation changed)
│       │  ├[+] Id: string
│       │  ├ SecretsManagerArn: (documentation changed)
│       │  └ StorageSystemArn: (documentation changed)
│       └ types
│          ├[~] type ServerConfiguration
│          │ ├      - documentation: The network settings that DataSync Discovery uses to connect with your on-premises storage system's management interface.
│          │ │      + documentation: undefined
│          │ └ properties
│          │    ├ ServerHostname: (documentation changed)
│          │    └ ServerPort: (documentation changed)
│          └[~] type ServerCredentials
│            ├      - documentation: The credentials that provide DataSync Discovery read access to your on-premises storage system's management interface.
│            │      DataSync Discovery stores these credentials in [AWS Secrets Manager](https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html) . For more information, see [Accessing your on-premises storage system](https://docs.aws.amazon.com/datasync/latest/userguide/discovery-configure-storage.html) .
│            │      + documentation: undefined
│            └ properties
│               ├ Password: (documentation changed)
│               └ Username: (documentation changed)
├[~] service aws-datazone
│ └ resources
│    ├[~]  resource AWS::DataZone::EnvironmentBlueprintConfiguration
│    │  ├ properties
│    │  │  ├[+] EnvironmentRolePermissionBoundary: string
│    │  │  └[+] ProvisioningConfigurations: Array<ProvisioningConfiguration>
│    │  └ types
│    │     ├[+]  type LakeFormationConfiguration
│    │     │  ├      name: LakeFormationConfiguration
│    │     │  └ properties
│    │     │     ├ LocationRegistrationExcludeS3Locations: Array<string>
│    │     │     └ LocationRegistrationRole: string
│    │     └[+]  type ProvisioningConfiguration
│    │        ├      name: ProvisioningConfiguration
│    │        └ properties
│    │           └ LakeFormationConfiguration: LakeFormationConfiguration (required)
│    └[~]  resource AWS::DataZone::Project
│       ├ properties
│       │  ├[+] DomainUnitId: string (immutable)
│       │  ├[+] ProjectProfileId: string (immutable)
│       │  ├[+] ProjectProfileVersion: string
│       │  └[+] UserParameters: Array<EnvironmentConfigurationUserParameter>
│       ├ attributes
│       │  └[+] ProjectStatus: string
│       └ types
│          ├[+]  type EnvironmentConfigurationUserParameter
│          │  ├      name: EnvironmentConfigurationUserParameter
│          │  └ properties
│          │     ├ EnvironmentId: string
│          │     ├ EnvironmentConfigurationName: string
│          │     └ EnvironmentParameters: Array<EnvironmentParameter>
│          └[+]  type EnvironmentParameter
│             ├      name: EnvironmentParameter
│             └ properties
│                ├ Name: string
│                └ Value: string
├[~] service aws-deadline
│ └ resources
│    └[~]  resource AWS::Deadline::Fleet
│       ├ properties
│       │  └[+] HostConfiguration: HostConfiguration
│       └ types
│          └[+]  type HostConfiguration
│             ├      name: HostConfiguration
│             └ properties
│                ├ ScriptBody: string (required)
│                └ ScriptTimeoutSeconds: integer (default=300)
├[~] service aws-dsql
│ └ resources
│    └[~]  resource AWS::DSQL::Cluster
│       └      - documentation: Creates a cluster in Amazon Aurora DSQL.
│              + documentation: The CreateCluster API allows you to create both single-region clusters and multi-Region clusters. With the addition of the *multiRegionProperties* parameter, you can create a cluster with witness Region support and establish peer relationships with clusters in other Regions during creation.
│              > Creating multi-Region clusters requires additional IAM permissions beyond those needed for single-Region clusters, as detailed in the *Required permissions* section below. 
│              *Required permissions*
│              - **dsql:CreateCluster** - Required to create a cluster.
│              Resources: `arn:aws:dsql:region:account-id:cluster/*`
│              - **dsql:TagResource** - Permission to add tags to a resource.
│              Resources: `arn:aws:dsql:region:account-id:cluster/*`
│              - **dsql:PutMultiRegionProperties** - Permission to configure multi-region properties for a cluster.
│              Resources: `arn:aws:dsql:region:account-id:cluster/*`
│              - **dsql:AddPeerCluster** - When specifying `multiRegionProperties.clusters` , permission to add peer clusters.
│              Resources:
│              - Local cluster: `arn:aws:dsql:region:account-id:cluster/*`
│              - Each peer cluster: exact ARN of each specified peer cluster
│              - **dsql:PutWitnessRegion** - When specifying `multiRegionProperties.witnessRegion` , permission to set a witness Region. This permission is checked both in the cluster Region and in the witness Region.
│              Resources: `arn:aws:dsql:region:account-id:cluster/*`
│              Condition Keys: `dsql:WitnessRegion` (matching the specified witness region)
│              > - The witness Region specified in `multiRegionProperties.witnessRegion` cannot be the same as the cluster's Region.
├[~] service aws-ec2
│ └ resources
│    ├[~]  resource AWS::EC2::IPAM
│    │  └ properties
│    │     └[+] MeteredAccount: string
│    ├[~]  resource AWS::EC2::LaunchTemplate
│    │  └ types
│    │     └[~] type Ebs
│    │       └ properties
│    │          └[+] VolumeInitializationRate: integer
│    └[~]  resource AWS::EC2::NetworkInsightsAnalysis
│       └ properties
│          └ FilterOutArns: (documentation changed)
├[~] service aws-ecs
│ └ resources
│    ├[~]  resource AWS::ECS::Cluster
│    │  └ types
│    │     └[~] type ManagedStorageConfiguration
│    │       └ properties
│    │          ├ FargateEphemeralStorageKmsKeyId: (documentation changed)
│    │          └ KmsKeyId: (documentation changed)
│    ├[~]  resource AWS::ECS::Service
│    │  └ types
│    │     └[~] type ServiceManagedEBSVolumeConfiguration
│    │       └ properties
│    │          ├ Encrypted: (documentation changed)
│    │          ├ FilesystemType: (documentation changed)
│    │          ├ KmsKeyId: (documentation changed)
│    │          ├ SnapshotId: (documentation changed)
│    │          └ VolumeInitializationRate: (documentation changed)
│    └[~]  resource AWS::ECS::TaskDefinition
│       └ types
│          └[~] type SystemControl
│            └ properties
│               └ Value: (documentation changed)
├[~] service aws-elasticache
│ └ resources
│    └[~]  resource AWS::ElastiCache::ReplicationGroup
│       └ properties
│          └ ClusterMode: (documentation changed)
├[~] service aws-gamelift
│ └ resources
│    ├[~]  resource AWS::GameLift::ContainerFleet
│    │  └ properties
│    │     └ Locations: - Array<LocationConfiguration> (immutable)
│    │                  + Array<LocationConfiguration>
│    └[~]  resource AWS::GameLift::Fleet
│       ├      - tagInformation: undefined
│       │      + tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│       ├ properties
│       │  ├ DesiredEC2Instances: - integer
│       │  │                      + integer (deprecated=WARN)
│       │  ├ MaxSize: - integer
│       │  │          + integer (deprecated=WARN)
│       │  ├ MinSize: - integer
│       │  │          + integer (deprecated=WARN)
│       │  └[+] Tags: Array<tag>
│       └ attributes
│          └[+] FleetArn: string
├[~] service aws-gameliftstreams
│ └ resources
│    └[~]  resource AWS::GameLiftStreams::StreamGroup
│       └ types
│          ├[~] type DefaultApplication
│          │ └ properties
│          │    ├ Arn: (documentation changed)
│          │    └ Id: (documentation changed)
│          └[~] type LocationConfiguration
│            └ properties
│               └ LocationName: (documentation changed)
├[~] service aws-logs
│ └ resources
│    └[~]  resource AWS::Logs::DeliveryDestination
│       └ properties
│          └ DeliveryDestinationPolicy: - json ⇐ DestinationPolicy
│                                       + DestinationPolicy
├[~] service aws-omics
│ └ resources
│    ├[~]  resource AWS::Omics::Workflow
│    │  ├ properties
│    │  │  └[+] StorageType: string
│    │  └ attributes
│    │     └[+] Uuid: string
│    └[+]  resource AWS::Omics::WorkflowVersion
│       ├      name: WorkflowVersion
│       │      cloudFormationType: AWS::Omics::WorkflowVersion
│       │      documentation: Definition of AWS::Omics::WorkflowVersion Resource Type.
│       │      tagInformation: {"tagPropertyName":"Tags","variant":"map"}
│       ├ properties
│       │  ├ WorkflowId: string (required, immutable)
│       │  ├ VersionName: string (required, immutable)
│       │  ├ DefinitionUri: string (immutable)
│       │  ├ Description: string
│       │  ├ Engine: string (immutable)
│       │  ├ Main: string (immutable)
│       │  ├ ParameterTemplate: Map<string, WorkflowParameter> (immutable)
│       │  ├ Accelerators: string (immutable)
│       │  ├ StorageType: string
│       │  ├ StorageCapacity: number
│       │  ├ Tags: Map<string, string>
│       │  └ WorkflowBucketOwnerId: string (immutable)
│       ├ attributes
│       │  ├ Arn: string
│       │  ├ CreationTime: string
│       │  ├ Status: string
│       │  ├ Type: string
│       │  └ Uuid: string
│       └ types
│          └ type WorkflowParameter
│            ├      name: WorkflowParameter
│            └ properties
│               ├ Description: string
│               └ Optional: boolean
├[~] service aws-route53resolver
│ └ resources
│    └[~]  resource AWS::Route53Resolver::ResolverRule
│       └ properties
│          └[-] DelegationRecord: string
├[~] service aws-ses
│ └ resources
│    ├[~]  resource AWS::SES::ConfigurationSetEventDestination
│    │  └ types
│    │     └[~] type EventDestination
│    │       └ properties
│    │          └ MatchingEventTypes: (documentation changed)
│    └[~]  resource AWS::SES::Template
│       └ types
│          └[~] type Template
│            └ properties
│               └ TemplateName: (documentation changed)
└[~] service aws-workspaces
  └ resources
     └[~]  resource AWS::WorkSpaces::WorkspacesPool
        └ properties
           └[+] RunningMode: string

Updates the L1 CloudFormation resource definitions with the latest changes from `@aws-cdk/aws-service-spec`
@aws-cdk-automation aws-cdk-automation added contribution/core This is a PR that came from AWS. dependencies This issue is a problem in a dependency or a pull request that updates a dependency file. pr-linter/exempt-readme The PR linter will not require README changes pr-linter/exempt-test The PR linter will not require test changes pr-linter/exempt-integ-test The PR linter will not require integ test changes labels May 19, 2025
@aws-cdk-automation aws-cdk-automation requested review from a team May 19, 2025 13:48
@github-actions github-actions bot added the p2 label May 19, 2025
@aws-cdk-automation aws-cdk-automation added the pr/needs-maintainer-review This PR needs a review from a Core Team Member label May 19, 2025
Copy link
Contributor

mergify bot commented May 20, 2025

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@GavinZZ GavinZZ merged commit 6b7cdcf into main May 20, 2025
12 of 14 checks passed
@GavinZZ GavinZZ deleted the automation/spec-update branch May 20, 2025 20:40
Copy link
Contributor

Comments on closed issues and PRs are hard for our team to see.
If you need help, please open a new issue that references this one.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators May 20, 2025
@aws-cdk-automation
Copy link
Collaborator Author

AWS CodeBuild CI Report

  • CodeBuild project: AutoBuildv2Project1C6BFA3F-wQm2hXv2jqQv
  • Commit ID: 5e61494
  • Result: SUCCEEDED
  • Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
contribution/core This is a PR that came from AWS. dependencies This issue is a problem in a dependency or a pull request that updates a dependency file. p2 pr/needs-maintainer-review This PR needs a review from a Core Team Member pr-linter/exempt-integ-test The PR linter will not require integ test changes pr-linter/exempt-readme The PR linter will not require README changes pr-linter/exempt-test The PR linter will not require test changes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants