CloudFormation Changelog

Changes to the CloudFormation resource specification.

ADDED: 3
REMOVED: 0
MODIFIED: 21
DOCUMENTATION: 0

New resource types

AWS::EMRContainers::EndpointLink to AWS::EMRContainers::Endpoint

 Type: AWS::EMRContainers::Endpoint
 Properties:
   ExecutionRoleArn: String
   Type: String
   ConfigurationOverrides:
     MonitoringConfiguration:
       S3MonitoringConfiguration:
         LogUri: String
       ContainerLogRotationConfiguration:
         MaxFilesToKeep: Integer
         RotationSize: String
       CloudWatchMonitoringConfiguration:
         LogStreamNamePrefix: String
         LogGroupName: String
       PersistentAppUI: String
     ApplicationConfiguration:
       - Classification: String
         Properties:
           <key>: String
         Configurations:  # EMREKSConfiguration: see above
   VirtualClusterId: String
   ReleaseLabel: String
   Tags:
     - Value: String
       Key: String
   Name: String
 Fn::GetAtt:
   ServerUrl: String
   State: String
   CreatedAt: String
   FailureReason: String
   CertificateAuthority.CertificateArn: String
   StateDetails: String
   CertificateAuthority:
     CertificateData: String
     CertificateArn: String
   CertificateAuthority.CertificateData: String
   Id: String
   SecurityGroup: String
   Arn: String

AWS::EMRContainers::SecurityConfigurationLink to AWS::EMRContainers::SecurityConfiguration

 Type: AWS::EMRContainers::SecurityConfiguration
 Properties:
   ContainerProvider:
     Type: String
     Id: String
     Info:
       EksInfo:
         Namespace: String
   SecurityConfigurationData:
     AuthenticationConfiguration:
       IAMConfiguration:
         SystemRole: String
       IdentityCenterConfiguration:
         IdentityCenterInstanceARN: String
         IdentityCenterApplicationAssignmentRequired: Boolean
         EnableIdentityCenter: Boolean
     AuthorizationConfiguration:
       LakeFormationConfiguration:
         SecureNamespaceInfo:
           ClusterId: String
           Namespace: String
         QueryAccessControlEnabled: Boolean
         AuthorizedSessionTagValue: String
         QueryEngineRoleArn: String
     EncryptionConfiguration:
       InTransitEncryptionConfiguration:
         TLSCertificateConfiguration:
           PublicKeySecretArn: String
           PrivateKeySecretArn: String
           CertificateProviderType: String
       AtRestEncryptionConfiguration:
         LocalDiskEncryptionConfiguration:
           AwsKmsKeyId: String
           EncryptionKeyProviderType: String
         S3EncryptionConfiguration:
           KMSKeyId: String
           EncryptionOption: String
   Tags:
     - Value: String
       Key: String
   Name: String
 Fn::GetAtt:
   Id: String
   Arn: String

AWS::Lightsail::DatabaseSnapshotLink to AWS::Lightsail::DatabaseSnapshot

 Type: AWS::Lightsail::DatabaseSnapshot
 Properties:
   RelationalDatabaseName: String
   RelationalDatabaseSnapshotName: String
   Tags:
     - Value: String
       Key: String
 Fn::GetAtt:
   EngineVersion: String
   CreatedAt: String
   ResourceType: String
   FromRelationalDatabaseBlueprintId: String
   Name: String
   Location.RegionName: String
   SizeInGb: Integer
   FromRelationalDatabaseArn: String
   Location.AvailabilityZone: String
   SupportCode: String
   State: String
   Arn: String
   FromRelationalDatabaseBundleId: String
   Engine: String
   FromRelationalDatabaseName: String
   Location:
     RegionName: String
     AvailabilityZone: String

Changed resource types

AWS::BedrockAgentCore::RuntimeLink to AWS::BedrockAgentCore::Runtime

 Type: AWS::BedrockAgentCore::Runtime
 Properties:
   AuthorizerConfiguration:
     CustomJWTAuthorizer:
+added:       AllowedScopes:
+added:         - String
+added:       CustomClaims:
+added:         - AuthorizingClaimMatchValue:
+added:             ClaimMatchValue:
+added:               MatchValueString: String
+added:               MatchValueStringList:
+added:                 - String
+added:             ClaimMatchOperator: String
+added:           InboundTokenClaimName: String
+added:           InboundTokenClaimValueType: String

AWS::Cognito::UserPoolLink to AWS::Cognito::UserPool

 Type: AWS::Cognito::UserPool
 Properties:
   LambdaConfig:
+added:     InboundFederation:
+added:       LambdaArn: String
+added:       LambdaVersion: String

AWS::Connect::InstanceLink to AWS::Connect::Instance

 Type: AWS::Connect::Instance
 Properties:
   Attributes:
+added:     MessageStreaming: Boolean

AWS::DataZone::EnvironmentLink to AWS::DataZone::Environment

 Type: AWS::DataZone::Environment
 Properties:
+added:   DeploymentOrder: Integer
+added:   EnvironmentBlueprintIdentifier: String
+added:   EnvironmentConfigurationId: String

AWS::DynamoDB::GlobalTableLink to AWS::DynamoDB::GlobalTable

 Type: AWS::DynamoDB::GlobalTable
 Properties:
~modified:   # Required: Yes → No
   AttributeDefinitions:
   GlobalSecondaryIndexes:
+added:     - ReadOnDemandThroughputSettings:
+added:         MaxReadRequestUnits: Integer
+added:       ReadProvisionedThroughputSettings:
+added:         ReadCapacityUnits: Integer
+added:   GlobalTableSourceArn: String
~modified:   # Required: Yes → No
~modified:   # Update requires: Replacement → Some interruptions
   KeySchema:
~modified:   # Update requires: Replacement → Some interruptions
   LocalSecondaryIndexes:
~modified:     - # Update requires: Replacement → Some interruptions
       IndexName: String
~modified:       # Update requires: Replacement → Some interruptions
       KeySchema:  # KeySchema: see above
~modified:       # Update requires: Replacement → Some interruptions
       Projection:
+added:   ReadOnDemandThroughputSettings:  # ReadOnDemandThroughputSettings: see above
+added:   ReadProvisionedThroughputSettings:  # GlobalReadProvisionedThroughputSettings: see above
   Replicas:
+added:     - GlobalTableSettingsReplicationMode: String

AWS::EC2::LaunchTemplateLink to AWS::EC2::LaunchTemplate

 Type: AWS::EC2::LaunchTemplate
 Properties:
   LaunchTemplateData:
     BlockDeviceMappings:
       - Ebs:
+added:           EbsCardIndex: Integer

AWS::EC2::VolumeAttachmentLink to AWS::EC2::VolumeAttachment

 Type: AWS::EC2::VolumeAttachment
 Properties:
+added:   EbsCardIndex: Integer

AWS::EC2::VPNConnectionLink to AWS::EC2::VPNConnection

 Type: AWS::EC2::VPNConnection
 Properties:
~modified:   # Update requires: Replacement → No interruption
   CustomerGatewayId: String
~modified:   # Update requires: Replacement → No interruption
   TransitGatewayId: String
~modified:   # Update requires: Replacement → No interruption
   VpnGatewayId: String

AWS::GameLift::ContainerFleetLink to AWS::GameLift::ContainerFleet

 Type: AWS::GameLift::ContainerFleet
 Properties:
   Locations:
     - LocationCapacity:
+added:         ManagedCapacityConfiguration:
+added:           ScaleInAfterInactivityMinutes: Integer
+added:           ZeroCapacityStrategy: String

AWS::GameLift::FleetLink to AWS::GameLift::Fleet

 Type: AWS::GameLift::Fleet
 Properties:
   Locations:
     - LocationCapacity:
+added:         ManagedCapacityConfiguration:
+added:           ScaleInAfterInactivityMinutes: Integer
+added:           ZeroCapacityStrategy: String

AWS::IoT::CommandLink to AWS::IoT::Command

 Type: AWS::IoT::Command
 Properties:
   MandatoryParameters:
+added:     - Type: String
+added:       ValueConditions:
+added:         - ComparisonOperator: String
+added:           Operand:
+added:             NumberRange:
+added:               Min: String
+added:               Max: String
+added:             Numbers:
+added:               - String
+added:             Number: String
+added:             String: String
+added:             Strings:
+added:               - String
+added:   PayloadTemplate: String
+added:   Preprocessor:
+added:     AwsJsonSubstitution:
+added:       OutputFormat: String

AWS::Lex::BotLink to AWS::Lex::Bot

 Type: AWS::Lex::Bot
 Properties:
   BotLocales:
+added:     - SpeechRecognitionSettings:
+added:         SpeechModelPreference: String
+added:         SpeechModelConfig:
+added:           DeepgramConfig:
+added:             ApiTokenSecretArn: String
+added:             ModelId: String

AWS::LicenseManager::GrantLink to AWS::LicenseManager::Grant

 Type: AWS::LicenseManager::Grant
 Properties:
+added:   Tags:
+added:     - Value: String
+added:       Key: String

AWS::LicenseManager::LicenseLink to AWS::LicenseManager::License

 Type: AWS::LicenseManager::License
 Properties:
~modified:   # Required: No → Yes
   Beneficiary: String
~modified:   # Required: No → Yes
   ProductSKU: String
+added:   Tags:
+added:     - Value: String
+added:       Key: String

AWS::OpenSearchService::DomainLink to AWS::OpenSearchService::Domain

 Type: AWS::OpenSearchService::Domain
 Properties:
   AIMLOptions:
+added:     ServerlessVectorAcceleration:
+added:       Enabled: Boolean

AWS::SES::ConfigurationSetLink to AWS::SES::ConfigurationSet

 Type: AWS::SES::ConfigurationSet
 Properties:
+added:   ArchivingOptions:
+added:     ArchiveArn: String

AWS::SES::TemplateLink to AWS::SES::Template

 Type: AWS::SES::Template
 Properties:
+added:   Tags:
+added:     - Value: String
+added:       Key: String

AWS::Transfer::ConnectorLink to AWS::Transfer::Connector

 Type: AWS::Transfer::Connector
 Properties:
   As2Config:
+added:     AsyncMdnConfig:
+added:       ServerIds:
+added:         - String
+added:       Url: String

AWS::Transfer::WebAppLink to AWS::Transfer::WebApp

 Type: AWS::Transfer::WebApp
 Properties:
+added:   EndpointDetails:
+added:     Vpc:
+added:       VpcId: String
+added:       SubnetIds:
+added:         - String
+added:       SecurityGroupIds:
+added:         - String
 Fn::GetAtt:
+added:   VpcEndpointId: String

AWS::WAFv2::RuleGroupLink to AWS::WAFv2::RuleGroup

 Type: AWS::WAFv2::RuleGroup
 Properties:
   Rules:
     - Statement:
         ByteMatchStatement:
           FieldToMatch:
+added:             HeaderOrder:
+added:               OversizeHandling: String
         NotStatement:
           Statement:  # Statement: see above
         OrStatement:
           Statements:  # Statement: see above
         RateBasedStatement:
           ScopeDownStatement:  # Statement: see above
         RegexMatchStatement:
           FieldToMatch:  # FieldToMatch: see above
         RegexPatternSetReferenceStatement:
           FieldToMatch:  # FieldToMatch: see above
         SizeConstraintStatement:
           FieldToMatch:  # FieldToMatch: see above
         SqliMatchStatement:
           FieldToMatch:  # FieldToMatch: see above
         XssMatchStatement:
           FieldToMatch:  # FieldToMatch: see above

AWS::WAFv2::WebACLLink to AWS::WAFv2::WebACL

 Type: AWS::WAFv2::WebACL
 Properties:
   Rules:
     - Statement:
         ByteMatchStatement:
           FieldToMatch:
+added:             HeaderOrder:
+added:               OversizeHandling: String
         ManagedRuleGroupStatement:
           ScopeDownStatement:  # Statement: see above
         NotStatement:
           Statement:  # Statement: see above
         OrStatement:
           Statements:  # Statement: see above
         RateBasedStatement:
           ScopeDownStatement:  # Statement: see above
         RegexMatchStatement:
           FieldToMatch:  # FieldToMatch: see above
         RegexPatternSetReferenceStatement:
           FieldToMatch:  # FieldToMatch: see above
         SizeConstraintStatement:
           FieldToMatch:  # FieldToMatch: see above
         SqliMatchStatement:
           FieldToMatch:  # FieldToMatch: see above
         XssMatchStatement:
           FieldToMatch:  # FieldToMatch: see above