CloudFormation Changelog

Changes to the CloudFormation resource specification.

ADDED: 8
REMOVED: 0
MODIFIED: 19
DOCUMENTATION: 0

New resource types

AWS::BedrockAgentCore::PaymentConnectorLink to AWS::BedrockAgentCore::PaymentConnector

 Type: AWS::BedrockAgentCore::PaymentConnector
 Properties:
   Description: String
   ConnectorType: String
   ConnectorName: String
   PaymentManagerId: String
   CredentialProviderConfigurations:
     - CoinbaseCDP:
         CredentialProviderArn: String
       StripePrivy:  # PaymentCredentialProviderConfiguration: see above
 Fn::GetAtt:
   ConnectorCreatedAt: String
   ConnectorLastUpdatedAt: String
   PaymentConnectorId: String
   ConnectorStatus: String
   PaymentConnectorArn: String

AWS::BedrockAgentCore::ResourcePolicyLink to AWS::BedrockAgentCore::ResourcePolicy

 Type: AWS::BedrockAgentCore::ResourcePolicy
 Properties:
   Policy: String
   ResourceArn: String

AWS::OpenSearchServerless::CollectionIndexLink to AWS::OpenSearchServerless::CollectionIndex

 Type: AWS::OpenSearchServerless::CollectionIndex
 Properties:
   IndexName: String
   IndexSchema: String
   Id: String

AWS::ResilienceHubV2::PolicyLink to AWS::ResilienceHubV2::Policy

 Type: AWS::ResilienceHubV2::Policy
 Properties:
   MultiRegion:
     DisasterRecoveryApproach: String
     RpoInMinutes: Integer
     RtoInMinutes: Integer
   AvailabilitySlo:
     Target: Double
   Description: String
   KmsKeyId: String
   DataRecovery:
     TimeBetweenBackupsInMinutes: Integer
   MultiAz:
     DisasterRecoveryApproach: String
     RpoInMinutes: Integer
     RtoInMinutes: Integer
   Tags:
     - Value: String
       Key: String
   Name: String
 Fn::GetAtt:
   PolicyArn: String
   CreatedAt: String
   AssociatedServiceCount: Integer
   UpdatedAt: String

AWS::ResilienceHubV2::ServiceLink to AWS::ResilienceHubV2::Service

 Type: AWS::ResilienceHubV2::Service
 Properties:
   Description: String
   AssociatedSystems:
     - SystemArn: String
       UserJourneyIds:
         - String
   KmsKeyId: String
   PolicyArn: String
   PermissionModel:
     CrossAccountRoleArns:
       - CrossAccountRoleArn: String
         ExternalId: String
     InvokerRoleName: String
   Regions:
     - String
   DependencyDiscovery: String
   ReportConfiguration:
     ReportOutput:
       - S3:
           BucketPath: String
           BucketOwner: String
   InputSources:
     - ResourceConfiguration:
         CfnStackArn: String
         ResourceTags:
           - Values:
               - String
             Key: String
         TfStateFileUrl: String
         Eks:
           ClusterArn: String
           Namespaces:
             - String
         DesignFileS3Url: String
   Assertions:
     - Text: String
   Tags:
     - Value: String
       Key: String
   Name: String
 Fn::GetAtt:
   EffectivePolicyValues.MultiAzRpo.PolicyName: String
   EffectivePolicyValues.MultiAzDrApproach.Value: String
   CreatedAt: String
   EffectivePolicyValues.MultiAzRpo.Value: Integer
   EffectivePolicyValues.MultiRegionDrApproach.Value: String
   ServiceArn: String
   EffectivePolicyValues.AvailabilitySlo.PolicyName: String
   EffectivePolicyValues.MultiRegionDrApproach:
     Value: String
     PolicyName: String
   EffectivePolicyValues.MultiRegionRpo.PolicyName: String
   EffectivePolicyValues.MultiRegionRto.PolicyName: String
   EffectivePolicyValues.MultiAzDrApproach:  # DisasterRecoverySource: see above
   EffectivePolicyValues:
     AvailabilitySlo:
       PolicyName: String
       Value: Double
     MultiAzRto:
       Value: Integer
       PolicyName: String
     MultiAzRpo:  # TargetSource: see above
     MultiRegionDrApproach:  # DisasterRecoverySource: see above
     MultiRegionRto:  # TargetSource: see above
     MultiAzDrApproach:  # DisasterRecoverySource: see above
     MultiRegionRpo:  # TargetSource: see above
   EffectivePolicyValues.MultiRegionRpo.Value: Integer
   EffectivePolicyValues.MultiRegionRto.Value: Integer
   EffectivePolicyValues.MultiRegionDrApproach.PolicyName: String
   EffectivePolicyValues.MultiAzRto:  # TargetSource: see above
   UpdatedAt: String
   EffectivePolicyValues.AvailabilitySlo:  # SloSource: see above
   EffectivePolicyValues.MultiAzRto.Value: Integer
   EffectivePolicyValues.MultiAzRpo:  # TargetSource: see above
   EffectivePolicyValues.MultiAzRto.PolicyName: String
   EffectivePolicyValues.MultiAzDrApproach.PolicyName: String
   EffectivePolicyValues.MultiRegionRto:  # TargetSource: see above
   EffectivePolicyValues.AvailabilitySlo.Value: Double
   EffectivePolicyValues.MultiRegionRpo:  # TargetSource: see above

AWS::ResilienceHubV2::SystemLink to AWS::ResilienceHubV2::System

 Type: AWS::ResilienceHubV2::System
 Properties:
   Description: String
   KmsKeyId: String
   Tags:
     - Value: String
       Key: String
   Name: String
 Fn::GetAtt:
   SystemArn: String
   CreatedAt: String
   SystemId: String
   UpdatedAt: String

AWS::RTBFabric::LinkRoutingRuleLink to AWS::RTBFabric::LinkRoutingRule

 Type: AWS::RTBFabric::LinkRoutingRule
 Properties:
   Priority: Integer
   GatewayId: String
   LinkId: String
   Conditions:
     HostHeader: String
     HostHeaderWildcard: String
     QueryStringEquals:
       Value: String
       Key: String
     PathExact: String
     PathPrefix: String
     QueryStringExists: String
   Tags:
     - Value: String
       Key: String
 Fn::GetAtt:
   Status: String
   UpdatedTimestamp: String
   CreatedTimestamp: String
   RuleId: String
   Arn: String

AWS::VerifiedPermissions::PolicyStoreAliasLink to AWS::VerifiedPermissions::PolicyStoreAlias

 Type: AWS::VerifiedPermissions::PolicyStoreAlias
 Properties:
   AliasName: String
   PolicyStoreId: String

Changed resource types

AWS::AppStream::UserLink to AWS::AppStream::User

 Type: AWS::AppStream::User
 Fn::GetAtt:
+added:   Arn: String

AWS::BedrockAgentCore::ApiKeyCredentialProviderLink to AWS::BedrockAgentCore::ApiKeyCredentialProvider

 Type: AWS::BedrockAgentCore::ApiKeyCredentialProvider
 Properties:
+added:   ApiKeySecretConfig:
+added:     SecretId: String
+added:     JsonKey: String
+added:   ApiKeySecretSource: String
 Fn::GetAtt:
+added:   ApiKeySecretJsonKey: String

AWS::BedrockAgentCore::GatewayLink to AWS::BedrockAgentCore::Gateway

 Type: AWS::BedrockAgentCore::Gateway
 Properties:
~modified:   # Required: Yes → No
~modified:   ProtocolType: String → Json

AWS::BedrockAgentCore::GatewayTargetLink to AWS::BedrockAgentCore::GatewayTarget

 Type: AWS::BedrockAgentCore::GatewayTarget
 Properties:
+added:   PrivateEndpoint:
+added:     ManagedVpcResource:
+added:       RoutingDomain: String
+added:       VpcIdentifier: String
+added:       SubnetIds:
+added:         - String
+added:       EndpointIpAddressType: String
+added:       SecurityGroupIds:
+added:         - String
+added:     SelfManagedLatticeResource:
+added:       ResourceConfigurationIdentifier: String
   TargetConfiguration:
+added:     Http:
+added:       AgentcoreRuntime:
+added:         Qualifier: String
+added:         Arn: String
~modified:     # Required: Yes → No
     Mcp:
       McpServer:
+added:         McpToolSchema:
+added:           S3:
+added:             BucketOwnerAccountId: String
+added:             Uri: String
+added:           InlinePayload: String
 Fn::GetAtt:
+added:   AuthorizationData:
+added:     Oauth2:
+added:       AuthorizationUrl: String
+added:       UserId: String
+added:   AuthorizationData.Oauth2:  # OAuth2AuthorizationData: see above
+added:   AuthorizationData.Oauth2.AuthorizationUrl: String
+added:   AuthorizationData.Oauth2.UserId: String
+added:   PrivateEndpointManagedResources:
+added:     - ResourceGatewayArn: String
+added:       ResourceAssociationArn: String
+added:       Domain: String
+added:   ProtocolType: String

AWS::BedrockAgentCore::OAuth2CredentialProviderLink to AWS::BedrockAgentCore::OAuth2CredentialProvider

 Type: AWS::BedrockAgentCore::OAuth2CredentialProvider
 Properties:
   Oauth2ProviderConfigInput:
     AtlassianOauth2ProviderConfig:
~modified:       # Required: Yes → No
       ClientSecret: String
+added:       ClientSecretConfig:
+added:         JsonKey: String
+added:         SecretId: String
+added:       ClientSecretSource: String
     CustomOauth2ProviderConfig:
+added:       ClientAuthenticationMethod: String
+added:       ClientSecretConfig:  # SecretReference: see above
+added:       ClientSecretSource: String
     GithubOauth2ProviderConfig:
~modified:       # Required: Yes → No
       ClientSecret: String
+added:       ClientSecretConfig:  # SecretReference: see above
+added:       ClientSecretSource: String
     GoogleOauth2ProviderConfig:
~modified:       # Required: Yes → No
       ClientSecret: String
+added:       ClientSecretConfig:  # SecretReference: see above
+added:       ClientSecretSource: String
     IncludedOauth2ProviderConfig:
~modified:       # Required: Yes → No
       ClientSecret: String
+added:       ClientSecretConfig:  # SecretReference: see above
+added:       ClientSecretSource: String
     LinkedinOauth2ProviderConfig:
~modified:       # Required: Yes → No
       ClientSecret: String
+added:       ClientSecretConfig:  # SecretReference: see above
+added:       ClientSecretSource: String
     MicrosoftOauth2ProviderConfig:
~modified:       # Required: Yes → No
       ClientSecret: String
+added:       ClientSecretConfig:  # SecretReference: see above
+added:       ClientSecretSource: String
     SalesforceOauth2ProviderConfig:
~modified:       # Required: Yes → No
       ClientSecret: String
+added:       ClientSecretConfig:  # SecretReference: see above
+added:       ClientSecretSource: String
     SlackOauth2ProviderConfig:
~modified:       # Required: Yes → No
       ClientSecret: String
+added:       ClientSecretConfig:  # SecretReference: see above
+added:       ClientSecretSource: String
 Fn::GetAtt:
+added:   ClientSecretJsonKey: String
+added:   ClientSecretSource: String
   Oauth2ProviderConfigOutput:
+added:     ClientAuthenticationMethod: String
+added:   Oauth2ProviderConfigOutput.ClientAuthenticationMethod: String

AWS::BedrockAgentCore::PaymentCredentialProviderLink to AWS::BedrockAgentCore::PaymentCredentialProvider

 Type: AWS::BedrockAgentCore::PaymentCredentialProvider
 Properties:
   ProviderConfigurationInput:
     CoinbaseCdpConfiguration:
~modified:       # Required: Yes → No
       ApiKeySecret: String
+added:       ApiKeySecretConfig:
+added:         JsonKey: String
+added:         SecretId: String
+added:       ApiKeySecretSource: String
+added:       WalletSecretConfig:  # SecretReference: see above
+added:       WalletSecretSource: String
     StripePrivyConfiguration:
~modified:       # Required: Yes → No
       AppSecret: String
+added:       AppSecretConfig:  # SecretReference: see above
+added:       AppSecretSource: String
~modified:       # Required: Yes → No
       AuthorizationPrivateKey: String
+added:       AuthorizationPrivateKeyConfig:  # SecretReference: see above
+added:       AuthorizationPrivateKeySource: String
 Fn::GetAtt:
   ProviderConfigurationOutput:
     CoinbaseCdpConfiguration:
+added:       ApiKeySecretJsonKey: String
+added:       ApiKeySecretSource: String
+added:       WalletSecretJsonKey: String
+added:       WalletSecretSource: String
     StripePrivyConfiguration:
+added:       AppSecretJsonKey: String
+added:       AppSecretSource: String
+added:       AuthorizationPrivateKeyJsonKey: String
+added:       AuthorizationPrivateKeySource: String
   ProviderConfigurationOutput.CoinbaseCdpConfiguration:  # CoinbaseCdpConfigurationOutput: see above
+added:   ProviderConfigurationOutput.CoinbaseCdpConfiguration.ApiKeySecretJsonKey: String
+added:   ProviderConfigurationOutput.CoinbaseCdpConfiguration.ApiKeySecretSource: String
+added:   ProviderConfigurationOutput.CoinbaseCdpConfiguration.WalletSecretJsonKey: String
+added:   ProviderConfigurationOutput.CoinbaseCdpConfiguration.WalletSecretSource: String
   ProviderConfigurationOutput.StripePrivyConfiguration:  # StripePrivyConfigurationOutput: see above
+added:   ProviderConfigurationOutput.StripePrivyConfiguration.AppSecretJsonKey: String
+added:   ProviderConfigurationOutput.StripePrivyConfiguration.AppSecretSource: String
+added:   ProviderConfigurationOutput.StripePrivyConfiguration.AuthorizationPrivateKeyJsonKey: String
+added:   ProviderConfigurationOutput.StripePrivyConfiguration.AuthorizationPrivateKeySource: String

AWS::ConnectCampaignsV2::CampaignLink to AWS::ConnectCampaignsV2::Campaign

 Type: AWS::ConnectCampaignsV2::Campaign
 Properties:
   CommunicationTimeConfig:
     LocalTimeZoneConfig:
+added:       LocalTimeZoneDetectionScope: String

AWS::DevOpsAgent::ServiceLink to AWS::DevOpsAgent::Service

 Type: AWS::DevOpsAgent::Service
 Fn::GetAtt:
~modified:   AccessibleResources: List of Json → Json

AWS::EC2::RouteLink to AWS::EC2::Route

 Type: AWS::EC2::Route
 Properties:
+added:   OdbNetworkArn: String

AWS::ECS::DaemonTaskDefinitionLink to AWS::ECS::DaemonTaskDefinition

 Type: AWS::ECS::DaemonTaskDefinition
 Properties:
+added:   IpcMode: String
+added:   PidMode: String

AWS::ElastiCache::ReplicationGroupLink to AWS::ElastiCache::ReplicationGroup

 Type: AWS::ElastiCache::ReplicationGroup
 Properties:
+added:   Durability: String
 Fn::GetAtt:
+added:   EffectiveDurability: String

AWS::Lambda::CapacityProviderLink to AWS::Lambda::CapacityProvider

 Type: AWS::Lambda::CapacityProvider
 Properties:
+added:   PropagateTags:
+added:     Mode: String
+added:     ExplicitTags:
+added:       - Value: String
+added:         Key: String

AWS::Lambda::FunctionLink to AWS::Lambda::Function

 Type: AWS::Lambda::Function
 Properties:
   Code:
-removed:     S3ObjectStorageMode: String

AWS::Lex::BotLink to AWS::Lex::Bot

 Type: AWS::Lex::Bot
 Properties:
   BotLocales:
+added:     - AudioFillerSettings:
+added:         Enabled: Boolean
+added:         AudioType: String
+added:         MinimumPlayDurationInMilliseconds: Integer
+added:         ResponseDeliveryDelayInMilliseconds: Integer
+added:         StartDelayInMilliseconds: Integer

AWS::OpenSearchServerless::CollectionLink to AWS::OpenSearchServerless::Collection

 Type: AWS::OpenSearchServerless::Collection
 Properties:
+added:   DeletionProtection: String

AWS::PaymentCryptography::KeyLink to AWS::PaymentCryptography::Key

 Type: AWS::PaymentCryptography::Key
 Properties:
+added:   Policy: String

AWS::RTBFabric::ResponderGatewayLink to AWS::RTBFabric::ResponderGateway

 Type: AWS::RTBFabric::ResponderGateway
 Properties:
+added:   AcmCertificateArn: String
+added:   GatewayType: String
+added:   ListenerConfig:
+added:     Protocols:
+added:       - String
~modified:   # Update requires: No interruption → Some interruptions
   ManagedEndpointConfiguration:
~modified:     # Update requires: No interruption → Some interruptions
     AutoScalingGroupsConfiguration:
~modified:       # Update requires: No interruption → Some interruptions
       AutoScalingGroupNameList:
         - String
~modified:       # Update requires: No interruption → Some interruptions
       HealthCheckConfig:
~modified:         # Update requires: No interruption → Some interruptions
         HealthyThresholdCount: Integer
~modified:         # Update requires: No interruption → Some interruptions
         IntervalSeconds: Integer
~modified:         # Update requires: No interruption → Some interruptions
         Path: String
~modified:         # Update requires: No interruption → Some interruptions
         Port: Integer
~modified:         # Update requires: No interruption → Some interruptions
         Protocol: String
~modified:         # Update requires: No interruption → Some interruptions
         StatusCodeMatcher: String
~modified:         # Update requires: No interruption → Some interruptions
         TimeoutMs: Integer
~modified:         # Update requires: No interruption → Some interruptions
         UnhealthyThresholdCount: Integer
~modified:       # Update requires: No interruption → Some interruptions
       RoleArn: String
~modified:     # Update requires: No interruption → Some interruptions
     EksEndpointsConfiguration:
~modified:       # Update requires: No interruption → Some interruptions
       ClusterApiServerCaCertificateChain: String
~modified:       # Update requires: No interruption → Some interruptions
       ClusterApiServerEndpointUri: String
~modified:       # Update requires: No interruption → Some interruptions
       ClusterName: String
~modified:       # Update requires: No interruption → Some interruptions
       EndpointsResourceName: String
~modified:       # Update requires: No interruption → Some interruptions
       EndpointsResourceNamespace: String
~modified:       # Update requires: No interruption → Some interruptions
       RoleArn: String
 Fn::GetAtt:
+added:   CertificateAssociationStatus: String
+added:   ExternalInboundEndpoint: String

AWS::SageMaker::DomainLink to AWS::SageMaker::Domain

 Type: AWS::SageMaker::Domain
 Properties:
   DefaultSpaceSettings:
     JupyterLabAppSettings:
       DefaultResourceSpec:
+added:         TrainingPlanArn: String
     JupyterServerAppSettings:
       DefaultResourceSpec:  # ResourceSpec: see above
     KernelGatewayAppSettings:
       DefaultResourceSpec:  # ResourceSpec: see above
   DefaultUserSettings:
     CodeEditorAppSettings:
       DefaultResourceSpec:  # ResourceSpec: see above
     JupyterLabAppSettings:  # JupyterLabAppSettings: see above
     JupyterServerAppSettings:  # JupyterServerAppSettings: see above
     KernelGatewayAppSettings:  # KernelGatewayAppSettings: see above
     RSessionAppSettings:
       DefaultResourceSpec:  # ResourceSpec: see above
   DomainSettings:
     RStudioServerProDomainSettings:
       DefaultResourceSpec:  # ResourceSpec: see above
+added:   HomeEfsFileSystemCreation: String

AWS::SSO::ApplicationLink to AWS::SSO::Application

 Type: AWS::SSO::Application
 Fn::GetAtt:
+added:   IdentityStoreArn: String