feat: update L1 CloudFormation resource definitions (#35769)

aws-cdk-automation · web-flow · commit a16590513ff1 · 2025-10-20T21:07:40.000Z
Updates the L1 CloudFormation resource definitions with the latest changes from `@aws-cdk/aws-service-spec`

**L1 CloudFormation resource definition changes:**
```
├[~] service aws-acmpca
│ └ resources
│    ├[~]  resource AWS::ACMPCA::Certificate
│    │  └ properties
│    │     ├ CertificateAuthorityArn: - relationshipRefs: undefined
│    │     │                          + relationshipRefs: [AWS::ACMPCA::CertificateAuthority.Arn]
│    │     ├ CertificateSigningRequest: - relationshipRefs: undefined
│    │     │                            + relationshipRefs: [AWS::ACMPCA::CertificateAuthority.CertificateSigningRequest]
│    │     └ TemplateArn: - relationshipRefs: undefined
│    │                    + relationshipRefs: [AWS::ACMPCA::CertificateAuthority.Arn]
│    ├[~]  resource AWS::ACMPCA::CertificateAuthority
│    │  └ types
│    │     └[~] type CrlConfiguration
│    │       └ properties
│    │          └ S3BucketName: - relationshipRefs: undefined
│    │                          + relationshipRefs: [AWS::S3::Bucket.BucketName]
│    ├[~]  resource AWS::ACMPCA::CertificateAuthorityActivation
│    │  └ properties
│    │     └ CertificateAuthorityArn: - relationshipRefs: undefined
│    │                                + relationshipRefs: [AWS::ACMPCA::CertificateAuthority.Arn]
│    └[~]  resource AWS::ACMPCA::Permission
│       └ properties
│          └ CertificateAuthorityArn: - relationshipRefs: undefined
│                                     + relationshipRefs: [AWS::ACMPCA::CertificateAuthority.Arn]
├[~] service aws-amazonmq
│ └ resources
│    └[~]  resource AWS::AmazonMQ::Broker
│       └      - arnTemplate: arn:${Partition}:mq:${Region}:${Account}:broker:${BrokerName}:${BrokerId}
│              + arnTemplate: undefined
├[~] service aws-amplify
│ └ resources
│    ├[~]  resource AWS::Amplify::App
│    │  └ properties
│    │     └ IAMServiceRole: - relationshipRefs: undefined
│    │                       + relationshipRefs: [AWS::IAM::Role.Arn]
│    ├[~]  resource AWS::Amplify::Branch
│    │  ├      - arnTemplate: arn:${Partition}:amplify:${Region}:${Account}:apps/${AppId}/branches/${BranchName}
│    │  │      + arnTemplate: undefined
│    │  └ properties
│    │     └ AppId: - relationshipRefs: undefined
│    │              + relationshipRefs: [AWS::Amplify::App.AppId]
│    └[~]  resource AWS::Amplify::Domain
│       ├      - arnTemplate: arn:${Partition}:amplify:${Region}:${Account}:apps/${AppId}/domains/${DomainName}
│       │      + arnTemplate: undefined
│       ├ properties
│       │  ├ AppId: - relationshipRefs: undefined
│       │  │        + relationshipRefs: [AWS::Amplify::App.AppId]
│       │  └ AutoSubDomainIAMRole: - relationshipRefs: undefined
│       │                          + relationshipRefs: [AWS::IAM::Role.Arn]
│       └ types
│          └[~] type SubDomainSetting
│            └ properties
│               └ BranchName: - relationshipRefs: undefined
│                             + relationshipRefs: [AWS::Amplify::Branch.BranchName]
├[~] service aws-amplifyuibuilder
│ └ resources
│    ├[~]  resource AWS::AmplifyUIBuilder::Component
│    │  └      - arnTemplate: arn:${Partition}:amplifyuibuilder:${Region}:${Account}:app/${AppId}/environment/${EnvironmentName}/components/${Id}
│    │         + arnTemplate: undefined
│    ├[~]  resource AWS::AmplifyUIBuilder::Form
│    │  └      - arnTemplate: arn:${Partition}:amplifyuibuilder:${Region}:${Account}:app/${AppId}/environment/${EnvironmentName}/forms/${Id}
│    │         + arnTemplate: undefined
│    └[~]  resource AWS::AmplifyUIBuilder::Theme
│       └      - arnTemplate: arn:${Partition}:amplifyuibuilder:${Region}:${Account}:app/${AppId}/environment/${EnvironmentName}/themes/${Id}
│              + arnTemplate: undefined
├[~] service aws-apigateway
│ └ resources
│    ├[~]  resource AWS::ApiGateway::Account
│    │  ├      - arnTemplate: arn:${Partition}:apigateway:${Region}::/account
│    │  │      + arnTemplate: arn:${Partition}:apigateway:${Region}::/account/${ApiGatewayAccountId}
│    │  └ properties
│    │     └ CloudWatchRoleArn: - relationshipRefs: undefined
│    │                          + relationshipRefs: [AWS::IAM::Role.Arn]
│    ├[~]  resource AWS::ApiGateway::ApiKey
│    │  └ types
│    │     └[~] type StageKey
│    │       └ properties
│    │          ├ RestApiId: - relationshipRefs: undefined
│    │          │            + relationshipRefs: [AWS::ApiGateway::RestApi.RestApiId]
│    │          └ StageName: - relationshipRefs: undefined
│    │                       + relationshipRefs: [AWS::ApiGateway::Stage.StageName]
│    ├[~]  resource AWS::ApiGateway::Authorizer
│    │  ├      - arnTemplate: arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/authorizers/${AuthorizerId}
│    │  │      + arnTemplate: undefined
│    │  └ properties
│    │     ├ AuthorizerCredentials: - relationshipRefs: undefined
│    │     │                        + relationshipRefs: [AWS::IAM::Role.Arn]
│    │     ├ ProviderARNs: - relationshipRefs: undefined
│    │     │               + relationshipRefs: [AWS::Cognito::UserPool.Arn]
│    │     └ RestApiId: - relationshipRefs: undefined
│    │                  + relationshipRefs: [AWS::ApiGateway::RestApi.RestApiId]
│    ├[~]  resource AWS::ApiGateway::BasePathMapping
│    │  ├      - arnTemplate: arn:${Partition}:apigateway:${Region}::/domainnames/${DomainName}/basepathmappings/${BasePath}
│    │  │      + arnTemplate: undefined
│    │  └ properties
│    │     ├ DomainName: - relationshipRefs: undefined
│    │     │             + relationshipRefs: [AWS::ApiGateway::DomainName.DomainName]
│    │     ├ RestApiId: - relationshipRefs: undefined
│    │     │            + relationshipRefs: [AWS::ApiGateway::RestApi.RestApiId]
│    │     └ Stage: - relationshipRefs: undefined
│    │              + relationshipRefs: [AWS::ApiGateway::Stage.StageName]
│    ├[~]  resource AWS::ApiGateway::Deployment
│    │  ├      - arnTemplate: arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/deployments/${DeploymentId}
│    │  │      + arnTemplate: undefined
│    │  └ properties
│    │     └ RestApiId: - relationshipRefs: undefined
│    │                  + relationshipRefs: [AWS::ApiGateway::RestApi.RestApiId]
│    ├[~]  resource AWS::ApiGateway::DocumentationPart
│    │  ├      - arnTemplate: arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/documentation/parts/${DocumentationPartId}
│    │  │      + arnTemplate: undefined
│    │  └ properties
│    │     └ RestApiId: - relationshipRefs: undefined
│    │                  + relationshipRefs: [AWS::ApiGateway::RestApi.RestApiId]
│    ├[~]  resource AWS::ApiGateway::DocumentationVersion
│    │  ├      - arnTemplate: arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/documentation/versions/${DocumentationVersionId}
│    │  │      + arnTemplate: undefined
│    │  └ properties
│    │     └ RestApiId: - relationshipRefs: undefined
│    │                  + relationshipRefs: [AWS::ApiGateway::RestApi.RestApiId]
│    ├[~]  resource AWS::ApiGateway::DomainNameAccessAssociation
│    │  └      - arnTemplate: arn:${Partition}:apigateway:${Region}:${Account}:/domainnameaccessassociations
│    │         + arnTemplate: undefined
│    ├[~]  resource AWS::ApiGateway::GatewayResponse
│    │  ├      - arnTemplate: arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/gatewayresponses/${ResponseType}
│    │  │      + arnTemplate: undefined
│    │  └ properties
│    │     └ RestApiId: - relationshipRefs: undefined
│    │                  + relationshipRefs: [AWS::ApiGateway::RestApi.RestApiId]
│    ├[~]  resource AWS::ApiGateway::Method
│    │  ├      - arnTemplate: arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/resources/${ResourceId}/methods/${HttpMethodType}
│    │  │      + arnTemplate: undefined
│    │  ├ properties
│    │  │  ├ AuthorizerId: - relationshipRefs: undefined
│    │  │  │               + relationshipRefs: [AWS::ApiGateway::Authorizer.AuthorizerId]
│    │  │  ├ RequestValidatorId: - relationshipRefs: undefined
│    │  │  │                     + relationshipRefs: [AWS::ApiGateway::RequestValidator.RequestValidatorId]
│    │  │  ├ ResourceId: - relationshipRefs: undefined
│    │  │  │             + relationshipRefs: [AWS::ApiGateway::Resource.ResourceId]
│    │  │  └ RestApiId: - relationshipRefs: undefined
│    │  │               + relationshipRefs: [AWS::ApiGateway::RestApi.RestApiId]
│    │  └ types
│    │     └[~] type Integration
│    │       └ properties
│    │          ├ ConnectionId: - relationshipRefs: undefined
│    │          │               + relationshipRefs: [AWS::ApiGateway::VpcLink.VpcLinkId]
│    │          ├ Credentials: - relationshipRefs: undefined
│    │          │              + relationshipRefs: [AWS::IAM::Role.Arn]
│    │          └ Uri: - relationshipRefs: undefined
│    │                 + relationshipRefs: [AWS::Lambda::Function.Arn]
│    ├[~]  resource AWS::ApiGateway::Model
│    │  ├      - arnTemplate: arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/models/${ModelName}
│    │  │      + arnTemplate: undefined
│    │  └ properties
│    │     └ RestApiId: - relationshipRefs: undefined
│    │                  + relationshipRefs: [AWS::ApiGateway::RestApi.RestApiId]
│    ├[~]  resource AWS::ApiGateway::RequestValidator
│    │  ├      - arnTemplate: arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/requestvalidators/${RequestValidatorId}
│    │  │      + arnTemplate: undefined
│    │  └ properties
│    │     └ RestApiId: - relationshipRefs: undefined
│    │                  + relationshipRefs: [AWS::ApiGateway::RestApi.RestApiId]
│    ├[~]  resource AWS::ApiGateway::Resource
│    │  ├      - arnTemplate: arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/resources/${ResourceId}
│    │  │      + arnTemplate: undefined
│    │  └ properties
│    │     ├ ParentId: - relationshipRefs: undefined
│    │     │           + relationshipRefs: [AWS::ApiGateway::Resource.ResourceId]
│    │     └ RestApiId: - relationshipRefs: undefined
│    │                  + relationshipRefs: [AWS::ApiGateway::RestApi.RestApiId]
│    ├[~]  resource AWS::ApiGateway::RestApi
│    │  ├ properties
│    │  │  └ CloneFrom: - relationshipRefs: undefined
│    │  │               + relationshipRefs: [AWS::ApiGateway::RestApi.RestApiId]
│    │  └ types
│    │     ├[~] type EndpointConfiguration
│    │     │ └ properties
│    │     │    └ VpcEndpointIds: - relationshipRefs: undefined
│    │     │                      + relationshipRefs: [AWS::EC2::VPCEndpoint.Id]
│    │     └[~] type S3Location
│    │       └ properties
│    │          └ Bucket: - relationshipRefs: undefined
│    │                    + relationshipRefs: [AWS::S3::Bucket.BucketName]
│    ├[~]  resource AWS::ApiGateway::Stage
│    │  ├      - arnTemplate: arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/stages/${StageName}
│    │  │      + arnTemplate: undefined
│    │  ├ properties
│    │  │  ├ ClientCertificateId: - relationshipRefs: undefined
│    │  │  │                      + relationshipRefs: [AWS::ApiGateway::ClientCertificate.ClientCertificateId]
│    │  │  ├ DeploymentId: - relationshipRefs: undefined
│    │  │  │               + relationshipRefs: [AWS::ApiGateway::Deployment.DeploymentId]
│    │  │  └ RestApiId: - relationshipRefs: undefined
│    │  │               + relationshipRefs: [AWS::ApiGateway::RestApi.RestApiId]
│    │  └ types
│    │     ├[~] type AccessLogSetting
│    │     │ └ properties
│    │     │    └ DestinationArn: - relationshipRefs: undefined
│    │     │                      + relationshipRefs: [AWS::Logs::LogGroup.Arn]
│    │     └[~] type CanarySetting
│    │       └ properties
│    │          └ DeploymentId: - relationshipRefs: undefined
│    │                          + relationshipRefs: [AWS::ApiGateway::Deployment.DeploymentId]
│    ├[~]  resource AWS::ApiGateway::UsagePlan
│    │  └ types
│    │     └[~] type ApiStage
│    │       └ properties
│    │          ├ ApiId: - relationshipRefs: undefined
│    │          │        + relationshipRefs: [AWS::ApiGateway::RestApi.RestApiId]
│    │          └ Stage: - relationshipRefs: undefined
│    │                   + relationshipRefs: [AWS::ApiGateway::Stage.StageName]
│    ├[~]  resource AWS::ApiGateway::UsagePlanKey
│    │  ├      - arnTemplate: arn:${Partition}:apigateway:${Region}::/usageplans/${UsagePlanId}/keys/${Id}
│    │  │      + arnTemplate: undefined
│    │  └ properties
│    │     ├ KeyId: - relationshipRefs: undefined
│    │     │        + relationshipRefs: [AWS::ApiGateway::ApiKey.APIKeyId]
│    │     └ UsagePlanId: - relationshipRefs: undefined
│    │                    + relationshipRefs: [AWS::ApiGateway::UsagePlan.Id]
│    └[~]  resource AWS::ApiGateway::VpcLink
│       └ properties
│          └ TargetArns: - relationshipRefs: undefined
│                        + relationshipRefs: [AWS::ElasticLoadBalancingV2::LoadBalancer.LoadBalancerArn]
├[~] service aws-apigatewayv2
│ └ resources
│    ├[~]  resource AWS::ApiGatewayV2::Api
│    │  └ properties
│    │     └ Target: - relationshipRefs: undefined
│    │               + relationshipRefs: [AWS::Lambda::Function.Arn]
│    ├[~]  resource AWS::ApiGatewayV2::ApiMapping
│    │  ├      - arnTemplate: arn:${Partition}:apigateway:${Region}::/domainnames/${DomainName}/apimappings/${ApiMappingId}
│    │  │      + arnTemplate: undefined
│    │  └ properties
│    │     ├ ApiId: - relationshipRefs: undefined
│    │     │        + relationshipRefs: [AWS::ApiGatewayV2::Api.ApiId, AWS::ApiGateway::RestApi.RestApiId]
│    │     └ DomainName: - relationshipRefs: undefined
│    │                   + relationshipRefs: [AWS::ApiGatewayV2::DomainName.DomainName, AWS::ApiGateway::DomainName.DomainName]
│    ├[~]  resource AWS::ApiGatewayV2::Authorizer
│    │  ├      - arnTemplate: arn:${Partition}:apigateway:${Region}::/apis/${ApiId}/authorizers/${AuthorizerId}
│    │  │      + arnTemplate: undefined
│    │  └ properties
│    │     └ ApiId: - relationshipRefs: undefined
│    │              + relationshipRefs: [AWS::ApiGatewayV2::Api.ApiId]
│    ├[~]  resource AWS::ApiGatewayV2::Deployment
│    │  ├      - arnTemplate: arn:${Partition}:apigateway:${Region}::/apis/${ApiId}/deployments/${DeploymentId}
│    │  │      + arnTemplate: undefined
│    │  └ properties
│    │     └ ApiId: - relationshipRefs: undefined
│    │              + relationshipRefs: [AWS::ApiGatewayV2::Api.ApiId]
│    ├[~]  resource AWS::ApiGatewayV2::Integration
│    │  ├      - arnTemplate: arn:${Partition}:apigateway:${Region}::/apis/${ApiId}/integrations/${IntegrationId}
│    │  │      + arnTemplate: undefined
│    │  └ properties
│    │     ├ ApiId: - relationshipRefs: undefined
│    │     │        + relationshipRefs: [AWS::ApiGatewayV2::Api.ApiId]
│    │     └ IntegrationUri: - relationshipRefs: undefined
│    │                       + relationshipRefs: [AWS::Lambda::Function.Arn]
│    ├[~]  resource AWS::ApiGatewayV2::IntegrationResponse
│    │  ├      - arnTemplate: arn:${Partition}:apigateway:${Region}::/apis/${ApiId}/integrations/${IntegrationId}/integrationresponses/${IntegrationResponseId}
│    │  │      + arnTemplate: undefined
│    │  └ properties
│    │     ├ ApiId: - relationshipRefs: undefined
│    │     │        + relationshipRefs: [AWS::ApiGatewayV2::Api.ApiId]
│    │     └ IntegrationId: - relationshipRefs: undefined
│    │                      + relationshipRefs: [AWS::ApiGatewayV2::Integration.IntegrationId]
│    ├[~]  resource AWS::ApiGatewayV2::Model
│    │  ├      - arnTemplate: arn:${Partition}:apigateway:${Region}::/apis/${ApiId}/models/${ModelId}
│    │  │      + arnTemplate: undefined
│    │  └ properties
│    │     └ ApiId: - relationshipRefs: undefined
│    │              + relationshipRefs: [AWS::ApiGatewayV2::Api.ApiId]
│    ├[~]  resource AWS::ApiGatewayV2::Route
│    │  ├      - arnTemplate: arn:${Partition}:apigateway:${Region}::/apis/${ApiId}/routes/${RouteId}
│    │  │      + arnTemplate: undefined
│    │  └ properties
│    │     ├ ApiId: - relationshipRefs: undefined
│    │     │        + relationshipRefs: [AWS::ApiGatewayV2::Api.ApiId]
│    │     ├ AuthorizerId: - relationshipRefs: undefined
│    │     │               + relationshipRefs: [AWS::ApiGatewayV2::Authorizer.AuthorizerId]
│    │     └ Target: - relationshipRefs: undefined
│    │               + relationshipRefs: [AWS::ApiGatewayV2::Integration.IntegrationId]
│    ├[~]  resource AWS::ApiGatewayV2::RouteResponse
│    │  ├      - arnTemplate: arn:${Partition}:apigateway:${Region}::/apis/${ApiId}/routes/${RouteId}/routeresponses/${RouteResponseId}
│    │  │      + arnTemplate: undefined
│    │  └ properties
│    │     ├ ApiId: - relationshipRefs: undefined
│    │     │        + relationshipRefs: [AWS::ApiGatewayV2::Api.ApiId]
│    │     └ RouteId: - relationshipRefs: undefined
│    │                + relationshipRefs: [AWS::ApiGatewayV2::Route.RouteId]
│    ├[~]  resource AWS::ApiGatewayV2::RoutingRule
│    │  └      - arnTemplate: arn:${Partition}:apigateway:${Region}:${Account}:/domainnames/${DomainName}/routingrules/${RoutingRuleId}
│    │         + arnTemplate: undefined
│    ├[~]  resource AWS::ApiGatewayV2::Stage
│    │  └      - arnTemplate: arn:${Partition}:apigateway:${Region}::/apis/${ApiId}/stages/${StageName}
│    │         + arnTemplate: undefined
│    └[~]  resource AWS::ApiGatewayV2::VpcLink
│       └ properties
│          ├ SecurityGroupIds: - relationshipRefs: undefined
│          │                   + relationshipRefs: [AWS::EC2::SecurityGroup.Id]
│          └ SubnetIds: - relationshipRefs: undefined
│                       + relationshipRefs: [AWS::EC2::Subnet.SubnetId]
├[~] service aws-appconfig
│ └ resources
│    ├[~]  resource AWS::AppConfig::ConfigurationProfile
│    │  ├      - arnTemplate: arn:${Partition}:appconfig:${Region}:${Account}:application/${ApplicationId}/configurationprofile/${ConfigurationProfileId}
│    │  │      + arnTemplate: undefined
│    │  ├ properties
│    │  │  ├ ApplicationId: - relationshipRefs: undefined
│    │  │  │                + relationshipRefs: [AWS::AppConfig::Application.ApplicationId]
│    │  │  └ RetrievalRoleArn: - relationshipRefs: undefined
│    │  │                      + relationshipRefs: [AWS::IAM::Role.Arn]
│    │  └ types
│    │     └[~] type Validators
│    │       └ properties
│    │          └ Content: - relationshipRefs: undefined
│    │                     + relationshipRefs: [AWS::Lambda::Function.Arn, AWS::Lambda::Alias.Id]
│    ├[~]  resource AWS::AppConfig::Deployment
│    │  └      - arnTemplate: arn:${Partition}:appconfig:${Region}:${Account}:application/${ApplicationId}/environment/${EnvironmentId}/deployment/${DeploymentNumber}
│    │         + arnTemplate: undefined
│    ├[~]  resource AWS::AppConfig::Environment
│    │  ├      - arnTemplate: arn:${Partition}:appconfig:${Region}:${Account}:application/${ApplicationId}/environment/${EnvironmentId}
│    │  │      + arnTemplate: undefined
│    │  ├ properties
│    │  │  └ ApplicationId: - relationshipRefs: undefined
│    │  │                   + relationshipRefs: [AWS::AppConfig::Application.ApplicationId]
│    │  └ types
│    │     ├[~] type Monitor
│    │     │ └ properties
│    │     │    ├ AlarmArn: - relationshipRefs: undefined
│    │     │    │           + relationshipRefs: [AWS::CloudWatch::Alarm.Arn, AWS::CloudWatch::CompositeAlarm.Arn]
│    │     │    └ AlarmRoleArn: - relationshipRefs: undefined
│    │     │                    + relationshipRefs: [AWS::IAM::Role.Arn]
│    │     └[~] type Monitors
│    │       └ properties
│    │          ├ AlarmArn: - relationshipRefs: undefined
│    │          │           + relationshipRefs: [AWS::CloudWatch::Alarm.Arn, AWS::CloudWatch::CompositeAlarm.Arn]
│    │          └ AlarmRoleArn: - relationshipRefs: undefined
│    │                          + relationshipRefs: [AWS::IAM::Role.Arn]
│    ├[~]  resource AWS::AppConfig::Extension
│    │  └      - arnTemplate: arn:${Partition}:appconfig:${Region}:${Account}:extension/${ExtensionId}/${ExtensionVersionNumber}
│    │         + arnTemplate: undefined
│    └[~]  resource AWS::AppConfig::HostedConfigurationVersion
│       ├      - arnTemplate: arn:${Partition}:appconfig:${Region}:${Account}:application/${ApplicationId}/configurationprofile/${ConfigurationProfileId}/hostedconfigurationversion/${VersionNumber}
│       │      + arnTemplate: undefined
│       └ properties
│          ├ ApplicationId: - relationshipRefs: undefined
│          │                + relationshipRefs: [AWS::AppConfig::Application.ApplicationId]
│          └ ConfigurationProfileId: - relationshipRefs: undefined
│                                    + relationshipRefs: [AWS::AppConfig::ConfigurationProfile.ConfigurationProfileId]
├[~] service aws-appflow
│ └ resources
│    └[~]  resource AWS::AppFlow::Flow
│       ├ properties
│       │  └ KMSArn: - relationshipRefs: undefined
│       │            + relationshipRefs: [AWS::KMS::Key.Arn]
│       └ types
│          ├[~] type ErrorHandlingConfig
│          │ └ properties
│          │    └ BucketName: - relationshipRefs: undefined
│          │                  + relationshipRefs: [AWS::S3::Bucket.BucketName]
│          ├[~] type RedshiftDestinationProperties
│          │ └ properties
│          │    └ IntermediateBucketName: - relationshipRefs: undefined
│          │                              + relationshipRefs: [AWS::S3::Bucket.BucketName]
│          ├[~] type S3DestinationProperties
│          │ └ properties
│          │    └ BucketName: - relationshipRefs: undefined
│          │                  + relationshipRefs: [AWS::S3::Bucket.BucketName]
│          ├[~] type S3SourceProperties
│          │ └ properties
│          │    └ BucketName: - relationshipRefs: undefined
│          │                  + relationshipRefs: [AWS::S3::Bucket.BucketName]
│          ├[~] type SnowflakeDestinationProperties
│          │ └ properties
│          │    └ IntermediateBucketName: - relationshipRefs: undefined
│          │                              + relationshipRefs: [AWS::S3::Bucket.BucketName]
│          └[~] type SuccessResponseHandlingConfig
│            └ properties
│               └ BucketName: - relationshipRefs: undefined
│                             + relationshipRefs: [AWS::S3::Bucket.BucketName]
├[~] service aws-applicationautoscaling
│ └ resources
│    ├[~]  resource AWS::ApplicationAutoScaling::ScalableTarget
│    │  └ properties
│    │     ├ ResourceId: - relationshipRefs: undefined
│    │     │             + relationshipRefs: [AWS::MSK::Cluster.Arn]
│    │     └ RoleARN: - relationshipRefs: undefined
│    │                + relationshipRefs: [AWS::IAM::Role.Arn]
│    └[~]  resource AWS::ApplicationAutoScaling::ScalingPolicy
│       └ properties
│          └ ScalingTargetId: - relationshipRefs: undefined
│                             + relationshipRefs: [AWS::ApplicationAutoScaling::ScalableTarget.ResourceId]
├[~] service aws-applicationinsights
│ └ resources
│    └[~]  resource AWS::ApplicationInsights::Application
│       └      - arnTemplate: arn:${Partition}:applicationinsights:${Region}:${AccountId}:application/resource-group/${ResourceGroupName}
│              + arnTemplate: undefined
├[~] service aws-appmesh
│ └ resources
│    ├[~]  resource AWS::AppMesh::GatewayRoute
│    │  └      - arnTemplate: arn:${Partition}:appmesh:${Region}:${Account}:mesh/${MeshName}/virtualGateway/${VirtualGatewayName}/gatewayRoute/${GatewayRouteName}
│    │         + arnTemplate: undefined
│    ├[~]  resource AWS::AppMesh::Route
│    │  └      - arnTemplate: arn:${Partition}:appmesh:${Region}:${Account}:mesh/${MeshName}/virtualRouter/${VirtualRouterName}/route/${RouteName}
│    │         + arnTemplate: undefined
│    ├[~]  resource AWS::AppMesh::VirtualGateway
│    │  └      - arnTemplate: arn:${Partition}:appmesh:${Region}:${Account}:mesh/${MeshName}/virtualGateway/${VirtualGatewayName}
│    │         + arnTemplate: undefined
│    ├[~]  resource AWS::AppMesh::VirtualNode
│    │  └      - arnTemplate: arn:${Partition}:appmesh:${Region}:${Account}:mesh/${MeshName}/virtualNode/${VirtualNodeName}
│    │         + arnTemplate: undefined
│    ├[~]  resource AWS::AppMesh::VirtualRouter
│    │  └      - arnTemplate: arn:${Partition}:appmesh:${Region}:${Account}:mesh/${MeshName}/virtualRouter/${VirtualRouterName}
│    │         + arnTemplate: undefined
│    └[~]  resource AWS::AppMesh::VirtualService
│       └      - arnTemplate: arn:${Partition}:appmesh:${Region}:${Account}:mesh/${MeshName}/virtualService/${VirtualServiceName}
│              + arnTemplate: undefined
├[~] service aws-apprunner
│ └ resources
│    ├[~]  resource AWS::AppRunner::AutoScalingConfiguration
│    │  └      - arnTemplate: arn:${Partition}:apprunner:${Region}:${Account}:autoscalingconfiguration/${AutoscalingConfigurationName}/${AutoscalingConfigurationVersion}/${AutoscalingConfigurationId}
│    │         + arnTemplate: undefined
│    ├[~]  resource AWS::AppRunner::ObservabilityConfiguration
│    │  └      - arnTemplate: arn:${Partition}:apprunner:${Region}:${Account}:observabilityconfiguration/${ObservabilityConfigurationName}/${ObservabilityConfigurationVersion}/${ObservabilityConfigurationId}
│    │         + arnTemplate: undefined
│    ├[~]  resource AWS::AppRunner::Service
│    │  ├      - arnTemplate: arn:${Partition}:apprunner:${Region}:${Account}:service/${ServiceName}/${ServiceId}
│    │  │      + arnTemplate: undefined
│    │  └ types
│    │     ├[~] type AuthenticationConfiguration
│    │     │ └ properties
│    │     │    └ AccessRoleArn: - relationshipRefs: undefined
│    │     │                     + relationshipRefs: [AWS::IAM::Role.Arn]
│    │     ├[~] type EgressConfiguration
│    │     │ └ properties
│    │     │    └ VpcConnectorArn: - relationshipRefs: undefined
│    │     │                       + relationshipRefs: [AWS::AppRunner::VpcConnector.VpcConnectorArn]
│    │     └[~] type InstanceConfiguration
│    │       └ properties
│    │          └ InstanceRoleArn: - relationshipRefs: undefined
│    │                             + relationshipRefs: [AWS::IAM::Role.Arn]
│    ├[~]  resource AWS::AppRunner::VpcConnector
│    │  ├      - arnTemplate: arn:${Partition}:apprunner:${Region}:${Account}:vpcconnector/${VpcConnectorName}/${VpcConnectorVersion}/${VpcConnectorId}
│    │  │      + arnTemplate: undefined
│    │  └ properties
│    │     └ SecurityGroups: - relationshipRefs: undefined
│    │                       + relationshipRefs: [AWS::EC2::SecurityGroup.Id]
│    └[~]  resource AWS::AppRunner::VpcIngressConnection
│       └      - arnTemplate: arn:${Partition}:apprunner:${Region}:${Account}:vpcingressconnection/${VpcIngressConnectionName}/${VpcIngressConnectionId}
│              + arnTemplate: undefined
├[~] service aws-appsync
│ └ resources
│    ├[~]  resource AWS::AppSync::ChannelNamespace
│    │  └      - arnTemplate: arn:${Partition}:appsync:${Region}:${Account}:apis/${ApiId}/channelNamespace/${ChannelNamespaceName}
│    │         + arnTemplate: undefined
│    ├[~]  resource AWS::AppSync::DataSource
│    │  ├      - arnTemplate: arn:${Partition}:appsync:${Region}:${Account}:apis/${GraphQLAPIId}/datasources/${DatasourceName}
│    │  │      + arnTemplate: undefined
│    │  ├ properties
│    │  │  ├ ApiId: - relationshipRefs: undefined
│    │  │  │        + relationshipRefs: [AWS::AppSync::GraphQLApi.ApiId]
│    │  │  └ ServiceRoleArn: - relationshipRefs: undefined
│    │  │                    + relationshipRefs: [AWS::IAM::Role.Arn]
│    │  └ types
│    │     ├[~] type DynamoDBConfig
│    │     │ └ properties
│    │     │    └ TableName: - relationshipRefs: undefined
│    │     │                 + relationshipRefs: [AWS::DynamoDB::Table.TableName]
│    │     ├[~] type EventBridgeConfig
│    │     │ └ properties
│    │     │    └ EventBusArn: - relationshipRefs: undefined
│    │     │                   + relationshipRefs: [AWS::Events::EventBus.Arn]
│    │     ├[~] type HttpConfig
│    │     │ └ properties
│    │     │    └ Endpoint: - relationshipRefs: undefined
│    │     │                + relationshipRefs: [AWS::S3::Bucket.BucketName]
│    │     ├[~] type LambdaConfig
│    │     │ └ properties
│    │     │    └ LambdaFunctionArn: - relationshipRefs: undefined
│    │     │                         + relationshipRefs: [AWS::Lambda::Function.Arn, AWS::Lambda::Alias.Id]
│    │     └[~] type RdsHttpEndpointConfig
│    │       └ properties
│    │          ├ AwsSecretStoreArn: - relationshipRefs: undefined
│    │          │                    + relationshipRefs: [AWS::SecretsManager::Secret.Id]
│    │          └ DbClusterIdentifier: - relationshipRefs: undefined
│    │                                 + relationshipRefs: [AWS::RDS::DBCluster.Arn]
│    ├[~]  resource AWS::AppSync::DomainNameApiAssociation
│    │  └ properties
│    │     ├ ApiId: - relationshipRefs: undefined
│    │     │        + relationshipRefs: [AWS::AppSync::GraphQLApi.ApiId]
│    │     └ DomainName: - relationshipRefs: undefined
│    │                   + relationshipRefs: [AWS::AppSync::DomainName.DomainName]
│    ├[~]  resource AWS::AppSync::FunctionConfiguration
│    │  ├      - arnTemplate: arn:${Partition}:appsync:${Region}:${Account}:apis/${GraphQLAPIId}/functions/${FunctionId}
│    │  │      + arnTemplate: undefined
│    │  └ properties
│    │     ├ ApiId: - relationshipRefs: undefined
│    │     │        + relationshipRefs: [AWS::AppSync::GraphQLApi.ApiId]
│    │     └ DataSourceName: - relationshipRefs: undefined
│    │                       + relationshipRefs: [AWS::AppSync::DataSource.Name]
│    ├[~]  resource AWS::AppSync::GraphQLApi
│    │  └ types
│    │     ├[~] type CognitoUserPoolConfig
│    │     │ └ properties
│    │     │    └ UserPoolId: - relationshipRefs: undefined
│    │     │                  + relationshipRefs: [AWS::Cognito::UserPool.UserPoolId]
│    │     ├[~] type LambdaAuthorizerConfig
│    │     │ └ properties
│    │     │    └ AuthorizerUri: - relationshipRefs: undefined
│    │     │                     + relationshipRefs: [AWS::Lambda::Function.Arn, AWS::Lambda::Alias.Arn, AWS::Lambda::Version.Arn]
│    │     ├[~] type LogConfig
│    │     │ └ properties
│    │     │    └ CloudWatchLogsRoleArn: - relationshipRefs: undefined
│    │     │                             + relationshipRefs: [AWS::IAM::Role.Arn]
│    │     └[~] type UserPoolConfig
│    │       └ properties
│    │          └ UserPoolId: - relationshipRefs: undefined
│    │                        + relationshipRefs: [AWS::Cognito::UserPool.UserPoolId]
│    ├[~]  resource AWS::AppSync::Resolver
│    │  ├ properties
│    │  │  ├ ApiId: - relationshipRefs: undefined
│    │  │  │        + relationshipRefs: [AWS::AppSync::GraphQLApi.ApiId]
│    │  │  └ DataSourceName: - relationshipRefs: undefined
│    │  │                    + relationshipRefs: [AWS::AppSync::DataSource.Name]
│    │  └ types
│    │     └[~] type PipelineConfig
│    │       └ properties
│    │          └ Functions: - relationshipRefs: undefined
│    │                       + relationshipRefs: [AWS::AppSync::FunctionConfiguration.FunctionId]
│    └[~]  resource AWS::AppSync::SourceApiAssociation
│       └      - arnTemplate: arn:${Partition}:appsync:${Region}:${Account}:apis/${MergedGraphQLAPIId}/sourceApiAssociations/${Associationid}
│              + arnTemplate: undefined
├[~] service aws-aps
│ └ resources
│    └[~]  resource AWS::APS::RuleGroupsNamespace
│       └      - arnTemplate: arn:${Partition}:aps:${Region}:${Account}:rulegroupsnamespace/${WorkspaceId}/${Namespace}
│              + arnTemplate: undefined
├[~] service aws-athena
│ └ resources
│    ├[~]  resource AWS::Athena::NamedQuery
│    │  └ properties
│    │     ├ Database: - relationshipRefs: undefined
│    │     │           + relationshipRefs: [AWS::Glue::Database.Id]
│    │     └ WorkGroup: - relationshipRefs: undefined
│    │                  + relationshipRefs: [AWS::Athena::WorkGroup.Name]
│    ├[~]  resource AWS::Athena::PreparedStatement
│    │  └ properties
│    │     └ WorkGroup: - relationshipRefs: undefined
│    │                  + relationshipRefs: [AWS::Athena::WorkGroup.Name]
│    └[~]  resource AWS::Athena::WorkGroup
│       └ types
│          ├[~] type CustomerContentEncryptionConfiguration
│          │ └ properties
│          │    └ KmsKey: - relationshipRefs: undefined
│          │              + relationshipRefs: [AWS::KMS::Key.Arn, AWS::KMS::Key.KeyId]
│          ├[~] type EncryptionConfiguration
│          │ └ properties
│          │    └ KmsKey: - relationshipRefs: undefined
│          │              + relationshipRefs: [AWS::KMS::Key.Arn, AWS::KMS::Key.KeyId]
│          ├[~] type WorkGroupConfiguration
│          │ └ properties
│          │    └ ExecutionRole: - relationshipRefs: undefined
│          │                     + relationshipRefs: [AWS::IAM::Role.Arn]
│          └[~] type WorkGroupConfigurationUpdates
│            └ properties
│               └ ExecutionRole: - relationshipRefs: undefined
│                                + relationshipRefs: [AWS::IAM::Role.Arn]
├[~] service aws-autoscaling
│ └ resources
│    ├[~]  resource AWS::AutoScaling::AutoScalingGroup
│    │  ├      - arnTemplate: arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:${GroupId}:autoScalingGroupName/${GroupFriendlyName}
│    │  │      + arnTemplate: undefined
│    │  ├ properties
│    │  │  ├ AutoScalingGroupName: - relationshipRefs: undefined
│    │  │  │                       + relationshipRefs: [AWS::EC2::Instance.AutoScalingGroupName]
│    │  │  ├ LaunchConfigurationName: - relationshipRefs: undefined
│    │  │  │                          + relationshipRefs: [AWS::AutoScaling::LaunchConfiguration.LaunchConfigurationName]
│    │  │  ├ LoadBalancerNames: - relationshipRefs: undefined
│    │  │  │                    + relationshipRefs: [AWS::ElasticLoadBalancing::LoadBalancer.Id]
│    │  │  ├ ServiceLinkedRoleARN: - relationshipRefs: undefined
│    │  │  │                       + relationshipRefs: [AWS::IAM::Role.Arn]
│    │  │  ├ TargetGroupARNs: - relationshipRefs: undefined
│    │  │  │                  + relationshipRefs: [AWS::ElasticLoadBalancingV2::TargetGroup.TargetGroupArn]
│    │  │  └ VPCZoneIdentifier: - relationshipRefs: undefined
│    │  │                       + relationshipRefs: [AWS::EC2::Subnet.SubnetId]
│    │  └ types
│    │     ├[~] type LaunchTemplateSpecification
│    │     │ └ properties
│    │     │    └ LaunchTemplateId: - relationshipRefs: undefined
│    │     │                        + relationshipRefs: [AWS::EC2::LaunchTemplate.LaunchTemplateId]
│    │     ├[~] type LifecycleHookSpecification
│    │     │ └ properties
│    │     │    ├ NotificationTargetARN: - relationshipRefs: undefined
│    │     │    │                        + relationshipRefs: [AWS::SNS::Topic.TopicArn, AWS::SQS::Queue.Arn]
│    │     │    └ RoleARN: - relationshipRefs: undefined
│    │     │               + relationshipRefs: [AWS::IAM::Role.Arn]
│    │     └[~] type NotificationConfiguration
│    │       └ properties
│    │          └ TopicARN: - relationshipRefs: undefined
│    │                      + relationshipRefs: [AWS::SNS::Topic.TopicArn]
│    ├[~]  resource AWS::AutoScaling::LaunchConfiguration
│    │  ├      - arnTemplate: arn:${Partition}:autoscaling:${Region}:${Account}:launchConfiguration:${Id}:launchConfigurationName/${LaunchConfigurationName}
│    │  │      + arnTemplate: undefined
│    │  └ properties
│    │     ├ IamInstanceProfile: - relationshipRefs: undefined
│    │     │                     + relationshipRefs: [AWS::IAM::InstanceProfile.InstanceProfileName]
│    │     └ SecurityGroups: - relationshipRefs: undefined
│    │                       + relationshipRefs: [AWS::EC2::SecurityGroup.Id]
│    ├[~]  resource AWS::AutoScaling::LifecycleHook
│    │  └ properties
│    │     ├ AutoScalingGroupName: - relationshipRefs: undefined
│    │     │                       + relationshipRefs: [AWS::AutoScaling::AutoScalingGroup.AutoScalingGroupName]
│    │     ├ NotificationTargetARN: - relationshipRefs: undefined
│    │     │                        + relationshipRefs: [AWS::SNS::Topic.TopicArn, AWS::SQS::Queue.Arn]
│    │     └ RoleARN: - relationshipRefs: undefined
│    │                + relationshipRefs: [AWS::IAM::Role.Arn]
│    ├[~]  resource AWS::AutoScaling::ScalingPolicy
│    │  ├ properties
│    │  │  └ AutoScalingGroupName: - relationshipRefs: undefined
│    │  │                          + relationshipRefs: [AWS::AutoScaling::AutoScalingGroup.AutoScalingGroupName]
│    │  └ types
│    │     └[~] type MetricDimension
│    │       └ properties
│    │          └ Value: - relationshipRefs: undefined
│    │                   + relationshipRefs: [AWS::AutoScaling::AutoScalingGroup.AutoScalingGroupName, AWS::ECS::Cluster.ClusterName]
│    ├[~]  resource AWS::AutoScaling::ScheduledAction
│    │  └ properties
│    │     └ AutoScalingGroupName: - relationshipRefs: undefined
│    │                             + relationshipRefs: [AWS::AutoScaling::AutoScalingGroup.AutoScalingGroupName]
│    └[~]  resource AWS::AutoScaling::WarmPool
│       └ properties
│          └ AutoScalingGroupName: - relationshipRefs: undefined
│                                  + relationshipRefs: [AWS::AutoScaling::AutoScalingGroup.AutoScalingGroupName]
├[~] service aws-backup
│ └ resources
│    ├[~]  resource AWS::Backup::BackupPlan
│    │  └ types
│    │     ├[~] type BackupRuleResourceType
│    │     │ └ properties
│    │     │    └ TargetBackupVault: - relationshipRefs: undefined
│    │     │                         + relationshipRefs: [AWS::Backup::BackupVault.BackupVaultName]
│    │     └[~] type CopyActionResourceType
│    │       └ properties
│    │          └ DestinationBackupVaultArn: - relationshipRefs: undefined
│    │                                       + relationshipRefs: [AWS::Backup::BackupVault.BackupVaultArn]
│    ├[~]  resource AWS::Backup::BackupSelection
│    │  ├ properties
│    │  │  └ BackupPlanId: - relationshipRefs: undefined
│    │  │                  + relationshipRefs: [AWS::Backup::BackupPlan.BackupPlanId]
│    │  └ types
│    │     └[~] type BackupSelectionResourceType
│    │       └ properties
│    │          ├ IamRoleArn: - relationshipRefs: undefined
│    │          │             + relationshipRefs: [AWS::IAM::Role.Arn]
│    │          └ Resources: - relationshipRefs: undefined
│    │                       + relationshipRefs: [AWS::DynamoDB::Table.Arn, AWS::S3::Bucket.Arn]
│    ├[~]  resource AWS::Backup::BackupVault
│    │  ├ properties
│    │  │  └ EncryptionKeyArn: - relationshipRefs: undefined
│    │  │                      + relationshipRefs: [AWS::KMS::Key.Arn]
│    │  └ types
│    │     └[~] type NotificationObjectType
│    │       └ properties
│    │          └ SNSTopicArn: - relationshipRefs: undefined
│    │                         + relationshipRefs: [AWS::SNS::Topic.TopicArn]
│    ├[~]  resource AWS::Backup::Framework
│    │  └      - arnTemplate: arn:${Partition}:backup:${Region}:${Account}:framework:${FrameworkName}-${FrameworkId}
│    │         + arnTemplate: undefined
│    ├[~]  resource AWS::Backup::ReportPlan
│    │  └      - arnTemplate: arn:${Partition}:backup:${Region}:${Account}:report-plan:${ReportPlanName}-${ReportPlanId}
│    │         + arnTemplate: undefined
│    └[~]  resource AWS::Backup::RestoreTestingPlan
│       └      - arnTemplate: arn:${Partition}:backup:${Region}:${Account}:restore-testing-plan:${RestoreTestingPlanName}-${RestoreTestingPlanId}
│              + arnTemplate: undefined
├[~] service aws-batch
│ └ resources
│    ├[~]  resource AWS::Batch::ComputeEnvironment
│    │  ├ properties
│    │  │  └ ServiceRole: - relationshipRefs: undefined
│    │  │                 + relationshipRefs: [AWS::IAM::Role.Arn, AWS::IAM::Role.RoleName]
│    │  └ types
│    │     ├[~] type ComputeResources
│    │     │ └ properties
│    │     │    ├ InstanceRole: - relationshipRefs: undefined
│    │     │    │               + relationshipRefs: [AWS::IAM::InstanceProfile.Arn, AWS::IAM::InstanceProfile.InstanceProfileName, AWS::IAM::Role.RoleName]
│    │     │    ├ PlacementGroup: - relationshipRefs: undefined
│    │     │    │                 + relationshipRefs: [AWS::EC2::PlacementGroup.GroupName]
│    │     │    ├ SecurityGroupIds: - relationshipRefs: undefined
│    │     │    │                   + relationshipRefs: [AWS::EC2::SecurityGroup.Id]
│    │     │    ├ SpotIamFleetRole: - relationshipRefs: undefined
│    │     │    │                   + relationshipRefs: [AWS::IAM::Role.RoleName]
│    │     │    └ Subnets: - relationshipRefs: undefined
│    │     │               + relationshipRefs: [AWS::EC2::Subnet.SubnetId]
│    │     └[~] type LaunchTemplateSpecification
│    │       └ properties
│    │          └ LaunchTemplateId: - relationshipRefs: undefined
│    │                              + relationshipRefs: [AWS::EC2::LaunchTemplate.LaunchTemplateId]
│    └[~]  resource AWS::Batch::JobQueue
│       ├ properties
│       │  └ SchedulingPolicyArn: - relationshipRefs: undefined
│       │                         + relationshipRefs: [AWS::Batch::SchedulingPolicy.Arn]
│       └ types
│          └[~] type ComputeEnvironmentOrder
│            └ properties
│               └ ComputeEnvironment: - relationshipRefs: undefined
│                                     + relationshipRefs: [AWS::Batch::ComputeEnvironment.ComputeEnvironmentArn]
├[~] service aws-bedrock
│ └ resources
│    ├[~]  resource AWS::Bedrock::AgentAlias
│    │  └      - arnTemplate: arn:${Partition}:bedrock:${Region}:${Account}:agent-alias/${AgentId}/${AgentAliasId}
│    │         + arnTemplate: undefined
│    ├[~]  resource AWS::Bedrock::AutomatedReasoningPolicyVersion
│    │  └      - arnTemplate: arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/${AutomatedReasoningPolicyId}:${AutomatedReasoningPolicyVersion}
│    │         + arnTemplate: undefined
│    ├[~]  resource AWS::Bedrock::FlowAlias
│    │  └      - arnTemplate: arn:${Partition}:bedrock:${Region}:${Account}:flow/${FlowId}/alias/${FlowAliasId}
│    │         + arnTemplate: undefined
│    └[~]  resource AWS::Bedrock::PromptVersion
│       └      - arnTemplate: arn:${Partition}:bedrock:${Region}:${Account}:prompt/${PromptId}:${PromptVersion}
│              + arnTemplate: undefined
├[~] service aws-bedrockagentcore
│ └ resources
│    ├[~]  resource AWS::BedrockAgentCore::BrowserCustom
│    │  └      - documentation: &gt; Amazon Bedrock AgentCore is in preview release and is subject to change. 
│    │         AgentCore Browser tool provides a fast, secure, cloud-based browser runtime to enable AI agents to interact with websites at scale.
│    │         For more information about using the custom browser, see [Interact with web applications using Amazon Bedrock AgentCore Browser](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/browser-tool.html) .
│    │         See the *Properties* section below for descriptions of both the required and optional properties.
│    │         + documentation: AgentCore Browser tool provides a fast, secure, cloud-based browser runtime to enable AI agents to interact with websites at scale.
│    │         For more information about using the custom browser, see [Interact with web applications using Amazon Bedrock AgentCore Browser](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/browser-tool.html) .
│    │         See the *Properties* section below for descriptions of both the required and optional properties.
│    ├[~]  resource AWS::BedrockAgentCore::CodeInterpreterCustom
│    │  └      - documentation: &gt; Amazon Bedrock AgentCore is in preview release and is subject to change. 
│    │         The AgentCore Code Interpreter tool enables agents to securely execute code in isolated sandbox environments. It offers advanced configuration support and seamless integration with popular frameworks.
│    │         For more information about using the custom code interpreter, see [Execute code and analyze data using Amazon Bedrock AgentCore Code Interpreter](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/code-interpreter-tool.html) .
│    │         See the *Properties* section below for descriptions of both the required and optional properties.
│    │         + documentation: The AgentCore Code Interpreter tool enables agents to securely execute code in isolated sandbox environments. It offers advanced configuration support and seamless integration with popular frameworks.
│    │         For more information about using the custom code interpreter, see [Execute code and analyze data using Amazon Bedrock AgentCore Code Interpreter](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/code-interpreter-tool.html) .
│    │         See the *Properties* section below for descriptions of both the required and optional properties.
│    ├[~]  resource AWS::BedrockAgentCore::Gateway
│    │  └      - documentation: &gt; Amazon Bedrock AgentCore is in preview release and is subject to change. 
│    │         Amazon Bedrock AgentCore Gateway provides a unified connectivity layer between agents and the tools and resources they need to interact with.
│    │         For more information about creating a gateway, see [Set up an Amazon Bedrock AgentCore gateway](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-building.html) .
│    │         See the *Properties* section below for descriptions of both the required and optional properties.
│    │         + documentation: Amazon Bedrock AgentCore Gateway provides a unified connectivity layer between agents and the tools and resources they need to interact with.
│    │         For more information about creating a gateway, see [Set up an Amazon Bedrock AgentCore gateway](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-building.html) .
│    │         See the *Properties* section below for descriptions of both the required and optional properties.
│    ├[~]  resource AWS::BedrockAgentCore::GatewayTarget
│    │  └      - documentation: &gt; Amazon Bedrock AgentCore is in preview release and is subject to change. 
│    │         After creating a gateway, you can add targets, which define the tools that your gateway will host.
│    │         For more information about adding gateway targets, see [Add targets to an existing gateway](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-building-adding-targets.html) .
│    │         See the *Properties* section below for descriptions of both the required and optional properties.
│    │         + documentation: After creating a gateway, you can add targets, which define the tools that your gateway will host.
│    │         For more information about adding gateway targets, see [Add targets to an existing gateway](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-building-adding-targets.html) .
│    │         See the *Properties* section below for descriptions of both the required and optional properties.
│    ├[~]  resource AWS::BedrockAgentCore::Memory
│    │  ├      - documentation: Resource Type definition for AWS::BedrockAgentCore::Memory
│    │  │      + documentation: Memory allows AI agents to maintain both immediate and long-term knowledge, enabling context-aware and personalized interactions.
│    │  │      For more information about using Memory in Amazon Bedrock AgentCore, see [Host agent or tools with Amazon Bedrock AgentCore Memory](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/memory-getting-started.html) .
│    │  │      See the *Properties* section below for descriptions of both the required and optional properties.
│    │  │      - arnTemplate: undefined
│    │  │      + arnTemplate: arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/${MemoryId}
│    │  ├ properties
│    │  │  ├ EncryptionKeyArn: (documentation changed)
│    │  │  ├ EventExpiryDuration: (documentation changed)
│    │  │  ├ MemoryExecutionRoleArn: (documentation changed)
│    │  │  ├ MemoryStrategies: (documentation changed)
│    │  │  ├ Name: (documentation changed)
│    │  │  └ Tags: (documentation changed)
│    │  ├ attributes
│    │  │  ├ CreatedAt: (documentation changed)
│    │  │  ├ MemoryId: (documentation changed)
│    │  │  └ Status: (documentation changed)
│    │  └ types
│    │     ├[~] type CustomConfigurationInput
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: The memory configuration input.
│    │     │ └ properties
│    │     │    ├[+] SelfManagedConfiguration: SelfManagedConfiguration
│    │     │    ├ SemanticOverride: (documentation changed)
│    │     │    ├ SummaryOverride: (documentation changed)
│    │     │    └ UserPreferenceOverride: (documentation changed)
│    │     ├[~] type CustomMemoryStrategy
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: The memory strategy.
│    │     │ └ properties
│    │     │    ├ Configuration: (documentation changed)
│    │     │    ├ Description: (documentation changed)
│    │     │    ├ Name: (documentation changed)
│    │     │    ├ Namespaces: (documentation changed)
│    │     │    ├ Status: (documentation changed)
│    │     │    ├ StrategyId: (documentation changed)
│    │     │    ├ Type: (documentation changed)
│    │     │    └ UpdatedAt: (documentation changed)
│    │     ├[+]  type InvocationConfigurationInput
│    │     │  ├      documentation: The memory invocation configuration input.
│    │     │  │      name: InvocationConfigurationInput
│    │     │  └ properties
│    │     │     ├ TopicArn: string
│    │     │     └ PayloadDeliveryBucketName: string
│    │     ├[~] type MemoryStrategy
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: The memory strategy.
│    │     │ └ properties
│    │     │    ├ CustomMemoryStrategy: (documentation changed)
│    │     │    ├ SemanticMemoryStrategy: (documentation changed)
│    │     │    ├ SummaryMemoryStrategy: (documentation changed)
│    │     │    └ UserPreferenceMemoryStrategy: (documentation changed)
│    │     ├[+]  type MessageBasedTriggerInput
│    │     │  ├      documentation: The message based trigger input.
│    │     │  │      name: MessageBasedTriggerInput
│    │     │  └ properties
│    │     │     └ MessageCount: integer
│    │     ├[+]  type SelfManagedConfiguration
│    │     │  ├      documentation: The self managed configuration.
│    │     │  │      name: SelfManagedConfiguration
│    │     │  └ properties
│    │     │     ├ TriggerConditions: Array&lt;TriggerConditionInput&gt;
│    │     │     ├ InvocationConfiguration: InvocationConfigurationInput
│    │     │     └ HistoricalContextWindowSize: integer
│    │     ├[~] type SemanticMemoryStrategy
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: The memory strategy.
│    │     │ └ properties
│    │     │    ├ Description: (documentation changed)
│    │     │    ├ Name: (documentation changed)
│    │     │    ├ Namespaces: (documentation changed)
│    │     │    ├ StrategyId: (documentation changed)
│    │     │    └ Type: (documentation changed)
│    │     ├[~] type SemanticOverride
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: The memory override.
│    │     │ └ properties
│    │     │    ├ Consolidation: (documentation changed)
│    │     │    └ Extraction: (documentation changed)
│    │     ├[~] type SemanticOverrideConsolidationConfigurationInput
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: The memory override configuration.
│    │     │ └ properties
│    │     │    ├ AppendToPrompt: (documentation changed)
│    │     │    └ ModelId: (documentation changed)
│    │     ├[~] type SemanticOverrideExtractionConfigurationInput
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: The memory override configuration.
│    │     │ └ properties
│    │     │    ├ AppendToPrompt: (documentation changed)
│    │     │    └ ModelId: (documentation changed)
│    │     ├[~] type SummaryMemoryStrategy
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: The memory strategy.
│    │     │ └ properties
│    │     │    ├ Description: (documentation changed)
│    │     │    ├ Name: (documentation changed)
│    │     │    ├ Namespaces: (documentation changed)
│    │     │    ├ Status: (documentation changed)
│    │     │    ├ StrategyId: (documentation changed)
│    │     │    ├ Type: (documentation changed)
│    │     │    └ UpdatedAt: (documentation changed)
│    │     ├[~] type SummaryOverride
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: The memory summary override.
│    │     │ └ properties
│    │     │    └ Consolidation: (documentation changed)
│    │     ├[~] type SummaryOverrideConsolidationConfigurationInput
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: The consolidation configuration.
│    │     │ └ properties
│    │     │    ├ AppendToPrompt: (documentation changed)
│    │     │    └ ModelId: (documentation changed)
│    │     ├[+]  type TimeBasedTriggerInput
│    │     │  ├      documentation: The memory trigger condition input for the time based trigger.
│    │     │  │      name: TimeBasedTriggerInput
│    │     │  └ properties
│    │     │     └ IdleSessionTimeout: integer
│    │     ├[+]  type TokenBasedTriggerInput
│    │     │  ├      documentation: The token based trigger input.
│    │     │  │      name: TokenBasedTriggerInput
│    │     │  └ properties
│    │     │     └ TokenCount: integer
│    │     ├[+]  type TriggerConditionInput
│    │     │  ├      documentation: The memory trigger condition input.
│    │     │  │      name: TriggerConditionInput
│    │     │  └ properties
│    │     │     ├ MessageBasedTrigger: MessageBasedTriggerInput
│    │     │     ├ TokenBasedTrigger: TokenBasedTriggerInput
│    │     │     └ TimeBasedTrigger: TimeBasedTriggerInput
│    │     ├[~] type UserPreferenceMemoryStrategy
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: The memory strategy.
│    │     │ └ properties
│    │     │    ├ Description: (documentation changed)
│    │     │    ├ Name: (documentation changed)
│    │     │    ├ Namespaces: (documentation changed)
│    │     │    ├ Status: (documentation changed)
│    │     │    ├ StrategyId: (documentation changed)
│    │     │    ├ Type: (documentation changed)
│    │     │    └ UpdatedAt: (documentation changed)
│    │     ├[~] type UserPreferenceOverride
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: The memory user preference override.
│    │     │ └ properties
│    │     │    ├ Consolidation: (documentation changed)
│    │     │    └ Extraction: (documentation changed)
│    │     ├[~] type UserPreferenceOverrideConsolidationConfigurationInput
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: The configuration input.
│    │     │ └ properties
│    │     │    ├ AppendToPrompt: (documentation changed)
│    │     │    └ ModelId: (documentation changed)
│    │     └[~] type UserPreferenceOverrideExtractionConfigurationInput
│    │       ├      - documentation: undefined
│    │       │      + documentation: The memory override configuration.
│    │       └ properties
│    │          ├ AppendToPrompt: (documentation changed)
│    │          └ ModelId: (documentation changed)
│    ├[~]  resource AWS::BedrockAgentCore::Runtime
│    │  └      - documentation: &gt; Amazon Bedrock AgentCore is in preview release and is subject to change. 
│    │         Contains information about an agent runtime. An agent runtime is the execution environment for a Amazon Bedrock Agent.
│    │         AgentCore Runtime is a secure, serverless runtime purpose-built for deploying and scaling dynamic AI agents and tools using any open-source framework including LangGraph, CrewAI, and Strands Agents, any protocol, and any model.
│    │         For more information about using agent runtime in Amazon Bedrock AgentCore, see [Host agent or tools with Amazon Bedrock AgentCore Runtime](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/agents-tools-runtime.html) .
│    │         See the *Properties* section below for descriptions of both the required and optional properties.
│    │         + documentation: Contains information about an agent runtime. An agent runtime is the execution environment for a Amazon Bedrock Agent.
│    │         AgentCore Runtime is a secure, serverless runtime purpose-built for deploying and scaling dynamic AI agents and tools using any open-source framework including LangGraph, CrewAI, and Strands Agents, any protocol, and any model.
│    │         For more information about using agent runtime in Amazon Bedrock AgentCore, see [Host agent or tools with Amazon Bedrock AgentCore Runtime](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/agents-tools-runtime.html) .
│    │         See the *Properties* section below for descriptions of both the required and optional properties.
│    └[~]  resource AWS::BedrockAgentCore::RuntimeEndpoint
│       └      - documentation: &gt; Amazon Bedrock AgentCore is in preview release and is subject to change. 
│              AgentCore Runtime is a secure, serverless runtime purpose-built for deploying and scaling dynamic AI agents and tools using any open-source framework including LangGraph, CrewAI, and Strands Agents, any protocol, and any model.
│              For more information about using agent runtime endpoints in Amazon Bedrock AgentCore, see [AgentCore Runtime versioning and endpoints](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/agent-runtime-versioning.html) .
│              See the *Properties* section below for descriptions of both the required and optional properties.
│              + documentation: AgentCore Runtime is a secure, serverless runtime purpose-built for deploying and scaling dynamic AI agents and tools using any open-source framework including LangGraph, CrewAI, and Strands Agents, any protocol, and any model.
│              For more information about using agent runtime endpoints in Amazon Bedrock AgentCore, see [AgentCore Runtime versioning and endpoints](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/agent-runtime-versioning.html) .
│              See the *Properties* section below for descriptions of both the required and optional properties.
│              - arnTemplate: arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}/runtime-endpoint/${Name}
│              + arnTemplate: undefined
├[~] service aws-budgets
│ └ resources
│    └[~]  resource AWS::Budgets::BudgetsAction
│       └      - arnTemplate: arn:${Partition}:budgets::${Account}:budget/${BudgetName}/action/${ActionId}
│              + arnTemplate: undefined
├[~] service aws-cassandra
│ └ resources
│    └[~]  resource AWS::Cassandra::Table
│       └      - arnTemplate: arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/${KeyspaceName}/table/${TableName}
│              + arnTemplate: undefined
├[~] service aws-ce
│ └ resources
│    └[~]  resource AWS::CE::AnomalySubscription
│       ├ properties
│       │  └ MonitorArnList: - relationshipRefs: undefined
│       │                    + relationshipRefs: [AWS::CE::AnomalyMonitor.MonitorArn]
│       └ types
│          └[~] type Subscriber
│            └ properties
│               └ Address: - relationshipRefs: undefined
│                          + relationshipRefs: [AWS::SNS::Topic.TopicArn]
├[~] service aws-chatbot
│ └ resources
│    ├[~]  resource AWS::Chatbot::MicrosoftTeamsChannelConfiguration
│    │  └      - arnTemplate: arn:${Partition}:chatbot::${Account}:chat-configuration/${ConfigurationType}/${ChatbotConfigurationName}
│    │         + arnTemplate: undefined
│    └[~]  resource AWS::Chatbot::SlackChannelConfiguration
│       ├      - arnTemplate: arn:${Partition}:c…
diff --git a/packages/aws-cdk-lib/package.json b/packages/aws-cdk-lib/package.json
@@ -132,7 +132,7 @@
   },
   "devDependencies": {
     "@aws-cdk/lambda-layer-kubectl-v31": "^2.1.0",
-    "@aws-cdk/aws-service-spec": "^0.1.105",
+    "@aws-cdk/aws-service-spec": "^0.1.108",
     "@aws-cdk/cdk-build-tools": "0.0.0",
     "@aws-cdk/custom-resource-handlers": "0.0.0",
     "@aws-cdk/pkglint": "0.0.0",
diff --git a/tools/@aws-cdk/spec2cdk/package.json b/tools/@aws-cdk/spec2cdk/package.json
@@ -32,9 +32,9 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-cdk/aws-service-spec": "^0.1.105",
-    "@aws-cdk/service-spec-importers": "^0.0.88",
-    "@aws-cdk/service-spec-types": "^0.0.171",
+    "@aws-cdk/aws-service-spec": "^0.1.108",
+    "@aws-cdk/service-spec-importers": "^0.0.90",
+    "@aws-cdk/service-spec-types": "^0.0.174",
     "@cdklabs/tskb": "^0.0.3",
     "@cdklabs/typewriter": "^0.0.6",
     "camelcase": "^6",
diff --git a/yarn.lock b/yarn.lock
@@ -66,12 +66,12 @@
     "@aws-cdk/service-spec-types" "^0.0.158"
     "@cdklabs/tskb" "^0.0.3"
 
-"@aws-cdk/aws-service-spec@^0.1.105":
-  version "0.1.105"
-  resolved "https://registry.npmjs.org/@aws-cdk/aws-service-spec/-/aws-service-spec-0.1.105.tgz#43bff697a6f58e016eab1934a8afce993c3e976a"
-  integrity sha512-O78k+Q9+EA0brMVW6ZjWmgNH+PmlrGTOgZ1q3JPDgJCqk6n5j3yfLnczhI3z/S26LFlUEVr4KknHZ/HyWAcGGg==
+"@aws-cdk/aws-service-spec@^0.1.108":
+  version "0.1.108"
+  resolved "https://registry.npmjs.org/@aws-cdk/aws-service-spec/-/aws-service-spec-0.1.108.tgz#db4b6335364af7d99a2c7eb370958b29bb377557"
+  integrity sha512-aCnBqp/fXXx4OhTuEuDsHlYF5fUrMQp07TiHnbUOGRVbqU72TT2AaruSPNeDmQ3XPA0VK9CNKnu7ENs9hJ3Uvw==
   dependencies:
-    "@aws-cdk/service-spec-types" "^0.0.171"
+    "@aws-cdk/service-spec-types" "^0.0.174"
     "@cdklabs/tskb" "^0.0.3"
 
 "@aws-cdk/cloud-assembly-schema@^48.6.0":
@@ -122,12 +122,12 @@
   resolved "https://registry.npmjs.org/@aws-cdk/lambda-layer-kubectl-v33/-/lambda-layer-kubectl-v33-2.0.0.tgz#0c521ad987bb3ac597a4b4ebeece8fd2721ca000"
   integrity sha512-osA3wkwWK2OfpymTcCZKhgaKSca9PQSr+7xi+UevKFRHtMdxHgygC345hdDpCtZlMmX9pKjtFpRUxeRrbGHMEw==
 
-"@aws-cdk/service-spec-importers@^0.0.88":
-  version "0.0.88"
-  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-importers/-/service-spec-importers-0.0.88.tgz#1c042a76934ea6810c8ea3f15eef6fdfe7edd393"
-  integrity sha512-Q2USb8AtcKN+uHeVWacgIQRMUc/f3tkD+NF+U+WU7FVcRyf6y2x/5gysxDocxto3wONdhg7j6uyW0u8ejWEcuw==
+"@aws-cdk/service-spec-importers@^0.0.90":
+  version "0.0.90"
+  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-importers/-/service-spec-importers-0.0.90.tgz#b1a140ccbec8525ec093b6c87a09c673e80a878c"
+  integrity sha512-b/2Z9YNd4Q+Yn+Qn/qKWqsJ134Yn8QYoj7h2zBRuNy1Vrp5tlbYxpoZIocWBhmk7jPU+orgYWu+5eo3L5WkdXg==
   dependencies:
-    "@aws-cdk/service-spec-types" "^0.0.170"
+    "@aws-cdk/service-spec-types" "^0.0.174"
     "@cdklabs/tskb" "^0.0.3"
     ajv "^6"
     canonicalize "^2.1.0"
@@ -145,17 +145,10 @@
   dependencies:
     "@cdklabs/tskb" "^0.0.3"
 
-"@aws-cdk/service-spec-types@^0.0.170":
-  version "0.0.170"
-  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-types/-/service-spec-types-0.0.170.tgz#e4223573ae6b6778662165fd3b95ae3ac9d53ab4"
-  integrity sha512-C1z8KtXOcIJ+95+Q2SFOhKdByGiEeY47f9pm8q9KHQk/U1sWbivLu5fQZjHDPC/oi005CmcFybbemBxRYLSyLg==
-  dependencies:
-    "@cdklabs/tskb" "^0.0.3"
-
-"@aws-cdk/service-spec-types@^0.0.171":
-  version "0.0.171"
-  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-types/-/service-spec-types-0.0.171.tgz#f386bdfec923b764a2cf759b2851bebbc56a78e7"
-  integrity sha512-fa2ZmKKl/3mYBIJJKZuD77Qb/fLuJXBvOHRNhdOxuleAHnOMx/yApVJ03AlSZWyx9PI9dNevYzwc7w1p5+yzig==
+"@aws-cdk/service-spec-types@^0.0.174":
+  version "0.0.174"
+  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-types/-/service-spec-types-0.0.174.tgz#5bb2e05e46615356f512c3895ce84b46dca9a9bb"
+  integrity sha512-WIxP/5NVF7jD89tLMzAKG3gAktKR3Zq/hcRskTCSbqVE+Q8TrcdoJUCWrXZlJJztJZ0kT5Ycmp25p5cOtY6TGg==
   dependencies:
     "@cdklabs/tskb" "^0.0.3"
 
