feat: update L1 CloudFormation resource definitions

[aws-cdk-automation]

Updates the L1 CloudFormation resource definitions with the latest changes from @aws-cdk/aws-service-spec

L1 CloudFormation resource definition changes:

├[~] service aws-amazonmq
│ └ resources
│    └[~]  resource AWS::AmazonMQ::Broker
│       ├ properties
│       │  └ Users: - Array<User> (required)
│       │           + Array<User>
│       ├ attributes
│       │  ├ ConfigurationRevision: - integer
│       │  │                        + string ⇐ integer
│       │  └[+] EngineVersionCurrent: string
│       └ types
│          └[~] type LdapServerMetadata
│            └ properties
│               └ ServiceAccountPassword: - string (required)
│                                         + string
├[~] service aws-apigateway
│ └ resources
│    ├[~]  resource AWS::ApiGateway::Account
│    │  └      - arnTemplate: arn:${Partition}:apigateway:${Region}::/account/${ApiGatewayAccountId}
│    │         + arnTemplate: arn:${Partition}:apigateway:${Region}::/account
│    ├[~]  resource AWS::ApiGateway::DomainNameV2
│    │  └      - arnTemplate: arn:${Partition}:apigateway:${Region}::/domainnames/${DomainName}
│    │         + arnTemplate: arn:${Partition}:apigateway:${Region}::/domainnames
│    └[~]  resource AWS::ApiGateway::RestApi
│       └ properties
│          └[+] SecurityPolicy: string
├[~] service aws-bcmdataexports
│ └ resources
│    └[~]  resource AWS::BCMDataExports::Export
│       └ attributes
│          └[+] Export.ExportArn: string
├[~] service aws-bedrockagentcore
│ └ resources
│    ├[~]  resource AWS::BedrockAgentCore::BrowserCustom
│    │  └      - arnTemplate: undefined
│    │         + arnTemplate: arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-custom/${BrowserId}
│    ├[~]  resource AWS::BedrockAgentCore::CodeInterpreterCustom
│    │  └      - arnTemplate: undefined
│    │         + arnTemplate: arn:${Partition}:bedrock-agentcore:${Region}:${Account}:code-interpreter-custom/${CodeInterpreterId}
│    ├[~]  resource AWS::BedrockAgentCore::Runtime
│    │  └      - arnTemplate: undefined
│    │         + arnTemplate: arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}
│    └[~]  resource AWS::BedrockAgentCore::RuntimeEndpoint
│       └      - arnTemplate: undefined
│              + arnTemplate: arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}/runtime-endpoint/${Name}
├[~] service aws-cloud9
│ └ resources
│    └[~]  resource AWS::Cloud9::EnvironmentEC2
│       └      - arnTemplate: undefined
│              + arnTemplate: arn:${Partition}:cloud9:${Region}:${Account}:environment:${ResourceId}
├[~] service aws-datasync
│ └ resources
│    ├[~]  resource AWS::DataSync::LocationHDFS
│    │  └      - arnTemplate: arn:${Partition}:datasync:${Region}:${AccountId}:location/${LocationId}
│    │         + arnTemplate: undefined
│    └[~]  resource AWS::DataSync::LocationS3
│       └      - arnTemplate: undefined
│              + arnTemplate: arn:${Partition}:datasync:${Region}:${AccountId}:location/${LocationId}
├[~] service aws-devicefarm
│ └ resources
│    ├[~]  resource AWS::DeviceFarm::DevicePool
│    │  └      - arnTemplate: arn:${Partition}:devicefarm:${Region}:${Account}:devicepool:${ProjectId}/${DevicePoolId}
│    │         + arnTemplate: arn:${Partition}:devicefarm:${Region}:${Account}:devicepool:${ResourceId}
│    └[~]  resource AWS::DeviceFarm::NetworkProfile
│       └      - arnTemplate: arn:${Partition}:devicefarm:${Region}:${Account}:networkprofile:${ResourceId}
│              + arnTemplate: arn:${Partition}:devicefarm:${Region}:${Account}:networkprofile:${ProjectId}/${NetworkProfileId}
├[~] service aws-directoryservice
│ └ resources
│    ├[~]  resource AWS::DirectoryService::MicrosoftAD
│    │  └      - arnTemplate: arn:${Partition}:ds:${Region}:${Account}:${DirectoryId}
│    │         + arnTemplate: arn:${Partition}:ds:${Region}:${Account}:directory/${DirectoryId}
│    └[~]  resource AWS::DirectoryService::SimpleAD
│       └      - arnTemplate: arn:${Partition}:ds:${Region}:${Account}:directory/${DirectoryId}
│              + arnTemplate: undefined
├[~] service aws-docdb
│ └ resources
│    ├[~]  resource AWS::DocDB::DBInstance
│    │  └      - arnTemplate: undefined
│    │         + arnTemplate: arn:${Partition}:rds:${Region}:${Account}:db:${DbInstanceName}
│    └[~]  resource AWS::DocDB::DBSubnetGroup
│       └      - arnTemplate: undefined
│              + arnTemplate: arn:${Partition}:rds:${Region}:${Account}:subgrp:${SubnetGroupName}
├[~] service aws-ec2
│ └ resources
│    ├[~]  resource AWS::EC2::TransitGatewayPeeringAttachment
│    │  └      - arnTemplate: arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/${TransitGatewayAttachmentId}
│    │         + arnTemplate: undefined
│    └[~]  resource AWS::EC2::TransitGatewayVpcAttachment
│       └      - arnTemplate: undefined
│              + arnTemplate: arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/${TransitGatewayAttachmentId}
├[~] service aws-elasticloadbalancingv2
│ └ resources
│    ├[~]  resource AWS::ElasticLoadBalancingV2::ListenerRule
│    │  └      - arnTemplate: arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener-rule/net/${LoadBalancerName}/${LoadBalancerId}/${ListenerId}/${ListenerRuleId}
│    │         + arnTemplate: arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener-rule/${LoadBalancerType}/${LoadBalancerName}/${LoadBalancerId}/${ListenerId}/${ListenerRuleId}
│    └[~]  resource AWS::ElasticLoadBalancingV2::LoadBalancer
│       └      - arnTemplate: arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/gwy/${LoadBalancerName}/${LoadBalancerId}/${ListenerId}
│              + arnTemplate: arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/${LoadBalancerName}/${LoadBalancerId}
├[~] service aws-entityresolution
│ └ resources
│    └[~]  resource AWS::EntityResolution::IdMappingWorkflow
│       └ types
│          └[~] type IdMappingTechniques
│            └ properties
│               └[+] NormalizationVersion: string
├[~] service aws-events
│ └ resources
│    └[~]  resource AWS::Events::Rule
│       └      - arnTemplate: arn:${Partition}:events:${Region}:${Account}:rule/${RuleName}
│              + arnTemplate: arn:${Partition}:events:${Region}:${Account}:rule/[${EventBusName}/]${RuleName}
├[~] service aws-greengrassv2
│ └ resources
│    └[~]  resource AWS::GreengrassV2::Deployment
│       └      - arnTemplate: arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/${GroupId}/deployments/${DeploymentId}
│              + arnTemplate: arn:${Partition}:greengrass:${Region}:${Account}:deployments:${DeploymentId}
├[~] service aws-iam
│ └ resources
│    └[~]  resource AWS::IAM::Policy
│       └      - arnTemplate: undefined
│              + arnTemplate: arn:${Partition}:iam::${Account}:policy/${PolicyNameWithPath}
├[~] service aws-iot
│ └ resources
│    └[~]  resource AWS::IoT::DomainConfiguration
│       └      - arnTemplate: arn:${Partition}:iot:${Region}:${Account}:domainconfiguration/${DomainConfigurationName}
│              + arnTemplate: arn:${Partition}:iot:${Region}:${Account}:domainconfiguration/${DomainConfigurationName}/${Id}
├[~] service aws-iotwireless
│ └ resources
│    └[~]  resource AWS::IoTWireless::WirelessDeviceImportTask
│       └      - arnTemplate: undefined
│              + arnTemplate: arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDeviceImportTask/${WirelessDeviceImportTaskId}
├[~] service aws-mediapackagev2
│ └ resources
│    └[~]  resource AWS::MediaPackageV2::Channel
│       └      - arnTemplate: undefined
│              + arnTemplate: arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/${ChannelGroupName}/channel/${ChannelName}
├[~] service aws-msk
│ └ resources
│    └[~]  resource AWS::MSK::Cluster
│       └      - arnTemplate: undefined
│              + arnTemplate: arn:${Partition}:kafka:${Region}:${Account}:cluster/${ClusterName}/${RandomId}
├[~] service aws-neptune
│ └ resources
│    ├[~]  resource AWS::Neptune::DBClusterParameterGroup
│    │  └      - arnTemplate: undefined
│    │         + arnTemplate: arn:aws:rds:${Region}:${Account}:cluster-pg:${ClusterPGName}
│    └[~]  resource AWS::Neptune::DBInstance
│       └      - arnTemplate: undefined
│              + arnTemplate: arn:${Partition}:rds:${Region}:${Account}:db:${DbInstanceName}
├[~] service aws-networkfirewall
│ └ resources
│    └[~]  resource AWS::NetworkFirewall::RuleGroup
│       └      - arnTemplate: arn:${Partition}:network-firewall:${Region}:${Account}:stateless-rulegroup/${Name}
│              + arnTemplate: arn:${Partition}:network-firewall:${Region}:${Account}:stateful-rulegroup/${Name}
├[~] service aws-networkmanager
│ └ resources
│    ├[~]  resource AWS::NetworkManager::ConnectAttachment
│    │  └      - arnTemplate: undefined
│    │         + arnTemplate: arn:${Partition}:networkmanager::${Account}:attachment/${AttachmentId}
│    └[~]  resource AWS::NetworkManager::VpcAttachment
│       └      - arnTemplate: arn:${Partition}:networkmanager::${Account}:attachment/${AttachmentId}
│              + arnTemplate: undefined
├[~] service aws-notifications
│ └ resources
│    └[~]  resource AWS::Notifications::NotificationConfiguration
│       └      - arnTemplate: undefined
│              + arnTemplate: arn:${Partition}:notifications::${Account}:configuration/${NotificationConfigurationId}
├[~] service aws-odb
│ └ resources
│    └[~]  resource AWS::ODB::OdbPeeringConnection
│       └      - arnTemplate: undefined
│              + arnTemplate: arn:${Partition}:odb:${Region}:${Account}:odb-peering-connection/${OdbPeeringConnectionId}
├[~] service aws-opensearchservice
│ └ resources
│    └[~]  resource AWS::OpenSearchService::Domain
│       └      - arnTemplate: undefined
│              + arnTemplate: arn:${Partition}:es:${Region}:${Account}:domain/${DomainName}
├[~] service aws-opsworkscm
│ └ resources
│    └[~]  resource AWS::OpsWorksCM::Server
│       └      - arnTemplate: arn:${Partition}:opsworks-cm::${Account}:server/${ServerName}/${UniqueId}
│              + arnTemplate: undefined
├[~] service aws-quicksight
│ └ resources
│    └[~]  resource AWS::QuickSight::CustomPermissions
│       └ types
│          └[~] type Capabilities
│            └ properties
│               ├[+] Analysis: string
│               └[+] Dashboard: string
├[~] service aws-rds
│ └ resources
│    └[~]  resource AWS::RDS::DBClusterParameterGroup
│       └      - arnTemplate: arn:aws:rds:${Region}:${Account}:cluster-pg:${ClusterPGName}
│              + arnTemplate: arn:${Partition}:rds:${Region}:${Account}:cluster-pg:${ClusterParameterGroupName}
├[~] service aws-redshift
│ └ resources
│    ├[~]  resource AWS::Redshift::ClusterSecurityGroup
│    │  └      - arnTemplate: arn:${Partition}:redshift:${Region}:${Account}:securitygroup:${SecurityGroupName}/ec2securitygroup/${Owner}/${Ec2SecurityGroupId}
│    │         + arnTemplate: arn:${Partition}:redshift:${Region}:${Account}:securitygroup:${SecurityGroupName}
│    └[~]  resource AWS::Redshift::ClusterSecurityGroupIngress
│       └      - arnTemplate: arn:${Partition}:redshift:${Region}:${Account}:securitygroupingress:${SecurityGroupName}/cidrip/${IpRange}
│              + arnTemplate: arn:${Partition}:redshift:${Region}:${Account}:securitygroupingress:${SecurityGroupName}/ec2securitygroup/${Owner}/${Ece2SecuritygroupId}
├[~] service aws-servicecatalog
│ └ resources
│    └[~]  resource AWS::ServiceCatalog::PortfolioProductAssociation
│       └ attributes
│          └[-] Id: string
├[~] service aws-ses
│ └ resources
│    ├[~]  resource AWS::SES::DedicatedIpPool
│    │  └      - arnTemplate: undefined
│    │         + arnTemplate: arn:${Partition}:ses:${Region}:${Account}:dedicated-ip-pool/${DedicatedIPPool}
│    └[~]  resource AWS::SES::ReceiptRuleSet
│       └      - arnTemplate: arn:${Partition}:ses:${Region}:${Account}:receipt-rule-set/${ReceiptRuleSetName}
│              + arnTemplate: arn:${Partition}:ses:${Region}:${Account}:receipt-rule-set/${ReceiptRuleSetName}:receipt-rule/${ReceiptRuleName}
├[~] service aws-smsvoice
│ └ resources
│    ├[~]  resource AWS::SMSVOICE::ConfigurationSet
│    │  └      - arnTemplate: undefined
│    │         + arnTemplate: arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/${ConfigurationSetName}
│    ├[~]  resource AWS::SMSVOICE::OptOutList
│    │  └      - arnTemplate: undefined
│    │         + arnTemplate: arn:${Partition}:sms-voice:${Region}:${Account}:opt-out-list/${OptOutListName}
│    ├[~]  resource AWS::SMSVOICE::PhoneNumber
│    │  └      - arnTemplate: undefined
│    │         + arnTemplate: arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/${PhoneNumberId}
│    ├[~]  resource AWS::SMSVOICE::Pool
│    │  └      - arnTemplate: undefined
│    │         + arnTemplate: arn:${Partition}:sms-voice:${Region}:${Account}:pool/${PoolId}
│    ├[~]  resource AWS::SMSVOICE::ProtectConfiguration
│    │  └      - arnTemplate: undefined
│    │         + arnTemplate: arn:${Partition}:sms-voice:${Region}:${Account}:protect-configuration/${ProtectConfigurationId}
│    └[~]  resource AWS::SMSVOICE::SenderId
│       └      - arnTemplate: undefined
│              + arnTemplate: arn:${Partition}:sms-voice:${Region}:${Account}:sender-id/${SenderId}/${IsoCountryCode}
└[~] service aws-stepfunctions
  └ resources
     ├[~]  resource AWS::StepFunctions::StateMachine
     │  └      - arnTemplate: undefined
     │         + arnTemplate: arn:${Partition}:states:${Region}:${Account}:stateMachine:${StateMachineName}
     └[~]  resource AWS::StepFunctions::StateMachineAlias
        └      - arnTemplate: arn:${Partition}:states:${Region}:${Account}:stateMachine:${StateMachineName}:${StateMachineVersionId}
               + arnTemplate: arn:${Partition}:states:${Region}:${Account}:stateMachine:${StateMachineName}:${StateMachineAliasName}

CHANGES TO L1 RESOURCES: L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-servicecatalog: AWS::ServiceCatalog::PortfolioProductAssociation: Id attribute removed.

[ozelalisen]

@Mergifyio refresh

[mergify]

refresh

✅ Pull request refreshed

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[mergify]

This pull request has been removed from the queue for the following reason: pull request dequeued.

Pull request #35614 has been dequeued. The pull request could not be merged. This could be related to an activated branch protection or ruleset rule that prevents us from merging. (details: Required status check "validate-pr" is queued.).

You should look at the reason for the failure and decide if the pull request needs to be fixed or if you want to requeue it.
If you do update this pull request, it will automatically be requeued once the queue conditions match again.
If you think this was a flaky issue instead, you can requeue the pull request, without updating it, by posting a @mergifyio requeue comment.

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[ozelalisen]

https://github.com/Mergifyio refresh

[mergify]

refresh

✅ Pull request refreshed

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[github-actions]

Comments on closed issues and PRs are hard for our team to see.
If you need help, please open a new issue that references this one.