Automated SDK generation @ aws-cloudformation-user-guide 19dc52cd3f2007d6d268b65b739ffb5ebf8c1e76

aws-cloudformation-schema/aws-apigateway-authorizer.json

@@ -28,7 +28,7 @@
       "type" : "string"
     },
     "IdentitySource" : {
-      "description" : "The identity source for which authorization is requested. For a ``TOKEN`` or ``COGNITO_USER_POOLS`` authorizer, this is required and specifies the request header mapping expression for the custom header holding the authorization token submitted by the client. For example, if the token header name is ``Auth``, the header mapping expression is ``method.request.header.Auth``. For the ``REQUEST`` authorizer, this is required when authorization caching is enabled. The value is a comma-separated string of one or more mapping expressions of the specified request parameters. For example, if an ``Auth`` header, a ``Name`` query string parameter are defined as identity sources, this value is ``method.request.header.Auth, method.request.querystring.Name``. These parameters will be used to derive the authorization caching key and to perform runtime validation of the ``REQUEST`` authorizer by verifying all of the identity-related request parameters are present, not null and non-empty. Only when this is true does the authorizer invoke the authorizer Lambda function, otherwise, it returns a 401 Unauthorized response without calling the Lambda function. The valid value is a string of comma-separated mapping expressions of the specified request parameters. When the authorization caching is not enabled, this property is optional.",
+      "description" : "The identity source for which authorization is requested. For a ``TOKEN`` or ``COGNITO_USER_POOLS`` authorizer, this is required and specifies the request header mapping expression for the custom header holding the authorization token submitted by the client. For example, if the token header name is ``Auth``, the header mapping expression is ``method.request.header.Auth``. For the ``REQUEST`` authorizer, this is required when authorization caching is enabled. The value is a comma-separated string of one or more mapping expressions of the specified request parameters. For example, if an ``Auth`` header, a ``Name`` query string parameter are defined as identity sources, this value is ``method.request.header.Auth, method.request.querystring.Name``. These parameters will be used to derive the authorization caching key and to perform runtime validation of the ``REQUEST`` authorizer by verifying all of the identity-related request parameters are present, not null and non-empty. Only when thi",
       "type" : "string"
     },
     "IdentityValidationExpression" : {

aws-cloudformation-schema/aws-appstream-directoryconfig.json

@@ -51,22 +51,24 @@
   "writeOnlyProperties" : [ "/properties/ServiceAccountCredentials/AccountPassword" ],
   "createOnlyProperties" : [ "/properties/DirectoryName" ],
   "primaryIdentifier" : [ "/properties/DirectoryName" ],
-  "taggable" : false,
+  "tagging" : {
+    "taggable" : false
+  },
   "handlers" : {
     "create" : {
-      "permissions" : [ "appstream:CreateDirectoryConfig", "appstream:DeleteDirectoryConfig", "appstream:DescribeDirectoryConfig", "appstream:UpdateDirectoryConfig", "iam:CreateServiceLinkedRole", "iam:DeleteServiceLinkedRole", "iam:GetServiceLinkedRoleDeletionStatus" ]
+      "permissions" : [ "appstream:CreateDirectoryConfig", "appstream:DeleteDirectoryConfig", "appstream:DescribeDirectoryConfigs", "appstream:UpdateDirectoryConfig", "iam:CreateServiceLinkedRole", "iam:DeleteServiceLinkedRole", "iam:GetServiceLinkedRoleDeletionStatus" ]
     },
     "update" : {
-      "permissions" : [ "appstream:CreateDirectoryConfig", "appstream:DeleteDirectoryConfig", "appstream:DescribeDirectoryConfig", "appstream:UpdateDirectoryConfig", "iam:CreateServiceLinkedRole", "iam:DeleteServiceLinkedRole", "iam:GetServiceLinkedRoleDeletionStatus" ]
+      "permissions" : [ "appstream:CreateDirectoryConfig", "appstream:DeleteDirectoryConfig", "appstream:DescribeDirectoryConfigs", "appstream:UpdateDirectoryConfig", "iam:CreateServiceLinkedRole", "iam:DeleteServiceLinkedRole", "iam:GetServiceLinkedRoleDeletionStatus" ]
     },
     "read" : {
-      "permissions" : [ "appstream:CreateDirectoryConfig", "appstream:DeleteDirectoryConfig", "appstream:DescribeDirectoryConfig", "appstream:UpdateDirectoryConfig", "iam:CreateServiceLinkedRole", "iam:DeleteServiceLinkedRole", "iam:GetServiceLinkedRoleDeletionStatus" ]
+      "permissions" : [ "appstream:CreateDirectoryConfig", "appstream:DeleteDirectoryConfig", "appstream:DescribeDirectoryConfigs", "appstream:UpdateDirectoryConfig", "iam:CreateServiceLinkedRole", "iam:DeleteServiceLinkedRole", "iam:GetServiceLinkedRoleDeletionStatus" ]
     },
     "delete" : {
-      "permissions" : [ "appstream:CreateDirectoryConfig", "appstream:DeleteDirectoryConfig", "appstream:DescribeDirectoryConfig", "appstream:UpdateDirectoryConfig", "iam:CreateServiceLinkedRole", "iam:DeleteServiceLinkedRole", "iam:GetServiceLinkedRoleDeletionStatus" ]
+      "permissions" : [ "appstream:CreateDirectoryConfig", "appstream:DeleteDirectoryConfig", "appstream:DescribeDirectoryConfigs", "appstream:UpdateDirectoryConfig", "iam:CreateServiceLinkedRole", "iam:DeleteServiceLinkedRole", "iam:GetServiceLinkedRoleDeletionStatus" ]
     },
     "list" : {
-      "permissions" : [ "appstream:CreateDirectoryConfig", "appstream:DeleteDirectoryConfig", "appstream:DescribeDirectoryConfig", "appstream:UpdateDirectoryConfig", "iam:CreateServiceLinkedRole", "iam:DeleteServiceLinkedRole", "iam:GetServiceLinkedRoleDeletionStatus" ]
+      "permissions" : [ "appstream:CreateDirectoryConfig", "appstream:DeleteDirectoryConfig", "appstream:DescribeDirectoryConfigs", "appstream:UpdateDirectoryConfig", "iam:CreateServiceLinkedRole", "iam:DeleteServiceLinkedRole", "iam:GetServiceLinkedRoleDeletionStatus" ]
     }
   }
 }

aws-cloudformation-schema/aws-b2bi-transformer.json

@@ -115,14 +115,14 @@
     }
   },
   "required" : [ "EdiType", "FileFormat", "MappingTemplate", "Name", "Status" ],
-  "readOnlyProperties" : [ "/properties/CreatedAt", "/properties/TransformerArn", "/properties/TransformerId" ],
+  "readOnlyProperties" : [ "/properties/CreatedAt", "/properties/ModifiedAt", "/properties/TransformerArn", "/properties/TransformerId" ],
   "primaryIdentifier" : [ "/properties/TransformerId" ],
   "handlers" : {
     "create" : {
-      "permissions" : [ "b2bi:CreateTransformer", "b2bi:TagResource", "logs:CreateLogDelivery", "logs:CreateLogGroup", "logs:CreateLogStream", "logs:DescribeLogGroups", "logs:DescribeLogStreams", "logs:DescribeResourcePolicies", "logs:ListLogDeliveries", "logs:PutLogEvents", "logs:PutResourcePolicy" ]
+      "permissions" : [ "b2bi:CreateTransformer", "b2bi:TagResource", "b2bi:UpdateTransformer", "logs:CreateLogDelivery", "logs:CreateLogGroup", "logs:CreateLogStream", "logs:DescribeLogGroups", "logs:DescribeLogStreams", "logs:DescribeResourcePolicies", "logs:ListLogDeliveries", "logs:PutLogEvents", "logs:PutResourcePolicy" ]
     },
     "read" : {
-      "permissions" : [ "b2bi:ListTagsForResource", "b2bi:GetTransformer" ]
+      "permissions" : [ "b2bi:GetTransformer", "b2bi:ListTagsForResource" ]
     },
     "update" : {
       "permissions" : [ "b2bi:TagResource", "b2bi:UntagResource", "b2bi:UpdateTransformer" ]

aws-cloudformation-schema/aws-batch-jobdefinition.json

@@ -37,6 +37,9 @@
     "ContainerProperties" : {
       "$ref" : "#/definitions/ContainerProperties"
     },
+    "EcsProperties" : {
+      "$ref" : "#/definitions/EcsProperties"
+    },
     "Id" : {
       "type" : "string"
     },
@@ -55,8 +58,18 @@
         "Container" : {
           "$ref" : "#/definitions/ContainerProperties"
         },
+        "InstanceTypes" : {
+          "type" : "array",
+          "uniqueItems" : false,
+          "items" : {
+            "type" : "string"
+          }
+        },
         "TargetNodes" : {
           "type" : "string"
+        },
+        "EcsProperties" : {
+          "$ref" : "#/definitions/EcsProperties"
         }
       },
       "required" : [ "TargetNodes" ]
@@ -197,6 +210,13 @@
       "type" : "object",
       "additionalProperties" : false,
       "properties" : {
+        "InitContainers" : {
+          "type" : "array",
+          "uniqueItems" : false,
+          "items" : {
+            "$ref" : "#/definitions/EksContainer"
+          }
+        },
         "Volumes" : {
           "type" : "array",
           "uniqueItems" : false,
@@ -222,6 +242,9 @@
         },
         "HostNetwork" : {
           "type" : "boolean"
+        },
+        "ShareProcessNamespace" : {
+          "type" : "boolean"
         }
       }
     },
@@ -245,6 +268,19 @@
       },
       "required" : [ "Size", "ContainerPath" ]
     },
+    "TaskContainerDependency" : {
+      "type" : "object",
+      "additionalProperties" : false,
+      "properties" : {
+        "Condition" : {
+          "type" : "string"
+        },
+        "ContainerName" : {
+          "type" : "string"
+        }
+      },
+      "required" : [ "Condition", "ContainerName" ]
+    },
     "ContainerProperties" : {
       "type" : "object",
       "additionalProperties" : false,
@@ -349,6 +385,20 @@
       },
       "required" : [ "Image" ]
     },
+    "EcsProperties" : {
+      "type" : "object",
+      "additionalProperties" : false,
+      "properties" : {
+        "TaskProperties" : {
+          "type" : "array",
+          "uniqueItems" : false,
+          "items" : {
+            "$ref" : "#/definitions/EcsTaskProperties"
+          }
+        }
+      },
+      "required" : [ "TaskProperties" ]
+    },
     "AuthorizationConfig" : {
       "type" : "object",
       "additionalProperties" : false,
@@ -382,6 +432,50 @@
         }
       }
     },
+    "EcsTaskProperties" : {
+      "type" : "object",
+      "additionalProperties" : false,
+      "properties" : {
+        "PlatformVersion" : {
+          "type" : "string"
+        },
+        "ExecutionRoleArn" : {
+          "type" : "string"
+        },
+        "RuntimePlatform" : {
+          "$ref" : "#/definitions/RuntimePlatform"
+        },
+        "TaskRoleArn" : {
+          "type" : "string"
+        },
+        "IpcMode" : {
+          "type" : "string"
+        },
+        "Volumes" : {
+          "type" : "array",
+          "uniqueItems" : false,
+          "items" : {
+            "$ref" : "#/definitions/Volumes"
+          }
+        },
+        "Containers" : {
+          "type" : "array",
+          "uniqueItems" : false,
+          "items" : {
+            "$ref" : "#/definitions/TaskContainerProperties"
+          }
+        },
+        "NetworkConfiguration" : {
+          "$ref" : "#/definitions/NetworkConfiguration"
+        },
+        "PidMode" : {
+          "type" : "string"
+        },
+        "EphemeralStorage" : {
+          "$ref" : "#/definitions/EphemeralStorage"
+        }
+      }
+    },
     "EksContainerSecurityContext" : {
       "type" : "object",
       "additionalProperties" : false,
@@ -403,6 +497,89 @@
         }
       }
     },
+    "TaskContainerProperties" : {
+      "type" : "object",
+      "additionalProperties" : false,
+      "properties" : {
+        "RepositoryCredentials" : {
+          "$ref" : "#/definitions/RepositoryCredentials"
+        },
+        "User" : {
+          "type" : "string"
+        },
+        "Secrets" : {
+          "type" : "array",
+          "uniqueItems" : false,
+          "items" : {
+            "$ref" : "#/definitions/Secret"
+          }
+        },
+        "Privileged" : {
+          "type" : "boolean"
+        },
+        "LinuxParameters" : {
+          "$ref" : "#/definitions/LinuxParameters"
+        },
+        "ReadonlyRootFilesystem" : {
+          "type" : "boolean"
+        },
+        "Image" : {
+          "type" : "string"
+        },
+        "LogConfiguration" : {
+          "$ref" : "#/definitions/LogConfiguration"
+        },
+        "Essential" : {
+          "type" : "boolean"
+        },
+        "ResourceRequirements" : {
+          "type" : "array",
+          "uniqueItems" : false,
+          "items" : {
+            "$ref" : "#/definitions/ResourceRequirement"
+          }
+        },
+        "Name" : {
+          "type" : "string"
+        },
+        "MountPoints" : {
+          "type" : "array",
+          "uniqueItems" : false,
+          "items" : {
+            "$ref" : "#/definitions/MountPoints"
+          }
+        },
+        "DependsOn" : {
+          "type" : "array",
+          "uniqueItems" : false,
+          "items" : {
+            "$ref" : "#/definitions/TaskContainerDependency"
+          }
+        },
+        "Command" : {
+          "type" : "array",
+          "uniqueItems" : false,
+          "items" : {
+            "type" : "string"
+          }
+        },
+        "Environment" : {
+          "type" : "array",
+          "uniqueItems" : false,
+          "items" : {
+            "$ref" : "#/definitions/Environment"
+          }
+        },
+        "Ulimits" : {
+          "type" : "array",
+          "uniqueItems" : false,
+          "items" : {
+            "$ref" : "#/definitions/Ulimit"
+          }
+        }
+      },
+      "required" : [ "Image" ]
+    },
     "EksSecret" : {
       "type" : "object",
       "additionalProperties" : false,

aws-cloudformation-schema/aws-config-configrule.json

@@ -1,6 +1,6 @@
 {
   "typeName" : "AWS::Config::ConfigRule",
-  "description" : "You must first create and start the CC configuration recorder in order to create CC managed rules with CFNlong. For more information, see [Managing the Configuration Recorder](https://docs.aws.amazon.com/config/latest/developerguide/stop-start-recorder.html).\n Adds or updates an CC rule to evaluate if your AWS resources comply with your desired configurations. For information on how many CC rules you can have per account, see [Service Limits](https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html) in the *Developer Guide*.\n There are two types of rules: *Managed Rules* and *Custom Rules*. You can use the ``ConfigRule`` resource to create both CC Managed Rules and CC Custom Rules.\n CC Managed Rules are predefined, customizable rules created by CC. For a list of managed rules, see [List of Managed Rules](https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html). If you are adding an CC managed rule, you must specify the rule's identifi",
+  "description" : "You must first create and start the CC configuration recorder in order to create CC managed rules with CFNlong. For more information, see [Managing the Configuration Recorder](https://docs.aws.amazon.com/config/latest/developerguide/stop-start-recorder.html).\n Adds or updates an CC rule to evaluate if your AWS resources comply with your desired configurations. For information on how many CC rules you can have per account, see [Service Limits](https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html) in the *Developer Guide*.\n There are two types of rules: *Managed Rules* and *Custom Rules*. You can use the ``ConfigRule`` resource to create both CC Managed Rules and CC Custom Rules.\n CC Managed Rules are predefined, customizable rules created by CC. For a list of managed rules, see [List of Managed Rules](https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html). If you are adding an CC managed rule, you must specify the rule's identifier for the ``SourceIdentifier`` key.\n CC Custom Rules are rules that you create from scratch. There are two ways to create CC custom rules: with Lambda functions ([Developer Guide](https://docs.aws.amazon.com/config/latest/developerguide/gettingstarted-concepts.html#gettingstarted-concepts-function)) and with CFNGUARDshort ([Guard GitHub Repository](https://docs.aws.amazon.com/https://github.com/aws-cloudformation/cloudformation-guard)), a policy-as-code language. CC custom rules created with LAMlong are called *Custom Lambda Rules* and CC custom rules created with CFNGUARDshort are called *Custom Policy Rules*.\n If you are adding a new CC Custom LAM rule, you first need to create an LAMlong function that the rule invokes to evaluate your resources. When you use the ``ConfigRule`` resource to add a Custom LAM rule to CC, you must specify the Amazon Resource Name (ARN) that LAMlong assigns to the function. You specify the ARN in the ``SourceIdentifier`` key. This key is part of the ``Source`` object, which is part of the ``ConfigRule`` object. \n For any new CC rule that you add, specify the ``ConfigRuleName`` in the ``ConfigRule`` object. Do not specify the ``ConfigRuleArn`` or the ``ConfigRuleId``. These values are generated by CC for new rules.\n If you are updating a rule that you added previously, you can specify the rule by ``ConfigRuleName``, ``ConfigRuleId``, or ``ConfigRuleArn`` in the ``ConfigRule`` data type that you use in this request.\n For more information about developing and using CC rules, see [Evaluating Resources with Rules](https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html) in the *Developer Guide*.",
   "sourceUrl" : "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-config.git",
   "definitions" : {
     "Scope" : {
@@ -165,7 +165,7 @@
     }
   },
   "propertyTransform" : {
-    "/properties/Source" : "$count(Source.SourceDetails[MessageType=\"ConfigurationItemChangeNotification\"]) > 0  and $count(Source.SourceDetails[MessageType=\"OversizedConfigurationItemChangeNotification\"]) = 0 ? $ ~> | $.Source | {\"SourceDetails\" : [SourceDetails, {\"EventSource\": \"aws.config\",\"MessageType\": \"OversizedConfigurationItemChangeNotification\"}]} | : $"
+    "/properties/Source" : "Source.Owner=\"CUSTOM_LAMBDA\" ? ($count(Source.SourceDetails[MessageType=\"ConfigurationItemChangeNotification\"]) > 0 and $count(Source.SourceDetails[MessageType=\"OversizedConfigurationItemChangeNotification\"]) = 0) ? $ ~> | $.Source | {\"SourceDetails\" : [SourceDetails, {\"EventSource\": \"aws.config\", \"MessageType\": \"OversizedConfigurationItemChangeNotification\"}]} | : ($count(Source.SourceDetails[MessageType=\"ConfigurationItemChangeNotification\"]) = 0 and $count(Source.SourceDetails[MessageType=\"OversizedConfigurationItemChangeNotification\"]) > 0) ? $ ~> | $.Source | {\"SourceDetails\" : [SourceDetails, {\"EventSource\": \"aws.config\", \"MessageType\": \"ConfigurationItemChangeNotification\" }]} | : $ : $"
   },
   "tagging" : {
     "taggable" : false

aws-cloudformation-schema/aws-connect-user.json

@@ -234,6 +234,17 @@
     },
     "update" : {
       "permissions" : [ "connect:UpdateUserIdentityInfo", "connect:UpdateUserPhoneConfig", "connect:UpdateUserRoutingProfile", "connect:UpdateUserSecurityProfiles", "connect:UpdateUserHierarchy", "connect:TagResource", "connect:UntagResource", "connect:AssociateUserProficiencies", "connect:DisassociateUserProficiencies", "connect:UpdateUserProficiencies" ]
+    },
+    "list" : {
+      "handlerSchema" : {
+        "properties" : {
+          "InstanceArn" : {
+            "$ref" : "resource-schema.json#/properties/InstanceArn"
+          }
+        },
+        "required" : [ "InstanceArn" ]
+      },
+      "permissions" : [ "connect:ListUsers" ]
     }
   },
   "additionalProperties" : false,