CloudFormation Template Schema upgrade

https://github.com/aws-cloudformation/cloudformation-template-schema/tree/main
aws-cloudformation · May 12, 2024 · 4b2ca75 · 4b2ca75
1 parent 6518289
commit 4b2ca75
Show file tree

Hide file tree

Showing 90 changed files with 9,481 additions and 4,469 deletions.
diff --git a/server/schema/resources.schema.json b/server/schema/resources.schema.json
diff --git a/server/schema/resources/aws-acmpca-certificate.json b/server/schema/resources/aws-acmpca-certificate.json
@@ -552,6 +552,12 @@
     }
   },
   "additionalProperties": false,
+  "tagging": {
+    "taggable": false,
+    "tagOnCreate": false,
+    "tagUpdatable": false,
+    "cloudFormationSystemTags": false
+  },
   "required": [
     "CertificateAuthorityArn",
     "CertificateSigningRequest",
@@ -573,7 +579,11 @@
   ],
   "writeOnlyProperties": [
     "/properties/ApiPassthrough",
-    "/properties/CertificateSigningRequest"
+    "/properties/CertificateSigningRequest",
+    "/properties/SigningAlgorithm",
+    "/properties/TemplateArn",
+    "/properties/Validity",
+    "/properties/ValidityNotBefore"
   ],
   "primaryIdentifier": [
     "/properties/Arn",

diff --git a/server/schema/resources/aws-acmpca-certificateauthority.json b/server/schema/resources/aws-acmpca-certificateauthority.json
@@ -13,13 +13,16 @@
       "properties": {
         "Key": {
           "type": "string",
-          "markdownDescription": "\n\n---\n\nRequired: No  \nType: String  \nUpdate requires: No interruption"
+          "markdownDescription": "\n\n---\n\nRequired: Yes  \nType: String  \nUpdate requires: No interruption"
         },
         "Value": {
           "type": "string",
           "markdownDescription": "\n\n---\n\nRequired: No  \nType: String  \nUpdate requires: No interruption"
         }
       },
+      "required": [
+        "Key"
+      ],
       "markdownDescription": "\n\n---\n\nRequired: No  \nUpdate requires: No interruption"
     },
     "Subject": {
@@ -138,7 +141,7 @@
       "properties": {
         "Enabled": {
           "type": "boolean",
-          "markdownDescription": "\n\n---\n\nRequired: No  \nType: Boolean  \nUpdate requires: No interruption"
+          "markdownDescription": "\n\n---\n\nRequired: Yes  \nType: Boolean  \nUpdate requires: No interruption"
         },
         "ExpirationInDays": {
           "type": "integer",
@@ -160,6 +163,9 @@
           "$ref": "#/definitions/CrlDistributionPointExtensionConfiguration"
         }
       },
+      "required": [
+        "Enabled"
+      ],
       "markdownDescription": "Your certificate authority can create and maintain a certificate revocation list (CRL). A CRL contains information about certificates that have been revoked.\n\n---\n\nRequired: No  \nUpdate requires: No interruption"
     },
     "OcspConfiguration": {
@@ -169,13 +175,16 @@
       "properties": {
         "Enabled": {
           "type": "boolean",
-          "markdownDescription": "\n\n---\n\nRequired: No  \nType: Boolean  \nUpdate requires: No interruption"
+          "markdownDescription": "\n\n---\n\nRequired: Yes  \nType: Boolean  \nUpdate requires: No interruption"
         },
         "OcspCustomCname": {
           "type": "string",
           "markdownDescription": "\n\n---\n\nRequired: No  \nType: String  \nUpdate requires: No interruption"
         }
       },
+      "required": [
+        "Enabled"
+      ],
       "markdownDescription": "Helps to configure online certificate status protocol (OCSP) responder for your certificate authority\n\n---\n\nRequired: No  \nUpdate requires: No interruption"
     },
     "RevocationConfiguration": {
@@ -309,12 +318,11 @@
         },
         "NameAssigner": {
           "type": "string",
-          "markdownDescription": "\n\n---\n\nRequired: Yes  \nType: String  \nUpdate requires: No interruption"
+          "markdownDescription": "\n\n---\n\nRequired: No  \nType: String  \nUpdate requires: No interruption"
         }
       },
       "required": [
-        "PartyName",
-        "NameAssigner"
+        "PartyName"
       ],
       "markdownDescription": "Structure that contains X.509 EdiPartyName information.\n\n---\n\nRequired: No  \nUpdate requires: No interruption"
     },

diff --git a/server/schema/resources/aws-acmpca-certificateauthorityactivation.json b/server/schema/resources/aws-acmpca-certificateauthorityactivation.json
@@ -24,6 +24,12 @@
       "markdownDescription": "The status of the Certificate Authority.\n\n---\n\nRequired: No  \nType: String  \nUpdate requires: No interruption"
     }
   },
+  "tagging": {
+    "taggable": false,
+    "tagOnCreate": false,
+    "tagUpdatable": false,
+    "cloudFormationSystemTags": false
+  },
   "additionalProperties": false,
   "required": [
     "CertificateAuthorityArn",

diff --git a/server/schema/resources/aws-acmpca-permission.json b/server/schema/resources/aws-acmpca-permission.json
@@ -30,7 +30,12 @@
     }
   },
   "additionalProperties": false,
-  "taggable": false,
+  "tagging": {
+    "taggable": false,
+    "tagOnCreate": false,
+    "tagUpdatable": false,
+    "cloudFormationSystemTags": false
+  },
   "required": [
     "Actions",
     "CertificateAuthorityArn",

diff --git a/server/schema/resources/aws-apigateway-account.json b/server/schema/resources/aws-apigateway-account.json
@@ -1,34 +1,18 @@
 {
-  "typeName": "AWS::ApiGateway::Account",
-  "description": "The ``AWS::ApiGateway::Account`` resource specifies the IAM role that Amazon API Gateway uses to write API logs to Amazon CloudWatch Logs. To avoid overwriting other roles, you should only have one ``AWS::ApiGateway::Account`` resource per region per account.",
   "sourceUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway",
-  "additionalProperties": false,
-  "properties": {
-    "CloudWatchRoleArn": {
-      "description": "The ARN of an Amazon CloudWatch role for the current Account.",
-      "type": "string",
-      "markdownDescription": "The ARN of an Amazon CloudWatch role for the current Account.\n\n---\n\nRequired: No  \nType: String  \nUpdate requires: No interruption"
-    }
-  },
-  "primaryIdentifier": [
-    "/properties/Id"
-  ],
-  "readOnlyProperties": [
-    "/properties/Id"
-  ],
   "handlers": {
+    "read": {
+      "permissions": [
+        "apigateway:GET"
+      ]
+    },
     "create": {
       "permissions": [
         "apigateway:PATCH",
         "iam:GetRole",
         "iam:PassRole"
       ]
     },
-    "read": {
-      "permissions": [
-        "apigateway:GET"
-      ]
-    },
     "update": {
       "permissions": [
         "apigateway:PATCH",
@@ -40,6 +24,22 @@
       "permissions": []
     }
   },
+  "typeName": "AWS::ApiGateway::Account",
+  "readOnlyProperties": [
+    "/properties/Id"
+  ],
+  "description": "The ``AWS::ApiGateway::Account`` resource specifies the IAM role that Amazon API Gateway uses to write API logs to Amazon CloudWatch Logs. To avoid overwriting other roles, you should only have one ``AWS::ApiGateway::Account`` resource per region per account.",
+  "additionalProperties": false,
+  "primaryIdentifier": [
+    "/properties/Id"
+  ],
+  "properties": {
+    "CloudWatchRoleArn": {
+      "description": "The ARN of an Amazon CloudWatch role for the current Account.",
+      "type": "string",
+      "markdownDescription": "The ARN of an Amazon CloudWatch role for the current Account.\n\n---\n\nRequired: No  \nType: String  \nUpdate requires: No interruption"
+    }
+  },
   "attributes": {
     "Id": {
       "description": "",