CloudFormation Changelog

Changes to the CloudFormation resource specification.

ADDED: 4
REMOVED: 0
MODIFIED: 46
DOCUMENTATION: 25

New resource types

AWS::Chime::AppInstanceLink to AWS::Chime::AppInstance

 Type: AWS::Chime::AppInstance
 Properties:
   Metadata: String
   Tags:
     - Value: String
       Key: String
   Name: String
 Fn::GetAtt:
   CreatedTimestamp: Double
   LastUpdatedTimestamp: Double
   AppInstanceArn: String

AWS::Chime::AppInstanceBotLink to AWS::Chime::AppInstanceBot

 Type: AWS::Chime::AppInstanceBot
 Properties:
   Configuration:
     Lex:
       LexBotAliasArn: String
       InvokedBy:
         StandardMessages: String
         TargetedMessages: String
       LocaleId: String
       RespondsTo: String
       WelcomeIntent: String
   Metadata: String
   AppInstanceArn: String
   Tags:
     - Value: String
       Key: String
   Name: String
 Fn::GetAtt:
   CreatedTimestamp: Double
   LastUpdatedTimestamp: Double
   AppInstanceBotArn: String

AWS::CloudWatch::OTelEnrichmentLink to AWS::CloudWatch::OTelEnrichment

 Type: AWS::CloudWatch::OTelEnrichment
 Fn::GetAtt:
   Status: String
   AccountId: String

AWS::DevOpsAgent::PrivateConnectionLink to AWS::DevOpsAgent::PrivateConnection

 Type: AWS::DevOpsAgent::PrivateConnection
 Properties:
   ConnectionConfiguration:
     SelfManaged:
       ResourceConfigurationId: String
     ServiceManaged:
       IpAddressType: String
       VpcId: String
       PortRanges:
         - String
       Ipv4AddressesPerEni: Integer
       HostAddress: String
       SubnetIds:
         - String
       SecurityGroupIds:
         - String
   Tags:
     - Value: String
       Key: String
   Name: String
   Certificate: String
 Fn::GetAtt:
   Status: String
   CertificateExpiryTime: String
   Arn: String

Changed resource types

AWS::ARCRegionSwitch::PlanLink to AWS::ARCRegionSwitch::Plan

 Type: AWS::ARCRegionSwitch::Plan
 Properties:
   Workflows:
     - Steps:
         - ExecutionBlockConfiguration:
+added:             LambdaEventSourceMappingConfig:
+added:               Action: String
+added:               TimeoutMinutes: Double
+added:               RegionEventSourceMappings:
                 <key>:
+added:                   ExternalId: String
+added:                   Arn: String
+added:                   CrossAccountRole: String
+added:               Ungraceful:
+added:                 Behavior: String
             ParallelConfig:
               Steps:  # Step: see above

AWS::Batch::ConsumableResourceLink to AWS::Batch::ConsumableResource

 Type: AWS::Batch::ConsumableResource
 Properties:
~modified:   # Update requires: Replacement → No interruption
   Tags:
     <key>: String

AWS::Batch::JobDefinitionLink to AWS::Batch::JobDefinition

 Type: AWS::Batch::JobDefinition
 Properties:
   ContainerProperties:
     Volumes:
+added:       - S3FilesVolumeConfiguration:
+added:           FileSystemArn: String
+added:           AccessPointArn: String
+added:           RootDirectory: String
+added:           TransitEncryptionPort: Integer
   EcsProperties:
     TaskProperties:
       - Containers:
+added:           - StartTimeout: Integer
+added:             StopTimeout: Integer
         Volumes:  # Volume: see above
   NodeProperties:
     NodeRangeProperties:
       - Container:
           Volumes:  # Volume: see above
         EcsProperties:
           TaskProperties:
             - Containers:  # TaskContainerProperties: see above
               Volumes:  # Volume: see above

AWS::Batch::JobQueueLink to AWS::Batch::JobQueue

 Type: AWS::Batch::JobQueue
 Properties:
~modified:   # Update requires: Replacement → No interruption
   Tags:
     <key>: String

AWS::Batch::SchedulingPolicyLink to AWS::Batch::SchedulingPolicy

 Type: AWS::Batch::SchedulingPolicy
 Properties:
~modified:   # Update requires: Replacement → No interruption
   Tags:
     <key>: String

AWS::BedrockAgentCore::BrowserCustomLink to AWS::BedrockAgentCore::BrowserCustom

 Type: AWS::BedrockAgentCore::BrowserCustom
 Properties:
+added:   Certificates:
+added:     - CertificateLocation:
+added:         SecretArn: String
+added:   EnterprisePolicies:
+added:     - Type: String
+added:       Location:
+added:         Bucket: String
+added:         Prefix: String

AWS::BedrockAgentCore::CodeInterpreterCustomLink to AWS::BedrockAgentCore::CodeInterpreterCustom

 Type: AWS::BedrockAgentCore::CodeInterpreterCustom
 Properties:
+added:   Certificates:
+added:     - CertificateLocation:
+added:         SecretArn: String

AWS::BedrockAgentCore::EvaluatorLink to AWS::BedrockAgentCore::Evaluator

 Type: AWS::BedrockAgentCore::Evaluator
 Properties:
+added:   KmsKeyArn: String

AWS::BedrockAgentCore::GatewayTargetLink to AWS::BedrockAgentCore::GatewayTarget

 Type: AWS::BedrockAgentCore::GatewayTarget
 Properties:
   TargetConfiguration:
     Mcp:
       McpServer:
+added:         ListingMode: String

AWS::BedrockAgentCore::MemoryLink to AWS::BedrockAgentCore::Memory

 Type: AWS::BedrockAgentCore::Memory
 Properties:
+added:   IndexedKeys:
+added:     - Type: String
+added:       Key: String
   MemoryStrategies:
     - CustomMemoryStrategy:
         Configuration:
           EpisodicOverride:
             Reflection:
+added:               MemoryRecordSchema:
+added:                 MetadataSchema:
+added:                   - Type: String
+added:                     ExtractionConfig:
+added:                       LlmExtractionConfig:
+added:                         Validation:
+added:                           StringValidation:
+added:                             AllowedValues:
+added:                               - String
+added:                           NumberValidation:
+added:                             MinValue: Double
+added:                             MaxValue: Double
+added:                           StringListValidation:
+added:                             AllowedValues:
+added:                               - String
+added:                             MaxItems: Integer
+added:                         Definition: String
+added:                         LlmExtractionInstruction: String
+added:                     Key: String
+added:         MemoryRecordSchema:  # MemoryRecordSchema: see above
       EpisodicMemoryStrategy:
+added:         MemoryRecordSchema:  # MemoryRecordSchema: see above
         ReflectionConfiguration:
+added:           MemoryRecordSchema:  # MemoryRecordSchema: see above
       SemanticMemoryStrategy:
+added:         MemoryRecordSchema:  # MemoryRecordSchema: see above
       SummaryMemoryStrategy:
+added:         MemoryRecordSchema:  # MemoryRecordSchema: see above
       UserPreferenceMemoryStrategy:
+added:         MemoryRecordSchema:  # MemoryRecordSchema: see above

AWS::BedrockAgentCore::OAuth2CredentialProviderLink to AWS::BedrockAgentCore::OAuth2CredentialProvider

 Type: AWS::BedrockAgentCore::OAuth2CredentialProvider
 Properties:
   Oauth2ProviderConfigInput:
     CustomOauth2ProviderConfig:
~modified:       # Required: Yes → No
       ClientId: String
~modified:       # Required: Yes → No
       ClientSecret: String
+added:       OnBehalfOfTokenExchangeConfig:
+added:         GrantType: String
+added:         TokenExchangeGrantTypeConfig:
+added:           ActorTokenContent: String
+added:           ActorTokenScopes:
+added:             - String
 Fn::GetAtt:
   Oauth2ProviderConfigOutput:
+added:     OnBehalfOfTokenExchangeConfig:  # OnBehalfOfTokenExchangeConfig: see above
+added:   Oauth2ProviderConfigOutput.OnBehalfOfTokenExchangeConfig:  # OnBehalfOfTokenExchangeConfig: see above
+added:   Oauth2ProviderConfigOutput.OnBehalfOfTokenExchangeConfig.GrantType: String
+added:   Oauth2ProviderConfigOutput.OnBehalfOfTokenExchangeConfig.TokenExchangeGrantTypeConfig:  # TokenExchangeGrantTypeConfig: see above

AWS::CloudFront::DistributionLink to AWS::CloudFront::Distribution

 Type: AWS::CloudFront::Distribution
 Properties:
   DistributionConfig:
+added:     CacheTagConfig:
+added:       HeaderName: String

AWS::CloudFront::FunctionLink to AWS::CloudFront::Function

 Type: AWS::CloudFront::Function
 Properties:
+added:   Tags:
+added:     - Value: String
+added:       Key: String

AWS::CloudFront::TrustStoreLink to AWS::CloudFront::TrustStore

 Type: AWS::CloudFront::TrustStore
 Properties:
+added:   UseClientCertificateOCSPEndpoint: Boolean

AWS::CloudWatch::DashboardLink to AWS::CloudWatch::Dashboard

 Type: AWS::CloudWatch::Dashboard
 Properties:
+added:   Tags:
+added:     - Value: String
+added:       Key: String

AWS::Cognito::UserPoolLink to AWS::Cognito::UserPool

 Type: AWS::Cognito::UserPool
 Properties:
+added:   WebAuthnFactorConfiguration: String

AWS::Connect::EvaluationFormLink to AWS::Connect::EvaluationForm

 Type: AWS::Connect::EvaluationForm
 Properties:
   Items:
     - Section:
         Items:
           - Question:
               QuestionTypeProperties:
                 MultiSelect:
                   Automation:
~modified:                     # Required: Yes → No
                     Options:
                 SingleSelect:
                   Automation:
~modified:                     # Required: Yes → No
                     Options:
             Section:  # EvaluationFormSection: see above

AWS::DataZone::ConnectionLink to AWS::DataZone::Connection

 Type: AWS::DataZone::Connection
 Properties:
+added:   Configurations:
+added:     - Classification: String
+added:       Properties:
+added:         <key>: String
   Props:
+added:     LakehouseProperties:
+added:       GlueLineageSyncEnabled: Boolean
     S3Properties:
+added:       RegisterS3AccessGrantLocation: Boolean

AWS::DataZone::DomainLink to AWS::DataZone::Domain

 Type: AWS::DataZone::Domain
 Properties:
~modified:   # Required: Yes → No
   DomainExecutionRole: String

AWS::DataZone::GroupProfileLink to AWS::DataZone::GroupProfile

 Type: AWS::DataZone::GroupProfile
 Properties:
~modified:   # Required: Yes → No
   GroupIdentifier: String
+added:   GroupType: String
+added:   RolePrincipalArn: String
 Fn::GetAtt:
+added:   RolePrincipalId: String

AWS::DataZone::ProjectLink to AWS::DataZone::Project

 Type: AWS::DataZone::Project
 Properties:
+added:   MembershipAssignments:
+added:     - Designation: String
+added:       Member:
+added:         UserIdentifier: String
+added:         GroupIdentifier: String
+added:   ProjectCategory: String
+added:   ProjectExecutionRole: String

AWS::DataZone::UserProfileLink to AWS::DataZone::UserProfile

 Type: AWS::DataZone::UserProfile
 Properties:
+added:   SessionName: String
 Fn::GetAtt:
   Details:
     Iam:
+added:       GroupProfileId: String
+added:       SessionName: String
   Details.Iam:  # IamUserProfileDetails: see above
+added:   Details.Iam.GroupProfileId: String
+added:   Details.Iam.SessionName: String

AWS::DevOpsAgent::AgentSpaceLink to AWS::DevOpsAgent::AgentSpace

 Type: AWS::DevOpsAgent::AgentSpace
 Properties:
+added:   Locale: String

AWS::DevOpsAgent::AssociationLink to AWS::DevOpsAgent::Association

 Type: AWS::DevOpsAgent::Association
 Properties:
   Configuration:
+added:     Azure:
+added:       SubscriptionId: String
     MCPServer:
~modified:       # Required: Yes → No
       Endpoint: String
~modified:       # Required: Yes → No
       Name: String
     MCPServerDatadog:
~modified:       # Required: Yes → No
       Endpoint: String
~modified:       # Required: Yes → No
       Name: String
+added:     MCPServerGrafana:
+added:       Endpoint: String
+added:       Tools:
+added:         - String
+added:       EnableWebhookUpdates: Boolean
+added:     MCPServerSigV4:
+added:       Tools:
+added:         - String
     MCPServerSplunk:
~modified:       # Required: Yes → No
       Endpoint: String
~modified:       # Required: Yes → No
       Name: String
+added:     PagerDuty:
+added:       Services:
+added:         - String
+added:       CustomerEmail: String
+added:       EnableWebhookUpdates: Boolean

AWS::DevOpsAgent::ServiceLink to AWS::DevOpsAgent::Service

 Type: AWS::DevOpsAgent::Service
 Properties:
~modified:   # Update requires: Replacement → No interruption
   ServiceDetails:
+added:     AzureIdentity:
+added:       WebIdentityRoleArn: String
+added:       TenantId: String
+added:       ClientId: String
+added:       WebIdentityTokenAudiences:
+added:         - String
+added:     MCPServerSigV4:
+added:       Description: String
+added:       Endpoint: String
+added:       AuthorizationConfig:
+added:         Region: String
+added:         Service: String
+added:         RoleArn: String
+added:         CustomHeaders:
+added:           <key>: String
+added:       Name: String
+added:     PagerDuty:
+added:       Scopes:
+added:         - String
+added:       AuthorizationConfig:
+added:         OAuthClientCredentials:
+added:           ClientId: String
+added:           ClientName: String
+added:           ExchangeParameters: Json
+added:           ClientSecret: String
 Fn::GetAtt:
   AdditionalServiceDetails:
+added:     AzureIdentity:
+added:       WebIdentityRoleArn: String
+added:       TenantId: String
+added:       ClientId: String
+added:       WebIdentityTokenAudiences:
+added:         - String
+added:     MCPServerSigV4:
+added:       Description: String
+added:       Endpoint: String
+added:       Region: String
+added:       Service: String
+added:       RoleArn: String
+added:       CustomHeaders:
+added:         <key>: String
+added:       Name: String
+added:     PagerDuty:
+added:       Scopes:
+added:         - String
+added:   AdditionalServiceDetails.AzureIdentity:  # RegisteredAzureIdentityDetails: see above
+added:   AdditionalServiceDetails.AzureIdentity.ClientId: String
+added:   AdditionalServiceDetails.AzureIdentity.TenantId: String
+added:   AdditionalServiceDetails.AzureIdentity.WebIdentityRoleArn: String
+added:   AdditionalServiceDetails.AzureIdentity.WebIdentityTokenAudiences:
+added:     - String
+added:   AdditionalServiceDetails.MCPServerSigV4:  # RegisteredMCPServerSigV4Details: see above
+added:   AdditionalServiceDetails.MCPServerSigV4.CustomHeaders:
+added:     <key>: String
+added:   AdditionalServiceDetails.MCPServerSigV4.Description: String
+added:   AdditionalServiceDetails.MCPServerSigV4.Endpoint: String
+added:   AdditionalServiceDetails.MCPServerSigV4.Name: String
+added:   AdditionalServiceDetails.MCPServerSigV4.Region: String
+added:   AdditionalServiceDetails.MCPServerSigV4.RoleArn: String
+added:   AdditionalServiceDetails.MCPServerSigV4.Service: String
+added:   AdditionalServiceDetails.PagerDuty:  # RegisteredPagerDutyDetails: see above
+added:   AdditionalServiceDetails.PagerDuty.Scopes:
+added:     - String

AWS::EC2::VPNConnectionLink to AWS::EC2::VPNConnection

 Type: AWS::EC2::VPNConnection
 Properties:
~modified:   # Update requires: Replacement → No interruption
   TunnelBandwidth: String

AWS::ECS::ServiceLink to AWS::ECS::Service

 Type: AWS::ECS::Service
 Properties:
   DeploymentConfiguration:
     LifecycleHooks:
~modified:       - # Required: Yes → No
         HookTargetArn: String
~modified:         # Required: Yes → No
         RoleArn: String
+added:         TimeoutConfiguration: Json

AWS::ElastiCache::CacheClusterLink to AWS::ElastiCache::CacheCluster

 Type: AWS::ElastiCache::CacheCluster
 Properties:
~modified:   # Update requires: Some interruptions → No interruption
   AZMode: String
-removed:   CacheSecurityGroupNames:
-removed:     - String
~modified:   # Update requires: No interruption → Some interruptions
   IpDiscovery: String
~modified:   # Duplicates allowed: No → Yes
   LogDeliveryConfigurations:
~modified:   # Update requires: Some interruptions → No interruption
   NumCacheNodes: Integer
~modified:   # Update requires: Some interruptions → No interruption
   PreferredAvailabilityZone: String
~modified:   # Duplicates allowed: No → Yes
   PreferredAvailabilityZones:
     - String
 Fn::GetAtt:
+added:   ConfigurationEndpoint:
+added:     Address: String
+added:     Port: String
+added:   RedisEndpoint:  # Endpoint: see above

AWS::ElastiCache::ReplicationGroupLink to AWS::ElastiCache::ReplicationGroup

 Type: AWS::ElastiCache::ReplicationGroup
 Properties:
~modified:   # Update requires: Replacement → No interruption
   ReplicasPerNodeGroup: Integer

AWS::EMRServerless::ApplicationLink to AWS::EMRServerless::Application

 Type: AWS::EMRServerless::Application
 Properties:
   InteractiveConfiguration:
+added:     SessionEnabled: Boolean

AWS::Interconnect::ConnectionLink to AWS::Interconnect::Connection

 Type: AWS::Interconnect::Connection
 Properties:
+added:   RemoteAccount:
+added:     Identifier: String

AWS::MediaConnect::FlowVpcInterfaceLink to AWS::MediaConnect::FlowVpcInterface

 Type: AWS::MediaConnect::FlowVpcInterface
 Properties:
+added:   Tags:
+added:     - Value: String
+added:       Key: String

AWS::MediaConvert::QueueLink to AWS::MediaConvert::Queue

 Type: AWS::MediaConvert::Queue
 Properties:
+added:   MaximumConcurrentFeeds: Integer

AWS::MSK::ClusterLink to AWS::MSK::Cluster

 Type: AWS::MSK::Cluster
 Properties:
+added:   ZookeeperAccess:
+added:     Enabled: Boolean

AWS::ObservabilityAdmin::OrganizationTelemetryRuleLink to AWS::ObservabilityAdmin::OrganizationTelemetryRule

 Type: AWS::ObservabilityAdmin::OrganizationTelemetryRule
 Properties:
   Rule:
+added:     AllRegions: Boolean
+added:     AllowFieldUpdates: Boolean
+added:     Regions:
+added:       - String
 Fn::GetAtt:
+added:   RegionStatuses:
+added:     - Status: String
+added:       RuleArn: String
+added:       Region: String

AWS::ObservabilityAdmin::TelemetryRuleLink to AWS::ObservabilityAdmin::TelemetryRule

 Type: AWS::ObservabilityAdmin::TelemetryRule
 Properties:
   Rule:
+added:     AllRegions: Boolean
+added:     AllowFieldUpdates: Boolean
+added:     Regions:
+added:       - String
 Fn::GetAtt:
+added:   RegionStatuses:
+added:     - Status: String
+added:       RuleArn: String
+added:       Region: String

AWS::ODB::OdbNetworkLink to AWS::ODB::OdbNetwork

 Type: AWS::ODB::OdbNetwork
 Fn::GetAtt:
+added:   Ec2PlacementGroupIds:
+added:     - String

AWS::QuickSight::DataSetLink to AWS::QuickSight::DataSet

 Type: AWS::QuickSight::DataSet
 Properties:
   SemanticModelConfiguration:
+added:     SemanticMetadata:
+added:       - CustomInstructions:
+added:           - InlineCustomInstruction:
+added:               InstructionText: String
+added:               UploadedDocumentMetadata:
+added:                 Name: String
+added:         Description:
+added:           Text: String
     TableMap:
       <key>:
+added:         SemanticMetadata:
+added:           ColumnMetadata:
+added:             - ColumnNames:
+added:                 - String
+added:               ColumnProperties:
+added:                 - SemanticType:
+added:                     GeographicalRole: String
+added:                   Description:
+added:                     Text: String
+added:                   AdditionalNotes:
+added:                     Text: String

AWS::RDS::CustomDBEngineVersionLink to AWS::RDS::CustomDBEngineVersion

 Type: AWS::RDS::CustomDBEngineVersion
 Properties:
+added:   DatabaseInstallationFiles:
+added:     - String

AWS::Route53GlobalResolver::GlobalResolverLink to AWS::Route53GlobalResolver::GlobalResolver

 Type: AWS::Route53GlobalResolver::GlobalResolver
 Properties:
~modified:   # Update requires: Replacement → No interruption
   Regions:
     - String

AWS::Route53Resolver::FirewallRuleGroupLink to AWS::Route53Resolver::FirewallRuleGroup

 Type: AWS::Route53Resolver::FirewallRuleGroup
 Properties:
   FirewallRules:
+added:     - FirewallRuleType:
+added:         FirewallAdvancedThreatCategory:
+added:           Category: String
+added:         FirewallAdvancedContentCategory:
+added:           Category: String

AWS::Route53Resolver::ResolverEndpointLink to AWS::Route53Resolver::ResolverEndpoint

 Type: AWS::Route53Resolver::ResolverEndpoint
 Properties:
+added:   Dns64Enabled: Boolean
+added:   Ipv6InternetAccessEnabled: Boolean

AWS::RTBFabric::ResponderGatewayLink to AWS::RTBFabric::ResponderGateway

 Type: AWS::RTBFabric::ResponderGateway
 Properties:
~modified:   # Update requires: Some interruptions → No interruption
   ManagedEndpointConfiguration:
~modified:     # Update requires: Some interruptions → No interruption
     AutoScalingGroupsConfiguration:
~modified:       # Update requires: Some interruptions → No interruption
       AutoScalingGroupNameList:
         - String
+added:       HealthCheckConfig:
+added:         Path: String
+added:         TimeoutMs: Integer
+added:         HealthyThresholdCount: Integer
+added:         Port: Integer
+added:         StatusCodeMatcher: String
+added:         Protocol: String
+added:         UnhealthyThresholdCount: Integer
+added:         IntervalSeconds: Integer
~modified:       # Update requires: Some interruptions → No interruption
       RoleArn: String
~modified:     # Update requires: Some interruptions → No interruption
     EksEndpointsConfiguration:
~modified:       # Update requires: Some interruptions → No interruption
       ClusterApiServerCaCertificateChain: String
~modified:       # Update requires: Some interruptions → No interruption
       ClusterApiServerEndpointUri: String
~modified:       # Update requires: Some interruptions → No interruption
       ClusterName: String
~modified:       # Update requires: Some interruptions → No interruption
       EndpointsResourceName: String
~modified:       # Update requires: Some interruptions → No interruption
       EndpointsResourceNamespace: String
~modified:       # Update requires: Some interruptions → No interruption
       RoleArn: String

AWS::S3Express::DirectoryBucketLink to AWS::S3Express::DirectoryBucket

 Type: AWS::S3Express::DirectoryBucket
 Properties:
   MetricsConfigurations:
~modified:     - # Required: No → Yes
       Id: String

AWS::SageMaker::EndpointConfigLink to AWS::SageMaker::EndpointConfig

 Type: AWS::SageMaker::EndpointConfig
 Properties:
   ProductionVariants:
+added:     - InstancePools:
+added:         - ModelNameOverride: String
+added:           Priority: Integer
+added:           InstanceType: String
+added:       VariantInstanceProvisionTimeoutInSeconds: Integer
   ShadowProductionVariants:  # ProductionVariant: see above

AWS::VpcLattice::ResourceGatewayLink to AWS::VpcLattice::ResourceGateway

 Type: AWS::VpcLattice::ResourceGateway
 Properties:
+added:   ResourceConfigDnsResolution: String