Merge pull request hashicorp#1997 from hashicorp/f-09-04-2024-schema-…

…updates

09/04/2024 CloudFormation schema refresh

CHANGELOG.md

@@ -1,4 +1,9 @@
 ## 1.13.0 (Unreleased)
+
+FEATURES:
+
+* provider: Updated resource schemas
+
 ## 1.12.0 (August 29, 2024)
 
 FEATURES:

docs/data-sources/batch_compute_environment.md

@@ -24,6 +24,7 @@ Data Source schema for AWS::Batch::ComputeEnvironment
 - `compute_environment_arn` (String)
 - `compute_environment_name` (String)
 - `compute_resources` (Attributes) (see [below for nested schema](#nestedatt--compute_resources))
+- `context` (String)
 - `eks_configuration` (Attributes) (see [below for nested schema](#nestedatt--eks_configuration))
 - `replace_compute_environment` (Boolean)
 - `service_role` (String)

docs/data-sources/bedrock_flow_version.md

@@ -22,6 +22,7 @@ Data Source schema for AWS::Bedrock::FlowVersion
 ### Read-Only
 
 - `created_at` (String) Time Stamp.
+- `customer_encryption_key_arn` (String) A KMS key ARN
 - `definition` (Attributes) Flow definition (see [below for nested schema](#nestedatt--definition))
 - `description` (String) Description of the flow version
 - `execution_role_arn` (String) ARN of a IAM role
@@ -93,13 +94,26 @@ Read-Only:
 
 Read-Only:
 
+- `agent` (Attributes) Agent flow node configuration (see [below for nested schema](#nestedatt--definition--nodes--configuration--agent))
+- `collector` (String) Collector flow node configuration
 - `condition` (Attributes) Condition flow node configuration (see [below for nested schema](#nestedatt--definition--nodes--configuration--condition))
 - `input` (String) Input flow node configuration
+- `iterator` (String) Iterator flow node configuration
 - `knowledge_base` (Attributes) Knowledge base flow node configuration (see [below for nested schema](#nestedatt--definition--nodes--configuration--knowledge_base))
 - `lambda_function` (Attributes) Lambda function flow node configuration (see [below for nested schema](#nestedatt--definition--nodes--configuration--lambda_function))
 - `lex` (Attributes) Lex flow node configuration (see [below for nested schema](#nestedatt--definition--nodes--configuration--lex))
 - `output` (String) Output flow node configuration
 - `prompt` (Attributes) Prompt flow node configuration (see [below for nested schema](#nestedatt--definition--nodes--configuration--prompt))
+- `retrieval` (Attributes) Retrieval flow node configuration (see [below for nested schema](#nestedatt--definition--nodes--configuration--retrieval))
+- `storage` (Attributes) Storage flow node configuration (see [below for nested schema](#nestedatt--definition--nodes--configuration--storage))
+
+<a id="nestedatt--definition--nodes--configuration--agent"></a>
+### Nested Schema for `definition.nodes.configuration.agent`
+
+Read-Only:
+
+- `agent_alias_arn` (String) Arn representation of the Agent Alias.
+
 
 <a id="nestedatt--definition--nodes--configuration--condition"></a>
 ### Nested Schema for `definition.nodes.configuration.condition`
@@ -225,6 +239,54 @@ Read-Only:
 
 
 
+<a id="nestedatt--definition--nodes--configuration--retrieval"></a>
+### Nested Schema for `definition.nodes.configuration.retrieval`
+
+Read-Only:
+
+- `service_configuration` (Attributes) Retrieval service configuration for Retrieval node (see [below for nested schema](#nestedatt--definition--nodes--configuration--retrieval--service_configuration))
+
+<a id="nestedatt--definition--nodes--configuration--retrieval--service_configuration"></a>
+### Nested Schema for `definition.nodes.configuration.retrieval.service_configuration`
+
+Read-Only:
+
+- `s3` (Attributes) s3 Retrieval configuration for Retrieval node (see [below for nested schema](#nestedatt--definition--nodes--configuration--retrieval--service_configuration--s3))
+
+<a id="nestedatt--definition--nodes--configuration--retrieval--service_configuration--s3"></a>
+### Nested Schema for `definition.nodes.configuration.retrieval.service_configuration.s3`
+
+Read-Only:
+
+- `bucket_name` (String) bucket name of an s3 that will be used for Retrieval flow node configuration
+
+
+
+
+<a id="nestedatt--definition--nodes--configuration--storage"></a>
+### Nested Schema for `definition.nodes.configuration.storage`
+
+Read-Only:
+
+- `service_configuration` (Attributes) storage service configuration for storage node (see [below for nested schema](#nestedatt--definition--nodes--configuration--storage--service_configuration))
+
+<a id="nestedatt--definition--nodes--configuration--storage--service_configuration"></a>
+### Nested Schema for `definition.nodes.configuration.storage.service_configuration`
+
+Read-Only:
+
+- `s3` (Attributes) s3 storage configuration for storage node (see [below for nested schema](#nestedatt--definition--nodes--configuration--storage--service_configuration--s3))
+
+<a id="nestedatt--definition--nodes--configuration--storage--service_configuration--s3"></a>
+### Nested Schema for `definition.nodes.configuration.storage.service_configuration.s3`
+
+Read-Only:
+
+- `bucket_name` (String) bucket name of an s3 that will be used for storage flow node configuration
+
+
+
+
 
 <a id="nestedatt--definition--nodes--inputs"></a>
 ### Nested Schema for `definition.nodes.inputs`

docs/data-sources/bedrock_prompt_version.md

@@ -23,11 +23,13 @@ Data Source schema for AWS::Bedrock::PromptVersion
 
 - `arn` (String) ARN of a prompt version resource
 - `created_at` (String) Time Stamp.
+- `customer_encryption_key_arn` (String) A KMS key ARN
 - `default_variant` (String) Name for a variant.
 - `description` (String) Description for a prompt version resource.
 - `name` (String) Name for a prompt resource.
 - `prompt_arn` (String) ARN of a prompt resource possibly with a version
 - `prompt_id` (String) Identifier for a Prompt
+- `tags` (Map of String) A map of tag keys and values
 - `updated_at` (String) Time Stamp.
 - `variants` (Attributes List) List of prompt variants (see [below for nested schema](#nestedatt--variants))
 - `version` (String) Version.

docs/data-sources/cloudwatch_alarm.md

@@ -46,11 +46,12 @@ Data Source schema for AWS::CloudWatch::Alarm
 - `ok_actions` (List of String) The actions to execute when this alarm transitions to the ``OK`` state from any other state. Each action is specified as an Amazon Resource Name (ARN).
 - `period` (Number) The period, in seconds, over which the statistic is applied. This is required for an alarm based on a metric. Valid values are 10, 30, 60, and any multiple of 60.
  For an alarm based on a math expression, you can't specify ``Period``, and instead you use the ``Metrics`` parameter.
- *Minimum:* 10
+  *Minimum:* 10
 - `statistic` (String) The statistic for the metric associated with the alarm, other than percentile. For percentile statistics, use ``ExtendedStatistic``.
  For an alarm based on a metric, you must specify either ``Statistic`` or ``ExtendedStatistic`` but not both.
  For an alarm based on a math expression, you can't specify ``Statistic``. Instead, you use ``Metrics``.
-- `tags` (Attributes List) (see [below for nested schema](#nestedatt--tags))
+- `tags` (Attributes List) A list of key-value pairs to associate with the alarm. You can associate as many as 50 tags with an alarm. To be able to associate tags with the alarm when you create the alarm, you must have the ``cloudwatch:TagResource`` permission.
+ Tags can help you organize and categorize your resources. You can also use them to scope user permissions by granting a user permission to access or change only resources with certain tag values. (see [below for nested schema](#nestedatt--tags))
 - `threshold` (Number) The value to compare with the specified statistic.
 - `threshold_metric_id` (String) In an alarm based on an anomaly detection model, this is the ID of the ``ANOMALY_DETECTION_BAND`` function used as the threshold for the alarm.
 - `treat_missing_data` (String) Sets how this alarm is to handle missing data points. Valid values are ``breaching``, ``notBreaching``, ``ignore``, and ``missing``. For more information, see [Configuring How Alarms Treat Missing Data](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/AlarmThatSendsEmail.html#alarms-and-missing-data) in the *Amazon User Guide*.
@@ -125,5 +126,5 @@ Read-Only:
 
 Read-Only:
 
-- `key` (String) A unique identifier for the tag. The combination of tag keys and values can help you organize and categorize your resources.
+- `key` (String) A string that you can use to assign a value. The combination of tag keys and values can help you organize and categorize your resources.
 - `value` (String) The value for the specified tag key.

docs/data-sources/elasticloadbalancingv2_load_balancer.md

@@ -26,7 +26,8 @@ Data Source schema for AWS::ElasticLoadBalancingV2::LoadBalancer
 - `enforce_security_group_inbound_rules_on_private_link_traffic` (String) Indicates whether to evaluate inbound security group rules for traffic sent to a Network Load Balancer through privatelink.
 - `ip_address_type` (String) Note: Internal load balancers must use the ``ipv4`` IP address type.
  [Application Load Balancers] The IP address type. The possible values are ``ipv4`` (for only IPv4 addresses), ``dualstack`` (for IPv4 and IPv6 addresses), and ``dualstack-without-public-ipv4`` (for IPv6 only public addresses, with private IPv4 and IPv6 addresses).
- [Network Load Balancers] The IP address type. The possible values are ``ipv4`` (for only IPv4 addresses) and ``dualstack`` (for IPv4 and IPv6 addresses). You can?t specify ``dualstack`` for a load balancer with a UDP or TCP_UDP listener.
+ Note: Application Load Balancer authentication only supports IPv4 addresses when connecting to an Identity Provider (IdP) or Amazon Cognito endpoint. Without a public IPv4 address the load balancer cannot complete the authentication process, resulting in HTTP 500 errors.
+ [Network Load Balancers] The IP address type. The possible values are ``ipv4`` (for only IPv4 addresses) and ``dualstack`` (for IPv4 and IPv6 addresses). You can’t specify ``dualstack`` for a load balancer with a UDP or TCP_UDP listener.
  [Gateway Load Balancers] The IP address type. The possible values are ``ipv4`` (for only IPv4 addresses) and ``dualstack`` (for IPv4 and IPv6 addresses).
 - `load_balancer_arn` (String)
 - `load_balancer_attributes` (Attributes Set) The load balancer attributes. (see [below for nested schema](#nestedatt--load_balancer_attributes))

docs/data-sources/opensearchservice_domain.md

@@ -42,6 +42,7 @@ Data Source schema for AWS::OpenSearchService::Domain
 - `node_to_node_encryption_options` (Attributes) (see [below for nested schema](#nestedatt--node_to_node_encryption_options))
 - `off_peak_window_options` (Attributes) (see [below for nested schema](#nestedatt--off_peak_window_options))
 - `service_software_options` (Attributes) (see [below for nested schema](#nestedatt--service_software_options))
+- `skip_shard_migration_wait` (Boolean)
 - `snapshot_options` (Attributes) (see [below for nested schema](#nestedatt--snapshot_options))
 - `software_update_options` (Attributes) (see [below for nested schema](#nestedatt--software_update_options))
 - `tags` (Attributes List) An arbitrary set of tags (key-value pairs) for this Domain. (see [below for nested schema](#nestedatt--tags))
@@ -56,9 +57,21 @@ Read-Only:
 - `anonymous_auth_enabled` (Boolean)
 - `enabled` (Boolean)
 - `internal_user_database_enabled` (Boolean)
+- `jwt_options` (Attributes) (see [below for nested schema](#nestedatt--advanced_security_options--jwt_options))
 - `master_user_options` (Attributes) (see [below for nested schema](#nestedatt--advanced_security_options--master_user_options))
 - `saml_options` (Attributes) (see [below for nested schema](#nestedatt--advanced_security_options--saml_options))
 
+<a id="nestedatt--advanced_security_options--jwt_options"></a>
+### Nested Schema for `advanced_security_options.jwt_options`
+
+Read-Only:
+
+- `enabled` (Boolean)
+- `public_key` (String)
+- `roles_key` (String)
+- `subject_key` (String)
+
+
 <a id="nestedatt--advanced_security_options--master_user_options"></a>
 ### Nested Schema for `advanced_security_options.master_user_options`
 

docs/data-sources/securityhub_delegated_admin.md

@@ -21,6 +21,6 @@ Data Source schema for AWS::SecurityHub::DelegatedAdmin
 
 ### Read-Only
 
-- `admin_account_id` (String) The Amazon Web Services account identifier of the account to designate as the Security Hub administrator account
-- `delegated_admin_identifier` (String) The identifier of the DelegatedAdmin being created and assigned as the unique identifier
-- `status` (String) The current status of the Security Hub administrator account. Indicates whether the account is currently enabled as a Security Hub administrator
+- `admin_account_id` (String) The AWS-account identifier of the account to designate as the Security Hub administrator account.
+- `delegated_admin_identifier` (String)
+- `status` (String)

docs/data-sources/securityhub_finding_aggregator.md

@@ -21,7 +21,15 @@ Data Source schema for AWS::SecurityHub::FindingAggregator
 
 ### Read-Only
 
-- `finding_aggregation_region` (String) The aggregation Region of the FindingAggregator
-- `finding_aggregator_arn` (String) The ARN of the FindingAggregator being created and assigned as the unique identifier
-- `region_linking_mode` (String) Indicates whether to link all Regions, all Regions except for a list of excluded Regions, or a list of included Regions
-- `regions` (Set of String) The list of excluded Regions or included Regions
+- `finding_aggregation_region` (String)
+- `finding_aggregator_arn` (String)
+- `region_linking_mode` (String) Indicates whether to aggregate findings from all of the available Regions in the current partition. Also determines whether to automatically aggregate findings from new Regions as Security Hub supports them and you opt into them.
+ The selected option also determines how to use the Regions provided in the Regions list.
+ The options are as follows:
+  +   ``ALL_REGIONS`` - Aggregates findings from all of the Regions where Security Hub is enabled. When you choose this option, Security Hub also automatically aggregates findings from new Regions as Security Hub supports them and you opt into them. 
+  +   ``ALL_REGIONS_EXCEPT_SPECIFIED`` - Aggregates findings from all of the Regions where Security Hub is enabled, except for the Regions listed in the ``Regions`` parameter. When you choose this option, Security Hub also automatically aggregates findings from new Regions as Security Hub supports them and you opt into them. 
+  +   ``SPECIFIED_REGIONS`` - Aggregates findings only from the Regions listed in the ``Regions`` parameter. Security Hub does not automatically aggregate findings from new Regions. 
+  +   ``NO_REGIONS`` - Aggregates no data because no Regions are selected as linked Regions.
+- `regions` (Set of String) If ``RegionLinkingMode`` is ``ALL_REGIONS_EXCEPT_SPECIFIED``, then this is a space-separated list of Regions that do not aggregate findings to the aggregation Region.
+ If ``RegionLinkingMode`` is ``SPECIFIED_REGIONS``, then this is a space-separated list of Regions that do aggregate findings to the aggregation Region. 
+ An ``InvalidInputException`` error results if you populate this field while ``RegionLinkingMode`` is ``NO_REGIONS``.

docs/data-sources/securityhub_standard.md

@@ -22,7 +22,7 @@ Data Source schema for AWS::SecurityHub::Standard
 ### Read-Only
 
 - `disabled_standards_controls` (Attributes List) Specifies which controls are to be disabled in a standard. 
- *Maximum*: ``100`` (see [below for nested schema](#nestedatt--disabled_standards_controls))
+  *Maximum*: ``100`` (see [below for nested schema](#nestedatt--disabled_standards_controls))
 - `standards_arn` (String) The ARN of the standard that you want to enable. To view a list of available ASH standards and their ARNs, use the [DescribeStandards](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html) API operation.
 - `standards_subscription_arn` (String)
 

docs/resources/batch_compute_environment.md

@@ -23,6 +23,7 @@ Resource Type definition for AWS::Batch::ComputeEnvironment
 
 - `compute_environment_name` (String)
 - `compute_resources` (Attributes) (see [below for nested schema](#nestedatt--compute_resources))
+- `context` (String)
 - `eks_configuration` (Attributes) (see [below for nested schema](#nestedatt--eks_configuration))
 - `replace_compute_environment` (Boolean)
 - `service_role` (String)

docs/resources/bedrock_flow_version.md

@@ -32,6 +32,7 @@ resource "awscc_bedrock_flow_version" "example" {
 ### Read-Only
 
 - `created_at` (String) Time Stamp.
+- `customer_encryption_key_arn` (String) A KMS key ARN
 - `definition` (Attributes) Flow definition (see [below for nested schema](#nestedatt--definition))
 - `execution_role_arn` (String) ARN of a IAM role
 - `flow_id` (String) Identifier for a Flow
@@ -102,13 +103,26 @@ Read-Only:
 
 Read-Only:
 
+- `agent` (Attributes) Agent flow node configuration (see [below for nested schema](#nestedatt--definition--nodes--configuration--agent))
+- `collector` (String) Collector flow node configuration
 - `condition` (Attributes) Condition flow node configuration (see [below for nested schema](#nestedatt--definition--nodes--configuration--condition))
 - `input` (String) Input flow node configuration
+- `iterator` (String) Iterator flow node configuration
 - `knowledge_base` (Attributes) Knowledge base flow node configuration (see [below for nested schema](#nestedatt--definition--nodes--configuration--knowledge_base))
 - `lambda_function` (Attributes) Lambda function flow node configuration (see [below for nested schema](#nestedatt--definition--nodes--configuration--lambda_function))
 - `lex` (Attributes) Lex flow node configuration (see [below for nested schema](#nestedatt--definition--nodes--configuration--lex))
 - `output` (String) Output flow node configuration
 - `prompt` (Attributes) Prompt flow node configuration (see [below for nested schema](#nestedatt--definition--nodes--configuration--prompt))
+- `retrieval` (Attributes) Retrieval flow node configuration (see [below for nested schema](#nestedatt--definition--nodes--configuration--retrieval))
+- `storage` (Attributes) Storage flow node configuration (see [below for nested schema](#nestedatt--definition--nodes--configuration--storage))
+
+<a id="nestedatt--definition--nodes--configuration--agent"></a>
+### Nested Schema for `definition.nodes.configuration.agent`
+
+Read-Only:
+
+- `agent_alias_arn` (String) Arn representation of the Agent Alias.
+
 
 <a id="nestedatt--definition--nodes--configuration--condition"></a>
 ### Nested Schema for `definition.nodes.configuration.condition`
@@ -234,6 +248,54 @@ Read-Only:
 
 
 
+<a id="nestedatt--definition--nodes--configuration--retrieval"></a>
+### Nested Schema for `definition.nodes.configuration.retrieval`
+
+Read-Only:
+
+- `service_configuration` (Attributes) Retrieval service configuration for Retrieval node (see [below for nested schema](#nestedatt--definition--nodes--configuration--retrieval--service_configuration))
+
+<a id="nestedatt--definition--nodes--configuration--retrieval--service_configuration"></a>
+### Nested Schema for `definition.nodes.configuration.retrieval.service_configuration`
+
+Read-Only:
+
+- `s3` (Attributes) s3 Retrieval configuration for Retrieval node (see [below for nested schema](#nestedatt--definition--nodes--configuration--retrieval--service_configuration--s3))
+
+<a id="nestedatt--definition--nodes--configuration--retrieval--service_configuration--s3"></a>
+### Nested Schema for `definition.nodes.configuration.retrieval.service_configuration.s3`
+
+Read-Only:
+
+- `bucket_name` (String) bucket name of an s3 that will be used for Retrieval flow node configuration
+
+
+
+
+<a id="nestedatt--definition--nodes--configuration--storage"></a>
+### Nested Schema for `definition.nodes.configuration.storage`
+
+Read-Only:
+
+- `service_configuration` (Attributes) storage service configuration for storage node (see [below for nested schema](#nestedatt--definition--nodes--configuration--storage--service_configuration))
+
+<a id="nestedatt--definition--nodes--configuration--storage--service_configuration"></a>
+### Nested Schema for `definition.nodes.configuration.storage.service_configuration`
+
+Read-Only:
+
+- `s3` (Attributes) s3 storage configuration for storage node (see [below for nested schema](#nestedatt--definition--nodes--configuration--storage--service_configuration--s3))
+
+<a id="nestedatt--definition--nodes--configuration--storage--service_configuration--s3"></a>
+### Nested Schema for `definition.nodes.configuration.storage.service_configuration.s3`
+
+Read-Only:
+
+- `bucket_name` (String) bucket name of an s3 that will be used for storage flow node configuration
+
+
+
+
 
 <a id="nestedatt--definition--nodes--inputs"></a>
 ### Nested Schema for `definition.nodes.inputs`