CloudFormation Changelog

Changes to the CloudFormation resource specification.

ADDED: 5
REMOVED: 0
MODIFIED: 28
DOCUMENTATION: 0

New resource types

AWS::CloudFront::ConnectionFunctionLink to AWS::CloudFront::ConnectionFunction

 Type: AWS::CloudFront::ConnectionFunction
 Properties:
   ConnectionFunctionConfig:
     Comment: String
     Runtime: String
     KeyValueStoreAssociations:
       - KeyValueStoreARN: String
   AutoPublish: Boolean
   ConnectionFunctionCode: String
   Tags:
     - Value: String
       Key: String
   Name: String
 Fn::GetAtt:
   Status: String
   ConnectionFunctionArn: String
   CreatedTime: String
   ETag: String
   LastModifiedTime: String
   Stage: String
   Id: String

AWS::Cognito::TermsLink to AWS::Cognito::Terms

 Type: AWS::Cognito::Terms
 Properties:
   Enforcement: String
   UserPoolId: String
   ClientId: String
   TermsName: String
   Links:
     <key>: String
   TermsSource: String
 Fn::GetAtt:
   TermsId: String

AWS::EC2::VPNConcentratorLink to AWS::EC2::VPNConcentrator

 Type: AWS::EC2::VPNConcentrator
 Properties:
   TransitGatewayId: String
   Type: String
   Tags:
     - Value: String
       Key: String
 Fn::GetAtt:
   VpnConcentratorId: String
   TransitGatewayAttachmentId: String

AWS::Glue::IntegrationLink to AWS::Glue::Integration

 Type: AWS::Glue::Integration
 Properties:
   DataFilter: String
   IntegrationName: String
   Description: String
   SourceArn: String
   IntegrationConfig:
     ContinuousSync: Boolean
     RefreshInterval: String
     SourceProperties:
       <key>: String
   KmsKeyId: String
   TargetArn: String
   AdditionalEncryptionContext:
     <key>: String
   Tags:
     - Value: String
       Key: String
 Fn::GetAtt:
   Status: String
   IntegrationArn: String
   CreateTime: String

AWS::VpcLattice::DomainVerificationLink to AWS::VpcLattice::DomainVerification

 Type: AWS::VpcLattice::DomainVerification
 Properties:
   DomainName: String
   Tags:
     - Value: String
       Key: String
 Fn::GetAtt:
   Status: String
   TxtMethodConfig:
     name: String
     value: String
   TxtMethodConfig.name: String
   TxtMethodConfig.value: String
   Id: String
   Arn: String

Changed resource types

AWS::ApiGateway::DomainNameLink to AWS::ApiGateway::DomainName

 Type: AWS::ApiGateway::DomainName
 Properties:
+added:   EndpointAccessMode: String

AWS::ApiGateway::DomainNameV2Link to AWS::ApiGateway::DomainNameV2

 Type: AWS::ApiGateway::DomainNameV2
 Properties:
+added:   EndpointAccessMode: String

AWS::ApiGateway::MethodLink to AWS::ApiGateway::Method

 Type: AWS::ApiGateway::Method
 Properties:
   Integration:
+added:     IntegrationTarget: String
+added:     ResponseTransferMode: String

AWS::ApiGateway::RestApiLink to AWS::ApiGateway::RestApi

 Type: AWS::ApiGateway::RestApi
 Properties:
+added:   EndpointAccessMode: String
+added:   SecurityPolicy: String

AWS::Backup::LogicallyAirGappedBackupVaultLink to AWS::Backup::LogicallyAirGappedBackupVault

 Type: AWS::Backup::LogicallyAirGappedBackupVault
 Properties:
+added:   EncryptionKeyArn: String
 Fn::GetAtt:
-removed:   EncryptionKeyArn: String

AWS::Bedrock::DataAutomationProjectLink to AWS::Bedrock::DataAutomationProject

 Type: AWS::Bedrock::DataAutomationProject
 Properties:
   OverrideConfiguration:
     Audio:
+added:       LanguageConfiguration:
+added:         IdentifyMultipleLanguages: Boolean
+added:         GenerativeOutputLanguage: String
+added:         InputLanguages:
+added:           - String

AWS::BillingConductor::BillingGroupLink to AWS::BillingConductor::BillingGroup

 Type: AWS::BillingConductor::BillingGroup
 Properties:
   AccountGrouping:
~modified:     # Required: Yes → No
     LinkedAccountIds:
       - String
+added:     ResponsibilityTransferArn: String
~modified:   # Required: Yes → No
   PrimaryAccountId: String

AWS::CloudTrail::TrailLink to AWS::CloudTrail::Trail

 Type: AWS::CloudTrail::Trail
 Properties:
+added:   AggregationConfigurations:
+added:     - EventCategory: String
+added:       Templates:
+added:         - String
   InsightSelectors:
+added:     - EventCategories:
+added:         - String

AWS::CustomerProfiles::DomainLink to AWS::CustomerProfiles::Domain

 Type: AWS::CustomerProfiles::Domain
 Properties:
+added:   DataStore:
+added:     Readiness:
+added:       Message: String
+added:       ProgressPercentage: Integer
+added:     Enabled: Boolean
 Fn::GetAtt:
+added:   DataStore.Readiness:  # Readiness: see above
+added:   DataStore.Readiness.Message: String
+added:   DataStore.Readiness.ProgressPercentage: Integer

AWS::DSQL::ClusterLink to AWS::DSQL::Cluster

 Type: AWS::DSQL::Cluster
 Fn::GetAtt:
+added:   Endpoint: String

AWS::EC2::NatGatewayLink to AWS::EC2::NatGateway

 Type: AWS::EC2::NatGateway
 Properties:
+added:   AvailabilityMode: String
+added:   AvailabilityZoneAddresses:
+added:     - AvailabilityZoneId: String
+added:       AvailabilityZone: String
+added:       AllocationIds:
+added:         - String
 Fn::GetAtt:
+added:   AutoProvisionZones: String
+added:   AutoScalingIps: String
+added:   RouteTableId: String

AWS::EC2::VPCEndpointLink to AWS::EC2::VPCEndpoint

 Type: AWS::EC2::VPCEndpoint
 Properties:
   DnsOptions:
+added:     PrivateDnsPreference: String
+added:     PrivateDnsSpecifiedDomains:
+added:       - String

AWS::EC2::VPNConnectionLink to AWS::EC2::VPNConnection

 Type: AWS::EC2::VPNConnection
 Properties:
+added:   TunnelBandwidth: String
+added:   VpnConcentratorId: String
   VpnTunnelOptionsSpecifications:
     - LogOptions:
         CloudwatchLogOptions:
+added:           BgpLogEnabled: Boolean
+added:           BgpLogGroupArn: String
+added:           BgpLogOutputFormat: String

AWS::ECS::CapacityProviderLink to AWS::ECS::CapacityProvider

 Type: AWS::ECS::CapacityProvider
 Properties:
   ManagedInstancesProvider:
+added:     InfrastructureOptimization:
+added:       ScaleInAfter: Integer

AWS::ElasticLoadBalancingV2::TargetGroupLink to AWS::ElasticLoadBalancingV2::TargetGroup

 Type: AWS::ElasticLoadBalancingV2::TargetGroup
 Properties:
+added:   TargetControlPort: Integer

AWS::FSx::FileSystemLink to AWS::FSx::FileSystem

 Type: AWS::FSx::FileSystem
 Properties:
   WindowsConfiguration:
     SelfManagedActiveDirectoryConfiguration:
+added:       DomainJoinServiceAccountSecret: String

AWS::FSx::StorageVirtualMachineLink to AWS::FSx::StorageVirtualMachine

 Type: AWS::FSx::StorageVirtualMachine
 Properties:
   ActiveDirectoryConfiguration:
     SelfManagedActiveDirectoryConfiguration:
+added:       DomainJoinServiceAccountSecret: String

AWS::Lambda::FunctionLink to AWS::Lambda::Function

 Type: AWS::Lambda::Function
 Properties:
+added:   TenancyConfig:
+added:     TenantIsolationMode: String

AWS::Lex::ResourcePolicyLink to AWS::Lex::ResourcePolicy

 Type: AWS::Lex::ResourcePolicy
 Properties:
~modified:   # Update requires: No interruption → Replacement
   ResourceArn: String

AWS::MSK::ClusterLink to AWS::MSK::Cluster

 Type: AWS::MSK::Cluster
 Properties:
-removed:   CurrentVersion: String
+added:   Rebalancing:
+added:     Status: String
 Fn::GetAtt:
+added:   CurrentVersion: String

AWS::OpenSearchServerless::CollectionLink to AWS::OpenSearchServerless::Collection

 Type: AWS::OpenSearchServerless::Collection
 Properties:
+added:   CollectionGroupName: String
+added:   EncryptionConfig:
+added:     KmsKeyArn: String
+added:     AWSOwnedKey: Boolean

AWS::OpenSearchService::DomainLink to AWS::OpenSearchService::Domain

 Type: AWS::OpenSearchService::Domain
 Properties:
+added:   AIMLOptions:
+added:     S3VectorsEngine:
+added:       Enabled: Boolean

AWS::RUM::AppMonitorLink to AWS::RUM::AppMonitor

 Type: AWS::RUM::AppMonitor
 Properties:
+added:   Platform: String

AWS::S3::BucketLink to AWS::S3::Bucket

 Type: AWS::S3::Bucket
 Properties:
   BucketEncryption:
     ServerSideEncryptionConfiguration:
+added:       - BlockedEncryptionTypes:
+added:           EncryptionType:
+added:             - String

AWS::SageMaker::PartnerAppLink to AWS::SageMaker::PartnerApp

 Type: AWS::SageMaker::PartnerApp
 Properties:
+added:   AppVersion: String
+added:   EnableAutoMinorVersionUpgrade: Boolean
 Fn::GetAtt:
+added:   CurrentVersionEolDate: String

AWS::VpcLattice::ResourceConfigurationLink to AWS::VpcLattice::ResourceConfiguration

 Type: AWS::VpcLattice::ResourceConfiguration
 Properties:
+added:   CustomDomainName: String
+added:   DomainVerificationId: String
+added:   GroupDomain: String

AWS::VpcLattice::ServiceNetworkResourceAssociationLink to AWS::VpcLattice::ServiceNetworkResourceAssociation

 Type: AWS::VpcLattice::ServiceNetworkResourceAssociation
 Properties:
+added:   PrivateDnsEnabled: Boolean

AWS::VpcLattice::ServiceNetworkVpcAssociationLink to AWS::VpcLattice::ServiceNetworkVpcAssociation

 Type: AWS::VpcLattice::ServiceNetworkVpcAssociation
 Properties:
+added:   DnsOptions:
+added:     PrivateDnsSpecifiedDomains:
+added:       - String
+added:     PrivateDnsPreference: String
+added:   PrivateDnsEnabled: Boolean