feat: update L1 CloudFormation resource definitions

[aws-cdk-automation]

Updates the L1 CloudFormation resource definitions with the latest changes from @aws-cdk/aws-service-spec

L1 CloudFormation resource definition changes:

├[~] service aws-applicationsignals
│ └ resources
│    └[~]  resource AWS::ApplicationSignals::ServiceLevelObjective
│       └ types
│          ├[+]  type CompositeSliComponent
│          │  ├      name: CompositeSliComponent
│          │  └ properties
│          │     └ OperationName: string (required)
│          ├[+]  type CompositeSliConfig
│          │  ├      name: CompositeSliConfig
│          │  └ properties
│          │     ├ SelectionConfig: SelectionConfig (required)
│          │     └ CompositeSliComponents: Array<CompositeSliComponent>
│          ├[+]  type MetricSource
│          │  ├      documentation: Configuration for identifying the source of metrics for non-Application Signals services
│          │  │      name: MetricSource
│          │  └ properties
│          │     ├ MetricSourceKeyAttributes: Map<string, string> (required)
│          │     └ MetricSourceAttributes: Map<string, string>
│          ├[~] type RequestBasedSliMetric
│          │ └ properties
│          │    ├[+] CompositeSliConfig: CompositeSliConfig
│          │    ├[+] MetricName: string
│          │    └[+] MetricSource: MetricSource
│          ├[+]  type SelectionConfig
│          │  ├      name: SelectionConfig
│          │  └ properties
│          │     ├ Type: string<EXPLICIT|PREFIX|REGEX> (required)
│          │     └ Pattern: string
│          └[~] type SliMetric
│            └ properties
│               ├[+] CompositeSliConfig: CompositeSliConfig
│               ├[+] MetricName: string
│               └[+] MetricSource: MetricSource
├[~] service aws-awsexternalanthropic
│ └ resources
│    └[~]  resource AWS::AWSExternalAnthropic::Workspace
│       └      - arnTemplate: undefined
│              + arnTemplate: arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/${ResourceId}
├[~] service aws-bcmdataexports
│ └ resources
│    └[~]  resource AWS::BCMDataExports::Export
│       └ types
│          ├[~] type DataQuery
│          │ └ properties
│          │    └ TableConfigurations: - Map<string, Map<string, string>> (immutable)
│          │                           + Map<string, Map<string, string>>
│          └[~] type S3OutputConfigurations
│            └ properties
│               └ OutputType: - string<CUSTOM> (required)
│                             + string<CUSTOM|ATHENA|REDSHIFT> (required)
├[~] service aws-bedrockagentcore
│ └ resources
│    ├[~]  resource AWS::BedrockAgentCore::Browser
│    │  └      - arnTemplate: undefined
│    │         + arnTemplate: arn:${Partition}:bedrock-agentcore:${Region}:aws:browser/${BrowserId}
│    └[+]  resource AWS::BedrockAgentCore::Dataset
│       ├      name: Dataset
│       │      cloudFormationType: AWS::BedrockAgentCore::Dataset
│       │      documentation: Definition of AWS::BedrockAgentCore::Dataset Resource Type
│       │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│       │      primaryIdentifier: ["DatasetArn"]
│       ├ properties
│       │  ├ DatasetName: string (required, immutable)
│       │  ├ Description: string
│       │  ├ SchemaType: string<AGENTCORE_EVALUATION_PREDEFINED_V1|AGENTCORE_EVALUATION_SIMULATED_V1> (required, immutable)
│       │  ├ Source: DataSourceType (immutable)
│       │  ├ KmsKeyArn: string (immutable)
│       │  └ Tags: Array<tag>
│       ├ attributes
│       │  ├ DatasetArn: string
│       │  ├ DatasetId: string
│       │  ├ Status: string<CREATING|UPDATING|DELETING|ACTIVE|CREATE_FAILED|UPDATE_FAILED|DELETE_FAILED>
│       │  ├ ExampleCount: integer
│       │  ├ CreatedAt: string
│       │  └ UpdatedAt: string
│       └ types
│          ├ type DataSourceType
│          │ ├      documentation: Source of initial examples. Provide either inline examples or an S3 URI pointing to a JSONL file.
│          │ │      name: DataSourceType
│          │ └ properties
│          │    ├ InlineExamples: InlineExamplesSource
│          │    └ S3Source: S3Source
│          ├ type InlineExamplesSource
│          │ ├      documentation: Inline examples provided directly in the request body.
│          │ │      name: InlineExamplesSource
│          │ └ properties
│          │    └ Examples: Array<json> (required)
│          └ type S3Source
│            ├      documentation: S3 location of a JSONL file containing dataset examples.
│            │      name: S3Source
│            └ properties
│               └ S3Uri: string (required)
├[~] service aws-devopsagent
│ └ resources
│    └[~]  resource AWS::DevOpsAgent::Service
│       ├ properties
│       │  └ ServiceType: - string<dynatrace|mcpserver|mcpserversplunk|mcpservernewrelic|gitlab|servicenow|pagerduty|azureidentity|mcpserversigv4> (required, immutable)
│       │                 + string<dynatrace|mcpserver|mcpserversplunk|mcpservernewrelic|gitlab|servicenow|pagerduty|azureidentity|mcpserversigv4|mcpservergrafana> (required, immutable)
│       └ types
│          ├[~] type AdditionalServiceDetails
│          │ └ properties
│          │    └[+] MCPServerGrafana: RegisteredMCPServerGrafanaDetails
│          ├[+]  type MCPServerGrafanaAuthorizationConfig
│          │  ├      documentation: Grafana MCP server authorization configuration
│          │  │      name: MCPServerGrafanaAuthorizationConfig
│          │  └ properties
│          │     └ BearerToken: BearerTokenDetails (required)
│          ├[+]  type MCPServerGrafanaDetails
│          │  ├      documentation: Grafana MCP server configuration
│          │  │      name: MCPServerGrafanaDetails
│          │  └ properties
│          │     ├ Name: string (required)
│          │     ├ Endpoint: string (required)
│          │     ├ Description: string
│          │     └ AuthorizationConfig: MCPServerGrafanaAuthorizationConfig (required)
│          ├[+]  type RegisteredMCPServerGrafanaDetails
│          │  ├      documentation: Grafana MCP server details returned after registration
│          │  │      name: RegisteredMCPServerGrafanaDetails
│          │  └ properties
│          │     ├ Name: string
│          │     ├ Endpoint: string (required)
│          │     ├ AuthorizationMethod: string<bearer-token> (required)
│          │     └ Description: string
│          └[~] type ServiceDetails
│            └ properties
│               └[+] MCPServerGrafana: MCPServerGrafanaDetails (immutable)
├[~] service aws-directoryservice
│ └ resources
│    └[~]  resource AWS::DirectoryService::MicrosoftAD
│       └      - arnTemplate: arn:${Partition}:ds:${Region}:${Account}:${DirectoryId}
│              + arnTemplate: arn:${Partition}:ds:${Region}:${Account}:directory/${DirectoryId}
├[~] service aws-ec2
│ └ resources
│    └[~]  resource AWS::EC2::LaunchTemplate
│       └ types
│          └[~] type CpuOptions
│            └ properties
│               └ NestedVirtualization: (documentation changed)
├[~] service aws-ecs
│ └ resources
│    └[~]  resource AWS::ECS::Service
│       └ types
│          ├[~] type DeploymentLifecycleHook
│          │ └ properties
│          │    ├[+] TargetType: string<AWS_LAMBDA|PAUSE>
│          │    └[+] TimeoutConfiguration: HookTimeoutConfig
│          └[+]  type HookTimeoutConfig
│             ├      name: HookTimeoutConfig
│             └ properties
│                ├ Action: string<ROLLBACK|CONTINUE>
│                └ TimeoutInMinutes: integer
├[~] service aws-iotwireless
│ └ resources
│    └[~]  resource AWS::IoTWireless::WirelessDeviceImportTask
│       └      - arnTemplate: arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDeviceImportTask/${WirelessDeviceImportTaskId}
│              + arnTemplate: arn:${Partition}:iotwireless:${Region}:${Account}:ImportTask/${ImportTaskId}
├[~] service aws-observabilityadmin
│ └ resources
│    ├[~]  resource AWS::ObservabilityAdmin::OrganizationTelemetryRule
│    │  └ types
│    │     ├[+]  type LogDeliveryParameters
│    │     │  ├      documentation: Parameters for log delivery configuration
│    │     │  │      name: LogDeliveryParameters
│    │     │  └ properties
│    │     │     └ LogTypes: Array<string<SECURITY_FINDING_LOGS>>
│    │     ├[~] type TelemetryDestinationConfiguration
│    │     │ └ properties
│    │     │    └[+] LogDeliveryParameters: LogDeliveryParameters
│    │     └[~] type TelemetryRule
│    │       └ properties
│    │          └ ResourceType: - string<AWS::EC2::VPC|AWS::WAFv2::WebACL|AWS::CloudTrail|AWS::EKS::Cluster|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::EC2::Instance> (required)
│    │                          + string<AWS::EC2::VPC|AWS::WAFv2::WebACL|AWS::CloudTrail|AWS::EKS::Cluster|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::EC2::Instance|AWS::SecurityHub::Hub> (required)
│    └[~]  resource AWS::ObservabilityAdmin::TelemetryRule
│       └ types
│          ├[~] type LogDeliveryParameters
│          │ └ properties
│          │    └ LogTypes: - Array<string<APPLICATION_LOGS|USAGE_LOGS>>
│          │                + Array<string<APPLICATION_LOGS|USAGE_LOGS|SECURITY_FINDING_LOGS>>
│          └[~] type TelemetryRule
│            └ properties
│               └ ResourceType: - string<AWS::EC2::VPC|AWS::WAFv2::WebACL|AWS::CloudTrail|AWS::EKS::Cluster|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::EC2::Instance|AWS::BedrockAgentCore::Runtime|AWS::BedrockAgentCore::Browser|AWS::BedrockAgentCore::CodeInterpreter> (required)
│                               + string<AWS::EC2::VPC|AWS::WAFv2::WebACL|AWS::CloudTrail|AWS::EKS::Cluster|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::EC2::Instance|AWS::BedrockAgentCore::Runtime|AWS::BedrockAgentCore::Browser|AWS::BedrockAgentCore::CodeInterpreter|AWS::SecurityHub::Hub> (required)
├[~] service aws-pinpoint
│ └ resources
│    ├[~]  resource AWS::Pinpoint::EmailTemplate
│    │  └      - arnTemplate: arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/${TemplateName}/PUSH
│    │         + arnTemplate: arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/${TemplateName}/EMAIL
│    └[~]  resource AWS::Pinpoint::SmsTemplate
│       └      - arnTemplate: arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/${TemplateName}/PUSH
│              + arnTemplate: arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/${TemplateName}/SMS
├[~] service aws-ram
│ └ resources
│    └[~]  resource AWS::RAM::Permission
│       └      - arnTemplate: arn:${Partition}:ram:${Region}:${Account}:permission/${ResourcePath}
│              + arnTemplate: arn:${Partition}:ram::${Account}:permission/${ResourcePath}
├[~] service aws-timestream
│ └ resources
│    └[~]  resource AWS::Timestream::InfluxDBInstance
│       ├ properties
│       │  └[+] MaintenanceSchedule: MaintenanceSchedule
│       ├ attributes
│       │  └[+] NextMaintenanceTime: string
│       └ types
│          └[+]  type MaintenanceSchedule
│             ├      documentation: The maintenance schedule for the InfluxDB instance.
│             │      name: MaintenanceSchedule
│             └ properties
│                ├ Timezone: string (required)
│                └ PreferredMaintenanceWindow: string (required)
└[~] service aws-transfer
  └ resources
     └[~]  resource AWS::Transfer::WebApp
        └ types
           └[~] type Vpc
             └ properties
                └[+] IpAddressType: string<IPV4|DUALSTACK>

[github-actions]

⚠️ This pull request description does not follow the correct template structure.

PRs without a linked issue will receive lower priority for review and merging. Please update the description to follow the PR template and include a line like Closes #123 in the Issue section. If no existing issue matches your change, create one first.