CloudFormation Changelog

Changes to the CloudFormation resource specification.

ADDED
22
REMOVED
1
MODIFIED
45
DOCUMENTATION
90

New resource types

AWS::AppFabric::IngestionDestinationLink to AWS::AppFabric::IngestionDestination
Type: AWS::AppFabric::IngestionDestination
Properties:
  AppBundleArn: String
  DestinationConfiguration:
    AuditLog:
      Destination:
        S3Bucket:
          BucketName: String
          Prefix: String
        FirehoseStream:
          StreamName: String
  IngestionArn: String
  ProcessingConfiguration:
    AuditLog:
      Format: String
      Schema: String
  Tags:
    - Value: String
      Key: String
Fn::GetAtt:
  Status: String
  CreatedAt: String
  Arn: String
  UpdatedAt: String
AWS::BedrockAgentCore::ConsentPortalLink to AWS::BedrockAgentCore::ConsentPortal
Type: AWS::BedrockAgentCore::ConsentPortal
Properties:
  IdpConfig:
    CredentialProviderArn: String
    Audience: String
    Scopes:
      - String
  ExecutionRoleArn: String
  Description: String
  Sources:
    - Type: String
      Identifier: String
  Tags:
    - Value: String
      Key: String
  Name: String
Fn::GetAtt:
  Status: String
  PortalUrl: String
  ConsentPortalId: String
  ConsentPortalArn: String
  CreatedAt: String
  UpdatedAt: String
AWS::CleanRooms::ConfiguredAudienceModelAssociationLink to AWS::CleanRooms::ConfiguredAudienceModelAssociation
Type: AWS::CleanRooms::ConfiguredAudienceModelAssociation
Fn::GetAtt:
  CollaborationIdentifier: String
  Description: String
  MembershipArn: String
  CreateTime: String
  CollaborationArn: String
  Name: String
  MembershipIdentifier: String
  ConfiguredAudienceModelAssociationIdentifier: String
  ManageResourcePolicies: Boolean
  UpdateTime: String
  Arn: String
  ConfiguredAudienceModelArn: String
  Tags:
    - Value: String
      Key: String
AWS::CloudFront::FieldLevelEncryptionConfigLink to AWS::CloudFront::FieldLevelEncryptionConfig
Type: AWS::CloudFront::FieldLevelEncryptionConfig
Properties:
  Comment: String
  ContentTypeProfileConfig:
    ContentTypeProfiles:
      - ProfileId: String
        Format: String
        ContentType: String
    ForwardWhenContentTypeIsUnknown: Boolean
  QueryArgProfileConfig:
    QueryArgProfiles:
      - ProfileId: String
        QueryArg: String
    ForwardWhenQueryArgProfileIsUnknown: Boolean
  CallerReference: String
Fn::GetAtt:
  LastModifiedTime: String
  Id: String
  Arn: String
AWS::CloudWatch::IntegrationLink to AWS::CloudWatch::Integration
Type: AWS::CloudWatch::Integration
Properties:
  Credential:
    ApiKeyCredential:
      ApiKeyValue: String
  IntegrationAttributes:
    <key>: String
  IntegrationType: String
  RoleArn: String
  Tags:
    - Value: String
      Key: String
  Name: String
Fn::GetAtt:
  Status: String
  IntegrationArn: String
  CreatedAt: String
  IntegrationId: String
  UpdatedAt: String
AWS::CustomerProfiles::RecommenderFilterLink to AWS::CustomerProfiles::RecommenderFilter
Type: AWS::CustomerProfiles::RecommenderFilter
Properties:
  Description: String
  DomainName: String
  RecommenderFilterExpression: String
  RecommenderSchemaName: String
  Tags:
    - Value: String
      Key: String
  RecommenderFilterName: String
Fn::GetAtt:
  Status: String
  CreatedAt: String
  RecommenderFilterArn: String
AWS::EC2::IpamInternetRegistryAssociationLink to AWS::EC2::IpamInternetRegistryAssociation
Type: AWS::EC2::IpamInternetRegistryAssociation
Properties:
  OrganizationHandle: String
  Description: String
  IpamId: String
  Rir: String
  Tags:
    - Value: String
      Key: String
Fn::GetAtt:
  IpamInternetRegistryAssociationArn: String
  OwnerId: String
  State: String
  ChildRequestXml: String
  IpamInternetRegistryAssociationId: String
  IpamRegion: String
AWS::LicenseManager::LicenseConfigurationLink to AWS::LicenseManager::LicenseConfiguration
Type: AWS::LicenseManager::LicenseConfiguration
Properties:
  LicenseCount: Integer
  Description: String
  DisassociateWhenNotFound: Boolean
  LicenseRules:
    - String
  ProductInformationList:
    - ProductInformationFilterList:
        - ProductInformationFilterName: String
          ProductInformationFilterValue:
            - String
          ProductInformationFilterComparator: String
      ResourceType: String
  LicenseCountHardLimit: Boolean
  LicenseExpiry: Integer
  LicenseCountingType: String
  Tags:
    - Value: String
      Key: String
  Name: String
Fn::GetAtt:
  Status: String
  LicenseConfigurationId: String
  LicenseConfigurationArn: String
  OwnerAccountId: String
AWS::LicenseManagerUserSubscriptions::LicenseServerEndpointLink to AWS::LicenseManagerUserSubscriptions::LicenseServerEndpoint
Type: AWS::LicenseManagerUserSubscriptions::LicenseServerEndpoint
Properties:
  IdentityProviderArn: String
  LicenseServerSettings:
    ServerType: String
    ServerSettings:
      RdsSalSettings:
        RdsSalCredentialsProvider:
          SecretsManagerCredentialsProvider:
            SecretId: String
  Tags:
    - Value: String
      Key: String
Fn::GetAtt:
  ServerType: String
  LicenseServerEndpointId: String
  LicenseServerEndpointArn: String
  CreationTime: String
  ServerEndpoint:
    Endpoint: String
  LicenseServerEndpointProvisioningStatus: String
  LicenseServers:
    - ProvisioningStatus: String
      HealthStatus: String
      Ipv6Address: String
      Ipv4Address: String
  ServerEndpoint.Endpoint: String
AWS::MediaConvert::CertificateAssociationLink to AWS::MediaConvert::CertificateAssociation
Type: AWS::MediaConvert::CertificateAssociation
Properties:
  Arn: String
AWS::Organizations::ResponsibilityTransferLink to AWS::Organizations::ResponsibilityTransfer
Type: AWS::Organizations::ResponsibilityTransfer
Properties:
  Type: String
  StartTimestamp: String
  Tags:
    - Value: String
      Key: String
  Name: String
Fn::GetAtt:
  Status: String
  Target.ManagementAccountEmail: String
  Target:
    ManagementAccountId: String
    ManagementAccountEmail: String
  Source.ManagementAccountId: String
  Target.ManagementAccountId: String
  EndTimestamp: String
  Id: String
  OrganizationId: String
  Source.ManagementAccountEmail: String
  Arn: String
  Source:  # TransferParticipant: see above
AWS::Polly::LexiconLink to AWS::Polly::Lexicon
Type: AWS::Polly::Lexicon
Properties:
  Content: String
  Name: String
Fn::GetAtt:
  Alphabet: String
  LastModified: String
  LanguageCode: String
  LexemesCount: Integer
  Size: Integer
  Arn: String
AWS::QuickSight::AssignmentLink to AWS::QuickSight::Assignment
Type: AWS::QuickSight::Assignment
Properties:
  AssignmentName: String
  PolicyArn: String
  AssignmentStatus: String
  Identities: Json
  Namespace: String
Fn::GetAtt:
  AssignmentId: String
  Arn: String
AWS::QuickSight::BrandLink to AWS::QuickSight::Brand
Type: AWS::QuickSight::Brand
Properties:
  BrandDefinition:
    BrandName: String
    Description: String
    ApplicationTheme:
      BrandColorPalette:
        Secondary:
          Background: String
          Foreground: String
        Warning:  # Palette: see above
        Accent:  # Palette: see above
        Primary:  # Palette: see above
        Danger:  # Palette: see above
        Measure:  # Palette: see above
        Dimension:  # Palette: see above
        Info:  # Palette: see above
        Success:  # Palette: see above
      BrandElementStyle:
        NavbarStyle:
          GlobalNavbar:  # Palette: see above
          ContextualNavbar:  # Palette: see above
  BrandId: String
  Tags:
    - Value: String
      Key: String
Fn::GetAtt:
  VersionId: String
  BrandStatus: String
  CreatedTime: String
  AwsAccountId: String
  LastUpdatedTime: String
  Arn: String
  VersionStatus: String
AWS::QuickSight::GroupLink to AWS::QuickSight::Group
Type: AWS::QuickSight::Group
Properties:
  GroupName: String
  Description: String
  Namespace: String
Fn::GetAtt:
  PrincipalId: String
  Arn: String
AWS::RDS::DeploymentLink to AWS::RDS::Deployment
Type: AWS::RDS::Deployment
Properties:
  BlueGreenDeploymentName: String
  TargetAllocatedStorage: Integer
  UpgradeTargetStorageConfig: Boolean
  TargetDBParameterGroupName: String
  TargetDBInstanceClass: String
  TargetIops: Integer
  TargetStorageThroughput: Integer
  TargetDBClusterParameterGroupName: String
  TargetEngineVersion: String
  Source: String
  TargetStorageType: String
  Tags:
    - Value: String
      Key: String
Fn::GetAtt:
  Status: String
  Target: String
  Tasks:
    - TaskName: String
      TaskStatus: String
  CreateTime: String
  BlueGreenDeploymentIdentifier: String
  SwitchoverDetails:
    - SourceMember: String
      SwitchoverDetailStatus: String
      TargetMember: String
  Arn: String
AWS::Rekognition::ProjectVersionLink to AWS::Rekognition::ProjectVersion
Type: AWS::Rekognition::ProjectVersion
Properties:
  ProjectArn: String
  VersionDescription: String
  OutputConfig:
    S3Bucket: String
    S3KeyPrefix: String
  KmsKeyId: String
  FeatureConfig:
    ContentModeration:
      ConfidenceThreshold: Double
  VersionName: String
Fn::GetAtt:
  Status: String
  CreationTimestamp: String
  BillableTrainingTimeInSeconds: Double
  BaseModelVersion: String
  EvaluationResult.F1Score: Double
  TrainingEndTimestamp: String
  ProjectVersionArn: String
  Feature: String
  EvaluationResult:
    F1Score: Double
  Tags:
    - Value: String
      Key: String
AWS::SecurityAgent::IntegrationLink to AWS::SecurityAgent::Integration
Type: AWS::SecurityAgent::Integration
Properties:
  PrivateConnectionName: String
  KmsKeyId: String
  ProviderInput:
    Github:
      OrganizationName: String
      InstallationId: String
      State: String
      TargetUrl: String
      Code: String
    Confluence:
      InstallationId: String
      State: String
      SiteUrl: String
      Code: String
    Bitbucket:
      InstallationId: String
      State: String
      Code: String
      Workspace: String
    Gitlab:
      TokenType: String
      AccessToken: String
      TargetUrl: String
      GroupId: String
  DisplayName: String
  Tags:
    - Value: String
      Key: String
  Provider: String
Fn::GetAtt:
  InstallationId: String
  IntegrationId: String
  ProviderType: String
  TargetUrl: String
  Arn: String
AWS::SecurityAgent::PentestJobLink to AWS::SecurityAgent::PentestJob
Type: AWS::SecurityAgent::PentestJob
Properties:
  PentestId: String
  AgentSpaceId: String
Fn::GetAtt:
  SourceCode:
    - S3Location: String
  VpcConfig:
    SubnetArns:
      - String
    VpcArn: String
    SecurityGroupArns:
      - String
  CreatedAt: String
  ExcludeRiskTypes:
    - String
  VpcConfig.VpcArn: String
  AllowedDomains:
    - Uri: String
  VpcConfig.SecurityGroupArns:
    - String
  NetworkTrafficConfig.CustomHeaders:
    - Value: String
      Name: String
  Endpoints:  # Endpoint: see above
  ServiceRole: String
  IntegratedRepositories:
    - ProviderResourceId: String
      Branch: String
      IntegrationId: String
  DisableManagedSkills:
    - String
  Status: String
  NetworkTrafficConfig:
    Rules:
      - Pattern: String
        Effect: String
        NetworkTrafficRuleType: String
    CustomHeaders:  # CustomHeader: see above
  LogConfig.LogGroup: String
  PentestJobId: String
  Title: String
  Actors:
    - Identifier: String
      Description: String
      Authentication:
        Value: String
        ProviderType: String
      Uris:
        - String
  UpdatedAt: String
  CodeRemediationStrategy: String
  ExcludePaths:  # Endpoint: see above
  CleanUpStrategy: String
  Documents:
    - ArtifactId: String
      IntegratedDocument:
        ResourceId: String
        IntegrationId: String
      S3Location: String
  VpcConfig.SubnetArns:
    - String
  NetworkTrafficConfig.Rules:  # NetworkTrafficRule: see above
  Arn: String
  LogConfig.LogStream: String
  LogConfig:
    LogGroup: String
    LogStream: String
AWS::StorageGateway::NFSFileShareLink to AWS::StorageGateway::NFSFileShare
Type: AWS::StorageGateway::NFSFileShare
Properties:
  ReadOnly: Boolean
  GuessMIMETypeEnabled: Boolean
  EncryptionType: String
  ObjectACL: String
  FileShareName: String
  DefaultStorageClass: String
  ClientList:
    - String
  Squash: String
  GatewayARN: String
  Role: String
  KMSKey: String
  AuditDestinationARN: String
  KMSEncrypted: Boolean
  BucketRegion: String
  RequesterPays: Boolean
  NFSFileShareDefaults:
    FileMode: String
    DirectoryMode: String
    OwnerId: Integer
    GroupId: Integer
  VPCEndpointDNSName: String
  LocationARN: String
  Tags:
    - Value: String
      Key: String
  NotificationPolicy: String
  CacheAttributes:
    CacheStaleTimeoutInSeconds: Integer
Fn::GetAtt:
  Path: String
  FileShareId: String
  FileShareARN: String
  FileShareStatus: String
AWS::StorageGateway::SMBFileShareLink to AWS::StorageGateway::SMBFileShare
Type: AWS::StorageGateway::SMBFileShare
Properties:
  GuessMIMETypeEnabled: Boolean
  ObjectACL: String
  AccessBasedEnumeration: Boolean
  FileShareName: String
  DefaultStorageClass: String
  SMBACLEnabled: Boolean
  GatewayARN: String
  KMSEncrypted: Boolean
  RequesterPays: Boolean
  CaseSensitivity: String
  ValidUserList:
    - String
  LocationARN: String
  AdminUserList:
    - String
  InvalidUserList:
    - String
  Tags:
    - Value: String
      Key: String
  CacheAttributes:
    CacheStaleTimeoutInSeconds: Integer
  ReadOnly: Boolean
  EncryptionType: String
  Role: String
  KMSKey: String
  AuditDestinationARN: String
  BucketRegion: String
  OplocksEnabled: Boolean
  Authentication: String
  VPCEndpointDNSName: String
  NotificationPolicy: String
Fn::GetAtt:
  Path: String
  FileShareId: String
  FileShareARN: String
  FileShareStatus: String
AWS::Timestream::InfluxDBBackupLink to AWS::Timestream::InfluxDBBackup
Type: AWS::Timestream::InfluxDBBackup
Properties:
  RetentionDays: Integer
  DbResourceId: String
  Tags:
    - Value: String
      Key: String
  Name: String
Fn::GetAtt:
  DbParameterGroupId: String
  InfluxAuthParametersSecretArn: String
  CreatedAt: String
  Port: Integer
  DbInstanceType: String
  VpcSubnetIds:
    - String
  DeploymentType: String
  ClusterConfiguration:
    IngestQueryInstances: Integer
    DedicatedCompactor: Boolean
    QueryOnlyInstances: Integer
  ExpiresAfter: String
  LogDeliveryConfiguration.S3Configuration.BucketName: String
  ClusterConfiguration.DedicatedCompactor: Boolean
  VpcSecurityGroupIds:
    - String
  NetworkType: String
  MaintenanceSchedule.PreferredMaintenanceWindow: String
  EngineType: String
  MaintenanceSchedule.Timezone: String
  Status: String
  KmsKeyId: String
  ClusterConfiguration.QueryOnlyInstances: Integer
  LogDeliveryConfiguration.S3Configuration:
    BucketName: String
    Enabled: Boolean
  ClusterConfiguration.IngestQueryInstances: Integer
  FailoverMode: String
  AllocatedStorage: Integer
  LogDeliveryConfiguration.S3Configuration.Enabled: Boolean
  Type: String
  LogDeliveryConfiguration:
    S3Configuration:  # S3Configuration: see above
  DbStorageType: String
  Id: String
  PubliclyAccessible: Boolean
  Arn: String
  MaintenanceSchedule:
    Timezone: String
    PreferredMaintenanceWindow: String

Changed resource types

AWS::AgentRegistry::RegistryLink to AWS::AgentRegistry::Registry
Type: AWS::AgentRegistry::Registry
Properties:
added:   CustomMetadataSchemaConfiguration:
added:     RecordTypeSchemaOverrides:
added:       - RecordType: String
added:         Schema: String
added:     DefaultSchema: String
AWS::AgentRegistry::RegistryRecordLink to AWS::AgentRegistry::RegistryRecord
Type: AWS::AgentRegistry::RegistryRecord
Properties:
added:   CustomMetadata: Json
AWS::AppSync::GraphQLSchemaLink to AWS::AppSync::GraphQLSchema
Type: AWS::AppSync::GraphQLSchema
Properties:
modified:   # Update requires: Replacement → No interruption
  ApiId: String
Fn::GetAtt:
added:   Id: String
AWS::ARCRegionSwitch::PlanLink to AWS::ARCRegionSwitch::Plan
Type: AWS::ARCRegionSwitch::Plan
Properties:
  Workflows:
    - Steps:
        - ExecutionBlockConfiguration:
added:             SsmSendCommandConfig:
added:               RegionDocuments:
                <key>:
added:                   Parameters: Json
added:                   ExternalId: String
added:                   Targets:
added:                     - Values:
added:                         - String
added:                       Key: String
added:                   DocumentVersion: String
added:                   CrossAccountRole: String
added:                   DocumentArn: String
added:               RetryIntervalMinutes: Double
added:               TimeoutMinutes: Double
added:               Ungraceful:
added:                 Behavior: String
AWS::AutoScalingPlans::ScalingPlanLink to AWS::AutoScalingPlans::ScalingPlan
Type: AWS::AutoScalingPlans::ScalingPlan
Properties:
  ApplicationSource:
modified:     # Duplicates allowed: Not specified → Yes
    TagFilters:
modified:       - # Duplicates allowed: Not specified → Yes
        Values:
          - String
modified:   # Duplicates allowed: Not specified → Yes
  ScalingInstructions:
    - CustomizedLoadMetricSpecification:
modified:         # Duplicates allowed: Not specified → Yes
        Dimensions:
modified:       # Duplicates allowed: Not specified → Yes
      TargetTrackingConfigurations:
        - CustomizedScalingMetricSpecification:
modified:             # Duplicates allowed: Not specified → Yes
            Dimensions:  # MetricDimension: see above
Fn::GetAtt:
added:   ScalingPlanArn: String
AWS::BedrockAgentCore::EvaluatorLink to AWS::BedrockAgentCore::Evaluator
Type: AWS::BedrockAgentCore::Evaluator
Properties:
  EvaluatorConfig:
    Derived:
      ModelConfig:
        BedrockEvaluatorModelConfig:
          InferenceConfig:
added:             StopSequences:
added:               - String
    LlmAsAJudge:
      ModelConfig:  # EvaluatorModelConfig: see above
AWS::BedrockAgentCore::HarnessLink to AWS::BedrockAgentCore::Harness
Type: AWS::BedrockAgentCore::Harness
Properties:
  AuthorizerConfiguration:
    CustomJWTAuthorizer:
added:       AdvertisedScopeMapping:
added:         <key>: String
  Memory:
    AgentCoreMemoryConfiguration:
      RetrievalConfig:
        <key>:
modified:           RelevanceScore: String → Double
modified:           TopK: String → Integer
  Model:
    GeminiModelConfig:
added:       AdditionalParams: Json
    OpenAiModelConfig:
added:       ApiBase: String
AWS::Budgets::BudgetLink to AWS::Budgets::Budget
Type: AWS::Budgets::Budget
Properties:
  Budget:
    FilterExpression:
modified:       # Duplicates allowed: Not specified → Yes
      And:  # Expression: see above
      CostCategories:
modified:         # Duplicates allowed: Not specified → Yes
        MatchOptions:
          - String
modified:         # Duplicates allowed: Not specified → Yes
        Values:
          - String
      Dimensions:
modified:         # Duplicates allowed: Not specified → Yes
        MatchOptions:
          - String
modified:         # Duplicates allowed: Not specified → Yes
        Values:
          - String
      Not:  # Expression: see above
modified:       # Duplicates allowed: Not specified → Yes
      Or:  # Expression: see above
      Tags:
modified:         # Duplicates allowed: Not specified → Yes
        MatchOptions:
          - String
modified:         # Duplicates allowed: Not specified → Yes
        Values:
          - String
modified:     # Duplicates allowed: Not specified → Yes
    Metrics:
      - String
modified:   # Duplicates allowed: Not specified → Yes
  NotificationsWithSubscribers:
modified:     - # Update requires: No interruption → Replacement
      Notification:
modified:         # Update requires: No interruption → Replacement
        ComparisonOperator: String
modified:         # Update requires: No interruption → Replacement
        NotificationType: String
modified:         # Update requires: No interruption → Replacement
        Threshold: Double
modified:         # Update requires: No interruption → Replacement
        ThresholdType: String
modified:       # Update requires: No interruption → Replacement
modified:       # Duplicates allowed: Not specified → Yes
      Subscribers:
modified:         - # Update requires: No interruption → Replacement
          Address: String
modified:           # Update requires: No interruption → Replacement
          SubscriptionType: String
modified:   # Duplicates allowed: Not specified → Yes
  ResourceTags:
Fn::GetAtt:
added:   Id: String
AWS::CloudWatch::AnomalyDetectorLink to AWS::CloudWatch::AnomalyDetector
Type: AWS::CloudWatch::AnomalyDetector
Properties:
modified:   Configuration: MetricConfiguration → Configuration
modified:     # Duplicates allowed: Yes → Not specified
    ExcludedTimeRanges:
modified:   # Duplicates allowed: Yes → Not specified
  Dimensions:
  MetricMathAnomalyDetector:
modified:     # Duplicates allowed: Yes → Not specified
    MetricDataQueries:
modified:       - # Update requires: Replacement → No interruption
        Label: String
        MetricStat:
          Metric:
modified:             # Duplicates allowed: Yes → Not specified
            Dimensions:  # Dimension: see above
modified:         # Update requires: Replacement → No interruption
        ReturnData: Boolean
  SingleMetricAnomalyDetector:
modified:     # Duplicates allowed: Yes → Not specified
    Dimensions:  # Dimension: see above
Fn::GetAtt:
removed:   AnomalyDetectorId: String
PropertyTypes:
added:   MetricDataQueries:
added:     - AccountId: String
added:       ReturnData: Boolean
added:       Expression: String
added:       MetricStat:
added:         Stat: String
added:         Period: Integer
added:         Metric:
added:           MetricName: String
added:           Dimensions:
added:             - Value: String
added:               Name: String
added:           Namespace: String
added:         Unit: String
added:       Label: String
added:       Period: Integer
added:       Id: String
AWS::Connect::RuleLink to AWS::Connect::Rule
Type: AWS::Connect::Rule
Properties:
  Actions:
added:     SendInAppNotificationActions:
added:       - Content:
added:           DeDE: String
added:           PtBR: String
added:           ZhCN: String
added:           IdID: String
added:           ItIT: String
added:           EnUS: String
added:           KoKR: String
added:           FrFR: String
added:           ZhTW: String
added:           EsES: String
added:           JaJP: String
added:         Priority: String
added:         Exclusion:
added:           UserTags:
added:             <key>: String
added:           UserArns:
added:             - String
added:         Recipient:  # InAppNotificationRecipientType: see above
AWS::DAX::SubnetGroupLink to AWS::DAX::SubnetGroup
Type: AWS::DAX::SubnetGroup
Properties:
modified:   # Duplicates allowed: Not specified → Yes
  SubnetIds:
    - String
AWS::Deadline::FleetLink to AWS::Deadline::Fleet
Type: AWS::Deadline::Fleet
Properties:
  Configuration:
    ServiceManagedEc2:
      InstanceCapabilities:
added:         SoftwareAddOns:
added:           - Name: String
AWS::DevOpsAgent::AgentSpaceLink to AWS::DevOpsAgent::AgentSpace
Type: AWS::DevOpsAgent::AgentSpace
Properties:
  OperatorApp:
added:     Idp:
added:       IssuerUrl: String
added:       ClientSecret: String
added:       UserIdClaim: String
added:       CreatedAt: String
added:       OperatorAppRoleArn: String
added:       ClientId: String
added:       UpdatedAt: String
added:       Provider: String
Fn::GetAtt:
added:   OperatorApp.Idp.CreatedAt: String
added:   OperatorApp.Idp.UpdatedAt: String
added:   OperatorApp.Idp.UserIdClaim: String
AWS::DevOpsAgent::AssociationLink to AWS::DevOpsAgent::Association
Type: AWS::DevOpsAgent::Association
Properties:
  Configuration:
    Aws:
added:       AgentElevatedRoleArn: String
    MCPServerDatadog:
added:       EnabledElevatedTools:
added:         - String
    MCPServerGrafana:
added:       EnabledElevatedTools:
added:         - String
    Slack:
added:       Bidirectional:
added:         Enabled: Boolean
added:         RoleArn: String
    SourceAws:
added:       AgentElevatedRoleArn: String
AWS::DevOpsAgent::ServiceLink to AWS::DevOpsAgent::Service
Type: AWS::DevOpsAgent::Service
Properties:
added:   Name: String
  ServiceDetails:
added:     GitHub:
added:       DirectAccess:
added:         OrganizationName: String
added:         TargetUrl: String
added:         TokenValue: String
added:       AppVerification:
added:         OrganizationName: String
added:         TargetUrl: String
added:         AppVariant: String
added:         TokenValue: String
Fn::GetAtt:
  AdditionalServiceDetails:
added:     GitHub:
added:       Owner: String
added:       OwnerType: String
added:       HostingType: String
added:       TargetUrl: String
added:       AppVariant: String
added:       AuthMode: String
added:   AdditionalServiceDetails.GitHub:  # RegisteredGitHubServiceDetails: see above
added:   AdditionalServiceDetails.GitHub.AppVariant: String
added:   AdditionalServiceDetails.GitHub.AuthMode: String
added:   AdditionalServiceDetails.GitHub.HostingType: String
added:   AdditionalServiceDetails.GitHub.Owner: String
added:   AdditionalServiceDetails.GitHub.OwnerType: String
added:   AdditionalServiceDetails.GitHub.TargetUrl: String
AWS::DMS::DataMigrationLink to AWS::DMS::DataMigration
Type: AWS::DMS::DataMigration
Properties:
removed:   DataMigrationIdentifier: String
AWS::DMS::DataProviderLink to AWS::DMS::DataProvider
Type: AWS::DMS::DataProvider
Properties:
removed:   DataProviderIdentifier: String
AWS::DMS::InstanceProfileLink to AWS::DMS::InstanceProfile
Type: AWS::DMS::InstanceProfile
Properties:
removed:   InstanceProfileIdentifier: String
AWS::DMS::MigrationProjectLink to AWS::DMS::MigrationProject
Type: AWS::DMS::MigrationProject
Properties:
removed:   InstanceProfileArn: String
removed:   InstanceProfileName: String
removed:   MigrationProjectIdentifier: String
Fn::GetAtt:
added:   InstanceProfileArn: String
added:   InstanceProfileName: String
AWS::EC2::CapacityReservationLink to AWS::EC2::CapacityReservation
Type: AWS::EC2::CapacityReservation
Properties:
modified:   # Update requires: Replacement → No interruption
  TagSpecifications:
modified:     - # Update requires: Replacement → No interruption
      ResourceType: String
modified:       # Update requires: Replacement → No interruption
      Tags:
AWS::EC2::NetworkInsightsAnalysisLink to AWS::EC2::NetworkInsightsAnalysis
Type: AWS::EC2::NetworkInsightsAnalysis
Fn::GetAtt:
  Explanations:
added:     - TransitGatewayPolicyTable:
added:         Arn: String
added:         Id: String
added:       TransitGatewayPolicyTableEntry:
added:         DestinationPortRange:
added:           From: Integer
added:           To: Integer
added:         SourcePortRange:  # PortRange: see above
added:         SourceCidr: String
added:         RuleNumber: Integer
added:         TargetRouteTableId: String
added:         Protocol: String
added:         DestinationCidr: String
  ForwardPathComponents:
    - Explanations:  # Explanation: see above
added:       TransitGatewayPolicyTableEntry:  # AnalysisTransitGatewayPolicyTableEntry: see above
  ReturnPathComponents:  # PathComponent: see above
AWS::EC2::VPCPeeringConnectionLink to AWS::EC2::VPCPeeringConnection
Type: AWS::EC2::VPCPeeringConnection
Properties:
modified:   # Update requires: Replacement → No interruption
  AssumeRoleRegion: String
modified:   # Update requires: Replacement → No interruption
  PeerRoleArn: String
AWS::ECS::DaemonLink to AWS::ECS::Daemon
Type: AWS::ECS::Daemon
Properties:
added:   Critical: Boolean
AWS::ECS::TaskDefinitionLink to AWS::ECS::TaskDefinition
Type: AWS::ECS::TaskDefinition
Properties:
  ContainerDefinitions:
    - ResourceRequirements:
modified:         - # Required: Yes → No
          Value: String
AWS::EKS::CapabilityLink to AWS::EKS::Capability
Type: AWS::EKS::Capability
Properties:
  Configuration:
    ArgoCd:
added:       EndpointPrefix: String
AWS::EMR::InstanceFleetConfigLink to AWS::EMR::InstanceFleetConfig
Type: AWS::EMR::InstanceFleetConfig
Properties:
modified:   # Duplicates allowed: No → Yes
  InstanceTypeConfigs:
modified:     - # Duplicates allowed: No → Yes
modified:       Configurations: List of Configuration → List of ApplicationConfiguration
modified:         # Update requires: Replacement → No interruption
        Classification: String
modified:         # Update requires: Replacement → No interruption
modified:         # Duplicates allowed: No → Not specified
        ConfigurationProperties:
          <key>: String
modified:         # Update requires: Replacement → No interruption
modified:         # Duplicates allowed: No → Yes
modified:         Configurations: List of Configuration → List of ApplicationConfiguration  # ApplicationConfiguration: see above
modified:       # Update requires: Replacement → No interruption
      CustomAmiId: String
      EbsConfiguration:
modified:         # Update requires: Replacement → No interruption
modified:         # Duplicates allowed: No → Yes
        EbsBlockDeviceConfigs:
modified:           - # Update requires: Replacement → No interruption
            VolumeSpecification:
modified:               # Update requires: Replacement → No interruption
              Iops: Integer
modified:               # Update requires: Replacement → No interruption
              SizeInGB: Integer
modified:               # Update requires: Replacement → No interruption
              Throughput: Integer
modified:               # Update requires: Replacement → No interruption
              VolumeType: String
modified:             # Update requires: Replacement → No interruption
            VolumesPerInstance: Integer
modified:         # Update requires: Replacement → No interruption
        EbsOptimized: Boolean
  LaunchSpecifications:
modified:     # Update requires: No interruption → Replacement
    OnDemandSpecification:
modified:       # Update requires: No interruption → Replacement
      AllocationStrategy: String
modified:       # Update requires: No interruption → Replacement
      CapacityReservationOptions:
modified:         # Update requires: No interruption → Some interruptions
        CapacityReservationPreference: String
modified:         # Update requires: No interruption → Some interruptions
        CapacityReservationResourceGroupArn: String
modified:         # Update requires: No interruption → Some interruptions
        UsageStrategy: String
modified:     # Update requires: No interruption → Replacement
    SpotSpecification:
modified:       # Update requires: No interruption → Replacement
      AllocationStrategy: String
modified:       # Update requires: No interruption → Replacement
      BlockDurationMinutes: Integer
modified:       # Update requires: No interruption → Replacement
      TimeoutAction: String
modified:       # Update requires: No interruption → Replacement
      TimeoutDurationMinutes: Integer
  ResizeSpecifications:
    OnDemandResizeSpecification:
      CapacityReservationOptions:  # OnDemandCapacityReservationOptions: see above
Fn::GetAtt:
added:   InstanceFleetId: String
AWS::EventsV2::SubscriberLink to AWS::EventsV2::Subscriber
Type: AWS::EventsV2::Subscriber
Properties:
  InvokeConfiguration:
modified:     TargetArn: Json → String
AWS::FSx::SnapshotLink to AWS::FSx::Snapshot
Type: AWS::FSx::Snapshot
Properties:
modified:   # Duplicates allowed: Not specified → Yes
  Tags:
Fn::GetAtt:
added:   Id: String
AWS::FSx::StorageVirtualMachineLink to AWS::FSx::StorageVirtualMachine
Type: AWS::FSx::StorageVirtualMachine
Properties:
  ActiveDirectoryConfiguration:
    SelfManagedActiveDirectoryConfiguration:
modified:       # Duplicates allowed: Not specified → Yes
      DnsIps:
        - String
modified:   # Duplicates allowed: Not specified → Yes
  Tags:
AWS::FSx::VolumeLink to AWS::FSx::Volume
Type: AWS::FSx::Volume
Properties:
  OntapConfiguration:
modified:     # Update requires: No interruption → Replacement
    AggregateConfiguration:
modified:       # Duplicates allowed: Not specified → Yes
      Aggregates:
        - String
  OpenZFSConfiguration:
modified:     # Duplicates allowed: Not specified → Yes
    NfsExports:
modified:       - # Duplicates allowed: Not specified → Yes
        ClientConfigurations:
modified:           - # Duplicates allowed: Not specified → Yes
            Options:
              - String
modified:     # Duplicates allowed: Not specified → Yes
    Options:
      - String
modified:     # Duplicates allowed: Not specified → Yes
    UserAndGroupQuotas:
modified:   # Duplicates allowed: Not specified → Yes
  Tags:
AWS::GameLift::ContainerGroupDefinitionLink to AWS::GameLift::ContainerGroupDefinition
Type: AWS::GameLift::ContainerGroupDefinition
Properties:
  GameServerContainerDefinition:
added:     Vcpu: Double
AWS::HealthLake::FHIRDatastoreLink to AWS::HealthLake::FHIRDatastore
Type: AWS::HealthLake::FHIRDatastore
Properties:
added:   AnalyticsConfiguration:
added:     Status: String
modified:   # Update requires: Replacement → No interruption
  DatastoreName: String
modified:   # Update requires: Replacement → No interruption
  IdentityProviderConfiguration:
modified:     # Update requires: Replacement → No interruption
    AuthorizationStrategy: String
modified:     # Update requires: Replacement → No interruption
    FineGrainedAuthorizationEnabled: Boolean
modified:     # Update requires: Replacement → No interruption
    IdpLambdaArn: String
modified:     # Update requires: Replacement → No interruption
    Metadata: String
added:   NlpConfiguration:
added:     Status: String
added:   ProfileConfiguration:
added:     DefaultProfiles:
added:       - String
AWS::InspectorV2::FilterLink to AWS::InspectorV2::Filter
Type: AWS::InspectorV2::Filter
Properties:
  FilterCriteria:
added:     EcrImageInUseCount:
added:       - LowerInclusive: Double
added:         UpperInclusive: Double
AWS::Lambda::NetworkConnectorLink to AWS::Lambda::NetworkConnector
Type: AWS::Lambda::NetworkConnector
Properties:
  Configuration:
    VpcEgressConfiguration:
modified:       # Required: No → Yes
      NetworkProtocol: String
modified:       # Required: No → Yes
      SecurityGroupIds:
        - String
Fn::GetAtt:
added:   LatestVersion: Integer
added:   LatestVersionArn: String
AWS::Lambda::WebFunctionRevisionLink to AWS::Lambda::WebFunctionRevision
Type: AWS::Lambda::WebFunctionRevision
Properties:
  ServiceConfig:
added:     EgressNetworkConnectorArn: String
AWS::MediaConnect::FlowLink to AWS::MediaConnect::Flow
Type: AWS::MediaConnect::Flow
Properties:
  Source:
    NdiSourceSettings:
added:       AudioReferenceLevel: Integer
AWS::MediaConnect::FlowOutputLink to AWS::MediaConnect::FlowOutput
Type: AWS::MediaConnect::FlowOutput
Properties:
added:   NdiAudioReferenceLevel: Integer
AWS::MediaLive::InputSecurityGroupLink to AWS::MediaLive::InputSecurityGroup
Type: AWS::MediaLive::InputSecurityGroup
Properties:
modified:   # Update requires: Replacement → No interruption
modified:   Tags: Json → Map of String
modified:   # Duplicates allowed: Not specified → Yes
modified:   WhitelistRules: List of InputWhitelistRuleCidr → List of InputWhitelistRule
Fn::GetAtt:
added:   Id: String
added:   Inputs:
added:     - String
AWS::MediaPackageV2::OriginEndpointLink to AWS::MediaPackageV2::OriginEndpoint
Type: AWS::MediaPackageV2::OriginEndpoint
Properties:
  DashManifests:
    - FilterConfiguration:
added:         Multiview:
added:           Layout: String
added:           Sources:
added:             - String
  HlsManifests:
    - FilterConfiguration:  # FilterConfiguration: see above
  LowLatencyHlsManifests:
modified:     - FilterConfiguration: FilterConfiguration → LowLatencyHlsFilterConfiguration
  MssManifests:
modified:     - FilterConfiguration: FilterConfiguration → MssFilterConfiguration
  Segment:
    Encryption:
      SpekeKeyProvider:
added:         ContentKeyPeriodConfiguration:
added:           ContentKeyPeriodTiming: String
added:         SpekeVersion: String
AWS::MediaTailor::PlaybackConfigurationLink to AWS::MediaTailor::PlaybackConfiguration
Type: AWS::MediaTailor::PlaybackConfiguration
Properties:
added:   BeaconingConfiguration:
added:     ClientSide:
added:       ReportingMode: String
added:       AdditionalEventTypes:
added:         - String
AWS::PaymentCryptography::KeyLink to AWS::PaymentCryptography::Key
Type: AWS::PaymentCryptography::Key
Fn::GetAtt:
  ReplicationStatus:
    <key>:
added:       KmsKeyArn: String
added:       KmsKeyId: String
AWS::QuickSight::DataSourceLink to AWS::QuickSight::DataSource
Type: AWS::QuickSight::DataSource
Properties:
  AlternateDataSourceParameters:
    - DatabricksParameters:
added:         AuthenticationType: String
added:         OAuthParameters:
added:           TokenProviderUrl: String
added:           OAuthScope: String
added:           IdentityProviderVpcConnectionProperties:
added:             VpcConnectionArn: String
added:           IdentityProviderResourceUri: String
  Credentials:
    CredentialPair:
      AlternateDataSourceParameters:  # DataSourceParameters: see above
added:     OAuthClientCredentials:
added:       Username: String
added:       ClientSecret: String
added:       ClientId: String
  DataSourceParameters:  # DataSourceParameters: see above
AWS::Route53::HostedZoneLink to AWS::Route53::HostedZone
Type: AWS::Route53::HostedZone
Properties:
added:   DelegationSetId: String
AWS::SES::TenantLink to AWS::SES::Tenant
Type: AWS::SES::Tenant
Properties:
added:   ReputationEntity:
added:     Policy:
added:       ReputationEntityPolicy: String
added:   SuppressionAttributes:
added:     SuppressionScope: String
added:     SuppressedReasons:
added:       - String
AWS::Transfer::ServerLink to AWS::Transfer::Server
Type: AWS::Transfer::Server
Properties:
added:   CreateWithHostKey: Boolean

Removed resource types

AWS::IoTEvents::AlarmModelLink to AWS::IoTEvents::AlarmModel