CloudFormation Changelog

Changes to the CloudFormation resource specification.

ADDED: 9
REMOVED: 2
MODIFIED: 24
DOCUMENTATION: 0

New resource types

AWS::BcmPricingCalculator::BillEstimateLink to AWS::BcmPricingCalculator::BillEstimate

 Type: AWS::BcmPricingCalculator::BillEstimate
 Properties:
   BillScenarioId: String
   ExpiresAt: String
   Tags:
     - Value: String
       Key: String
   Name: String
 Fn::GetAtt:
   Status: String
   BillInterval.Start: String
   BillInterval.End: String
   BillInterval:
     Start: String
     End: String
   CostCategoryGroupSharingPreferenceEffectiveDate: String
   CreatedAt: String
   CostCategoryGroupSharingPreferenceArn: String
   Id: String
   GroupSharingPreference: String
   Arn: String

AWS::Bedrock::RetrievalInstructionLink to AWS::Bedrock::RetrievalInstruction

 Type: AWS::Bedrock::RetrievalInstruction
 Properties:
   Description: String
   CustomerEncryptionKeyArn: String
   Instruction:
     RetrievalGuidance: String
     Persona: String
     AnswerFormat: String
     AnswerPolicy: String
   Tags:
     - Value: String
       Key: String
   Name: String
 Fn::GetAtt:
   Status: String
   LastTransitionStatus: String
   CreatedAt: String
   RetrievalInstructionId: String
   Arn: String
   UpdatedAt: String

AWS::EC2::DeclarativePoliciesReportLink to AWS::EC2::DeclarativePoliciesReport

 Type: AWS::EC2::DeclarativePoliciesReport
 Properties:
   S3Bucket: String
   S3Prefix: String
   TargetId: String
   Tags:
     - Value: String
       Key: String
 Fn::GetAtt:
   Status: String
   EndTime: String
   StartTime: String
   ReportId: String
   Arn: String

AWS::EC2::ExportImageTaskLink to AWS::EC2::ExportImageTask

 Type: AWS::EC2::ExportImageTask
 Properties:
   Description: String
   ImageId: String
   Tags:
     - Value: String
       Key: String
   S3ExportLocation:
     S3Bucket: String
     S3Prefix: String
 Fn::GetAtt:
   Status: String
   ExportImageTaskId: String
   Progress: String
   Arn: String

AWS::EC2::TransitGatewayAttachmentNatConfigurationLink to AWS::EC2::TransitGatewayAttachmentNatConfiguration

 Type: AWS::EC2::TransitGatewayAttachmentNatConfiguration
 Properties:
   NatGatewaySupport: String
   NatGatewayRules:
     - MatchSourceCidr: String
       RuleNumber: Integer
       NatCidr: String
   TransitGatewayAttachmentId: String
   NatSystemRouteSupport: String
 Fn::GetAtt:
   Arn: String

AWS::ECS::GatewayLink to AWS::ECS::Gateway

 Type: AWS::ECS::Gateway
 Properties:
   InfrastructureRoleArn: String
   Configuration:
     HostSharedAlb:
       MaxAlbCount: Integer
       Scheme: String
       TestTrafficRules:
         Header:
           Values:
             - String
           Name: String
       Port: Integer
       CurrentAlbCount: Integer
       NetworkConfiguration:
         IpAddressType: String
         Subnets:
           - String
         InboundSecurityGroup: String
       Protocol: String
       WebACLArn: String
       AccessLogs:
         Destination:
           S3:
             Bucket: String
             Prefix: String
       HttpDesync: String
   PropagateTags: String
   GatewayName: String
   DeletionProtection: Boolean
   Tags:
     - Value: String
       Key: String
 Fn::GetAtt:
   Status: String
   CreatedAt: String
   Configuration.HostSharedAlb.CurrentAlbCount: Integer
   Arn: String
   UpdatedAt: String
   AccessType: String

AWS::ECS::GatewayClusterAssociationsLink to AWS::ECS::GatewayClusterAssociations

 Type: AWS::ECS::GatewayClusterAssociations
 Properties:
   Gateway: String
   Cluster: String
 Fn::GetAtt:
   GatewayArn: String
   ClusterArn: String
   Status: String

AWS::SageMaker::ComputeQuotaLink to AWS::SageMaker::ComputeQuota

 Type: AWS::SageMaker::ComputeQuota
 Properties:
   ClusterArn: String
   ComputeQuotaTarget:
     TeamName: String
     FairShareWeight: Integer
   Description: String
   ComputeQuotaConfig:
     ResourceSharingConfig:
       BorrowLimit: Integer
       Strategy: String
       AbsoluteBorrowLimits:
         - AcceleratorPartition:
             Type: String
             Count: Integer
           VCpu: Double
           Count: Integer
           MemoryInGiB: Double
           Accelerators: Integer
           InstanceType: String
     ComputeQuotaResources:  # ComputeQuotaResourceConfig: see above
     PreemptTeamTasks: String
   ActivationState: String
   Tags:
     - Value: String
       Key: String
   Name: String
 Fn::GetAtt:
   Status: String
   ComputeQuotaArn: String
   ComputeQuotaId: String
   CreationTime: String
   LastModifiedTime: String
   ComputeQuotaVersion: Integer

AWS::SecurityHub::ActionTargetLink to AWS::SecurityHub::ActionTarget

 Type: AWS::SecurityHub::ActionTarget
 Properties:
   Description: String
   Id: String
   Name: String
 Fn::GetAtt:
   ActionTargetArn: String

Changed resource types

AWS::AppStream::StackLink to AWS::AppStream::Stack

 Type: AWS::AppStream::Stack
 Properties:
+added:   StorageConnectorAuthentication: String

AWS::AppStream::StackFleetAssociationLink to AWS::AppStream::StackFleetAssociation

 Type: AWS::AppStream::StackFleetAssociation
 Properties:
~modified:   # Update requires: Replacement → Some interruptions
   FleetName: String
~modified:   # Update requires: Replacement → Some interruptions
   StackName: String

AWS::ARCRegionSwitch::PlanLink to AWS::ARCRegionSwitch::Plan

 Type: AWS::ARCRegionSwitch::Plan
 Properties:
   Workflows:
     - Steps:
         - ExecutionBlockConfiguration:
             CustomActionLambdaConfig:
               Lambdas:
+added:                 - Payload: String
             ParallelConfig:
               Steps:  # Step: see above

AWS::BedrockAgentCore::EvaluatorLink to AWS::BedrockAgentCore::Evaluator

 Type: AWS::BedrockAgentCore::Evaluator
 Properties:
   EvaluatorConfig:
     LlmAsAJudge:
       RatingScale:
+added:         MultiDimensional:
+added:           - DimensionInstruction: String
+added:             DimensionRatingScale:
+added:               Numerical:
+added:                 - Value: Double
+added:                   Label: String
+added:                   Definition: String
+added:               Categorical:
+added:                 - Label: String
+added:                   Definition: String
+added:             DimensionName: String

AWS::BedrockAgentCore::MemoryLink to AWS::BedrockAgentCore::Memory

 Type: AWS::BedrockAgentCore::Memory
 Properties:
   MemoryStrategies:
     - CustomMemoryStrategy:
+added:         RecordExpiryDurationDays: Integer
+added:         RecordExpirySpecification:
+added:           RecordExpiryDurationDays: Integer
       EpisodicMemoryStrategy:
+added:         RecordExpiryDurationDays: Integer
+added:         RecordExpirySpecification:  # RecordExpirySpecification: see above
       SemanticMemoryStrategy:
+added:         RecordExpiryDurationDays: Integer
+added:         RecordExpirySpecification:  # RecordExpirySpecification: see above
       SummaryMemoryStrategy:
+added:         RecordExpiryDurationDays: Integer
+added:         RecordExpirySpecification:  # RecordExpirySpecification: see above
       UserPreferenceMemoryStrategy:
+added:         RecordExpiryDurationDays: Integer
+added:         RecordExpirySpecification:  # RecordExpirySpecification: see above

AWS::BedrockAgentCore::PaymentManagerLink to AWS::BedrockAgentCore::PaymentManager

 Type: AWS::BedrockAgentCore::PaymentManager
 Properties:
   AuthorizerConfiguration:
~modified:     CustomJWTAuthorizer: CustomJWTAuthorizerConfiguration → CustomJWTAuthorizer
       CustomClaims:
~modified:         - AuthorizingClaimMatchValue: AuthorizingClaimMatchValueType → AuthorizingClaimMatchValue
~modified:             ClaimMatchValue: ClaimMatchValueType → ClaimMatchValue
~modified:   # Duplicates allowed: Yes → No
   Tags:
 Fn::GetAtt:
   WorkloadIdentityDetails:
~modified:     # Required: Yes → No
     WorkloadIdentityArn: String

AWS::CloudWatch::AlarmLink to AWS::CloudWatch::Alarm

 Type: AWS::CloudWatch::Alarm
 Properties:
+added:   ActionConfiguration:
+added:     AlarmTagsPropagation:
+added:       IncludedTagKeys:
+added:         - String
+added:       ExcludedTagKeys:
+added:         - String
+added:       Enabled: Boolean

AWS::CloudWatch::CompositeAlarmLink to AWS::CloudWatch::CompositeAlarm

 Type: AWS::CloudWatch::CompositeAlarm
 Properties:
+added:   ActionConfiguration:
+added:     AlarmTagsPropagation:
+added:       IncludedTagKeys:
+added:         - String
+added:       ExcludedTagKeys:
+added:         - String
+added:       Enabled: Boolean

AWS::CloudWatch::LogAlarmLink to AWS::CloudWatch::LogAlarm

 Type: AWS::CloudWatch::LogAlarm
 Properties:
+added:   ActionConfiguration:
+added:     AlarmTagsPropagation:
+added:       IncludedTagKeys:
+added:         - String
+added:       ExcludedTagKeys:
+added:         - String
+added:       Enabled: Boolean

AWS::CodeBuild::ProjectLink to AWS::CodeBuild::Project

 Type: AWS::CodeBuild::Project
 Properties:
   BuildBatchConfig:
     Restrictions:
~modified:       # Duplicates allowed: Not specified → Yes
       ComputeTypesAllowed:
         - String
+added:       FleetsAllowed:
+added:         - String
   Cache:
~modified:     # Duplicates allowed: Not specified → Yes
     Modes:
       - String
   Environment:
     DockerServer:
~modified:       # Duplicates allowed: Not specified → Yes
       SecurityGroupIds:
         - String
~modified:     # Duplicates allowed: Not specified → Yes
     EnvironmentVariables:
~modified:   # Duplicates allowed: Not specified → Yes
   FileSystemLocations:
~modified:   # Duplicates allowed: Not specified → Yes
   SecondaryArtifacts:
~modified:   # Duplicates allowed: Not specified → Yes
   SecondarySourceVersions:
~modified:   # Duplicates allowed: Not specified → Yes
   SecondarySources:
~modified:   # Duplicates allowed: Not specified → Yes
   Tags:
   Triggers:
~modified:     FilterGroups: List of WebhookFilter → Json
     PullRequestBuildPolicy:
~modified:       # Duplicates allowed: Not specified → Yes
       ApproverRoles:
         - String
   VpcConfig:
~modified:     # Duplicates allowed: Not specified → Yes
     SecurityGroupIds:
       - String
~modified:     # Duplicates allowed: Not specified → Yes
     Subnets:
       - String

AWS::Connect::InstanceLink to AWS::Connect::Instance

 Type: AWS::Connect::Instance
 Properties:
   Attributes:
+added:     AutoMuteAgentOnHold: Boolean

AWS::DynamoDB::GlobalTableLink to AWS::DynamoDB::GlobalTable

 Type: AWS::DynamoDB::GlobalTable
 Properties:
   Replicas:
+added:     - DisassociationProtectionEnabled: Boolean
+added:   TableType: String

AWS::ECS::ServiceLink to AWS::ECS::Service

 Type: AWS::ECS::Service
 Properties:
+added:   GatewayConnectors:
+added:     - Filters:
+added:         AccessTypes:
+added:           - String
+added:       HealthCheck:
+added:         HealthCheckIntervalSeconds: Integer
+added:         Matcher:
+added:           GrpcCode: String
+added:           HttpCode: String
+added:         HealthyThresholdCount: Integer
+added:         HealthCheckPath: String
+added:         HealthCheckProtocol: String
+added:         HealthCheckPort: Integer
+added:         UnhealthyThresholdCount: Integer
+added:         HealthCheckTimeoutSeconds: Integer
+added:       PortName: String
   ServiceConnectConfiguration:
+added:     ContainerConfigurations:
+added:       - LogLevel: String

AWS::ECS::TaskDefinitionLink to AWS::ECS::TaskDefinition

 Type: AWS::ECS::TaskDefinition
 Properties:
   ContainerDefinitions:
     - ResourceRequirements:
+added:         - SharingStrategy:
+added:             NvidiaMps:
+added:               Memory: Integer
+added:               MaxComputePercent: Integer

AWS::ImageBuilder::InfrastructureConfigurationLink to AWS::ImageBuilder::InfrastructureConfiguration

 Type: AWS::ImageBuilder::InfrastructureConfiguration
 Properties:
+added:   ParentInstance:
+added:     AutoScalingGroup:
+added:       CapacityWaitTimeoutSeconds: Integer
+added:       Name: String
+added:   TerminateInstanceOnCompletion: Boolean

AWS::Lambda::NetworkConnectorLink to AWS::Lambda::NetworkConnector

 Type: AWS::Lambda::NetworkConnector
 Properties:
   Configuration:
     VpcEgressConfiguration:
+added:       ElasticIpConfiguration: Json

AWS::MediaLive::InputLink to AWS::MediaLive::Input

 Type: AWS::MediaLive::Input
 Properties:
~modified:   # Duplicates allowed: Not specified → Yes
~modified:   Destinations: List of InputDestinationRequest → List of InputDestination
+added:     Ip: String
~modified:     # Duplicates allowed: Not specified → Yes
~modified:     NetworkRoutes: List of InputRequestDestinationRoute → List of InputDestinationRoute
+added:     Port: String
+added:     Url: String
+added:     Vpc:
+added:       AvailabilityZone: String
+added:       NetworkInterfaceId: String
~modified:   # Duplicates allowed: Not specified → Yes
   InputDevices:
~modified:   # Duplicates allowed: Not specified → Yes
   InputSecurityGroups:
     - String
~modified:   # Duplicates allowed: Not specified → Yes
~modified:   MediaConnectFlows: List of MediaConnectFlowRequest → List of MediaConnectFlow
~modified:   MulticastSettings: MulticastSettingsCreateRequest → MulticastSettings
~modified:     # Duplicates allowed: Not specified → Yes
~modified:     Sources: List of MulticastSourceCreateRequest → List of MulticastSource
~modified:       # Required: No → Yes
       Url: String
   RouterSettings:
~modified:     # Update requires: No interruption → Replacement
~modified:     # Duplicates allowed: Not specified → Yes
     Destinations:
~modified:       - # Required: No → Yes
~modified:         # Update requires: No interruption → Replacement
         AvailabilityZoneName: String
+added:         RouterOutputArn: String
~modified:     # Update requires: No interruption → Replacement
     EncryptionType: String
~modified:     # Update requires: No interruption → Replacement
     SecretArn: String
~modified:   # Duplicates allowed: Not specified → Yes
   SdiSources:
     - String
   Smpte2110ReceiverGroupSettings:
~modified:     # Duplicates allowed: Not specified → Yes
     Smpte2110ReceiverGroups:
       - SdpSettings:
~modified:           # Duplicates allowed: Not specified → Yes
           AncillarySdps:
~modified:           # Duplicates allowed: Not specified → Yes
           AudioSdps:  # InputSdpLocation: see above
~modified:   # Duplicates allowed: Not specified → Yes
~modified:   Sources: List of InputSourceRequest → List of InputSource
~modified:   SrtSettings: SrtSettingsRequest → SrtSettings
~modified:     # Duplicates allowed: Not specified → Yes
~modified:     SrtCallerSources: List of SrtCallerSourceRequest → List of SrtCallerSource
~modified:       Decryption: SrtCallerDecryptionRequest → SrtCallerDecryption
~modified:     SrtListenerSettings: SrtListenerSettingsRequest → SrtListenerSettings
~modified:       Decryption: SrtListenerDecryptionRequest → SrtListenerDecryption
~modified:   Tags: Json → Map of String
   Vpc:
~modified:     # Update requires: No interruption → Replacement
~modified:     # Duplicates allowed: Not specified → Yes
     SecurityGroupIds:
       - String
~modified:     # Update requires: No interruption → Replacement
~modified:     # Duplicates allowed: Not specified → Yes
     SubnetIds:
       - String
 Fn::GetAtt:
+added:   AttachedChannels:
+added:     - String
+added:   DestinationUrls:
+added:     - String
~modified:   Destinations: List of String → List of InputDestination
+added:     StreamName: String
+added:     Ip: String
+added:     Port: String
+added:     Network: String
+added:     Vpc:  # InputDestinationVpc: see above
+added:     NetworkRoutes:
+added:       - Cidr: String
+added:         Gateway: String
+added:     StaticIpAddress: String
+added:     Url: String
+added:   Id: String
+added:   InputClass: String
+added:   InputPartnerIds:
+added:     - String
+added:   InputSourceType: String
+added:   SecurityGroups:
+added:     - String
+added:   SourceUrls:
+added:     - String
~modified:   Sources: List of String → List of InputSource
+added:     Username: String
+added:     PasswordParam: String
+added:     Url: String
+added:   State: String

AWS::NetworkFirewall::FirewallLink to AWS::NetworkFirewall::Firewall

 Type: AWS::NetworkFirewall::Firewall
 Properties:
+added:   NatGatewayMappings:
+added:     - NatGatewayId: String
+added:   NoSourcePreservation: Boolean
+added:   ProxySettings:
+added:     ListenerProperties:
+added:       - Type: String
+added:         Port: Integer
   SubnetMappings:
~modified:     - # Update requires: No interruption → Some interruptions
       IPAddressType: String
~modified:       # Update requires: No interruption → Some interruptions
       SubnetId: String
+added:   VpcEndpoint:
+added:     VpcId: String
+added:     SubnetMappings:
+added:       - IPAddressType: String
+added:         SubnetId: String
 Fn::GetAtt:
+added:   NumberOfAssociations: Integer

AWS::PCS::ComputeNodeGroupLink to AWS::PCS::ComputeNodeGroup

 Type: AWS::PCS::ComputeNodeGroup
 Properties:
   CustomLaunchTemplate:
~modified:     # Required: Yes → No
     Version: String

AWS::ResilienceHubV2::ServiceLink to AWS::ResilienceHubV2::Service

 Type: AWS::ResilienceHubV2::Service
 Properties:
+added:   DevOpsAgentConfiguration:
+added:     AgentSpaceArn: String

AWS::Route53Resolver::FirewallConfigLink to AWS::Route53Resolver::FirewallConfig

 Type: AWS::Route53Resolver::FirewallConfig
 Properties:
~modified:   # Required: No → Yes
~modified:   # Update requires: Replacement → No interruption
   FirewallFailOpen: String
~modified:   # Required: No → Yes
   ResourceId: String

AWS::SageMaker::ClusterLink to AWS::SageMaker::Cluster

 Type: AWS::SageMaker::Cluster
 Properties:
   InstanceGroups:
+added:     - ImageReleaseVersion: String

AWS::SES::ConfigurationSetEventDestinationLink to AWS::SES::ConfigurationSetEventDestination

 Type: AWS::SES::ConfigurationSetEventDestination
 Properties:
   EventDestination:
~modified:     # Update requires: No interruption → Some interruptions
     Name: String

AWS::Transfer::HostKeyLink to AWS::Transfer::HostKey

 Type: AWS::Transfer::HostKey
 Properties:
+added:   KmsKey: String
+added:   StorageType: String
 Fn::GetAtt:
+added:   SecretId: String

CloudFormation Changelog

New resource types

Changed resource types

Removed resource types

AWS::IoTEvents::DetectorModelLink to AWS::IoTEvents::DetectorModel

AWS::IoTEvents::InputLink to AWS::IoTEvents::Input