feat: update L1 CloudFormation resource definitions

[aws-cdk-automation]

Updates the L1 CloudFormation resource definitions with the latest changes from @aws-cdk/aws-service-spec

L1 CloudFormation resource definition changes:

├[~] service aws-apigateway
│ └ resources
│    └[~]  resource AWS::ApiGateway::RestApi
│       ├      - vendedLogs: undefined
│       │      + vendedLogs: [{"permissionsVersion":"V2","logType":"EXECUTION_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"mandatoryFields":["resource_arn","event_timestamp","stage","payload"]},{"permissionsVersion":"V2","logType":"ACCESS_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"mandatoryFields":["resource_arn","event_timestamp","stage","payload"]}]
│       └ vendedLogs
│          ├[+] logType: EXECUTION_LOGS
│          │ ├permissionsVersion: V2
│          │ ├destinations: [S3, CWL, FH]
│          │ └mandatoryFields: [resource_arn, event_timestamp, stage, payload]
│          └[+] logType: ACCESS_LOGS
│            ├permissionsVersion: V2
│            ├destinations: [S3, CWL, FH]
│            └mandatoryFields: [resource_arn, event_timestamp, stage, payload]
├[~] service aws-batch
│ └ resources
│    ├[+]  resource AWS::Batch::QuotaShare
│    │  ├      name: QuotaShare
│    │  │      cloudFormationType: AWS::Batch::QuotaShare
│    │  │      documentation: Resource Type definition for AWS::Batch::QuotaShare
│    │  │      tagInformation: {"tagPropertyName":"Tags","variant":"map"}
│    │  │      primaryIdentifier: ["QuotaShareArn"]
│    │  ├ properties
│    │  │  ├ QuotaShareName: string (required, immutable)
│    │  │  ├ JobQueue: string (required, immutable)
│    │  │  ├ CapacityLimits: Array<QuotaShareCapacityLimit> (required)
│    │  │  ├ ResourceSharingConfiguration: QuotaShareResourceSharingConfiguration (required)
│    │  │  ├ PreemptionConfiguration: QuotaSharePreemptionConfiguration (required)
│    │  │  ├ State: string<ENABLED|DISABLED>
│    │  │  └ Tags: Map<string, string>
│    │  ├ attributes
│    │  │  └ QuotaShareArn: string
│    │  └ types
│    │     ├ type QuotaShareCapacityLimit
│    │     │ ├      name: QuotaShareCapacityLimit
│    │     │ └ properties
│    │     │    ├ MaxCapacity: integer (required)
│    │     │    └ CapacityUnit: string (required)
│    │     ├ type QuotaSharePreemptionConfiguration
│    │     │ ├      name: QuotaSharePreemptionConfiguration
│    │     │ └ properties
│    │     │    └ InSharePreemption: string<ENABLED|DISABLED> (required)
│    │     └ type QuotaShareResourceSharingConfiguration
│    │       ├      name: QuotaShareResourceSharingConfiguration
│    │       └ properties
│    │          ├ Strategy: string<RESERVE|LEND|LEND_AND_BORROW> (required)
│    │          └ BorrowLimit: integer
│    └[~]  resource AWS::Batch::SchedulingPolicy
│       ├ properties
│       │  └[+] QuotaSharePolicy: QuotaSharePolicy
│       └ types
│          └[+]  type QuotaSharePolicy
│             ├      documentation: Quota Share Policy for the Job Queue.
│             │      name: QuotaSharePolicy
│             └ properties
│                └ IdleResourceAssignmentStrategy: string<FIFO>
├[~] service aws-bedrockagentcore
│ └ resources
│    ├[~]  resource AWS::BedrockAgentCore::Gateway
│    │  ├ properties
│    │  │  └[+] PolicyEngineConfiguration: GatewayPolicyEngineConfiguration
│    │  └ types
│    │     └[+]  type GatewayPolicyEngineConfiguration
│    │        ├      documentation: The configuration for a policy engine associated with a gateway. A policy engine is a collection of policies that evaluates and authorizes agent tool calls. When associated with a gateway, the policy engine intercepts all agent requests and determines whether to allow or deny each action based on the defined policies.
│    │        │      name: GatewayPolicyEngineConfiguration
│    │        └ properties
│    │           ├ Arn: string (required)
│    │           └ Mode: string<LOG_ONLY|ENFORCE> (required)
│    └[~]  resource AWS::BedrockAgentCore::Memory
│       ├ properties
│       │  └[+] StreamDeliveryResources: StreamDeliveryResources
│       └ types
│          ├[+]  type ContentConfiguration
│          │  ├      name: ContentConfiguration
│          │  └ properties
│          │     ├ Type: string<MEMORY_RECORDS> (required)
│          │     └ Level: string<METADATA_ONLY|FULL_CONTENT>
│          ├[+]  type KinesisResource
│          │  ├      name: KinesisResource
│          │  └ properties
│          │     ├ DataStreamArn: string (required)
│          │     └ ContentConfigurations: Array<ContentConfiguration> (required)
│          ├[+]  type StreamDeliveryResource
│          │  ├      name: StreamDeliveryResource
│          │  └ properties
│          │     └ Kinesis: KinesisResource
│          └[+]  type StreamDeliveryResources
│             ├      name: StreamDeliveryResources
│             └ properties
│                └ Resources: Array<StreamDeliveryResource> (required)
├[~] service aws-cleanrooms
│ └ resources
│    └[~]  resource AWS::CleanRooms::ConfiguredTable
│       └ types
│          └[~] type AthenaTableReference
│            └ properties
│               └[+] CatalogName: string
├[~] service aws-cleanroomsml
│ └ resources
│    ├[+]  resource AWS::CleanRoomsML::ConfiguredModelAlgorithm
│    │  ├      name: ConfiguredModelAlgorithm
│    │  │      cloudFormationType: AWS::CleanRoomsML::ConfiguredModelAlgorithm
│    │  │      documentation: Definition of AWS::CleanRoomsML::ConfiguredModelAlgorithm Resource Type
│    │  │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │  │      arnTemplate: arn:${Partition}:cleanrooms-ml:${Region}:${Account}:configured-model-algorithm/${ResourceId}
│    │  │      primaryIdentifier: ["ConfiguredModelAlgorithmArn"]
│    │  ├ properties
│    │  │  ├ Name: string (required, immutable)
│    │  │  ├ Description: string (immutable)
│    │  │  ├ RoleArn: string (required, immutable)
│    │  │  ├ TrainingContainerConfig: ContainerConfig (immutable)
│    │  │  ├ InferenceContainerConfig: InferenceContainerConfig (immutable)
│    │  │  ├ KmsKeyArn: string (immutable)
│    │  │  └ Tags: Array<tag>
│    │  ├ attributes
│    │  │  └ ConfiguredModelAlgorithmArn: string
│    │  └ types
│    │     ├ type ContainerConfig
│    │     │ ├      name: ContainerConfig
│    │     │ └ properties
│    │     │    ├ ImageUri: string (required)
│    │     │    ├ Entrypoint: Array<string>
│    │     │    ├ Arguments: Array<string>
│    │     │    └ MetricDefinitions: Array<MetricDefinition>
│    │     ├ type InferenceContainerConfig
│    │     │ ├      name: InferenceContainerConfig
│    │     │ └ properties
│    │     │    └ ImageUri: string (required)
│    │     └ type MetricDefinition
│    │       ├      name: MetricDefinition
│    │       └ properties
│    │          ├ Name: string (required)
│    │          └ Regex: string (required)
│    └[+]  resource AWS::CleanRoomsML::ConfiguredModelAlgorithmAssociation
│       ├      name: ConfiguredModelAlgorithmAssociation
│       │      cloudFormationType: AWS::CleanRoomsML::ConfiguredModelAlgorithmAssociation
│       │      documentation: Definition of AWS::CleanRoomsML::ConfiguredModelAlgorithmAssociation Resource Type
│       │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│       │      primaryIdentifier: ["ConfiguredModelAlgorithmAssociationArn"]
│       ├ properties
│       │  ├ MembershipIdentifier: string (required, immutable)
│       │  ├ ConfiguredModelAlgorithmArn: string (required, immutable)
│       │  ├ Name: string (required, immutable)
│       │  ├ Description: string (immutable)
│       │  ├ PrivacyConfiguration: PrivacyConfiguration (immutable)
│       │  └ Tags: Array<tag>
│       ├ attributes
│       │  ├ ConfiguredModelAlgorithmAssociationArn: string
│       │  └ CollaborationIdentifier: string
│       └ types
│          ├ type CustomEntityConfig
│          │ ├      name: CustomEntityConfig
│          │ └ properties
│          │    └ CustomDataIdentifiers: Array<string> (required)
│          ├ type LogRedactionConfiguration
│          │ ├      name: LogRedactionConfiguration
│          │ └ properties
│          │    ├ EntitiesToRedact: Array<string<ALL_PERSONALLY_IDENTIFIABLE_INFORMATION|NUMBERS|CUSTOM>> (required)
│          │    └ CustomEntityConfig: CustomEntityConfig
│          ├ type LogsConfigurationPolicy
│          │ ├      name: LogsConfigurationPolicy
│          │ └ properties
│          │    ├ AllowedAccountIds: Array<string> (required)
│          │    ├ FilterPattern: string
│          │    ├ LogType: string<ALL|ERROR_SUMMARY>
│          │    └ LogRedactionConfiguration: LogRedactionConfiguration
│          ├ type MetricsConfigurationPolicy
│          │ ├      name: MetricsConfigurationPolicy
│          │ └ properties
│          │    └ NoiseLevel: string<HIGH|MEDIUM|LOW|NONE> (required)
│          ├ type PrivacyConfiguration
│          │ ├      name: PrivacyConfiguration
│          │ └ properties
│          │    └ Policies: PrivacyConfigurationPolicies (required)
│          ├ type PrivacyConfigurationPolicies
│          │ ├      name: PrivacyConfigurationPolicies
│          │ └ properties
│          │    ├ TrainedModels: TrainedModelsConfigurationPolicy
│          │    ├ TrainedModelExports: TrainedModelExportsConfigurationPolicy
│          │    └ TrainedModelInferenceJobs: TrainedModelInferenceJobsConfigurationPolicy
│          ├ type TrainedModelArtifactMaxSize
│          │ ├      name: TrainedModelArtifactMaxSize
│          │ └ properties
│          │    ├ Unit: string<GB> (required)
│          │    └ Value: number (required)
│          ├ type TrainedModelExportsConfigurationPolicy
│          │ ├      name: TrainedModelExportsConfigurationPolicy
│          │ └ properties
│          │    ├ MaxSize: TrainedModelExportsMaxSize (required)
│          │    └ FilesToExport: Array<string<MODEL|OUTPUT>> (required)
│          ├ type TrainedModelExportsMaxSize
│          │ ├      name: TrainedModelExportsMaxSize
│          │ └ properties
│          │    ├ Unit: string<GB> (required)
│          │    └ Value: number (required)
│          ├ type TrainedModelInferenceJobsConfigurationPolicy
│          │ ├      name: TrainedModelInferenceJobsConfigurationPolicy
│          │ └ properties
│          │    ├ ContainerLogs: Array<LogsConfigurationPolicy>
│          │    └ MaxOutputSize: TrainedModelInferenceMaxOutputSize
│          ├ type TrainedModelInferenceMaxOutputSize
│          │ ├      name: TrainedModelInferenceMaxOutputSize
│          │ └ properties
│          │    ├ Unit: string<GB> (required)
│          │    └ Value: number (required)
│          └ type TrainedModelsConfigurationPolicy
│            ├      name: TrainedModelsConfigurationPolicy
│            └ properties
│               ├ ContainerLogs: Array<LogsConfigurationPolicy>
│               ├ ContainerMetrics: MetricsConfigurationPolicy
│               └ MaxArtifactSize: TrainedModelArtifactMaxSize
├[~] service aws-cloudwatch
│ └ resources
│    └[~]  resource AWS::CloudWatch::InsightRule
│       ├      - tagInformation: {"tagPropertyName":"Tags","variant":"map"}
│       │      + tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│       └ properties
│          └ Tags: - json ⇐ Array<tag>
│                  + Array<tag>
├[~] service aws-config
│ └ resources
│    └[~]  resource AWS::Config::RemediationConfiguration
│       ├      - primaryIdentifier: ["Id"]
│       │      + primaryIdentifier: undefined
│       ├ properties
│       │  └ Parameters: - Map<string, RemediationParameterValue> ⇐ json
│       │                + json
│       ├ attributes
│       │  └[-] Id: string
│       └ types
│          └[~] type StaticValue
│            └ properties
│               └[-] Value: Array<string>
├[~] service aws-connect
│ └ resources
│    └[~]  resource AWS::Connect::Queue
│       ├ properties
│       │  └[+] AdditionalEmailAddresses: Array<EmailAddress>
│       └ types
│          └[+]  type EmailAddress
│             ├      documentation: An email address configuration for the queue
│             │      name: EmailAddress
│             └ properties
│                └ EmailAddressArn: string (required)
├[~] service aws-deadline
│ └ resources
│    └[~]  resource AWS::Deadline::Farm
│       └ properties
│          └[+] CostScaleFactor: number (default=1)
├[~] service aws-directoryservice
│ └ resources
│    └[~]  resource AWS::DirectoryService::MicrosoftAD
│       └      - arnTemplate: arn:${Partition}:ds:${Region}:${Account}:${DirectoryId}
│              + arnTemplate: arn:${Partition}:ds:${Region}:${Account}:directory/${DirectoryId}
├[~] service aws-dlm
│ └ resources
│    └[~]  resource AWS::DLM::LifecyclePolicy
│       ├ properties
│       │  └ CrossRegionCopyTargets: - json
│       │                            + Array<CrossRegionCopyTarget>
│       └ types
│          ├[+]  type CrossRegionCopyTarget
│          │  ├      name: CrossRegionCopyTarget
│          │  └ properties
│          │     └ TargetRegion: string
│          ├[~] type Exclusions
│          │ └ properties
│          │    ├ ExcludeTags: - json
│          │    │              + Array<tag>
│          │    └ ExcludeVolumeTypes: - json
│          │                          + Array<json>
│          └[~] type PolicyDetails
│            └ properties
│               └ CrossRegionCopyTargets: - json
│                                         + Array<CrossRegionCopyTarget>
├[~] service aws-ec2
│ └ resources
│    ├[~]  resource AWS::EC2::EC2Fleet
│    │  └ types
│    │     └[~] type TargetCapacitySpecificationRequest
│    │       └ properties
│    │          └ DefaultTargetCapacityType: - string<on-demand|spot> (immutable)
│    │                                       + string<on-demand|spot|reserved-capacity> (immutable)
│    ├[~]  resource AWS::EC2::InstanceConnectEndpoint
│    │  ├ attributes
│    │  │  ├[+] AvailabilityZone: string
│    │  │  ├[+] AvailabilityZoneId: string
│    │  │  ├[+] CreatedAt: string
│    │  │  ├[+] InstanceConnectEndpointArn: string
│    │  │  ├[+] NetworkInterfaceIds: Array<string>
│    │  │  ├[+] OwnerId: string
│    │  │  ├[+] PublicDnsNames: InstanceConnectEndpointPublicDnsNames
│    │  │  ├[+] State: string<create-in-progress|create-complete|create-failed|delete-in-progress|delete-complete|delete-failed|update-in-progress|update-complete|update-failed>
│    │  │  ├[+] StateMessage: string
│    │  │  └[+] VpcId: string
│    │  └ types
│    │     ├[+]  type InstanceConnectEndpointDnsNames
│    │     │  ├      documentation: The DNS names of the endpoint.
│    │     │  │      name: InstanceConnectEndpointDnsNames
│    │     │  └ properties
│    │     │     ├ DnsName: string
│    │     │     └ FipsDnsName: string
│    │     └[+]  type InstanceConnectEndpointPublicDnsNames
│    │        ├      documentation: The public DNS names of the endpoint, including IPv4-only and dualstack DNS names.
│    │        │      name: InstanceConnectEndpointPublicDnsNames
│    │        └ properties
│    │           ├ Ipv4: InstanceConnectEndpointDnsNames
│    │           └ Dualstack: InstanceConnectEndpointDnsNames
│    ├[+]  resource AWS::EC2::IPAMPrefixListResolverTarget
│    │  ├      name: IPAMPrefixListResolverTarget
│    │  │      cloudFormationType: AWS::EC2::IPAMPrefixListResolverTarget
│    │  │      documentation: Resource Type definition for AWS::EC2::IPAMPrefixListResolverTarget
│    │  │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │  │      primaryIdentifier: ["IpamPrefixListResolverTargetId"]
│    │  ├ properties
│    │  │  ├ IpamPrefixListResolverId: string (required, immutable)
│    │  │  ├ PrefixListId: string (required, immutable)
│    │  │  ├ PrefixListRegion: string (required, immutable)
│    │  │  ├ DesiredVersion: integer
│    │  │  ├ TrackLatestVersion: boolean (required)
│    │  │  └ Tags: Array<tag>
│    │  └ attributes
│    │     ├ IpamPrefixListResolverTargetId: string
│    │     └ IpamPrefixListResolverTargetArn: string
│    └[~]  resource AWS::EC2::TransitGatewayMeteringPolicyEntry
│       └ properties
│          ├ DestinationTransitGatewayAttachmentType: - string<vpc|vpn|direct-connect-gateway|peering|network-function|vpn-concentrator> (immutable)
│          │                                          + string<vpc|vpn|direct-connect-gateway|peering|network-function|vpn-concentrator|client-vpn> (immutable)
│          └ SourceTransitGatewayAttachmentType: - string<vpc|vpn|direct-connect-gateway|peering|network-function|vpn-concentrator> (immutable)
│                                                + string<vpc|vpn|direct-connect-gateway|peering|network-function|vpn-concentrator|client-vpn> (immutable)
├[~] service aws-eks
│ └ resources
│    └[~]  resource AWS::EKS::Cluster
│       └ types
│          ├[~] type ControlPlaneScalingConfig
│          │ └ properties
│          │    └ Tier: - string<standard|tier-xl|tier-2xl|tier-4xl>
│          │            + string<standard|tier-xl|tier-2xl|tier-4xl|tier-8xl|tier-ultra>
│          └[~] type RemoteNetworkConfig
│            └ properties
│               └ RemoteNodeNetworks: - Array<RemoteNodeNetwork> (required)
│                                     + Array<RemoteNodeNetwork>
├[~] service aws-elasticache
│ └ resources
│    └[~]  resource AWS::ElastiCache::ReplicationGroup
│       ├ properties
│       │  ├ AtRestEncryptionEnabled: - boolean (immutable)
│       │  │                          + boolean (default=false, immutable)
│       │  ├ AutomaticFailoverEnabled: - boolean
│       │  │                           + boolean (default=false)
│       │  ├ CacheSecurityGroupNames: - Array<string>
│       │  │                          + Array<string> (deprecated=WARN)
│       │  ├ NumNodeGroups: - integer (immutable?)
│       │  │                + integer (default=1, immutable?)
│       │  ├ SnapshotRetentionLimit: - integer
│       │  │                         + integer (default=0)
│       │  └ TransitEncryptionEnabled: - boolean
│       │                              + boolean (default=false)
│       ├ attributes
│       │  ├[+] ConfigurationEndPoint: Endpoint
│       │  ├[+] PrimaryEndPoint: Endpoint
│       │  ├[+] ReadEndPoint: ReadEndPoint
│       │  ├[-] ReadEndPoint.Addresses.List: Array<string>
│       │  ├[+] ReadEndPoint.AddressesList: Array<string>
│       │  ├[-] ReadEndPoint.Ports.List: Array<string>
│       │  ├[+] ReadEndPoint.PortsList: Array<string>
│       │  └[+] ReaderEndPoint: Endpoint
│       └ types
│          ├[+]  type Endpoint
│          │  ├      name: Endpoint
│          │  └ properties
│          │     ├ Address: string
│          │     └ Port: string
│          └[+]  type ReadEndPoint
│             ├      name: ReadEndPoint
│             └ properties
│                ├ Addresses: string
│                ├ AddressesList: Array<string>
│                ├ Ports: string
│                └ PortsList: Array<string>
├[+] service aws-elementalinference
│ ├      capitalized: ElementalInference
│ │      cloudFormationNamespace: AWS::ElementalInference
│ │      name: aws-elementalinference
│ │      shortName: elementalinference
│ └ resources
│    └ resource AWS::ElementalInference::Feed
│      ├      name: Feed
│      │      cloudFormationType: AWS::ElementalInference::Feed
│      │      documentation: Represents a feed that receives media for inference processing
│      │      tagInformation: {"tagPropertyName":"Tags","variant":"map"}
│      │      arnTemplate: arn:${Partition}:elemental-inference:${Region}:${Account}:feed/${Id}
│      │      primaryIdentifier: ["Id"]
│      ├ properties
│      │  ├ Name: string (required)
│      │  ├ Outputs: Array<GetOutput> (required)
│      │  └ Tags: Map<string, string>
│      ├ attributes
│      │  ├ Arn: string
│      │  ├ DataEndpoints: Array<string>
│      │  └ Id: string
│      └ types
│         ├ type ClippingConfig
│         │ ├      name: ClippingConfig
│         │ └ properties
│         │    └ CallbackMetadata: string
│         ├ type GetOutput
│         │ ├      name: GetOutput
│         │ └ properties
│         │    ├ Name: string (required)
│         │    ├ OutputConfig: OutputConfig (required)
│         │    ├ Status: string<ENABLED|DISABLED> (required)
│         │    └ Description: string
│         └ type OutputConfig
│           ├      name: OutputConfig
│           └ properties
│              ├ Cropping: json
│              └ Clipping: ClippingConfig
├[~] service aws-gameliftstreams
│ └ resources
│    └[~]  resource AWS::GameLiftStreams::StreamGroup
│       └ types
│          ├[~] type LocationConfiguration
│          │ └ properties
│          │    └[+] VpcTransitConfiguration: VpcTransitConfiguration
│          └[+]  type VpcTransitConfiguration
│             ├      name: VpcTransitConfiguration
│             └ properties
│                ├ VpcId: string (required)
│                └ Ipv4CidrBlocks: Array<string> (required)
├[~] service aws-glue
│ └ resources
│    ├[+]  resource AWS::Glue::Catalog
│    │  ├      name: Catalog
│    │  │      cloudFormationType: AWS::Glue::Catalog
│    │  │      documentation: Creates a catalog in the Glue Data Catalog.
│    │  │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │  │      primaryIdentifier: ["ResourceArn"]
│    │  ├ properties
│    │  │  ├ Name: string (required, immutable)
│    │  │  ├ Description: string
│    │  │  ├ Parameters: Map<string, string>
│    │  │  ├ FederatedCatalog: FederatedCatalog
│    │  │  ├ TargetRedshiftCatalog: TargetRedshiftCatalog
│    │  │  ├ CatalogProperties: CatalogProperties
│    │  │  ├ CreateTableDefaultPermissions: Array<PrincipalPermissions>
│    │  │  ├ CreateDatabaseDefaultPermissions: Array<PrincipalPermissions>
│    │  │  ├ AllowFullTableExternalDataAccess: string<True|False>
│    │  │  ├ OverwriteChildResourcePermissionsWithDefault: string<Accept|Deny>
│    │  │  └ Tags: Array<tag>
│    │  ├ attributes
│    │  │  ├ CatalogId: string
│    │  │  ├ ResourceArn: string
│    │  │  ├ CreateTime: integer
│    │  │  ├ UpdateTime: integer
│    │  │  ├ CatalogProperties.DataLakeAccessProperties.ManagedWorkgroupName: string
│    │  │  ├ CatalogProperties.DataLakeAccessProperties.ManagedWorkgroupStatus: string
│    │  │  ├ CatalogProperties.DataLakeAccessProperties.RedshiftDatabaseName: string
│    │  │  └ CatalogProperties.CustomProperties: Map<string, string>
│    │  └ types
│    │     ├ type CatalogProperties
│    │     │ ├      documentation: A structure that specifies data lake access properties and other custom properties.
│    │     │ │      name: CatalogProperties
│    │     │ └ properties
│    │     │    ├ DataLakeAccessProperties: DataLakeAccessProperties
│    │     │    └ CustomProperties: Map<string, string>
│    │     ├ type DataLakeAccessProperties
│    │     │ ├      documentation: Data lake access properties for the catalog.
│    │     │ │      name: DataLakeAccessProperties
│    │     │ └ properties
│    │     │    ├ DataLakeAccess: boolean
│    │     │    ├ DataTransferRole: string
│    │     │    ├ KmsKey: string
│    │     │    ├ CatalogType: string
│    │     │    ├ ManagedWorkgroupName: string
│    │     │    ├ ManagedWorkgroupStatus: string
│    │     │    ├ RedshiftDatabaseName: string
│    │     │    └ AllowFullTableExternalDataAccess: string<True|False>
│    │     ├ type DataLakePrincipal
│    │     │ ├      documentation: The Lake Formation principal.
│    │     │ │      name: DataLakePrincipal
│    │     │ └ properties
│    │     │    └ DataLakePrincipalIdentifier: string
│    │     ├ type FederatedCatalog
│    │     │ ├      documentation: A FederatedCatalog structure that references an entity outside the Glue Data Catalog.
│    │     │ │      name: FederatedCatalog
│    │     │ └ properties
│    │     │    ├ Identifier: string
│    │     │    └ ConnectionName: string
│    │     ├ type PrincipalPermissions
│    │     │ ├      documentation: Permissions granted to a principal.
│    │     │ │      name: PrincipalPermissions
│    │     │ └ properties
│    │     │    ├ Principal: DataLakePrincipal
│    │     │    └ Permissions: Array<string<ALL|SELECT|ALTER|DROP|DELETE|INSERT|CREATE_DATABASE|CREATE_TABLE|DATA_LOCATION_ACCESS>>
│    │     └ type TargetRedshiftCatalog
│    │       ├      documentation: A structure that describes a target catalog for resource linking.
│    │       │      name: TargetRedshiftCatalog
│    │       └ properties
│    │          └ CatalogArn: string (required)
│    └[~]  resource AWS::Glue::SecurityConfiguration
│       └ types
│          └[~] type EncryptionConfiguration
│            └ properties
│               └ S3Encryptions: - json ⇐ Array<S3Encryption>
│                                + Array<S3Encryption>
├[~] service aws-lakeformation
│ └ resources
│    └[~]  resource AWS::LakeFormation::DataLakeSettings
│       └ properties
│          ├ Admins: - json ⇐ Array<DataLakePrincipal>
│          │         + Array<DataLakePrincipal>
│          ├ CreateDatabaseDefaultPermissions: - json ⇐ Array<PrincipalPermissions>
│          │                                   + Array<PrincipalPermissions>
│          ├ CreateTableDefaultPermissions: - json ⇐ Array<PrincipalPermissions>
│          │                                + Array<PrincipalPermissions>
│          ├ ExternalDataFilteringAllowList: - json ⇐ Array<DataLakePrincipal>
│          │                                 + Array<DataLakePrincipal>
│          └ ReadOnlyAdmins: - json
│                            + Array<DataLakePrincipal>
├[~] service aws-logs
│ └ resources
│    └[~]  resource AWS::Logs::ScheduledQuery
│       └ attributes
│          └ LastExecutionStatus: - string<InvalidQuery|Complete|Failed|Timeout>
│                                 + string<Pending|InvalidQuery|Complete|Failed|Timeout>
├[~] service aws-mediaconnect
│ └ resources
│    ├[~]  resource AWS::MediaConnect::Flow
│    │  ├      - tagInformation: undefined
│    │  │      + tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │  ├ properties
│    │  │  ├[+] EncodingConfig: EncodingConfig
│    │  │  ├ FlowSize: - string<MEDIUM|LARGE>
│    │  │  │           + string<MEDIUM|LARGE|LARGE_4X>
│    │  │  └[+] Tags: Array<tag>
│    │  └ types
│    │     ├[+]  type EncodingConfig
│    │     │  ├      name: EncodingConfig
│    │     │  └ properties
│    │     │     ├ EncodingProfile: string<DISTRIBUTION_H264_DEFAULT|CONTRIBUTION_H264_DEFAULT>
│    │     │     └ VideoMaxBitrate: integer
│    │     ├[~] type MediaStream
│    │     │ └ properties
│    │     │    └[+] Tags: Array<tag>
│    │     ├[+]  type NdiSourceSettings
│    │     │  ├      name: NdiSourceSettings
│    │     │  └ properties
│    │     │     └ SourceName: string
│    │     ├[~] type Source
│    │     │ └ properties
│    │     │    ├[+] NdiSourceSettings: NdiSourceSettings
│    │     │    ├ Protocol: - string<zixi-push|rtp-fec|rtp|rist|fujitsu-qos|srt-listener|srt-caller|st2110-jpegxs|cdi>
│    │     │    │           + string<zixi-push|rtp-fec|rtp|rist|srt-listener|srt-caller|st2110-jpegxs|cdi|ndi-speed-hq>
│    │     │    └[+] Tags: Array<tag>
│    │     └[~] type VpcInterface
│    │       └ properties
│    │          └[+] Tags: Array<tag>
│    ├[~]  resource AWS::MediaConnect::FlowEntitlement
│    │  ├      - tagInformation: undefined
│    │  │      + tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │  └ properties
│    │     ├ FlowArn: - string (required)
│    │     │          + string (required, immutable)
│    │     └[+] Tags: Array<tag>
│    ├[~]  resource AWS::MediaConnect::FlowOutput
│    │  ├      - tagInformation: undefined
│    │  │      + tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │  └ properties
│    │     ├ FlowArn: - string (required)
│    │     │          + string (required, immutable)
│    │     ├ Protocol: - string<zixi-push|rtp-fec|rtp|zixi-pull|rist|fujitsu-qos|srt-listener|srt-caller|st2110-jpegxs|cdi|ndi-speed-hq>
│    │     │           + string<zixi-push|rtp-fec|rtp|zixi-pull|rist|srt-listener|srt-caller|st2110-jpegxs|cdi|ndi-speed-hq>
│    │     └[+] Tags: Array<tag>
│    └[~]  resource AWS::MediaConnect::FlowSource
│       ├      - tagInformation: undefined
│       │      + tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│       └ properties
│          ├ EntitlementArn: - string
│          │                 + string (deprecated=WARN)
│          ├ FlowArn: - string
│          │          + string (required, immutable)
│          ├ Protocol: - string<zixi-push|rtp-fec|rtp|rist|srt-listener|srt-caller>
│          │           + string<zixi-push|rtp-fec|rtp|rist|srt-listener|srt-caller> (immutable)
│          ├ SenderControlPort: - integer
│          │                    + integer (deprecated=WARN)
│          ├ SenderIpAddress: - string
│          │                  + string (deprecated=WARN)
│          └[+] Tags: Array<tag>
├[~] service aws-medialive
│ └ resources
│    └[~]  resource AWS::MediaLive::Channel
│       ├ properties
│       │  └[+] InferenceSettings: InferenceSettings
│       └ types
│          └[+]  type InferenceSettings
│             ├      name: InferenceSettings
│             └ properties
│                └ FeedArn: string
├[~] service aws-networkfirewall
│ └ resources
│    └[~]  resource AWS::NetworkFirewall::RuleGroup
│       └      - arnTemplate: arn:${Partition}:network-firewall:${Region}:${Account}:stateful-rulegroup/${Name}
│              + arnTemplate: arn:${Partition}:network-firewall:${Region}:${Account}:stateless-rulegroup/${Name}
├[~] service aws-observabilityadmin
│ └ resources
│    └[+]  resource AWS::ObservabilityAdmin::TelemetryEnrichment
│       ├      name: TelemetryEnrichment
│       │      cloudFormationType: AWS::ObservabilityAdmin::TelemetryEnrichment
│       │      documentation: AWS::ObservabilityAdmin::TelemetryEnrichment cloudformation resource enables the resource tags for telemetry feature in CloudWatch to enrich infrastructure metrics with AWS resource tags. For more details: https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/resource-tags-for-telemetry.html
│       │      primaryIdentifier: ["Scope"]
│       ├ properties
│       │  └ Scope: string<ACCOUNT> (immutable)
│       └ attributes
│          └ Status: string<RUNNING|STOPPED|IMPAIRED>
├[~] service aws-odb
│ └ resources
│    ├[~]  resource AWS::ODB::CloudAutonomousVmCluster
│    │  ├ properties
│    │  │  └[+] IamRoles: Array<IamRole>
│    │  └ types
│    │     └[+]  type IamRole
│    │        ├      documentation: An AWS Identity and Access Management (IAM) service role associated with the Autonomous VM cluster.
│    │        │      name: IamRole
│    │        └ properties
│    │           ├ AwsIntegration: string
│    │           ├ IamRoleArn: string
│    │           └ Status: string
│    ├[~]  resource AWS::ODB::CloudVmCluster
│    │  ├ properties
│    │  │  └[+] IamRoles: Array<IamRole>
│    │  └ types
│    │     └[+]  type IamRole
│    │        ├      documentation: An AWS Identity and Access Management (IAM) service role associated with the VM cluster.
│    │        │      name: IamRole
│    │        └ properties
│    │           ├ AwsIntegration: string
│    │           ├ IamRoleArn: string
│    │           └ Status: string
│    ├[~]  resource AWS::ODB::OdbNetwork
│    │  ├ properties
│    │  │  ├[+] CrossRegionS3RestoreSources: Array<string>
│    │  │  ├[+] KmsAccess: string<ENABLED|DISABLED>
│    │  │  ├[+] KmsPolicyDocument: string
│    │  │  ├[+] StsAccess: string<ENABLED|DISABLED>
│    │  │  └[+] StsPolicyDocument: string
│    │  └ types
│    │     ├[+]  type CrossRegionS3RestoreSourcesAccess
│    │     │  ├      documentation: The configuration access for the cross-Region Amazon S3 database restore source for the ODB network.
│    │     │  │      name: CrossRegionS3RestoreSourcesAccess
│    │     │  └ properties
│    │     │     ├ Status: string<ENABLED|ENABLING|DISABLED|DISABLING>
│    │     │     ├ Ipv4Addresses: Array<string>
│    │     │     └ Region: string
│    │     ├[+]  type KmsAccess
│    │     │  ├      documentation: The AWS Key Management Service (KMS) access configuration.
│    │     │  │      name: KmsAccess
│    │     │  └ properties
│    │     │     ├ Status: string<ENABLED|ENABLING|DISABLED|DISABLING>
│    │     │     ├ Ipv4Addresses: Array<string>
│    │     │     ├ DomainName: string
│    │     │     └ KmsPolicyDocument: string
│    │     ├[~] type ManagedServices
│    │     │ └ properties
│    │     │    ├[+] CrossRegionS3RestoreSourcesAccess: Array<CrossRegionS3RestoreSourcesAccess>
│    │     │    ├[+] KmsAccess: KmsAccess
│    │     │    └[+] StsAccess: StsAccess
│    │     └[+]  type StsAccess
│    │        ├      documentation: The AWS Security Token Service (STS) access configuration.
│    │        │      name: StsAccess
│    │        └ properties
│    │           ├ Status: string<ENABLED|ENABLING|DISABLED|DISABLING>
│    │           ├ Ipv4Addresses: Array<string>
│    │           ├ DomainName: string
│    │           └ StsPolicyDocument: string
│    └[~]  resource AWS::ODB::OdbPeeringConnection
│       └ properties
│          └[+] PeerNetworkRouteTableIds: Array<string> (immutable)
├[~] service aws-opensearchserverless
│ └ resources
│    └[~]  resource AWS::OpenSearchServerless::Collection
│       ├ properties
│       │  └[+] VectorOptions: VectorOptions (immutable)
│       └ types
│          └[+]  type VectorOptions
│             ├      documentation: Vector search configuration options for the collection
│             │      name: VectorOptions
│             └ properties
│                └ ServerlessVectorAcceleration: string<ENABLED|DISABLED|ALLOWED> (immutable)
├[~] service aws-opensearchservice
│ └ resources
│    └[~]  resource AWS::OpenSearchService::Domain
│       ├ properties
│       │  └[+] DeploymentStrategyOptions: DeploymentStrategyOptions
│       └ types
│          └[+]  type DeploymentStrategyOptions
│             ├      name: DeploymentStrategyOptions
│             └ properties
│                └ DeploymentStrategy: string<Default|CapacityOptimized>
├[~] service aws-ram
│ └ resources
│    └[~]  resource AWS::RAM::Permission
│       └      - arnTemplate: arn:${Partition}:ram::${Account}:permission/${ResourcePath}
│              + arnTemplate: arn:${Partition}:ram:${Region}:${Account}:permission/${ResourcePath}
├[+] service aws-route53globalresolver
│ ├      capitalized: Route53GlobalResolver
│ │      cloudFormationNamespace: AWS::Route53GlobalResolver
│ │      name: aws-route53globalresolver
│ │      shortName: route53globalresolver
│ └ resources
│    ├ resource AWS::Route53GlobalResolver::AccessSource
│    │ ├      name: AccessSource
│    │ │      cloudFormationType: AWS::Route53GlobalResolver::AccessSource
│    │ │      documentation: Resource schema for AWS::Route53GlobalResolver::AccessSource
│    │ │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ │      arnTemplate: arn:${Partition}:route53globalresolver::${Account}:access-source/${Id}
│    │ │      primaryIdentifier: ["AccessSourceId"]
│    │ ├ properties
│    │ │  ├ Cidr: string (required)
│    │ │  ├ IpAddressType: string<IPV4|IPV6>
│    │ │  ├ Name: string
│    │ │  ├ DnsViewId: string (required, immutable)
│    │ │  ├ Protocol: string<DO53|DOH|DOT> (required)
│    │ │  ├ ClientToken: string (immutable)
│    │ │  └ Tags: Array<tag>
│    │ └ attributes
│    │    ├ Arn: string
│    │    ├ AccessSourceId: string
│    │    ├ CreatedAt: string
│    │    ├ UpdatedAt: string
│    │    └ Status: string<CREATING|OPERATIONAL|UPDATING|DELETING>
│    ├ resource AWS::Route53GlobalResolver::AccessToken
│    │ ├      name: AccessToken
│    │ │      cloudFormationType: AWS::Route53GlobalResolver::AccessToken
│    │ │      documentation: Resource schema for AWS::Route53GlobalResolver::AccessToken
│    │ │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ │      arnTemplate: arn:${Partition}:route53globalresolver::${Account}:access-token/${Id}
│    │ │      primaryIdentifier: ["AccessTokenId"]
│    │ ├ properties
│    │ │  ├ Name: string
│    │ │  ├ DnsViewId: string (required, immutable)
│    │ │  ├ ExpiresAt: string (immutable)
│    │ │  ├ ClientToken: string (immutable)
│    │ │  └ Tags: Array<tag>
│    │ └ attributes
│    │    ├ Arn: string
│    │    ├ AccessTokenId: string
│    │    ├ CreatedAt: string
│    │    ├ UpdatedAt: string
│    │    ├ Status: string<CREATING|OPERATIONAL|DELETING>
│    │    ├ Value: string
│    │    └ GlobalResolverId: string
│    ├ resource AWS::Route53GlobalResolver::DnsView
│    │ ├      name: DnsView
│    │ │      cloudFormationType: AWS::Route53GlobalResolver::DnsView
│    │ │      documentation: Resource schema for AWS::Route53GlobalResolver::DnsView
│    │ │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ │      arnTemplate: arn:${Partition}:route53globalresolver::${Account}:dns-view/${Id}
│    │ │      primaryIdentifier: ["DnsViewId"]
│    │ ├ properties
│    │ │  ├ Name: string (required)
│    │ │  ├ Description: string
│    │ │  ├ GlobalResolverId: string (required, immutable)
│    │ │  ├ DnssecValidation: string<ENABLED|DISABLED>
│    │ │  ├ EdnsClientSubnet: string<ENABLED|DISABLED>
│    │ │  ├ FirewallRulesFailOpen: string<ENABLED|DISABLED>
│    │ │  ├ ClientToken: string (immutable)
│    │ │  └ Tags: Array<tag>
│    │ └ attributes
│    │    ├ Arn: string
│    │    ├ DnsViewId: string
│    │    ├ CreatedAt: string
│    │    ├ UpdatedAt: string
│    │    └ Status: string<CREATING|OPERATIONAL|UPDATING|ENABLING|DISABLING|DISABLED|DELETING>
│    ├ resource AWS::Route53GlobalResolver::FirewallDomainList
│    │ ├      name: FirewallDomainList
│    │ │      cloudFormationType: AWS::Route53GlobalResolver::FirewallDomainList
│    │ │      documentation: Resource schema for AWS::Route53GlobalResolver::FirewallDomainList
│    │ │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ │      arnTemplate: arn:${Partition}:route53globalresolver::${Account}:firewall-domain-list/${Id}
│    │ │      primaryIdentifier: ["FirewallDomainListId"]
│    │ ├ properties
│    │ │  ├ Name: string (required, immutable)
│    │ │  ├ Description: string (immutable)
│    │ │  ├ GlobalResolverId: string (required, immutable)
│    │ │  ├ Domains: Array<string>
│    │ │  ├ DomainFileUrl: string
│    │ │  ├ ClientToken: string (immutable)
│    │ │  └ Tags: Array<tag>
│    │ └ attributes
│    │    ├ Arn: string
│    │    ├ FirewallDomainListId: string
│    │    ├ DomainCount: integer
│    │    ├ CreatedAt: string
│    │    ├ UpdatedAt: string
│    │    ├ Status: string<CREATING|OPERATIONAL|UPDATING|DELETING>
│    │    └ StatusMessage: string
│    ├ resource AWS::Route53GlobalResolver::FirewallRule
│    │ ├      name: FirewallRule
│    │ │      cloudFormationType: AWS::Route53GlobalResolver::FirewallRule
│    │ │      documentation: Resource schema for AWS::Route53GlobalResolver::FirewallRule
│    │ │      primaryIdentifier: ["FirewallRuleId"]
│    │ ├ properties
│    │ │  ├ Name: string (required)
│    │ │  ├ Description: string
│    │ │  ├ Action: string<ALLOW|ALERT|BLOCK> (required)
│    │ │  ├ BlockResponse: string<NODATA|NXDOMAIN|OVERRIDE>
│    │ │  ├ BlockOverrideDnsType: string<CNAME>
│    │ │  ├ BlockOverrideDomain: string
│    │ │  ├ BlockOverrideTtl: integer
│    │ │  ├ ConfidenceThreshold: string<LOW|MEDIUM|HIGH>
│    │ │  ├ DnsAdvancedProtection: string<DGA|DNS_TUNNELING|DICTIONARY_DGA>
│    │ │  ├ FirewallDomainListId: string (immutable)
│    │ │  ├ Priority: integer
│    │ │  ├ DnsViewId: string (required, immutable)
│    │ │  ├ QType: string (immutable)
│    │ │  └ ClientToken: string (immutable)
│    │ └ attributes
│    │    ├ FirewallRuleId: string
│    │    ├ CreatedAt: string
│    │    ├ UpdatedAt: string
│    │    ├ Status: string<CREATING|OPERATIONAL|UPDATING|DELETING>
│    │    └ QueryType: string
│    ├ resource AWS::Route53GlobalResolver::GlobalResolver
│    │ ├      name: GlobalResolver
│    │ │      cloudFormationType: AWS::Route53GlobalResolver::GlobalResolver
│    │ │      documentation: Resource schema for AWS::Route53GlobalResolver::GlobalResolver
│    │ │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ │      arnTemplate: arn:${Partition}:route53globalresolver::${Account}:global-resolver/${Id}
│    │ │      vendedLogs: [{"permissionsVersion":"V2","logType":"GLOBAL_RESOLVER_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"mandatoryFields":["action_id","activity_id","category_uid","class_uid","cloud","metadata","severity_id","src_endpoint","time","type_uid"],"optionalFields":["action_name","activity_name","answers","category_name","class_name","connection_info","duration","end_time","enrichments","message","query","query_time","rcode","rcode_id","response_time","severity","start_time","status","status_id","type_name"]}]
│    │ │      primaryIdentifier: ["GlobalResolverId"]
│    │ ├ properties
│    │ │  ├ Name: string (required)
│    │ │  ├ Description: string
│    │ │  ├ Regions: Array<string> (required, immutable)
│    │ │  ├ ObservabilityRegion: string
│    │ │  ├ IpAddressType: string<IPV4|DUAL_STACK>
│    │ │  ├ ClientToken: string (immutable)
│    │ │  └ Tags: Array<tag>
│    │ └ attributes
│    │    ├ Arn: string
│    │    ├ GlobalResolverId: string
│    │    ├ DnsName: string
│    │    ├ IPv4Addresses: Array<string>
│    │    ├ IPv6Addresses: Array<string>
│    │    ├ CreatedAt: string
│    │    ├ UpdatedAt: string
│    │    └ Status: string<CREATING|OPERATIONAL|UPDATING|DELETING>
│    └ resource AWS::Route53GlobalResolver::HostedZoneAssociation
│      ├      name: HostedZoneAssociation
│      │      cloudFormationType: AWS::Route53GlobalResolver::HostedZoneAssociation
│      │      documentation: Resource schema for AWS::Route53GlobalResolver::HostedZoneAssociation
│      │      primaryIdentifier: ["HostedZoneAssociationId"]
│      ├ properties
│      │  ├ Name: string (required)
│      │  ├ HostedZoneId: string (required, immutable)
│      │  └ ResourceArn: string (required, immutable)
│      └ attributes
│         ├ HostedZoneAssociationId: string
│         ├ HostedZoneName: string
│         ├ CreatedAt: string
│         ├ UpdatedAt: string
│         └ Status: string<CREATING|OPERATIONAL|DELETING>
├[~] service aws-s3
│ └ resources
│    └[~]  resource AWS::S3::Bucket
│       ├      - vendedLogs: [{"permissionsVersion":"V2","logType":"S3_SERVER_ACCESS_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","parquet"]},{"destinationType":"CWL","outputFormats":["json"]},{"destinationType":"FH","outputFormats":["json"]}],"mandatoryFields":["schema_version_id","bucket_arn","request_time","bucket_owner_id","remote_ip","requester","request_id","operation","key_name","request_uri","http_status","error_code","bytes_sent","object_size","total_duration","turn_around_duration","referer","user_agent","version_id","host_id","signature_version","cipher_suite","authentication_type","host_header","tls_version","access_point_arn","acl_required","source_region"],"optionalFields":["bucket_name"]}]
│       │      + vendedLogs: [{"permissionsVersion":"V2","logType":"S3_SERVER_ACCESS_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","parquet"]},{"destinationType":"CWL","outputFormats":["json"]},{"destinationType":"FH","outputFormats":["json"]}],"mandatoryFields":["schema_version_id","bucket_arn","request_time","bucket_owner_id","remote_ip","requester","request_id","operation","key_name","request_uri","http_status","error_code","bytes_sent_size","object_size","total_duration","turn_around_duration","referer","user_agent","version_id","host_id","signature_version","cipher_suite","authentication_type","host_header","tls_version","access_point_arn","acl_required","source_region"],"optionalFields":["bucket_name"]}]
│       ├ properties
│       │  ├[+] BucketNamePrefix: string (immutable)
│       │  └[+] BucketNamespace: string<global|account-regional> (immutable)
│       └ vendedLogs
│          └[~] logType: S3_SERVER_ACCESS_LOGS
│            └mandatoryFields:
│             ├- [schema_version_id, bucket_arn, request_time, bucket_owner_id, remote_ip, requester, request_id, operation, key_name, request_uri, http_status, error_code, bytes_sent, object_size, total_duration, turn_around_duration, referer, user_agent, version_id, host_id, signature_version, cipher_suite, authentication_type, host_header, tls_version, access_point_arn, acl_required, source_region]
│             └+ [schema_version_id, bucket_arn, request_time, bucket_owner_id, remote_ip, requester, request_id, operation, key_name, request_uri, http_status, error_code, bytes_sent_size, object_size, total_duration, turn_around_duration, referer, user_agent, version_id, host_id, signature_version, cipher_suite, authentication_type, host_header, tls_version, access_point_arn, acl_required, source_region]
├[~] service aws-servicecatalog
│ └ resources
│    └[~]  resource AWS::ServiceCatalog::StackSetConstraint
│       └ attributes
│          └ Id: (documentation changed)
├[~] service aws-servicediscovery
│ └ resources
│    └[~]  resource AWS::ServiceDiscovery::Service
│       └ properties
│          └ ServiceAttributes: - json
│                               + Map<string, string> ⇐ json
├[~] service aws-verifiedpermissions
│ └ resources
│    └[~]  resource AWS::VerifiedPermissions::PolicyStore
│       └ types
│          └[~] type SchemaDefinition
│            └ properties
│               └[-] CedarFormat: string
├[~] service aws-wisdom
│ └ resources
│    └[~]  resource AWS::Wisdom::Assistant
│       ├      - vendedLogs: [{"permissionsVersion":"V2","logType":"EVENT_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"optionalFields":["assistant_id","event_timestamp","event_type","session_id","session_name","recommendation_id","recommendation","is_recommendation_useful","relevance_score","recommendation_title","recommendation_sources","intent_id","intent","intent_clicked","utterance","prompt","response","session_event_id","session_event_ids","issue_probability","is_valid_trigger","prompt_type","completion","model_id","connect_user_arn","conversation_session_data","session_message_id","parsed_response","answer_id","generation_id","ai_agent_id","ai_agent_name","ai_guardrail_id","name","ai_guardrail","content","action","action_reason","outputs","assessments","usage","guardrail_coverage","ai_agent_version"]}]
│       │      + vendedLogs: [{"permissionsVersion":"V2","logType":"EVENT_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"optionalFields":["assistant_id","event_timestamp","event_type","session_id","session_name","recommendation_id","recommendation","is_recommendation_useful","relevance_score","recommendation_title","recommendation_sources","intent_id","intent","intent_clicked","utterance","prompt","response","session_event_id","session_event_ids","issue_probability","is_valid_trigger","prompt_type","completion","model_id","connect_user_arn","conversation_session_data","session_message_id","parsed_response","answer_id","generation_id","ai_agent_id","ai_agent_name","ai_guardrail_id","name","ai_guardrail","content","action","action_reason","outputs","assessments","usage","guardrail_coverage","ai_agent_version","guardrail_blocked","participant","values","orchestration_id","ai_agent_orchestration_use_case","orchestration_iteration","orchestration_error"]}]
│       └ vendedLogs
│          └[~] logType: EVENT_LOGS
│            └optionalFields:
│             ├- [assistant_id, event_timestamp, event_type, session_id, session_name, recommendation_id, recommendation, is_recommendation_useful, relevance_score, recommendation_title, recommendation_sources, intent_id, intent, intent_clicked, utterance, prompt, response, session_event_id, session_event_ids, issue_probability, is_valid_trigger, prompt_type, completion, model_id, connect_user_arn, conversation_session_data, session_message_id, parsed_response, answer_id, generation_id, ai_agent_id, ai_agent_name, ai_guardrail_id, name, ai_guardrail, content, action, action_reason, outputs, assessments, usage, guardrail_coverage, ai_agent_version]
│             └+ [assistant_id, event_timestamp, event_type, session_id, session_name, recommendation_id, recommendation, is_recommendation_useful, relevance_score, recommendation_title, recommendation_sources, intent_id, intent, intent_clicked, utterance, prompt, response, session_event_id, session_event_ids, issue_probability, is_valid_trigger, prompt_type, completion, model_id, connect_user_arn, conversation_session_data, session_message_id, parsed_response, answer_id, generation_id, ai_agent_id, ai_agent_name, ai_guardrail_id, name, ai_guardrail, content, action, action_reason, outputs, assessments, usage, guardrail_coverage, ai_agent_version, guardrail_blocked, participant, values, orchestration_id, ai_agent_orchestration_use_case, orchestration_iteration, orchestration_error]
├[~] service aws-workspacesinstances
│ └ resources
│    └[~]  resource AWS::WorkspacesInstances::WorkspaceInstance
│       └ types
│          ├[-]  type InstanceMarketOptionsRequest
│          │  ├      name: InstanceMarketOptionsRequest
│          │  └ properties
│          │     ├ MarketType: string<spot|capacity-block>
│          │     └ SpotOptions: SpotMarketOptions
│          ├[~] type ManagedInstance
│          │ └ properties
│          │    └[-] InstanceMarketOptions: InstanceMarketOptionsRequest
│          └[-]  type SpotMarketOptions
│             ├      name: SpotMarketOptions
│             └ properties
│                ├ InstanceInterruptionBehavior: string<hibernate|stop>
│                ├ MaxPrice: string
│                ├ SpotInstanceType: string<one-time|persistent>
│                └ ValidUntilUtc: string
└[~] service aws-xray
  └ resources
     └[~]  resource AWS::XRay::SamplingRule
        └ types
           ├[+]  type SamplingRateBoost
           │  ├      name: SamplingRateBoost
           │  └ properties
           │     ├ MaxRate: number (required)
           │     └ CooldownWindowMinutes: integer (required)
           ├[~] type SamplingRule
           │ └ properties
           │    └[+] SamplingRateBoost: SamplingRateBoost
           └[~] type SamplingRuleUpdate
             └ properties
                └[+] SamplingRateBoost: SamplingRateBoost

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-03-26 21:35 UTC · Rule: default-squash
• ✅ Checks passed · in-place
• ✅ Merged — 2026-03-26 22:06 UTC · at ff3637be2e9ee52a958fb85387977e2624307135

This pull request spent 30 minutes 46 seconds in the queue, including 30 minutes 36 seconds running CI.

Required conditions to merge

• #approved-reviews-by >= 1 [🛡 GitHub branch protection]
  • feat: update L1 CloudFormation resource definitions #37332
• #changes-requested-reviews-by = 0 [🛡 GitHub branch protection]
  • feat: update L1 CloudFormation resource definitions #37332
• any of [🛡 GitHub branch protection]:
  • check-success = validate-pr
  • check-neutral = validate-pr
  • check-skipped = validate-pr
• any of [🛡 GitHub branch protection]:
  • check-success = build
  • check-neutral = build
  • check-skipped = build

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[github-actions]

Comments on closed issues and PRs are hard for our team to see.
If you need help, please open a new issue that references this one.