feat: update L1 CloudFormation resource definitions

[aws-cdk-automation]

Updates the L1 CloudFormation resource definitions with the latest changes from @aws-cdk/aws-service-spec

L1 CloudFormation resource definition changes:

├[~] service aws-athena
│ └ resources
│    └[~]  resource AWS::Athena::WorkGroup
│       ├ types
│       │  ├[+]  type Classification
│       │  │  ├      documentation: A classification refers to a set of specific configurations.
│       │  │  │      name: Classification
│       │  │  └ properties
│       │  │     ├ Name: string
│       │  │     └ Properties: Map<string, string>
│       │  ├[+]  type CloudWatchLoggingConfiguration
│       │  │  ├      documentation: Configuration settings for delivering logs to Amazon CloudWatch log groups.
│       │  │  │      name: CloudWatchLoggingConfiguration
│       │  │  └ properties
│       │  │     ├ Enabled: boolean
│       │  │     ├ LogGroup: string
│       │  │     ├ LogStreamNamePrefix: string
│       │  │     └ LogTypes: Map<string, Array<string>>
│       │  ├[+]  type EngineConfiguration
│       │  │  ├      documentation: The engine configuration for running queries.
│       │  │  │      name: EngineConfiguration
│       │  │  └ properties
│       │  │     ├ CoordinatorDpuSize: integer
│       │  │     ├ MaxConcurrentDpus: integer
│       │  │     ├ DefaultExecutorDpuSize: integer
│       │  │     ├ AdditionalConfigs: Map<string, string>
│       │  │     ├ SparkProperties: Map<string, string>
│       │  │     └ Classifications: Array<Classification>
│       │  ├[+]  type ManagedLoggingConfiguration
│       │  │  ├      documentation: Configuration settings for managed log persistence.
│       │  │  │      name: ManagedLoggingConfiguration
│       │  │  └ properties
│       │  │     ├ Enabled: boolean
│       │  │     └ KmsKey: string
│       │  ├[+]  type MonitoringConfiguration
│       │  │  ├      documentation: Contains the configuration settings for managed log persistence, delivering logs to Amazon S3 buckets, Amazon CloudWatch log groups etc.
│       │  │  │      name: MonitoringConfiguration
│       │  │  └ properties
│       │  │     ├ CloudWatchLoggingConfiguration: CloudWatchLoggingConfiguration
│       │  │     ├ ManagedLoggingConfiguration: ManagedLoggingConfiguration
│       │  │     └ S3LoggingConfiguration: S3LoggingConfiguration
│       │  ├[+]  type S3LoggingConfiguration
│       │  │  ├      documentation: Configuration settings for delivering logs to Amazon S3 buckets.
│       │  │  │      name: S3LoggingConfiguration
│       │  │  └ properties
│       │  │     ├ Enabled: boolean
│       │  │     ├ LogLocation: string
│       │  │     └ KmsKey: string
│       │  ├[~] type WorkGroupConfiguration
│       │  │ └ properties
│       │  │    ├[+] EngineConfiguration: EngineConfiguration
│       │  │    └[+] MonitoringConfiguration: MonitoringConfiguration
│       │  └[~] type WorkGroupConfigurationUpdates
│       │    └ properties
│       │       ├[+] EngineConfiguration: EngineConfiguration
│       │       ├ ExecutionRole: (documentation changed)
│       │       └[+] MonitoringConfiguration: MonitoringConfiguration
│       └ events
│          └[~]  event aws.athena@AthenaQueryStateChange
│             └      - rootProperty: AthenaQueryStateChange
│                    + rootProperty: AthenaQueryStateChange
│                    - resourcesField: [AthenaQueryStateChange.workgroupName]
│                    + resourcesField: [AthenaQueryStateChange.workgroupName]
├[~] service aws-autoscaling
│ └ resources
│    └[~]  resource AWS::AutoScaling::AutoScalingGroup
│       └ events
│          ├[~]  event aws.autoscaling@EC2InstanceLaunchLifecycleAction
│          │  └      - rootProperty: EC2InstanceLaunchLifecycleAction
│          │         + rootProperty: EC2InstanceLaunchLifecycleAction
│          │         - resourcesField: [EC2InstanceLaunchLifecycleAction.AutoScalingGroupName]
│          │         + resourcesField: [EC2InstanceLaunchLifecycleAction.AutoScalingGroupName]
│          ├[~]  event aws.autoscaling@EC2InstanceLaunchSuccessful
│          │  └      - rootProperty: EC2InstanceLaunchSuccessful
│          │         + rootProperty: EC2InstanceLaunchSuccessful
│          │         - resourcesField: [EC2InstanceLaunchSuccessful.AutoScalingGroupName]
│          │         + resourcesField: [EC2InstanceLaunchSuccessful.AutoScalingGroupName]
│          ├[~]  event aws.autoscaling@EC2InstanceLaunchUnsuccessful
│          │  └      - rootProperty: EC2InstanceLaunchUnsuccessful
│          │         + rootProperty: EC2InstanceLaunchUnsuccessful
│          │         - resourcesField: [EC2InstanceLaunchUnsuccessful.AutoScalingGroupName]
│          │         + resourcesField: [EC2InstanceLaunchUnsuccessful.AutoScalingGroupName]
│          ├[~]  event aws.autoscaling@EC2InstanceTerminateLifecycleAction
│          │  └      - rootProperty: EC2InstanceTerminateLifecycleAction
│          │         + rootProperty: EC2InstanceTerminateLifecycleAction
│          │         - resourcesField: [EC2InstanceTerminateLifecycleAction.AutoScalingGroupName]
│          │         + resourcesField: [EC2InstanceTerminateLifecycleAction.AutoScalingGroupName]
│          ├[~]  event aws.autoscaling@EC2InstanceTerminateSuccessful
│          │  └      - rootProperty: EC2InstanceTerminateSuccessful
│          │         + rootProperty: EC2InstanceTerminateSuccessful
│          │         - resourcesField: [EC2InstanceTerminateSuccessful.AutoScalingGroupName]
│          │         + resourcesField: [EC2InstanceTerminateSuccessful.AutoScalingGroupName]
│          └[~]  event aws.autoscaling@EC2InstanceTerminateUnsuccessful
│             └      - rootProperty: EC2InstanceTerminateUnsuccessful
│                    + rootProperty: EC2InstanceTerminateUnsuccessful
│                    - resourcesField: [EC2InstanceTerminateUnsuccessful.AutoScalingGroupName]
│                    + resourcesField: [EC2InstanceTerminateUnsuccessful.AutoScalingGroupName]
├[~] service aws-batch
│ └ resources
│    └[~]  resource AWS::Batch::JobDefinition
│       └ events
│          ├[~]  event aws.batch@AWSAPICallViaCloudTrail
│          │  └      - rootProperty: AWSAPICallViaCloudTrail
│          │         + rootProperty: AWSAPICallViaCloudTrail
│          │         - resourcesField: [RequestParameters.jobDefinition]
│          │         + resourcesField: [RequestParameters.jobDefinition]
│          └[~]  event aws.batch@BatchJobStateChange
│             └      - rootProperty: BatchJobStateChange
│                    + rootProperty: BatchJobStateChange
│                    - resourcesField: [BatchJobStateChange.jobDefinition]
│                    + resourcesField: [BatchJobStateChange.jobDefinition]
├[~] service aws-bedrock
│ └ resources
│    ├[~]  resource AWS::Bedrock::DataAutomationProject
│    │  ├ properties
│    │  │  └[+] ProjectType: string (immutable)
│    │  └ types
│    │     ├[~] type AudioOverrideConfiguration
│    │     │ └ properties
│    │     │    └[+] SensitiveDataConfiguration: SensitiveDataConfiguration
│    │     ├[~] type DocumentOverrideConfiguration
│    │     │ └ properties
│    │     │    └[+] SensitiveDataConfiguration: SensitiveDataConfiguration
│    │     ├[~] type ImageOverrideConfiguration
│    │     │ └ properties
│    │     │    └[+] SensitiveDataConfiguration: SensitiveDataConfiguration
│    │     ├[+]  type PIIEntitiesConfiguration
│    │     │  ├      name: PIIEntitiesConfiguration
│    │     │  └ properties
│    │     │     ├ PiiEntityTypes: Array<string>
│    │     │     └ RedactionMaskMode: string
│    │     ├[+]  type SensitiveDataConfiguration
│    │     │  ├      name: SensitiveDataConfiguration
│    │     │  └ properties
│    │     │     ├ DetectionMode: string
│    │     │     ├ DetectionScope: Array<string>
│    │     │     └ PiiEntitiesConfiguration: PIIEntitiesConfiguration
│    │     └[~] type VideoOverrideConfiguration
│    │       └ properties
│    │          └[+] SensitiveDataConfiguration: SensitiveDataConfiguration
│    └[~]  resource AWS::Bedrock::KnowledgeBase
│       └ types
│          ├[+]  type S3VectorsConfiguration
│          │  ├      documentation: Contains the storage configuration of the knowledge base for S3 vectors.
│          │  │      name: S3VectorsConfiguration
│          │  └ properties
│          │     ├ VectorBucketArn: string
│          │     ├ IndexArn: string
│          │     └ IndexName: string
│          └[~] type StorageConfiguration
│            └ properties
│               └[+] S3VectorsConfiguration: S3VectorsConfiguration
├[~] service aws-cassandra
│ └ resources
│    └[~]  resource AWS::Cassandra::Table
│       ├ properties
│       │  └[+] WarmThroughput: WarmThroughput
│       └ types
│          └[+]  type WarmThroughput
│             ├      documentation: Warm throughput configuration for the table
│             │      name: WarmThroughput
│             └ properties
│                ├ ReadUnitsPerSecond: integer
│                └ WriteUnitsPerSecond: integer
├[~] service aws-cloudformation
│ └ resources
│    ├[~]  resource AWS::CloudFormation::HookVersion
│    │  └ events
│    │     └[~]  event aws.cloudformation@CloudFormationHookInvocationProgress
│    │        └      - rootProperty: CloudFormationHookInvocationProgress
│    │               + rootProperty: CloudFormationHookInvocationProgress
│    │               - resourcesField: [Hook-detail.hook-version]
│    │               + resourcesField: [Hook-detail.hook-version]
│    └[~]  resource AWS::CloudFormation::StackSet
│       └ types
│          └[~] type AutoDeployment
│            └ properties
│               └[+] DependsOn: Array<string>
├[~] service aws-cloudfront
│ └ resources
│    ├[~]  resource AWS::CloudFront::Distribution
│    │  └ types
│    │     ├[+]  type ConnectionFunctionAssociation
│    │     │  ├      name: ConnectionFunctionAssociation
│    │     │  └ properties
│    │     │     └ Id: string (required)
│    │     ├[~] type DistributionConfig
│    │     │ └ properties
│    │     │    ├[+] ConnectionFunctionAssociation: ConnectionFunctionAssociation
│    │     │    └[+] ViewerMtlsConfig: ViewerMtlsConfig
│    │     ├[+]  type TrustStoreConfig
│    │     │  ├      name: TrustStoreConfig
│    │     │  └ properties
│    │     │     ├ TrustStoreId: string (required)
│    │     │     ├ AdvertiseTrustStoreCaNames: boolean
│    │     │     └ IgnoreCertificateExpiry: boolean
│    │     └[+]  type ViewerMtlsConfig
│    │        ├      name: ViewerMtlsConfig
│    │        └ properties
│    │           ├ Mode: string
│    │           └ TrustStoreConfig: TrustStoreConfig
│    └[+]  resource AWS::CloudFront::TrustStore
│       ├      name: TrustStore
│       │      cloudFormationType: AWS::CloudFront::TrustStore
│       │      documentation: Resource Type definition for AWS::CloudFront::TrustStore. TrustStores contain CA certificates for mTLS authentication and can be associated with CloudFront distributions.
│       │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│       ├ properties
│       │  ├ Name: string (required, immutable)
│       │  ├ CaCertificatesBundleSource: CaCertificatesBundleSource
│       │  └ Tags: Array<tag>
│       ├ attributes
│       │  ├ Id: string
│       │  ├ Arn: string
│       │  ├ Status: string
│       │  ├ ETag: string
│       │  ├ LastModifiedTime: string
│       │  └ NumberOfCaCertificates: integer
│       └ types
│          ├ type CaCertificatesBundleS3Location
│          │ ├      name: CaCertificatesBundleS3Location
│          │ └ properties
│          │    ├ Bucket: string (required)
│          │    ├ Key: string (required)
│          │    ├ Region: string (required)
│          │    └ Version: string
│          └ type CaCertificatesBundleSource
│            ├      name: CaCertificatesBundleSource
│            └ properties
│               └ CaCertificatesBundleS3Location: CaCertificatesBundleS3Location (required)
├[~] service aws-cloudwatch
│ └ resources
│    └[~]  resource AWS::CloudWatch::Alarm
│       └ events
│          ├[~]  event aws.cloudwatch@CloudWatchAlarmConfigurationChange
│          │  └      - rootProperty: CloudWatchAlarmConfigurationChange
│          │         + rootProperty: CloudWatchAlarmConfigurationChange
│          │         - resourcesField: [Configuration.alarmName]
│          │         + resourcesField: [Configuration.alarmName]
│          └[~]  event aws.cloudwatch@CloudWatchAlarmStateChange
│             └      - rootProperty: CloudWatchAlarmStateChange
│                    + rootProperty: CloudWatchAlarmStateChange
│                    - resourcesField: [CloudWatchAlarmStateChange.alarmName]
│                    + resourcesField: [CloudWatchAlarmStateChange.alarmName]
├[~] service aws-codebuild
│ └ resources
│    └[~]  resource AWS::CodeBuild::Project
│       └ events
│          ├[~]  event aws.codebuild@CodeBuildBuildPhaseChange
│          │  └      - rootProperty: CodeBuildBuildPhaseChange
│          │         + rootProperty: CodeBuildBuildPhaseChange
│          │         - resourcesField: [CodeBuildBuildPhaseChange.project-name]
│          │         + resourcesField: [CodeBuildBuildPhaseChange.project-name]
│          └[~]  event aws.codebuild@CodeBuildBuildStateChange
│             └      - rootProperty: CodeBuildBuildStateChange
│                    + rootProperty: CodeBuildBuildStateChange
│                    - resourcesField: [CodeBuildBuildStateChange.project-name]
│                    + resourcesField: [CodeBuildBuildStateChange.project-name]
├[~] service aws-codecommit
│ └ resources
│    └[~]  resource AWS::CodeCommit::Repository
│       └ events
│          ├[~]  event aws.codecommit@AWSAPICallViaCloudTrail
│          │  └      - rootProperty: AWSAPICallViaCloudTrail
│          │         + rootProperty: AWSAPICallViaCloudTrail
│          │         - resourcesField: [RequestParametersItem_2.repositoryName]
│          │         + resourcesField: [RequestParametersItem_2.repositoryName]
│          ├[~]  event aws.codecommit@CodeCommitCommentOnCommit
│          │  └      - rootProperty: CodeCommitCommentOnCommit
│          │         + rootProperty: CodeCommitCommentOnCommit
│          │         - resourcesField: [CodeCommitCommentOnCommit.repositoryId]
│          │         + resourcesField: [CodeCommitCommentOnCommit.repositoryId]
│          ├[~]  event aws.codecommit@CodeCommitCommentOnPullRequest
│          │  └      - rootProperty: CodeCommitCommentOnPullRequest
│          │         + rootProperty: CodeCommitCommentOnPullRequest
│          │         - resourcesField: [CodeCommitCommentOnPullRequest.repositoryId]
│          │         + resourcesField: [CodeCommitCommentOnPullRequest.repositoryId]
│          └[~]  event aws.codecommit@CodeCommitRepositoryStateChange
│             └      - rootProperty: CodeCommitRepositoryStateChange
│                    + rootProperty: CodeCommitRepositoryStateChange
│                    - resourcesField: [CodeCommitRepositoryStateChange.repositoryId]
│                    + resourcesField: [CodeCommitRepositoryStateChange.repositoryId]
├[~] service aws-codedeploy
│ └ resources
│    └[~]  resource AWS::CodeDeploy::Application
│       └ events
│          ├[~]  event aws.codedeploy@CodeDeployDeploymentStateChangeNotification
│          │  └      - rootProperty: CodeDeployDeploymentStateChangeNotification
│          │         + rootProperty: CodeDeployDeploymentStateChangeNotification
│          │         - resourcesField: [CodeDeployDeploymentStateChangeNotification.application]
│          │         + resourcesField: [CodeDeployDeploymentStateChangeNotification.application]
│          └[~]  event aws.codedeploy@CodeDeployInstanceStateChangeNotification
│             └      - rootProperty: CodeDeployInstanceStateChangeNotification
│                    + rootProperty: CodeDeployInstanceStateChangeNotification
│                    - resourcesField: [CodeDeployInstanceStateChangeNotification.application]
│                    + resourcesField: [CodeDeployInstanceStateChangeNotification.application]
├[~] service aws-codepipeline
│ └ resources
│    └[~]  resource AWS::CodePipeline::Pipeline
│       └ events
│          ├[~]  event aws.codepipeline@CodePipelineActionExecutionStateChange
│          │  └      - rootProperty: CodePipelineActionExecutionStateChange
│          │         + rootProperty: CodePipelineActionExecutionStateChange
│          │         - resourcesField: [CodePipelineActionExecutionStateChange.pipeline]
│          │         + resourcesField: [CodePipelineActionExecutionStateChange.pipeline]
│          ├[~]  event aws.codepipeline@CodePipelinePipelineExecutionStateChange
│          │  └      - rootProperty: CodePipelinePipelineExecutionStateChange
│          │         + rootProperty: CodePipelinePipelineExecutionStateChange
│          │         - resourcesField: [CodePipelinePipelineExecutionStateChange.pipeline]
│          │         + resourcesField: [CodePipelinePipelineExecutionStateChange.pipeline]
│          └[~]  event aws.codepipeline@CodePipelineStageExecutionStateChange
│             └      - rootProperty: CodePipelineStageExecutionStateChange
│                    + rootProperty: CodePipelineStageExecutionStateChange
│                    - resourcesField: [CodePipelineStageExecutionStateChange.pipeline]
│                    + resourcesField: [CodePipelineStageExecutionStateChange.pipeline]
├[~] service aws-connect
│ └ resources
│    └[~]  resource AWS::Connect::Instance
│       └ events
│          ├[~]  event aws.connect@CodeConnectContact
│          │  └      - rootProperty: AmazonConnectContactEvent
│          │         + rootProperty: AmazonConnectContactEvent
│          │         - resourcesField: [AmazonConnectContactEvent.instanceArn]
│          │         + resourcesField: [AmazonConnectContactEvent.instanceArn]
│          ├[~]  event aws.connect@ContactLensPostCallRulesMatched
│          │  └      - rootProperty: ContactLensPostCallRulesMatched
│          │         + rootProperty: ContactLensPostCallRulesMatched
│          │         - resourcesField: [ContactLensPostCallRulesMatched.instanceArn]
│          │         + resourcesField: [ContactLensPostCallRulesMatched.instanceArn]
│          └[~]  event aws.connect@ContactLensRealtimeRulesMatched
│             └      - rootProperty: ContactLensRealtimeRulesMatched
│                    + rootProperty: ContactLensRealtimeRulesMatched
│                    - resourcesField: [ContactLensRealtimeRulesMatched.instanceArn]
│                    + resourcesField: [ContactLensRealtimeRulesMatched.instanceArn]
├[~] service aws-connectcampaignsv2
│ └ resources
│    └[~]  resource AWS::ConnectCampaignsV2::Campaign
│       └ types
│          └[~] type TelephonyOutboundConfig
│            └ properties
│               └[+] RingTimeout: integer
├[~] service aws-deadline
│ └ resources
│    └[~]  resource AWS::Deadline::Farm
│       └ events
│          └[~]  event aws.deadline@FleetSizeRecommendationChange
│             └      - rootProperty: FleetSizeRecommendationChange
│                    + rootProperty: FleetSizeRecommendationChange
│                    - resourcesField: [FleetSizeRecommendationChange.farmId]
│                    + resourcesField: [FleetSizeRecommendationChange.farmId]
├[~] service aws-devopsguru
│ └ resources
│    └[~]  resource AWS::DevOpsGuru::ResourceCollection
│       └ events
│          ├[~]  event aws.devopsguru@DevOpsGuruInsightClosed
│          │  └      - rootProperty: Detail
│          │         + rootProperty: Detail
│          │         - resourcesField: [Detail.resourceCollection]
│          │         + resourcesField: [Detail.resourceCollection]
│          ├[~]  event aws.devopsguru@DevOpsGuruInsightSeverityUpgraded
│          │  └      - rootProperty: Detail
│          │         + rootProperty: Detail
│          │         - resourcesField: [Detail.resourceCollection]
│          │         + resourcesField: [Detail.resourceCollection]
│          ├[~]  event aws.devopsguru@DevOpsGuruNewAnomalyAssociation
│          │  └      - rootProperty: Detail
│          │         + rootProperty: Detail
│          │         - resourcesField: [Detail.resourceCollection]
│          │         + resourcesField: [Detail.resourceCollection]
│          └[~]  event aws.devopsguru@DevOpsGuruNewInsightOpen
│             └      - rootProperty: Detail
│                    + rootProperty: Detail
│                    - resourcesField: [Detail.resourceCollection]
│                    + resourcesField: [Detail.resourceCollection]
├[~] service aws-ec2
│ └ resources
│    ├[~]  resource AWS::EC2::Instance
│    │  └ events
│    │     ├[~]  event aws.ec2@AWSAPICallViaCloudTrail
│    │     │  └      - rootProperty: AWSAPICallViaCloudTrail
│    │     │         + rootProperty: AWSAPICallViaCloudTrail
│    │     │         - resourcesField: [InstancesSetItem.instanceId]
│    │     │         + resourcesField: [InstancesSetItem.instanceId]
│    │     ├[~]  event aws.ec2@EC2InstanceStateChangeNotification
│    │     │  └      - rootProperty: EC2InstanceStateChangeNotification
│    │     │         + rootProperty: EC2InstanceStateChangeNotification
│    │     │         - resourcesField: [EC2InstanceStateChangeNotification.instance-id]
│    │     │         + resourcesField: [EC2InstanceStateChangeNotification.instance-id]
│    │     └[~]  event aws.ec2@EC2SpotInstanceInterruptionWarning
│    │        └      - rootProperty: EC2SpotInstanceInterruptionWarning
│    │               + rootProperty: EC2SpotInstanceInterruptionWarning
│    │               - resourcesField: [EC2SpotInstanceInterruptionWarning.instance-id]
│    │               + resourcesField: [EC2SpotInstanceInterruptionWarning.instance-id]
│    ├[+]  resource AWS::EC2::TransitGatewayMeteringPolicy
│    │  ├      name: TransitGatewayMeteringPolicy
│    │  │      cloudFormationType: AWS::EC2::TransitGatewayMeteringPolicy
│    │  │      documentation: AWS::EC2::TransitGatewayMeteringPolicy Resource Definition
│    │  │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │  ├ properties
│    │  │  ├ TransitGatewayId: string (required, immutable)
│    │  │  ├ MiddleboxAttachmentIds: Array<string>
│    │  │  └ Tags: Array<tag>
│    │  └ attributes
│    │     ├ TransitGatewayMeteringPolicyId: string
│    │     ├ State: string
│    │     └ UpdateEffectiveAt: string
│    ├[+]  resource AWS::EC2::TransitGatewayMeteringPolicyEntry
│    │  ├      name: TransitGatewayMeteringPolicyEntry
│    │  │      cloudFormationType: AWS::EC2::TransitGatewayMeteringPolicyEntry
│    │  │      documentation: AWS::EC2::TransitGatewayMeteringPolicyEntry Resource Definition
│    │  ├ properties
│    │  │  ├ DestinationTransitGatewayAttachmentId: string (immutable)
│    │  │  ├ SourcePortRange: string (immutable)
│    │  │  ├ PolicyRuleNumber: integer (required, immutable)
│    │  │  ├ DestinationTransitGatewayAttachmentType: string (immutable)
│    │  │  ├ DestinationCidrBlock: string (immutable)
│    │  │  ├ TransitGatewayMeteringPolicyId: string (required, immutable)
│    │  │  ├ DestinationPortRange: string (immutable)
│    │  │  ├ MeteredAccount: string (required, immutable)
│    │  │  ├ SourceCidrBlock: string (immutable)
│    │  │  ├ Protocol: string (immutable)
│    │  │  ├ SourceTransitGatewayAttachmentId: string (immutable)
│    │  │  └ SourceTransitGatewayAttachmentType: string (immutable)
│    │  └ attributes
│    │     ├ UpdateEffectiveAt: string
│    │     └ State: string
│    └[+]  resource AWS::EC2::VPCEncryptionControl
│       ├      name: VPCEncryptionControl
│       │      cloudFormationType: AWS::EC2::VPCEncryptionControl
│       │      documentation: Resource Type definition for AWS::EC2::VPCEncryptionControl
│       │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│       ├ properties
│       │  ├ Tags: Array<tag>
│       │  ├ VpcId: string (immutable)
│       │  ├ Mode: string
│       │  ├ InternetGatewayExclusionInput: string
│       │  ├ EgressOnlyInternetGatewayExclusionInput: string
│       │  ├ NatGatewayExclusionInput: string
│       │  ├ VirtualPrivateGatewayExclusionInput: string
│       │  ├ VpcPeeringExclusionInput: string
│       │  ├ VpcLatticeExclusionInput: string
│       │  ├ ElasticFileSystemExclusionInput: string
│       │  └ LambdaExclusionInput: string
│       ├ attributes
│       │  ├ VpcEncryptionControlId: string
│       │  ├ State: string
│       │  ├ StateMessage: string
│       │  ├ ResourceExclusions: ResourceExclusions
│       │  ├ ResourceExclusions.InternetGateway: VpcEncryptionControlExclusion
│       │  ├ ResourceExclusions.InternetGateway.State: string
│       │  ├ ResourceExclusions.InternetGateway.StateMessage: string
│       │  ├ ResourceExclusions.EgressOnlyInternetGateway: VpcEncryptionControlExclusion
│       │  ├ ResourceExclusions.EgressOnlyInternetGateway.State: string
│       │  ├ ResourceExclusions.EgressOnlyInternetGateway.StateMessage: string
│       │  ├ ResourceExclusions.NatGateway: VpcEncryptionControlExclusion
│       │  ├ ResourceExclusions.NatGateway.State: string
│       │  ├ ResourceExclusions.NatGateway.StateMessage: string
│       │  ├ ResourceExclusions.VirtualPrivateGateway: VpcEncryptionControlExclusion
│       │  ├ ResourceExclusions.VirtualPrivateGateway.State: string
│       │  ├ ResourceExclusions.VirtualPrivateGateway.StateMessage: string
│       │  ├ ResourceExclusions.VpcPeering: VpcEncryptionControlExclusion
│       │  ├ ResourceExclusions.VpcPeering.State: string
│       │  ├ ResourceExclusions.VpcPeering.StateMessage: string
│       │  ├ ResourceExclusions.VpcLattice: VpcEncryptionControlExclusion
│       │  ├ ResourceExclusions.VpcLattice.State: string
│       │  ├ ResourceExclusions.VpcLattice.StateMessage: string
│       │  ├ ResourceExclusions.ElasticFileSystem: VpcEncryptionControlExclusion
│       │  ├ ResourceExclusions.ElasticFileSystem.State: string
│       │  ├ ResourceExclusions.ElasticFileSystem.StateMessage: string
│       │  ├ ResourceExclusions.Lambda: VpcEncryptionControlExclusion
│       │  ├ ResourceExclusions.Lambda.State: string
│       │  └ ResourceExclusions.Lambda.StateMessage: string
│       └ types
│          ├ type ResourceExclusions
│          │ ├      name: ResourceExclusions
│          │ └ properties
│          │    ├ InternetGateway: VpcEncryptionControlExclusion
│          │    ├ EgressOnlyInternetGateway: VpcEncryptionControlExclusion
│          │    ├ NatGateway: VpcEncryptionControlExclusion
│          │    ├ VirtualPrivateGateway: VpcEncryptionControlExclusion
│          │    ├ VpcPeering: VpcEncryptionControlExclusion
│          │    ├ VpcLattice: VpcEncryptionControlExclusion
│          │    ├ ElasticFileSystem: VpcEncryptionControlExclusion
│          │    └ Lambda: VpcEncryptionControlExclusion
│          └ type VpcEncryptionControlExclusion
│            ├      name: VpcEncryptionControlExclusion
│            └ properties
│               ├ State: string
│               └ StateMessage: string
├[~] service aws-ecr
│ └ resources
│    ├[+]  resource AWS::ECR::PullTimeUpdateExclusion
│    │  ├      name: PullTimeUpdateExclusion
│    │  │      cloudFormationType: AWS::ECR::PullTimeUpdateExclusion
│    │  │      documentation: Resource Type definition for AWS::ECR::PullTimeUpdateExclusion controls the exclusion configuration for ecr image pull time update.
│    │  └ properties
│    │     └ PrincipalArn: string (required, immutable)
│    ├[~]  resource AWS::ECR::Repository
│    │  └ events
│    │     ├[~]  event aws.ecr@AWSAPICallViaCloudTrail
│    │     │  └      - rootProperty: AWSAPICallViaCloudTrail
│    │     │         + rootProperty: AWSAPICallViaCloudTrail
│    │     │         - resourcesField: [RequestParameters.repositoryName]
│    │     │         + resourcesField: [RequestParameters.repositoryName]
│    │     ├[~]  event aws.ecr@ECRImageAction
│    │     │  └      - rootProperty: ECRImageAction
│    │     │         + rootProperty: ECRImageAction
│    │     │         - resourcesField: [ECRImageAction.repository-name]
│    │     │         + resourcesField: [ECRImageAction.repository-name]
│    │     ├[~]  event aws.ecr@ECRImageScan
│    │     │  └      - rootProperty: ECRImageScan
│    │     │         + rootProperty: ECRImageScan
│    │     │         - resourcesField: [ECRImageScan.repository-name]
│    │     │         + resourcesField: [ECRImageScan.repository-name]
│    │     ├[~]  event aws.ecr@ECRPullThroughCacheAction
│    │     │  └      - rootProperty: ECRPullThroughCacheAction
│    │     │         + rootProperty: ECRPullThroughCacheAction
│    │     │         - resourcesField: [ECRPullThroughCacheAction.repository-name]
│    │     │         + resourcesField: [ECRPullThroughCacheAction.repository-name]
│    │     ├[~]  event aws.ecr@ECRReferrerAction
│    │     │  └      - rootProperty: ECRReferrerAction
│    │     │         + rootProperty: ECRReferrerAction
│    │     │         - resourcesField: [ECRReferrerAction.repository-name]
│    │     │         + resourcesField: [ECRReferrerAction.repository-name]
│    │     └[~]  event aws.ecr@ECRReplicationAction
│    │        └      - rootProperty: ECRReplicationAction
│    │               + rootProperty: ECRReplicationAction
│    │               - resourcesField: [ECRReplicationAction.repository-name]
│    │               + resourcesField: [ECRReplicationAction.repository-name]
│    └[+]  resource AWS::ECR::SigningConfiguration
│       ├      name: SigningConfiguration
│       │      cloudFormationType: AWS::ECR::SigningConfiguration
│       │      documentation: The AWS::ECR::SigningConfiguration resource creates or updates the signing configuration for an Amazon ECR registry.
│       ├ properties
│       │  └ Rules: Array<Rule> (required)
│       ├ attributes
│       │  └ RegistryId: string
│       └ types
│          ├ type RepositoryFilter
│          │ ├      documentation: An array of objects representing the details of a repository filter.
│          │ │      name: RepositoryFilter
│          │ └ properties
│          │    ├ Filter: string (required)
│          │    └ FilterType: string (required)
│          └ type Rule
│            ├      name: Rule
│            └ properties
│               ├ SigningProfileArn: string (required)
│               └ RepositoryFilters: Array<RepositoryFilter>
├[~] service aws-ecs
│ └ resources
│    ├[~]  resource AWS::ECS::Cluster
│    │  └ events
│    │     ├[~]  event aws.ecs@AWSAPICallViaCloudTrail
│    │     │  └      - rootProperty: AWSAPICallViaCloudTrail
│    │     │         + rootProperty: AWSAPICallViaCloudTrail
│    │     │         - resourcesField: [ResponseElementsItem.clusterArn]
│    │     │         + resourcesField: [ResponseElementsItem.clusterArn]
│    │     ├[~]  event aws.ecs@ECSContainerInstanceStateChange
│    │     │  └      - rootProperty: ECSContainerInstanceStateChange
│    │     │         + rootProperty: ECSContainerInstanceStateChange
│    │     │         - resourcesField: [ECSContainerInstanceStateChange.clusterArn]
│    │     │         + resourcesField: [ECSContainerInstanceStateChange.clusterArn]
│    │     ├[~]  event aws.ecs@ECSServiceAction
│    │     │  └      - rootProperty: ECSServiceAction
│    │     │         + rootProperty: ECSServiceAction
│    │     │         - resourcesField: [ECSServiceAction.clusterArn]
│    │     │         + resourcesField: [ECSServiceAction.clusterArn]
│    │     └[~]  event aws.ecs@ECSTaskStateChange
│    │        └      - rootProperty: ECSTaskStateChange
│    │               + rootProperty: ECSTaskStateChange
│    │               - resourcesField: [ECSTaskStateChange.clusterArn]
│    │               + resourcesField: [ECSTaskStateChange.clusterArn]
│    └[+]  resource AWS::ECS::ExpressGatewayService
│       ├      name: ExpressGatewayService
│       │      cloudFormationType: AWS::ECS::ExpressGatewayService
│       │      documentation: Resource Type definition for AWS::ECS::ExpressGatewayService
│       │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│       ├ properties
│       │  ├ TaskRoleArn: string
│       │  ├ PrimaryContainer: ExpressGatewayContainer (required)
│       │  ├ Memory: string (default="512")
│       │  ├ HealthCheckPath: string (default="HTTP:80/ping")
│       │  ├ Cluster: string (default="default", immutable)
│       │  ├ Cpu: string (default="256")
│       │  ├ ExecutionRoleArn: string (required)
│       │  ├ InfrastructureRoleArn: string (required, immutable)
│       │  ├ ScalingTarget: ExpressGatewayScalingTarget (immutable)
│       │  ├ ServiceName: string (immutable)
│       │  ├ NetworkConfiguration: ExpressGatewayServiceNetworkConfiguration
│       │  └ Tags: Array<tag> (immutable)
│       ├ attributes
│       │  ├ ServiceArn: string
│       │  ├ ActiveConfigurations: Array<ExpressGatewayServiceConfiguration>
│       │  ├ Status: ExpressGatewayServiceStatus
│       │  ├ CreatedAt: string
│       │  └ UpdatedAt: string
│       └ types
│          ├ type ExpressGatewayContainer
│          │ ├      name: ExpressGatewayContainer
│          │ └ properties
│          │    ├ RepositoryCredentials: ExpressGatewayRepositoryCredentials
│          │    ├ Secrets: Array<Secret>
│          │    ├ Command: Array<string>
│          │    ├ AwsLogsConfiguration: ExpressGatewayServiceAwsLogsConfiguration
│          │    ├ ContainerPort: integer (default=80)
│          │    ├ Environment: Array<KeyValuePair>
│          │    └ Image: string (required)
│          ├ type ExpressGatewayRepositoryCredentials
│          │ ├      name: ExpressGatewayRepositoryCredentials
│          │ └ properties
│          │    └ CredentialsParameter: string (required)
│          ├ type ExpressGatewayScalingTarget
│          │ ├      name: ExpressGatewayScalingTarget
│          │ └ properties
│          │    ├ MinTaskCount: integer (default=1)
│          │    ├ MaxTaskCount: integer (default=1)
│          │    ├ AutoScalingMetric: string (default="AVERAGE_CPU")
│          │    └ AutoScalingTargetValue: integer (default=60)
│          ├ type ExpressGatewayServiceAwsLogsConfiguration
│          │ ├      name: ExpressGatewayServiceAwsLogsConfiguration
│          │ └ properties
│          │    ├ LogStreamPrefix: string (required, default="ecs")
│          │    └ LogGroup: string (required)
│          ├ type ExpressGatewayServiceConfiguration
│          │ ├      name: ExpressGatewayServiceConfiguration
│          │ └ properties
│          │    ├ ServiceRevisionArn: string
│          │    ├ ExecutionRoleArn: string
│          │    ├ TaskRoleArn: string
│          │    ├ ScalingTarget: ExpressGatewayScalingTarget
│          │    ├ IngressPaths: Array<IngressPathSummary>
│          │    ├ PrimaryContainer: ExpressGatewayContainer
│          │    ├ Memory: string
│          │    ├ HealthCheckPath: string
│          │    ├ CreatedAt: string
│          │    ├ Cpu: string
│          │    └ NetworkConfiguration: ExpressGatewayServiceNetworkConfiguration
│          ├ type ExpressGatewayServiceNetworkConfiguration
│          │ ├      name: ExpressGatewayServiceNetworkConfiguration
│          │ └ properties
│          │    ├ SecurityGroups: Array<string>
│          │    └ Subnets: Array<string>
│          ├ type ExpressGatewayServiceStatus
│          │ ├      name: ExpressGatewayServiceStatus
│          │ └ properties
│          │    └ StatusCode: string
│          ├ type IngressPathSummary
│          │ ├      name: IngressPathSummary
│          │ └ properties
│          │    ├ Endpoint: string
│          │    └ AccessType: string
│          ├ type KeyValuePair
│          │ ├      name: KeyValuePair
│          │ └ properties
│          │    ├ Value: string (required)
│          │    └ Name: string (required)
│          └ type Secret
│            ├      name: Secret
│            └ properties
│               ├ ValueFrom: string (required)
│               └ Name: string (required)
├[~] service aws-eks
│ └ resources
│    └[~]  resource AWS::EKS::Cluster
│       ├ properties
│       │  └[+] ControlPlaneScalingConfig: ControlPlaneScalingConfig
│       └ types
│          └[+]  type ControlPlaneScalingConfig
│             ├      documentation: Configuration for provisioned control plane scaling.
│             │      name: ControlPlaneScalingConfig
│             └ properties
│                └ Tier: string
├[~] service aws-glue
│ └ resources
│    ├[~]  resource AWS::Glue::Database
│    │  └ events
│    │     ├[~]  event aws.glue@GlueDataCatalogDatabaseStateChange
│    │     │  └      - rootProperty: GlueDataCatalogDatabaseStateChange
│    │     │         + rootProperty: GlueDataCatalogDatabaseStateChange
│    │     │         - resourcesField: [GlueDataCatalogDatabaseStateChange.databaseName]
│    │     │         + resourcesField: [GlueDataCatalogDatabaseStateChange.databaseName]
│    │     └[~]  event aws.glue@GlueDataCatalogTableStateChange
│    │        └      - rootProperty: GlueDataCatalogTableStateChange
│    │               + rootProperty: GlueDataCatalogTableStateChange
│    │               - resourcesField: [GlueDataCatalogTableStateChange.databaseName]
│    │               + resourcesField: [GlueDataCatalogTableStateChange.databaseName]
│    └[~]  resource AWS::Glue::Job
│       └ events
│          ├[~]  event aws.glue@AWSAPICallViaCloudTrail
│          │  └      - rootProperty: AWSAPICallViaCloudTrail
│          │         + rootProperty: AWSAPICallViaCloudTrail
│          │         - resourcesField: [RequestParameters.jobName]
│          │         + resourcesField: [RequestParameters.jobName]
│          ├[~]  event aws.glue@GlueJobRunStatus
│          │  └      - rootProperty: GlueJobRunStatus
│          │         + rootProperty: GlueJobRunStatus
│          │         - resourcesField: [GlueJobRunStatus.jobName]
│          │         + resourcesField: [GlueJobRunStatus.jobName]
│          └[~]  event aws.glue@GlueJobStateChange
│             └      - rootProperty: GlueJobStateChange
│                    + rootProperty: GlueJobStateChange
│                    - resourcesField: [GlueJobStateChange.jobName]
│                    + resourcesField: [GlueJobStateChange.jobName]
├[~] service aws-guardduty
│ └ resources
│    └[~]  resource AWS::GuardDuty::Detector
│       └ events
│          └[~]  event aws.guardduty@GuardDutyFinding
│             └      - rootProperty: GuardDutyFinding
│                    + rootProperty: GuardDutyFinding
│                    - resourcesField: [Service.detectorId]
│                    + resourcesField: [Service.detectorId]
├[~] service aws-healthimaging
│ └ resources
│    └[~]  resource AWS::HealthImaging::Datastore
│       └ events
│          ├[~]  event aws.healthimaging@DataStoreCreated
│          │  └      - rootProperty: DataStoreCreated
│          │         + rootProperty: DataStoreCreated
│          │         - resourcesField: [DataStoreCreated.datastoreId]
│          │         + resourcesField: [DataStoreCreated.datastoreId]
│          ├[~]  event aws.healthimaging@DataStoreCreating
│          │  └      - rootProperty: DataStoreCreating
│          │         + rootProperty: DataStoreCreating
│          │         - resourcesField: [DataStoreCreating.datastoreId]
│          │         + resourcesField: [DataStoreCreating.datastoreId]
│          ├[~]  event aws.healthimaging@DataStoreCreationFailed
│          │  └      - rootProperty: DataStoreCreationFailed
│          │         + rootProperty: DataStoreCreationFailed
│          │         - resourcesField: [DataStoreCreationFailed.datastoreId]
│          │         + resourcesField: [DataStoreCreationFailed.datastoreId]
│          ├[~]  event aws.healthimaging@DataStoreDeleted
│          │  └      - rootProperty: DataStoreDeleted
│          │         + rootProperty: DataStoreDeleted
│          │         - resourcesField: [DataStoreDeleted.datastoreId]
│          │         + resourcesField: [DataStoreDeleted.datastoreId]
│          ├[~]  event aws.healthimaging@DataStoreDeleting
│          │  └      - rootProperty: DataStoreDeleting
│          │         + rootProperty: DataStoreDeleting
│          │         - resourcesField: [DataStoreDeleting.datastoreId]
│          │         + resourcesField: [DataStoreDeleting.datastoreId]
│          ├[~]  event aws.healthimaging@ImageSetCopied
│          │  └      - rootProperty: ImageSetCopied
│          │         + rootProperty: ImageSetCopied
│          │         - resourcesField: [ImageSetCopied.datastoreId]
│          │         + resourcesField: [ImageSetCopied.datastoreId]
│          ├[~]  event aws.healthimaging@ImageSetCopyFailed
│          │  └      - rootProperty: ImageSetCopyFailed
│          │         + rootProperty: ImageSetCopyFailed
│          │         - resourcesField: [ImageSetCopyFailed.datastoreId]
│          │         + resourcesField: [ImageSetCopyFailed.datastoreId]
│          ├[~]  event aws.healthimaging@ImageSetCopying
│          │  └      - rootProperty: ImageSetCopying
│          │         + rootProperty: ImageSetCopying
│          │         - resourcesField: [ImageSetCopying.datastoreId]
│          │         + resourcesField: [ImageSetCopying.datastoreId]
│          ├[~]  event aws.healthimaging@ImageSetCopyingWithReadOnlyAccess
│          │  └      - rootProperty: ImageSetCopyingWithReadOnlyAccess
│          │         + rootProperty: ImageSetCopyingWithReadOnlyAccess
│          │         - resourcesField: [ImageSetCopyingWithReadOnlyAccess.datastoreId]
│          │         + resourcesField: [ImageSetCopyingWithReadOnlyAccess.datastoreId]
│          ├[~]  event aws.healthimaging@ImageSetCreated
│          │  └      - rootProperty: ImageSetCreated
│          │         + rootProperty: ImageSetCreated
│          │         - resourcesField: [ImageSetCreated.datastoreId]
│          │         + resourcesField: [ImageSetCreated.datastoreId]
│          ├[~]  event aws.healthimaging@ImageSetDeleted
│          │  └      - rootProperty: ImageSetDeleted
│          │         + rootProperty: ImageSetDeleted
│          │         - resourcesField: [ImageSetDeleted.datastoreId]
│          │         + resourcesField: [ImageSetDeleted.datastoreId]
│          ├[~]  event aws.healthimaging@ImageSetDeleting
│          │  └      - rootProperty: ImageSetDeleting
│          │         + rootProperty: ImageSetDeleting
│          │         - resourcesField: [ImageSetDeleting.datastoreId]
│          │         + resourcesField: [ImageSetDeleting.datastoreId]
│          ├[~]  event aws.healthimaging@ImageSetUpdated
│          │  └      - rootProperty: ImageSetUpdated
│          │         + rootProperty: ImageSetUpdated
│          │         - resourcesField: [ImageSetUpdated.datastoreId]
│          │         + resourcesField: [ImageSetUpdated.datastoreId]
│          ├[~]  event aws.healthimaging@ImageSetUpdateFailed
│          │  └      - rootProperty: ImageSetUpdateFailed
│          │         + rootProperty: ImageSetUpdateFailed
│          │         - resourcesField: [ImageSetUpdateFailed.datastoreId]
│          │         + resourcesField: [ImageSetUpdateFailed.datastoreId]
│          ├[~]  event aws.healthimaging@ImageSetUpdating
│          │  └      - rootProperty: ImageSetUpdating
│          │         + rootProperty: ImageSetUpdating
│          │         - resourcesField: [ImageSetUpdating.datastoreId]
│          │         + resourcesField: [ImageSetUpdating.datastoreId]
│          ├[~]  event aws.healthimaging@ImportJobCompleted
│          │  └      - rootProperty: ImportJobCompleted
│          │         + rootProperty: ImportJobCompleted
│          │         - resourcesField: [ImportJobCompleted.datastoreId]
│          │         + resourcesField: [ImportJobCompleted.datastoreId]
│          ├[~]  event aws.healthimaging@ImportJobFailed
│          │  └      - rootProperty: ImportJobFailed
│          │         + rootProperty: ImportJobFailed
│          │         - resourcesField: [ImportJobFailed.datastoreId]
│          │         + resourcesField: [ImportJobFailed.datastoreId]
│          ├[~]  event aws.healthimaging@ImportJobInProgress
│          │  └      - rootProperty: ImportJobInProgress
│          │         + rootProperty: ImportJobInProgress
│          │         - resourcesField: [ImportJobInProgress.datastoreId]
│          │         + resourcesField: [ImportJobInProgress.datastoreId]
│          └[~]  event aws.healthimaging@ImportJobSubmitted
│             └      - rootProperty: ImportJobSubmitted
│                    + rootProperty: ImportJobSubmitted
│                    - resourcesField: [ImportJobSubmitted.datastoreId]
│                    + resourcesField: [ImportJobSubmitted.datastoreId]
├[~] service aws-iotanalytics
│ └ resources
│    └[~]  resource AWS::IoTAnalytics::Dataset
│       └ events
│          └[~]  event aws.iotanalytics@IoTAnalyticsDataSetLifeCycleNotification
│             └      - rootProperty: IoTAnalyticsDataSetLifeCycleNotification
│                    + rootProperty: IoTAnalyticsDataSetLifeCycleNotification
│                    - resourcesField: [IoTAnalyticsDataSetLifeCycleNotification.dataset-name]
│                    + resourcesField: [IoTAnalyticsDataSetLifeCycleNotification.dataset-name]
├[~] service aws-ivs
│ └ resources
│    └[~]  resource AWS::IVS::Channel
│       └ events
│          ├[~]  event aws.ivs@RecordingStateChange
│          │  └      - rootProperty: IVSRecordingStateChange
│          │         + rootProperty: IVSRecordingStateChange
│          │         - resourcesField: [IVSRecordingStateChange.channel_name]
│          │         + resourcesField: [IVSRecordingStateChange.channel_name]
│          ├[~]  event aws.ivs@StreamHealthChange
│          │  └      - rootProperty: IVSStreamHealthChange
│          │         + rootProperty: IVSStreamHealthChange
│          │         - resourcesField: [IVSStreamHealthChange.channel_name]
│          │         + resourcesField: [IVSStreamHealthChange.channel_name]
│          └[~]  event aws.ivs@StreamStateChange
│             └      - rootProperty: IVSStreamStateChange
│                    + rootProperty: IVSStreamStateChange
│                    - resourcesField: [IVSStreamStateChange.channel_name]
│                    + resourcesField: [IVSStreamStateChange.channel_name]
├[~] service aws-kinesisvideo
│ └ resources
│    └[~]  resource AWS::KinesisVideo::Stream
│       ├ properties
│       │  └[+] StreamStorageConfiguration: StreamStorageConfiguration
│       └ types
│          └[+]  type StreamStorageConfiguration
│             ├      documentation: Configuration for the storage tier of the Kinesis Video Stream.
│             │      name: StreamStorageConfiguration
│             └ properties
│                └ DefaultStorageTier: string (default="HOT")
├[~] service aws-kms
│ └ resources
│    └[~]  resource AWS::KMS::Key
│       └ events
│          ├[~]  event aws.kms@AWSAPICallViaCloudTrail
│          │  └      - rootProperty: AWSAPICallViaCloudTrail
│          │         + rootProperty: AWSAPICallViaCloudTrail
│          │         - resourcesField: [RequestParameters.keyId]
│          │         + resourcesField: [RequestParameters.keyId]
│          ├[~]  event aws.kms@KMSCMKDeletion
│          │  └      - rootProperty: KMSCMKDeletion
│          │         + rootProperty: KMSCMKDeletion
│          │         - resourcesField: [KMSCMKDeletion.key-id]
│          │         + resourcesField: [KMSCMKDeletion.key-id]
│          ├[~]  event aws.kms@KMSCMKRotation
│          │  └      - rootProperty: KMSCMKRotation
│          │         + rootProperty: KMSCMKRotation
│          │         - resourcesField: [KMSCMKRotation.key-id]
│          │         + resourcesField: [KMSCMKRotation.key-id]
│          └[~]  event aws.kms@KMSImportedKeyMaterialExpiration
│             └      - rootProperty: KMSImportedKeyMaterialExpiration
│                    + rootProperty: KMSImportedKeyMaterialExpiration
│                    - resourcesField: [KMSImportedKeyMaterialExpiration.key-id]
│                    + resourcesField: [KMSImportedKeyMaterialExpiration.key-id]
├[~] service aws-logs
│ └ resources
│    └[~]  resource AWS::Logs::LogGroup
│       └ events
│          └[~]  event aws.logs@AWSAPICallViaCloudTrail
│             └      - rootProperty: AWSAPICallViaCloudTrail
│                    + rootProperty: AWSAPICallViaCloudTrail
│                    - resourcesField: [RequestParameters.logGroupName]
│                    + resourcesField: [RequestParameters.logGroupName]
├[~] service aws-medialive
│ └ resources
│    ├[~]  resource AWS::MediaLive::Channel
│    │  ├ types
│    │  │  ├[~] type Av1Settings
│    │  │  │ └ properties
│    │  │  │    ├[+] SpatialAq: string
│    │  │  │    └[+] TemporalAq: string
│    │  │  └[~] type H265ColorSpaceSettings
│    │  │    └ properties
│    │  │       └[+] Hlg2020Settings: json
│    │  └ events
│    │     └[~]  event aws.medialive@MediaLiveChannelInputChange
│    │        └      - rootProperty: MediaLiveChannelInputChange
│    │               + rootProperty: MediaLiveChannelInputChange
│    │               - resourcesField: [MediaLiveChannelInputChange.channel_arn]
│    │               + resourcesField: [MediaLiveChannelInputChange.channel_arn]
│    └[~]  resource AWS::MediaLive::Input
│       ├ properties
│       │  └[+] RouterSettings: RouterSettings (immutable)
│       └ types
│          ├[+]  type RouterDestinationSettings
│          │  ├      name: RouterDestinationSettings
│          │  └ properties
│          │     └ AvailabilityZoneName: string
│          └[+]  type RouterSettings
│             ├      name: RouterSettings
│             └ properties
│                ├ SecretArn: string
│                ├ Destinations: Array<RouterDestinationSettings>
│                └ EncryptionType: string
├[~] service aws-mediapackage
│ └ resources
│    └[~]  resource AWS::MediaPackage::OriginEndpoint
│       └ events
│          └[~]  event aws.mediapackage@MediaPackageHarvestJobNotification
│             └      - rootProperty: MediaPackageHarvestJobNotification
│                    + rootProperty: MediaPackageHarvestJobNotification
│                    - resourcesField: [Harvest_job.origin_endpoint_id]
│                    + resourcesField: [Harvest_job.origin_endpoint_id]
├[~] service aws-networkmanager
│ └ resources
│    └[~]  resource AWS::NetworkManager::CoreNetwork
│       └ events
│          ├[~]  event aws.networkmanager@NetworkManagerPolicyUpdate
│          │  └      - rootProperty: NetworkManagerPolicyUpdate
│          │         + rootProperty: NetworkManagerPolicyUpdate
│          │         - resourcesField: [NetworkManagerPolicyUpdate.coreNetworkArn]
│          │         + resourcesField: [NetworkManagerPolicyUpdate.coreNetworkArn]
│          └[~]  event aws.networkmanager@NetworkManagerSegmentUpdate
│             └      - rootProperty: NetworkManagerSegmentUpdate
│                    + rootProperty: NetworkManagerSegmentUpdate
│                    - resourcesField: [NetworkManagerSegmentUpdate.coreNetworkArn]
│                    + resourcesField: [NetworkManagerSegmentUpdate.coreNetworkArn]
├[~] service aws-omics
│ └ resources
│    ├[~]  resource AWS::Omics::ReferenceStore
│    │  └ events
│    │     ├[~]  event aws.omics@ReferenceImportJobStatusChange
│    │     │  └      - rootProperty: ReferenceImportJobStatusChange
│    │     │         + rootProperty: ReferenceImportJobStatusChange
│    │     │         - resourcesField: [ReferenceImportJobStatusChange.referenceStoreId]
│    │     │         + resourcesField: [ReferenceImportJobStatusChange.referenceStoreId]
│    │     └[~]  event aws.omics@ReferenceStatusChange
│    │        └      - rootProperty: ReferenceStatusChange
│    │               + rootProperty: ReferenceStatusChange
│    │               - resourcesField: [ReferenceStatusChange.referenceStoreId]
│    │               + resourcesField: [ReferenceStatusChange.referenceStoreId]
│    └[~]  resource AWS::Omics::SequenceStore
│       └ events
│          ├[~]  event aws.omics@ReadSetActivationJobStatusChange
│          │  └      - rootProperty: ReadSetActivationJobStatusChange
│          │         + rootProperty: ReadSetActivationJobStatusChange
│          │         - resourcesField: [ReadSetActivationJobStatusChange.sequenceStoreId]
│          │         + resourcesField: [ReadSetActivationJobStatusChange.sequenceStoreId]
│          ├[~]  event aws.omics@ReadSetExportJobStatusChange
│          │  └      - rootProperty: ReadSetExportJobStatusChange
│          │         + rootProperty: ReadSetExportJobStatusChange
│          │         - resourcesField: [ReadSetExportJobStatusChange.sequenceStoreId]
│          │         + resourcesField: [ReadSetExportJobStatusChange.sequenceStoreId]
│          ├[~]  event aws.omics@ReadSetImportJobStatusChange
│          │  └      - rootProperty: ReadSetImportJobStatusChange
│          │         + rootProperty: ReadSetImportJobStatusChange
│          │         - resourcesField: [ReadSetImportJobStatusChange.sequenceStoreId]
│          │         + resourcesField: [ReadSetImportJobStatusChange.sequenceStoreId]
│          └[~]  event aws.omics@ReadSetStatusChange
│             └      - rootProperty: ReadSetStatusChange
│                    + rootProperty: ReadSetStatusChange
│                    - resourcesField: [ReadSetStatusChange.sequenceStoreId]
│                    + resourcesField: [ReadSetStatusChange.sequenceStoreId]
├[~] service aws-opensearchserverless
│ └ resources
│    └[~]  resource AWS::OpenSearchServerless::Collection
│       ├ properties
│       │  ├[-] CollectionGroupName: string (immutable)
│       │  └[-] EncryptionConfig: EncryptionConfig (immutable)
│       └ types
│          └[-]  type EncryptionConfig
│             ├      documentation: The configuration to encrypt the collection
│             │      name: EncryptionConfig
│             └ properties
│                ├ AWSOwnedKey: boolean
│                └ KmsKeyArn: string
├[~] service aws-opsworks
│ └ resources
│    ├[~]  resource AWS::OpsWorks::Instance
│    │  └ events
│    │     ├[~]  event aws.opsworks@OpsWorksAlert
│    │     │  └      - rootProperty: OpsWorksAlert
│    │     │         + rootProperty: OpsWorksAlert
│    │     │         - resourcesField: [OpsWorksAlert.instance-id]
│    │     │         + resourcesField: [OpsWorksAlert.instance-id]
│    │     ├[~]  event aws.opsworks@OpsWorksCommandStateChange
│    │     │  └      - rootProperty: OpsWorksCommandStateChange
│    │     │         + rootProperty: OpsWorksCommandStateChange
│    │     │         - resourcesField: [OpsWorksCommandStateChange.instance-id]
│    │     │         + resourcesField: [OpsWorksCommandStateChange.instance-id]
│    │     └[~]  event aws.opsworks@OpsWorksInstanceStateChange
│    │        └      - rootProperty: OpsWorksInstanceStateChange
│    │               + rootProperty: OpsWorksInstanceStateChange
│    │               - resourcesField: [OpsWorksInstanceStateChange.instance-id]
│    │               + resourcesField: [OpsWorksInstanceStateChange.instance-id]
│    └[~]  resource AWS::OpsWorks::Stack
│       └ events
│          └[~]  event aws.opsworks@OpsWorksDeploymentStateChange
│             └      - rootProperty: OpsWorksDeploymentStateChange
│                    + rootProperty: OpsWorksDeploymentStateChange
│                    - resourcesField: [OpsWorksDeploymentStateChange.stack-id]
│                    + resourcesField: [OpsWorksDeploymentStateChange.stack-id]
├[~] service aws-organizations
│ └ resources
│    └[~]  resource AWS::Organizations::Account
│       └ events
│          └[~]  event aws.organizations@AWSServiceEventViaCloudTrail
│             └      - rootProperty: AWSServiceEventViaCloudTrail
│                    + rootProperty: AWSServiceEventViaCloudTrail
│                    - resourcesField: [CreateAccountStatus.accountId]
│                    + resourcesField: [CreateAccountStatus.accountId]
├[~] service aws-pcs
│ └ resources
│    └[~]  resource AWS::PCS::Cluster
│       └ types
│          ├[+]  type JwtAuth
│          │  ├      documentation: JWT authentication configuration for Slurm.
│          │  │      name: JwtAuth
│          │  └ properties
│          │     └ JwtKey: JwtKey
│          ├[+]  type JwtKey
│          │  ├      documentation: JWT key configuration.
│          │  │      name: JwtKey
│          │  └ properties
│          │     ├ SecretArn: string (required)
│          │     └ SecretVersion: string (required)
│          ├[~] type SlurmConfiguration
│          │ └ properties
│          │    ├[+] JwtAuth: JwtAuth
│          │    └[+] SlurmRest: SlurmRest
│          └[+]  type SlurmRest
│             ├      documentation: The SlurmRest configuration includes configurable settings for Slurm Rest.
│             │      name: SlurmRest
│             └ properties
│                └ Mode: string (required, default="NONE")
├[~] service aws-qldb
│ └ resources
│    └[~]  resource AWS::QLDB::Ledger
│       └ events
│          └[~]  event aws.qldb@QLDBLedgerStateChange
│             └      - rootProperty: QLDBLedgerStateChange
│                    + rootProperty: QLDBLedgerStateChange
│                    - resourcesField: [QLDBLedgerStateChange.ledgerName]
│                    + resourcesField: [QLDBLedgerStateChange.ledgerName]
├[~] service aws-route53recoveryreadiness
│ └ resources
│    ├[~]  resource AWS::Route53RecoveryReadiness::Cell
│    │  └ events
│    │     └[~]  event aws.route53recoveryreadiness@Route53ApplicationRecoveryControllerCellReadinessStatusChange
│    │        └      - rootProperty: CellStatusChange
│    │               + rootProperty: CellStatusChange
│    │               - resourcesField: [CellStatusChange.cell-name]
│    │               + resourcesField: [CellStatusChange.cell-name]
│    ├[~]  resource AWS::Route53RecoveryReadiness::ReadinessCheck
│    │  └ events
│    │     └[~]  event aws.route53recoveryreadiness@Route53ApplicationRecoveryControllerReadinessCheckStatusChange
│    │        └      - rootProperty: ReadinessCheckStatusChange
│    │               + rootProperty: ReadinessCheckStatusChange
│    │               - resourcesField: [ReadinessCheckStatusChange.readiness-check-name]
│    │               + resourcesField: [ReadinessCheckStatusChange.readiness-check-name]
│    └[~]  resource AWS::Route53RecoveryReadiness::RecoveryGroup
│       └ events
│          └[~]  event aws.route53recoveryreadiness@Route53ApplicationRecoveryControllerRecoveryGroupReadinessStatusChange
│             └      - rootProperty: RecoveryGroupStatusChange
│                    + rootProperty: RecoveryGroupStatusChange
│                    - resourcesField: [RecoveryGroupStatusChange.recovery-group-name]
│                    + resourcesField: [RecoveryGroupStatusChange.recovery-group-name]
├[~] service aws-route53resolver
│ └ resources
│    └[~]  resource AWS::Route53Resolver::FirewallDomainList
│       └ events
│          ├[~]  event aws.route53resolver@DNSFirewallAlert
│          │  └      - rootProperty: DNSFirewallAlert
│          │         + rootProperty: DNSFirewallAlert
│          │         - resourcesField: [DNSFirewallAlert.firewall-domain-list-id]
│          │         + resourcesField: [DNSFirewallAlert.firewall-domain-list-id]
│          └[~]  event aws.route53resolver@DNSFirewallBlock
│             └      - rootProperty: DNSFirewallBlock
│                    + rootProperty: DNSFirewallBlock
│                    - resourcesField: [DNSFirewallBlock.firewall-domain-list-id]
│                    + resourcesField: [DNSFirewallBlock.firewall-domain-list-id]
├[~] service aws-s3
│ └ resources
│    └[~]  resource AWS::S3::Bucket
│       ├ properties
│       │  └[+] AbacStatus: string
│       └ events
│          ├[~]  event aws.s3@AWSAPICallViaCloudTrail
│          │  └      - rootProperty: AWSAPICallViaCloudTrail
│          │         + rootProperty: AWSAPICallViaCloudTrail
│          │         - resourcesField: [RequestParameters.bucketName]
│          │         + resourcesField: [RequestParameters.bucketName]
│          ├[~]  event aws.s3@ObjectAccessTierChanged
│          │  └      - rootProperty: ObjectAccessTierChanged
│          │         + rootProperty: ObjectAccessTierChanged
│          │         - resourcesField: [Bucket]
│          │         + resourcesField: [Bucket]
│          ├[~]  event aws.s3@ObjectACLUpdated
│          │  └      - rootProperty: ObjectACLUpdated
│          │         + rootProperty: ObjectACLUpdated
│          │         - resourcesField: [Bucket]
│          │         + resourcesField: [Bucket]
│          ├[~]  event aws.s3@ObjectCreated
│          │  └      - rootProperty: ObjectCreated
│          │         + rootProperty: ObjectCreated
│          │         - resourcesField: [Bucket]
│          │         + resourcesField: [Bucket]
│          ├[~]  event aws.s3@ObjectDeleted
│          │  └      - rootProperty: ObjectDeleted
│          │         + rootProperty: ObjectDeleted
│          │         - resourcesField: [Bucket]
│          │         + resourcesField: [Bucket]
│          ├[~]  event aws.s3@ObjectRestoreCompleted
│          │  └      - rootProperty: ObjectRestoreCompleted
│          │         + rootProperty: ObjectRestoreCompleted
│          │         - resourcesField: [Bucket]
│          │         + resourcesField: [Bucket]
│          ├[~]  event aws.s3@ObjectRestoreExpired
│          │  └      - rootProperty: ObjectRestoreExpired
│          │         + rootProperty: ObjectRestoreExpired
│          │         - resourcesField: [Bucket]
│          │         + resourcesField: [Bucket]
│          ├[~]  event aws.s3@ObjectRestoreInitiated
│          │  └      - rootProperty: ObjectRestoreInitiated
│          │         + rootProperty: ObjectRestoreInitiated
│          │         - resourcesField: [Bucket]
│          │         + resourcesField: [Bucket]
│          ├[~]  event aws.s3@ObjectStorageClassChanged
│          │  └      - rootProperty: ObjectStorageClassChanged
│          │         + rootProperty: ObjectStorageClassChanged
│          │         - resourcesField: [Bucket]
│          │         + resourcesField: [Bucket]
│          ├[~]  event aws.s3@ObjectTagsAdded
│          │  └      - rootProperty: ObjectTagsAdded
│          │         + rootProperty: ObjectTagsAdded
│          │         - resourcesField: [Bucket]
│          │         + resourcesField: [Bucket]
│          └[~]  event aws.s3@ObjectTagsDeleted
│             └      - rootProperty: ObjectTagsDeleted
│                    + rootProperty: ObjectTagsDeleted
│                    - resourcesField: [Bucket]
│                    + resourcesField: [Bucket]
├[~] service aws-sagemaker
│ └ resources
│    ├[~]  resource AWS::SageMaker::Cluster
│    │  └ types
│    │     ├[+]  type ClusterCapacityRequirements
│    │     │  ├      documentation: Specifies the capacity requirements configuration for an instance group
│    │     │  │      name: ClusterCapacityRequirements
│    │     │  └ properties
│    │     │     ├ Spot: json
│    │     │     └ OnDemand: json
│    │     ├[~] type ClusterInstanceGroup
│    │     │ └ properties
│    │     │    ├[+] CapacityRequirements: ClusterCapacityRequirements
│    │     │    └[+] KubernetesConfig: ClusterKubernetesConfig
│    │     ├[+]  type ClusterKubernetesConfig
│    │     │  ├      documentation: Kubernetes configuration for cluster nodes including labels and taints.
│    │     │  │      name: ClusterKubernetesConfig
│    │     │  └ properties
│    │     │     ├ Labels: Map<string, string>
│    │     │     └ Taints: Array<ClusterKubernetesTaint>
│    │     └[+]  type ClusterKubernetesTaint
│    │        ├      documentation: A Kubernetes taint to apply to cluster nodes.
│    │        │      name: ClusterKubernetesTaint
│    │        └ properties
│    │           ├ Value: string
│    │           ├ Effect: string (required)
│    │           └ Key: string (required)
│    ├[~]  resource AWS::SageMaker::EndpointConfig
│    │  └ events
│    │     └[~]  event aws.sagemaker@SageMakerEndpointConfigStateChange
│    │        └      - rootProperty: SageMakerEndpointConfigStateChange
│    │               + rootProperty: SageMakerEndpointConfigStateChange
│    │               - resourcesField: [SageMakerEndpointConfigStateChange.EndpointConfigName]
│    │               + resourcesField: [SageMakerEndpointConfigStateChange.EndpointConfigName]
│    ├[~]  resource AWS::SageMaker::Image
│    │  └ events
│    │     └[~]  event aws.sagemaker@SageMakerModelStateChange
│    │        └      - rootProperty: SageMakerModelStateChange
│    │               + rootProperty: SageMakerModelStateChange
│    │               - resourcesField: [PrimaryContainer.Image]
│    │               + resourcesField: [PrimaryContainer.Image]
│    ├[~]  resource AWS::SageMaker::Model
│    │  └ events
│    │     ├[~]  event aws.sagemaker@AWSAPICallViaCloudTrail
│    │     │  └      - rootProperty: AWSAPICallViaCloudTrail
│    │     │         + rootProperty: AWSAPICallViaCloudTrail
│    │     │         - resourcesField: [RequestParametersItem.modelName]
│    │     │         + resourcesField: [RequestParametersItem.modelName]
│    │     └[~]  event aws.sagemaker@SageMakerTransformJobStateChange
│    │        └      - rootProperty: SageMakerTransformJobStateChange
│    │               + rootProperty: SageMakerTransformJobStateChange
│    │               - resourcesField: [SageMakerTransformJobStateChange.ModelName]
│    │               + resourcesField: [SageMakerTransformJobStateChange.ModelName]
│    └[~]  resource AWS::SageMaker::Pipeline
│       └ events
│          ├[~]  event aws.sagemaker@SageMakerModelBuildingPipe

[mergify]

Merge Queue Status

🚫 The pull request has left the queue (rule: default-squash)

This pull request spent 1 hour 22 minutes 50 seconds in the queue, with no time waiting for CI.
The checks were run in-place.

Required conditions to merge

• any of [🛡 GitHub branch protection]:
  • check-neutral = build
  • check-skipped = build
  • check-success = build
• #approved-reviews-by >= 1 [🛡 GitHub branch protection]
  • feat: update L1 CloudFormation resource definitions #36193
• #changes-requested-reviews-by = 0 [🛡 GitHub branch protection]
  • feat: update L1 CloudFormation resource definitions #36193
• any of [🛡 GitHub branch protection]:
  • check-success = validate-pr
  • check-neutral = validate-pr
  • check-skipped = validate-pr

Reason

Pull request #36193 has been dequeued. The pull request rule doesn't match anymore. The following conditions don't match anymore:

• -label~=(blocked|do-not-merge|no-squash|two-approvers|priority-pr)
• check-success=build
• check-success=validate-pr
• any of: [🔀 queue conditions]
  • all of: [📌 queue conditions of queue default-squash]
    • -label~=(blocked|do-not-merge|no-squash|priority-pr)
    • check-success=build
    • check-success=validate-pr
    • any of: [🛡 GitHub branch protection]
      • check-neutral = validate-pr
      • check-skipped = validate-pr
      • check-success = validate-pr
    • any of: [🛡 GitHub branch protection]
      • check-neutral = build
      • check-skipped = build
      • check-success = build

Hint

You should look at the reason for the failure and decide if the pull request needs to be fixed or if you want to requeue it.
If you do update this pull request, it will automatically be requeued once the queue conditions match again.
If you think this was a flaky issue instead, you can requeue the pull request, without updating it, by posting a @mergifyio requeue comment.

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[mergify]

Merge Queue Status

✅ The pull request has been merged

This pull request spent 10 seconds in the queue, with no time waiting for CI.
The checks were run in-place.

Required conditions to merge

• #approved-reviews-by >= 1 [🛡 GitHub branch protection]
  • feat: update L1 CloudFormation resource definitions #36193
• #changes-requested-reviews-by = 0 [🛡 GitHub branch protection]
  • feat: update L1 CloudFormation resource definitions #36193
• any of [🛡 GitHub branch protection]:
  • check-success = validate-pr
  • check-neutral = validate-pr
  • check-skipped = validate-pr
• any of [🛡 GitHub branch protection]:
  • check-success = build
  • check-neutral = build
  • check-skipped = build

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[github-actions]

Comments on closed issues and PRs are hard for our team to see.
If you need help, please open a new issue that references this one.