diff --git a/.docs.version b/.docs.version
index 1fec3807c4..fa14a31928 100644
--- a/.docs.version
+++ b/.docs.version
@@ -1 +1 @@
-d9a7a3f3043f4f8b764c54129f8d3316d8822ecd
+5c197d5a1e30d3254088221de8e3b1f82d37b8dd
diff --git a/aws-cloudformation-schema/aws-apigateway-domainnamev2.json b/aws-cloudformation-schema/aws-apigateway-domainnamev2.json
index 88cf2404bd..50e9f54f2e 100644
--- a/aws-cloudformation-schema/aws-apigateway-domainnamev2.json
+++ b/aws-cloudformation-schema/aws-apigateway-domainnamev2.json
@@ -44,9 +44,6 @@
"Policy" : {
"type" : [ "object", "string" ]
},
- "ManagementPolicy" : {
- "type" : [ "object", "string" ]
- },
"DomainNameId" : {
"type" : "string"
},
@@ -75,16 +72,16 @@
"readOnlyProperties" : [ "/properties/DomainNameId", "/properties/DomainNameArn" ],
"handlers" : {
"create" : {
- "permissions" : [ "apigateway:POST", "apigateway:GET", "apigateway:UpdateDomainNamePolicy", "apigateway:UpdateDomainNameManagementPolicy" ]
+ "permissions" : [ "apigateway:POST", "apigateway:GET", "apigateway:UpdateDomainNamePolicy" ]
},
"read" : {
"permissions" : [ "apigateway:GET" ]
},
"update" : {
- "permissions" : [ "apigateway:GET", "apigateway:PUT", "apigateway:PATCH", "apigateway:UpdateDomainNamePolicy", "apigateway:UpdateDomainNameManagementPolicy" ]
+ "permissions" : [ "apigateway:GET", "apigateway:PUT", "apigateway:PATCH", "apigateway:UpdateDomainNamePolicy" ]
},
"delete" : {
- "permissions" : [ "apigateway:DELETE", "apigateway:GET", "apigateway:UpdateDomainNamePolicy", "apigateway:UpdateDomainNameManagementPolicy" ]
+ "permissions" : [ "apigateway:DELETE", "apigateway:GET", "apigateway:UpdateDomainNamePolicy" ]
},
"list" : {
"permissions" : [ "apigateway:GET" ]
diff --git a/aws-cloudformation-schema/aws-applicationautoscaling-scalingpolicy.json b/aws-cloudformation-schema/aws-applicationautoscaling-scalingpolicy.json
index d123542583..49626b3bf0 100644
--- a/aws-cloudformation-schema/aws-applicationautoscaling-scalingpolicy.json
+++ b/aws-cloudformation-schema/aws-applicationautoscaling-scalingpolicy.json
@@ -42,16 +42,16 @@
"additionalProperties" : false,
"definitions" : {
"PredictiveScalingMetricDataQuery" : {
- "description" : "",
+ "description" : "The metric data to return. Also defines whether this call is returning data for one metric only, or whether it is performing a math expression on the values of returned metric statistics to create a new time series. A time series is a series of data points, each of which is associated with a timestamp.",
"additionalProperties" : false,
"type" : "object",
"properties" : {
"ReturnData" : {
- "description" : "Indicates whether to return the timestamps and raw data values of this metric.",
+ "description" : "Indicates whether to return the timestamps and raw data values of this metric. \n If you use any math expressions, specify ``true`` for this value for only the final math expression that the metric specification is based on. You must specify ``false`` for ``ReturnData`` for all the other metrics and expressions used in the metric specification.\n If you are only retrieving metrics and not performing any math expressions, do not specify anything for ``ReturnData``. This sets it to its default (``true``).",
"type" : "boolean"
},
"Expression" : {
- "description" : "The math expression to perform on the returned data, if this object is performing a math expression.",
+ "description" : "The math expression to perform on the returned data, if this object is performing a math expression. This expression can use the ``Id`` of the other metrics to refer to those metrics, and can also use the ``Id`` of other expressions to use the result of those expressions. \n Conditional: Within each ``MetricDataQuery`` object, you must specify either ``Expression`` or ``MetricStat``, but not both.",
"type" : "string"
},
"Label" : {
@@ -59,11 +59,11 @@
"type" : "string"
},
"MetricStat" : {
- "description" : "Information about the metric data to return.",
+ "description" : "Information about the metric data to return. \n Conditional: Within each ``MetricDataQuery`` object, you must specify either ``Expression`` or ``MetricStat``, but not both.",
"$ref" : "#/definitions/PredictiveScalingMetricStat"
},
"Id" : {
- "description" : "A short name that identifies the object's results in the response.",
+ "description" : "A short name that identifies the object's results in the response. This name must be unique among all ``MetricDataQuery`` objects specified for a single scaling policy. If you are performing math expressions on this set of data, this name represents that data and can serve as a variable in the mathematical expression. The valid characters are letters, numbers, and underscores. The first character must be a lowercase letter.",
"type" : "string"
}
}
@@ -88,7 +88,7 @@
}
},
"PredictiveScalingMetricDimension" : {
- "description" : "",
+ "description" : "Describes the dimension of a metric.",
"additionalProperties" : false,
"type" : "object",
"properties" : {
@@ -118,12 +118,13 @@
}
},
"PredictiveScalingCustomizedCapacityMetric" : {
- "description" : "",
+ "description" : "Represents a CloudWatch metric of your choosing for a predictive scaling policy.",
"additionalProperties" : false,
"type" : "object",
"properties" : {
"MetricDataQueries" : {
"uniqueItems" : true,
+ "description" : "One or more metric data queries to provide data points for a metric specification.",
"insertionOrder" : false,
"type" : "array",
"items" : {
@@ -161,12 +162,13 @@
}
},
"PredictiveScalingCustomizedScalingMetric" : {
- "description" : "",
+ "description" : "One or more metric data queries to provide data points for a metric specification.",
"additionalProperties" : false,
"type" : "object",
"properties" : {
"MetricDataQueries" : {
"uniqueItems" : true,
+ "description" : "One or more metric data queries to provide data points for a metric specification.",
"insertionOrder" : false,
"type" : "array",
"items" : {
@@ -218,14 +220,16 @@
}
},
"PredictiveScalingPredefinedLoadMetric" : {
- "description" : "",
+ "description" : "Describes a load metric for a predictive scaling policy. \n When returned in the output of ``DescribePolicies``, it indicates that a predictive scaling policy uses individually specified load and scaling metrics instead of a metric pair.",
"additionalProperties" : false,
"type" : "object",
"properties" : {
"PredefinedMetricType" : {
+ "description" : "The metric type.",
"type" : "string"
},
"ResourceLabel" : {
+ "description" : "A label that uniquely identifies a target group.",
"type" : "string"
}
},
@@ -264,14 +268,16 @@
"required" : [ "TargetValue" ]
},
"PredictiveScalingPredefinedMetricPair" : {
- "description" : "",
+ "description" : "Represents a metric pair for a predictive scaling policy.",
"additionalProperties" : false,
"type" : "object",
"properties" : {
"PredefinedMetricType" : {
+ "description" : "Indicates which metrics to use. There are two different types of metrics for each metric type: one is a load metric and one is a scaling metric.",
"type" : "string"
},
"ResourceLabel" : {
+ "description" : "A label that uniquely identifies a specific target group from which to determine the total and average request count.",
"type" : "string"
}
},
@@ -330,21 +336,25 @@
"required" : [ "Value", "Name" ]
},
"PredictiveScalingPolicyConfiguration" : {
- "description" : "",
+ "description" : "Represents a predictive scaling policy configuration.",
"additionalProperties" : false,
"type" : "object",
"properties" : {
"MaxCapacityBreachBehavior" : {
+ "description" : "Defines the behavior that should be applied if the forecast capacity approaches or exceeds the maximum capacity. Defaults to ``HonorMaxCapacity`` if not specified.",
"type" : "string"
},
"MaxCapacityBuffer" : {
+ "description" : "The size of the capacity buffer to use when the forecast capacity is close to or exceeds the maximum capacity. The value is specified as a percentage relative to the forecast capacity. For example, if the buffer is 10, this means a 10 percent buffer, such that if the forecast capacity is 50, and the maximum capacity is 40, then the effective maximum capacity is 55. \n Required if the ``MaxCapacityBreachBehavior`` property is set to ``IncreaseMaxCapacity``, and cannot be used otherwise.",
"type" : "integer"
},
"Mode" : {
+ "description" : "The predictive scaling mode. Defaults to ``ForecastOnly`` if not specified.",
"type" : "string"
},
"MetricSpecifications" : {
"uniqueItems" : true,
+ "description" : "This structure includes the metrics and target utilization to use for predictive scaling. \n This is an array, but we currently only support a single metric specification. That is, you can specify a target value and a single metric pair, or a target value and one scaling metric and one load metric.",
"insertionOrder" : false,
"type" : "array",
"items" : {
@@ -352,56 +362,66 @@
}
},
"SchedulingBufferTime" : {
+ "description" : "The amount of time, in seconds, that the start time can be advanced. \n The value must be less than the forecast interval duration of 3600 seconds (60 minutes). Defaults to 300 seconds if not specified.",
"type" : "integer"
}
},
"required" : [ "MetricSpecifications" ]
},
"PredictiveScalingPredefinedScalingMetric" : {
- "description" : "",
+ "description" : "Describes a scaling metric for a predictive scaling policy. \n When returned in the output of ``DescribePolicies``, it indicates that a predictive scaling policy uses individually specified load and scaling metrics instead of a metric pair.",
"additionalProperties" : false,
"type" : "object",
"properties" : {
"PredefinedMetricType" : {
+ "description" : "The metric type.",
"type" : "string"
},
"ResourceLabel" : {
+ "description" : "A label that uniquely identifies a specific target group from which to determine the average request count.",
"type" : "string"
}
},
"required" : [ "PredefinedMetricType" ]
},
"PredictiveScalingMetricSpecification" : {
- "description" : "",
+ "description" : "This structure specifies the metrics and target utilization settings for a predictive scaling policy. \n You must specify either a metric pair, or a load metric and a scaling metric individually. Specifying a metric pair instead of individual metrics provides a simpler way to configure metrics for a scaling policy. You choose the metric pair, and the policy automatically knows the correct sum and average statistics to use for the load metric and the scaling metric.",
"additionalProperties" : false,
"type" : "object",
"properties" : {
"CustomizedLoadMetricSpecification" : {
+ "description" : "The customized load metric specification.",
"$ref" : "#/definitions/PredictiveScalingCustomizedLoadMetric"
},
"PredefinedLoadMetricSpecification" : {
+ "description" : "The predefined load metric specification.",
"$ref" : "#/definitions/PredictiveScalingPredefinedLoadMetric"
},
"TargetValue" : {
+ "description" : "Specifies the target utilization.",
"type" : "number"
},
"PredefinedScalingMetricSpecification" : {
+ "description" : "The predefined scaling metric specification.",
"$ref" : "#/definitions/PredictiveScalingPredefinedScalingMetric"
},
"CustomizedCapacityMetricSpecification" : {
+ "description" : "The customized capacity metric specification.",
"$ref" : "#/definitions/PredictiveScalingCustomizedCapacityMetric"
},
"CustomizedScalingMetricSpecification" : {
+ "description" : "The customized scaling metric specification.",
"$ref" : "#/definitions/PredictiveScalingCustomizedScalingMetric"
},
"PredefinedMetricPairSpecification" : {
+ "description" : "The predefined metric pair specification that determines the appropriate scaling metric and load metric to use.",
"$ref" : "#/definitions/PredictiveScalingPredefinedMetricPair"
}
},
"required" : [ "TargetValue" ]
},
"PredictiveScalingMetric" : {
- "description" : "",
+ "description" : "Describes the scaling metric.",
"additionalProperties" : false,
"type" : "object",
"properties" : {
@@ -411,7 +431,7 @@
},
"Dimensions" : {
"uniqueItems" : false,
- "description" : "The dimensions for the metric.",
+ "description" : "Describes the dimensions of the metric.",
"insertionOrder" : false,
"type" : "array",
"items" : {
@@ -425,12 +445,13 @@
}
},
"PredictiveScalingCustomizedLoadMetric" : {
- "description" : "",
+ "description" : "The customized load metric specification.",
"additionalProperties" : false,
"type" : "object",
"properties" : {
"MetricDataQueries" : {
"uniqueItems" : true,
+ "description" : "",
"insertionOrder" : false,
"type" : "array",
"items" : {
@@ -465,20 +486,20 @@
}
},
"PredictiveScalingMetricStat" : {
- "description" : "",
+ "description" : "This structure defines the CloudWatch metric to return, along with the statistic and unit.",
"additionalProperties" : false,
"type" : "object",
"properties" : {
"Stat" : {
- "description" : "The statistic to return. It can include any CloudWatch statistic or extended statistic.",
+ "description" : "The statistic to return. It can include any CloudWatch statistic or extended statistic. For a list of valid values, see the table in [Statistics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch_concepts.html#Statistic) in the *Amazon CloudWatch User Guide*. \n The most commonly used metrics for predictive scaling are ``Average`` and ``Sum``.",
"type" : "string"
},
"Metric" : {
- "description" : "The CloudWatch metric to return, including the metric name, namespace, and dimensions. ",
+ "description" : "The CloudWatch metric to return, including the metric name, namespace, and dimensions. To get the exact metric name, namespace, and dimensions, inspect the [Metric](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_Metric.html) object that is returned by a call to [ListMetrics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_ListMetrics.html).",
"$ref" : "#/definitions/PredictiveScalingMetric"
},
"Unit" : {
- "description" : "The unit to use for the returned data points.",
+ "description" : "The unit to use for the returned data points. For a complete list of the units that CloudWatch supports, see the [MetricDatum](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_MetricDatum.html) data type in the *Amazon CloudWatch API Reference*.",
"type" : "string"
}
}
@@ -554,7 +575,7 @@
"$ref" : "#/definitions/StepScalingPolicyConfiguration"
},
"PredictiveScalingPolicyConfiguration" : {
- "description" : "",
+ "description" : "The predictive scaling policy configuration.",
"$ref" : "#/definitions/PredictiveScalingPolicyConfiguration"
}
}
diff --git a/aws-cloudformation-schema/aws-backup-backupselection.json b/aws-cloudformation-schema/aws-backup-backupselection.json
index 718ae91e35..615b7a598d 100644
--- a/aws-cloudformation-schema/aws-backup-backupselection.json
+++ b/aws-cloudformation-schema/aws-backup-backupselection.json
@@ -143,7 +143,7 @@
"permissions" : [ "backup:CreateBackupSelection", "iam:GetRole", "iam:PassRole", "iam:CreateServiceLinkedRole" ]
},
"list" : {
- "permissions" : [ "backup:ListBackupSelections" ]
+ "permissions" : [ "backup:ListBackupSelections", "backup:ListBackupPlans" ]
}
}
}
\ No newline at end of file
diff --git a/aws-cloudformation-schema/aws-backup-restoretestingselection.json b/aws-cloudformation-schema/aws-backup-restoretestingselection.json
index 28eff24a80..6d64a732c9 100644
--- a/aws-cloudformation-schema/aws-backup-restoretestingselection.json
+++ b/aws-cloudformation-schema/aws-backup-restoretestingselection.json
@@ -105,7 +105,7 @@
"timeoutInMinutes" : 5
},
"list" : {
- "permissions" : [ "backup:ListRestoreTestingSelections" ],
+ "permissions" : [ "backup:ListRestoreTestingSelections", "backup:ListRestoreTestingPlans" ],
"timeoutInMinutes" : 5
}
}
diff --git a/aws-cloudformation-schema/aws-connect-tasktemplate.json b/aws-cloudformation-schema/aws-connect-tasktemplate.json
index eb202bb782..28a603eb57 100644
--- a/aws-cloudformation-schema/aws-connect-tasktemplate.json
+++ b/aws-cloudformation-schema/aws-connect-tasktemplate.json
@@ -193,6 +193,11 @@
"type" : "string",
"pattern" : "^$|arn:aws[-a-z0-9]*:connect:[-a-z0-9]*:[0-9]{12}:instance/[-a-zA-Z0-9]*/contact-flow/[-a-zA-Z0-9]*$"
},
+ "SelfAssignContactFlowArn" : {
+ "description" : "The identifier of the contact flow.",
+ "type" : "string",
+ "pattern" : "^$|arn:aws[-a-z0-9]*:connect:[-a-z0-9]*:[0-9]{12}:instance/[-a-zA-Z0-9]*/contact-flow/[-a-zA-Z0-9]*$"
+ },
"Constraints" : {
"description" : "The constraints for the task template",
"type" : "object",
diff --git a/aws-cloudformation-schema/aws-dynamodb-table.json b/aws-cloudformation-schema/aws-dynamodb-table.json
index 99febc7060..3ec5025d50 100644
--- a/aws-cloudformation-schema/aws-dynamodb-table.json
+++ b/aws-cloudformation-schema/aws-dynamodb-table.json
@@ -476,7 +476,7 @@
"$ref" : "#/definitions/ContributorInsightsSpecification"
},
"ImportSourceSpecification" : {
- "description" : "Specifies the properties of data being imported from the S3 bucket source to the table.\n If you specify the ``ImportSourceSpecification`` property, and also specify either the ``StreamSpecification``, the ``TableClass`` property, or the ``DeletionProtectionEnabled`` property, the IAM entity creating/updating stack must have ``UpdateTable`` permission.",
+ "description" : "Specifies the properties of data being imported from the S3 bucket source to the\" table.\n If you specify the ``ImportSourceSpecification`` property, and also specify either the ``StreamSpecification``, the ``TableClass`` property, the ``DeletionProtectionEnabled`` property, or the ``WarmThroughput`` property, the IAM entity creating/updating stack must have ``UpdateTable`` permission.",
"$ref" : "#/definitions/ImportSourceSpecification"
},
"PointInTimeRecoverySpecification" : {
diff --git a/aws-cloudformation-schema/aws-ec2-customergateway.json b/aws-cloudformation-schema/aws-ec2-customergateway.json
index 57ce94e2b2..e0f21c581a 100644
--- a/aws-cloudformation-schema/aws-ec2-customergateway.json
+++ b/aws-cloudformation-schema/aws-ec2-customergateway.json
@@ -83,7 +83,7 @@
}
},
"CertificateArn" : {
- "pattern" : "^arn:(aws[a-zA-Z-]*)?:acm:[a-z]{2}((-gov)|(-iso(b?)))?-[a-z]+-\\d{1}:\\d{12}:certificate\\/[a-zA-Z0-9-_]+$",
+ "pattern" : "^arn:(aws[a-zA-Z-]*)?:acm:[a-z]{2}((-gov)|(-iso([a-z]{1})?))?-[a-z]+-\\d{1}:\\d{12}:certificate\\/[a-zA-Z0-9-_]+$",
"description" : "The Amazon Resource Name (ARN) for the customer gateway certificate.",
"type" : "string"
},
diff --git a/aws-cloudformation-schema/aws-ec2-launchtemplate.json b/aws-cloudformation-schema/aws-ec2-launchtemplate.json
index 0b3178e5f8..e5a82f7e27 100644
--- a/aws-cloudformation-schema/aws-ec2-launchtemplate.json
+++ b/aws-cloudformation-schema/aws-ec2-launchtemplate.json
@@ -45,16 +45,12 @@
},
"TagSpecifications" : {
"uniqueItems" : false,
- "description" : "The tags to apply to resources that are created during instance launch.\n To tag the launch template itself, use [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#cfn-ec2-launchtemplate-tagspecifications).",
+ "description" : "The tags to apply to the resources that are created during instance launch.\n To tag a resource after it has been created, see [CreateTags](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateTags.html).\n To tag the launch template itself, use [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#cfn-ec2-launchtemplate-tagspecifications).",
"type" : "array",
"items" : {
"$ref" : "#/definitions/TagSpecification"
}
},
- "NetworkPerformanceOptions" : {
- "description" : "",
- "$ref" : "#/definitions/NetworkPerformanceOptions"
- },
"UserData" : {
"description" : "The user data to make available to the instance. You must provide base64-encoded text. User data is limited to 16 KB. For more information, see [Run commands on your Amazon EC2 instance at launch](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/user-data.html) in the *Amazon EC2 User Guide*.\n If you are creating the launch template for use with BATCH, the user data must be provided in the [MIME multi-part archive format](https://docs.aws.amazon.com/https://cloudinit.readthedocs.io/en/latest/topics/format.html#mime-multi-part-archive). For more information, see [Amazon EC2 user data in launch templates](https://docs.aws.amazon.com/batch/latest/userguide/launch-templates.html) in the *User Guide*.",
"type" : "string"
@@ -93,7 +89,7 @@
},
"ElasticInferenceAccelerators" : {
"uniqueItems" : false,
- "description" : "Amazon Elastic Inference is no longer available.\n An elastic inference accelerator to associate with the instance. Elastic inference accelerators are a resource you can attach to your Amazon EC2 instances to accelerate your Deep Learning (DL) inference workloads.\n You cannot specify accelerators from different generations in the same request.\n Starting April 15, 2023, AWS will not onboard new customers to Amazon Elastic Inference (EI), and will help current customers migrate their workloads to options that offer better price and performance. After April 15, 2023, new customers will not be able to launch instances with Amazon EI accelerators in Amazon SageMaker, Amazon ECS, or Amazon EC2. However, customers who have used Amazon EI at least once during the past 30-day period are considered current customers and will be able to continue using the service.",
+ "description" : "An elastic inference accelerator to associate with the instance. Elastic inference accelerators are a resource you can attach to your Amazon EC2 instances to accelerate your Deep Learning (DL) inference workloads.\n You cannot specify accelerators from different generations in the same request.\n Starting April 15, 2023, AWS will not onboard new customers to Amazon Elastic Inference (EI), and will help current customers migrate their workloads to options that offer better price and performance. After April 15, 2023, new customers will not be able to launch instances with Amazon EI accelerators in Amazon SageMaker, Amazon ECS, or Amazon EC2. However, customers who have used Amazon EI at least once during the past 30-day period are considered current customers and will be able to continue using the service.",
"type" : "array",
"items" : {
"$ref" : "#/definitions/LaunchTemplateElasticInferenceAccelerator"
@@ -180,7 +176,7 @@
"$ref" : "#/definitions/InstanceMarketOptions"
},
"InstanceRequirements" : {
- "description" : "The attributes for the instance types. When you specify instance attributes, Amazon EC2 will identify instance types with these attributes.\n You must specify ``VCpuCount`` and ``MemoryMiB``. All other attributes are optional. Any unspecified optional attribute is set to its default.\n When you specify multiple attributes, you get instance types that satisfy all of the specified attributes. If you specify multiple values for an attribute, you get instance types that satisfy any of the specified values.\n To limit the list of instance types from which Amazon EC2 can identify matching instance types, you can use one of the following parameters, but not both in the same request:\n + ``AllowedInstanceTypes`` - The instance types to include in the list. All other instance types are ignored, even if they match your specified attributes.\n + ``ExcludedInstanceTypes`` - The instance types to exclude from the list, even if they match your specified attributes.\n \n If you specify ``InstanceRequirements``, you can't specify ``InstanceType``.\n Attribute-based instance type selection is only supported when using Auto Scaling groups, EC2 Fleet, and Spot Fleet to launch instances. If you plan to use the launch template in the [launch instance wizard](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-instance-wizard.html), or with the [RunInstances](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html) API or [AWS::EC2::Instance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html) AWS CloudFormation resource, you can't specify ``InstanceRequirements``.\n For more information, see [Specify attributes for instance type selection for EC2 Fleet or Spot Fleet](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html) and [Spot placement score](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-placement-score.html) in the *Amazon EC2 User Guide*.",
+ "description" : "The attributes for the instance types. When you specify instance attributes, Amazon EC2 will identify instance types with these attributes.\n You must specify ``VCpuCount`` and ``MemoryMiB``. All other attributes are optional. Any unspecified optional attribute is set to its default.\n When you specify multiple attributes, you get instance types that satisfy all of the specified attributes. If you specify multiple values for an attribute, you get instance types that satisfy any of the specified values.\n To limit the list of instance types from which Amazon EC2 can identify matching instance types, you can use one of the following parameters, but not both in the same request:\n + ``AllowedInstanceTypes`` - The instance types to include in the list. All other instance types are ignored, even if they match your specified attributes.\n + ``ExcludedInstanceTypes`` - The instance types to exclude from the list, even if they match your specified attributes.\n \n If you specify ``InstanceRequirements``, you can't specify ``InstanceType``.\n Attribute-based instance type selection is only supported when using Auto Scaling groups, EC2 Fleet, and Spot Fleet to launch instances. If you plan to use the launch template in the [launch instance wizard](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-instance-wizard.html), or with the [RunInstances](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html) API or [AWS::EC2::Instance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html) AWS CloudFormation resource, you can't specify ``InstanceRequirements``.\n For more information, see [Attribute-based instance type selection for EC2 Fleet](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html), [Attribute-based instance type selection for Spot Fleet](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet-attribute-based-instance-type-selection.html), and [Spot placement score](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-placement-score.html) in the *Amazon EC2 User Guide*.",
"$ref" : "#/definitions/InstanceRequirements"
},
"RamDiskId" : {
@@ -247,7 +243,6 @@
"type" : "object",
"properties" : {
"References" : {
- "description" : "",
"$ref" : "#/definitions/References"
}
}
@@ -391,7 +386,7 @@
"type" : "string"
},
"KmsKeyId" : {
- "description" : "Identifier (key ID, key alias, key ARN, or alias ARN) of the customer managed KMS key to use for EBS encryption.",
+ "description" : "The ARN of the symmetric KMSlong (KMS) CMK used for encryption.",
"type" : "string"
},
"Encrypted" : {
@@ -524,7 +519,7 @@
"type" : "object",
"properties" : {
"InstanceFamily" : {
- "description" : "",
+ "description" : "The instance family to refer. Ensure that you specify the correct family name. For example, C6i and C6g are valid values, but C6 is not.",
"type" : "string"
}
}
@@ -658,7 +653,7 @@
"type" : "integer"
},
"InterfaceType" : {
- "description" : "The type of network interface. To create an Elastic Fabric Adapter (EFA), specify ``efa`` or ``efa``. For more information, see [Elastic Fabric Adapter](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/efa.html) in the *Amazon EC2 User Guide*.\n If you are not creating an EFA, specify ``interface`` or omit this parameter.\n If you specify ``efa-only``, do not assign any IP addresses to the network interface. EFA-only network interfaces do not support IP addresses.\n Valid values: ``interface`` | ``efa`` | ``efa-only``",
+ "description" : "The type of network interface. To create an Elastic Fabric Adapter (EFA), specify ``efa``. For more information, see [Elastic Fabric Adapter](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/efa.html) in the *Amazon EC2 User Guide*.\n If you are not creating an EFA, specify ``interface`` or omit this parameter.\n Valid values: ``interface`` | ``efa``",
"type" : "string"
},
"AssociateCarrierIpAddress" : {
@@ -737,7 +732,7 @@
}
},
"LaunchTemplateTagSpecification" : {
- "description" : "Specifies the tags to apply to the launch template during creation.\n To specify the tags for the resources that are created during instance launch, use [AWS::EC2::LaunchTemplate TagSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-tagspecification.html).\n ``LaunchTemplateTagSpecification`` is a property of [AWS::EC2::LaunchTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html).",
+ "description" : "Specifies the tags to apply to the launch template during creation.\n ``LaunchTemplateTagSpecification`` is a property of [AWS::EC2::LaunchTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html).",
"additionalProperties" : false,
"type" : "object",
"properties" : {
@@ -756,7 +751,7 @@
}
},
"TagSpecification" : {
- "description" : "Specifies the tags to apply to resources that are created during instance launch.\n ``TagSpecification`` is a property type of [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications). [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications) is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).",
+ "description" : "Specifies the tags to apply to a resource when the resource is created for the launch template.\n ``TagSpecification`` is a property type of [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications). [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications) is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).",
"additionalProperties" : false,
"type" : "object",
"properties" : {
@@ -840,12 +835,11 @@
}
},
"BaselinePerformanceFactors" : {
- "description" : "The baseline performance to consider, using an instance family as a baseline reference. The instance family establishes the lowest acceptable level of performance. Amazon EC2 uses this baseline to guide instance type selection, but there is no guarantee that the selected instance types will always exceed the baseline for every application.\n Currently, this parameter only supports CPU performance as a baseline performance factor. For example, specifying ``c6i`` would use the CPU performance of the ``c6i`` family as the baseline reference.",
+ "description" : "",
"additionalProperties" : false,
"type" : "object",
"properties" : {
"Cpu" : {
- "description" : "The CPU performance to consider, using an instance family as the baseline reference.",
"$ref" : "#/definitions/Cpu"
}
}
@@ -881,7 +875,7 @@
}
},
"InstanceRequirements" : {
- "description" : "The attributes for the instance types. When you specify instance attributes, Amazon EC2 will identify instance types with these attributes.\n You must specify ``VCpuCount`` and ``MemoryMiB``. All other attributes are optional. Any unspecified optional attribute is set to its default.\n When you specify multiple attributes, you get instance types that satisfy all of the specified attributes. If you specify multiple values for an attribute, you get instance types that satisfy any of the specified values.\n To limit the list of instance types from which Amazon EC2 can identify matching instance types, you can use one of the following parameters, but not both in the same request:\n + ``AllowedInstanceTypes`` - The instance types to include in the list. All other instance types are ignored, even if they match your specified attributes.\n + ``ExcludedInstanceTypes`` - The instance types to exclude from the list, even if they match your specified attributes.\n \n If you specify ``InstanceRequirements``, you can't specify ``InstanceType``.\n Attribute-based instance type selection is only supported when using Auto Scaling groups, EC2 Fleet, and Spot Fleet to launch instances. If you plan to use the launch template in the [launch instance wizard](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-instance-wizard.html), or with the [RunInstances](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html) API or [AWS::EC2::Instance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html) AWS CloudFormation resource, you can't specify ``InstanceRequirements``.\n For more information, see [Specify attributes for instance type selection for EC2 Fleet or Spot Fleet](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html) and [Spot placement score](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-placement-score.html) in the *Amazon EC2 User Guide*.",
+ "description" : "The attributes for the instance types. When you specify instance attributes, Amazon EC2 will identify instance types with these attributes.\n You must specify ``VCpuCount`` and ``MemoryMiB``. All other attributes are optional. Any unspecified optional attribute is set to its default.\n When you specify multiple attributes, you get instance types that satisfy all of the specified attributes. If you specify multiple values for an attribute, you get instance types that satisfy any of the specified values.\n To limit the list of instance types from which Amazon EC2 can identify matching instance types, you can use one of the following parameters, but not both in the same request:\n + ``AllowedInstanceTypes`` - The instance types to include in the list. All other instance types are ignored, even if they match your specified attributes.\n + ``ExcludedInstanceTypes`` - The instance types to exclude from the list, even if they match your specified attributes.\n \n If you specify ``InstanceRequirements``, you can't specify ``InstanceType``.\n Attribute-based instance type selection is only supported when using Auto Scaling groups, EC2 Fleet, and Spot Fleet to launch instances. If you plan to use the launch template in the [launch instance wizard](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-instance-wizard.html), or with the [RunInstances](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html) API or [AWS::EC2::Instance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html) AWS CloudFormation resource, you can't specify ``InstanceRequirements``.\n For more information, see [Attribute-based instance type selection for EC2 Fleet](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html), [Attribute-based instance type selection for Spot Fleet](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet-attribute-based-instance-type-selection.html), and [Spot placement score](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-placement-score.html) in the *Amazon EC2 User Guide*.",
"additionalProperties" : false,
"type" : "object",
"properties" : {
@@ -899,7 +893,7 @@
},
"AcceleratorTypes" : {
"uniqueItems" : false,
- "description" : "The accelerator types that must be on the instance type.\n + For instance types with GPU accelerators, specify ``gpu``.\n + For instance types with FPGA accelerators, specify ``fpga``.\n \n Default: Any accelerator type",
+ "description" : "The accelerator types that must be on the instance type.\n + For instance types with GPU accelerators, specify ``gpu``.\n + For instance types with FPGA accelerators, specify ``fpga``.\n + For instance types with inference accelerators, specify ``inference``.\n \n Default: Any accelerator type",
"type" : "array",
"items" : {
"type" : "string"
@@ -923,7 +917,7 @@
},
"CpuManufacturers" : {
"uniqueItems" : false,
- "description" : "The CPU manufacturers to include.\n + For instance types with Intel CPUs, specify ``intel``.\n + For instance types with AMD CPUs, specify ``amd``.\n + For instance types with AWS CPUs, specify ``amazon-web-services``.\n + For instance types with Apple CPUs, specify ``apple``.\n \n Don't confuse the CPU manufacturer with the CPU architecture. Instances will be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you specify in your launch template.\n Default: Any manufacturer",
+ "description" : "The CPU manufacturers to include.\n + For instance types with Intel CPUs, specify ``intel``.\n + For instance types with AMD CPUs, specify ``amd``.\n + For instance types with AWS CPUs, specify ``amazon-web-services``.\n \n Don't confuse the CPU manufacturer with the CPU architecture. Instances will be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you specify in your launch template.\n Default: Any manufacturer",
"type" : "array",
"items" : {
"type" : "string"
@@ -987,7 +981,7 @@
"$ref" : "#/definitions/NetworkBandwidthGbps"
},
"BaselinePerformanceFactors" : {
- "description" : "The baseline performance to consider, using an instance family as a baseline reference. The instance family establishes the lowest acceptable level of performance. Amazon EC2 uses this baseline to guide instance type selection, but there is no guarantee that the selected instance types will always exceed the baseline for every application. Currently, this parameter only supports CPU performance as a baseline performance factor. For more information, see [Performance protection](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html#ec2fleet-abis-performance-protection) in the *Amazon EC2 User Guide*.",
+ "description" : "",
"$ref" : "#/definitions/BaselinePerformanceFactors"
},
"SpotMaxPricePercentageOverLowestPrice" : {
@@ -1072,7 +1066,7 @@
"type" : "object",
"properties" : {
"CapacityReservationPreference" : {
- "description" : "Indicates the instance's Capacity Reservation preferences. Possible preferences include:\n + ``capacity-reservations-only`` - The instance will only run in a Capacity Reservation or Capacity Reservation group. If capacity isn't available, the instance will fail to launch.\n + ``open`` - The instance can run in any ``open`` Capacity Reservation that has matching attributes (instance type, platform, Availability Zone, tenancy).\n + ``none`` - The instance avoids running in a Capacity Reservation even if one is available. The instance runs in On-Demand capacity.",
+ "description" : "Indicates the instance's Capacity Reservation preferences. Possible preferences include:\n + ``open`` - The instance can run in any ``open`` Capacity Reservation that has matching attributes (instance type, platform, Availability Zone).\n + ``none`` - The instance avoids running in a Capacity Reservation even if one is available. The instance runs in On-Demand capacity.",
"type" : "string"
},
"CapacityReservationTarget" : {
@@ -1143,7 +1137,7 @@
},
"TagSpecifications" : {
"uniqueItems" : false,
- "description" : "The tags to apply to the launch template on creation. To tag the launch template, the resource type must be ``launch-template``.\n To specify the tags for resources that are created during instance launch, use [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications).",
+ "description" : "The tags to apply to the launch template on creation. To tag the launch template, the resource type must be ``launch-template``.\n To specify the tags for the resources that are created when an instance is launched, you must use [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications).",
"type" : "array",
"items" : {
"$ref" : "#/definitions/LaunchTemplateTagSpecification"
diff --git a/aws-cloudformation-schema/aws-ec2-networkinterface.json b/aws-cloudformation-schema/aws-ec2-networkinterface.json
index e7092a8332..d9158d55cd 100644
--- a/aws-cloudformation-schema/aws-ec2-networkinterface.json
+++ b/aws-cloudformation-schema/aws-ec2-networkinterface.json
@@ -1,9 +1,112 @@
{
- "typeName" : "AWS::EC2::NetworkInterface",
+ "tagging" : {
+ "permissions" : [ "ec2:CreateTags", "ec2:DeleteTags" ],
+ "taggable" : true,
+ "tagOnCreate" : true,
+ "tagUpdatable" : true,
+ "tagProperty" : "/properties/Tags",
+ "cloudFormationSystemTags" : true
+ },
"$schema" : "https://raw.githubusercontent.com/aws-cloudformation/cloudformation-resource-schema/master/src/main/resources/schema/provider.definition.schema.v1.json",
- "sourceUrl" : "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2/networkinterface",
+ "typeName" : "AWS::EC2::NetworkInterface",
+ "readOnlyProperties" : [ "/properties/Id", "/properties/SecondaryPrivateIpAddresses", "/properties/PrimaryPrivateIpAddress", "/properties/PrimaryIpv6Address", "/properties/VpcId" ],
"description" : "The AWS::EC2::NetworkInterface resource creates network interface",
+ "createOnlyProperties" : [ "/properties/PrivateIpAddress", "/properties/InterfaceType", "/properties/SubnetId" ],
+ "primaryIdentifier" : [ "/properties/Id" ],
+ "required" : [ "SubnetId" ],
+ "conditionalCreateOnlyProperties" : [ "/properties/PrivateIpAddresses", "/properties/EnablePrimaryIpv6", "/properties/ConnectionTrackingSpecification" ],
+ "sourceUrl" : "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2/networkinterface",
+ "handlers" : {
+ "read" : {
+ "permissions" : [ "ec2:DescribeNetworkInterfaces" ]
+ },
+ "create" : {
+ "permissions" : [ "ec2:CreateNetworkInterface", "ec2:DescribeNetworkInterfaces", "ec2:CreateTags", "ec2:ModifyNetworkInterfaceAttribute", "ec2:ModifyPublicIpDnsNameOptions" ]
+ },
+ "update" : {
+ "permissions" : [ "ec2:DescribeNetworkInterfaces", "ec2:ModifyNetworkInterfaceAttribute", "ec2:UnassignIpv6Addresses", "ec2:AssignIpv6Addresses", "ec2:DeleteTags", "ec2:CreateTags", "ec2:UnassignPrivateIpAddresses", "ec2:AssignPrivateIpAddresses", "ec2:ModifyPublicIpDnsNameOptions" ]
+ },
+ "list" : {
+ "permissions" : [ "ec2:DescribeNetworkInterfaces" ]
+ },
+ "delete" : {
+ "permissions" : [ "ec2:DescribeNetworkInterfaces", "ec2:DeleteNetworkInterface" ]
+ }
+ },
"additionalProperties" : false,
+ "definitions" : {
+ "PrivateIpAddressSpecification" : {
+ "additionalProperties" : false,
+ "type" : "object",
+ "properties" : {
+ "PrivateIpAddress" : {
+ "type" : "string"
+ },
+ "Primary" : {
+ "type" : "boolean"
+ }
+ },
+ "required" : [ "PrivateIpAddress", "Primary" ]
+ },
+ "Ipv4PrefixSpecification" : {
+ "additionalProperties" : false,
+ "type" : "object",
+ "properties" : {
+ "Ipv4Prefix" : {
+ "type" : "string"
+ }
+ },
+ "required" : [ "Ipv4Prefix" ]
+ },
+ "InstanceIpv6Address" : {
+ "additionalProperties" : false,
+ "type" : "object",
+ "properties" : {
+ "Ipv6Address" : {
+ "type" : "string"
+ }
+ },
+ "required" : [ "Ipv6Address" ]
+ },
+ "Ipv6PrefixSpecification" : {
+ "additionalProperties" : false,
+ "type" : "object",
+ "properties" : {
+ "Ipv6Prefix" : {
+ "type" : "string"
+ }
+ },
+ "required" : [ "Ipv6Prefix" ]
+ },
+ "Tag" : {
+ "additionalProperties" : false,
+ "type" : "object",
+ "properties" : {
+ "Value" : {
+ "type" : "string"
+ },
+ "Key" : {
+ "type" : "string"
+ }
+ },
+ "required" : [ "Value", "Key" ]
+ },
+ "ConnectionTrackingSpecification" : {
+ "additionalProperties" : false,
+ "type" : "object",
+ "properties" : {
+ "UdpTimeout" : {
+ "type" : "integer"
+ },
+ "TcpEstablishedTimeout" : {
+ "type" : "integer"
+ },
+ "UdpStreamTimeout" : {
+ "type" : "integer"
+ }
+ }
+ }
+ },
"properties" : {
"Description" : {
"description" : "A description for the network interface.",
@@ -13,11 +116,15 @@
"description" : "Assigns a single private IP address to the network interface, which is used as the primary private IP address. If you want to specify multiple private IP address, use the PrivateIpAddresses property. ",
"type" : "string"
},
+ "PrimaryIpv6Address" : {
+ "description" : "The primary IPv6 address",
+ "type" : "string"
+ },
"PrivateIpAddresses" : {
- "description" : "Assigns a list of private IP addresses to the network interface. You can specify a primary private IP address by setting the value of the Primary property to true in the PrivateIpAddressSpecification property. If you want EC2 to automatically assign private IP addresses, use the SecondaryPrivateIpAddressCount property and do not specify this property.",
- "type" : "array",
"uniqueItems" : false,
+ "description" : "Assigns a list of private IP addresses to the network interface. You can specify a primary private IP address by setting the value of the Primary property to true in the PrivateIpAddressSpecification property. If you want EC2 to automatically assign private IP addresses, use the SecondaryPrivateIpAddressCount property and do not specify this property.",
"insertionOrder" : false,
+ "type" : "array",
"items" : {
"$ref" : "#/definitions/PrivateIpAddressSpecification"
}
@@ -26,15 +133,19 @@
"description" : "The number of secondary private IPv4 addresses to assign to a network interface. When you specify a number of secondary IPv4 addresses, Amazon EC2 selects these IP addresses within the subnet's IPv4 CIDR range. You can't specify this option and specify more than one private IP address using privateIpAddresses",
"type" : "integer"
},
+ "Ipv6PrefixCount" : {
+ "description" : "The number of IPv6 prefixes to assign to a network interface. When you specify a number of IPv6 prefixes, Amazon EC2 selects these prefixes from your existing subnet CIDR reservations, if available, or from free spaces in the subnet. By default, these will be /80 prefixes. You can't specify a count of IPv6 prefixes if you've specified one of the following: specific IPv6 prefixes, specific IPv6 addresses, or a count of IPv6 addresses.",
+ "type" : "integer"
+ },
"PrimaryPrivateIpAddress" : {
"description" : "Returns the primary private IP address of the network interface.",
"type" : "string"
},
"Ipv4Prefixes" : {
- "description" : "Assigns a list of IPv4 prefixes to the network interface. If you want EC2 to automatically assign IPv4 prefixes, use the Ipv4PrefixCount property and do not specify this property. Presently, only /28 prefixes are supported. You can't specify IPv4 prefixes if you've specified one of the following: a count of IPv4 prefixes, specific private IPv4 addresses, or a count of private IPv4 addresses.",
- "type" : "array",
"uniqueItems" : false,
+ "description" : "Assigns a list of IPv4 prefixes to the network interface. If you want EC2 to automatically assign IPv4 prefixes, use the Ipv4PrefixCount property and do not specify this property. Presently, only /28 prefixes are supported. You can't specify IPv4 prefixes if you've specified one of the following: a count of IPv4 prefixes, specific private IPv4 addresses, or a count of private IPv4 addresses.",
"insertionOrder" : false,
+ "type" : "array",
"items" : {
"$ref" : "#/definitions/Ipv4PrefixSpecification"
}
@@ -43,37 +154,37 @@
"description" : "The number of IPv4 prefixes to assign to a network interface. When you specify a number of IPv4 prefixes, Amazon EC2 selects these prefixes from your existing subnet CIDR reservations, if available, or from free spaces in the subnet. By default, these will be /28 prefixes. You can't specify a count of IPv4 prefixes if you've specified one of the following: specific IPv4 prefixes, specific private IPv4 addresses, or a count of private IPv4 addresses.",
"type" : "integer"
},
+ "EnablePrimaryIpv6" : {
+ "description" : "If you have instances or ENIs that rely on the IPv6 address not changing, to avoid disrupting traffic to instances or ENIs, you can enable a primary IPv6 address. Enable this option to automatically assign an IPv6 associated with the ENI attached to your instance to be the primary IPv6 address. When you enable an IPv6 address to be a primary IPv6, you cannot disable it. Traffic will be routed to the primary IPv6 address until the instance is terminated or the ENI is detached. If you have multiple IPv6 addresses associated with an ENI and you enable a primary IPv6 address, the first IPv6 address associated with the ENI becomes the primary IPv6 address.",
+ "type" : "boolean"
+ },
"GroupSet" : {
- "description" : "A list of security group IDs associated with this network interface.",
- "type" : "array",
"uniqueItems" : false,
+ "description" : "A list of security group IDs associated with this network interface.",
"insertionOrder" : false,
+ "type" : "array",
"items" : {
"type" : "string"
}
},
"Ipv6Addresses" : {
- "description" : "One or more specific IPv6 addresses from the IPv6 CIDR block range of your subnet to associate with the network interface. If you're specifying a number of IPv6 addresses, use the Ipv6AddressCount property and don't specify this property.",
- "type" : "array",
"uniqueItems" : true,
+ "description" : "One or more specific IPv6 addresses from the IPv6 CIDR block range of your subnet to associate with the network interface. If you're specifying a number of IPv6 addresses, use the Ipv6AddressCount property and don't specify this property.",
"insertionOrder" : false,
+ "type" : "array",
"items" : {
"$ref" : "#/definitions/InstanceIpv6Address"
}
},
"Ipv6Prefixes" : {
- "description" : "Assigns a list of IPv6 prefixes to the network interface. If you want EC2 to automatically assign IPv6 prefixes, use the Ipv6PrefixCount property and do not specify this property. Presently, only /80 prefixes are supported. You can't specify IPv6 prefixes if you've specified one of the following: a count of IPv6 prefixes, specific IPv6 addresses, or a count of IPv6 addresses.",
- "type" : "array",
"uniqueItems" : false,
+ "description" : "Assigns a list of IPv6 prefixes to the network interface. If you want EC2 to automatically assign IPv6 prefixes, use the Ipv6PrefixCount property and do not specify this property. Presently, only /80 prefixes are supported. You can't specify IPv6 prefixes if you've specified one of the following: a count of IPv6 prefixes, specific IPv6 addresses, or a count of IPv6 addresses.",
"insertionOrder" : false,
+ "type" : "array",
"items" : {
"$ref" : "#/definitions/Ipv6PrefixSpecification"
}
},
- "Ipv6PrefixCount" : {
- "description" : "The number of IPv6 prefixes to assign to a network interface. When you specify a number of IPv6 prefixes, Amazon EC2 selects these prefixes from your existing subnet CIDR reservations, if available, or from free spaces in the subnet. By default, these will be /80 prefixes. You can't specify a count of IPv6 prefixes if you've specified one of the following: specific IPv6 prefixes, specific IPv6 addresses, or a count of IPv6 addresses.",
- "type" : "integer"
- },
"SubnetId" : {
"description" : "The ID of the subnet to associate with the network interface.",
"type" : "string"
@@ -87,148 +198,37 @@
"type" : "string"
},
"SecondaryPrivateIpAddresses" : {
- "description" : "Returns the secondary private IP addresses of the network interface.",
- "type" : "array",
"uniqueItems" : false,
+ "description" : "Returns the secondary private IP addresses of the network interface.",
"insertionOrder" : false,
+ "type" : "array",
"items" : {
"type" : "string"
}
},
+ "VpcId" : {
+ "description" : "The ID of the VPC",
+ "type" : "string"
+ },
"Ipv6AddressCount" : {
"description" : "The number of IPv6 addresses to assign to a network interface. Amazon EC2 automatically selects the IPv6 addresses from the subnet range. To specify specific IPv6 addresses, use the Ipv6Addresses property and don't specify this property.",
"type" : "integer"
},
- "EnablePrimaryIpv6" : {
- "description" : "If you have instances or ENIs that rely on the IPv6 address not changing, to avoid disrupting traffic to instances or ENIs, you can enable a primary IPv6 address. Enable this option to automatically assign an IPv6 associated with the ENI attached to your instance to be the primary IPv6 address. When you enable an IPv6 address to be a primary IPv6, you cannot disable it. Traffic will be routed to the primary IPv6 address until the instance is terminated or the ENI is detached. If you have multiple IPv6 addresses associated with an ENI and you enable a primary IPv6 address, the first IPv6 address associated with the ENI becomes the primary IPv6 address.",
- "type" : "boolean"
- },
- "PrimaryIpv6Address" : {
- "description" : "The primary IPv6 address",
- "type" : "string"
- },
- "ConnectionTrackingSpecification" : {
- "$ref" : "#/definitions/ConnectionTrackingSpecification"
- },
"Id" : {
"description" : "Network interface id.",
"type" : "string"
},
"Tags" : {
- "description" : "An arbitrary set of tags (key-value pairs) for this network interface.",
- "type" : "array",
"uniqueItems" : false,
+ "description" : "An arbitrary set of tags (key-value pairs) for this network interface.",
"insertionOrder" : false,
+ "type" : "array",
"items" : {
"$ref" : "#/definitions/Tag"
}
},
- "VpcId" : {
- "description" : "The ID of the VPC",
- "type" : "string"
- }
- },
- "definitions" : {
- "PrivateIpAddressSpecification" : {
- "type" : "object",
- "additionalProperties" : false,
- "properties" : {
- "PrivateIpAddress" : {
- "type" : "string"
- },
- "Primary" : {
- "type" : "boolean"
- }
- },
- "required" : [ "PrivateIpAddress", "Primary" ]
- },
- "InstanceIpv6Address" : {
- "type" : "object",
- "additionalProperties" : false,
- "properties" : {
- "Ipv6Address" : {
- "type" : "string"
- }
- },
- "required" : [ "Ipv6Address" ]
- },
- "Ipv4PrefixSpecification" : {
- "type" : "object",
- "additionalProperties" : false,
- "properties" : {
- "Ipv4Prefix" : {
- "type" : "string"
- }
- },
- "required" : [ "Ipv4Prefix" ]
- },
- "Ipv6PrefixSpecification" : {
- "type" : "object",
- "additionalProperties" : false,
- "properties" : {
- "Ipv6Prefix" : {
- "type" : "string"
- }
- },
- "required" : [ "Ipv6Prefix" ]
- },
"ConnectionTrackingSpecification" : {
- "type" : "object",
- "additionalProperties" : false,
- "properties" : {
- "TcpEstablishedTimeout" : {
- "type" : "integer"
- },
- "UdpStreamTimeout" : {
- "type" : "integer"
- },
- "UdpTimeout" : {
- "type" : "integer"
- }
- }
- },
- "Tag" : {
- "type" : "object",
- "additionalProperties" : false,
- "properties" : {
- "Value" : {
- "type" : "string"
- },
- "Key" : {
- "type" : "string"
- }
- },
- "required" : [ "Value", "Key" ]
- }
- },
- "required" : [ "SubnetId" ],
- "createOnlyProperties" : [ "/properties/PrivateIpAddress", "/properties/InterfaceType", "/properties/SubnetId" ],
- "primaryIdentifier" : [ "/properties/Id" ],
- "readOnlyProperties" : [ "/properties/Id", "/properties/SecondaryPrivateIpAddresses", "/properties/PrimaryPrivateIpAddress", "/properties/PrimaryIpv6Address", "/properties/VpcId" ],
- "conditionalCreateOnlyProperties" : [ "/properties/PrivateIpAddresses", "/properties/EnablePrimaryIpv6", "/properties/ConnectionTrackingSpecification" ],
- "tagging" : {
- "taggable" : true,
- "tagOnCreate" : true,
- "tagUpdatable" : true,
- "cloudFormationSystemTags" : true,
- "tagProperty" : "/properties/Tags",
- "permissions" : [ "ec2:CreateTags", "ec2:DeleteTags" ]
- },
- "handlers" : {
- "create" : {
- "permissions" : [ "ec2:CreateNetworkInterface", "ec2:DescribeNetworkInterfaces", "ec2:CreateTags", "ec2:ModifyNetworkInterfaceAttribute" ]
- },
- "delete" : {
- "permissions" : [ "ec2:DescribeNetworkInterfaces", "ec2:DeleteNetworkInterface" ]
- },
- "list" : {
- "permissions" : [ "ec2:DescribeNetworkInterfaces" ]
- },
- "read" : {
- "permissions" : [ "ec2:DescribeNetworkInterfaces" ]
- },
- "update" : {
- "permissions" : [ "ec2:DescribeNetworkInterfaces", "ec2:ModifyNetworkInterfaceAttribute", "ec2:UnassignIpv6Addresses", "ec2:AssignIpv6Addresses", "ec2:DeleteTags", "ec2:CreateTags", "ec2:UnassignPrivateIpAddresses", "ec2:AssignPrivateIpAddresses" ]
+ "$ref" : "#/definitions/ConnectionTrackingSpecification"
}
}
}
\ No newline at end of file
diff --git a/aws-cloudformation-schema/aws-ecs-taskdefinition.json b/aws-cloudformation-schema/aws-ecs-taskdefinition.json
index 6b7180a622..88de9cb4ca 100644
--- a/aws-cloudformation-schema/aws-ecs-taskdefinition.json
+++ b/aws-cloudformation-schema/aws-ecs-taskdefinition.json
@@ -31,7 +31,7 @@
"typeName" : "AWS::ECS::TaskDefinition",
"readOnlyProperties" : [ "/properties/TaskDefinitionArn" ],
"description" : "Registers a new task definition from the supplied ``family`` and ``containerDefinitions``. Optionally, you can add data volumes to your containers with the ``volumes`` parameter. For more information about task definition parameters and defaults, see [Amazon ECS Task Definitions](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_defintions.html) in the *Amazon Elastic Container Service Developer Guide*.\n You can specify a role for your task with the ``taskRoleArn`` parameter. When you specify a role for a task, its containers can then use the latest versions of the CLI or SDKs to make API requests to the AWS services that are specified in the policy that's associated with the role. For more information, see [IAM Roles for Tasks](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-iam-roles.html) in the *Amazon Elastic Container Service Developer Guide*.\n You can specify a Docker networking mode for the containers in your task definition with the ``networkMode`` parameter. If you specify the ``awsvpc`` network mode, the task is allocated an elastic network interface, and you must specify a [NetworkConfiguration](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_NetworkConfiguration.html) when you create a service or run a task with the task definition. For more information, see [Task Networking](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-networking.html) in the *Amazon Elastic Container Service Developer Guide*.\n In the following example or examples, the Authorization header contents (``AUTHPARAMS``) must be replaced with an AWS Signature Version 4 signature. For more information, see [Signature Version 4 Signing Process](https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html) in the *General Reference*.\n You only need to learn how to sign HTTP requests if you intend to create them manually. When you use the [](https://docs.aws.amazon.com/cli/) or one of the [SDKs](https://docs.aws.amazon.com/tools/) to make requests to AWS, these tools automatically sign the requests for you, with the access key that you specify when you configure the tools. When you use these tools, you don't have to sign requests yourself.",
- "createOnlyProperties" : [ "/properties/Family", "/properties/ContainerDefinitions", "/properties/Cpu", "/properties/ExecutionRoleArn", "/properties/InferenceAccelerators", "/properties/Memory", "/properties/NetworkMode", "/properties/PlacementConstraints", "/properties/ProxyConfiguration", "/properties/RequiresCompatibilities", "/properties/RuntimePlatform", "/properties/TaskRoleArn", "/properties/Volumes", "/properties/PidMode", "/properties/IpcMode", "/properties/EphemeralStorage" ],
+ "createOnlyProperties" : [ "/properties/Family", "/properties/ContainerDefinitions", "/properties/Cpu", "/properties/EnableFaultInjection", "/properties/ExecutionRoleArn", "/properties/InferenceAccelerators", "/properties/Memory", "/properties/NetworkMode", "/properties/PlacementConstraints", "/properties/ProxyConfiguration", "/properties/RequiresCompatibilities", "/properties/RuntimePlatform", "/properties/TaskRoleArn", "/properties/Volumes", "/properties/PidMode", "/properties/IpcMode", "/properties/EphemeralStorage" ],
"additionalProperties" : false,
"primaryIdentifier" : [ "/properties/TaskDefinitionArn" ],
"definitions" : {
@@ -292,7 +292,7 @@
},
"VersionConsistency" : {
"default" : "enabled",
- "description" : "",
+ "description" : "Specifies whether Amazon ECS will resolve the container image tag provided in the container definition to an image digest. By default, the value is ``enabled``. If you set the value for a container as ``disabled``, Amazon ECS will not resolve the provided container image tag to a digest and will use the original image URI specified in the container definition for deployment. For more information about container image resolution, see [Container image resolution](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-type-ecs.html#deployment-container-image-stability) in the *Amazon ECS Developer Guide*.",
"type" : "string",
"enum" : [ "enabled", "disabled" ]
},
@@ -1031,6 +1031,10 @@
"description" : "The process namespace to use for the containers in the task. The valid values are ``host`` or ``task``. On Fargate for Linux containers, the only valid value is ``task``. For example, monitoring sidecars might need ``pidMode`` to access information about other containers running in the same task.\n If ``host`` is specified, all containers within the tasks that specified the ``host`` PID mode on the same container instance share the same process namespace with the host Amazon EC2 instance.\n If ``task`` is specified, all containers within the specified task share the same process namespace.\n If no value is specified, the default is a private namespace for each container.\n If the ``host`` PID mode is used, there's a heightened risk of undesired process namespace exposure.\n This parameter is not supported for Windows containers.\n This parameter is only supported for tasks that are hosted on FARGATElong if the tasks are using platform version ``1.4.0`` or later (Linux). This isn't supported for Windows containers on Fargate.",
"type" : "string"
},
+ "EnableFaultInjection" : {
+ "description" : "",
+ "type" : "boolean"
+ },
"ExecutionRoleArn" : {
"description" : "The Amazon Resource Name (ARN) of the task execution role that grants the Amazon ECS container agent permission to make AWS API calls on your behalf. For informationabout the required IAM roles for Amazon ECS, see [IAM roles for Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/security-ecs-iam-role-overview.html) in the *Amazon Elastic Container Service Developer Guide*.",
"type" : "string"
diff --git a/aws-cloudformation-schema/aws-healthlake-fhirdatastore.json b/aws-cloudformation-schema/aws-healthlake-fhirdatastore.json
index ebd88d0c6d..f56b2e18a1 100644
--- a/aws-cloudformation-schema/aws-healthlake-fhirdatastore.json
+++ b/aws-cloudformation-schema/aws-healthlake-fhirdatastore.json
@@ -73,6 +73,11 @@
}
},
"required" : [ "KmsEncryptionConfig" ],
+ "default" : {
+ "KmsEncryptionConfig" : {
+ "CmkType" : "AWS_OWNED_KMS_KEY"
+ }
+ },
"additionalProperties" : false
},
"KmsEncryptionConfig" : {
@@ -121,6 +126,10 @@
}
},
"required" : [ "AuthorizationStrategy" ],
+ "default" : {
+ "AuthorizationStrategy" : "AWS_AUTH",
+ "FineGrainedAuthorizationEnabled" : false
+ },
"additionalProperties" : false
},
"Tag" : {
diff --git a/aws-cloudformation-schema/aws-imagebuilder-component.json b/aws-cloudformation-schema/aws-imagebuilder-component.json
index a2643f3ecb..0778e2a154 100644
--- a/aws-cloudformation-schema/aws-imagebuilder-component.json
+++ b/aws-cloudformation-schema/aws-imagebuilder-component.json
@@ -89,13 +89,13 @@
"permissions" : [ "iam:CreateServiceLinkedRole", "iam:GetRole", "kms:GenerateDataKey", "kms:GenerateDataKeyPair", "kms:GenerateDataKeyPairWithoutPlaintext", "kms:GenerateDataKeyWithoutPlaintext", "kms:Encrypt", "kms:Decrypt", "s3:GetObject", "s3:HeadBucket", "s3:GetBucketLocation", "imagebuilder:TagResource", "imagebuilder:GetComponent", "imagebuilder:CreateComponent" ]
},
"read" : {
- "permissions" : [ "imagebuilder:GetComponent" ]
+ "permissions" : [ "imagebuilder:GetComponent", "kms:Decrypt" ]
},
"delete" : {
"permissions" : [ "imagebuilder:GetComponent", "imagebuilder:UnTagResource", "imagebuilder:DeleteComponent" ]
},
"list" : {
- "permissions" : [ "imagebuilder:ListComponents" ],
+ "permissions" : [ "imagebuilder:ListComponents", "imagebuilder:ListComponentBuildVersions" ],
"handlerSchema" : {
"properties" : {
"Arn" : {
diff --git a/aws-cloudformation-schema/aws-imagebuilder-containerrecipe.json b/aws-cloudformation-schema/aws-imagebuilder-containerrecipe.json
index ae5769ddc0..04a0f0547a 100644
--- a/aws-cloudformation-schema/aws-imagebuilder-containerrecipe.json
+++ b/aws-cloudformation-schema/aws-imagebuilder-containerrecipe.json
@@ -241,7 +241,7 @@
"permissions" : [ "iam:GetRole", "iam:CreateServiceLinkedRole", "imagebuilder:GetComponent", "imagebuilder:TagResource", "imagebuilder:GetContainerRecipe", "imagebuilder:CreateContainerRecipe", "imagebuilder:GetImage", "kms:Encrypt", "kms:Decrypt", "kms:ReEncryptFrom", "kms:ReEncryptTo", "kms:GenerateDataKey", "kms:GenerateDataKeyPair", "kms:GenerateDataKeyPairWithoutPlaintext", "kms:GenerateDataKeyWithoutPlaintext", "s3:GetObject", "s3:ListBucket", "ecr:DescribeRepositories", "ec2:DescribeImages" ]
},
"read" : {
- "permissions" : [ "imagebuilder:GetContainerRecipe" ]
+ "permissions" : [ "imagebuilder:GetContainerRecipe", "kms:Decrypt" ]
},
"delete" : {
"permissions" : [ "imagebuilder:UnTagResource", "imagebuilder:GetContainerRecipe", "imagebuilder:DeleteContainerRecipe" ]
diff --git a/aws-cloudformation-schema/aws-imagebuilder-image.json b/aws-cloudformation-schema/aws-imagebuilder-image.json
index ff6b8454e5..03aa8f91c3 100644
--- a/aws-cloudformation-schema/aws-imagebuilder-image.json
+++ b/aws-cloudformation-schema/aws-imagebuilder-image.json
@@ -196,7 +196,7 @@
"permissions" : [ "imagebuilder:GetImage", "imagebuilder:DeleteImage", "imagebuilder:UnTagResource", "imagebuilder:CancelImageCreation" ]
},
"list" : {
- "permissions" : [ "imagebuilder:ListImages" ],
+ "permissions" : [ "imagebuilder:ListImages", "imagebuilder:ListImageBuildVersions" ],
"handlerSchema" : {
"properties" : {
"Arn" : {
diff --git a/aws-cloudformation-schema/aws-imagebuilder-workflow.json b/aws-cloudformation-schema/aws-imagebuilder-workflow.json
index 5a8fe5a752..93c8ca3c69 100644
--- a/aws-cloudformation-schema/aws-imagebuilder-workflow.json
+++ b/aws-cloudformation-schema/aws-imagebuilder-workflow.json
@@ -72,13 +72,13 @@
"permissions" : [ "iam:GetRole", "kms:GenerateDataKey", "kms:GenerateDataKeyPair", "kms:GenerateDataKeyPairWithoutPlaintext", "kms:GenerateDataKeyWithoutPlaintext", "kms:Encrypt", "kms:Decrypt", "s3:GetObject", "s3:HeadBucket", "s3:GetBucketLocation", "imagebuilder:TagResource", "imagebuilder:GetWorkflow", "imagebuilder:CreateWorkflow" ]
},
"read" : {
- "permissions" : [ "imagebuilder:GetWorkflow" ]
+ "permissions" : [ "imagebuilder:GetWorkflow", "kms:Decrypt" ]
},
"delete" : {
"permissions" : [ "imagebuilder:GetWorkflow", "imagebuilder:UnTagResource", "imagebuilder:DeleteWorkflow" ]
},
"list" : {
- "permissions" : [ "imagebuilder:ListWorkflows" ],
+ "permissions" : [ "imagebuilder:ListWorkflows", "imagebuilder:ListWorkflowBuildVersions" ],
"handlerSchema" : {
"properties" : {
"Arn" : {
diff --git a/aws-cloudformation-schema/aws-iot-command.json b/aws-cloudformation-schema/aws-iot-command.json
new file mode 100644
index 0000000000..dd94b59259
--- /dev/null
+++ b/aws-cloudformation-schema/aws-iot-command.json
@@ -0,0 +1,212 @@
+{
+ "typeName" : "AWS::IoT::Command",
+ "description" : "Represents the resource definition of AWS IoT Command.",
+ "definitions" : {
+ "CommandParameterList" : {
+ "type" : "array",
+ "items" : {
+ "$ref" : "#/definitions/CommandParameter"
+ },
+ "minItems" : 1,
+ "insertionOrder" : false
+ },
+ "CommandParameter" : {
+ "type" : "object",
+ "properties" : {
+ "Name" : {
+ "$ref" : "#/definitions/CommandParameterName"
+ },
+ "Value" : {
+ "$ref" : "#/definitions/CommandParameterValue"
+ },
+ "DefaultValue" : {
+ "$ref" : "#/definitions/CommandParameterValue"
+ },
+ "Description" : {
+ "$ref" : "#/definitions/CommandParameterDescription"
+ }
+ },
+ "required" : [ "Name" ],
+ "additionalProperties" : false
+ },
+ "CommandParameterName" : {
+ "type" : "string",
+ "pattern" : "^[.$a-zA-Z0-9_-]+$",
+ "minLength" : 1,
+ "maxLength" : 192
+ },
+ "CommandParameterDescription" : {
+ "type" : "string",
+ "maxLength" : 2028
+ },
+ "CommandParameterValue" : {
+ "type" : "object",
+ "properties" : {
+ "S" : {
+ "type" : "string",
+ "minLength" : 1
+ },
+ "B" : {
+ "type" : "boolean"
+ },
+ "I" : {
+ "type" : "integer"
+ },
+ "L" : {
+ "type" : "string",
+ "pattern" : "^-?\\d+$",
+ "maxLength" : 19
+ },
+ "D" : {
+ "type" : "number"
+ },
+ "BIN" : {
+ "type" : "string",
+ "minLength" : 1
+ },
+ "UL" : {
+ "type" : "string",
+ "pattern" : "^[0-9]*$",
+ "minLength" : 1,
+ "maxLength" : 20
+ }
+ },
+ "additionalProperties" : false
+ },
+ "MimeType" : {
+ "type" : "string",
+ "minLength" : 1
+ },
+ "CommandPayloadContent" : {
+ "type" : "string"
+ },
+ "CommandPayload" : {
+ "type" : "object",
+ "properties" : {
+ "Content" : {
+ "$ref" : "#/definitions/CommandPayloadContent"
+ },
+ "ContentType" : {
+ "$ref" : "#/definitions/MimeType"
+ }
+ },
+ "additionalProperties" : false
+ },
+ "Tag" : {
+ "description" : "A key-value pair to associate with a resource.",
+ "type" : "object",
+ "properties" : {
+ "Key" : {
+ "type" : "string",
+ "description" : "The tag's key.",
+ "minLength" : 1,
+ "maxLength" : 128
+ },
+ "Value" : {
+ "type" : "string",
+ "description" : "The tag's value.",
+ "minLength" : 1,
+ "maxLength" : 256
+ }
+ },
+ "required" : [ "Value", "Key" ],
+ "additionalProperties" : false
+ }
+ },
+ "properties" : {
+ "CommandArn" : {
+ "type" : "string",
+ "description" : "The Amazon Resource Name (ARN) of the command."
+ },
+ "CommandId" : {
+ "type" : "string",
+ "pattern" : "^[a-zA-Z0-9_-]+$",
+ "minLength" : 1,
+ "maxLength" : 64,
+ "description" : "The unique identifier for the command."
+ },
+ "CreatedAt" : {
+ "type" : "string",
+ "description" : "The date and time when the command was created."
+ },
+ "Deprecated" : {
+ "type" : "boolean",
+ "description" : "A flag indicating whether the command is deprecated."
+ },
+ "Description" : {
+ "type" : "string",
+ "maxLength" : 2028,
+ "description" : "The description of the command."
+ },
+ "DisplayName" : {
+ "type" : "string",
+ "description" : "The display name for the command."
+ },
+ "LastUpdatedAt" : {
+ "type" : "string",
+ "description" : "The date and time when the command was last updated."
+ },
+ "MandatoryParameters" : {
+ "$ref" : "#/definitions/CommandParameterList",
+ "description" : "The list of mandatory parameters for the command."
+ },
+ "Namespace" : {
+ "type" : "string",
+ "enum" : [ "AWS-IoT", "AWS-IoT-FleetWise" ],
+ "description" : "The namespace to which the command belongs."
+ },
+ "RoleArn" : {
+ "type" : "string",
+ "minLength" : 20,
+ "maxLength" : 2028,
+ "description" : "The customer role associated with the command."
+ },
+ "Payload" : {
+ "$ref" : "#/definitions/CommandPayload",
+ "description" : "The payload associated with the command."
+ },
+ "PendingDeletion" : {
+ "type" : "boolean",
+ "description" : "A flag indicating whether the command is pending deletion."
+ },
+ "Tags" : {
+ "type" : "array",
+ "items" : {
+ "$ref" : "#/definitions/Tag"
+ },
+ "description" : "The tags to be associated with the command.",
+ "insertionOrder" : true
+ }
+ },
+ "required" : [ "CommandId" ],
+ "createOnlyProperties" : [ "/properties/CommandId" ],
+ "readOnlyProperties" : [ "/properties/CommandArn" ],
+ "writeOnlyProperties" : [ "/properties/LastUpdatedAt" ],
+ "primaryIdentifier" : [ "/properties/CommandId" ],
+ "handlers" : {
+ "create" : {
+ "permissions" : [ "iam:PassRole", "iot:CreateCommand", "iot:TagResource" ]
+ },
+ "read" : {
+ "permissions" : [ "iot:GetCommand", "iot:ListTagsForResource" ]
+ },
+ "update" : {
+ "permissions" : [ "iam:PassRole", "iot:UpdateCommand", "iot:GetCommand", "iot:TagResource", "iot:UntagResource", "iot:ListTagsForResource" ]
+ },
+ "delete" : {
+ "permissions" : [ "iot:GetCommand", "iot:UpdateCommand", "iot:DeleteCommand" ]
+ },
+ "list" : {
+ "permissions" : [ "iot:ListCommands" ]
+ }
+ },
+ "additionalProperties" : false,
+ "tagging" : {
+ "taggable" : true,
+ "tagOnCreate" : true,
+ "tagUpdatable" : true,
+ "cloudFormationSystemTags" : false,
+ "tagProperty" : "/properties/Tags",
+ "permissions" : [ "iot:TagResource", "iot:UntagResource", "iot:ListTagsForResource" ]
+ }
+}
\ No newline at end of file
diff --git a/aws-cloudformation-schema/aws-iotsitewise-gateway.json b/aws-cloudformation-schema/aws-iotsitewise-gateway.json
index 7b6479b075..f238d805d5 100644
--- a/aws-cloudformation-schema/aws-iotsitewise-gateway.json
+++ b/aws-cloudformation-schema/aws-iotsitewise-gateway.json
@@ -1,50 +1,55 @@
{
+ "sourceUrl" : "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-IoTSiteWise.git",
+ "tagging" : {
+ "permissions" : [ "iotsitewise:TagResource", "iotsitewise:UntagResource", "iotsitewise:ListTagsForResource" ],
+ "taggable" : true,
+ "tagOnCreate" : true,
+ "tagUpdatable" : true,
+ "tagProperty" : "/properties/Tags",
+ "cloudFormationSystemTags" : true
+ },
+ "handlers" : {
+ "read" : {
+ "permissions" : [ "iotsitewise:DescribeGateway", "iotsitewise:DescribeGatewayCapabilityConfiguration", "iotsitewise:ListTagsForResource" ]
+ },
+ "create" : {
+ "permissions" : [ "iotsitewise:CreateGateway", "iotsitewise:DescribeGateway", "iotsitewise:DescribeGatewayCapabilityConfiguration", "iotsitewise:UpdateGatewayCapabilityConfiguration", "iam:PassRole", "iam:GetRole", "greengrass:GetCoreDevice", "iotsitewise:ListTagsForResource", "iotsitewise:TagResource", "iot:DescribeThing" ]
+ },
+ "update" : {
+ "permissions" : [ "iotsitewise:UpdateGateway", "iotsitewise:UpdateGatewayCapabilityConfiguration", "iotsitewise:TagResource", "iotsitewise:UntagResource", "iotsitewise:DescribeGateway", "iotsitewise:DescribeGatewayCapabilityConfiguration", "iotsitewise:ListTagsForResource" ]
+ },
+ "list" : {
+ "permissions" : [ "iotsitewise:ListGateways", "iotsitewise:ListTagsForResource" ]
+ },
+ "delete" : {
+ "permissions" : [ "iotsitewise:DescribeGateway", "iotsitewise:DescribeGatewayCapabilityConfiguration", "iotsitewise:DeleteGateway" ]
+ }
+ },
"typeName" : "AWS::IoTSiteWise::Gateway",
+ "readOnlyProperties" : [ "/properties/GatewayId" ],
"description" : "Resource schema for AWS::IoTSiteWise::Gateway",
- "sourceUrl" : "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-IoTSiteWise.git",
+ "createOnlyProperties" : [ "/properties/GatewayPlatform" ],
+ "additionalProperties" : false,
+ "primaryIdentifier" : [ "/properties/GatewayId" ],
"definitions" : {
- "GatewayPlatform" : {
- "description" : "Contains a gateway's platform information.",
- "type" : "object",
+ "GatewayCapabilitySummary" : {
+ "description" : "Contains a summary of a gateway capability configuration.",
"additionalProperties" : false,
- "properties" : {
- "Greengrass" : {
- "description" : "A gateway that runs on AWS IoT Greengrass V1.",
- "$ref" : "#/definitions/Greengrass"
- },
- "GreengrassV2" : {
- "description" : "A gateway that runs on AWS IoT Greengrass V2.",
- "$ref" : "#/definitions/GreengrassV2"
- },
- "SiemensIE" : {
- "description" : "A gateway that runs on Siemens Industrial Edge.",
- "$ref" : "#/definitions/SiemensIE"
- }
- },
- "oneOf" : [ {
- "required" : [ "Greengrass" ]
- }, {
- "required" : [ "GreengrassV2" ]
- }, {
- "required" : [ "SiemensIE" ]
- } ]
- },
- "Greengrass" : {
- "description" : "Contains the ARN of AWS IoT Greengrass Group V1 that the gateway runs on.",
"type" : "object",
- "additionalProperties" : false,
"properties" : {
- "GroupArn" : {
- "description" : "The ARN of the Greengrass group.",
- "type" : "string"
+ "CapabilityNamespace" : {
+ "$ref" : "#/definitions/CapabilityNamespace"
+ },
+ "CapabilityConfiguration" : {
+ "$ref" : "#/definitions/CapabilityConfiguration"
}
},
- "required" : [ "GroupArn" ]
+ "required" : [ "CapabilityNamespace" ]
},
"GreengrassV2" : {
"description" : "Contains the CoreDeviceThingName of AWS IoT Greengrass Group V2 that the gateway runs on.",
- "type" : "object",
"additionalProperties" : false,
+ "type" : "object",
"properties" : {
"CoreDeviceThingName" : {
"description" : "The name of the CoreDevice in GreenGrass V2.",
@@ -53,56 +58,90 @@
},
"required" : [ "CoreDeviceThingName" ]
},
- "SiemensIE" : {
- "description" : "Contains the IotCoreThingName of AWS IoT Thing that the gateway runs on.",
- "type" : "object",
+ "CapabilityNamespace" : {
+ "description" : "The namespace of the capability configuration.",
+ "type" : "string"
+ },
+ "Greengrass" : {
+ "description" : "Contains the ARN of AWS IoT Greengrass Group V1 that the gateway runs on.",
"additionalProperties" : false,
+ "type" : "object",
"properties" : {
- "IotCoreThingName" : {
- "description" : "The name of the IoT Core Thing.",
+ "GroupArn" : {
+ "description" : "The ARN of the Greengrass group.",
"type" : "string"
}
},
- "required" : [ "IotCoreThingName" ]
+ "required" : [ "GroupArn" ]
+ },
+ "CapabilityConfiguration" : {
+ "description" : "The JSON document that defines the gateway capability's configuration.",
+ "type" : "string"
+ },
+ "GatewayPlatform" : {
+ "oneOf" : [ {
+ "required" : [ "Greengrass" ]
+ }, {
+ "required" : [ "GreengrassV2" ]
+ }, {
+ "required" : [ "SiemensIE" ]
+ } ],
+ "description" : "Contains a gateway's platform information.",
+ "additionalProperties" : false,
+ "type" : "object",
+ "properties" : {
+ "GreengrassV2" : {
+ "description" : "A gateway that runs on AWS IoT Greengrass V2.",
+ "$ref" : "#/definitions/GreengrassV2"
+ },
+ "Greengrass" : {
+ "description" : "A gateway that runs on AWS IoT Greengrass V1.",
+ "$ref" : "#/definitions/Greengrass"
+ },
+ "SiemensIE" : {
+ "description" : "A gateway that runs on Siemens Industrial Edge.",
+ "$ref" : "#/definitions/SiemensIE"
+ }
+ }
},
"Tag" : {
"description" : "To add or update tag, provide both key and value. To delete tag, provide only tag key to be deleted",
- "type" : "object",
"additionalProperties" : false,
+ "type" : "object",
"properties" : {
- "Key" : {
+ "Value" : {
"type" : "string"
},
- "Value" : {
+ "Key" : {
"type" : "string"
}
},
"required" : [ "Key", "Value" ]
},
- "CapabilityNamespace" : {
- "description" : "The namespace of the capability configuration.",
- "type" : "string"
- },
- "CapabilityConfiguration" : {
- "description" : "The JSON document that defines the gateway capability's configuration.",
- "type" : "string"
- },
- "GatewayCapabilitySummary" : {
- "description" : "Contains a summary of a gateway capability configuration.",
- "type" : "object",
+ "SiemensIE" : {
+ "description" : "Contains the IotCoreThingName of AWS IoT Thing that the gateway runs on.",
"additionalProperties" : false,
+ "type" : "object",
"properties" : {
- "CapabilityNamespace" : {
- "$ref" : "#/definitions/CapabilityNamespace"
- },
- "CapabilityConfiguration" : {
- "$ref" : "#/definitions/CapabilityConfiguration"
+ "IotCoreThingName" : {
+ "description" : "The name of the IoT Core Thing.",
+ "type" : "string"
}
},
- "required" : [ "CapabilityNamespace" ]
+ "required" : [ "IotCoreThingName" ]
}
},
+ "required" : [ "GatewayName", "GatewayPlatform" ],
"properties" : {
+ "GatewayCapabilitySummaries" : {
+ "uniqueItems" : true,
+ "description" : "A list of gateway capability summaries that each contain a namespace and status.",
+ "insertionOrder" : true,
+ "type" : "array",
+ "items" : {
+ "$ref" : "#/definitions/GatewayCapabilitySummary"
+ }
+ },
"GatewayName" : {
"description" : "A unique, friendly name for the gateway.",
"type" : "string"
@@ -111,57 +150,18 @@
"description" : "The gateway's platform. You can only specify one platform in a gateway.",
"$ref" : "#/definitions/GatewayPlatform"
},
- "Tags" : {
- "description" : "A list of key-value pairs that contain metadata for the gateway.",
- "type" : "array",
- "uniqueItems" : false,
- "insertionOrder" : false,
- "items" : {
- "$ref" : "#/definitions/Tag"
- }
- },
"GatewayId" : {
"description" : "The ID of the gateway device.",
"type" : "string"
},
- "GatewayCapabilitySummaries" : {
- "description" : "A list of gateway capability summaries that each contain a namespace and status.",
+ "Tags" : {
+ "uniqueItems" : false,
+ "description" : "A list of key-value pairs that contain metadata for the gateway.",
+ "insertionOrder" : false,
"type" : "array",
- "uniqueItems" : true,
- "insertionOrder" : true,
"items" : {
- "$ref" : "#/definitions/GatewayCapabilitySummary"
+ "$ref" : "#/definitions/Tag"
}
}
- },
- "additionalProperties" : false,
- "tagging" : {
- "taggable" : true,
- "tagOnCreate" : true,
- "tagUpdatable" : true,
- "cloudFormationSystemTags" : true,
- "tagProperty" : "/properties/Tags",
- "permissions" : [ "iotsitewise:TagResource", "iotsitewise:UntagResource", "iotsitewise:ListTagsForResource" ]
- },
- "required" : [ "GatewayName", "GatewayPlatform" ],
- "readOnlyProperties" : [ "/properties/GatewayId" ],
- "createOnlyProperties" : [ "/properties/GatewayPlatform" ],
- "primaryIdentifier" : [ "/properties/GatewayId" ],
- "handlers" : {
- "create" : {
- "permissions" : [ "iotsitewise:CreateGateway", "iotsitewise:DescribeGateway", "iotsitewise:DescribeGatewayCapabilityConfiguration", "iotsitewise:UpdateGatewayCapabilityConfiguration", "iam:PassRole", "iam:GetRole", "greengrass:GetCoreDevice", "iotsitewise:ListTagsForResource", "iotsitewise:TagResource", "iot:DescribeThing" ]
- },
- "read" : {
- "permissions" : [ "iotsitewise:DescribeGateway", "iotsitewise:DescribeGatewayCapabilityConfiguration", "iotsitewise:ListTagsForResource" ]
- },
- "update" : {
- "permissions" : [ "iotsitewise:UpdateGateway", "iotsitewise:UpdateGatewayCapabilityConfiguration", "iotsitewise:TagResource", "iotsitewise:UntagResource", "iotsitewise:DescribeGateway", "iotsitewise:DescribeGatewayCapabilityConfiguration", "iotsitewise:ListTagsForResource" ]
- },
- "delete" : {
- "permissions" : [ "iotsitewise:DescribeGateway", "iotsitewise:DescribeGatewayCapabilityConfiguration", "iotsitewise:DeleteGateway" ]
- },
- "list" : {
- "permissions" : [ "iotsitewise:ListGateways", "iotsitewise:ListTagsForResource" ]
- }
}
}
\ No newline at end of file
diff --git a/aws-cloudformation-schema/aws-logs-transformer.json b/aws-cloudformation-schema/aws-logs-transformer.json
new file mode 100644
index 0000000000..b47ad3e935
--- /dev/null
+++ b/aws-cloudformation-schema/aws-logs-transformer.json
@@ -0,0 +1,577 @@
+{
+ "typeName" : "AWS::Logs::Transformer",
+ "description" : "Specifies a transformer on the log group to transform logs into consistent structured and information rich format.",
+ "sourceUrl" : "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-logs.git",
+ "properties" : {
+ "LogGroupIdentifier" : {
+ "description" : "Existing log group that you want to associate with this transformer.",
+ "type" : "string",
+ "minLength" : 1,
+ "maxLength" : 2048,
+ "pattern" : "[\\w#+=/:,.@-]*"
+ },
+ "TransformerConfig" : {
+ "description" : "List of processors in a transformer",
+ "type" : "array",
+ "items" : {
+ "$ref" : "#/definitions/Processor"
+ },
+ "minItems" : 1,
+ "maxItems" : 20,
+ "insertionOrder" : false
+ }
+ },
+ "required" : [ "LogGroupIdentifier", "TransformerConfig" ],
+ "additionalProperties" : false,
+ "definitions" : {
+ "Processor" : {
+ "description" : "Individual processor configuration",
+ "type" : "object",
+ "properties" : {
+ "ParseCloudfront" : {
+ "$ref" : "#/definitions/ParseCloudfront"
+ },
+ "ParseVPC" : {
+ "$ref" : "#/definitions/ParseVPC"
+ },
+ "ParseWAF" : {
+ "$ref" : "#/definitions/ParseWAF"
+ },
+ "ParseJSON" : {
+ "type" : "object",
+ "properties" : {
+ "Source" : {
+ "type" : "string"
+ },
+ "Destination" : {
+ "$ref" : "#/definitions/NonEmptyAndMaxLengthString"
+ }
+ },
+ "additionalProperties" : false
+ },
+ "ParseRoute53" : {
+ "$ref" : "#/definitions/ParseRoute53"
+ },
+ "ParsePostgres" : {
+ "$ref" : "#/definitions/ParsePostgres"
+ },
+ "ParseKeyValue" : {
+ "type" : "object",
+ "properties" : {
+ "Source" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ },
+ "Destination" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ },
+ "FieldDelimiter" : {
+ "type" : "string"
+ },
+ "KeyValueDelimiter" : {
+ "type" : "string"
+ },
+ "KeyPrefix" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ },
+ "NonMatchValue" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ },
+ "OverwriteIfExists" : {
+ "type" : "boolean"
+ }
+ },
+ "additionalProperties" : false
+ },
+ "CopyValue" : {
+ "type" : "object",
+ "properties" : {
+ "Entries" : {
+ "type" : "array",
+ "items" : {
+ "$ref" : "#/definitions/CopyValueEntry"
+ },
+ "minItems" : 1,
+ "maxItems" : 5,
+ "insertionOrder" : false
+ }
+ },
+ "required" : [ "Entries" ],
+ "additionalProperties" : false
+ },
+ "Csv" : {
+ "type" : "object",
+ "properties" : {
+ "QuoteCharacter" : {
+ "type" : "string",
+ "maxLength" : 1
+ },
+ "Delimiter" : {
+ "type" : "string",
+ "maxLength" : 1
+ },
+ "Source" : {
+ "type" : "string"
+ },
+ "Columns" : {
+ "type" : "array",
+ "items" : {
+ "$ref" : "#/definitions/Column"
+ },
+ "minItems" : 1,
+ "maxItems" : 100,
+ "insertionOrder" : false
+ }
+ },
+ "additionalProperties" : false
+ },
+ "DateTimeConverter" : {
+ "type" : "object",
+ "properties" : {
+ "Source" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ },
+ "Target" : {
+ "$ref" : "#/definitions/NonEmptyAndMaxLengthString"
+ },
+ "TargetFormat" : {
+ "type" : "string"
+ },
+ "MatchPatterns" : {
+ "type" : "array",
+ "items" : {
+ "$ref" : "#/definitions/MatchPattern"
+ },
+ "minItems" : 1,
+ "maxItems" : 5,
+ "uniqueItems" : true,
+ "insertionOrder" : false
+ },
+ "SourceTimezone" : {
+ "type" : "string"
+ },
+ "TargetTimezone" : {
+ "type" : "string"
+ },
+ "Locale" : {
+ "type" : "string"
+ }
+ },
+ "required" : [ "Source", "Target", "MatchPatterns" ],
+ "additionalProperties" : false
+ },
+ "DeleteKeys" : {
+ "type" : "object",
+ "properties" : {
+ "WithKeys" : {
+ "type" : "array",
+ "items" : {
+ "$ref" : "#/definitions/WithKey"
+ },
+ "minItems" : 1,
+ "maxItems" : 5,
+ "uniqueItems" : true,
+ "insertionOrder" : false
+ }
+ },
+ "required" : [ "WithKeys" ],
+ "additionalProperties" : false
+ },
+ "Grok" : {
+ "type" : "object",
+ "properties" : {
+ "Source" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ },
+ "Match" : {
+ "type" : "string",
+ "maxLength" : 128
+ }
+ },
+ "required" : [ "Match" ],
+ "additionalProperties" : false
+ },
+ "ListToMap" : {
+ "type" : "object",
+ "properties" : {
+ "Source" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ },
+ "Key" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ },
+ "ValueKey" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ },
+ "Target" : {
+ "$ref" : "#/definitions/NonEmptyAndMaxLengthString"
+ },
+ "Flatten" : {
+ "type" : "boolean"
+ },
+ "FlattenedElement" : {
+ "type" : "string",
+ "enum" : [ "first", "last" ]
+ }
+ },
+ "required" : [ "Source", "Key" ],
+ "additionalProperties" : false
+ },
+ "AddKeys" : {
+ "type" : "object",
+ "properties" : {
+ "Entries" : {
+ "type" : "array",
+ "items" : {
+ "$ref" : "#/definitions/AddKeyEntry"
+ },
+ "minItems" : 1,
+ "maxItems" : 5,
+ "uniqueItems" : true,
+ "insertionOrder" : false
+ }
+ },
+ "required" : [ "Entries" ],
+ "additionalProperties" : false
+ },
+ "MoveKeys" : {
+ "type" : "object",
+ "properties" : {
+ "Entries" : {
+ "type" : "array",
+ "items" : {
+ "$ref" : "#/definitions/MoveKeyEntry"
+ },
+ "minItems" : 1,
+ "maxItems" : 5,
+ "insertionOrder" : false
+ }
+ },
+ "required" : [ "Entries" ],
+ "additionalProperties" : false
+ },
+ "RenameKeys" : {
+ "type" : "object",
+ "properties" : {
+ "Entries" : {
+ "type" : "array",
+ "items" : {
+ "$ref" : "#/definitions/RenameKeyEntry"
+ },
+ "minItems" : 1,
+ "maxItems" : 5,
+ "insertionOrder" : false
+ }
+ },
+ "required" : [ "Entries" ],
+ "additionalProperties" : false
+ },
+ "LowerCaseString" : {
+ "type" : "object",
+ "properties" : {
+ "WithKeys" : {
+ "type" : "array",
+ "items" : {
+ "$ref" : "#/definitions/WithKey"
+ },
+ "minItems" : 1,
+ "maxItems" : 10,
+ "uniqueItems" : true,
+ "insertionOrder" : false
+ }
+ },
+ "required" : [ "WithKeys" ],
+ "additionalProperties" : false
+ },
+ "SplitString" : {
+ "type" : "object",
+ "properties" : {
+ "Entries" : {
+ "type" : "array",
+ "items" : {
+ "$ref" : "#/definitions/SplitStringEntry"
+ },
+ "minItems" : 1,
+ "maxItems" : 10,
+ "insertionOrder" : false
+ }
+ },
+ "required" : [ "Entries" ],
+ "additionalProperties" : false
+ },
+ "SubstituteString" : {
+ "type" : "object",
+ "properties" : {
+ "Entries" : {
+ "type" : "array",
+ "items" : {
+ "$ref" : "#/definitions/SubstituteStringEntry"
+ },
+ "minItems" : 1,
+ "maxItems" : 10,
+ "insertionOrder" : false
+ }
+ },
+ "required" : [ "Entries" ],
+ "additionalProperties" : false
+ },
+ "TrimString" : {
+ "type" : "object",
+ "properties" : {
+ "WithKeys" : {
+ "type" : "array",
+ "items" : {
+ "$ref" : "#/definitions/WithKey"
+ },
+ "minItems" : 1,
+ "maxItems" : 10,
+ "uniqueItems" : true,
+ "insertionOrder" : false
+ }
+ },
+ "required" : [ "WithKeys" ],
+ "additionalProperties" : false
+ },
+ "UpperCaseString" : {
+ "type" : "object",
+ "properties" : {
+ "WithKeys" : {
+ "type" : "array",
+ "items" : {
+ "$ref" : "#/definitions/WithKey"
+ },
+ "minItems" : 1,
+ "maxItems" : 10,
+ "uniqueItems" : true,
+ "insertionOrder" : false
+ }
+ },
+ "required" : [ "WithKeys" ],
+ "additionalProperties" : false
+ },
+ "TypeConverter" : {
+ "type" : "object",
+ "properties" : {
+ "Entries" : {
+ "type" : "array",
+ "items" : {
+ "$ref" : "#/definitions/TypeConverterEntry"
+ },
+ "minItems" : 1,
+ "maxItems" : 5,
+ "insertionOrder" : false
+ }
+ },
+ "required" : [ "Entries" ],
+ "additionalProperties" : false
+ }
+ },
+ "additionalProperties" : false,
+ "minProperties" : 1,
+ "maxProperties" : 1
+ },
+ "ParseCloudfront" : {
+ "type" : "object",
+ "properties" : {
+ "Source" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ }
+ },
+ "additionalProperties" : false
+ },
+ "ParseVPC" : {
+ "type" : "object",
+ "properties" : {
+ "Source" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ }
+ },
+ "additionalProperties" : false
+ },
+ "ParseWAF" : {
+ "type" : "object",
+ "properties" : {
+ "Source" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ }
+ },
+ "additionalProperties" : false
+ },
+ "ParseRoute53" : {
+ "type" : "object",
+ "properties" : {
+ "Source" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ }
+ },
+ "additionalProperties" : false
+ },
+ "ParsePostgres" : {
+ "type" : "object",
+ "properties" : {
+ "Source" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ }
+ },
+ "additionalProperties" : false
+ },
+ "AddKeyEntry" : {
+ "type" : "object",
+ "properties" : {
+ "Key" : {
+ "$ref" : "#/definitions/NonEmptyAndMaxLengthString"
+ },
+ "Value" : {
+ "type" : "string",
+ "minLength" : 1,
+ "maxLength" : 256
+ },
+ "OverwriteIfExists" : {
+ "type" : "boolean"
+ }
+ },
+ "additionalProperties" : false,
+ "required" : [ "Key", "Value" ]
+ },
+ "CopyValueEntry" : {
+ "type" : "object",
+ "properties" : {
+ "Source" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ },
+ "Target" : {
+ "$ref" : "#/definitions/NonEmptyAndMaxLengthString"
+ },
+ "OverwriteIfExists" : {
+ "type" : "boolean"
+ }
+ },
+ "required" : [ "Source", "Target" ],
+ "additionalProperties" : false
+ },
+ "Column" : {
+ "$ref" : "#/definitions/NonEmptyAndMaxLengthString"
+ },
+ "WithKey" : {
+ "type" : "string",
+ "minLength" : 1,
+ "maxLength" : 128
+ },
+ "MatchPattern" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ },
+ "MoveKeyEntry" : {
+ "type" : "object",
+ "properties" : {
+ "Source" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ },
+ "Target" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ },
+ "OverwriteIfExists" : {
+ "type" : "boolean"
+ }
+ },
+ "required" : [ "Source", "Target" ],
+ "additionalProperties" : false
+ },
+ "RenameKeyEntry" : {
+ "type" : "object",
+ "properties" : {
+ "Key" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ },
+ "RenameTo" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ },
+ "OverwriteIfExists" : {
+ "type" : "boolean"
+ }
+ },
+ "required" : [ "Key", "RenameTo" ],
+ "additionalProperties" : false
+ },
+ "SplitStringEntry" : {
+ "type" : "object",
+ "properties" : {
+ "Source" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ },
+ "Delimiter" : {
+ "type" : "string",
+ "maxLength" : 1
+ }
+ },
+ "required" : [ "Source", "Delimiter" ],
+ "additionalProperties" : false
+ },
+ "SubstituteStringEntry" : {
+ "type" : "object",
+ "properties" : {
+ "Source" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ },
+ "From" : {
+ "$ref" : "#/definitions/NonEmptyAndMaxLengthString"
+ },
+ "To" : {
+ "$ref" : "#/definitions/NonEmptyAndMaxLengthString"
+ }
+ },
+ "required" : [ "Source", "From", "To" ],
+ "additionalProperties" : false
+ },
+ "TypeConverterEntry" : {
+ "type" : "object",
+ "properties" : {
+ "Key" : {
+ "$ref" : "#/definitions/NonEmptyString"
+ },
+ "Type" : {
+ "type" : "string",
+ "enum" : [ "boolean", "integer", "double", "string" ]
+ }
+ },
+ "required" : [ "Key", "Type" ],
+ "additionalProperties" : false
+ },
+ "NonEmptyAndMaxLengthString" : {
+ "type" : "string",
+ "maxLength" : 128,
+ "pattern" : "^.*[a-zA-Z0-9]+.*$"
+ },
+ "NonEmptyString" : {
+ "type" : "string",
+ "pattern" : "^.*[a-zA-Z0-9]+.*$"
+ },
+ "MaxLengthString" : {
+ "type" : "string",
+ "maxLength" : 128
+ }
+ },
+ "primaryIdentifier" : [ "/properties/LogGroupIdentifier" ],
+ "createOnlyProperties" : [ "/properties/LogGroupIdentifier" ],
+ "handlers" : {
+ "create" : {
+ "permissions" : [ "logs:PutTransformer", "logs:GetTransformer" ]
+ },
+ "read" : {
+ "permissions" : [ "logs:GetTransformer" ]
+ },
+ "update" : {
+ "permissions" : [ "logs:GetTransformer", "logs:PutTransformer" ]
+ },
+ "delete" : {
+ "permissions" : [ "logs:DeleteTransformer" ]
+ },
+ "list" : {
+ "permissions" : [ "logs:DescribeLogGroups", "logs:GetTransformer" ]
+ }
+ },
+ "tagging" : {
+ "taggable" : false,
+ "tagOnCreate" : false,
+ "tagUpdatable" : false,
+ "cloudFormationSystemTags" : false
+ }
+}
\ No newline at end of file
diff --git a/aws-cloudformation-schema/aws-networkmanager-directconnectgatewayattachment.json b/aws-cloudformation-schema/aws-networkmanager-directconnectgatewayattachment.json
new file mode 100644
index 0000000000..cdb1999140
--- /dev/null
+++ b/aws-cloudformation-schema/aws-networkmanager-directconnectgatewayattachment.json
@@ -0,0 +1,184 @@
+{
+ "typeName" : "AWS::NetworkManager::DirectConnectGatewayAttachment",
+ "description" : "AWS::NetworkManager::DirectConnectGatewayAttachment Resource Type",
+ "sourceUrl" : "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-networkmanager/aws-networkmanager-directconnectgatewayattachment",
+ "properties" : {
+ "CoreNetworkId" : {
+ "description" : "The ID of a core network for the Direct Connect Gateway attachment.",
+ "type" : "string"
+ },
+ "CoreNetworkArn" : {
+ "description" : "The ARN of a core network for the Direct Connect Gateway attachment.",
+ "type" : "string"
+ },
+ "AttachmentId" : {
+ "description" : "Id of the attachment.",
+ "type" : "string"
+ },
+ "OwnerAccountId" : {
+ "description" : "Owner account of the attachment.",
+ "type" : "string"
+ },
+ "AttachmentType" : {
+ "description" : "Attachment type.",
+ "type" : "string"
+ },
+ "State" : {
+ "description" : "State of the attachment.",
+ "type" : "string"
+ },
+ "EdgeLocations" : {
+ "description" : "The Regions where the edges are located.",
+ "type" : "array",
+ "insertionOrder" : false,
+ "items" : {
+ "type" : "string"
+ }
+ },
+ "DirectConnectGatewayArn" : {
+ "description" : "The ARN of the Direct Connect Gateway.",
+ "type" : "string"
+ },
+ "ResourceArn" : {
+ "description" : "The ARN of the Resource.",
+ "type" : "string"
+ },
+ "AttachmentPolicyRuleNumber" : {
+ "description" : "The policy rule number associated with the attachment.",
+ "type" : "integer"
+ },
+ "SegmentName" : {
+ "description" : "The name of the segment attachment..",
+ "type" : "string"
+ },
+ "ProposedSegmentChange" : {
+ "description" : "The attachment to move from one segment to another.",
+ "$ref" : "#/definitions/ProposedSegmentChange"
+ },
+ "NetworkFunctionGroupName" : {
+ "description" : "The name of the network function group attachment.",
+ "type" : "string"
+ },
+ "ProposedNetworkFunctionGroupChange" : {
+ "description" : "The attachment to move from one network function group to another.",
+ "$ref" : "#/definitions/ProposedNetworkFunctionGroupChange"
+ },
+ "Tags" : {
+ "description" : "Tags for the attachment.",
+ "type" : "array",
+ "uniqueItems" : true,
+ "insertionOrder" : false,
+ "items" : {
+ "$ref" : "#/definitions/Tag"
+ }
+ },
+ "CreatedAt" : {
+ "description" : "Creation time of the attachment.",
+ "type" : "string"
+ },
+ "UpdatedAt" : {
+ "description" : "Last update time of the attachment.",
+ "type" : "string"
+ }
+ },
+ "definitions" : {
+ "Tag" : {
+ "description" : "A key-value pair to associate with a resource.",
+ "type" : "object",
+ "properties" : {
+ "Key" : {
+ "type" : "string",
+ "description" : "The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."
+ },
+ "Value" : {
+ "type" : "string",
+ "description" : "The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."
+ }
+ },
+ "required" : [ "Key", "Value" ],
+ "additionalProperties" : false
+ },
+ "ProposedSegmentChange" : {
+ "description" : "The attachment to move from one segment to another.",
+ "type" : "object",
+ "properties" : {
+ "Tags" : {
+ "description" : "The key-value tags that changed for the segment.",
+ "type" : "array",
+ "uniqueItems" : true,
+ "insertionOrder" : false,
+ "items" : {
+ "$ref" : "#/definitions/Tag"
+ }
+ },
+ "AttachmentPolicyRuleNumber" : {
+ "description" : "The rule number in the policy document that applies to this change.",
+ "type" : "integer"
+ },
+ "SegmentName" : {
+ "description" : "The name of the segment to change.",
+ "type" : "string"
+ }
+ },
+ "additionalProperties" : false
+ },
+ "ProposedNetworkFunctionGroupChange" : {
+ "description" : "The attachment to move from one network function group to another.",
+ "type" : "object",
+ "properties" : {
+ "Tags" : {
+ "description" : "The key-value tags that changed for the network function group.",
+ "type" : "array",
+ "uniqueItems" : true,
+ "insertionOrder" : false,
+ "items" : {
+ "$ref" : "#/definitions/Tag"
+ }
+ },
+ "AttachmentPolicyRuleNumber" : {
+ "description" : "The rule number in the policy document that applies to this change.",
+ "type" : "integer"
+ },
+ "NetworkFunctionGroupName" : {
+ "description" : "The name of the network function group to change.",
+ "type" : "string"
+ }
+ },
+ "additionalProperties" : false
+ }
+ },
+ "tagging" : {
+ "taggable" : true,
+ "tagOnCreate" : true,
+ "tagUpdatable" : true,
+ "cloudFormationSystemTags" : false,
+ "tagProperty" : "/properties/Tags",
+ "permissions" : [ "networkmanager:TagResource", "networkmanager:UntagResource", "networkmanager:ListTagsForResource" ]
+ },
+ "additionalProperties" : false,
+ "required" : [ "CoreNetworkId", "DirectConnectGatewayArn", "EdgeLocations" ],
+ "createOnlyProperties" : [ "/properties/CoreNetworkId", "/properties/DirectConnectGatewayArn" ],
+ "readOnlyProperties" : [ "/properties/CoreNetworkArn", "/properties/CreatedAt", "/properties/UpdatedAt", "/properties/AttachmentType", "/properties/State", "/properties/AttachmentId", "/properties/OwnerAccountId", "/properties/AttachmentPolicyRuleNumber", "/properties/SegmentName", "/properties/NetworkFunctionGroupName", "/properties/ResourceArn" ],
+ "primaryIdentifier" : [ "/properties/AttachmentId" ],
+ "additionalIdentifiers" : [ [ "/properties/CoreNetworkId", "/properties/DirectConnectGatewayArn" ] ],
+ "handlers" : {
+ "create" : {
+ "permissions" : [ "networkmanager:CreateDirectConnectGatewayAttachment", "networkmanager:GetDirectConnectGatewayAttachment", "networkmanager:TagResource", "ec2:DescribeRegions", "iam:CreateServiceLinkedRole" ],
+ "timeoutInMinutes" : 60
+ },
+ "read" : {
+ "permissions" : [ "networkmanager:GetDirectConnectGatewayAttachment" ]
+ },
+ "update" : {
+ "permissions" : [ "networkmanager:UpdateDirectConnectGatewayAttachment", "networkmanager:GetDirectConnectGatewayAttachment", "networkmanager:ListTagsForResource", "networkmanager:TagResource", "networkmanager:UntagResource", "ec2:DescribeRegions" ],
+ "timeoutInMinutes" : 60
+ },
+ "delete" : {
+ "permissions" : [ "networkmanager:DeleteAttachment", "networkmanager:GetDirectConnectGatewayAttachment", "networkmanager:UntagResource", "ec2:DescribeRegions" ],
+ "timeoutInMinutes" : 60
+ },
+ "list" : {
+ "permissions" : [ "networkmanager:ListAttachments" ]
+ }
+ }
+}
\ No newline at end of file
diff --git a/aws-cloudformation-schema/aws-networkmanager-transitgatewaypeering.json b/aws-cloudformation-schema/aws-networkmanager-transitgatewaypeering.json
index 04c93705af..406bd39858 100644
--- a/aws-cloudformation-schema/aws-networkmanager-transitgatewaypeering.json
+++ b/aws-cloudformation-schema/aws-networkmanager-transitgatewaypeering.json
@@ -98,7 +98,7 @@
"timeoutInMinutes" : 60
},
"read" : {
- "permissions" : [ "networkmanager:GetTransitGatewayPeering", "networkmanager:TagResource" ]
+ "permissions" : [ "networkmanager:GetTransitGatewayPeering" ]
},
"update" : {
"permissions" : [ "networkmanager:TagResource", "networkmanager:UntagResource", "networkmanager:ListTagsForResource", "networkmanager:GetTransitGatewayPeering", "ec2:DescribeRegions" ]
diff --git a/aws-cloudformation-schema/aws-oam-link.json b/aws-cloudformation-schema/aws-oam-link.json
index 9e25bf833a..89791ce659 100644
--- a/aws-cloudformation-schema/aws-oam-link.json
+++ b/aws-cloudformation-schema/aws-oam-link.json
@@ -92,13 +92,13 @@
"primaryIdentifier" : [ "/properties/Arn" ],
"handlers" : {
"create" : {
- "permissions" : [ "oam:CreateLink", "oam:GetLink", "cloudwatch:Link", "logs:Link", "xray:Link", "applicationinsights:Link", "internetmonitor:Link" ]
+ "permissions" : [ "oam:CreateLink", "oam:GetLink", "oam:TagResource", "oam:ListTagsForResource", "cloudwatch:Link", "logs:Link", "xray:Link", "applicationinsights:Link", "internetmonitor:Link" ]
},
"read" : {
- "permissions" : [ "oam:GetLink" ]
+ "permissions" : [ "oam:GetLink", "oam:ListTagsForResource" ]
},
"update" : {
- "permissions" : [ "oam:GetLink", "oam:UpdateLink", "cloudwatch:Link", "logs:Link", "xray:Link", "applicationinsights:Link", "internetmonitor:Link", "oam:TagResource", "oam:UntagResource" ]
+ "permissions" : [ "oam:GetLink", "oam:UpdateLink", "cloudwatch:Link", "logs:Link", "xray:Link", "applicationinsights:Link", "internetmonitor:Link", "oam:TagResource", "oam:UntagResource", "oam:ListTagsForResource" ]
},
"delete" : {
"permissions" : [ "oam:DeleteLink", "oam:GetLink" ]
diff --git a/aws-cloudformation-schema/aws-oam-sink.json b/aws-cloudformation-schema/aws-oam-sink.json
index ad8dd78707..3a0ef1228a 100644
--- a/aws-cloudformation-schema/aws-oam-sink.json
+++ b/aws-cloudformation-schema/aws-oam-sink.json
@@ -48,7 +48,7 @@
"primaryIdentifier" : [ "/properties/Arn" ],
"handlers" : {
"create" : {
- "permissions" : [ "oam:CreateSink", "oam:PutSinkPolicy", "oam:GetSinkPolicy", "oam:GetSink" ]
+ "permissions" : [ "oam:CreateSink", "oam:PutSinkPolicy", "oam:GetSinkPolicy", "oam:GetSink", "oam:TagResource", "oam:ListTagsForResource" ]
},
"delete" : {
"permissions" : [ "oam:DeleteSink", "oam:GetSinkPolicy", "oam:GetSink" ]
@@ -57,10 +57,10 @@
"permissions" : [ "oam:ListSinks" ]
},
"read" : {
- "permissions" : [ "oam:GetSinkPolicy", "oam:GetSink" ]
+ "permissions" : [ "oam:GetSinkPolicy", "oam:GetSink", "oam:ListTagsForResource" ]
},
"update" : {
- "permissions" : [ "oam:PutSinkPolicy", "oam:GetSinkPolicy", "oam:GetSink", "oam:TagResource", "oam:UntagResource" ]
+ "permissions" : [ "oam:PutSinkPolicy", "oam:GetSinkPolicy", "oam:GetSink", "oam:TagResource", "oam:UntagResource", "oam:ListTagsForResource" ]
}
}
}
\ No newline at end of file
diff --git a/aws-cloudformation-schema/aws-organizations-policy.json b/aws-cloudformation-schema/aws-organizations-policy.json
index 08a7b220fd..3d9ce54dbe 100644
--- a/aws-cloudformation-schema/aws-organizations-policy.json
+++ b/aws-cloudformation-schema/aws-organizations-policy.json
@@ -11,9 +11,9 @@
"maxLength" : 128
},
"Type" : {
- "description" : "The type of policy to create. You can specify one of the following values: AISERVICES_OPT_OUT_POLICY, BACKUP_POLICY, SERVICE_CONTROL_POLICY, TAG_POLICY, CHATBOT_POLICY, RESOURCE_CONTROL_POLICY",
+ "description" : "The type of policy to create. You can specify one of the following values: AISERVICES_OPT_OUT_POLICY, BACKUP_POLICY, SERVICE_CONTROL_POLICY, TAG_POLICY, CHATBOT_POLICY, RESOURCE_CONTROL_POLICY,DECLARATIVE_POLICY_EC2",
"type" : "string",
- "enum" : [ "SERVICE_CONTROL_POLICY", "AISERVICES_OPT_OUT_POLICY", "BACKUP_POLICY", "TAG_POLICY", "CHATBOT_POLICY", "RESOURCE_CONTROL_POLICY" ]
+ "enum" : [ "SERVICE_CONTROL_POLICY", "AISERVICES_OPT_OUT_POLICY", "BACKUP_POLICY", "TAG_POLICY", "CHATBOT_POLICY", "RESOURCE_CONTROL_POLICY", "DECLARATIVE_POLICY_EC2" ]
},
"Content" : {
"description" : "The Policy text content. For AWS CloudFormation templates formatted in YAML, you can provide the policy in JSON or YAML format. AWS CloudFormation always converts a YAML policy to JSON format before submitting it.",
diff --git a/aws-cloudformation-schema/aws-ram-resourceshare.json b/aws-cloudformation-schema/aws-ram-resourceshare.json
index 1573d61329..ccc832c790 100644
--- a/aws-cloudformation-schema/aws-ram-resourceshare.json
+++ b/aws-cloudformation-schema/aws-ram-resourceshare.json
@@ -1,72 +1,107 @@
{
"typeName" : "AWS::RAM::ResourceShare",
- "description" : "Resource Type definition for AWS::RAM::ResourceShare",
- "additionalProperties" : false,
+ "description" : "Resource type definition for AWS::RAM::ResourceShare",
+ "sourceUrl" : "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ram",
+ "definitions" : {
+ "Tag" : {
+ "description" : "A key-value pair to associate with a resource.",
+ "type" : "object",
+ "properties" : {
+ "Key" : {
+ "type" : "string",
+ "description" : "The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."
+ },
+ "Value" : {
+ "type" : "string",
+ "description" : "The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."
+ }
+ },
+ "required" : [ "Key", "Value" ],
+ "additionalProperties" : false
+ }
+ },
"properties" : {
+ "AllowExternalPrincipals" : {
+ "description" : "Specifies whether principals outside your organization in AWS Organizations can be associated with a resource share. A value of `true` lets you share with individual AWS accounts that are not in your organization. A value of `false` only has meaning if your account is a member of an AWS Organization. The default value is `true`.",
+ "type" : "boolean"
+ },
+ "Arn" : {
+ "type" : "string"
+ },
+ "Name" : {
+ "description" : "Specifies the name of the resource share.",
+ "type" : "string"
+ },
"PermissionArns" : {
+ "description" : "Specifies the [Amazon Resource Names (ARNs)](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) of the AWS RAM permission to associate with the resource share. If you do not specify an ARN for the permission, AWS RAM automatically attaches the default version of the permission for each resource type. You can associate only one permission with each resource type included in the resource share.",
"type" : "array",
- "uniqueItems" : false,
+ "insertionOrder" : false,
"items" : {
"type" : "string"
}
},
"Principals" : {
+ "description" : "Specifies the principals to associate with the resource share. The possible values are:\n\n- An AWS account ID\n\n- An Amazon Resource Name (ARN) of an organization in AWS Organizations\n\n- An ARN of an organizational unit (OU) in AWS Organizations\n\n- An ARN of an IAM role\n\n- An ARN of an IAM user",
"type" : "array",
- "uniqueItems" : false,
+ "insertionOrder" : false,
"items" : {
"type" : "string"
}
},
- "AllowExternalPrincipals" : {
- "type" : "boolean"
- },
- "Id" : {
- "type" : "string"
- },
- "Arn" : {
- "type" : "string"
- },
"ResourceArns" : {
+ "description" : "Specifies a list of one or more ARNs of the resources to associate with the resource share.",
"type" : "array",
- "uniqueItems" : false,
+ "insertionOrder" : false,
"items" : {
"type" : "string"
}
},
"Sources" : {
+ "description" : "Specifies from which source accounts the service principal has access to the resources in this resource share.",
"type" : "array",
- "uniqueItems" : false,
+ "insertionOrder" : false,
"items" : {
"type" : "string"
}
},
"Tags" : {
+ "description" : "Specifies one or more tags to attach to the resource share itself. It doesn't attach the tags to the resources associated with the resource share.",
"type" : "array",
- "uniqueItems" : false,
+ "uniqueItems" : true,
+ "insertionOrder" : false,
"items" : {
"$ref" : "#/definitions/Tag"
}
- },
- "Name" : {
- "type" : "string"
- }
- },
- "definitions" : {
- "Tag" : {
- "type" : "object",
- "additionalProperties" : false,
- "properties" : {
- "Value" : {
- "type" : "string"
- },
- "Key" : {
- "type" : "string"
- }
- },
- "required" : [ "Value", "Key" ]
}
},
+ "additionalProperties" : false,
"required" : [ "Name" ],
- "primaryIdentifier" : [ "/properties/Id" ],
- "readOnlyProperties" : [ "/properties/Id", "/properties/Arn" ]
+ "readOnlyProperties" : [ "/properties/Arn" ],
+ "writeOnlyProperties" : [ "/properties/PermissionArns", "/properties/Principals", "/properties/ResourceArns", "/properties/Sources" ],
+ "primaryIdentifier" : [ "/properties/Arn" ],
+ "tagging" : {
+ "taggable" : true,
+ "tagOnCreate" : true,
+ "tagUpdatable" : true,
+ "cloudFormationSystemTags" : false,
+ "tagProperty" : "/properties/Tags",
+ "permissions" : [ "ram:TagResource", "ram:UntagResource" ]
+ },
+ "handlers" : {
+ "create" : {
+ "permissions" : [ "ram:CreateResourceShare", "ram:TagResource" ]
+ },
+ "read" : {
+ "permissions" : [ "ram:GetResourceShares" ]
+ },
+ "update" : {
+ "permissions" : [ "ram:GetPermission", "ram:GetResourceShares", "ram:GetResourceShareAssociations", "ram:ListResourceSharePermissions", "ram:UpdateResourceShare", "ram:AssociateResourceSharePermission", "ram:AssociateResourceShare", "ram:DisassociateResourceShare", "ram:UntagResource", "ram:TagResource" ]
+ },
+ "delete" : {
+ "permissions" : [ "ram:DeleteResourceShare", "ram:GetResourceShares" ]
+ },
+ "list" : {
+ "permissions" : [ "ram:GetResourceShares" ]
+ }
+ }
}
\ No newline at end of file
diff --git a/aws-cloudformation-schema/aws-rds-customdbengineversion.json b/aws-cloudformation-schema/aws-rds-customdbengineversion.json
index b22d4b2030..ee854e08d1 100644
--- a/aws-cloudformation-schema/aws-rds-customdbengineversion.json
+++ b/aws-cloudformation-schema/aws-rds-customdbengineversion.json
@@ -1,24 +1,29 @@
{
"typeName" : "AWS::RDS::CustomDBEngineVersion",
- "description" : "The AWS::RDS::CustomDBEngineVersion resource creates an Amazon RDS custom DB engine version.",
+ "description" : "Creates a custom DB engine version (CEV).",
"sourceUrl" : "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git",
"tagging" : {
- "taggable" : true
+ "taggable" : true,
+ "tagOnCreate" : true,
+ "tagUpdatable" : true,
+ "cloudFormationSystemTags" : true,
+ "tagProperty" : "/properties/Tags",
+ "permissions" : [ "rds:AddTagsToResource", "rds:RemoveTagsFromResource" ]
},
"definitions" : {
"Tag" : {
- "description" : "A key-value pair to associate with a resource.",
+ "description" : "Metadata assigned to an Amazon RDS resource consisting of a key-value pair.\n For more information, see [Tagging Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide* or [Tagging Amazon Aurora and Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_Tagging.html) in the *Amazon Aurora User Guide*.",
"type" : "object",
"properties" : {
"Key" : {
"type" : "string",
- "description" : "The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.",
+ "description" : "A key is the required name of the tag. The string value can be from 1 to 128 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\").",
"minLength" : 1,
"maxLength" : 128
},
"Value" : {
"type" : "string",
- "description" : "The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.",
+ "description" : "A value is the optional value of the tag. The string value can be from 1 to 256 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\").",
"minLength" : 0,
"maxLength" : 256
}
@@ -30,13 +35,13 @@
"properties" : {
"DatabaseInstallationFilesS3BucketName" : {
"type" : "string",
- "description" : "The name of an Amazon S3 bucket that contains database installation files for your CEV. For example, a valid bucket name is `my-custom-installation-files`.",
+ "description" : "The name of an Amazon S3 bucket that contains database installation files for your CEV. For example, a valid bucket name is ``my-custom-installation-files``.",
"minLength" : 3,
"maxLength" : 63
},
"DatabaseInstallationFilesS3Prefix" : {
"type" : "string",
- "description" : "The Amazon S3 directory that contains the database installation files for your CEV. For example, a valid bucket name is `123456789012/cev1`. If this setting isn't specified, no prefix is assumed.",
+ "description" : "The Amazon S3 directory that contains the database installation files for your CEV. For example, a valid bucket name is ``123456789012/cev1``. If this setting isn't specified, no prefix is assumed.",
"minLength" : 1,
"maxLength" : 255
},
@@ -48,52 +53,52 @@
},
"Engine" : {
"type" : "string",
- "description" : "The database engine to use for your custom engine version (CEV). The only supported value is `custom-oracle-ee`.",
+ "description" : "The database engine to use for your custom engine version (CEV).\n Valid values:\n + ``custom-oracle-ee`` \n + ``custom-oracle-ee-cdb``",
"minLength" : 1,
"maxLength" : 35
},
"EngineVersion" : {
"type" : "string",
- "description" : "The name of your CEV. The name format is 19.customized_string . For example, a valid name is 19.my_cev1. This setting is required for RDS Custom for Oracle, but optional for Amazon RDS. The combination of Engine and EngineVersion is unique per customer per Region.",
+ "description" : "The name of your CEV. The name format is ``major version.customized_string``. For example, a valid CEV name is ``19.my_cev1``. This setting is required for RDS Custom for Oracle, but optional for Amazon RDS. The combination of ``Engine`` and ``EngineVersion`` is unique per customer per Region.\n *Constraints:* Minimum length is 1. Maximum length is 60.\n *Pattern:* ``^[a-z0-9_.-]{1,60$``}",
"minLength" : 1,
"maxLength" : 60
},
"KMSKeyId" : {
"type" : "string",
- "description" : "The AWS KMS key identifier for an encrypted CEV. A symmetric KMS key is required for RDS Custom, but optional for Amazon RDS.",
+ "description" : "The AWS KMS key identifier for an encrypted CEV. A symmetric encryption KMS key is required for RDS Custom, but optional for Amazon RDS.\n If you have an existing symmetric encryption KMS key in your account, you can use it with RDS Custom. No further action is necessary. If you don't already have a symmetric encryption KMS key in your account, follow the instructions in [Creating a symmetric encryption KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/create-keys.html#create-symmetric-cmk) in the *Key Management Service Developer Guide*.\n You can choose the same symmetric encryption key when you create a CEV and a DB instance, or choose different keys.",
"minLength" : 1,
"maxLength" : 2048
},
"Manifest" : {
"type" : "string",
- "description" : "The CEV manifest, which is a JSON document that describes the installation .zip files stored in Amazon S3. Specify the name/value pairs in a file or a quoted string. RDS Custom applies the patches in the order in which they are listed.",
+ "description" : "The CEV manifest, which is a JSON document that describes the installation .zip files stored in Amazon S3. Specify the name/value pairs in a file or a quoted string. RDS Custom applies the patches in the order in which they are listed.\n The following JSON fields are valid:\n + MediaImportTemplateVersion Version of the CEV manifest. The date is in the format YYYY-MM-DD. + databaseInstallationFileNames Ordered list of installation files for the CEV. + opatchFileNames Ordered list of OPatch installers used for the Oracle DB engine. + psuRuPatchFileNames The PSU and RU patches for this CEV. + OtherPatchFileNames The patches that are not in the list of PSU and RU patches. Amazon RDS applies these patches after applying the PSU and RU patches. \n For more information, see [Creating the CEV manifest](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-cev.html#custom-cev.preparing.manifest) in the *Amazon RDS User Guide*.",
"minLength" : 1,
"maxLength" : 51000
},
"DBEngineVersionArn" : {
"type" : "string",
- "description" : "The ARN of the custom engine version."
+ "description" : ""
},
"SourceCustomDbEngineVersionIdentifier" : {
"type" : "string",
- "description" : "The identifier of the source custom engine version."
+ "description" : "The ARN of a CEV to use as a source for creating a new CEV. You can specify a different Amazon Machine Imagine (AMI) by using either ``Source`` or ``UseAwsProvidedLatestImage``. You can't specify a different JSON manifest when you specify ``SourceCustomDbEngineVersionIdentifier``."
},
"UseAwsProvidedLatestImage" : {
"type" : "boolean",
- "description" : "A value that indicates whether AWS provided latest image is applied automatically to the Custom Engine Version. By default, AWS provided latest image is applied automatically. This value is only applied on create."
+ "description" : "Specifies whether to use the latest service-provided Amazon Machine Image (AMI) for the CEV. If you specify ``UseAwsProvidedLatestImage``, you can't also specify ``ImageId``."
},
"ImageId" : {
"type" : "string",
- "description" : "The identifier of Amazon Machine Image (AMI) used for CEV."
+ "description" : "A value that indicates the ID of the AMI."
},
"Status" : {
"type" : "string",
- "description" : "The availability status to be assigned to the CEV.",
+ "description" : "A value that indicates the status of a custom engine version (CEV).",
"default" : "available",
"enum" : [ "available", "inactive", "inactive-except-restore" ]
},
"Tags" : {
- "description" : "An array of key-value pairs to apply to this resource.",
+ "description" : "A list of tags. For more information, see [Tagging Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide.*",
"type" : "array",
"uniqueItems" : false,
"insertionOrder" : false,
@@ -106,7 +111,7 @@
"propertyTransform" : {
"/properties/Engine" : "$lowercase(Engine)",
"/properties/EngineVersion" : "$lowercase(EngineVersion)",
- "/properties/KMSKeyId" : "$join([\"arn:(aws)[-]{0,1}[a-z]{0,2}[-]{0,1}[a-z]{0,3}:kms:[a-z]{2}[-]{1}[a-z]{3,10}[-]{0,1}[a-z]{0,10}[-]{1}[1-3]{1}:[0-9]{12}[:]{1}key\\/\", KMSKeyId])"
+ "/properties/KMSKeyId" : "$join([\"arn:.+?:kms:.+?:.+?:key\\/\", KMSKeyId])"
},
"required" : [ "Engine", "EngineVersion" ],
"writeOnlyProperties" : [ "/properties/Manifest", "/properties/SourceCustomDbEngineVersionIdentifier", "/properties/UseAwsProvidedLatestImage" ],
diff --git a/aws-cloudformation-schema/aws-redshiftserverless-workgroup.json b/aws-cloudformation-schema/aws-redshiftserverless-workgroup.json
index d96fd145a2..e0827d286e 100644
--- a/aws-cloudformation-schema/aws-redshiftserverless-workgroup.json
+++ b/aws-cloudformation-schema/aws-redshiftserverless-workgroup.json
@@ -56,6 +56,20 @@
},
"additionalProperties" : false
},
+ "PerformanceTarget" : {
+ "type" : "object",
+ "properties" : {
+ "Status" : {
+ "$ref" : "#/definitions/PerformanceTargetStatus"
+ },
+ "Level" : {
+ "type" : "integer",
+ "minimum" : 1,
+ "maximum" : 100
+ }
+ },
+ "additionalProperties" : false
+ },
"VpcEndpoint" : {
"type" : "object",
"properties" : {
@@ -144,6 +158,9 @@
},
"CreationDate" : {
"type" : "string"
+ },
+ "PricePerformanceTarget" : {
+ "$ref" : "#/definitions/PerformanceTarget"
}
},
"additionalProperties" : false
@@ -168,6 +185,10 @@
"WorkgroupStatus" : {
"type" : "string",
"enum" : [ "CREATING", "AVAILABLE", "MODIFYING", "DELETING" ]
+ },
+ "PerformanceTargetStatus" : {
+ "type" : "string",
+ "enum" : [ "ENABLED", "DISABLED" ]
}
},
"properties" : {
@@ -243,6 +264,11 @@
"description" : "The custom port to use when connecting to a workgroup. Valid port ranges are 5431-5455 and 8191-8215. The default is 5439.",
"type" : "integer"
},
+ "PricePerformanceTarget" : {
+ "description" : "A property that represents the price performance target settings for the workgroup.",
+ "type" : "object",
+ "$ref" : "#/definitions/PerformanceTarget"
+ },
"Tags" : {
"description" : "The map of the key-value pairs used to tag the workgroup.",
"type" : "array",
diff --git a/aws-cloudformation-schema/aws-s3-bucket.json b/aws-cloudformation-schema/aws-s3-bucket.json
index d5b6c83cdc..092be00afc 100644
--- a/aws-cloudformation-schema/aws-s3-bucket.json
+++ b/aws-cloudformation-schema/aws-s3-bucket.json
@@ -68,6 +68,10 @@
"uniqueItems" : true,
"insertionOrder" : true
},
+ "MetadataTableConfiguration" : {
+ "$ref" : "#/definitions/MetadataTableConfiguration",
+ "description" : ""
+ },
"NotificationConfiguration" : {
"$ref" : "#/definitions/NotificationConfiguration",
"description" : "Configuration that defines how Amazon S3 handles bucket notifications."
@@ -1404,6 +1408,65 @@
"Arn" : {
"description" : "the Amazon Resource Name (ARN) of the specified bucket.",
"type" : "string"
+ },
+ "MetadataTableConfiguration" : {
+ "type" : "object",
+ "additionalProperties" : false,
+ "properties" : {
+ "S3TablesDestination" : {
+ "$ref" : "#/definitions/S3TablesDestination"
+ },
+ "Status" : {
+ "type" : "string",
+ "description" : "Returns the Status value of the GetBucketMetadataTableConfigurationResult response. This value indicates the status of the metadata table. The status values are: CREATING - The metadata table is in the process of being created in the specified table bucket. ACTIVE - The metadata table has been created successfully and records are being delivered to the table. FAILED - Amazon S3 is unable to create the metadata table, or Amazon S3 is unable to deliver records."
+ },
+ "Error" : {
+ "$ref" : "#/definitions/MetadataTableError",
+ "description" : "Returns the Error value of the GetBucketMetadataTableConfiguration response."
+ }
+ },
+ "required" : [ "S3TablesDestination" ],
+ "description" : ""
+ },
+ "S3TablesDestination" : {
+ "type" : "object",
+ "additionalProperties" : false,
+ "properties" : {
+ "TableBucketArn" : {
+ "type" : "string",
+ "description" : "The Amazon Resource Name (ARN) for the table bucket that's specified as the destination in the metadata table configuration. The destination table bucket must be in the same Region and AWS account as the general purpose bucket."
+ },
+ "TableName" : {
+ "type" : "string",
+ "description" : "The name for the metadata table in your metadata table configuration. The specified metadata table name must be unique within the aws_s3_metadata namespace in the destination table bucket."
+ },
+ "TableNamespace" : {
+ "type" : "string",
+ "description" : "The table bucket namespace for the metadata table in your metadata table configuration. This value is always aws_s3_metadata."
+ },
+ "TableArn" : {
+ "type" : "string",
+ "description" : "The Amazon Resource Name (ARN) for the metadata table in the metadata table configuration. The specified metadata table name must be unique within the aws_s3_metadata namespace in the destination table bucket."
+ }
+ },
+ "required" : [ "TableBucketArn", "TableName" ],
+ "description" : ""
+ },
+ "MetadataTableError" : {
+ "type" : "object",
+ "additionalProperties" : false,
+ "properties" : {
+ "ErrorCode" : {
+ "type" : "string",
+ "description" : "If the CreateBucketMetadataTableConfiguration request succeeds, but S3 Metadata was unable to create the table, this structure contains the error code. The possible error codes and error messages are as follows: AccessDeniedCreatingResources - You don't have sufficient permissions to create the required resources. Make sure that you have s3tables:CreateNamespace, s3tables:CreateTable, s3tables:GetTable and s3tables:PutTablePolicy permissions, and then try again. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration. AccessDeniedWritingToTable - Unable to write to the metadata table because of missing resource permissions. To fix the resource policy, Amazon S3 needs to create a new metadata table. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration. DestinationTableNotFound - The destination table doesn't exist. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration. ServerInternalError - An internal error has occurred. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration. TableAlreadyExists - The table that you specified already exists in the table bucket's namespace. Specify a different table name. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration. TableBucketNotFound - The table bucket that you specified doesn't exist in this AWS Region and account. Create or choose a different table bucket. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration."
+ },
+ "ErrorMessage" : {
+ "type" : "string",
+ "description" : "If the CreateBucketMetadataTableConfiguration request succeeds, but S3 Metadata was unable to create the table, this structure contains the error code. The possible error codes and error messages are as follows: AccessDeniedCreatingResources - You don't have sufficient permissions to create the required resources. Make sure that you have s3tables:CreateNamespace, s3tables:CreateTable, s3tables:GetTable and s3tables:PutTablePolicy permissions, and then try again. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration. AccessDeniedWritingToTable - Unable to write to the metadata table because of missing resource permissions. To fix the resource policy, Amazon S3 needs to create a new metadata table. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration. DestinationTableNotFound - The destination table doesn't exist. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration. ServerInternalError - An internal error has occurred. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration. TableAlreadyExists - The table that you specified already exists in the table bucket's namespace. Specify a different table name. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration. TableBucketNotFound - The table bucket that you specified doesn't exist in this AWS Region and account. Create or choose a different table bucket. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration."
+ }
+ },
+ "required" : [ "ErrorCode", "ErrorMessage" ],
+ "description" : ""
}
},
"tagging" : {
@@ -1424,10 +1487,10 @@
},
"handlers" : {
"create" : {
- "permissions" : [ "s3:CreateBucket", "s3:PutBucketTagging", "s3:PutAnalyticsConfiguration", "s3:PutEncryptionConfiguration", "s3:PutBucketCORS", "s3:PutInventoryConfiguration", "s3:PutLifecycleConfiguration", "s3:PutMetricsConfiguration", "s3:PutBucketNotification", "s3:PutBucketReplication", "s3:PutBucketWebsite", "s3:PutAccelerateConfiguration", "s3:PutBucketPublicAccessBlock", "s3:PutReplicationConfiguration", "s3:PutObjectAcl", "s3:PutBucketObjectLockConfiguration", "s3:GetBucketAcl", "s3:ListBucket", "iam:PassRole", "s3:DeleteObject", "s3:PutBucketLogging", "s3:PutBucketVersioning", "s3:PutObjectLockConfiguration", "s3:PutBucketOwnershipControls", "s3:PutIntelligentTieringConfiguration" ]
+ "permissions" : [ "s3:CreateBucket", "s3:PutBucketTagging", "s3:PutAnalyticsConfiguration", "s3:PutEncryptionConfiguration", "s3:PutBucketCORS", "s3:PutInventoryConfiguration", "s3:PutLifecycleConfiguration", "s3:PutMetricsConfiguration", "s3:PutBucketNotification", "s3:PutBucketReplication", "s3:PutBucketWebsite", "s3:PutAccelerateConfiguration", "s3:PutBucketPublicAccessBlock", "s3:PutReplicationConfiguration", "s3:PutObjectAcl", "s3:PutBucketObjectLockConfiguration", "s3:GetBucketAcl", "s3:ListBucket", "iam:PassRole", "s3:DeleteObject", "s3:PutBucketLogging", "s3:PutBucketVersioning", "s3:PutObjectLockConfiguration", "s3:PutBucketOwnershipControls", "s3:PutIntelligentTieringConfiguration", "s3:CreateBucketMetadataTableConfiguration" ]
},
"read" : {
- "permissions" : [ "s3:GetAccelerateConfiguration", "s3:GetLifecycleConfiguration", "s3:GetBucketPublicAccessBlock", "s3:GetAnalyticsConfiguration", "s3:GetBucketCORS", "s3:GetEncryptionConfiguration", "s3:GetInventoryConfiguration", "s3:GetBucketLogging", "s3:GetMetricsConfiguration", "s3:GetBucketNotification", "s3:GetBucketVersioning", "s3:GetReplicationConfiguration", "S3:GetBucketWebsite", "s3:GetBucketPublicAccessBlock", "s3:GetBucketObjectLockConfiguration", "s3:GetBucketTagging", "s3:GetBucketOwnershipControls", "s3:GetIntelligentTieringConfiguration", "s3:ListBucket" ]
+ "permissions" : [ "s3:GetAccelerateConfiguration", "s3:GetLifecycleConfiguration", "s3:GetBucketPublicAccessBlock", "s3:GetAnalyticsConfiguration", "s3:GetBucketCORS", "s3:GetEncryptionConfiguration", "s3:GetInventoryConfiguration", "s3:GetBucketLogging", "s3:GetMetricsConfiguration", "s3:GetBucketNotification", "s3:GetBucketVersioning", "s3:GetReplicationConfiguration", "S3:GetBucketWebsite", "s3:GetBucketPublicAccessBlock", "s3:GetBucketObjectLockConfiguration", "s3:GetBucketTagging", "s3:GetBucketOwnershipControls", "s3:GetIntelligentTieringConfiguration", "s3:GetBucketMetadataTableConfiguration", "s3:ListBucket" ]
},
"update" : {
"permissions" : [ "s3:PutBucketAcl", "s3:PutBucketTagging", "s3:PutAnalyticsConfiguration", "s3:PutEncryptionConfiguration", "s3:PutBucketCORS", "s3:PutInventoryConfiguration", "s3:PutLifecycleConfiguration", "s3:PutMetricsConfiguration", "s3:PutBucketNotification", "s3:PutBucketReplication", "s3:PutBucketWebsite", "s3:PutAccelerateConfiguration", "s3:PutBucketPublicAccessBlock", "s3:PutReplicationConfiguration", "s3:PutBucketOwnershipControls", "s3:PutIntelligentTieringConfiguration", "s3:DeleteBucketWebsite", "s3:PutBucketLogging", "s3:PutBucketVersioning", "s3:PutObjectLockConfiguration", "s3:PutBucketObjectLockConfiguration", "s3:DeleteBucketAnalyticsConfiguration", "s3:DeleteBucketCors", "s3:DeleteBucketMetricsConfiguration", "s3:DeleteBucketEncryption", "s3:DeleteBucketLifecycle", "s3:DeleteBucketReplication", "iam:PassRole", "s3:ListBucket" ]
diff --git a/aws-cloudformation-schema/aws-s3express-directorybucket.json b/aws-cloudformation-schema/aws-s3express-directorybucket.json
index 9898ad586d..a3e633b46a 100644
--- a/aws-cloudformation-schema/aws-s3express-directorybucket.json
+++ b/aws-cloudformation-schema/aws-s3express-directorybucket.json
@@ -4,24 +4,24 @@
"additionalProperties" : false,
"properties" : {
"BucketName" : {
- "description" : "Specifies a name for the bucket. The bucket name must contain only lowercase letters, numbers, and hyphens (-). A directory bucket name must be unique in the chosen Availability Zone. The bucket name must also follow the format 'bucket_base_name--az_id--x-s3' (for example, 'DOC-EXAMPLE-BUCKET--usw2-az1--x-s3'). If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the bucket name.",
+ "description" : "Specifies a name for the bucket. The bucket name must contain only lowercase letters, numbers, and hyphens (-). A directory bucket name must be unique in the chosen Availability Zone or Local Zone. The bucket name must also follow the format 'bucket_base_name--zone_id--x-s3'. The zone_id can be the ID of an Availability Zone or a Local Zone. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the bucket name.",
"maxLength" : 63,
"pattern" : "^[a-z0-9][a-z0-9//.//-]*[a-z0-9]$",
"type" : "string"
},
"LocationName" : {
- "description" : "Specifies the AZ ID of the Availability Zone where the directory bucket will be created. An example AZ ID value is 'use1-az5'.",
+ "description" : "Specifies the Zone ID of the Availability Zone or Local Zone where the directory bucket will be created. An example Availability Zone ID value is 'use1-az5'.",
"type" : "string"
},
"AvailabilityZoneName" : {
- "description" : "Returns the code for the Availability Zone where the directory bucket was created.",
+ "description" : "Returns the code for the Availability Zone or Local Zone where the directory bucket was created. An example for the code of an Availability Zone is 'us-east-1f'.",
"examples" : [ "us-east-1f" ],
"type" : "string"
},
"DataRedundancy" : {
- "description" : "Specifies the number of Availability Zone that's used for redundancy for the bucket.",
+ "description" : "Specifies the number of Availability Zone or Local Zone that's used for redundancy for the bucket.",
"type" : "string",
- "enum" : [ "SingleAvailabilityZone" ]
+ "enum" : [ "SingleAvailabilityZone", "SingleLocalZone" ]
},
"Arn" : {
"$ref" : "#/definitions/Arn",
diff --git a/aws-cloudformation-schema/aws-s3tables-tablebucket.json b/aws-cloudformation-schema/aws-s3tables-tablebucket.json
new file mode 100644
index 0000000000..91d5d8912b
--- /dev/null
+++ b/aws-cloudformation-schema/aws-s3tables-tablebucket.json
@@ -0,0 +1,78 @@
+{
+ "typeName" : "AWS::S3Tables::TableBucket",
+ "description" : "Creates an Amazon S3 Tables table bucket in the same AWS Region where you create the AWS CloudFormation stack.",
+ "properties" : {
+ "TableBucketARN" : {
+ "$ref" : "#/definitions/TableBucketARN"
+ },
+ "TableBucketName" : {
+ "$ref" : "#/definitions/TableBucketName"
+ },
+ "UnreferencedFileRemoval" : {
+ "$ref" : "#/definitions/UnreferencedFileRemoval"
+ }
+ },
+ "definitions" : {
+ "TableBucketARN" : {
+ "description" : "The Amazon Resource Name (ARN) of the specified table bucket.",
+ "type" : "string",
+ "examples" : [ "arn:aws:s3tables:us-west-2:123456789012:bucket/mytablebucket" ]
+ },
+ "TableBucketName" : {
+ "description" : "A name for the table bucket.",
+ "type" : "string",
+ "minLength" : 3,
+ "maxLength" : 63
+ },
+ "UnreferencedFileRemoval" : {
+ "description" : "Settings governing the Unreferenced File Removal maintenance action. Unreferenced file removal identifies and deletes all objects that are not referenced by any table snapshots.",
+ "additionalProperties" : false,
+ "type" : "object",
+ "properties" : {
+ "Status" : {
+ "description" : "Indicates whether the Unreferenced File Removal maintenance action is enabled.",
+ "type" : "string",
+ "enum" : [ "Enabled", "Disabled" ]
+ },
+ "UnreferencedDays" : {
+ "description" : "For any object not referenced by your table and older than the UnreferencedDays property, S3 creates a delete marker and marks the object version as noncurrent.",
+ "type" : "integer",
+ "minimum" : 1
+ },
+ "NoncurrentDays" : {
+ "description" : "S3 permanently deletes noncurrent objects after the number of days specified by the NoncurrentDays property.",
+ "type" : "integer",
+ "minimum" : 1
+ }
+ }
+ }
+ },
+ "additionalProperties" : false,
+ "required" : [ "TableBucketName" ],
+ "createOnlyProperties" : [ "/properties/TableBucketName" ],
+ "readOnlyProperties" : [ "/properties/TableBucketARN" ],
+ "primaryIdentifier" : [ "/properties/TableBucketARN" ],
+ "tagging" : {
+ "taggable" : false,
+ "tagOnCreate" : false,
+ "tagUpdatable" : false,
+ "cloudFormationSystemTags" : false
+ },
+ "handlers" : {
+ "create" : {
+ "permissions" : [ "s3tables:CreateTableBucket", "s3tables:PutTableBucketMaintenanceConfiguration", "s3tables:GetTableBucket", "s3tables:GetTableBucketMaintenanceConfiguration" ]
+ },
+ "read" : {
+ "permissions" : [ "s3tables:GetTableBucket", "s3tables:GetTableBucketMaintenanceConfiguration" ]
+ },
+ "update" : {
+ "permissions" : [ "s3tables:PutTableBucketMaintenanceConfiguration", "s3tables:GetTableBucket", "s3tables:GetTableBucketMaintenanceConfiguration" ]
+ },
+ "delete" : {
+ "permissions" : [ "s3tables:DeleteTableBucket" ]
+ },
+ "list" : {
+ "permissions" : [ "s3tables:ListTableBuckets" ]
+ }
+ }
+}
\ No newline at end of file
diff --git a/aws-cloudformation-schema/aws-s3tables-tablebucketpolicy.json b/aws-cloudformation-schema/aws-s3tables-tablebucketpolicy.json
new file mode 100644
index 0000000000..426e203517
--- /dev/null
+++ b/aws-cloudformation-schema/aws-s3tables-tablebucketpolicy.json
@@ -0,0 +1,50 @@
+{
+ "typeName" : "AWS::S3Tables::TableBucketPolicy",
+ "description" : "Applies an IAM resource policy to a table bucket.",
+ "properties" : {
+ "ResourcePolicy" : {
+ "$ref" : "#/definitions/ResourcePolicy"
+ },
+ "TableBucketARN" : {
+ "$ref" : "#/definitions/TableBucketARN"
+ }
+ },
+ "definitions" : {
+ "ResourcePolicy" : {
+ "description" : "A policy document containing permissions to add to the specified table bucket. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM.",
+ "type" : [ "object", "string" ]
+ },
+ "TableBucketARN" : {
+ "description" : "The Amazon Resource Name (ARN) of the table bucket to which the policy applies.",
+ "type" : "string",
+ "examples" : [ "arn:aws:s3tables:us-west-2:123456789012:bucket/mytablebucket" ]
+ }
+ },
+ "additionalProperties" : false,
+ "required" : [ "ResourcePolicy", "TableBucketARN" ],
+ "createOnlyProperties" : [ "/properties/TableBucketARN" ],
+ "primaryIdentifier" : [ "/properties/TableBucketARN" ],
+ "tagging" : {
+ "taggable" : false,
+ "tagOnCreate" : false,
+ "tagUpdatable" : false,
+ "cloudFormationSystemTags" : false
+ },
+ "handlers" : {
+ "create" : {
+ "permissions" : [ "s3tables:GetTableBucket", "s3tables:GetTableBucketPolicy", "s3tables:PutTableBucketPolicy" ]
+ },
+ "read" : {
+ "permissions" : [ "s3tables:GetTableBucketPolicy" ]
+ },
+ "update" : {
+ "permissions" : [ "s3tables:GetTableBucketPolicy", "s3tables:PutTableBucketPolicy" ]
+ },
+ "delete" : {
+ "permissions" : [ "s3tables:GetTableBucketPolicy", "s3tables:DeleteTableBucketPolicy" ]
+ },
+ "list" : {
+ "permissions" : [ "s3tables:GetTableBucketPolicy", "s3tables:ListTableBuckets" ]
+ }
+ }
+}
\ No newline at end of file
diff --git a/meta/.botocore.version b/meta/.botocore.version
index a06af74a7a..804a975ceb 100644
--- a/meta/.botocore.version
+++ b/meta/.botocore.version
@@ -1 +1 @@
-1.35.76
+1.35.78
diff --git a/provider/cmd/pulumi-gen-aws-native/supported-types.txt b/provider/cmd/pulumi-gen-aws-native/supported-types.txt
index 742c2ccefe..2c0adbcc64 100644
--- a/provider/cmd/pulumi-gen-aws-native/supported-types.txt
+++ b/provider/cmd/pulumi-gen-aws-native/supported-types.txt
@@ -575,6 +575,7 @@ AWS::IoT::BillingGroup
AWS::IoT::CACertificate
AWS::IoT::Certificate
AWS::IoT::CertificateProvider
+AWS::IoT::Command
AWS::IoT::CustomMetric
AWS::IoT::Dimension
AWS::IoT::DomainConfiguration
@@ -842,6 +843,7 @@ AWS::QuickSight::Theme
AWS::QuickSight::Topic
AWS::QuickSight::VPCConnection
AWS::RAM::Permission
+AWS::RAM::ResourceShare
AWS::RDS::CustomDBEngineVersion
AWS::RDS::DBCluster
AWS::RDS::DBClusterParameterGroup
@@ -935,6 +937,8 @@ AWS::S3Outposts::AccessPoint
AWS::S3Outposts::Bucket
AWS::S3Outposts::BucketPolicy
AWS::S3Outposts::Endpoint
+AWS::S3Tables::TableBucket
+AWS::S3Tables::TableBucketPolicy
AWS::SES::ConfigurationSet
AWS::SES::ConfigurationSetEventDestination
AWS::SES::ContactList
diff --git a/provider/cmd/pulumi-resource-aws-native/metadata.json b/provider/cmd/pulumi-resource-aws-native/metadata.json
index f67966683e..405c050368 100644
--- a/provider/cmd/pulumi-resource-aws-native/metadata.json
+++ b/provider/cmd/pulumi-resource-aws-native/metadata.json
@@ -2262,10 +2262,6 @@
"$ref": "#/types/aws-native:apigateway:DomainNameV2EndpointConfiguration",
"description": "The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has."
},
- "managementPolicy": {
- "$ref": "pulumi.json#/Any",
- "description": "Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::DomainNameV2` for more information about the expected schema for this property."
- },
"policy": {
"$ref": "pulumi.json#/Any",
"description": "A stringified JSON policy document that applies to the `execute-api` service for this DomainName regardless of the caller and Method configuration. You can use `Fn::ToJsonString` to enter your `policy` . For more information, see [Fn::ToJsonString](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ToJsonString.html) .\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::DomainNameV2` for more information about the expected schema for this property."
@@ -2305,10 +2301,6 @@
"description": "The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has.",
"replaceOnChanges": true
},
- "managementPolicy": {
- "$ref": "pulumi.json#/Any",
- "description": "Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::DomainNameV2` for more information about the expected schema for this property."
- },
"policy": {
"$ref": "pulumi.json#/Any",
"description": "A stringified JSON policy document that applies to the `execute-api` service for this DomainName regardless of the caller and Method configuration. You can use `Fn::ToJsonString` to enter your `policy` . For more information, see [Fn::ToJsonString](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ToJsonString.html) .\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::DomainNameV2` for more information about the expected schema for this property."
@@ -20085,10 +20077,12 @@
"description": "An array of image files that you want to apply to roles like backgrounds, logos, and icons. Each object must also indicate whether it is for dark mode, light mode, or browser-adaptive mode."
},
"clientId": {
- "type": "string"
+ "type": "string",
+ "description": "The app client that's assigned to the branding style that you want more information about."
},
"returnMergedResources": {
- "type": "boolean"
+ "type": "boolean",
+ "description": "When `true` , returns values for branding options that are unchanged from Amazon Cognito defaults. When `false` or when you omit this parameter, returns only values that you customized in your branding style."
},
"settings": {
"$ref": "pulumi.json#/Any",
@@ -20096,7 +20090,7 @@
},
"useCognitoProvidedValues": {
"type": "boolean",
- "description": "When true, applies the default branding style options. This option reverts to a \"blank\" style that you can modify later in the branding designer."
+ "description": "When true, applies the default branding style options. This option reverts to default style options that are managed by Amazon Cognito. You can modify them later in the branding designer.\n\nWhen you specify `true` for this option, you must also omit values for `Settings` and `Assets` in the request."
},
"userPoolId": {
"type": "string",
@@ -20113,6 +20107,7 @@
},
"clientId": {
"type": "string",
+ "description": "The app client that's assigned to the branding style that you want more information about.",
"replaceOnChanges": true
},
"managedLoginBrandingId": {
@@ -20120,7 +20115,8 @@
"description": "The ID of the managed login branding style."
},
"returnMergedResources": {
- "type": "boolean"
+ "type": "boolean",
+ "description": "When `true` , returns values for branding options that are unchanged from Amazon Cognito defaults. When `false` or when you omit this parameter, returns only values that you customized in your branding style."
},
"settings": {
"$ref": "pulumi.json#/Any",
@@ -20128,7 +20124,7 @@
},
"useCognitoProvidedValues": {
"type": "boolean",
- "description": "When true, applies the default branding style options. This option reverts to a \"blank\" style that you can modify later in the branding designer."
+ "description": "When true, applies the default branding style options. This option reverts to default style options that are managed by Amazon Cognito. You can modify them later in the branding designer.\n\nWhen you specify `true` for this option, you must also omit values for `Settings` and `Assets` in the request."
},
"userPoolId": {
"type": "string",
@@ -20168,14 +20164,14 @@
"items": {
"type": "string"
},
- "description": "Attributes supported as an alias for this user pool. Possible values: *phone_number* , *email* , or *preferred_username* ."
+ "description": "Attributes supported as an alias for this user pool. Possible values: *phone_number* , *email* , or *preferred_username* . For more information about alias attributes, see [Customizing sign-in attributes](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html#user-pool-settings-aliases) ."
},
"autoVerifiedAttributes": {
"type": "array",
"items": {
"type": "string"
},
- "description": "The attributes to be auto-verified. Possible values: *email* , *phone_number* ."
+ "description": "The attributes that you want your user pool to automatically verify. Possible values: *email* , *phone_number* . For more information see [Verifying contact information at sign-up](https://docs.aws.amazon.com/cognito/latest/developerguide/signing-up-users-in-your-app.html#allowing-users-to-sign-up-and-confirm-themselves) ."
},
"deletionProtection": {
"type": "string",
@@ -20183,7 +20179,7 @@
},
"deviceConfiguration": {
"$ref": "#/types/aws-native:cognito:UserPoolDeviceConfiguration",
- "description": "The device-remembering configuration for a user pool. A null value indicates that you have deactivated device remembering in your user pool.\n\n\u003e When you provide a value for any `DeviceConfiguration` field, you activate the Amazon Cognito device-remembering feature."
+ "description": "The device-remembering configuration for a user pool. Device remembering or device tracking is a \"Remember me on this device\" option for user pools that perform authentication with the device key of a trusted device in the back end, instead of a user-provided MFA code. For more information about device authentication, see [Working with user devices in your user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-device-tracking.html) . A null value indicates that you have deactivated device remembering in your user pool.\n\n\u003e When you provide a value for any `DeviceConfiguration` field, you activate the Amazon Cognito device-remembering feature. For more infor"
},
"emailAuthenticationMessage": {
"type": "string"
@@ -20227,7 +20223,7 @@
"items": {
"$ref": "#/types/aws-native:cognito:UserPoolSchemaAttribute"
},
- "description": "An array of schema attributes for the new user pool. These attributes can be standard or custom attributes."
+ "description": "An array of attributes for the new user pool. You can add custom attributes and modify the properties of default attributes. The specifications in this parameter set the required attributes in your user pool. For more information, see [Working with user attributes](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html) ."
},
"smsAuthenticationMessage": {
"type": "string",
@@ -20235,7 +20231,7 @@
},
"smsConfiguration": {
"$ref": "#/types/aws-native:cognito:UserPoolSmsConfiguration",
- "description": "The SMS configuration with the settings that your Amazon Cognito user pool must use to send an SMS message from your AWS account through Amazon Simple Notification Service. To send SMS messages with Amazon SNS in the AWS Region that you want, the Amazon Cognito user pool uses an AWS Identity and Access Management (IAM) role in your AWS account ."
+ "description": "The SMS configuration with the settings that your Amazon Cognito user pool must use to send an SMS message from your AWS account through Amazon Simple Notification Service. To send SMS messages with Amazon SNS in the AWS Region that you want, the Amazon Cognito user pool uses an AWS Identity and Access Management (IAM) role in your AWS account . For more information see [SMS message settings](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-sms-settings.html) ."
},
"smsVerificationMessage": {
"type": "string",
@@ -20251,7 +20247,7 @@
},
"userPoolName": {
"type": "string",
- "description": "A string used to name the user pool."
+ "description": "A friendlhy name for your user pool."
},
"userPoolTags": {
"type": "object",
@@ -20273,17 +20269,19 @@
},
"usernameConfiguration": {
"$ref": "#/types/aws-native:cognito:UserPoolUsernameConfiguration",
- "description": "Case sensitivity on the username input for the selected sign-in option. When case sensitivity is set to `False` (case insensitive), users can sign in with any combination of capital and lowercase letters. For example, `username` , `USERNAME` , or `UserName` , or for email, `email@example.com` or `EMaiL@eXamplE.Com` . For most use cases, set case sensitivity to `False` (case insensitive) as a best practice. When usernames and email addresses are case insensitive, Amazon Cognito treats any variation in case as the same user, and prevents a case variation from being assigned to the same attribute for a different user.\n\nThis configuration is immutable after you set it. For more information, see [UsernameConfigurationType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UsernameConfigurationType.html) ."
+ "description": "Sets the case sensitivity option for sign-in usernames. When `CaseSensitive` is `false` (case insensitive), users can sign in with any combination of capital and lowercase letters. For example, `username` , `USERNAME` , or `UserName` , or for email, `email@example.com` or `EMaiL@eXamplE.Com` . For most use cases, set case sensitivity to `false` as a best practice. When usernames and email addresses are case insensitive, Amazon Cognito treats any variation in case as the same user, and prevents a case variation from being assigned to the same attribute for a different user.\n\nWhen `CaseSensitive` is `true` (case sensitive), Amazon Cognito interprets `USERNAME` and `UserName` as distinct users.\n\nThis configuration is immutable after you set it."
},
"verificationMessageTemplate": {
"$ref": "#/types/aws-native:cognito:UserPoolVerificationMessageTemplate",
"description": "The template for the verification message that your user pool delivers to users who set an email address or phone number attribute.\n\nSet the email message type that corresponds to your `DefaultEmailOption` selection. For `CONFIRM_WITH_LINK` , specify an `EmailMessageByLink` and leave `EmailMessage` blank. For `CONFIRM_WITH_CODE` , specify an `EmailMessage` and leave `EmailMessageByLink` blank. When you supply both parameters with either choice, Amazon Cognito returns an error."
},
"webAuthnRelyingPartyId": {
- "type": "string"
+ "type": "string",
+ "description": "Sets or displays the authentication domain, typically your user pool domain, that passkey providers must use as a relying party (RP) in their configuration.\n\nUnder the following conditions, the passkey relying party ID must be the fully-qualified domain name of your custom domain:\n\n- The user pool is configured for passkey authentication.\n- The user pool has a custom domain, whether or not it also has a prefix domain.\n- Your application performs authentication with managed login or the classic hosted UI."
},
"webAuthnUserVerification": {
- "type": "string"
+ "type": "string",
+ "description": "When `required` , users can only register and sign in users with passkeys that are capable of [user verification](https://docs.aws.amazon.com/https://www.w3.org/TR/webauthn-2/#enum-userVerificationRequirement) . When `preferred` , your user pool doesn't require the use of authenticators with user verification but encourages it."
}
},
"outputs": {
@@ -20300,7 +20298,7 @@
"items": {
"type": "string"
},
- "description": "Attributes supported as an alias for this user pool. Possible values: *phone_number* , *email* , or *preferred_username* ."
+ "description": "Attributes supported as an alias for this user pool. Possible values: *phone_number* , *email* , or *preferred_username* . For more information about alias attributes, see [Customizing sign-in attributes](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html#user-pool-settings-aliases) ."
},
"arn": {
"type": "string",
@@ -20311,7 +20309,7 @@
"items": {
"type": "string"
},
- "description": "The attributes to be auto-verified. Possible values: *email* , *phone_number* ."
+ "description": "The attributes that you want your user pool to automatically verify. Possible values: *email* , *phone_number* . For more information see [Verifying contact information at sign-up](https://docs.aws.amazon.com/cognito/latest/developerguide/signing-up-users-in-your-app.html#allowing-users-to-sign-up-and-confirm-themselves) ."
},
"deletionProtection": {
"type": "string",
@@ -20319,7 +20317,7 @@
},
"deviceConfiguration": {
"$ref": "#/types/aws-native:cognito:UserPoolDeviceConfiguration",
- "description": "The device-remembering configuration for a user pool. A null value indicates that you have deactivated device remembering in your user pool.\n\n\u003e When you provide a value for any `DeviceConfiguration` field, you activate the Amazon Cognito device-remembering feature."
+ "description": "The device-remembering configuration for a user pool. Device remembering or device tracking is a \"Remember me on this device\" option for user pools that perform authentication with the device key of a trusted device in the back end, instead of a user-provided MFA code. For more information about device authentication, see [Working with user devices in your user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-device-tracking.html) . A null value indicates that you have deactivated device remembering in your user pool.\n\n\u003e When you provide a value for any `DeviceConfiguration` field, you activate the Amazon Cognito device-remembering feature. For more infor"
},
"emailAuthenticationMessage": {
"type": "string"
@@ -20371,7 +20369,7 @@
"items": {
"$ref": "#/types/aws-native:cognito:UserPoolSchemaAttribute"
},
- "description": "An array of schema attributes for the new user pool. These attributes can be standard or custom attributes."
+ "description": "An array of attributes for the new user pool. You can add custom attributes and modify the properties of default attributes. The specifications in this parameter set the required attributes in your user pool. For more information, see [Working with user attributes](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html) ."
},
"smsAuthenticationMessage": {
"type": "string",
@@ -20379,7 +20377,7 @@
},
"smsConfiguration": {
"$ref": "#/types/aws-native:cognito:UserPoolSmsConfiguration",
- "description": "The SMS configuration with the settings that your Amazon Cognito user pool must use to send an SMS message from your AWS account through Amazon Simple Notification Service. To send SMS messages with Amazon SNS in the AWS Region that you want, the Amazon Cognito user pool uses an AWS Identity and Access Management (IAM) role in your AWS account ."
+ "description": "The SMS configuration with the settings that your Amazon Cognito user pool must use to send an SMS message from your AWS account through Amazon Simple Notification Service. To send SMS messages with Amazon SNS in the AWS Region that you want, the Amazon Cognito user pool uses an AWS Identity and Access Management (IAM) role in your AWS account . For more information see [SMS message settings](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-sms-settings.html) ."
},
"smsVerificationMessage": {
"type": "string",
@@ -20399,7 +20397,7 @@
},
"userPoolName": {
"type": "string",
- "description": "A string used to name the user pool."
+ "description": "A friendlhy name for your user pool."
},
"userPoolTags": {
"type": "object",
@@ -20421,17 +20419,19 @@
},
"usernameConfiguration": {
"$ref": "#/types/aws-native:cognito:UserPoolUsernameConfiguration",
- "description": "Case sensitivity on the username input for the selected sign-in option. When case sensitivity is set to `False` (case insensitive), users can sign in with any combination of capital and lowercase letters. For example, `username` , `USERNAME` , or `UserName` , or for email, `email@example.com` or `EMaiL@eXamplE.Com` . For most use cases, set case sensitivity to `False` (case insensitive) as a best practice. When usernames and email addresses are case insensitive, Amazon Cognito treats any variation in case as the same user, and prevents a case variation from being assigned to the same attribute for a different user.\n\nThis configuration is immutable after you set it. For more information, see [UsernameConfigurationType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UsernameConfigurationType.html) ."
+ "description": "Sets the case sensitivity option for sign-in usernames. When `CaseSensitive` is `false` (case insensitive), users can sign in with any combination of capital and lowercase letters. For example, `username` , `USERNAME` , or `UserName` , or for email, `email@example.com` or `EMaiL@eXamplE.Com` . For most use cases, set case sensitivity to `false` as a best practice. When usernames and email addresses are case insensitive, Amazon Cognito treats any variation in case as the same user, and prevents a case variation from being assigned to the same attribute for a different user.\n\nWhen `CaseSensitive` is `true` (case sensitive), Amazon Cognito interprets `USERNAME` and `UserName` as distinct users.\n\nThis configuration is immutable after you set it."
},
"verificationMessageTemplate": {
"$ref": "#/types/aws-native:cognito:UserPoolVerificationMessageTemplate",
"description": "The template for the verification message that your user pool delivers to users who set an email address or phone number attribute.\n\nSet the email message type that corresponds to your `DefaultEmailOption` selection. For `CONFIRM_WITH_LINK` , specify an `EmailMessageByLink` and leave `EmailMessage` blank. For `CONFIRM_WITH_CODE` , specify an `EmailMessage` and leave `EmailMessageByLink` blank. When you supply both parameters with either choice, Amazon Cognito returns an error."
},
"webAuthnRelyingPartyId": {
- "type": "string"
+ "type": "string",
+ "description": "Sets or displays the authentication domain, typically your user pool domain, that passkey providers must use as a relying party (RP) in their configuration.\n\nUnder the following conditions, the passkey relying party ID must be the fully-qualified domain name of your custom domain:\n\n- The user pool is configured for passkey authentication.\n- The user pool has a custom domain, whether or not it also has a prefix domain.\n- Your application performs authentication with managed login or the classic hosted UI."
},
"webAuthnUserVerification": {
- "type": "string"
+ "type": "string",
+ "description": "When `required` , users can only register and sign in users with passkeys that are capable of [user verification](https://docs.aws.amazon.com/https://www.w3.org/TR/webauthn-2/#enum-userVerificationRequirement) . When `preferred` , your user pool doesn't require the use of authenticators with user verification but encourages it."
}
},
"autoNamingSpec": {
@@ -20478,11 +20478,11 @@
"items": {
"type": "string"
},
- "description": "The allowed OAuth scopes. Possible values provided by OAuth are `phone` , `email` , `openid` , and `profile` . Possible values provided by AWS are `aws.cognito.signin.user.admin` . Custom scopes created in Resource Servers are also supported."
+ "description": "The OAuth 2.0 scopes that you want to permit your app client to authorize. Scopes govern access control to user pool self-service API operations, user data from the `userInfo` endpoint, and third-party APIs. Possible values provided by OAuth are `phone` , `email` , `openid` , and `profile` . Possible values provided by AWS are `aws.cognito.signin.user.admin` . Custom scopes created in Resource Servers are also supported."
},
"analyticsConfiguration": {
"$ref": "#/types/aws-native:cognito:UserPoolClientAnalyticsConfiguration",
- "description": "The user pool analytics configuration for collecting metrics and sending them to your Amazon Pinpoint campaign.\n\n\u003e In AWS Regions where Amazon Pinpoint isn't available, user pools only support sending events to Amazon Pinpoint projects in AWS Region us-east-1. In Regions where Amazon Pinpoint is available, user pools support sending events to Amazon Pinpoint projects within that same Region."
+ "description": "The user pool analytics configuration for collecting metrics and sending them to your Amazon Pinpoint campaign.\n\nIn AWS Regions where Amazon Pinpoint isn't available, user pools might not have access to analytics or might be configurable with campaigns in the US East (N. Virginia) Region. For more information, see [Using Amazon Pinpoint analytics](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-pinpoint-integration.html) ."
},
"authSessionValidity": {
"type": "integer",
@@ -20493,15 +20493,15 @@
"items": {
"type": "string"
},
- "description": "A list of allowed redirect (callback) URLs for the IdPs.\n\nA redirect URI must:\n\n- Be an absolute URI.\n- Be registered with the authorization server.\n- Not include a fragment component.\n\nSee [OAuth 2.0 - Redirection Endpoint](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6749#section-3.1.2) .\n\nAmazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.\n\nApp callback URLs such as myapp://example are also supported."
+ "description": "A list of allowed redirect (callback) URLs for the IdPs.\n\nA redirect URI must:\n\n- Be an absolute URI.\n- Be registered with the authorization server. Amazon Cognito doesn't accept authorization requests with `redirect_uri` values that aren't in the list of `CallbackURLs` that you provide in this parameter.\n- Not include a fragment component.\n\nSee [OAuth 2.0 - Redirection Endpoint](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6749#section-3.1.2) .\n\nAmazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.\n\nApp callback URLs such as myapp://example are also supported."
},
"clientName": {
"type": "string",
- "description": "The client name for the user pool client you would like to create."
+ "description": "A friendly name for the app client that you want to create."
},
"defaultRedirectUri": {
"type": "string",
- "description": "The default redirect URI. In app clients with one assigned IdP, replaces `redirect_uri` in authentication requests. Must be in the `CallbackURLs` list.\n\nA redirect URI must:\n\n- Be an absolute URI.\n- Be registered with the authorization server.\n- Not include a fragment component.\n\nFor more information, see [Default redirect URI](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-client-apps.html#cognito-user-pools-app-idp-settings-about) .\n\nAmazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.\n\nApp callback URLs such as myapp://example are also supported."
+ "description": "The default redirect URI. In app clients with one assigned IdP, replaces `redirect_uri` in authentication requests. Must be in the `CallbackURLs` list."
},
"enablePropagateAdditionalUserContextData": {
"type": "boolean",
@@ -20520,7 +20520,7 @@
},
"generateSecret": {
"type": "boolean",
- "description": "Boolean to specify whether you want to generate a secret for the user pool client being created."
+ "description": "When `true` , generates a client secret for the app client. Client secrets are used with server-side and machine-to-machine applications. For more information, see [App client types](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-client-apps.html#user-pool-settings-client-app-client-types) ."
},
"idTokenValidity": {
"type": "integer",
@@ -20531,7 +20531,7 @@
"items": {
"type": "string"
},
- "description": "A list of allowed logout URLs for the IdPs."
+ "description": "A list of allowed logout URLs for managed login authentication. For more information, see [Logout endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/logout-endpoint.html) ."
},
"preventUserExistenceErrors": {
"type": "string",
@@ -20553,15 +20553,15 @@
"items": {
"type": "string"
},
- "description": "A list of provider names for the identity providers (IdPs) that are supported on this client. The following are supported: `COGNITO` , `Facebook` , `Google` , `SignInWithApple` , and `LoginWithAmazon` . You can also specify the names that you configured for the SAML and OIDC IdPs in your user pool, for example `MySAMLIdP` or `MyOIDCIdP` .\n\nThis setting applies to providers that you can access with the [hosted UI and OAuth 2.0 authorization server](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-app-integration.html) . The removal of `COGNITO` from this list doesn't prevent authentication operations for local users with the user pools API in an AWS SDK. The only way to prevent API-based authentication is to block access with a [AWS WAF rule](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-waf.html) ."
+ "description": "A list of provider names for the identity providers (IdPs) that are supported on this client. The following are supported: `COGNITO` , `Facebook` , `Google` , `SignInWithApple` , and `LoginWithAmazon` . You can also specify the names that you configured for the SAML and OIDC IdPs in your user pool, for example `MySAMLIdP` or `MyOIDCIdP` .\n\nThis setting applies to providers that you can access with [managed login](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managed-login.html) . The removal of `COGNITO` from this list doesn't prevent authentication operations for local users with the user pools API in an AWS SDK. The only way to prevent API-based authentication is to block access with a [AWS WAF rule](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-waf.html) ."
},
"tokenValidityUnits": {
"$ref": "#/types/aws-native:cognito:UserPoolClientTokenValidityUnits",
- "description": "The units in which the validity times are represented. The default unit for RefreshToken is days, and default for ID and access tokens are hours."
+ "description": "The units that validity times are represented in. The default unit for refresh tokens is days, and the default for ID and access tokens are hours."
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool where you want to create a user pool client."
+ "description": "The ID of the user pool where you want to create an app client."
},
"writeAttributes": {
"type": "array",
@@ -20592,11 +20592,11 @@
"items": {
"type": "string"
},
- "description": "The allowed OAuth scopes. Possible values provided by OAuth are `phone` , `email` , `openid` , and `profile` . Possible values provided by AWS are `aws.cognito.signin.user.admin` . Custom scopes created in Resource Servers are also supported."
+ "description": "The OAuth 2.0 scopes that you want to permit your app client to authorize. Scopes govern access control to user pool self-service API operations, user data from the `userInfo` endpoint, and third-party APIs. Possible values provided by OAuth are `phone` , `email` , `openid` , and `profile` . Possible values provided by AWS are `aws.cognito.signin.user.admin` . Custom scopes created in Resource Servers are also supported."
},
"analyticsConfiguration": {
"$ref": "#/types/aws-native:cognito:UserPoolClientAnalyticsConfiguration",
- "description": "The user pool analytics configuration for collecting metrics and sending them to your Amazon Pinpoint campaign.\n\n\u003e In AWS Regions where Amazon Pinpoint isn't available, user pools only support sending events to Amazon Pinpoint projects in AWS Region us-east-1. In Regions where Amazon Pinpoint is available, user pools support sending events to Amazon Pinpoint projects within that same Region."
+ "description": "The user pool analytics configuration for collecting metrics and sending them to your Amazon Pinpoint campaign.\n\nIn AWS Regions where Amazon Pinpoint isn't available, user pools might not have access to analytics or might be configurable with campaigns in the US East (N. Virginia) Region. For more information, see [Using Amazon Pinpoint analytics](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-pinpoint-integration.html) ."
},
"authSessionValidity": {
"type": "integer",
@@ -20607,7 +20607,7 @@
"items": {
"type": "string"
},
- "description": "A list of allowed redirect (callback) URLs for the IdPs.\n\nA redirect URI must:\n\n- Be an absolute URI.\n- Be registered with the authorization server.\n- Not include a fragment component.\n\nSee [OAuth 2.0 - Redirection Endpoint](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6749#section-3.1.2) .\n\nAmazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.\n\nApp callback URLs such as myapp://example are also supported."
+ "description": "A list of allowed redirect (callback) URLs for the IdPs.\n\nA redirect URI must:\n\n- Be an absolute URI.\n- Be registered with the authorization server. Amazon Cognito doesn't accept authorization requests with `redirect_uri` values that aren't in the list of `CallbackURLs` that you provide in this parameter.\n- Not include a fragment component.\n\nSee [OAuth 2.0 - Redirection Endpoint](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6749#section-3.1.2) .\n\nAmazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.\n\nApp callback URLs such as myapp://example are also supported."
},
"clientId": {
"type": "string",
@@ -20615,14 +20615,14 @@
},
"clientName": {
"type": "string",
- "description": "The client name for the user pool client you would like to create."
+ "description": "A friendly name for the app client that you want to create."
},
"clientSecret": {
"type": "string"
},
"defaultRedirectUri": {
"type": "string",
- "description": "The default redirect URI. In app clients with one assigned IdP, replaces `redirect_uri` in authentication requests. Must be in the `CallbackURLs` list.\n\nA redirect URI must:\n\n- Be an absolute URI.\n- Be registered with the authorization server.\n- Not include a fragment component.\n\nFor more information, see [Default redirect URI](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-client-apps.html#cognito-user-pools-app-idp-settings-about) .\n\nAmazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.\n\nApp callback URLs such as myapp://example are also supported."
+ "description": "The default redirect URI. In app clients with one assigned IdP, replaces `redirect_uri` in authentication requests. Must be in the `CallbackURLs` list."
},
"enablePropagateAdditionalUserContextData": {
"type": "boolean",
@@ -20641,7 +20641,7 @@
},
"generateSecret": {
"type": "boolean",
- "description": "Boolean to specify whether you want to generate a secret for the user pool client being created.",
+ "description": "When `true` , generates a client secret for the app client. Client secrets are used with server-side and machine-to-machine applications. For more information, see [App client types](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-client-apps.html#user-pool-settings-client-app-client-types) .",
"replaceOnChanges": true
},
"idTokenValidity": {
@@ -20653,7 +20653,7 @@
"items": {
"type": "string"
},
- "description": "A list of allowed logout URLs for the IdPs."
+ "description": "A list of allowed logout URLs for managed login authentication. For more information, see [Logout endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/logout-endpoint.html) ."
},
"name": {
"type": "string"
@@ -20678,15 +20678,15 @@
"items": {
"type": "string"
},
- "description": "A list of provider names for the identity providers (IdPs) that are supported on this client. The following are supported: `COGNITO` , `Facebook` , `Google` , `SignInWithApple` , and `LoginWithAmazon` . You can also specify the names that you configured for the SAML and OIDC IdPs in your user pool, for example `MySAMLIdP` or `MyOIDCIdP` .\n\nThis setting applies to providers that you can access with the [hosted UI and OAuth 2.0 authorization server](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-app-integration.html) . The removal of `COGNITO` from this list doesn't prevent authentication operations for local users with the user pools API in an AWS SDK. The only way to prevent API-based authentication is to block access with a [AWS WAF rule](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-waf.html) ."
+ "description": "A list of provider names for the identity providers (IdPs) that are supported on this client. The following are supported: `COGNITO` , `Facebook` , `Google` , `SignInWithApple` , and `LoginWithAmazon` . You can also specify the names that you configured for the SAML and OIDC IdPs in your user pool, for example `MySAMLIdP` or `MyOIDCIdP` .\n\nThis setting applies to providers that you can access with [managed login](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managed-login.html) . The removal of `COGNITO` from this list doesn't prevent authentication operations for local users with the user pools API in an AWS SDK. The only way to prevent API-based authentication is to block access with a [AWS WAF rule](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-waf.html) ."
},
"tokenValidityUnits": {
"$ref": "#/types/aws-native:cognito:UserPoolClientTokenValidityUnits",
- "description": "The units in which the validity times are represented. The default unit for RefreshToken is days, and default for ID and access tokens are hours."
+ "description": "The units that validity times are represented in. The default unit for refresh tokens is days, and the default for ID and access tokens are hours."
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool where you want to create a user pool client.",
+ "description": "The ID of the user pool where you want to create an app client.",
"replaceOnChanges": true
},
"writeAttributes": {
@@ -20790,11 +20790,11 @@
"inputs": {
"description": {
"type": "string",
- "description": "A string containing the description of the group."
+ "description": "A description of the group that you're creating."
},
"groupName": {
"type": "string",
- "description": "The name of the group. Must be unique."
+ "description": "A name for the group. This name must be unique in your user pool."
},
"precedence": {
"type": "integer",
@@ -20802,21 +20802,21 @@
},
"roleArn": {
"type": "string",
- "description": "The role Amazon Resource Name (ARN) for the group."
+ "description": "The Amazon Resource Name (ARN) for the IAM role that you want to associate with the group. A group role primarily declares a preferred role for the credentials that you get from an identity pool. Amazon Cognito ID tokens have a `cognito:preferred_role` claim that presents the highest-precedence group that a user belongs to. Both ID and access tokens also contain a `cognito:groups` claim that list all the groups that a user is a member of."
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool."
+ "description": "The ID of the user pool where you want to create a user group."
}
},
"outputs": {
"description": {
"type": "string",
- "description": "A string containing the description of the group."
+ "description": "A description of the group that you're creating."
},
"groupName": {
"type": "string",
- "description": "The name of the group. Must be unique.",
+ "description": "A name for the group. This name must be unique in your user pool.",
"replaceOnChanges": true
},
"precedence": {
@@ -20825,11 +20825,11 @@
},
"roleArn": {
"type": "string",
- "description": "The role Amazon Resource Name (ARN) for the group."
+ "description": "The Amazon Resource Name (ARN) for the IAM role that you want to associate with the group. A group role primarily declares a preferred role for the credentials that you get from an identity pool. Amazon Cognito ID tokens have a `cognito:preferred_role` claim that presents the highest-precedence group that a user belongs to. Both ID and access tokens also contain a `cognito:groups` claim that list all the groups that a user is a member of."
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool.",
+ "description": "The ID of the user pool where you want to create a user group.",
"replaceOnChanges": true
}
},
@@ -20856,14 +20856,14 @@
"additionalProperties": {
"type": "string"
},
- "description": "A mapping of IdP attributes to standard and custom user pool attributes."
+ "description": "A mapping of IdP attributes to standard and custom user pool attributes. Specify a user pool attribute as the key of the key-value pair, and the IdP attribute claim name as the value."
},
"idpIdentifiers": {
"type": "array",
"items": {
"type": "string"
},
- "description": "A list of IdP identifiers."
+ "description": "An array of IdP identifiers, for example `\"IdPIdentifiers\": [ \"MyIdP\", \"MyIdP2\" ]` . Identifiers are friendly names that you can pass in the `idp_identifier` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP. Identifiers in a domain format also enable the use of [email-address matching with SAML providers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managing-saml-idp-naming.html) ."
},
"providerDetails": {
"type": "object",
@@ -20874,15 +20874,15 @@
},
"providerName": {
"type": "string",
- "description": "The IdP name."
+ "description": "The name that you want to assign to the IdP. You can pass the identity provider name in the `identity_provider` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP."
},
"providerType": {
"type": "string",
- "description": "The IdP type."
+ "description": "The type of IdP that you want to add. Amazon Cognito supports OIDC, SAML 2.0, Login With Amazon, Sign In With Apple, Google, and Facebook IdPs."
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID."
+ "description": "The Id of the user pool where you want to create an IdP."
}
},
"outputs": {
@@ -20891,14 +20891,14 @@
"additionalProperties": {
"type": "string"
},
- "description": "A mapping of IdP attributes to standard and custom user pool attributes."
+ "description": "A mapping of IdP attributes to standard and custom user pool attributes. Specify a user pool attribute as the key of the key-value pair, and the IdP attribute claim name as the value."
},
"idpIdentifiers": {
"type": "array",
"items": {
"type": "string"
},
- "description": "A list of IdP identifiers."
+ "description": "An array of IdP identifiers, for example `\"IdPIdentifiers\": [ \"MyIdP\", \"MyIdP2\" ]` . Identifiers are friendly names that you can pass in the `idp_identifier` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP. Identifiers in a domain format also enable the use of [email-address matching with SAML providers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managing-saml-idp-naming.html) ."
},
"providerDetails": {
"type": "object",
@@ -20909,17 +20909,17 @@
},
"providerName": {
"type": "string",
- "description": "The IdP name.",
+ "description": "The name that you want to assign to the IdP. You can pass the identity provider name in the `identity_provider` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP.",
"replaceOnChanges": true
},
"providerType": {
"type": "string",
- "description": "The IdP type.",
+ "description": "The type of IdP that you want to add. Amazon Cognito supports OIDC, SAML 2.0, Login With Amazon, Sign In With Apple, Google, and Facebook IdPs.",
"replaceOnChanges": true
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID.",
+ "description": "The Id of the user pool where you want to create an IdP.",
"replaceOnChanges": true
}
},
@@ -20961,7 +20961,7 @@
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool."
+ "description": "The ID of the user pool where you want to create a resource server."
}
},
"outputs": {
@@ -20983,7 +20983,7 @@
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool.",
+ "description": "The ID of the user pool where you want to create a resource server.",
"replaceOnChanges": true
}
},
@@ -21080,7 +21080,7 @@
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool."
+ "description": "The ID of the user pool."
}
},
"outputs": {
@@ -21095,7 +21095,7 @@
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool.",
+ "description": "The ID of the user pool.",
"replaceOnChanges": true
}
},
@@ -21123,22 +21123,22 @@
"additionalProperties": {
"type": "string"
},
- "description": "A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.\n\nYou create custom workflows by assigning AWS Lambda functions to user pool triggers. When you use the AdminCreateUser API action, Amazon Cognito invokes the function that is assigned to the *pre sign-up* trigger. When Amazon Cognito invokes this function, it passes a JSON payload, which the function receives as input. This payload contains a `clientMetadata` attribute, which provides the data that you assigned to the ClientMetadata parameter in your AdminCreateUser request. In your function code in AWS Lambda , you can process the `clientMetadata` value to enhance your workflow for your specific needs.\n\nFor more information, see [Customizing user pool Workflows with Lambda Triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-working-with-aws-lambda-triggers.html) in the *Amazon Cognito Developer Guide* .\n\n\u003e When you use the ClientMetadata parameter, remember that Amazon Cognito won't do the following:\n\u003e \n\u003e - Store the ClientMetadata value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration doesn't include triggers, the ClientMetadata parameter serves no purpose.\n\u003e - Validate the ClientMetadata value.\n\u003e - Encrypt the ClientMetadata value. Don't use Amazon Cognito to provide sensitive information."
+ "description": "A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.\n\nYou create custom workflows by assigning AWS Lambda functions to user pool triggers. When you use the AdminCreateUser API action, Amazon Cognito invokes the function that is assigned to the *pre sign-up* trigger. When Amazon Cognito invokes this function, it passes a JSON payload, which the function receives as input. This payload contains a `ClientMetadata` attribute, which provides the data that you assigned to the ClientMetadata parameter in your AdminCreateUser request. In your function code in AWS Lambda , you can process the `clientMetadata` value to enhance your workflow for your specific needs.\n\nFor more information, see [Customizing user pool Workflows with Lambda Triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-working-with-aws-lambda-triggers.html) in the *Amazon Cognito Developer Guide* .\n\n\u003e When you use the `ClientMetadata` parameter, note that Amazon Cognito won't do the following:\n\u003e \n\u003e - Store the `ClientMetadata` value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration doesn't include triggers, the `ClientMetadata` parameter serves no purpose.\n\u003e - Validate the `ClientMetadata` value.\n\u003e - Encrypt the `ClientMetadata` value. Don't send sensitive information in this parameter."
},
"desiredDeliveryMediums": {
"type": "array",
"items": {
"type": "string"
},
- "description": "Specify `\"EMAIL\"` if email will be used to send the welcome message. Specify `\"SMS\"` if the phone number will be used. The default value is `\"SMS\"` . You can specify more than one value."
+ "description": "Specify `EMAIL` if email will be used to send the welcome message. Specify `SMS` if the phone number will be used. The default value is `SMS` . You can specify more than one value."
},
"forceAliasCreation": {
"type": "boolean",
- "description": "This parameter is used only if the `phone_number_verified` or `email_verified` attribute is set to `True` . Otherwise, it is ignored.\n\nIf this parameter is set to `True` and the phone number or email address specified in the UserAttributes parameter already exists as an alias with a different user, the API call will migrate the alias from the previous user to the newly created user. The previous user will no longer be able to log in using that alias.\n\nIf this parameter is set to `False` , the API throws an `AliasExistsException` error if the alias already exists. The default value is `False` ."
+ "description": "This parameter is used only if the `phone_number_verified` or `email_verified` attribute is set to `True` . Otherwise, it is ignored.\n\nIf this parameter is set to `True` and the phone number or email address specified in the `UserAttributes` parameter already exists as an alias with a different user, this request migrates the alias from the previous user to the newly-created user. The previous user will no longer be able to log in using that alias.\n\nIf this parameter is set to `False` , the API throws an `AliasExistsException` error if the alias already exists. The default value is `False` ."
},
"messageAction": {
"type": "string",
- "description": "Set to `RESEND` to resend the invitation message to a user that already exists and reset the expiration limit on the user's account. Set to `SUPPRESS` to suppress sending the message. You can specify only one value."
+ "description": "Set to `RESEND` to resend the invitation message to a user that already exists, and to reset the temporary-password duration with a new temporary password. Set to `SUPPRESS` to suppress sending the message. You can specify only one value."
},
"userAttributes": {
"type": "array",
@@ -21149,7 +21149,7 @@
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool where the user will be created."
+ "description": "The ID of the user pool where you want to create a user."
},
"username": {
"type": "string",
@@ -21169,7 +21169,7 @@
"additionalProperties": {
"type": "string"
},
- "description": "A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.\n\nYou create custom workflows by assigning AWS Lambda functions to user pool triggers. When you use the AdminCreateUser API action, Amazon Cognito invokes the function that is assigned to the *pre sign-up* trigger. When Amazon Cognito invokes this function, it passes a JSON payload, which the function receives as input. This payload contains a `clientMetadata` attribute, which provides the data that you assigned to the ClientMetadata parameter in your AdminCreateUser request. In your function code in AWS Lambda , you can process the `clientMetadata` value to enhance your workflow for your specific needs.\n\nFor more information, see [Customizing user pool Workflows with Lambda Triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-working-with-aws-lambda-triggers.html) in the *Amazon Cognito Developer Guide* .\n\n\u003e When you use the ClientMetadata parameter, remember that Amazon Cognito won't do the following:\n\u003e \n\u003e - Store the ClientMetadata value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration doesn't include triggers, the ClientMetadata parameter serves no purpose.\n\u003e - Validate the ClientMetadata value.\n\u003e - Encrypt the ClientMetadata value. Don't use Amazon Cognito to provide sensitive information.",
+ "description": "A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.\n\nYou create custom workflows by assigning AWS Lambda functions to user pool triggers. When you use the AdminCreateUser API action, Amazon Cognito invokes the function that is assigned to the *pre sign-up* trigger. When Amazon Cognito invokes this function, it passes a JSON payload, which the function receives as input. This payload contains a `ClientMetadata` attribute, which provides the data that you assigned to the ClientMetadata parameter in your AdminCreateUser request. In your function code in AWS Lambda , you can process the `clientMetadata` value to enhance your workflow for your specific needs.\n\nFor more information, see [Customizing user pool Workflows with Lambda Triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-working-with-aws-lambda-triggers.html) in the *Amazon Cognito Developer Guide* .\n\n\u003e When you use the `ClientMetadata` parameter, note that Amazon Cognito won't do the following:\n\u003e \n\u003e - Store the `ClientMetadata` value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration doesn't include triggers, the `ClientMetadata` parameter serves no purpose.\n\u003e - Validate the `ClientMetadata` value.\n\u003e - Encrypt the `ClientMetadata` value. Don't send sensitive information in this parameter.",
"replaceOnChanges": true
},
"desiredDeliveryMediums": {
@@ -21177,17 +21177,17 @@
"items": {
"type": "string"
},
- "description": "Specify `\"EMAIL\"` if email will be used to send the welcome message. Specify `\"SMS\"` if the phone number will be used. The default value is `\"SMS\"` . You can specify more than one value.",
+ "description": "Specify `EMAIL` if email will be used to send the welcome message. Specify `SMS` if the phone number will be used. The default value is `SMS` . You can specify more than one value.",
"replaceOnChanges": true
},
"forceAliasCreation": {
"type": "boolean",
- "description": "This parameter is used only if the `phone_number_verified` or `email_verified` attribute is set to `True` . Otherwise, it is ignored.\n\nIf this parameter is set to `True` and the phone number or email address specified in the UserAttributes parameter already exists as an alias with a different user, the API call will migrate the alias from the previous user to the newly created user. The previous user will no longer be able to log in using that alias.\n\nIf this parameter is set to `False` , the API throws an `AliasExistsException` error if the alias already exists. The default value is `False` .",
+ "description": "This parameter is used only if the `phone_number_verified` or `email_verified` attribute is set to `True` . Otherwise, it is ignored.\n\nIf this parameter is set to `True` and the phone number or email address specified in the `UserAttributes` parameter already exists as an alias with a different user, this request migrates the alias from the previous user to the newly-created user. The previous user will no longer be able to log in using that alias.\n\nIf this parameter is set to `False` , the API throws an `AliasExistsException` error if the alias already exists. The default value is `False` .",
"replaceOnChanges": true
},
"messageAction": {
"type": "string",
- "description": "Set to `RESEND` to resend the invitation message to a user that already exists and reset the expiration limit on the user's account. Set to `SUPPRESS` to suppress sending the message. You can specify only one value.",
+ "description": "Set to `RESEND` to resend the invitation message to a user that already exists, and to reset the temporary-password duration with a new temporary password. Set to `SUPPRESS` to suppress sending the message. You can specify only one value.",
"replaceOnChanges": true
},
"userAttributes": {
@@ -21200,7 +21200,7 @@
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool where the user will be created.",
+ "description": "The ID of the user pool where you want to create a user.",
"replaceOnChanges": true
},
"username": {
@@ -21254,7 +21254,7 @@
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool."
+ "description": "The ID of the user pool that contains the group that you want to add the user to."
},
"username": {
"type": "string",
@@ -21269,7 +21269,7 @@
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool.",
+ "description": "The ID of the user pool that contains the group that you want to add the user to.",
"replaceOnChanges": true
},
"username": {
@@ -23760,6 +23760,10 @@
"type": "string",
"description": "The name of the task template."
},
+ "selfAssignContactFlowArn": {
+ "type": "string",
+ "description": "The identifier of the contact flow."
+ },
"status": {
"$ref": "#/types/aws-native:connect:TaskTemplateStatus",
"description": "The status of the task template."
@@ -23815,6 +23819,10 @@
"type": "string",
"description": "The name of the task template."
},
+ "selfAssignContactFlowArn": {
+ "type": "string",
+ "description": "The identifier of the contact flow."
+ },
"status": {
"$ref": "#/types/aws-native:connect:TaskTemplateStatus",
"description": "The status of the task template."
@@ -31410,7 +31418,7 @@
},
"importSourceSpecification": {
"$ref": "#/types/aws-native:dynamodb:TableImportSourceSpecification",
- "description": "Specifies the properties of data being imported from the S3 bucket source to the table.\n If you specify the ``ImportSourceSpecification`` property, and also specify either the ``StreamSpecification``, the ``TableClass`` property, or the ``DeletionProtectionEnabled`` property, the IAM entity creating/updating stack must have ``UpdateTable`` permission."
+ "description": "Specifies the properties of data being imported from the S3 bucket source to the\" table.\n If you specify the ``ImportSourceSpecification`` property, and also specify either the ``StreamSpecification``, the ``TableClass`` property, the ``DeletionProtectionEnabled`` property, or the ``WarmThroughput`` property, the IAM entity creating/updating stack must have ``UpdateTable`` permission."
},
"keySchema": {
"oneOf": [
@@ -31518,7 +31526,7 @@
},
"importSourceSpecification": {
"$ref": "#/types/aws-native:dynamodb:TableImportSourceSpecification",
- "description": "Specifies the properties of data being imported from the S3 bucket source to the table.\n If you specify the ``ImportSourceSpecification`` property, and also specify either the ``StreamSpecification``, the ``TableClass`` property, or the ``DeletionProtectionEnabled`` property, the IAM entity creating/updating stack must have ``UpdateTable`` permission.",
+ "description": "Specifies the properties of data being imported from the S3 bucket source to the\" table.\n If you specify the ``ImportSourceSpecification`` property, and also specify either the ``StreamSpecification``, the ``TableClass`` property, the ``DeletionProtectionEnabled`` property, or the ``WarmThroughput`` property, the IAM entity creating/updating stack must have ``UpdateTable`` permission.",
"replaceOnChanges": true
},
"keySchema": {
@@ -34242,7 +34250,7 @@
"items": {
"$ref": "#/types/aws-native:ec2:LaunchTemplateTagSpecification"
},
- "description": "The tags to apply to the launch template on creation. To tag the launch template, the resource type must be ``launch-template``.\n To specify the tags for resources that are created during instance launch, use [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications)."
+ "description": "The tags to apply to the launch template on creation. To tag the launch template, the resource type must be ``launch-template``.\n To specify the tags for the resources that are created when an instance is launched, you must use [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications)."
},
"versionDescription": {
"type": "string",
@@ -34276,7 +34284,7 @@
"items": {
"$ref": "#/types/aws-native:ec2:LaunchTemplateTagSpecification"
},
- "description": "The tags to apply to the launch template on creation. To tag the launch template, the resource type must be ``launch-template``.\n To specify the tags for resources that are created during instance launch, use [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications)."
+ "description": "The tags to apply to the launch template on creation. To tag the launch template, the resource type must be ``launch-template``.\n To specify the tags for the resources that are created when an instance is launched, you must use [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications)."
},
"versionDescription": {
"type": "string",
@@ -40413,6 +40421,9 @@
"type": "string",
"description": "The number of ``cpu`` units used by the task. If you use the EC2 launch type, this field is optional. Any value can be used. If you use the Fargate launch type, this field is required. You must use one of the following values. The value that you choose determines your range of valid values for the ``memory`` parameter.\n If you use the EC2 launch type, this field is optional. Supported values are between ``128`` CPU units (``0.125`` vCPUs) and ``10240`` CPU units (``10`` vCPUs).\n The CPU units cannot be less than 1 vCPU when you use Windows containers on Fargate.\n + 256 (.25 vCPU) - Available ``memory`` values: 512 (0.5 GB), 1024 (1 GB), 2048 (2 GB)\n + 512 (.5 vCPU) - Available ``memory`` values: 1024 (1 GB), 2048 (2 GB), 3072 (3 GB), 4096 (4 GB)\n + 1024 (1 vCPU) - Available ``memory`` values: 2048 (2 GB), 3072 (3 GB), 4096 (4 GB), 5120 (5 GB), 6144 (6 GB), 7168 (7 GB), 8192 (8 GB)\n + 2048 (2 vCPU) - Available ``memory`` values: 4096 (4 GB) and 16384 (16 GB) in increments of 1024 (1 GB)\n + 4096 (4 vCPU) - Available ``memory`` values: 8192 (8 GB) and 30720 (30 GB) in increments of 1024 (1 GB)\n + 8192 (8 vCPU) - Available ``memory`` values: 16 GB and 60 GB in 4 GB increments\n This option requires Linux platform ``1.4.0`` or later.\n + 16384 (16vCPU) - Available ``memory`` values: 32GB and 120 GB in 8 GB increments\n This option requires Linux platform ``1.4.0`` or later."
},
+ "enableFaultInjection": {
+ "type": "boolean"
+ },
"ephemeralStorage": {
"$ref": "#/types/aws-native:ecs:TaskDefinitionEphemeralStorage",
"description": "The ephemeral storage settings to use for tasks run with the task definition."
@@ -40503,6 +40514,10 @@
"description": "The number of ``cpu`` units used by the task. If you use the EC2 launch type, this field is optional. Any value can be used. If you use the Fargate launch type, this field is required. You must use one of the following values. The value that you choose determines your range of valid values for the ``memory`` parameter.\n If you use the EC2 launch type, this field is optional. Supported values are between ``128`` CPU units (``0.125`` vCPUs) and ``10240`` CPU units (``10`` vCPUs).\n The CPU units cannot be less than 1 vCPU when you use Windows containers on Fargate.\n + 256 (.25 vCPU) - Available ``memory`` values: 512 (0.5 GB), 1024 (1 GB), 2048 (2 GB)\n + 512 (.5 vCPU) - Available ``memory`` values: 1024 (1 GB), 2048 (2 GB), 3072 (3 GB), 4096 (4 GB)\n + 1024 (1 vCPU) - Available ``memory`` values: 2048 (2 GB), 3072 (3 GB), 4096 (4 GB), 5120 (5 GB), 6144 (6 GB), 7168 (7 GB), 8192 (8 GB)\n + 2048 (2 vCPU) - Available ``memory`` values: 4096 (4 GB) and 16384 (16 GB) in increments of 1024 (1 GB)\n + 4096 (4 vCPU) - Available ``memory`` values: 8192 (8 GB) and 30720 (30 GB) in increments of 1024 (1 GB)\n + 8192 (8 vCPU) - Available ``memory`` values: 16 GB and 60 GB in 4 GB increments\n This option requires Linux platform ``1.4.0`` or later.\n + 16384 (16vCPU) - Available ``memory`` values: 32GB and 120 GB in 8 GB increments\n This option requires Linux platform ``1.4.0`` or later.",
"replaceOnChanges": true
},
+ "enableFaultInjection": {
+ "type": "boolean",
+ "replaceOnChanges": true
+ },
"ephemeralStorage": {
"$ref": "#/types/aws-native:ecs:TaskDefinitionEphemeralStorage",
"description": "The ephemeral storage settings to use for tasks run with the task definition.",
@@ -40600,6 +40615,7 @@
"createOnly": [
"containerDefinitions",
"cpu",
+ "enableFaultInjection",
"ephemeralStorage",
"executionRoleArn",
"family",
@@ -54354,7 +54370,7 @@
"inputs": {
"healthEventsConfig": {
"$ref": "#/types/aws-native:internetmonitor:MonitorHealthEventsConfig",
- "description": "A complex type with the configuration information that determines the threshold and other conditions for when Internet Monitor creates a health event for an overall performance or availability issue, across an application's geographies.\n\nDefines the percentages, for overall performance scores and availability scores for an application, that are the thresholds for when Amazon CloudWatch Internet Monitor creates a health event. You can override the defaults to set a custom threshold for overall performance or availability scores, or both.\n\nYou can also set thresholds for local health scores,, where Internet Monitor creates a health event when scores cross a threshold for one or more city-networks, in addition to creating an event when an overall score crosses a threshold.\n\nIf you don't set a health event threshold, the default value is 95%.\n\nFor local thresholds, you also set a minimum percentage of overall traffic that is impacted by an issue before Internet Monitor creates an event. In addition, you can disable local thresholds, for performance scores, availability scores, or both.\n\nFor more information, see [Change health event thresholds](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-IM-overview.html#IMUpdateThresholdFromOverview) in the Internet Monitor section of the *CloudWatch User Guide* ."
+ "description": "A complex type with the configuration information that determines the threshold and other conditions for when Internet Monitor creates a health event for an overall performance or availability issue, across an application's geographies.\n\nDefines the percentages, for overall performance scores and availability scores for an application, that are the thresholds for when Internet Monitor creates a health event. You can override the defaults to set a custom threshold for overall performance or availability scores, or both.\n\nYou can also set thresholds for local health scores,, where Internet Monitor creates a health event when scores cross a threshold for one or more city-networks, in addition to creating an event when an overall score crosses a threshold.\n\nIf you don't set a health event threshold, the default value is 95%.\n\nFor local thresholds, you also set a minimum percentage of overall traffic that is impacted by an issue before Internet Monitor creates an event. In addition, you can disable local thresholds, for performance scores, availability scores, or both.\n\nFor more information, see [Change health event thresholds](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-IM-overview.html#IMUpdateThresholdFromOverview) in the Internet Monitor section of the *CloudWatch User Guide* ."
},
"includeLinkedAccounts": {
"type": "boolean",
@@ -54420,7 +54436,7 @@
},
"healthEventsConfig": {
"$ref": "#/types/aws-native:internetmonitor:MonitorHealthEventsConfig",
- "description": "A complex type with the configuration information that determines the threshold and other conditions for when Internet Monitor creates a health event for an overall performance or availability issue, across an application's geographies.\n\nDefines the percentages, for overall performance scores and availability scores for an application, that are the thresholds for when Amazon CloudWatch Internet Monitor creates a health event. You can override the defaults to set a custom threshold for overall performance or availability scores, or both.\n\nYou can also set thresholds for local health scores,, where Internet Monitor creates a health event when scores cross a threshold for one or more city-networks, in addition to creating an event when an overall score crosses a threshold.\n\nIf you don't set a health event threshold, the default value is 95%.\n\nFor local thresholds, you also set a minimum percentage of overall traffic that is impacted by an issue before Internet Monitor creates an event. In addition, you can disable local thresholds, for performance scores, availability scores, or both.\n\nFor more information, see [Change health event thresholds](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-IM-overview.html#IMUpdateThresholdFromOverview) in the Internet Monitor section of the *CloudWatch User Guide* ."
+ "description": "A complex type with the configuration information that determines the threshold and other conditions for when Internet Monitor creates a health event for an overall performance or availability issue, across an application's geographies.\n\nDefines the percentages, for overall performance scores and availability scores for an application, that are the thresholds for when Internet Monitor creates a health event. You can override the defaults to set a custom threshold for overall performance or availability scores, or both.\n\nYou can also set thresholds for local health scores,, where Internet Monitor creates a health event when scores cross a threshold for one or more city-networks, in addition to creating an event when an overall score crosses a threshold.\n\nIf you don't set a health event threshold, the default value is 95%.\n\nFor local thresholds, you also set a minimum percentage of overall traffic that is impacted by an issue before Internet Monitor creates an event. In addition, you can disable local thresholds, for performance scores, availability scores, or both.\n\nFor more information, see [Change health event thresholds](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-IM-overview.html#IMUpdateThresholdFromOverview) in the Internet Monitor section of the *CloudWatch User Guide* ."
},
"includeLinkedAccounts": {
"type": "boolean",
@@ -54520,56 +54536,70 @@
"cf": "AWS::Invoicing::InvoiceUnit",
"inputs": {
"description": {
- "type": "string"
+ "type": "string",
+ "description": "The assigned description for an invoice unit. This information can't be modified or deleted."
},
"invoiceReceiver": {
- "type": "string"
+ "type": "string",
+ "description": "The account that receives invoices related to the invoice unit."
},
"name": {
- "type": "string"
+ "type": "string",
+ "description": "A unique name that is distinctive within your AWS ."
},
"resourceTags": {
"type": "array",
"items": {
"$ref": "#/types/aws-native:index:Tag"
- }
+ },
+ "description": "The tag structure that contains a tag key and value."
},
"rule": {
- "$ref": "#/types/aws-native:invoicing:InvoiceUnitRule"
+ "$ref": "#/types/aws-native:invoicing:InvoiceUnitRule",
+ "description": "An `InvoiceUnitRule` object used the categorize invoice units."
},
"taxInheritanceDisabled": {
- "type": "boolean"
+ "type": "boolean",
+ "description": "Whether the invoice unit based tax inheritance is/ should be enabled or disabled."
}
},
"outputs": {
"description": {
- "type": "string"
+ "type": "string",
+ "description": "The assigned description for an invoice unit. This information can't be modified or deleted."
},
"invoiceReceiver": {
"type": "string",
+ "description": "The account that receives invoices related to the invoice unit.",
"replaceOnChanges": true
},
"invoiceUnitArn": {
- "type": "string"
+ "type": "string",
+ "description": "The ARN to identify an invoice unit. This information can't be modified or deleted."
},
"lastModified": {
- "type": "number"
+ "type": "number",
+ "description": "The last time the invoice unit was updated. This is important to determine the version of invoice unit configuration used to create the invoices. Any invoice created after this modified time will use this invoice unit configuration."
},
"name": {
"type": "string",
+ "description": "A unique name that is distinctive within your AWS .",
"replaceOnChanges": true
},
"resourceTags": {
"type": "array",
"items": {
"$ref": "#/types/aws-native:index:Tag"
- }
+ },
+ "description": "The tag structure that contains a tag key and value."
},
"rule": {
- "$ref": "#/types/aws-native:invoicing:InvoiceUnitRule"
+ "$ref": "#/types/aws-native:invoicing:InvoiceUnitRule",
+ "description": "An `InvoiceUnitRule` object used the categorize invoice units."
},
"taxInheritanceDisabled": {
- "type": "boolean"
+ "type": "boolean",
+ "description": "Whether the invoice unit based tax inheritance is/ should be enabled or disabled."
}
},
"autoNamingSpec": {
@@ -55082,6 +55112,140 @@
"certificateProviderName"
]
},
+ "aws-native:iot:Command": {
+ "cf": "AWS::IoT::Command",
+ "inputs": {
+ "commandId": {
+ "type": "string",
+ "description": "The unique identifier for the command."
+ },
+ "createdAt": {
+ "type": "string",
+ "description": "The date and time when the command was created."
+ },
+ "deprecated": {
+ "type": "boolean",
+ "description": "A flag indicating whether the command is deprecated."
+ },
+ "description": {
+ "type": "string",
+ "description": "The description of the command."
+ },
+ "displayName": {
+ "type": "string",
+ "description": "The display name for the command."
+ },
+ "lastUpdatedAt": {
+ "type": "string",
+ "description": "The date and time when the command was last updated."
+ },
+ "mandatoryParameters": {
+ "type": "array",
+ "items": {
+ "$ref": "#/types/aws-native:iot:CommandParameter"
+ },
+ "description": "The list of mandatory parameters for the command."
+ },
+ "namespace": {
+ "$ref": "#/types/aws-native:iot:CommandNamespace",
+ "description": "The namespace to which the command belongs."
+ },
+ "payload": {
+ "$ref": "#/types/aws-native:iot:CommandPayload",
+ "description": "The payload associated with the command."
+ },
+ "pendingDeletion": {
+ "type": "boolean",
+ "description": "A flag indicating whether the command is pending deletion."
+ },
+ "roleArn": {
+ "type": "string",
+ "description": "The customer role associated with the command."
+ },
+ "tags": {
+ "type": "array",
+ "items": {
+ "$ref": "#/types/aws-native:index:Tag"
+ },
+ "description": "The tags to be associated with the command."
+ }
+ },
+ "outputs": {
+ "commandArn": {
+ "type": "string",
+ "description": "The Amazon Resource Name (ARN) of the command."
+ },
+ "commandId": {
+ "type": "string",
+ "description": "The unique identifier for the command.",
+ "replaceOnChanges": true
+ },
+ "createdAt": {
+ "type": "string",
+ "description": "The date and time when the command was created."
+ },
+ "deprecated": {
+ "type": "boolean",
+ "description": "A flag indicating whether the command is deprecated."
+ },
+ "description": {
+ "type": "string",
+ "description": "The description of the command."
+ },
+ "displayName": {
+ "type": "string",
+ "description": "The display name for the command."
+ },
+ "lastUpdatedAt": {
+ "type": "string",
+ "description": "The date and time when the command was last updated."
+ },
+ "mandatoryParameters": {
+ "type": "array",
+ "items": {
+ "$ref": "#/types/aws-native:iot:CommandParameter"
+ },
+ "description": "The list of mandatory parameters for the command."
+ },
+ "namespace": {
+ "$ref": "#/types/aws-native:iot:CommandNamespace",
+ "description": "The namespace to which the command belongs."
+ },
+ "payload": {
+ "$ref": "#/types/aws-native:iot:CommandPayload",
+ "description": "The payload associated with the command."
+ },
+ "pendingDeletion": {
+ "type": "boolean",
+ "description": "A flag indicating whether the command is pending deletion."
+ },
+ "roleArn": {
+ "type": "string",
+ "description": "The customer role associated with the command."
+ },
+ "tags": {
+ "type": "array",
+ "items": {
+ "$ref": "#/types/aws-native:index:Tag"
+ },
+ "description": "The tags to be associated with the command."
+ }
+ },
+ "required": [
+ "commandId"
+ ],
+ "createOnly": [
+ "commandId"
+ ],
+ "writeOnly": [
+ "lastUpdatedAt"
+ ],
+ "tagsProperty": "tags",
+ "tagsStyle": "keyValueArray",
+ "primaryIdentifier": [
+ "commandId"
+ ]
+ },
"aws-native:iot:CustomMetric": {
"cf": "AWS::IoT::CustomMetric",
"inputs": {
@@ -77603,7 +77767,7 @@
},
"type": {
"$ref": "#/types/aws-native:organizations:PolicyType",
- "description": "The type of policy to create. You can specify one of the following values: AISERVICES_OPT_OUT_POLICY, BACKUP_POLICY, SERVICE_CONTROL_POLICY, TAG_POLICY, CHATBOT_POLICY, RESOURCE_CONTROL_POLICY"
+ "description": "The type of policy to create. You can specify one of the following values: AISERVICES_OPT_OUT_POLICY, BACKUP_POLICY, SERVICE_CONTROL_POLICY, TAG_POLICY, CHATBOT_POLICY, RESOURCE_CONTROL_POLICY,DECLARATIVE_POLICY_EC2"
}
},
"outputs": {
@@ -77647,7 +77811,7 @@
},
"type": {
"$ref": "#/types/aws-native:organizations:PolicyType",
- "description": "The type of policy to create. You can specify one of the following values: AISERVICES_OPT_OUT_POLICY, BACKUP_POLICY, SERVICE_CONTROL_POLICY, TAG_POLICY, CHATBOT_POLICY, RESOURCE_CONTROL_POLICY",
+ "description": "The type of policy to create. You can specify one of the following values: AISERVICES_OPT_OUT_POLICY, BACKUP_POLICY, SERVICE_CONTROL_POLICY, TAG_POLICY, CHATBOT_POLICY, RESOURCE_CONTROL_POLICY,DECLARATIVE_POLICY_EC2",
"replaceOnChanges": true
}
},
@@ -79520,7 +79684,8 @@
"type": "array",
"items": {
"type": "string"
- }
+ },
+ "description": "The OIDC client ID for a Amazon Q Business application."
},
"description": {
"type": "string",
@@ -79591,6 +79756,7 @@
"items": {
"type": "string"
},
+ "description": "The OIDC client ID for a Amazon Q Business application.",
"replaceOnChanges": true
},
"createdAt": {
@@ -82143,6 +82309,117 @@
"arn"
]
},
+ "aws-native:ram:ResourceShare": {
+ "cf": "AWS::RAM::ResourceShare",
+ "inputs": {
+ "allowExternalPrincipals": {
+ "type": "boolean",
+ "description": "Specifies whether principals outside your organization in AWS Organizations can be associated with a resource share. A value of `true` lets you share with individual AWS accounts that are not in your organization. A value of `false` only has meaning if your account is a member of an AWS Organization. The default value is `true`."
+ },
+ "name": {
+ "type": "string",
+ "description": "Specifies the name of the resource share."
+ },
+ "permissionArns": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ },
+ "description": "Specifies the [Amazon Resource Names (ARNs)](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) of the AWS RAM permission to associate with the resource share. If you do not specify an ARN for the permission, AWS RAM automatically attaches the default version of the permission for each resource type. You can associate only one permission with each resource type included in the resource share."
+ },
+ "principals": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ },
+ "description": "Specifies the principals to associate with the resource share. The possible values are:\n\n- An AWS account ID\n\n- An Amazon Resource Name (ARN) of an organization in AWS Organizations\n\n- An ARN of an organizational unit (OU) in AWS Organizations\n\n- An ARN of an IAM role\n\n- An ARN of an IAM user"
+ },
+ "resourceArns": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ },
+ "description": "Specifies a list of one or more ARNs of the resources to associate with the resource share."
+ },
+ "sources": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ },
+ "description": "Specifies from which source accounts the service principal has access to the resources in this resource share."
+ },
+ "tags": {
+ "type": "array",
+ "items": {
+ "$ref": "#/types/aws-native:index:Tag"
+ },
+ "description": "Specifies one or more tags to attach to the resource share itself. It doesn't attach the tags to the resources associated with the resource share."
+ }
+ },
+ "outputs": {
+ "allowExternalPrincipals": {
+ "type": "boolean",
+ "description": "Specifies whether principals outside your organization in AWS Organizations can be associated with a resource share. A value of `true` lets you share with individual AWS accounts that are not in your organization. A value of `false` only has meaning if your account is a member of an AWS Organization. The default value is `true`."
+ },
+ "arn": {
+ "type": "string",
+ "description": "The Amazon Resource Name (ARN) of the resource share."
+ },
+ "name": {
+ "type": "string",
+ "description": "Specifies the name of the resource share."
+ },
+ "permissionArns": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ },
+ "description": "Specifies the [Amazon Resource Names (ARNs)](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) of the AWS RAM permission to associate with the resource share. If you do not specify an ARN for the permission, AWS RAM automatically attaches the default version of the permission for each resource type. You can associate only one permission with each resource type included in the resource share."
+ },
+ "principals": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ },
+ "description": "Specifies the principals to associate with the resource share. The possible values are:\n\n- An AWS account ID\n\n- An Amazon Resource Name (ARN) of an organization in AWS Organizations\n\n- An ARN of an organizational unit (OU) in AWS Organizations\n\n- An ARN of an IAM role\n\n- An ARN of an IAM user"
+ },
+ "resourceArns": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ },
+ "description": "Specifies a list of one or more ARNs of the resources to associate with the resource share."
+ },
+ "sources": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ },
+ "description": "Specifies from which source accounts the service principal has access to the resources in this resource share."
+ },
+ "tags": {
+ "type": "array",
+ "items": {
+ "$ref": "#/types/aws-native:index:Tag"
+ },
+ "description": "Specifies one or more tags to attach to the resource share itself. It doesn't attach the tags to the resources associated with the resource share."
+ }
+ },
+ "autoNamingSpec": {
+ "sdkName": "name"
+ },
+ "writeOnly": [
+ "permissionArns",
+ "principals",
+ "resourceArns",
+ "sources"
+ ],
+ "tagsProperty": "tags",
+ "tagsStyle": "keyValueArray",
+ "primaryIdentifier": [
+ "arn"
+ ]
+ },
"aws-native:rbin:Rule": {
"cf": "AWS::Rbin::Rule",
"inputs": {
@@ -82267,11 +82544,11 @@
"inputs": {
"databaseInstallationFilesS3BucketName": {
"type": "string",
- "description": "The name of an Amazon S3 bucket that contains database installation files for your CEV. For example, a valid bucket name is `my-custom-installation-files`."
+ "description": "The name of an Amazon S3 bucket that contains database installation files for your CEV. For example, a valid bucket name is ``my-custom-installation-files``."
},
"databaseInstallationFilesS3Prefix": {
"type": "string",
- "description": "The Amazon S3 directory that contains the database installation files for your CEV. For example, a valid bucket name is `123456789012/cev1`. If this setting isn't specified, no prefix is assumed."
+ "description": "The Amazon S3 directory that contains the database installation files for your CEV. For example, a valid bucket name is ``123456789012/cev1``. If this setting isn't specified, no prefix is assumed."
},
"description": {
"type": "string",
@@ -82279,53 +82556,53 @@
},
"engine": {
"type": "string",
- "description": "The database engine to use for your custom engine version (CEV). The only supported value is `custom-oracle-ee`."
+ "description": "The database engine to use for your custom engine version (CEV).\n Valid values:\n + ``custom-oracle-ee`` \n + ``custom-oracle-ee-cdb``"
},
"engineVersion": {
"type": "string",
- "description": "The name of your CEV. The name format is 19.customized_string . For example, a valid name is 19.my_cev1. This setting is required for RDS Custom for Oracle, but optional for Amazon RDS. The combination of Engine and EngineVersion is unique per customer per Region."
+ "description": "The name of your CEV. The name format is ``major version.customized_string``. For example, a valid CEV name is ``19.my_cev1``. This setting is required for RDS Custom for Oracle, but optional for Amazon RDS. The combination of ``Engine`` and ``EngineVersion`` is unique per customer per Region.\n *Constraints:* Minimum length is 1. Maximum length is 60.\n *Pattern:* ``^[a-z0-9_.-]{1,60$``}"
},
"imageId": {
"type": "string",
- "description": "The identifier of Amazon Machine Image (AMI) used for CEV."
+ "description": "A value that indicates the ID of the AMI."
},
"kmsKeyId": {
"type": "string",
- "description": "The AWS KMS key identifier for an encrypted CEV. A symmetric KMS key is required for RDS Custom, but optional for Amazon RDS."
+ "description": "The AWS KMS key identifier for an encrypted CEV. A symmetric encryption KMS key is required for RDS Custom, but optional for Amazon RDS.\n If you have an existing symmetric encryption KMS key in your account, you can use it with RDS Custom. No further action is necessary. If you don't already have a symmetric encryption KMS key in your account, follow the instructions in [Creating a symmetric encryption KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/create-keys.html#create-symmetric-cmk) in the *Key Management Service Developer Guide*.\n You can choose the same symmetric encryption key when you create a CEV and a DB instance, or choose different keys."
},
"manifest": {
"type": "string",
- "description": "The CEV manifest, which is a JSON document that describes the installation .zip files stored in Amazon S3. Specify the name/value pairs in a file or a quoted string. RDS Custom applies the patches in the order in which they are listed."
+ "description": "The CEV manifest, which is a JSON document that describes the installation .zip files stored in Amazon S3. Specify the name/value pairs in a file or a quoted string. RDS Custom applies the patches in the order in which they are listed.\n The following JSON fields are valid:\n + MediaImportTemplateVersion Version of the CEV manifest. The date is in the format YYYY-MM-DD. + databaseInstallationFileNames Ordered list of installation files for the CEV. + opatchFileNames Ordered list of OPatch installers used for the Oracle DB engine. + psuRuPatchFileNames The PSU and RU patches for this CEV. + OtherPatchFileNames The patches that are not in the list of PSU and RU patches. Amazon RDS applies these patches after applying the PSU and RU patches. \n For more information, see [Creating the CEV manifest](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-cev.html#custom-cev.preparing.manifest) in the *Amazon RDS User Guide*."
},
"sourceCustomDbEngineVersionIdentifier": {
"type": "string",
- "description": "The identifier of the source custom engine version."
+ "description": "The ARN of a CEV to use as a source for creating a new CEV. You can specify a different Amazon Machine Imagine (AMI) by using either ``Source`` or ``UseAwsProvidedLatestImage``. You can't specify a different JSON manifest when you specify ``SourceCustomDbEngineVersionIdentifier``."
},
"status": {
"$ref": "#/types/aws-native:rds:CustomDbEngineVersionStatus",
- "description": "The availability status to be assigned to the CEV."
+ "description": "A value that indicates the status of a custom engine version (CEV)."
},
"tags": {
"type": "array",
"items": {
"$ref": "#/types/aws-native:index:Tag"
},
- "description": "An array of key-value pairs to apply to this resource."
+ "description": "A list of tags. For more information, see [Tagging Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide.*"
},
"useAwsProvidedLatestImage": {
"type": "boolean",
- "description": "A value that indicates whether AWS provided latest image is applied automatically to the Custom Engine Version. By default, AWS provided latest image is applied automatically. This value is only applied on create."
+ "description": "Specifies whether to use the latest service-provided Amazon Machine Image (AMI) for the CEV. If you specify ``UseAwsProvidedLatestImage``, you can't also specify ``ImageId``."
}
},
"outputs": {
"databaseInstallationFilesS3BucketName": {
"type": "string",
- "description": "The name of an Amazon S3 bucket that contains database installation files for your CEV. For example, a valid bucket name is `my-custom-installation-files`.",
+ "description": "The name of an Amazon S3 bucket that contains database installation files for your CEV. For example, a valid bucket name is ``my-custom-installation-files``.",
"replaceOnChanges": true
},
"databaseInstallationFilesS3Prefix": {
"type": "string",
- "description": "The Amazon S3 directory that contains the database installation files for your CEV. For example, a valid bucket name is `123456789012/cev1`. If this setting isn't specified, no prefix is assumed.",
+ "description": "The Amazon S3 directory that contains the database installation files for your CEV. For example, a valid bucket name is ``123456789012/cev1``. If this setting isn't specified, no prefix is assumed.",
"replaceOnChanges": true
},
"dbEngineVersionArn": {
@@ -82338,48 +82615,48 @@
},
"engine": {
"type": "string",
- "description": "The database engine to use for your custom engine version (CEV). The only supported value is `custom-oracle-ee`.",
+ "description": "The database engine to use for your custom engine version (CEV).\n Valid values:\n + ``custom-oracle-ee`` \n + ``custom-oracle-ee-cdb``",
"replaceOnChanges": true
},
"engineVersion": {
"type": "string",
- "description": "The name of your CEV. The name format is 19.customized_string . For example, a valid name is 19.my_cev1. This setting is required for RDS Custom for Oracle, but optional for Amazon RDS. The combination of Engine and EngineVersion is unique per customer per Region.",
+ "description": "The name of your CEV. The name format is ``major version.customized_string``. For example, a valid CEV name is ``19.my_cev1``. This setting is required for RDS Custom for Oracle, but optional for Amazon RDS. The combination of ``Engine`` and ``EngineVersion`` is unique per customer per Region.\n *Constraints:* Minimum length is 1. Maximum length is 60.\n *Pattern:* ``^[a-z0-9_.-]{1,60$``}",
"replaceOnChanges": true
},
"imageId": {
"type": "string",
- "description": "The identifier of Amazon Machine Image (AMI) used for CEV.",
+ "description": "A value that indicates the ID of the AMI.",
"replaceOnChanges": true
},
"kmsKeyId": {
"type": "string",
- "description": "The AWS KMS key identifier for an encrypted CEV. A symmetric KMS key is required for RDS Custom, but optional for Amazon RDS.",
+ "description": "The AWS KMS key identifier for an encrypted CEV. A symmetric encryption KMS key is required for RDS Custom, but optional for Amazon RDS.\n If you have an existing symmetric encryption KMS key in your account, you can use it with RDS Custom. No further action is necessary. If you don't already have a symmetric encryption KMS key in your account, follow the instructions in [Creating a symmetric encryption KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/create-keys.html#create-symmetric-cmk) in the *Key Management Service Developer Guide*.\n You can choose the same symmetric encryption key when you create a CEV and a DB instance, or choose different keys.",
"replaceOnChanges": true
},
"manifest": {
"type": "string",
- "description": "The CEV manifest, which is a JSON document that describes the installation .zip files stored in Amazon S3. Specify the name/value pairs in a file or a quoted string. RDS Custom applies the patches in the order in which they are listed.",
+ "description": "The CEV manifest, which is a JSON document that describes the installation .zip files stored in Amazon S3. Specify the name/value pairs in a file or a quoted string. RDS Custom applies the patches in the order in which they are listed.\n The following JSON fields are valid:\n + MediaImportTemplateVersion Version of the CEV manifest. The date is in the format YYYY-MM-DD. + databaseInstallationFileNames Ordered list of installation files for the CEV. + opatchFileNames Ordered list of OPatch installers used for the Oracle DB engine. + psuRuPatchFileNames The PSU and RU patches for this CEV. + OtherPatchFileNames The patches that are not in the list of PSU and RU patches. Amazon RDS applies these patches after applying the PSU and RU patches. \n For more information, see [Creating the CEV manifest](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-cev.html#custom-cev.preparing.manifest) in the *Amazon RDS User Guide*.",
"replaceOnChanges": true
},
"sourceCustomDbEngineVersionIdentifier": {
"type": "string",
- "description": "The identifier of the source custom engine version.",
+ "description": "The ARN of a CEV to use as a source for creating a new CEV. You can specify a different Amazon Machine Imagine (AMI) by using either ``Source`` or ``UseAwsProvidedLatestImage``. You can't specify a different JSON manifest when you specify ``SourceCustomDbEngineVersionIdentifier``.",
"replaceOnChanges": true
},
"status": {
"$ref": "#/types/aws-native:rds:CustomDbEngineVersionStatus",
- "description": "The availability status to be assigned to the CEV."
+ "description": "A value that indicates the status of a custom engine version (CEV)."
},
"tags": {
"type": "array",
"items": {
"$ref": "#/types/aws-native:index:Tag"
},
- "description": "An array of key-value pairs to apply to this resource."
+ "description": "A list of tags. For more information, see [Tagging Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide.*"
},
"useAwsProvidedLatestImage": {
"type": "boolean",
- "description": "A value that indicates whether AWS provided latest image is applied automatically to the Custom Engine Version. By default, AWS provided latest image is applied automatically. This value is only applied on create.",
+ "description": "Specifies whether to use the latest service-provided Amazon Machine Image (AMI) for the CEV. If you specify ``UseAwsProvidedLatestImage``, you can't also specify ``ImageId``.",
"replaceOnChanges": true
}
},
@@ -86260,6 +86537,10 @@
"type": "integer",
"description": "The custom port to use when connecting to a workgroup. Valid port ranges are 5431-5455 and 8191-8215. The default is 5439."
},
+ "pricePerformanceTarget": {
+ "$ref": "#/types/aws-native:redshiftserverless:WorkgroupPerformanceTarget",
+ "description": "A property that represents the price performance target settings for the workgroup."
+ },
"publiclyAccessible": {
"type": "boolean",
"description": "A value that specifies whether the workgroup can be accessible from a public network."
@@ -86319,6 +86600,10 @@
"type": "integer",
"description": "The custom port to use when connecting to a workgroup. Valid port ranges are 5431-5455 and 8191-8215. The default is 5439."
},
+ "pricePerformanceTarget": {
+ "$ref": "#/types/aws-native:redshiftserverless:WorkgroupPerformanceTarget",
+ "description": "A property that represents the price performance target settings for the workgroup."
+ },
"publiclyAccessible": {
"type": "boolean",
"description": "A value that specifies whether the workgroup can be accessible from a public network."
@@ -90589,6 +90874,9 @@
"$ref": "#/types/aws-native:s3:BucketLoggingConfiguration",
"description": "Settings that define where logs are stored."
},
+ "metadataTableConfiguration": {
+ "$ref": "#/types/aws-native:s3:BucketMetadataTableConfiguration"
+ },
"metricsConfigurations": {
"type": "array",
"items": {
@@ -90699,6 +90987,9 @@
"$ref": "#/types/aws-native:s3:BucketLoggingConfiguration",
"description": "Settings that define where logs are stored."
},
+ "metadataTableConfiguration": {
+ "$ref": "#/types/aws-native:s3:BucketMetadataTableConfiguration"
+ },
"metricsConfigurations": {
"type": "array",
"items": {
@@ -91061,11 +91352,11 @@
},
"bucketName": {
"type": "string",
- "description": "Specifies a name for the bucket. The bucket name must contain only lowercase letters, numbers, and hyphens (-). A directory bucket name must be unique in the chosen Availability Zone. The bucket name must also follow the format 'bucket_base_name--az_id--x-s3' (for example, 'DOC-EXAMPLE-BUCKET--usw2-az1--x-s3'). If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the bucket name."
+ "description": "Specifies a name for the bucket. The bucket name must contain only lowercase letters, numbers, and hyphens (-). A directory bucket name must be unique in the chosen Availability Zone or Local Zone. The bucket name must also follow the format 'bucket_base_name--zone_id--x-s3'. The zone_id can be the ID of an Availability Zone or a Local Zone. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the bucket name."
},
"dataRedundancy": {
"$ref": "#/types/aws-native:s3express:DirectoryBucketDataRedundancy",
- "description": "Specifies the number of Availability Zone that's used for redundancy for the bucket."
+ "description": "Specifies the number of Availability Zone or Local Zone that's used for redundancy for the bucket."
},
"lifecycleConfiguration": {
"$ref": "#/types/aws-native:s3express:DirectoryBucketLifecycleConfiguration",
@@ -91073,7 +91364,7 @@
},
"locationName": {
"type": "string",
- "description": "Specifies the AZ ID of the Availability Zone where the directory bucket will be created. An example AZ ID value is 'use1-az5'."
+ "description": "Specifies the Zone ID of the Availability Zone or Local Zone where the directory bucket will be created. An example Availability Zone ID value is 'use1-az5'."
}
},
"outputs": {
@@ -91083,7 +91374,7 @@
},
"availabilityZoneName": {
"type": "string",
- "description": "Returns the code for the Availability Zone where the directory bucket was created."
+ "description": "Returns the code for the Availability Zone or Local Zone where the directory bucket was created. An example for the code of an Availability Zone is 'us-east-1f'."
},
"bucketEncryption": {
"$ref": "#/types/aws-native:s3express:DirectoryBucketBucketEncryption",
@@ -91091,12 +91382,12 @@
},
"bucketName": {
"type": "string",
- "description": "Specifies a name for the bucket. The bucket name must contain only lowercase letters, numbers, and hyphens (-). A directory bucket name must be unique in the chosen Availability Zone. The bucket name must also follow the format 'bucket_base_name--az_id--x-s3' (for example, 'DOC-EXAMPLE-BUCKET--usw2-az1--x-s3'). If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the bucket name.",
+ "description": "Specifies a name for the bucket. The bucket name must contain only lowercase letters, numbers, and hyphens (-). A directory bucket name must be unique in the chosen Availability Zone or Local Zone. The bucket name must also follow the format 'bucket_base_name--zone_id--x-s3'. The zone_id can be the ID of an Availability Zone or a Local Zone. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the bucket name.",
"replaceOnChanges": true
},
"dataRedundancy": {
"$ref": "#/types/aws-native:s3express:DirectoryBucketDataRedundancy",
- "description": "Specifies the number of Availability Zone that's used for redundancy for the bucket.",
+ "description": "Specifies the number of Availability Zone or Local Zone that's used for redundancy for the bucket.",
"replaceOnChanges": true
},
"lifecycleConfiguration": {
@@ -91105,7 +91396,7 @@
},
"locationName": {
"type": "string",
- "description": "Specifies the AZ ID of the Availability Zone where the directory bucket will be created. An example AZ ID value is 'use1-az5'.",
+ "description": "Specifies the Zone ID of the Availability Zone or Local Zone where the directory bucket will be created. An example Availability Zone ID value is 'use1-az5'.",
"replaceOnChanges": true
}
},
@@ -91492,6 +91783,74 @@
"arn"
]
},
+ "aws-native:s3tables:TableBucket": {
+ "cf": "AWS::S3Tables::TableBucket",
+ "inputs": {
+ "tableBucketName": {
+ "type": "string"
+ },
+ "unreferencedFileRemoval": {
+ "$ref": "#/types/aws-native:s3tables:TableBucketUnreferencedFileRemoval"
+ }
+ },
+ "outputs": {
+ "tableBucketArn": {
+ "type": "string"
+ },
+ "tableBucketName": {
+ "type": "string",
+ "replaceOnChanges": true
+ },
+ "unreferencedFileRemoval": {
+ "$ref": "#/types/aws-native:s3tables:TableBucketUnreferencedFileRemoval"
+ }
+ },
+ "autoNamingSpec": {
+ "sdkName": "tableBucketName"
+ },
+ "createOnly": [
+ "tableBucketName"
+ ],
+ "irreversibleNames": {
+ "tableBucketArn": "TableBucketARN"
+ },
+ "primaryIdentifier": [
+ "tableBucketArn"
+ ]
+ },
+ "aws-native:s3tables:TableBucketPolicy": {
+ "cf": "AWS::S3Tables::TableBucketPolicy",
+ "inputs": {
+ "resourcePolicy": {
+ "$ref": "#/types/aws-native:s3tables:TableBucketPolicyResourcePolicy"
+ },
+ "tableBucketArn": {
+ "type": "string"
+ }
+ },
+ "outputs": {
+ "resourcePolicy": {
+ "$ref": "#/types/aws-native:s3tables:TableBucketPolicyResourcePolicy"
+ },
+ "tableBucketArn": {
+ "type": "string",
+ "replaceOnChanges": true
+ }
+ },
+ "required": [
+ "resourcePolicy",
+ "tableBucketArn"
+ ],
+ "createOnly": [
+ "tableBucketArn"
+ ],
+ "irreversibleNames": {
+ "tableBucketArn": "TableBucketARN"
+ },
+ "primaryIdentifier": [
+ "tableBucketArn"
+ ]
+ },
"aws-native:sagemaker:App": {
"cf": "AWS::SageMaker::App",
"inputs": {
@@ -112148,7 +112507,7 @@
"items": {
"$ref": "#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetricDimension"
},
- "description": "The dimensions for the metric."
+ "description": "Describes the dimensions of the metric."
},
"metricName": {
"type": "string",
@@ -112165,11 +112524,11 @@
"properties": {
"expression": {
"type": "string",
- "description": "The math expression to perform on the returned data, if this object is performing a math expression."
+ "description": "The math expression to perform on the returned data, if this object is performing a math expression. This expression can use the ``Id`` of the other metrics to refer to those metrics, and can also use the ``Id`` of other expressions to use the result of those expressions. \n Conditional: Within each ``MetricDataQuery`` object, you must specify either ``Expression`` or ``MetricStat``, but not both."
},
"id": {
"type": "string",
- "description": "A short name that identifies the object's results in the response."
+ "description": "A short name that identifies the object's results in the response. This name must be unique among all ``MetricDataQuery`` objects specified for a single scaling policy. If you are performing math expressions on this set of data, this name represents that data and can serve as a variable in the mathematical expression. The valid characters are letters, numbers, and underscores. The first character must be a lowercase letter."
},
"label": {
"type": "string",
@@ -112177,11 +112536,11 @@
},
"metricStat": {
"$ref": "#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetricStat",
- "description": "Information about the metric data to return."
+ "description": "Information about the metric data to return. \n Conditional: Within each ``MetricDataQuery`` object, you must specify either ``Expression`` or ``MetricStat``, but not both."
},
"returnData": {
"type": "boolean",
- "description": "Indicates whether to return the timestamps and raw data values of this metric."
+ "description": "Indicates whether to return the timestamps and raw data values of this metric. \n If you use any math expressions, specify ``true`` for this value for only the final math expression that the metric specification is based on. You must specify ``false`` for ``ReturnData`` for all the other metrics and expressions used in the metric specification.\n If you are only retrieving metrics and not performing any math expressions, do not specify anything for ``ReturnData``. This sets it to its default (``true``)."
}
}
},
@@ -112236,15 +112595,15 @@
"properties": {
"metric": {
"$ref": "#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetric",
- "description": "The CloudWatch metric to return, including the metric name, namespace, and dimensions. "
+ "description": "The CloudWatch metric to return, including the metric name, namespace, and dimensions. To get the exact metric name, namespace, and dimensions, inspect the [Metric](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_Metric.html) object that is returned by a call to [ListMetrics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_ListMetrics.html)."
},
"stat": {
"type": "string",
- "description": "The statistic to return. It can include any CloudWatch statistic or extended statistic."
+ "description": "The statistic to return. It can include any CloudWatch statistic or extended statistic. For a list of valid values, see the table in [Statistics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch_concepts.html#Statistic) in the *Amazon CloudWatch User Guide*. \n The most commonly used metrics for predictive scaling are ``Average`` and ``Sum``."
},
"unit": {
"type": "string",
- "description": "The unit to use for the returned data points."
+ "description": "The unit to use for the returned data points. For a complete list of the units that CloudWatch supports, see the [MetricDatum](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_MetricDatum.html) data type in the *Amazon CloudWatch API Reference*."
}
}
},
@@ -112253,26 +112612,26 @@
"properties": {
"maxCapacityBreachBehavior": {
"type": "string",
- "description": "Defines the behavior that should be applied if the forecast capacity approaches or exceeds the maximum capacity. Defaults to `HonorMaxCapacity` if not specified."
+ "description": "Defines the behavior that should be applied if the forecast capacity approaches or exceeds the maximum capacity. Defaults to ``HonorMaxCapacity`` if not specified."
},
"maxCapacityBuffer": {
"type": "integer",
- "description": "The size of the capacity buffer to use when the forecast capacity is close to or exceeds the maximum capacity. The value is specified as a percentage relative to the forecast capacity. For example, if the buffer is 10, this means a 10 percent buffer, such that if the forecast capacity is 50, and the maximum capacity is 40, then the effective maximum capacity is 55.\n\nRequired if the `MaxCapacityBreachBehavior` property is set to `IncreaseMaxCapacity` , and cannot be used otherwise."
+ "description": "The size of the capacity buffer to use when the forecast capacity is close to or exceeds the maximum capacity. The value is specified as a percentage relative to the forecast capacity. For example, if the buffer is 10, this means a 10 percent buffer, such that if the forecast capacity is 50, and the maximum capacity is 40, then the effective maximum capacity is 55. \n Required if the ``MaxCapacityBreachBehavior`` property is set to ``IncreaseMaxCapacity``, and cannot be used otherwise."
},
"metricSpecifications": {
"type": "array",
"items": {
"$ref": "#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetricSpecification"
},
- "description": "This structure includes the metrics and target utilization to use for predictive scaling.\n\nThis is an array, but we currently only support a single metric specification. That is, you can specify a target value and a single metric pair, or a target value and one scaling metric and one load metric."
+ "description": "This structure includes the metrics and target utilization to use for predictive scaling. \n This is an array, but we currently only support a single metric specification. That is, you can specify a target value and a single metric pair, or a target value and one scaling metric and one load metric."
},
"mode": {
"type": "string",
- "description": "The predictive scaling mode. Defaults to `ForecastOnly` if not specified."
+ "description": "The predictive scaling mode. Defaults to ``ForecastOnly`` if not specified."
},
"schedulingBufferTime": {
"type": "integer",
- "description": "The amount of time, in seconds, that the start time can be advanced.\n\nThe value must be less than the forecast interval duration of 3600 seconds (60 minutes). Defaults to 300 seconds if not specified."
+ "description": "The amount of time, in seconds, that the start time can be advanced. \n The value must be less than the forecast interval duration of 3600 seconds (60 minutes). Defaults to 300 seconds if not specified."
}
}
},
@@ -118654,7 +119013,7 @@
"properties": {
"bedrockFoundationModelConfiguration": {
"$ref": "#/types/aws-native:bedrock:DataSourceBedrockFoundationModelConfiguration",
- "description": "Settings for a foundation model used to parse documents for a data source."
+ "description": "If you specify `BEDROCK_FOUNDATION_MODEL` as the parsing strategy for ingesting your data source, use this object to modify configurations for using a foundation model to parse documents."
},
"parsingStrategy": {
"$ref": "#/types/aws-native:bedrock:DataSourceParsingStrategy",
@@ -118942,7 +119301,7 @@
},
"parsingConfiguration": {
"$ref": "#/types/aws-native:bedrock:DataSourceParsingConfiguration",
- "description": "A custom parser for data source documents.",
+ "description": "Configurations for a parser to use for parsing documents in your data source. If you exclude this field, the default parser will be used.",
"replaceOnChanges": true
}
}
@@ -120357,7 +120716,7 @@
},
"type": {
"$ref": "#/types/aws-native:bedrock:GuardrailPiiEntityType",
- "description": "Configure guardrail type when the PII entity is detected.\n\nThe following PIIs are used to block or mask sensitive information:\n\n- *General*\n\n- *ADDRESS*\n\nA physical address, such as \"100 Main Street, Anytown, USA\" or \"Suite #12, Building 123\". An address can include information such as the street, building, location, city, state, country, county, zip code, precinct, and neighborhood.\n- *AGE*\n\nAn individual's age, including the quantity and unit of time. For example, in the phrase \"I am 40 years old,\" Guarrails recognizes \"40 years\" as an age.\n- *NAME*\n\nAn individual's name. This entity type does not include titles, such as Dr., Mr., Mrs., or Miss. guardrails doesn't apply this entity type to names that are part of organizations or addresses. For example, guardrails recognizes the \"John Doe Organization\" as an organization, and it recognizes \"Jane Doe Street\" as an address.\n- *EMAIL*\n\nAn email address, such as *marymajor@email.com* .\n- *PHONE*\n\nA phone number. This entity type also includes fax and pager numbers.\n- *USERNAME*\n\nA user name that identifies an account, such as a login name, screen name, nick name, or handle.\n- *PASSWORD*\n\nAn alphanumeric string that is used as a password, such as \"* *very20special#pass** \".\n- *DRIVER_ID*\n\nThe number assigned to a driver's license, which is an official document permitting an individual to operate one or more motorized vehicles on a public road. A driver's license number consists of alphanumeric characters.\n- *LICENSE_PLATE*\n\nA license plate for a vehicle is issued by the state or country where the vehicle is registered. The format for passenger vehicles is typically five to eight digits, consisting of upper-case letters and numbers. The format varies depending on the location of the issuing state or country.\n- *VEHICLE_IDENTIFICATION_NUMBER*\n\nA Vehicle Identification Number (VIN) uniquely identifies a vehicle. VIN content and format are defined in the *ISO 3779* specification. Each country has specific codes and formats for VINs.\n- *Finance*\n\n- *REDIT_DEBIT_CARD_CVV*\n\nA three-digit card verification code (CVV) that is present on VISA, MasterCard, and Discover credit and debit cards. For American Express credit or debit cards, the CVV is a four-digit numeric code.\n- *CREDIT_DEBIT_CARD_EXPIRY*\n\nThe expiration date for a credit or debit card. This number is usually four digits long and is often formatted as *month/year* or *MM/YY* . Guardrails recognizes expiration dates such as *01/21* , *01/2021* , and *Jan 2021* .\n- *CREDIT_DEBIT_CARD_NUMBER*\n\nThe number for a credit or debit card. These numbers can vary from 13 to 16 digits in length. However, Amazon Comprehend also recognizes credit or debit card numbers when only the last four digits are present.\n- *PIN*\n\nA four-digit personal identification number (PIN) with which you can access your bank account.\n- *INTERNATIONAL_BANK_ACCOUNT_NUMBER*\n\nAn International Bank Account Number has specific formats in each country. For more information, see [www.iban.com/structure](https://docs.aws.amazon.com/https://www.iban.com/structure) .\n- *SWIFT_CODE*\n\nA SWIFT code is a standard format of Bank Identifier Code (BIC) used to specify a particular bank or branch. Banks use these codes for money transfers such as international wire transfers.\n\nSWIFT codes consist of eight or 11 characters. The 11-digit codes refer to specific branches, while eight-digit codes (or 11-digit codes ending in 'XXX') refer to the head or primary office.\n- *IT*\n\n- *IP_ADDRESS*\n\nAn IPv4 address, such as *198.51.100.0* .\n- *MAC_ADDRESS*\n\nA *media access control* (MAC) address is a unique identifier assigned to a network interface controller (NIC).\n- *URL*\n\nA web address, such as *www.example.com* .\n- *AWS_ACCESS_KEY*\n\nA unique identifier that's associated with a secret access key; you use the access key ID and secret access key to sign programmatic AWS requests cryptographically.\n- *AWS_SECRET_KEY*\n\nA unique identifier that's associated with an access key. You use the access key ID and secret access key to sign programmatic AWS requests cryptographically.\n- *USA specific*\n\n- *US_BANK_ACCOUNT_NUMBER*\n\nA US bank account number, which is typically 10 to 12 digits long.\n- *US_BANK_ROUTING_NUMBER*\n\nA US bank account routing number. These are typically nine digits long,\n- *US_INDIVIDUAL_TAX_IDENTIFICATION_NUMBER*\n\nA US Individual Taxpayer Identification Number (ITIN) is a nine-digit number that starts with a \"9\" and contain a \"7\" or \"8\" as the fourth digit. An ITIN can be formatted with a space or a dash after the third and forth digits.\n- *US_PASSPORT_NUMBER*\n\nA US passport number. Passport numbers range from six to nine alphanumeric characters.\n- *US_SOCIAL_SECURITY_NUMBER*\n\nA US Social Security Number (SSN) is a nine-digit number that is issued to US citizens, permanent residents, and temporary working residents.\n- *Canada specific*\n\n- *CA_HEALTH_NUMBER*\n\nA Canadian Health Service Number is a 10-digit unique identifier, required for individuals to access healthcare benefits.\n- *CA_SOCIAL_INSURANCE_NUMBER*\n\nA Canadian Social Insurance Number (SIN) is a nine-digit unique identifier, required for individuals to access government programs and benefits.\n\nThe SIN is formatted as three groups of three digits, such as *123-456-789* . A SIN can be validated through a simple check-digit process called the [Luhn algorithm](https://docs.aws.amazon.com/https://www.wikipedia.org/wiki/Luhn_algorithm) .\n- *UK Specific*\n\n- *UK_NATIONAL_HEALTH_SERVICE_NUMBER*\n\nA UK National Health Service Number is a 10-17 digit number, such as *485 777 3456* . The current system formats the 10-digit number with spaces after the third and sixth digits. The final digit is an error-detecting checksum.\n- *UK_NATIONAL_INSURANCE_NUMBER*\n\nA UK National Insurance Number (NINO) provides individuals with access to National Insurance (social security) benefits. It is also used for some purposes in the UK tax system.\n\nThe number is nine digits long and starts with two letters, followed by six numbers and one letter. A NINO can be formatted with a space or a dash after the two letters and after the second, forth, and sixth digits.\n- *UK_UNIQUE_TAXPAYER_REFERENCE_NUMBER*\n\nA UK Unique Taxpayer Reference (UTR) is a 10-digit number that identifies a taxpayer or a business.\n- *Custom*\n\n- *Regex filter* - You can use a regular expressions to define patterns for a guardrail to recognize and act upon such as serial number, booking ID etc.."
+ "description": "Configure guardrail type when the PII entity is detected.\n\nThe following PIIs are used to block or mask sensitive information:\n\n- *General*\n\n- *ADDRESS*\n\nA physical address, such as \"100 Main Street, Anytown, USA\" or \"Suite #12, Building 123\". An address can include information such as the street, building, location, city, state, country, county, zip code, precinct, and neighborhood.\n- *AGE*\n\nAn individual's age, including the quantity and unit of time. For example, in the phrase \"I am 40 years old,\" Guardrails recognizes \"40 years\" as an age.\n- *NAME*\n\nAn individual's name. This entity type does not include titles, such as Dr., Mr., Mrs., or Miss. guardrails doesn't apply this entity type to names that are part of organizations or addresses. For example, guardrails recognizes the \"John Doe Organization\" as an organization, and it recognizes \"Jane Doe Street\" as an address.\n- *EMAIL*\n\nAn email address, such as *marymajor@email.com* .\n- *PHONE*\n\nA phone number. This entity type also includes fax and pager numbers.\n- *USERNAME*\n\nA user name that identifies an account, such as a login name, screen name, nick name, or handle.\n- *PASSWORD*\n\nAn alphanumeric string that is used as a password, such as \"* *very20special#pass** \".\n- *DRIVER_ID*\n\nThe number assigned to a driver's license, which is an official document permitting an individual to operate one or more motorized vehicles on a public road. A driver's license number consists of alphanumeric characters.\n- *LICENSE_PLATE*\n\nA license plate for a vehicle is issued by the state or country where the vehicle is registered. The format for passenger vehicles is typically five to eight digits, consisting of upper-case letters and numbers. The format varies depending on the location of the issuing state or country.\n- *VEHICLE_IDENTIFICATION_NUMBER*\n\nA Vehicle Identification Number (VIN) uniquely identifies a vehicle. VIN content and format are defined in the *ISO 3779* specification. Each country has specific codes and formats for VINs.\n- *Finance*\n\n- *CREDIT_DEBIT_CARD_CVV*\n\nA three-digit card verification code (CVV) that is present on VISA, MasterCard, and Discover credit and debit cards. For American Express credit or debit cards, the CVV is a four-digit numeric code.\n- *CREDIT_DEBIT_CARD_EXPIRY*\n\nThe expiration date for a credit or debit card. This number is usually four digits long and is often formatted as *month/year* or *MM/YY* . Guardrails recognizes expiration dates such as *01/21* , *01/2021* , and *Jan 2021* .\n- *CREDIT_DEBIT_CARD_NUMBER*\n\nThe number for a credit or debit card. These numbers can vary from 13 to 16 digits in length. However, Amazon Comprehend also recognizes credit or debit card numbers when only the last four digits are present.\n- *PIN*\n\nA four-digit personal identification number (PIN) with which you can access your bank account.\n- *INTERNATIONAL_BANK_ACCOUNT_NUMBER*\n\nAn International Bank Account Number has specific formats in each country. For more information, see [www.iban.com/structure](https://docs.aws.amazon.com/https://www.iban.com/structure) .\n- *SWIFT_CODE*\n\nA SWIFT code is a standard format of Bank Identifier Code (BIC) used to specify a particular bank or branch. Banks use these codes for money transfers such as international wire transfers.\n\nSWIFT codes consist of eight or 11 characters. The 11-digit codes refer to specific branches, while eight-digit codes (or 11-digit codes ending in 'XXX') refer to the head or primary office.\n- *IT*\n\n- *IP_ADDRESS*\n\nAn IPv4 address, such as *198.51.100.0* .\n- *MAC_ADDRESS*\n\nA *media access control* (MAC) address is a unique identifier assigned to a network interface controller (NIC).\n- *URL*\n\nA web address, such as *www.example.com* .\n- *AWS_ACCESS_KEY*\n\nA unique identifier that's associated with a secret access key; you use the access key ID and secret access key to sign programmatic AWS requests cryptographically.\n- *AWS_SECRET_KEY*\n\nA unique identifier that's associated with an access key. You use the access key ID and secret access key to sign programmatic AWS requests cryptographically.\n- *USA specific*\n\n- *US_BANK_ACCOUNT_NUMBER*\n\nA US bank account number, which is typically 10 to 12 digits long.\n- *US_BANK_ROUTING_NUMBER*\n\nA US bank account routing number. These are typically nine digits long,\n- *US_INDIVIDUAL_TAX_IDENTIFICATION_NUMBER*\n\nA US Individual Taxpayer Identification Number (ITIN) is a nine-digit number that starts with a \"9\" and contain a \"7\" or \"8\" as the fourth digit. An ITIN can be formatted with a space or a dash after the third and forth digits.\n- *US_PASSPORT_NUMBER*\n\nA US passport number. Passport numbers range from six to nine alphanumeric characters.\n- *US_SOCIAL_SECURITY_NUMBER*\n\nA US Social Security Number (SSN) is a nine-digit number that is issued to US citizens, permanent residents, and temporary working residents.\n- *Canada specific*\n\n- *CA_HEALTH_NUMBER*\n\nA Canadian Health Service Number is a 10-digit unique identifier, required for individuals to access healthcare benefits.\n- *CA_SOCIAL_INSURANCE_NUMBER*\n\nA Canadian Social Insurance Number (SIN) is a nine-digit unique identifier, required for individuals to access government programs and benefits.\n\nThe SIN is formatted as three groups of three digits, such as *123-456-789* . A SIN can be validated through a simple check-digit process called the [Luhn algorithm](https://docs.aws.amazon.com/https://www.wikipedia.org/wiki/Luhn_algorithm) .\n- *UK Specific*\n\n- *UK_NATIONAL_HEALTH_SERVICE_NUMBER*\n\nA UK National Health Service Number is a 10-17 digit number, such as *485 777 3456* . The current system formats the 10-digit number with spaces after the third and sixth digits. The final digit is an error-detecting checksum.\n- *UK_NATIONAL_INSURANCE_NUMBER*\n\nA UK National Insurance Number (NINO) provides individuals with access to National Insurance (social security) benefits. It is also used for some purposes in the UK tax system.\n\nThe number is nine digits long and starts with two letters, followed by six numbers and one letter. A NINO can be formatted with a space or a dash after the two letters and after the second, forth, and sixth digits.\n- *UK_UNIQUE_TAXPAYER_REFERENCE_NUMBER*\n\nA UK Unique Taxpayer Reference (UTR) is a 10-digit number that identifies a taxpayer or a business.\n- *Custom*\n\n- *Regex filter* - You can use a regular expressions to define patterns for a guardrail to recognize and act upon such as serial number, booking ID etc.."
}
}
},
@@ -126090,7 +126449,8 @@
"type": "object",
"properties": {
"advancedSecurityAdditionalFlows": {
- "$ref": "#/types/aws-native:cognito:UserPoolAdvancedSecurityAdditionalFlows"
+ "$ref": "#/types/aws-native:cognito:UserPoolAdvancedSecurityAdditionalFlows",
+ "description": "Advanced security configuration options for additional authentication types in your user pool, including custom authentication."
},
"advancedSecurityMode": {
"type": "string",
@@ -126119,7 +126479,8 @@
"type": "object",
"properties": {
"customAuthMode": {
- "type": "string"
+ "type": "string",
+ "description": "The operating mode of advanced security features in custom authentication with [Custom authentication challenge Lambda triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html) ."
}
}
},
@@ -126377,7 +126738,8 @@
"description": "The password policy settings for a user pool, including complexity, history, and length requirements."
},
"signInPolicy": {
- "$ref": "#/types/aws-native:cognito:UserPoolSignInPolicy"
+ "$ref": "#/types/aws-native:cognito:UserPoolSignInPolicy",
+ "description": "The policy for allowed types of authentication in a user pool.\n\nThis data type is a request and response parameter of [CreateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html) and [UpdateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html) , and a response parameter of [DescribeUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html) ."
}
}
},
@@ -126597,7 +126959,8 @@
"type": "array",
"items": {
"type": "string"
- }
+ },
+ "description": "The sign-in methods that a user pool supports as the first factor. You can permit users to start authentication with a standard username and password, or with other one-time password and hardware factors.\n\nSupports values of `EMAIL_OTP` , `SMS_OTP` , `WEB_AUTHN` and `PASSWORD` ,"
}
}
},
@@ -135870,7 +136233,7 @@
"properties": {
"capacityReservationPreference": {
"type": "string",
- "description": "Indicates the instance's Capacity Reservation preferences. Possible preferences include:\n + ``capacity-reservations-only`` - The instance will only run in a Capacity Reservation or Capacity Reservation group. If capacity isn't available, the instance will fail to launch.\n + ``open`` - The instance can run in any ``open`` Capacity Reservation that has matching attributes (instance type, platform, Availability Zone, tenancy).\n + ``none`` - The instance avoids running in a Capacity Reservation even if one is available. The instance runs in On-Demand capacity."
+ "description": "Indicates the instance's Capacity Reservation preferences. Possible preferences include:\n + ``open`` - The instance can run in any ``open`` Capacity Reservation that has matching attributes (instance type, platform, Availability Zone).\n + ``none`` - The instance avoids running in a Capacity Reservation even if one is available. The instance runs in On-Demand capacity."
},
"capacityReservationTarget": {
"$ref": "#/types/aws-native:ec2:LaunchTemplateCapacityReservationTarget",
@@ -135994,7 +136357,7 @@
"items": {
"$ref": "#/types/aws-native:ec2:LaunchTemplateElasticInferenceAccelerator"
},
- "description": "Amazon Elastic Inference is no longer available.\n An elastic inference accelerator to associate with the instance. Elastic inference accelerators are a resource you can attach to your Amazon EC2 instances to accelerate your Deep Learning (DL) inference workloads.\n You cannot specify accelerators from different generations in the same request.\n Starting April 15, 2023, AWS will not onboard new customers to Amazon Elastic Inference (EI), and will help current customers migrate their workloads to options that offer better price and performance. After April 15, 2023, new customers will not be able to launch instances with Amazon EI accelerators in Amazon SageMaker, Amazon ECS, or Amazon EC2. However, customers who have used Amazon EI at least once during the past 30-day period are considered current customers and will be able to continue using the service."
+ "description": "An elastic inference accelerator to associate with the instance. Elastic inference accelerators are a resource you can attach to your Amazon EC2 instances to accelerate your Deep Learning (DL) inference workloads.\n You cannot specify accelerators from different generations in the same request.\n Starting April 15, 2023, AWS will not onboard new customers to Amazon Elastic Inference (EI), and will help current customers migrate their workloads to options that offer better price and performance. After April 15, 2023, new customers will not be able to launch instances with Amazon EI accelerators in Amazon SageMaker, Amazon ECS, or Amazon EC2. However, customers who have used Amazon EI at least once during the past 30-day period are considered current customers and will be able to continue using the service."
},
"enclaveOptions": {
"$ref": "#/types/aws-native:ec2:LaunchTemplateEnclaveOptions",
@@ -136022,7 +136385,7 @@
},
"instanceRequirements": {
"$ref": "#/types/aws-native:ec2:LaunchTemplateInstanceRequirements",
- "description": "The attributes for the instance types. When you specify instance attributes, Amazon EC2 will identify instance types with these attributes.\n You must specify ``VCpuCount`` and ``MemoryMiB``. All other attributes are optional. Any unspecified optional attribute is set to its default.\n When you specify multiple attributes, you get instance types that satisfy all of the specified attributes. If you specify multiple values for an attribute, you get instance types that satisfy any of the specified values.\n To limit the list of instance types from which Amazon EC2 can identify matching instance types, you can use one of the following parameters, but not both in the same request:\n + ``AllowedInstanceTypes`` - The instance types to include in the list. All other instance types are ignored, even if they match your specified attributes.\n + ``ExcludedInstanceTypes`` - The instance types to exclude from the list, even if they match your specified attributes.\n \n If you specify ``InstanceRequirements``, you can't specify ``InstanceType``.\n Attribute-based instance type selection is only supported when using Auto Scaling groups, EC2 Fleet, and Spot Fleet to launch instances. If you plan to use the launch template in the [launch instance wizard](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-instance-wizard.html), or with the [RunInstances](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html) API or [AWS::EC2::Instance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html) AWS CloudFormation resource, you can't specify ``InstanceRequirements``.\n For more information, see [Specify attributes for instance type selection for EC2 Fleet or Spot Fleet](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html) and [Spot placement score](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-placement-score.html) in the *Amazon EC2 User Guide*."
+ "description": "The attributes for the instance types. When you specify instance attributes, Amazon EC2 will identify instance types with these attributes.\n You must specify ``VCpuCount`` and ``MemoryMiB``. All other attributes are optional. Any unspecified optional attribute is set to its default.\n When you specify multiple attributes, you get instance types that satisfy all of the specified attributes. If you specify multiple values for an attribute, you get instance types that satisfy any of the specified values.\n To limit the list of instance types from which Amazon EC2 can identify matching instance types, you can use one of the following parameters, but not both in the same request:\n + ``AllowedInstanceTypes`` - The instance types to include in the list. All other instance types are ignored, even if they match your specified attributes.\n + ``ExcludedInstanceTypes`` - The instance types to exclude from the list, even if they match your specified attributes.\n \n If you specify ``InstanceRequirements``, you can't specify ``InstanceType``.\n Attribute-based instance type selection is only supported when using Auto Scaling groups, EC2 Fleet, and Spot Fleet to launch instances. If you plan to use the launch template in the [launch instance wizard](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-instance-wizard.html), or with the [RunInstances](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html) API or [AWS::EC2::Instance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html) AWS CloudFormation resource, you can't specify ``InstanceRequirements``.\n For more information, see [Attribute-based instance type selection for EC2 Fleet](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html), [Attribute-based instance type selection for Spot Fleet](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet-attribute-based-instance-type-selection.html), and [Spot placement score](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-placement-score.html) in the *Amazon EC2 User Guide*."
},
"instanceType": {
"type": "string",
@@ -136062,9 +136425,6 @@
},
"description": "The network interfaces for the instance."
},
- "networkPerformanceOptions": {
- "$ref": "pulumi.json#/Any"
- },
"placement": {
"$ref": "#/types/aws-native:ec2:LaunchTemplatePlacement",
"description": "The placement for the instance."
@@ -136096,7 +136456,7 @@
"items": {
"$ref": "#/types/aws-native:ec2:TagSpecification"
},
- "description": "The tags to apply to resources that are created during instance launch.\n To tag the launch template itself, use [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#cfn-ec2-launchtemplate-tagspecifications)."
+ "description": "The tags to apply to the resources that are created during instance launch.\n To tag a resource after it has been created, see [CreateTags](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateTags.html).\n To tag the launch template itself, use [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#cfn-ec2-launchtemplate-tagspecifications)."
},
"userData": {
"type": "string",
@@ -136121,7 +136481,7 @@
},
"kmsKeyId": {
"type": "string",
- "description": "Identifier (key ID, key alias, key ARN, or alias ARN) of the customer managed KMS key to use for EBS encryption."
+ "description": "The ARN of the symmetric KMSlong (KMS) CMK used for encryption."
},
"snapshotId": {
"type": "string",
@@ -136259,7 +136619,7 @@
"items": {
"type": "string"
},
- "description": "The accelerator types that must be on the instance type.\n + For instance types with GPU accelerators, specify ``gpu``.\n + For instance types with FPGA accelerators, specify ``fpga``.\n \n Default: Any accelerator type"
+ "description": "The accelerator types that must be on the instance type.\n + For instance types with GPU accelerators, specify ``gpu``.\n + For instance types with FPGA accelerators, specify ``fpga``.\n + For instance types with inference accelerators, specify ``inference``.\n \n Default: Any accelerator type"
},
"allowedInstanceTypes": {
"type": "array",
@@ -136278,7 +136638,7 @@
},
"baselinePerformanceFactors": {
"$ref": "#/types/aws-native:ec2:LaunchTemplateBaselinePerformanceFactors",
- "description": "The baseline performance to consider, using an instance family as a baseline reference. The instance family establishes the lowest acceptable level of performance. Amazon EC2 uses this baseline to guide instance type selection, but there is no guarantee that the selected instance types will always exceed the baseline for every application. Currently, this parameter only supports CPU performance as a baseline performance factor. For more information, see [Performance protection](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html#ec2fleet-abis-performance-protection) in the *Amazon EC2 User Guide*."
+ "description": "The baseline performance to consider, using an instance family as a baseline reference. The instance family establishes the lowest acceptable level of performance. Amazon EC2 uses this baseline to guide instance type selection, but there is no guarantee that the selected instance types will always exceed the baseline for every application. Currently, this parameter only supports CPU performance as a baseline performance factor. For more information, see [Performance protection](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html#ec2fleet-abis-performance-protection) in the *Amazon EC2 User Guide* ."
},
"burstablePerformance": {
"type": "string",
@@ -136289,7 +136649,7 @@
"items": {
"type": "string"
},
- "description": "The CPU manufacturers to include.\n + For instance types with Intel CPUs, specify ``intel``.\n + For instance types with AMD CPUs, specify ``amd``.\n + For instance types with AWS CPUs, specify ``amazon-web-services``.\n + For instance types with Apple CPUs, specify ``apple``.\n \n Don't confuse the CPU manufacturer with the CPU architecture. Instances will be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you specify in your launch template.\n Default: Any manufacturer"
+ "description": "The CPU manufacturers to include.\n + For instance types with Intel CPUs, specify ``intel``.\n + For instance types with AMD CPUs, specify ``amd``.\n + For instance types with AWS CPUs, specify ``amazon-web-services``.\n \n Don't confuse the CPU manufacturer with the CPU architecture. Instances will be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you specify in your launch template.\n Default: Any manufacturer"
},
"excludedInstanceTypes": {
"type": "array",
@@ -136519,7 +136879,7 @@
},
"interfaceType": {
"type": "string",
- "description": "The type of network interface. To create an Elastic Fabric Adapter (EFA), specify ``efa`` or ``efa``. For more information, see [Elastic Fabric Adapter](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/efa.html) in the *Amazon EC2 User Guide*.\n If you are not creating an EFA, specify ``interface`` or omit this parameter.\n If you specify ``efa-only``, do not assign any IP addresses to the network interface. EFA-only network interfaces do not support IP addresses.\n Valid values: ``interface`` | ``efa`` | ``efa-only``"
+ "description": "The type of network interface. To create an Elastic Fabric Adapter (EFA), specify ``efa``. For more information, see [Elastic Fabric Adapter](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/efa.html) in the *Amazon EC2 User Guide*.\n If you are not creating an EFA, specify ``interface`` or omit this parameter.\n Valid values: ``interface`` | ``efa``"
},
"ipv4PrefixCount": {
"type": "integer",
@@ -136678,7 +137038,8 @@
"type": "object",
"properties": {
"instanceFamily": {
- "type": "string"
+ "type": "string",
+ "description": "The instance family to refer. Ensure that you specify the correct family name. For example, C6i and C6g are valid values, but C6 is not."
}
}
},
@@ -138115,7 +138476,7 @@
},
"secondaryPrivateIpAddressCount": {
"type": "integer",
- "description": "The number of secondary private IPv4 addresses. You can't specify this option and specify more than one private IP address using the private IP addresses option. You cannot specify this option if you're launching more than one instance in a [RunInstances](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html) request."
+ "description": "The number of secondary private IPv4 addresses. You can’t specify this parameter and also specify a secondary private IP address using the `PrivateIpAddress` parameter."
},
"subnetId": {
"type": "string",
@@ -140573,7 +140934,7 @@
},
"versionConsistency": {
"$ref": "#/types/aws-native:ecs:TaskDefinitionContainerDefinitionVersionConsistency",
- "description": "Specifies whether Amazon ECS will resolve the container image tag provided in the container definition to an image digest. By default, the value is `enabled` . If you set the value for a container as `disabled` , Amazon ECS will not resolve the provided container image tag to a digest and will use the original image URI specified in the container definition for deployment. For more information about container image resolution, see [Container image resolution](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-type-ecs.html#deployment-container-image-stability) in the *Amazon ECS Developer Guide* ."
+ "description": "Specifies whether Amazon ECS will resolve the container image tag provided in the container definition to an image digest. By default, the value is ``enabled``. If you set the value for a container as ``disabled``, Amazon ECS will not resolve the provided container image tag to a digest and will use the original image URI specified in the container definition for deployment. For more information about container image resolution, see [Container image resolution](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-type-ecs.html#deployment-container-image-stability) in the *Amazon ECS Developer Guide*."
},
"volumesFrom": {
"type": "array",
@@ -144065,7 +144426,8 @@
"description": "The authorization parameters for Basic authorization."
},
"connectivityParameters": {
- "$ref": "#/types/aws-native:events:ConnectionConnectivityParameters"
+ "$ref": "#/types/aws-native:events:ConnectionConnectivityParameters",
+ "description": "For private OAuth authentication endpoints. The parameters EventBridge uses to authenticate against the endpoint.\n\nFor more information, see [Authorization methods for connections](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-target-connection-auth.html) in the **Amazon EventBridge User Guide** ."
},
"invocationHttpParameters": {
"$ref": "#/types/aws-native:events:ConnectionHttpParameters",
@@ -144113,7 +144475,8 @@
"type": "object",
"properties": {
"resourceParameters": {
- "$ref": "#/types/aws-native:events:ConnectionResourceParameters"
+ "$ref": "#/types/aws-native:events:ConnectionResourceParameters",
+ "description": "The parameters for EventBridge to use when invoking the resource endpoint."
}
}
},
@@ -144188,10 +144551,12 @@
"type": "object",
"properties": {
"resourceAssociationArn": {
- "type": "string"
+ "type": "string",
+ "description": "For connections to private APIs, the Amazon Resource Name (ARN) of the resource association EventBridge created between the connection and the private API's resource configuration.\n\n\u003e The value of this property is set by EventBridge . Any value you specify in your template is ignored."
},
"resourceConfigurationArn": {
- "type": "string"
+ "type": "string",
+ "description": "The Amazon Resource Name (ARN) of the Amazon VPC Lattice resource configuration for the resource endpoint."
}
}
},
@@ -144284,7 +144649,8 @@
"type": "object",
"properties": {
"resourceParameters": {
- "$ref": "#/types/aws-native:events:ConnectionResourceParameters"
+ "$ref": "#/types/aws-native:events:ConnectionResourceParameters",
+ "description": "The parameters for EventBridge to use when invoking the resource endpoint."
}
}
},
@@ -151053,7 +151419,8 @@
"type": "array",
"items": {
"type": "string"
- }
+ },
+ "description": "The list of `LINKED_ACCOUNT` IDs where charges are included within the invoice unit."
}
}
},
@@ -151272,6 +151639,80 @@
"aws-native:iot:CertificateStatus": {
"type": "string"
},
+ "aws-native:iot:CommandNamespace": {
+ "type": "string"
+ },
+ "aws-native:iot:CommandParameter": {
+ "type": "object",
+ "properties": {
+ "defaultValue": {
+ "$ref": "#/types/aws-native:iot:CommandParameterValue"
+ },
+ "description": {
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ },
+ "value": {
+ "$ref": "#/types/aws-native:iot:CommandParameterValue"
+ }
+ }
+ },
+ "aws-native:iot:CommandParameterValue": {
+ "type": "object",
+ "properties": {
+ "b": {
+ "type": "boolean"
+ },
+ "bin": {
+ "type": "string"
+ },
+ "d": {
+ "type": "number"
+ },
+ "i": {
+ "type": "integer"
+ },
+ "l": {
+ "type": "string"
+ },
+ "s": {
+ "type": "string"
+ },
+ "ul": {
+ "type": "string"
+ }
+ },
+ "irreversibleNames": {
+ "bin": "BIN",
+ "ul": "UL"
+ }
+ },
+ "aws-native:iot:CommandPayload": {
+ "type": "object",
+ "properties": {
+ "content": {
+ "type": "string"
+ },
+ "contentType": {
+ "type": "string"
+ }
+ }
+ },
+ "aws-native:iot:CommandTag": {
+ "type": "object",
+ "properties": {
+ "key": {
+ "type": "string",
+ "description": "The tag's key."
+ },
+ "value": {
+ "type": "string",
+ "description": "The tag's value."
+ }
+ }
+ },
"aws-native:iot:CustomMetricMetricType": {
"type": "string"
},
@@ -209800,6 +210241,19 @@
}
}
},
+ "aws-native:ram:ResourceShareTag": {
+ "type": "object",
+ "properties": {
+ "key": {
+ "type": "string",
+ "description": "The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."
+ },
+ "value": {
+ "type": "string",
+ "description": "The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."
+ }
+ }
+ },
"aws-native:rbin:RuleResourceTag": {
"type": "object",
"properties": {
@@ -209869,11 +210323,11 @@
"properties": {
"key": {
"type": "string",
- "description": "The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."
+ "description": "A key is the required name of the tag. The string value can be from 1 to 128 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."
},
"value": {
"type": "string",
- "description": "The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."
+ "description": "A value is the optional value of the tag. The string value can be from 1 to 256 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."
}
}
},
@@ -210661,6 +211115,9 @@
"type": "string",
"description": "The namespace the workgroup is associated with."
},
+ "pricePerformanceTarget": {
+ "$ref": "#/types/aws-native:redshiftserverless:WorkgroupPerformanceTarget"
+ },
"publiclyAccessible": {
"type": "boolean",
"description": "A value that specifies whether the workgroup can be accessible from a public network."
@@ -210751,6 +211208,20 @@
}
}
},
+ "aws-native:redshiftserverless:WorkgroupPerformanceTarget": {
+ "type": "object",
+ "properties": {
+ "level": {
+ "type": "integer"
+ },
+ "status": {
+ "$ref": "#/types/aws-native:redshiftserverless:WorkgroupPerformanceTargetStatus"
+ }
+ }
+ },
+ "aws-native:redshiftserverless:WorkgroupPerformanceTargetStatus": {
+ "type": "string"
+ },
"aws-native:redshiftserverless:WorkgroupStatus": {
"type": "string"
},
@@ -212880,6 +213351,38 @@
}
}
},
+ "aws-native:s3:BucketMetadataTableConfiguration": {
+ "type": "object",
+ "properties": {
+ "error": {
+ "$ref": "#/types/aws-native:s3:BucketMetadataTableError",
+ "description": "Returns the \u003ccode\u003eError\u003c/code\u003e value of the GetBucketMetadataTableConfiguration response."
+ },
+ "s3TablesDestination": {
+ "$ref": "#/types/aws-native:s3:BucketS3TablesDestination"
+ },
+ "status": {
+ "type": "string",
+ "description": "Returns the \u003ccode\u003eStatus\u003c/code\u003e value of the \u003ccode\u003eGetBucketMetadataTableConfigurationResult\u003c/code\u003e response. This value indicates the status of the metadata table. The status values are:\u003cbr/\u003e\u003ccode\u003eCREATING\u003c/code\u003e - The metadata table is in the process of being created in the specified table bucket.\u003cbr/\u003e\u003ccode\u003eACTIVE\u003c/code\u003e - The metadata table has been created successfully and records are being delivered to the table.\u003cbr/\u003e\u003ccode\u003eFAILED\u003c/code\u003e - Amazon S3 is unable to create the metadata table, or Amazon S3 is unable to deliver records."
+ }
+ },
+ "irreversibleNames": {
+ "s3TablesDestination": "S3TablesDestination"
+ }
+ },
+ "aws-native:s3:BucketMetadataTableError": {
+ "type": "object",
+ "properties": {
+ "errorCode": {
+ "type": "string",
+ "description": "If the \u003ccode\u003eCreateBucketMetadataTableConfiguration\u003c/code\u003e request succeeds, but S3 Metadata was unable to create the table, this structure contains the error code. The possible error codes and error messages are as follows:\u003cbr/\u003e\u003ccode\u003eAccessDeniedCreatingResources\u003c/code\u003e - You don't have sufficient permissions to create the required resources. Make sure that you have \u003ccode\u003es3tables:CreateNamespace\u003c/code\u003e, \u003ccode\u003es3tables:CreateTable\u003c/code\u003e, \u003ccode\u003es3tables:GetTable\u003c/code\u003e and \u003ccode\u003es3tables:PutTablePolicy\u003c/code\u003e permissions, and then try again. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration.\u003cbr/\u003e\u003ccode\u003eAccessDeniedWritingToTable\u003c/code\u003e - Unable to write to the metadata table because of missing resource permissions. To fix the resource policy, Amazon S3 needs to create a new metadata table. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration.\u003cbr/\u003e\u003ccode\u003eDestinationTableNotFound\u003c/code\u003e - The destination table doesn't exist. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration.\u003cbr/\u003e\u003ccode\u003eServerInternalError\u003c/code\u003e - An internal error has occurred. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration.\u003cbr/\u003e\u003ccode\u003eTableAlreadyExists\u003c/code\u003e - The table that you specified already exists in the table bucket's namespace. Specify a different table name. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration.\u003cbr/\u003e\u003ccode\u003eTableBucketNotFound\u003c/code\u003e - The table bucket that you specified doesn't exist in this AWS Region and account. Create or choose a different table bucket. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration."
+ },
+ "errorMessage": {
+ "type": "string",
+ "description": "If the \u003ccode\u003eCreateBucketMetadataTableConfiguration\u003c/code\u003e request succeeds, but S3 Metadata was unable to create the table, this structure contains the error code. The possible error codes and error messages are as follows:\u003cbr/\u003e\u003ccode\u003eAccessDeniedCreatingResources\u003c/code\u003e - You don't have sufficient permissions to create the required resources. Make sure that you have \u003ccode\u003es3tables:CreateNamespace\u003c/code\u003e, \u003ccode\u003es3tables:CreateTable\u003c/code\u003e, \u003ccode\u003es3tables:GetTable\u003c/code\u003e and \u003ccode\u003es3tables:PutTablePolicy\u003c/code\u003e permissions, and then try again. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration.\u003cbr/\u003e\u003ccode\u003eAccessDeniedWritingToTable\u003c/code\u003e - Unable to write to the metadata table because of missing resource permissions. To fix the resource policy, Amazon S3 needs to create a new metadata table. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration.\u003cbr/\u003e\u003ccode\u003eDestinationTableNotFound\u003c/code\u003e - The destination table doesn't exist. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration.\u003cbr/\u003e\u003ccode\u003eServerInternalError\u003c/code\u003e - An internal error has occurred. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration.\u003cbr/\u003e\u003ccode\u003eTableAlreadyExists\u003c/code\u003e - The table that you specified already exists in the table bucket's namespace. Specify a different table name. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration.\u003cbr/\u003e\u003ccode\u003eTableBucketNotFound\u003c/code\u003e - The table bucket that you specified doesn't exist in this AWS Region and account. Create or choose a different table bucket. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration."
+ }
+ }
+ },
"aws-native:s3:BucketMetrics": {
"type": "object",
"properties": {
@@ -213404,6 +213907,27 @@
}
}
},
+ "aws-native:s3:BucketS3TablesDestination": {
+ "type": "object",
+ "properties": {
+ "tableArn": {
+ "type": "string",
+ "description": "The Amazon Resource Name (ARN) for the metadata table in the metadata table configuration. The specified metadata table name must be unique within the \u003ccode\u003eaws_s3_metadata\u003c/code\u003e namespace in the destination table bucket."
+ },
+ "tableBucketArn": {
+ "type": "string",
+ "description": "The Amazon Resource Name (ARN) for the table bucket that's specified as the destination in the metadata table configuration. The destination table bucket must be in the same Region and AWS account as the general purpose bucket."
+ },
+ "tableName": {
+ "type": "string",
+ "description": "The name for the metadata table in your metadata table configuration. The specified metadata table name must be unique within the \u003ccode\u003eaws_s3_metadata\u003c/code\u003e namespace in the destination table bucket."
+ },
+ "tableNamespace": {
+ "type": "string",
+ "description": "The table bucket namespace for the metadata table in your metadata table configuration. This value is always \u003ccode\u003eaws_s3_metadata\u003c/code\u003e."
+ }
+ }
+ },
"aws-native:s3:BucketServerSideEncryptionByDefault": {
"type": "object",
"properties": {
@@ -214460,6 +214984,29 @@
"aws-native:s3outposts:EndpointStatus": {
"type": "string"
},
+ "aws-native:s3tables:TableBucketPolicyResourcePolicy": {
+ "type": "object"
+ },
+ "aws-native:s3tables:TableBucketUnreferencedFileRemoval": {
+ "type": "object",
+ "properties": {
+ "noncurrentDays": {
+ "type": "integer",
+ "description": "S3 permanently deletes noncurrent objects after the number of days specified by the NoncurrentDays property."
+ },
+ "status": {
+ "$ref": "#/types/aws-native:s3tables:TableBucketUnreferencedFileRemovalStatus",
+ "description": "Indicates whether the Unreferenced File Removal maintenance action is enabled."
+ },
+ "unreferencedDays": {
+ "type": "integer",
+ "description": "For any object not referenced by your table and older than the UnreferencedDays property, S3 creates a delete marker and marks the object version as noncurrent."
+ }
+ }
+ },
+ "aws-native:s3tables:TableBucketUnreferencedFileRemovalStatus": {
+ "type": "string"
+ },
"aws-native:sagemaker:AppImageConfigCodeEditorAppImageConfig": {
"type": "object",
"properties": {
@@ -234593,6 +235140,12 @@
"certificateProviderName"
]
},
+ "aws-native:iot:getCommand": {
+ "cf": "AWS::IoT::Command",
+ "ids": [
+ "commandId"
+ ]
+ },
"aws-native:iot:getCustomMetric": {
"cf": "AWS::IoT::CustomMetric",
"ids": [
@@ -236254,6 +236807,12 @@
"arn"
]
},
+ "aws-native:ram:getResourceShare": {
+ "cf": "AWS::RAM::ResourceShare",
+ "ids": [
+ "arn"
+ ]
+ },
"aws-native:rbin:getRule": {
"cf": "AWS::Rbin::Rule",
"ids": [
@@ -236808,6 +237367,18 @@
"arn"
]
},
+ "aws-native:s3tables:getTableBucket": {
+ "cf": "AWS::S3Tables::TableBucket",
+ "ids": [
+ "tableBucketArn"
+ ]
+ },
+ "aws-native:s3tables:getTableBucketPolicy": {
+ "cf": "AWS::S3Tables::TableBucketPolicy",
+ "ids": [
+ "tableBucketArn"
+ ]
+ },
"aws-native:sagemaker:getApp": {
"cf": "AWS::SageMaker::App",
"ids": [
diff --git a/provider/cmd/pulumi-resource-aws-native/schema.json b/provider/cmd/pulumi-resource-aws-native/schema.json
index a676275f55..3f76d20c76 100644
--- a/provider/cmd/pulumi-resource-aws-native/schema.json
+++ b/provider/cmd/pulumi-resource-aws-native/schema.json
@@ -205,6 +205,7 @@
"s3express": "S3Express",
"s3objectlambda": "S3ObjectLambda",
"s3outposts": "S3Outposts",
+ "s3tables": "S3Tables",
"sagemaker": "SageMaker",
"scheduler": "Scheduler",
"secretsmanager": "SecretsManager",
@@ -7871,6 +7872,7 @@
]
},
"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingCustomizedCapacityMetric": {
+ "description": "Represents a CloudWatch metric of your choosing for a predictive scaling policy.",
"properties": {
"metricDataQueries": {
"type": "array",
@@ -7886,6 +7888,7 @@
]
},
"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingCustomizedLoadMetric": {
+ "description": "The customized load metric specification.",
"properties": {
"metricDataQueries": {
"type": "array",
@@ -7900,6 +7903,7 @@
]
},
"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingCustomizedScalingMetric": {
+ "description": "One or more metric data queries to provide data points for a metric specification.",
"properties": {
"metricDataQueries": {
"type": "array",
@@ -7915,13 +7919,14 @@
]
},
"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetric": {
+ "description": "Describes the scaling metric.",
"properties": {
"dimensions": {
"type": "array",
"items": {
"$ref": "#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetricDimension"
},
- "description": "The dimensions for the metric."
+ "description": "Describes the dimensions of the metric."
},
"metricName": {
"type": "string",
@@ -7935,14 +7940,15 @@
"type": "object"
},
"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetricDataQuery": {
+ "description": "The metric data to return. Also defines whether this call is returning data for one metric only, or whether it is performing a math expression on the values of returned metric statistics to create a new time series. A time series is a series of data points, each of which is associated with a timestamp.",
"properties": {
"expression": {
"type": "string",
- "description": "The math expression to perform on the returned data, if this object is performing a math expression."
+ "description": "The math expression to perform on the returned data, if this object is performing a math expression. This expression can use the ``Id`` of the other metrics to refer to those metrics, and can also use the ``Id`` of other expressions to use the result of those expressions. \n Conditional: Within each ``MetricDataQuery`` object, you must specify either ``Expression`` or ``MetricStat``, but not both."
},
"id": {
"type": "string",
- "description": "A short name that identifies the object's results in the response."
+ "description": "A short name that identifies the object's results in the response. This name must be unique among all ``MetricDataQuery`` objects specified for a single scaling policy. If you are performing math expressions on this set of data, this name represents that data and can serve as a variable in the mathematical expression. The valid characters are letters, numbers, and underscores. The first character must be a lowercase letter."
},
"label": {
"type": "string",
@@ -7950,16 +7956,17 @@
},
"metricStat": {
"$ref": "#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetricStat",
- "description": "Information about the metric data to return."
+ "description": "Information about the metric data to return. \n Conditional: Within each ``MetricDataQuery`` object, you must specify either ``Expression`` or ``MetricStat``, but not both."
},
"returnData": {
"type": "boolean",
- "description": "Indicates whether to return the timestamps and raw data values of this metric."
+ "description": "Indicates whether to return the timestamps and raw data values of this metric. \n If you use any math expressions, specify ``true`` for this value for only the final math expression that the metric specification is based on. You must specify ``false`` for ``ReturnData`` for all the other metrics and expressions used in the metric specification.\n If you are only retrieving metrics and not performing any math expressions, do not specify anything for ``ReturnData``. This sets it to its default (``true``)."
}
},
"type": "object"
},
"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetricDimension": {
+ "description": "Describes the dimension of a metric.",
"properties": {
"name": {
"type": "string",
@@ -7973,6 +7980,7 @@
"type": "object"
},
"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetricSpecification": {
+ "description": "This structure specifies the metrics and target utilization settings for a predictive scaling policy. \n You must specify either a metric pair, or a load metric and a scaling metric individually. Specifying a metric pair instead of individual metrics provides a simpler way to configure metrics for a scaling policy. You choose the metric pair, and the policy automatically knows the correct sum and average statistics to use for the load metric and the scaling metric.",
"properties": {
"customizedCapacityMetricSpecification": {
"$ref": "#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingCustomizedCapacityMetric",
@@ -8009,46 +8017,48 @@
]
},
"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetricStat": {
+ "description": "This structure defines the CloudWatch metric to return, along with the statistic and unit.",
"properties": {
"metric": {
"$ref": "#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetric",
- "description": "The CloudWatch metric to return, including the metric name, namespace, and dimensions. "
+ "description": "The CloudWatch metric to return, including the metric name, namespace, and dimensions. To get the exact metric name, namespace, and dimensions, inspect the [Metric](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_Metric.html) object that is returned by a call to [ListMetrics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_ListMetrics.html)."
},
"stat": {
"type": "string",
- "description": "The statistic to return. It can include any CloudWatch statistic or extended statistic."
+ "description": "The statistic to return. It can include any CloudWatch statistic or extended statistic. For a list of valid values, see the table in [Statistics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch_concepts.html#Statistic) in the *Amazon CloudWatch User Guide*. \n The most commonly used metrics for predictive scaling are ``Average`` and ``Sum``."
},
"unit": {
"type": "string",
- "description": "The unit to use for the returned data points."
+ "description": "The unit to use for the returned data points. For a complete list of the units that CloudWatch supports, see the [MetricDatum](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_MetricDatum.html) data type in the *Amazon CloudWatch API Reference*."
}
},
"type": "object"
},
"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingPolicyConfiguration": {
+ "description": "Represents a predictive scaling policy configuration.",
"properties": {
"maxCapacityBreachBehavior": {
"type": "string",
- "description": "Defines the behavior that should be applied if the forecast capacity approaches or exceeds the maximum capacity. Defaults to `HonorMaxCapacity` if not specified."
+ "description": "Defines the behavior that should be applied if the forecast capacity approaches or exceeds the maximum capacity. Defaults to ``HonorMaxCapacity`` if not specified."
},
"maxCapacityBuffer": {
"type": "integer",
- "description": "The size of the capacity buffer to use when the forecast capacity is close to or exceeds the maximum capacity. The value is specified as a percentage relative to the forecast capacity. For example, if the buffer is 10, this means a 10 percent buffer, such that if the forecast capacity is 50, and the maximum capacity is 40, then the effective maximum capacity is 55.\n\nRequired if the `MaxCapacityBreachBehavior` property is set to `IncreaseMaxCapacity` , and cannot be used otherwise."
+ "description": "The size of the capacity buffer to use when the forecast capacity is close to or exceeds the maximum capacity. The value is specified as a percentage relative to the forecast capacity. For example, if the buffer is 10, this means a 10 percent buffer, such that if the forecast capacity is 50, and the maximum capacity is 40, then the effective maximum capacity is 55. \n Required if the ``MaxCapacityBreachBehavior`` property is set to ``IncreaseMaxCapacity``, and cannot be used otherwise."
},
"metricSpecifications": {
"type": "array",
"items": {
"$ref": "#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetricSpecification"
},
- "description": "This structure includes the metrics and target utilization to use for predictive scaling.\n\nThis is an array, but we currently only support a single metric specification. That is, you can specify a target value and a single metric pair, or a target value and one scaling metric and one load metric."
+ "description": "This structure includes the metrics and target utilization to use for predictive scaling. \n This is an array, but we currently only support a single metric specification. That is, you can specify a target value and a single metric pair, or a target value and one scaling metric and one load metric."
},
"mode": {
"type": "string",
- "description": "The predictive scaling mode. Defaults to `ForecastOnly` if not specified."
+ "description": "The predictive scaling mode. Defaults to ``ForecastOnly`` if not specified."
},
"schedulingBufferTime": {
"type": "integer",
- "description": "The amount of time, in seconds, that the start time can be advanced.\n\nThe value must be less than the forecast interval duration of 3600 seconds (60 minutes). Defaults to 300 seconds if not specified."
+ "description": "The amount of time, in seconds, that the start time can be advanced. \n The value must be less than the forecast interval duration of 3600 seconds (60 minutes). Defaults to 300 seconds if not specified."
}
},
"type": "object",
@@ -8057,6 +8067,7 @@
]
},
"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingPredefinedLoadMetric": {
+ "description": "Describes a load metric for a predictive scaling policy. \n When returned in the output of ``DescribePolicies``, it indicates that a predictive scaling policy uses individually specified load and scaling metrics instead of a metric pair.",
"properties": {
"predefinedMetricType": {
"type": "string",
@@ -8073,6 +8084,7 @@
]
},
"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingPredefinedMetricPair": {
+ "description": "Represents a metric pair for a predictive scaling policy.",
"properties": {
"predefinedMetricType": {
"type": "string",
@@ -8089,6 +8101,7 @@
]
},
"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingPredefinedScalingMetric": {
+ "description": "Describes a scaling metric for a predictive scaling policy. \n When returned in the output of ``DescribePolicies``, it indicates that a predictive scaling policy uses individually specified load and scaling metrics instead of a metric pair.",
"properties": {
"predefinedMetricType": {
"type": "string",
@@ -18997,7 +19010,7 @@
"properties": {
"bedrockFoundationModelConfiguration": {
"$ref": "#/types/aws-native:bedrock:DataSourceBedrockFoundationModelConfiguration",
- "description": "Settings for a foundation model used to parse documents for a data source."
+ "description": "If you specify `BEDROCK_FOUNDATION_MODEL` as the parsing strategy for ingesting your data source, use this object to modify configurations for using a foundation model to parse documents."
},
"parsingStrategy": {
"$ref": "#/types/aws-native:bedrock:DataSourceParsingStrategy",
@@ -19431,7 +19444,7 @@
},
"parsingConfiguration": {
"$ref": "#/types/aws-native:bedrock:DataSourceParsingConfiguration",
- "description": "A custom parser for data source documents.",
+ "description": "Configurations for a parser to use for parsing documents in your data source. If you exclude this field, the default parser will be used.",
"replaceOnChanges": true
}
},
@@ -21529,7 +21542,7 @@
},
"type": {
"$ref": "#/types/aws-native:bedrock:GuardrailPiiEntityType",
- "description": "Configure guardrail type when the PII entity is detected.\n\nThe following PIIs are used to block or mask sensitive information:\n\n- *General*\n\n- *ADDRESS*\n\nA physical address, such as \"100 Main Street, Anytown, USA\" or \"Suite #12, Building 123\". An address can include information such as the street, building, location, city, state, country, county, zip code, precinct, and neighborhood.\n- *AGE*\n\nAn individual's age, including the quantity and unit of time. For example, in the phrase \"I am 40 years old,\" Guarrails recognizes \"40 years\" as an age.\n- *NAME*\n\nAn individual's name. This entity type does not include titles, such as Dr., Mr., Mrs., or Miss. guardrails doesn't apply this entity type to names that are part of organizations or addresses. For example, guardrails recognizes the \"John Doe Organization\" as an organization, and it recognizes \"Jane Doe Street\" as an address.\n- *EMAIL*\n\nAn email address, such as *marymajor@email.com* .\n- *PHONE*\n\nA phone number. This entity type also includes fax and pager numbers.\n- *USERNAME*\n\nA user name that identifies an account, such as a login name, screen name, nick name, or handle.\n- *PASSWORD*\n\nAn alphanumeric string that is used as a password, such as \"* *very20special#pass** \".\n- *DRIVER_ID*\n\nThe number assigned to a driver's license, which is an official document permitting an individual to operate one or more motorized vehicles on a public road. A driver's license number consists of alphanumeric characters.\n- *LICENSE_PLATE*\n\nA license plate for a vehicle is issued by the state or country where the vehicle is registered. The format for passenger vehicles is typically five to eight digits, consisting of upper-case letters and numbers. The format varies depending on the location of the issuing state or country.\n- *VEHICLE_IDENTIFICATION_NUMBER*\n\nA Vehicle Identification Number (VIN) uniquely identifies a vehicle. VIN content and format are defined in the *ISO 3779* specification. Each country has specific codes and formats for VINs.\n- *Finance*\n\n- *REDIT_DEBIT_CARD_CVV*\n\nA three-digit card verification code (CVV) that is present on VISA, MasterCard, and Discover credit and debit cards. For American Express credit or debit cards, the CVV is a four-digit numeric code.\n- *CREDIT_DEBIT_CARD_EXPIRY*\n\nThe expiration date for a credit or debit card. This number is usually four digits long and is often formatted as *month/year* or *MM/YY* . Guardrails recognizes expiration dates such as *01/21* , *01/2021* , and *Jan 2021* .\n- *CREDIT_DEBIT_CARD_NUMBER*\n\nThe number for a credit or debit card. These numbers can vary from 13 to 16 digits in length. However, Amazon Comprehend also recognizes credit or debit card numbers when only the last four digits are present.\n- *PIN*\n\nA four-digit personal identification number (PIN) with which you can access your bank account.\n- *INTERNATIONAL_BANK_ACCOUNT_NUMBER*\n\nAn International Bank Account Number has specific formats in each country. For more information, see [www.iban.com/structure](https://docs.aws.amazon.com/https://www.iban.com/structure) .\n- *SWIFT_CODE*\n\nA SWIFT code is a standard format of Bank Identifier Code (BIC) used to specify a particular bank or branch. Banks use these codes for money transfers such as international wire transfers.\n\nSWIFT codes consist of eight or 11 characters. The 11-digit codes refer to specific branches, while eight-digit codes (or 11-digit codes ending in 'XXX') refer to the head or primary office.\n- *IT*\n\n- *IP_ADDRESS*\n\nAn IPv4 address, such as *198.51.100.0* .\n- *MAC_ADDRESS*\n\nA *media access control* (MAC) address is a unique identifier assigned to a network interface controller (NIC).\n- *URL*\n\nA web address, such as *www.example.com* .\n- *AWS_ACCESS_KEY*\n\nA unique identifier that's associated with a secret access key; you use the access key ID and secret access key to sign programmatic AWS requests cryptographically.\n- *AWS_SECRET_KEY*\n\nA unique identifier that's associated with an access key. You use the access key ID and secret access key to sign programmatic AWS requests cryptographically.\n- *USA specific*\n\n- *US_BANK_ACCOUNT_NUMBER*\n\nA US bank account number, which is typically 10 to 12 digits long.\n- *US_BANK_ROUTING_NUMBER*\n\nA US bank account routing number. These are typically nine digits long,\n- *US_INDIVIDUAL_TAX_IDENTIFICATION_NUMBER*\n\nA US Individual Taxpayer Identification Number (ITIN) is a nine-digit number that starts with a \"9\" and contain a \"7\" or \"8\" as the fourth digit. An ITIN can be formatted with a space or a dash after the third and forth digits.\n- *US_PASSPORT_NUMBER*\n\nA US passport number. Passport numbers range from six to nine alphanumeric characters.\n- *US_SOCIAL_SECURITY_NUMBER*\n\nA US Social Security Number (SSN) is a nine-digit number that is issued to US citizens, permanent residents, and temporary working residents.\n- *Canada specific*\n\n- *CA_HEALTH_NUMBER*\n\nA Canadian Health Service Number is a 10-digit unique identifier, required for individuals to access healthcare benefits.\n- *CA_SOCIAL_INSURANCE_NUMBER*\n\nA Canadian Social Insurance Number (SIN) is a nine-digit unique identifier, required for individuals to access government programs and benefits.\n\nThe SIN is formatted as three groups of three digits, such as *123-456-789* . A SIN can be validated through a simple check-digit process called the [Luhn algorithm](https://docs.aws.amazon.com/https://www.wikipedia.org/wiki/Luhn_algorithm) .\n- *UK Specific*\n\n- *UK_NATIONAL_HEALTH_SERVICE_NUMBER*\n\nA UK National Health Service Number is a 10-17 digit number, such as *485 777 3456* . The current system formats the 10-digit number with spaces after the third and sixth digits. The final digit is an error-detecting checksum.\n- *UK_NATIONAL_INSURANCE_NUMBER*\n\nA UK National Insurance Number (NINO) provides individuals with access to National Insurance (social security) benefits. It is also used for some purposes in the UK tax system.\n\nThe number is nine digits long and starts with two letters, followed by six numbers and one letter. A NINO can be formatted with a space or a dash after the two letters and after the second, forth, and sixth digits.\n- *UK_UNIQUE_TAXPAYER_REFERENCE_NUMBER*\n\nA UK Unique Taxpayer Reference (UTR) is a 10-digit number that identifies a taxpayer or a business.\n- *Custom*\n\n- *Regex filter* - You can use a regular expressions to define patterns for a guardrail to recognize and act upon such as serial number, booking ID etc.."
+ "description": "Configure guardrail type when the PII entity is detected.\n\nThe following PIIs are used to block or mask sensitive information:\n\n- *General*\n\n- *ADDRESS*\n\nA physical address, such as \"100 Main Street, Anytown, USA\" or \"Suite #12, Building 123\". An address can include information such as the street, building, location, city, state, country, county, zip code, precinct, and neighborhood.\n- *AGE*\n\nAn individual's age, including the quantity and unit of time. For example, in the phrase \"I am 40 years old,\" Guardrails recognizes \"40 years\" as an age.\n- *NAME*\n\nAn individual's name. This entity type does not include titles, such as Dr., Mr., Mrs., or Miss. guardrails doesn't apply this entity type to names that are part of organizations or addresses. For example, guardrails recognizes the \"John Doe Organization\" as an organization, and it recognizes \"Jane Doe Street\" as an address.\n- *EMAIL*\n\nAn email address, such as *marymajor@email.com* .\n- *PHONE*\n\nA phone number. This entity type also includes fax and pager numbers.\n- *USERNAME*\n\nA user name that identifies an account, such as a login name, screen name, nick name, or handle.\n- *PASSWORD*\n\nAn alphanumeric string that is used as a password, such as \"* *very20special#pass** \".\n- *DRIVER_ID*\n\nThe number assigned to a driver's license, which is an official document permitting an individual to operate one or more motorized vehicles on a public road. A driver's license number consists of alphanumeric characters.\n- *LICENSE_PLATE*\n\nA license plate for a vehicle is issued by the state or country where the vehicle is registered. The format for passenger vehicles is typically five to eight digits, consisting of upper-case letters and numbers. The format varies depending on the location of the issuing state or country.\n- *VEHICLE_IDENTIFICATION_NUMBER*\n\nA Vehicle Identification Number (VIN) uniquely identifies a vehicle. VIN content and format are defined in the *ISO 3779* specification. Each country has specific codes and formats for VINs.\n- *Finance*\n\n- *CREDIT_DEBIT_CARD_CVV*\n\nA three-digit card verification code (CVV) that is present on VISA, MasterCard, and Discover credit and debit cards. For American Express credit or debit cards, the CVV is a four-digit numeric code.\n- *CREDIT_DEBIT_CARD_EXPIRY*\n\nThe expiration date for a credit or debit card. This number is usually four digits long and is often formatted as *month/year* or *MM/YY* . Guardrails recognizes expiration dates such as *01/21* , *01/2021* , and *Jan 2021* .\n- *CREDIT_DEBIT_CARD_NUMBER*\n\nThe number for a credit or debit card. These numbers can vary from 13 to 16 digits in length. However, Amazon Comprehend also recognizes credit or debit card numbers when only the last four digits are present.\n- *PIN*\n\nA four-digit personal identification number (PIN) with which you can access your bank account.\n- *INTERNATIONAL_BANK_ACCOUNT_NUMBER*\n\nAn International Bank Account Number has specific formats in each country. For more information, see [www.iban.com/structure](https://docs.aws.amazon.com/https://www.iban.com/structure) .\n- *SWIFT_CODE*\n\nA SWIFT code is a standard format of Bank Identifier Code (BIC) used to specify a particular bank or branch. Banks use these codes for money transfers such as international wire transfers.\n\nSWIFT codes consist of eight or 11 characters. The 11-digit codes refer to specific branches, while eight-digit codes (or 11-digit codes ending in 'XXX') refer to the head or primary office.\n- *IT*\n\n- *IP_ADDRESS*\n\nAn IPv4 address, such as *198.51.100.0* .\n- *MAC_ADDRESS*\n\nA *media access control* (MAC) address is a unique identifier assigned to a network interface controller (NIC).\n- *URL*\n\nA web address, such as *www.example.com* .\n- *AWS_ACCESS_KEY*\n\nA unique identifier that's associated with a secret access key; you use the access key ID and secret access key to sign programmatic AWS requests cryptographically.\n- *AWS_SECRET_KEY*\n\nA unique identifier that's associated with an access key. You use the access key ID and secret access key to sign programmatic AWS requests cryptographically.\n- *USA specific*\n\n- *US_BANK_ACCOUNT_NUMBER*\n\nA US bank account number, which is typically 10 to 12 digits long.\n- *US_BANK_ROUTING_NUMBER*\n\nA US bank account routing number. These are typically nine digits long,\n- *US_INDIVIDUAL_TAX_IDENTIFICATION_NUMBER*\n\nA US Individual Taxpayer Identification Number (ITIN) is a nine-digit number that starts with a \"9\" and contain a \"7\" or \"8\" as the fourth digit. An ITIN can be formatted with a space or a dash after the third and forth digits.\n- *US_PASSPORT_NUMBER*\n\nA US passport number. Passport numbers range from six to nine alphanumeric characters.\n- *US_SOCIAL_SECURITY_NUMBER*\n\nA US Social Security Number (SSN) is a nine-digit number that is issued to US citizens, permanent residents, and temporary working residents.\n- *Canada specific*\n\n- *CA_HEALTH_NUMBER*\n\nA Canadian Health Service Number is a 10-digit unique identifier, required for individuals to access healthcare benefits.\n- *CA_SOCIAL_INSURANCE_NUMBER*\n\nA Canadian Social Insurance Number (SIN) is a nine-digit unique identifier, required for individuals to access government programs and benefits.\n\nThe SIN is formatted as three groups of three digits, such as *123-456-789* . A SIN can be validated through a simple check-digit process called the [Luhn algorithm](https://docs.aws.amazon.com/https://www.wikipedia.org/wiki/Luhn_algorithm) .\n- *UK Specific*\n\n- *UK_NATIONAL_HEALTH_SERVICE_NUMBER*\n\nA UK National Health Service Number is a 10-17 digit number, such as *485 777 3456* . The current system formats the 10-digit number with spaces after the third and sixth digits. The final digit is an error-detecting checksum.\n- *UK_NATIONAL_INSURANCE_NUMBER*\n\nA UK National Insurance Number (NINO) provides individuals with access to National Insurance (social security) benefits. It is also used for some purposes in the UK tax system.\n\nThe number is nine digits long and starts with two letters, followed by six numbers and one letter. A NINO can be formatted with a space or a dash after the two letters and after the second, forth, and sixth digits.\n- *UK_UNIQUE_TAXPAYER_REFERENCE_NUMBER*\n\nA UK Unique Taxpayer Reference (UTR) is a 10-digit number that identifies a taxpayer or a business.\n- *Custom*\n\n- *Regex filter* - You can use a regular expressions to define patterns for a guardrail to recognize and act upon such as serial number, booking ID etc.."
}
},
"type": "object",
@@ -30239,7 +30252,8 @@
"aws-native:cognito:UserPoolAddOns": {
"properties": {
"advancedSecurityAdditionalFlows": {
- "$ref": "#/types/aws-native:cognito:UserPoolAdvancedSecurityAdditionalFlows"
+ "$ref": "#/types/aws-native:cognito:UserPoolAdvancedSecurityAdditionalFlows",
+ "description": "Advanced security configuration options for additional authentication types in your user pool, including custom authentication."
},
"advancedSecurityMode": {
"type": "string",
@@ -30268,7 +30282,8 @@
"aws-native:cognito:UserPoolAdvancedSecurityAdditionalFlows": {
"properties": {
"customAuthMode": {
- "type": "string"
+ "type": "string",
+ "description": "The operating mode of advanced security features in custom authentication with [Custom authentication challenge Lambda triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html) ."
}
},
"type": "object"
@@ -30519,7 +30534,8 @@
"description": "The password policy settings for a user pool, including complexity, history, and length requirements."
},
"signInPolicy": {
- "$ref": "#/types/aws-native:cognito:UserPoolSignInPolicy"
+ "$ref": "#/types/aws-native:cognito:UserPoolSignInPolicy",
+ "description": "The policy for allowed types of authentication in a user pool.\n\nThis data type is a request and response parameter of [CreateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html) and [UpdateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html) , and a response parameter of [DescribeUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html) ."
}
},
"type": "object"
@@ -30758,7 +30774,8 @@
"type": "array",
"items": {
"type": "string"
- }
+ },
+ "description": "The sign-in methods that a user pool supports as the first factor. You can permit users to start authentication with a standard username and password, or with other one-time password and hardware factors.\n\nSupports values of `EMAIL_OTP` , `SMS_OTP` , `WEB_AUTHN` and `PASSWORD` ,"
}
},
"type": "object"
@@ -45572,7 +45589,6 @@
"type": "object"
},
"aws-native:ec2:LaunchTemplateBaselinePerformanceFactors": {
- "description": "The baseline performance to consider, using an instance family as a baseline reference. The instance family establishes the lowest acceptable level of performance. Amazon EC2 uses this baseline to guide instance type selection, but there is no guarantee that the selected instance types will always exceed the baseline for every application.\n Currently, this parameter only supports CPU performance as a baseline performance factor. For example, specifying ``c6i`` would use the CPU performance of the ``c6i`` family as the baseline reference.",
"properties": {
"cpu": {
"$ref": "#/types/aws-native:ec2:LaunchTemplateCpu",
@@ -45608,7 +45624,7 @@
"properties": {
"capacityReservationPreference": {
"type": "string",
- "description": "Indicates the instance's Capacity Reservation preferences. Possible preferences include:\n + ``capacity-reservations-only`` - The instance will only run in a Capacity Reservation or Capacity Reservation group. If capacity isn't available, the instance will fail to launch.\n + ``open`` - The instance can run in any ``open`` Capacity Reservation that has matching attributes (instance type, platform, Availability Zone, tenancy).\n + ``none`` - The instance avoids running in a Capacity Reservation even if one is available. The instance runs in On-Demand capacity."
+ "description": "Indicates the instance's Capacity Reservation preferences. Possible preferences include:\n + ``open`` - The instance can run in any ``open`` Capacity Reservation that has matching attributes (instance type, platform, Availability Zone).\n + ``none`` - The instance avoids running in a Capacity Reservation even if one is available. The instance runs in On-Demand capacity."
},
"capacityReservationTarget": {
"$ref": "#/types/aws-native:ec2:LaunchTemplateCapacityReservationTarget",
@@ -45748,7 +45764,7 @@
"items": {
"$ref": "#/types/aws-native:ec2:LaunchTemplateElasticInferenceAccelerator"
},
- "description": "Amazon Elastic Inference is no longer available.\n An elastic inference accelerator to associate with the instance. Elastic inference accelerators are a resource you can attach to your Amazon EC2 instances to accelerate your Deep Learning (DL) inference workloads.\n You cannot specify accelerators from different generations in the same request.\n Starting April 15, 2023, AWS will not onboard new customers to Amazon Elastic Inference (EI), and will help current customers migrate their workloads to options that offer better price and performance. After April 15, 2023, new customers will not be able to launch instances with Amazon EI accelerators in Amazon SageMaker, Amazon ECS, or Amazon EC2. However, customers who have used Amazon EI at least once during the past 30-day period are considered current customers and will be able to continue using the service."
+ "description": "An elastic inference accelerator to associate with the instance. Elastic inference accelerators are a resource you can attach to your Amazon EC2 instances to accelerate your Deep Learning (DL) inference workloads.\n You cannot specify accelerators from different generations in the same request.\n Starting April 15, 2023, AWS will not onboard new customers to Amazon Elastic Inference (EI), and will help current customers migrate their workloads to options that offer better price and performance. After April 15, 2023, new customers will not be able to launch instances with Amazon EI accelerators in Amazon SageMaker, Amazon ECS, or Amazon EC2. However, customers who have used Amazon EI at least once during the past 30-day period are considered current customers and will be able to continue using the service."
},
"enclaveOptions": {
"$ref": "#/types/aws-native:ec2:LaunchTemplateEnclaveOptions",
@@ -45776,7 +45792,7 @@
},
"instanceRequirements": {
"$ref": "#/types/aws-native:ec2:LaunchTemplateInstanceRequirements",
- "description": "The attributes for the instance types. When you specify instance attributes, Amazon EC2 will identify instance types with these attributes.\n You must specify ``VCpuCount`` and ``MemoryMiB``. All other attributes are optional. Any unspecified optional attribute is set to its default.\n When you specify multiple attributes, you get instance types that satisfy all of the specified attributes. If you specify multiple values for an attribute, you get instance types that satisfy any of the specified values.\n To limit the list of instance types from which Amazon EC2 can identify matching instance types, you can use one of the following parameters, but not both in the same request:\n + ``AllowedInstanceTypes`` - The instance types to include in the list. All other instance types are ignored, even if they match your specified attributes.\n + ``ExcludedInstanceTypes`` - The instance types to exclude from the list, even if they match your specified attributes.\n \n If you specify ``InstanceRequirements``, you can't specify ``InstanceType``.\n Attribute-based instance type selection is only supported when using Auto Scaling groups, EC2 Fleet, and Spot Fleet to launch instances. If you plan to use the launch template in the [launch instance wizard](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-instance-wizard.html), or with the [RunInstances](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html) API or [AWS::EC2::Instance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html) AWS CloudFormation resource, you can't specify ``InstanceRequirements``.\n For more information, see [Specify attributes for instance type selection for EC2 Fleet or Spot Fleet](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html) and [Spot placement score](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-placement-score.html) in the *Amazon EC2 User Guide*."
+ "description": "The attributes for the instance types. When you specify instance attributes, Amazon EC2 will identify instance types with these attributes.\n You must specify ``VCpuCount`` and ``MemoryMiB``. All other attributes are optional. Any unspecified optional attribute is set to its default.\n When you specify multiple attributes, you get instance types that satisfy all of the specified attributes. If you specify multiple values for an attribute, you get instance types that satisfy any of the specified values.\n To limit the list of instance types from which Amazon EC2 can identify matching instance types, you can use one of the following parameters, but not both in the same request:\n + ``AllowedInstanceTypes`` - The instance types to include in the list. All other instance types are ignored, even if they match your specified attributes.\n + ``ExcludedInstanceTypes`` - The instance types to exclude from the list, even if they match your specified attributes.\n \n If you specify ``InstanceRequirements``, you can't specify ``InstanceType``.\n Attribute-based instance type selection is only supported when using Auto Scaling groups, EC2 Fleet, and Spot Fleet to launch instances. If you plan to use the launch template in the [launch instance wizard](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-instance-wizard.html), or with the [RunInstances](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html) API or [AWS::EC2::Instance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html) AWS CloudFormation resource, you can't specify ``InstanceRequirements``.\n For more information, see [Attribute-based instance type selection for EC2 Fleet](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html), [Attribute-based instance type selection for Spot Fleet](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet-attribute-based-instance-type-selection.html), and [Spot placement score](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-placement-score.html) in the *Amazon EC2 User Guide*."
},
"instanceType": {
"type": "string",
@@ -45816,9 +45832,6 @@
},
"description": "The network interfaces for the instance."
},
- "networkPerformanceOptions": {
- "$ref": "pulumi.json#/Any"
- },
"placement": {
"$ref": "#/types/aws-native:ec2:LaunchTemplatePlacement",
"description": "The placement for the instance."
@@ -45850,7 +45863,7 @@
"items": {
"$ref": "#/types/aws-native:ec2:TagSpecification"
},
- "description": "The tags to apply to resources that are created during instance launch.\n To tag the launch template itself, use [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#cfn-ec2-launchtemplate-tagspecifications)."
+ "description": "The tags to apply to the resources that are created during instance launch.\n To tag a resource after it has been created, see [CreateTags](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateTags.html).\n To tag the launch template itself, use [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#cfn-ec2-launchtemplate-tagspecifications)."
},
"userData": {
"type": "string",
@@ -45876,7 +45889,7 @@
},
"kmsKeyId": {
"type": "string",
- "description": "Identifier (key ID, key alias, key ARN, or alias ARN) of the customer managed KMS key to use for EBS encryption."
+ "description": "The ARN of the symmetric KMSlong (KMS) CMK used for encryption."
},
"snapshotId": {
"type": "string",
@@ -45994,7 +46007,7 @@
"type": "object"
},
"aws-native:ec2:LaunchTemplateInstanceRequirements": {
- "description": "The attributes for the instance types. When you specify instance attributes, Amazon EC2 will identify instance types with these attributes.\n You must specify ``VCpuCount`` and ``MemoryMiB``. All other attributes are optional. Any unspecified optional attribute is set to its default.\n When you specify multiple attributes, you get instance types that satisfy all of the specified attributes. If you specify multiple values for an attribute, you get instance types that satisfy any of the specified values.\n To limit the list of instance types from which Amazon EC2 can identify matching instance types, you can use one of the following parameters, but not both in the same request:\n + ``AllowedInstanceTypes`` - The instance types to include in the list. All other instance types are ignored, even if they match your specified attributes.\n + ``ExcludedInstanceTypes`` - The instance types to exclude from the list, even if they match your specified attributes.\n \n If you specify ``InstanceRequirements``, you can't specify ``InstanceType``.\n Attribute-based instance type selection is only supported when using Auto Scaling groups, EC2 Fleet, and Spot Fleet to launch instances. If you plan to use the launch template in the [launch instance wizard](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-instance-wizard.html), or with the [RunInstances](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html) API or [AWS::EC2::Instance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html) AWS CloudFormation resource, you can't specify ``InstanceRequirements``.\n For more information, see [Specify attributes for instance type selection for EC2 Fleet or Spot Fleet](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html) and [Spot placement score](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-placement-score.html) in the *Amazon EC2 User Guide*.",
+ "description": "The attributes for the instance types. When you specify instance attributes, Amazon EC2 will identify instance types with these attributes.\n You must specify ``VCpuCount`` and ``MemoryMiB``. All other attributes are optional. Any unspecified optional attribute is set to its default.\n When you specify multiple attributes, you get instance types that satisfy all of the specified attributes. If you specify multiple values for an attribute, you get instance types that satisfy any of the specified values.\n To limit the list of instance types from which Amazon EC2 can identify matching instance types, you can use one of the following parameters, but not both in the same request:\n + ``AllowedInstanceTypes`` - The instance types to include in the list. All other instance types are ignored, even if they match your specified attributes.\n + ``ExcludedInstanceTypes`` - The instance types to exclude from the list, even if they match your specified attributes.\n \n If you specify ``InstanceRequirements``, you can't specify ``InstanceType``.\n Attribute-based instance type selection is only supported when using Auto Scaling groups, EC2 Fleet, and Spot Fleet to launch instances. If you plan to use the launch template in the [launch instance wizard](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-instance-wizard.html), or with the [RunInstances](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html) API or [AWS::EC2::Instance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html) AWS CloudFormation resource, you can't specify ``InstanceRequirements``.\n For more information, see [Attribute-based instance type selection for EC2 Fleet](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html), [Attribute-based instance type selection for Spot Fleet](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet-attribute-based-instance-type-selection.html), and [Spot placement score](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-placement-score.html) in the *Amazon EC2 User Guide*.",
"properties": {
"acceleratorCount": {
"$ref": "#/types/aws-native:ec2:LaunchTemplateAcceleratorCount",
@@ -46023,7 +46036,7 @@
"items": {
"type": "string"
},
- "description": "The accelerator types that must be on the instance type.\n + For instance types with GPU accelerators, specify ``gpu``.\n + For instance types with FPGA accelerators, specify ``fpga``.\n \n Default: Any accelerator type"
+ "description": "The accelerator types that must be on the instance type.\n + For instance types with GPU accelerators, specify ``gpu``.\n + For instance types with FPGA accelerators, specify ``fpga``.\n + For instance types with inference accelerators, specify ``inference``.\n \n Default: Any accelerator type"
},
"allowedInstanceTypes": {
"type": "array",
@@ -46042,7 +46055,7 @@
},
"baselinePerformanceFactors": {
"$ref": "#/types/aws-native:ec2:LaunchTemplateBaselinePerformanceFactors",
- "description": "The baseline performance to consider, using an instance family as a baseline reference. The instance family establishes the lowest acceptable level of performance. Amazon EC2 uses this baseline to guide instance type selection, but there is no guarantee that the selected instance types will always exceed the baseline for every application. Currently, this parameter only supports CPU performance as a baseline performance factor. For more information, see [Performance protection](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html#ec2fleet-abis-performance-protection) in the *Amazon EC2 User Guide*."
+ "description": "The baseline performance to consider, using an instance family as a baseline reference. The instance family establishes the lowest acceptable level of performance. Amazon EC2 uses this baseline to guide instance type selection, but there is no guarantee that the selected instance types will always exceed the baseline for every application. Currently, this parameter only supports CPU performance as a baseline performance factor. For more information, see [Performance protection](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html#ec2fleet-abis-performance-protection) in the *Amazon EC2 User Guide* ."
},
"burstablePerformance": {
"type": "string",
@@ -46053,7 +46066,7 @@
"items": {
"type": "string"
},
- "description": "The CPU manufacturers to include.\n + For instance types with Intel CPUs, specify ``intel``.\n + For instance types with AMD CPUs, specify ``amd``.\n + For instance types with AWS CPUs, specify ``amazon-web-services``.\n + For instance types with Apple CPUs, specify ``apple``.\n \n Don't confuse the CPU manufacturer with the CPU architecture. Instances will be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you specify in your launch template.\n Default: Any manufacturer"
+ "description": "The CPU manufacturers to include.\n + For instance types with Intel CPUs, specify ``intel``.\n + For instance types with AMD CPUs, specify ``amd``.\n + For instance types with AWS CPUs, specify ``amazon-web-services``.\n \n Don't confuse the CPU manufacturer with the CPU architecture. Instances will be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you specify in your launch template.\n Default: Any manufacturer"
},
"excludedInstanceTypes": {
"type": "array",
@@ -46291,7 +46304,7 @@
},
"interfaceType": {
"type": "string",
- "description": "The type of network interface. To create an Elastic Fabric Adapter (EFA), specify ``efa`` or ``efa``. For more information, see [Elastic Fabric Adapter](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/efa.html) in the *Amazon EC2 User Guide*.\n If you are not creating an EFA, specify ``interface`` or omit this parameter.\n If you specify ``efa-only``, do not assign any IP addresses to the network interface. EFA-only network interfaces do not support IP addresses.\n Valid values: ``interface`` | ``efa`` | ``efa-only``"
+ "description": "The type of network interface. To create an Elastic Fabric Adapter (EFA), specify ``efa``. For more information, see [Elastic Fabric Adapter](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/efa.html) in the *Amazon EC2 User Guide*.\n If you are not creating an EFA, specify ``interface`` or omit this parameter.\n Valid values: ``interface`` | ``efa``"
},
"ipv4PrefixCount": {
"type": "integer",
@@ -46451,7 +46464,8 @@
"aws-native:ec2:LaunchTemplateReference": {
"properties": {
"instanceFamily": {
- "type": "string"
+ "type": "string",
+ "description": "The instance family to refer. Ensure that you specify the correct family name. For example, C6i and C6g are valid values, but C6 is not."
}
},
"type": "object"
@@ -46501,7 +46515,7 @@
]
},
"aws-native:ec2:LaunchTemplateTagSpecification": {
- "description": "Specifies the tags to apply to the launch template during creation.\n To specify the tags for the resources that are created during instance launch, use [AWS::EC2::LaunchTemplate TagSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-tagspecification.html).\n ``LaunchTemplateTagSpecification`` is a property of [AWS::EC2::LaunchTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html).",
+ "description": "Specifies the tags to apply to the launch template during creation.\n ``LaunchTemplateTagSpecification`` is a property of [AWS::EC2::LaunchTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html).",
"properties": {
"resourceType": {
"type": "string",
@@ -48125,7 +48139,7 @@
},
"secondaryPrivateIpAddressCount": {
"type": "integer",
- "description": "The number of secondary private IPv4 addresses. You can't specify this option and specify more than one private IP address using the private IP addresses option. You cannot specify this option if you're launching more than one instance in a [RunInstances](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html) request."
+ "description": "The number of secondary private IPv4 addresses. You can’t specify this parameter and also specify a secondary private IP address using the `PrivateIpAddress` parameter."
},
"subnetId": {
"type": "string",
@@ -49289,7 +49303,7 @@
]
},
"aws-native:ec2:TagSpecification": {
- "description": "Specifies the tags to apply to resources that are created during instance launch.\n ``TagSpecification`` is a property type of [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications). [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications) is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).",
+ "description": "Specifies the tags to apply to a resource when the resource is created for the launch template.\n ``TagSpecification`` is a property type of [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications). [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications) is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).",
"properties": {
"resourceType": {
"type": "string",
@@ -51665,7 +51679,7 @@
},
"versionConsistency": {
"$ref": "#/types/aws-native:ecs:TaskDefinitionContainerDefinitionVersionConsistency",
- "description": "Specifies whether Amazon ECS will resolve the container image tag provided in the container definition to an image digest. By default, the value is `enabled` . If you set the value for a container as `disabled` , Amazon ECS will not resolve the provided container image tag to a digest and will use the original image URI specified in the container definition for deployment. For more information about container image resolution, see [Container image resolution](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-type-ecs.html#deployment-container-image-stability) in the *Amazon ECS Developer Guide* ."
+ "description": "Specifies whether Amazon ECS will resolve the container image tag provided in the container definition to an image digest. By default, the value is ``enabled``. If you set the value for a container as ``disabled``, Amazon ECS will not resolve the provided container image tag to a digest and will use the original image URI specified in the container definition for deployment. For more information about container image resolution, see [Container image resolution](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-type-ecs.html#deployment-container-image-stability) in the *Amazon ECS Developer Guide*."
},
"volumesFrom": {
"type": "array",
@@ -51686,7 +51700,7 @@
]
},
"aws-native:ecs:TaskDefinitionContainerDefinitionVersionConsistency": {
- "description": "Specifies whether Amazon ECS will resolve the container image tag provided in the container definition to an image digest. By default, the value is `enabled` . If you set the value for a container as `disabled` , Amazon ECS will not resolve the provided container image tag to a digest and will use the original image URI specified in the container definition for deployment. For more information about container image resolution, see [Container image resolution](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-type-ecs.html#deployment-container-image-stability) in the *Amazon ECS Developer Guide* .",
+ "description": "Specifies whether Amazon ECS will resolve the container image tag provided in the container definition to an image digest. By default, the value is ``enabled``. If you set the value for a container as ``disabled``, Amazon ECS will not resolve the provided container image tag to a digest and will use the original image URI specified in the container definition for deployment. For more information about container image resolution, see [Container image resolution](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-type-ecs.html#deployment-container-image-stability) in the *Amazon ECS Developer Guide*.",
"type": "string",
"enum": [
{
@@ -56163,7 +56177,8 @@
"description": "The authorization parameters for Basic authorization."
},
"connectivityParameters": {
- "$ref": "#/types/aws-native:events:ConnectionConnectivityParameters"
+ "$ref": "#/types/aws-native:events:ConnectionConnectivityParameters",
+ "description": "For private OAuth authentication endpoints. The parameters EventBridge uses to authenticate against the endpoint.\n\nFor more information, see [Authorization methods for connections](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-target-connection-auth.html) in the **Amazon EventBridge User Guide** ."
},
"invocationHttpParameters": {
"$ref": "#/types/aws-native:events:ConnectionHttpParameters",
@@ -56231,7 +56246,8 @@
"aws-native:events:ConnectionConnectivityParameters": {
"properties": {
"resourceParameters": {
- "$ref": "#/types/aws-native:events:ConnectionResourceParameters"
+ "$ref": "#/types/aws-native:events:ConnectionResourceParameters",
+ "description": "The parameters for EventBridge to use when invoking the resource endpoint."
}
},
"type": "object",
@@ -56333,10 +56349,12 @@
"aws-native:events:ConnectionResourceParameters": {
"properties": {
"resourceAssociationArn": {
- "type": "string"
+ "type": "string",
+ "description": "For connections to private APIs, the Amazon Resource Name (ARN) of the resource association EventBridge created between the connection and the private API's resource configuration.\n\n\u003e The value of this property is set by EventBridge . Any value you specify in your template is ignored."
},
"resourceConfigurationArn": {
- "type": "string"
+ "type": "string",
+ "description": "The Amazon Resource Name (ARN) of the Amazon VPC Lattice resource configuration for the resource endpoint."
}
},
"type": "object",
@@ -56494,7 +56512,8 @@
"description": "The private resource the HTTP request will be sent to.",
"properties": {
"resourceParameters": {
- "$ref": "#/types/aws-native:events:ConnectionResourceParameters"
+ "$ref": "#/types/aws-native:events:ConnectionResourceParameters",
+ "description": "The parameters for EventBridge to use when invoking the resource endpoint."
}
},
"type": "object",
@@ -66810,7 +66829,8 @@
"type": "array",
"items": {
"type": "string"
- }
+ },
+ "description": "The list of `LINKED_ACCOUNT` IDs where charges are included within the invoice unit."
}
},
"type": "object",
@@ -67144,6 +67164,95 @@
}
]
},
+ "aws-native:iot:CommandNamespace": {
+ "description": "The namespace to which the command belongs.",
+ "type": "string",
+ "enum": [
+ {
+ "name": "AwsIoT",
+ "value": "AWS-IoT"
+ },
+ {
+ "name": "AwsIoTFleetWise",
+ "value": "AWS-IoT-FleetWise"
+ }
+ ]
+ },
+ "aws-native:iot:CommandParameter": {
+ "properties": {
+ "defaultValue": {
+ "$ref": "#/types/aws-native:iot:CommandParameterValue"
+ },
+ "description": {
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ },
+ "value": {
+ "$ref": "#/types/aws-native:iot:CommandParameterValue"
+ }
+ },
+ "type": "object",
+ "required": [
+ "name"
+ ]
+ },
+ "aws-native:iot:CommandParameterValue": {
+ "properties": {
+ "b": {
+ "type": "boolean"
+ },
+ "bin": {
+ "type": "string"
+ },
+ "d": {
+ "type": "number"
+ },
+ "i": {
+ "type": "integer"
+ },
+ "l": {
+ "type": "string"
+ },
+ "s": {
+ "type": "string"
+ },
+ "ul": {
+ "type": "string"
+ }
+ },
+ "type": "object"
+ },
+ "aws-native:iot:CommandPayload": {
+ "properties": {
+ "content": {
+ "type": "string"
+ },
+ "contentType": {
+ "type": "string"
+ }
+ },
+ "type": "object"
+ },
+ "aws-native:iot:CommandTag": {
+ "description": "A key-value pair to associate with a resource.",
+ "properties": {
+ "key": {
+ "type": "string",
+ "description": "The tag's key."
+ },
+ "value": {
+ "type": "string",
+ "description": "The tag's value."
+ }
+ },
+ "type": "object",
+ "required": [
+ "key",
+ "value"
+ ]
+ },
"aws-native:iot:CustomMetricMetricType": {
"description": "The type of the custom metric. Types include string-list, ip-address-list, number-list, and number.",
"type": "string",
@@ -95863,7 +95972,7 @@
]
},
"aws-native:organizations:PolicyType": {
- "description": "The type of policy to create. You can specify one of the following values: AISERVICES_OPT_OUT_POLICY, BACKUP_POLICY, SERVICE_CONTROL_POLICY, TAG_POLICY, CHATBOT_POLICY, RESOURCE_CONTROL_POLICY",
+ "description": "The type of policy to create. You can specify one of the following values: AISERVICES_OPT_OUT_POLICY, BACKUP_POLICY, SERVICE_CONTROL_POLICY, TAG_POLICY, CHATBOT_POLICY, RESOURCE_CONTROL_POLICY,DECLARATIVE_POLICY_EC2",
"type": "string",
"enum": [
{
@@ -95889,6 +95998,10 @@
{
"name": "ResourceControlPolicy",
"value": "RESOURCE_CONTROL_POLICY"
+ },
+ {
+ "name": "DeclarativePolicyEc2",
+ "value": "DECLARATIVE_POLICY_EC2"
}
]
},
@@ -145486,6 +145599,24 @@
"value"
]
},
+ "aws-native:ram:ResourceShareTag": {
+ "description": "A key-value pair to associate with a resource.",
+ "properties": {
+ "key": {
+ "type": "string",
+ "description": "The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."
+ },
+ "value": {
+ "type": "string",
+ "description": "The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."
+ }
+ },
+ "type": "object",
+ "required": [
+ "key",
+ "value"
+ ]
+ },
"aws-native:rbin:RuleResourceTag": {
"description": "The resource tag of the rule.",
"properties": {
@@ -145588,7 +145719,7 @@
]
},
"aws-native:rds:CustomDbEngineVersionStatus": {
- "description": "The availability status to be assigned to the CEV.",
+ "description": "A value that indicates the status of a custom engine version (CEV).",
"type": "string",
"enum": [
{
@@ -145606,15 +145737,15 @@
]
},
"aws-native:rds:CustomDbEngineVersionTag": {
- "description": "A key-value pair to associate with a resource.",
+ "description": "Metadata assigned to an Amazon RDS resource consisting of a key-value pair.\n For more information, see [Tagging Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide* or [Tagging Amazon Aurora and Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_Tagging.html) in the *Amazon Aurora User Guide*.",
"properties": {
"key": {
"type": "string",
- "description": "The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."
+ "description": "A key is the required name of the tag. The string value can be from 1 to 128 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."
},
"value": {
"type": "string",
- "description": "The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."
+ "description": "A value is the optional value of the tag. The string value can be from 1 to 256 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."
}
},
"type": "object",
@@ -146704,6 +146835,9 @@
"type": "string",
"description": "The namespace the workgroup is associated with."
},
+ "pricePerformanceTarget": {
+ "$ref": "#/types/aws-native:redshiftserverless:WorkgroupPerformanceTarget"
+ },
"publiclyAccessible": {
"type": "boolean",
"description": "A value that specifies whether the workgroup can be accessible from a public network."
@@ -146795,6 +146929,30 @@
},
"type": "object"
},
+ "aws-native:redshiftserverless:WorkgroupPerformanceTarget": {
+ "properties": {
+ "level": {
+ "type": "integer"
+ },
+ "status": {
+ "$ref": "#/types/aws-native:redshiftserverless:WorkgroupPerformanceTargetStatus"
+ }
+ },
+ "type": "object"
+ },
+ "aws-native:redshiftserverless:WorkgroupPerformanceTargetStatus": {
+ "type": "string",
+ "enum": [
+ {
+ "name": "Enabled",
+ "value": "ENABLED"
+ },
+ {
+ "name": "Disabled",
+ "value": "DISABLED"
+ }
+ ]
+ },
"aws-native:redshiftserverless:WorkgroupStatus": {
"type": "string",
"enum": [
@@ -150529,6 +150687,42 @@
},
"type": "object"
},
+ "aws-native:s3:BucketMetadataTableConfiguration": {
+ "properties": {
+ "error": {
+ "$ref": "#/types/aws-native:s3:BucketMetadataTableError",
+ "description": "Returns the \u003ccode\u003eError\u003c/code\u003e value of the GetBucketMetadataTableConfiguration response."
+ },
+ "s3TablesDestination": {
+ "$ref": "#/types/aws-native:s3:BucketS3TablesDestination"
+ },
+ "status": {
+ "type": "string",
+ "description": "Returns the \u003ccode\u003eStatus\u003c/code\u003e value of the \u003ccode\u003eGetBucketMetadataTableConfigurationResult\u003c/code\u003e response. This value indicates the status of the metadata table. The status values are:\u003cbr/\u003e\u003ccode\u003eCREATING\u003c/code\u003e - The metadata table is in the process of being created in the specified table bucket.\u003cbr/\u003e\u003ccode\u003eACTIVE\u003c/code\u003e - The metadata table has been created successfully and records are being delivered to the table.\u003cbr/\u003e\u003ccode\u003eFAILED\u003c/code\u003e - Amazon S3 is unable to create the metadata table, or Amazon S3 is unable to deliver records."
+ }
+ },
+ "type": "object",
+ "required": [
+ "s3TablesDestination"
+ ]
+ },
+ "aws-native:s3:BucketMetadataTableError": {
+ "properties": {
+ "errorCode": {
+ "type": "string",
+ "description": "If the \u003ccode\u003eCreateBucketMetadataTableConfiguration\u003c/code\u003e request succeeds, but S3 Metadata was unable to create the table, this structure contains the error code. The possible error codes and error messages are as follows:\u003cbr/\u003e\u003ccode\u003eAccessDeniedCreatingResources\u003c/code\u003e - You don't have sufficient permissions to create the required resources. Make sure that you have \u003ccode\u003es3tables:CreateNamespace\u003c/code\u003e, \u003ccode\u003es3tables:CreateTable\u003c/code\u003e, \u003ccode\u003es3tables:GetTable\u003c/code\u003e and \u003ccode\u003es3tables:PutTablePolicy\u003c/code\u003e permissions, and then try again. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration.\u003cbr/\u003e\u003ccode\u003eAccessDeniedWritingToTable\u003c/code\u003e - Unable to write to the metadata table because of missing resource permissions. To fix the resource policy, Amazon S3 needs to create a new metadata table. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration.\u003cbr/\u003e\u003ccode\u003eDestinationTableNotFound\u003c/code\u003e - The destination table doesn't exist. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration.\u003cbr/\u003e\u003ccode\u003eServerInternalError\u003c/code\u003e - An internal error has occurred. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration.\u003cbr/\u003e\u003ccode\u003eTableAlreadyExists\u003c/code\u003e - The table that you specified already exists in the table bucket's namespace. Specify a different table name. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration.\u003cbr/\u003e\u003ccode\u003eTableBucketNotFound\u003c/code\u003e - The table bucket that you specified doesn't exist in this AWS Region and account. Create or choose a different table bucket. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration."
+ },
+ "errorMessage": {
+ "type": "string",
+ "description": "If the \u003ccode\u003eCreateBucketMetadataTableConfiguration\u003c/code\u003e request succeeds, but S3 Metadata was unable to create the table, this structure contains the error code. The possible error codes and error messages are as follows:\u003cbr/\u003e\u003ccode\u003eAccessDeniedCreatingResources\u003c/code\u003e - You don't have sufficient permissions to create the required resources. Make sure that you have \u003ccode\u003es3tables:CreateNamespace\u003c/code\u003e, \u003ccode\u003es3tables:CreateTable\u003c/code\u003e, \u003ccode\u003es3tables:GetTable\u003c/code\u003e and \u003ccode\u003es3tables:PutTablePolicy\u003c/code\u003e permissions, and then try again. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration.\u003cbr/\u003e\u003ccode\u003eAccessDeniedWritingToTable\u003c/code\u003e - Unable to write to the metadata table because of missing resource permissions. To fix the resource policy, Amazon S3 needs to create a new metadata table. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration.\u003cbr/\u003e\u003ccode\u003eDestinationTableNotFound\u003c/code\u003e - The destination table doesn't exist. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration.\u003cbr/\u003e\u003ccode\u003eServerInternalError\u003c/code\u003e - An internal error has occurred. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration.\u003cbr/\u003e\u003ccode\u003eTableAlreadyExists\u003c/code\u003e - The table that you specified already exists in the table bucket's namespace. Specify a different table name. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration.\u003cbr/\u003e\u003ccode\u003eTableBucketNotFound\u003c/code\u003e - The table bucket that you specified doesn't exist in this AWS Region and account. Create or choose a different table bucket. To create a new metadata table, you must delete the metadata configuration for this bucket, and then create a new metadata configuration."
+ }
+ },
+ "type": "object",
+ "required": [
+ "errorCode",
+ "errorMessage"
+ ]
+ },
"aws-native:s3:BucketMetrics": {
"description": "A container specifying replication metrics-related settings enabling replication metrics and events.",
"properties": {
@@ -151286,6 +151480,31 @@
"rules"
]
},
+ "aws-native:s3:BucketS3TablesDestination": {
+ "properties": {
+ "tableArn": {
+ "type": "string",
+ "description": "The Amazon Resource Name (ARN) for the metadata table in the metadata table configuration. The specified metadata table name must be unique within the \u003ccode\u003eaws_s3_metadata\u003c/code\u003e namespace in the destination table bucket."
+ },
+ "tableBucketArn": {
+ "type": "string",
+ "description": "The Amazon Resource Name (ARN) for the table bucket that's specified as the destination in the metadata table configuration. The destination table bucket must be in the same Region and AWS account as the general purpose bucket."
+ },
+ "tableName": {
+ "type": "string",
+ "description": "The name for the metadata table in your metadata table configuration. The specified metadata table name must be unique within the \u003ccode\u003eaws_s3_metadata\u003c/code\u003e namespace in the destination table bucket."
+ },
+ "tableNamespace": {
+ "type": "string",
+ "description": "The table bucket namespace for the metadata table in your metadata table configuration. This value is always \u003ccode\u003eaws_s3_metadata\u003c/code\u003e."
+ }
+ },
+ "type": "object",
+ "required": [
+ "tableBucketArn",
+ "tableName"
+ ]
+ },
"aws-native:s3:BucketServerSideEncryptionByDefault": {
"description": "Describes the default server-side encryption to apply to new objects in the bucket. If a PUT Object request doesn't specify any server-side encryption, this default encryption will be applied. For more information, see [PutBucketEncryption](https://docs.aws.amazon.com/AmazonS3/latest/API/RESTBucketPUTencryption.html).\n + *General purpose buckets* - If you don't specify a customer managed key at configuration, Amazon S3 automatically creates an AWS KMS key (``aws/s3``) in your AWS account the first time that you add an object encrypted with SSE-KMS to a bucket. By default, Amazon S3 uses this KMS key for SSE-KMS. \n + *Directory buckets* - Your SSE-KMS configuration can only support 1 [customer managed key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#customer-cmk) per directory bucket for the lifetime of the bucket. The [managed key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk) (``aws/s3``) isn't supported. \n + *Directory buckets* - For directory buckets, there are only two supported options for server-side encryption: SSE-S3 and SSE-KMS.",
"properties": {
@@ -152191,12 +152410,16 @@
]
},
"aws-native:s3express:DirectoryBucketDataRedundancy": {
- "description": "Specifies the number of Availability Zone that's used for redundancy for the bucket.",
+ "description": "Specifies the number of Availability Zone or Local Zone that's used for redundancy for the bucket.",
"type": "string",
"enum": [
{
"name": "SingleAvailabilityZone",
"value": "SingleAvailabilityZone"
+ },
+ {
+ "name": "SingleLocalZone",
+ "value": "SingleLocalZone"
}
]
},
@@ -152683,6 +152906,42 @@
}
]
},
+ "aws-native:s3tables:TableBucketPolicyResourcePolicy": {
+ "description": "A policy document containing permissions to add to the specified table bucket. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM.",
+ "type": "object"
+ },
+ "aws-native:s3tables:TableBucketUnreferencedFileRemoval": {
+ "description": "Settings governing the Unreferenced File Removal maintenance action. Unreferenced file removal identifies and deletes all objects that are not referenced by any table snapshots.",
+ "properties": {
+ "noncurrentDays": {
+ "type": "integer",
+ "description": "S3 permanently deletes noncurrent objects after the number of days specified by the NoncurrentDays property."
+ },
+ "status": {
+ "$ref": "#/types/aws-native:s3tables:TableBucketUnreferencedFileRemovalStatus",
+ "description": "Indicates whether the Unreferenced File Removal maintenance action is enabled."
+ },
+ "unreferencedDays": {
+ "type": "integer",
+ "description": "For any object not referenced by your table and older than the UnreferencedDays property, S3 creates a delete marker and marks the object version as noncurrent."
+ }
+ },
+ "type": "object"
+ },
+ "aws-native:s3tables:TableBucketUnreferencedFileRemovalStatus": {
+ "description": "Indicates whether the Unreferenced File Removal maintenance action is enabled.",
+ "type": "string",
+ "enum": [
+ {
+ "name": "Enabled",
+ "value": "Enabled"
+ },
+ {
+ "name": "Disabled",
+ "value": "Disabled"
+ }
+ ]
+ },
"aws-native:sagemaker:AppImageConfigCodeEditorAppImageConfig": {
"description": "The configuration for the kernels in a SageMaker image running as a CodeEditor app.",
"properties": {
@@ -180568,10 +180827,6 @@
"description": "The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has.",
"replaceOnChanges": true
},
- "managementPolicy": {
- "$ref": "pulumi.json#/Any",
- "description": "Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::DomainNameV2` for more information about the expected schema for this property."
- },
"policy": {
"$ref": "pulumi.json#/Any",
"description": "A stringified JSON policy document that applies to the `execute-api` service for this DomainName regardless of the caller and Method configuration. You can use `Fn::ToJsonString` to enter your `policy` . For more information, see [Fn::ToJsonString](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ToJsonString.html) .\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::DomainNameV2` for more information about the expected schema for this property."
@@ -180607,10 +180862,6 @@
"$ref": "#/types/aws-native:apigateway:DomainNameV2EndpointConfiguration",
"description": "The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has."
},
- "managementPolicy": {
- "$ref": "pulumi.json#/Any",
- "description": "Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::DomainNameV2` for more information about the expected schema for this property."
- },
"policy": {
"$ref": "pulumi.json#/Any",
"description": "A stringified JSON policy document that applies to the `execute-api` service for this DomainName regardless of the caller and Method configuration. You can use `Fn::ToJsonString` to enter your `policy` . For more information, see [Fn::ToJsonString](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ToJsonString.html) .\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::DomainNameV2` for more information about the expected schema for this property."
@@ -197188,6 +197439,7 @@
},
"clientId": {
"type": "string",
+ "description": "The app client that's assigned to the branding style that you want more information about.",
"replaceOnChanges": true
},
"managedLoginBrandingId": {
@@ -197195,7 +197447,8 @@
"description": "The ID of the managed login branding style."
},
"returnMergedResources": {
- "type": "boolean"
+ "type": "boolean",
+ "description": "When `true` , returns values for branding options that are unchanged from Amazon Cognito defaults. When `false` or when you omit this parameter, returns only values that you customized in your branding style."
},
"settings": {
"$ref": "pulumi.json#/Any",
@@ -197203,7 +197456,7 @@
},
"useCognitoProvidedValues": {
"type": "boolean",
- "description": "When true, applies the default branding style options. This option reverts to a \"blank\" style that you can modify later in the branding designer."
+ "description": "When true, applies the default branding style options. This option reverts to default style options that are managed by Amazon Cognito. You can modify them later in the branding designer.\n\nWhen you specify `true` for this option, you must also omit values for `Settings` and `Assets` in the request."
},
"userPoolId": {
"type": "string",
@@ -197225,10 +197478,12 @@
"description": "An array of image files that you want to apply to roles like backgrounds, logos, and icons. Each object must also indicate whether it is for dark mode, light mode, or browser-adaptive mode."
},
"clientId": {
- "type": "string"
+ "type": "string",
+ "description": "The app client that's assigned to the branding style that you want more information about."
},
"returnMergedResources": {
- "type": "boolean"
+ "type": "boolean",
+ "description": "When `true` , returns values for branding options that are unchanged from Amazon Cognito defaults. When `false` or when you omit this parameter, returns only values that you customized in your branding style."
},
"settings": {
"$ref": "pulumi.json#/Any",
@@ -197236,7 +197491,7 @@
},
"useCognitoProvidedValues": {
"type": "boolean",
- "description": "When true, applies the default branding style options. This option reverts to a \"blank\" style that you can modify later in the branding designer."
+ "description": "When true, applies the default branding style options. This option reverts to default style options that are managed by Amazon Cognito. You can modify them later in the branding designer.\n\nWhen you specify `true` for this option, you must also omit values for `Settings` and `Assets` in the request."
},
"userPoolId": {
"type": "string",
@@ -197263,7 +197518,7 @@
"items": {
"type": "string"
},
- "description": "Attributes supported as an alias for this user pool. Possible values: *phone_number* , *email* , or *preferred_username* ."
+ "description": "Attributes supported as an alias for this user pool. Possible values: *phone_number* , *email* , or *preferred_username* . For more information about alias attributes, see [Customizing sign-in attributes](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html#user-pool-settings-aliases) ."
},
"arn": {
"type": "string",
@@ -197274,7 +197529,7 @@
"items": {
"type": "string"
},
- "description": "The attributes to be auto-verified. Possible values: *email* , *phone_number* ."
+ "description": "The attributes that you want your user pool to automatically verify. Possible values: *email* , *phone_number* . For more information see [Verifying contact information at sign-up](https://docs.aws.amazon.com/cognito/latest/developerguide/signing-up-users-in-your-app.html#allowing-users-to-sign-up-and-confirm-themselves) ."
},
"deletionProtection": {
"type": "string",
@@ -197282,7 +197537,7 @@
},
"deviceConfiguration": {
"$ref": "#/types/aws-native:cognito:UserPoolDeviceConfiguration",
- "description": "The device-remembering configuration for a user pool. A null value indicates that you have deactivated device remembering in your user pool.\n\n\u003e When you provide a value for any `DeviceConfiguration` field, you activate the Amazon Cognito device-remembering feature."
+ "description": "The device-remembering configuration for a user pool. Device remembering or device tracking is a \"Remember me on this device\" option for user pools that perform authentication with the device key of a trusted device in the back end, instead of a user-provided MFA code. For more information about device authentication, see [Working with user devices in your user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-device-tracking.html) . A null value indicates that you have deactivated device remembering in your user pool.\n\n\u003e When you provide a value for any `DeviceConfiguration` field, you activate the Amazon Cognito device-remembering feature. For more infor"
},
"emailAuthenticationMessage": {
"type": "string"
@@ -197334,7 +197589,7 @@
"items": {
"$ref": "#/types/aws-native:cognito:UserPoolSchemaAttribute"
},
- "description": "An array of schema attributes for the new user pool. These attributes can be standard or custom attributes."
+ "description": "An array of attributes for the new user pool. You can add custom attributes and modify the properties of default attributes. The specifications in this parameter set the required attributes in your user pool. For more information, see [Working with user attributes](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html) ."
},
"smsAuthenticationMessage": {
"type": "string",
@@ -197342,7 +197597,7 @@
},
"smsConfiguration": {
"$ref": "#/types/aws-native:cognito:UserPoolSmsConfiguration",
- "description": "The SMS configuration with the settings that your Amazon Cognito user pool must use to send an SMS message from your AWS account through Amazon Simple Notification Service. To send SMS messages with Amazon SNS in the AWS Region that you want, the Amazon Cognito user pool uses an AWS Identity and Access Management (IAM) role in your AWS account ."
+ "description": "The SMS configuration with the settings that your Amazon Cognito user pool must use to send an SMS message from your AWS account through Amazon Simple Notification Service. To send SMS messages with Amazon SNS in the AWS Region that you want, the Amazon Cognito user pool uses an AWS Identity and Access Management (IAM) role in your AWS account . For more information see [SMS message settings](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-sms-settings.html) ."
},
"smsVerificationMessage": {
"type": "string",
@@ -197362,7 +197617,7 @@
},
"userPoolName": {
"type": "string",
- "description": "A string used to name the user pool."
+ "description": "A friendlhy name for your user pool."
},
"userPoolTags": {
"type": "object",
@@ -197384,17 +197639,19 @@
},
"usernameConfiguration": {
"$ref": "#/types/aws-native:cognito:UserPoolUsernameConfiguration",
- "description": "Case sensitivity on the username input for the selected sign-in option. When case sensitivity is set to `False` (case insensitive), users can sign in with any combination of capital and lowercase letters. For example, `username` , `USERNAME` , or `UserName` , or for email, `email@example.com` or `EMaiL@eXamplE.Com` . For most use cases, set case sensitivity to `False` (case insensitive) as a best practice. When usernames and email addresses are case insensitive, Amazon Cognito treats any variation in case as the same user, and prevents a case variation from being assigned to the same attribute for a different user.\n\nThis configuration is immutable after you set it. For more information, see [UsernameConfigurationType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UsernameConfigurationType.html) ."
+ "description": "Sets the case sensitivity option for sign-in usernames. When `CaseSensitive` is `false` (case insensitive), users can sign in with any combination of capital and lowercase letters. For example, `username` , `USERNAME` , or `UserName` , or for email, `email@example.com` or `EMaiL@eXamplE.Com` . For most use cases, set case sensitivity to `false` as a best practice. When usernames and email addresses are case insensitive, Amazon Cognito treats any variation in case as the same user, and prevents a case variation from being assigned to the same attribute for a different user.\n\nWhen `CaseSensitive` is `true` (case sensitive), Amazon Cognito interprets `USERNAME` and `UserName` as distinct users.\n\nThis configuration is immutable after you set it."
},
"verificationMessageTemplate": {
"$ref": "#/types/aws-native:cognito:UserPoolVerificationMessageTemplate",
"description": "The template for the verification message that your user pool delivers to users who set an email address or phone number attribute.\n\nSet the email message type that corresponds to your `DefaultEmailOption` selection. For `CONFIRM_WITH_LINK` , specify an `EmailMessageByLink` and leave `EmailMessage` blank. For `CONFIRM_WITH_CODE` , specify an `EmailMessage` and leave `EmailMessageByLink` blank. When you supply both parameters with either choice, Amazon Cognito returns an error."
},
"webAuthnRelyingPartyId": {
- "type": "string"
+ "type": "string",
+ "description": "Sets or displays the authentication domain, typically your user pool domain, that passkey providers must use as a relying party (RP) in their configuration.\n\nUnder the following conditions, the passkey relying party ID must be the fully-qualified domain name of your custom domain:\n\n- The user pool is configured for passkey authentication.\n- The user pool has a custom domain, whether or not it also has a prefix domain.\n- Your application performs authentication with managed login or the classic hosted UI."
},
"webAuthnUserVerification": {
- "type": "string"
+ "type": "string",
+ "description": "When `required` , users can only register and sign in users with passkeys that are capable of [user verification](https://docs.aws.amazon.com/https://www.w3.org/TR/webauthn-2/#enum-userVerificationRequirement) . When `preferred` , your user pool doesn't require the use of authenticators with user verification but encourages it."
}
},
"type": "object",
@@ -197418,14 +197675,14 @@
"items": {
"type": "string"
},
- "description": "Attributes supported as an alias for this user pool. Possible values: *phone_number* , *email* , or *preferred_username* ."
+ "description": "Attributes supported as an alias for this user pool. Possible values: *phone_number* , *email* , or *preferred_username* . For more information about alias attributes, see [Customizing sign-in attributes](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html#user-pool-settings-aliases) ."
},
"autoVerifiedAttributes": {
"type": "array",
"items": {
"type": "string"
},
- "description": "The attributes to be auto-verified. Possible values: *email* , *phone_number* ."
+ "description": "The attributes that you want your user pool to automatically verify. Possible values: *email* , *phone_number* . For more information see [Verifying contact information at sign-up](https://docs.aws.amazon.com/cognito/latest/developerguide/signing-up-users-in-your-app.html#allowing-users-to-sign-up-and-confirm-themselves) ."
},
"deletionProtection": {
"type": "string",
@@ -197433,7 +197690,7 @@
},
"deviceConfiguration": {
"$ref": "#/types/aws-native:cognito:UserPoolDeviceConfiguration",
- "description": "The device-remembering configuration for a user pool. A null value indicates that you have deactivated device remembering in your user pool.\n\n\u003e When you provide a value for any `DeviceConfiguration` field, you activate the Amazon Cognito device-remembering feature."
+ "description": "The device-remembering configuration for a user pool. Device remembering or device tracking is a \"Remember me on this device\" option for user pools that perform authentication with the device key of a trusted device in the back end, instead of a user-provided MFA code. For more information about device authentication, see [Working with user devices in your user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-device-tracking.html) . A null value indicates that you have deactivated device remembering in your user pool.\n\n\u003e When you provide a value for any `DeviceConfiguration` field, you activate the Amazon Cognito device-remembering feature. For more infor"
},
"emailAuthenticationMessage": {
"type": "string"
@@ -197477,7 +197734,7 @@
"items": {
"$ref": "#/types/aws-native:cognito:UserPoolSchemaAttribute"
},
- "description": "An array of schema attributes for the new user pool. These attributes can be standard or custom attributes."
+ "description": "An array of attributes for the new user pool. You can add custom attributes and modify the properties of default attributes. The specifications in this parameter set the required attributes in your user pool. For more information, see [Working with user attributes](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html) ."
},
"smsAuthenticationMessage": {
"type": "string",
@@ -197485,7 +197742,7 @@
},
"smsConfiguration": {
"$ref": "#/types/aws-native:cognito:UserPoolSmsConfiguration",
- "description": "The SMS configuration with the settings that your Amazon Cognito user pool must use to send an SMS message from your AWS account through Amazon Simple Notification Service. To send SMS messages with Amazon SNS in the AWS Region that you want, the Amazon Cognito user pool uses an AWS Identity and Access Management (IAM) role in your AWS account ."
+ "description": "The SMS configuration with the settings that your Amazon Cognito user pool must use to send an SMS message from your AWS account through Amazon Simple Notification Service. To send SMS messages with Amazon SNS in the AWS Region that you want, the Amazon Cognito user pool uses an AWS Identity and Access Management (IAM) role in your AWS account . For more information see [SMS message settings](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-sms-settings.html) ."
},
"smsVerificationMessage": {
"type": "string",
@@ -197501,7 +197758,7 @@
},
"userPoolName": {
"type": "string",
- "description": "A string used to name the user pool."
+ "description": "A friendlhy name for your user pool."
},
"userPoolTags": {
"type": "object",
@@ -197523,17 +197780,19 @@
},
"usernameConfiguration": {
"$ref": "#/types/aws-native:cognito:UserPoolUsernameConfiguration",
- "description": "Case sensitivity on the username input for the selected sign-in option. When case sensitivity is set to `False` (case insensitive), users can sign in with any combination of capital and lowercase letters. For example, `username` , `USERNAME` , or `UserName` , or for email, `email@example.com` or `EMaiL@eXamplE.Com` . For most use cases, set case sensitivity to `False` (case insensitive) as a best practice. When usernames and email addresses are case insensitive, Amazon Cognito treats any variation in case as the same user, and prevents a case variation from being assigned to the same attribute for a different user.\n\nThis configuration is immutable after you set it. For more information, see [UsernameConfigurationType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UsernameConfigurationType.html) ."
+ "description": "Sets the case sensitivity option for sign-in usernames. When `CaseSensitive` is `false` (case insensitive), users can sign in with any combination of capital and lowercase letters. For example, `username` , `USERNAME` , or `UserName` , or for email, `email@example.com` or `EMaiL@eXamplE.Com` . For most use cases, set case sensitivity to `false` as a best practice. When usernames and email addresses are case insensitive, Amazon Cognito treats any variation in case as the same user, and prevents a case variation from being assigned to the same attribute for a different user.\n\nWhen `CaseSensitive` is `true` (case sensitive), Amazon Cognito interprets `USERNAME` and `UserName` as distinct users.\n\nThis configuration is immutable after you set it."
},
"verificationMessageTemplate": {
"$ref": "#/types/aws-native:cognito:UserPoolVerificationMessageTemplate",
"description": "The template for the verification message that your user pool delivers to users who set an email address or phone number attribute.\n\nSet the email message type that corresponds to your `DefaultEmailOption` selection. For `CONFIRM_WITH_LINK` , specify an `EmailMessageByLink` and leave `EmailMessage` blank. For `CONFIRM_WITH_CODE` , specify an `EmailMessage` and leave `EmailMessageByLink` blank. When you supply both parameters with either choice, Amazon Cognito returns an error."
},
"webAuthnRelyingPartyId": {
- "type": "string"
+ "type": "string",
+ "description": "Sets or displays the authentication domain, typically your user pool domain, that passkey providers must use as a relying party (RP) in their configuration.\n\nUnder the following conditions, the passkey relying party ID must be the fully-qualified domain name of your custom domain:\n\n- The user pool is configured for passkey authentication.\n- The user pool has a custom domain, whether or not it also has a prefix domain.\n- Your application performs authentication with managed login or the classic hosted UI."
},
"webAuthnUserVerification": {
- "type": "string"
+ "type": "string",
+ "description": "When `required` , users can only register and sign in users with passkeys that are capable of [user verification](https://docs.aws.amazon.com/https://www.w3.org/TR/webauthn-2/#enum-userVerificationRequirement) . When `preferred` , your user pool doesn't require the use of authenticators with user verification but encourages it."
}
}
},
@@ -197560,11 +197819,11 @@
"items": {
"type": "string"
},
- "description": "The allowed OAuth scopes. Possible values provided by OAuth are `phone` , `email` , `openid` , and `profile` . Possible values provided by AWS are `aws.cognito.signin.user.admin` . Custom scopes created in Resource Servers are also supported."
+ "description": "The OAuth 2.0 scopes that you want to permit your app client to authorize. Scopes govern access control to user pool self-service API operations, user data from the `userInfo` endpoint, and third-party APIs. Possible values provided by OAuth are `phone` , `email` , `openid` , and `profile` . Possible values provided by AWS are `aws.cognito.signin.user.admin` . Custom scopes created in Resource Servers are also supported."
},
"analyticsConfiguration": {
"$ref": "#/types/aws-native:cognito:UserPoolClientAnalyticsConfiguration",
- "description": "The user pool analytics configuration for collecting metrics and sending them to your Amazon Pinpoint campaign.\n\n\u003e In AWS Regions where Amazon Pinpoint isn't available, user pools only support sending events to Amazon Pinpoint projects in AWS Region us-east-1. In Regions where Amazon Pinpoint is available, user pools support sending events to Amazon Pinpoint projects within that same Region."
+ "description": "The user pool analytics configuration for collecting metrics and sending them to your Amazon Pinpoint campaign.\n\nIn AWS Regions where Amazon Pinpoint isn't available, user pools might not have access to analytics or might be configurable with campaigns in the US East (N. Virginia) Region. For more information, see [Using Amazon Pinpoint analytics](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-pinpoint-integration.html) ."
},
"authSessionValidity": {
"type": "integer",
@@ -197575,7 +197834,7 @@
"items": {
"type": "string"
},
- "description": "A list of allowed redirect (callback) URLs for the IdPs.\n\nA redirect URI must:\n\n- Be an absolute URI.\n- Be registered with the authorization server.\n- Not include a fragment component.\n\nSee [OAuth 2.0 - Redirection Endpoint](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6749#section-3.1.2) .\n\nAmazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.\n\nApp callback URLs such as myapp://example are also supported."
+ "description": "A list of allowed redirect (callback) URLs for the IdPs.\n\nA redirect URI must:\n\n- Be an absolute URI.\n- Be registered with the authorization server. Amazon Cognito doesn't accept authorization requests with `redirect_uri` values that aren't in the list of `CallbackURLs` that you provide in this parameter.\n- Not include a fragment component.\n\nSee [OAuth 2.0 - Redirection Endpoint](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6749#section-3.1.2) .\n\nAmazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.\n\nApp callback URLs such as myapp://example are also supported."
},
"clientId": {
"type": "string",
@@ -197583,14 +197842,14 @@
},
"clientName": {
"type": "string",
- "description": "The client name for the user pool client you would like to create."
+ "description": "A friendly name for the app client that you want to create."
},
"clientSecret": {
"type": "string"
},
"defaultRedirectUri": {
"type": "string",
- "description": "The default redirect URI. In app clients with one assigned IdP, replaces `redirect_uri` in authentication requests. Must be in the `CallbackURLs` list.\n\nA redirect URI must:\n\n- Be an absolute URI.\n- Be registered with the authorization server.\n- Not include a fragment component.\n\nFor more information, see [Default redirect URI](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-client-apps.html#cognito-user-pools-app-idp-settings-about) .\n\nAmazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.\n\nApp callback URLs such as myapp://example are also supported."
+ "description": "The default redirect URI. In app clients with one assigned IdP, replaces `redirect_uri` in authentication requests. Must be in the `CallbackURLs` list."
},
"enablePropagateAdditionalUserContextData": {
"type": "boolean",
@@ -197609,7 +197868,7 @@
},
"generateSecret": {
"type": "boolean",
- "description": "Boolean to specify whether you want to generate a secret for the user pool client being created.",
+ "description": "When `true` , generates a client secret for the app client. Client secrets are used with server-side and machine-to-machine applications. For more information, see [App client types](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-client-apps.html#user-pool-settings-client-app-client-types) .",
"replaceOnChanges": true
},
"idTokenValidity": {
@@ -197621,7 +197880,7 @@
"items": {
"type": "string"
},
- "description": "A list of allowed logout URLs for the IdPs."
+ "description": "A list of allowed logout URLs for managed login authentication. For more information, see [Logout endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/logout-endpoint.html) ."
},
"name": {
"type": "string"
@@ -197646,15 +197905,15 @@
"items": {
"type": "string"
},
- "description": "A list of provider names for the identity providers (IdPs) that are supported on this client. The following are supported: `COGNITO` , `Facebook` , `Google` , `SignInWithApple` , and `LoginWithAmazon` . You can also specify the names that you configured for the SAML and OIDC IdPs in your user pool, for example `MySAMLIdP` or `MyOIDCIdP` .\n\nThis setting applies to providers that you can access with the [hosted UI and OAuth 2.0 authorization server](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-app-integration.html) . The removal of `COGNITO` from this list doesn't prevent authentication operations for local users with the user pools API in an AWS SDK. The only way to prevent API-based authentication is to block access with a [AWS WAF rule](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-waf.html) ."
+ "description": "A list of provider names for the identity providers (IdPs) that are supported on this client. The following are supported: `COGNITO` , `Facebook` , `Google` , `SignInWithApple` , and `LoginWithAmazon` . You can also specify the names that you configured for the SAML and OIDC IdPs in your user pool, for example `MySAMLIdP` or `MyOIDCIdP` .\n\nThis setting applies to providers that you can access with [managed login](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managed-login.html) . The removal of `COGNITO` from this list doesn't prevent authentication operations for local users with the user pools API in an AWS SDK. The only way to prevent API-based authentication is to block access with a [AWS WAF rule](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-waf.html) ."
},
"tokenValidityUnits": {
"$ref": "#/types/aws-native:cognito:UserPoolClientTokenValidityUnits",
- "description": "The units in which the validity times are represented. The default unit for RefreshToken is days, and default for ID and access tokens are hours."
+ "description": "The units that validity times are represented in. The default unit for refresh tokens is days, and the default for ID and access tokens are hours."
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool where you want to create a user pool client.",
+ "description": "The ID of the user pool where you want to create an app client.",
"replaceOnChanges": true
},
"writeAttributes": {
@@ -197693,11 +197952,11 @@
"items": {
"type": "string"
},
- "description": "The allowed OAuth scopes. Possible values provided by OAuth are `phone` , `email` , `openid` , and `profile` . Possible values provided by AWS are `aws.cognito.signin.user.admin` . Custom scopes created in Resource Servers are also supported."
+ "description": "The OAuth 2.0 scopes that you want to permit your app client to authorize. Scopes govern access control to user pool self-service API operations, user data from the `userInfo` endpoint, and third-party APIs. Possible values provided by OAuth are `phone` , `email` , `openid` , and `profile` . Possible values provided by AWS are `aws.cognito.signin.user.admin` . Custom scopes created in Resource Servers are also supported."
},
"analyticsConfiguration": {
"$ref": "#/types/aws-native:cognito:UserPoolClientAnalyticsConfiguration",
- "description": "The user pool analytics configuration for collecting metrics and sending them to your Amazon Pinpoint campaign.\n\n\u003e In AWS Regions where Amazon Pinpoint isn't available, user pools only support sending events to Amazon Pinpoint projects in AWS Region us-east-1. In Regions where Amazon Pinpoint is available, user pools support sending events to Amazon Pinpoint projects within that same Region."
+ "description": "The user pool analytics configuration for collecting metrics and sending them to your Amazon Pinpoint campaign.\n\nIn AWS Regions where Amazon Pinpoint isn't available, user pools might not have access to analytics or might be configurable with campaigns in the US East (N. Virginia) Region. For more information, see [Using Amazon Pinpoint analytics](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-pinpoint-integration.html) ."
},
"authSessionValidity": {
"type": "integer",
@@ -197708,15 +197967,15 @@
"items": {
"type": "string"
},
- "description": "A list of allowed redirect (callback) URLs for the IdPs.\n\nA redirect URI must:\n\n- Be an absolute URI.\n- Be registered with the authorization server.\n- Not include a fragment component.\n\nSee [OAuth 2.0 - Redirection Endpoint](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6749#section-3.1.2) .\n\nAmazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.\n\nApp callback URLs such as myapp://example are also supported."
+ "description": "A list of allowed redirect (callback) URLs for the IdPs.\n\nA redirect URI must:\n\n- Be an absolute URI.\n- Be registered with the authorization server. Amazon Cognito doesn't accept authorization requests with `redirect_uri` values that aren't in the list of `CallbackURLs` that you provide in this parameter.\n- Not include a fragment component.\n\nSee [OAuth 2.0 - Redirection Endpoint](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6749#section-3.1.2) .\n\nAmazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.\n\nApp callback URLs such as myapp://example are also supported."
},
"clientName": {
"type": "string",
- "description": "The client name for the user pool client you would like to create."
+ "description": "A friendly name for the app client that you want to create."
},
"defaultRedirectUri": {
"type": "string",
- "description": "The default redirect URI. In app clients with one assigned IdP, replaces `redirect_uri` in authentication requests. Must be in the `CallbackURLs` list.\n\nA redirect URI must:\n\n- Be an absolute URI.\n- Be registered with the authorization server.\n- Not include a fragment component.\n\nFor more information, see [Default redirect URI](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-client-apps.html#cognito-user-pools-app-idp-settings-about) .\n\nAmazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.\n\nApp callback URLs such as myapp://example are also supported."
+ "description": "The default redirect URI. In app clients with one assigned IdP, replaces `redirect_uri` in authentication requests. Must be in the `CallbackURLs` list."
},
"enablePropagateAdditionalUserContextData": {
"type": "boolean",
@@ -197735,7 +197994,7 @@
},
"generateSecret": {
"type": "boolean",
- "description": "Boolean to specify whether you want to generate a secret for the user pool client being created."
+ "description": "When `true` , generates a client secret for the app client. Client secrets are used with server-side and machine-to-machine applications. For more information, see [App client types](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-client-apps.html#user-pool-settings-client-app-client-types) ."
},
"idTokenValidity": {
"type": "integer",
@@ -197746,7 +198005,7 @@
"items": {
"type": "string"
},
- "description": "A list of allowed logout URLs for the IdPs."
+ "description": "A list of allowed logout URLs for managed login authentication. For more information, see [Logout endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/logout-endpoint.html) ."
},
"preventUserExistenceErrors": {
"type": "string",
@@ -197768,15 +198027,15 @@
"items": {
"type": "string"
},
- "description": "A list of provider names for the identity providers (IdPs) that are supported on this client. The following are supported: `COGNITO` , `Facebook` , `Google` , `SignInWithApple` , and `LoginWithAmazon` . You can also specify the names that you configured for the SAML and OIDC IdPs in your user pool, for example `MySAMLIdP` or `MyOIDCIdP` .\n\nThis setting applies to providers that you can access with the [hosted UI and OAuth 2.0 authorization server](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-app-integration.html) . The removal of `COGNITO` from this list doesn't prevent authentication operations for local users with the user pools API in an AWS SDK. The only way to prevent API-based authentication is to block access with a [AWS WAF rule](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-waf.html) ."
+ "description": "A list of provider names for the identity providers (IdPs) that are supported on this client. The following are supported: `COGNITO` , `Facebook` , `Google` , `SignInWithApple` , and `LoginWithAmazon` . You can also specify the names that you configured for the SAML and OIDC IdPs in your user pool, for example `MySAMLIdP` or `MyOIDCIdP` .\n\nThis setting applies to providers that you can access with [managed login](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managed-login.html) . The removal of `COGNITO` from this list doesn't prevent authentication operations for local users with the user pools API in an AWS SDK. The only way to prevent API-based authentication is to block access with a [AWS WAF rule](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-waf.html) ."
},
"tokenValidityUnits": {
"$ref": "#/types/aws-native:cognito:UserPoolClientTokenValidityUnits",
- "description": "The units in which the validity times are represented. The default unit for RefreshToken is days, and default for ID and access tokens are hours."
+ "description": "The units that validity times are represented in. The default unit for refresh tokens is days, and the default for ID and access tokens are hours."
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool where you want to create a user pool client."
+ "description": "The ID of the user pool where you want to create an app client."
},
"writeAttributes": {
"type": "array",
@@ -197855,11 +198114,11 @@
"properties": {
"description": {
"type": "string",
- "description": "A string containing the description of the group."
+ "description": "A description of the group that you're creating."
},
"groupName": {
"type": "string",
- "description": "The name of the group. Must be unique.",
+ "description": "A name for the group. This name must be unique in your user pool.",
"replaceOnChanges": true
},
"precedence": {
@@ -197868,11 +198127,11 @@
},
"roleArn": {
"type": "string",
- "description": "The role Amazon Resource Name (ARN) for the group."
+ "description": "The Amazon Resource Name (ARN) for the IAM role that you want to associate with the group. A group role primarily declares a preferred role for the credentials that you get from an identity pool. Amazon Cognito ID tokens have a `cognito:preferred_role` claim that presents the highest-precedence group that a user belongs to. Both ID and access tokens also contain a `cognito:groups` claim that list all the groups that a user is a member of."
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool.",
+ "description": "The ID of the user pool where you want to create a user group.",
"replaceOnChanges": true
}
},
@@ -197883,11 +198142,11 @@
"inputProperties": {
"description": {
"type": "string",
- "description": "A string containing the description of the group."
+ "description": "A description of the group that you're creating."
},
"groupName": {
"type": "string",
- "description": "The name of the group. Must be unique."
+ "description": "A name for the group. This name must be unique in your user pool."
},
"precedence": {
"type": "integer",
@@ -197895,11 +198154,11 @@
},
"roleArn": {
"type": "string",
- "description": "The role Amazon Resource Name (ARN) for the group."
+ "description": "The Amazon Resource Name (ARN) for the IAM role that you want to associate with the group. A group role primarily declares a preferred role for the credentials that you get from an identity pool. Amazon Cognito ID tokens have a `cognito:preferred_role` claim that presents the highest-precedence group that a user belongs to. Both ID and access tokens also contain a `cognito:groups` claim that list all the groups that a user is a member of."
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool."
+ "description": "The ID of the user pool where you want to create a user group."
}
},
"requiredInputs": [
@@ -197914,14 +198173,14 @@
"additionalProperties": {
"type": "string"
},
- "description": "A mapping of IdP attributes to standard and custom user pool attributes."
+ "description": "A mapping of IdP attributes to standard and custom user pool attributes. Specify a user pool attribute as the key of the key-value pair, and the IdP attribute claim name as the value."
},
"idpIdentifiers": {
"type": "array",
"items": {
"type": "string"
},
- "description": "A list of IdP identifiers."
+ "description": "An array of IdP identifiers, for example `\"IdPIdentifiers\": [ \"MyIdP\", \"MyIdP2\" ]` . Identifiers are friendly names that you can pass in the `idp_identifier` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP. Identifiers in a domain format also enable the use of [email-address matching with SAML providers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managing-saml-idp-naming.html) ."
},
"providerDetails": {
"type": "object",
@@ -197932,17 +198191,17 @@
},
"providerName": {
"type": "string",
- "description": "The IdP name.",
+ "description": "The name that you want to assign to the IdP. You can pass the identity provider name in the `identity_provider` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP.",
"replaceOnChanges": true
},
"providerType": {
"type": "string",
- "description": "The IdP type.",
+ "description": "The type of IdP that you want to add. Amazon Cognito supports OIDC, SAML 2.0, Login With Amazon, Sign In With Apple, Google, and Facebook IdPs.",
"replaceOnChanges": true
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID.",
+ "description": "The Id of the user pool where you want to create an IdP.",
"replaceOnChanges": true
}
},
@@ -197959,14 +198218,14 @@
"additionalProperties": {
"type": "string"
},
- "description": "A mapping of IdP attributes to standard and custom user pool attributes."
+ "description": "A mapping of IdP attributes to standard and custom user pool attributes. Specify a user pool attribute as the key of the key-value pair, and the IdP attribute claim name as the value."
},
"idpIdentifiers": {
"type": "array",
"items": {
"type": "string"
},
- "description": "A list of IdP identifiers."
+ "description": "An array of IdP identifiers, for example `\"IdPIdentifiers\": [ \"MyIdP\", \"MyIdP2\" ]` . Identifiers are friendly names that you can pass in the `idp_identifier` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP. Identifiers in a domain format also enable the use of [email-address matching with SAML providers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managing-saml-idp-naming.html) ."
},
"providerDetails": {
"type": "object",
@@ -197977,15 +198236,15 @@
},
"providerName": {
"type": "string",
- "description": "The IdP name."
+ "description": "The name that you want to assign to the IdP. You can pass the identity provider name in the `identity_provider` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP."
},
"providerType": {
"type": "string",
- "description": "The IdP type."
+ "description": "The type of IdP that you want to add. Amazon Cognito supports OIDC, SAML 2.0, Login With Amazon, Sign In With Apple, Google, and Facebook IdPs."
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID."
+ "description": "The Id of the user pool where you want to create an IdP."
}
},
"requiredInputs": [
@@ -198015,7 +198274,7 @@
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool.",
+ "description": "The ID of the user pool where you want to create a resource server.",
"replaceOnChanges": true
}
},
@@ -198043,7 +198302,7 @@
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool."
+ "description": "The ID of the user pool where you want to create a resource server."
}
},
"requiredInputs": [
@@ -198123,7 +198382,7 @@
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool.",
+ "description": "The ID of the user pool.",
"replaceOnChanges": true
}
},
@@ -198143,7 +198402,7 @@
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool."
+ "description": "The ID of the user pool."
}
},
"requiredInputs": [
@@ -198159,7 +198418,7 @@
"additionalProperties": {
"type": "string"
},
- "description": "A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.\n\nYou create custom workflows by assigning AWS Lambda functions to user pool triggers. When you use the AdminCreateUser API action, Amazon Cognito invokes the function that is assigned to the *pre sign-up* trigger. When Amazon Cognito invokes this function, it passes a JSON payload, which the function receives as input. This payload contains a `clientMetadata` attribute, which provides the data that you assigned to the ClientMetadata parameter in your AdminCreateUser request. In your function code in AWS Lambda , you can process the `clientMetadata` value to enhance your workflow for your specific needs.\n\nFor more information, see [Customizing user pool Workflows with Lambda Triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-working-with-aws-lambda-triggers.html) in the *Amazon Cognito Developer Guide* .\n\n\u003e When you use the ClientMetadata parameter, remember that Amazon Cognito won't do the following:\n\u003e \n\u003e - Store the ClientMetadata value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration doesn't include triggers, the ClientMetadata parameter serves no purpose.\n\u003e - Validate the ClientMetadata value.\n\u003e - Encrypt the ClientMetadata value. Don't use Amazon Cognito to provide sensitive information.",
+ "description": "A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.\n\nYou create custom workflows by assigning AWS Lambda functions to user pool triggers. When you use the AdminCreateUser API action, Amazon Cognito invokes the function that is assigned to the *pre sign-up* trigger. When Amazon Cognito invokes this function, it passes a JSON payload, which the function receives as input. This payload contains a `ClientMetadata` attribute, which provides the data that you assigned to the ClientMetadata parameter in your AdminCreateUser request. In your function code in AWS Lambda , you can process the `clientMetadata` value to enhance your workflow for your specific needs.\n\nFor more information, see [Customizing user pool Workflows with Lambda Triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-working-with-aws-lambda-triggers.html) in the *Amazon Cognito Developer Guide* .\n\n\u003e When you use the `ClientMetadata` parameter, note that Amazon Cognito won't do the following:\n\u003e \n\u003e - Store the `ClientMetadata` value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration doesn't include triggers, the `ClientMetadata` parameter serves no purpose.\n\u003e - Validate the `ClientMetadata` value.\n\u003e - Encrypt the `ClientMetadata` value. Don't send sensitive information in this parameter.",
"replaceOnChanges": true
},
"desiredDeliveryMediums": {
@@ -198167,17 +198426,17 @@
"items": {
"type": "string"
},
- "description": "Specify `\"EMAIL\"` if email will be used to send the welcome message. Specify `\"SMS\"` if the phone number will be used. The default value is `\"SMS\"` . You can specify more than one value.",
+ "description": "Specify `EMAIL` if email will be used to send the welcome message. Specify `SMS` if the phone number will be used. The default value is `SMS` . You can specify more than one value.",
"replaceOnChanges": true
},
"forceAliasCreation": {
"type": "boolean",
- "description": "This parameter is used only if the `phone_number_verified` or `email_verified` attribute is set to `True` . Otherwise, it is ignored.\n\nIf this parameter is set to `True` and the phone number or email address specified in the UserAttributes parameter already exists as an alias with a different user, the API call will migrate the alias from the previous user to the newly created user. The previous user will no longer be able to log in using that alias.\n\nIf this parameter is set to `False` , the API throws an `AliasExistsException` error if the alias already exists. The default value is `False` .",
+ "description": "This parameter is used only if the `phone_number_verified` or `email_verified` attribute is set to `True` . Otherwise, it is ignored.\n\nIf this parameter is set to `True` and the phone number or email address specified in the `UserAttributes` parameter already exists as an alias with a different user, this request migrates the alias from the previous user to the newly-created user. The previous user will no longer be able to log in using that alias.\n\nIf this parameter is set to `False` , the API throws an `AliasExistsException` error if the alias already exists. The default value is `False` .",
"replaceOnChanges": true
},
"messageAction": {
"type": "string",
- "description": "Set to `RESEND` to resend the invitation message to a user that already exists and reset the expiration limit on the user's account. Set to `SUPPRESS` to suppress sending the message. You can specify only one value.",
+ "description": "Set to `RESEND` to resend the invitation message to a user that already exists, and to reset the temporary-password duration with a new temporary password. Set to `SUPPRESS` to suppress sending the message. You can specify only one value.",
"replaceOnChanges": true
},
"userAttributes": {
@@ -198190,7 +198449,7 @@
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool where the user will be created.",
+ "description": "The ID of the user pool where you want to create a user.",
"replaceOnChanges": true
},
"username": {
@@ -198217,22 +198476,22 @@
"additionalProperties": {
"type": "string"
},
- "description": "A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.\n\nYou create custom workflows by assigning AWS Lambda functions to user pool triggers. When you use the AdminCreateUser API action, Amazon Cognito invokes the function that is assigned to the *pre sign-up* trigger. When Amazon Cognito invokes this function, it passes a JSON payload, which the function receives as input. This payload contains a `clientMetadata` attribute, which provides the data that you assigned to the ClientMetadata parameter in your AdminCreateUser request. In your function code in AWS Lambda , you can process the `clientMetadata` value to enhance your workflow for your specific needs.\n\nFor more information, see [Customizing user pool Workflows with Lambda Triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-working-with-aws-lambda-triggers.html) in the *Amazon Cognito Developer Guide* .\n\n\u003e When you use the ClientMetadata parameter, remember that Amazon Cognito won't do the following:\n\u003e \n\u003e - Store the ClientMetadata value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration doesn't include triggers, the ClientMetadata parameter serves no purpose.\n\u003e - Validate the ClientMetadata value.\n\u003e - Encrypt the ClientMetadata value. Don't use Amazon Cognito to provide sensitive information."
+ "description": "A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.\n\nYou create custom workflows by assigning AWS Lambda functions to user pool triggers. When you use the AdminCreateUser API action, Amazon Cognito invokes the function that is assigned to the *pre sign-up* trigger. When Amazon Cognito invokes this function, it passes a JSON payload, which the function receives as input. This payload contains a `ClientMetadata` attribute, which provides the data that you assigned to the ClientMetadata parameter in your AdminCreateUser request. In your function code in AWS Lambda , you can process the `clientMetadata` value to enhance your workflow for your specific needs.\n\nFor more information, see [Customizing user pool Workflows with Lambda Triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-working-with-aws-lambda-triggers.html) in the *Amazon Cognito Developer Guide* .\n\n\u003e When you use the `ClientMetadata` parameter, note that Amazon Cognito won't do the following:\n\u003e \n\u003e - Store the `ClientMetadata` value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration doesn't include triggers, the `ClientMetadata` parameter serves no purpose.\n\u003e - Validate the `ClientMetadata` value.\n\u003e - Encrypt the `ClientMetadata` value. Don't send sensitive information in this parameter."
},
"desiredDeliveryMediums": {
"type": "array",
"items": {
"type": "string"
},
- "description": "Specify `\"EMAIL\"` if email will be used to send the welcome message. Specify `\"SMS\"` if the phone number will be used. The default value is `\"SMS\"` . You can specify more than one value."
+ "description": "Specify `EMAIL` if email will be used to send the welcome message. Specify `SMS` if the phone number will be used. The default value is `SMS` . You can specify more than one value."
},
"forceAliasCreation": {
"type": "boolean",
- "description": "This parameter is used only if the `phone_number_verified` or `email_verified` attribute is set to `True` . Otherwise, it is ignored.\n\nIf this parameter is set to `True` and the phone number or email address specified in the UserAttributes parameter already exists as an alias with a different user, the API call will migrate the alias from the previous user to the newly created user. The previous user will no longer be able to log in using that alias.\n\nIf this parameter is set to `False` , the API throws an `AliasExistsException` error if the alias already exists. The default value is `False` ."
+ "description": "This parameter is used only if the `phone_number_verified` or `email_verified` attribute is set to `True` . Otherwise, it is ignored.\n\nIf this parameter is set to `True` and the phone number or email address specified in the `UserAttributes` parameter already exists as an alias with a different user, this request migrates the alias from the previous user to the newly-created user. The previous user will no longer be able to log in using that alias.\n\nIf this parameter is set to `False` , the API throws an `AliasExistsException` error if the alias already exists. The default value is `False` ."
},
"messageAction": {
"type": "string",
- "description": "Set to `RESEND` to resend the invitation message to a user that already exists and reset the expiration limit on the user's account. Set to `SUPPRESS` to suppress sending the message. You can specify only one value."
+ "description": "Set to `RESEND` to resend the invitation message to a user that already exists, and to reset the temporary-password duration with a new temporary password. Set to `SUPPRESS` to suppress sending the message. You can specify only one value."
},
"userAttributes": {
"type": "array",
@@ -198243,7 +198502,7 @@
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool where the user will be created."
+ "description": "The ID of the user pool where you want to create a user."
},
"username": {
"type": "string",
@@ -198271,7 +198530,7 @@
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool.",
+ "description": "The ID of the user pool that contains the group that you want to add the user to.",
"replaceOnChanges": true
},
"username": {
@@ -198293,7 +198552,7 @@
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool."
+ "description": "The ID of the user pool that contains the group that you want to add the user to."
},
"username": {
"type": "string",
@@ -200583,6 +200842,10 @@
"type": "string",
"description": "The name of the task template."
},
+ "selfAssignContactFlowArn": {
+ "type": "string",
+ "description": "The identifier of the contact flow."
+ },
"status": {
"$ref": "#/types/aws-native:connect:TaskTemplateStatus",
"description": "The status of the task template."
@@ -200639,6 +200902,10 @@
"type": "string",
"description": "The name of the task template."
},
+ "selfAssignContactFlowArn": {
+ "type": "string",
+ "description": "The identifier of the contact flow."
+ },
"status": {
"$ref": "#/types/aws-native:connect:TaskTemplateStatus",
"description": "The status of the task template."
@@ -207741,7 +208008,7 @@
},
"importSourceSpecification": {
"$ref": "#/types/aws-native:dynamodb:TableImportSourceSpecification",
- "description": "Specifies the properties of data being imported from the S3 bucket source to the table.\n If you specify the ``ImportSourceSpecification`` property, and also specify either the ``StreamSpecification``, the ``TableClass`` property, or the ``DeletionProtectionEnabled`` property, the IAM entity creating/updating stack must have ``UpdateTable`` permission.",
+ "description": "Specifies the properties of data being imported from the S3 bucket source to the\" table.\n If you specify the ``ImportSourceSpecification`` property, and also specify either the ``StreamSpecification``, the ``TableClass`` property, the ``DeletionProtectionEnabled`` property, or the ``WarmThroughput`` property, the IAM entity creating/updating stack must have ``UpdateTable`` permission.",
"replaceOnChanges": true
},
"keySchema": {
@@ -207857,7 +208124,7 @@
},
"importSourceSpecification": {
"$ref": "#/types/aws-native:dynamodb:TableImportSourceSpecification",
- "description": "Specifies the properties of data being imported from the S3 bucket source to the table.\n If you specify the ``ImportSourceSpecification`` property, and also specify either the ``StreamSpecification``, the ``TableClass`` property, or the ``DeletionProtectionEnabled`` property, the IAM entity creating/updating stack must have ``UpdateTable`` permission."
+ "description": "Specifies the properties of data being imported from the S3 bucket source to the\" table.\n If you specify the ``ImportSourceSpecification`` property, and also specify either the ``StreamSpecification``, the ``TableClass`` property, the ``DeletionProtectionEnabled`` property, or the ``WarmThroughput`` property, the IAM entity creating/updating stack must have ``UpdateTable`` permission."
},
"keySchema": {
"oneOf": [
@@ -210387,7 +210654,7 @@
"items": {
"$ref": "#/types/aws-native:ec2:LaunchTemplateTagSpecification"
},
- "description": "The tags to apply to the launch template on creation. To tag the launch template, the resource type must be ``launch-template``.\n To specify the tags for resources that are created during instance launch, use [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications)."
+ "description": "The tags to apply to the launch template on creation. To tag the launch template, the resource type must be ``launch-template``.\n To specify the tags for the resources that are created when an instance is launched, you must use [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications)."
},
"versionDescription": {
"type": "string",
@@ -210415,7 +210682,7 @@
"items": {
"$ref": "#/types/aws-native:ec2:LaunchTemplateTagSpecification"
},
- "description": "The tags to apply to the launch template on creation. To tag the launch template, the resource type must be ``launch-template``.\n To specify the tags for resources that are created during instance launch, use [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications)."
+ "description": "The tags to apply to the launch template on creation. To tag the launch template, the resource type must be ``launch-template``.\n To specify the tags for the resources that are created when an instance is launched, you must use [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications)."
},
"versionDescription": {
"type": "string",
@@ -216102,6 +216369,10 @@
"description": "The number of ``cpu`` units used by the task. If you use the EC2 launch type, this field is optional. Any value can be used. If you use the Fargate launch type, this field is required. You must use one of the following values. The value that you choose determines your range of valid values for the ``memory`` parameter.\n If you use the EC2 launch type, this field is optional. Supported values are between ``128`` CPU units (``0.125`` vCPUs) and ``10240`` CPU units (``10`` vCPUs).\n The CPU units cannot be less than 1 vCPU when you use Windows containers on Fargate.\n + 256 (.25 vCPU) - Available ``memory`` values: 512 (0.5 GB), 1024 (1 GB), 2048 (2 GB)\n + 512 (.5 vCPU) - Available ``memory`` values: 1024 (1 GB), 2048 (2 GB), 3072 (3 GB), 4096 (4 GB)\n + 1024 (1 vCPU) - Available ``memory`` values: 2048 (2 GB), 3072 (3 GB), 4096 (4 GB), 5120 (5 GB), 6144 (6 GB), 7168 (7 GB), 8192 (8 GB)\n + 2048 (2 vCPU) - Available ``memory`` values: 4096 (4 GB) and 16384 (16 GB) in increments of 1024 (1 GB)\n + 4096 (4 vCPU) - Available ``memory`` values: 8192 (8 GB) and 30720 (30 GB) in increments of 1024 (1 GB)\n + 8192 (8 vCPU) - Available ``memory`` values: 16 GB and 60 GB in 4 GB increments\n This option requires Linux platform ``1.4.0`` or later.\n + 16384 (16vCPU) - Available ``memory`` values: 32GB and 120 GB in 8 GB increments\n This option requires Linux platform ``1.4.0`` or later.",
"replaceOnChanges": true
},
+ "enableFaultInjection": {
+ "type": "boolean",
+ "replaceOnChanges": true
+ },
"ephemeralStorage": {
"$ref": "#/types/aws-native:ecs:TaskDefinitionEphemeralStorage",
"description": "The ephemeral storage settings to use for tasks run with the task definition.",
@@ -216212,6 +216483,9 @@
"type": "string",
"description": "The number of ``cpu`` units used by the task. If you use the EC2 launch type, this field is optional. Any value can be used. If you use the Fargate launch type, this field is required. You must use one of the following values. The value that you choose determines your range of valid values for the ``memory`` parameter.\n If you use the EC2 launch type, this field is optional. Supported values are between ``128`` CPU units (``0.125`` vCPUs) and ``10240`` CPU units (``10`` vCPUs).\n The CPU units cannot be less than 1 vCPU when you use Windows containers on Fargate.\n + 256 (.25 vCPU) - Available ``memory`` values: 512 (0.5 GB), 1024 (1 GB), 2048 (2 GB)\n + 512 (.5 vCPU) - Available ``memory`` values: 1024 (1 GB), 2048 (2 GB), 3072 (3 GB), 4096 (4 GB)\n + 1024 (1 vCPU) - Available ``memory`` values: 2048 (2 GB), 3072 (3 GB), 4096 (4 GB), 5120 (5 GB), 6144 (6 GB), 7168 (7 GB), 8192 (8 GB)\n + 2048 (2 vCPU) - Available ``memory`` values: 4096 (4 GB) and 16384 (16 GB) in increments of 1024 (1 GB)\n + 4096 (4 vCPU) - Available ``memory`` values: 8192 (8 GB) and 30720 (30 GB) in increments of 1024 (1 GB)\n + 8192 (8 vCPU) - Available ``memory`` values: 16 GB and 60 GB in 4 GB increments\n This option requires Linux platform ``1.4.0`` or later.\n + 16384 (16vCPU) - Available ``memory`` values: 32GB and 120 GB in 8 GB increments\n This option requires Linux platform ``1.4.0`` or later."
},
+ "enableFaultInjection": {
+ "type": "boolean"
+ },
"ephemeralStorage": {
"$ref": "#/types/aws-native:ecs:TaskDefinitionEphemeralStorage",
"description": "The ephemeral storage settings to use for tasks run with the task definition."
@@ -228946,7 +229220,7 @@
},
"healthEventsConfig": {
"$ref": "#/types/aws-native:internetmonitor:MonitorHealthEventsConfig",
- "description": "A complex type with the configuration information that determines the threshold and other conditions for when Internet Monitor creates a health event for an overall performance or availability issue, across an application's geographies.\n\nDefines the percentages, for overall performance scores and availability scores for an application, that are the thresholds for when Amazon CloudWatch Internet Monitor creates a health event. You can override the defaults to set a custom threshold for overall performance or availability scores, or both.\n\nYou can also set thresholds for local health scores,, where Internet Monitor creates a health event when scores cross a threshold for one or more city-networks, in addition to creating an event when an overall score crosses a threshold.\n\nIf you don't set a health event threshold, the default value is 95%.\n\nFor local thresholds, you also set a minimum percentage of overall traffic that is impacted by an issue before Internet Monitor creates an event. In addition, you can disable local thresholds, for performance scores, availability scores, or both.\n\nFor more information, see [Change health event thresholds](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-IM-overview.html#IMUpdateThresholdFromOverview) in the Internet Monitor section of the *CloudWatch User Guide* ."
+ "description": "A complex type with the configuration information that determines the threshold and other conditions for when Internet Monitor creates a health event for an overall performance or availability issue, across an application's geographies.\n\nDefines the percentages, for overall performance scores and availability scores for an application, that are the thresholds for when Internet Monitor creates a health event. You can override the defaults to set a custom threshold for overall performance or availability scores, or both.\n\nYou can also set thresholds for local health scores,, where Internet Monitor creates a health event when scores cross a threshold for one or more city-networks, in addition to creating an event when an overall score crosses a threshold.\n\nIf you don't set a health event threshold, the default value is 95%.\n\nFor local thresholds, you also set a minimum percentage of overall traffic that is impacted by an issue before Internet Monitor creates an event. In addition, you can disable local thresholds, for performance scores, availability scores, or both.\n\nFor more information, see [Change health event thresholds](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-IM-overview.html#IMUpdateThresholdFromOverview) in the Internet Monitor section of the *CloudWatch User Guide* ."
},
"includeLinkedAccounts": {
"type": "boolean",
@@ -229034,7 +229308,7 @@
"inputProperties": {
"healthEventsConfig": {
"$ref": "#/types/aws-native:internetmonitor:MonitorHealthEventsConfig",
- "description": "A complex type with the configuration information that determines the threshold and other conditions for when Internet Monitor creates a health event for an overall performance or availability issue, across an application's geographies.\n\nDefines the percentages, for overall performance scores and availability scores for an application, that are the thresholds for when Amazon CloudWatch Internet Monitor creates a health event. You can override the defaults to set a custom threshold for overall performance or availability scores, or both.\n\nYou can also set thresholds for local health scores,, where Internet Monitor creates a health event when scores cross a threshold for one or more city-networks, in addition to creating an event when an overall score crosses a threshold.\n\nIf you don't set a health event threshold, the default value is 95%.\n\nFor local thresholds, you also set a minimum percentage of overall traffic that is impacted by an issue before Internet Monitor creates an event. In addition, you can disable local thresholds, for performance scores, availability scores, or both.\n\nFor more information, see [Change health event thresholds](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-IM-overview.html#IMUpdateThresholdFromOverview) in the Internet Monitor section of the *CloudWatch User Guide* ."
+ "description": "A complex type with the configuration information that determines the threshold and other conditions for when Internet Monitor creates a health event for an overall performance or availability issue, across an application's geographies.\n\nDefines the percentages, for overall performance scores and availability scores for an application, that are the thresholds for when Internet Monitor creates a health event. You can override the defaults to set a custom threshold for overall performance or availability scores, or both.\n\nYou can also set thresholds for local health scores,, where Internet Monitor creates a health event when scores cross a threshold for one or more city-networks, in addition to creating an event when an overall score crosses a threshold.\n\nIf you don't set a health event threshold, the default value is 95%.\n\nFor local thresholds, you also set a minimum percentage of overall traffic that is impacted by an issue before Internet Monitor creates an event. In addition, you can disable local thresholds, for performance scores, availability scores, or both.\n\nFor more information, see [Change health event thresholds](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-IM-overview.html#IMUpdateThresholdFromOverview) in the Internet Monitor section of the *CloudWatch User Guide* ."
},
"includeLinkedAccounts": {
"type": "boolean",
@@ -229098,33 +229372,41 @@
"description": "An invoice unit is a set of mutually exclusive accounts that correspond to your business entity. Invoice units allow you to separate AWS account costs and configures your invoice for each business entity.",
"properties": {
"description": {
- "type": "string"
+ "type": "string",
+ "description": "The assigned description for an invoice unit. This information can't be modified or deleted."
},
"invoiceReceiver": {
"type": "string",
+ "description": "The account that receives invoices related to the invoice unit.",
"replaceOnChanges": true
},
"invoiceUnitArn": {
- "type": "string"
+ "type": "string",
+ "description": "The ARN to identify an invoice unit. This information can't be modified or deleted."
},
"lastModified": {
- "type": "number"
+ "type": "number",
+ "description": "The last time the invoice unit was updated. This is important to determine the version of invoice unit configuration used to create the invoices. Any invoice created after this modified time will use this invoice unit configuration."
},
"name": {
"type": "string",
+ "description": "A unique name that is distinctive within your AWS .",
"replaceOnChanges": true
},
"resourceTags": {
"type": "array",
"items": {
"$ref": "#/types/aws-native:index:Tag"
- }
+ },
+ "description": "The tag structure that contains a tag key and value."
},
"rule": {
- "$ref": "#/types/aws-native:invoicing:InvoiceUnitRule"
+ "$ref": "#/types/aws-native:invoicing:InvoiceUnitRule",
+ "description": "An `InvoiceUnitRule` object used the categorize invoice units."
},
"taxInheritanceDisabled": {
- "type": "boolean"
+ "type": "boolean",
+ "description": "Whether the invoice unit based tax inheritance is/ should be enabled or disabled."
}
},
"type": "object",
@@ -229137,25 +229419,31 @@
],
"inputProperties": {
"description": {
- "type": "string"
+ "type": "string",
+ "description": "The assigned description for an invoice unit. This information can't be modified or deleted."
},
"invoiceReceiver": {
- "type": "string"
+ "type": "string",
+ "description": "The account that receives invoices related to the invoice unit."
},
"name": {
- "type": "string"
+ "type": "string",
+ "description": "A unique name that is distinctive within your AWS ."
},
"resourceTags": {
"type": "array",
"items": {
"$ref": "#/types/aws-native:index:Tag"
- }
+ },
+ "description": "The tag structure that contains a tag key and value."
},
"rule": {
- "$ref": "#/types/aws-native:invoicing:InvoiceUnitRule"
+ "$ref": "#/types/aws-native:invoicing:InvoiceUnitRule",
+ "description": "An `InvoiceUnitRule` object used the categorize invoice units."
},
"taxInheritanceDisabled": {
- "type": "boolean"
+ "type": "boolean",
+ "description": "Whether the invoice unit based tax inheritance is/ should be enabled or disabled."
}
},
"requiredInputs": [
@@ -229595,6 +229883,134 @@
"lambdaFunctionArn"
]
},
+ "aws-native:iot:Command": {
+ "description": "Represents the resource definition of AWS IoT Command.",
+ "properties": {
+ "commandArn": {
+ "type": "string",
+ "description": "The Amazon Resource Name (ARN) of the command."
+ },
+ "commandId": {
+ "type": "string",
+ "description": "The unique identifier for the command.",
+ "replaceOnChanges": true
+ },
+ "createdAt": {
+ "type": "string",
+ "description": "The date and time when the command was created."
+ },
+ "deprecated": {
+ "type": "boolean",
+ "description": "A flag indicating whether the command is deprecated."
+ },
+ "description": {
+ "type": "string",
+ "description": "The description of the command."
+ },
+ "displayName": {
+ "type": "string",
+ "description": "The display name for the command."
+ },
+ "lastUpdatedAt": {
+ "type": "string",
+ "description": "The date and time when the command was last updated."
+ },
+ "mandatoryParameters": {
+ "type": "array",
+ "items": {
+ "$ref": "#/types/aws-native:iot:CommandParameter"
+ },
+ "description": "The list of mandatory parameters for the command."
+ },
+ "namespace": {
+ "$ref": "#/types/aws-native:iot:CommandNamespace",
+ "description": "The namespace to which the command belongs."
+ },
+ "payload": {
+ "$ref": "#/types/aws-native:iot:CommandPayload",
+ "description": "The payload associated with the command."
+ },
+ "pendingDeletion": {
+ "type": "boolean",
+ "description": "A flag indicating whether the command is pending deletion."
+ },
+ "roleArn": {
+ "type": "string",
+ "description": "The customer role associated with the command."
+ },
+ "tags": {
+ "type": "array",
+ "items": {
+ "$ref": "#/types/aws-native:index:Tag"
+ },
+ "description": "The tags to be associated with the command."
+ }
+ },
+ "type": "object",
+ "required": [
+ "commandArn",
+ "commandId"
+ ],
+ "inputProperties": {
+ "commandId": {
+ "type": "string",
+ "description": "The unique identifier for the command."
+ },
+ "createdAt": {
+ "type": "string",
+ "description": "The date and time when the command was created."
+ },
+ "deprecated": {
+ "type": "boolean",
+ "description": "A flag indicating whether the command is deprecated."
+ },
+ "description": {
+ "type": "string",
+ "description": "The description of the command."
+ },
+ "displayName": {
+ "type": "string",
+ "description": "The display name for the command."
+ },
+ "lastUpdatedAt": {
+ "type": "string",
+ "description": "The date and time when the command was last updated."
+ },
+ "mandatoryParameters": {
+ "type": "array",
+ "items": {
+ "$ref": "#/types/aws-native:iot:CommandParameter"
+ },
+ "description": "The list of mandatory parameters for the command."
+ },
+ "namespace": {
+ "$ref": "#/types/aws-native:iot:CommandNamespace",
+ "description": "The namespace to which the command belongs."
+ },
+ "payload": {
+ "$ref": "#/types/aws-native:iot:CommandPayload",
+ "description": "The payload associated with the command."
+ },
+ "pendingDeletion": {
+ "type": "boolean",
+ "description": "A flag indicating whether the command is pending deletion."
+ },
+ "roleArn": {
+ "type": "string",
+ "description": "The customer role associated with the command."
+ },
+ "tags": {
+ "type": "array",
+ "items": {
+ "$ref": "#/types/aws-native:index:Tag"
+ },
+ "description": "The tags to be associated with the command."
+ }
+ },
+ "requiredInputs": [
+ "commandId"
+ ]
+ },
"aws-native:iot:CustomMetric": {
"description": "A custom metric published by your devices to Device Defender.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n var batteryPercentageMetric = new AwsNative.IoT.CustomMetric(\"batteryPercentageMetric\", new()\n {\n MetricName = \"batteryPercentage\",\n DisplayName = \"Remaining battery percentage\",\n MetricType = AwsNative.IoT.CustomMetricMetricType.Number,\n });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iot\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iot.NewCustomMetric(ctx, \"batteryPercentageMetric\", \u0026iot.CustomMetricArgs{\n\t\t\tMetricName: pulumi.String(\"batteryPercentage\"),\n\t\t\tDisplayName: pulumi.String(\"Remaining battery percentage\"),\n\t\t\tMetricType: iot.CustomMetricMetricTypeNumber,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst batteryPercentageMetric = new aws_native.iot.CustomMetric(\"batteryPercentageMetric\", {\n metricName: \"batteryPercentage\",\n displayName: \"Remaining battery percentage\",\n metricType: aws_native.iot.CustomMetricMetricType.Number,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbattery_percentage_metric = aws_native.iot.CustomMetric(\"batteryPercentageMetric\",\n metric_name=\"batteryPercentage\",\n display_name=\"Remaining battery percentage\",\n metric_type=aws_native.iot.CustomMetricMetricType.NUMBER)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n",
"properties": {
@@ -250453,7 +250869,7 @@
},
"type": {
"$ref": "#/types/aws-native:organizations:PolicyType",
- "description": "The type of policy to create. You can specify one of the following values: AISERVICES_OPT_OUT_POLICY, BACKUP_POLICY, SERVICE_CONTROL_POLICY, TAG_POLICY, CHATBOT_POLICY, RESOURCE_CONTROL_POLICY",
+ "description": "The type of policy to create. You can specify one of the following values: AISERVICES_OPT_OUT_POLICY, BACKUP_POLICY, SERVICE_CONTROL_POLICY, TAG_POLICY, CHATBOT_POLICY, RESOURCE_CONTROL_POLICY,DECLARATIVE_POLICY_EC2",
"replaceOnChanges": true
}
},
@@ -250495,7 +250911,7 @@
},
"type": {
"$ref": "#/types/aws-native:organizations:PolicyType",
- "description": "The type of policy to create. You can specify one of the following values: AISERVICES_OPT_OUT_POLICY, BACKUP_POLICY, SERVICE_CONTROL_POLICY, TAG_POLICY, CHATBOT_POLICY, RESOURCE_CONTROL_POLICY"
+ "description": "The type of policy to create. You can specify one of the following values: AISERVICES_OPT_OUT_POLICY, BACKUP_POLICY, SERVICE_CONTROL_POLICY, TAG_POLICY, CHATBOT_POLICY, RESOURCE_CONTROL_POLICY,DECLARATIVE_POLICY_EC2"
}
},
"requiredInputs": [
@@ -252191,6 +252607,7 @@
"items": {
"type": "string"
},
+ "description": "The OIDC client ID for a Amazon Q Business application.",
"replaceOnChanges": true
},
"createdAt": {
@@ -252283,7 +252700,8 @@
"type": "array",
"items": {
"type": "string"
- }
+ },
+ "description": "The OIDC client ID for a Amazon Q Business application."
},
"description": {
"type": "string",
@@ -254673,6 +255091,108 @@
"resourceType"
]
},
+ "aws-native:ram:ResourceShare": {
+ "description": "Resource type definition for AWS::RAM::ResourceShare\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n var myresourceshare = new AwsNative.Ram.ResourceShare(\"myresourceshare\", new()\n {\n Name = \"My Resource Share\",\n ResourceArns = new[]\n {\n \"arn:aws:ec2:us-east-1:123456789012:resource-type/12345678-1234-1234-1234-12345678\",\n },\n Principals = new[]\n {\n \"210987654321\",\n },\n Tags = new[]\n {\n new AwsNative.Inputs.TagArgs\n {\n Key = \"Key1\",\n Value = \"Value1\",\n },\n new AwsNative.Inputs.TagArgs\n {\n Key = \"Key2\",\n Value = \"Value2\",\n },\n },\n });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ram\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ram.NewResourceShare(ctx, \"myresourceshare\", \u0026ram.ResourceShareArgs{\n\t\t\tName: pulumi.String(\"My Resource Share\"),\n\t\t\tResourceArns: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"arn:aws:ec2:us-east-1:123456789012:resource-type/12345678-1234-1234-1234-12345678\"),\n\t\t\t},\n\t\t\tPrincipals: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"210987654321\"),\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey: pulumi.String(\"Key1\"),\n\t\t\t\t\tValue: pulumi.String(\"Value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey: pulumi.String(\"Key2\"),\n\t\t\t\t\tValue: pulumi.String(\"Value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myresourceshare = new aws_native.ram.ResourceShare(\"myresourceshare\", {\n name: \"My Resource Share\",\n resourceArns: [\"arn:aws:ec2:us-east-1:123456789012:resource-type/12345678-1234-1234-1234-12345678\"],\n principals: [\"210987654321\"],\n tags: [\n {\n key: \"Key1\",\n value: \"Value1\",\n },\n {\n key: \"Key2\",\n value: \"Value2\",\n },\n ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmyresourceshare = aws_native.ram.ResourceShare(\"myresourceshare\",\n name=\"My Resource Share\",\n resource_arns=[\"arn:aws:ec2:us-east-1:123456789012:resource-type/12345678-1234-1234-1234-12345678\"],\n principals=[\"210987654321\"],\n tags=[\n {\n \"key\": \"Key1\",\n \"value\": \"Value1\",\n },\n {\n \"key\": \"Key2\",\n \"value\": \"Value2\",\n },\n ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n var myresourceshare = new AwsNative.Ram.ResourceShare(\"myresourceshare\", new()\n {\n Name = \"My Resource Share\",\n ResourceArns = new[]\n {\n \"arn:aws:ec2:us-east-1:123456789012:resource-type/12345678-1234-1234-1234-12345678\",\n },\n Principals = new[]\n {\n \"210987654321\",\n },\n Tags = new[]\n {\n new AwsNative.Inputs.TagArgs\n {\n Key = \"Key1\",\n Value = \"Value1\",\n },\n new AwsNative.Inputs.TagArgs\n {\n Key = \"Key2\",\n Value = \"Value2\",\n },\n },\n });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ram\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ram.NewResourceShare(ctx, \"myresourceshare\", \u0026ram.ResourceShareArgs{\n\t\t\tName: pulumi.String(\"My Resource Share\"),\n\t\t\tResourceArns: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"arn:aws:ec2:us-east-1:123456789012:resource-type/12345678-1234-1234-1234-12345678\"),\n\t\t\t},\n\t\t\tPrincipals: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"210987654321\"),\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey: pulumi.String(\"Key1\"),\n\t\t\t\t\tValue: pulumi.String(\"Value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey: pulumi.String(\"Key2\"),\n\t\t\t\t\tValue: pulumi.String(\"Value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myresourceshare = new aws_native.ram.ResourceShare(\"myresourceshare\", {\n name: \"My Resource Share\",\n resourceArns: [\"arn:aws:ec2:us-east-1:123456789012:resource-type/12345678-1234-1234-1234-12345678\"],\n principals: [\"210987654321\"],\n tags: [\n {\n key: \"Key1\",\n value: \"Value1\",\n },\n {\n key: \"Key2\",\n value: \"Value2\",\n },\n ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmyresourceshare = aws_native.ram.ResourceShare(\"myresourceshare\",\n name=\"My Resource Share\",\n resource_arns=[\"arn:aws:ec2:us-east-1:123456789012:resource-type/12345678-1234-1234-1234-12345678\"],\n principals=[\"210987654321\"],\n tags=[\n {\n \"key\": \"Key1\",\n \"value\": \"Value1\",\n },\n {\n \"key\": \"Key2\",\n \"value\": \"Value2\",\n },\n ])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n",
+ "properties": {
+ "allowExternalPrincipals": {
+ "type": "boolean",
+ "description": "Specifies whether principals outside your organization in AWS Organizations can be associated with a resource share. A value of `true` lets you share with individual AWS accounts that are not in your organization. A value of `false` only has meaning if your account is a member of an AWS Organization. The default value is `true`."
+ },
+ "arn": {
+ "type": "string",
+ "description": "The Amazon Resource Name (ARN) of the resource share."
+ },
+ "name": {
+ "type": "string",
+ "description": "Specifies the name of the resource share."
+ },
+ "permissionArns": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ },
+ "description": "Specifies the [Amazon Resource Names (ARNs)](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) of the AWS RAM permission to associate with the resource share. If you do not specify an ARN for the permission, AWS RAM automatically attaches the default version of the permission for each resource type. You can associate only one permission with each resource type included in the resource share."
+ },
+ "principals": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ },
+ "description": "Specifies the principals to associate with the resource share. The possible values are:\n\n- An AWS account ID\n\n- An Amazon Resource Name (ARN) of an organization in AWS Organizations\n\n- An ARN of an organizational unit (OU) in AWS Organizations\n\n- An ARN of an IAM role\n\n- An ARN of an IAM user"
+ },
+ "resourceArns": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ },
+ "description": "Specifies a list of one or more ARNs of the resources to associate with the resource share."
+ },
+ "sources": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ },
+ "description": "Specifies from which source accounts the service principal has access to the resources in this resource share."
+ },
+ "tags": {
+ "type": "array",
+ "items": {
+ "$ref": "#/types/aws-native:index:Tag"
+ },
+ "description": "Specifies one or more tags to attach to the resource share itself. It doesn't attach the tags to the resources associated with the resource share."
+ }
+ },
+ "type": "object",
+ "required": [
+ "arn",
+ "name"
+ ],
+ "inputProperties": {
+ "allowExternalPrincipals": {
+ "type": "boolean",
+ "description": "Specifies whether principals outside your organization in AWS Organizations can be associated with a resource share. A value of `true` lets you share with individual AWS accounts that are not in your organization. A value of `false` only has meaning if your account is a member of an AWS Organization. The default value is `true`."
+ },
+ "name": {
+ "type": "string",
+ "description": "Specifies the name of the resource share."
+ },
+ "permissionArns": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ },
+ "description": "Specifies the [Amazon Resource Names (ARNs)](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) of the AWS RAM permission to associate with the resource share. If you do not specify an ARN for the permission, AWS RAM automatically attaches the default version of the permission for each resource type. You can associate only one permission with each resource type included in the resource share."
+ },
+ "principals": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ },
+ "description": "Specifies the principals to associate with the resource share. The possible values are:\n\n- An AWS account ID\n\n- An Amazon Resource Name (ARN) of an organization in AWS Organizations\n\n- An ARN of an organizational unit (OU) in AWS Organizations\n\n- An ARN of an IAM role\n\n- An ARN of an IAM user"
+ },
+ "resourceArns": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ },
+ "description": "Specifies a list of one or more ARNs of the resources to associate with the resource share."
+ },
+ "sources": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ },
+ "description": "Specifies from which source accounts the service principal has access to the resources in this resource share."
+ },
+ "tags": {
+ "type": "array",
+ "items": {
+ "$ref": "#/types/aws-native:index:Tag"
+ },
+ "description": "Specifies one or more tags to attach to the resource share itself. It doesn't attach the tags to the resources associated with the resource share."
+ }
+ }
+ },
"aws-native:rbin:Rule": {
"description": "Resource Type definition for AWS::Rbin::Rule",
"properties": {
@@ -254788,16 +255308,16 @@
]
},
"aws-native:rds:CustomDbEngineVersion": {
- "description": "The AWS::RDS::CustomDBEngineVersion resource creates an Amazon RDS custom DB engine version.",
+ "description": "Creates a custom DB engine version (CEV).",
"properties": {
"databaseInstallationFilesS3BucketName": {
"type": "string",
- "description": "The name of an Amazon S3 bucket that contains database installation files for your CEV. For example, a valid bucket name is `my-custom-installation-files`.",
+ "description": "The name of an Amazon S3 bucket that contains database installation files for your CEV. For example, a valid bucket name is ``my-custom-installation-files``.",
"replaceOnChanges": true
},
"databaseInstallationFilesS3Prefix": {
"type": "string",
- "description": "The Amazon S3 directory that contains the database installation files for your CEV. For example, a valid bucket name is `123456789012/cev1`. If this setting isn't specified, no prefix is assumed.",
+ "description": "The Amazon S3 directory that contains the database installation files for your CEV. For example, a valid bucket name is ``123456789012/cev1``. If this setting isn't specified, no prefix is assumed.",
"replaceOnChanges": true
},
"dbEngineVersionArn": {
@@ -254810,48 +255330,48 @@
},
"engine": {
"type": "string",
- "description": "The database engine to use for your custom engine version (CEV). The only supported value is `custom-oracle-ee`.",
+ "description": "The database engine to use for your custom engine version (CEV).\n Valid values:\n + ``custom-oracle-ee`` \n + ``custom-oracle-ee-cdb``",
"replaceOnChanges": true
},
"engineVersion": {
"type": "string",
- "description": "The name of your CEV. The name format is 19.customized_string . For example, a valid name is 19.my_cev1. This setting is required for RDS Custom for Oracle, but optional for Amazon RDS. The combination of Engine and EngineVersion is unique per customer per Region.",
+ "description": "The name of your CEV. The name format is ``major version.customized_string``. For example, a valid CEV name is ``19.my_cev1``. This setting is required for RDS Custom for Oracle, but optional for Amazon RDS. The combination of ``Engine`` and ``EngineVersion`` is unique per customer per Region.\n *Constraints:* Minimum length is 1. Maximum length is 60.\n *Pattern:* ``^[a-z0-9_.-]{1,60$``}",
"replaceOnChanges": true
},
"imageId": {
"type": "string",
- "description": "The identifier of Amazon Machine Image (AMI) used for CEV.",
+ "description": "A value that indicates the ID of the AMI.",
"replaceOnChanges": true
},
"kmsKeyId": {
"type": "string",
- "description": "The AWS KMS key identifier for an encrypted CEV. A symmetric KMS key is required for RDS Custom, but optional for Amazon RDS.",
+ "description": "The AWS KMS key identifier for an encrypted CEV. A symmetric encryption KMS key is required for RDS Custom, but optional for Amazon RDS.\n If you have an existing symmetric encryption KMS key in your account, you can use it with RDS Custom. No further action is necessary. If you don't already have a symmetric encryption KMS key in your account, follow the instructions in [Creating a symmetric encryption KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/create-keys.html#create-symmetric-cmk) in the *Key Management Service Developer Guide*.\n You can choose the same symmetric encryption key when you create a CEV and a DB instance, or choose different keys.",
"replaceOnChanges": true
},
"manifest": {
"type": "string",
- "description": "The CEV manifest, which is a JSON document that describes the installation .zip files stored in Amazon S3. Specify the name/value pairs in a file or a quoted string. RDS Custom applies the patches in the order in which they are listed.",
+ "description": "The CEV manifest, which is a JSON document that describes the installation .zip files stored in Amazon S3. Specify the name/value pairs in a file or a quoted string. RDS Custom applies the patches in the order in which they are listed.\n The following JSON fields are valid:\n + MediaImportTemplateVersion Version of the CEV manifest. The date is in the format YYYY-MM-DD. + databaseInstallationFileNames Ordered list of installation files for the CEV. + opatchFileNames Ordered list of OPatch installers used for the Oracle DB engine. + psuRuPatchFileNames The PSU and RU patches for this CEV. + OtherPatchFileNames The patches that are not in the list of PSU and RU patches. Amazon RDS applies these patches after applying the PSU and RU patches. \n For more information, see [Creating the CEV manifest](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-cev.html#custom-cev.preparing.manifest) in the *Amazon RDS User Guide*.",
"replaceOnChanges": true
},
"sourceCustomDbEngineVersionIdentifier": {
"type": "string",
- "description": "The identifier of the source custom engine version.",
+ "description": "The ARN of a CEV to use as a source for creating a new CEV. You can specify a different Amazon Machine Imagine (AMI) by using either ``Source`` or ``UseAwsProvidedLatestImage``. You can't specify a different JSON manifest when you specify ``SourceCustomDbEngineVersionIdentifier``.",
"replaceOnChanges": true
},
"status": {
"$ref": "#/types/aws-native:rds:CustomDbEngineVersionStatus",
- "description": "The availability status to be assigned to the CEV."
+ "description": "A value that indicates the status of a custom engine version (CEV)."
},
"tags": {
"type": "array",
"items": {
"$ref": "#/types/aws-native:index:Tag"
},
- "description": "An array of key-value pairs to apply to this resource."
+ "description": "A list of tags. For more information, see [Tagging Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide.*"
},
"useAwsProvidedLatestImage": {
"type": "boolean",
- "description": "A value that indicates whether AWS provided latest image is applied automatically to the Custom Engine Version. By default, AWS provided latest image is applied automatically. This value is only applied on create.",
+ "description": "Specifies whether to use the latest service-provided Amazon Machine Image (AMI) for the CEV. If you specify ``UseAwsProvidedLatestImage``, you can't also specify ``ImageId``.",
"replaceOnChanges": true
}
},
@@ -254864,11 +255384,11 @@
"inputProperties": {
"databaseInstallationFilesS3BucketName": {
"type": "string",
- "description": "The name of an Amazon S3 bucket that contains database installation files for your CEV. For example, a valid bucket name is `my-custom-installation-files`."
+ "description": "The name of an Amazon S3 bucket that contains database installation files for your CEV. For example, a valid bucket name is ``my-custom-installation-files``."
},
"databaseInstallationFilesS3Prefix": {
"type": "string",
- "description": "The Amazon S3 directory that contains the database installation files for your CEV. For example, a valid bucket name is `123456789012/cev1`. If this setting isn't specified, no prefix is assumed."
+ "description": "The Amazon S3 directory that contains the database installation files for your CEV. For example, a valid bucket name is ``123456789012/cev1``. If this setting isn't specified, no prefix is assumed."
},
"description": {
"type": "string",
@@ -254876,42 +255396,42 @@
},
"engine": {
"type": "string",
- "description": "The database engine to use for your custom engine version (CEV). The only supported value is `custom-oracle-ee`."
+ "description": "The database engine to use for your custom engine version (CEV).\n Valid values:\n + ``custom-oracle-ee`` \n + ``custom-oracle-ee-cdb``"
},
"engineVersion": {
"type": "string",
- "description": "The name of your CEV. The name format is 19.customized_string . For example, a valid name is 19.my_cev1. This setting is required for RDS Custom for Oracle, but optional for Amazon RDS. The combination of Engine and EngineVersion is unique per customer per Region."
+ "description": "The name of your CEV. The name format is ``major version.customized_string``. For example, a valid CEV name is ``19.my_cev1``. This setting is required for RDS Custom for Oracle, but optional for Amazon RDS. The combination of ``Engine`` and ``EngineVersion`` is unique per customer per Region.\n *Constraints:* Minimum length is 1. Maximum length is 60.\n *Pattern:* ``^[a-z0-9_.-]{1,60$``}"
},
"imageId": {
"type": "string",
- "description": "The identifier of Amazon Machine Image (AMI) used for CEV."
+ "description": "A value that indicates the ID of the AMI."
},
"kmsKeyId": {
"type": "string",
- "description": "The AWS KMS key identifier for an encrypted CEV. A symmetric KMS key is required for RDS Custom, but optional for Amazon RDS."
+ "description": "The AWS KMS key identifier for an encrypted CEV. A symmetric encryption KMS key is required for RDS Custom, but optional for Amazon RDS.\n If you have an existing symmetric encryption KMS key in your account, you can use it with RDS Custom. No further action is necessary. If you don't already have a symmetric encryption KMS key in your account, follow the instructions in [Creating a symmetric encryption KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/create-keys.html#create-symmetric-cmk) in the *Key Management Service Developer Guide*.\n You can choose the same symmetric encryption key when you create a CEV and a DB instance, or choose different keys."
},
"manifest": {
"type": "string",
- "description": "The CEV manifest, which is a JSON document that describes the installation .zip files stored in Amazon S3. Specify the name/value pairs in a file or a quoted string. RDS Custom applies the patches in the order in which they are listed."
+ "description": "The CEV manifest, which is a JSON document that describes the installation .zip files stored in Amazon S3. Specify the name/value pairs in a file or a quoted string. RDS Custom applies the patches in the order in which they are listed.\n The following JSON fields are valid:\n + MediaImportTemplateVersion Version of the CEV manifest. The date is in the format YYYY-MM-DD. + databaseInstallationFileNames Ordered list of installation files for the CEV. + opatchFileNames Ordered list of OPatch installers used for the Oracle DB engine. + psuRuPatchFileNames The PSU and RU patches for this CEV. + OtherPatchFileNames The patches that are not in the list of PSU and RU patches. Amazon RDS applies these patches after applying the PSU and RU patches. \n For more information, see [Creating the CEV manifest](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-cev.html#custom-cev.preparing.manifest) in the *Amazon RDS User Guide*."
},
"sourceCustomDbEngineVersionIdentifier": {
"type": "string",
- "description": "The identifier of the source custom engine version."
+ "description": "The ARN of a CEV to use as a source for creating a new CEV. You can specify a different Amazon Machine Imagine (AMI) by using either ``Source`` or ``UseAwsProvidedLatestImage``. You can't specify a different JSON manifest when you specify ``SourceCustomDbEngineVersionIdentifier``."
},
"status": {
"$ref": "#/types/aws-native:rds:CustomDbEngineVersionStatus",
- "description": "The availability status to be assigned to the CEV."
+ "description": "A value that indicates the status of a custom engine version (CEV)."
},
"tags": {
"type": "array",
"items": {
"$ref": "#/types/aws-native:index:Tag"
},
- "description": "An array of key-value pairs to apply to this resource."
+ "description": "A list of tags. For more information, see [Tagging Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide.*"
},
"useAwsProvidedLatestImage": {
"type": "boolean",
- "description": "A value that indicates whether AWS provided latest image is applied automatically to the Custom Engine Version. By default, AWS provided latest image is applied automatically. This value is only applied on create."
+ "description": "Specifies whether to use the latest service-provided Amazon Machine Image (AMI) for the CEV. If you specify ``UseAwsProvidedLatestImage``, you can't also specify ``ImageId``."
}
},
"requiredInputs": [
@@ -258460,6 +258980,10 @@
"type": "integer",
"description": "The custom port to use when connecting to a workgroup. Valid port ranges are 5431-5455 and 8191-8215. The default is 5439."
},
+ "pricePerformanceTarget": {
+ "$ref": "#/types/aws-native:redshiftserverless:WorkgroupPerformanceTarget",
+ "description": "A property that represents the price performance target settings for the workgroup."
+ },
"publiclyAccessible": {
"type": "boolean",
"description": "A value that specifies whether the workgroup can be accessible from a public network."
@@ -258533,6 +259057,10 @@
"type": "integer",
"description": "The custom port to use when connecting to a workgroup. Valid port ranges are 5431-5455 and 8191-8215. The default is 5439."
},
+ "pricePerformanceTarget": {
+ "$ref": "#/types/aws-native:redshiftserverless:WorkgroupPerformanceTarget",
+ "description": "A property that represents the price performance target settings for the workgroup."
+ },
"publiclyAccessible": {
"type": "boolean",
"description": "A value that specifies whether the workgroup can be accessible from a public network."
@@ -262382,6 +262910,9 @@
"$ref": "#/types/aws-native:s3:BucketLoggingConfiguration",
"description": "Settings that define where logs are stored."
},
+ "metadataTableConfiguration": {
+ "$ref": "#/types/aws-native:s3:BucketMetadataTableConfiguration"
+ },
"metricsConfigurations": {
"type": "array",
"items": {
@@ -262495,6 +263026,9 @@
"$ref": "#/types/aws-native:s3:BucketLoggingConfiguration",
"description": "Settings that define where logs are stored."
},
+ "metadataTableConfiguration": {
+ "$ref": "#/types/aws-native:s3:BucketMetadataTableConfiguration"
+ },
"metricsConfigurations": {
"type": "array",
"items": {
@@ -262800,7 +263334,7 @@
},
"availabilityZoneName": {
"type": "string",
- "description": "Returns the code for the Availability Zone where the directory bucket was created."
+ "description": "Returns the code for the Availability Zone or Local Zone where the directory bucket was created. An example for the code of an Availability Zone is 'us-east-1f'."
},
"bucketEncryption": {
"$ref": "#/types/aws-native:s3express:DirectoryBucketBucketEncryption",
@@ -262808,12 +263342,12 @@
},
"bucketName": {
"type": "string",
- "description": "Specifies a name for the bucket. The bucket name must contain only lowercase letters, numbers, and hyphens (-). A directory bucket name must be unique in the chosen Availability Zone. The bucket name must also follow the format 'bucket_base_name--az_id--x-s3' (for example, 'DOC-EXAMPLE-BUCKET--usw2-az1--x-s3'). If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the bucket name.",
+ "description": "Specifies a name for the bucket. The bucket name must contain only lowercase letters, numbers, and hyphens (-). A directory bucket name must be unique in the chosen Availability Zone or Local Zone. The bucket name must also follow the format 'bucket_base_name--zone_id--x-s3'. The zone_id can be the ID of an Availability Zone or a Local Zone. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the bucket name.",
"replaceOnChanges": true
},
"dataRedundancy": {
"$ref": "#/types/aws-native:s3express:DirectoryBucketDataRedundancy",
- "description": "Specifies the number of Availability Zone that's used for redundancy for the bucket.",
+ "description": "Specifies the number of Availability Zone or Local Zone that's used for redundancy for the bucket.",
"replaceOnChanges": true
},
"lifecycleConfiguration": {
@@ -262822,7 +263356,7 @@
},
"locationName": {
"type": "string",
- "description": "Specifies the AZ ID of the Availability Zone where the directory bucket will be created. An example AZ ID value is 'use1-az5'.",
+ "description": "Specifies the Zone ID of the Availability Zone or Local Zone where the directory bucket will be created. An example Availability Zone ID value is 'use1-az5'.",
"replaceOnChanges": true
}
},
@@ -262840,11 +263374,11 @@
},
"bucketName": {
"type": "string",
- "description": "Specifies a name for the bucket. The bucket name must contain only lowercase letters, numbers, and hyphens (-). A directory bucket name must be unique in the chosen Availability Zone. The bucket name must also follow the format 'bucket_base_name--az_id--x-s3' (for example, 'DOC-EXAMPLE-BUCKET--usw2-az1--x-s3'). If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the bucket name."
+ "description": "Specifies a name for the bucket. The bucket name must contain only lowercase letters, numbers, and hyphens (-). A directory bucket name must be unique in the chosen Availability Zone or Local Zone. The bucket name must also follow the format 'bucket_base_name--zone_id--x-s3'. The zone_id can be the ID of an Availability Zone or a Local Zone. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the bucket name."
},
"dataRedundancy": {
"$ref": "#/types/aws-native:s3express:DirectoryBucketDataRedundancy",
- "description": "Specifies the number of Availability Zone that's used for redundancy for the bucket."
+ "description": "Specifies the number of Availability Zone or Local Zone that's used for redundancy for the bucket."
},
"lifecycleConfiguration": {
"$ref": "#/types/aws-native:s3express:DirectoryBucketLifecycleConfiguration",
@@ -262852,7 +263386,7 @@
},
"locationName": {
"type": "string",
- "description": "Specifies the AZ ID of the Availability Zone where the directory bucket will be created. An example AZ ID value is 'use1-az5'."
+ "description": "Specifies the Zone ID of the Availability Zone or Local Zone where the directory bucket will be created. An example Availability Zone ID value is 'use1-az5'."
}
},
"requiredInputs": [
@@ -263201,6 +263735,63 @@
"subnetId"
]
},
+ "aws-native:s3tables:TableBucket": {
+ "description": "Creates an Amazon S3 Tables table bucket in the same AWS Region where you create the AWS CloudFormation stack.",
+ "properties": {
+ "tableBucketArn": {
+ "type": "string"
+ },
+ "tableBucketName": {
+ "type": "string",
+ "replaceOnChanges": true
+ },
+ "unreferencedFileRemoval": {
+ "$ref": "#/types/aws-native:s3tables:TableBucketUnreferencedFileRemoval"
+ }
+ },
+ "type": "object",
+ "required": [
+ "tableBucketArn",
+ "tableBucketName"
+ ],
+ "inputProperties": {
+ "tableBucketName": {
+ "type": "string"
+ },
+ "unreferencedFileRemoval": {
+ "$ref": "#/types/aws-native:s3tables:TableBucketUnreferencedFileRemoval"
+ }
+ }
+ },
+ "aws-native:s3tables:TableBucketPolicy": {
+ "description": "Applies an IAM resource policy to a table bucket.",
+ "properties": {
+ "resourcePolicy": {
+ "$ref": "#/types/aws-native:s3tables:TableBucketPolicyResourcePolicy"
+ },
+ "tableBucketArn": {
+ "type": "string",
+ "replaceOnChanges": true
+ }
+ },
+ "type": "object",
+ "required": [
+ "resourcePolicy",
+ "tableBucketArn"
+ ],
+ "inputProperties": {
+ "resourcePolicy": {
+ "$ref": "#/types/aws-native:s3tables:TableBucketPolicyResourcePolicy"
+ },
+ "tableBucketArn": {
+ "type": "string"
+ }
+ },
+ "requiredInputs": [
+ "resourcePolicy",
+ "tableBucketArn"
+ ]
+ },
"aws-native:sagemaker:App": {
"description": "Resource Type definition for AWS::SageMaker::App",
"properties": {
@@ -278634,10 +279225,6 @@
"type": "string",
"description": "The domain name ID."
},
- "managementPolicy": {
- "$ref": "pulumi.json#/Any",
- "description": "Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::DomainNameV2` for more information about the expected schema for this property."
- },
"policy": {
"$ref": "pulumi.json#/Any",
"description": "A stringified JSON policy document that applies to the `execute-api` service for this DomainName regardless of the caller and Method configuration. You can use `Fn::ToJsonString` to enter your `policy` . For more information, see [Fn::ToJsonString](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ToJsonString.html) .\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::DomainNameV2` for more information about the expected schema for this property."
@@ -287479,7 +288066,7 @@
},
"useCognitoProvidedValues": {
"type": "boolean",
- "description": "When true, applies the default branding style options. This option reverts to a \"blank\" style that you can modify later in the branding designer."
+ "description": "When true, applies the default branding style options. This option reverts to default style options that are managed by Amazon Cognito. You can modify them later in the branding designer.\n\nWhen you specify `true` for this option, you must also omit values for `Settings` and `Assets` in the request."
}
}
}
@@ -287512,7 +288099,7 @@
"items": {
"type": "string"
},
- "description": "Attributes supported as an alias for this user pool. Possible values: *phone_number* , *email* , or *preferred_username* ."
+ "description": "Attributes supported as an alias for this user pool. Possible values: *phone_number* , *email* , or *preferred_username* . For more information about alias attributes, see [Customizing sign-in attributes](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html#user-pool-settings-aliases) ."
},
"arn": {
"type": "string",
@@ -287523,7 +288110,7 @@
"items": {
"type": "string"
},
- "description": "The attributes to be auto-verified. Possible values: *email* , *phone_number* ."
+ "description": "The attributes that you want your user pool to automatically verify. Possible values: *email* , *phone_number* . For more information see [Verifying contact information at sign-up](https://docs.aws.amazon.com/cognito/latest/developerguide/signing-up-users-in-your-app.html#allowing-users-to-sign-up-and-confirm-themselves) ."
},
"deletionProtection": {
"type": "string",
@@ -287531,7 +288118,7 @@
},
"deviceConfiguration": {
"$ref": "#/types/aws-native:cognito:UserPoolDeviceConfiguration",
- "description": "The device-remembering configuration for a user pool. A null value indicates that you have deactivated device remembering in your user pool.\n\n\u003e When you provide a value for any `DeviceConfiguration` field, you activate the Amazon Cognito device-remembering feature."
+ "description": "The device-remembering configuration for a user pool. Device remembering or device tracking is a \"Remember me on this device\" option for user pools that perform authentication with the device key of a trusted device in the back end, instead of a user-provided MFA code. For more information about device authentication, see [Working with user devices in your user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-device-tracking.html) . A null value indicates that you have deactivated device remembering in your user pool.\n\n\u003e When you provide a value for any `DeviceConfiguration` field, you activate the Amazon Cognito device-remembering feature. For more infor"
},
"emailAuthenticationMessage": {
"type": "string"
@@ -287576,7 +288163,7 @@
"items": {
"$ref": "#/types/aws-native:cognito:UserPoolSchemaAttribute"
},
- "description": "An array of schema attributes for the new user pool. These attributes can be standard or custom attributes."
+ "description": "An array of attributes for the new user pool. You can add custom attributes and modify the properties of default attributes. The specifications in this parameter set the required attributes in your user pool. For more information, see [Working with user attributes](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html) ."
},
"smsAuthenticationMessage": {
"type": "string",
@@ -287584,7 +288171,7 @@
},
"smsConfiguration": {
"$ref": "#/types/aws-native:cognito:UserPoolSmsConfiguration",
- "description": "The SMS configuration with the settings that your Amazon Cognito user pool must use to send an SMS message from your AWS account through Amazon Simple Notification Service. To send SMS messages with Amazon SNS in the AWS Region that you want, the Amazon Cognito user pool uses an AWS Identity and Access Management (IAM) role in your AWS account ."
+ "description": "The SMS configuration with the settings that your Amazon Cognito user pool must use to send an SMS message from your AWS account through Amazon Simple Notification Service. To send SMS messages with Amazon SNS in the AWS Region that you want, the Amazon Cognito user pool uses an AWS Identity and Access Management (IAM) role in your AWS account . For more information see [SMS message settings](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-sms-settings.html) ."
},
"smsVerificationMessage": {
"type": "string",
@@ -287604,7 +288191,7 @@
},
"userPoolName": {
"type": "string",
- "description": "A string used to name the user pool."
+ "description": "A friendlhy name for your user pool."
},
"userPoolTags": {
"type": "object",
@@ -287626,17 +288213,19 @@
},
"usernameConfiguration": {
"$ref": "#/types/aws-native:cognito:UserPoolUsernameConfiguration",
- "description": "Case sensitivity on the username input for the selected sign-in option. When case sensitivity is set to `False` (case insensitive), users can sign in with any combination of capital and lowercase letters. For example, `username` , `USERNAME` , or `UserName` , or for email, `email@example.com` or `EMaiL@eXamplE.Com` . For most use cases, set case sensitivity to `False` (case insensitive) as a best practice. When usernames and email addresses are case insensitive, Amazon Cognito treats any variation in case as the same user, and prevents a case variation from being assigned to the same attribute for a different user.\n\nThis configuration is immutable after you set it. For more information, see [UsernameConfigurationType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UsernameConfigurationType.html) ."
+ "description": "Sets the case sensitivity option for sign-in usernames. When `CaseSensitive` is `false` (case insensitive), users can sign in with any combination of capital and lowercase letters. For example, `username` , `USERNAME` , or `UserName` , or for email, `email@example.com` or `EMaiL@eXamplE.Com` . For most use cases, set case sensitivity to `false` as a best practice. When usernames and email addresses are case insensitive, Amazon Cognito treats any variation in case as the same user, and prevents a case variation from being assigned to the same attribute for a different user.\n\nWhen `CaseSensitive` is `true` (case sensitive), Amazon Cognito interprets `USERNAME` and `UserName` as distinct users.\n\nThis configuration is immutable after you set it."
},
"verificationMessageTemplate": {
"$ref": "#/types/aws-native:cognito:UserPoolVerificationMessageTemplate",
"description": "The template for the verification message that your user pool delivers to users who set an email address or phone number attribute.\n\nSet the email message type that corresponds to your `DefaultEmailOption` selection. For `CONFIRM_WITH_LINK` , specify an `EmailMessageByLink` and leave `EmailMessage` blank. For `CONFIRM_WITH_CODE` , specify an `EmailMessage` and leave `EmailMessageByLink` blank. When you supply both parameters with either choice, Amazon Cognito returns an error."
},
"webAuthnRelyingPartyId": {
- "type": "string"
+ "type": "string",
+ "description": "Sets or displays the authentication domain, typically your user pool domain, that passkey providers must use as a relying party (RP) in their configuration.\n\nUnder the following conditions, the passkey relying party ID must be the fully-qualified domain name of your custom domain:\n\n- The user pool is configured for passkey authentication.\n- The user pool has a custom domain, whether or not it also has a prefix domain.\n- Your application performs authentication with managed login or the classic hosted UI."
},
"webAuthnUserVerification": {
- "type": "string"
+ "type": "string",
+ "description": "When `required` , users can only register and sign in users with passkeys that are capable of [user verification](https://docs.aws.amazon.com/https://www.w3.org/TR/webauthn-2/#enum-userVerificationRequirement) . When `preferred` , your user pool doesn't require the use of authenticators with user verification but encourages it."
}
}
}
@@ -287651,7 +288240,7 @@
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool where you want to create a user pool client."
+ "description": "The ID of the user pool where you want to create an app client."
}
},
"required": [
@@ -287681,11 +288270,11 @@
"items": {
"type": "string"
},
- "description": "The allowed OAuth scopes. Possible values provided by OAuth are `phone` , `email` , `openid` , and `profile` . Possible values provided by AWS are `aws.cognito.signin.user.admin` . Custom scopes created in Resource Servers are also supported."
+ "description": "The OAuth 2.0 scopes that you want to permit your app client to authorize. Scopes govern access control to user pool self-service API operations, user data from the `userInfo` endpoint, and third-party APIs. Possible values provided by OAuth are `phone` , `email` , `openid` , and `profile` . Possible values provided by AWS are `aws.cognito.signin.user.admin` . Custom scopes created in Resource Servers are also supported."
},
"analyticsConfiguration": {
"$ref": "#/types/aws-native:cognito:UserPoolClientAnalyticsConfiguration",
- "description": "The user pool analytics configuration for collecting metrics and sending them to your Amazon Pinpoint campaign.\n\n\u003e In AWS Regions where Amazon Pinpoint isn't available, user pools only support sending events to Amazon Pinpoint projects in AWS Region us-east-1. In Regions where Amazon Pinpoint is available, user pools support sending events to Amazon Pinpoint projects within that same Region."
+ "description": "The user pool analytics configuration for collecting metrics and sending them to your Amazon Pinpoint campaign.\n\nIn AWS Regions where Amazon Pinpoint isn't available, user pools might not have access to analytics or might be configurable with campaigns in the US East (N. Virginia) Region. For more information, see [Using Amazon Pinpoint analytics](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-pinpoint-integration.html) ."
},
"authSessionValidity": {
"type": "integer",
@@ -287696,7 +288285,7 @@
"items": {
"type": "string"
},
- "description": "A list of allowed redirect (callback) URLs for the IdPs.\n\nA redirect URI must:\n\n- Be an absolute URI.\n- Be registered with the authorization server.\n- Not include a fragment component.\n\nSee [OAuth 2.0 - Redirection Endpoint](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6749#section-3.1.2) .\n\nAmazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.\n\nApp callback URLs such as myapp://example are also supported."
+ "description": "A list of allowed redirect (callback) URLs for the IdPs.\n\nA redirect URI must:\n\n- Be an absolute URI.\n- Be registered with the authorization server. Amazon Cognito doesn't accept authorization requests with `redirect_uri` values that aren't in the list of `CallbackURLs` that you provide in this parameter.\n- Not include a fragment component.\n\nSee [OAuth 2.0 - Redirection Endpoint](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6749#section-3.1.2) .\n\nAmazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.\n\nApp callback URLs such as myapp://example are also supported."
},
"clientId": {
"type": "string",
@@ -287704,14 +288293,14 @@
},
"clientName": {
"type": "string",
- "description": "The client name for the user pool client you would like to create."
+ "description": "A friendly name for the app client that you want to create."
},
"clientSecret": {
"type": "string"
},
"defaultRedirectUri": {
"type": "string",
- "description": "The default redirect URI. In app clients with one assigned IdP, replaces `redirect_uri` in authentication requests. Must be in the `CallbackURLs` list.\n\nA redirect URI must:\n\n- Be an absolute URI.\n- Be registered with the authorization server.\n- Not include a fragment component.\n\nFor more information, see [Default redirect URI](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-client-apps.html#cognito-user-pools-app-idp-settings-about) .\n\nAmazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.\n\nApp callback URLs such as myapp://example are also supported."
+ "description": "The default redirect URI. In app clients with one assigned IdP, replaces `redirect_uri` in authentication requests. Must be in the `CallbackURLs` list."
},
"enablePropagateAdditionalUserContextData": {
"type": "boolean",
@@ -287737,7 +288326,7 @@
"items": {
"type": "string"
},
- "description": "A list of allowed logout URLs for the IdPs."
+ "description": "A list of allowed logout URLs for managed login authentication. For more information, see [Logout endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/logout-endpoint.html) ."
},
"name": {
"type": "string"
@@ -287762,11 +288351,11 @@
"items": {
"type": "string"
},
- "description": "A list of provider names for the identity providers (IdPs) that are supported on this client. The following are supported: `COGNITO` , `Facebook` , `Google` , `SignInWithApple` , and `LoginWithAmazon` . You can also specify the names that you configured for the SAML and OIDC IdPs in your user pool, for example `MySAMLIdP` or `MyOIDCIdP` .\n\nThis setting applies to providers that you can access with the [hosted UI and OAuth 2.0 authorization server](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-app-integration.html) . The removal of `COGNITO` from this list doesn't prevent authentication operations for local users with the user pools API in an AWS SDK. The only way to prevent API-based authentication is to block access with a [AWS WAF rule](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-waf.html) ."
+ "description": "A list of provider names for the identity providers (IdPs) that are supported on this client. The following are supported: `COGNITO` , `Facebook` , `Google` , `SignInWithApple` , and `LoginWithAmazon` . You can also specify the names that you configured for the SAML and OIDC IdPs in your user pool, for example `MySAMLIdP` or `MyOIDCIdP` .\n\nThis setting applies to providers that you can access with [managed login](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managed-login.html) . The removal of `COGNITO` from this list doesn't prevent authentication operations for local users with the user pools API in an AWS SDK. The only way to prevent API-based authentication is to block access with a [AWS WAF rule](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-waf.html) ."
},
"tokenValidityUnits": {
"$ref": "#/types/aws-native:cognito:UserPoolClientTokenValidityUnits",
- "description": "The units in which the validity times are represented. The default unit for RefreshToken is days, and default for ID and access tokens are hours."
+ "description": "The units that validity times are represented in. The default unit for refresh tokens is days, and the default for ID and access tokens are hours."
},
"writeAttributes": {
"type": "array",
@@ -287818,11 +288407,11 @@
"properties": {
"groupName": {
"type": "string",
- "description": "The name of the group. Must be unique."
+ "description": "A name for the group. This name must be unique in your user pool."
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool."
+ "description": "The ID of the user pool where you want to create a user group."
}
},
"required": [
@@ -287834,7 +288423,7 @@
"properties": {
"description": {
"type": "string",
- "description": "A string containing the description of the group."
+ "description": "A description of the group that you're creating."
},
"precedence": {
"type": "integer",
@@ -287842,7 +288431,7 @@
},
"roleArn": {
"type": "string",
- "description": "The role Amazon Resource Name (ARN) for the group."
+ "description": "The Amazon Resource Name (ARN) for the IAM role that you want to associate with the group. A group role primarily declares a preferred role for the credentials that you get from an identity pool. Amazon Cognito ID tokens have a `cognito:preferred_role` claim that presents the highest-precedence group that a user belongs to. Both ID and access tokens also contain a `cognito:groups` claim that list all the groups that a user is a member of."
}
}
}
@@ -287853,11 +288442,11 @@
"properties": {
"providerName": {
"type": "string",
- "description": "The IdP name."
+ "description": "The name that you want to assign to the IdP. You can pass the identity provider name in the `identity_provider` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP."
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID."
+ "description": "The Id of the user pool where you want to create an IdP."
}
},
"required": [
@@ -287872,14 +288461,14 @@
"additionalProperties": {
"type": "string"
},
- "description": "A mapping of IdP attributes to standard and custom user pool attributes."
+ "description": "A mapping of IdP attributes to standard and custom user pool attributes. Specify a user pool attribute as the key of the key-value pair, and the IdP attribute claim name as the value."
},
"idpIdentifiers": {
"type": "array",
"items": {
"type": "string"
},
- "description": "A list of IdP identifiers."
+ "description": "An array of IdP identifiers, for example `\"IdPIdentifiers\": [ \"MyIdP\", \"MyIdP2\" ]` . Identifiers are friendly names that you can pass in the `idp_identifier` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP. Identifiers in a domain format also enable the use of [email-address matching with SAML providers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managing-saml-idp-naming.html) ."
},
"providerDetails": {
"type": "object",
@@ -287901,7 +288490,7 @@
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool."
+ "description": "The ID of the user pool where you want to create a resource server."
}
},
"required": [
@@ -287970,7 +288559,7 @@
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool."
+ "description": "The ID of the user pool."
}
},
"required": [
@@ -289268,6 +289857,10 @@
"type": "string",
"description": "The name of the task template."
},
+ "selfAssignContactFlowArn": {
+ "type": "string",
+ "description": "The identifier of the contact flow."
+ },
"status": {
"$ref": "#/types/aws-native:connect:TaskTemplateStatus",
"description": "The status of the task template."
@@ -303762,7 +304355,7 @@
},
"healthEventsConfig": {
"$ref": "#/types/aws-native:internetmonitor:MonitorHealthEventsConfig",
- "description": "A complex type with the configuration information that determines the threshold and other conditions for when Internet Monitor creates a health event for an overall performance or availability issue, across an application's geographies.\n\nDefines the percentages, for overall performance scores and availability scores for an application, that are the thresholds for when Amazon CloudWatch Internet Monitor creates a health event. You can override the defaults to set a custom threshold for overall performance or availability scores, or both.\n\nYou can also set thresholds for local health scores,, where Internet Monitor creates a health event when scores cross a threshold for one or more city-networks, in addition to creating an event when an overall score crosses a threshold.\n\nIf you don't set a health event threshold, the default value is 95%.\n\nFor local thresholds, you also set a minimum percentage of overall traffic that is impacted by an issue before Internet Monitor creates an event. In addition, you can disable local thresholds, for performance scores, availability scores, or both.\n\nFor more information, see [Change health event thresholds](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-IM-overview.html#IMUpdateThresholdFromOverview) in the Internet Monitor section of the *CloudWatch User Guide* ."
+ "description": "A complex type with the configuration information that determines the threshold and other conditions for when Internet Monitor creates a health event for an overall performance or availability issue, across an application's geographies.\n\nDefines the percentages, for overall performance scores and availability scores for an application, that are the thresholds for when Internet Monitor creates a health event. You can override the defaults to set a custom threshold for overall performance or availability scores, or both.\n\nYou can also set thresholds for local health scores,, where Internet Monitor creates a health event when scores cross a threshold for one or more city-networks, in addition to creating an event when an overall score crosses a threshold.\n\nIf you don't set a health event threshold, the default value is 95%.\n\nFor local thresholds, you also set a minimum percentage of overall traffic that is impacted by an issue before Internet Monitor creates an event. In addition, you can disable local thresholds, for performance scores, availability scores, or both.\n\nFor more information, see [Change health event thresholds](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-IM-overview.html#IMUpdateThresholdFromOverview) in the Internet Monitor section of the *CloudWatch User Guide* ."
},
"internetMeasurementsLogDelivery": {
"$ref": "#/types/aws-native:internetmonitor:MonitorInternetMeasurementsLogDelivery",
@@ -303818,7 +304411,8 @@
"inputs": {
"properties": {
"invoiceUnitArn": {
- "type": "string"
+ "type": "string",
+ "description": "The ARN to identify an invoice unit. This information can't be modified or deleted."
}
},
"required": [
@@ -303828,25 +304422,31 @@
"outputs": {
"properties": {
"description": {
- "type": "string"
+ "type": "string",
+ "description": "The assigned description for an invoice unit. This information can't be modified or deleted."
},
"invoiceUnitArn": {
- "type": "string"
+ "type": "string",
+ "description": "The ARN to identify an invoice unit. This information can't be modified or deleted."
},
"lastModified": {
- "type": "number"
+ "type": "number",
+ "description": "The last time the invoice unit was updated. This is important to determine the version of invoice unit configuration used to create the invoices. Any invoice created after this modified time will use this invoice unit configuration."
},
"resourceTags": {
"type": "array",
"items": {
"$ref": "#/types/aws-native:index:Tag"
- }
+ },
+ "description": "The tag structure that contains a tag key and value."
},
"rule": {
- "$ref": "#/types/aws-native:invoicing:InvoiceUnitRule"
+ "$ref": "#/types/aws-native:invoicing:InvoiceUnitRule",
+ "description": "An `InvoiceUnitRule` object used the categorize invoice units."
},
"taxInheritanceDisabled": {
- "type": "boolean"
+ "type": "boolean",
+ "description": "Whether the invoice unit based tax inheritance is/ should be enabled or disabled."
}
}
}
@@ -304085,6 +304685,74 @@
}
}
},
+ "aws-native:iot:getCommand": {
+ "description": "Represents the resource definition of AWS IoT Command.",
+ "inputs": {
+ "properties": {
+ "commandId": {
+ "type": "string",
+ "description": "The unique identifier for the command."
+ }
+ },
+ "required": [
+ "commandId"
+ ]
+ },
+ "outputs": {
+ "properties": {
+ "commandArn": {
+ "type": "string",
+ "description": "The Amazon Resource Name (ARN) of the command."
+ },
+ "createdAt": {
+ "type": "string",
+ "description": "The date and time when the command was created."
+ },
+ "deprecated": {
+ "type": "boolean",
+ "description": "A flag indicating whether the command is deprecated."
+ },
+ "description": {
+ "type": "string",
+ "description": "The description of the command."
+ },
+ "displayName": {
+ "type": "string",
+ "description": "The display name for the command."
+ },
+ "mandatoryParameters": {
+ "type": "array",
+ "items": {
+ "$ref": "#/types/aws-native:iot:CommandParameter"
+ },
+ "description": "The list of mandatory parameters for the command."
+ },
+ "namespace": {
+ "$ref": "#/types/aws-native:iot:CommandNamespace",
+ "description": "The namespace to which the command belongs."
+ },
+ "payload": {
+ "$ref": "#/types/aws-native:iot:CommandPayload",
+ "description": "The payload associated with the command."
+ },
+ "pendingDeletion": {
+ "type": "boolean",
+ "description": "A flag indicating whether the command is pending deletion."
+ },
+ "roleArn": {
+ "type": "string",
+ "description": "The customer role associated with the command."
+ },
+ "tags": {
+ "type": "array",
+ "items": {
+ "$ref": "#/types/aws-native:index:Tag"
+ },
+ "description": "The tags to be associated with the command."
+ }
+ }
+ }
+ },
"aws-native:iot:getCustomMetric": {
"description": "A custom metric published by your devices to Device Defender.",
"inputs": {
@@ -317352,6 +318020,43 @@
}
}
},
+ "aws-native:ram:getResourceShare": {
+ "description": "Resource type definition for AWS::RAM::ResourceShare",
+ "inputs": {
+ "properties": {
+ "arn": {
+ "type": "string",
+ "description": "The Amazon Resource Name (ARN) of the resource share."
+ }
+ },
+ "required": [
+ "arn"
+ ]
+ },
+ "outputs": {
+ "properties": {
+ "allowExternalPrincipals": {
+ "type": "boolean",
+ "description": "Specifies whether principals outside your organization in AWS Organizations can be associated with a resource share. A value of `true` lets you share with individual AWS accounts that are not in your organization. A value of `false` only has meaning if your account is a member of an AWS Organization. The default value is `true`."
+ },
+ "arn": {
+ "type": "string",
+ "description": "The Amazon Resource Name (ARN) of the resource share."
+ },
+ "name": {
+ "type": "string",
+ "description": "Specifies the name of the resource share."
+ },
+ "tags": {
+ "type": "array",
+ "items": {
+ "$ref": "#/types/aws-native:index:Tag"
+ },
+ "description": "Specifies one or more tags to attach to the resource share itself. It doesn't attach the tags to the resources associated with the resource share."
+ }
+ }
+ }
+ },
"aws-native:rbin:getRule": {
"description": "Resource Type definition for AWS::Rbin::Rule",
"inputs": {
@@ -317416,16 +318121,16 @@
}
},
"aws-native:rds:getCustomDbEngineVersion": {
- "description": "The AWS::RDS::CustomDBEngineVersion resource creates an Amazon RDS custom DB engine version.",
+ "description": "Creates a custom DB engine version (CEV).",
"inputs": {
"properties": {
"engine": {
"type": "string",
- "description": "The database engine to use for your custom engine version (CEV). The only supported value is `custom-oracle-ee`."
+ "description": "The database engine to use for your custom engine version (CEV).\n Valid values:\n + ``custom-oracle-ee`` \n + ``custom-oracle-ee-cdb``"
},
"engineVersion": {
"type": "string",
- "description": "The name of your CEV. The name format is 19.customized_string . For example, a valid name is 19.my_cev1. This setting is required for RDS Custom for Oracle, but optional for Amazon RDS. The combination of Engine and EngineVersion is unique per customer per Region."
+ "description": "The name of your CEV. The name format is ``major version.customized_string``. For example, a valid CEV name is ``19.my_cev1``. This setting is required for RDS Custom for Oracle, but optional for Amazon RDS. The combination of ``Engine`` and ``EngineVersion`` is unique per customer per Region.\n *Constraints:* Minimum length is 1. Maximum length is 60.\n *Pattern:* ``^[a-z0-9_.-]{1,60$``}"
}
},
"required": [
@@ -317445,14 +318150,14 @@
},
"status": {
"$ref": "#/types/aws-native:rds:CustomDbEngineVersionStatus",
- "description": "The availability status to be assigned to the CEV."
+ "description": "A value that indicates the status of a custom engine version (CEV)."
},
"tags": {
"type": "array",
"items": {
"$ref": "#/types/aws-native:index:Tag"
},
- "description": "An array of key-value pairs to apply to this resource."
+ "description": "A list of tags. For more information, see [Tagging Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide.*"
}
}
}
@@ -319027,6 +319732,10 @@
"type": "integer",
"description": "The custom port to use when connecting to a workgroup. Valid port ranges are 5431-5455 and 8191-8215. The default is 5439."
},
+ "pricePerformanceTarget": {
+ "$ref": "#/types/aws-native:redshiftserverless:WorkgroupPerformanceTarget",
+ "description": "A property that represents the price performance target settings for the workgroup."
+ },
"publiclyAccessible": {
"type": "boolean",
"description": "A value that specifies whether the workgroup can be accessible from a public network."
@@ -321298,6 +322007,9 @@
"$ref": "#/types/aws-native:s3:BucketLoggingConfiguration",
"description": "Settings that define where logs are stored."
},
+ "metadataTableConfiguration": {
+ "$ref": "#/types/aws-native:s3:BucketMetadataTableConfiguration"
+ },
"metricsConfigurations": {
"type": "array",
"items": {
@@ -321490,7 +322202,7 @@
"properties": {
"bucketName": {
"type": "string",
- "description": "Specifies a name for the bucket. The bucket name must contain only lowercase letters, numbers, and hyphens (-). A directory bucket name must be unique in the chosen Availability Zone. The bucket name must also follow the format 'bucket_base_name--az_id--x-s3' (for example, 'DOC-EXAMPLE-BUCKET--usw2-az1--x-s3'). If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the bucket name."
+ "description": "Specifies a name for the bucket. The bucket name must contain only lowercase letters, numbers, and hyphens (-). A directory bucket name must be unique in the chosen Availability Zone or Local Zone. The bucket name must also follow the format 'bucket_base_name--zone_id--x-s3'. The zone_id can be the ID of an Availability Zone or a Local Zone. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the bucket name."
}
},
"required": [
@@ -321505,7 +322217,7 @@
},
"availabilityZoneName": {
"type": "string",
- "description": "Returns the code for the Availability Zone where the directory bucket was created."
+ "description": "Returns the code for the Availability Zone or Local Zone where the directory bucket was created. An example for the code of an Availability Zone is 'us-east-1f'."
},
"bucketEncryption": {
"$ref": "#/types/aws-native:s3express:DirectoryBucketBucketEncryption",
@@ -321710,6 +322422,49 @@
}
}
},
+ "aws-native:s3tables:getTableBucket": {
+ "description": "Creates an Amazon S3 Tables table bucket in the same AWS Region where you create the AWS CloudFormation stack.",
+ "inputs": {
+ "properties": {
+ "tableBucketArn": {
+ "type": "string"
+ }
+ },
+ "required": [
+ "tableBucketArn"
+ ]
+ },
+ "outputs": {
+ "properties": {
+ "tableBucketArn": {
+ "type": "string"
+ },
+ "unreferencedFileRemoval": {
+ "$ref": "#/types/aws-native:s3tables:TableBucketUnreferencedFileRemoval"
+ }
+ }
+ }
+ },
+ "aws-native:s3tables:getTableBucketPolicy": {
+ "description": "Applies an IAM resource policy to a table bucket.",
+ "inputs": {
+ "properties": {
+ "tableBucketArn": {
+ "type": "string"
+ }
+ },
+ "required": [
+ "tableBucketArn"
+ ]
+ },
+ "outputs": {
+ "properties": {
+ "resourcePolicy": {
+ "$ref": "#/types/aws-native:s3tables:TableBucketPolicyResourcePolicy"
+ }
+ }
+ }
+ },
"aws-native:sagemaker:getApp": {
"description": "Resource Type definition for AWS::SageMaker::App",
"inputs": {
diff --git a/reports/missedAutonaming.json b/reports/missedAutonaming.json
index 82a5949114..4b1f451587 100644
--- a/reports/missedAutonaming.json
+++ b/reports/missedAutonaming.json
@@ -336,10 +336,6 @@
"$ref": "#/types/aws-native:apigateway:DomainNameV2EndpointConfiguration",
"description": "The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has."
},
- "managementPolicy": {
- "$ref": "pulumi.json#/Any",
- "description": "Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::DomainNameV2` for more information about the expected schema for this property."
- },
"policy": {
"$ref": "pulumi.json#/Any",
"description": "A stringified JSON policy document that applies to the `execute-api` service for this DomainName regardless of the caller and Method configuration. You can use `Fn::ToJsonString` to enter your `policy` . For more information, see [Fn::ToJsonString](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ToJsonString.html) .\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::DomainNameV2` for more information about the expected schema for this property."
@@ -2194,10 +2190,12 @@
"description": "An array of image files that you want to apply to roles like backgrounds, logos, and icons. Each object must also indicate whether it is for dark mode, light mode, or browser-adaptive mode."
},
"clientId": {
- "type": "string"
+ "type": "string",
+ "description": "The app client that's assigned to the branding style that you want more information about."
},
"returnMergedResources": {
- "type": "boolean"
+ "type": "boolean",
+ "description": "When `true` , returns values for branding options that are unchanged from Amazon Cognito defaults. When `false` or when you omit this parameter, returns only values that you customized in your branding style."
},
"settings": {
"$ref": "pulumi.json#/Any",
@@ -2205,7 +2203,7 @@
},
"useCognitoProvidedValues": {
"type": "boolean",
- "description": "When true, applies the default branding style options. This option reverts to a \"blank\" style that you can modify later in the branding designer."
+ "description": "When true, applies the default branding style options. This option reverts to default style options that are managed by Amazon Cognito. You can modify them later in the branding designer.\n\nWhen you specify `true` for this option, you must also omit values for `Settings` and `Assets` in the request."
},
"userPoolId": {
"type": "string",
@@ -2272,7 +2270,7 @@
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool."
+ "description": "The ID of the user pool."
}
}
},
@@ -2285,7 +2283,7 @@
},
"userPoolId": {
"type": "string",
- "description": "The user pool ID for the user pool."
+ "description": "The ID of the user pool that contains the group that you want to add the user to."
},
"username": {
"type": "string",
@@ -6430,6 +6428,9 @@
"type": "string",
"description": "The number of ``cpu`` units used by the task. If you use the EC2 launch type, this field is optional. Any value can be used. If you use the Fargate launch type, this field is required. You must use one of the following values. The value that you choose determines your range of valid values for the ``memory`` parameter.\n If you use the EC2 launch type, this field is optional. Supported values are between ``128`` CPU units (``0.125`` vCPUs) and ``10240`` CPU units (``10`` vCPUs).\n The CPU units cannot be less than 1 vCPU when you use Windows containers on Fargate.\n + 256 (.25 vCPU) - Available ``memory`` values: 512 (0.5 GB), 1024 (1 GB), 2048 (2 GB)\n + 512 (.5 vCPU) - Available ``memory`` values: 1024 (1 GB), 2048 (2 GB), 3072 (3 GB), 4096 (4 GB)\n + 1024 (1 vCPU) - Available ``memory`` values: 2048 (2 GB), 3072 (3 GB), 4096 (4 GB), 5120 (5 GB), 6144 (6 GB), 7168 (7 GB), 8192 (8 GB)\n + 2048 (2 vCPU) - Available ``memory`` values: 4096 (4 GB) and 16384 (16 GB) in increments of 1024 (1 GB)\n + 4096 (4 vCPU) - Available ``memory`` values: 8192 (8 GB) and 30720 (30 GB) in increments of 1024 (1 GB)\n + 8192 (8 vCPU) - Available ``memory`` values: 16 GB and 60 GB in 4 GB increments\n This option requires Linux platform ``1.4.0`` or later.\n + 16384 (16vCPU) - Available ``memory`` values: 32GB and 120 GB in 8 GB increments\n This option requires Linux platform ``1.4.0`` or later."
},
+ "enableFaultInjection": {
+ "type": "boolean"
+ },
"ephemeralStorage": {
"$ref": "#/types/aws-native:ecs:TaskDefinitionEphemeralStorage",
"description": "The ephemeral storage settings to use for tasks run with the task definition."
@@ -7929,6 +7930,65 @@
}
}
},
+ "aws-native:iot:Command": {
+ "cfTypeName": "AWS::IoT::Command",
+ "properties": {
+ "commandId": {
+ "type": "string",
+ "description": "The unique identifier for the command."
+ },
+ "createdAt": {
+ "type": "string",
+ "description": "The date and time when the command was created."
+ },
+ "deprecated": {
+ "type": "boolean",
+ "description": "A flag indicating whether the command is deprecated."
+ },
+ "description": {
+ "type": "string",
+ "description": "The description of the command."
+ },
+ "displayName": {
+ "type": "string",
+ "description": "The display name for the command."
+ },
+ "lastUpdatedAt": {
+ "type": "string",
+ "description": "The date and time when the command was last updated."
+ },
+ "mandatoryParameters": {
+ "type": "array",
+ "items": {
+ "$ref": "#/types/aws-native:iot:CommandParameter"
+ },
+ "description": "The list of mandatory parameters for the command."
+ },
+ "namespace": {
+ "$ref": "#/types/aws-native:iot:CommandNamespace",
+ "description": "The namespace to which the command belongs."
+ },
+ "payload": {
+ "$ref": "#/types/aws-native:iot:CommandPayload",
+ "description": "The payload associated with the command."
+ },
+ "pendingDeletion": {
+ "type": "boolean",
+ "description": "A flag indicating whether the command is pending deletion."
+ },
+ "roleArn": {
+ "type": "string",
+ "description": "The customer role associated with the command."
+ },
+ "tags": {
+ "type": "array",
+ "items": {
+ "$ref": "#/types/aws-native:index:Tag"
+ },
+ "description": "The tags to be associated with the command."
+ }
+ }
+ },
"aws-native:iot:JobTemplate": {
"cfTypeName": "AWS::IoT::JobTemplate",
"properties": {
@@ -10215,7 +10275,8 @@
"type": "array",
"items": {
"type": "string"
- }
+ },
+ "description": "The OIDC client ID for a Amazon Q Business application."
},
"description": {
"type": "string",
@@ -10615,11 +10676,11 @@
"properties": {
"databaseInstallationFilesS3BucketName": {
"type": "string",
- "description": "The name of an Amazon S3 bucket that contains database installation files for your CEV. For example, a valid bucket name is `my-custom-installation-files`."
+ "description": "The name of an Amazon S3 bucket that contains database installation files for your CEV. For example, a valid bucket name is ``my-custom-installation-files``."
},
"databaseInstallationFilesS3Prefix": {
"type": "string",
- "description": "The Amazon S3 directory that contains the database installation files for your CEV. For example, a valid bucket name is `123456789012/cev1`. If this setting isn't specified, no prefix is assumed."
+ "description": "The Amazon S3 directory that contains the database installation files for your CEV. For example, a valid bucket name is ``123456789012/cev1``. If this setting isn't specified, no prefix is assumed."
},
"description": {
"type": "string",
@@ -10627,42 +10688,42 @@
},
"engine": {
"type": "string",
- "description": "The database engine to use for your custom engine version (CEV). The only supported value is `custom-oracle-ee`."
+ "description": "The database engine to use for your custom engine version (CEV).\n Valid values:\n + ``custom-oracle-ee`` \n + ``custom-oracle-ee-cdb``"
},
"engineVersion": {
"type": "string",
- "description": "The name of your CEV. The name format is 19.customized_string . For example, a valid name is 19.my_cev1. This setting is required for RDS Custom for Oracle, but optional for Amazon RDS. The combination of Engine and EngineVersion is unique per customer per Region."
+ "description": "The name of your CEV. The name format is ``major version.customized_string``. For example, a valid CEV name is ``19.my_cev1``. This setting is required for RDS Custom for Oracle, but optional for Amazon RDS. The combination of ``Engine`` and ``EngineVersion`` is unique per customer per Region.\n *Constraints:* Minimum length is 1. Maximum length is 60.\n *Pattern:* ``^[a-z0-9_.-]{1,60$``}"
},
"imageId": {
"type": "string",
- "description": "The identifier of Amazon Machine Image (AMI) used for CEV."
+ "description": "A value that indicates the ID of the AMI."
},
"kmsKeyId": {
"type": "string",
- "description": "The AWS KMS key identifier for an encrypted CEV. A symmetric KMS key is required for RDS Custom, but optional for Amazon RDS."
+ "description": "The AWS KMS key identifier for an encrypted CEV. A symmetric encryption KMS key is required for RDS Custom, but optional for Amazon RDS.\n If you have an existing symmetric encryption KMS key in your account, you can use it with RDS Custom. No further action is necessary. If you don't already have a symmetric encryption KMS key in your account, follow the instructions in [Creating a symmetric encryption KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/create-keys.html#create-symmetric-cmk) in the *Key Management Service Developer Guide*.\n You can choose the same symmetric encryption key when you create a CEV and a DB instance, or choose different keys."
},
"manifest": {
"type": "string",
- "description": "The CEV manifest, which is a JSON document that describes the installation .zip files stored in Amazon S3. Specify the name/value pairs in a file or a quoted string. RDS Custom applies the patches in the order in which they are listed."
+ "description": "The CEV manifest, which is a JSON document that describes the installation .zip files stored in Amazon S3. Specify the name/value pairs in a file or a quoted string. RDS Custom applies the patches in the order in which they are listed.\n The following JSON fields are valid:\n + MediaImportTemplateVersion Version of the CEV manifest. The date is in the format YYYY-MM-DD. + databaseInstallationFileNames Ordered list of installation files for the CEV. + opatchFileNames Ordered list of OPatch installers used for the Oracle DB engine. + psuRuPatchFileNames The PSU and RU patches for this CEV. + OtherPatchFileNames The patches that are not in the list of PSU and RU patches. Amazon RDS applies these patches after applying the PSU and RU patches. \n For more information, see [Creating the CEV manifest](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-cev.html#custom-cev.preparing.manifest) in the *Amazon RDS User Guide*."
},
"sourceCustomDbEngineVersionIdentifier": {
"type": "string",
- "description": "The identifier of the source custom engine version."
+ "description": "The ARN of a CEV to use as a source for creating a new CEV. You can specify a different Amazon Machine Imagine (AMI) by using either ``Source`` or ``UseAwsProvidedLatestImage``. You can't specify a different JSON manifest when you specify ``SourceCustomDbEngineVersionIdentifier``."
},
"status": {
"$ref": "#/types/aws-native:rds:CustomDbEngineVersionStatus",
- "description": "The availability status to be assigned to the CEV."
+ "description": "A value that indicates the status of a custom engine version (CEV)."
},
"tags": {
"type": "array",
"items": {
"$ref": "#/types/aws-native:index:Tag"
},
- "description": "An array of key-value pairs to apply to this resource."
+ "description": "A list of tags. For more information, see [Tagging Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide.*"
},
"useAwsProvidedLatestImage": {
"type": "boolean",
- "description": "A value that indicates whether AWS provided latest image is applied automatically to the Custom Engine Version. By default, AWS provided latest image is applied automatically. This value is only applied on create."
+ "description": "Specifies whether to use the latest service-provided Amazon Machine Image (AMI) for the CEV. If you specify ``UseAwsProvidedLatestImage``, you can't also specify ``ImageId``."
}
}
},
@@ -12031,6 +12092,17 @@
}
}
},
+ "aws-native:s3tables:TableBucketPolicy": {
+ "cfTypeName": "AWS::S3Tables::TableBucketPolicy",
+ "properties": {
+ "resourcePolicy": {
+ "$ref": "#/types/aws-native:s3tables:TableBucketPolicyResourcePolicy"
+ },
+ "tableBucketArn": {
+ "type": "string"
+ }
+ }
+ },
"aws-native:sagemaker:Device": {
"cfTypeName": "AWS::SageMaker::Device",
"properties": {
diff --git a/sdk/dotnet/ApiGateway/DomainNameV2.cs b/sdk/dotnet/ApiGateway/DomainNameV2.cs
index be54fdf668..bf5defa62d 100644
--- a/sdk/dotnet/ApiGateway/DomainNameV2.cs
+++ b/sdk/dotnet/ApiGateway/DomainNameV2.cs
@@ -45,12 +45,6 @@ public partial class DomainNameV2 : global::Pulumi.CustomResource
[Output("endpointConfiguration")]
public Output EndpointConfiguration { get; private set; } = null!;
- ///
- /// Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::DomainNameV2` for more information about the expected schema for this property.
- ///
- [Output("managementPolicy")]
- public Output