Skip to content

feat: update L1 CloudFormation resource definitions#37410

Merged
mergify[bot] merged 3 commits into
mainfrom
automation/spec-update
Apr 1, 2026
Merged

feat: update L1 CloudFormation resource definitions#37410
mergify[bot] merged 3 commits into
mainfrom
automation/spec-update

Conversation

@aws-cdk-automation
Copy link
Copy Markdown
Collaborator

@aws-cdk-automation aws-cdk-automation commented Mar 30, 2026

Updates the L1 CloudFormation resource definitions with the latest changes from @aws-cdk/aws-service-spec

L1 CloudFormation resource definition changes:

├[~] service aws-appstream
│ └ resources
│    └[~]  resource AWS::AppStream::ImageBuilder
│       ├ properties
│       │  ├ Name: - string (required)
│       │  │       + string (required, immutable)
│       │  ├[+] RootVolumeConfig: VolumeConfig
│       │  ├[+] SoftwaresToInstall: Array<string>
│       │  └[+] SoftwaresToUninstall: Array<string>
│       └ types
│          └[+]  type VolumeConfig
│             ├      name: VolumeConfig
│             └ properties
│                └ VolumeSizeInGb: integer
├[~] service aws-arcregionswitch
│ └ resources
│    └[~]  resource AWS::ARCRegionSwitch::Plan
│       └      - arnTemplate: arn:${Partition}:arc-region-switch:${Region}:${Account}:plan/${ResourceId}
│              + arnTemplate: arn:${Partition}:arc-region-switch::${Account}:plan/${ResourceId}
├[~] service aws-autoscaling
│ └ resources
│    └[~]  resource AWS::AutoScaling::AutoScalingGroup
│       └ properties
│          └[+] AvailabilityZoneIds: Array<string>
├[~] service aws-bedrockagentcore
│ └ resources
│    └[~]  resource AWS::BedrockAgentCore::OnlineEvaluationConfig
│       ├ properties
│       │  └[+] ExecutionStatus: string<ENABLED|DISABLED>
│       └ attributes
│          └[-] ExecutionStatus: string<ENABLED|DISABLED>
├[~] service aws-customerprofiles
│ └ resources
│    └[+]  resource AWS::CustomerProfiles::Recommender
│       ├      name: Recommender
│       │      cloudFormationType: AWS::CustomerProfiles::Recommender
│       │      documentation: Resource Type definition for AWS::CustomerProfiles::Recommender
│       │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│       │      primaryIdentifier: ["DomainName","RecommenderName"]
│       ├ properties
│       │  ├ DomainName: string (required, immutable)
│       │  ├ RecommenderName: string (required, immutable)
│       │  ├ RecommenderRecipeName: string (required, immutable)
│       │  ├ RecommenderConfig: RecommenderConfig
│       │  ├ Description: string
│       │  └ Tags: Array<tag>
│       ├ attributes
│       │  ├ RecommenderArn: string
│       │  ├ Status: string<PENDING|IN_PROGRESS|STOPPING|STARTING|ACTIVE|INACTIVE|FAILED|DELETING>
│       │  ├ CreatedAt: string
│       │  ├ LastUpdatedAt: string
│       │  ├ FailureReason: string
│       │  ├ LatestRecommenderUpdate: RecommenderUpdate
│       │  └ TrainingMetrics: Array<TrainingMetrics>
│       └ types
│          ├ type EventParameters
│          │ ├      documentation: Event parameters with type and value threshold
│          │ │      name: EventParameters
│          │ └ properties
│          │    ├ EventType: string (required)
│          │    └ EventValueThreshold: number
│          ├ type EventsConfig
│          │ ├      documentation: Configuration for events used in the recommender
│          │ │      name: EventsConfig
│          │ └ properties
│          │    └ EventParametersList: Array<EventParameters> (required)
│          ├ type Metrics
│          │ ├      documentation: Training metrics by type
│          │ │      name: Metrics
│          │ └ properties
│          │    ├ hit: number
│          │    ├ coverage: number
│          │    ├ recall: number
│          │    ├ popularity: number
│          │    ├ freshness: number
│          │    └ similarity: number
│          ├ type RecommenderConfig
│          │ ├      documentation: Configuration for the recommender
│          │ │      name: RecommenderConfig
│          │ └ properties
│          │    └ EventsConfig: EventsConfig
│          ├ type RecommenderUpdate
│          │ ├      documentation: Information about the latest recommender update
│          │ │      name: RecommenderUpdate
│          │ └ properties
│          │    ├ RecommenderConfig: RecommenderConfig
│          │    ├ Status: string<PENDING|IN_PROGRESS|STOPPING|STARTING|ACTIVE|INACTIVE|FAILED|DELETING>
│          │    ├ CreationDateTime: string
│          │    ├ LastUpdatedDateTime: string
│          │    └ FailureReason: string
│          └ type TrainingMetrics
│            ├      name: TrainingMetrics
│            └ properties
│               ├ Time: string
│               └ Metrics: Metrics
├[~] service aws-ec2
│ └ resources
│    ├[~]  resource AWS::EC2::EC2Fleet
│    │  ├ properties
│    │  │  └[+] ReservedCapacityOptions: ReservedCapacityOptionsRequest (immutable)
│    │  └ types
│    │     └[+]  type ReservedCapacityOptionsRequest
│    │        ├      name: ReservedCapacityOptionsRequest
│    │        └ properties
│    │           └ ReservationTypes: Array<string<interruptible-capacity-reservation>>
│    ├[~]  resource AWS::EC2::IPAMPrefixListResolverTarget
│    │  └      - arnTemplate: undefined
│    │         + arnTemplate: arn:${Partition}:ec2::${Account}:ipam-prefix-list-resolver-target/${IpamPrefixListResolverTargetId}
│    └[+]  resource AWS::EC2::SqlHaStandbyDetectedInstance
│       ├      name: SqlHaStandbyDetectedInstance
│       │      cloudFormationType: AWS::EC2::SqlHaStandbyDetectedInstance
│       │      documentation: Resource Type definition for AWS::EC2::SqlHaStandbyDetectedInstance
│       │      primaryIdentifier: ["InstanceId"]
│       ├ properties
│       │  ├ InstanceId: string (required, immutable)
│       │  └ SqlServerCredentials: string
│       └ attributes
│          ├ HaStatus: string<processing|active|standby|invalid>
│          ├ SqlServerLicenseUsage: string<full|waived>
│          └ LastUpdatedTime: string
├[~] service aws-ecs
│ └ resources
│    └[~]  resource AWS::ECS::CapacityProvider
│       └ types
│          └[~] type InstanceLaunchTemplate
│            └ properties
│               └[+] InstanceMetadataTagsPropagation: boolean
├[~] service aws-eks
│ └ resources
│    └[~]  resource AWS::EKS::Capability
│       ├      - vendedLogs: [{"permissionsVersion":"V2","logType":"EKS_CAPABILITY_ACK_S3_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"mandatoryFields":["resource_arn","event_timestamp"],"optionalFields":["stream","level","msg","err","error","controller","controllerGroup","controllerKind","reconcileID","worker-count","kind","reconciler-kind","name","namespace","aws.service","version","type"]},{"permissionsVersion":"V2","logType":"EKS_CAPABILITY_ARGOCD_APPLICATION_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"mandatoryFields":["resource_arn","event_timestamp"],"optionalFields":["stream","level","msg","error","application","app-namespace","project","dest-server","dest-namespace","dest-name","comparison-level","time_ms","patch_ms","setop_ms","compare_app_state_ms","refresh_app_conditions_ms","process_refresh_app_conditions_errors_ms","comparison_with_nothing_ms"]},{"permissionsVersion":"V2","logType":"EKS_CAPABILITY_KRO_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"mandatoryFields":["resource_arn","event_timestamp"],"optionalFields":["stream","level","message","err","error","controller","controllerGroup","controllerKind","reconcileID","worker-count","gvr","crd","name","namespace","item","ResourceGraphDefinition","type"]}]
│       │      + vendedLogs: [{"permissionsVersion":"V2","logType":"EKS_CAPABILITY_ACK_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"mandatoryFields":["resource_arn","event_timestamp"],"optionalFields":["stream","level","message","err","error","controller","controllerGroup","controllerKind","reconcileID","worker-count","kind","reconciler-kind","name","namespace","aws.service","version","type"]},{"permissionsVersion":"V2","logType":"EKS_CAPABILITY_ARGOCD_APPLICATION_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"mandatoryFields":["resource_arn","event_timestamp"],"optionalFields":["stream","level","message","error","application","app-namespace","project","dest-server","dest-namespace","dest-name","comparison-level","time_ms","patch_ms","setop_ms","compare_app_state_ms","refresh_app_conditions_ms","process_refresh_app_conditions_errors_ms","comparison_with_nothing_ms"]},{"permissionsVersion":"V2","logType":"EKS_CAPABILITY_ARGOCD_APPLICATIONSET_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"mandatoryFields":["resource_arn","event_timestamp"],"optionalFields":["stream","level","message","error","controller","controllerGroup","controllerKind","reconcileID","worker-count","name","namespace","application","app-namespace","project","applicationset","action","count","requeueAfter","type"]},{"permissionsVersion":"V2","logType":"EKS_CAPABILITY_ARGOCD_COMMITSERVER_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"mandatoryFields":["resource_arn","event_timestamp"],"optionalFields":["stream","level","message"]},{"permissionsVersion":"V2","logType":"EKS_CAPABILITY_ARGOCD_REPOSERVER_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"mandatoryFields":["resource_arn","event_timestamp"],"optionalFields":["stream","level","message","error"]},{"permissionsVersion":"V2","logType":"EKS_CAPABILITY_ARGOCD_SERVER_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"mandatoryFields":["resource_arn","event_timestamp"],"optionalFields":["stream","level","message","error","name","namespace","reason"]},{"permissionsVersion":"V2","logType":"EKS_CAPABILITY_KRO_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"mandatoryFields":["resource_arn","event_timestamp"],"optionalFields":["stream","level","message","err","error","controller","controllerGroup","controllerKind","reconcileID","worker-count","gvr","crd","name","namespace","item","ResourceGraphDefinition","type"]}]
│       └ vendedLogs
│          ├[-] logType: EKS_CAPABILITY_ACK_S3_LOGS
│          │ ├permissionsVersion: V2
│          │ ├destinations: [S3, CWL, FH]
│          │ ├mandatoryFields: [resource_arn, event_timestamp]
│          │ └optionalFields: [stream, level, msg, err, error, controller, controllerGroup, controllerKind, reconcileID, worker-count, kind, reconciler-kind, name, namespace, aws.service, version, type]
│          ├[~] logType: EKS_CAPABILITY_ARGOCD_APPLICATION_LOGS
│          │ └optionalFields:
│          │  ├- [stream, level, msg, error, application, app-namespace, project, dest-server, dest-namespace, dest-name, comparison-level, time_ms, patch_ms, setop_ms, compare_app_state_ms, refresh_app_conditions_ms, process_refresh_app_conditions_errors_ms, comparison_with_nothing_ms]
│          │  └+ [stream, level, message, error, application, app-namespace, project, dest-server, dest-namespace, dest-name, comparison-level, time_ms, patch_ms, setop_ms, compare_app_state_ms, refresh_app_conditions_ms, process_refresh_app_conditions_errors_ms, comparison_with_nothing_ms]
│          ├[+] logType: EKS_CAPABILITY_ACK_LOGS
│          │ ├permissionsVersion: V2
│          │ ├destinations: [S3, CWL, FH]
│          │ ├mandatoryFields: [resource_arn, event_timestamp]
│          │ └optionalFields: [stream, level, message, err, error, controller, controllerGroup, controllerKind, reconcileID, worker-count, kind, reconciler-kind, name, namespace, aws.service, version, type]
│          ├[+] logType: EKS_CAPABILITY_ARGOCD_APPLICATIONSET_LOGS
│          │ ├permissionsVersion: V2
│          │ ├destinations: [S3, CWL, FH]
│          │ ├mandatoryFields: [resource_arn, event_timestamp]
│          │ └optionalFields: [stream, level, message, error, controller, controllerGroup, controllerKind, reconcileID, worker-count, name, namespace, application, app-namespace, project, applicationset, action, count, requeueAfter, type]
│          ├[+] logType: EKS_CAPABILITY_ARGOCD_COMMITSERVER_LOGS
│          │ ├permissionsVersion: V2
│          │ ├destinations: [S3, CWL, FH]
│          │ ├mandatoryFields: [resource_arn, event_timestamp]
│          │ └optionalFields: [stream, level, message]
│          ├[+] logType: EKS_CAPABILITY_ARGOCD_REPOSERVER_LOGS
│          │ ├permissionsVersion: V2
│          │ ├destinations: [S3, CWL, FH]
│          │ ├mandatoryFields: [resource_arn, event_timestamp]
│          │ └optionalFields: [stream, level, message, error]
│          └[+] logType: EKS_CAPABILITY_ARGOCD_SERVER_LOGS
│            ├permissionsVersion: V2
│            ├destinations: [S3, CWL, FH]
│            ├mandatoryFields: [resource_arn, event_timestamp]
│            └optionalFields: [stream, level, message, error, name, namespace, reason]
├[~] service aws-emr
│ └ resources
│    └[~]  resource AWS::EMR::Cluster
│       ├ properties
│       │  ├ AdditionalInfo: - json (immutable)
│       │  │                 + json | string ⇐ json (immutable)
│       │  ├ Configurations: - Array<Configuration> (immutable)
│       │  │                 + Array<EMRConfiguration> ⇐ Array<Configuration> (immutable)
│       │  ├[+] MonitoringConfiguration: MonitoringConfiguration (immutable)
│       │  ├ PlacementGroupConfigs: (documentation changed)
│       │  ├ ScaleDownBehavior: - string (immutable)
│       │  │                    + string<TERMINATE_AT_INSTANCE_HOUR|TERMINATE_AT_TASK_COMPLETION> (immutable)
│       │  └ VisibleToAllUsers: - boolean
│       │                       + boolean (deprecated=WARN)
│       └ types
│          ├[~] type CloudWatchAlarmDefinition
│          │ └ properties
│          │    ├ ComparisonOperator: - string (required)
│          │    │                     + string<GREATER_THAN_OR_EQUAL|GREATER_THAN|LESS_THAN|LESS_THAN_OR_EQUAL> (required)
│          │    ├ Statistic: - string
│          │    │            + string<SAMPLE_COUNT|AVERAGE|SUM|MINIMUM|MAXIMUM>
│          │    └ Unit: - string
│          │            + string<NONE|SECONDS|MICRO_SECONDS|MILLI_SECONDS|BYTES|KILO_BYTES|MEGA_BYTES|GIGA_BYTES|TERA_BYTES|BITS|KILO_BITS|MEGA_BITS|GIGA_BITS|TERA_BITS|PERCENT|COUNT|BYTES_PER_SECOND|KILO_BYTES_PER_SECOND|MEGA_BYTES_PER_SECOND|GIGA_BYTES_PER_SECOND|TERA_BYTES_PER_SECOND|BITS_PER_SECOND|KILO_BITS_PER_SECOND|MEGA_BITS_PER_SECOND|GIGA_BITS_PER_SECOND|TERA_BITS_PER_SECOND|COUNT_PER_SECOND>
│          ├[+]  type CloudWatchLogConfiguration
│          │  ├      documentation: Holds CloudWatch log configuration settings and metadata that specify settings like log files to monitor and where to send them.
│          │  │      name: CloudWatchLogConfiguration
│          │  └ properties
│          │     ├ Enabled: boolean (required)
│          │     ├ LogGroupName: string
│          │     ├ LogStreamNamePrefix: string
│          │     ├ EncryptionKeyArn: string
│          │     └ LogTypes: Map<string, Array<string>>
│          ├[~] type ComputeLimits
│          │ └ properties
│          │    └ UnitType: - string (required)
│          │                + string<InstanceFleetUnits|Instances|VCPU> (required)
│          ├[+]  type EMRConfiguration
│          │  ├      name: EMRConfiguration
│          │  └ properties
│          │     ├ Classification: string
│          │     ├ ConfigurationProperties: Map<string, string>
│          │     └ Configurations: Array<EMRConfiguration>
│          ├[~] type InstanceGroupConfig
│          │ └ properties
│          │    ├ Configurations: - Array<Configuration> (immutable)
│          │    │                 + Array<EMRConfiguration> ⇐ Array<Configuration> (immutable)
│          │    └ Market: - string (immutable)
│          │              + string<ON_DEMAND|SPOT> (immutable)
│          ├[~] type InstanceTypeConfig
│          │ └ properties
│          │    └ Configurations: - Array<Configuration> (immutable)
│          │                      + Array<EMRConfiguration> ⇐ Array<Configuration> (immutable)
│          ├[+]  type MonitoringConfiguration
│          │  ├      documentation: Contains CloudWatch log configuration metadata and settings.
│          │  │      name: MonitoringConfiguration
│          │  └ properties
│          │     └ CloudWatchLogConfiguration: CloudWatchLogConfiguration
│          ├[~] type PlacementGroupConfig
│          │ └ properties
│          │    ├ InstanceRole: - string (required)
│          │    │               + string<MASTER|CORE|TASK> (required)
│          │    └ PlacementStrategy: - string
│          │                         + string<SPREAD|PARTITION|CLUSTER|NONE>
│          ├[~] type ScalingAction
│          │ └ properties
│          │    └ Market: - string
│          │              + string<ON_DEMAND|SPOT>
│          ├[~] type SimpleScalingPolicyConfiguration
│          │ └ properties
│          │    └ AdjustmentType: - string
│          │                      + string<CHANGE_IN_CAPACITY|EXACT_CAPACITY|PERCENT_CHANGE_IN_CAPACITY>
│          ├[~] type SpotProvisioningSpecification
│          │ └ properties
│          │    └ TimeoutAction: - string (required)
│          │                     + string<SWITCH_TO_ON_DEMAND|TERMINATE_CLUSTER> (required)
│          └[~] type StepConfig
│            └ properties
│               └ ActionOnFailure: - string
│                                  + string<CANCEL_AND_WAIT|CONTINUE|TERMINATE_CLUSTER|TERMINATE_JOB_FLOW>
├[~] service aws-glue
│ └ resources
│    └[~]  resource AWS::Glue::Catalog
│       └      - arnTemplate: undefined
│              + arnTemplate: arn:${Partition}:glue:${Region}:${Account}:catalog/${CatalogName}
├[+] service aws-interconnect
│ ├      capitalized: Interconnect
│ │      cloudFormationNamespace: AWS::Interconnect
│ │      name: aws-interconnect
│ │      shortName: interconnect
│ └ resources
│    └ resource AWS::Interconnect::Connection
│      ├      name: Connection
│      │      cloudFormationType: AWS::Interconnect::Connection
│      │      documentation: Resource Type definition for AWS::Interconnect::Connection. Creates a managed network connection between AWS and a partner cloud service provider.
│      │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│      │      primaryIdentifier: ["Arn"]
│      ├ properties
│      │  ├ Description: string
│      │  ├ Bandwidth: string
│      │  ├ AttachPoint: AttachPoint (required, immutable)
│      │  ├ EnvironmentId: string (immutable)
│      │  ├ RemoteOwnerAccount: string
│      │  ├ ActivationKey: string (immutable)
│      │  └ Tags: Array<tag>
│      ├ attributes
│      │  ├ ConnectionId: string
│      │  ├ Arn: string
│      │  ├ Provider: Provider
│      │  ├ Type: string
│      │  ├ State: string<available|requested|pending|down|deleting|deleted|failed>
│      │  ├ SharedId: string
│      │  ├ OwnerAccount: string
│      │  └ BillingTier: integer
│      └ types
│         ├ type AttachPoint
│         │ ├      documentation: The logical attachment point in your AWS network where the managed connection will be connected.
│         │ │      name: AttachPoint
│         │ └ properties
│         │    ├ DirectConnectGateway: string
│         │    └ Arn: string
│         └ type Provider
│           ├      documentation: The partner cloud service provider.
│           │      name: Provider
│           └ properties
│              ├ CloudServiceProvider: string
│              └ LastMileProvider: string
├[~] service aws-iotwireless
│ └ resources
│    └[~]  resource AWS::IoTWireless::WirelessDeviceImportTask
│       └      - arnTemplate: arn:${Partition}:iotwireless:${Region}:${Account}:ImportTask/${ImportTaskId}
│              + arnTemplate: arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDeviceImportTask/${WirelessDeviceImportTaskId}
├[~] service aws-logs
│ └ resources
│    └[~]  resource AWS::Logs::LogGroup
│       ├      - vendedLogs: [{"permissionsVersion":"V2","logType":"AUDIT_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"mandatoryFields":["auditTimestamp","resourceArn","resourceName","dataIdentifiers"],"optionalFields":["policyName","cloudWatchLogs.EventTimestamp","cloudWatchLogs.LogStream"]}]
│       │      + vendedLogs: [{"permissionsVersion":"V2","logType":"AUDIT_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"mandatoryFields":["auditTimestamp","resourceArn","dataIdentifiers"],"optionalFields":["policyName","cloudWatchLogs.EventTimestamp","cloudWatchLogs.LogStream"]}]
│       ├ properties
│       │  └[+] BearerTokenAuthenticationEnabled: boolean (default=false)
│       └ vendedLogs
│          └[~] logType: AUDIT_LOGS
│            └mandatoryFields:
│             ├- [auditTimestamp, resourceArn, resourceName, dataIdentifiers]
│             └+ [auditTimestamp, resourceArn, dataIdentifiers]
├[~] service aws-networkfirewall
│ └ resources
│    └[~]  resource AWS::NetworkFirewall::RuleGroup
│       └      - arnTemplate: arn:${Partition}:network-firewall:${Region}:${Account}:stateless-rulegroup/${Name}
│              + arnTemplate: arn:${Partition}:network-firewall:${Region}:${Account}:stateful-rulegroup/${Name}
├[~] service aws-observabilityadmin
│ └ resources
│    └[~]  resource AWS::ObservabilityAdmin::OrganizationCentralizationRule
│       └ types
│          └[~] type SourceLogsConfiguration
│            └ properties
│               ├[+] DataSourceSelectionCriteria: string
│               └ LogGroupSelectionCriteria: - string (required)
│                                            + string
├[~] service aws-opensearchserverless
│ └ resources
│    └[~]  resource AWS::OpenSearchServerless::Collection
│       ├ attributes
│       │  └[+] FipsEndpoints: FipsEndpoints
│       └ types
│          └[+]  type FipsEndpoints
│             ├      name: FipsEndpoints
│             └ properties
│                ├ CollectionEndpoint: string
│                └ DashboardEndpoint: string
├[~] service aws-pcs
│ └ resources
│    └[~]  resource AWS::PCS::Cluster
│       ├      - vendedLogs: [{"permissionsVersion":"V2","logType":"PCS_JOBCOMP_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"mandatoryFields":["resource_id","resource_type","event_timestamp","scheduler_type","scheduler_major_version","fields"]},{"permissionsVersion":"V2","logType":"PCS_SCHEDULER_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"mandatoryFields":["resource_id","resource_type","event_timestamp","log_level","log_name","scheduler_type","scheduler_major_version","scheduler_patch_version","node_type","message"]},{"permissionsVersion":"V2","logType":"PCS_SCHEDULER_AUDIT_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"optionalFields":["resource_id","resource_type","event_timestamp","log_level","scheduler_type","scheduler_patch_version","node_type","log_type","message"],"mandatoryFields":["log_name","scheduler_major_version"]}]
│       │      + vendedLogs: [{"permissionsVersion":"V2","logType":"PCS_JOBCOMP_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"mandatoryFields":["resource_id","resource_type","event_timestamp","scheduler_type","scheduler_major_version","fields"]},{"permissionsVersion":"V2","logType":"PCS_SCHEDULER_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"mandatoryFields":["resource_id","resource_type","event_timestamp","log_level","log_name","scheduler_type","scheduler_major_version","scheduler_patch_version","node_type","message"]},{"permissionsVersion":"V2","logType":"PCS_SCHEDULER_AUDIT_LOGS","destinations":[{"destinationType":"S3","outputFormats":["json","plain","w3c","parquet"]},{"destinationType":"CWL","outputFormats":["plain","json"]},{"destinationType":"FH","outputFormats":["json","plain","raw"]}],"optionalFields":["resource_id","resource_type","event_timestamp","log_level","scheduler_type","scheduler_patch_version","node_type","message"],"mandatoryFields":["log_name","scheduler_major_version","log_type"]}]
│       ├ vendedLogs
│       │  └[~] logType: PCS_SCHEDULER_AUDIT_LOGS
│       │    ├mandatoryFields:
│       │    │├- [log_name, scheduler_major_version]
│       │    │└+ [log_name, scheduler_major_version, log_type]
│       │    └optionalFields:
│       │     ├- [resource_id, resource_type, event_timestamp, log_level, scheduler_type, scheduler_patch_version, node_type, log_type, message]
│       │     └+ [resource_id, resource_type, event_timestamp, log_level, scheduler_type, scheduler_patch_version, node_type, message]
│       └ types
│          ├[+]  type CgroupCustomSetting
│          │  ├      documentation: Additional cgroup configuration settings.
│          │  │      name: CgroupCustomSetting
│          │  └ properties
│          │     ├ ParameterName: string (required)
│          │     └ ParameterValue: string (required)
│          ├[~] type SlurmConfiguration
│          │ └ properties
│          │    ├[+] CgroupCustomSettings: Array<CgroupCustomSetting>
│          │    └[+] SlurmdbdCustomSettings: Array<SlurmdbdCustomSetting>
│          └[+]  type SlurmdbdCustomSetting
│             ├      documentation: Additional slurmdbd configuration settings.
│             │      name: SlurmdbdCustomSetting
│             └ properties
│                ├ ParameterName: string (required)
│                └ ParameterValue: string (required)
├[~] service aws-quicksight
│ └ resources
│    └[~]  resource AWS::QuickSight::CustomPermissions
│       └ types
│          └[~] type Capabilities
│            └ properties
│               ├[+] AmazonBedrockARSAction: string<DENY>
│               ├[+] AmazonBedrockFSAction: string<DENY>
│               ├[+] AmazonBedrockKRSAction: string<DENY>
│               ├[+] AmazonSThreeAction: string<DENY>
│               ├[+] ApproveFlowShareRequests: string<DENY>
│               ├[+] AsanaAction: string<DENY>
│               ├[+] BambooHRAction: string<DENY>
│               ├[+] BoxAgentAction: string<DENY>
│               ├[+] BuildCalculatedFieldWithQ: string<DENY>
│               ├[+] CanvaAgentAction: string<DENY>
│               ├[+] ComprehendAction: string<DENY>
│               ├[+] ComprehendMedicalAction: string<DENY>
│               ├[+] ConfluenceAction: string<DENY>
│               ├[+] CreateAndUpdateAmazonBedrockARSAction: string<DENY>
│               ├[+] CreateAndUpdateAmazonBedrockFSAction: string<DENY>
│               ├[+] CreateAndUpdateAmazonBedrockKRSAction: string<DENY>
│               ├[+] CreateAndUpdateAmazonSThreeAction: string<DENY>
│               ├[+] CreateAndUpdateAsanaAction: string<DENY>
│               ├[+] CreateAndUpdateBambooHRAction: string<DENY>
│               ├[+] CreateAndUpdateBoxAgentAction: string<DENY>
│               ├[+] CreateAndUpdateCanvaAgentAction: string<DENY>
│               ├[+] CreateAndUpdateComprehendAction: string<DENY>
│               ├[+] CreateAndUpdateComprehendMedicalAction: string<DENY>
│               ├[+] CreateAndUpdateConfluenceAction: string<DENY>
│               ├[+] CreateAndUpdateFactSetAction: string<DENY>
│               ├[+] CreateAndUpdateGenericHTTPAction: string<DENY>
│               ├[+] CreateAndUpdateGithubAction: string<DENY>
│               ├[+] CreateAndUpdateGoogleCalendarAction: string<DENY>
│               ├[+] CreateAndUpdateHubspotAction: string<DENY>
│               ├[+] CreateAndUpdateHuggingFaceAction: string<DENY>
│               ├[+] CreateAndUpdateIntercomAction: string<DENY>
│               ├[+] CreateAndUpdateJiraAction: string<DENY>
│               ├[+] CreateAndUpdateKnowledgeBases: string<DENY>
│               ├[+] CreateAndUpdateLinearAction: string<DENY>
│               ├[+] CreateAndUpdateMCPAction: string<DENY>
│               ├[+] CreateAndUpdateMondayAction: string<DENY>
│               ├[+] CreateAndUpdateMSExchangeAction: string<DENY>
│               ├[+] CreateAndUpdateMSTeamsAction: string<DENY>
│               ├[+] CreateAndUpdateNewRelicAction: string<DENY>
│               ├[+] CreateAndUpdateNotionAction: string<DENY>
│               ├[+] CreateAndUpdateOneDriveAction: string<DENY>
│               ├[+] CreateAndUpdateOpenAPIAction: string<DENY>
│               ├[+] CreateAndUpdatePagerDutyAction: string<DENY>
│               ├[+] CreateAndUpdateSalesforceAction: string<DENY>
│               ├[+] CreateAndUpdateSandPGlobalEnergyAction: string<DENY>
│               ├[+] CreateAndUpdateSandPGMIAction: string<DENY>
│               ├[+] CreateAndUpdateSAPBillOfMaterialAction: string<DENY>
│               ├[+] CreateAndUpdateSAPBusinessPartnerAction: string<DENY>
│               ├[+] CreateAndUpdateSAPMaterialStockAction: string<DENY>
│               ├[+] CreateAndUpdateSAPPhysicalInventoryAction: string<DENY>
│               ├[+] CreateAndUpdateSAPProductMasterDataAction: string<DENY>
│               ├[+] CreateAndUpdateServiceNowAction: string<DENY>
│               ├[+] CreateAndUpdateSharePointAction: string<DENY>
│               ├[+] CreateAndUpdateSlackAction: string<DENY>
│               ├[+] CreateAndUpdateSmartsheetAction: string<DENY>
│               ├[+] CreateAndUpdateTextractAction: string<DENY>
│               ├[+] CreateAndUpdateZendeskAction: string<DENY>
│               ├[+] CreateDashboardExecutiveSummaryWithQ: string<DENY>
│               ├[+] EditVisualWithQ: string<DENY>
│               ├[+] Extension: string<DENY>
│               ├[+] FactSetAction: string<DENY>
│               ├[+] GenericHTTPAction: string<DENY>
│               ├[+] GithubAction: string<DENY>
│               ├[+] GoogleCalendarAction: string<DENY>
│               ├[+] HubspotAction: string<DENY>
│               ├[+] HuggingFaceAction: string<DENY>
│               ├[+] IntercomAction: string<DENY>
│               ├[+] JiraAction: string<DENY>
│               ├[+] LinearAction: string<DENY>
│               ├[+] ManageSharedFolders: string<DENY>
│               ├[+] MCPAction: string<DENY>
│               ├[+] MondayAction: string<DENY>
│               ├[+] MSExchangeAction: string<DENY>
│               ├[+] MSTeamsAction: string<DENY>
│               ├[+] NewRelicAction: string<DENY>
│               ├[+] NotionAction: string<DENY>
│               ├[+] OneDriveAction: string<DENY>
│               ├[+] OpenAPIAction: string<DENY>
│               ├[+] PagerDutyAction: string<DENY>
│               ├[+] SalesforceAction: string<DENY>
│               ├[+] SandPGlobalEnergyAction: string<DENY>
│               ├[+] SandPGMIAction: string<DENY>
│               ├[+] SAPBillOfMaterialAction: string<DENY>
│               ├[+] SAPBusinessPartnerAction: string<DENY>
│               ├[+] SAPMaterialStockAction: string<DENY>
│               ├[+] SAPPhysicalInventoryAction: string<DENY>
│               ├[+] SAPProductMasterDataAction: string<DENY>
│               ├[+] ServiceNowAction: string<DENY>
│               ├[+] ShareAmazonBedrockARSAction: string<DENY>
│               ├[+] ShareAmazonBedrockFSAction: string<DENY>
│               ├[+] ShareAmazonBedrockKRSAction: string<DENY>
│               ├[+] ShareAmazonSThreeAction: string<DENY>
│               ├[+] ShareAsanaAction: string<DENY>
│               ├[+] ShareBambooHRAction: string<DENY>
│               ├[+] ShareBoxAgentAction: string<DENY>
│               ├[+] ShareCanvaAgentAction: string<DENY>
│               ├[+] ShareComprehendAction: string<DENY>
│               ├[+] ShareComprehendMedicalAction: string<DENY>
│               ├[+] ShareConfluenceAction: string<DENY>
│               ├[+] ShareFactSetAction: string<DENY>
│               ├[+] ShareGenericHTTPAction: string<DENY>
│               ├[+] ShareGithubAction: string<DENY>
│               ├[+] ShareGoogleCalendarAction: string<DENY>
│               ├[+] ShareHubspotAction: string<DENY>
│               ├[+] ShareHuggingFaceAction: string<DENY>
│               ├[+] ShareIntercomAction: string<DENY>
│               ├[+] ShareJiraAction: string<DENY>
│               ├[+] ShareKnowledgeBases: string<DENY>
│               ├[+] ShareLinearAction: string<DENY>
│               ├[+] ShareMCPAction: string<DENY>
│               ├[+] ShareMondayAction: string<DENY>
│               ├[+] ShareMSExchangeAction: string<DENY>
│               ├[+] ShareMSTeamsAction: string<DENY>
│               ├[+] ShareNewRelicAction: string<DENY>
│               ├[+] ShareNotionAction: string<DENY>
│               ├[+] ShareOneDriveAction: string<DENY>
│               ├[+] ShareOpenAPIAction: string<DENY>
│               ├[+] SharePagerDutyAction: string<DENY>
│               ├[+] SharePointAction: string<DENY>
│               ├[+] ShareSalesforceAction: string<DENY>
│               ├[+] ShareSandPGlobalEnergyAction: string<DENY>
│               ├[+] ShareSandPGMIAction: string<DENY>
│               ├[+] ShareSAPBillOfMaterialAction: string<DENY>
│               ├[+] ShareSAPBusinessPartnerAction: string<DENY>
│               ├[+] ShareSAPMaterialStockAction: string<DENY>
│               ├[+] ShareSAPPhysicalInventoryAction: string<DENY>
│               ├[+] ShareSAPProductMasterDataAction: string<DENY>
│               ├[+] ShareServiceNowAction: string<DENY>
│               ├[+] ShareSharePointAction: string<DENY>
│               ├[+] ShareSlackAction: string<DENY>
│               ├[+] ShareSmartsheetAction: string<DENY>
│               ├[+] ShareTextractAction: string<DENY>
│               ├[+] ShareZendeskAction: string<DENY>
│               ├[+] SlackAction: string<DENY>
│               ├[+] SmartsheetAction: string<DENY>
│               ├[+] TextractAction: string<DENY>
│               ├[+] Topic: string<DENY>
│               ├[+] UseAmazonBedrockARSAction: string<DENY>
│               ├[+] UseAmazonBedrockFSAction: string<DENY>
│               ├[+] UseAmazonBedrockKRSAction: string<DENY>
│               ├[+] UseAmazonSThreeAction: string<DENY>
│               ├[+] UseAsanaAction: string<DENY>
│               ├[+] UseBambooHRAction: string<DENY>
│               ├[+] UseBoxAgentAction: string<DENY>
│               ├[+] UseCanvaAgentAction: string<DENY>
│               ├[+] UseComprehendAction: string<DENY>
│               ├[+] UseComprehendMedicalAction: string<DENY>
│               ├[+] UseConfluenceAction: string<DENY>
│               ├[+] UseFactSetAction: string<DENY>
│               ├[+] UseGenericHTTPAction: string<DENY>
│               ├[+] UseGithubAction: string<DENY>
│               ├[+] UseGoogleCalendarAction: string<DENY>
│               ├[+] UseHubspotAction: string<DENY>
│               ├[+] UseHuggingFaceAction: string<DENY>
│               ├[+] UseIntercomAction: string<DENY>
│               ├[+] UseJiraAction: string<DENY>
│               ├[+] UseLinearAction: string<DENY>
│               ├[+] UseMCPAction: string<DENY>
│               ├[+] UseMondayAction: string<DENY>
│               ├[+] UseMSExchangeAction: string<DENY>
│               ├[+] UseMSTeamsAction: string<DENY>
│               ├[+] UseNewRelicAction: string<DENY>
│               ├[+] UseNotionAction: string<DENY>
│               ├[+] UseOneDriveAction: string<DENY>
│               ├[+] UseOpenAPIAction: string<DENY>
│               ├[+] UsePagerDutyAction: string<DENY>
│               ├[+] UseSalesforceAction: string<DENY>
│               ├[+] UseSandPGlobalEnergyAction: string<DENY>
│               ├[+] UseSandPGMIAction: string<DENY>
│               ├[+] UseSAPBillOfMaterialAction: string<DENY>
│               ├[+] UseSAPBusinessPartnerAction: string<DENY>
│               ├[+] UseSAPMaterialStockAction: string<DENY>
│               ├[+] UseSAPPhysicalInventoryAction: string<DENY>
│               ├[+] UseSAPProductMasterDataAction: string<DENY>
│               ├[+] UseServiceNowAction: string<DENY>
│               ├[+] UseSharePointAction: string<DENY>
│               ├[+] UseSlackAction: string<DENY>
│               ├[+] UseSmartsheetAction: string<DENY>
│               ├[+] UseTextractAction: string<DENY>
│               ├[+] UseZendeskAction: string<DENY>
│               └[+] ZendeskAction: string<DENY>
└[+] service aws-uxc
  ├      capitalized: UXC
  │      cloudFormationNamespace: AWS::UXC
  │      name: aws-uxc
  │      shortName: uxc
  └ resources
     └ resource AWS::UXC::AccountCustomization
       ├      name: AccountCustomization
       │      cloudFormationType: AWS::UXC::AccountCustomization
       │      documentation: Resource schema for managing AWS account-level UX customization settings, including account color, visible services, and visible regions.
       │      primaryIdentifier: ["AccountId"]
       ├ properties
       │  ├ AccountColor: string<none|pink|purple|darkBlue|lightBlue|teal|green|yellow|orange|red>
       │  ├ VisibleServices: Array<string>
       │  └ VisibleRegions: Array<string>
       └ attributes
          └ AccountId: string

CHANGES TO L1 RESOURCES: L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-bedrockagentcore: AWS::BedrockAgentCore::OnlineEvaluationConfig: ExecutionStatus attribute removed.
aws-appstream: AWS::AppStream::ImageBuilder: Name property is now immutable.
aws-eks: AWS::EKS::Capability: EKS_CAPABILITY_ACK_S3_LOGS vended log type removed.

Updates the L1 CloudFormation resource definitions with the latest changes from `@aws-cdk/aws-service-spec`
@aws-cdk-automation aws-cdk-automation added contribution/core This is a PR that came from AWS. dependencies This issue is a problem in a dependency or a pull request that updates a dependency file. pr-linter/exempt-readme The PR linter will not require README changes pr-linter/exempt-test The PR linter will not require test changes pr-linter/exempt-integ-test The PR linter will not require integ test changes labels Mar 30, 2026
@aws-cdk-automation aws-cdk-automation requested a review from a team March 30, 2026 10:46
@aws-cdk-automation aws-cdk-automation requested a review from a team March 30, 2026 10:46
@github-actions github-actions Bot added the p2 label Mar 30, 2026
@mergify
Copy link
Copy Markdown
Contributor

mergify Bot commented Apr 1, 2026

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@mergify
Copy link
Copy Markdown
Contributor

mergify Bot commented Apr 1, 2026

Merge Queue Status

  • Entered queue2026-04-01 13:24 UTC · Rule: default-squash
  • Checks passed · in-place
  • Merged2026-04-01 13:54 UTC · at 262060ef587fb99babee11f58004257a4f0be93b

This pull request spent 30 minutes 6 seconds in the queue, including 29 minutes 47 seconds running CI.

Required conditions to merge

@mergify
Copy link
Copy Markdown
Contributor

mergify Bot commented Apr 1, 2026

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@mergify mergify Bot merged commit bd2c318 into main Apr 1, 2026
19 of 20 checks passed
@mergify mergify Bot deleted the automation/spec-update branch April 1, 2026 13:55
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 1, 2026

Comments on closed issues and PRs are hard for our team to see.
If you need help, please open a new issue that references this one.

@github-actions github-actions Bot locked as resolved and limited conversation to collaborators Apr 1, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

contribution/core This is a PR that came from AWS. dependencies This issue is a problem in a dependency or a pull request that updates a dependency file. p2 pr-linter/exempt-integ-test The PR linter will not require integ test changes pr-linter/exempt-readme The PR linter will not require README changes pr-linter/exempt-test The PR linter will not require test changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants