feat(cloudformation): update L1 CloudFormation resource definitions (#34207)

Updates the L1 CloudFormation resource definitions with the latest
changes from `@aws-cdk/aws-service-spec`

**L1 CloudFormation resource definition changes:**
```
├[~] service aws-apigateway
│ └ resources
│    └[~]  resource AWS::ApiGateway::DomainNameV2
│       └ types
│          └[~] type EndpointConfiguration
│            └ properties
│               └[+] IpAddressType: string
├[~] service aws-aps
│ └ resources
│    └[~]  resource AWS::APS::Workspace
│       ├ properties
│       │  └[+] WorkspaceConfiguration: WorkspaceConfiguration
│       └ types
│          ├[+]  type Label
│          │  ├      documentation: Series label
│          │  │      name: Label
│          │  └ properties
│          │     ├ Name: string (required)
│          │     └ Value: string (required)
│          ├[+]  type LimitsPerLabelSet
│          │  ├      documentation: Label set and its associated limits
│          │  │      name: LimitsPerLabelSet
│          │  └ properties
│          │     ├ Limits: LimitsPerLabelSetEntry (required)
│          │     └ LabelSet: Array<Label> (required)
│          ├[+]  type LimitsPerLabelSetEntry
│          │  ├      documentation: Limits that can be applied to a label set
│          │  │      name: LimitsPerLabelSetEntry
│          │  └ properties
│          │     └ MaxSeries: integer
│          └[+]  type WorkspaceConfiguration
│             ├      documentation: Workspace configuration
│             │      name: WorkspaceConfiguration
│             └ properties
│                ├ RetentionPeriodInDays: integer
│                └ LimitsPerLabelSets: Array<LimitsPerLabelSet>
├[~] service aws-batch
│ └ resources
│    ├[~]  resource AWS::Batch::ComputeEnvironment
│    │  └ types
│    │     └[~] type ComputeResources
│    │       └ properties
│    │          └ Tags: (documentation changed)
│    ├[~]  resource AWS::Batch::JobDefinition
│    │  └ types
│    │     ├[~] type ContainerProperties
│    │     │ └ properties
│    │     │    └ EnableExecuteCommand: (documentation changed)
│    │     ├[~] type EcsTaskProperties
│    │     │ └ properties
│    │     │    └ EnableExecuteCommand: (documentation changed)
│    │     ├[~] type FirelensConfiguration
│    │     │ ├      - documentation: undefined
│    │     │ │      + documentation: The FireLens configuration for the container. This is used to specify and configure a log router for container logs. For more information, see [Custom log](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_firelens.html) routing in the *Amazon Elastic Container Service Developer Guide* .
│    │     │ └ properties
│    │     │    ├ Options: (documentation changed)
│    │     │    └ Type: (documentation changed)
│    │     ├[~] type LogConfiguration
│    │     │ └ properties
│    │     │    └ LogDriver: (documentation changed)
│    │     ├[~] type MultiNodeContainerProperties
│    │     │ └ properties
│    │     │    └ EnableExecuteCommand: (documentation changed)
│    │     ├[~] type MultiNodeEcsTaskProperties
│    │     │ └ properties
│    │     │    └ EnableExecuteCommand: (documentation changed)
│    │     └[~] type TaskContainerProperties
│    │       └ properties
│    │          └ FirelensConfiguration: (documentation changed)
│    └[~]  resource AWS::Batch::SchedulingPolicy
│       └ types
│          └[~] type FairsharePolicy
│            └ properties
│               └ ShareDecaySeconds: (documentation changed)
├[~] service aws-bedrock
│ └ resources
│    ├[~]  resource AWS::Bedrock::Guardrail
│    │  └ types
│    │     ├[~] type ContentFilterConfig
│    │     │ └ properties
│    │     │    ├[+] InputAction: string
│    │     │    ├[+] InputEnabled: boolean
│    │     │    ├[+] OutputAction: string
│    │     │    └[+] OutputEnabled: boolean
│    │     ├[~] type ContextualGroundingFilterConfig
│    │     │ └ properties
│    │     │    ├[+] Action: string
│    │     │    └[+] Enabled: boolean
│    │     ├[~] type ManagedWordsConfig
│    │     │ └ properties
│    │     │    ├[+] InputAction: string
│    │     │    ├[+] InputEnabled: boolean
│    │     │    ├[+] OutputAction: string
│    │     │    └[+] OutputEnabled: boolean
│    │     ├[~] type PiiEntityConfig
│    │     │ └ properties
│    │     │    ├[+] InputAction: string
│    │     │    ├[+] InputEnabled: boolean
│    │     │    ├[+] OutputAction: string
│    │     │    └[+] OutputEnabled: boolean
│    │     ├[~] type RegexConfig
│    │     │ └ properties
│    │     │    ├[+] InputAction: string
│    │     │    ├[+] InputEnabled: boolean
│    │     │    ├[+] OutputAction: string
│    │     │    └[+] OutputEnabled: boolean
│    │     ├[~] type TopicConfig
│    │     │ └ properties
│    │     │    ├[+] InputAction: string
│    │     │    ├[+] InputEnabled: boolean
│    │     │    ├[+] OutputAction: string
│    │     │    └[+] OutputEnabled: boolean
│    │     └[~] type WordConfig
│    │       └ properties
│    │          ├[+] InputAction: string
│    │          ├[+] InputEnabled: boolean
│    │          ├[+] OutputAction: string
│    │          └[+] OutputEnabled: boolean
│    └[~]  resource AWS::Bedrock::KnowledgeBase
│       └ types
│          ├[~] type MongoDbAtlasConfiguration
│          │ └ properties
│          │    └[+] TextIndexName: string
│          └[~] type RdsFieldMapping
│            └ properties
│               └[+] CustomMetadataField: string
├[~] service aws-datazone
│ └ resources
│    └[~]  resource AWS::DataZone::Domain
│       └ types
│          └[~] type SingleSignOn
│            └ properties
│               └[+] IdcInstanceArn: string
├[~] service aws-events
│ └ resources
│    └[~]  resource AWS::Events::Connection
│       └ properties
│          └[+] KmsKeyIdentifier: string
├[~] service aws-launchwizard
│ └ resources
│    └[~]  resource AWS::LaunchWizard::Deployment
│       └ properties
│          └ Specifications: - Map<string, string> (required)
│                            + Map<string, string>
├[~] service aws-neptune
│ └ resources
│    ├[~]  resource AWS::Neptune::DBClusterParameterGroup
│    │  └ attributes
│    │     └[-] Id: string
│    └[~]  resource AWS::Neptune::DBParameterGroup
│       └ attributes
│          └[-] Id: string
├[~] service aws-s3tables
│ └ resources
│    └[~]  resource AWS::S3Tables::TableBucket
│       ├      - documentation: Creates a table bucket. For more information, see [Creating a table bucket](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables-buckets-create.html) in the *Amazon Simple Storage Service User Guide* .
│       │      - **Permissions** - You must have the `s3tables:CreateTableBucket` permission to use this operation.
│       │      + documentation: Creates a table bucket. For more information, see [Creating a table bucket](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables-buckets-create.html) in the *Amazon Simple Storage Service User Guide* .
│       │      - **Permissions** - - You must have the `s3tables:CreateTableBucket` permission to use this operation.
│       │      - If you use this operation with the optional `encryptionConfiguration` parameter you must have the `s3tables:PutTableBucketEncryption` permission.
│       ├ properties
│       │  └[+] EncryptionConfiguration: EncryptionConfiguration
│       └ types
│          └[+]  type EncryptionConfiguration
│             ├      documentation: Configuration specifying how data should be encrypted. This structure defines the encryption algorithm and optional KMS key to be used for server-side encryption.
│             │      name: EncryptionConfiguration
│             └ properties
│                ├ SSEAlgorithm: string
│                └ KMSKeyArn: string
└[~] service aws-ses
  └ resources
     ├[~]  resource AWS::SES::MailManagerIngressPoint
     │  ├ properties
     │  │  └[+] NetworkConfiguration: NetworkConfiguration (immutable)
     │  └ types
     │     ├[+]  type NetworkConfiguration
     │     │  ├      documentation: The network type (IPv4-only, Dual-Stack, PrivateLink) of the ingress endpoint resource.
     │     │  │      name: NetworkConfiguration
     │     │  └ properties
     │     │     ├ PublicNetworkConfiguration: PublicNetworkConfiguration
     │     │     └ PrivateNetworkConfiguration: PrivateNetworkConfiguration
     │     ├[+]  type PrivateNetworkConfiguration
     │     │  ├      documentation: Specifies the network configuration for the private ingress point.
     │     │  │      name: PrivateNetworkConfiguration
     │     │  └ properties
     │     │     └ VpcEndpointId: string (required)
     │     └[+]  type PublicNetworkConfiguration
     │        ├      documentation: Specifies the network configuration for the public ingress point.
     │        │      name: PublicNetworkConfiguration
     │        └ properties
     │           └ IpType: string (required)
     ├[~]  resource AWS::SES::MailManagerRuleSet
     │  └ types
     │     ├[~] type RuleBooleanToEvaluate
     │     │ └ properties
     │     │    ├[+] Analysis: Analysis
     │     │    └ Attribute: - string (required)
     │     │                 + string
     │     └[~] type RuleStringToEvaluate
     │       └ properties
     │          └[+] Analysis: Analysis
     └[~]  resource AWS::SES::MailManagerTrafficPolicy
        └ types
           ├[+]  type IngressIpv6Expression
           │  ├      name: IngressIpv6Expression
           │  └ properties
           │     ├ Evaluate: IngressIpv6ToEvaluate (required)
           │     ├ Operator: string (required)
           │     └ Values: Array<string> (required)
           ├[+]  type IngressIpv6ToEvaluate
           │  ├      name: IngressIpv6ToEvaluate
           │  └ properties
           │     └ Attribute: string (required)
           ├[~] type IngressStringToEvaluate
           │ └ properties
           │    ├[+] Analysis: IngressAnalysis
           │    └ Attribute: - string (required)
           │                 + string
           └[~] type PolicyCondition
             └ properties
                └[+] Ipv6Expression: IngressIpv6Expression
```

BREAKING CHANGE: Some L1 resources experienced breaking changes due to
updated CloudFormation resources. Please check the notes for each
specific module for more information.
* **neptune-alpha**: `Id` attribute is being removed from the
AWS::Neptune::DBClusterParameterGroup and AWS::Neptune::DBParameterGroup
resources
* **aws-launchwizard**: `specifications` prop moved from required to
optional in CfnDeployment
* **aws-ses**: `attribute` attribute moved from required to optional in
RuleBooleanToEvaluateProperty

Author: QuantumNeuralCoder

packages/aws-cdk-lib/package.json

@@ -136,7 +136,7 @@
   },
   "devDependencies": {
     "@aws-cdk/lambda-layer-kubectl-v31": "^2.0.3",
-    "@aws-cdk/aws-service-spec": "^0.1.68",
+    "@aws-cdk/aws-service-spec": "^0.1.69",
     "@aws-cdk/cdk-build-tools": "0.0.0",
     "@aws-cdk/custom-resource-handlers": "0.0.0",
     "@aws-cdk/pkglint": "0.0.0",

tools/@aws-cdk/spec2cdk/package.json

@@ -32,9 +32,9 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-cdk/aws-service-spec": "^0.1.68",
+    "@aws-cdk/aws-service-spec": "^0.1.69",
     "@aws-cdk/service-spec-importers": "^0.0.76",
-    "@aws-cdk/service-spec-types": "^0.0.134",
+    "@aws-cdk/service-spec-types": "^0.0.135",
     "@cdklabs/tskb": "^0.0.3",
     "@cdklabs/typewriter": "^0.0.5",
     "camelcase": "^6",

yarn.lock

@@ -66,12 +66,12 @@
     "@aws-cdk/service-spec-types" "^0.0.128"
     "@cdklabs/tskb" "^0.0.3"
 
-"@aws-cdk/aws-service-spec@^0.1.68":
-  version "0.1.68"
-  resolved "https://registry.npmjs.org/@aws-cdk/aws-service-spec/-/aws-service-spec-0.1.68.tgz#1bff6732a69b3ec060644bb912b7bff051a07cb7"
-  integrity sha512-03LcUVIuJxxfae+8Z5cRCsy4GhdGROJOGwn0zIU7aQ8AKV6/EJ0w0BMeDm5Siy4TbCQZgvAyZIkSqUpjwOA5tQ==
+"@aws-cdk/aws-service-spec@^0.1.69":
+  version "0.1.69"
+  resolved "https://registry.npmjs.org/@aws-cdk/aws-service-spec/-/aws-service-spec-0.1.69.tgz#0391d873a31dcb354694bce465c3c3c69decf20e"
+  integrity sha512-vbTOVn3bYwEBQb9cPTn0r4BVVDRvSw7pXh8cMf8QQxw7aq5mwFvi8CTdxA0Jk8baC5ChR3Vtq0ToycbjsUl+GQ==
   dependencies:
-    "@aws-cdk/service-spec-types" "^0.0.134"
+    "@aws-cdk/service-spec-types" "^0.0.135"
     "@cdklabs/tskb" "^0.0.3"
 
 "@aws-cdk/cloud-assembly-schema@^41.0.0":
@@ -147,6 +147,13 @@
   dependencies:
     "@cdklabs/tskb" "^0.0.3"
 
+"@aws-cdk/service-spec-types@^0.0.135":
+  version "0.0.135"
+  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-types/-/service-spec-types-0.0.135.tgz#4752bc52f6f9036bbae2acc32c5c0ac30bce06d7"
+  integrity sha512-dSTveBK+sDwjsPv6yOrqRvLdc66EgBojCm8dXQ+FZFXFv4/90/CXwAKeRYqEwjrmvQGKCEGtC6VCUyETSl1ozQ==
+  dependencies:
+    "@cdklabs/tskb" "^0.0.3"
+
 "@aws-crypto/crc32@5.2.0":
   version "5.2.0"
   resolved "https://registry.npmjs.org/@aws-crypto/crc32/-/crc32-5.2.0.tgz#cfcc22570949c98c6689cfcbd2d693d36cdae2e1"