feat: update L1 CloudFormation resource definitions

[aws-cdk-automation]

Updates the L1 CloudFormation resource definitions with the latest changes from @aws-cdk/aws-service-spec

L1 CloudFormation resource definition changes:

├[~] service aws-aps
│ └ resources
│    ├[~]  resource AWS::APS::Scraper
│    │  └ vendedLogsConfig
│    │     └[+] logType: APPLICATION_LOGS
│    │       ├permissionsVersion: V1
│    │       └destinations: [S3, CWL, FH]
│    └[~]  resource AWS::APS::Workspace
│       └ vendedLogsConfig
│          └[+] logType: MANAGED_PROMETHEUS_LOGS
│            ├permissionsVersion: V1
│            └destinations: [S3, CWL, FH]
├[~] service aws-autoscaling
│ └ resources
│    └[~]  resource AWS::AutoScaling::AutoScalingGroup
│       ├ properties
│       │  ├ AvailabilityZoneDistribution: (documentation changed)
│       │  ├ AvailabilityZoneImpairmentPolicy: (documentation changed)
│       │  ├ CapacityReservationSpecification: (documentation changed)
│       │  └[+] InstanceLifecyclePolicy: InstanceLifecyclePolicy
│       └ types
│          ├[+]  type InstanceLifecyclePolicy
│          │  ├      name: InstanceLifecyclePolicy
│          │  └ properties
│          │     └ RetentionTriggers: RetentionTriggers
│          ├[~] type LaunchTemplateOverrides
│          │ └ properties
│          │    └[+] ImageId: string
│          └[+]  type RetentionTriggers
│             ├      name: RetentionTriggers
│             └ properties
│                └ TerminateHookAbandon: string
├[~] service aws-b2bi
│ └ resources
│    └[~]  resource AWS::B2BI::Transformer
│       └ vendedLogsConfig
│          └[+] logType: B2BI_EXECUTION_LOGS
│            ├permissionsVersion: V1
│            └destinations: [S3, CWL, FH]
├[~] service aws-backup
│ └ resources
│    ├[~]  resource AWS::Backup::BackupPlan
│    │  └ types
│    │     └[~] type BackupRuleResourceType
│    │       └ properties
│    │          └ TargetLogicallyAirGappedBackupVaultArn: (documentation changed)
│    └[~]  resource AWS::Backup::LogicallyAirGappedBackupVault
│       └ properties
│          ├ EncryptionKeyArn: (documentation changed)
│          └ MpaApprovalTeamArn: (documentation changed)
├[~] service aws-backupgateway
│ └ resources
│    └[~]  resource AWS::BackupGateway::Hypervisor
│       └ vendedLogsConfig
│          ├[+] logType: BGW_HYPERVISOR_LOGS
│          │ ├permissionsVersion: V1
│          │ └destinations: [S3, CWL, FH]
│          └[+] logType: DATA_ACCESS_LOGS
│            ├permissionsVersion: V1
│            └destinations: [S3, CWL, FH]
├[~] service aws-bedrock
│ └ resources
│    ├[~]  resource AWS::Bedrock::Agent
│    │  └ vendedLogsConfig
│    │     └[+] logType: APPLICATION_LOGS
│    │       ├permissionsVersion: V2
│    │       └destinations: [S3, CWL, FH]
│    ├[~]  resource AWS::Bedrock::AgentAlias
│    │  └ vendedLogsConfig
│    │     └[+] logType: EVENT_LOGS
│    │       ├permissionsVersion: V2
│    │       └destinations: [S3, CWL, FH]
│    ├[~]  resource AWS::Bedrock::DataAutomationProject
│    │  └ types
│    │     ├[~] type AudioOverrideConfiguration
│    │     │ └ properties
│    │     │    └ SensitiveDataConfiguration: (documentation changed)
│    │     ├[~] type DocumentOverrideConfiguration
│    │     │ └ properties
│    │     │    └ SensitiveDataConfiguration: (documentation changed)
│    │     ├[~] type ImageOverrideConfiguration
│    │     │ └ properties
│    │     │    └ SensitiveDataConfiguration: (documentation changed)
│    │     ├[~] type PIIEntitiesConfiguration
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Configuration for detecting and redacting Personally Identifiable Information (PII) entities. Specify which PII entity types to detect and the redaction mask mode. If not provided, defaults to ALL entity types with ENTITY_TYPE redaction mask mode.
│    │     │ └ properties
│    │     │    ├ PiiEntityTypes: (documentation changed)
│    │     │    └ RedactionMaskMode: (documentation changed)
│    │     ├[~] type SensitiveDataConfiguration
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Configuration for detecting and redacting sensitive data in content. Use this to control whether sensitive data is detected only or both detected and redacted, specify the scope of detection (standard output, custom output, or both), and configure specific PII entity types to detect along with how they should be masked when redacted.
│    │     │ └ properties
│    │     │    ├ DetectionMode: (documentation changed)
│    │     │    ├ DetectionScope: (documentation changed)
│    │     │    └ PiiEntitiesConfiguration: (documentation changed)
│    │     └[~] type VideoOverrideConfiguration
│    │       └ properties
│    │          └ SensitiveDataConfiguration: (documentation changed)
│    ├[~]  resource AWS::Bedrock::Flow
│    │  └ vendedLogsConfig
│    │     └[+] logType: APPLICATION_LOGS
│    │       ├permissionsVersion: V2
│    │       └destinations: [S3, CWL, FH]
│    └[~]  resource AWS::Bedrock::KnowledgeBase
│       ├ vendedLogsConfig
│       │  ├[+] logType: APPLICATION_LOGS
│       │  │ ├permissionsVersion: V2
│       │  │ └destinations: [S3, CWL, FH]
│       │  └[+] logType: RUNTIME_LOGS
│       │    ├permissionsVersion: V2
│       │    └destinations: [S3, CWL, FH]
│       └ types
│          ├[~] type AudioConfiguration
│          │ ├      - documentation: Configure the audio configuration for multi modal ingestion.
│          │ │      + documentation: Configuration settings for processing audio content in multimodal knowledge bases.
│          │ └ properties
│          │    └ SegmentationConfiguration: (documentation changed)
│          ├[~] type AudioSegmentationConfiguration
│          │ ├      - documentation: Configure the audio segmentation configuration for multi modal ingestion.
│          │ │      + documentation: Configuration for segmenting audio content during multimodal knowledge base ingestion. Determines how audio files are divided into chunks for processing.
│          │ └ properties
│          │    └ FixedLengthDuration: (documentation changed)
│          ├[~] type BedrockEmbeddingModelConfiguration
│          │ └ properties
│          │    ├ Audio: (documentation changed)
│          │    └ Video: (documentation changed)
│          ├[~] type SupplementalDataStorageConfiguration
│          │ └      - documentation: Specifies configurations for the storage location of the images extracted from multimodal documents in your data source. These images can be retrieved and returned to the end user.
│          │        + documentation: Specifies configurations for the storage location of multimedia content (images, audio, and video) extracted from multimodal documents in your data source. This content can be retrieved and returned to the end user with timestamp references for audio and video segments.
│          ├[~] type SupplementalDataStorageLocation
│          │ ├      - documentation: Contains information about a storage location for images extracted from multimodal documents in your data source.
│          │ │      + documentation: Contains information about a storage location for multimedia content (images, audio, and video) extracted from multimodal documents in your data source.
│          │ └ properties
│          │    └ S3Location: (documentation changed)
│          ├[~] type VideoConfiguration
│          │ ├      - documentation: Configure the video configuration for multi modal ingestion.
│          │ │      + documentation: Configuration settings for processing video content in multimodal knowledge bases.
│          │ └ properties
│          │    └ SegmentationConfiguration: (documentation changed)
│          └[~] type VideoSegmentationConfiguration
│            ├      - documentation: Configure the video segmentation configuration for multi modal ingestion.
│            │      + documentation: Configuration for segmenting video content during multimodal knowledge base ingestion. Determines how video files are divided into chunks for processing.
│            └ properties
│               └ FixedLengthDuration: (documentation changed)
├[~] service aws-bedrockagentcore
│ └ resources
│    ├[~]  resource AWS::BedrockAgentCore::BrowserCustom
│    │  ├ vendedLogs
│    │  │  └[+] vendedLogs
│    │  │    ├permissionsVersion: V2
│    │  │    ├logTypes: [USAGE_LOGS]
│    │  │    └destinations: [S3, CWL, FH]
│    │  └ vendedLogsConfig
│    │     └[+] logType: USAGE_LOGS
│    │       ├permissionsVersion: V2
│    │       └destinations: [S3, CWL, FH]
│    ├[~]  resource AWS::BedrockAgentCore::CodeInterpreterCustom
│    │  ├ vendedLogs
│    │  │  └[+] vendedLogs
│    │  │    ├permissionsVersion: V2
│    │  │    ├logTypes: [APPLICATION_LOGS, USAGE_LOGS]
│    │  │    └destinations: [S3, CWL, FH]
│    │  └ vendedLogsConfig
│    │     ├[+] logType: APPLICATION_LOGS
│    │     │ ├permissionsVersion: V2
│    │     │ └destinations: [S3, CWL, FH]
│    │     └[+] logType: USAGE_LOGS
│    │       ├permissionsVersion: V2
│    │       └destinations: [S3, CWL, FH]
│    ├[~]  resource AWS::BedrockAgentCore::Gateway
│    │  ├ properties
│    │  │  └[+] InterceptorConfigurations: Array<GatewayInterceptorConfiguration>
│    │  ├ vendedLogsConfig
│    │  │  ├[+] logType: APPLICATION_LOGS
│    │  │  │ ├permissionsVersion: V2
│    │  │  │ └destinations: [S3, CWL, FH]
│    │  │  └[+] logType: TRACES
│    │  │    ├permissionsVersion: V2
│    │  │    └destinations: [XRAY]
│    │  └ types
│    │     ├[+]  type GatewayInterceptorConfiguration
│    │     │  ├      name: GatewayInterceptorConfiguration
│    │     │  └ properties
│    │     │     ├ Interceptor: InterceptorConfiguration (required)
│    │     │     ├ InterceptionPoints: Array<string> (required)
│    │     │     └ InputConfiguration: InterceptorInputConfiguration
│    │     ├[+]  type InterceptorConfiguration
│    │     │  ├      name: InterceptorConfiguration
│    │     │  └ properties
│    │     │     └ Lambda: LambdaInterceptorConfiguration (required)
│    │     ├[+]  type InterceptorInputConfiguration
│    │     │  ├      name: InterceptorInputConfiguration
│    │     │  └ properties
│    │     │     └ PassRequestHeaders: boolean (required)
│    │     └[+]  type LambdaInterceptorConfiguration
│    │        ├      name: LambdaInterceptorConfiguration
│    │        └ properties
│    │           └ Arn: string (required)
│    ├[~]  resource AWS::BedrockAgentCore::Memory
│    │  └ vendedLogsConfig
│    │     ├[+] logType: APPLICATION_LOGS
│    │     │ ├permissionsVersion: V2
│    │     │ └destinations: [S3, CWL, FH]
│    │     └[+] logType: TRACES
│    │       ├permissionsVersion: V2
│    │       └destinations: [XRAY]
│    ├[~]  resource AWS::BedrockAgentCore::Runtime
│    │  └ vendedLogsConfig
│    │     ├[+] logType: APPLICATION_LOGS
│    │     │ ├permissionsVersion: V2
│    │     │ └destinations: [S3, CWL, FH]
│    │     ├[+] logType: TRACES
│    │     │ ├permissionsVersion: V2
│    │     │ └destinations: [XRAY]
│    │     └[+] logType: USAGE_LOGS
│    │       ├permissionsVersion: V2
│    │       └destinations: [S3, CWL, FH]
│    └[~]  resource AWS::BedrockAgentCore::WorkloadIdentity
│       ├ vendedLogs
│       │  └[+] vendedLogs
│       │    ├permissionsVersion: V2
│       │    ├logTypes: [APPLICATION_LOGS]
│       │    └destinations: [S3, CWL, FH]
│       └ vendedLogsConfig
│          └[+] logType: APPLICATION_LOGS
│            ├permissionsVersion: V2
│            └destinations: [S3, CWL, FH]
├[~] service aws-billingconductor
│ └ resources
│    └[~]  resource AWS::BillingConductor::CustomLineItem
│       ├ properties
│       │  ├ ComputationRule: (documentation changed)
│       │  └ PresentationDetails: (documentation changed)
│       └ types
│          ├[~] type LineItemFilter
│          │ └ properties
│          │    ├[+] AttributeValues: Array<string>
│          │    └ Values: - Array<string> (required)
│          │              + Array<string>
│          └[~] type PresentationDetails
│            ├      - documentation: undefined
│            │      + documentation: An object that defines how custom line item charges are presented in the bill, containing specifications for service presentation.
│            └ properties
│               └ Service: (documentation changed)
├[~] service aws-ce
│ └ resources
│    └[~]  resource AWS::CE::CostCategory
│       └ properties
│          └ SplitChargeRules: (documentation changed)
├[~] service aws-cleanrooms
│ └ resources
│    ├[~]  resource AWS::CleanRooms::AnalysisTemplate
│    │  ├ properties
│    │  │  └[+] SyntheticDataParameters: SyntheticDataParameters (immutable)
│    │  └ types
│    │     ├[+]  type ColumnClassificationDetails
│    │     │  ├      documentation: Contains classification information for data columns, including mappings that specify how columns should be handled during synthetic data generation and privacy analysis.
│    │     │  │      name: ColumnClassificationDetails
│    │     │  └ properties
│    │     │     └ ColumnMapping: Array<SyntheticDataColumnProperties> (required)
│    │     ├[+]  type MLSyntheticDataParameters
│    │     │  ├      documentation: Parameters that control the generation of synthetic data for machine learning, including privacy settings and column classification details.
│    │     │  │      name: MLSyntheticDataParameters
│    │     │  └ properties
│    │     │     ├ Epsilon: number (required)
│    │     │     ├ MaxMembershipInferenceAttackScore: number (required)
│    │     │     └ ColumnClassification: ColumnClassificationDetails (required)
│    │     ├[+]  type SyntheticDataColumnProperties
│    │     │  ├      documentation: Properties that define how a specific data column should be handled during synthetic data generation, including its name, type, and role in predictive modeling.
│    │     │  │      name: SyntheticDataColumnProperties
│    │     │  └ properties
│    │     │     ├ ColumnName: string (required)
│    │     │     ├ ColumnType: string (required)
│    │     │     └ IsPredictiveValue: boolean (required)
│    │     └[+]  type SyntheticDataParameters
│    │        ├      documentation: The parameters that control how synthetic data is generated, including privacy settings, column classifications, and other configuration options that affect the data synthesis process.
│    │        │      name: SyntheticDataParameters
│    │        └ properties
│    │           └ MlSyntheticDataParameters: MLSyntheticDataParameters (required)
│    ├[~]  resource AWS::CleanRooms::Collaboration
│    │  └ types
│    │     ├[~] type MLPaymentConfig
│    │     │ └ properties
│    │     │    └[+] SyntheticDataGeneration: SyntheticDataGenerationPaymentConfig
│    │     └[+]  type SyntheticDataGenerationPaymentConfig
│    │        ├      documentation: Payment configuration for synthetic data generation.
│    │        │      name: SyntheticDataGenerationPaymentConfig
│    │        └ properties
│    │           └ IsResponsible: boolean (required)
│    └[~]  resource AWS::CleanRooms::Membership
│       ├ vendedLogsConfig
│       │  └[+] logType: ANALYSIS_LOGS
│       │    ├permissionsVersion: V1
│       │    └destinations: [S3, CWL, FH]
│       └ types
│          ├[~] type MembershipMLPaymentConfig
│          │ └ properties
│          │    └[+] SyntheticDataGeneration: MembershipSyntheticDataGenerationPaymentConfig
│          └[+]  type MembershipSyntheticDataGenerationPaymentConfig
│             ├      documentation: Configuration for payment for synthetic data generation in a membership.
│             │      name: MembershipSyntheticDataGenerationPaymentConfig
│             └ properties
│                └ IsResponsible: boolean (required)
├[~] service aws-cloudfront
│ └ resources
│    ├[~]  resource AWS::CloudFront::AnycastIpList
│    │  ├ properties
│    │  │  └[+] IpamCidrConfigs: Array<IpamCidrConfig>
│    │  ├ attributes
│    │  │  └[+] IpamCidrConfigResults: Array<IpamCidrConfigResult>
│    │  └ types
│    │     ├[~] type AnycastIpList
│    │     │ └ properties
│    │     │    └[+] IpamCidrConfigResults: Array<IpamCidrConfigResult>
│    │     ├[+]  type IpamCidrConfig
│    │     │  ├      documentation: Configuration for an IPAM CIDR that defines a specific IP address range, IPAM pool, and associated Anycast IP address.
│    │     │  │      name: IpamCidrConfig
│    │     │  └ properties
│    │     │     ├ Cidr: string (required)
│    │     │     └ IpamPoolArn: string (required)
│    │     └[+]  type IpamCidrConfigResult
│    │        ├      name: IpamCidrConfigResult
│    │        └ properties
│    │           ├ Cidr: string
│    │           ├ IpamPoolArn: string
│    │           ├ AnycastIp: string
│    │           └ Status: string
│    └[~]  resource AWS::CloudFront::Distribution
│       └ vendedLogsConfig
│          ├[+] logType: CONNECTION_LOGS
│          │ ├permissionsVersion: V2
│          │ └destinations: [S3, CWL, FH]
│          └[+] logType: ACCESS_LOGS
│            ├permissionsVersion: V2
│            └destinations: [S3, CWL, FH]
├[~] service aws-cognito
│ └ resources
│    └[~]  resource AWS::Cognito::UserPool
│       └ vendedLogsConfig
│          └[+] logType: APPLICATION_LOGS
│            ├permissionsVersion: V1
│            └destinations: [S3, CWL, FH]
├[~] service aws-config
│ └ resources
│    └[~]  resource AWS::Config::ConfigurationRecorder
│       └ properties
│          └ RoleARN: (documentation changed)
├[~] service aws-connect
│ └ resources
│    ├[~]  resource AWS::Connect::DataTable
│    │  ├      - documentation: Resource Type definition for AWS::Connect::DataTable
│    │  │      + documentation: Represents a data table in Amazon Connect. A data table is a JSON-like data structure where attributes and values are dynamically set by customers. Customers can reference table values within call flows, applications, views, and workspaces to pinpoint dynamic configuration that changes their contact center's behavior in a predetermined and safe way.
│    │  ├ properties
│    │  │  ├ Description: (documentation changed)
│    │  │  ├ InstanceArn: (documentation changed)
│    │  │  ├ Name: (documentation changed)
│    │  │  ├ Status: (documentation changed)
│    │  │  ├ Tags: (documentation changed)
│    │  │  ├ TimeZone: (documentation changed)
│    │  │  └ ValueLockLevel: (documentation changed)
│    │  └ attributes
│    │     ├ Arn: (documentation changed)
│    │     ├ CreatedTime: (documentation changed)
│    │     ├ LastModifiedRegion: (documentation changed)
│    │     └ LastModifiedTime: (documentation changed)
│    ├[~]  resource AWS::Connect::DataTableAttribute
│    │  ├      - documentation: Resource Type definition for AWS::Connect::DataTableAttribute
│    │  │      + documentation: Represents an attribute (column) in a data table. Attributes define the schema and validation rules for values that can be stored in the table. They specify the data type, constraints, and whether the attribute is used as a primary key for record identification.
│    │  ├ properties
│    │  │  ├ DataTableArn: (documentation changed)
│    │  │  ├ Description: (documentation changed)
│    │  │  ├ InstanceArn: (documentation changed)
│    │  │  ├ Name: (documentation changed)
│    │  │  ├ Primary: (documentation changed)
│    │  │  ├ Validation: (documentation changed)
│    │  │  └ ValueType: (documentation changed)
│    │  ├ attributes
│    │  │  ├ AttributeId: (documentation changed)
│    │  │  ├ LastModifiedRegion: (documentation changed)
│    │  │  └ LastModifiedTime: (documentation changed)
│    │  └ types
│    │     └[~] type Validation
│    │       ├      - documentation: undefined
│    │       │      + documentation: Defines validation rules for data table attribute values. Based on JSON Schema Draft 2020-12 with additional Connect-specific validations. Validation rules ensure data integrity and consistency across the data table.
│    │       └ properties
│    │          ├ Enum: (documentation changed)
│    │          ├ ExclusiveMaximum: (documentation changed)
│    │          ├ ExclusiveMinimum: (documentation changed)
│    │          ├ Maximum: (documentation changed)
│    │          ├ MaxLength: (documentation changed)
│    │          ├ MaxValues: (documentation changed)
│    │          ├ Minimum: (documentation changed)
│    │          ├ MinLength: (documentation changed)
│    │          ├ MinValues: (documentation changed)
│    │          └ MultipleOf: (documentation changed)
│    ├[~]  resource AWS::Connect::DataTableRecord
│    │  └ properties
│    │     ├ DataTableArn: (documentation changed)
│    │     └ InstanceArn: (documentation changed)
│    ├[~]  resource AWS::Connect::EvaluationForm
│    │  ├ properties
│    │  │  ├ LanguageConfiguration: (documentation changed)
│    │  │  └ TargetConfiguration: (documentation changed)
│    │  └ types
│    │     ├[~] type EvaluationFormLanguageConfiguration
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Language configuration for an evaluation form.
│    │     │ └ properties
│    │     │    └ FormLanguage: (documentation changed)
│    │     ├[~] type EvaluationFormMultiSelectQuestionAutomation
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Automation configuration for multi-select questions.
│    │     │ └ properties
│    │     │    ├ DefaultOptionRefIds: (documentation changed)
│    │     │    └ Options: (documentation changed)
│    │     ├[~] type EvaluationFormMultiSelectQuestionAutomationOption
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: An automation option for a multi-select question.
│    │     │ └ properties
│    │     │    └ RuleCategory: (documentation changed)
│    │     ├[~] type EvaluationFormMultiSelectQuestionOption
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: An option for a multi-select question in an evaluation form.
│    │     │ └ properties
│    │     │    ├ RefId: (documentation changed)
│    │     │    └ Text: (documentation changed)
│    │     ├[~] type EvaluationFormMultiSelectQuestionProperties
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Properties for a multi-select question in an evaluation form.
│    │     │ └ properties
│    │     │    ├ Automation: (documentation changed)
│    │     │    ├ DisplayAs: (documentation changed)
│    │     │    └ Options: (documentation changed)
│    │     ├[~] type EvaluationFormQuestionTypeProperties
│    │     │ └ properties
│    │     │    └ MultiSelect: (documentation changed)
│    │     ├[~] type EvaluationFormTargetConfiguration
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Configuration that specifies the target for an evaluation form.
│    │     │ └ properties
│    │     │    └ ContactInteractionType: (documentation changed)
│    │     └[~] type MultiSelectQuestionRuleCategoryAutomation
│    │       ├      - documentation: undefined
│    │       │      + documentation: Automation rule for multi-select questions based on rule categories.
│    │       └ properties
│    │          ├ Category: (documentation changed)
│    │          ├ Condition: (documentation changed)
│    │          └ OptionRefIds: (documentation changed)
│    ├[~]  resource AWS::Connect::Instance
│    │  └ vendedLogsConfig
│    │     └[+] logType: AMAZON_CONNECT_FLOW_LOGS
│    │       ├permissionsVersion: V2
│    │       └destinations: [S3, CWL, FH]
│    ├[~]  resource AWS::Connect::SecurityProfile
│    │  ├ properties
│    │  │  └ GranularAccessControlConfiguration: (documentation changed)
│    │  └ types
│    │     ├[~] type Application
│    │     │ └ properties
│    │     │    └ ApplicationPermissions: (documentation changed)
│    │     ├[~] type DataTableAccessControlConfiguration
│    │     │ ├      - documentation: Defines the access control configuration for data tables.
│    │     │ │      + documentation: A data table access control configuration.
│    │     │ └ properties
│    │     │    └ PrimaryAttributeAccessControlConfiguration: (documentation changed)
│    │     ├[~] type GranularAccessControlConfiguration
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Contains granular access control configuration for security profiles, including data table access permissions.
│    │     │ └ properties
│    │     │    └ DataTableAccessControlConfiguration: (documentation changed)
│    │     ├[~] type PrimaryAttributeAccessControlConfigurationItem
│    │     │ ├      - documentation: Contains the configuration for record-based access control.
│    │     │ │      + documentation: A primary attribute access control configuration item.
│    │     │ └ properties
│    │     │    └ PrimaryAttributeValues: (documentation changed)
│    │     └[~] type PrimaryAttributeValue
│    │       ├      - documentation: An object defining the access control for a specific attribute and its values.
│    │       │      + documentation: A primary attribute value.
│    │       └ properties
│    │          ├ AccessType: (documentation changed)
│    │          ├ AttributeName: (documentation changed)
│    │          └ Values: (documentation changed)
│    └[~]  resource AWS::Connect::Workspace
│       ├      - documentation: Resource Type definition for AWS::Connect::Workspace
│       │      + documentation: Contains information about a workspace, which defines the user experience by mapping views to pages.
│       ├ properties
│       │  ├ Description: (documentation changed)
│       │  ├ InstanceArn: (documentation changed)
│       │  ├ Tags: (documentation changed)
│       │  ├ Theme: (documentation changed)
│       │  ├ Title: (documentation changed)
│       │  └ Visibility: (documentation changed)
│       ├ attributes
│       │  ├ Arn: (documentation changed)
│       │  └ Id: (documentation changed)
│       └ types
│          ├[~] type FontFamily
│          │ ├      - documentation: undefined
│          │ │      + documentation: Contains font family configuration for workspace themes.
│          │ └ properties
│          │    └ Default: (documentation changed)
│          ├[~] type MediaItem
│          │ ├      - documentation: undefined
│          │ │      + documentation: Contains information about a media asset used in a workspace.
│          │ └ properties
│          │    ├ Source: (documentation changed)
│          │    └ Type: (documentation changed)
│          ├[~] type PaletteCanvas
│          │ ├      - documentation: undefined
│          │ │      + documentation: Contains color configuration for canvas elements in a workspace theme.
│          │ └ properties
│          │    ├ ActiveBackground: (documentation changed)
│          │    ├ ContainerBackground: (documentation changed)
│          │    └ PageBackground: (documentation changed)
│          ├[~] type PaletteHeader
│          │ ├      - documentation: undefined
│          │ │      + documentation: Contains color configuration for header elements in a workspace theme.
│          │ └ properties
│          │    ├ Background: (documentation changed)
│          │    ├ InvertActionsColors: (documentation changed)
│          │    ├ Text: (documentation changed)
│          │    └ TextHover: (documentation changed)
│          ├[~] type PaletteNavigation
│          │ ├      - documentation: undefined
│          │ │      + documentation: Contains color configuration for navigation elements in a workspace theme.
│          │ └ properties
│          │    ├ Background: (documentation changed)
│          │    ├ InvertActionsColors: (documentation changed)
│          │    ├ Text: (documentation changed)
│          │    ├ TextActive: (documentation changed)
│          │    ├ TextBackgroundActive: (documentation changed)
│          │    ├ TextBackgroundHover: (documentation changed)
│          │    └ TextHover: (documentation changed)
│          ├[~] type PalettePrimary
│          │ ├      - documentation: undefined
│          │ │      + documentation: Contains primary color configuration for a workspace theme.
│          │ └ properties
│          │    ├ Active: (documentation changed)
│          │    ├ ContrastText: (documentation changed)
│          │    └ Default: (documentation changed)
│          ├[~] type WorkspacePage
│          │ ├      - documentation: undefined
│          │ │      + documentation: Contains information about a page configuration in a workspace, including the view assigned to the page.
│          │ └ properties
│          │    ├ InputData: (documentation changed)
│          │    ├ Page: (documentation changed)
│          │    ├ ResourceArn: (documentation changed)
│          │    └ Slug: (documentation changed)
│          ├[~] type WorkspaceTheme
│          │ ├      - documentation: The theme configuration for the Connect workspace
│          │ │      + documentation: Contains theme configuration for a workspace, supporting both light and dark modes.
│          │ └ properties
│          │    ├ Dark: (documentation changed)
│          │    └ Light: (documentation changed)
│          ├[~] type WorkspaceThemeConfig
│          │ ├      - documentation: undefined
│          │ │      + documentation: Contains detailed theme configuration for a workspace, including colors, images, and typography.
│          │ └ properties
│          │    ├ Palette: (documentation changed)
│          │    └ Typography: (documentation changed)
│          ├[~] type WorkspaceThemePalette
│          │ ├      - documentation: undefined
│          │ │      + documentation: Contains color palette configuration for different areas of a workspace.
│          │ └ properties
│          │    ├ Canvas: (documentation changed)
│          │    ├ Header: (documentation changed)
│          │    ├ Navigation: (documentation changed)
│          │    └ Primary: (documentation changed)
│          └[~] type WorkspaceThemeTypography
│            ├      - documentation: undefined
│            │      + documentation: Contains typography configuration for a workspace theme.
│            └ properties
│               └ FontFamily: (documentation changed)
├[~] service aws-connectcampaignsv2
│ └ resources
│    └[~]  resource AWS::ConnectCampaignsV2::Campaign
│       ├      - documentation: Creates an outbound campaign.
│       │      > - For users to be able to view or edit a campaign at a later date by using the Amazon Connect user interface, you must add the instance ID as a tag. For example, `{ "tags": {"owner": "arn:aws:connect:{REGION}:{AWS_ACCOUNT_ID}:instance/{CONNECT_INSTANCE_ID}"}}` .
│       │      > - After a campaign is created, you can't add/remove source.
│       │      + documentation: Creates an outbound campaign.
│       │      > - For users to be able to view or edit a campaign at a later date by using the Amazon Connect user interface, you must add the instance ID as a tag. For example, `{ "tags": {"owner": "arn:aws:connect:{REGION}:{AWS_ACCOUNT_ID}:instance/{CONNECT_INSTANCE_ID}"}}` .
│       │      > - After a campaign is created, you can't add/remove source.
│       │      > - Configuring maximum ring time is not supported for the Preview dial mode.
│       ├ properties
│       │  ├ ChannelSubtypeConfig: - ChannelSubtypeConfig (required)
│       │  │                       + ChannelSubtypeConfig
│       │  └[+] Type: string
│       └ types
│          ├[~] type ChannelSubtypeConfig
│          │ └ properties
│          │    └[+] WhatsApp: WhatsAppChannelSubtypeConfig
│          ├[~] type CommunicationTimeConfig
│          │ └ properties
│          │    └[+] WhatsApp: TimeWindow
│          ├[~] type TelephonyOutboundConfig
│          │ └ properties
│          │    └ RingTimeout: (documentation changed)
│          ├[+]  type WhatsAppChannelSubtypeConfig
│          │  ├      documentation: The configuration for the WhatsApp channel subtype.
│          │  │      name: WhatsAppChannelSubtypeConfig
│          │  └ properties
│          │     ├ Capacity: number
│          │     ├ OutboundMode: WhatsAppOutboundMode (required)
│          │     └ DefaultOutboundConfig: WhatsAppOutboundConfig (required)
│          ├[+]  type WhatsAppOutboundConfig
│          │  ├      documentation: The outbound configuration for WhatsApp.
│          │  │      name: WhatsAppOutboundConfig
│          │  └ properties
│          │     ├ ConnectSourcePhoneNumberArn: string (required)
│          │     └ WisdomTemplateArn: string (required)
│          └[+]  type WhatsAppOutboundMode
│             ├      documentation: Contains information about the WhatsApp outbound mode.
│             │      name: WhatsAppOutboundMode
│             └ properties
│                └ AgentlessConfig: json
├[~] service aws-customerprofiles
│ └ resources
│    └[~]  resource AWS::CustomerProfiles::SegmentDefinition
│       └ attributes
│          └ SegmentType: (documentation changed)
├[~] service aws-devopsagent
│ └ resources
│    ├[~]  resource AWS::DevOpsAgent::AgentSpace
│    │  ├      - documentation: Resource Type definition for AWS::DevOpsAgent::AgentSpace
│    │  │      + documentation: The `AWS::DevOpsAgent::AgentSpace` resource specifies an Agent Space for the AWS DevOps Agent Service.
│    │  ├ properties
│    │  │  ├ Description: (documentation changed)
│    │  │  └ Name: (documentation changed)
│    │  └ attributes
│    │     ├ AgentSpaceId: (documentation changed)
│    │     └ Arn: (documentation changed)
│    └[~]  resource AWS::DevOpsAgent::Association
│       ├      - documentation: Resource Type definition for AWS::DevOpsAgent::Association defining how the AgentSpace interacts with external services like GitHub, Slack, AWS accounts, and others.
│       │      + documentation: The `AWS::DevOpsAgent::Association` resource specifies an association between an Agent Space and a service, defining how the Agent Space interacts with external services like GitHub, Slack, AWS accounts, and others.
│       ├ properties
│       │  ├ AgentSpaceId: (documentation changed)
│       │  ├ Configuration: (documentation changed)
│       │  ├ LinkedAssociationIds: (documentation changed)
│       │  └ ServiceId: (documentation changed)
│       ├ attributes
│       │  ├ AssociationId: (documentation changed)
│       │  ├ CreatedAt: (documentation changed)
│       │  └ UpdatedAt: (documentation changed)
│       └ types
│          ├[~] type AWSConfiguration
│          │ ├      - documentation: AWS association for 'monitor' account
│          │ │      + documentation: Configuration for AWS monitor account integration. Specifies the account ID, assumable role ARN, and resources to be monitored in the primary monitoring account.
│          │ └ properties
│          │    ├ AccountId: (documentation changed)
│          │    ├ AccountType: (documentation changed)
│          │    ├ AssumableRoleArn: (documentation changed)
│          │    ├ Resources: (documentation changed)
│          │    └ Tags: (documentation changed)
│          ├[~] type AWSResource
│          │ ├      - documentation: AWS resource definition
│          │ │      + documentation: Defines an AWS resource to be monitored, including its type, ARN, and optional metadata.
│          │ └ properties
│          │    ├ ResourceArn: (documentation changed)
│          │    ├ ResourceMetadata: (documentation changed)
│          │    └ ResourceType: (documentation changed)
│          ├[~] type DynatraceConfiguration
│          │ ├      - documentation: Dynatrace monitoring configuration
│          │ │      + documentation: Configuration for Dynatrace monitoring integration. Defines the Dynatrace environment ID, list of resources to monitor, and webhook update settings required for the Agent Space to access metrics, traces, and logs from Dynatrace.
│          │ └ properties
│          │    ├ EnableWebhookUpdates: (documentation changed)
│          │    ├ EnvId: (documentation changed)
│          │    └ Resources: (documentation changed)
│          ├[~] type EventChannelConfiguration
│          │ ├      - documentation: EventChannelconfiguration
│          │ │      + documentation: Configuration for Event Channel integration. Defines webhook update settings to enable the Agent Space to receive real-time event notifications from event channel integrations.
│          │ └ properties
│          │    └ EnableWebhookUpdates: (documentation changed)
│          ├[~] type GitHubConfiguration
│          │ ├      - documentation: GitHub repository integration configuration
│          │ │      + documentation: Configuration for GitHub repository integration. Defines the repository name, numeric repository ID, owner name, and owner type (user or organization) required for the Agent Space to access and interact with the GitHub repository.
│          │ └ properties
│          │    ├ Owner: (documentation changed)
│          │    ├ OwnerType: (documentation changed)
│          │    ├ RepoId: (documentation changed)
│          │    └ RepoName: (documentation changed)
│          ├[~] type GitLabConfiguration
│          │ ├      - documentation: GitLab project integration configuration
│          │ │      + documentation: Configuration for GitLab project integration. Defines the numeric project ID, full project path (namespace/project-name), GitLab instance identifier, and webhook update settings required for the Agent Space to access and interact with the GitLab project.
│          │ └ properties
│          │    ├ EnableWebhookUpdates: (documentation changed)
│          │    ├ InstanceIdentifier: (documentation changed)
│          │    ├ ProjectId: (documentation changed)
│          │    └ ProjectPath: (documentation changed)
│          ├[~] type KeyValuePair
│          │ ├      - documentation: A key-value pair for tags
│          │ │      + documentation: A key-value pair for tags.
│          │ └ properties
│          │    ├ Key: (documentation changed)
│          │    └ Value: (documentation changed)
│          ├[~] type MCPServerConfiguration
│          │ ├      - documentation: MCP server configuration
│          │ │      + documentation: Configuration for MCP (Model Context Protocol) server integration. Defines the server name, endpoint URL, available tools, optional description, and webhook update settings for custom MCP servers.
│          │ └ properties
│          │    ├ Description: (documentation changed)
│          │    ├ EnableWebhookUpdates: (documentation changed)
│          │    ├ Endpoint: (documentation changed)
│          │    ├ Name: (documentation changed)
│          │    └ Tools: (documentation changed)
│          ├[~] type MCPServerDatadogConfiguration
│          │ ├      - documentation: Datadog MCP server configuration
│          │ │      + documentation: Configuration for Datadog MCP server integration. Defines the server name, endpoint URL, optional description, and webhook update settings.
│          │ └ properties
│          │    ├ Description: (documentation changed)
│          │    ├ EnableWebhookUpdates: (documentation changed)
│          │    ├ Endpoint: (documentation changed)
│          │    └ Name: (documentation changed)
│          ├[~] type MCPServerNewRelicConfiguration
│          │ ├      - documentation: NewRelic MCP server configuration
│          │ │      + documentation: Configuration for New Relic MCP server integration. Defines the New Relic account ID and MCP server endpoint URL required for the Agent Space to authenticate and query observability data from New Relic.
│          │ └ properties
│          │    ├ AccountId: (documentation changed)
│          │    └ Endpoint: (documentation changed)
│          ├[~] type MCPServerSplunkConfiguration
│          │ ├      - documentation: Splunk MCP server configuration
│          │ │      + documentation: Configuration for Splunk MCP server integration. Defines the server name, endpoint URL, optional description, and webhook update settings.
│          │ └ properties
│          │    ├ Description: (documentation changed)
│          │    ├ EnableWebhookUpdates: (documentation changed)
│          │    ├ Endpoint: (documentation changed)
│          │    └ Name: (documentation changed)
│          ├[~] type ServiceConfiguration
│          │ ├      - documentation: undefined
│          │ │      + documentation: The configuration that directs how Agent Space interacts with the given service. You can specify only one configuration type per association.
│          │ └ properties
│          │    ├ Aws: (documentation changed)
│          │    ├ Dynatrace: (documentation changed)
│          │    ├ EventChannel: (documentation changed)
│          │    ├ GitHub: (documentation changed)
│          │    ├ GitLab: (documentation changed)
│          │    ├ MCPServer: (documentation changed)
│          │    ├ MCPServerDatadog: (documentation changed)
│          │    ├ MCPServerNewRelic: (documentation changed)
│          │    ├ MCPServerSplunk: (documentation changed)
│          │    ├ ServiceNow: (documentation changed)
│          │    ├ Slack: (documentation changed)
│          │    └ SourceAws: (documentation changed)
│          ├[~] type ServiceNowConfiguration
│          │ ├      - documentation: ServiceNow integration configuration
│          │ │      + documentation: Configuration for ServiceNow integration. Defines the ServiceNow instance URL, instance ID, and webhook update settings required for the Agent Space to create, update, and manage incidents and change requests.
│          │ └ properties
│          │    ├ EnableWebhookUpdates: (documentation changed)
│          │    └ InstanceId: (documentation changed)
│          ├[~] type SlackChannel
│          │ ├      - documentation: Slack channel configuration
│          │ │      + documentation: Represents a Slack channel with its unique identifier and optional display name.
│          │ └ properties
│          │    ├ ChannelId: (documentation changed)
│          │    └ ChannelName: (documentation changed)
│          ├[~] type SlackConfiguration
│          │ ├      - documentation: Slack workspace integration configuration
│          │ │      + documentation: Configuration for Slack workspace integration. Defines the workspace ID, workspace name, and transmission targets that specify which Slack channels receive notifications.
│          │ └ properties
│          │    ├ TransmissionTarget: (documentation changed)
│          │    ├ WorkspaceId: (documentation changed)
│          │    └ WorkspaceName: (documentation changed)
│          ├[~] type SlackTransmissionTarget
│          │ ├      - documentation: Transmission targets for agent notifications
│          │ │      + documentation: Defines the Slack channels where different types of agent notifications will be sent.
│          │ └ properties
│          │    └ IncidentResponseTarget: (documentation changed)
│          └[~] type SourceAwsConfiguration
│            ├      - documentation: AWS association for 'source' account
│            │      + documentation: Configuration for AWS source account integration. Specifies the account ID, assumable role ARN, and resources to be monitored in the source account.
│            └ properties
│               ├ AccountId: (documentation changed)
│               ├ AccountType: (documentation changed)
│               ├ AssumableRoleArn: (documentation changed)
│               ├ Resources: (documentation changed)
│               └ Tags: (documentation changed)
├[~] service aws-directoryservice
│ └ resources
│    └[~]  resource AWS::DirectoryService::MicrosoftAD
│       └      - arnTemplate: arn:${Partition}:ds:${Region}:${Account}:directory/${DirectoryId}
│              + arnTemplate: arn:${Partition}:ds:${Region}:${Account}:${DirectoryId}
├[~] service aws-dsql
│ └ resources
│    └[~]  resource AWS::DSQL::Cluster
│       └ attributes
│          └[+] VpcEndpoint: string
├[~] service aws-ec2
│ └ resources
│    ├[~]  resource AWS::EC2::EC2Fleet
│    │  └ types
│    │     ├[~] type InstanceRequirementsRequest
│    │     │ └ properties
│    │     │    └[+] RequireEncryptionInTransit: boolean
│    │     └[~] type TargetCapacitySpecificationRequest
│    │       └ properties
│    │          ├ DefaultTargetCapacityType: - string
│    │          │                            + string (immutable)
│    │          └ TargetCapacityUnitType: - string
│    │                                    + string (immutable)
│    ├[~]  resource AWS::EC2::NetworkInterface
│    │  ├ properties
│    │  │  └[+] PublicIpDnsHostnameTypeSpecification: string
│    │  ├ attributes
│    │  │  └[+] PublicIpDnsNameOptions: PublicIpDnsNameOptions
│    │  └ types
│    │     └[+]  type PublicIpDnsNameOptions
│    │        ├      documentation: Public hostname type options. For more information, see [EC2 instance hostnames, DNS names, and domains](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-naming.html) in the *Amazon EC2 User Guide* .
│    │        │      name: PublicIpDnsNameOptions
│    │        └ properties
│    │           ├ DnsHostnameType: string
│    │           ├ PublicIpv4DnsName: string
│    │           ├ PublicIpv6DnsName: string
│    │           └ PublicDualStackDnsName: string
│    ├[~]  resource AWS::EC2::RouteServerPeer
│    │  └ vendedLogsConfig
│    │     └[+] logType: EVENT_LOGS
│    │       ├permissionsVersion: V2
│    │       └destinations: [S3, CWL, FH]
│    ├[~]  resource AWS::EC2::SpotFleet
│    │  ├ properties
│    │  │  └[+] Tags: Array<tag>
│    │  └ types
│    │     └[~] type InstanceRequirementsRequest
│    │       └ properties
│    │          └[+] RequireEncryptionInTransit: boolean
│    ├[~]  resource AWS::EC2::VerifiedAccessInstance
│    │  └ vendedLogsConfig
│    │     └[+] logType: VERIFIED_ACCESS_LOGS
│    │       ├permissionsVersion: V1
│    │       └destinations: [S3, CWL, FH]
│    ├[~]  resource AWS::EC2::VPC
│    │  └ vendedLogsConfig
│    │     └[+] logType: ROUTE53_RESOLVER_QUERY_LOGS
│    │       ├permissionsVersion: V1
│    │       └destinations: [S3, CWL, FH]
│    └[~]  resource AWS::EC2::VPNConnection
│       └ vendedLogsConfig
│          ├[+] logType: EVENT_LOGS
│          │ ├permissionsVersion: V2
│          │ └destinations: [S3, CWL, FH]
│          └[+] logType: CONNECTION_LOGS
│            ├permissionsVersion: V2
│            └destinations: [S3, CWL, FH]
├[~] service aws-eks
│ └ resources
│    ├[~]  resource AWS::EKS::Capability
│    │  ├      - documentation: Resource Type definition for EKS Capability.
│    │  │      + documentation: An object representing a managed capability in an Amazon EKS cluster. This includes all configuration, status, and health information for the capability.
│    │  ├ properties
│    │  │  ├ CapabilityName: (documentation changed)
│    │  │  ├ ClusterName: (documentation changed)
│    │  │  ├ Configuration: (documentation changed)
│    │  │  ├ DeletePropagationPolicy: (documentation changed)
│    │  │  ├ RoleArn: (documentation changed)
│    │  │  └ Type: (documentation changed)
│    │  ├ attributes
│    │  │  └ Status: (documentation changed)
│    │  └ types
│    │     ├[~] type ArgoCdRoleMapping
│    │     │ ├      - documentation: A mapping between an Argo CD role and IAM Identity Center identities. This defines which users or groups have specific permissions in Argo CD.
│    │     │ │      + documentation: A mapping between an Argo CD role and IAM Identity CenterIAM; Identity Center identities. This defines which users or groups have specific permissions in Argo CD.
│    │     │ └ properties
│    │     │    ├ Identities: (documentation changed)
│    │     │    └ Role: (documentation changed)
│    │     └[~] type SsoIdentity
│    │       ├      - documentation: An IAM Identity Center identity (user or group) that can be assigned permissions in a capability.
│    │       │      + documentation: An IAM Identity CenterIAM; Identity Center identity (user or group) that can be assigned permissions in a capability.
│    │       └ properties
│    │          ├ Id: (documentation changed)
│    │          └ Type: (documentation changed)
│    ├[~]  resource AWS::EKS::Cluster
│    │  └ vendedLogsConfig
│    │     ├[+] logType: AUTO_MODE_BLOCK_STORAGE_LOGS
│    │     │ ├permissionsVersion: V2
│    │     │ └destinations: [S3, CWL, FH]
│    │     ├[+] logType: AUTO_MODE_COMPUTE_LOGS
│    │     │ ├permissionsVersion: V2
│    │     │ └destinations: [S3, CWL, FH]
│    │     ├[+] logType: AUTO_MODE_IPAM_LOGS
│    │     │ ├permissionsVersion: V2
│    │     │ └destinations: [S3, CWL, FH]
│    │     └[+] logType: AUTO_MODE_LOAD_BALANCING_LOGS
│    │       ├permissionsVersion: V2
│    │       └destinations: [S3, CWL, FH]
│    └[~]  resource AWS::EKS::Nodegroup
│       └ types
│          ├[~] type NodeRepairConfig
│          │ └ properties
│          │    ├ MaxParallelNodesRepairedCount: (documentation changed)
│          │    ├ MaxParallelNodesRepairedPercentage: (documentation changed)
│          │    ├ MaxUnhealthyNodeThresholdCount: (documentation changed)
│          │    └ MaxUnhealthyNodeThresholdPercentage: (documentation changed)
│          └[~] type NodeRepairConfigOverrides
│            └ properties
│               └ MinRepairWaitTimeMins: (documentation changed)
├[~] service aws-elasticache
│ └ resources
│    └[~]  resource AWS::ElastiCache::CacheCluster
│       └ vendedLogsConfig
│          └[+] logType: ELASTICACHE_LOGS
│            ├permissionsVersion: V1
│            └destinations: [S3, CWL, FH]
├[~] service aws-elasticloadbalancingv2
│ └ resources
│    └[~]  resource AWS::ElasticLoadBalancingV2::LoadBalancer
│       └ vendedLogsConfig
│          └[+] logType: NLB_ACCESS_LOGS
│            ├permissionsVersion: V2
│            └destinations: [S3, CWL, FH]
├[~] service aws-entityresolution
│ └ resources
│    ├[~]  resource AWS::EntityResolution::IdMappingWorkflow
│    │  └ vendedLogsConfig
│    │     └[+] logType: WORKFLOW_LOGS
│    │       ├permissionsVersion: V2
│    │       └destinations: [S3, CWL, FH]
│    └[~]  resource AWS::EntityResolution::MatchingWorkflow
│       ├ vendedLogsConfig
│       │  └[+] logType: WORKFLOW_LOGS
│       │    ├permissionsVersion: V2
│       │    └destinations: [S3, CWL, FH]
│       └ types
│          ├[+]  type CustomerProfilesIntegrationConfig
│          │  ├      name: CustomerProfilesIntegrationConfig
│          │  └ properties
│          │     ├ DomainArn: string (required)
│          │     └ ObjectTypeArn: string (required)
│          └[~] type OutputSource
│            └ properties
│               ├[+] CustomerProfilesIntegrationConfig: CustomerProfilesIntegrationConfig
│               └ OutputS3Path: - string (required)
│                               + string
├[~] service aws-events
│ └ resources
│    └[~]  resource AWS::Events::EventBus
│       └ vendedLogsConfig
│          ├[+] logType: ERROR_LOGS
│          │ ├permissionsVersion: V2
│          │ └destinations: [S3, CWL, FH]
│          ├[+] logType: INFO_LOGS
│          │ ├permissionsVersion: V2
│          │ └destinations: [S3, CWL, FH]
│          └[+] logType: TRACE_LOGS
│            ├permissionsVersion: V2
│            └destinations: [S3, CWL, FH]
├[~] service aws-fms
│ └ resources
│    └[~]  resource AWS::FMS::NotificationChannel
│       └ properties
│          └ SnsTopicArn: - string (required)
│                         + string (required, immutable)
├[~] service aws-fsx
│ └ resources
│    └[~]  resource AWS::FSx::S3AccessPointAttachment
│       ├ properties
│       │  └ OntapConfiguration: (documentation changed)
│       └ types
│          ├[~] type OntapFileSystemIdentity
│          │ ├      - documentation: undefined
│          │ │      + documentation: Specifies the file system user identity that will be used for authorizing all file access requests that are made using the S3 access point. The identity can be either a UNIX user or a Windows user.
│          │ └ properties
│          │    ├ Type: (documentation changed)
│          │    ├ UnixUser: (documentation changed)
│          │    └ WindowsUser: (documentation changed)
│          ├[~] type OntapUnixFileSystemUser
│          │ ├      - documentation: undefined
│          │ │      + documentation: The FSx for ONTAP UNIX file system user that is used for authorizing all file access requests that are made using the S3 access point.
│          │ └ properties
│          │    └ Name: (documentation changed)
│          ├[~] type OntapWindowsFileSystemUser
│          │ ├      - documentation: undefined
│          │ │      + documentation: The FSx for ONTAP Windows file system user that is used for authorizing all file access requests that are made using the S3 access point.
│          │ └ properties
│          │    └ Name: (documentation changed)
│          └[~] type S3AccessPointOntapConfiguration
│            ├      - documentation: undefined
│            │      + documentation: Describes the FSx for ONTAP attachment configuration of an S3 access point attachment.
│            └ properties
│               └ FileSystemIdentity: (documentation changed)
├[~] service aws-glue
│ └ resources
│    ├[~]  resource AWS::Glue::Connection
│    │  └ types
│    │     └[~] type ConnectionInput
│    │       └ properties
│    │          └ ConnectionType: (documentation changed)
│    └[~]  resource AWS::Glue::IdentityCenterConfiguration
│       ├      - documentation: Resource Type definition for AWS::Glue::IdentityCenterConfiguration
│       │      + documentation: Creates a new AWS Glue Identity Center configuration to enable integration between AWS Glue and AWS IAM Identity Center for authentication and authorization.
│       ├ properties
│       │  ├ InstanceArn: (documentation changed)
│       │  ├ Scopes: (documentation changed)
│       │  └ UserBackgroundSessionsEnabled: (documentation changed)
│       └ attributes
│          └ ApplicationArn: (documentation changed)
├[~] service aws-grafana
│ └ resources
│    └[~]  resource AWS::Grafana::Workspace
│       └ vendedLogsConfig
│          └[+] logType: APPLICATION_LOGS
│            ├permissionsVersion: V2
│            └destinations: [S3, CWL, FH]
├[~] service aws-imagebuilder
│ └ resources
│    ├[~]  resource AWS::ImageBuilder::Component
│    │  ├ properties
│    │  │  └ Version: (documentation changed)
│    │  ├ attributes
│    │  │  ├ LatestVersion.Arn: (documentation changed)
│    │  │  ├ LatestVersion.Major: (documentation changed)
│    │  │  ├ LatestVersion.Minor: (documentation changed)
│    │  │  └ LatestVersion.Patch: (documentation changed)
│    │  └ types
│    │     └[~] type LatestVersion
│    │       ├      - documentation: The latest version references of the component.
│    │       │      + documentation: The resource ARNs with different wildcard variations of semantic versioning.
│    │       └ properties
│    │          ├ Arn: (documentation changed)
│    │          ├ Major: (documentation changed)
│    │          ├ Minor: (documentation changed)
│    │          └ Patch: (documentation changed)
│    ├[~]  resource AWS::ImageBuilder::ContainerRecipe
│    │  ├ properties
│    │  │  └ Version: (documentation changed)
│    │  ├ attributes
│    │  │  ├ LatestVersion.Arn: (documentation changed)
│    │  │  ├ LatestVersion.Major: (documentation changed)
│    │  │  ├ LatestVersion.Minor: (documentation changed)
│    │  │  └ LatestVersion.Patch: (documentation changed)
│    │  └ types
│    │     └[~] type LatestVersion
│    │       ├      - documentation: The latest version references of the container recipe.
│    │       │      + documentation: The resource ARNs with different wildcard variations of semantic versioning.
│    │       └ properties
│    │          ├ Arn: (documentation changed)
│    │          ├ Major: (documentation changed)
│    │          ├ Minor: (documentation changed)
│    │          └ Patch: (documentation changed)
│    ├[~]  resource AWS::ImageBuilder::Image
│    │  ├ properties
│    │  │  ├ DeletionSettings: (documentation changed)
│    │  │  └ ImagePipelineExecutionSettings: (documentation changed)
│    │  ├ attributes
│    │  │  ├ LatestVersion.Arn: (documentation changed)
│    │  │  ├ LatestVersion.Major: (documentation changed)
│    │  │  ├ LatestVersion.Minor: (documentation changed)
│    │  │  └ LatestVersion.Patch: (documentation changed)
│    │  └ types
│    │     ├[~] type DeletionSettings
│    │     │ ├      - documentation: The deletion settings of the image, indicating whether to delete the underlying resources in addition to the image.
│    │     │ │      + documentation: Contains deletion settings of underlying resources of an image when it is replaced or deleted, including its Amazon Machine Images (AMIs), snapshots, or containers.
│    │     │ │      > If you specify the `Retain` option in the [DeletionPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-attribute-updatereplacepolicy.html) or [UpdateReplacePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-attribute-deletionpolicy.html) , the deletion of underlying resources will not be executed.
│    │     │ └ properties
│    │     │    └ ExecutionRole: (documentation changed)
│    │     ├[~] type ImagePipelineExecutionSettings
│    │     │ ├      - documentation: The settings for starting an image pipeline execution.
│    │     │ │      + documentation: Contains settings for starting an image pipeline execution.
│    │     │ └ properties
│    │     │    ├ DeploymentId: (documentation changed)
│    │     │    └ OnUpdate: (documentation changed)
│    │     └[~] type LatestVersion
│    │       ├      - documentation: The latest version references of the image.
│    │       │      + documentation: The resource ARNs with different wildcard variations of semantic versioning.
│    │       └ properties
│    │          ├ Arn: (documentation changed)
│    │          ├ Major: (documentation changed)
│    │          ├ Minor: (documentation changed)
│    │          └ Patch: (documentation changed)
│    ├[~]  resource AWS::ImageBuilder::ImagePipeline
│    │  └ attributes
│    │     └ DeploymentId: (documentation changed)
│    ├[~]  resource AWS::ImageBuilder::ImageRecipe
│    │  ├ properties
│    │  │  └ Version: (documentation changed)
│    │  ├ attributes
│    │  │  ├ LatestVersion.Arn: (documentation changed)
│    │  │  ├ LatestVersion.Major: (documentation changed)
│    │  │  ├ LatestVersion.Minor: (documentation changed)
│    │  │  └ LatestVersion.Patch: (documentation changed)
│    │  └ types
│    │     └[~] type LatestVersion
│    │       ├      - documentation: The latest version references of the image recipe.
│    │       │      + documentation: The resource ARNs with different wildcard variations of semantic versioning.
│    │       └ properties
│    │          ├ Arn: (documentation changed)
│    │          ├ Major: (documentation changed)
│    │          ├ Minor: (documentation changed)
│    │          └ Patch: (documentation changed)
│    └[~]  resource AWS::ImageBuilder::Workflow
│       ├ attributes
│       │  ├ LatestVersion.Arn: (documentation changed)
│       │  ├ LatestVersion.Major: (documentation changed)
│       │  ├ LatestVersion.Minor: (documentation changed)
│       │  └ LatestVersion.Patch: (documentation changed)
│       └ types
│          └[~] type LatestVersion
│            ├      - documentation: The latest version references of the workflow.
│            │      + documentation: The resource ARNs with different wildcard variations of semantic versioning.
│            └ properties
│               ├ Arn: (documentation changed)
│               ├ Major: (documentation changed)
│               ├ Minor: (documentation changed)
│               └ Patch: (documentation changed)
├[~] service aws-iotfleethub
│ └ resources
│    └[~]  resource AWS::IoTFleetHub::Application
│       └      - tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│              + tagInformation: undefined
│              - arnTemplate: arn:${Partition}:iotfleethub:${Region}:${Account}:application/${ApplicationId}
│              + arnTemplate: undefined
├[~] service aws-iotfleetwise
│ └ resources
│    ├[~]  resource AWS::IoTFleetWise::Campaign
│    │  └ vendedLogsConfig
│    │     └[+] logType: IOT_FLEETWISE_LOGS
│    │       ├permissionsVersion: V1
│    │       └destinations: [S3, CWL, FH]
│    └[~]  resource AWS::IoTFleetWise::Vehicle
│       └ vendedLogsConfig
│          └[+] logType: IOT_FLEETWISE_LOGS
│            ├permissionsVersion: V1
│            └destinations: [S3, CWL, FH]
├[~] service aws-iotwireless
│ └ resources
│    └[~]  resource AWS::IoTWireless::WirelessDeviceImportTask
│       └      - arnTemplate: arn:${Partition}:iotwireless:${Region}:${Account}:ImportTask/${ImportTaskId}
│              + arnTemplate: arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDeviceImportTask/${WirelessDeviceImportTaskId}
├[~] service aws-ivschat
│ └ resources
│    └[~]  resource AWS::IVSChat::Room
│       └ vendedLogsConfig
│          └[+] logType: IVS_CHAT_LOGS
│            ├permissionsVersion: V1
│            └destinations: [S3, CWL, FH]
├[~] service aws-kafkaconnect
│ └ resources
│    └[~]  resource AWS::KafkaConnect::Connector
│       └ vendedLogsConfig
│          └[+] logType: APPLICATION_LOGS
│            ├permissionsVersion: V1
│            └destinations: [S3, CWL, FH]
├[~] service aws-lambda
│ └ resources
│    ├[~]  resource AWS::Lambda::CapacityProvider
│    │  ├      - documentation: Resource Type definition for AWS::Lambda::CapacityProvider
│    │  │      + documentation: Creates a capacity provider that manages compute resources for Lambda functions
│    │  ├ properties
│    │  │  ├ InstanceRequirements: (documentation changed)
│    │  │  ├ KmsKeyArn: (documentation changed)
│    │  │  ├ PermissionsConfig: (documentation changed)
│    │  │  ├ Tags: (documentation changed)
│    │  │  └ VpcConfig: (documentation changed)
│    │  ├ attributes
│    │  │  └ State: (documentation changed)
│    │  └ types
│    │     ├[~] type CapacityProviderPermissionsConfig
│    │     │ ├      - documentation: IAM permissions configuration for the capacity provider.
│    │     │ │      + documentation: Configuration that specifies the permissions required for the capacity provider to manage compute resources.
│    │     │ └ properties
│    │     │    └ CapacityProviderOperatorRoleArn: (documentation changed)
│    │     ├[~] type CapacityProviderScalingConfig
│    │     │ ├      - documentation: The scaling configuration for the capacity provider.
│    │     │ │      + documentation: Configuration that defines how the capacity provider scales compute instances based on demand and policies.
│    │     │ └ properties
│    │     │    ├ MaxVCpuCount: (documentation changed)
│    │     │    └ ScalingMode: (documentation changed)
│    │     ├[~] type CapacityProviderVpcConfig
│    │     │ ├      - documentation: VPC configuration for the capacity provider.
│    │     │ │      + documentation: VPC configuration that specifies the network settings for compute instances managed by the capacity provider.
│    │     │ └ properties
│    │     │    ├ SecurityGroupIds: (documentation changed)
│    │     │    └ SubnetIds: (documentation changed)
│    │     ├[~] type InstanceRequirements
│    │     │ ├      - documentation: Specifications for the types of EC2 instances that the capacity provider can use.
│    │     │ │      + documentation: Specifications that define the characteristics and constraints for compute instances used by the capacity provider.
│    │     │ └ properties
│    │     │    ├ AllowedInstanceTypes: (documentation changed)
│    │     │    ├ Architectures: (documentation changed)
│    │     │    └ ExcludedInstanceTypes: (documentation changed)
│    │     └[~] type TargetTrackingScalingPolicy
│    │       ├      - documentation: A target tracking scaling policy for the capacity provider.
│    │       │      + documentation: A scaling policy for the capacity provider that automatically adjusts capacity to maintain a target value for a specific metric.
│    │       └ properties
│    │          ├ PredefinedMetricType: (documentation changed)
│    │          └ TargetValue: (documentation changed)
│    ├[~]  resource AWS::Lambda::Function
│    │  ├ properties
│    │  │  ├ CapacityProviderConfig: (documentation changed)
│    │  │  ├ DurableConfig: (documentation changed)
│    │  │  └ FunctionScalingConfig: (documentation changed)
│    │  └ types
│    │     ├[~] type CapacityProviderConfig
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Configuration for the capacity provider that manages compute resources for Lambda functions.
│    │     │ └ properties
│    │     │    └ LambdaManagedInstancesCapacityProviderConfig: (documentation changed)
│    │     ├[~] type DurableConfig
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: Configuration settings for [durable functions](https://docs.aws.amazon.com/lambda/latest/dg/durable-functions.html) , including execution timeout and retention period for execution history.
│    │     │ └ properties
│    │     │    ├ ExecutionTimeout: (documentation changed)
│    │     │    └ RetentionPeriodInDays: (documentation changed)
│    │     ├[~] type FunctionScalingConfig
│    │     │ └      - documentation: undefined
│    │     │        + documentation: Configuration that defines the scaling behavior for a Lambda Managed Instances function, including the minimum and maximum number of execution environments that can be provisioned.
│    │     └[~] type LambdaManagedInstancesCapacityProviderConfig
│    │       ├      - documentati

[github-actions]

	Tests	Passed ❌️	Skipped	Failed
Security Guardian Results

Test	Result
No test annotations available

• View Security Guardian Results

[github-actions]

	Tests	Passed ❌️	Skipped	Failed
Security Guardian Results with resolved templates

Test	Result
No test annotations available

• View Security Guardian Results with resolved templates

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[mergify]

Merge Queue Status

🚫 The pull request has left the queue (rule: default-squash) at a030c21

This pull request spent 4 seconds in the queue, with no time running CI.

Reason

The pull request can't be updated

merge conflict between base and head

Hint

You should update or rebase your pull request manually. If you do, this pull request will automatically be requeued once the queue conditions match again.
If you think this was a flaky issue, you can requeue the pull request, without updating it, by posting a @mergifyio requeue comment.

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[mergify]

Merge Queue Status

✅ The pull request has been merged at e82876c

This pull request spent 46 minutes 48 seconds in the queue, including 28 minutes 45 seconds running CI.
The checks were run in-place.

Required conditions to merge

• #approved-reviews-by >= 1 [🛡 GitHub branch protection]
  • feat: update L1 CloudFormation resource definitions #36390
• #changes-requested-reviews-by = 0 [🛡 GitHub branch protection]
  • feat: update L1 CloudFormation resource definitions #36390
• any of [🛡 GitHub branch protection]:
  • check-success = validate-pr
  • check-neutral = validate-pr
  • check-skipped = validate-pr
• any of [🛡 GitHub branch protection]:
  • check-success = build
  • check-neutral = build
  • check-skipped = build

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[github-actions]

Comments on closed issues and PRs are hard for our team to see.
If you need help, please open a new issue that references this one.