CloudFormation Changelog

Changes to the CloudFormation resource specification.

ADDED: 4
REMOVED: 0
MODIFIED: 26
DOCUMENTATION: 52

New resource types

AWS::BedrockAgentCore::ConfigurationBundleLink to AWS::BedrockAgentCore::ConfigurationBundle

 Type: AWS::BedrockAgentCore::ConfigurationBundle
 Properties:
   Components:
     <key>:
       Configuration: Json
   Description: String
   CreatedBy:
     Arn: String
     Name: String
   CommitMessage: String
   KmsKeyArn: String
   BundleName: String
   BranchName: String
   Tags:
     - Value: String
       Key: String
 Fn::GetAtt:
   VersionId: String
   LineageMetadata:
     CreatedBy:  # VersionCreatedBySource: see above
     ParentVersionIds:
       - String
     CommitMessage: String
     BranchName: String
   LineageMetadata.ParentVersionIds:
     - String
   BundleId: String
   LineageMetadata.CommitMessage: String
   LineageMetadata.CreatedBy.Name: String
   CreatedAt: String
   LineageMetadata.BranchName: String
   BundleArn: String
   UpdatedAt: String
   LineageMetadata.CreatedBy:  # VersionCreatedBySource: see above
   LineageMetadata.CreatedBy.Arn: String

AWS::CloudWatch::LogAlarmLink to AWS::CloudWatch::LogAlarm

 Type: AWS::CloudWatch::LogAlarm
 Properties:
   ComparisonOperator: String
   TreatMissingData: String
   ScheduledQueryConfiguration:
     ScheduledQueryRoleARN: String
     ScheduleConfiguration:
       ScheduleExpression: String
       StartTimeOffset: Integer
       EndTimeOffset: Integer
     QueryString: String
     LogGroupIdentifiers:
       - String
     AggregationExpression: String
   QueryResultsToEvaluate: Integer
   OKActions:
     - String
   AlarmActions:
     - String
   ActionsEnabled: Boolean
   ActionLogLineRoleArn: String
   AlarmName: String
   AlarmDescription: String
   ActionLogLineCount: Integer
   InsufficientDataActions:
     - String
   QueryResultsToAlarm: Integer
   Tags:
     - Value: String
       Key: String
   Threshold: Double
 Fn::GetAtt:
   Arn: String

AWS::ElementalInference::DictionaryLink to AWS::ElementalInference::Dictionary

 Type: AWS::ElementalInference::Dictionary
 Properties:
   Language: String
   Entries: String
   Tags:
     <key>: String
   Name: String
 Fn::GetAtt:
   Id: String
   Arn: String

AWS::Neptune::GlobalClusterLink to AWS::Neptune::GlobalCluster

 Type: AWS::Neptune::GlobalCluster
 Properties:
   StorageEncrypted: Boolean
   EngineVersion: String
   SourceDBClusterIdentifier: String
   DeletionProtection: Boolean
   GlobalClusterIdentifier: String
   Engine: String
   Tags:
     - Value: String
       Key: String

Changed resource types

AWS::BedrockAgentCore::GatewayTargetLink to AWS::BedrockAgentCore::GatewayTarget

 Type: AWS::BedrockAgentCore::GatewayTarget
 Properties:
~modified:   # Required: Yes → No
   Name: String
   TargetConfiguration:
     Http:
~modified:       # Required: Yes → No
       AgentcoreRuntime:
+added:         Schema:
+added:           Source:
+added:             S3:
+added:               BucketOwnerAccountId: String
+added:               Uri: String
+added:             InlinePayload: String
+added:       Passthrough:
+added:         Endpoint: String
+added:         ProtocolType: String
+added:         Schema:  # HttpApiSchemaConfiguration: see above
+added:         StickinessConfiguration:
+added:           Identifier: String
+added:           Timeout: Integer
     Mcp:
+added:       Connector:
+added:         Enabled:
+added:           - String
+added:         Configurations:
+added:           - Description: String
+added:             ParameterOverrides:
+added:               - Path: String
+added:                 Description: String
+added:                 Visible: Boolean
+added:             ParameterValues: Json
+added:             Name: String
+added:         Source:
+added:           ConnectorId: String

AWS::BedrockAgentCore::HarnessLink to AWS::BedrockAgentCore::Harness

 Type: AWS::BedrockAgentCore::Harness
 Properties:
   AuthorizerConfiguration:
     CustomJWTAuthorizer:
+added:       PrivateEndpoint:
+added:         SelfManagedLatticeResource:
+added:           ResourceConfigurationIdentifier: String
+added:         ManagedVpcResource:
+added:           RoutingDomain: String
+added:           VpcIdentifier: String
+added:           SubnetIds:
+added:             - String
+added:           EndpointIpAddressType: String
+added:           SecurityGroupIds:
+added:             - String
+added:           Tags:
+added:             <key>: String
+added:       PrivateEndpointOverrides:
+added:         - Domain: String
+added:           PrivateEndpoint:  # PrivateEndpoint: see above
   Environment:
     AgentCoreRuntimeEnvironment:
       FilesystemConfigurations:
+added:         - EfsAccessPoint:
+added:             MountPath: String
+added:             AccessPointArn: String
+added:           S3FilesAccessPoint:
+added:             MountPath: String
+added:             AccessPointArn: String
~modified:           # Required: Yes → No
           SessionStorage:
~modified:       # Update requires: Replacement → No interruption
       NetworkConfiguration:
~modified:         # Update requires: Replacement → No interruption
         NetworkMode: String
~modified:         # Update requires: Replacement → No interruption
         NetworkModeConfig:
~modified:           # Update requires: Replacement → No interruption
           SecurityGroups:
             - String
~modified:           # Update requires: Replacement → No interruption
           Subnets:
             - String
   Memory:
     AgentCoreMemoryConfiguration:
       RetrievalConfig:
         <key>:
~modified:           RelevanceScore: Double → String
~modified:           TopK: Integer → String
   Model:
     BedrockModelConfig:
+added:       AdditionalParams:
+added:         <key>: Json
+added:       ApiFormat: String
+added:     LiteLlmModelConfig:
+added:       ApiBase: String
+added:       Temperature: Double
+added:       AdditionalParams:
+added:         <key>: Json
+added:       MaxTokens: Integer
+added:       ApiKeyArn: String
+added:       TopP: Double
+added:       ModelId: String
     OpenAiModelConfig:
+added:       AdditionalParams:
+added:         <key>: Json
+added:       ApiFormat: String
   Skills:
+added:     - Git:
+added:         Path: String
+added:         Auth:
+added:           Username: String
+added:           CredentialArn: String
+added:         Url: String
~modified:       # Required: Yes → No
       Path: String
+added:       S3:
+added:         Uri: String

AWS::BedrockAgentCore::OnlineEvaluationConfigLink to AWS::BedrockAgentCore::OnlineEvaluationConfig

 Type: AWS::BedrockAgentCore::OnlineEvaluationConfig
 Properties:
+added:   ClusteringConfig:
+added:     Frequencies:
+added:       - String
~modified:   # Required: Yes → No
   Evaluators:
+added:   Insights:
+added:     - InsightId: String

AWS::BedrockAgentCore::PolicyLink to AWS::BedrockAgentCore::Policy

 Type: AWS::BedrockAgentCore::Policy
 Properties:
   Definition:
~modified:     # Required: Yes → No
     Cedar:
+added:     Policy:
+added:       Statement: String
+added:   EnforcementMode: String

AWS::CodePipeline::WebhookLink to AWS::CodePipeline::Webhook

 Type: AWS::CodePipeline::Webhook
 Properties:
+added:   Tags:
+added:     - Value: String
+added:       Key: String

AWS::EC2::FlowLogLink to AWS::EC2::FlowLog

 Type: AWS::EC2::FlowLog
 Properties:
+added:   TagFieldSpecifications:
+added:     - ResourceType: String
+added:       TagKeys:
+added:         - String

AWS::ECS::ServiceLink to AWS::ECS::Service

 Type: AWS::ECS::Service
 Properties:
+added:   Monitoring:
+added:     MetricConfigurations:
+added:       - ResolutionSeconds: Integer
+added:         MetricNames:
+added:           - String

AWS::EKS::ClusterLink to AWS::EKS::Cluster

 Type: AWS::EKS::Cluster
 Properties:
   ResourcesVpcConfig:
+added:     ControlPlaneEgressMode: String

AWS::ElasticLoadBalancing::LoadBalancerLink to AWS::ElasticLoadBalancing::LoadBalancer

 Type: AWS::ElasticLoadBalancing::LoadBalancer
 Properties:
~modified:   # Duplicates allowed: No → Yes
   AppCookieStickinessPolicy:
~modified:   # Duplicates allowed: No → Yes
   AvailabilityZones:
     - String
   HealthCheck:
~modified:     # Update requires: No interruption → Some interruptions
     HealthyThreshold: String
~modified:     # Update requires: No interruption → Some interruptions
     Interval: String
~modified:     # Update requires: No interruption → Some interruptions
     Target: String
~modified:     # Update requires: No interruption → Some interruptions
     Timeout: String
~modified:     # Update requires: No interruption → Some interruptions
     UnhealthyThreshold: String
~modified:   # Duplicates allowed: No → Yes
   Instances:
     - String
~modified:   # Duplicates allowed: No → Yes
   LBCookieStickinessPolicy:
~modified:   # Duplicates allowed: No → Yes
   Listeners:
~modified:     - # Duplicates allowed: No → Yes
       PolicyNames:
         - String
~modified:   # Duplicates allowed: No → Yes
   Policies:
~modified:     - # Duplicates allowed: No → Yes
~modified:       Attributes: List of Json → List of PolicyItem
+added:         Value: String
+added:         Name: String
~modified:       # Duplicates allowed: No → Yes
       InstancePorts:
         - String
~modified:       # Duplicates allowed: No → Yes
       LoadBalancerPorts:
         - String
~modified:   # Duplicates allowed: No → Yes
   SecurityGroups:
     - String
~modified:   # Duplicates allowed: No → Yes
   Subnets:
     - String
 Fn::GetAtt:
+added:   SourceSecurityGroup:
+added:     GroupName: String
+added:     OwnerAlias: String

AWS::ElementalInference::FeedLink to AWS::ElementalInference::Feed

 Type: AWS::ElementalInference::Feed
 Properties:
   Outputs:
     - OutputConfig:
+added:         Subtitling:
+added:           AspectRatio:
+added:             Height: Integer
+added:             Width: Integer
+added:           Dictionary: String
+added:           Language: String
+added:           ProfanityFilter: String

AWS::GameLift::ContainerGroupDefinitionLink to AWS::GameLift::ContainerGroupDefinition

 Type: AWS::GameLift::ContainerGroupDefinition
 Properties:
   GameServerContainerDefinition:
+added:     LinuxCapabilities:
+added:       Include:
+added:         - String
   SupportContainerDefinitions:
+added:     - LinuxCapabilities:  # LinuxCapabilities: see above

AWS::Interconnect::ConnectionLink to AWS::Interconnect::Connection

 Type: AWS::Interconnect::Connection
 Properties:
-removed:   RemoteOwnerAccount: String

AWS::Lambda::CapacityProviderLink to AWS::Lambda::CapacityProvider

 Type: AWS::Lambda::CapacityProvider
 Properties:
+added:   TelemetryConfig:
+added:     LoggingConfig:
+added:       LogGroup: String
+added:       SystemLogLevel: String

AWS::Lambda::LayerVersionLink to AWS::Lambda::LayerVersion

 Type: AWS::Lambda::LayerVersion
 Properties:
   Content:
+added:     S3ObjectStorageMode: String

AWS::MediaLive::ChannelLink to AWS::MediaLive::Channel

 Type: AWS::MediaLive::Channel
 Properties:
   EncoderSettings:
     AudioDescriptions:
       - AudioNormalizationSettings:
+added:           PeakCalculation: String
+added:           PeakLimiterThreshold: Double
   InferenceSettings:
+added:     AudioFeedInputs:
+added:       - AudioSelectorName: String
+added:         FeedInput: String
   InputAttachments:
     - InputSettings:
         AudioSelectors:
           - SelectorSettings:
               AudioPidSelection:
+added:                 Pids:
+added:                   - DolbyEDecode:
+added:                       ProgramSelection: String
+added:                     PremixSettings:
+added:                       AudioNormalizationSettings:
+added:                         PeakCalculation: String
+added:                         TargetLkfs: Double
+added:                         Algorithm: String
+added:                         AlgorithmControl: String
+added:                         PeakLimiterThreshold: Double
+added:                       RemixSettings:
+added:                         ChannelsOut: Integer
+added:                         ChannelMappings:
+added:                           - OutputChannel: Integer
+added:                             InputChannelLevels:
+added:                               - InputChannel: Integer
+added:                                 Gain: Integer
+added:                         ChannelsIn: Integer
+added:                       GainDb: Double
+added:                       Channels: Integer
+added:                     Pid: Integer
               AudioTrackSelection:
                 Tracks:
+added:                   - PremixSettings:  # AudioPreMixerSettings: see above
         CaptionSelectors:
           - SelectorSettings:
+added:               SmartSubtitleSourceSettings:
+added:                 CaptionSynchronizationMode: String
+added:                 InferenceFeedOutput: String

AWS::MediaPackageV2::OriginEndpointLink to AWS::MediaPackageV2::OriginEndpoint

 Type: AWS::MediaPackageV2::OriginEndpoint
 Properties:
   DashManifests:
+added:     - AudioTimelinePattern: String

AWS::MediaTailor::PlaybackConfigurationLink to AWS::MediaTailor::PlaybackConfiguration

 Type: AWS::MediaTailor::PlaybackConfiguration
 Properties:
+added:   FunctionMapping:
+added:     <key>: String

AWS::ObservabilityAdmin::OrganizationCentralizationRuleLink to AWS::ObservabilityAdmin::OrganizationCentralizationRule

 Type: AWS::ObservabilityAdmin::OrganizationCentralizationRule
 Properties:
   Rule:
     Destination:
+added:       DestinationMetricsConfiguration:
+added:         BackupConfiguration:
+added:           Region: String
     Source:
+added:       SourceMetricsConfiguration:
+added:         MetricsSelectionCriteria: String

AWS::QuickSight::ActionConnectorLink to AWS::QuickSight::ActionConnector

 Type: AWS::QuickSight::ActionConnector
 Properties:
~modified:   # Required: No → Yes
   AuthenticationConfig:

AWS::RAM::ResourceShareLink to AWS::RAM::ResourceShare

 Type: AWS::RAM::ResourceShare
 Properties:
+added:   ResourceShareConfiguration:
+added:     ExclusiveAccountAccess: Boolean
+added:     RetainSharingOnAccountLeaveOrganization: Boolean

AWS::S3::BucketLink to AWS::S3::Bucket

 Type: AWS::S3::Bucket
 Properties:
   MetadataConfiguration:
+added:     AnnotationTableConfiguration:
+added:       Role: String
+added:       TableName: String
+added:       ConfigurationState: String
+added:       TableArn: String
+added:       EncryptionConfiguration:
+added:         KmsKeyArn: String
+added:         SseAlgorithm: String
 Fn::GetAtt:
+added:   MetadataConfiguration.AnnotationTableConfiguration.TableArn: String
+added:   MetadataConfiguration.AnnotationTableConfiguration.TableName: String

AWS::SageMaker::ClusterLink to AWS::SageMaker::Cluster

 Type: AWS::SageMaker::Cluster
 Properties:
   RestrictedInstanceGroups:
~modified:     - # Required: Yes → No
       EnvironmentConfig:
+added:   RestrictedInstanceGroupsConfig:
+added:     SharedEnvironmentConfig:
+added:       FSxLustreDeletionPolicy: String
+added:       FSxLustreConfig:
+added:         SizeInGiB: Integer
+added:         PerUnitStorageThroughput: Integer

AWS::SSM::AssociationLink to AWS::SSM::Association

 Type: AWS::SSM::Association
 Properties:
+added:   AssociationDispatchAssumeRole: String
+added:   Tags:
+added:     - Value: String
+added:       Key: String

AWS::WAFv2::RuleGroupLink to AWS::WAFv2::RuleGroup

 Type: AWS::WAFv2::RuleGroup
 Properties:
+added:   MonetizationConfig:
+added:     CurrencyMode: String
+added:     CryptoConfig:
+added:       PaymentNetworks:
+added:         - Chain: String
+added:           Prices:
+added:             - Amount: String
+added:               Currency: String
+added:           WalletAddress: String
   Rules:
     - Action:
+added:         Monetize:
+added:           PriceMultiplier: String

AWS::WAFv2::WebACLLink to AWS::WAFv2::WebACL

 Type: AWS::WAFv2::WebACL
 Properties:
+added:   MonetizationConfig:
+added:     CurrencyMode: String
+added:     CryptoConfig:
+added:       PaymentNetworks:
+added:         - Chain: String
+added:           Prices:
+added:             - Amount: String
+added:               Currency: String
+added:           WalletAddress: String
   Rules:
     - Action:
+added:         Monetize:
+added:           PriceMultiplier: String
       Statement:
         ManagedRuleGroupStatement:
           RuleActionOverrides:
             - ActionToUse:  # RuleAction: see above
           ScopeDownStatement:  # Statement: see above
         NotStatement:
           Statement:  # Statement: see above
         OrStatement:
           Statements:  # Statement: see above
         RateBasedStatement:
           ScopeDownStatement:  # Statement: see above
         RuleGroupReferenceStatement:
           RuleActionOverrides:  # RuleActionOverride: see above

AWS::Wisdom::AIGuardrailLink to AWS::Wisdom::AIGuardrail

 Type: AWS::Wisdom::AIGuardrail
 Fn::GetAtt:
+added:   ModifiedTimeSeconds: Double