CloudFormation Changelog

Changes to the CloudFormation resource specification.

ADDED: 11
REMOVED: 0
MODIFIED: 29
DOCUMENTATION: 0

New resource types

AWS::AIOps::InvestigationGroupLink to AWS::AIOps::InvestigationGroup

 Type: AWS::AIOps::InvestigationGroup
 Properties:
   RetentionInDays: Integer
   CrossAccountConfigurations:
     - SourceRoleArn: String
   InvestigationGroupPolicy: String
   ChatbotNotificationChannels:
     - SNSTopicArn: String
       ChatConfigurationArns:
         - String
   IsCloudTrailEventHistoryEnabled: Boolean
   TagKeyBoundaries:
     - String
   EncryptionConfig:
     EncryptionConfigurationType: String
     KmsKeyId: String
   RoleArn: String
   Tags:
     - Key: String
       Value: String
   Name: String
 Fn::GetAtt:
   LastModifiedBy: String
   CreatedBy: String
   LastModifiedAt: String
   CreatedAt: String
   Arn: String

AWS::FSx::S3AccessPointAttachmentLink to AWS::FSx::S3AccessPointAttachment

 Type: AWS::FSx::S3AccessPointAttachment
 Properties:
   OpenZFSConfiguration:
     VolumeId: String
     FileSystemIdentity:
       Type: String
       PosixUser:
         Uid: Double
         SecondaryGids:
           - Gid: Double
         Gid: Double
   Type: String
   S3AccessPoint:
     Policy: Json
     ResourceARN: String
     Alias: String
     VpcConfiguration:
       VpcId: String
   Name: String
 Fn::GetAtt:
   S3AccessPoint.Alias: String
   S3AccessPoint.ResourceARN: String

AWS::MPA::ApprovalTeamLink to AWS::MPA::ApprovalTeam

 Type: AWS::MPA::ApprovalTeam
 Properties:
   ApprovalStrategy:
     MofN:
       MinApprovalsRequired: Integer
   Policies:
     - PolicyArn: String
   Description: String
   Approvers:
     - PrimaryIdentityStatus: String
       PrimaryIdentitySourceArn: String
       ApproverId: String
       PrimaryIdentityId: String
       ResponseTime: String
   Tags:
     - Key: String
       Value: String
   Name: String
 Fn::GetAtt:
   VersionId: String
   Status: String
   NumberOfApprovers: Integer
   LastUpdateTime: String
   CreationTime: String
   Arn: String
   StatusCode: String
   UpdateSessionArn: String
   StatusMessage: String

AWS::MPA::IdentitySourceLink to AWS::MPA::IdentitySource

 Type: AWS::MPA::IdentitySource
 Properties:
   IdentitySourceParameters:
     IamIdentityCenter:
       ApprovalPortalUrl: String
       InstanceArn: String
       Region: String
   Tags:
     - Key: String
       Value: String
 Fn::GetAtt:
   Status: String
   IdentitySourceArn: String
   IdentitySourceParameters.IamIdentityCenter.ApprovalPortalUrl: String
   CreationTime: String
   IdentitySourceType: String
   StatusCode: String
   StatusMessage: String

AWS::S3Tables::NamespaceLink to AWS::S3Tables::Namespace

 Type: AWS::S3Tables::Namespace
 Properties:
   TableBucketARN: String
   Namespace: String

AWS::SecurityHub::AggregatorV2Link to AWS::SecurityHub::AggregatorV2

 Type: AWS::SecurityHub::AggregatorV2
 Properties:
   RegionLinkingMode: String
   LinkedRegions:
     - String
   Tags:
     <key>: String
 Fn::GetAtt:
   AggregationRegion: String
   AggregatorV2Arn: String

AWS::SecurityHub::AutomationRuleV2Link to AWS::SecurityHub::AutomationRuleV2

 Type: AWS::SecurityHub::AutomationRuleV2
 Properties:
   Description: String
   Actions:
     - Type: String
       ExternalIntegrationConfiguration:
         ConnectorArn: String
       FindingFieldsUpdate:
         Comment: String
         StatusId: Integer
         SeverityId: Integer
   RuleStatus: String
   Criteria:
     OcsfFindingCriteria:
       CompositeFilters:
         - Operator: String
           StringFilters:
             - Filter:
                 Comparison: String
                 Value: String
               FieldName: String
           BooleanFilters:
             - Filter:
                 Value: Boolean
               FieldName: String
           DateFilters:
             - Filter:
                 DateRange:
                   Value: Double
                   Unit: String
                 Start: String
                 End: String
               FieldName: String
           NumberFilters:
             - Filter:
                 Gte: Double
                 Eq: Double
                 Lte: Double
               FieldName: String
           MapFilters:
             - Filter:
                 Comparison: String
                 Value: String
                 Key: String
               FieldName: String
       CompositeOperator: String
   RuleOrder: Double
   RuleName: String
   Tags:
     <key>: String
 Fn::GetAtt:
   RuleArn: String
   RuleId: String
   CreatedAt: String
   UpdatedAt: String

AWS::SecurityHub::HubV2Link to AWS::SecurityHub::HubV2

 Type: AWS::SecurityHub::HubV2
 Properties:
   Tags:
     <key>: String
 Fn::GetAtt:
   HubV2Arn: String
   SubscribedAt: String

AWS::WorkspacesInstances::VolumeLink to AWS::WorkspacesInstances::Volume

 Type: AWS::WorkspacesInstances::Volume
 Properties:
   SizeInGB: Integer
   SnapshotId: String
   VolumeType: String
   KmsKeyId: String
   TagSpecifications:
     - ResourceType: String
       Tags:
         - Key: String
           Value: String
   Encrypted: Boolean
   AvailabilityZone: String
   Throughput: Integer
   Iops: Integer
 Fn::GetAtt:
   VolumeId: String

AWS::WorkspacesInstances::VolumeAssociationLink to AWS::WorkspacesInstances::VolumeAssociation

 Type: AWS::WorkspacesInstances::VolumeAssociation
 Properties:
   VolumeId: String
   WorkspaceInstanceId: String
   Device: String
   DisassociateMode: String

AWS::WorkspacesInstances::WorkspaceInstanceLink to AWS::WorkspacesInstances::WorkspaceInstance

 Type: AWS::WorkspacesInstances::WorkspaceInstance
 Properties:
   ManagedInstance:
     HibernationOptions:
       Configured: Boolean
     MetadataOptions:
       HttpPutResponseHopLimit: Integer
       HttpProtocolIpv6: String
       HttpTokens: String
       InstanceMetadataTags: String
       HttpEndpoint: String
     NetworkPerformanceOptions:
       BandwidthWeighting: String
     TagSpecifications:
       - ResourceType: String
         Tags:
           - Key: String
             Value: String
     UserData: String
     DisableApiStop: Boolean
     CpuOptions:
       ThreadsPerCore: Integer
       CoreCount: Integer
     BlockDeviceMappings:
       - Ebs:
           VolumeType: String
           KmsKeyId: String
           Encrypted: Boolean
           Throughput: Integer
           Iops: Integer
           VolumeSize: Integer
         NoDevice: String
         VirtualName: String
         DeviceName: String
     MaintenanceOptions:
       AutoRecovery: String
     PrivateDnsNameOptions:
       EnableResourceNameDnsARecord: Boolean
       HostnameType: String
       EnableResourceNameDnsAAAARecord: Boolean
     IamInstanceProfile:
       Name: String
     EbsOptimized: Boolean
     KeyName: String
     Placement:
       GroupName: String
       Tenancy: String
       AvailabilityZone: String
     EnclaveOptions:
       Enabled: Boolean
     NetworkInterfaces:
       - Description: String
         DeviceIndex: Integer
         Groups:
           - String
         SubnetId: String
     ImageId: String
     InstanceType: String
     CreditSpecification:
       CpuCredits: String
     Monitoring:
       Enabled: Boolean
   Tags:  # Tag: see above
 Fn::GetAtt:
   EC2ManagedInstance.InstanceId: String
   WorkspaceInstanceId: String
   EC2ManagedInstance:
     InstanceId: String
   ProvisionState: String

Changed resource types

AWS::AccessAnalyzer::AnalyzerLink to AWS::AccessAnalyzer::Analyzer

 Type: AWS::AccessAnalyzer::Analyzer
 Properties:
   AnalyzerConfiguration:
+added:     InternalAccessConfiguration:
+added:       InternalAccessAnalysisRule:
+added:         Inclusions:
+added:           - ResourceTypes:
+added:               - String
+added:             AccountIds:
+added:               - String
+added:             ResourceArns:
+added:               - String

AWS::Amplify::AppLink to AWS::Amplify::App

 Type: AWS::Amplify::App
 Properties:
+added:   JobConfig:
+added:     BuildComputeType: String

AWS::B2BI::PartnershipLink to AWS::B2BI::Partnership

 Type: AWS::B2BI::Partnership
 Properties:
   CapabilityOptions:
+added:     InboundEdi:
+added:       X12:
+added:         AcknowledgmentOptions:
+added:           TechnicalAcknowledgment: String
+added:           FunctionalAcknowledgment: String
     OutboundEdi:
       X12:
         Common:
+added:           ControlNumbers:
+added:             StartingFunctionalGroupControlNumber: Double
+added:             StartingInterchangeControlNumber: Double
+added:             StartingTransactionSetControlNumber: Double
+added:           Gs05TimeFormat: String
+added:         WrapOptions:
+added:           LineLength: Double
+added:           WrapBy: String
+added:           LineTerminator: String

AWS::B2BI::TransformerLink to AWS::B2BI::Transformer

 Type: AWS::B2BI::Transformer
 Properties:
   InputConversion:
+added:     AdvancedOptions:
+added:       X12:
+added:         SplitOptions:
+added:           SplitBy: String

AWS::Batch::ComputeEnvironmentLink to AWS::Batch::ComputeEnvironment

 Type: AWS::Batch::ComputeEnvironment
 Properties:
   ComputeResources:
     LaunchTemplate:
       Overrides:
+added:         - UserdataType: String
+added:       UserdataType: String

AWS::Bedrock::GuardrailLink to AWS::Bedrock::Guardrail

 Type: AWS::Bedrock::Guardrail
 Properties:
+added:   CrossRegionConfig:
+added:     GuardrailProfileArn: String

AWS::Budgets::BudgetLink to AWS::Budgets::Budget

 Type: AWS::Budgets::Budget
 Properties:
   Budget:
~modified:     # Update requires: Replacement → No interruption
     AutoAdjustData:
~modified:     # Update requires: Replacement → No interruption
     PlannedBudgetLimits: Json

AWS::CleanRooms::CollaborationLink to AWS::CleanRooms::Collaboration

 Type: AWS::CleanRooms::Collaboration
 Properties:
~modified:   # Required: Yes → No
   CreatorMemberAbilities:
     - String
~modified:   # Required: Yes → No
   Members:
~modified:     - # Required: Yes → No
       MemberAbilities:
         - String

AWS::CloudFront::DistributionLink to AWS::CloudFront::Distribution

 Type: AWS::CloudFront::Distribution
 Properties:
   DistributionConfig:
     Origins:
+added:       - ResponseCompletionTimeout: Integer
         S3OriginConfig:
+added:           OriginReadTimeout: Integer

AWS::Connect::EvaluationFormLink to AWS::Connect::EvaluationForm

 Type: AWS::Connect::EvaluationForm
 Properties:
+added:   AutoEvaluationConfiguration:
+added:     Enabled: Boolean
   Items:
     - Section:
         Items:
           - Question:
               QuestionTypeProperties:
                 Numeric:
                   Automation:
+added:                     AnswerSource: Json
~modified:                     # Required: Yes → No
                     PropertyValue:
             Section:  # EvaluationFormSection: see above

AWS::ConnectCampaignsV2::CampaignLink to AWS::ConnectCampaignsV2::Campaign

 Type: AWS::ConnectCampaignsV2::Campaign
 Properties:
   CommunicationLimitsOverride:
+added:     InstanceLimitsHandling: String

AWS::CustomerProfiles::SegmentDefinitionLink to AWS::CustomerProfiles::SegmentDefinition

 Type: AWS::CustomerProfiles::SegmentDefinition
 Properties:
   SegmentGroups:
     Groups:
       - Dimensions:
           - ProfileAttributes:
+added:               ProfileType:
+added:                 DimensionType: String
+added:                 Values:
+added:                   - String

AWS::DataZone::ProjectProfileLink to AWS::DataZone::ProjectProfile

 Type: AWS::DataZone::ProjectProfile
 Properties:
+added:   EnvironmentConfigurations:
+added:     - Description: String
+added:       AwsRegion:
+added:         RegionName: String
+added:       AwsAccount:
+added:         AwsAccountId: String
+added:       DeploymentMode: String
+added:       Id: String
+added:       EnvironmentBlueprintId: String
+added:       ConfigurationParameters:
+added:         ParameterOverrides:
+added:           - IsEditable: Boolean
+added:             Value: String
+added:             Name: String
+added:         ResolvedParameters:  # EnvironmentConfigurationParameter: see above
+added:         SsmPath: String
+added:       DeploymentOrder: Double
+added:       Name: String

AWS::DSQL::ClusterLink to AWS::DSQL::Cluster

 Type: AWS::DSQL::Cluster
 Properties:
+added:   KmsEncryptionKey: String
 Fn::GetAtt:
+added:   EncryptionDetails:
+added:     EncryptionType: String
+added:     EncryptionStatus: String
+added:     KmsKeyArn: String
+added:   EncryptionDetails.EncryptionStatus: String
+added:   EncryptionDetails.EncryptionType: String
+added:   EncryptionDetails.KmsKeyArn: String

AWS::EC2::SubnetLink to AWS::EC2::Subnet

 Type: AWS::EC2::Subnet
 Fn::GetAtt:
+added:   BlockPublicAccessStates:
+added:     InternetGatewayBlockMode: String
+added:   BlockPublicAccessStates.InternetGatewayBlockMode: String

AWS::EC2::TrafficMirrorFilterLink to AWS::EC2::TrafficMirrorFilter

 Type: AWS::EC2::TrafficMirrorFilter
 Properties:
~modified:   # Duplicates allowed: Not specified → No
   NetworkServices:
     - String
~modified:   # Duplicates allowed: Not specified → Yes
   Tags:
 Fn::GetAtt:
+added:   Id: String

AWS::EC2::TrafficMirrorFilterRuleLink to AWS::EC2::TrafficMirrorFilterRule

 Type: AWS::EC2::TrafficMirrorFilterRule
 Properties:
~modified:   # Duplicates allowed: Not specified → Yes
   Tags:
 Fn::GetAtt:
+added:   TrafficMirrorFilterRuleId: String

AWS::ECS::TaskDefinitionLink to AWS::ECS::TaskDefinition

 Type: AWS::ECS::TaskDefinition
 Properties:
-removed:   InferenceAccelerators:
-removed:     - DeviceType: String
-removed:       DeviceName: String

AWS::InspectorV2::FilterLink to AWS::InspectorV2::Filter

 Type: AWS::InspectorV2::Filter
 Properties:
   FilterCriteria:
+added:     CodeVulnerabilityDetectorName:
+added:       - Comparison: String
+added:         Value: String
+added:     CodeVulnerabilityDetectorTags:  # StringFilter: see above
+added:     CodeVulnerabilityFilePath:  # StringFilter: see above
+added:     EpssScore:
+added:       - LowerInclusive: Double
+added:         UpperInclusive: Double
+added:     ExploitAvailable:  # StringFilter: see above
+added:     FixAvailable:  # StringFilter: see above
+added:     LambdaFunctionExecutionRoleArn:  # StringFilter: see above
+added:     LambdaFunctionLastModifiedAt:
+added:       - EndInclusive: Integer
+added:         StartInclusive: Integer
+added:     LambdaFunctionLayers:  # StringFilter: see above
+added:     LambdaFunctionName:  # StringFilter: see above
+added:     LambdaFunctionRuntime:  # StringFilter: see above
     VulnerablePackages:
+added:       - FilePath:  # StringFilter: see above
+added:         SourceLambdaLayerArn:  # StringFilter: see above
+added:   Tags:
+added:     <key>: String

AWS::Kendra::DataSourceLink to AWS::Kendra::DataSource

 Type: AWS::Kendra::DataSource
 Properties:
   DataSourceConfiguration:
+added:     TemplateConfiguration:
+added:       Template: Json

AWS::Lex::BotLink to AWS::Lex::Bot

 Type: AWS::Lex::Bot
 Properties:
   BotLocales:
+added:     - GenerativeAISettings:
+added:         RuntimeSettings:
+added:           SlotResolutionImprovementSpecification:
+added:             Enabled: Boolean
+added:             BedrockModelSpecification:
+added:               ModelArn: String
+added:               BedrockTraceStatus: String
+added:               BedrockModelCustomPrompt: String
+added:               BedrockGuardrailConfiguration:
+added:                 BedrockGuardrailVersion: String
+added:                 BedrockGuardrailIdentifier: String
+added:           NluImprovementSpecification:
+added:             Enabled: Boolean
+added:         BuildtimeSettings:
+added:           DescriptiveBotBuilderSpecification:
+added:             Enabled: Boolean
+added:             BedrockModelSpecification:  # BedrockModelSpecification: see above
+added:           SampleUtteranceGenerationSpecification:
+added:             Enabled: Boolean
+added:             BedrockModelSpecification:  # BedrockModelSpecification: see above

AWS::Logs::TransformerLink to AWS::Logs::Transformer

 Type: AWS::Logs::Transformer
 Properties:
   TransformerConfig:
+added:     - ParseToOCSF:
+added:         EventSource: String
+added:         OcsfVersion: String
+added:         Source: String

AWS::MediaTailor::PlaybackConfigurationLink to AWS::MediaTailor::PlaybackConfiguration

 Type: AWS::MediaTailor::PlaybackConfiguration
 Properties:
+added:   InsertionMode: String
+added:   LogConfiguration:
+added:     EnabledLoggingStrategies:
+added:       - String
+added:     PercentEnabled: Integer
+added:     AdsInteractionLog:
+added:       ExcludeEventTypes:
+added:         - String
+added:       PublishOptInEventTypes:
+added:         - String
+added:     ManifestServiceInteractionLog:
+added:       ExcludeEventTypes:
+added:         - String

AWS::MWAA::EnvironmentLink to AWS::MWAA::Environment

 Type: AWS::MWAA::Environment
 Properties:
+added:   WorkerReplacementStrategy: String

AWS::NetworkManager::VpcAttachmentLink to AWS::NetworkManager::VpcAttachment

 Type: AWS::NetworkManager::VpcAttachment
 Properties:
   Options:
+added:     DnsSupport: Boolean
+added:     SecurityGroupReferencingSupport: Boolean

AWS::Route53Resolver::ResolverRuleLink to AWS::Route53Resolver::ResolverRule

 Type: AWS::Route53Resolver::ResolverRule
 Properties:
+added:   DelegationRecord: String

AWS::Synthetics::CanaryLink to AWS::Synthetics::Canary

 Type: AWS::Synthetics::Canary
 Properties:
   RunConfig:
+added:     EphemeralStorage: Integer

AWS::WAFv2::RuleGroupLink to AWS::WAFv2::RuleGroup

 Type: AWS::WAFv2::RuleGroup
 Properties:
   Rules:
     - Statement:
+added:         AsnMatchStatement:
+added:           ForwardedIPConfig:
+added:             FallbackBehavior: String
+added:             HeaderName: String
+added:           AsnList:
+added:             - Integer
         NotStatement:
           Statement:  # Statement: see above
         OrStatement:
           Statements:  # Statement: see above
         RateBasedStatement:
           CustomKeys:
+added:             - ASN: Json
           ScopeDownStatement:  # Statement: see above

AWS::WAFv2::WebACLLink to AWS::WAFv2::WebACL

 Type: AWS::WAFv2::WebACL
 Properties:
~modified:   OnSourceDDoSProtectionConfig: Json → OnSourceDDoSProtectionConfig
+added:     ALBLowReputationMode: String
   Rules:
     - Statement:
+added:         AsnMatchStatement:
+added:           ForwardedIPConfig:
+added:             FallbackBehavior: String
+added:             HeaderName: String
+added:           AsnList:
+added:             - Integer
         ManagedRuleGroupStatement:
           ManagedRuleGroupConfigs:
+added:             - AWSManagedRulesAntiDDoSRuleSet:
+added:                 ClientSideActionConfig:
+added:                   Challenge:
+added:                     UsageOfAction: String
+added:                     Sensitivity: String
+added:                     ExemptUriRegularExpressions:
+added:                       - RegexString: String
+added:                 SensitivityToBlock: String
           ScopeDownStatement:  # Statement: see above
         NotStatement:
           Statement:  # Statement: see above
         OrStatement:
           Statements:  # Statement: see above
         RateBasedStatement:
           CustomKeys:
+added:             - ASN: Json
           ScopeDownStatement:  # Statement: see above