diff --git a/samtranslator/schema/schema.json b/samtranslator/schema/schema.json index abd2b0c6b..cb97dadc8 100644 --- a/samtranslator/schema/schema.json +++ b/samtranslator/schema/schema.json @@ -4228,6 +4228,12 @@ "title": "PubliclyAccessible", "type": "boolean" }, + "ResourceShareArns": { + "items": { + "type": "string" + }, + "type": "array" + }, "SecurityGroups": { "items": { "type": "string" @@ -4236,6 +4242,9 @@ "title": "SecurityGroups", "type": "array" }, + "StorageSize": { + "type": "number" + }, "StorageType": { "markdownDescription": "The broker's storage type.", "title": "StorageType", @@ -21448,6 +21457,9 @@ "title": "AccessEndpoints", "type": "array" }, + "AgentAccessConfig": { + "$ref": "#/definitions/AWS::AppStream::Stack.AgentAccessConfig" + }, "ApplicationSettings": { "$ref": "#/definitions/AWS::AppStream::Stack.ApplicationSettings", "markdownDescription": "The persistent application settings for users of the stack. When these settings are enabled, changes that users make to applications and Windows settings are automatically saved after each session and applied to the next session.", @@ -21574,6 +21586,54 @@ ], "type": "object" }, + "AWS::AppStream::Stack.AgentAccessConfig": { + "additionalProperties": false, + "properties": { + "S3BucketArn": { + "type": "string" + }, + "ScreenImageFormat": { + "type": "string" + }, + "ScreenResolution": { + "type": "string" + }, + "ScreenshotsUploadEnabled": { + "type": "boolean" + }, + "Settings": { + "items": { + "$ref": "#/definitions/AWS::AppStream::Stack.AgentAccessSetting" + }, + "type": "array" + }, + "UserControlMode": { + "type": "string" + } + }, + "required": [ + "ScreenImageFormat", + "ScreenResolution", + "Settings" + ], + "type": "object" + }, + "AWS::AppStream::Stack.AgentAccessSetting": { + "additionalProperties": false, + "properties": { + "AgentAction": { + "type": "string" + }, + "Permission": { + "type": "string" + } + }, + "required": [ + "AgentAction", + "Permission" + ], + "type": "object" + }, "AWS::AppStream::Stack.ApplicationSettings": { "additionalProperties": false, "properties": { @@ -28024,6 +28084,121 @@ }, "type": "object" }, + "AWS::AuditManager::AssessmentFramework": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "ComplianceType": { + "type": "string" + }, + "ControlSets": { + "items": { + "$ref": "#/definitions/AWS::AuditManager::AssessmentFramework.ControlSet" + }, + "type": "array" + }, + "Description": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "ControlSets", + "Name" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::AuditManager::AssessmentFramework" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::AuditManager::AssessmentFramework.ControlSet": { + "additionalProperties": false, + "properties": { + "Controls": { + "items": { + "$ref": "#/definitions/AWS::AuditManager::AssessmentFramework.ControlSetControl" + }, + "type": "array" + }, + "Name": { + "type": "string" + } + }, + "required": [ + "Controls", + "Name" + ], + "type": "object" + }, + "AWS::AuditManager::AssessmentFramework.ControlSetControl": { + "additionalProperties": false, + "properties": { + "Id": { + "type": "string" + } + }, + "required": [ + "Id" + ], + "type": "object" + }, "AWS::AutoScaling::AutoScalingGroup": { "additionalProperties": false, "properties": { @@ -33165,6 +33340,138 @@ ], "type": "object" }, + "AWS::Backup::LegalHold": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Description": { + "type": "string" + }, + "RecoveryPointSelection": { + "$ref": "#/definitions/AWS::Backup::LegalHold.RecoveryPointSelection" + }, + "Tags": { + "items": { + "$ref": "#/definitions/AWS::Backup::LegalHold.TagsItems" + }, + "type": "array" + }, + "Title": { + "type": "string" + } + }, + "required": [ + "Description", + "RecoveryPointSelection", + "Title" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Backup::LegalHold" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Backup::LegalHold.DateRange": { + "additionalProperties": false, + "properties": { + "FromDate": { + "type": "string" + }, + "ToDate": { + "type": "string" + } + }, + "required": [ + "FromDate", + "ToDate" + ], + "type": "object" + }, + "AWS::Backup::LegalHold.RecoveryPointSelection": { + "additionalProperties": false, + "properties": { + "DateRange": { + "$ref": "#/definitions/AWS::Backup::LegalHold.DateRange" + }, + "ResourceIdentifiers": { + "items": { + "type": "string" + }, + "type": "array" + }, + "VaultNames": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, + "AWS::Backup::LegalHold.TagsItems": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, "AWS::Backup::LogicallyAirGappedBackupVault": { "additionalProperties": false, "properties": { @@ -39144,6 +39451,18 @@ ], "type": "object" }, + "AWS::Bedrock::DataSource.AudioExtractionConfiguration": { + "additionalProperties": false, + "properties": { + "AudioExtractionStatus": { + "type": "string" + } + }, + "required": [ + "AudioExtractionStatus" + ], + "type": "object" + }, "AWS::Bedrock::DataSource.BedrockDataAutomationConfiguration": { "additionalProperties": false, "properties": { @@ -39359,6 +39678,9 @@ "markdownDescription": "The configuration information to connect to Confluence as your data source.\n\n> Confluence data source connector is in preview release and is subject to change.", "title": "ConfluenceConfiguration" }, + "ManagedKnowledgeBaseConnectorConfiguration": { + "$ref": "#/definitions/AWS::Bedrock::DataSource.ManagedKnowledgeBaseConnectorConfiguration" + }, "S3Configuration": { "$ref": "#/definitions/AWS::Bedrock::DataSource.S3DataSourceConfiguration", "markdownDescription": "The configuration information to connect to Amazon S3 as your data source.", @@ -39390,6 +39712,21 @@ ], "type": "object" }, + "AWS::Bedrock::DataSource.DeletionProtectionConfiguration": { + "additionalProperties": false, + "properties": { + "DeletionProtectionStatus": { + "type": "string" + }, + "DeletionProtectionThreshold": { + "type": "number" + } + }, + "required": [ + "DeletionProtectionStatus" + ], + "type": "object" + }, "AWS::Bedrock::DataSource.EnrichmentStrategyConfiguration": { "additionalProperties": false, "properties": { @@ -39461,6 +39798,18 @@ ], "type": "object" }, + "AWS::Bedrock::DataSource.ImageExtractionConfiguration": { + "additionalProperties": false, + "properties": { + "ImageExtractionStatus": { + "type": "string" + } + }, + "required": [ + "ImageExtractionStatus" + ], + "type": "object" + }, "AWS::Bedrock::DataSource.IntermediateStorage": { "additionalProperties": false, "properties": { @@ -39475,6 +39824,36 @@ ], "type": "object" }, + "AWS::Bedrock::DataSource.ManagedKnowledgeBaseConnectorConfiguration": { + "additionalProperties": false, + "properties": { + "ConnectorParameters": { + "type": "object" + }, + "DeletionProtectionConfiguration": { + "$ref": "#/definitions/AWS::Bedrock::DataSource.DeletionProtectionConfiguration" + }, + "MediaExtractionConfiguration": { + "$ref": "#/definitions/AWS::Bedrock::DataSource.MediaExtractionConfiguration" + } + }, + "type": "object" + }, + "AWS::Bedrock::DataSource.MediaExtractionConfiguration": { + "additionalProperties": false, + "properties": { + "AudioExtractionConfiguration": { + "$ref": "#/definitions/AWS::Bedrock::DataSource.AudioExtractionConfiguration" + }, + "ImageExtractionConfiguration": { + "$ref": "#/definitions/AWS::Bedrock::DataSource.ImageExtractionConfiguration" + }, + "VideoExtractionConfiguration": { + "$ref": "#/definitions/AWS::Bedrock::DataSource.VideoExtractionConfiguration" + } + }, + "type": "object" + }, "AWS::Bedrock::DataSource.ParsingConfiguration": { "additionalProperties": false, "properties": { @@ -39875,6 +40254,18 @@ }, "type": "object" }, + "AWS::Bedrock::DataSource.VideoExtractionConfiguration": { + "additionalProperties": false, + "properties": { + "VideoExtractionStatus": { + "type": "string" + } + }, + "required": [ + "VideoExtractionStatus" + ], + "type": "object" + }, "AWS::Bedrock::DataSource.WebCrawlerConfiguration": { "additionalProperties": false, "properties": { @@ -43275,6 +43666,9 @@ "markdownDescription": "Settings for an Amazon Kendra knowledge base.", "title": "KendraKnowledgeBaseConfiguration" }, + "ManagedKnowledgeBaseConfiguration": { + "$ref": "#/definitions/AWS::Bedrock::KnowledgeBase.ManagedKnowledgeBaseConfiguration" + }, "SqlKnowledgeBaseConfiguration": { "$ref": "#/definitions/AWS::Bedrock::KnowledgeBase.SqlKnowledgeBaseConfiguration", "markdownDescription": "Specifies configurations for a knowledge base connected to an SQL database.", @@ -43296,6 +43690,33 @@ ], "type": "object" }, + "AWS::Bedrock::KnowledgeBase.ManagedKnowledgeBaseConfiguration": { + "additionalProperties": false, + "properties": { + "EmbeddingModelArn": { + "type": "string" + }, + "EmbeddingModelConfiguration": { + "$ref": "#/definitions/AWS::Bedrock::KnowledgeBase.EmbeddingModelConfiguration" + }, + "EmbeddingModelType": { + "type": "string" + }, + "ServerSideEncryptionConfiguration": { + "$ref": "#/definitions/AWS::Bedrock::KnowledgeBase.ManagedKnowledgeBaseServerSideEncryptionConfiguration" + } + }, + "type": "object" + }, + "AWS::Bedrock::KnowledgeBase.ManagedKnowledgeBaseServerSideEncryptionConfiguration": { + "additionalProperties": false, + "properties": { + "KmsKeyArn": { + "type": "string" + } + }, + "type": "object" + }, "AWS::Bedrock::KnowledgeBase.MongoDbAtlasConfiguration": { "additionalProperties": false, "properties": { @@ -44124,6 +44545,75 @@ ], "type": "object" }, + "AWS::Bedrock::KnowledgeBasePolicy": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "KnowledgeBaseId": { + "type": "string" + }, + "PolicyDocument": { + "type": "object" + } + }, + "required": [ + "KnowledgeBaseId", + "PolicyDocument" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Bedrock::KnowledgeBasePolicy" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, "AWS::Bedrock::Prompt": { "additionalProperties": false, "properties": { @@ -45348,63 +45838,6 @@ ], "type": "object" }, - "AWS::BedrockAgentCore::Browser": { - "additionalProperties": false, - "properties": { - "Condition": { - "type": "string" - }, - "DeletionPolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], - "type": "string" - }, - "DependsOn": { - "anyOf": [ - { - "pattern": "^[a-zA-Z0-9]+$", - "type": "string" - }, - { - "items": { - "pattern": "^[a-zA-Z0-9]+$", - "type": "string" - }, - "type": "array" - } - ] - }, - "Metadata": { - "type": "object" - }, - "Properties": { - "additionalProperties": false, - "properties": {}, - "type": "object" - }, - "Type": { - "enum": [ - "AWS::BedrockAgentCore::Browser" - ], - "type": "string" - }, - "UpdateReplacePolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], - "type": "string" - } - }, - "required": [ - "Type" - ], - "type": "object" - }, "AWS::BedrockAgentCore::BrowserCustom": { "additionalProperties": false, "properties": { @@ -46658,6 +47091,9 @@ "markdownDescription": "The discovery URL for the authorizer configuration.", "title": "DiscoveryUrl", "type": "string" + }, + "PrivateEndpoint": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Gateway.PrivateEndpoint" } }, "required": [ @@ -46795,6 +47231,62 @@ }, "type": "object" }, + "AWS::BedrockAgentCore::Gateway.ManagedVpcResource": { + "additionalProperties": false, + "properties": { + "EndpointIpAddressType": { + "type": "string" + }, + "RoutingDomain": { + "type": "string" + }, + "SecurityGroupIds": { + "items": { + "type": "string" + }, + "type": "array" + }, + "SubnetIds": { + "items": { + "type": "string" + }, + "type": "array" + }, + "VpcIdentifier": { + "type": "string" + } + }, + "required": [ + "EndpointIpAddressType", + "SubnetIds", + "VpcIdentifier" + ], + "type": "object" + }, + "AWS::BedrockAgentCore::Gateway.PrivateEndpoint": { + "additionalProperties": false, + "properties": { + "ManagedVpcResource": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Gateway.ManagedVpcResource" + }, + "SelfManagedLatticeResource": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Gateway.SelfManagedLatticeResource" + } + }, + "type": "object" + }, + "AWS::BedrockAgentCore::Gateway.SelfManagedLatticeResource": { + "additionalProperties": false, + "properties": { + "ResourceConfigurationIdentifier": { + "type": "string" + } + }, + "required": [ + "ResourceConfigurationIdentifier" + ], + "type": "object" + }, "AWS::BedrockAgentCore::Gateway.SessionConfiguration": { "additionalProperties": false, "properties": { @@ -47220,6 +47712,84 @@ ], "type": "object" }, + "AWS::BedrockAgentCore::GatewayTarget.InferenceConnectorSource": { + "additionalProperties": false, + "properties": { + "ConnectorId": { + "type": "string" + } + }, + "required": [ + "ConnectorId" + ], + "type": "object" + }, + "AWS::BedrockAgentCore::GatewayTarget.InferenceConnectorTargetConfiguration": { + "additionalProperties": false, + "properties": { + "Source": { + "$ref": "#/definitions/AWS::BedrockAgentCore::GatewayTarget.InferenceConnectorSource" + } + }, + "required": [ + "Source" + ], + "type": "object" + }, + "AWS::BedrockAgentCore::GatewayTarget.InferenceOperationConfiguration": { + "additionalProperties": false, + "properties": { + "Models": { + "items": { + "$ref": "#/definitions/AWS::BedrockAgentCore::GatewayTarget.ModelEntry" + }, + "type": "array" + }, + "Path": { + "type": "string" + }, + "ProviderPath": { + "type": "string" + } + }, + "required": [ + "Path" + ], + "type": "object" + }, + "AWS::BedrockAgentCore::GatewayTarget.InferenceProviderTargetConfiguration": { + "additionalProperties": false, + "properties": { + "Endpoint": { + "type": "string" + }, + "ModelMapping": { + "$ref": "#/definitions/AWS::BedrockAgentCore::GatewayTarget.ModelMapping" + }, + "Operations": { + "items": { + "$ref": "#/definitions/AWS::BedrockAgentCore::GatewayTarget.InferenceOperationConfiguration" + }, + "type": "array" + } + }, + "required": [ + "Endpoint" + ], + "type": "object" + }, + "AWS::BedrockAgentCore::GatewayTarget.InferenceTargetConfiguration": { + "additionalProperties": false, + "properties": { + "Connector": { + "$ref": "#/definitions/AWS::BedrockAgentCore::GatewayTarget.InferenceConnectorTargetConfiguration" + }, + "Provider": { + "$ref": "#/definitions/AWS::BedrockAgentCore::GatewayTarget.InferenceProviderTargetConfiguration" + } + }, + "type": "object" + }, "AWS::BedrockAgentCore::GatewayTarget.ManagedResourceDetails": { "additionalProperties": false, "properties": { @@ -47384,6 +47954,27 @@ }, "type": "object" }, + "AWS::BedrockAgentCore::GatewayTarget.ModelEntry": { + "additionalProperties": false, + "properties": { + "Model": { + "type": "string" + } + }, + "required": [ + "Model" + ], + "type": "object" + }, + "AWS::BedrockAgentCore::GatewayTarget.ModelMapping": { + "additionalProperties": false, + "properties": { + "ProviderPrefix": { + "$ref": "#/definitions/AWS::BedrockAgentCore::GatewayTarget.ProviderPrefix" + } + }, + "type": "object" + }, "AWS::BedrockAgentCore::GatewayTarget.OAuth2AuthorizationData": { "additionalProperties": false, "properties": { @@ -47477,6 +48068,18 @@ }, "type": "object" }, + "AWS::BedrockAgentCore::GatewayTarget.ProviderPrefix": { + "additionalProperties": false, + "properties": { + "Separator": { + "type": "string" + }, + "Strip": { + "type": "boolean" + } + }, + "type": "object" + }, "AWS::BedrockAgentCore::GatewayTarget.RuntimeTargetConfiguration": { "additionalProperties": false, "properties": { @@ -47587,6 +48190,9 @@ "Http": { "$ref": "#/definitions/AWS::BedrockAgentCore::GatewayTarget.HttpTargetConfiguration" }, + "Inference": { + "$ref": "#/definitions/AWS::BedrockAgentCore::GatewayTarget.InferenceTargetConfiguration" + }, "Mcp": { "$ref": "#/definitions/AWS::BedrockAgentCore::GatewayTarget.McpTargetConfiguration", "markdownDescription": "The target configuration definition for MCP.", @@ -48177,11 +48783,38 @@ ], "type": "object" }, + "AWS::BedrockAgentCore::Harness.HarnessManagedMemoryConfiguration": { + "additionalProperties": false, + "properties": { + "Arn": { + "type": "string" + }, + "EncryptionKeyArn": { + "type": "string" + }, + "EventExpiryDuration": { + "type": "number" + }, + "Strategies": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, "AWS::BedrockAgentCore::Harness.HarnessMemoryConfiguration": { "additionalProperties": false, "properties": { "AgentCoreMemoryConfiguration": { "$ref": "#/definitions/AWS::BedrockAgentCore::Harness.HarnessAgentCoreMemoryConfiguration" + }, + "Disabled": { + "type": "object" + }, + "ManagedMemoryConfiguration": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Harness.HarnessManagedMemoryConfiguration" } }, "type": "object" @@ -48265,6 +48898,9 @@ "AWS::BedrockAgentCore::Harness.HarnessSkill": { "additionalProperties": false, "properties": { + "AwsSkills": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Harness.HarnessSkillAwsSkillsSource" + }, "Git": { "$ref": "#/definitions/AWS::BedrockAgentCore::Harness.HarnessSkillGitSource" }, @@ -48277,6 +48913,18 @@ }, "type": "object" }, + "AWS::BedrockAgentCore::Harness.HarnessSkillAwsSkillsSource": { + "additionalProperties": false, + "properties": { + "Paths": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, "AWS::BedrockAgentCore::Harness.HarnessSkillGitAuth": { "additionalProperties": false, "properties": { @@ -51350,6 +51998,24 @@ }, "type": "object" }, + "AWS::BedrockAgentCore::Runtime.AllowedWorkloadConfiguration": { + "additionalProperties": false, + "properties": { + "HostingEnvironments": { + "items": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Runtime.HostingEnvironment" + }, + "type": "array" + }, + "WorkloadIdentities": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, "AWS::BedrockAgentCore::Runtime.AuthorizerConfiguration": { "additionalProperties": false, "properties": { @@ -51491,6 +52157,9 @@ }, "type": "array" }, + "AllowedWorkloadConfiguration": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Runtime.AllowedWorkloadConfiguration" + }, "CustomClaims": { "items": { "$ref": "#/definitions/AWS::BedrockAgentCore::Runtime.CustomClaimValidationType" @@ -51501,6 +52170,15 @@ "markdownDescription": "The configuration authorization.", "title": "DiscoveryUrl", "type": "string" + }, + "PrivateEndpoint": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Runtime.PrivateEndpoint" + }, + "PrivateEndpointOverrides": { + "items": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Runtime.PrivateEndpointOverride" + }, + "type": "array" } }, "required": [ @@ -51539,6 +52217,18 @@ }, "type": "object" }, + "AWS::BedrockAgentCore::Runtime.HostingEnvironment": { + "additionalProperties": false, + "properties": { + "Arn": { + "type": "string" + } + }, + "required": [ + "Arn" + ], + "type": "object" + }, "AWS::BedrockAgentCore::Runtime.LifecycleConfiguration": { "additionalProperties": false, "properties": { @@ -51555,6 +52245,47 @@ }, "type": "object" }, + "AWS::BedrockAgentCore::Runtime.ManagedVpcResource": { + "additionalProperties": false, + "properties": { + "EndpointIpAddressType": { + "type": "string" + }, + "RoutingDomain": { + "type": "string" + }, + "SecurityGroupIds": { + "items": { + "type": "string" + }, + "type": "array" + }, + "SubnetIds": { + "items": { + "type": "string" + }, + "type": "array" + }, + "Tags": { + "additionalProperties": true, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "type": "object" + }, + "VpcIdentifier": { + "type": "string" + } + }, + "required": [ + "EndpointIpAddressType", + "SubnetIds", + "VpcIdentifier" + ], + "type": "object" + }, "AWS::BedrockAgentCore::Runtime.NetworkConfiguration": { "additionalProperties": false, "properties": { @@ -51574,6 +52305,34 @@ ], "type": "object" }, + "AWS::BedrockAgentCore::Runtime.PrivateEndpoint": { + "additionalProperties": false, + "properties": { + "ManagedVpcResource": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Runtime.ManagedVpcResource" + }, + "SelfManagedLatticeResource": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Runtime.SelfManagedLatticeResource" + } + }, + "type": "object" + }, + "AWS::BedrockAgentCore::Runtime.PrivateEndpointOverride": { + "additionalProperties": false, + "properties": { + "Domain": { + "type": "string" + }, + "PrivateEndpoint": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Runtime.PrivateEndpoint" + } + }, + "required": [ + "Domain", + "PrivateEndpoint" + ], + "type": "object" + }, "AWS::BedrockAgentCore::Runtime.RequestHeaderConfiguration": { "additionalProperties": false, "properties": { @@ -51629,6 +52388,18 @@ ], "type": "object" }, + "AWS::BedrockAgentCore::Runtime.SelfManagedLatticeResource": { + "additionalProperties": false, + "properties": { + "ResourceConfigurationIdentifier": { + "type": "string" + } + }, + "required": [ + "ResourceConfigurationIdentifier" + ], + "type": "object" + }, "AWS::BedrockAgentCore::Runtime.SessionStorageConfiguration": { "additionalProperties": false, "properties": { @@ -55564,7 +56335,7 @@ }, "type": "object" }, - "AWS::CertificateManager::Certificate": { + "AWS::CertificateManager::AcmeDomainValidation": { "additionalProperties": false, "properties": { "Condition": { @@ -55599,69 +56370,32 @@ "Properties": { "additionalProperties": false, "properties": { - "CertificateAuthorityArn": { - "markdownDescription": "The Amazon Resource Name (ARN) of the private certificate authority (CA) that will be used to issue the certificate. If you do not provide an ARN and you are trying to request a private certificate, ACM will attempt to issue a public certificate. For more information about private CAs, see the [AWS Private Certificate Authority](https://docs.aws.amazon.com/privateca/latest/userguide/PcaWelcome.html) user guide. The ARN must have the following form:\n\n`arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012`", - "title": "CertificateAuthorityArn", - "type": "string" - }, - "CertificateExport": { - "markdownDescription": "You can opt out of allowing export of your certificate by specifying the `DISABLED` option. Allow export of your certificate by specifying the `ENABLED` option.\n\nIf you do not specify an export preference in a new CloudFormation template, it is the same as explicitly denying export of your certificate.", - "title": "CertificateExport", - "type": "string" - }, - "CertificateTransparencyLoggingPreference": { - "markdownDescription": "You can opt out of certificate transparency logging by specifying the `DISABLED` option. Opt in by specifying `ENABLED` . This setting doces not apply to private certificates.\n\nIf you do not specify a certificate transparency logging preference on a new CloudFormation template, or if you remove the logging preference from an existing template, this is the same as explicitly enabling the preference.\n\nChanging the certificate transparency logging preference will update the existing resource by calling `UpdateCertificateOptions` on the certificate. This action will not create a new resource.", - "title": "CertificateTransparencyLoggingPreference", + "AcmeEndpointArn": { "type": "string" }, "DomainName": { - "markdownDescription": "The fully qualified domain name (FQDN), such as www.example.com, with which you want to secure an ACM certificate. Use an asterisk (*) to create a wildcard certificate that protects several sites in the same domain. For example, `*.example.com` protects `www.example.com` , `site.example.com` , and `images.example.com.`", - "title": "DomainName", - "type": "string" - }, - "DomainValidationOptions": { - "items": { - "$ref": "#/definitions/AWS::CertificateManager::Certificate.DomainValidationOption" - }, - "markdownDescription": "Domain information that domain name registrars use to verify your identity.\n\n> In order for a AWS::CertificateManager::Certificate to be provisioned and validated in CloudFormation automatically, the `DomainName` property needs to be identical to one of the `DomainName` property supplied in DomainValidationOptions, if the ValidationMethod is **DNS**. Failing to keep them like-for-like will result in failure to create the domain validation records in Route53.", - "title": "DomainValidationOptions", - "type": "array" - }, - "KeyAlgorithm": { - "markdownDescription": "Specifies the algorithm of the public and private key pair that your certificate uses to encrypt data. RSA is the default key algorithm for ACM certificates. Elliptic Curve Digital Signature Algorithm (ECDSA) keys are smaller, offering security comparable to RSA keys but with greater computing efficiency. However, ECDSA is not supported by all network clients. Some AWS services may require RSA keys, or only support ECDSA keys of a particular size, while others allow the use of either RSA and ECDSA keys to ensure that compatibility is not broken. Check the requirements for the AWS service where you plan to deploy your certificate. For more information about selecting an algorithm, see [Key algorithms](https://docs.aws.amazon.com/acm/latest/userguide/acm-certificate-characteristics.html#algorithms-term) .\n\n> Algorithms supported for an ACM certificate request include:\n> \n> - `RSA_2048`\n> - `EC_prime256v1`\n> - `EC_secp384r1`\n> \n> Other listed algorithms are for imported certificates only. > When you request a private PKI certificate signed by a CA from AWS Private CA, the specified signing algorithm family (RSA or ECDSA) must match the algorithm family of the CA's secret key. \n\nDefault: RSA_2048", - "title": "KeyAlgorithm", "type": "string" }, - "SubjectAlternativeNames": { - "items": { - "type": "string" - }, - "markdownDescription": "Additional FQDNs to be included in the Subject Alternative Name extension of the ACM certificate. For example, you can add www.example.net to a certificate for which the `DomainName` field is www.example.com if users can reach your site by using either name.", - "title": "SubjectAlternativeNames", - "type": "array" + "PrevalidationOptions": { + "$ref": "#/definitions/AWS::CertificateManager::AcmeDomainValidation.PrevalidationOptions" }, "Tags": { "items": { - "$ref": "#/definitions/Tag" + "$ref": "#/definitions/AWS::CertificateManager::AcmeDomainValidation.TagsItems" }, - "markdownDescription": "Key-value pairs that can identify the certificate.", - "title": "Tags", "type": "array" - }, - "ValidationMethod": { - "markdownDescription": "The method you want to use to validate that you own or control the domain associated with a public certificate. You can [validate with DNS](https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-dns.html) or [validate with email](https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-email.html) . We recommend that you use DNS validation.\n\nIf not specified, this property defaults to email validation.", - "title": "ValidationMethod", - "type": "string" } }, "required": [ - "DomainName" + "AcmeEndpointArn", + "DomainName", + "PrevalidationOptions" ], "type": "object" }, "Type": { "enum": [ - "AWS::CertificateManager::Certificate" + "AWS::CertificateManager::AcmeDomainValidation" ], "type": "string" }, @@ -55680,31 +56414,433 @@ ], "type": "object" }, - "AWS::CertificateManager::Certificate.DomainValidationOption": { + "AWS::CertificateManager::AcmeDomainValidation.DnsPrevalidationOptions": { "additionalProperties": false, "properties": { - "DomainName": { - "markdownDescription": "A fully qualified domain name (FQDN) in the certificate request.", - "title": "DomainName", - "type": "string" + "DomainScope": { + "$ref": "#/definitions/AWS::CertificateManager::AcmeDomainValidation.DomainScope" }, "HostedZoneId": { - "markdownDescription": "The `HostedZoneId` option, which is available if you are using Route 53 as your domain registrar, causes ACM to add your CNAME to the domain record. Your list of `DomainValidationOptions` must contain one and only one of the domain-validation options, and the `HostedZoneId` can be used only when `DNS` is specified as your validation method.\n\nUse the Route 53 `ListHostedZones` API to discover IDs for available hosted zones.\n\nThis option is required for publicly trusted certificates.\n\n> The `ListHostedZones` API returns IDs in the format \"/hostedzone/Z111111QQQQQQQ\", but CloudFormation requires the IDs to be in the format \"Z111111QQQQQQQ\". \n\nWhen you change your `DomainValidationOptions` , a new resource is created.", - "title": "HostedZoneId", + "type": "string" + } + }, + "type": "object" + }, + "AWS::CertificateManager::AcmeDomainValidation.DomainScope": { + "additionalProperties": false, + "properties": { + "ExactDomain": { "type": "string" }, - "ValidationDomain": { - "markdownDescription": "The domain name to which you want ACM to send validation emails. This domain name is the suffix of the email addresses that you want ACM to use. This must be the same as the `DomainName` value or a superdomain of the `DomainName` value. For example, if you request a certificate for `testing.example.com` , you can specify `example.com` as this value. In that case, ACM sends domain validation emails to the following five addresses:\n\n- admin@example.com\n- administrator@example.com\n- hostmaster@example.com\n- postmaster@example.com\n- webmaster@example.com", - "title": "ValidationDomain", + "Subdomains": { + "type": "string" + }, + "Wildcards": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::CertificateManager::AcmeDomainValidation.PrevalidationOptions": { + "additionalProperties": false, + "properties": { + "DnsPrevalidation": { + "$ref": "#/definitions/AWS::CertificateManager::AcmeDomainValidation.DnsPrevalidationOptions" + } + }, + "required": [ + "DnsPrevalidation" + ], + "type": "object" + }, + "AWS::CertificateManager::AcmeDomainValidation.TagsItems": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { "type": "string" } }, "required": [ - "DomainName" + "Key", + "Value" ], "type": "object" }, - "AWS::Chatbot::CustomAction": { + "AWS::CertificateManager::AcmeEndpoint": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "AuthorizationBehavior": { + "type": "string" + }, + "CertificateAuthority": { + "$ref": "#/definitions/AWS::CertificateManager::AcmeEndpoint.CertificateAuthority" + }, + "CertificateTags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + }, + "Contact": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/AWS::CertificateManager::AcmeEndpoint.TagsItems" + }, + "type": "array" + } + }, + "required": [ + "AuthorizationBehavior", + "CertificateAuthority" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::CertificateManager::AcmeEndpoint" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::CertificateManager::AcmeEndpoint.CertificateAuthority": { + "additionalProperties": false, + "properties": { + "PublicCertificateAuthority": { + "$ref": "#/definitions/AWS::CertificateManager::AcmeEndpoint.PublicCertificateAuthority" + } + }, + "required": [ + "PublicCertificateAuthority" + ], + "type": "object" + }, + "AWS::CertificateManager::AcmeEndpoint.PublicCertificateAuthority": { + "additionalProperties": false, + "properties": { + "AllowedKeyAlgorithms": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, + "AWS::CertificateManager::AcmeEndpoint.TagsItems": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, + "AWS::CertificateManager::AcmeExternalAccountBinding": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "AcmeEndpointArn": { + "type": "string" + }, + "Expiration": { + "$ref": "#/definitions/AWS::CertificateManager::AcmeExternalAccountBinding.Expiration" + }, + "RoleArn": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/AWS::CertificateManager::AcmeExternalAccountBinding.TagsItems" + }, + "type": "array" + } + }, + "required": [ + "AcmeEndpointArn", + "RoleArn" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::CertificateManager::AcmeExternalAccountBinding" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::CertificateManager::AcmeExternalAccountBinding.Expiration": { + "additionalProperties": false, + "properties": { + "Type": { + "type": "string" + }, + "Value": { + "type": "number" + } + }, + "required": [ + "Type", + "Value" + ], + "type": "object" + }, + "AWS::CertificateManager::AcmeExternalAccountBinding.TagsItems": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, + "AWS::CertificateManager::Certificate": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "CertificateAuthorityArn": { + "markdownDescription": "The Amazon Resource Name (ARN) of the private certificate authority (CA) that will be used to issue the certificate. If you do not provide an ARN and you are trying to request a private certificate, ACM will attempt to issue a public certificate. For more information about private CAs, see the [AWS Private Certificate Authority](https://docs.aws.amazon.com/privateca/latest/userguide/PcaWelcome.html) user guide. The ARN must have the following form:\n\n`arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012`", + "title": "CertificateAuthorityArn", + "type": "string" + }, + "CertificateExport": { + "markdownDescription": "You can opt out of allowing export of your certificate by specifying the `DISABLED` option. Allow export of your certificate by specifying the `ENABLED` option.\n\nIf you do not specify an export preference in a new CloudFormation template, it is the same as explicitly denying export of your certificate.", + "title": "CertificateExport", + "type": "string" + }, + "CertificateTransparencyLoggingPreference": { + "markdownDescription": "You can opt out of certificate transparency logging by specifying the `DISABLED` option. Opt in by specifying `ENABLED` . This setting doces not apply to private certificates.\n\nIf you do not specify a certificate transparency logging preference on a new CloudFormation template, or if you remove the logging preference from an existing template, this is the same as explicitly enabling the preference.\n\nChanging the certificate transparency logging preference will update the existing resource by calling `UpdateCertificateOptions` on the certificate. This action will not create a new resource.", + "title": "CertificateTransparencyLoggingPreference", + "type": "string" + }, + "DomainName": { + "markdownDescription": "The fully qualified domain name (FQDN), such as www.example.com, with which you want to secure an ACM certificate. Use an asterisk (*) to create a wildcard certificate that protects several sites in the same domain. For example, `*.example.com` protects `www.example.com` , `site.example.com` , and `images.example.com.`", + "title": "DomainName", + "type": "string" + }, + "DomainValidationOptions": { + "items": { + "$ref": "#/definitions/AWS::CertificateManager::Certificate.DomainValidationOption" + }, + "markdownDescription": "Domain information that domain name registrars use to verify your identity.\n\n> In order for a AWS::CertificateManager::Certificate to be provisioned and validated in CloudFormation automatically, the `DomainName` property needs to be identical to one of the `DomainName` property supplied in DomainValidationOptions, if the ValidationMethod is **DNS**. Failing to keep them like-for-like will result in failure to create the domain validation records in Route53.", + "title": "DomainValidationOptions", + "type": "array" + }, + "KeyAlgorithm": { + "markdownDescription": "Specifies the algorithm of the public and private key pair that your certificate uses to encrypt data. RSA is the default key algorithm for ACM certificates. Elliptic Curve Digital Signature Algorithm (ECDSA) keys are smaller, offering security comparable to RSA keys but with greater computing efficiency. However, ECDSA is not supported by all network clients. Some AWS services may require RSA keys, or only support ECDSA keys of a particular size, while others allow the use of either RSA and ECDSA keys to ensure that compatibility is not broken. Check the requirements for the AWS service where you plan to deploy your certificate. For more information about selecting an algorithm, see [Key algorithms](https://docs.aws.amazon.com/acm/latest/userguide/acm-certificate-characteristics.html#algorithms-term) .\n\n> Algorithms supported for an ACM certificate request include:\n> \n> - `RSA_2048`\n> - `EC_prime256v1`\n> - `EC_secp384r1`\n> \n> Other listed algorithms are for imported certificates only. > When you request a private PKI certificate signed by a CA from AWS Private CA, the specified signing algorithm family (RSA or ECDSA) must match the algorithm family of the CA's secret key. \n\nDefault: RSA_2048", + "title": "KeyAlgorithm", + "type": "string" + }, + "SubjectAlternativeNames": { + "items": { + "type": "string" + }, + "markdownDescription": "Additional FQDNs to be included in the Subject Alternative Name extension of the ACM certificate. For example, you can add www.example.net to a certificate for which the `DomainName` field is www.example.com if users can reach your site by using either name.", + "title": "SubjectAlternativeNames", + "type": "array" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "Key-value pairs that can identify the certificate.", + "title": "Tags", + "type": "array" + }, + "ValidationMethod": { + "markdownDescription": "The method you want to use to validate that you own or control the domain associated with a public certificate. You can [validate with DNS](https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-dns.html) or [validate with email](https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-email.html) . We recommend that you use DNS validation.\n\nIf not specified, this property defaults to email validation.", + "title": "ValidationMethod", + "type": "string" + } + }, + "required": [ + "DomainName" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::CertificateManager::Certificate" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::CertificateManager::Certificate.DomainValidationOption": { + "additionalProperties": false, + "properties": { + "DomainName": { + "markdownDescription": "A fully qualified domain name (FQDN) in the certificate request.", + "title": "DomainName", + "type": "string" + }, + "HostedZoneId": { + "markdownDescription": "The `HostedZoneId` option, which is available if you are using Route 53 as your domain registrar, causes ACM to add your CNAME to the domain record. Your list of `DomainValidationOptions` must contain one and only one of the domain-validation options, and the `HostedZoneId` can be used only when `DNS` is specified as your validation method.\n\nUse the Route 53 `ListHostedZones` API to discover IDs for available hosted zones.\n\nThis option is required for publicly trusted certificates.\n\n> The `ListHostedZones` API returns IDs in the format \"/hostedzone/Z111111QQQQQQQ\", but CloudFormation requires the IDs to be in the format \"Z111111QQQQQQQ\". \n\nWhen you change your `DomainValidationOptions` , a new resource is created.", + "title": "HostedZoneId", + "type": "string" + }, + "ValidationDomain": { + "markdownDescription": "The domain name to which you want ACM to send validation emails. This domain name is the suffix of the email addresses that you want ACM to use. This must be the same as the `DomainName` value or a superdomain of the `DomainName` value. For example, if you request a certificate for `testing.example.com` , you can specify `example.com` as this value. In that case, ACM sends domain validation emails to the following five addresses:\n\n- admin@example.com\n- administrator@example.com\n- hostmaster@example.com\n- postmaster@example.com\n- webmaster@example.com", + "title": "ValidationDomain", + "type": "string" + } + }, + "type": "object" + }, + "AWS::Chatbot::CustomAction": { "additionalProperties": false, "properties": { "Condition": { @@ -56345,6 +57481,106 @@ ], "type": "object" }, + "AWS::Chime::AppInstanceUser": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "AppInstanceArn": { + "type": "string" + }, + "AppInstanceUserId": { + "type": "string" + }, + "ExpirationSettings": { + "$ref": "#/definitions/AWS::Chime::AppInstanceUser.ExpirationSettings" + }, + "Metadata": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "AppInstanceArn", + "AppInstanceUserId" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Chime::AppInstanceUser" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Chime::AppInstanceUser.ExpirationSettings": { + "additionalProperties": false, + "properties": { + "ExpirationCriterion": { + "type": "string" + }, + "ExpirationDays": { + "type": "number" + } + }, + "required": [ + "ExpirationCriterion", + "ExpirationDays" + ], + "type": "object" + }, "AWS::CleanRooms::AnalysisTemplate": { "additionalProperties": false, "properties": { @@ -58192,6 +59428,224 @@ }, "type": "object" }, + "AWS::CleanRooms::IntermediateTable": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "AnalysisRules": { + "items": { + "$ref": "#/definitions/AWS::CleanRooms::IntermediateTable.IntermediateTableAnalysisRule" + }, + "type": "array" + }, + "Description": { + "type": "string" + }, + "KmsKeyArn": { + "type": "string" + }, + "MembershipIdentifier": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "PopulationAnalysisConfiguration": { + "$ref": "#/definitions/AWS::CleanRooms::IntermediateTable.PopulationAnalysisConfiguration" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "MembershipIdentifier", + "Name", + "PopulationAnalysisConfiguration" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::CleanRooms::IntermediateTable" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::CleanRooms::IntermediateTable.DifferentialPrivacy": { + "additionalProperties": false, + "properties": { + "Columns": { + "items": { + "$ref": "#/definitions/AWS::CleanRooms::IntermediateTable.DifferentialPrivacyColumn" + }, + "type": "array" + } + }, + "required": [ + "Columns" + ], + "type": "object" + }, + "AWS::CleanRooms::IntermediateTable.DifferentialPrivacyColumn": { + "additionalProperties": false, + "properties": { + "Name": { + "type": "string" + } + }, + "required": [ + "Name" + ], + "type": "object" + }, + "AWS::CleanRooms::IntermediateTable.IntermediateTableAnalysisRule": { + "additionalProperties": false, + "properties": { + "Policy": { + "$ref": "#/definitions/AWS::CleanRooms::IntermediateTable.IntermediateTableAnalysisRulePolicy" + }, + "Type": { + "type": "string" + } + }, + "required": [ + "Policy", + "Type" + ], + "type": "object" + }, + "AWS::CleanRooms::IntermediateTable.IntermediateTableAnalysisRuleCustom": { + "additionalProperties": false, + "properties": { + "AdditionalAnalyses": { + "type": "string" + }, + "AllowedAnalyses": { + "items": { + "type": "string" + }, + "type": "array" + }, + "AllowedAnalysisProviders": { + "items": { + "type": "string" + }, + "type": "array" + }, + "AllowedResultReceivers": { + "items": { + "type": "string" + }, + "type": "array" + }, + "DifferentialPrivacy": { + "$ref": "#/definitions/AWS::CleanRooms::IntermediateTable.DifferentialPrivacy" + }, + "DisallowedOutputColumns": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "AllowedAnalyses" + ], + "type": "object" + }, + "AWS::CleanRooms::IntermediateTable.IntermediateTableAnalysisRulePolicy": { + "additionalProperties": false, + "properties": { + "V1": { + "$ref": "#/definitions/AWS::CleanRooms::IntermediateTable.IntermediateTableAnalysisRulePolicyV1" + } + }, + "required": [ + "V1" + ], + "type": "object" + }, + "AWS::CleanRooms::IntermediateTable.IntermediateTableAnalysisRulePolicyV1": { + "additionalProperties": false, + "properties": { + "Custom": { + "$ref": "#/definitions/AWS::CleanRooms::IntermediateTable.IntermediateTableAnalysisRuleCustom" + } + }, + "required": [ + "Custom" + ], + "type": "object" + }, + "AWS::CleanRooms::IntermediateTable.PopulationAnalysisConfiguration": { + "additionalProperties": false, + "properties": { + "SqlParameters": { + "$ref": "#/definitions/AWS::CleanRooms::IntermediateTable.PopulationAnalysisSqlParameters" + } + }, + "type": "object" + }, + "AWS::CleanRooms::IntermediateTable.PopulationAnalysisSqlParameters": { + "additionalProperties": false, + "properties": { + "AnalysisTemplateArn": { + "type": "string" + }, + "QueryString": { + "type": "string" + } + }, + "type": "object" + }, "AWS::CleanRooms::Membership": { "additionalProperties": false, "properties": { @@ -59511,6 +60965,104 @@ ], "type": "object" }, + "AWS::CloudFormation::GeneratedTemplate": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "GeneratedTemplateName": { + "type": "string" + }, + "TemplateConfiguration": { + "$ref": "#/definitions/AWS::CloudFormation::GeneratedTemplate.TemplateConfiguration" + } + }, + "required": [ + "GeneratedTemplateName" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::CloudFormation::GeneratedTemplate" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::CloudFormation::GeneratedTemplate.TemplateConfiguration": { + "additionalProperties": false, + "properties": { + "DeletionPolicy": { + "type": "string" + }, + "UpdateReplacePolicy": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::CloudFormation::GeneratedTemplate.TemplateProgress": { + "additionalProperties": false, + "properties": { + "ResourcesFailed": { + "type": "number" + }, + "ResourcesPending": { + "type": "number" + }, + "ResourcesProcessing": { + "type": "number" + }, + "ResourcesSucceeded": { + "type": "number" + } + }, + "type": "object" + }, "AWS::CloudFormation::GuardHook": { "additionalProperties": false, "properties": { @@ -60073,6 +61625,9 @@ "title": "Alias", "type": "string" }, + "AutoUpdate": { + "type": "boolean" + }, "ExecutionRole": { "markdownDescription": "The IAM role that the Hook assumes to invoke your Lambda function.", "title": "ExecutionRole", @@ -60093,6 +61648,9 @@ "title": "LambdaFunction", "type": "string" }, + "LoggingConfig": { + "$ref": "#/definitions/AWS::CloudFormation::LambdaHook.LoggingConfig" + }, "StackFilters": { "$ref": "#/definitions/AWS::CloudFormation::LambdaHook.StackFilters", "markdownDescription": "Specifies the stack level filters for the Hook.\n\nExample stack level filter in JSON:\n\n`\"StackFilters\": {\"FilteringCriteria\": \"ALL\", \"StackNames\": {\"Exclude\": [ \"stack-1\", \"stack-2\"]}}` \n\nExample stack level filter in YAML:\n\n`StackFilters: FilteringCriteria: ALL StackNames: Exclude: - stack-1 - stack-2`", @@ -60163,6 +61721,22 @@ ], "type": "object" }, + "AWS::CloudFormation::LambdaHook.LoggingConfig": { + "additionalProperties": false, + "properties": { + "LogGroupName": { + "type": "string" + }, + "LogRoleArn": { + "type": "string" + } + }, + "required": [ + "LogGroupName", + "LogRoleArn" + ], + "type": "object" + }, "AWS::CloudFormation::LambdaHook.StackFilters": { "additionalProperties": false, "properties": { @@ -65807,6 +67381,9 @@ "title": "HTTPSPort", "type": "number" }, + "IpAddressType": { + "type": "string" + }, "Name": { "markdownDescription": "The name of the CloudFront VPC origin endpoint configuration.", "title": "Name", @@ -66875,6 +68452,9 @@ "title": "EvaluationPeriods", "type": "number" }, + "EvaluationWindow": { + "$ref": "#/definitions/AWS::CloudWatch::Alarm.EvaluationWindow" + }, "ExtendedStatistic": { "markdownDescription": "The percentile statistic for the metric associated with the alarm. Specify a value between p0.0 and p100.\n\nFor an alarm based on a metric, you must specify either `Statistic` or `ExtendedStatistic` but not both.\n\nFor an alarm based on a math expression, you can't specify `ExtendedStatistic` . Instead, you use `Metrics` .", "title": "ExtendedStatistic", @@ -67019,6 +68599,18 @@ }, "type": "object" }, + "AWS::CloudWatch::Alarm.EvaluationWindow": { + "additionalProperties": false, + "properties": { + "SlidingWindow": { + "type": "object" + }, + "WallClockWindow": { + "$ref": "#/definitions/AWS::CloudWatch::Alarm.WallClockWindow" + } + }, + "type": "object" + }, "AWS::CloudWatch::Alarm.Metric": { "additionalProperties": false, "properties": { @@ -67118,6 +68710,15 @@ ], "type": "object" }, + "AWS::CloudWatch::Alarm.WallClockWindow": { + "additionalProperties": false, + "properties": { + "Timezone": { + "type": "string" + } + }, + "type": "object" + }, "AWS::CloudWatch::AlarmMuteRule": { "additionalProperties": false, "properties": { @@ -67840,9 +69441,12 @@ "type": "string" }, "Tags": { - "$ref": "#/definitions/AWS::CloudWatch::InsightRule.Tags", + "items": { + "$ref": "#/definitions/Tag" + }, "markdownDescription": "A list of key-value pairs to associate with the Contributor Insights rule. You can associate as many as 50 tags with a rule.\n\nTags can help you organize and categorize your resources. For more information, see [Tagging Your Amazon CloudWatch Resources](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Tagging.html) .\n\nTo be able to associate tags with a rule, you must have the `cloudwatch:TagResource` permission in addition to the `cloudwatch:PutInsightRule` permission.", - "title": "Tags" + "title": "Tags", + "type": "array" } }, "required": [ @@ -67873,11 +69477,6 @@ ], "type": "object" }, - "AWS::CloudWatch::InsightRule.Tags": { - "additionalProperties": false, - "properties": {}, - "type": "object" - }, "AWS::CloudWatch::LogAlarm": { "additionalProperties": false, "properties": { @@ -68015,7 +69614,8 @@ } }, "required": [ - "ScheduleExpression" + "ScheduleExpression", + "StartTimeOffset" ], "type": "object" }, @@ -68039,11 +69639,16 @@ }, "ScheduledQueryRoleARN": { "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" } }, "required": [ "AggregationExpression", - "LogGroupIdentifiers", "QueryString", "ScheduleConfiguration", "ScheduledQueryRoleARN" @@ -69274,6 +70879,9 @@ "Fleet": { "$ref": "#/definitions/AWS::CodeBuild::Project.ProjectFleet" }, + "HostKernel": { + "type": "string" + }, "Image": { "markdownDescription": "The image tag or image digest that identifies the Docker image to use for this build project. Use the following formats:\n\n- For an image tag: `/:` . For example, in the Docker repository that CodeBuild uses to manage its Docker images, this would be `aws/codebuild/standard:4.0` .\n- For an image digest: `/@` . For example, to specify an image with the digest \"sha256:cbbf2f9a99b47fc460d422812b6a5adff7dfee951d8fa2e4a98caa0382cfbdbf,\" use `/@sha256:cbbf2f9a99b47fc460d422812b6a5adff7dfee951d8fa2e4a98caa0382cfbdbf` .\n\nFor more information, see [Docker images provided by CodeBuild](https://docs.aws.amazon.com//codebuild/latest/userguide/build-env-ref-available.html) in the *AWS CodeBuild user guide* .", "title": "Image", @@ -74071,6 +75679,12 @@ "title": "EnabledMfas", "type": "array" }, + "IssuerConfiguration": { + "$ref": "#/definitions/AWS::Cognito::UserPool.IssuerConfiguration" + }, + "KeyConfiguration": { + "$ref": "#/definitions/AWS::Cognito::UserPool.KeyConfiguration" + }, "LambdaConfig": { "$ref": "#/definitions/AWS::Cognito::UserPool.LambdaConfig", "markdownDescription": "A collection of user pool Lambda triggers. Amazon Cognito invokes triggers at several possible stages of authentication operations. Triggers can modify the outcome of the operations that invoked them.", @@ -74319,6 +75933,36 @@ }, "type": "object" }, + "AWS::Cognito::UserPool.EumsSmsConfiguration": { + "additionalProperties": false, + "properties": { + "CallerArn": { + "type": "string" + }, + "ConfigurationSetName": { + "type": "string" + }, + "ExternalId": { + "type": "string" + }, + "InEntityId": { + "type": "string" + }, + "InTemplateId": { + "type": "string" + }, + "OriginationIdentity": { + "type": "string" + }, + "Region": { + "type": "string" + } + }, + "required": [ + "CallerArn" + ], + "type": "object" + }, "AWS::Cognito::UserPool.InboundFederation": { "additionalProperties": false, "properties": { @@ -74352,6 +75996,27 @@ }, "type": "object" }, + "AWS::Cognito::UserPool.IssuerConfiguration": { + "additionalProperties": false, + "properties": { + "Type": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::Cognito::UserPool.KeyConfiguration": { + "additionalProperties": false, + "properties": { + "KeyType": { + "type": "string" + }, + "KmsKeyArn": { + "type": "string" + } + }, + "type": "object" + }, "AWS::Cognito::UserPool.LambdaConfig": { "additionalProperties": false, "properties": { @@ -74594,6 +76259,9 @@ "AWS::Cognito::UserPool.SmsConfiguration": { "additionalProperties": false, "properties": { + "EumsSms": { + "$ref": "#/definitions/AWS::Cognito::UserPool.EumsSmsConfiguration" + }, "ExternalId": { "markdownDescription": "The external ID provides additional security for your IAM role. You can use an `ExternalId` with the IAM role that you use with Amazon SNS to send SMS messages for your user pool. If you provide an `ExternalId` , your Amazon Cognito user pool includes it in the request to assume your IAM role. You can configure the role trust policy to require that Amazon Cognito, and any principal, provide the `ExternalID` . If you use the Amazon Cognito Management Console to create a role for SMS multi-factor authentication (MFA), Amazon Cognito creates a role with the required permissions and a trust policy that demonstrates use of the `ExternalId` .\n\nFor more information about the `ExternalId` of a role, see [How to use an external ID when granting access to your AWS resources to a third party](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html) .", "title": "ExternalId", @@ -75027,6 +76695,9 @@ "title": "ManagedLoginVersion", "type": "number" }, + "Routing": { + "$ref": "#/definitions/AWS::Cognito::UserPoolDomain.RoutingType" + }, "UserPoolId": { "markdownDescription": "The ID of the user pool that is associated with the domain you're updating.", "title": "UserPoolId", @@ -75067,208 +76738,568 @@ "markdownDescription": "The Amazon Resource Name (ARN) of an Certificate Manager SSL certificate. You use this certificate for the subdomain of your custom domain.", "title": "CertificateArn", "type": "string" + }, + "SecurityPolicy": { + "type": "string" } }, "type": "object" }, - "AWS::Cognito::UserPoolGroup": { + "AWS::Cognito::UserPoolDomain.FailoverType": { "additionalProperties": false, "properties": { - "Condition": { + "PrimaryRoute53HealthCheckId": { "type": "string" }, - "DeletionPolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], - "type": "string" - }, - "DependsOn": { - "anyOf": [ - { - "pattern": "^[a-zA-Z0-9]+$", - "type": "string" - }, - { - "items": { - "pattern": "^[a-zA-Z0-9]+$", - "type": "string" - }, - "type": "array" - } - ] - }, - "Metadata": { - "type": "object" - }, - "Properties": { - "additionalProperties": false, - "properties": { - "Description": { - "markdownDescription": "A description of the group that you're creating.", - "title": "Description", - "type": "string" - }, - "GroupName": { - "markdownDescription": "A name for the group. This name must be unique in your user pool.", - "title": "GroupName", - "type": "string" - }, - "Precedence": { - "markdownDescription": "A non-negative integer value that specifies the precedence of this group relative to the other groups that a user can belong to in the user pool. Zero is the highest precedence value. Groups with lower `Precedence` values take precedence over groups with higher or null `Precedence` values. If a user belongs to two or more groups, it is the group with the lowest precedence value whose role ARN is given in the user's tokens for the `cognito:roles` and `cognito:preferred_role` claims.\n\nTwo groups can have the same `Precedence` value. If this happens, neither group takes precedence over the other. If two groups with the same `Precedence` have the same role ARN, that role is used in the `cognito:preferred_role` claim in tokens for users in each group. If the two groups have different role ARNs, the `cognito:preferred_role` claim isn't set in users' tokens.\n\nThe default `Precedence` value is null. The maximum `Precedence` value is `2^31-1` .", - "title": "Precedence", - "type": "number" - }, - "RoleArn": { - "markdownDescription": "The Amazon Resource Name (ARN) for the IAM role that you want to associate with the group. A group role primarily declares a preferred role for the credentials that you get from an identity pool. Amazon Cognito ID tokens have a `cognito:preferred_role` claim that presents the highest-precedence group that a user belongs to. Both ID and access tokens also contain a `cognito:groups` claim that list all the groups that a user is a member of.", - "title": "RoleArn", - "type": "string" - }, - "UserPoolId": { - "markdownDescription": "The ID of the user pool where you want to create a user group.", - "title": "UserPoolId", - "type": "string" - } - }, - "required": [ - "UserPoolId" - ], - "type": "object" - }, - "Type": { - "enum": [ - "AWS::Cognito::UserPoolGroup" - ], - "type": "string" - }, - "UpdateReplacePolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], + "SecondaryRegion": { "type": "string" } }, "required": [ - "Type", - "Properties" + "PrimaryRoute53HealthCheckId", + "SecondaryRegion" ], "type": "object" }, - "AWS::Cognito::UserPoolIdentityProvider": { + "AWS::Cognito::UserPoolDomain.RoutingType": { "additionalProperties": false, "properties": { - "Condition": { - "type": "string" - }, - "DeletionPolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], - "type": "string" - }, - "DependsOn": { - "anyOf": [ - { - "pattern": "^[a-zA-Z0-9]+$", - "type": "string" - }, - { - "items": { - "pattern": "^[a-zA-Z0-9]+$", - "type": "string" - }, - "type": "array" - } - ] - }, - "Metadata": { - "type": "object" - }, - "Properties": { - "additionalProperties": false, - "properties": { - "AttributeMapping": { - "additionalProperties": true, - "markdownDescription": "A mapping of IdP attributes to standard and custom user pool attributes. Specify a user pool attribute as the key of the key-value pair, and the IdP attribute claim name as the value.", - "patternProperties": { - "^[a-zA-Z0-9]+$": { - "type": "string" - } - }, - "title": "AttributeMapping", - "type": "object" - }, - "IdpIdentifiers": { - "items": { - "type": "string" - }, - "markdownDescription": "An array of IdP identifiers, for example `\"IdPIdentifiers\": [ \"MyIdP\", \"MyIdP2\" ]` . Identifiers are friendly names that you can pass in the `idp_identifier` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP. Identifiers in a domain format also enable the use of [email-address matching with SAML providers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managing-saml-idp-naming.html) .", - "title": "IdpIdentifiers", - "type": "array" - }, - "ProviderDetails": { - "additionalProperties": true, - "markdownDescription": "The scopes, URLs, and identifiers for your external identity provider. The following\nexamples describe the provider detail keys for each IdP type. These values and their\nschema are subject to change. Social IdP `authorize_scopes` values must match\nthe values listed here.\n\n- **OpenID Connect (OIDC)** - Amazon Cognito accepts the following elements when it can't discover endpoint URLs from `oidc_issuer` : `attributes_url` , `authorize_url` , `jwks_uri` , `token_url` .\n\nCreate or update request: `\"ProviderDetails\": { \"attributes_request_method\": \"GET\", \"attributes_url\": \"https://auth.example.com/userInfo\", \"authorize_scopes\": \"openid profile email\", \"authorize_url\": \"https://auth.example.com/authorize\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"jwks_uri\": \"https://auth.example.com/.well-known/jwks.json\", \"oidc_issuer\": \"https://auth.example.com\", \"token_url\": \"https://example.com/token\" }`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_request_method\": \"GET\", \"attributes_url\": \"https://auth.example.com/userInfo\", \"attributes_url_add_attributes\": \"false\", \"authorize_scopes\": \"openid profile email\", \"authorize_url\": \"https://auth.example.com/authorize\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"jwks_uri\": \"https://auth.example.com/.well-known/jwks.json\", \"oidc_issuer\": \"https://auth.example.com\", \"token_url\": \"https://example.com/token\" }`\n- **SAML** - Create or update request with Metadata URL: `\"ProviderDetails\": { \"IDPInit\": \"true\", \"IDPSignout\": \"true\", \"EncryptedResponses\" : \"true\", \"MetadataURL\": \"https://auth.example.com/sso/saml/metadata\", \"RequestSigningAlgorithm\": \"rsa-sha256\" }`\n\nCreate or update request with Metadata file: `\"ProviderDetails\": { \"IDPInit\": \"true\", \"IDPSignout\": \"true\", \"EncryptedResponses\" : \"true\", \"MetadataFile\": \"[metadata XML]\", \"RequestSigningAlgorithm\": \"rsa-sha256\" }`\n\nThe value of `MetadataFile` must be the plaintext metadata document with all quote (\") characters escaped by backslashes.\n\nDescribe response: `\"ProviderDetails\": { \"IDPInit\": \"true\", \"IDPSignout\": \"true\", \"EncryptedResponses\" : \"true\", \"ActiveEncryptionCertificate\": \"[certificate]\", \"MetadataURL\": \"https://auth.example.com/sso/saml/metadata\", \"RequestSigningAlgorithm\": \"rsa-sha256\", \"SLORedirectBindingURI\": \"https://auth.example.com/slo/saml\", \"SSORedirectBindingURI\": \"https://auth.example.com/sso/saml\" }`\n- **LoginWithAmazon** - Create or update request: `\"ProviderDetails\": { \"authorize_scopes\": \"profile postal_code\", \"client_id\": \"amzn1.application-oa2-client.1example23456789\", \"client_secret\": \"provider-app-client-secret\"`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_url\": \"https://api.amazon.com/user/profile\", \"attributes_url_add_attributes\": \"false\", \"authorize_scopes\": \"profile postal_code\", \"authorize_url\": \"https://www.amazon.com/ap/oa\", \"client_id\": \"amzn1.application-oa2-client.1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"token_request_method\": \"POST\", \"token_url\": \"https://api.amazon.com/auth/o2/token\" }`\n- **Google** - Create or update request: `\"ProviderDetails\": { \"authorize_scopes\": \"email profile openid\", \"client_id\": \"1example23456789.apps.googleusercontent.com\", \"client_secret\": \"provider-app-client-secret\" }`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_url\": \"https://people.googleapis.com/v1/people/me?personFields=\", \"attributes_url_add_attributes\": \"true\", \"authorize_scopes\": \"email profile openid\", \"authorize_url\": \"https://accounts.google.com/o/oauth2/v2/auth\", \"client_id\": \"1example23456789.apps.googleusercontent.com\", \"client_secret\": \"provider-app-client-secret\", \"oidc_issuer\": \"https://accounts.google.com\", \"token_request_method\": \"POST\", \"token_url\": \"https://www.googleapis.com/oauth2/v4/token\" }`\n- **SignInWithApple** - Create or update request: `\"ProviderDetails\": { \"authorize_scopes\": \"email name\", \"client_id\": \"com.example.cognito\", \"private_key\": \"1EXAMPLE\", \"key_id\": \"2EXAMPLE\", \"team_id\": \"3EXAMPLE\" }`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_url_add_attributes\": \"false\", \"authorize_scopes\": \"email name\", \"authorize_url\": \"https://appleid.apple.com/auth/authorize\", \"client_id\": \"com.example.cognito\", \"key_id\": \"1EXAMPLE\", \"oidc_issuer\": \"https://appleid.apple.com\", \"team_id\": \"2EXAMPLE\", \"token_request_method\": \"POST\", \"token_url\": \"https://appleid.apple.com/auth/token\" }`\n- **Facebook** - Create or update request: `\"ProviderDetails\": { \"api_version\": \"v17.0\", \"authorize_scopes\": \"public_profile, email\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\" }`\n\nDescribe response: `\"ProviderDetails\": { \"api_version\": \"v17.0\", \"attributes_url\": \"https://graph.facebook.com/v17.0/me?fields=\", \"attributes_url_add_attributes\": \"true\", \"authorize_scopes\": \"public_profile, email\", \"authorize_url\": \"https://www.facebook.com/v17.0/dialog/oauth\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"token_request_method\": \"GET\", \"token_url\": \"https://graph.facebook.com/v17.0/oauth/access_token\" }`", - "patternProperties": { - "^[a-zA-Z0-9]+$": { - "type": "string" - } - }, - "title": "ProviderDetails", - "type": "object" - }, - "ProviderName": { - "markdownDescription": "The name that you want to assign to the IdP. You can pass the identity provider name in the `identity_provider` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP.", - "title": "ProviderName", - "type": "string" - }, - "ProviderType": { - "markdownDescription": "The type of IdP that you want to add. Amazon Cognito supports OIDC, SAML 2.0, Login With Amazon, Sign In With Apple, Google, and Facebook IdPs.", - "title": "ProviderType", - "type": "string" - }, - "UserPoolId": { - "markdownDescription": "The Id of the user pool where you want to create an IdP.", - "title": "UserPoolId", - "type": "string" - } - }, - "required": [ - "ProviderDetails", - "ProviderName", - "ProviderType", - "UserPoolId" - ], - "type": "object" - }, - "Type": { - "enum": [ - "AWS::Cognito::UserPoolIdentityProvider" - ], - "type": "string" - }, - "UpdateReplacePolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], - "type": "string" + "Failover": { + "$ref": "#/definitions/AWS::Cognito::UserPoolDomain.FailoverType" } }, - "required": [ - "Type", - "Properties" - ], "type": "object" }, - "AWS::Cognito::UserPoolResourceServer": { + "AWS::Cognito::UserPoolGroup": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Description": { + "markdownDescription": "A description of the group that you're creating.", + "title": "Description", + "type": "string" + }, + "GroupName": { + "markdownDescription": "A name for the group. This name must be unique in your user pool.", + "title": "GroupName", + "type": "string" + }, + "Precedence": { + "markdownDescription": "A non-negative integer value that specifies the precedence of this group relative to the other groups that a user can belong to in the user pool. Zero is the highest precedence value. Groups with lower `Precedence` values take precedence over groups with higher or null `Precedence` values. If a user belongs to two or more groups, it is the group with the lowest precedence value whose role ARN is given in the user's tokens for the `cognito:roles` and `cognito:preferred_role` claims.\n\nTwo groups can have the same `Precedence` value. If this happens, neither group takes precedence over the other. If two groups with the same `Precedence` have the same role ARN, that role is used in the `cognito:preferred_role` claim in tokens for users in each group. If the two groups have different role ARNs, the `cognito:preferred_role` claim isn't set in users' tokens.\n\nThe default `Precedence` value is null. The maximum `Precedence` value is `2^31-1` .", + "title": "Precedence", + "type": "number" + }, + "RoleArn": { + "markdownDescription": "The Amazon Resource Name (ARN) for the IAM role that you want to associate with the group. A group role primarily declares a preferred role for the credentials that you get from an identity pool. Amazon Cognito ID tokens have a `cognito:preferred_role` claim that presents the highest-precedence group that a user belongs to. Both ID and access tokens also contain a `cognito:groups` claim that list all the groups that a user is a member of.", + "title": "RoleArn", + "type": "string" + }, + "UserPoolId": { + "markdownDescription": "The ID of the user pool where you want to create a user group.", + "title": "UserPoolId", + "type": "string" + } + }, + "required": [ + "UserPoolId" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Cognito::UserPoolGroup" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Cognito::UserPoolIdentityProvider": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "AttributeMapping": { + "additionalProperties": true, + "markdownDescription": "A mapping of IdP attributes to standard and custom user pool attributes. Specify a user pool attribute as the key of the key-value pair, and the IdP attribute claim name as the value.", + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "title": "AttributeMapping", + "type": "object" + }, + "IdpIdentifiers": { + "items": { + "type": "string" + }, + "markdownDescription": "An array of IdP identifiers, for example `\"IdPIdentifiers\": [ \"MyIdP\", \"MyIdP2\" ]` . Identifiers are friendly names that you can pass in the `idp_identifier` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP. Identifiers in a domain format also enable the use of [email-address matching with SAML providers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managing-saml-idp-naming.html) .", + "title": "IdpIdentifiers", + "type": "array" + }, + "ProviderDetails": { + "additionalProperties": true, + "markdownDescription": "The scopes, URLs, and identifiers for your external identity provider. The following\nexamples describe the provider detail keys for each IdP type. These values and their\nschema are subject to change. Social IdP `authorize_scopes` values must match\nthe values listed here.\n\n- **OpenID Connect (OIDC)** - Amazon Cognito accepts the following elements when it can't discover endpoint URLs from `oidc_issuer` : `attributes_url` , `authorize_url` , `jwks_uri` , `token_url` .\n\nCreate or update request: `\"ProviderDetails\": { \"attributes_request_method\": \"GET\", \"attributes_url\": \"https://auth.example.com/userInfo\", \"authorize_scopes\": \"openid profile email\", \"authorize_url\": \"https://auth.example.com/authorize\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"jwks_uri\": \"https://auth.example.com/.well-known/jwks.json\", \"oidc_issuer\": \"https://auth.example.com\", \"token_url\": \"https://example.com/token\" }`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_request_method\": \"GET\", \"attributes_url\": \"https://auth.example.com/userInfo\", \"attributes_url_add_attributes\": \"false\", \"authorize_scopes\": \"openid profile email\", \"authorize_url\": \"https://auth.example.com/authorize\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"jwks_uri\": \"https://auth.example.com/.well-known/jwks.json\", \"oidc_issuer\": \"https://auth.example.com\", \"token_url\": \"https://example.com/token\" }`\n- **SAML** - Create or update request with Metadata URL: `\"ProviderDetails\": { \"IDPInit\": \"true\", \"IDPSignout\": \"true\", \"EncryptedResponses\" : \"true\", \"MetadataURL\": \"https://auth.example.com/sso/saml/metadata\", \"RequestSigningAlgorithm\": \"rsa-sha256\" }`\n\nCreate or update request with Metadata file: `\"ProviderDetails\": { \"IDPInit\": \"true\", \"IDPSignout\": \"true\", \"EncryptedResponses\" : \"true\", \"MetadataFile\": \"[metadata XML]\", \"RequestSigningAlgorithm\": \"rsa-sha256\" }`\n\nThe value of `MetadataFile` must be the plaintext metadata document with all quote (\") characters escaped by backslashes.\n\nDescribe response: `\"ProviderDetails\": { \"IDPInit\": \"true\", \"IDPSignout\": \"true\", \"EncryptedResponses\" : \"true\", \"ActiveEncryptionCertificate\": \"[certificate]\", \"MetadataURL\": \"https://auth.example.com/sso/saml/metadata\", \"RequestSigningAlgorithm\": \"rsa-sha256\", \"SLORedirectBindingURI\": \"https://auth.example.com/slo/saml\", \"SSORedirectBindingURI\": \"https://auth.example.com/sso/saml\" }`\n- **LoginWithAmazon** - Create or update request: `\"ProviderDetails\": { \"authorize_scopes\": \"profile postal_code\", \"client_id\": \"amzn1.application-oa2-client.1example23456789\", \"client_secret\": \"provider-app-client-secret\"`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_url\": \"https://api.amazon.com/user/profile\", \"attributes_url_add_attributes\": \"false\", \"authorize_scopes\": \"profile postal_code\", \"authorize_url\": \"https://www.amazon.com/ap/oa\", \"client_id\": \"amzn1.application-oa2-client.1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"token_request_method\": \"POST\", \"token_url\": \"https://api.amazon.com/auth/o2/token\" }`\n- **Google** - Create or update request: `\"ProviderDetails\": { \"authorize_scopes\": \"email profile openid\", \"client_id\": \"1example23456789.apps.googleusercontent.com\", \"client_secret\": \"provider-app-client-secret\" }`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_url\": \"https://people.googleapis.com/v1/people/me?personFields=\", \"attributes_url_add_attributes\": \"true\", \"authorize_scopes\": \"email profile openid\", \"authorize_url\": \"https://accounts.google.com/o/oauth2/v2/auth\", \"client_id\": \"1example23456789.apps.googleusercontent.com\", \"client_secret\": \"provider-app-client-secret\", \"oidc_issuer\": \"https://accounts.google.com\", \"token_request_method\": \"POST\", \"token_url\": \"https://www.googleapis.com/oauth2/v4/token\" }`\n- **SignInWithApple** - Create or update request: `\"ProviderDetails\": { \"authorize_scopes\": \"email name\", \"client_id\": \"com.example.cognito\", \"private_key\": \"1EXAMPLE\", \"key_id\": \"2EXAMPLE\", \"team_id\": \"3EXAMPLE\" }`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_url_add_attributes\": \"false\", \"authorize_scopes\": \"email name\", \"authorize_url\": \"https://appleid.apple.com/auth/authorize\", \"client_id\": \"com.example.cognito\", \"key_id\": \"1EXAMPLE\", \"oidc_issuer\": \"https://appleid.apple.com\", \"team_id\": \"2EXAMPLE\", \"token_request_method\": \"POST\", \"token_url\": \"https://appleid.apple.com/auth/token\" }`\n- **Facebook** - Create or update request: `\"ProviderDetails\": { \"api_version\": \"v17.0\", \"authorize_scopes\": \"public_profile, email\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\" }`\n\nDescribe response: `\"ProviderDetails\": { \"api_version\": \"v17.0\", \"attributes_url\": \"https://graph.facebook.com/v17.0/me?fields=\", \"attributes_url_add_attributes\": \"true\", \"authorize_scopes\": \"public_profile, email\", \"authorize_url\": \"https://www.facebook.com/v17.0/dialog/oauth\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"token_request_method\": \"GET\", \"token_url\": \"https://graph.facebook.com/v17.0/oauth/access_token\" }`", + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "title": "ProviderDetails", + "type": "object" + }, + "ProviderName": { + "markdownDescription": "The name that you want to assign to the IdP. You can pass the identity provider name in the `identity_provider` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP.", + "title": "ProviderName", + "type": "string" + }, + "ProviderType": { + "markdownDescription": "The type of IdP that you want to add. Amazon Cognito supports OIDC, SAML 2.0, Login With Amazon, Sign In With Apple, Google, and Facebook IdPs.", + "title": "ProviderType", + "type": "string" + }, + "UserPoolId": { + "markdownDescription": "The Id of the user pool where you want to create an IdP.", + "title": "UserPoolId", + "type": "string" + } + }, + "required": [ + "ProviderDetails", + "ProviderName", + "ProviderType", + "UserPoolId" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Cognito::UserPoolIdentityProvider" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Cognito::UserPoolRegionalConfigurationAttachment": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "EmailConfiguration": { + "$ref": "#/definitions/AWS::Cognito::UserPoolRegionalConfigurationAttachment.EmailConfiguration" + }, + "LambdaConfig": { + "$ref": "#/definitions/AWS::Cognito::UserPoolRegionalConfigurationAttachment.LambdaConfig" + }, + "SmsConfiguration": { + "$ref": "#/definitions/AWS::Cognito::UserPoolRegionalConfigurationAttachment.SmsConfiguration" + }, + "Status": { + "type": "string" + }, + "UserPoolId": { + "type": "string" + }, + "UserPoolTags": { + "additionalProperties": true, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "type": "object" + } + }, + "required": [ + "UserPoolId" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Cognito::UserPoolRegionalConfigurationAttachment" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Cognito::UserPoolRegionalConfigurationAttachment.CustomEmailSender": { + "additionalProperties": false, + "properties": { + "LambdaArn": { + "type": "string" + }, + "LambdaVersion": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::Cognito::UserPoolRegionalConfigurationAttachment.CustomSMSSender": { + "additionalProperties": false, + "properties": { + "LambdaArn": { + "type": "string" + }, + "LambdaVersion": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::Cognito::UserPoolRegionalConfigurationAttachment.EmailConfiguration": { + "additionalProperties": false, + "properties": { + "ConfigurationSet": { + "type": "string" + }, + "EmailSendingAccount": { + "type": "string" + }, + "From": { + "type": "string" + }, + "ReplyToEmailAddress": { + "type": "string" + }, + "SourceArn": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::Cognito::UserPoolRegionalConfigurationAttachment.EumsSmsConfiguration": { + "additionalProperties": false, + "properties": { + "CallerArn": { + "type": "string" + }, + "ConfigurationSetName": { + "type": "string" + }, + "ExternalId": { + "type": "string" + }, + "InEntityId": { + "type": "string" + }, + "InTemplateId": { + "type": "string" + }, + "OriginationIdentity": { + "type": "string" + }, + "Region": { + "type": "string" + } + }, + "required": [ + "CallerArn" + ], + "type": "object" + }, + "AWS::Cognito::UserPoolRegionalConfigurationAttachment.InboundFederation": { + "additionalProperties": false, + "properties": { + "LambdaArn": { + "type": "string" + }, + "LambdaVersion": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::Cognito::UserPoolRegionalConfigurationAttachment.LambdaConfig": { + "additionalProperties": false, + "properties": { + "CreateAuthChallenge": { + "type": "string" + }, + "CustomEmailSender": { + "$ref": "#/definitions/AWS::Cognito::UserPoolRegionalConfigurationAttachment.CustomEmailSender" + }, + "CustomMessage": { + "type": "string" + }, + "CustomSMSSender": { + "$ref": "#/definitions/AWS::Cognito::UserPoolRegionalConfigurationAttachment.CustomSMSSender" + }, + "DefineAuthChallenge": { + "type": "string" + }, + "InboundFederation": { + "$ref": "#/definitions/AWS::Cognito::UserPoolRegionalConfigurationAttachment.InboundFederation" + }, + "KMSKeyID": { + "type": "string" + }, + "PostAuthentication": { + "type": "string" + }, + "PostConfirmation": { + "type": "string" + }, + "PreAuthentication": { + "type": "string" + }, + "PreSignUp": { + "type": "string" + }, + "PreTokenGeneration": { + "type": "string" + }, + "PreTokenGenerationConfig": { + "$ref": "#/definitions/AWS::Cognito::UserPoolRegionalConfigurationAttachment.PreTokenGenerationConfig" + }, + "UserMigration": { + "type": "string" + }, + "VerifyAuthChallengeResponse": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::Cognito::UserPoolRegionalConfigurationAttachment.PreTokenGenerationConfig": { + "additionalProperties": false, + "properties": { + "LambdaArn": { + "type": "string" + }, + "LambdaVersion": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::Cognito::UserPoolRegionalConfigurationAttachment.SmsConfiguration": { + "additionalProperties": false, + "properties": { + "EumsSms": { + "$ref": "#/definitions/AWS::Cognito::UserPoolRegionalConfigurationAttachment.EumsSmsConfiguration" + }, + "ExternalId": { + "type": "string" + }, + "SnsCallerArn": { + "type": "string" + }, + "SnsRegion": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::Cognito::UserPoolReplica": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "RegionName": { + "type": "string" + }, + "UserPoolId": { + "type": "string" + }, + "UserPoolTagsAtCreate": { + "additionalProperties": true, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "type": "object" + } + }, + "required": [ + "RegionName", + "UserPoolId" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Cognito::UserPoolReplica" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Cognito::UserPoolResourceServer": { "additionalProperties": false, "properties": { "Condition": { @@ -77420,6 +79451,12 @@ "title": "DeliveryS3KeyPrefix", "type": "string" }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + }, "TemplateBody": { "markdownDescription": "A string containing full conformance pack template body. Structure containing the template body with a minimum length of 1 byte and a maximum length of 51,200 bytes.\n\n> You can only use a YAML template with two resource types: config rule ( `AWS::Config::ConfigRule` ) and a remediation action ( `AWS::Config::RemediationConfiguration` ).", "title": "TemplateBody", @@ -77498,6 +79535,102 @@ }, "type": "object" }, + "AWS::Config::Connector": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "ConnectorConfiguration": { + "$ref": "#/definitions/AWS::Config::Connector.ConnectorConfiguration" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "ConnectorConfiguration" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Config::Connector" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Config::Connector.AzureConnectorConfiguration": { + "additionalProperties": false, + "properties": { + "ClientIdentifier": { + "type": "string" + }, + "TenantIdentifier": { + "type": "string" + } + }, + "required": [ + "ClientIdentifier", + "TenantIdentifier" + ], + "type": "object" + }, + "AWS::Config::Connector.ConnectorConfiguration": { + "additionalProperties": false, + "properties": { + "Azure": { + "$ref": "#/definitions/AWS::Config::Connector.AzureConnectorConfiguration" + } + }, + "type": "object" + }, "AWS::Config::DeliveryChannel": { "additionalProperties": false, "properties": { @@ -77944,6 +80077,12 @@ "title": "OrganizationConformancePackName", "type": "string" }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + }, "TemplateBody": { "markdownDescription": "A string containing full conformance pack template body. Structure containing the template body with a minimum length of 1 byte and a maximum length of 51,200 bytes.", "title": "TemplateBody", @@ -78126,31 +80265,6 @@ }, "type": "object" }, - "AWS::Config::RemediationConfiguration.RemediationParameterValue": { - "additionalProperties": false, - "properties": { - "ResourceValue": { - "$ref": "#/definitions/AWS::Config::RemediationConfiguration.ResourceValue", - "markdownDescription": "The value is dynamic and changes at run-time.", - "title": "ResourceValue" - }, - "StaticValue": { - "$ref": "#/definitions/AWS::Config::RemediationConfiguration.StaticValue", - "markdownDescription": "The value is static and does not change at run-time.", - "title": "StaticValue" - } - }, - "type": "object" - }, - "AWS::Config::RemediationConfiguration.ResourceValue": { - "additionalProperties": false, - "properties": { - "Value": { - "type": "string" - } - }, - "type": "object" - }, "AWS::Config::RemediationConfiguration.SsmControls": { "additionalProperties": false, "properties": { @@ -78167,18 +80281,6 @@ }, "type": "object" }, - "AWS::Config::RemediationConfiguration.StaticValue": { - "additionalProperties": false, - "properties": { - "Values": { - "items": { - "type": "string" - }, - "type": "array" - } - }, - "type": "object" - }, "AWS::Config::StoredQuery": { "additionalProperties": false, "properties": { @@ -78882,6 +80984,78 @@ ], "type": "object" }, + "AWS::Connect::DataLakeAssociation": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "DataSetId": { + "type": "string" + }, + "InstanceId": { + "type": "string" + }, + "TargetAccountId": { + "type": "string" + } + }, + "required": [ + "DataSetId", + "InstanceId" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Connect::DataLakeAssociation" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, "AWS::Connect::DataTable": { "additionalProperties": false, "properties": { @@ -78956,6 +81130,13 @@ "type": "string" } }, + "required": [ + "InstanceArn", + "Name", + "Status", + "TimeZone", + "ValueLockLevel" + ], "type": "object" }, "Type": { @@ -78974,7 +81155,8 @@ } }, "required": [ - "Type" + "Type", + "Properties" ], "type": "object" }, @@ -79060,6 +81242,12 @@ "type": "string" } }, + "required": [ + "DataTableArn", + "InstanceArn", + "Name", + "ValueType" + ], "type": "object" }, "Type": { @@ -79078,7 +81266,8 @@ } }, "required": [ - "Type" + "Type", + "Properties" ], "type": "object" }, @@ -79224,6 +81413,11 @@ "type": "string" } }, + "required": [ + "DataTableArn", + "DataTableRecord", + "InstanceArn" + ], "type": "object" }, "Type": { @@ -79242,7 +81436,8 @@ } }, "required": [ - "Type" + "Type", + "Properties" ], "type": "object" }, @@ -79753,11 +81948,23 @@ "AWS::Connect::EvaluationForm.EvaluationFormMultiSelectQuestionOption": { "additionalProperties": false, "properties": { + "AutomaticFail": { + "type": "boolean" + }, + "AutomaticFailConfiguration": { + "$ref": "#/definitions/AWS::Connect::EvaluationForm.AutomaticFailConfiguration" + }, + "PointsConfiguration": { + "$ref": "#/definitions/AWS::Connect::EvaluationForm.QuestionOptionPointsConfiguration" + }, "RefId": { "markdownDescription": "Reference identifier for this option.", "title": "RefId", "type": "string" }, + "Score": { + "type": "number" + }, "Text": { "markdownDescription": "Display text for this option.", "title": "Text", @@ -79836,6 +82043,9 @@ "title": "MinValue", "type": "number" }, + "PointsConfiguration": { + "$ref": "#/definitions/AWS::Connect::EvaluationForm.QuestionOptionPointsConfiguration" + }, "Score": { "markdownDescription": "The score assigned to answer values within the range option.\n\n*Minimum* : 0\n\n*Maximum* : 10", "title": "Score", @@ -79914,6 +82124,9 @@ "title": "RefId", "type": "string" }, + "ScoringConfiguration": { + "$ref": "#/definitions/AWS::Connect::EvaluationForm.EvaluationFormQuestionScoringConfiguration" + }, "Title": { "markdownDescription": "The title of the question.\n\n*Length Constraints* : Minimum length of 1. Maximum length of 350.", "title": "Title", @@ -79946,6 +82159,24 @@ ], "type": "object" }, + "AWS::Connect::EvaluationForm.EvaluationFormQuestionScoringConfiguration": { + "additionalProperties": false, + "properties": { + "IsExcludedFromScoring": { + "type": "boolean" + }, + "PointsConfiguration": { + "$ref": "#/definitions/AWS::Connect::EvaluationForm.QuestionPointsConfiguration" + }, + "ScoreThresholds": { + "items": { + "$ref": "#/definitions/AWS::Connect::EvaluationForm.EvaluationFormScoreThreshold" + }, + "type": "array" + } + }, + "type": "object" + }, "AWS::Connect::EvaluationForm.EvaluationFormQuestionTypeProperties": { "additionalProperties": false, "properties": { @@ -79972,6 +82203,24 @@ }, "type": "object" }, + "AWS::Connect::EvaluationForm.EvaluationFormScoreThreshold": { + "additionalProperties": false, + "properties": { + "MaxScorePercentage": { + "type": "number" + }, + "MinScorePercentage": { + "type": "number" + }, + "PerformanceCategory": { + "type": "string" + } + }, + "required": [ + "PerformanceCategory" + ], + "type": "object" + }, "AWS::Connect::EvaluationForm.EvaluationFormSection": { "additionalProperties": false, "properties": { @@ -79980,6 +82229,9 @@ "title": "Instructions", "type": "string" }, + "IsExcludedFromScoring": { + "type": "boolean" + }, "Items": { "items": { "$ref": "#/definitions/AWS::Connect::EvaluationForm.EvaluationFormItem" @@ -79993,6 +82245,12 @@ "title": "RefId", "type": "string" }, + "ScoreThresholds": { + "items": { + "$ref": "#/definitions/AWS::Connect::EvaluationForm.EvaluationFormScoreThreshold" + }, + "type": "array" + }, "Title": { "markdownDescription": "The title of the section.\n\n*Length Constraints* : Minimum length of 1. Maximum length of 128.", "title": "Title", @@ -80061,6 +82319,9 @@ "markdownDescription": "Whether automatic fail is configured on a single select question.", "title": "AutomaticFailConfiguration" }, + "PointsConfiguration": { + "$ref": "#/definitions/AWS::Connect::EvaluationForm.QuestionOptionPointsConfiguration" + }, "RefId": { "markdownDescription": "The identifier of the answer option. An identifier must be unique within the question.\n\n*Length Constraints* : Minimum length of 1. Maximum length of 40.", "title": "RefId", @@ -80232,6 +82493,36 @@ ], "type": "object" }, + "AWS::Connect::EvaluationForm.QuestionOptionPointsConfiguration": { + "additionalProperties": false, + "properties": { + "IsBonus": { + "type": "boolean" + }, + "PointValue": { + "type": "number" + } + }, + "required": [ + "PointValue" + ], + "type": "object" + }, + "AWS::Connect::EvaluationForm.QuestionPointsConfiguration": { + "additionalProperties": false, + "properties": { + "IsBonus": { + "type": "boolean" + }, + "MaxPointValue": { + "type": "number" + }, + "MinPointValue": { + "type": "number" + } + }, + "type": "object" + }, "AWS::Connect::EvaluationForm.ScoringStrategy": { "additionalProperties": false, "properties": { @@ -80240,6 +82531,12 @@ "title": "Mode", "type": "string" }, + "ScoreThresholds": { + "items": { + "$ref": "#/definitions/AWS::Connect::EvaluationForm.EvaluationFormScoreThreshold" + }, + "type": "array" + }, "Status": { "markdownDescription": "The scoring status of the evaluation form.\n\n*Allowed values* : `ENABLED` | `DISABLED`", "title": "Status", @@ -81770,6 +84067,18 @@ ], "type": "object" }, + "AWS::Connect::QuickConnect.FlowQuickConnectConfig": { + "additionalProperties": false, + "properties": { + "ContactFlowArn": { + "type": "string" + } + }, + "required": [ + "ContactFlowArn" + ], + "type": "object" + }, "AWS::Connect::QuickConnect.PhoneNumberQuickConnectConfig": { "additionalProperties": false, "properties": { @@ -81807,6 +84116,9 @@ "AWS::Connect::QuickConnect.QuickConnectConfig": { "additionalProperties": false, "properties": { + "FlowConfig": { + "$ref": "#/definitions/AWS::Connect::QuickConnect.FlowQuickConnectConfig" + }, "PhoneConfig": { "$ref": "#/definitions/AWS::Connect::QuickConnect.PhoneNumberQuickConnectConfig", "markdownDescription": "The phone configuration. This is required only if QuickConnectType is PHONE_NUMBER.", @@ -82191,6 +84503,12 @@ "title": "AssignContactCategoryActions", "type": "array" }, + "AssignSlaActions": { + "items": { + "$ref": "#/definitions/AWS::Connect::Rule.AssignSlaAction" + }, + "type": "array" + }, "CreateCaseActions": { "items": { "$ref": "#/definitions/AWS::Connect::Rule.CreateCaseAction" @@ -82250,6 +84568,51 @@ }, "type": "object" }, + "AWS::Connect::Rule.AssignSlaAction": { + "additionalProperties": false, + "properties": { + "CaseSlaConfiguration": { + "$ref": "#/definitions/AWS::Connect::Rule.CaseSlaConfiguration" + }, + "SlaAssignmentType": { + "type": "string" + } + }, + "required": [ + "CaseSlaConfiguration", + "SlaAssignmentType" + ], + "type": "object" + }, + "AWS::Connect::Rule.CaseSlaConfiguration": { + "additionalProperties": false, + "properties": { + "FieldId": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "TargetFieldValues": { + "items": { + "$ref": "#/definitions/AWS::Connect::Rule.SlaTargetFieldValue" + }, + "type": "array" + }, + "TargetSlaMinutes": { + "type": "number" + }, + "Type": { + "type": "string" + } + }, + "required": [ + "Name", + "TargetSlaMinutes", + "Type" + ], + "type": "object" + }, "AWS::Connect::Rule.CreateCaseAction": { "additionalProperties": false, "properties": { @@ -82415,6 +84778,9 @@ "title": "DeliveryMethod", "type": "string" }, + "Exclusion": { + "$ref": "#/definitions/AWS::Connect::Rule.NotificationRecipientType" + }, "Recipient": { "$ref": "#/definitions/AWS::Connect::Rule.NotificationRecipientType", "markdownDescription": "Notification recipient.", @@ -82434,6 +84800,15 @@ ], "type": "object" }, + "AWS::Connect::Rule.SlaTargetFieldValue": { + "additionalProperties": false, + "properties": { + "StringValue": { + "type": "string" + } + }, + "type": "object" + }, "AWS::Connect::Rule.SubmitAutoEvaluationAction": { "additionalProperties": false, "properties": { @@ -82736,10 +85111,6 @@ "type": "string" } }, - "required": [ - "ApplicationPermissions", - "Namespace" - ], "type": "object" }, "AWS::Connect::SecurityProfile.DataTableAccessControlConfiguration": { @@ -82763,10 +85134,6 @@ "type": "string" } }, - "required": [ - "FlowModuleId", - "Type" - ], "type": "object" }, "AWS::Connect::SecurityProfile.GranularAccessControlConfiguration": { @@ -82792,9 +85159,6 @@ "type": "array" } }, - "required": [ - "PrimaryAttributeValues" - ], "type": "object" }, "AWS::Connect::SecurityProfile.PrimaryAttributeValue": { @@ -82819,11 +85183,6 @@ "type": "array" } }, - "required": [ - "AccessType", - "AttributeName", - "Values" - ], "type": "object" }, "AWS::Connect::TaskTemplate": { @@ -83091,6 +85450,136 @@ ], "type": "object" }, + "AWS::Connect::TestCase": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Content": { + "type": "string" + }, + "Description": { + "type": "string" + }, + "EntryPoint": { + "$ref": "#/definitions/AWS::Connect::TestCase.EntryPoint" + }, + "InitializationData": { + "type": "string" + }, + "InstanceArn": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "Status": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "Content", + "InstanceArn", + "Name" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Connect::TestCase" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Connect::TestCase.ChatEntryPointParameters": { + "additionalProperties": false, + "properties": { + "FlowId": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::Connect::TestCase.EntryPoint": { + "additionalProperties": false, + "properties": { + "ChatEntryPointParameters": { + "$ref": "#/definitions/AWS::Connect::TestCase.ChatEntryPointParameters" + }, + "Type": { + "type": "string" + }, + "VoiceCallEntryPointParameters": { + "$ref": "#/definitions/AWS::Connect::TestCase.VoiceCallEntryPointParameters" + } + }, + "type": "object" + }, + "AWS::Connect::TestCase.VoiceCallEntryPointParameters": { + "additionalProperties": false, + "properties": { + "DestinationPhoneNumber": { + "type": "string" + }, + "FlowId": { + "type": "string" + }, + "SourcePhoneNumber": { + "type": "string" + } + }, + "type": "object" + }, "AWS::Connect::TrafficDistributionGroup": { "additionalProperties": false, "properties": { @@ -83339,6 +85828,9 @@ "AWS::Connect::User.AfterContactWorkConfig": { "additionalProperties": false, "properties": { + "AfterContactWorkMode": { + "type": "string" + }, "AfterContactWorkTimeLimit": { "type": "number" } @@ -86351,6 +88843,119 @@ ], "type": "object" }, + "AWS::CustomerProfiles::DomainObjectType": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Description": { + "type": "string" + }, + "DomainName": { + "type": "string" + }, + "EncryptionKey": { + "type": "string" + }, + "Fields": { + "additionalProperties": false, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "$ref": "#/definitions/AWS::CustomerProfiles::DomainObjectType.DomainObjectTypeField" + } + }, + "type": "object" + }, + "ObjectTypeName": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "DomainName", + "Fields", + "ObjectTypeName" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::CustomerProfiles::DomainObjectType" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::CustomerProfiles::DomainObjectType.DomainObjectTypeField": { + "additionalProperties": false, + "properties": { + "ContentType": { + "type": "string" + }, + "FeatureType": { + "type": "string" + }, + "Source": { + "type": "string" + }, + "Target": { + "type": "string" + } + }, + "required": [ + "Source", + "Target" + ], + "type": "object" + }, "AWS::CustomerProfiles::EventStream": { "additionalProperties": false, "properties": { @@ -103808,6 +106413,9 @@ "AWS::DevOpsAgent::PrivateConnection.ServiceManagedMode": { "additionalProperties": false, "properties": { + "DnsResolution": { + "type": "string" + }, "HostAddress": { "type": "string" }, @@ -104077,6 +106685,9 @@ "ApiKey": { "$ref": "#/definitions/AWS::DevOpsAgent::Service.ApiKeyDetails" }, + "BearerToken": { + "$ref": "#/definitions/AWS::DevOpsAgent::Service.BearerTokenDetails" + }, "OAuthClientCredentials": { "$ref": "#/definitions/AWS::DevOpsAgent::Service.MCPServerOAuthClientCredentialsConfig" } @@ -104185,6 +106796,9 @@ }, "type": "object" }, + "McpRoleArn": { + "type": "string" + }, "Region": { "type": "string" }, @@ -104197,7 +106811,6 @@ }, "required": [ "Region", - "RoleArn", "Service" ], "type": "object" @@ -104496,6 +107109,9 @@ "Endpoint": { "type": "string" }, + "McpRoleArn": { + "type": "string" + }, "Name": { "type": "string" }, @@ -107313,9 +109929,6 @@ "title": "ResourcePolicy" } }, - "required": [ - "ResourcePolicy" - ], "type": "object" }, "AWS::DynamoDB::GlobalTable.ResourcePolicy": { @@ -117200,6 +119813,9 @@ "Properties": { "additionalProperties": false, "properties": { + "ParentGroupId": { + "type": "string" + }, "PartitionCount": { "markdownDescription": "The number of partitions. Valid only when *Strategy* is set to `partition` .", "title": "PartitionCount", @@ -121731,7 +124347,7 @@ }, "type": "object" }, - "AWS::EC2::TransitGatewayRoute": { + "AWS::EC2::TransitGatewayPolicyTable": { "additionalProperties": false, "properties": { "Condition": { @@ -121766,36 +124382,24 @@ "Properties": { "additionalProperties": false, "properties": { - "Blackhole": { - "markdownDescription": "Indicates whether to drop traffic that matches this route.", - "title": "Blackhole", - "type": "boolean" - }, - "DestinationCidrBlock": { - "markdownDescription": "The CIDR block used for destination matches.", - "title": "DestinationCidrBlock", - "type": "string" - }, - "TransitGatewayAttachmentId": { - "markdownDescription": "The ID of the attachment.", - "title": "TransitGatewayAttachmentId", - "type": "string" + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" }, - "TransitGatewayRouteTableId": { - "markdownDescription": "The ID of the transit gateway route table.", - "title": "TransitGatewayRouteTableId", + "TransitGatewayId": { "type": "string" } }, "required": [ - "DestinationCidrBlock", - "TransitGatewayRouteTableId" + "TransitGatewayId" ], "type": "object" }, "Type": { "enum": [ - "AWS::EC2::TransitGatewayRoute" + "AWS::EC2::TransitGatewayPolicyTable" ], "type": "string" }, @@ -121814,7 +124418,7 @@ ], "type": "object" }, - "AWS::EC2::TransitGatewayRouteTable": { + "AWS::EC2::TransitGatewayPolicyTableAssociation": { "additionalProperties": false, "properties": { "Condition": { @@ -121849,28 +124453,22 @@ "Properties": { "additionalProperties": false, "properties": { - "Tags": { - "items": { - "$ref": "#/definitions/Tag" - }, - "markdownDescription": "Any tags assigned to the route table.", - "title": "Tags", - "type": "array" + "TransitGatewayAttachmentId": { + "type": "string" }, - "TransitGatewayId": { - "markdownDescription": "The ID of the transit gateway.", - "title": "TransitGatewayId", + "TransitGatewayPolicyTableId": { "type": "string" } }, "required": [ - "TransitGatewayId" + "TransitGatewayAttachmentId", + "TransitGatewayPolicyTableId" ], "type": "object" }, "Type": { "enum": [ - "AWS::EC2::TransitGatewayRouteTable" + "AWS::EC2::TransitGatewayPolicyTableAssociation" ], "type": "string" }, @@ -121889,7 +124487,7 @@ ], "type": "object" }, - "AWS::EC2::TransitGatewayRouteTableAssociation": { + "AWS::EC2::TransitGatewayPolicyTableEntry": { "additionalProperties": false, "properties": { "Condition": { @@ -121924,26 +124522,30 @@ "Properties": { "additionalProperties": false, "properties": { - "TransitGatewayAttachmentId": { - "markdownDescription": "The ID of the attachment.", - "title": "TransitGatewayAttachmentId", + "PolicyRule": { + "$ref": "#/definitions/AWS::EC2::TransitGatewayPolicyTableEntry.TransitGatewayPolicyRule" + }, + "PolicyRuleNumber": { "type": "string" }, - "TransitGatewayRouteTableId": { - "markdownDescription": "The ID of the route table for the transit gateway.", - "title": "TransitGatewayRouteTableId", + "TargetRouteTableId": { + "type": "string" + }, + "TransitGatewayPolicyTableId": { "type": "string" } }, "required": [ - "TransitGatewayAttachmentId", - "TransitGatewayRouteTableId" + "PolicyRule", + "PolicyRuleNumber", + "TargetRouteTableId", + "TransitGatewayPolicyTableId" ], "type": "object" }, "Type": { "enum": [ - "AWS::EC2::TransitGatewayRouteTableAssociation" + "AWS::EC2::TransitGatewayPolicyTableEntry" ], "type": "string" }, @@ -121962,7 +124564,28 @@ ], "type": "object" }, - "AWS::EC2::TransitGatewayRouteTablePropagation": { + "AWS::EC2::TransitGatewayPolicyTableEntry.TransitGatewayPolicyRule": { + "additionalProperties": false, + "properties": { + "DestinationCidrBlock": { + "type": "string" + }, + "DestinationPortRange": { + "type": "string" + }, + "Protocol": { + "type": "string" + }, + "SourceCidrBlock": { + "type": "string" + }, + "SourcePortRange": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::EC2::TransitGatewayRoute": { "additionalProperties": false, "properties": { "Condition": { @@ -121997,26 +124620,36 @@ "Properties": { "additionalProperties": false, "properties": { + "Blackhole": { + "markdownDescription": "Indicates whether to drop traffic that matches this route.", + "title": "Blackhole", + "type": "boolean" + }, + "DestinationCidrBlock": { + "markdownDescription": "The CIDR block used for destination matches.", + "title": "DestinationCidrBlock", + "type": "string" + }, "TransitGatewayAttachmentId": { "markdownDescription": "The ID of the attachment.", "title": "TransitGatewayAttachmentId", "type": "string" }, "TransitGatewayRouteTableId": { - "markdownDescription": "The ID of the propagation route table.", + "markdownDescription": "The ID of the transit gateway route table.", "title": "TransitGatewayRouteTableId", "type": "string" } }, "required": [ - "TransitGatewayAttachmentId", + "DestinationCidrBlock", "TransitGatewayRouteTableId" ], "type": "object" }, "Type": { "enum": [ - "AWS::EC2::TransitGatewayRouteTablePropagation" + "AWS::EC2::TransitGatewayRoute" ], "type": "string" }, @@ -122035,7 +124668,7 @@ ], "type": "object" }, - "AWS::EC2::TransitGatewayVpcAttachment": { + "AWS::EC2::TransitGatewayRouteTable": { "additionalProperties": false, "properties": { "Condition": { @@ -122070,40 +124703,11 @@ "Properties": { "additionalProperties": false, "properties": { - "AddSubnetIds": { - "items": { - "type": "string" - }, - "markdownDescription": "The IDs of one or more subnets to add. You can specify at most one subnet per Availability Zone.", - "title": "AddSubnetIds", - "type": "array" - }, - "Options": { - "$ref": "#/definitions/AWS::EC2::TransitGatewayVpcAttachment.Options", - "markdownDescription": "The VPC attachment options.", - "title": "Options" - }, - "RemoveSubnetIds": { - "items": { - "type": "string" - }, - "markdownDescription": "The IDs of one or more subnets to remove.", - "title": "RemoveSubnetIds", - "type": "array" - }, - "SubnetIds": { - "items": { - "type": "string" - }, - "markdownDescription": "The IDs of the subnets.", - "title": "SubnetIds", - "type": "array" - }, "Tags": { "items": { "$ref": "#/definitions/Tag" }, - "markdownDescription": "The tags for the VPC attachment.", + "markdownDescription": "Any tags assigned to the route table.", "title": "Tags", "type": "array" }, @@ -122111,23 +124715,16 @@ "markdownDescription": "The ID of the transit gateway.", "title": "TransitGatewayId", "type": "string" - }, - "VpcId": { - "markdownDescription": "The ID of the VPC.", - "title": "VpcId", - "type": "string" } }, "required": [ - "SubnetIds", - "TransitGatewayId", - "VpcId" + "TransitGatewayId" ], "type": "object" }, "Type": { "enum": [ - "AWS::EC2::TransitGatewayVpcAttachment" + "AWS::EC2::TransitGatewayRouteTable" ], "type": "string" }, @@ -122146,33 +124743,7 @@ ], "type": "object" }, - "AWS::EC2::TransitGatewayVpcAttachment.Options": { - "additionalProperties": false, - "properties": { - "ApplianceModeSupport": { - "markdownDescription": "Enable or disable appliance mode support. The default is `disable` .", - "title": "ApplianceModeSupport", - "type": "string" - }, - "DnsSupport": { - "markdownDescription": "Enable or disable DNS support. The default is `disable` .", - "title": "DnsSupport", - "type": "string" - }, - "Ipv6Support": { - "markdownDescription": "Enable or disable IPv6 support. The default is `disable` .", - "title": "Ipv6Support", - "type": "string" - }, - "SecurityGroupReferencingSupport": { - "markdownDescription": "Enables you to reference a security group across VPCs attached to a transit gateway (TGW). Use this option to simplify security group management and control of instance-to-instance traffic across VPCs that are connected by transit gateway. You can also use this option to migrate from VPC peering (which was the only option that supported security group referencing) to transit gateways (which now also support security group referencing). This option is disabled by default and there are no additional costs to use this feature.\n\nFor important information about this feature, see [Create a transit gateway](https://docs.aws.amazon.com/vpc/latest/tgw/tgw-transit-gateways.html#create-tgw) in the *AWS Transit Gateway Guide* .", - "title": "SecurityGroupReferencingSupport", - "type": "string" - } - }, - "type": "object" - }, - "AWS::EC2::VPC": { + "AWS::EC2::TransitGatewayRouteTableAssociation": { "additionalProperties": false, "properties": { "Condition": { @@ -122207,50 +124778,26 @@ "Properties": { "additionalProperties": false, "properties": { - "CidrBlock": { - "markdownDescription": "The IPv4 network range for the VPC, in CIDR notation. For example, `10.0.0.0/16` . We modify the specified CIDR block to its canonical form; for example, if you specify `100.68.0.18/18` , we modify it to `100.68.0.0/18` .\n\nYou must specify either `CidrBlock` or `Ipv4IpamPoolId` .", - "title": "CidrBlock", - "type": "string" - }, - "EnableDnsHostnames": { - "markdownDescription": "Indicates whether the instances launched in the VPC get DNS hostnames. If enabled, instances in the VPC get DNS hostnames; otherwise, they do not. Disabled by default for nondefault VPCs. For more information, see [DNS attributes in your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-dns.html#vpc-dns-support) .\n\nYou can only enable DNS hostnames if you've enabled DNS support.", - "title": "EnableDnsHostnames", - "type": "boolean" - }, - "EnableDnsSupport": { - "markdownDescription": "Indicates whether the DNS resolution is supported for the VPC. If enabled, queries to the Amazon provided DNS server at the 169.254.169.253 IP address, or the reserved IP address at the base of the VPC network range \"plus two\" succeed. If disabled, the Amazon provided DNS service in the VPC that resolves public DNS hostnames to IP addresses is not enabled. Enabled by default. For more information, see [DNS attributes in your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-dns.html#vpc-dns-support) .", - "title": "EnableDnsSupport", - "type": "boolean" - }, - "InstanceTenancy": { - "markdownDescription": "The allowed tenancy of instances launched into the VPC.\n\n- `default` : An instance launched into the VPC runs on shared hardware by default, unless you explicitly specify a different tenancy during instance launch.\n- `dedicated` : An instance launched into the VPC runs on dedicated hardware by default, unless you explicitly specify a tenancy of `host` during instance launch. You cannot specify a tenancy of `default` during instance launch.\n\nUpdating `InstanceTenancy` requires no replacement only if you are updating its value from `dedicated` to `default` . Updating `InstanceTenancy` from `default` to `dedicated` requires replacement.", - "title": "InstanceTenancy", + "TransitGatewayAttachmentId": { + "markdownDescription": "The ID of the attachment.", + "title": "TransitGatewayAttachmentId", "type": "string" }, - "Ipv4IpamPoolId": { - "markdownDescription": "The ID of an IPv4 IPAM pool you want to use for allocating this VPC's CIDR. For more information, see [What is IPAM?](https://docs.aws.amazon.com//vpc/latest/ipam/what-is-it-ipam.html) in the *Amazon VPC IPAM User Guide* .\n\nYou must specify either `CidrBlock` or `Ipv4IpamPoolId` .", - "title": "Ipv4IpamPoolId", + "TransitGatewayRouteTableId": { + "markdownDescription": "The ID of the route table for the transit gateway.", + "title": "TransitGatewayRouteTableId", "type": "string" - }, - "Ipv4NetmaskLength": { - "markdownDescription": "The netmask length of the IPv4 CIDR you want to allocate to this VPC from an Amazon VPC IP Address Manager (IPAM) pool. For more information about IPAM, see [What is IPAM?](https://docs.aws.amazon.com//vpc/latest/ipam/what-is-it-ipam.html) in the *Amazon VPC IPAM User Guide* .", - "title": "Ipv4NetmaskLength", - "type": "number" - }, - "Tags": { - "items": { - "$ref": "#/definitions/Tag" - }, - "markdownDescription": "The tags for the VPC.", - "title": "Tags", - "type": "array" } }, + "required": [ + "TransitGatewayAttachmentId", + "TransitGatewayRouteTableId" + ], "type": "object" }, "Type": { "enum": [ - "AWS::EC2::VPC" + "AWS::EC2::TransitGatewayRouteTableAssociation" ], "type": "string" }, @@ -122264,11 +124811,12 @@ } }, "required": [ - "Type" + "Type", + "Properties" ], "type": "object" }, - "AWS::EC2::VPCBlockPublicAccessExclusion": { + "AWS::EC2::TransitGatewayRouteTablePropagation": { "additionalProperties": false, "properties": { "Condition": { @@ -122303,38 +124851,26 @@ "Properties": { "additionalProperties": false, "properties": { - "InternetGatewayExclusionMode": { - "markdownDescription": "The desired VPC Block Public Access mode for a specific VPC or subnet exclusion.\n\n- `allow-bidirectional` : Allow all internet traffic to and from the excluded VPCs and subnets.\n- `allow-egress` : Allow outbound internet traffic from the excluded VPCs and subnets. Block inbound internet traffic to the excluded VPCs and subnets. Only applies when VPC Block Public Access is set to `block-bidirectional` .", - "title": "InternetGatewayExclusionMode", - "type": "string" - }, - "SubnetId": { - "markdownDescription": "The ID of the subnet you want to exclude. Required only if you don't specify VpcId.", - "title": "SubnetId", + "TransitGatewayAttachmentId": { + "markdownDescription": "The ID of the attachment.", + "title": "TransitGatewayAttachmentId", "type": "string" }, - "Tags": { - "items": { - "$ref": "#/definitions/Tag" - }, - "markdownDescription": "An array of key-value pairs to apply to this resource.", - "title": "Tags", - "type": "array" - }, - "VpcId": { - "markdownDescription": "The ID of the VPC you want to exclude. Required only if you don't specify SubnetId.", - "title": "VpcId", + "TransitGatewayRouteTableId": { + "markdownDescription": "The ID of the propagation route table.", + "title": "TransitGatewayRouteTableId", "type": "string" } }, "required": [ - "InternetGatewayExclusionMode" + "TransitGatewayAttachmentId", + "TransitGatewayRouteTableId" ], "type": "object" }, "Type": { "enum": [ - "AWS::EC2::VPCBlockPublicAccessExclusion" + "AWS::EC2::TransitGatewayRouteTablePropagation" ], "type": "string" }, @@ -122353,7 +124889,418 @@ ], "type": "object" }, - "AWS::EC2::VPCBlockPublicAccessOptions": { + "AWS::EC2::TransitGatewayVpcAttachment": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "AddSubnetIds": { + "items": { + "type": "string" + }, + "markdownDescription": "The IDs of one or more subnets to add. You can specify at most one subnet per Availability Zone.", + "title": "AddSubnetIds", + "type": "array" + }, + "Options": { + "$ref": "#/definitions/AWS::EC2::TransitGatewayVpcAttachment.Options", + "markdownDescription": "The VPC attachment options.", + "title": "Options" + }, + "RemoveSubnetIds": { + "items": { + "type": "string" + }, + "markdownDescription": "The IDs of one or more subnets to remove.", + "title": "RemoveSubnetIds", + "type": "array" + }, + "SubnetIds": { + "items": { + "type": "string" + }, + "markdownDescription": "The IDs of the subnets.", + "title": "SubnetIds", + "type": "array" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "The tags for the VPC attachment.", + "title": "Tags", + "type": "array" + }, + "TransitGatewayId": { + "markdownDescription": "The ID of the transit gateway.", + "title": "TransitGatewayId", + "type": "string" + }, + "VpcId": { + "markdownDescription": "The ID of the VPC.", + "title": "VpcId", + "type": "string" + } + }, + "required": [ + "SubnetIds", + "TransitGatewayId", + "VpcId" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::EC2::TransitGatewayVpcAttachment" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::EC2::TransitGatewayVpcAttachment.Options": { + "additionalProperties": false, + "properties": { + "ApplianceModeSupport": { + "markdownDescription": "Enable or disable appliance mode support. The default is `disable` .", + "title": "ApplianceModeSupport", + "type": "string" + }, + "DnsSupport": { + "markdownDescription": "Enable or disable DNS support. The default is `disable` .", + "title": "DnsSupport", + "type": "string" + }, + "Ipv6Support": { + "markdownDescription": "Enable or disable IPv6 support. The default is `disable` .", + "title": "Ipv6Support", + "type": "string" + }, + "SecurityGroupReferencingSupport": { + "markdownDescription": "Enables you to reference a security group across VPCs attached to a transit gateway (TGW). Use this option to simplify security group management and control of instance-to-instance traffic across VPCs that are connected by transit gateway. You can also use this option to migrate from VPC peering (which was the only option that supported security group referencing) to transit gateways (which now also support security group referencing). This option is disabled by default and there are no additional costs to use this feature.\n\nFor important information about this feature, see [Create a transit gateway](https://docs.aws.amazon.com/vpc/latest/tgw/tgw-transit-gateways.html#create-tgw) in the *AWS Transit Gateway Guide* .", + "title": "SecurityGroupReferencingSupport", + "type": "string" + } + }, + "type": "object" + }, + "AWS::EC2::VPC": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "CidrBlock": { + "markdownDescription": "The IPv4 network range for the VPC, in CIDR notation. For example, `10.0.0.0/16` . We modify the specified CIDR block to its canonical form; for example, if you specify `100.68.0.18/18` , we modify it to `100.68.0.0/18` .\n\nYou must specify either `CidrBlock` or `Ipv4IpamPoolId` .", + "title": "CidrBlock", + "type": "string" + }, + "EnableDnsHostnames": { + "markdownDescription": "Indicates whether the instances launched in the VPC get DNS hostnames. If enabled, instances in the VPC get DNS hostnames; otherwise, they do not. Disabled by default for nondefault VPCs. For more information, see [DNS attributes in your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-dns.html#vpc-dns-support) .\n\nYou can only enable DNS hostnames if you've enabled DNS support.", + "title": "EnableDnsHostnames", + "type": "boolean" + }, + "EnableDnsSupport": { + "markdownDescription": "Indicates whether the DNS resolution is supported for the VPC. If enabled, queries to the Amazon provided DNS server at the 169.254.169.253 IP address, or the reserved IP address at the base of the VPC network range \"plus two\" succeed. If disabled, the Amazon provided DNS service in the VPC that resolves public DNS hostnames to IP addresses is not enabled. Enabled by default. For more information, see [DNS attributes in your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-dns.html#vpc-dns-support) .", + "title": "EnableDnsSupport", + "type": "boolean" + }, + "InstanceTenancy": { + "markdownDescription": "The allowed tenancy of instances launched into the VPC.\n\n- `default` : An instance launched into the VPC runs on shared hardware by default, unless you explicitly specify a different tenancy during instance launch.\n- `dedicated` : An instance launched into the VPC runs on dedicated hardware by default, unless you explicitly specify a tenancy of `host` during instance launch. You cannot specify a tenancy of `default` during instance launch.\n\nUpdating `InstanceTenancy` requires no replacement only if you are updating its value from `dedicated` to `default` . Updating `InstanceTenancy` from `default` to `dedicated` requires replacement.", + "title": "InstanceTenancy", + "type": "string" + }, + "Ipv4IpamPoolId": { + "markdownDescription": "The ID of an IPv4 IPAM pool you want to use for allocating this VPC's CIDR. For more information, see [What is IPAM?](https://docs.aws.amazon.com//vpc/latest/ipam/what-is-it-ipam.html) in the *Amazon VPC IPAM User Guide* .\n\nYou must specify either `CidrBlock` or `Ipv4IpamPoolId` .", + "title": "Ipv4IpamPoolId", + "type": "string" + }, + "Ipv4NetmaskLength": { + "markdownDescription": "The netmask length of the IPv4 CIDR you want to allocate to this VPC from an Amazon VPC IP Address Manager (IPAM) pool. For more information about IPAM, see [What is IPAM?](https://docs.aws.amazon.com//vpc/latest/ipam/what-is-it-ipam.html) in the *Amazon VPC IPAM User Guide* .", + "title": "Ipv4NetmaskLength", + "type": "number" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "The tags for the VPC.", + "title": "Tags", + "type": "array" + }, + "VpcEncryptionControl": { + "$ref": "#/definitions/AWS::EC2::VPC.VpcEncryptionControl" + } + }, + "type": "object" + }, + "Type": { + "enum": [ + "AWS::EC2::VPC" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type" + ], + "type": "object" + }, + "AWS::EC2::VPC.VpcEncryptionControl": { + "additionalProperties": false, + "properties": { + "EgressOnlyInternetGatewayExclusion": { + "type": "string" + }, + "ElasticFileSystemExclusion": { + "type": "string" + }, + "InternetGatewayExclusion": { + "type": "string" + }, + "LambdaExclusion": { + "type": "string" + }, + "Mode": { + "type": "string" + }, + "NatGatewayExclusion": { + "type": "string" + }, + "ResourceExclusions": { + "$ref": "#/definitions/AWS::EC2::VPC.VpcEncryptionControlExclusions" + }, + "State": { + "type": "string" + }, + "StateMessage": { + "type": "string" + }, + "VirtualPrivateGatewayExclusion": { + "type": "string" + }, + "VpcEncryptionControlId": { + "type": "string" + }, + "VpcId": { + "type": "string" + }, + "VpcLatticeExclusion": { + "type": "string" + }, + "VpcPeeringExclusion": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::EC2::VPC.VpcEncryptionControlExclusion": { + "additionalProperties": false, + "properties": { + "State": { + "type": "string" + }, + "StateMessage": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::EC2::VPC.VpcEncryptionControlExclusions": { + "additionalProperties": false, + "properties": { + "EgressOnlyInternetGateway": { + "$ref": "#/definitions/AWS::EC2::VPC.VpcEncryptionControlExclusion" + }, + "ElasticFileSystem": { + "$ref": "#/definitions/AWS::EC2::VPC.VpcEncryptionControlExclusion" + }, + "InternetGateway": { + "$ref": "#/definitions/AWS::EC2::VPC.VpcEncryptionControlExclusion" + }, + "Lambda": { + "$ref": "#/definitions/AWS::EC2::VPC.VpcEncryptionControlExclusion" + }, + "NatGateway": { + "$ref": "#/definitions/AWS::EC2::VPC.VpcEncryptionControlExclusion" + }, + "VirtualPrivateGateway": { + "$ref": "#/definitions/AWS::EC2::VPC.VpcEncryptionControlExclusion" + }, + "VpcLattice": { + "$ref": "#/definitions/AWS::EC2::VPC.VpcEncryptionControlExclusion" + }, + "VpcPeering": { + "$ref": "#/definitions/AWS::EC2::VPC.VpcEncryptionControlExclusion" + } + }, + "type": "object" + }, + "AWS::EC2::VPCBlockPublicAccessExclusion": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "InternetGatewayExclusionMode": { + "markdownDescription": "The desired VPC Block Public Access mode for a specific VPC or subnet exclusion.\n\n- `allow-bidirectional` : Allow all internet traffic to and from the excluded VPCs and subnets.\n- `allow-egress` : Allow outbound internet traffic from the excluded VPCs and subnets. Block inbound internet traffic to the excluded VPCs and subnets. Only applies when VPC Block Public Access is set to `block-bidirectional` .", + "title": "InternetGatewayExclusionMode", + "type": "string" + }, + "SubnetId": { + "markdownDescription": "The ID of the subnet you want to exclude. Required only if you don't specify VpcId.", + "title": "SubnetId", + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "An array of key-value pairs to apply to this resource.", + "title": "Tags", + "type": "array" + }, + "VpcId": { + "markdownDescription": "The ID of the VPC you want to exclude. Required only if you don't specify SubnetId.", + "title": "VpcId", + "type": "string" + } + }, + "required": [ + "InternetGatewayExclusionMode" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::EC2::VPCBlockPublicAccessExclusion" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::EC2::VPCBlockPublicAccessOptions": { "additionalProperties": false, "properties": { "Condition": { @@ -127984,6 +130931,9 @@ "title": "Tags", "type": "array" }, + "TaskDefinitionArn": { + "type": "string" + }, "TaskRoleArn": { "markdownDescription": "The ARN of the task role for the service revision.", "title": "TaskRoleArn", @@ -127991,9 +130941,7 @@ } }, "required": [ - "ExecutionRoleArn", - "InfrastructureRoleArn", - "PrimaryContainer" + "InfrastructureRoleArn" ], "type": "object" }, @@ -128246,6 +131194,9 @@ "title": "ServiceRevisionArn", "type": "string" }, + "TaskDefinitionArn": { + "type": "string" + }, "TaskRoleArn": { "markdownDescription": "The ARN of the task role for the service revision.", "title": "TaskRoleArn", @@ -128809,10 +131760,16 @@ "title": "Enable", "type": "boolean" }, + "ResetOnHealthyTask": { + "type": "boolean" + }, "Rollback": { "markdownDescription": "Determines whether to configure Amazon ECS to roll back the service if a service deployment fails. If rollback is on, when a service deployment fails, the service is rolled back to the last deployment that completed successfully.", "title": "Rollback", "type": "boolean" + }, + "ThresholdConfiguration": { + "$ref": "#/definitions/AWS::ECS::Service.ThresholdConfiguration" } }, "required": [ @@ -129478,6 +132435,22 @@ ], "type": "object" }, + "AWS::ECS::Service.ThresholdConfiguration": { + "additionalProperties": false, + "properties": { + "Type": { + "type": "string" + }, + "Value": { + "type": "number" + } + }, + "required": [ + "Type", + "Value" + ], + "type": "object" + }, "AWS::ECS::Service.TimeoutConfiguration": { "additionalProperties": false, "properties": { @@ -132130,6 +135103,9 @@ "title": "RoleArn", "type": "string" }, + "RollbackConfig": { + "$ref": "#/definitions/AWS::EKS::Cluster.RollbackConfig" + }, "StorageConfig": { "$ref": "#/definitions/AWS::EKS::Cluster.StorageConfig", "markdownDescription": "Indicates the current configuration of the block storage capability on your EKS Auto Mode cluster. For example, if the capability is enabled or disabled. If the block storage capability is enabled, EKS Auto Mode will create and delete EBS volumes in your AWS account. For more information, see EKS Auto Mode block storage capability in the *Amazon EKS User Guide* .", @@ -132510,6 +135486,15 @@ ], "type": "object" }, + "AWS::EKS::Cluster.RollbackConfig": { + "additionalProperties": false, + "properties": { + "TimeoutMinutes": { + "type": "number" + } + }, + "type": "object" + }, "AWS::EKS::Cluster.StorageConfig": { "additionalProperties": false, "properties": { @@ -135956,6 +138941,9 @@ "ReleaseLabel": { "type": "string" }, + "SessionIdleTimeoutInMinutes": { + "type": "number" + }, "Tags": { "items": { "$ref": "#/definitions/Tag" @@ -136439,6 +139427,9 @@ "title": "SecurityConfigurationId", "type": "string" }, + "SessionEnabled": { + "type": "boolean" + }, "Tags": { "items": { "$ref": "#/definitions/Tag" @@ -137176,12 +140167,8 @@ } }, "required": [ - "ConnectivityInfo", - "LicenseInfo", "ServiceAccessSubnetId", - "SiteId", "TermsAccepted", - "VcfHostnames", "VcfVersion", "VpcId" ], @@ -140243,6 +143230,12 @@ "markdownDescription": "[HTTPS and TLS listeners] The security policy that defines which protocols and ciphers are supported. For more information, see [Security policies](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/describe-ssl-policies.html) in the *Application Load Balancers Guide* and [Security policies](https://docs.aws.amazon.com/elasticloadbalancing/latest/network/describe-ssl-policies.html) in the *Network Load Balancers Guide* .\n\n[HTTPS listeners] Updating the security policy can result in interruptions if the load balancer is handling a high volume of traffic. To decrease the possibility of an interruption if your load balancer is handling a high volume of traffic, create an additional load balancer or request an LCU reservation.", "title": "SslPolicy", "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" } }, "required": [ @@ -140834,6 +143827,12 @@ "title": "Priority", "type": "number" }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + }, "Transforms": { "items": { "$ref": "#/definitions/AWS::ElasticLoadBalancingV2::ListenerRule.Transform" @@ -141412,6 +144411,9 @@ "AWS::ElasticLoadBalancingV2::ListenerRule.SourceIpConfig": { "additionalProperties": false, "properties": { + "IpAddressType": { + "type": "string" + }, "Values": { "items": { "type": "string" @@ -143622,6 +146624,9 @@ "AWS::EntityResolution::MatchingWorkflow.ResolutionTechniques": { "additionalProperties": false, "properties": { + "EnableRealTimeMatching": { + "type": "boolean" + }, "ProviderProperties": { "$ref": "#/definitions/AWS::EntityResolution::MatchingWorkflow.ProviderProperties", "markdownDescription": "The properties of the provider service.", @@ -153897,6 +156902,15 @@ "title": "Enabled", "type": "boolean" }, + "FlowLogsEnabled": { + "type": "boolean" + }, + "FlowLogsS3Bucket": { + "type": "string" + }, + "FlowLogsS3Prefix": { + "type": "string" + }, "IpAddressType": { "markdownDescription": "The IP address type that an accelerator supports. For a standard accelerator, the value can be IPV4 or DUAL_STACK.", "title": "IpAddressType", @@ -154337,6 +157351,84 @@ ], "type": "object" }, + "AWS::Glue::Blueprint": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "BlueprintLocation": { + "type": "string" + }, + "Description": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "BlueprintLocation", + "Name" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Glue::Blueprint" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, "AWS::Glue::Catalog": { "additionalProperties": false, "properties": { @@ -158651,6 +161743,30 @@ ], "type": "object" }, + "AWS::Glue::TableOptimizer.CompactionConfiguration": { + "additionalProperties": false, + "properties": { + "IcebergConfiguration": { + "$ref": "#/definitions/AWS::Glue::TableOptimizer.IcebergCompactionConfiguration" + } + }, + "type": "object" + }, + "AWS::Glue::TableOptimizer.IcebergCompactionConfiguration": { + "additionalProperties": false, + "properties": { + "DeleteFileThreshold": { + "type": "number" + }, + "MinInputFiles": { + "type": "number" + }, + "Strategy": { + "type": "string" + } + }, + "type": "object" + }, "AWS::Glue::TableOptimizer.IcebergConfiguration": { "additionalProperties": false, "properties": { @@ -158713,6 +161829,9 @@ "AWS::Glue::TableOptimizer.TableOptimizerConfiguration": { "additionalProperties": false, "properties": { + "CompactionConfiguration": { + "$ref": "#/definitions/AWS::Glue::TableOptimizer.CompactionConfiguration" + }, "Enabled": { "markdownDescription": "Whether the table optimization is enabled.", "title": "Enabled", @@ -159130,6 +162249,105 @@ }, "type": "object" }, + "AWS::Glue::UserDefinedFunction": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "ClassName": { + "type": "string" + }, + "DatabaseName": { + "type": "string" + }, + "FunctionName": { + "type": "string" + }, + "FunctionType": { + "type": "string" + }, + "OwnerName": { + "type": "string" + }, + "OwnerType": { + "type": "string" + }, + "ResourceUris": { + "items": { + "$ref": "#/definitions/AWS::Glue::UserDefinedFunction.ResourceUri" + }, + "type": "array" + } + }, + "required": [ + "DatabaseName", + "FunctionName" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Glue::UserDefinedFunction" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Glue::UserDefinedFunction.ResourceUri": { + "additionalProperties": false, + "properties": { + "ResourceType": { + "type": "string" + }, + "Uri": { + "type": "string" + } + }, + "type": "object" + }, "AWS::Glue::Workflow": { "additionalProperties": false, "properties": { @@ -159340,6 +162558,12 @@ "title": "StackSetName", "type": "string" }, + "Tags": { + "items": { + "$ref": "#/definitions/AWS::Grafana::Workspace.TagsItems" + }, + "type": "array" + }, "VpcConfiguration": { "$ref": "#/definitions/AWS::Grafana::Workspace.VpcConfiguration", "markdownDescription": "The configuration settings for an Amazon VPC that contains data sources for your Grafana workspace to connect to.\n\n> Connecting to a private VPC is not yet available in the Asia Pacific (Seoul) Region (ap-northeast-2).", @@ -159507,6 +162731,22 @@ ], "type": "object" }, + "AWS::Grafana::Workspace.TagsItems": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, "AWS::Grafana::Workspace.VpcConfiguration": { "additionalProperties": false, "properties": { @@ -165426,6 +168666,151 @@ ], "type": "object" }, + "AWS::HealthLake::DataTransformationProfile": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "KmsKeyId": { + "type": "string" + }, + "ProfileDescription": { + "type": "string" + }, + "ProfileName": { + "type": "string" + }, + "Source": { + "$ref": "#/definitions/AWS::HealthLake::DataTransformationProfile.Source" + }, + "SourceFormat": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "ProfileName", + "SourceFormat" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::HealthLake::DataTransformationProfile" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::HealthLake::DataTransformationProfile.ExistingVersionedProfileSource": { + "additionalProperties": false, + "properties": { + "ProfileId": { + "type": "string" + }, + "Version": { + "type": "number" + } + }, + "required": [ + "ProfileId", + "Version" + ], + "type": "object" + }, + "AWS::HealthLake::DataTransformationProfile.ProfileMappingSource": { + "additionalProperties": false, + "properties": { + "ProfileMapping": { + "additionalProperties": true, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "type": "object" + } + }, + "required": [ + "ProfileMapping" + ], + "type": "object" + }, + "AWS::HealthLake::DataTransformationProfile.Source": { + "additionalProperties": false, + "properties": { + "ExistingVersionedProfileId": { + "$ref": "#/definitions/AWS::HealthLake::DataTransformationProfile.ExistingVersionedProfileSource" + }, + "ProfileMapping": { + "$ref": "#/definitions/AWS::HealthLake::DataTransformationProfile.ProfileMappingSource" + }, + "StarterProfile": { + "$ref": "#/definitions/AWS::HealthLake::DataTransformationProfile.StarterProfileSource" + } + }, + "type": "object" + }, + "AWS::HealthLake::DataTransformationProfile.StarterProfileSource": { + "additionalProperties": false, + "properties": { + "StarterProfileName": { + "type": "string" + } + }, + "required": [ + "StarterProfileName" + ], + "type": "object" + }, "AWS::HealthLake::FHIRDatastore": { "additionalProperties": false, "properties": { @@ -169855,6 +173240,15 @@ "markdownDescription": "Contains settings for vulnerability scans.", "title": "ImageScanningConfiguration" }, + "ImageTags": { + "additionalProperties": true, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "type": "object" + }, "ImageTestsConfiguration": { "$ref": "#/definitions/AWS::ImageBuilder::ImagePipeline.ImageTestsConfiguration", "markdownDescription": "The configuration of the image tests that run after image creation to ensure the quality of the image that was created.", @@ -170030,6 +173424,9 @@ "markdownDescription": "The cron expression determines how often EC2 Image Builder evaluates your `pipelineExecutionStartCondition` .\n\nFor information on how to format a cron expression in Image Builder, see [Use cron expressions in EC2 Image Builder](https://docs.aws.amazon.com/imagebuilder/latest/userguide/image-builder-cron.html) .", "title": "ScheduleExpression", "type": "string" + }, + "Timezone": { + "type": "string" } }, "type": "object" @@ -170133,6 +173530,12 @@ "title": "AmiTags", "type": "object" }, + "AmiWatermarks": { + "items": { + "type": "string" + }, + "type": "array" + }, "BlockDeviceMappings": { "items": { "$ref": "#/definitions/AWS::ImageBuilder::ImageRecipe.InstanceBlockDeviceMapping" @@ -196448,8 +199851,6 @@ "type": "string" }, "S3ObjectStorageMode": { - "markdownDescription": "Controls how Lambda stores the deployment package: `COPY` (Lambda copies the object to its own storage) or `REFERENCE` (Lambda references the object in your S3 bucket; the object must remain in place for the lifetime of the function).", - "title": "S3ObjectStorageMode", "type": "string" }, "S3ObjectVersion": { @@ -196489,6 +199890,9 @@ "title": "ExecutionTimeout", "type": "number" }, + "KMSKeyArn": { + "type": "string" + }, "RetentionPeriodInDays": { "markdownDescription": "The number of days to retain execution history after a durable execution completes. After this period, execution history is no longer available through the GetDurableExecutionHistory API.", "title": "RetentionPeriodInDays", @@ -196857,8 +200261,6 @@ "type": "string" }, "S3ObjectStorageMode": { - "markdownDescription": "Controls how Lambda stores the layer archive: `COPY` (Lambda copies the object to its own storage) or `REFERENCE` (Lambda references the object in your S3 bucket; the object must remain in place for the lifetime of the layer version).", - "title": "S3ObjectStorageMode", "type": "string" }, "S3ObjectVersion": { @@ -196957,7 +200359,7 @@ ], "type": "object" }, - "AWS::Lambda::Permission": { + "AWS::Lambda::MicrovmImage": { "additionalProperties": false, "properties": { "Condition": { @@ -196992,62 +200394,87 @@ "Properties": { "additionalProperties": false, "properties": { - "Action": { - "markdownDescription": "The action that the principal can use on the function. For example, `lambda:InvokeFunction` or `lambda:GetFunction` .", - "title": "Action", - "type": "string" + "AdditionalOsCapabilities": { + "items": { + "type": "string" + }, + "type": "array" }, - "EventSourceToken": { - "markdownDescription": "For Alexa Smart Home functions, a token that the invoker must supply.", - "title": "EventSourceToken", + "BaseImageArn": { "type": "string" }, - "FunctionName": { - "markdownDescription": "The name or ARN of the Lambda function, version, or alias.\n\n**Name formats** - *Function name* \u2013 `my-function` (name-only), `my-function:v1` (with alias).\n- *Function ARN* \u2013 `arn:aws:lambda:us-west-2:123456789012:function:my-function` .\n- *Partial ARN* \u2013 `123456789012:function:my-function` .\n\nYou can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.", - "title": "FunctionName", + "BaseImageVersion": { "type": "string" }, - "FunctionUrlAuthType": { - "markdownDescription": "The type of authentication that your function URL uses. Set to `AWS_IAM` if you want to restrict access to authenticated users only. Set to `NONE` if you want to bypass IAM authentication to create a public endpoint. For more information, see [Control access to Lambda function URLs](https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html) .", - "title": "FunctionUrlAuthType", + "BuildRoleArn": { "type": "string" }, - "InvokedViaFunctionUrl": { - "markdownDescription": "Indicates whether the permission applies when the function is invoked through a function URL.", - "title": "InvokedViaFunctionUrl", - "type": "boolean" + "CodeArtifact": { + "$ref": "#/definitions/AWS::Lambda::MicrovmImage.CodeArtifact" }, - "Principal": { - "markdownDescription": "The AWS service , AWS account , IAM user, or IAM role that invokes the function. If you specify a service, use `SourceArn` or `SourceAccount` to limit who can invoke the function through that service.", - "title": "Principal", - "type": "string" + "CpuConfigurations": { + "items": { + "$ref": "#/definitions/AWS::Lambda::MicrovmImage.CpuConfiguration" + }, + "type": "array" }, - "PrincipalOrgID": { - "markdownDescription": "The identifier for your organization in AWS Organizations . Use this to grant permissions to all the AWS accounts under this organization.", - "title": "PrincipalOrgID", + "Description": { "type": "string" }, - "SourceAccount": { - "markdownDescription": "For AWS service , the ID of the AWS account that owns the resource. Use this together with `SourceArn` to ensure that the specified account owns the resource. It is possible for an Amazon S3 bucket to be deleted by its owner and recreated by another account.", - "title": "SourceAccount", - "type": "string" + "EgressNetworkConnectors": { + "items": { + "type": "string" + }, + "type": "array" }, - "SourceArn": { - "markdownDescription": "For AWS services , the ARN of the AWS resource that invokes the function. For example, an Amazon S3 bucket or Amazon SNS topic.\n\nNote that Lambda configures the comparison using the `StringLike` operator.", - "title": "SourceArn", + "EnvironmentVariables": { + "items": { + "$ref": "#/definitions/AWS::Lambda::MicrovmImage.EnvironmentVariable" + }, + "type": "array" + }, + "Hooks": { + "$ref": "#/definitions/AWS::Lambda::MicrovmImage.Hooks" + }, + "Logging": { + "$ref": "#/definitions/AWS::Lambda::MicrovmImage.Logging" + }, + "Name": { "type": "string" + }, + "Resources": { + "items": { + "$ref": "#/definitions/AWS::Lambda::MicrovmImage.Resources" + }, + "type": "array" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" } }, "required": [ - "Action", - "FunctionName", - "Principal" + "AdditionalOsCapabilities", + "BaseImageArn", + "BaseImageVersion", + "BuildRoleArn", + "CodeArtifact", + "CpuConfigurations", + "Description", + "EgressNetworkConnectors", + "EnvironmentVariables", + "Hooks", + "Logging", + "Name", + "Resources" ], "type": "object" }, "Type": { "enum": [ - "AWS::Lambda::Permission" + "AWS::Lambda::MicrovmImage" ], "type": "string" }, @@ -197066,7 +200493,375 @@ ], "type": "object" }, - "AWS::Lambda::Url": { + "AWS::Lambda::MicrovmImage.CloudWatchLogging": { + "additionalProperties": false, + "properties": { + "LogGroup": { + "type": "string" + }, + "LogStream": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::Lambda::MicrovmImage.CodeArtifact": { + "additionalProperties": false, + "properties": { + "Uri": { + "type": "string" + } + }, + "required": [ + "Uri" + ], + "type": "object" + }, + "AWS::Lambda::MicrovmImage.CpuConfiguration": { + "additionalProperties": false, + "properties": { + "Architecture": { + "type": "string" + } + }, + "required": [ + "Architecture" + ], + "type": "object" + }, + "AWS::Lambda::MicrovmImage.EnvironmentVariable": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, + "AWS::Lambda::MicrovmImage.Hooks": { + "additionalProperties": false, + "properties": { + "MicrovmHooks": { + "$ref": "#/definitions/AWS::Lambda::MicrovmImage.MicrovmHooks" + }, + "MicrovmImageHooks": { + "$ref": "#/definitions/AWS::Lambda::MicrovmImage.MicrovmImageHooks" + }, + "Port": { + "type": "number" + } + }, + "type": "object" + }, + "AWS::Lambda::MicrovmImage.Logging": { + "additionalProperties": false, + "properties": { + "CloudWatch": { + "$ref": "#/definitions/AWS::Lambda::MicrovmImage.CloudWatchLogging" + }, + "Disabled": { + "type": "boolean" + } + }, + "type": "object" + }, + "AWS::Lambda::MicrovmImage.MicrovmHooks": { + "additionalProperties": false, + "properties": { + "Resume": { + "type": "string" + }, + "ResumeTimeoutInSeconds": { + "type": "number" + }, + "Run": { + "type": "string" + }, + "RunTimeoutInSeconds": { + "type": "number" + }, + "Suspend": { + "type": "string" + }, + "SuspendTimeoutInSeconds": { + "type": "number" + }, + "Terminate": { + "type": "string" + }, + "TerminateTimeoutInSeconds": { + "type": "number" + } + }, + "type": "object" + }, + "AWS::Lambda::MicrovmImage.MicrovmImageHooks": { + "additionalProperties": false, + "properties": { + "Ready": { + "type": "string" + }, + "ReadyTimeoutInSeconds": { + "type": "number" + }, + "Validate": { + "type": "string" + }, + "ValidateTimeoutInSeconds": { + "type": "number" + } + }, + "type": "object" + }, + "AWS::Lambda::MicrovmImage.Resources": { + "additionalProperties": false, + "properties": { + "MinimumMemoryInMiB": { + "type": "number" + } + }, + "required": [ + "MinimumMemoryInMiB" + ], + "type": "object" + }, + "AWS::Lambda::NetworkConnector": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Configuration": { + "$ref": "#/definitions/AWS::Lambda::NetworkConnector.Config" + }, + "Name": { + "type": "string" + }, + "OperatorRole": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "Configuration" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Lambda::NetworkConnector" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Lambda::NetworkConnector.Config": { + "additionalProperties": false, + "properties": { + "VpcEgressConfiguration": { + "$ref": "#/definitions/AWS::Lambda::NetworkConnector.VpcEgressConfiguration" + } + }, + "required": [ + "VpcEgressConfiguration" + ], + "type": "object" + }, + "AWS::Lambda::NetworkConnector.VpcEgressConfiguration": { + "additionalProperties": false, + "properties": { + "AssociatedComputeResourceTypes": { + "items": { + "type": "string" + }, + "type": "array" + }, + "NetworkProtocol": { + "type": "string" + }, + "SecurityGroupIds": { + "items": { + "type": "string" + }, + "type": "array" + }, + "SubnetIds": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "AssociatedComputeResourceTypes", + "SubnetIds" + ], + "type": "object" + }, + "AWS::Lambda::Permission": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Action": { + "markdownDescription": "The action that the principal can use on the function. For example, `lambda:InvokeFunction` or `lambda:GetFunction` .", + "title": "Action", + "type": "string" + }, + "EventSourceToken": { + "markdownDescription": "For Alexa Smart Home functions, a token that the invoker must supply.", + "title": "EventSourceToken", + "type": "string" + }, + "FunctionName": { + "markdownDescription": "The name or ARN of the Lambda function, version, or alias.\n\n**Name formats** - *Function name* \u2013 `my-function` (name-only), `my-function:v1` (with alias).\n- *Function ARN* \u2013 `arn:aws:lambda:us-west-2:123456789012:function:my-function` .\n- *Partial ARN* \u2013 `123456789012:function:my-function` .\n\nYou can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.", + "title": "FunctionName", + "type": "string" + }, + "FunctionUrlAuthType": { + "markdownDescription": "The type of authentication that your function URL uses. Set to `AWS_IAM` if you want to restrict access to authenticated users only. Set to `NONE` if you want to bypass IAM authentication to create a public endpoint. For more information, see [Control access to Lambda function URLs](https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html) .", + "title": "FunctionUrlAuthType", + "type": "string" + }, + "InvokedViaFunctionUrl": { + "markdownDescription": "Indicates whether the permission applies when the function is invoked through a function URL.", + "title": "InvokedViaFunctionUrl", + "type": "boolean" + }, + "Principal": { + "markdownDescription": "The AWS service , AWS account , IAM user, or IAM role that invokes the function. If you specify a service, use `SourceArn` or `SourceAccount` to limit who can invoke the function through that service.", + "title": "Principal", + "type": "string" + }, + "PrincipalOrgID": { + "markdownDescription": "The identifier for your organization in AWS Organizations . Use this to grant permissions to all the AWS accounts under this organization.", + "title": "PrincipalOrgID", + "type": "string" + }, + "SourceAccount": { + "markdownDescription": "For AWS service , the ID of the AWS account that owns the resource. Use this together with `SourceArn` to ensure that the specified account owns the resource. It is possible for an Amazon S3 bucket to be deleted by its owner and recreated by another account.", + "title": "SourceAccount", + "type": "string" + }, + "SourceArn": { + "markdownDescription": "For AWS services , the ARN of the AWS resource that invokes the function. For example, an Amazon S3 bucket or Amazon SNS topic.\n\nNote that Lambda configures the comparison using the `StringLike` operator.", + "title": "SourceArn", + "type": "string" + } + }, + "required": [ + "Action", + "FunctionName", + "Principal" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Lambda::Permission" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Lambda::Url": { "additionalProperties": false, "properties": { "Condition": { @@ -207721,6 +211516,429 @@ ], "type": "object" }, + "AWS::MSK::Channel": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "ChannelName": { + "type": "string" + }, + "ClusterArn": { + "type": "string" + }, + "EncryptionConfiguration": { + "$ref": "#/definitions/AWS::MSK::Channel.EncryptionConfiguration" + }, + "IcebergDestinationConfiguration": { + "$ref": "#/definitions/AWS::MSK::Channel.IcebergDestinationConfiguration" + }, + "LoggingInfo": { + "$ref": "#/definitions/AWS::MSK::Channel.ChannelLoggingInfo" + }, + "S3DestinationConfiguration": { + "$ref": "#/definitions/AWS::MSK::Channel.S3DestinationConfiguration" + }, + "Tags": { + "additionalProperties": true, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "type": "object" + }, + "TopicConfigurationList": { + "items": { + "$ref": "#/definitions/AWS::MSK::Channel.TopicConfiguration" + }, + "type": "array" + } + }, + "required": [ + "ChannelName", + "TopicConfigurationList" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::MSK::Channel" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::MSK::Channel.Catalog": { + "additionalProperties": false, + "properties": { + "CatalogArn": { + "type": "string" + }, + "WarehouseLocation": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::MSK::Channel.ChannelLoggingInfo": { + "additionalProperties": false, + "properties": { + "CloudWatchLogs": { + "$ref": "#/definitions/AWS::MSK::Channel.CloudWatchLogsLogDestination" + }, + "Firehose": { + "$ref": "#/definitions/AWS::MSK::Channel.FirehoseLogDestination" + }, + "S3": { + "$ref": "#/definitions/AWS::MSK::Channel.S3LogDestination" + } + }, + "type": "object" + }, + "AWS::MSK::Channel.ChannelStateInfo": { + "additionalProperties": false, + "properties": { + "Code": { + "type": "string" + }, + "Message": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::MSK::Channel.CloudWatchLogsLogDestination": { + "additionalProperties": false, + "properties": { + "Enabled": { + "type": "boolean" + }, + "LogGroup": { + "type": "string" + } + }, + "required": [ + "Enabled" + ], + "type": "object" + }, + "AWS::MSK::Channel.DeadLetterQueueS3": { + "additionalProperties": false, + "properties": { + "BucketArn": { + "type": "string" + }, + "ErrorOutputPrefix": { + "type": "string" + }, + "ExpectedBucketOwner": { + "type": "string" + } + }, + "required": [ + "BucketArn", + "ErrorOutputPrefix" + ], + "type": "object" + }, + "AWS::MSK::Channel.DestinationTable": { + "additionalProperties": false, + "properties": { + "DestinationDatabaseName": { + "type": "string" + }, + "DestinationTableName": { + "type": "string" + }, + "PartitionSpec": { + "$ref": "#/definitions/AWS::MSK::Channel.PartitionSpec" + } + }, + "required": [ + "DestinationDatabaseName", + "DestinationTableName" + ], + "type": "object" + }, + "AWS::MSK::Channel.EncryptionConfiguration": { + "additionalProperties": false, + "properties": { + "KmsKeyArn": { + "type": "string" + } + }, + "required": [ + "KmsKeyArn" + ], + "type": "object" + }, + "AWS::MSK::Channel.FirehoseLogDestination": { + "additionalProperties": false, + "properties": { + "DeliveryStream": { + "type": "string" + }, + "Enabled": { + "type": "boolean" + } + }, + "required": [ + "Enabled" + ], + "type": "object" + }, + "AWS::MSK::Channel.IcebergDestinationConfiguration": { + "additionalProperties": false, + "properties": { + "AppendOnly": { + "type": "boolean" + }, + "Catalog": { + "$ref": "#/definitions/AWS::MSK::Channel.Catalog" + }, + "CompressionType": { + "type": "string" + }, + "DataFreshnessInSeconds": { + "type": "number" + }, + "DeadLetterQueueS3": { + "$ref": "#/definitions/AWS::MSK::Channel.DeadLetterQueueS3" + }, + "DestinationTableList": { + "items": { + "$ref": "#/definitions/AWS::MSK::Channel.DestinationTable" + }, + "type": "array" + }, + "SchemaEvolution": { + "$ref": "#/definitions/AWS::MSK::Channel.SchemaEvolution" + }, + "ServiceExecutionRoleArn": { + "type": "string" + }, + "TableCreation": { + "$ref": "#/definitions/AWS::MSK::Channel.TableCreation" + } + }, + "required": [ + "AppendOnly", + "DeadLetterQueueS3", + "DestinationTableList", + "SchemaEvolution", + "ServiceExecutionRoleArn", + "TableCreation" + ], + "type": "object" + }, + "AWS::MSK::Channel.PartitionSource": { + "additionalProperties": false, + "properties": { + "SourceName": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::MSK::Channel.PartitionSpec": { + "additionalProperties": false, + "properties": { + "PartitionStrategy": { + "type": "string" + }, + "SourceList": { + "items": { + "$ref": "#/definitions/AWS::MSK::Channel.PartitionSource" + }, + "type": "array" + } + }, + "required": [ + "PartitionStrategy" + ], + "type": "object" + }, + "AWS::MSK::Channel.RecordConverter": { + "additionalProperties": false, + "properties": { + "ValueConverter": { + "type": "string" + } + }, + "required": [ + "ValueConverter" + ], + "type": "object" + }, + "AWS::MSK::Channel.RecordSchema": { + "additionalProperties": false, + "properties": { + "GsrArn": { + "type": "string" + } + }, + "required": [ + "GsrArn" + ], + "type": "object" + }, + "AWS::MSK::Channel.S3DestinationConfiguration": { + "additionalProperties": false, + "properties": { + "DataFreshnessInSeconds": { + "type": "number" + }, + "DeadLetterQueueS3": { + "$ref": "#/definitions/AWS::MSK::Channel.DeadLetterQueueS3" + }, + "ServiceExecutionRoleArn": { + "type": "string" + }, + "Storage": { + "$ref": "#/definitions/AWS::MSK::Channel.S3Storage" + } + }, + "required": [ + "DeadLetterQueueS3", + "ServiceExecutionRoleArn", + "Storage" + ], + "type": "object" + }, + "AWS::MSK::Channel.S3LogDestination": { + "additionalProperties": false, + "properties": { + "Bucket": { + "type": "string" + }, + "Enabled": { + "type": "boolean" + }, + "Prefix": { + "type": "string" + } + }, + "required": [ + "Enabled" + ], + "type": "object" + }, + "AWS::MSK::Channel.S3Storage": { + "additionalProperties": false, + "properties": { + "BucketArn": { + "type": "string" + }, + "CompressionType": { + "type": "string" + }, + "ExpectedBucketOwner": { + "type": "string" + }, + "OutputKeyTemplate": { + "type": "string" + }, + "OutputPrefix": { + "type": "string" + }, + "StorageClass": { + "type": "string" + } + }, + "required": [ + "BucketArn", + "CompressionType", + "StorageClass" + ], + "type": "object" + }, + "AWS::MSK::Channel.SchemaEvolution": { + "additionalProperties": false, + "properties": { + "EnableSchemaEvolution": { + "type": "boolean" + } + }, + "required": [ + "EnableSchemaEvolution" + ], + "type": "object" + }, + "AWS::MSK::Channel.TableCreation": { + "additionalProperties": false, + "properties": { + "EnableTableCreation": { + "type": "boolean" + } + }, + "required": [ + "EnableTableCreation" + ], + "type": "object" + }, + "AWS::MSK::Channel.TopicConfiguration": { + "additionalProperties": false, + "properties": { + "RecordConverter": { + "$ref": "#/definitions/AWS::MSK::Channel.RecordConverter" + }, + "RecordSchema": { + "$ref": "#/definitions/AWS::MSK::Channel.RecordSchema" + }, + "TopicArn": { + "type": "string" + } + }, + "required": [ + "RecordConverter", + "TopicArn" + ], + "type": "object" + }, "AWS::MSK::Cluster": { "additionalProperties": false, "properties": { @@ -208826,13 +213044,13 @@ "AWS::MSK::Replicator.KafkaClusterClientAuthentication": { "additionalProperties": false, "properties": { + "MTLS": { + "$ref": "#/definitions/AWS::MSK::Replicator.KafkaClusterMtlsAuthentication" + }, "SaslScram": { "$ref": "#/definitions/AWS::MSK::Replicator.KafkaClusterSaslScramAuthentication" } }, - "required": [ - "SaslScram" - ], "type": "object" }, "AWS::MSK::Replicator.KafkaClusterClientVpcConfig": { @@ -208875,6 +213093,18 @@ ], "type": "object" }, + "AWS::MSK::Replicator.KafkaClusterMtlsAuthentication": { + "additionalProperties": false, + "properties": { + "SecretArn": { + "type": "string" + } + }, + "required": [ + "SecretArn" + ], + "type": "object" + }, "AWS::MSK::Replicator.KafkaClusterSaslScramAuthentication": { "additionalProperties": false, "properties": { @@ -213104,6 +217334,9 @@ "markdownDescription": "", "title": "Configuration" }, + "ContentQualityAnalysisConfiguration": { + "$ref": "#/definitions/AWS::MediaConnect::RouterInput.RouterContentQualityAnalysisConfiguration" + }, "MaintenanceConfiguration": { "$ref": "#/definitions/AWS::MediaConnect::RouterInput.MaintenanceConfiguration", "markdownDescription": "The maintenance configuration settings applied to this router input.", @@ -213178,6 +217411,37 @@ ], "type": "object" }, + "AWS::MediaConnect::RouterInput.BlackFramesConfiguration": { + "additionalProperties": false, + "properties": { + "State": { + "type": "string" + }, + "ThresholdSeconds": { + "type": "number" + } + }, + "required": [ + "State", + "ThresholdSeconds" + ], + "type": "object" + }, + "AWS::MediaConnect::RouterInput.ContentQualityAnalysisFeatureConfiguration": { + "additionalProperties": false, + "properties": { + "BlackFrames": { + "$ref": "#/definitions/AWS::MediaConnect::RouterInput.BlackFramesConfiguration" + }, + "FrozenFrames": { + "$ref": "#/definitions/AWS::MediaConnect::RouterInput.FrozenFramesConfiguration" + }, + "SilentAudio": { + "$ref": "#/definitions/AWS::MediaConnect::RouterInput.SilentAudioConfiguration" + } + }, + "type": "object" + }, "AWS::MediaConnect::RouterInput.FailoverRouterInputConfiguration": { "additionalProperties": false, "properties": { @@ -213273,6 +217537,22 @@ }, "type": "object" }, + "AWS::MediaConnect::RouterInput.FrozenFramesConfiguration": { + "additionalProperties": false, + "properties": { + "State": { + "type": "string" + }, + "ThresholdSeconds": { + "type": "number" + } + }, + "required": [ + "State", + "ThresholdSeconds" + ], + "type": "object" + }, "AWS::MediaConnect::RouterInput.MaintenanceConfiguration": { "additionalProperties": false, "properties": { @@ -213446,6 +217726,18 @@ ], "type": "object" }, + "AWS::MediaConnect::RouterInput.RouterContentQualityAnalysisConfiguration": { + "additionalProperties": false, + "properties": { + "ContentLevel": { + "$ref": "#/definitions/AWS::MediaConnect::RouterInput.ContentQualityAnalysisFeatureConfiguration" + } + }, + "required": [ + "ContentLevel" + ], + "type": "object" + }, "AWS::MediaConnect::RouterInput.RouterInputConfiguration": { "additionalProperties": false, "properties": { @@ -213575,6 +217867,22 @@ ], "type": "object" }, + "AWS::MediaConnect::RouterInput.SilentAudioConfiguration": { + "additionalProperties": false, + "properties": { + "State": { + "type": "string" + }, + "ThresholdSeconds": { + "type": "number" + } + }, + "required": [ + "State", + "ThresholdSeconds" + ], + "type": "object" + }, "AWS::MediaConnect::RouterInput.SrtCallerRouterInputConfiguration": { "additionalProperties": false, "properties": { @@ -222210,6 +226518,125 @@ }, "type": "object" }, + "AWS::MediaLive::Node": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "ClusterId": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "NodeInterfaceMappings": { + "items": { + "$ref": "#/definitions/AWS::MediaLive::Node.NodeInterfaceMapping" + }, + "type": "array" + }, + "Role": { + "type": "string" + }, + "SdiSourceMappings": { + "items": { + "$ref": "#/definitions/AWS::MediaLive::Node.SdiSourceMapping" + }, + "type": "array" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "ClusterId" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::MediaLive::Node" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::MediaLive::Node.NodeInterfaceMapping": { + "additionalProperties": false, + "properties": { + "LogicalInterfaceName": { + "type": "string" + }, + "NetworkInterfaceMode": { + "type": "string" + }, + "PhysicalInterfaceName": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::MediaLive::Node.SdiSourceMapping": { + "additionalProperties": false, + "properties": { + "CardNumber": { + "type": "number" + }, + "ChannelNumber": { + "type": "number" + }, + "SdiSource": { + "type": "string" + } + }, + "type": "object" + }, "AWS::MediaLive::SdiSource": { "additionalProperties": false, "properties": { @@ -230056,6 +234483,125 @@ ], "type": "object" }, + "AWS::NetworkFlowMonitor::Monitor": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "LocalResources": { + "items": { + "$ref": "#/definitions/AWS::NetworkFlowMonitor::Monitor.MonitorLocalResource" + }, + "type": "array" + }, + "MonitorName": { + "type": "string" + }, + "RemoteResources": { + "items": { + "$ref": "#/definitions/AWS::NetworkFlowMonitor::Monitor.MonitorRemoteResource" + }, + "type": "array" + }, + "ScopeArn": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "LocalResources", + "MonitorName" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::NetworkFlowMonitor::Monitor" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::NetworkFlowMonitor::Monitor.MonitorLocalResource": { + "additionalProperties": false, + "properties": { + "Identifier": { + "type": "string" + }, + "Type": { + "type": "string" + } + }, + "required": [ + "Identifier", + "Type" + ], + "type": "object" + }, + "AWS::NetworkFlowMonitor::Monitor.MonitorRemoteResource": { + "additionalProperties": false, + "properties": { + "Identifier": { + "type": "string" + }, + "Type": { + "type": "string" + } + }, + "required": [ + "Identifier", + "Type" + ], + "type": "object" + }, "AWS::NetworkManager::ConnectAttachment": { "additionalProperties": false, "properties": { @@ -237905,6 +242451,45 @@ ], "type": "object" }, + "AWS::OpenSearchServerless::Index.Analysis": { + "additionalProperties": false, + "properties": { + "Analyzer": { + "additionalProperties": false, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "$ref": "#/definitions/AWS::OpenSearchServerless::Index.AnalyzerItems" + } + }, + "type": "object" + } + }, + "type": "object" + }, + "AWS::OpenSearchServerless::Index.AnalyzerItems": { + "additionalProperties": false, + "properties": { + "CharFilter": { + "items": { + "type": "string" + }, + "type": "array" + }, + "Filter": { + "items": { + "type": "string" + }, + "type": "array" + }, + "Tokenizer": { + "type": "string" + }, + "Type": { + "type": "string" + } + }, + "type": "object" + }, "AWS::OpenSearchServerless::Index.Index": { "additionalProperties": false, "properties": { @@ -237929,6 +242514,9 @@ "AWS::OpenSearchServerless::Index.IndexSettings": { "additionalProperties": false, "properties": { + "Analysis": { + "$ref": "#/definitions/AWS::OpenSearchServerless::Index.Analysis" + }, "Index": { "$ref": "#/definitions/AWS::OpenSearchServerless::Index.Index", "markdownDescription": "Index settings.", @@ -238002,6 +242590,15 @@ "AWS::OpenSearchServerless::Index.PropertyMapping": { "additionalProperties": false, "properties": { + "Analyzer": { + "type": "string" + }, + "CompressionLevel": { + "type": "string" + }, + "DataType": { + "type": "string" + }, "Dimension": { "markdownDescription": "Dimension size for vector fields, defines the number of dimensions in the vector.", "title": "Dimension", @@ -238028,6 +242625,9 @@ "title": "Properties", "type": "object" }, + "SpaceType": { + "type": "string" + }, "Type": { "markdownDescription": "The field data type. Must be a valid OpenSearch field type.", "title": "Type", @@ -238740,6 +243340,9 @@ "markdownDescription": "Whether the domain should encrypt data at rest, and if so, the AWS key to use. See [Encryption of data at rest for Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/encryption-at-rest.html) .\n\nIf no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property.", "title": "EncryptionAtRestOptions" }, + "EngineMode": { + "type": "string" + }, "EngineVersion": { "markdownDescription": "The version of OpenSearch to use. The value must be in the format `OpenSearch_X.Y` or `Elasticsearch_X.Y` . If not specified, the latest version of OpenSearch is used. For information about the versions that OpenSearch Service supports, see [Supported versions of OpenSearch and Elasticsearch](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/what-is.html#choosing-version) in the *Amazon OpenSearch Service Developer Guide* .\n\nIf you set the [EnableVersionUpgrade](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatepolicy.html#cfn-attributes-updatepolicy-upgradeopensearchdomain) update policy to `true` , you can update `EngineVersion` without interruption. When `EnableVersionUpgrade` is set to `false` , or is not specified, updating `EngineVersion` results in [replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) .", "title": "EngineVersion", @@ -238799,6 +243402,9 @@ "title": "Tags", "type": "array" }, + "UseCase": { + "type": "string" + }, "VPCOptions": { "$ref": "#/definitions/AWS::OpenSearchService::Domain.VPCOptions", "markdownDescription": "The virtual private cloud (VPC) configuration for the OpenSearch Service domain. For more information, see [Launching your Amazon OpenSearch Service domains within a VPC](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/vpc.html) in the *Amazon OpenSearch Service Developer Guide* .\n\nIf you remove this entity altogether, along with its associated properties, it causes a replacement. You might encounter this scenario if you're updating your security configuration from a VPC to a public endpoint.", @@ -241108,17 +245714,197 @@ "Properties": { "additionalProperties": false, "properties": { - "FeatureSet": { - "markdownDescription": "Specifies the feature set supported by the new organization. Each feature set supports different levels of functionality.\n\n- `ALL` In addition to all the features supported by the consolidated billing feature set, the management account gains access to advanced features that give you more control over accounts in your organization. For more information, see [All features](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#feature-set-all) in the *AWS Organizations User Guide* .\n- `CONSOLIDATED_BILLING` All member accounts have their bills consolidated to and paid by the management account. For more information, see [Consolidated billing](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#feature-set-cb-only) in the *AWS Organizations User Guide* .\n\n> The consolidated billing feature feature set isn't available for organizations in the AWS GovCloud (US) Region.\n\nIf you don't specify this property, the default value is `ALL` .", - "title": "FeatureSet", + "FeatureSet": { + "markdownDescription": "Specifies the feature set supported by the new organization. Each feature set supports different levels of functionality.\n\n- `ALL` In addition to all the features supported by the consolidated billing feature set, the management account gains access to advanced features that give you more control over accounts in your organization. For more information, see [All features](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#feature-set-all) in the *AWS Organizations User Guide* .\n- `CONSOLIDATED_BILLING` All member accounts have their bills consolidated to and paid by the management account. For more information, see [Consolidated billing](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#feature-set-cb-only) in the *AWS Organizations User Guide* .\n\n> The consolidated billing feature feature set isn't available for organizations in the AWS GovCloud (US) Region.\n\nIf you don't specify this property, the default value is `ALL` .", + "title": "FeatureSet", + "type": "string" + } + }, + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Organizations::Organization" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type" + ], + "type": "object" + }, + "AWS::Organizations::OrganizationalUnit": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Name": { + "markdownDescription": "The friendly name of this OU.\n\nThe [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) that is used to validate this parameter is a string of any of the characters in the ASCII character range.", + "title": "Name", + "type": "string" + }, + "ParentId": { + "markdownDescription": "The unique identifier (ID) of the parent root or OU that you want to create the new OU in.\n\n> To update the `ParentId` parameter value, you must first remove all accounts attached to the organizational unit (OU). OUs can't be moved within the organization with accounts still attached. \n\nThe [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) for a parent ID string requires one of the following:\n\n- *Root* - A string that begins with \"r-\" followed by from 4 to 32 lowercase letters or digits.\n- *Organizational unit (OU)* - A string that begins with \"ou-\" followed by from 4 to 32 lowercase letters or digits (the ID of the root that the OU is in). This string is followed by a second \"-\" dash and from 8 to 32 additional lowercase letters or digits.", + "title": "ParentId", + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "A list of tags that you want to attach to the newly created OU. For each tag in the list, you must specify both a tag key and a value. You can set the value to an empty string, but you can't set it to `null` . For more information about tagging, see [Tagging AWS Organizations resources](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html) in the AWS Organizations User Guide.\n\n> If any one of the tags is not valid or if you exceed the allowed number of tags for an OU, then the entire request fails and the OU is not created.", + "title": "Tags", + "type": "array" + } + }, + "required": [ + "Name", + "ParentId" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Organizations::OrganizationalUnit" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Organizations::Policy": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Content": { + "markdownDescription": "The policy text content. You can specify the policy content as a JSON object or a JSON string.\n\n> When you specify the policy content as a JSON string, you can't perform drift detection on the CloudFormation stack. For this reason, we recommend specifying the policy content as a JSON object instead. \n\nThe text that you supply must adhere to the rules of the policy type you specify in the `Type` parameter. The following AWS Organizations quotas are enforced for the maximum size of a policy document:\n\n- Service control policies: 5,120 characters\n- Resource control policies: 5,120 characters\n- Declarative policies: 10,000 characters\n- Backup policies: 10,000 characters\n- Tag policies: 10,000 characters\n- Chat applications policies: 10,000 characters\n- AI services opt-out policies: 2,500 characters\n- Security Hub policies: 10,000 characters\n- Amazon Inspector policies: 10,000 characters\n- Amazon Bedrock policies: 10,000 characters\n- Upgrade rollout policies: 10,000 characters\n\nFor more information about Organizations service quotas, see [Quotas for AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html) in the *AWS Organizations User Guide* .", + "title": "Content", + "type": "object" + }, + "Description": { + "markdownDescription": "Human readable description of the policy.", + "title": "Description", + "type": "string" + }, + "Name": { + "markdownDescription": "Name of the policy.\n\nThe [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) that is used to validate this parameter is a string of any of the characters in the ASCII character range.", + "title": "Name", + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "A list of tags that you want to attach to the newly created policy. For each tag in the list, you must specify both a tag key and a value. You can set the value to an empty string, but you can't set it to `null` . For more information about tagging, see [Tagging AWS Organizations resources](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html) in the AWS Organizations User Guide.\n\n> If any one of the tags is not valid or if you exceed the allowed number of tags for a policy, then the entire request fails and the policy is not created.", + "title": "Tags", + "type": "array" + }, + "TargetIds": { + "items": { + "type": "string" + }, + "markdownDescription": "List of unique identifiers (IDs) of the root, OU, or account that you want to attach the policy to. You can get the ID by calling the [ListRoots](https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListRoots.html) , [ListOrganizationalUnitsForParent](https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListOrganizationalUnitsForParent.html) , or [ListAccounts](https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListAccounts.html) operations. If you don't specify this parameter, the policy is created but not attached to any organization resource.\n\nThe [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) for a target ID string requires one of the following:\n\n- *Root* - A string that begins with \"r-\" followed by from 4 to 32 lowercase letters or digits.\n- *Account* - A string that consists of exactly 12 digits.\n- *Organizational unit (OU)* - A string that begins with \"ou-\" followed by from 4 to 32 lowercase letters or digits (the ID of the root that the OU is in). This string is followed by a second \"-\" dash and from 8 to 32 additional lowercase letters or digits.", + "title": "TargetIds", + "type": "array" + }, + "Type": { + "markdownDescription": "The type of policy to create.", + "title": "Type", "type": "string" } }, + "required": [ + "Content", + "Name", + "Type" + ], "type": "object" }, "Type": { "enum": [ - "AWS::Organizations::Organization" + "AWS::Organizations::Policy" ], "type": "string" }, @@ -241132,11 +245918,12 @@ } }, "required": [ - "Type" + "Type", + "Properties" ], "type": "object" }, - "AWS::Organizations::OrganizationalUnit": { + "AWS::Organizations::ResourcePolicy": { "additionalProperties": false, "properties": { "Condition": { @@ -241171,34 +245958,28 @@ "Properties": { "additionalProperties": false, "properties": { - "Name": { - "markdownDescription": "The friendly name of this OU.\n\nThe [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) that is used to validate this parameter is a string of any of the characters in the ASCII character range.", - "title": "Name", - "type": "string" - }, - "ParentId": { - "markdownDescription": "The unique identifier (ID) of the parent root or OU that you want to create the new OU in.\n\n> To update the `ParentId` parameter value, you must first remove all accounts attached to the organizational unit (OU). OUs can't be moved within the organization with accounts still attached. \n\nThe [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) for a parent ID string requires one of the following:\n\n- *Root* - A string that begins with \"r-\" followed by from 4 to 32 lowercase letters or digits.\n- *Organizational unit (OU)* - A string that begins with \"ou-\" followed by from 4 to 32 lowercase letters or digits (the ID of the root that the OU is in). This string is followed by a second \"-\" dash and from 8 to 32 additional lowercase letters or digits.", - "title": "ParentId", - "type": "string" + "Content": { + "markdownDescription": "The policy text of the organization resource policy. You can specify the resource policy content as a JSON object or a JSON string.\n\n> When you specify the resource policy content as a JSON string, you can't perform drift detection on the CloudFormation stack. For this reason, we recommend specifying the resource policy content as a JSON object instead.", + "title": "Content", + "type": "object" }, "Tags": { "items": { "$ref": "#/definitions/Tag" }, - "markdownDescription": "A list of tags that you want to attach to the newly created OU. For each tag in the list, you must specify both a tag key and a value. You can set the value to an empty string, but you can't set it to `null` . For more information about tagging, see [Tagging AWS Organizations resources](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html) in the AWS Organizations User Guide.\n\n> If any one of the tags is not valid or if you exceed the allowed number of tags for an OU, then the entire request fails and the OU is not created.", + "markdownDescription": "A list of tags that you want to attach to the newly created resource policy. For each tag in the list, you must specify both a tag key and a value. You can set the value to an empty string, but you can't set it to `null` . For more information about tagging, see [Tagging AWS Organizations resources](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html) in the *AWS Organizations User Guide* .\n\n> If any one of the tags is not valid or if you exceed the allowed number of tags for the resource policy, then the entire request fails and the resource policy is not created.", "title": "Tags", "type": "array" } }, "required": [ - "Name", - "ParentId" + "Content" ], "type": "object" }, "Type": { "enum": [ - "AWS::Organizations::OrganizationalUnit" + "AWS::Organizations::ResourcePolicy" ], "type": "string" }, @@ -241217,7 +245998,7 @@ ], "type": "object" }, - "AWS::Organizations::Policy": { + "AWS::Outposts::Site": { "additionalProperties": false, "properties": { "Condition": { @@ -241252,53 +246033,39 @@ "Properties": { "additionalProperties": false, "properties": { - "Content": { - "markdownDescription": "The policy text content. You can specify the policy content as a JSON object or a JSON string.\n\n> When you specify the policy content as a JSON string, you can't perform drift detection on the CloudFormation stack. For this reason, we recommend specifying the policy content as a JSON object instead. \n\nThe text that you supply must adhere to the rules of the policy type you specify in the `Type` parameter. The following AWS Organizations quotas are enforced for the maximum size of a policy document:\n\n- Service control policies: 5,120 characters\n- Resource control policies: 5,120 characters\n- Declarative policies: 10,000 characters\n- Backup policies: 10,000 characters\n- Tag policies: 10,000 characters\n- Chat applications policies: 10,000 characters\n- AI services opt-out policies: 2,500 characters\n- Security Hub policies: 10,000 characters\n- Amazon Inspector policies: 10,000 characters\n- Amazon Bedrock policies: 10,000 characters\n- Upgrade rollout policies: 10,000 characters\n\nFor more information about Organizations service quotas, see [Quotas for AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html) in the *AWS Organizations User Guide* .", - "title": "Content", - "type": "object" - }, "Description": { - "markdownDescription": "Human readable description of the policy.", - "title": "Description", "type": "string" }, "Name": { - "markdownDescription": "Name of the policy.\n\nThe [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) that is used to validate this parameter is a string of any of the characters in the ASCII character range.", - "title": "Name", "type": "string" }, + "Notes": { + "type": "string" + }, + "OperatingAddress": { + "$ref": "#/definitions/AWS::Outposts::Site.Address" + }, + "RackPhysicalProperties": { + "$ref": "#/definitions/AWS::Outposts::Site.RackPhysicalProperties" + }, + "ShippingAddress": { + "$ref": "#/definitions/AWS::Outposts::Site.Address" + }, "Tags": { "items": { "$ref": "#/definitions/Tag" }, - "markdownDescription": "A list of tags that you want to attach to the newly created policy. For each tag in the list, you must specify both a tag key and a value. You can set the value to an empty string, but you can't set it to `null` . For more information about tagging, see [Tagging AWS Organizations resources](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html) in the AWS Organizations User Guide.\n\n> If any one of the tags is not valid or if you exceed the allowed number of tags for a policy, then the entire request fails and the policy is not created.", - "title": "Tags", - "type": "array" - }, - "TargetIds": { - "items": { - "type": "string" - }, - "markdownDescription": "List of unique identifiers (IDs) of the root, OU, or account that you want to attach the policy to. You can get the ID by calling the [ListRoots](https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListRoots.html) , [ListOrganizationalUnitsForParent](https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListOrganizationalUnitsForParent.html) , or [ListAccounts](https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListAccounts.html) operations. If you don't specify this parameter, the policy is created but not attached to any organization resource.\n\nThe [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) for a target ID string requires one of the following:\n\n- *Root* - A string that begins with \"r-\" followed by from 4 to 32 lowercase letters or digits.\n- *Account* - A string that consists of exactly 12 digits.\n- *Organizational unit (OU)* - A string that begins with \"ou-\" followed by from 4 to 32 lowercase letters or digits (the ID of the root that the OU is in). This string is followed by a second \"-\" dash and from 8 to 32 additional lowercase letters or digits.", - "title": "TargetIds", "type": "array" - }, - "Type": { - "markdownDescription": "The type of policy to create.", - "title": "Type", - "type": "string" } }, "required": [ - "Content", - "Name", - "Type" + "Name" ], "type": "object" }, "Type": { "enum": [ - "AWS::Organizations::Policy" + "AWS::Outposts::Site" ], "type": "string" }, @@ -241317,81 +246084,87 @@ ], "type": "object" }, - "AWS::Organizations::ResourcePolicy": { + "AWS::Outposts::Site.Address": { "additionalProperties": false, "properties": { - "Condition": { + "AddressLine1": { "type": "string" }, - "DeletionPolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], + "AddressLine2": { "type": "string" }, - "DependsOn": { - "anyOf": [ - { - "pattern": "^[a-zA-Z0-9]+$", - "type": "string" - }, - { - "items": { - "pattern": "^[a-zA-Z0-9]+$", - "type": "string" - }, - "type": "array" - } - ] + "AddressLine3": { + "type": "string" }, - "Metadata": { - "type": "object" + "City": { + "type": "string" }, - "Properties": { - "additionalProperties": false, - "properties": { - "Content": { - "markdownDescription": "The policy text of the organization resource policy. You can specify the resource policy content as a JSON object or a JSON string.\n\n> When you specify the resource policy content as a JSON string, you can't perform drift detection on the CloudFormation stack. For this reason, we recommend specifying the resource policy content as a JSON object instead.", - "title": "Content", - "type": "object" - }, - "Tags": { - "items": { - "$ref": "#/definitions/Tag" - }, - "markdownDescription": "A list of tags that you want to attach to the newly created resource policy. For each tag in the list, you must specify both a tag key and a value. You can set the value to an empty string, but you can't set it to `null` . For more information about tagging, see [Tagging AWS Organizations resources](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html) in the *AWS Organizations User Guide* .\n\n> If any one of the tags is not valid or if you exceed the allowed number of tags for the resource policy, then the entire request fails and the resource policy is not created.", - "title": "Tags", - "type": "array" - } - }, - "required": [ - "Content" - ], - "type": "object" + "ContactName": { + "type": "string" }, - "Type": { - "enum": [ - "AWS::Organizations::ResourcePolicy" - ], + "ContactPhoneNumber": { "type": "string" }, - "UpdateReplacePolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], + "CountryCode": { + "type": "string" + }, + "DistrictOrCounty": { + "type": "string" + }, + "Municipality": { + "type": "string" + }, + "PostalCode": { + "type": "string" + }, + "StateOrRegion": { "type": "string" } }, "required": [ - "Type", - "Properties" + "AddressLine1", + "City", + "ContactName", + "ContactPhoneNumber", + "CountryCode", + "PostalCode", + "StateOrRegion" ], "type": "object" }, + "AWS::Outposts::Site.RackPhysicalProperties": { + "additionalProperties": false, + "properties": { + "FiberOpticCableType": { + "type": "string" + }, + "MaximumSupportedWeightLbs": { + "type": "string" + }, + "OpticalStandard": { + "type": "string" + }, + "PowerConnector": { + "type": "string" + }, + "PowerDrawKva": { + "type": "string" + }, + "PowerFeedDrop": { + "type": "string" + }, + "PowerPhase": { + "type": "string" + }, + "UplinkCount": { + "type": "string" + }, + "UplinkGbps": { + "type": "string" + } + }, + "type": "object" + }, "AWS::PCAConnectorAD::Connector": { "additionalProperties": false, "properties": { @@ -243459,6 +248232,9 @@ "title": "Name", "type": "string" }, + "NodeLifecycleActions": { + "$ref": "#/definitions/AWS::PCS::ComputeNodeGroup.NodeLifecycleActions" + }, "PurchaseOption": { "markdownDescription": "Specifies how EC2 instances are purchased on your behalf. AWS PCS supports On-Demand Instances, Spot Instances, and Amazon EC2 Capacity Blocks for ML. For more information, see [Amazon EC2 billing and purchasing options](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-purchasing-options.html) in the *Amazon Elastic Compute Cloud User Guide* . For more information about AWS PCS support for Capacity Blocks, see [Using Amazon EC2 Capacity Blocks for ML with AWS PCS](https://docs.aws.amazon.com/pcs/latest/userguide/capacity-blocks.html) in the *AWS PCS User Guide* . If you don't provide this option, it defaults to On-Demand.", "title": "PurchaseOption", @@ -243576,6 +248352,67 @@ }, "type": "object" }, + "AWS::PCS::ComputeNodeGroup.NodeLifecycleActions": { + "additionalProperties": false, + "properties": { + "ScriptCachingPolicy": { + "type": "string" + }, + "Stages": { + "$ref": "#/definitions/AWS::PCS::ComputeNodeGroup.NodeLifecycleStages" + } + }, + "required": [ + "Stages" + ], + "type": "object" + }, + "AWS::PCS::ComputeNodeGroup.NodeLifecycleScript": { + "additionalProperties": false, + "properties": { + "Arguments": { + "items": { + "type": "string" + }, + "type": "array" + }, + "ExecutionPolicy": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "OnError": { + "type": "string" + }, + "ScriptSource": { + "$ref": "#/definitions/AWS::PCS::ComputeNodeGroup.ScriptSource" + } + }, + "required": [ + "Name", + "ScriptSource" + ], + "type": "object" + }, + "AWS::PCS::ComputeNodeGroup.NodeLifecycleStages": { + "additionalProperties": false, + "properties": { + "NodeBootstrapped": { + "items": { + "$ref": "#/definitions/AWS::PCS::ComputeNodeGroup.NodeLifecycleScript" + }, + "type": "array" + }, + "NodeReady": { + "items": { + "$ref": "#/definitions/AWS::PCS::ComputeNodeGroup.NodeLifecycleScript" + }, + "type": "array" + } + }, + "type": "object" + }, "AWS::PCS::ComputeNodeGroup.ScalingConfiguration": { "additionalProperties": false, "properties": { @@ -243596,6 +248433,24 @@ ], "type": "object" }, + "AWS::PCS::ComputeNodeGroup.ScriptSource": { + "additionalProperties": false, + "properties": { + "Checksum": { + "type": "string" + }, + "S3VersionId": { + "type": "string" + }, + "ScriptLocation": { + "type": "string" + } + }, + "required": [ + "ScriptLocation" + ], + "type": "object" + }, "AWS::PCS::ComputeNodeGroup.SlurmConfiguration": { "additionalProperties": false, "properties": { @@ -252951,6 +257806,220 @@ ], "type": "object" }, + "AWS::QuickSight::Agent": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "ActionConnectors": { + "items": { + "type": "string" + }, + "type": "array" + }, + "AgentId": { + "type": "string" + }, + "AgentLifecycle": { + "type": "string" + }, + "AwsAccountId": { + "type": "string" + }, + "CustomPromptInput": { + "$ref": "#/definitions/AWS::QuickSight::Agent.CustomPromptInput" + }, + "Description": { + "type": "string" + }, + "IconId": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "Spaces": { + "items": { + "type": "string" + }, + "type": "array" + }, + "StarterPrompts": { + "items": { + "type": "string" + }, + "type": "array" + }, + "Tags": { + "items": { + "$ref": "#/definitions/AWS::QuickSight::Agent.AgentTag" + }, + "type": "array" + }, + "WelcomeMessage": { + "type": "string" + } + }, + "required": [ + "AgentId", + "AwsAccountId", + "Name" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::QuickSight::Agent" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::QuickSight::Agent.AgentTag": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, + "AWS::QuickSight::Agent.CustomPromptInput": { + "additionalProperties": false, + "properties": { + "ExistingPrompt": { + "$ref": "#/definitions/AWS::QuickSight::Agent.CustomPromptProfile" + }, + "NewPrompt": { + "$ref": "#/definitions/AWS::QuickSight::Agent.CustomPromptInputParameters" + } + }, + "type": "object" + }, + "AWS::QuickSight::Agent.CustomPromptInputParameters": { + "additionalProperties": false, + "properties": { + "CustomInstructions": { + "type": "string" + }, + "Identity": { + "type": "string" + }, + "OutputStyle": { + "type": "string" + }, + "ResponseLength": { + "type": "string" + }, + "Tone": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::QuickSight::Agent.CustomPromptInterface": { + "additionalProperties": false, + "properties": { + "CustomInstructions": { + "type": "string" + }, + "Identity": { + "type": "string" + }, + "ModelProfileId": { + "type": "string" + }, + "OutputStyle": { + "type": "string" + }, + "PromptSummary": { + "type": "string" + }, + "QbsAwsAccountId": { + "type": "string" + }, + "ResponseLength": { + "type": "string" + }, + "SubscriptionId": { + "type": "string" + }, + "Tone": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::QuickSight::Agent.CustomPromptProfile": { + "additionalProperties": false, + "properties": { + "ModelProfileId": { + "type": "string" + }, + "QbsAwsAccountId": { + "type": "string" + }, + "SubscriptionId": { + "type": "string" + } + }, + "required": [ + "ModelProfileId", + "QbsAwsAccountId", + "SubscriptionId" + ], + "type": "object" + }, "AWS::QuickSight::Analysis": { "additionalProperties": false, "properties": { @@ -285906,6 +290975,123 @@ ], "type": "object" }, + "AWS::QuickSight::Flow": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "AwsAccountId": { + "type": "string" + }, + "Description": { + "type": "string" + }, + "FlowDefinition": { + "type": "object" + }, + "Name": { + "type": "string" + }, + "Permissions": { + "items": { + "$ref": "#/definitions/AWS::QuickSight::Flow.Permission" + }, + "type": "array" + } + }, + "required": [ + "AwsAccountId", + "FlowDefinition", + "Name" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::QuickSight::Flow" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::QuickSight::Flow.Permission": { + "additionalProperties": false, + "properties": { + "Actions": { + "items": { + "type": "string" + }, + "type": "array" + }, + "Principal": { + "type": "string" + } + }, + "required": [ + "Actions", + "Principal" + ], + "type": "object" + }, + "AWS::QuickSight::Flow.StepAliasMapping": { + "additionalProperties": false, + "properties": { + "StepAlias": { + "type": "string" + }, + "StepId": { + "type": "string" + } + }, + "required": [ + "StepAlias", + "StepId" + ], + "type": "object" + }, "AWS::QuickSight::Folder": { "additionalProperties": false, "properties": { @@ -285942,57 +291128,187 @@ "additionalProperties": false, "properties": { "AwsAccountId": { - "markdownDescription": "The ID for the AWS account where you want to create the folder.", - "title": "AwsAccountId", + "markdownDescription": "The ID for the AWS account where you want to create the folder.", + "title": "AwsAccountId", + "type": "string" + }, + "FolderId": { + "markdownDescription": "The ID of the folder.", + "title": "FolderId", + "type": "string" + }, + "FolderType": { + "markdownDescription": "The type of folder it is.", + "title": "FolderType", + "type": "string" + }, + "Name": { + "markdownDescription": "A display name for the folder.", + "title": "Name", + "type": "string" + }, + "ParentFolderArn": { + "markdownDescription": "The Amazon Resource Name (ARN) for the folder.", + "title": "ParentFolderArn", + "type": "string" + }, + "Permissions": { + "items": { + "$ref": "#/definitions/AWS::QuickSight::Folder.ResourcePermission" + }, + "markdownDescription": "A structure that describes the principals and the resource-level permissions of a folder.\n\nTo specify no permissions, omit `Permissions` .", + "title": "Permissions", + "type": "array" + }, + "SharingModel": { + "markdownDescription": "The sharing scope of the folder.", + "title": "SharingModel", + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "A list of tags for the folders that you want to apply overrides to.", + "title": "Tags", + "type": "array" + } + }, + "type": "object" + }, + "Type": { + "enum": [ + "AWS::QuickSight::Folder" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type" + ], + "type": "object" + }, + "AWS::QuickSight::Folder.ResourcePermission": { + "additionalProperties": false, + "properties": { + "Actions": { + "items": { + "type": "string" + }, + "markdownDescription": "", + "title": "Actions", + "type": "array" + }, + "Principal": { + "markdownDescription": "", + "title": "Principal", + "type": "string" + } + }, + "required": [ + "Actions", + "Principal" + ], + "type": "object" + }, + "AWS::QuickSight::KnowledgeBase": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "AccessControlConfiguration": { + "$ref": "#/definitions/AWS::QuickSight::KnowledgeBase.AccessControlConfiguration" + }, + "AwsAccountId": { "type": "string" }, - "FolderId": { - "markdownDescription": "The ID of the folder.", - "title": "FolderId", + "DataSourceArn": { "type": "string" }, - "FolderType": { - "markdownDescription": "The type of folder it is.", - "title": "FolderType", + "Description": { "type": "string" }, - "Name": { - "markdownDescription": "A display name for the folder.", - "title": "Name", + "IsEmailNotificationOptedForIngestionFailures": { + "type": "boolean" + }, + "KnowledgeBaseConfiguration": { + "$ref": "#/definitions/AWS::QuickSight::KnowledgeBase.KnowledgeBaseConfiguration" + }, + "KnowledgeBaseId": { "type": "string" }, - "ParentFolderArn": { - "markdownDescription": "The Amazon Resource Name (ARN) for the folder.", - "title": "ParentFolderArn", + "MediaExtractionConfiguration": { + "$ref": "#/definitions/AWS::QuickSight::KnowledgeBase.MediaExtractionConfiguration" + }, + "Name": { "type": "string" }, "Permissions": { "items": { - "$ref": "#/definitions/AWS::QuickSight::Folder.ResourcePermission" + "$ref": "#/definitions/AWS::QuickSight::KnowledgeBase.ResourcePermission" }, - "markdownDescription": "A structure that describes the principals and the resource-level permissions of a folder.\n\nTo specify no permissions, omit `Permissions` .", - "title": "Permissions", "type": "array" }, - "SharingModel": { - "markdownDescription": "The sharing scope of the folder.", - "title": "SharingModel", + "PrimaryOwnerArn": { "type": "string" }, "Tags": { "items": { "$ref": "#/definitions/Tag" }, - "markdownDescription": "A list of tags for the folders that you want to apply overrides to.", - "title": "Tags", "type": "array" } }, + "required": [ + "AwsAccountId", + "DataSourceArn", + "KnowledgeBaseConfiguration", + "KnowledgeBaseId", + "Name" + ], "type": "object" }, "Type": { "enum": [ - "AWS::QuickSight::Folder" + "AWS::QuickSight::KnowledgeBase" ], "type": "string" }, @@ -286006,24 +291322,90 @@ } }, "required": [ - "Type" + "Type", + "Properties" ], "type": "object" }, - "AWS::QuickSight::Folder.ResourcePermission": { + "AWS::QuickSight::KnowledgeBase.AccessControlConfiguration": { + "additionalProperties": false, + "properties": { + "IsACLEnabled": { + "type": "boolean" + } + }, + "type": "object" + }, + "AWS::QuickSight::KnowledgeBase.AudioExtractionConfiguration": { + "additionalProperties": false, + "properties": { + "AudioExtractionStatus": { + "type": "string" + } + }, + "required": [ + "AudioExtractionStatus" + ], + "type": "object" + }, + "AWS::QuickSight::KnowledgeBase.ImageExtractionConfiguration": { + "additionalProperties": false, + "properties": { + "ImageExtractionStatus": { + "type": "string" + } + }, + "required": [ + "ImageExtractionStatus" + ], + "type": "object" + }, + "AWS::QuickSight::KnowledgeBase.KbTemplateConfiguration": { + "additionalProperties": false, + "properties": { + "Template": { + "type": "object" + } + }, + "type": "object" + }, + "AWS::QuickSight::KnowledgeBase.KnowledgeBaseConfiguration": { + "additionalProperties": false, + "properties": { + "TemplateConfiguration": { + "$ref": "#/definitions/AWS::QuickSight::KnowledgeBase.KbTemplateConfiguration" + } + }, + "type": "object" + }, + "AWS::QuickSight::KnowledgeBase.MediaExtractionConfiguration": { + "additionalProperties": false, + "properties": { + "AudioExtractionConfiguration": { + "$ref": "#/definitions/AWS::QuickSight::KnowledgeBase.AudioExtractionConfiguration" + }, + "ImageExtractionConfiguration": { + "$ref": "#/definitions/AWS::QuickSight::KnowledgeBase.ImageExtractionConfiguration" + }, + "VideoExtractionConfiguration": { + "$ref": "#/definitions/AWS::QuickSight::KnowledgeBase.VideoExtractionConfiguration" + } + }, + "type": "object" + }, + "AWS::QuickSight::KnowledgeBase.ResourcePermission": { "additionalProperties": false, "properties": { "Actions": { "items": { "type": "string" }, - "markdownDescription": "", - "title": "Actions", "type": "array" }, "Principal": { - "markdownDescription": "", - "title": "Principal", + "type": "string" + }, + "Resource": { "type": "string" } }, @@ -286033,6 +291415,134 @@ ], "type": "object" }, + "AWS::QuickSight::KnowledgeBase.VideoExtractionConfiguration": { + "additionalProperties": false, + "properties": { + "VideoExtractionStatus": { + "type": "string" + }, + "VideoExtractionType": { + "type": "string" + } + }, + "required": [ + "VideoExtractionStatus" + ], + "type": "object" + }, + "AWS::QuickSight::OAuthClientApplication": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "ClientId": { + "type": "string" + }, + "ClientSecret": { + "type": "string" + }, + "DataSourceType": { + "type": "string" + }, + "IdentityProviderVpcConnectionProperties": { + "$ref": "#/definitions/AWS::QuickSight::OAuthClientApplication.IdentityProviderVpcConnectionProperties" + }, + "Name": { + "type": "string" + }, + "OAuthAuthorizationEndpointUrl": { + "type": "string" + }, + "OAuthClientApplicationId": { + "type": "string" + }, + "OAuthClientAuthenticationType": { + "type": "string" + }, + "OAuthScopes": { + "type": "string" + }, + "OAuthTokenEndpointUrl": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "Name", + "OAuthClientApplicationId", + "OAuthClientAuthenticationType", + "OAuthTokenEndpointUrl" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::QuickSight::OAuthClientApplication" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::QuickSight::OAuthClientApplication.IdentityProviderVpcConnectionProperties": { + "additionalProperties": false, + "properties": { + "VpcConnectionArn": { + "type": "string" + } + }, + "required": [ + "VpcConnectionArn" + ], + "type": "object" + }, "AWS::QuickSight::RefreshSchedule": { "additionalProperties": false, "properties": { @@ -286174,6 +291684,135 @@ }, "type": "object" }, + "AWS::QuickSight::Space": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "AwsAccountId": { + "type": "string" + }, + "Description": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "Permissions": { + "items": { + "$ref": "#/definitions/AWS::QuickSight::Space.ResourcePermission" + }, + "type": "array" + }, + "Resources": { + "items": { + "$ref": "#/definitions/AWS::QuickSight::Space.SpaceResource" + }, + "type": "array" + }, + "SpaceId": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "AwsAccountId", + "Name", + "SpaceId" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::QuickSight::Space" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::QuickSight::Space.ResourcePermission": { + "additionalProperties": false, + "properties": { + "Actions": { + "items": { + "type": "string" + }, + "type": "array" + }, + "Principal": { + "type": "string" + } + }, + "required": [ + "Actions", + "Principal" + ], + "type": "object" + }, + "AWS::QuickSight::Space.SpaceResource": { + "additionalProperties": false, + "properties": { + "ResourceArn": { + "type": "string" + }, + "ResourceType": { + "type": "string" + } + }, + "required": [ + "ResourceArn", + "ResourceType" + ], + "type": "object" + }, "AWS::QuickSight::Template": { "additionalProperties": false, "properties": { @@ -309930,6 +315569,9 @@ "Name": { "type": "string" }, + "SharingEnabled": { + "type": "boolean" + }, "Tags": { "items": { "$ref": "#/definitions/Tag" @@ -314821,6 +320463,9 @@ "markdownDescription": "The DNS query type you want the rule to evaluate. Allowed values are;\n\n- A: Returns an IPv4 address.\n- AAAA: Returns an Ipv6 address.\n- CAA: Restricts CAs that can create SSL/TLS certifications for the domain.\n- CNAME: Returns another domain name.\n- DS: Record that identifies the DNSSEC signing key of a delegated zone.\n- MX: Specifies mail servers.\n- NAPTR: Regular-expression-based rewriting of domain names.\n- NS: Authoritative name servers.\n- PTR: Maps an IP address to a domain name.\n- SOA: Start of authority record for the zone.\n- SPF: Lists the servers authorized to send emails from a domain.\n- SRV: Application specific values that identify servers.\n- TXT: Verifies email senders and application-specific values.\n- A query type you define by using the DNS type ID, for example 28 for AAAA. The values must be defined as TYPE NUMBER , where the NUMBER can be 1-65334, for example, TYPE28. For more information, see [List of DNS record types](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/List_of_DNS_record_types) .", "title": "Qtype", "type": "string" + }, + "Status": { + "type": "string" } }, "required": [ @@ -314837,10 +320482,25 @@ }, "FirewallAdvancedThreatCategory": { "$ref": "#/definitions/AWS::Route53Resolver::FirewallRuleGroup.FirewallAdvancedThreatCategoryConfig" + }, + "PartnerThreatProtection": { + "$ref": "#/definitions/AWS::Route53Resolver::FirewallRuleGroup.PartnerThreatProtectionConfig" } }, "type": "object" }, + "AWS::Route53Resolver::FirewallRuleGroup.PartnerThreatProtectionConfig": { + "additionalProperties": false, + "properties": { + "Partner": { + "type": "string" + } + }, + "required": [ + "Partner" + ], + "type": "object" + }, "AWS::Route53Resolver::FirewallRuleGroupAssociation": { "additionalProperties": false, "properties": { @@ -321709,120 +327369,386 @@ "Properties": { "additionalProperties": false, "properties": { - "EncryptionConfiguration": { - "$ref": "#/definitions/AWS::S3Vectors::VectorBucket.EncryptionConfiguration", - "markdownDescription": "The encryption configuration for the vector bucket.", - "title": "EncryptionConfiguration" - }, - "Tags": { - "items": { - "$ref": "#/definitions/Tag" - }, - "type": "array" + "EncryptionConfiguration": { + "$ref": "#/definitions/AWS::S3Vectors::VectorBucket.EncryptionConfiguration", + "markdownDescription": "The encryption configuration for the vector bucket.", + "title": "EncryptionConfiguration" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + }, + "VectorBucketName": { + "markdownDescription": "A name for the vector bucket. The bucket name must contain only lowercase letters, numbers, and hyphens (-). The bucket name must be unique in the same AWS account for each AWS Region. If you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID for the bucket name.\n\nThe bucket name must be between 3 and 63 characters long and must not contain uppercase characters or underscores.\n\n> If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you need to replace the resource, specify a new name.", + "title": "VectorBucketName", + "type": "string" + } + }, + "type": "object" + }, + "Type": { + "enum": [ + "AWS::S3Vectors::VectorBucket" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type" + ], + "type": "object" + }, + "AWS::S3Vectors::VectorBucket.EncryptionConfiguration": { + "additionalProperties": false, + "properties": { + "KmsKeyArn": { + "markdownDescription": "AWS Key Management Service (KMS) customer managed key ARN to use for the encryption configuration. This parameter is required if and only if `SseType` is set to `aws:kms` .\n\nYou must specify the full ARN of the KMS key. Key IDs or key aliases aren't supported.\n\n> Amazon S3 Vectors only supports symmetric encryption KMS keys. For more information, see [Asymmetric keys in AWS KMS](https://docs.aws.amazon.com//kms/latest/developerguide/symmetric-asymmetric.html) in the *AWS Key Management Service Developer Guide* .", + "title": "KmsKeyArn", + "type": "string" + }, + "SseType": { + "markdownDescription": "The server-side encryption type to use for the encryption configuration of the vector bucket. Valid values are `AES256` for Amazon S3 managed keys and `aws:kms` for AWS KMS keys.", + "title": "SseType", + "type": "string" + } + }, + "type": "object" + }, + "AWS::S3Vectors::VectorBucketPolicy": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Policy": { + "markdownDescription": "A policy document containing permissions to add to the specified vector bucket. In IAM , you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM .", + "title": "Policy", + "type": "object" + }, + "VectorBucketArn": { + "markdownDescription": "The Amazon Resource Name (ARN) of the S3 vector bucket to which the policy applies.", + "title": "VectorBucketArn", + "type": "string" + }, + "VectorBucketName": { + "markdownDescription": "The name of the S3 vector bucket to which the policy applies.", + "title": "VectorBucketName", + "type": "string" + } + }, + "required": [ + "Policy" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::S3Vectors::VectorBucketPolicy" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::SCN::Dataset": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Description": { + "type": "string" + }, + "InstanceId": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "Namespace": { + "type": "string" + }, + "PartitionSpec": { + "$ref": "#/definitions/AWS::SCN::Dataset.PartitionSpec" + }, + "Schema": { + "$ref": "#/definitions/AWS::SCN::Dataset.Schema" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "InstanceId", + "Name", + "Namespace" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SCN::Dataset" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::SCN::Dataset.DataLakeDatasetPartitionField": { + "additionalProperties": false, + "properties": { + "Name": { + "type": "string" + }, + "Transform": { + "$ref": "#/definitions/AWS::SCN::Dataset.Transform" + } + }, + "required": [ + "Name", + "Transform" + ], + "type": "object" + }, + "AWS::SCN::Dataset.DataLakeDatasetPrimaryKeyField": { + "additionalProperties": false, + "properties": { + "Name": { + "type": "string" + } + }, + "required": [ + "Name" + ], + "type": "object" + }, + "AWS::SCN::Dataset.DataLakeDatasetSchemaField": { + "additionalProperties": false, + "properties": { + "IsRequired": { + "type": "boolean" + }, + "Name": { + "type": "string" + }, + "Type": { + "type": "string" + } + }, + "required": [ + "IsRequired", + "Name", + "Type" + ], + "type": "object" + }, + "AWS::SCN::Dataset.PartitionSpec": { + "additionalProperties": false, + "properties": { + "Fields": { + "items": { + "$ref": "#/definitions/AWS::SCN::Dataset.DataLakeDatasetPartitionField" + }, + "type": "array" + } + }, + "required": [ + "Fields" + ], + "type": "object" + }, + "AWS::SCN::Dataset.Schema": { + "additionalProperties": false, + "properties": { + "Fields": { + "items": { + "$ref": "#/definitions/AWS::SCN::Dataset.DataLakeDatasetSchemaField" + }, + "type": "array" + }, + "Name": { + "type": "string" + }, + "PrimaryKeys": { + "items": { + "$ref": "#/definitions/AWS::SCN::Dataset.DataLakeDatasetPrimaryKeyField" + }, + "type": "array" + } + }, + "required": [ + "Fields", + "Name" + ], + "type": "object" + }, + "AWS::SCN::Dataset.Transform": { + "additionalProperties": false, + "properties": { + "Type": { + "type": "string" + } + }, + "required": [ + "Type" + ], + "type": "object" + }, + "AWS::SCN::Namespace": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Description": { + "type": "string" }, - "VectorBucketName": { - "markdownDescription": "A name for the vector bucket. The bucket name must contain only lowercase letters, numbers, and hyphens (-). The bucket name must be unique in the same AWS account for each AWS Region. If you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID for the bucket name.\n\nThe bucket name must be between 3 and 63 characters long and must not contain uppercase characters or underscores.\n\n> If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you need to replace the resource, specify a new name.", - "title": "VectorBucketName", + "InstanceId": { "type": "string" - } - }, - "type": "object" - }, - "Type": { - "enum": [ - "AWS::S3Vectors::VectorBucket" - ], - "type": "string" - }, - "UpdateReplacePolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], - "type": "string" - } - }, - "required": [ - "Type" - ], - "type": "object" - }, - "AWS::S3Vectors::VectorBucket.EncryptionConfiguration": { - "additionalProperties": false, - "properties": { - "KmsKeyArn": { - "markdownDescription": "AWS Key Management Service (KMS) customer managed key ARN to use for the encryption configuration. This parameter is required if and only if `SseType` is set to `aws:kms` .\n\nYou must specify the full ARN of the KMS key. Key IDs or key aliases aren't supported.\n\n> Amazon S3 Vectors only supports symmetric encryption KMS keys. For more information, see [Asymmetric keys in AWS KMS](https://docs.aws.amazon.com//kms/latest/developerguide/symmetric-asymmetric.html) in the *AWS Key Management Service Developer Guide* .", - "title": "KmsKeyArn", - "type": "string" - }, - "SseType": { - "markdownDescription": "The server-side encryption type to use for the encryption configuration of the vector bucket. Valid values are `AES256` for Amazon S3 managed keys and `aws:kms` for AWS KMS keys.", - "title": "SseType", - "type": "string" - } - }, - "type": "object" - }, - "AWS::S3Vectors::VectorBucketPolicy": { - "additionalProperties": false, - "properties": { - "Condition": { - "type": "string" - }, - "DeletionPolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], - "type": "string" - }, - "DependsOn": { - "anyOf": [ - { - "pattern": "^[a-zA-Z0-9]+$", + }, + "Name": { "type": "string" }, - { + "Tags": { "items": { - "pattern": "^[a-zA-Z0-9]+$", - "type": "string" + "$ref": "#/definitions/Tag" }, "type": "array" } - ] - }, - "Metadata": { - "type": "object" - }, - "Properties": { - "additionalProperties": false, - "properties": { - "Policy": { - "markdownDescription": "A policy document containing permissions to add to the specified vector bucket. In IAM , you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM .", - "title": "Policy", - "type": "object" - }, - "VectorBucketArn": { - "markdownDescription": "The Amazon Resource Name (ARN) of the S3 vector bucket to which the policy applies.", - "title": "VectorBucketArn", - "type": "string" - }, - "VectorBucketName": { - "markdownDescription": "The name of the S3 vector bucket to which the policy applies.", - "title": "VectorBucketName", - "type": "string" - } }, "required": [ - "Policy" + "InstanceId", + "Name" ], "type": "object" }, "Type": { "enum": [ - "AWS::S3Vectors::VectorBucketPolicy" + "AWS::SCN::Namespace" ], "type": "string" }, @@ -326368,6 +332294,77 @@ }, "type": "object" }, + "AWS::SMSVOICE::Registration": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "RegistrationType": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "RegistrationType" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SMSVOICE::Registration" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, "AWS::SMSVOICE::ResourcePolicy": { "additionalProperties": false, "properties": { @@ -328270,6 +334267,94 @@ }, "type": "object" }, + "AWS::SSM::OpsItem": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Category": { + "type": "string" + }, + "Description": { + "type": "string" + }, + "Priority": { + "type": "number" + }, + "Severity": { + "type": "string" + }, + "Source": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + }, + "Title": { + "type": "string" + } + }, + "required": [ + "Description", + "Source", + "Title" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SSM::OpsItem" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, "AWS::SSM::Parameter": { "additionalProperties": false, "properties": { @@ -330958,75 +337043,327 @@ "Properties": { "additionalProperties": false, "properties": { - "CustomerManagedPolicyReferences": { - "items": { - "$ref": "#/definitions/AWS::SSO::PermissionSet.CustomerManagedPolicyReference" - }, - "markdownDescription": "Specifies the names and paths of the customer managed policies that you have attached to your permission set.", - "title": "CustomerManagedPolicyReferences", - "type": "array" - }, - "Description": { - "markdownDescription": "The description of the `PermissionSet` .", - "title": "Description", - "type": "string" - }, - "InlinePolicy": { - "markdownDescription": "The inline policy that is attached to the permission set.\n\n> For `Length Constraints` , if a valid ARN is provided for a permission set, it is possible for an empty inline policy to be returned.", - "title": "InlinePolicy", - "type": "object" - }, - "InstanceArn": { - "markdownDescription": "The ARN of the instance under which the operation will be executed. For more information about ARNs, see [Amazon Resource Names (ARNs) and AWS Service Namespaces](https://docs.aws.amazon.com//general/latest/gr/aws-arns-and-namespaces.html) in the *AWS General Reference* .", - "title": "InstanceArn", + "CustomerManagedPolicyReferences": { + "items": { + "$ref": "#/definitions/AWS::SSO::PermissionSet.CustomerManagedPolicyReference" + }, + "markdownDescription": "Specifies the names and paths of the customer managed policies that you have attached to your permission set.", + "title": "CustomerManagedPolicyReferences", + "type": "array" + }, + "Description": { + "markdownDescription": "The description of the `PermissionSet` .", + "title": "Description", + "type": "string" + }, + "InlinePolicy": { + "markdownDescription": "The inline policy that is attached to the permission set.\n\n> For `Length Constraints` , if a valid ARN is provided for a permission set, it is possible for an empty inline policy to be returned.", + "title": "InlinePolicy", + "type": "object" + }, + "InstanceArn": { + "markdownDescription": "The ARN of the instance under which the operation will be executed. For more information about ARNs, see [Amazon Resource Names (ARNs) and AWS Service Namespaces](https://docs.aws.amazon.com//general/latest/gr/aws-arns-and-namespaces.html) in the *AWS General Reference* .", + "title": "InstanceArn", + "type": "string" + }, + "ManagedPolicies": { + "items": { + "type": "string" + }, + "markdownDescription": "A structure that stores a list of managed policy ARNs that describe the associated AWS managed policy.", + "title": "ManagedPolicies", + "type": "array" + }, + "Name": { + "markdownDescription": "The name of the permission set.", + "title": "Name", + "type": "string" + }, + "PermissionsBoundary": { + "$ref": "#/definitions/AWS::SSO::PermissionSet.PermissionsBoundary", + "markdownDescription": "Specifies the configuration of the AWS managed or customer managed policy that you want to set as a permissions boundary. Specify either `CustomerManagedPolicyReference` to use the name and path of a customer managed policy, or `ManagedPolicyArn` to use the ARN of an AWS managed policy. A permissions boundary represents the maximum permissions that any policy can grant your role. For more information, see [Permissions boundaries for IAM entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html) in the *IAM User Guide* .\n\n> Policies used as permissions boundaries don't provide permissions. You must also attach an IAM policy to the role. To learn how the effective permissions for a role are evaluated, see [IAM JSON policy evaluation logic](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html) in the *IAM User Guide* .", + "title": "PermissionsBoundary" + }, + "RelayStateType": { + "markdownDescription": "Used to redirect users within the application during the federation authentication process.", + "title": "RelayStateType", + "type": "string" + }, + "SessionDuration": { + "markdownDescription": "The length of time that the application user sessions are valid for in the ISO-8601 standard.", + "title": "SessionDuration", + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "The tags to attach to the new `PermissionSet` .", + "title": "Tags", + "type": "array" + } + }, + "required": [ + "InstanceArn", + "Name" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SSO::PermissionSet" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::SSO::PermissionSet.CustomerManagedPolicyReference": { + "additionalProperties": false, + "properties": { + "Name": { + "markdownDescription": "The name of the IAM policy that you have configured in each account where you want to deploy your permission set.", + "title": "Name", + "type": "string" + }, + "Path": { + "markdownDescription": "The path to the IAM policy that you have configured in each account where you want to deploy your permission set. The default is `/` . For more information, see [Friendly names and paths](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names) in the *IAM User Guide* .", + "title": "Path", + "type": "string" + } + }, + "required": [ + "Name" + ], + "type": "object" + }, + "AWS::SSO::PermissionSet.PermissionsBoundary": { + "additionalProperties": false, + "properties": { + "CustomerManagedPolicyReference": { + "$ref": "#/definitions/AWS::SSO::PermissionSet.CustomerManagedPolicyReference", + "markdownDescription": "Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each AWS account where you want to deploy your permission set.", + "title": "CustomerManagedPolicyReference" + }, + "ManagedPolicyArn": { + "markdownDescription": "The AWS managed policy ARN that you want to attach to a permission set as a permissions boundary.", + "title": "ManagedPolicyArn", + "type": "string" + } + }, + "type": "object" + }, + "AWS::SageMaker::Action": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "ActionName": { + "type": "string" + }, + "ActionType": { + "type": "string" + }, + "Description": { + "type": "string" + }, + "MetadataProperties": { + "$ref": "#/definitions/AWS::SageMaker::Action.MetadataProperties" + }, + "Properties": { + "additionalProperties": true, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "type": "object" + }, + "Source": { + "$ref": "#/definitions/AWS::SageMaker::Action.ActionSource" + }, + "Status": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "ActionName", + "ActionType", + "Source" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SageMaker::Action" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::SageMaker::Action.ActionSource": { + "additionalProperties": false, + "properties": { + "SourceId": { + "type": "string" + }, + "SourceType": { + "type": "string" + }, + "SourceUri": { + "type": "string" + } + }, + "required": [ + "SourceUri" + ], + "type": "object" + }, + "AWS::SageMaker::Action.MetadataProperties": { + "additionalProperties": false, + "properties": { + "CommitId": { + "type": "string" + }, + "GeneratedBy": { + "type": "string" + }, + "ProjectId": { + "type": "string" + }, + "Repository": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::SageMaker::Algorithm": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "AlgorithmDescription": { "type": "string" }, - "ManagedPolicies": { - "items": { - "type": "string" - }, - "markdownDescription": "A structure that stores a list of managed policy ARNs that describe the associated AWS managed policy.", - "title": "ManagedPolicies", - "type": "array" - }, - "Name": { - "markdownDescription": "The name of the permission set.", - "title": "Name", + "AlgorithmName": { "type": "string" }, - "PermissionsBoundary": { - "$ref": "#/definitions/AWS::SSO::PermissionSet.PermissionsBoundary", - "markdownDescription": "Specifies the configuration of the AWS managed or customer managed policy that you want to set as a permissions boundary. Specify either `CustomerManagedPolicyReference` to use the name and path of a customer managed policy, or `ManagedPolicyArn` to use the ARN of an AWS managed policy. A permissions boundary represents the maximum permissions that any policy can grant your role. For more information, see [Permissions boundaries for IAM entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html) in the *IAM User Guide* .\n\n> Policies used as permissions boundaries don't provide permissions. You must also attach an IAM policy to the role. To learn how the effective permissions for a role are evaluated, see [IAM JSON policy evaluation logic](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html) in the *IAM User Guide* .", - "title": "PermissionsBoundary" - }, - "RelayStateType": { - "markdownDescription": "Used to redirect users within the application during the federation authentication process.", - "title": "RelayStateType", - "type": "string" + "CertifyForMarketplace": { + "type": "boolean" }, - "SessionDuration": { - "markdownDescription": "The length of time that the application user sessions are valid for in the ISO-8601 standard.", - "title": "SessionDuration", - "type": "string" + "InferenceSpecification": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.InferenceSpecification" }, "Tags": { "items": { "$ref": "#/definitions/Tag" }, - "markdownDescription": "The tags to attach to the new `PermissionSet` .", - "title": "Tags", "type": "array" + }, + "TrainingSpecification": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.TrainingSpecification" } }, "required": [ - "InstanceArn", - "Name" + "AlgorithmName", + "TrainingSpecification" ], "type": "object" }, "Type": { "enum": [ - "AWS::SSO::PermissionSet" + "AWS::SageMaker::Algorithm" ], "type": "string" }, @@ -331045,39 +337382,310 @@ ], "type": "object" }, - "AWS::SSO::PermissionSet.CustomerManagedPolicyReference": { + "AWS::SageMaker::Algorithm.CategoricalParameterRangeSpecification": { + "additionalProperties": false, + "properties": { + "Values": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "Values" + ], + "type": "object" + }, + "AWS::SageMaker::Algorithm.ChannelSpecification": { "additionalProperties": false, "properties": { + "Description": { + "type": "string" + }, + "IsRequired": { + "type": "boolean" + }, "Name": { - "markdownDescription": "The name of the IAM policy that you have configured in each account where you want to deploy your permission set.", - "title": "Name", "type": "string" }, - "Path": { - "markdownDescription": "The path to the IAM policy that you have configured in each account where you want to deploy your permission set. The default is `/` . For more information, see [Friendly names and paths](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names) in the *IAM User Guide* .", - "title": "Path", + "SupportedCompressionTypes": { + "items": { + "type": "string" + }, + "type": "array" + }, + "SupportedContentTypes": { + "items": { + "type": "string" + }, + "type": "array" + }, + "SupportedInputModes": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "Name", + "SupportedContentTypes", + "SupportedInputModes" + ], + "type": "object" + }, + "AWS::SageMaker::Algorithm.ContinuousParameterRangeSpecification": { + "additionalProperties": false, + "properties": { + "MaxValue": { + "type": "string" + }, + "MinValue": { "type": "string" } }, "required": [ - "Name" + "MaxValue", + "MinValue" ], "type": "object" }, - "AWS::SSO::PermissionSet.PermissionsBoundary": { + "AWS::SageMaker::Algorithm.HyperParameterSpecification": { "additionalProperties": false, "properties": { - "CustomerManagedPolicyReference": { - "$ref": "#/definitions/AWS::SSO::PermissionSet.CustomerManagedPolicyReference", - "markdownDescription": "Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each AWS account where you want to deploy your permission set.", - "title": "CustomerManagedPolicyReference" + "DefaultValue": { + "type": "string" }, - "ManagedPolicyArn": { - "markdownDescription": "The AWS managed policy ARN that you want to attach to a permission set as a permissions boundary.", - "title": "ManagedPolicyArn", + "Description": { + "type": "string" + }, + "IsRequired": { + "type": "boolean" + }, + "IsTunable": { + "type": "boolean" + }, + "Name": { + "type": "string" + }, + "Range": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.ParameterRange" + }, + "Type": { + "type": "string" + } + }, + "required": [ + "Name", + "Type" + ], + "type": "object" + }, + "AWS::SageMaker::Algorithm.HyperParameterTuningJobObjective": { + "additionalProperties": false, + "properties": { + "MetricName": { + "type": "string" + }, + "Type": { + "type": "string" + } + }, + "required": [ + "MetricName", + "Type" + ], + "type": "object" + }, + "AWS::SageMaker::Algorithm.InferenceSpecification": { + "additionalProperties": false, + "properties": { + "Containers": { + "items": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.ModelPackageContainerDefinition" + }, + "type": "array" + }, + "SupportedContentTypes": { + "items": { + "type": "string" + }, + "type": "array" + }, + "SupportedRealtimeInferenceInstanceTypes": { + "items": { + "type": "string" + }, + "type": "array" + }, + "SupportedResponseMIMETypes": { + "items": { + "type": "string" + }, + "type": "array" + }, + "SupportedTransformInstanceTypes": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "Containers" + ], + "type": "object" + }, + "AWS::SageMaker::Algorithm.IntegerParameterRangeSpecification": { + "additionalProperties": false, + "properties": { + "MaxValue": { + "type": "string" + }, + "MinValue": { + "type": "string" + } + }, + "required": [ + "MaxValue", + "MinValue" + ], + "type": "object" + }, + "AWS::SageMaker::Algorithm.MetricDefinition": { + "additionalProperties": false, + "properties": { + "Name": { + "type": "string" + }, + "Regex": { + "type": "string" + } + }, + "required": [ + "Name", + "Regex" + ], + "type": "object" + }, + "AWS::SageMaker::Algorithm.ModelInput": { + "additionalProperties": false, + "properties": { + "DataInputConfig": { + "type": "string" + } + }, + "required": [ + "DataInputConfig" + ], + "type": "object" + }, + "AWS::SageMaker::Algorithm.ModelPackageContainerDefinition": { + "additionalProperties": false, + "properties": { + "ContainerHostname": { + "type": "string" + }, + "Environment": { + "additionalProperties": true, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "type": "object" + }, + "Framework": { + "type": "string" + }, + "FrameworkVersion": { + "type": "string" + }, + "Image": { + "type": "string" + }, + "ImageDigest": { + "type": "string" + }, + "IsCheckpoint": { + "type": "boolean" + }, + "ModelInput": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.ModelInput" + }, + "NearestModelName": { + "type": "string" + } + }, + "required": [ + "Image" + ], + "type": "object" + }, + "AWS::SageMaker::Algorithm.ParameterRange": { + "additionalProperties": false, + "properties": { + "CategoricalParameterRangeSpecification": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.CategoricalParameterRangeSpecification" + }, + "ContinuousParameterRangeSpecification": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.ContinuousParameterRangeSpecification" + }, + "IntegerParameterRangeSpecification": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.IntegerParameterRangeSpecification" + } + }, + "type": "object" + }, + "AWS::SageMaker::Algorithm.TrainingSpecification": { + "additionalProperties": false, + "properties": { + "MetricDefinitions": { + "items": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.MetricDefinition" + }, + "type": "array" + }, + "SupportedHyperParameters": { + "items": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.HyperParameterSpecification" + }, + "type": "array" + }, + "SupportedTrainingInstanceTypes": { + "items": { + "type": "string" + }, + "type": "array" + }, + "SupportedTuningJobObjectiveMetrics": { + "items": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.HyperParameterTuningJobObjective" + }, + "type": "array" + }, + "SupportsDistributedTraining": { + "type": "boolean" + }, + "TrainingChannels": { + "items": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.ChannelSpecification" + }, + "type": "array" + }, + "TrainingImage": { + "type": "string" + }, + "TrainingImageDigest": { "type": "string" } }, + "required": [ + "SupportedTrainingInstanceTypes", + "TrainingChannels", + "TrainingImage" + ], "type": "object" }, "AWS::SageMaker::App": { @@ -331572,6 +338180,24 @@ ], "type": "object" }, + "AWS::SageMaker::Cluster.AutoPatchConfig": { + "additionalProperties": false, + "properties": { + "DeploymentConfig": { + "$ref": "#/definitions/AWS::SageMaker::Cluster.DeploymentConfig" + }, + "PatchSchedule": { + "$ref": "#/definitions/AWS::SageMaker::Cluster.PatchSchedule" + }, + "PatchingStrategy": { + "type": "string" + } + }, + "required": [ + "PatchingStrategy" + ], + "type": "object" + }, "AWS::SageMaker::Cluster.CapacitySizeConfig": { "additionalProperties": false, "properties": { @@ -331685,6 +338311,9 @@ "AWS::SageMaker::Cluster.ClusterInstanceGroup": { "additionalProperties": false, "properties": { + "AutoPatchConfig": { + "$ref": "#/definitions/AWS::SageMaker::Cluster.AutoPatchConfig" + }, "CapacityRequirements": { "$ref": "#/definitions/AWS::SageMaker::Cluster.ClusterCapacityRequirements", "markdownDescription": "", @@ -332084,6 +338713,15 @@ }, "type": "object" }, + "AWS::SageMaker::Cluster.PatchSchedule": { + "additionalProperties": false, + "properties": { + "NextPatchDate": { + "type": "string" + } + }, + "type": "object" + }, "AWS::SageMaker::Cluster.RestrictedInstanceGroupsConfig": { "additionalProperties": false, "properties": { @@ -332298,6 +338936,131 @@ ], "type": "object" }, + "AWS::SageMaker::Context": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "ContextName": { + "type": "string" + }, + "ContextType": { + "type": "string" + }, + "Description": { + "type": "string" + }, + "Properties": { + "additionalProperties": true, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "type": "object" + }, + "Source": { + "$ref": "#/definitions/AWS::SageMaker::Context.Source" + }, + "Tags": { + "items": { + "$ref": "#/definitions/AWS::SageMaker::Context.TagsItems" + }, + "type": "array" + } + }, + "required": [ + "ContextName", + "ContextType", + "Source" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SageMaker::Context" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::SageMaker::Context.Source": { + "additionalProperties": false, + "properties": { + "SourceId": { + "type": "string" + }, + "SourceType": { + "type": "string" + }, + "SourceUri": { + "type": "string" + } + }, + "required": [ + "SourceUri" + ], + "type": "object" + }, + "AWS::SageMaker::Context.TagsItems": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, "AWS::SageMaker::DataQualityJobDefinition": { "additionalProperties": false, "properties": { @@ -333961,11 +340724,6 @@ "title": "EndpointConfigName", "type": "string" }, - "EndpointName": { - "markdownDescription": "The name of the endpoint. The name must be unique within an AWS Region in your AWS account. The name is case-insensitive in `CreateEndpoint` , but the case is preserved and must be matched in [](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_runtime_InvokeEndpoint.html) .", - "title": "EndpointName", - "type": "string" - }, "ExcludeRetainedVariantProperties": { "items": { "$ref": "#/definitions/AWS::SageMaker::Endpoint.VariantProperty" @@ -334837,6 +341595,231 @@ ], "type": "object" }, + "AWS::SageMaker::Experiment": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Description": { + "type": "string" + }, + "DisplayName": { + "type": "string" + }, + "ExperimentName": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/AWS::SageMaker::Experiment.TagsItems" + }, + "type": "array" + } + }, + "required": [ + "ExperimentName" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SageMaker::Experiment" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::SageMaker::Experiment.TagsItems": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, + "AWS::SageMaker::ExperimentTrialComponent": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "DisplayName": { + "type": "string" + }, + "EndTime": { + "type": "string" + }, + "MetadataProperties": { + "$ref": "#/definitions/AWS::SageMaker::ExperimentTrialComponent.MetadataProperties" + }, + "StartTime": { + "type": "string" + }, + "Status": { + "$ref": "#/definitions/AWS::SageMaker::ExperimentTrialComponent.Status" + }, + "Tags": { + "items": { + "$ref": "#/definitions/AWS::SageMaker::ExperimentTrialComponent.TagsItems" + }, + "type": "array" + }, + "TrialComponentName": { + "type": "string" + } + }, + "required": [ + "TrialComponentName" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SageMaker::ExperimentTrialComponent" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::SageMaker::ExperimentTrialComponent.MetadataProperties": { + "additionalProperties": false, + "properties": { + "CommitId": { + "type": "string" + }, + "GeneratedBy": { + "type": "string" + }, + "ProjectId": { + "type": "string" + }, + "Repository": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::SageMaker::ExperimentTrialComponent.Status": { + "additionalProperties": false, + "properties": { + "Message": { + "type": "string" + }, + "PrimaryStatus": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::SageMaker::ExperimentTrialComponent.TagsItems": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, "AWS::SageMaker::FeatureGroup": { "additionalProperties": false, "properties": { @@ -334872,74 +341855,332 @@ "Properties": { "additionalProperties": false, "properties": { - "Description": { - "markdownDescription": "A free form description of a `FeatureGroup` .", - "title": "Description", + "Description": { + "markdownDescription": "A free form description of a `FeatureGroup` .", + "title": "Description", + "type": "string" + }, + "EventTimeFeatureName": { + "markdownDescription": "The name of the feature that stores the `EventTime` of a Record in a `FeatureGroup` .\n\nA `EventTime` is point in time when a new event occurs that corresponds to the creation or update of a `Record` in `FeatureGroup` . All `Records` in the `FeatureGroup` must have a corresponding `EventTime` .", + "title": "EventTimeFeatureName", + "type": "string" + }, + "FeatureDefinitions": { + "items": { + "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.FeatureDefinition" + }, + "markdownDescription": "A list of `Feature` s. Each `Feature` must include a `FeatureName` and a `FeatureType` .\n\nValid `FeatureType` s are `Integral` , `Fractional` and `String` .\n\n`FeatureName` s cannot be any of the following: `is_deleted` , `write_time` , `api_invocation_time` .\n\nYou can create up to 2,500 `FeatureDefinition` s per `FeatureGroup` .", + "title": "FeatureDefinitions", + "type": "array" + }, + "FeatureGroupName": { + "markdownDescription": "The name of the `FeatureGroup` .", + "title": "FeatureGroupName", + "type": "string" + }, + "OfflineStoreConfig": { + "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.OfflineStoreConfig", + "markdownDescription": "The configuration of an `OfflineStore` .", + "title": "OfflineStoreConfig" + }, + "OnlineStoreConfig": { + "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.OnlineStoreConfig", + "markdownDescription": "The configuration of an `OnlineStore` .", + "title": "OnlineStoreConfig" + }, + "RecordIdentifierFeatureName": { + "markdownDescription": "The name of the `Feature` whose value uniquely identifies a `Record` defined in the `FeatureGroup` `FeatureDefinitions` .", + "title": "RecordIdentifierFeatureName", + "type": "string" + }, + "RoleArn": { + "markdownDescription": "The Amazon Resource Name (ARN) of the IAM execution role used to create the feature group.", + "title": "RoleArn", + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "Tags used to define a `FeatureGroup` .", + "title": "Tags", + "type": "array" + }, + "ThroughputConfig": { + "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.ThroughputConfig", + "markdownDescription": "Used to set feature group throughput configuration. There are two modes: `ON_DEMAND` and `PROVISIONED` . With on-demand mode, you are charged for data reads and writes that your application performs on your feature group. You do not need to specify read and write throughput because Feature Store accommodates your workloads as they ramp up and down. You can switch a feature group to on-demand only once in a 24 hour period. With provisioned throughput mode, you specify the read and write capacity per second that you expect your application to require, and you are billed based on those limits. Exceeding provisioned throughput will result in your requests being throttled.\n\nNote: `PROVISIONED` throughput mode is supported only for feature groups that are offline-only, or use the [`Standard`](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_OnlineStoreConfig.html#sagemaker-Type-OnlineStoreConfig-StorageType) tier online store.", + "title": "ThroughputConfig" + } + }, + "required": [ + "EventTimeFeatureName", + "FeatureDefinitions", + "FeatureGroupName", + "RecordIdentifierFeatureName" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SageMaker::FeatureGroup" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::SageMaker::FeatureGroup.DataCatalogConfig": { + "additionalProperties": false, + "properties": { + "Catalog": { + "markdownDescription": "The name of the Glue table catalog.", + "title": "Catalog", + "type": "string" + }, + "Database": { + "markdownDescription": "The name of the Glue table database.", + "title": "Database", + "type": "string" + }, + "TableName": { + "markdownDescription": "The name of the Glue table.", + "title": "TableName", + "type": "string" + } + }, + "required": [ + "Catalog", + "Database", + "TableName" + ], + "type": "object" + }, + "AWS::SageMaker::FeatureGroup.FeatureDefinition": { + "additionalProperties": false, + "properties": { + "FeatureName": { + "markdownDescription": "The name of a feature. The type must be a string. `FeatureName` cannot be any of the following: `is_deleted` , `write_time` , `api_invocation_time` .\n\nThe name:\n\n- Must start with an alphanumeric character.\n- Can only include alphanumeric characters, underscores, and hyphens. Spaces are not allowed.", + "title": "FeatureName", + "type": "string" + }, + "FeatureType": { + "markdownDescription": "The value type of a feature. Valid values are Integral, Fractional, or String.", + "title": "FeatureType", + "type": "string" + } + }, + "required": [ + "FeatureName", + "FeatureType" + ], + "type": "object" + }, + "AWS::SageMaker::FeatureGroup.OfflineStoreConfig": { + "additionalProperties": false, + "properties": { + "DataCatalogConfig": { + "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.DataCatalogConfig", + "markdownDescription": "The meta data of the Glue table that is autogenerated when an `OfflineStore` is created.", + "title": "DataCatalogConfig" + }, + "DisableGlueTableCreation": { + "markdownDescription": "Set to `True` to disable the automatic creation of an AWS Glue table when configuring an `OfflineStore` . If set to `False` , Feature Store will name the `OfflineStore` Glue table following [Athena's naming recommendations](https://docs.aws.amazon.com/athena/latest/ug/tables-databases-columns-names.html) .\n\nThe default value is `False` .", + "title": "DisableGlueTableCreation", + "type": "boolean" + }, + "S3StorageConfig": { + "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.S3StorageConfig", + "markdownDescription": "The Amazon Simple Storage (Amazon S3) location of `OfflineStore` .", + "title": "S3StorageConfig" + }, + "TableFormat": { + "markdownDescription": "Format for the offline store table. Supported formats are Glue (Default) and [Apache Iceberg](https://docs.aws.amazon.com/https://iceberg.apache.org/) .", + "title": "TableFormat", + "type": "string" + } + }, + "required": [ + "S3StorageConfig" + ], + "type": "object" + }, + "AWS::SageMaker::FeatureGroup.OnlineStoreConfig": { + "additionalProperties": false, + "properties": { + "EnableOnlineStore": { + "markdownDescription": "Turn `OnlineStore` off by specifying `False` for the `EnableOnlineStore` flag. Turn `OnlineStore` on by specifying `True` for the `EnableOnlineStore` flag.\n\nThe default value is `False` .", + "title": "EnableOnlineStore", + "type": "boolean" + }, + "SecurityConfig": { + "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.OnlineStoreSecurityConfig", + "markdownDescription": "Use to specify KMS Key ID ( `KMSKeyId` ) for at-rest encryption of your `OnlineStore` .", + "title": "SecurityConfig" + }, + "StorageType": { + "markdownDescription": "Option for different tiers of low latency storage for real-time data retrieval.\n\n- `Standard` : A managed low latency data store for feature groups.\n- `InMemory` : A managed data store for feature groups that supports very low latency retrieval.", + "title": "StorageType", + "type": "string" + }, + "TtlDuration": { + "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.TtlDuration", + "markdownDescription": "Time to live duration, where the record is hard deleted after the expiration time is reached; `ExpiresAt` = `EventTime` + `TtlDuration` . For information on HardDelete, see the [DeleteRecord](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_feature_store_DeleteRecord.html) API in the Amazon SageMaker API Reference guide.", + "title": "TtlDuration" + } + }, + "type": "object" + }, + "AWS::SageMaker::FeatureGroup.OnlineStoreSecurityConfig": { + "additionalProperties": false, + "properties": { + "KmsKeyId": { + "markdownDescription": "The AWS Key Management Service (KMS) key ARN that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.\n\nThe caller (either user or IAM role) of `CreateFeatureGroup` must have below permissions to the `OnlineStore` `KmsKeyId` :\n\n- `\"kms:Encrypt\"`\n- `\"kms:Decrypt\"`\n- `\"kms:DescribeKey\"`\n- `\"kms:CreateGrant\"`\n- `\"kms:RetireGrant\"`\n- `\"kms:ReEncryptFrom\"`\n- `\"kms:ReEncryptTo\"`\n- `\"kms:GenerateDataKey\"`\n- `\"kms:ListAliases\"`\n- `\"kms:ListGrants\"`\n- `\"kms:RevokeGrant\"`\n\nThe caller (either user or IAM role) to all DataPlane operations ( `PutRecord` , `GetRecord` , `DeleteRecord` ) must have the following permissions to the `KmsKeyId` :\n\n- `\"kms:Decrypt\"`", + "title": "KmsKeyId", + "type": "string" + } + }, + "type": "object" + }, + "AWS::SageMaker::FeatureGroup.S3StorageConfig": { + "additionalProperties": false, + "properties": { + "KmsKeyId": { + "markdownDescription": "The AWS Key Management Service (KMS) key ARN of the key used to encrypt any objects written into the `OfflineStore` S3 location.\n\nThe IAM `roleARN` that is passed as a parameter to `CreateFeatureGroup` must have below permissions to the `KmsKeyId` :\n\n- `\"kms:GenerateDataKey\"`", + "title": "KmsKeyId", + "type": "string" + }, + "S3Uri": { + "markdownDescription": "The S3 URI, or location in Amazon S3, of `OfflineStore` .\n\nS3 URIs have a format similar to the following: `s3://example-bucket/prefix/` .", + "title": "S3Uri", + "type": "string" + } + }, + "required": [ + "S3Uri" + ], + "type": "object" + }, + "AWS::SageMaker::FeatureGroup.ThroughputConfig": { + "additionalProperties": false, + "properties": { + "ProvisionedReadCapacityUnits": { + "markdownDescription": "For provisioned feature groups with online store enabled, this indicates the read throughput you are billed for and can consume without throttling.\n\nThis field is not applicable for on-demand feature groups.", + "title": "ProvisionedReadCapacityUnits", + "type": "number" + }, + "ProvisionedWriteCapacityUnits": { + "markdownDescription": "For provisioned feature groups, this indicates the write throughput you are billed for and can consume without throttling.\n\nThis field is not applicable for on-demand feature groups.", + "title": "ProvisionedWriteCapacityUnits", + "type": "number" + }, + "ThroughputMode": { + "markdownDescription": "The mode used for your feature group throughput: `ON_DEMAND` or `PROVISIONED` .", + "title": "ThroughputMode", + "type": "string" + } + }, + "required": [ + "ThroughputMode" + ], + "type": "object" + }, + "AWS::SageMaker::FeatureGroup.TtlDuration": { + "additionalProperties": false, + "properties": { + "Unit": { + "markdownDescription": "`TtlDuration` time unit.", + "title": "Unit", + "type": "string" + }, + "Value": { + "markdownDescription": "`TtlDuration` time value.", + "title": "Value", + "type": "number" + } + }, + "type": "object" + }, + "AWS::SageMaker::Hub": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "HubDescription": { "type": "string" }, - "EventTimeFeatureName": { - "markdownDescription": "The name of the feature that stores the `EventTime` of a Record in a `FeatureGroup` .\n\nA `EventTime` is point in time when a new event occurs that corresponds to the creation or update of a `Record` in `FeatureGroup` . All `Records` in the `FeatureGroup` must have a corresponding `EventTime` .", - "title": "EventTimeFeatureName", + "HubDisplayName": { "type": "string" }, - "FeatureDefinitions": { + "HubName": { + "type": "string" + }, + "HubSearchKeywords": { "items": { - "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.FeatureDefinition" + "type": "string" }, - "markdownDescription": "A list of `Feature` s. Each `Feature` must include a `FeatureName` and a `FeatureType` .\n\nValid `FeatureType` s are `Integral` , `Fractional` and `String` .\n\n`FeatureName` s cannot be any of the following: `is_deleted` , `write_time` , `api_invocation_time` .\n\nYou can create up to 2,500 `FeatureDefinition` s per `FeatureGroup` .", - "title": "FeatureDefinitions", "type": "array" }, - "FeatureGroupName": { - "markdownDescription": "The name of the `FeatureGroup` .", - "title": "FeatureGroupName", - "type": "string" - }, - "OfflineStoreConfig": { - "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.OfflineStoreConfig", - "markdownDescription": "The configuration of an `OfflineStore` .", - "title": "OfflineStoreConfig" - }, - "OnlineStoreConfig": { - "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.OnlineStoreConfig", - "markdownDescription": "The configuration of an `OnlineStore` .", - "title": "OnlineStoreConfig" - }, - "RecordIdentifierFeatureName": { - "markdownDescription": "The name of the `Feature` whose value uniquely identifies a `Record` defined in the `FeatureGroup` `FeatureDefinitions` .", - "title": "RecordIdentifierFeatureName", - "type": "string" - }, - "RoleArn": { - "markdownDescription": "The Amazon Resource Name (ARN) of the IAM execution role used to create the feature group.", - "title": "RoleArn", - "type": "string" + "S3StorageConfig": { + "$ref": "#/definitions/AWS::SageMaker::Hub.S3StorageConfig" }, "Tags": { "items": { "$ref": "#/definitions/Tag" }, - "markdownDescription": "Tags used to define a `FeatureGroup` .", - "title": "Tags", "type": "array" - }, - "ThroughputConfig": { - "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.ThroughputConfig", - "markdownDescription": "Used to set feature group throughput configuration. There are two modes: `ON_DEMAND` and `PROVISIONED` . With on-demand mode, you are charged for data reads and writes that your application performs on your feature group. You do not need to specify read and write throughput because Feature Store accommodates your workloads as they ramp up and down. You can switch a feature group to on-demand only once in a 24 hour period. With provisioned throughput mode, you specify the read and write capacity per second that you expect your application to require, and you are billed based on those limits. Exceeding provisioned throughput will result in your requests being throttled.\n\nNote: `PROVISIONED` throughput mode is supported only for feature groups that are offline-only, or use the [`Standard`](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_OnlineStoreConfig.html#sagemaker-Type-OnlineStoreConfig-StorageType) tier online store.", - "title": "ThroughputConfig" } }, "required": [ - "EventTimeFeatureName", - "FeatureDefinitions", - "FeatureGroupName", - "RecordIdentifierFeatureName" + "HubDescription", + "HubName" ], "type": "object" }, "Type": { "enum": [ - "AWS::SageMaker::FeatureGroup" + "AWS::SageMaker::Hub" ], "type": "string" }, @@ -334958,173 +342199,11 @@ ], "type": "object" }, - "AWS::SageMaker::FeatureGroup.DataCatalogConfig": { - "additionalProperties": false, - "properties": { - "Catalog": { - "markdownDescription": "The name of the Glue table catalog.", - "title": "Catalog", - "type": "string" - }, - "Database": { - "markdownDescription": "The name of the Glue table database.", - "title": "Database", - "type": "string" - }, - "TableName": { - "markdownDescription": "The name of the Glue table.", - "title": "TableName", - "type": "string" - } - }, - "required": [ - "Catalog", - "Database", - "TableName" - ], - "type": "object" - }, - "AWS::SageMaker::FeatureGroup.FeatureDefinition": { - "additionalProperties": false, - "properties": { - "FeatureName": { - "markdownDescription": "The name of a feature. The type must be a string. `FeatureName` cannot be any of the following: `is_deleted` , `write_time` , `api_invocation_time` .\n\nThe name:\n\n- Must start with an alphanumeric character.\n- Can only include alphanumeric characters, underscores, and hyphens. Spaces are not allowed.", - "title": "FeatureName", - "type": "string" - }, - "FeatureType": { - "markdownDescription": "The value type of a feature. Valid values are Integral, Fractional, or String.", - "title": "FeatureType", - "type": "string" - } - }, - "required": [ - "FeatureName", - "FeatureType" - ], - "type": "object" - }, - "AWS::SageMaker::FeatureGroup.OfflineStoreConfig": { - "additionalProperties": false, - "properties": { - "DataCatalogConfig": { - "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.DataCatalogConfig", - "markdownDescription": "The meta data of the Glue table that is autogenerated when an `OfflineStore` is created.", - "title": "DataCatalogConfig" - }, - "DisableGlueTableCreation": { - "markdownDescription": "Set to `True` to disable the automatic creation of an AWS Glue table when configuring an `OfflineStore` . If set to `False` , Feature Store will name the `OfflineStore` Glue table following [Athena's naming recommendations](https://docs.aws.amazon.com/athena/latest/ug/tables-databases-columns-names.html) .\n\nThe default value is `False` .", - "title": "DisableGlueTableCreation", - "type": "boolean" - }, - "S3StorageConfig": { - "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.S3StorageConfig", - "markdownDescription": "The Amazon Simple Storage (Amazon S3) location of `OfflineStore` .", - "title": "S3StorageConfig" - }, - "TableFormat": { - "markdownDescription": "Format for the offline store table. Supported formats are Glue (Default) and [Apache Iceberg](https://docs.aws.amazon.com/https://iceberg.apache.org/) .", - "title": "TableFormat", - "type": "string" - } - }, - "required": [ - "S3StorageConfig" - ], - "type": "object" - }, - "AWS::SageMaker::FeatureGroup.OnlineStoreConfig": { - "additionalProperties": false, - "properties": { - "EnableOnlineStore": { - "markdownDescription": "Turn `OnlineStore` off by specifying `False` for the `EnableOnlineStore` flag. Turn `OnlineStore` on by specifying `True` for the `EnableOnlineStore` flag.\n\nThe default value is `False` .", - "title": "EnableOnlineStore", - "type": "boolean" - }, - "SecurityConfig": { - "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.OnlineStoreSecurityConfig", - "markdownDescription": "Use to specify KMS Key ID ( `KMSKeyId` ) for at-rest encryption of your `OnlineStore` .", - "title": "SecurityConfig" - }, - "StorageType": { - "markdownDescription": "Option for different tiers of low latency storage for real-time data retrieval.\n\n- `Standard` : A managed low latency data store for feature groups.\n- `InMemory` : A managed data store for feature groups that supports very low latency retrieval.", - "title": "StorageType", - "type": "string" - }, - "TtlDuration": { - "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.TtlDuration", - "markdownDescription": "Time to live duration, where the record is hard deleted after the expiration time is reached; `ExpiresAt` = `EventTime` + `TtlDuration` . For information on HardDelete, see the [DeleteRecord](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_feature_store_DeleteRecord.html) API in the Amazon SageMaker API Reference guide.", - "title": "TtlDuration" - } - }, - "type": "object" - }, - "AWS::SageMaker::FeatureGroup.OnlineStoreSecurityConfig": { - "additionalProperties": false, - "properties": { - "KmsKeyId": { - "markdownDescription": "The AWS Key Management Service (KMS) key ARN that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.\n\nThe caller (either user or IAM role) of `CreateFeatureGroup` must have below permissions to the `OnlineStore` `KmsKeyId` :\n\n- `\"kms:Encrypt\"`\n- `\"kms:Decrypt\"`\n- `\"kms:DescribeKey\"`\n- `\"kms:CreateGrant\"`\n- `\"kms:RetireGrant\"`\n- `\"kms:ReEncryptFrom\"`\n- `\"kms:ReEncryptTo\"`\n- `\"kms:GenerateDataKey\"`\n- `\"kms:ListAliases\"`\n- `\"kms:ListGrants\"`\n- `\"kms:RevokeGrant\"`\n\nThe caller (either user or IAM role) to all DataPlane operations ( `PutRecord` , `GetRecord` , `DeleteRecord` ) must have the following permissions to the `KmsKeyId` :\n\n- `\"kms:Decrypt\"`", - "title": "KmsKeyId", - "type": "string" - } - }, - "type": "object" - }, - "AWS::SageMaker::FeatureGroup.S3StorageConfig": { - "additionalProperties": false, - "properties": { - "KmsKeyId": { - "markdownDescription": "The AWS Key Management Service (KMS) key ARN of the key used to encrypt any objects written into the `OfflineStore` S3 location.\n\nThe IAM `roleARN` that is passed as a parameter to `CreateFeatureGroup` must have below permissions to the `KmsKeyId` :\n\n- `\"kms:GenerateDataKey\"`", - "title": "KmsKeyId", - "type": "string" - }, - "S3Uri": { - "markdownDescription": "The S3 URI, or location in Amazon S3, of `OfflineStore` .\n\nS3 URIs have a format similar to the following: `s3://example-bucket/prefix/` .", - "title": "S3Uri", - "type": "string" - } - }, - "required": [ - "S3Uri" - ], - "type": "object" - }, - "AWS::SageMaker::FeatureGroup.ThroughputConfig": { + "AWS::SageMaker::Hub.S3StorageConfig": { "additionalProperties": false, "properties": { - "ProvisionedReadCapacityUnits": { - "markdownDescription": "For provisioned feature groups with online store enabled, this indicates the read throughput you are billed for and can consume without throttling.\n\nThis field is not applicable for on-demand feature groups.", - "title": "ProvisionedReadCapacityUnits", - "type": "number" - }, - "ProvisionedWriteCapacityUnits": { - "markdownDescription": "For provisioned feature groups, this indicates the write throughput you are billed for and can consume without throttling.\n\nThis field is not applicable for on-demand feature groups.", - "title": "ProvisionedWriteCapacityUnits", - "type": "number" - }, - "ThroughputMode": { - "markdownDescription": "The mode used for your feature group throughput: `ON_DEMAND` or `PROVISIONED` .", - "title": "ThroughputMode", - "type": "string" - } - }, - "required": [ - "ThroughputMode" - ], - "type": "object" - }, - "AWS::SageMaker::FeatureGroup.TtlDuration": { - "additionalProperties": false, - "properties": { - "Unit": { - "markdownDescription": "`TtlDuration` time unit.", - "title": "Unit", + "S3OutputPath": { "type": "string" - }, - "Value": { - "markdownDescription": "`TtlDuration` time value.", - "title": "Value", - "type": "number" } }, "type": "object" @@ -342582,40 +349661,147 @@ "Properties": { "additionalProperties": false, "properties": { - "StudioLifecycleConfigAppType": { - "markdownDescription": "The App type to which the Lifecycle Configuration is attached.", - "title": "StudioLifecycleConfigAppType", + "StudioLifecycleConfigAppType": { + "markdownDescription": "The App type to which the Lifecycle Configuration is attached.", + "title": "StudioLifecycleConfigAppType", + "type": "string" + }, + "StudioLifecycleConfigContent": { + "markdownDescription": "", + "title": "StudioLifecycleConfigContent", + "type": "string" + }, + "StudioLifecycleConfigName": { + "markdownDescription": "The name of the Amazon SageMaker AI Studio Lifecycle Configuration.", + "title": "StudioLifecycleConfigName", + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "", + "title": "Tags", + "type": "array" + } + }, + "required": [ + "StudioLifecycleConfigAppType", + "StudioLifecycleConfigContent", + "StudioLifecycleConfigName" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SageMaker::StudioLifecycleConfig" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::SageMaker::TrialComponent": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "DisplayName": { "type": "string" }, - "StudioLifecycleConfigContent": { - "markdownDescription": "", - "title": "StudioLifecycleConfigContent", - "type": "string" + "InputArtifacts": { + "additionalProperties": false, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "$ref": "#/definitions/AWS::SageMaker::TrialComponent.TrialComponentArtifact" + } + }, + "type": "object" }, - "StudioLifecycleConfigName": { - "markdownDescription": "The name of the Amazon SageMaker AI Studio Lifecycle Configuration.", - "title": "StudioLifecycleConfigName", - "type": "string" + "MetadataProperties": { + "$ref": "#/definitions/AWS::SageMaker::TrialComponent.MetadataProperties" + }, + "OutputArtifacts": { + "additionalProperties": false, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "$ref": "#/definitions/AWS::SageMaker::TrialComponent.TrialComponentArtifact" + } + }, + "type": "object" + }, + "Parameters": { + "additionalProperties": false, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "$ref": "#/definitions/AWS::SageMaker::TrialComponent.TrialComponentParameterValue" + } + }, + "type": "object" + }, + "Status": { + "$ref": "#/definitions/AWS::SageMaker::TrialComponent.TrialComponentStatus" }, "Tags": { "items": { - "$ref": "#/definitions/Tag" + "$ref": "#/definitions/AWS::SageMaker::TrialComponent.TagsItems" }, - "markdownDescription": "", - "title": "Tags", "type": "array" + }, + "TrialComponentName": { + "type": "string" } }, "required": [ - "StudioLifecycleConfigAppType", - "StudioLifecycleConfigContent", - "StudioLifecycleConfigName" + "TrialComponentName" ], "type": "object" }, "Type": { "enum": [ - "AWS::SageMaker::StudioLifecycleConfig" + "AWS::SageMaker::TrialComponent" ], "type": "string" }, @@ -342634,6 +349820,79 @@ ], "type": "object" }, + "AWS::SageMaker::TrialComponent.MetadataProperties": { + "additionalProperties": false, + "properties": { + "CommitId": { + "type": "string" + }, + "GeneratedBy": { + "type": "string" + }, + "ProjectId": { + "type": "string" + }, + "Repository": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::SageMaker::TrialComponent.TagsItems": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, + "AWS::SageMaker::TrialComponent.TrialComponentArtifact": { + "additionalProperties": false, + "properties": { + "MediaType": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Value" + ], + "type": "object" + }, + "AWS::SageMaker::TrialComponent.TrialComponentParameterValue": { + "additionalProperties": false, + "properties": { + "NumberValue": { + "type": "number" + }, + "StringValue": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::SageMaker::TrialComponent.TrialComponentStatus": { + "additionalProperties": false, + "properties": { + "Message": { + "type": "string" + }, + "PrimaryStatus": { + "type": "string" + } + }, + "type": "object" + }, "AWS::SageMaker::UserProfile": { "additionalProperties": false, "properties": { @@ -342908,6 +350167,24 @@ ], "type": "object" }, + "AWS::SageMaker::UserProfile.EmrSettings": { + "additionalProperties": false, + "properties": { + "AssumableRoleArns": { + "items": { + "type": "string" + }, + "type": "array" + }, + "ExecutionRoleArns": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, "AWS::SageMaker::UserProfile.FSxLustreFileSystemConfig": { "additionalProperties": false, "properties": { @@ -343006,6 +350283,9 @@ "markdownDescription": "The default instance type and the Amazon Resource Name (ARN) of the default SageMaker image used by the JupyterLab app.", "title": "DefaultResourceSpec" }, + "EmrSettings": { + "$ref": "#/definitions/AWS::SageMaker::UserProfile.EmrSettings" + }, "LifecycleConfigArns": { "items": { "type": "string" @@ -343101,6 +350381,9 @@ "markdownDescription": "The ARN of the image version created on the instance. To clear the value set for `SageMakerImageVersionArn` , pass `None` as the value.", "title": "SageMakerImageVersionArn", "type": "string" + }, + "TrainingPlanArn": { + "type": "string" } }, "type": "object" @@ -344672,6 +351955,34 @@ }, "type": "object" }, + "AWS::SecurityAgent::AgentSpace.BitbucketCapabilitiesResource": { + "additionalProperties": false, + "properties": { + "LeaveComments": { + "type": "boolean" + }, + "RemediateCode": { + "type": "boolean" + } + }, + "type": "object" + }, + "AWS::SecurityAgent::AgentSpace.BitbucketRepositoryResource": { + "additionalProperties": false, + "properties": { + "Name": { + "type": "string" + }, + "Workspace": { + "type": "string" + } + }, + "required": [ + "Name", + "Workspace" + ], + "type": "object" + }, "AWS::SecurityAgent::AgentSpace.CodeReviewSettings": { "additionalProperties": false, "properties": { @@ -344688,6 +351999,47 @@ ], "type": "object" }, + "AWS::SecurityAgent::AgentSpace.ConfluenceCapabilitiesResource": { + "additionalProperties": false, + "properties": { + "CreateDocument": { + "type": "boolean" + }, + "FetchDocument": { + "type": "boolean" + }, + "UpdateDocument": { + "type": "boolean" + } + }, + "type": "object" + }, + "AWS::SecurityAgent::AgentSpace.ConfluenceDocumentResource": { + "additionalProperties": false, + "properties": { + "Name": { + "type": "string" + }, + "PageId": { + "type": "string" + }, + "SpaceKey": { + "type": "string" + }, + "SpaceTitle": { + "type": "string" + }, + "Title": { + "type": "string" + } + }, + "required": [ + "Name", + "PageId", + "SpaceKey" + ], + "type": "object" + }, "AWS::SecurityAgent::AgentSpace.GitHubCapabilitiesResource": { "additionalProperties": false, "properties": { @@ -344720,6 +352072,34 @@ ], "type": "object" }, + "AWS::SecurityAgent::AgentSpace.GitLabCapabilitiesResource": { + "additionalProperties": false, + "properties": { + "LeaveComments": { + "type": "boolean" + }, + "RemediateCode": { + "type": "boolean" + } + }, + "type": "object" + }, + "AWS::SecurityAgent::AgentSpace.GitLabRepositoryResource": { + "additionalProperties": false, + "properties": { + "Name": { + "type": "string" + }, + "Namespace": { + "type": "string" + } + }, + "required": [ + "Name", + "Namespace" + ], + "type": "object" + }, "AWS::SecurityAgent::AgentSpace.IntegratedResource": { "additionalProperties": false, "properties": { @@ -344742,17 +352122,31 @@ "AWS::SecurityAgent::AgentSpace.ProviderResource": { "additionalProperties": false, "properties": { + "BitbucketCapabilities": { + "$ref": "#/definitions/AWS::SecurityAgent::AgentSpace.BitbucketCapabilitiesResource" + }, + "BitbucketRepository": { + "$ref": "#/definitions/AWS::SecurityAgent::AgentSpace.BitbucketRepositoryResource" + }, + "ConfluenceCapabilities": { + "$ref": "#/definitions/AWS::SecurityAgent::AgentSpace.ConfluenceCapabilitiesResource" + }, + "ConfluenceDocument": { + "$ref": "#/definitions/AWS::SecurityAgent::AgentSpace.ConfluenceDocumentResource" + }, "GitHubCapabilities": { "$ref": "#/definitions/AWS::SecurityAgent::AgentSpace.GitHubCapabilitiesResource" }, "GitHubRepository": { "$ref": "#/definitions/AWS::SecurityAgent::AgentSpace.GitHubRepositoryResource" + }, + "GitLabCapabilities": { + "$ref": "#/definitions/AWS::SecurityAgent::AgentSpace.GitLabCapabilitiesResource" + }, + "GitLabRepository": { + "$ref": "#/definitions/AWS::SecurityAgent::AgentSpace.GitLabRepositoryResource" } }, - "required": [ - "GitHubCapabilities", - "GitHubRepository" - ], "type": "object" }, "AWS::SecurityAgent::AgentSpace.VpcConfig": { @@ -344902,9 +352296,18 @@ "Assets": { "$ref": "#/definitions/AWS::SecurityAgent::Pentest.Assets" }, + "CleanUpStrategy": { + "type": "string" + }, "CodeRemediationStrategy": { "type": "string" }, + "DisableManagedSkills": { + "items": { + "type": "string" + }, + "type": "array" + }, "ExcludeRiskTypes": { "items": { "type": "string" @@ -345148,6 +352551,119 @@ }, "type": "object" }, + "AWS::SecurityAgent::SecurityRequirementPack": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Description": { + "type": "string" + }, + "KmsKeyId": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "SecurityRequirements": { + "items": { + "$ref": "#/definitions/AWS::SecurityAgent::SecurityRequirementPack.SecurityRequirement" + }, + "type": "array" + }, + "Status": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "Name" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SecurityAgent::SecurityRequirementPack" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::SecurityAgent::SecurityRequirementPack.SecurityRequirement": { + "additionalProperties": false, + "properties": { + "Description": { + "type": "string" + }, + "Domain": { + "type": "string" + }, + "Evaluation": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "Remediation": { + "type": "string" + } + }, + "required": [ + "Description", + "Domain", + "Evaluation", + "Name" + ], + "type": "object" + }, "AWS::SecurityAgent::TargetDomain": { "additionalProperties": false, "properties": { @@ -346738,6 +354254,156 @@ }, "type": "object" }, + "AWS::SecurityHub::Connector": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Description": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "Provider": { + "$ref": "#/definitions/AWS::SecurityHub::Connector.Provider" + }, + "Tags": { + "additionalProperties": true, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "type": "object" + } + }, + "required": [ + "Name", + "Provider" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SecurityHub::Connector" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::SecurityHub::Connector.AzureProviderConfiguration": { + "additionalProperties": false, + "properties": { + "AWSConfigConnectorArn": { + "type": "string" + }, + "AzureRegions": { + "items": { + "type": "string" + }, + "type": "array" + }, + "ScopeConfiguration": { + "$ref": "#/definitions/AWS::SecurityHub::Connector.AzureScopeConfiguration" + } + }, + "required": [ + "AWSConfigConnectorArn", + "AzureRegions", + "ScopeConfiguration" + ], + "type": "object" + }, + "AWS::SecurityHub::Connector.AzureScopeConfiguration": { + "additionalProperties": false, + "properties": { + "ScopeType": { + "type": "string" + }, + "ScopeValues": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "ScopeType" + ], + "type": "object" + }, + "AWS::SecurityHub::Connector.HealthIssue": { + "additionalProperties": false, + "properties": { + "Code": { + "type": "string" + }, + "Message": { + "type": "string" + } + }, + "required": [ + "Code", + "Message" + ], + "type": "object" + }, + "AWS::SecurityHub::Connector.Provider": { + "additionalProperties": false, + "properties": { + "Azure": { + "$ref": "#/definitions/AWS::SecurityHub::Connector.AzureProviderConfiguration" + } + }, + "required": [ + "Azure" + ], + "type": "object" + }, "AWS::SecurityHub::ConnectorV2": { "additionalProperties": false, "properties": { @@ -346832,6 +354498,63 @@ ], "type": "object" }, + "AWS::SecurityHub::ConnectorV2.AzureProviderConfiguration": { + "additionalProperties": false, + "properties": { + "AWSConfigConnectorArn": { + "type": "string" + }, + "AzureRegions": { + "items": { + "type": "string" + }, + "type": "array" + }, + "ScopeConfiguration": { + "$ref": "#/definitions/AWS::SecurityHub::ConnectorV2.AzureScopeConfiguration" + } + }, + "required": [ + "AWSConfigConnectorArn", + "AzureRegions", + "ScopeConfiguration" + ], + "type": "object" + }, + "AWS::SecurityHub::ConnectorV2.AzureScopeConfiguration": { + "additionalProperties": false, + "properties": { + "ScopeType": { + "type": "string" + }, + "ScopeValues": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "ScopeType" + ], + "type": "object" + }, + "AWS::SecurityHub::ConnectorV2.HealthIssue": { + "additionalProperties": false, + "properties": { + "Code": { + "type": "string" + }, + "Message": { + "type": "string" + } + }, + "required": [ + "Code", + "Message" + ], + "type": "object" + }, "AWS::SecurityHub::ConnectorV2.JiraCloudProviderConfiguration": { "additionalProperties": false, "properties": { @@ -346849,6 +354572,9 @@ "AWS::SecurityHub::ConnectorV2.Provider": { "additionalProperties": false, "properties": { + "Azure": { + "$ref": "#/definitions/AWS::SecurityHub::ConnectorV2.AzureProviderConfiguration" + }, "JiraCloud": { "$ref": "#/definitions/AWS::SecurityHub::ConnectorV2.JiraCloudProviderConfiguration", "markdownDescription": "Details about a Jira Cloud integration.", @@ -349477,6 +357203,18 @@ }, "type": "object" }, + "AWS::ServiceCatalog::CloudFormationProduct.Info": { + "additionalProperties": false, + "properties": { + "ImportFromPhysicalId": { + "type": "string" + }, + "LoadTemplateFromURL": { + "type": "string" + } + }, + "type": "object" + }, "AWS::ServiceCatalog::CloudFormationProduct.ProvisioningArtifactProperties": { "additionalProperties": false, "properties": { @@ -349491,9 +357229,9 @@ "type": "boolean" }, "Info": { + "$ref": "#/definitions/AWS::ServiceCatalog::CloudFormationProduct.Info", "markdownDescription": "Specify the template source with one of the following options, but not both. Keys accepted: [ `LoadTemplateFromURL` , `ImportFromPhysicalId` ]\n\nThe URL of the AWS CloudFormation template in Amazon S3 in JSON format. Specify the URL in JSON format as follows:\n\n`\"LoadTemplateFromURL\": \"https://s3.amazonaws.com/cf-templates-ozkq9d3hgiq2-us-east-1/...\"`\n\n`ImportFromPhysicalId` : The physical id of the resource that contains the template. Currently only supports AWS CloudFormation stack arn. Specify the physical id in JSON format as follows: `ImportFromPhysicalId: \u201carn:aws:cloudformation:[us-east-1]:[accountId]:stack/[StackName]/[resourceId]`", - "title": "Info", - "type": "object" + "title": "Info" }, "Name": { "markdownDescription": "The name of the provisioning artifact (for example, v1 v2beta). No spaces are allowed.", @@ -351669,7 +359407,13 @@ "type": "string" }, "ServiceAttributes": { + "additionalProperties": true, "markdownDescription": "A complex type that contains information about attributes associated with a specific service.", + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, "title": "ServiceAttributes", "type": "object" }, @@ -353092,6 +360836,87 @@ ], "type": "object" }, + "AWS::StorageGateway::TapePool": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "PoolName": { + "type": "string" + }, + "RetentionLockTimeInDays": { + "type": "number" + }, + "RetentionLockType": { + "type": "string" + }, + "StorageClass": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "PoolName", + "StorageClass" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::StorageGateway::TapePool" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, "AWS::SupportApp::AccountAlias": { "additionalProperties": false, "properties": { @@ -355031,6 +362856,93 @@ }, "type": "object" }, + "AWS::Transcribe::VocabularyFilter": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "DataAccessRoleArn": { + "type": "string" + }, + "LanguageCode": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + }, + "VocabularyFilterFileUri": { + "type": "string" + }, + "VocabularyFilterName": { + "type": "string" + }, + "Words": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "LanguageCode", + "VocabularyFilterName" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Transcribe::VocabularyFilter" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, "AWS::Transfer::Agreement": { "additionalProperties": false, "properties": { @@ -358664,6 +366576,9 @@ "markdownDescription": "Describes the DNS information of the service. This field is read-only.", "title": "DnsEntry" }, + "IdleTimeoutSeconds": { + "type": "number" + }, "Name": { "markdownDescription": "The name of the service. The name must be unique within the account. The valid characters are a-z, 0-9, and hyphens (-). You can't use a hyphen as the first or last character, or immediately after another hyphen.\n\nIf you don't specify a name, CloudFormation generates one. However, if you specify a name, and later want to replace the resource, you must specify a new name.", "title": "Name", @@ -365623,26 +373538,294 @@ "Properties": { "additionalProperties": false, "properties": { - "ResourceArn": { - "markdownDescription": "The Amazon Resource Name (ARN) of the resource to associate with the web ACL.\n\nThe ARN must be in one of the following formats:\n\n- For an Application Load Balancer: `arn: *partition* :elasticloadbalancing: *region* : *account-id* :loadbalancer/app/ *load-balancer-name* / *load-balancer-id*`\n- For an Amazon API Gateway REST API: `arn: *partition* :apigateway: *region* ::/restapis/ *api-id* /stages/ *stage-name*`\n- For an AWS AppSync GraphQL API: `arn: *partition* :appsync: *region* : *account-id* :apis/ *GraphQLApiId*`\n- For an Amazon Cognito user pool: `arn: *partition* :cognito-idp: *region* : *account-id* :userpool/ *user-pool-id*`\n- For an AWS App Runner service: `arn: *partition* :apprunner: *region* : *account-id* :service/ *apprunner-service-name* / *apprunner-service-id*`\n- For an AWS Verified Access instance: `arn: *partition* :ec2: *region* : *account-id* :verified-access-instance/ *instance-id*`\n- For an AWS Amplify instance: `arn: *partition* :amplify: *region* : *account-id* :apps/ *app-id*`", - "title": "ResourceArn", + "ResourceArn": { + "markdownDescription": "The Amazon Resource Name (ARN) of the resource to associate with the web ACL.\n\nThe ARN must be in one of the following formats:\n\n- For an Application Load Balancer: `arn: *partition* :elasticloadbalancing: *region* : *account-id* :loadbalancer/app/ *load-balancer-name* / *load-balancer-id*`\n- For an Amazon API Gateway REST API: `arn: *partition* :apigateway: *region* ::/restapis/ *api-id* /stages/ *stage-name*`\n- For an AWS AppSync GraphQL API: `arn: *partition* :appsync: *region* : *account-id* :apis/ *GraphQLApiId*`\n- For an Amazon Cognito user pool: `arn: *partition* :cognito-idp: *region* : *account-id* :userpool/ *user-pool-id*`\n- For an AWS App Runner service: `arn: *partition* :apprunner: *region* : *account-id* :service/ *apprunner-service-name* / *apprunner-service-id*`\n- For an AWS Verified Access instance: `arn: *partition* :ec2: *region* : *account-id* :verified-access-instance/ *instance-id*`\n- For an AWS Amplify instance: `arn: *partition* :amplify: *region* : *account-id* :apps/ *app-id*`", + "title": "ResourceArn", + "type": "string" + }, + "WebACLArn": { + "markdownDescription": "The Amazon Resource Name (ARN) of the web ACL that you want to associate with the resource.", + "title": "WebACLArn", + "type": "string" + } + }, + "required": [ + "ResourceArn", + "WebACLArn" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::WAFv2::WebACLAssociation" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::WellArchitected::Lens": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "JSONString": { + "type": "string" + }, + "LensVersion": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/AWS::WellArchitected::Lens.TagsItems" + }, + "type": "array" + } + }, + "type": "object" + }, + "Type": { + "enum": [ + "AWS::WellArchitected::Lens" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type" + ], + "type": "object" + }, + "AWS::WellArchitected::Lens.TagsItems": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, + "AWS::WellArchitected::Profile": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "ProfileDescription": { + "type": "string" + }, + "ProfileName": { + "type": "string" + }, + "ProfileQuestions": { + "items": { + "$ref": "#/definitions/AWS::WellArchitected::Profile.ProfileQuestionUpdate" + }, + "type": "array" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "ProfileDescription", + "ProfileName", + "ProfileQuestions" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::WellArchitected::Profile" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::WellArchitected::Profile.ProfileQuestionUpdate": { + "additionalProperties": false, + "properties": { + "QuestionId": { + "type": "string" + }, + "SelectedChoiceIds": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, + "AWS::WellArchitected::ReviewTemplate": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Description": { "type": "string" }, - "WebACLArn": { - "markdownDescription": "The Amazon Resource Name (ARN) of the web ACL that you want to associate with the resource.", - "title": "WebACLArn", + "Lenses": { + "items": { + "type": "string" + }, + "type": "array" + }, + "Notes": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/AWS::WellArchitected::ReviewTemplate.TagsItems" + }, + "type": "array" + }, + "TemplateName": { "type": "string" } }, "required": [ - "ResourceArn", - "WebACLArn" + "Description", + "Lenses", + "TemplateName" ], "type": "object" }, "Type": { "enum": [ - "AWS::WAFv2::WebACLAssociation" + "AWS::WellArchitected::ReviewTemplate" ], "type": "string" }, @@ -365661,6 +373844,22 @@ ], "type": "object" }, + "AWS::WellArchitected::ReviewTemplate.TagsItems": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, "AWS::Wisdom::AIAgent": { "additionalProperties": false, "properties": { @@ -368667,161 +376866,272 @@ "Properties": { "additionalProperties": false, "properties": { - "ConnectionString": { - "markdownDescription": "The connection string specified for the connection alias. The connection string must be in the form of a fully qualified domain name (FQDN), such as `www.example.com` .", - "title": "ConnectionString", + "ConnectionString": { + "markdownDescription": "The connection string specified for the connection alias. The connection string must be in the form of a fully qualified domain name (FQDN), such as `www.example.com` .", + "title": "ConnectionString", + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "The tags to associate with the connection alias.", + "title": "Tags", + "type": "array" + } + }, + "required": [ + "ConnectionString" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::WorkSpaces::ConnectionAlias" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::WorkSpaces::ConnectionAlias.ConnectionAliasAssociation": { + "additionalProperties": false, + "properties": { + "AssociatedAccountId": { + "markdownDescription": "The identifier of the AWS account that associated the connection alias with a directory.", + "title": "AssociatedAccountId", + "type": "string" + }, + "AssociationStatus": { + "markdownDescription": "The association status of the connection alias.", + "title": "AssociationStatus", + "type": "string" + }, + "ConnectionIdentifier": { + "markdownDescription": "The identifier of the connection alias association. You use the connection identifier in the DNS TXT record when you're configuring your DNS routing policies.", + "title": "ConnectionIdentifier", + "type": "string" + }, + "ResourceId": { + "markdownDescription": "The identifier of the directory associated with a connection alias.", + "title": "ResourceId", + "type": "string" + } + }, + "type": "object" + }, + "AWS::WorkSpaces::Workspace": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "BundleId": { + "markdownDescription": "The identifier of the bundle for the WorkSpace.", + "title": "BundleId", + "type": "string" + }, + "DirectoryId": { + "markdownDescription": "The identifier of the Directory Service directory for the WorkSpace.", + "title": "DirectoryId", + "type": "string" + }, + "RootVolumeEncryptionEnabled": { + "markdownDescription": "Indicates whether the data stored on the root volume is encrypted.", + "title": "RootVolumeEncryptionEnabled", + "type": "boolean" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "The tags for the WorkSpace.", + "title": "Tags", + "type": "array" + }, + "UserName": { + "markdownDescription": "The user name of the user for the WorkSpace. This user name must exist in the Directory Service directory for the WorkSpace.", + "title": "UserName", + "type": "string" + }, + "UserVolumeEncryptionEnabled": { + "markdownDescription": "Indicates whether the data stored on the user volume is encrypted.", + "title": "UserVolumeEncryptionEnabled", + "type": "boolean" + }, + "VolumeEncryptionKey": { + "markdownDescription": "The symmetric AWS KMS key used to encrypt data stored on your WorkSpace. Amazon WorkSpaces does not support asymmetric KMS keys.", + "title": "VolumeEncryptionKey", + "type": "string" + }, + "WorkspaceProperties": { + "$ref": "#/definitions/AWS::WorkSpaces::Workspace.WorkspaceProperties", + "markdownDescription": "The WorkSpace properties.", + "title": "WorkspaceProperties" + } + }, + "required": [ + "BundleId", + "DirectoryId", + "UserName" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::WorkSpaces::Workspace" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::WorkSpaces::Workspace.WorkspaceProperties": { + "additionalProperties": false, + "properties": { + "ComputeTypeName": { + "markdownDescription": "The compute type. For more information, see [Amazon WorkSpaces Bundles](https://docs.aws.amazon.com/workspaces/details/#Amazon_WorkSpaces_Bundles) .", + "title": "ComputeTypeName", + "type": "string" + }, + "RootVolumeSizeGib": { + "markdownDescription": "The size of the root volume. For important information about how to modify the size of the root and user volumes, see [Modify a WorkSpace](https://docs.aws.amazon.com/workspaces/latest/adminguide/modify-workspaces.html) .", + "title": "RootVolumeSizeGib", + "type": "number" + }, + "RunningMode": { + "markdownDescription": "The running mode. For more information, see [Manage the WorkSpace Running Mode](https://docs.aws.amazon.com/workspaces/latest/adminguide/running-mode.html) .", + "title": "RunningMode", + "type": "string" + }, + "RunningModeAutoStopTimeoutInMinutes": { + "markdownDescription": "The time after a user logs off when WorkSpaces are automatically stopped. Configured in 60-minute intervals.", + "title": "RunningModeAutoStopTimeoutInMinutes", + "type": "number" + }, + "UserVolumeSizeGib": { + "markdownDescription": "The size of the user storage. For important information about how to modify the size of the root and user volumes, see [Modify a WorkSpace](https://docs.aws.amazon.com/workspaces/latest/adminguide/modify-workspaces.html) .", + "title": "UserVolumeSizeGib", + "type": "number" + } + }, + "type": "object" + }, + "AWS::WorkSpaces::WorkspaceIpGroup": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "GroupDesc": { "type": "string" }, - "Tags": { - "items": { - "$ref": "#/definitions/Tag" - }, - "markdownDescription": "The tags to associate with the connection alias.", - "title": "Tags", - "type": "array" - } - }, - "required": [ - "ConnectionString" - ], - "type": "object" - }, - "Type": { - "enum": [ - "AWS::WorkSpaces::ConnectionAlias" - ], - "type": "string" - }, - "UpdateReplacePolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], - "type": "string" - } - }, - "required": [ - "Type", - "Properties" - ], - "type": "object" - }, - "AWS::WorkSpaces::ConnectionAlias.ConnectionAliasAssociation": { - "additionalProperties": false, - "properties": { - "AssociatedAccountId": { - "markdownDescription": "The identifier of the AWS account that associated the connection alias with a directory.", - "title": "AssociatedAccountId", - "type": "string" - }, - "AssociationStatus": { - "markdownDescription": "The association status of the connection alias.", - "title": "AssociationStatus", - "type": "string" - }, - "ConnectionIdentifier": { - "markdownDescription": "The identifier of the connection alias association. You use the connection identifier in the DNS TXT record when you're configuring your DNS routing policies.", - "title": "ConnectionIdentifier", - "type": "string" - }, - "ResourceId": { - "markdownDescription": "The identifier of the directory associated with a connection alias.", - "title": "ResourceId", - "type": "string" - } - }, - "type": "object" - }, - "AWS::WorkSpaces::Workspace": { - "additionalProperties": false, - "properties": { - "Condition": { - "type": "string" - }, - "DeletionPolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], - "type": "string" - }, - "DependsOn": { - "anyOf": [ - { - "pattern": "^[a-zA-Z0-9]+$", + "GroupName": { "type": "string" }, - { + "Tags": { "items": { - "pattern": "^[a-zA-Z0-9]+$", - "type": "string" + "$ref": "#/definitions/Tag" }, "type": "array" - } - ] - }, - "Metadata": { - "type": "object" - }, - "Properties": { - "additionalProperties": false, - "properties": { - "BundleId": { - "markdownDescription": "The identifier of the bundle for the WorkSpace.", - "title": "BundleId", - "type": "string" }, - "DirectoryId": { - "markdownDescription": "The identifier of the Directory Service directory for the WorkSpace.", - "title": "DirectoryId", - "type": "string" - }, - "RootVolumeEncryptionEnabled": { - "markdownDescription": "Indicates whether the data stored on the root volume is encrypted.", - "title": "RootVolumeEncryptionEnabled", - "type": "boolean" - }, - "Tags": { + "UserRules": { "items": { - "$ref": "#/definitions/Tag" + "$ref": "#/definitions/AWS::WorkSpaces::WorkspaceIpGroup.IpRuleItem" }, - "markdownDescription": "The tags for the WorkSpace.", - "title": "Tags", "type": "array" - }, - "UserName": { - "markdownDescription": "The user name of the user for the WorkSpace. This user name must exist in the Directory Service directory for the WorkSpace.", - "title": "UserName", - "type": "string" - }, - "UserVolumeEncryptionEnabled": { - "markdownDescription": "Indicates whether the data stored on the user volume is encrypted.", - "title": "UserVolumeEncryptionEnabled", - "type": "boolean" - }, - "VolumeEncryptionKey": { - "markdownDescription": "The symmetric AWS KMS key used to encrypt data stored on your WorkSpace. Amazon WorkSpaces does not support asymmetric KMS keys.", - "title": "VolumeEncryptionKey", - "type": "string" - }, - "WorkspaceProperties": { - "$ref": "#/definitions/AWS::WorkSpaces::Workspace.WorkspaceProperties", - "markdownDescription": "The WorkSpace properties.", - "title": "WorkspaceProperties" } }, "required": [ - "BundleId", - "DirectoryId", - "UserName" + "GroupName" ], "type": "object" }, "Type": { "enum": [ - "AWS::WorkSpaces::Workspace" + "AWS::WorkSpaces::WorkspaceIpGroup" ], "type": "string" }, @@ -368840,35 +377150,19 @@ ], "type": "object" }, - "AWS::WorkSpaces::Workspace.WorkspaceProperties": { + "AWS::WorkSpaces::WorkspaceIpGroup.IpRuleItem": { "additionalProperties": false, "properties": { - "ComputeTypeName": { - "markdownDescription": "The compute type. For more information, see [Amazon WorkSpaces Bundles](https://docs.aws.amazon.com/workspaces/details/#Amazon_WorkSpaces_Bundles) .", - "title": "ComputeTypeName", + "IpRule": { "type": "string" }, - "RootVolumeSizeGib": { - "markdownDescription": "The size of the root volume. For important information about how to modify the size of the root and user volumes, see [Modify a WorkSpace](https://docs.aws.amazon.com/workspaces/latest/adminguide/modify-workspaces.html) .", - "title": "RootVolumeSizeGib", - "type": "number" - }, - "RunningMode": { - "markdownDescription": "The running mode. For more information, see [Manage the WorkSpace Running Mode](https://docs.aws.amazon.com/workspaces/latest/adminguide/running-mode.html) .", - "title": "RunningMode", + "RuleDesc": { "type": "string" - }, - "RunningModeAutoStopTimeoutInMinutes": { - "markdownDescription": "The time after a user logs off when WorkSpaces are automatically stopped. Configured in 60-minute intervals.", - "title": "RunningModeAutoStopTimeoutInMinutes", - "type": "number" - }, - "UserVolumeSizeGib": { - "markdownDescription": "The size of the user storage. For important information about how to modify the size of the root and user volumes, see [Modify a WorkSpace](https://docs.aws.amazon.com/workspaces/latest/adminguide/modify-workspaces.html) .", - "title": "UserVolumeSizeGib", - "type": "number" } }, + "required": [ + "IpRule" + ], "type": "object" }, "AWS::WorkSpaces::WorkspacesPool": { @@ -382592,6 +390886,9 @@ { "$ref": "#/definitions/AWS::AuditManager::Assessment" }, + { + "$ref": "#/definitions/AWS::AuditManager::AssessmentFramework" + }, { "$ref": "#/definitions/AWS::AutoScaling::AutoScalingGroup" }, @@ -382643,6 +390940,9 @@ { "$ref": "#/definitions/AWS::Backup::Framework" }, + { + "$ref": "#/definitions/AWS::Backup::LegalHold" + }, { "$ref": "#/definitions/AWS::Backup::LogicallyAirGappedBackupVault" }, @@ -382736,6 +391036,9 @@ { "$ref": "#/definitions/AWS::Bedrock::KnowledgeBase" }, + { + "$ref": "#/definitions/AWS::Bedrock::KnowledgeBasePolicy" + }, { "$ref": "#/definitions/AWS::Bedrock::Prompt" }, @@ -382748,9 +391051,6 @@ { "$ref": "#/definitions/AWS::BedrockAgentCore::ApiKeyCredentialProvider" }, - { - "$ref": "#/definitions/AWS::BedrockAgentCore::Browser" - }, { "$ref": "#/definitions/AWS::BedrockAgentCore::BrowserCustom" }, @@ -382880,6 +391180,15 @@ { "$ref": "#/definitions/AWS::CertificateManager::Account" }, + { + "$ref": "#/definitions/AWS::CertificateManager::AcmeDomainValidation" + }, + { + "$ref": "#/definitions/AWS::CertificateManager::AcmeEndpoint" + }, + { + "$ref": "#/definitions/AWS::CertificateManager::AcmeExternalAccountBinding" + }, { "$ref": "#/definitions/AWS::CertificateManager::Certificate" }, @@ -382898,6 +391207,9 @@ { "$ref": "#/definitions/AWS::Chime::AppInstanceBot" }, + { + "$ref": "#/definitions/AWS::Chime::AppInstanceUser" + }, { "$ref": "#/definitions/AWS::CleanRooms::AnalysisTemplate" }, @@ -382916,6 +391228,9 @@ { "$ref": "#/definitions/AWS::CleanRooms::IdNamespaceAssociation" }, + { + "$ref": "#/definitions/AWS::CleanRooms::IntermediateTable" + }, { "$ref": "#/definitions/AWS::CleanRooms::Membership" }, @@ -382937,6 +391252,9 @@ { "$ref": "#/definitions/AWS::CloudFormation::CustomResource" }, + { + "$ref": "#/definitions/AWS::CloudFormation::GeneratedTemplate" + }, { "$ref": "#/definitions/AWS::CloudFormation::GuardHook" }, @@ -383189,6 +391507,12 @@ { "$ref": "#/definitions/AWS::Cognito::UserPoolIdentityProvider" }, + { + "$ref": "#/definitions/AWS::Cognito::UserPoolRegionalConfigurationAttachment" + }, + { + "$ref": "#/definitions/AWS::Cognito::UserPoolReplica" + }, { "$ref": "#/definitions/AWS::Cognito::UserPoolResourceServer" }, @@ -383228,6 +391552,9 @@ { "$ref": "#/definitions/AWS::Config::ConformancePack" }, + { + "$ref": "#/definitions/AWS::Config::Connector" + }, { "$ref": "#/definitions/AWS::Config::DeliveryChannel" }, @@ -383264,6 +391591,9 @@ { "$ref": "#/definitions/AWS::Connect::ContactFlowVersion" }, + { + "$ref": "#/definitions/AWS::Connect::DataLakeAssociation" + }, { "$ref": "#/definitions/AWS::Connect::DataTable" }, @@ -383324,6 +391654,9 @@ { "$ref": "#/definitions/AWS::Connect::TaskTemplate" }, + { + "$ref": "#/definitions/AWS::Connect::TestCase" + }, { "$ref": "#/definitions/AWS::Connect::TrafficDistributionGroup" }, @@ -383366,6 +391699,9 @@ { "$ref": "#/definitions/AWS::CustomerProfiles::Domain" }, + { + "$ref": "#/definitions/AWS::CustomerProfiles::DomainObjectType" + }, { "$ref": "#/definitions/AWS::CustomerProfiles::EventStream" }, @@ -383915,6 +392251,15 @@ { "$ref": "#/definitions/AWS::EC2::TransitGatewayPeeringAttachment" }, + { + "$ref": "#/definitions/AWS::EC2::TransitGatewayPolicyTable" + }, + { + "$ref": "#/definitions/AWS::EC2::TransitGatewayPolicyTableAssociation" + }, + { + "$ref": "#/definitions/AWS::EC2::TransitGatewayPolicyTableEntry" + }, { "$ref": "#/definitions/AWS::EC2::TransitGatewayRoute" }, @@ -384374,6 +392719,9 @@ { "$ref": "#/definitions/AWS::GlobalAccelerator::Listener" }, + { + "$ref": "#/definitions/AWS::Glue::Blueprint" + }, { "$ref": "#/definitions/AWS::Glue::Catalog" }, @@ -384446,6 +392794,9 @@ { "$ref": "#/definitions/AWS::Glue::UsageProfile" }, + { + "$ref": "#/definitions/AWS::Glue::UserDefinedFunction" + }, { "$ref": "#/definitions/AWS::Glue::Workflow" }, @@ -384551,6 +392902,9 @@ { "$ref": "#/definitions/AWS::HealthImaging::Datastore" }, + { + "$ref": "#/definitions/AWS::HealthLake::DataTransformationProfile" + }, { "$ref": "#/definitions/AWS::HealthLake::FHIRDatastore" }, @@ -385028,6 +393382,12 @@ { "$ref": "#/definitions/AWS::Lambda::LayerVersionPermission" }, + { + "$ref": "#/definitions/AWS::Lambda::MicrovmImage" + }, + { + "$ref": "#/definitions/AWS::Lambda::NetworkConnector" + }, { "$ref": "#/definitions/AWS::Lambda::Permission" }, @@ -385193,6 +393553,9 @@ { "$ref": "#/definitions/AWS::MSK::BatchScramSecret" }, + { + "$ref": "#/definitions/AWS::MSK::Channel" + }, { "$ref": "#/definitions/AWS::MSK::Cluster" }, @@ -385322,6 +393685,9 @@ { "$ref": "#/definitions/AWS::MediaLive::Network" }, + { + "$ref": "#/definitions/AWS::MediaLive::Node" + }, { "$ref": "#/definitions/AWS::MediaLive::SdiSource" }, @@ -385445,6 +393811,9 @@ { "$ref": "#/definitions/AWS::NetworkFirewall::VpcEndpointAssociation" }, + { + "$ref": "#/definitions/AWS::NetworkFlowMonitor::Monitor" + }, { "$ref": "#/definitions/AWS::NetworkManager::ConnectAttachment" }, @@ -385655,6 +394024,9 @@ { "$ref": "#/definitions/AWS::Organizations::ResourcePolicy" }, + { + "$ref": "#/definitions/AWS::Outposts::Site" + }, { "$ref": "#/definitions/AWS::PCAConnectorAD::Connector" }, @@ -385826,6 +394198,9 @@ { "$ref": "#/definitions/AWS::QuickSight::ActionConnector" }, + { + "$ref": "#/definitions/AWS::QuickSight::Agent" + }, { "$ref": "#/definitions/AWS::QuickSight::Analysis" }, @@ -385841,12 +394216,24 @@ { "$ref": "#/definitions/AWS::QuickSight::DataSource" }, + { + "$ref": "#/definitions/AWS::QuickSight::Flow" + }, { "$ref": "#/definitions/AWS::QuickSight::Folder" }, + { + "$ref": "#/definitions/AWS::QuickSight::KnowledgeBase" + }, + { + "$ref": "#/definitions/AWS::QuickSight::OAuthClientApplication" + }, { "$ref": "#/definitions/AWS::QuickSight::RefreshSchedule" }, + { + "$ref": "#/definitions/AWS::QuickSight::Space" + }, { "$ref": "#/definitions/AWS::QuickSight::Template" }, @@ -386261,6 +394648,12 @@ { "$ref": "#/definitions/AWS::S3Vectors::VectorBucketPolicy" }, + { + "$ref": "#/definitions/AWS::SCN::Dataset" + }, + { + "$ref": "#/definitions/AWS::SCN::Namespace" + }, { "$ref": "#/definitions/AWS::SDB::Domain" }, @@ -386342,6 +394735,9 @@ { "$ref": "#/definitions/AWS::SMSVOICE::ProtectConfiguration" }, + { + "$ref": "#/definitions/AWS::SMSVOICE::Registration" + }, { "$ref": "#/definitions/AWS::SMSVOICE::ResourcePolicy" }, @@ -386384,6 +394780,9 @@ { "$ref": "#/definitions/AWS::SSM::MaintenanceWindowTask" }, + { + "$ref": "#/definitions/AWS::SSM::OpsItem" + }, { "$ref": "#/definitions/AWS::SSM::Parameter" }, @@ -386441,6 +394840,12 @@ { "$ref": "#/definitions/AWS::SSO::PermissionSet" }, + { + "$ref": "#/definitions/AWS::SageMaker::Action" + }, + { + "$ref": "#/definitions/AWS::SageMaker::Algorithm" + }, { "$ref": "#/definitions/AWS::SageMaker::App" }, @@ -386453,6 +394858,9 @@ { "$ref": "#/definitions/AWS::SageMaker::CodeRepository" }, + { + "$ref": "#/definitions/AWS::SageMaker::Context" + }, { "$ref": "#/definitions/AWS::SageMaker::DataQualityJobDefinition" }, @@ -386471,9 +394879,18 @@ { "$ref": "#/definitions/AWS::SageMaker::EndpointConfig" }, + { + "$ref": "#/definitions/AWS::SageMaker::Experiment" + }, + { + "$ref": "#/definitions/AWS::SageMaker::ExperimentTrialComponent" + }, { "$ref": "#/definitions/AWS::SageMaker::FeatureGroup" }, + { + "$ref": "#/definitions/AWS::SageMaker::Hub" + }, { "$ref": "#/definitions/AWS::SageMaker::Image" }, @@ -386540,6 +394957,9 @@ { "$ref": "#/definitions/AWS::SageMaker::StudioLifecycleConfig" }, + { + "$ref": "#/definitions/AWS::SageMaker::TrialComponent" + }, { "$ref": "#/definitions/AWS::SageMaker::UserProfile" }, @@ -386573,6 +394993,9 @@ { "$ref": "#/definitions/AWS::SecurityAgent::Pentest" }, + { + "$ref": "#/definitions/AWS::SecurityAgent::SecurityRequirementPack" + }, { "$ref": "#/definitions/AWS::SecurityAgent::TargetDomain" }, @@ -386588,6 +395011,9 @@ { "$ref": "#/definitions/AWS::SecurityHub::ConfigurationPolicy" }, + { + "$ref": "#/definitions/AWS::SecurityHub::Connector" + }, { "$ref": "#/definitions/AWS::SecurityHub::ConnectorV2" }, @@ -386741,6 +395167,9 @@ { "$ref": "#/definitions/AWS::StepFunctions::StateMachineVersion" }, + { + "$ref": "#/definitions/AWS::StorageGateway::TapePool" + }, { "$ref": "#/definitions/AWS::SupportApp::AccountAlias" }, @@ -386774,6 +395203,9 @@ { "$ref": "#/definitions/AWS::Timestream::Table" }, + { + "$ref": "#/definitions/AWS::Transcribe::VocabularyFilter" + }, { "$ref": "#/definitions/AWS::Transfer::Agreement" }, @@ -386933,6 +395365,15 @@ { "$ref": "#/definitions/AWS::WAFv2::WebACLAssociation" }, + { + "$ref": "#/definitions/AWS::WellArchitected::Lens" + }, + { + "$ref": "#/definitions/AWS::WellArchitected::Profile" + }, + { + "$ref": "#/definitions/AWS::WellArchitected::ReviewTemplate" + }, { "$ref": "#/definitions/AWS::Wisdom::AIAgent" }, @@ -386975,6 +395416,9 @@ { "$ref": "#/definitions/AWS::WorkSpaces::Workspace" }, + { + "$ref": "#/definitions/AWS::WorkSpaces::WorkspaceIpGroup" + }, { "$ref": "#/definitions/AWS::WorkSpaces::WorkspacesPool" }, diff --git a/schema_source/cloudformation.schema.json b/schema_source/cloudformation.schema.json index 4c56ed19f..5101e1f83 100644 --- a/schema_source/cloudformation.schema.json +++ b/schema_source/cloudformation.schema.json @@ -4228,6 +4228,12 @@ "title": "PubliclyAccessible", "type": "boolean" }, + "ResourceShareArns": { + "items": { + "type": "string" + }, + "type": "array" + }, "SecurityGroups": { "items": { "type": "string" @@ -4236,6 +4242,9 @@ "title": "SecurityGroups", "type": "array" }, + "StorageSize": { + "type": "number" + }, "StorageType": { "markdownDescription": "The broker's storage type.", "title": "StorageType", @@ -21434,6 +21443,9 @@ "title": "AccessEndpoints", "type": "array" }, + "AgentAccessConfig": { + "$ref": "#/definitions/AWS::AppStream::Stack.AgentAccessConfig" + }, "ApplicationSettings": { "$ref": "#/definitions/AWS::AppStream::Stack.ApplicationSettings", "markdownDescription": "The persistent application settings for users of the stack. When these settings are enabled, changes that users make to applications and Windows settings are automatically saved after each session and applied to the next session.", @@ -21560,6 +21572,54 @@ ], "type": "object" }, + "AWS::AppStream::Stack.AgentAccessConfig": { + "additionalProperties": false, + "properties": { + "S3BucketArn": { + "type": "string" + }, + "ScreenImageFormat": { + "type": "string" + }, + "ScreenResolution": { + "type": "string" + }, + "ScreenshotsUploadEnabled": { + "type": "boolean" + }, + "Settings": { + "items": { + "$ref": "#/definitions/AWS::AppStream::Stack.AgentAccessSetting" + }, + "type": "array" + }, + "UserControlMode": { + "type": "string" + } + }, + "required": [ + "ScreenImageFormat", + "ScreenResolution", + "Settings" + ], + "type": "object" + }, + "AWS::AppStream::Stack.AgentAccessSetting": { + "additionalProperties": false, + "properties": { + "AgentAction": { + "type": "string" + }, + "Permission": { + "type": "string" + } + }, + "required": [ + "AgentAction", + "Permission" + ], + "type": "object" + }, "AWS::AppStream::Stack.ApplicationSettings": { "additionalProperties": false, "properties": { @@ -27996,6 +28056,121 @@ }, "type": "object" }, + "AWS::AuditManager::AssessmentFramework": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "ComplianceType": { + "type": "string" + }, + "ControlSets": { + "items": { + "$ref": "#/definitions/AWS::AuditManager::AssessmentFramework.ControlSet" + }, + "type": "array" + }, + "Description": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "ControlSets", + "Name" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::AuditManager::AssessmentFramework" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::AuditManager::AssessmentFramework.ControlSet": { + "additionalProperties": false, + "properties": { + "Controls": { + "items": { + "$ref": "#/definitions/AWS::AuditManager::AssessmentFramework.ControlSetControl" + }, + "type": "array" + }, + "Name": { + "type": "string" + } + }, + "required": [ + "Controls", + "Name" + ], + "type": "object" + }, + "AWS::AuditManager::AssessmentFramework.ControlSetControl": { + "additionalProperties": false, + "properties": { + "Id": { + "type": "string" + } + }, + "required": [ + "Id" + ], + "type": "object" + }, "AWS::AutoScaling::AutoScalingGroup": { "additionalProperties": false, "properties": { @@ -33137,6 +33312,138 @@ ], "type": "object" }, + "AWS::Backup::LegalHold": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Description": { + "type": "string" + }, + "RecoveryPointSelection": { + "$ref": "#/definitions/AWS::Backup::LegalHold.RecoveryPointSelection" + }, + "Tags": { + "items": { + "$ref": "#/definitions/AWS::Backup::LegalHold.TagsItems" + }, + "type": "array" + }, + "Title": { + "type": "string" + } + }, + "required": [ + "Description", + "RecoveryPointSelection", + "Title" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Backup::LegalHold" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Backup::LegalHold.DateRange": { + "additionalProperties": false, + "properties": { + "FromDate": { + "type": "string" + }, + "ToDate": { + "type": "string" + } + }, + "required": [ + "FromDate", + "ToDate" + ], + "type": "object" + }, + "AWS::Backup::LegalHold.RecoveryPointSelection": { + "additionalProperties": false, + "properties": { + "DateRange": { + "$ref": "#/definitions/AWS::Backup::LegalHold.DateRange" + }, + "ResourceIdentifiers": { + "items": { + "type": "string" + }, + "type": "array" + }, + "VaultNames": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, + "AWS::Backup::LegalHold.TagsItems": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, "AWS::Backup::LogicallyAirGappedBackupVault": { "additionalProperties": false, "properties": { @@ -39116,6 +39423,18 @@ ], "type": "object" }, + "AWS::Bedrock::DataSource.AudioExtractionConfiguration": { + "additionalProperties": false, + "properties": { + "AudioExtractionStatus": { + "type": "string" + } + }, + "required": [ + "AudioExtractionStatus" + ], + "type": "object" + }, "AWS::Bedrock::DataSource.BedrockDataAutomationConfiguration": { "additionalProperties": false, "properties": { @@ -39331,6 +39650,9 @@ "markdownDescription": "The configuration information to connect to Confluence as your data source.\n\n> Confluence data source connector is in preview release and is subject to change.", "title": "ConfluenceConfiguration" }, + "ManagedKnowledgeBaseConnectorConfiguration": { + "$ref": "#/definitions/AWS::Bedrock::DataSource.ManagedKnowledgeBaseConnectorConfiguration" + }, "S3Configuration": { "$ref": "#/definitions/AWS::Bedrock::DataSource.S3DataSourceConfiguration", "markdownDescription": "The configuration information to connect to Amazon S3 as your data source.", @@ -39362,6 +39684,21 @@ ], "type": "object" }, + "AWS::Bedrock::DataSource.DeletionProtectionConfiguration": { + "additionalProperties": false, + "properties": { + "DeletionProtectionStatus": { + "type": "string" + }, + "DeletionProtectionThreshold": { + "type": "number" + } + }, + "required": [ + "DeletionProtectionStatus" + ], + "type": "object" + }, "AWS::Bedrock::DataSource.EnrichmentStrategyConfiguration": { "additionalProperties": false, "properties": { @@ -39433,6 +39770,18 @@ ], "type": "object" }, + "AWS::Bedrock::DataSource.ImageExtractionConfiguration": { + "additionalProperties": false, + "properties": { + "ImageExtractionStatus": { + "type": "string" + } + }, + "required": [ + "ImageExtractionStatus" + ], + "type": "object" + }, "AWS::Bedrock::DataSource.IntermediateStorage": { "additionalProperties": false, "properties": { @@ -39447,6 +39796,36 @@ ], "type": "object" }, + "AWS::Bedrock::DataSource.ManagedKnowledgeBaseConnectorConfiguration": { + "additionalProperties": false, + "properties": { + "ConnectorParameters": { + "type": "object" + }, + "DeletionProtectionConfiguration": { + "$ref": "#/definitions/AWS::Bedrock::DataSource.DeletionProtectionConfiguration" + }, + "MediaExtractionConfiguration": { + "$ref": "#/definitions/AWS::Bedrock::DataSource.MediaExtractionConfiguration" + } + }, + "type": "object" + }, + "AWS::Bedrock::DataSource.MediaExtractionConfiguration": { + "additionalProperties": false, + "properties": { + "AudioExtractionConfiguration": { + "$ref": "#/definitions/AWS::Bedrock::DataSource.AudioExtractionConfiguration" + }, + "ImageExtractionConfiguration": { + "$ref": "#/definitions/AWS::Bedrock::DataSource.ImageExtractionConfiguration" + }, + "VideoExtractionConfiguration": { + "$ref": "#/definitions/AWS::Bedrock::DataSource.VideoExtractionConfiguration" + } + }, + "type": "object" + }, "AWS::Bedrock::DataSource.ParsingConfiguration": { "additionalProperties": false, "properties": { @@ -39847,6 +40226,18 @@ }, "type": "object" }, + "AWS::Bedrock::DataSource.VideoExtractionConfiguration": { + "additionalProperties": false, + "properties": { + "VideoExtractionStatus": { + "type": "string" + } + }, + "required": [ + "VideoExtractionStatus" + ], + "type": "object" + }, "AWS::Bedrock::DataSource.WebCrawlerConfiguration": { "additionalProperties": false, "properties": { @@ -43247,6 +43638,9 @@ "markdownDescription": "Settings for an Amazon Kendra knowledge base.", "title": "KendraKnowledgeBaseConfiguration" }, + "ManagedKnowledgeBaseConfiguration": { + "$ref": "#/definitions/AWS::Bedrock::KnowledgeBase.ManagedKnowledgeBaseConfiguration" + }, "SqlKnowledgeBaseConfiguration": { "$ref": "#/definitions/AWS::Bedrock::KnowledgeBase.SqlKnowledgeBaseConfiguration", "markdownDescription": "Specifies configurations for a knowledge base connected to an SQL database.", @@ -43268,6 +43662,33 @@ ], "type": "object" }, + "AWS::Bedrock::KnowledgeBase.ManagedKnowledgeBaseConfiguration": { + "additionalProperties": false, + "properties": { + "EmbeddingModelArn": { + "type": "string" + }, + "EmbeddingModelConfiguration": { + "$ref": "#/definitions/AWS::Bedrock::KnowledgeBase.EmbeddingModelConfiguration" + }, + "EmbeddingModelType": { + "type": "string" + }, + "ServerSideEncryptionConfiguration": { + "$ref": "#/definitions/AWS::Bedrock::KnowledgeBase.ManagedKnowledgeBaseServerSideEncryptionConfiguration" + } + }, + "type": "object" + }, + "AWS::Bedrock::KnowledgeBase.ManagedKnowledgeBaseServerSideEncryptionConfiguration": { + "additionalProperties": false, + "properties": { + "KmsKeyArn": { + "type": "string" + } + }, + "type": "object" + }, "AWS::Bedrock::KnowledgeBase.MongoDbAtlasConfiguration": { "additionalProperties": false, "properties": { @@ -44096,6 +44517,75 @@ ], "type": "object" }, + "AWS::Bedrock::KnowledgeBasePolicy": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "KnowledgeBaseId": { + "type": "string" + }, + "PolicyDocument": { + "type": "object" + } + }, + "required": [ + "KnowledgeBaseId", + "PolicyDocument" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Bedrock::KnowledgeBasePolicy" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, "AWS::Bedrock::Prompt": { "additionalProperties": false, "properties": { @@ -45320,63 +45810,6 @@ ], "type": "object" }, - "AWS::BedrockAgentCore::Browser": { - "additionalProperties": false, - "properties": { - "Condition": { - "type": "string" - }, - "DeletionPolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], - "type": "string" - }, - "DependsOn": { - "anyOf": [ - { - "pattern": "^[a-zA-Z0-9]+$", - "type": "string" - }, - { - "items": { - "pattern": "^[a-zA-Z0-9]+$", - "type": "string" - }, - "type": "array" - } - ] - }, - "Metadata": { - "type": "object" - }, - "Properties": { - "additionalProperties": false, - "properties": {}, - "type": "object" - }, - "Type": { - "enum": [ - "AWS::BedrockAgentCore::Browser" - ], - "type": "string" - }, - "UpdateReplacePolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], - "type": "string" - } - }, - "required": [ - "Type" - ], - "type": "object" - }, "AWS::BedrockAgentCore::BrowserCustom": { "additionalProperties": false, "properties": { @@ -46630,6 +47063,9 @@ "markdownDescription": "The discovery URL for the authorizer configuration.", "title": "DiscoveryUrl", "type": "string" + }, + "PrivateEndpoint": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Gateway.PrivateEndpoint" } }, "required": [ @@ -46767,6 +47203,62 @@ }, "type": "object" }, + "AWS::BedrockAgentCore::Gateway.ManagedVpcResource": { + "additionalProperties": false, + "properties": { + "EndpointIpAddressType": { + "type": "string" + }, + "RoutingDomain": { + "type": "string" + }, + "SecurityGroupIds": { + "items": { + "type": "string" + }, + "type": "array" + }, + "SubnetIds": { + "items": { + "type": "string" + }, + "type": "array" + }, + "VpcIdentifier": { + "type": "string" + } + }, + "required": [ + "EndpointIpAddressType", + "SubnetIds", + "VpcIdentifier" + ], + "type": "object" + }, + "AWS::BedrockAgentCore::Gateway.PrivateEndpoint": { + "additionalProperties": false, + "properties": { + "ManagedVpcResource": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Gateway.ManagedVpcResource" + }, + "SelfManagedLatticeResource": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Gateway.SelfManagedLatticeResource" + } + }, + "type": "object" + }, + "AWS::BedrockAgentCore::Gateway.SelfManagedLatticeResource": { + "additionalProperties": false, + "properties": { + "ResourceConfigurationIdentifier": { + "type": "string" + } + }, + "required": [ + "ResourceConfigurationIdentifier" + ], + "type": "object" + }, "AWS::BedrockAgentCore::Gateway.SessionConfiguration": { "additionalProperties": false, "properties": { @@ -47192,6 +47684,84 @@ ], "type": "object" }, + "AWS::BedrockAgentCore::GatewayTarget.InferenceConnectorSource": { + "additionalProperties": false, + "properties": { + "ConnectorId": { + "type": "string" + } + }, + "required": [ + "ConnectorId" + ], + "type": "object" + }, + "AWS::BedrockAgentCore::GatewayTarget.InferenceConnectorTargetConfiguration": { + "additionalProperties": false, + "properties": { + "Source": { + "$ref": "#/definitions/AWS::BedrockAgentCore::GatewayTarget.InferenceConnectorSource" + } + }, + "required": [ + "Source" + ], + "type": "object" + }, + "AWS::BedrockAgentCore::GatewayTarget.InferenceOperationConfiguration": { + "additionalProperties": false, + "properties": { + "Models": { + "items": { + "$ref": "#/definitions/AWS::BedrockAgentCore::GatewayTarget.ModelEntry" + }, + "type": "array" + }, + "Path": { + "type": "string" + }, + "ProviderPath": { + "type": "string" + } + }, + "required": [ + "Path" + ], + "type": "object" + }, + "AWS::BedrockAgentCore::GatewayTarget.InferenceProviderTargetConfiguration": { + "additionalProperties": false, + "properties": { + "Endpoint": { + "type": "string" + }, + "ModelMapping": { + "$ref": "#/definitions/AWS::BedrockAgentCore::GatewayTarget.ModelMapping" + }, + "Operations": { + "items": { + "$ref": "#/definitions/AWS::BedrockAgentCore::GatewayTarget.InferenceOperationConfiguration" + }, + "type": "array" + } + }, + "required": [ + "Endpoint" + ], + "type": "object" + }, + "AWS::BedrockAgentCore::GatewayTarget.InferenceTargetConfiguration": { + "additionalProperties": false, + "properties": { + "Connector": { + "$ref": "#/definitions/AWS::BedrockAgentCore::GatewayTarget.InferenceConnectorTargetConfiguration" + }, + "Provider": { + "$ref": "#/definitions/AWS::BedrockAgentCore::GatewayTarget.InferenceProviderTargetConfiguration" + } + }, + "type": "object" + }, "AWS::BedrockAgentCore::GatewayTarget.ManagedResourceDetails": { "additionalProperties": false, "properties": { @@ -47356,6 +47926,27 @@ }, "type": "object" }, + "AWS::BedrockAgentCore::GatewayTarget.ModelEntry": { + "additionalProperties": false, + "properties": { + "Model": { + "type": "string" + } + }, + "required": [ + "Model" + ], + "type": "object" + }, + "AWS::BedrockAgentCore::GatewayTarget.ModelMapping": { + "additionalProperties": false, + "properties": { + "ProviderPrefix": { + "$ref": "#/definitions/AWS::BedrockAgentCore::GatewayTarget.ProviderPrefix" + } + }, + "type": "object" + }, "AWS::BedrockAgentCore::GatewayTarget.OAuth2AuthorizationData": { "additionalProperties": false, "properties": { @@ -47449,6 +48040,18 @@ }, "type": "object" }, + "AWS::BedrockAgentCore::GatewayTarget.ProviderPrefix": { + "additionalProperties": false, + "properties": { + "Separator": { + "type": "string" + }, + "Strip": { + "type": "boolean" + } + }, + "type": "object" + }, "AWS::BedrockAgentCore::GatewayTarget.RuntimeTargetConfiguration": { "additionalProperties": false, "properties": { @@ -47559,6 +48162,9 @@ "Http": { "$ref": "#/definitions/AWS::BedrockAgentCore::GatewayTarget.HttpTargetConfiguration" }, + "Inference": { + "$ref": "#/definitions/AWS::BedrockAgentCore::GatewayTarget.InferenceTargetConfiguration" + }, "Mcp": { "$ref": "#/definitions/AWS::BedrockAgentCore::GatewayTarget.McpTargetConfiguration", "markdownDescription": "The target configuration definition for MCP.", @@ -48149,11 +48755,38 @@ ], "type": "object" }, + "AWS::BedrockAgentCore::Harness.HarnessManagedMemoryConfiguration": { + "additionalProperties": false, + "properties": { + "Arn": { + "type": "string" + }, + "EncryptionKeyArn": { + "type": "string" + }, + "EventExpiryDuration": { + "type": "number" + }, + "Strategies": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, "AWS::BedrockAgentCore::Harness.HarnessMemoryConfiguration": { "additionalProperties": false, "properties": { "AgentCoreMemoryConfiguration": { "$ref": "#/definitions/AWS::BedrockAgentCore::Harness.HarnessAgentCoreMemoryConfiguration" + }, + "Disabled": { + "type": "object" + }, + "ManagedMemoryConfiguration": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Harness.HarnessManagedMemoryConfiguration" } }, "type": "object" @@ -48237,6 +48870,9 @@ "AWS::BedrockAgentCore::Harness.HarnessSkill": { "additionalProperties": false, "properties": { + "AwsSkills": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Harness.HarnessSkillAwsSkillsSource" + }, "Git": { "$ref": "#/definitions/AWS::BedrockAgentCore::Harness.HarnessSkillGitSource" }, @@ -48249,6 +48885,18 @@ }, "type": "object" }, + "AWS::BedrockAgentCore::Harness.HarnessSkillAwsSkillsSource": { + "additionalProperties": false, + "properties": { + "Paths": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, "AWS::BedrockAgentCore::Harness.HarnessSkillGitAuth": { "additionalProperties": false, "properties": { @@ -51322,6 +51970,24 @@ }, "type": "object" }, + "AWS::BedrockAgentCore::Runtime.AllowedWorkloadConfiguration": { + "additionalProperties": false, + "properties": { + "HostingEnvironments": { + "items": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Runtime.HostingEnvironment" + }, + "type": "array" + }, + "WorkloadIdentities": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, "AWS::BedrockAgentCore::Runtime.AuthorizerConfiguration": { "additionalProperties": false, "properties": { @@ -51463,6 +52129,9 @@ }, "type": "array" }, + "AllowedWorkloadConfiguration": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Runtime.AllowedWorkloadConfiguration" + }, "CustomClaims": { "items": { "$ref": "#/definitions/AWS::BedrockAgentCore::Runtime.CustomClaimValidationType" @@ -51473,6 +52142,15 @@ "markdownDescription": "The configuration authorization.", "title": "DiscoveryUrl", "type": "string" + }, + "PrivateEndpoint": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Runtime.PrivateEndpoint" + }, + "PrivateEndpointOverrides": { + "items": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Runtime.PrivateEndpointOverride" + }, + "type": "array" } }, "required": [ @@ -51511,6 +52189,18 @@ }, "type": "object" }, + "AWS::BedrockAgentCore::Runtime.HostingEnvironment": { + "additionalProperties": false, + "properties": { + "Arn": { + "type": "string" + } + }, + "required": [ + "Arn" + ], + "type": "object" + }, "AWS::BedrockAgentCore::Runtime.LifecycleConfiguration": { "additionalProperties": false, "properties": { @@ -51527,6 +52217,47 @@ }, "type": "object" }, + "AWS::BedrockAgentCore::Runtime.ManagedVpcResource": { + "additionalProperties": false, + "properties": { + "EndpointIpAddressType": { + "type": "string" + }, + "RoutingDomain": { + "type": "string" + }, + "SecurityGroupIds": { + "items": { + "type": "string" + }, + "type": "array" + }, + "SubnetIds": { + "items": { + "type": "string" + }, + "type": "array" + }, + "Tags": { + "additionalProperties": true, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "type": "object" + }, + "VpcIdentifier": { + "type": "string" + } + }, + "required": [ + "EndpointIpAddressType", + "SubnetIds", + "VpcIdentifier" + ], + "type": "object" + }, "AWS::BedrockAgentCore::Runtime.NetworkConfiguration": { "additionalProperties": false, "properties": { @@ -51546,6 +52277,34 @@ ], "type": "object" }, + "AWS::BedrockAgentCore::Runtime.PrivateEndpoint": { + "additionalProperties": false, + "properties": { + "ManagedVpcResource": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Runtime.ManagedVpcResource" + }, + "SelfManagedLatticeResource": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Runtime.SelfManagedLatticeResource" + } + }, + "type": "object" + }, + "AWS::BedrockAgentCore::Runtime.PrivateEndpointOverride": { + "additionalProperties": false, + "properties": { + "Domain": { + "type": "string" + }, + "PrivateEndpoint": { + "$ref": "#/definitions/AWS::BedrockAgentCore::Runtime.PrivateEndpoint" + } + }, + "required": [ + "Domain", + "PrivateEndpoint" + ], + "type": "object" + }, "AWS::BedrockAgentCore::Runtime.RequestHeaderConfiguration": { "additionalProperties": false, "properties": { @@ -51601,6 +52360,18 @@ ], "type": "object" }, + "AWS::BedrockAgentCore::Runtime.SelfManagedLatticeResource": { + "additionalProperties": false, + "properties": { + "ResourceConfigurationIdentifier": { + "type": "string" + } + }, + "required": [ + "ResourceConfigurationIdentifier" + ], + "type": "object" + }, "AWS::BedrockAgentCore::Runtime.SessionStorageConfiguration": { "additionalProperties": false, "properties": { @@ -55536,7 +56307,7 @@ }, "type": "object" }, - "AWS::CertificateManager::Certificate": { + "AWS::CertificateManager::AcmeDomainValidation": { "additionalProperties": false, "properties": { "Condition": { @@ -55571,69 +56342,32 @@ "Properties": { "additionalProperties": false, "properties": { - "CertificateAuthorityArn": { - "markdownDescription": "The Amazon Resource Name (ARN) of the private certificate authority (CA) that will be used to issue the certificate. If you do not provide an ARN and you are trying to request a private certificate, ACM will attempt to issue a public certificate. For more information about private CAs, see the [AWS Private Certificate Authority](https://docs.aws.amazon.com/privateca/latest/userguide/PcaWelcome.html) user guide. The ARN must have the following form:\n\n`arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012`", - "title": "CertificateAuthorityArn", - "type": "string" - }, - "CertificateExport": { - "markdownDescription": "You can opt out of allowing export of your certificate by specifying the `DISABLED` option. Allow export of your certificate by specifying the `ENABLED` option.\n\nIf you do not specify an export preference in a new CloudFormation template, it is the same as explicitly denying export of your certificate.", - "title": "CertificateExport", - "type": "string" - }, - "CertificateTransparencyLoggingPreference": { - "markdownDescription": "You can opt out of certificate transparency logging by specifying the `DISABLED` option. Opt in by specifying `ENABLED` . This setting doces not apply to private certificates.\n\nIf you do not specify a certificate transparency logging preference on a new CloudFormation template, or if you remove the logging preference from an existing template, this is the same as explicitly enabling the preference.\n\nChanging the certificate transparency logging preference will update the existing resource by calling `UpdateCertificateOptions` on the certificate. This action will not create a new resource.", - "title": "CertificateTransparencyLoggingPreference", + "AcmeEndpointArn": { "type": "string" }, "DomainName": { - "markdownDescription": "The fully qualified domain name (FQDN), such as www.example.com, with which you want to secure an ACM certificate. Use an asterisk (*) to create a wildcard certificate that protects several sites in the same domain. For example, `*.example.com` protects `www.example.com` , `site.example.com` , and `images.example.com.`", - "title": "DomainName", - "type": "string" - }, - "DomainValidationOptions": { - "items": { - "$ref": "#/definitions/AWS::CertificateManager::Certificate.DomainValidationOption" - }, - "markdownDescription": "Domain information that domain name registrars use to verify your identity.\n\n> In order for a AWS::CertificateManager::Certificate to be provisioned and validated in CloudFormation automatically, the `DomainName` property needs to be identical to one of the `DomainName` property supplied in DomainValidationOptions, if the ValidationMethod is **DNS**. Failing to keep them like-for-like will result in failure to create the domain validation records in Route53.", - "title": "DomainValidationOptions", - "type": "array" - }, - "KeyAlgorithm": { - "markdownDescription": "Specifies the algorithm of the public and private key pair that your certificate uses to encrypt data. RSA is the default key algorithm for ACM certificates. Elliptic Curve Digital Signature Algorithm (ECDSA) keys are smaller, offering security comparable to RSA keys but with greater computing efficiency. However, ECDSA is not supported by all network clients. Some AWS services may require RSA keys, or only support ECDSA keys of a particular size, while others allow the use of either RSA and ECDSA keys to ensure that compatibility is not broken. Check the requirements for the AWS service where you plan to deploy your certificate. For more information about selecting an algorithm, see [Key algorithms](https://docs.aws.amazon.com/acm/latest/userguide/acm-certificate-characteristics.html#algorithms-term) .\n\n> Algorithms supported for an ACM certificate request include:\n> \n> - `RSA_2048`\n> - `EC_prime256v1`\n> - `EC_secp384r1`\n> \n> Other listed algorithms are for imported certificates only. > When you request a private PKI certificate signed by a CA from AWS Private CA, the specified signing algorithm family (RSA or ECDSA) must match the algorithm family of the CA's secret key. \n\nDefault: RSA_2048", - "title": "KeyAlgorithm", "type": "string" }, - "SubjectAlternativeNames": { - "items": { - "type": "string" - }, - "markdownDescription": "Additional FQDNs to be included in the Subject Alternative Name extension of the ACM certificate. For example, you can add www.example.net to a certificate for which the `DomainName` field is www.example.com if users can reach your site by using either name.", - "title": "SubjectAlternativeNames", - "type": "array" + "PrevalidationOptions": { + "$ref": "#/definitions/AWS::CertificateManager::AcmeDomainValidation.PrevalidationOptions" }, "Tags": { "items": { - "$ref": "#/definitions/Tag" + "$ref": "#/definitions/AWS::CertificateManager::AcmeDomainValidation.TagsItems" }, - "markdownDescription": "Key-value pairs that can identify the certificate.", - "title": "Tags", "type": "array" - }, - "ValidationMethod": { - "markdownDescription": "The method you want to use to validate that you own or control the domain associated with a public certificate. You can [validate with DNS](https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-dns.html) or [validate with email](https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-email.html) . We recommend that you use DNS validation.\n\nIf not specified, this property defaults to email validation.", - "title": "ValidationMethod", - "type": "string" } }, "required": [ - "DomainName" + "AcmeEndpointArn", + "DomainName", + "PrevalidationOptions" ], "type": "object" }, "Type": { "enum": [ - "AWS::CertificateManager::Certificate" + "AWS::CertificateManager::AcmeDomainValidation" ], "type": "string" }, @@ -55652,31 +56386,433 @@ ], "type": "object" }, - "AWS::CertificateManager::Certificate.DomainValidationOption": { + "AWS::CertificateManager::AcmeDomainValidation.DnsPrevalidationOptions": { "additionalProperties": false, "properties": { - "DomainName": { - "markdownDescription": "A fully qualified domain name (FQDN) in the certificate request.", - "title": "DomainName", - "type": "string" + "DomainScope": { + "$ref": "#/definitions/AWS::CertificateManager::AcmeDomainValidation.DomainScope" }, "HostedZoneId": { - "markdownDescription": "The `HostedZoneId` option, which is available if you are using Route 53 as your domain registrar, causes ACM to add your CNAME to the domain record. Your list of `DomainValidationOptions` must contain one and only one of the domain-validation options, and the `HostedZoneId` can be used only when `DNS` is specified as your validation method.\n\nUse the Route 53 `ListHostedZones` API to discover IDs for available hosted zones.\n\nThis option is required for publicly trusted certificates.\n\n> The `ListHostedZones` API returns IDs in the format \"/hostedzone/Z111111QQQQQQQ\", but CloudFormation requires the IDs to be in the format \"Z111111QQQQQQQ\". \n\nWhen you change your `DomainValidationOptions` , a new resource is created.", - "title": "HostedZoneId", + "type": "string" + } + }, + "type": "object" + }, + "AWS::CertificateManager::AcmeDomainValidation.DomainScope": { + "additionalProperties": false, + "properties": { + "ExactDomain": { "type": "string" }, - "ValidationDomain": { - "markdownDescription": "The domain name to which you want ACM to send validation emails. This domain name is the suffix of the email addresses that you want ACM to use. This must be the same as the `DomainName` value or a superdomain of the `DomainName` value. For example, if you request a certificate for `testing.example.com` , you can specify `example.com` as this value. In that case, ACM sends domain validation emails to the following five addresses:\n\n- admin@example.com\n- administrator@example.com\n- hostmaster@example.com\n- postmaster@example.com\n- webmaster@example.com", - "title": "ValidationDomain", + "Subdomains": { + "type": "string" + }, + "Wildcards": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::CertificateManager::AcmeDomainValidation.PrevalidationOptions": { + "additionalProperties": false, + "properties": { + "DnsPrevalidation": { + "$ref": "#/definitions/AWS::CertificateManager::AcmeDomainValidation.DnsPrevalidationOptions" + } + }, + "required": [ + "DnsPrevalidation" + ], + "type": "object" + }, + "AWS::CertificateManager::AcmeDomainValidation.TagsItems": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { "type": "string" } }, "required": [ - "DomainName" + "Key", + "Value" ], "type": "object" }, - "AWS::Chatbot::CustomAction": { + "AWS::CertificateManager::AcmeEndpoint": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "AuthorizationBehavior": { + "type": "string" + }, + "CertificateAuthority": { + "$ref": "#/definitions/AWS::CertificateManager::AcmeEndpoint.CertificateAuthority" + }, + "CertificateTags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + }, + "Contact": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/AWS::CertificateManager::AcmeEndpoint.TagsItems" + }, + "type": "array" + } + }, + "required": [ + "AuthorizationBehavior", + "CertificateAuthority" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::CertificateManager::AcmeEndpoint" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::CertificateManager::AcmeEndpoint.CertificateAuthority": { + "additionalProperties": false, + "properties": { + "PublicCertificateAuthority": { + "$ref": "#/definitions/AWS::CertificateManager::AcmeEndpoint.PublicCertificateAuthority" + } + }, + "required": [ + "PublicCertificateAuthority" + ], + "type": "object" + }, + "AWS::CertificateManager::AcmeEndpoint.PublicCertificateAuthority": { + "additionalProperties": false, + "properties": { + "AllowedKeyAlgorithms": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, + "AWS::CertificateManager::AcmeEndpoint.TagsItems": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, + "AWS::CertificateManager::AcmeExternalAccountBinding": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "AcmeEndpointArn": { + "type": "string" + }, + "Expiration": { + "$ref": "#/definitions/AWS::CertificateManager::AcmeExternalAccountBinding.Expiration" + }, + "RoleArn": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/AWS::CertificateManager::AcmeExternalAccountBinding.TagsItems" + }, + "type": "array" + } + }, + "required": [ + "AcmeEndpointArn", + "RoleArn" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::CertificateManager::AcmeExternalAccountBinding" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::CertificateManager::AcmeExternalAccountBinding.Expiration": { + "additionalProperties": false, + "properties": { + "Type": { + "type": "string" + }, + "Value": { + "type": "number" + } + }, + "required": [ + "Type", + "Value" + ], + "type": "object" + }, + "AWS::CertificateManager::AcmeExternalAccountBinding.TagsItems": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, + "AWS::CertificateManager::Certificate": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "CertificateAuthorityArn": { + "markdownDescription": "The Amazon Resource Name (ARN) of the private certificate authority (CA) that will be used to issue the certificate. If you do not provide an ARN and you are trying to request a private certificate, ACM will attempt to issue a public certificate. For more information about private CAs, see the [AWS Private Certificate Authority](https://docs.aws.amazon.com/privateca/latest/userguide/PcaWelcome.html) user guide. The ARN must have the following form:\n\n`arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012`", + "title": "CertificateAuthorityArn", + "type": "string" + }, + "CertificateExport": { + "markdownDescription": "You can opt out of allowing export of your certificate by specifying the `DISABLED` option. Allow export of your certificate by specifying the `ENABLED` option.\n\nIf you do not specify an export preference in a new CloudFormation template, it is the same as explicitly denying export of your certificate.", + "title": "CertificateExport", + "type": "string" + }, + "CertificateTransparencyLoggingPreference": { + "markdownDescription": "You can opt out of certificate transparency logging by specifying the `DISABLED` option. Opt in by specifying `ENABLED` . This setting doces not apply to private certificates.\n\nIf you do not specify a certificate transparency logging preference on a new CloudFormation template, or if you remove the logging preference from an existing template, this is the same as explicitly enabling the preference.\n\nChanging the certificate transparency logging preference will update the existing resource by calling `UpdateCertificateOptions` on the certificate. This action will not create a new resource.", + "title": "CertificateTransparencyLoggingPreference", + "type": "string" + }, + "DomainName": { + "markdownDescription": "The fully qualified domain name (FQDN), such as www.example.com, with which you want to secure an ACM certificate. Use an asterisk (*) to create a wildcard certificate that protects several sites in the same domain. For example, `*.example.com` protects `www.example.com` , `site.example.com` , and `images.example.com.`", + "title": "DomainName", + "type": "string" + }, + "DomainValidationOptions": { + "items": { + "$ref": "#/definitions/AWS::CertificateManager::Certificate.DomainValidationOption" + }, + "markdownDescription": "Domain information that domain name registrars use to verify your identity.\n\n> In order for a AWS::CertificateManager::Certificate to be provisioned and validated in CloudFormation automatically, the `DomainName` property needs to be identical to one of the `DomainName` property supplied in DomainValidationOptions, if the ValidationMethod is **DNS**. Failing to keep them like-for-like will result in failure to create the domain validation records in Route53.", + "title": "DomainValidationOptions", + "type": "array" + }, + "KeyAlgorithm": { + "markdownDescription": "Specifies the algorithm of the public and private key pair that your certificate uses to encrypt data. RSA is the default key algorithm for ACM certificates. Elliptic Curve Digital Signature Algorithm (ECDSA) keys are smaller, offering security comparable to RSA keys but with greater computing efficiency. However, ECDSA is not supported by all network clients. Some AWS services may require RSA keys, or only support ECDSA keys of a particular size, while others allow the use of either RSA and ECDSA keys to ensure that compatibility is not broken. Check the requirements for the AWS service where you plan to deploy your certificate. For more information about selecting an algorithm, see [Key algorithms](https://docs.aws.amazon.com/acm/latest/userguide/acm-certificate-characteristics.html#algorithms-term) .\n\n> Algorithms supported for an ACM certificate request include:\n> \n> - `RSA_2048`\n> - `EC_prime256v1`\n> - `EC_secp384r1`\n> \n> Other listed algorithms are for imported certificates only. > When you request a private PKI certificate signed by a CA from AWS Private CA, the specified signing algorithm family (RSA or ECDSA) must match the algorithm family of the CA's secret key. \n\nDefault: RSA_2048", + "title": "KeyAlgorithm", + "type": "string" + }, + "SubjectAlternativeNames": { + "items": { + "type": "string" + }, + "markdownDescription": "Additional FQDNs to be included in the Subject Alternative Name extension of the ACM certificate. For example, you can add www.example.net to a certificate for which the `DomainName` field is www.example.com if users can reach your site by using either name.", + "title": "SubjectAlternativeNames", + "type": "array" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "Key-value pairs that can identify the certificate.", + "title": "Tags", + "type": "array" + }, + "ValidationMethod": { + "markdownDescription": "The method you want to use to validate that you own or control the domain associated with a public certificate. You can [validate with DNS](https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-dns.html) or [validate with email](https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-email.html) . We recommend that you use DNS validation.\n\nIf not specified, this property defaults to email validation.", + "title": "ValidationMethod", + "type": "string" + } + }, + "required": [ + "DomainName" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::CertificateManager::Certificate" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::CertificateManager::Certificate.DomainValidationOption": { + "additionalProperties": false, + "properties": { + "DomainName": { + "markdownDescription": "A fully qualified domain name (FQDN) in the certificate request.", + "title": "DomainName", + "type": "string" + }, + "HostedZoneId": { + "markdownDescription": "The `HostedZoneId` option, which is available if you are using Route 53 as your domain registrar, causes ACM to add your CNAME to the domain record. Your list of `DomainValidationOptions` must contain one and only one of the domain-validation options, and the `HostedZoneId` can be used only when `DNS` is specified as your validation method.\n\nUse the Route 53 `ListHostedZones` API to discover IDs for available hosted zones.\n\nThis option is required for publicly trusted certificates.\n\n> The `ListHostedZones` API returns IDs in the format \"/hostedzone/Z111111QQQQQQQ\", but CloudFormation requires the IDs to be in the format \"Z111111QQQQQQQ\". \n\nWhen you change your `DomainValidationOptions` , a new resource is created.", + "title": "HostedZoneId", + "type": "string" + }, + "ValidationDomain": { + "markdownDescription": "The domain name to which you want ACM to send validation emails. This domain name is the suffix of the email addresses that you want ACM to use. This must be the same as the `DomainName` value or a superdomain of the `DomainName` value. For example, if you request a certificate for `testing.example.com` , you can specify `example.com` as this value. In that case, ACM sends domain validation emails to the following five addresses:\n\n- admin@example.com\n- administrator@example.com\n- hostmaster@example.com\n- postmaster@example.com\n- webmaster@example.com", + "title": "ValidationDomain", + "type": "string" + } + }, + "type": "object" + }, + "AWS::Chatbot::CustomAction": { "additionalProperties": false, "properties": { "Condition": { @@ -56317,6 +57453,106 @@ ], "type": "object" }, + "AWS::Chime::AppInstanceUser": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "AppInstanceArn": { + "type": "string" + }, + "AppInstanceUserId": { + "type": "string" + }, + "ExpirationSettings": { + "$ref": "#/definitions/AWS::Chime::AppInstanceUser.ExpirationSettings" + }, + "Metadata": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "AppInstanceArn", + "AppInstanceUserId" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Chime::AppInstanceUser" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Chime::AppInstanceUser.ExpirationSettings": { + "additionalProperties": false, + "properties": { + "ExpirationCriterion": { + "type": "string" + }, + "ExpirationDays": { + "type": "number" + } + }, + "required": [ + "ExpirationCriterion", + "ExpirationDays" + ], + "type": "object" + }, "AWS::CleanRooms::AnalysisTemplate": { "additionalProperties": false, "properties": { @@ -58164,6 +59400,224 @@ }, "type": "object" }, + "AWS::CleanRooms::IntermediateTable": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "AnalysisRules": { + "items": { + "$ref": "#/definitions/AWS::CleanRooms::IntermediateTable.IntermediateTableAnalysisRule" + }, + "type": "array" + }, + "Description": { + "type": "string" + }, + "KmsKeyArn": { + "type": "string" + }, + "MembershipIdentifier": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "PopulationAnalysisConfiguration": { + "$ref": "#/definitions/AWS::CleanRooms::IntermediateTable.PopulationAnalysisConfiguration" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "MembershipIdentifier", + "Name", + "PopulationAnalysisConfiguration" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::CleanRooms::IntermediateTable" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::CleanRooms::IntermediateTable.DifferentialPrivacy": { + "additionalProperties": false, + "properties": { + "Columns": { + "items": { + "$ref": "#/definitions/AWS::CleanRooms::IntermediateTable.DifferentialPrivacyColumn" + }, + "type": "array" + } + }, + "required": [ + "Columns" + ], + "type": "object" + }, + "AWS::CleanRooms::IntermediateTable.DifferentialPrivacyColumn": { + "additionalProperties": false, + "properties": { + "Name": { + "type": "string" + } + }, + "required": [ + "Name" + ], + "type": "object" + }, + "AWS::CleanRooms::IntermediateTable.IntermediateTableAnalysisRule": { + "additionalProperties": false, + "properties": { + "Policy": { + "$ref": "#/definitions/AWS::CleanRooms::IntermediateTable.IntermediateTableAnalysisRulePolicy" + }, + "Type": { + "type": "string" + } + }, + "required": [ + "Policy", + "Type" + ], + "type": "object" + }, + "AWS::CleanRooms::IntermediateTable.IntermediateTableAnalysisRuleCustom": { + "additionalProperties": false, + "properties": { + "AdditionalAnalyses": { + "type": "string" + }, + "AllowedAnalyses": { + "items": { + "type": "string" + }, + "type": "array" + }, + "AllowedAnalysisProviders": { + "items": { + "type": "string" + }, + "type": "array" + }, + "AllowedResultReceivers": { + "items": { + "type": "string" + }, + "type": "array" + }, + "DifferentialPrivacy": { + "$ref": "#/definitions/AWS::CleanRooms::IntermediateTable.DifferentialPrivacy" + }, + "DisallowedOutputColumns": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "AllowedAnalyses" + ], + "type": "object" + }, + "AWS::CleanRooms::IntermediateTable.IntermediateTableAnalysisRulePolicy": { + "additionalProperties": false, + "properties": { + "V1": { + "$ref": "#/definitions/AWS::CleanRooms::IntermediateTable.IntermediateTableAnalysisRulePolicyV1" + } + }, + "required": [ + "V1" + ], + "type": "object" + }, + "AWS::CleanRooms::IntermediateTable.IntermediateTableAnalysisRulePolicyV1": { + "additionalProperties": false, + "properties": { + "Custom": { + "$ref": "#/definitions/AWS::CleanRooms::IntermediateTable.IntermediateTableAnalysisRuleCustom" + } + }, + "required": [ + "Custom" + ], + "type": "object" + }, + "AWS::CleanRooms::IntermediateTable.PopulationAnalysisConfiguration": { + "additionalProperties": false, + "properties": { + "SqlParameters": { + "$ref": "#/definitions/AWS::CleanRooms::IntermediateTable.PopulationAnalysisSqlParameters" + } + }, + "type": "object" + }, + "AWS::CleanRooms::IntermediateTable.PopulationAnalysisSqlParameters": { + "additionalProperties": false, + "properties": { + "AnalysisTemplateArn": { + "type": "string" + }, + "QueryString": { + "type": "string" + } + }, + "type": "object" + }, "AWS::CleanRooms::Membership": { "additionalProperties": false, "properties": { @@ -59483,6 +60937,104 @@ ], "type": "object" }, + "AWS::CloudFormation::GeneratedTemplate": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "GeneratedTemplateName": { + "type": "string" + }, + "TemplateConfiguration": { + "$ref": "#/definitions/AWS::CloudFormation::GeneratedTemplate.TemplateConfiguration" + } + }, + "required": [ + "GeneratedTemplateName" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::CloudFormation::GeneratedTemplate" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::CloudFormation::GeneratedTemplate.TemplateConfiguration": { + "additionalProperties": false, + "properties": { + "DeletionPolicy": { + "type": "string" + }, + "UpdateReplacePolicy": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::CloudFormation::GeneratedTemplate.TemplateProgress": { + "additionalProperties": false, + "properties": { + "ResourcesFailed": { + "type": "number" + }, + "ResourcesPending": { + "type": "number" + }, + "ResourcesProcessing": { + "type": "number" + }, + "ResourcesSucceeded": { + "type": "number" + } + }, + "type": "object" + }, "AWS::CloudFormation::GuardHook": { "additionalProperties": false, "properties": { @@ -60045,6 +61597,9 @@ "title": "Alias", "type": "string" }, + "AutoUpdate": { + "type": "boolean" + }, "ExecutionRole": { "markdownDescription": "The IAM role that the Hook assumes to invoke your Lambda function.", "title": "ExecutionRole", @@ -60065,6 +61620,9 @@ "title": "LambdaFunction", "type": "string" }, + "LoggingConfig": { + "$ref": "#/definitions/AWS::CloudFormation::LambdaHook.LoggingConfig" + }, "StackFilters": { "$ref": "#/definitions/AWS::CloudFormation::LambdaHook.StackFilters", "markdownDescription": "Specifies the stack level filters for the Hook.\n\nExample stack level filter in JSON:\n\n`\"StackFilters\": {\"FilteringCriteria\": \"ALL\", \"StackNames\": {\"Exclude\": [ \"stack-1\", \"stack-2\"]}}` \n\nExample stack level filter in YAML:\n\n`StackFilters: FilteringCriteria: ALL StackNames: Exclude: - stack-1 - stack-2`", @@ -60135,6 +61693,22 @@ ], "type": "object" }, + "AWS::CloudFormation::LambdaHook.LoggingConfig": { + "additionalProperties": false, + "properties": { + "LogGroupName": { + "type": "string" + }, + "LogRoleArn": { + "type": "string" + } + }, + "required": [ + "LogGroupName", + "LogRoleArn" + ], + "type": "object" + }, "AWS::CloudFormation::LambdaHook.StackFilters": { "additionalProperties": false, "properties": { @@ -65779,6 +67353,9 @@ "title": "HTTPSPort", "type": "number" }, + "IpAddressType": { + "type": "string" + }, "Name": { "markdownDescription": "The name of the CloudFront VPC origin endpoint configuration.", "title": "Name", @@ -66847,6 +68424,9 @@ "title": "EvaluationPeriods", "type": "number" }, + "EvaluationWindow": { + "$ref": "#/definitions/AWS::CloudWatch::Alarm.EvaluationWindow" + }, "ExtendedStatistic": { "markdownDescription": "The percentile statistic for the metric associated with the alarm. Specify a value between p0.0 and p100.\n\nFor an alarm based on a metric, you must specify either `Statistic` or `ExtendedStatistic` but not both.\n\nFor an alarm based on a math expression, you can't specify `ExtendedStatistic` . Instead, you use `Metrics` .", "title": "ExtendedStatistic", @@ -66991,6 +68571,18 @@ }, "type": "object" }, + "AWS::CloudWatch::Alarm.EvaluationWindow": { + "additionalProperties": false, + "properties": { + "SlidingWindow": { + "type": "object" + }, + "WallClockWindow": { + "$ref": "#/definitions/AWS::CloudWatch::Alarm.WallClockWindow" + } + }, + "type": "object" + }, "AWS::CloudWatch::Alarm.Metric": { "additionalProperties": false, "properties": { @@ -67090,6 +68682,15 @@ ], "type": "object" }, + "AWS::CloudWatch::Alarm.WallClockWindow": { + "additionalProperties": false, + "properties": { + "Timezone": { + "type": "string" + } + }, + "type": "object" + }, "AWS::CloudWatch::AlarmMuteRule": { "additionalProperties": false, "properties": { @@ -67812,9 +69413,12 @@ "type": "string" }, "Tags": { - "$ref": "#/definitions/AWS::CloudWatch::InsightRule.Tags", + "items": { + "$ref": "#/definitions/Tag" + }, "markdownDescription": "A list of key-value pairs to associate with the Contributor Insights rule. You can associate as many as 50 tags with a rule.\n\nTags can help you organize and categorize your resources. For more information, see [Tagging Your Amazon CloudWatch Resources](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Tagging.html) .\n\nTo be able to associate tags with a rule, you must have the `cloudwatch:TagResource` permission in addition to the `cloudwatch:PutInsightRule` permission.", - "title": "Tags" + "title": "Tags", + "type": "array" } }, "required": [ @@ -67845,11 +69449,6 @@ ], "type": "object" }, - "AWS::CloudWatch::InsightRule.Tags": { - "additionalProperties": false, - "properties": {}, - "type": "object" - }, "AWS::CloudWatch::LogAlarm": { "additionalProperties": false, "properties": { @@ -67987,7 +69586,8 @@ } }, "required": [ - "ScheduleExpression" + "ScheduleExpression", + "StartTimeOffset" ], "type": "object" }, @@ -68011,11 +69611,16 @@ }, "ScheduledQueryRoleARN": { "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" } }, "required": [ "AggregationExpression", - "LogGroupIdentifiers", "QueryString", "ScheduleConfiguration", "ScheduledQueryRoleARN" @@ -69246,6 +70851,9 @@ "Fleet": { "$ref": "#/definitions/AWS::CodeBuild::Project.ProjectFleet" }, + "HostKernel": { + "type": "string" + }, "Image": { "markdownDescription": "The image tag or image digest that identifies the Docker image to use for this build project. Use the following formats:\n\n- For an image tag: `/:` . For example, in the Docker repository that CodeBuild uses to manage its Docker images, this would be `aws/codebuild/standard:4.0` .\n- For an image digest: `/@` . For example, to specify an image with the digest \"sha256:cbbf2f9a99b47fc460d422812b6a5adff7dfee951d8fa2e4a98caa0382cfbdbf,\" use `/@sha256:cbbf2f9a99b47fc460d422812b6a5adff7dfee951d8fa2e4a98caa0382cfbdbf` .\n\nFor more information, see [Docker images provided by CodeBuild](https://docs.aws.amazon.com//codebuild/latest/userguide/build-env-ref-available.html) in the *AWS CodeBuild user guide* .", "title": "Image", @@ -74043,6 +75651,12 @@ "title": "EnabledMfas", "type": "array" }, + "IssuerConfiguration": { + "$ref": "#/definitions/AWS::Cognito::UserPool.IssuerConfiguration" + }, + "KeyConfiguration": { + "$ref": "#/definitions/AWS::Cognito::UserPool.KeyConfiguration" + }, "LambdaConfig": { "$ref": "#/definitions/AWS::Cognito::UserPool.LambdaConfig", "markdownDescription": "A collection of user pool Lambda triggers. Amazon Cognito invokes triggers at several possible stages of authentication operations. Triggers can modify the outcome of the operations that invoked them.", @@ -74291,6 +75905,36 @@ }, "type": "object" }, + "AWS::Cognito::UserPool.EumsSmsConfiguration": { + "additionalProperties": false, + "properties": { + "CallerArn": { + "type": "string" + }, + "ConfigurationSetName": { + "type": "string" + }, + "ExternalId": { + "type": "string" + }, + "InEntityId": { + "type": "string" + }, + "InTemplateId": { + "type": "string" + }, + "OriginationIdentity": { + "type": "string" + }, + "Region": { + "type": "string" + } + }, + "required": [ + "CallerArn" + ], + "type": "object" + }, "AWS::Cognito::UserPool.InboundFederation": { "additionalProperties": false, "properties": { @@ -74324,6 +75968,27 @@ }, "type": "object" }, + "AWS::Cognito::UserPool.IssuerConfiguration": { + "additionalProperties": false, + "properties": { + "Type": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::Cognito::UserPool.KeyConfiguration": { + "additionalProperties": false, + "properties": { + "KeyType": { + "type": "string" + }, + "KmsKeyArn": { + "type": "string" + } + }, + "type": "object" + }, "AWS::Cognito::UserPool.LambdaConfig": { "additionalProperties": false, "properties": { @@ -74566,6 +76231,9 @@ "AWS::Cognito::UserPool.SmsConfiguration": { "additionalProperties": false, "properties": { + "EumsSms": { + "$ref": "#/definitions/AWS::Cognito::UserPool.EumsSmsConfiguration" + }, "ExternalId": { "markdownDescription": "The external ID provides additional security for your IAM role. You can use an `ExternalId` with the IAM role that you use with Amazon SNS to send SMS messages for your user pool. If you provide an `ExternalId` , your Amazon Cognito user pool includes it in the request to assume your IAM role. You can configure the role trust policy to require that Amazon Cognito, and any principal, provide the `ExternalID` . If you use the Amazon Cognito Management Console to create a role for SMS multi-factor authentication (MFA), Amazon Cognito creates a role with the required permissions and a trust policy that demonstrates use of the `ExternalId` .\n\nFor more information about the `ExternalId` of a role, see [How to use an external ID when granting access to your AWS resources to a third party](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html) .", "title": "ExternalId", @@ -74999,6 +76667,9 @@ "title": "ManagedLoginVersion", "type": "number" }, + "Routing": { + "$ref": "#/definitions/AWS::Cognito::UserPoolDomain.RoutingType" + }, "UserPoolId": { "markdownDescription": "The ID of the user pool that is associated with the domain you're updating.", "title": "UserPoolId", @@ -75039,208 +76710,568 @@ "markdownDescription": "The Amazon Resource Name (ARN) of an Certificate Manager SSL certificate. You use this certificate for the subdomain of your custom domain.", "title": "CertificateArn", "type": "string" + }, + "SecurityPolicy": { + "type": "string" } }, "type": "object" }, - "AWS::Cognito::UserPoolGroup": { + "AWS::Cognito::UserPoolDomain.FailoverType": { "additionalProperties": false, "properties": { - "Condition": { + "PrimaryRoute53HealthCheckId": { "type": "string" }, - "DeletionPolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], - "type": "string" - }, - "DependsOn": { - "anyOf": [ - { - "pattern": "^[a-zA-Z0-9]+$", - "type": "string" - }, - { - "items": { - "pattern": "^[a-zA-Z0-9]+$", - "type": "string" - }, - "type": "array" - } - ] - }, - "Metadata": { - "type": "object" - }, - "Properties": { - "additionalProperties": false, - "properties": { - "Description": { - "markdownDescription": "A description of the group that you're creating.", - "title": "Description", - "type": "string" - }, - "GroupName": { - "markdownDescription": "A name for the group. This name must be unique in your user pool.", - "title": "GroupName", - "type": "string" - }, - "Precedence": { - "markdownDescription": "A non-negative integer value that specifies the precedence of this group relative to the other groups that a user can belong to in the user pool. Zero is the highest precedence value. Groups with lower `Precedence` values take precedence over groups with higher or null `Precedence` values. If a user belongs to two or more groups, it is the group with the lowest precedence value whose role ARN is given in the user's tokens for the `cognito:roles` and `cognito:preferred_role` claims.\n\nTwo groups can have the same `Precedence` value. If this happens, neither group takes precedence over the other. If two groups with the same `Precedence` have the same role ARN, that role is used in the `cognito:preferred_role` claim in tokens for users in each group. If the two groups have different role ARNs, the `cognito:preferred_role` claim isn't set in users' tokens.\n\nThe default `Precedence` value is null. The maximum `Precedence` value is `2^31-1` .", - "title": "Precedence", - "type": "number" - }, - "RoleArn": { - "markdownDescription": "The Amazon Resource Name (ARN) for the IAM role that you want to associate with the group. A group role primarily declares a preferred role for the credentials that you get from an identity pool. Amazon Cognito ID tokens have a `cognito:preferred_role` claim that presents the highest-precedence group that a user belongs to. Both ID and access tokens also contain a `cognito:groups` claim that list all the groups that a user is a member of.", - "title": "RoleArn", - "type": "string" - }, - "UserPoolId": { - "markdownDescription": "The ID of the user pool where you want to create a user group.", - "title": "UserPoolId", - "type": "string" - } - }, - "required": [ - "UserPoolId" - ], - "type": "object" - }, - "Type": { - "enum": [ - "AWS::Cognito::UserPoolGroup" - ], - "type": "string" - }, - "UpdateReplacePolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], + "SecondaryRegion": { "type": "string" } }, "required": [ - "Type", - "Properties" + "PrimaryRoute53HealthCheckId", + "SecondaryRegion" ], "type": "object" }, - "AWS::Cognito::UserPoolIdentityProvider": { + "AWS::Cognito::UserPoolDomain.RoutingType": { "additionalProperties": false, "properties": { - "Condition": { - "type": "string" - }, - "DeletionPolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], - "type": "string" - }, - "DependsOn": { - "anyOf": [ - { - "pattern": "^[a-zA-Z0-9]+$", - "type": "string" - }, - { - "items": { - "pattern": "^[a-zA-Z0-9]+$", - "type": "string" - }, - "type": "array" - } - ] - }, - "Metadata": { - "type": "object" - }, - "Properties": { - "additionalProperties": false, - "properties": { - "AttributeMapping": { - "additionalProperties": true, - "markdownDescription": "A mapping of IdP attributes to standard and custom user pool attributes. Specify a user pool attribute as the key of the key-value pair, and the IdP attribute claim name as the value.", - "patternProperties": { - "^[a-zA-Z0-9]+$": { - "type": "string" - } - }, - "title": "AttributeMapping", - "type": "object" - }, - "IdpIdentifiers": { - "items": { - "type": "string" - }, - "markdownDescription": "An array of IdP identifiers, for example `\"IdPIdentifiers\": [ \"MyIdP\", \"MyIdP2\" ]` . Identifiers are friendly names that you can pass in the `idp_identifier` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP. Identifiers in a domain format also enable the use of [email-address matching with SAML providers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managing-saml-idp-naming.html) .", - "title": "IdpIdentifiers", - "type": "array" - }, - "ProviderDetails": { - "additionalProperties": true, - "markdownDescription": "The scopes, URLs, and identifiers for your external identity provider. The following\nexamples describe the provider detail keys for each IdP type. These values and their\nschema are subject to change. Social IdP `authorize_scopes` values must match\nthe values listed here.\n\n- **OpenID Connect (OIDC)** - Amazon Cognito accepts the following elements when it can't discover endpoint URLs from `oidc_issuer` : `attributes_url` , `authorize_url` , `jwks_uri` , `token_url` .\n\nCreate or update request: `\"ProviderDetails\": { \"attributes_request_method\": \"GET\", \"attributes_url\": \"https://auth.example.com/userInfo\", \"authorize_scopes\": \"openid profile email\", \"authorize_url\": \"https://auth.example.com/authorize\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"jwks_uri\": \"https://auth.example.com/.well-known/jwks.json\", \"oidc_issuer\": \"https://auth.example.com\", \"token_url\": \"https://example.com/token\" }`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_request_method\": \"GET\", \"attributes_url\": \"https://auth.example.com/userInfo\", \"attributes_url_add_attributes\": \"false\", \"authorize_scopes\": \"openid profile email\", \"authorize_url\": \"https://auth.example.com/authorize\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"jwks_uri\": \"https://auth.example.com/.well-known/jwks.json\", \"oidc_issuer\": \"https://auth.example.com\", \"token_url\": \"https://example.com/token\" }`\n- **SAML** - Create or update request with Metadata URL: `\"ProviderDetails\": { \"IDPInit\": \"true\", \"IDPSignout\": \"true\", \"EncryptedResponses\" : \"true\", \"MetadataURL\": \"https://auth.example.com/sso/saml/metadata\", \"RequestSigningAlgorithm\": \"rsa-sha256\" }`\n\nCreate or update request with Metadata file: `\"ProviderDetails\": { \"IDPInit\": \"true\", \"IDPSignout\": \"true\", \"EncryptedResponses\" : \"true\", \"MetadataFile\": \"[metadata XML]\", \"RequestSigningAlgorithm\": \"rsa-sha256\" }`\n\nThe value of `MetadataFile` must be the plaintext metadata document with all quote (\") characters escaped by backslashes.\n\nDescribe response: `\"ProviderDetails\": { \"IDPInit\": \"true\", \"IDPSignout\": \"true\", \"EncryptedResponses\" : \"true\", \"ActiveEncryptionCertificate\": \"[certificate]\", \"MetadataURL\": \"https://auth.example.com/sso/saml/metadata\", \"RequestSigningAlgorithm\": \"rsa-sha256\", \"SLORedirectBindingURI\": \"https://auth.example.com/slo/saml\", \"SSORedirectBindingURI\": \"https://auth.example.com/sso/saml\" }`\n- **LoginWithAmazon** - Create or update request: `\"ProviderDetails\": { \"authorize_scopes\": \"profile postal_code\", \"client_id\": \"amzn1.application-oa2-client.1example23456789\", \"client_secret\": \"provider-app-client-secret\"`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_url\": \"https://api.amazon.com/user/profile\", \"attributes_url_add_attributes\": \"false\", \"authorize_scopes\": \"profile postal_code\", \"authorize_url\": \"https://www.amazon.com/ap/oa\", \"client_id\": \"amzn1.application-oa2-client.1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"token_request_method\": \"POST\", \"token_url\": \"https://api.amazon.com/auth/o2/token\" }`\n- **Google** - Create or update request: `\"ProviderDetails\": { \"authorize_scopes\": \"email profile openid\", \"client_id\": \"1example23456789.apps.googleusercontent.com\", \"client_secret\": \"provider-app-client-secret\" }`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_url\": \"https://people.googleapis.com/v1/people/me?personFields=\", \"attributes_url_add_attributes\": \"true\", \"authorize_scopes\": \"email profile openid\", \"authorize_url\": \"https://accounts.google.com/o/oauth2/v2/auth\", \"client_id\": \"1example23456789.apps.googleusercontent.com\", \"client_secret\": \"provider-app-client-secret\", \"oidc_issuer\": \"https://accounts.google.com\", \"token_request_method\": \"POST\", \"token_url\": \"https://www.googleapis.com/oauth2/v4/token\" }`\n- **SignInWithApple** - Create or update request: `\"ProviderDetails\": { \"authorize_scopes\": \"email name\", \"client_id\": \"com.example.cognito\", \"private_key\": \"1EXAMPLE\", \"key_id\": \"2EXAMPLE\", \"team_id\": \"3EXAMPLE\" }`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_url_add_attributes\": \"false\", \"authorize_scopes\": \"email name\", \"authorize_url\": \"https://appleid.apple.com/auth/authorize\", \"client_id\": \"com.example.cognito\", \"key_id\": \"1EXAMPLE\", \"oidc_issuer\": \"https://appleid.apple.com\", \"team_id\": \"2EXAMPLE\", \"token_request_method\": \"POST\", \"token_url\": \"https://appleid.apple.com/auth/token\" }`\n- **Facebook** - Create or update request: `\"ProviderDetails\": { \"api_version\": \"v17.0\", \"authorize_scopes\": \"public_profile, email\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\" }`\n\nDescribe response: `\"ProviderDetails\": { \"api_version\": \"v17.0\", \"attributes_url\": \"https://graph.facebook.com/v17.0/me?fields=\", \"attributes_url_add_attributes\": \"true\", \"authorize_scopes\": \"public_profile, email\", \"authorize_url\": \"https://www.facebook.com/v17.0/dialog/oauth\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"token_request_method\": \"GET\", \"token_url\": \"https://graph.facebook.com/v17.0/oauth/access_token\" }`", - "patternProperties": { - "^[a-zA-Z0-9]+$": { - "type": "string" - } - }, - "title": "ProviderDetails", - "type": "object" - }, - "ProviderName": { - "markdownDescription": "The name that you want to assign to the IdP. You can pass the identity provider name in the `identity_provider` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP.", - "title": "ProviderName", - "type": "string" - }, - "ProviderType": { - "markdownDescription": "The type of IdP that you want to add. Amazon Cognito supports OIDC, SAML 2.0, Login With Amazon, Sign In With Apple, Google, and Facebook IdPs.", - "title": "ProviderType", - "type": "string" - }, - "UserPoolId": { - "markdownDescription": "The Id of the user pool where you want to create an IdP.", - "title": "UserPoolId", - "type": "string" - } - }, - "required": [ - "ProviderDetails", - "ProviderName", - "ProviderType", - "UserPoolId" - ], - "type": "object" - }, - "Type": { - "enum": [ - "AWS::Cognito::UserPoolIdentityProvider" - ], - "type": "string" - }, - "UpdateReplacePolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], - "type": "string" + "Failover": { + "$ref": "#/definitions/AWS::Cognito::UserPoolDomain.FailoverType" } }, - "required": [ - "Type", - "Properties" - ], "type": "object" }, - "AWS::Cognito::UserPoolResourceServer": { + "AWS::Cognito::UserPoolGroup": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Description": { + "markdownDescription": "A description of the group that you're creating.", + "title": "Description", + "type": "string" + }, + "GroupName": { + "markdownDescription": "A name for the group. This name must be unique in your user pool.", + "title": "GroupName", + "type": "string" + }, + "Precedence": { + "markdownDescription": "A non-negative integer value that specifies the precedence of this group relative to the other groups that a user can belong to in the user pool. Zero is the highest precedence value. Groups with lower `Precedence` values take precedence over groups with higher or null `Precedence` values. If a user belongs to two or more groups, it is the group with the lowest precedence value whose role ARN is given in the user's tokens for the `cognito:roles` and `cognito:preferred_role` claims.\n\nTwo groups can have the same `Precedence` value. If this happens, neither group takes precedence over the other. If two groups with the same `Precedence` have the same role ARN, that role is used in the `cognito:preferred_role` claim in tokens for users in each group. If the two groups have different role ARNs, the `cognito:preferred_role` claim isn't set in users' tokens.\n\nThe default `Precedence` value is null. The maximum `Precedence` value is `2^31-1` .", + "title": "Precedence", + "type": "number" + }, + "RoleArn": { + "markdownDescription": "The Amazon Resource Name (ARN) for the IAM role that you want to associate with the group. A group role primarily declares a preferred role for the credentials that you get from an identity pool. Amazon Cognito ID tokens have a `cognito:preferred_role` claim that presents the highest-precedence group that a user belongs to. Both ID and access tokens also contain a `cognito:groups` claim that list all the groups that a user is a member of.", + "title": "RoleArn", + "type": "string" + }, + "UserPoolId": { + "markdownDescription": "The ID of the user pool where you want to create a user group.", + "title": "UserPoolId", + "type": "string" + } + }, + "required": [ + "UserPoolId" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Cognito::UserPoolGroup" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Cognito::UserPoolIdentityProvider": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "AttributeMapping": { + "additionalProperties": true, + "markdownDescription": "A mapping of IdP attributes to standard and custom user pool attributes. Specify a user pool attribute as the key of the key-value pair, and the IdP attribute claim name as the value.", + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "title": "AttributeMapping", + "type": "object" + }, + "IdpIdentifiers": { + "items": { + "type": "string" + }, + "markdownDescription": "An array of IdP identifiers, for example `\"IdPIdentifiers\": [ \"MyIdP\", \"MyIdP2\" ]` . Identifiers are friendly names that you can pass in the `idp_identifier` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP. Identifiers in a domain format also enable the use of [email-address matching with SAML providers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managing-saml-idp-naming.html) .", + "title": "IdpIdentifiers", + "type": "array" + }, + "ProviderDetails": { + "additionalProperties": true, + "markdownDescription": "The scopes, URLs, and identifiers for your external identity provider. The following\nexamples describe the provider detail keys for each IdP type. These values and their\nschema are subject to change. Social IdP `authorize_scopes` values must match\nthe values listed here.\n\n- **OpenID Connect (OIDC)** - Amazon Cognito accepts the following elements when it can't discover endpoint URLs from `oidc_issuer` : `attributes_url` , `authorize_url` , `jwks_uri` , `token_url` .\n\nCreate or update request: `\"ProviderDetails\": { \"attributes_request_method\": \"GET\", \"attributes_url\": \"https://auth.example.com/userInfo\", \"authorize_scopes\": \"openid profile email\", \"authorize_url\": \"https://auth.example.com/authorize\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"jwks_uri\": \"https://auth.example.com/.well-known/jwks.json\", \"oidc_issuer\": \"https://auth.example.com\", \"token_url\": \"https://example.com/token\" }`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_request_method\": \"GET\", \"attributes_url\": \"https://auth.example.com/userInfo\", \"attributes_url_add_attributes\": \"false\", \"authorize_scopes\": \"openid profile email\", \"authorize_url\": \"https://auth.example.com/authorize\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"jwks_uri\": \"https://auth.example.com/.well-known/jwks.json\", \"oidc_issuer\": \"https://auth.example.com\", \"token_url\": \"https://example.com/token\" }`\n- **SAML** - Create or update request with Metadata URL: `\"ProviderDetails\": { \"IDPInit\": \"true\", \"IDPSignout\": \"true\", \"EncryptedResponses\" : \"true\", \"MetadataURL\": \"https://auth.example.com/sso/saml/metadata\", \"RequestSigningAlgorithm\": \"rsa-sha256\" }`\n\nCreate or update request with Metadata file: `\"ProviderDetails\": { \"IDPInit\": \"true\", \"IDPSignout\": \"true\", \"EncryptedResponses\" : \"true\", \"MetadataFile\": \"[metadata XML]\", \"RequestSigningAlgorithm\": \"rsa-sha256\" }`\n\nThe value of `MetadataFile` must be the plaintext metadata document with all quote (\") characters escaped by backslashes.\n\nDescribe response: `\"ProviderDetails\": { \"IDPInit\": \"true\", \"IDPSignout\": \"true\", \"EncryptedResponses\" : \"true\", \"ActiveEncryptionCertificate\": \"[certificate]\", \"MetadataURL\": \"https://auth.example.com/sso/saml/metadata\", \"RequestSigningAlgorithm\": \"rsa-sha256\", \"SLORedirectBindingURI\": \"https://auth.example.com/slo/saml\", \"SSORedirectBindingURI\": \"https://auth.example.com/sso/saml\" }`\n- **LoginWithAmazon** - Create or update request: `\"ProviderDetails\": { \"authorize_scopes\": \"profile postal_code\", \"client_id\": \"amzn1.application-oa2-client.1example23456789\", \"client_secret\": \"provider-app-client-secret\"`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_url\": \"https://api.amazon.com/user/profile\", \"attributes_url_add_attributes\": \"false\", \"authorize_scopes\": \"profile postal_code\", \"authorize_url\": \"https://www.amazon.com/ap/oa\", \"client_id\": \"amzn1.application-oa2-client.1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"token_request_method\": \"POST\", \"token_url\": \"https://api.amazon.com/auth/o2/token\" }`\n- **Google** - Create or update request: `\"ProviderDetails\": { \"authorize_scopes\": \"email profile openid\", \"client_id\": \"1example23456789.apps.googleusercontent.com\", \"client_secret\": \"provider-app-client-secret\" }`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_url\": \"https://people.googleapis.com/v1/people/me?personFields=\", \"attributes_url_add_attributes\": \"true\", \"authorize_scopes\": \"email profile openid\", \"authorize_url\": \"https://accounts.google.com/o/oauth2/v2/auth\", \"client_id\": \"1example23456789.apps.googleusercontent.com\", \"client_secret\": \"provider-app-client-secret\", \"oidc_issuer\": \"https://accounts.google.com\", \"token_request_method\": \"POST\", \"token_url\": \"https://www.googleapis.com/oauth2/v4/token\" }`\n- **SignInWithApple** - Create or update request: `\"ProviderDetails\": { \"authorize_scopes\": \"email name\", \"client_id\": \"com.example.cognito\", \"private_key\": \"1EXAMPLE\", \"key_id\": \"2EXAMPLE\", \"team_id\": \"3EXAMPLE\" }`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_url_add_attributes\": \"false\", \"authorize_scopes\": \"email name\", \"authorize_url\": \"https://appleid.apple.com/auth/authorize\", \"client_id\": \"com.example.cognito\", \"key_id\": \"1EXAMPLE\", \"oidc_issuer\": \"https://appleid.apple.com\", \"team_id\": \"2EXAMPLE\", \"token_request_method\": \"POST\", \"token_url\": \"https://appleid.apple.com/auth/token\" }`\n- **Facebook** - Create or update request: `\"ProviderDetails\": { \"api_version\": \"v17.0\", \"authorize_scopes\": \"public_profile, email\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\" }`\n\nDescribe response: `\"ProviderDetails\": { \"api_version\": \"v17.0\", \"attributes_url\": \"https://graph.facebook.com/v17.0/me?fields=\", \"attributes_url_add_attributes\": \"true\", \"authorize_scopes\": \"public_profile, email\", \"authorize_url\": \"https://www.facebook.com/v17.0/dialog/oauth\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"token_request_method\": \"GET\", \"token_url\": \"https://graph.facebook.com/v17.0/oauth/access_token\" }`", + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "title": "ProviderDetails", + "type": "object" + }, + "ProviderName": { + "markdownDescription": "The name that you want to assign to the IdP. You can pass the identity provider name in the `identity_provider` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP.", + "title": "ProviderName", + "type": "string" + }, + "ProviderType": { + "markdownDescription": "The type of IdP that you want to add. Amazon Cognito supports OIDC, SAML 2.0, Login With Amazon, Sign In With Apple, Google, and Facebook IdPs.", + "title": "ProviderType", + "type": "string" + }, + "UserPoolId": { + "markdownDescription": "The Id of the user pool where you want to create an IdP.", + "title": "UserPoolId", + "type": "string" + } + }, + "required": [ + "ProviderDetails", + "ProviderName", + "ProviderType", + "UserPoolId" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Cognito::UserPoolIdentityProvider" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Cognito::UserPoolRegionalConfigurationAttachment": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "EmailConfiguration": { + "$ref": "#/definitions/AWS::Cognito::UserPoolRegionalConfigurationAttachment.EmailConfiguration" + }, + "LambdaConfig": { + "$ref": "#/definitions/AWS::Cognito::UserPoolRegionalConfigurationAttachment.LambdaConfig" + }, + "SmsConfiguration": { + "$ref": "#/definitions/AWS::Cognito::UserPoolRegionalConfigurationAttachment.SmsConfiguration" + }, + "Status": { + "type": "string" + }, + "UserPoolId": { + "type": "string" + }, + "UserPoolTags": { + "additionalProperties": true, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "type": "object" + } + }, + "required": [ + "UserPoolId" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Cognito::UserPoolRegionalConfigurationAttachment" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Cognito::UserPoolRegionalConfigurationAttachment.CustomEmailSender": { + "additionalProperties": false, + "properties": { + "LambdaArn": { + "type": "string" + }, + "LambdaVersion": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::Cognito::UserPoolRegionalConfigurationAttachment.CustomSMSSender": { + "additionalProperties": false, + "properties": { + "LambdaArn": { + "type": "string" + }, + "LambdaVersion": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::Cognito::UserPoolRegionalConfigurationAttachment.EmailConfiguration": { + "additionalProperties": false, + "properties": { + "ConfigurationSet": { + "type": "string" + }, + "EmailSendingAccount": { + "type": "string" + }, + "From": { + "type": "string" + }, + "ReplyToEmailAddress": { + "type": "string" + }, + "SourceArn": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::Cognito::UserPoolRegionalConfigurationAttachment.EumsSmsConfiguration": { + "additionalProperties": false, + "properties": { + "CallerArn": { + "type": "string" + }, + "ConfigurationSetName": { + "type": "string" + }, + "ExternalId": { + "type": "string" + }, + "InEntityId": { + "type": "string" + }, + "InTemplateId": { + "type": "string" + }, + "OriginationIdentity": { + "type": "string" + }, + "Region": { + "type": "string" + } + }, + "required": [ + "CallerArn" + ], + "type": "object" + }, + "AWS::Cognito::UserPoolRegionalConfigurationAttachment.InboundFederation": { + "additionalProperties": false, + "properties": { + "LambdaArn": { + "type": "string" + }, + "LambdaVersion": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::Cognito::UserPoolRegionalConfigurationAttachment.LambdaConfig": { + "additionalProperties": false, + "properties": { + "CreateAuthChallenge": { + "type": "string" + }, + "CustomEmailSender": { + "$ref": "#/definitions/AWS::Cognito::UserPoolRegionalConfigurationAttachment.CustomEmailSender" + }, + "CustomMessage": { + "type": "string" + }, + "CustomSMSSender": { + "$ref": "#/definitions/AWS::Cognito::UserPoolRegionalConfigurationAttachment.CustomSMSSender" + }, + "DefineAuthChallenge": { + "type": "string" + }, + "InboundFederation": { + "$ref": "#/definitions/AWS::Cognito::UserPoolRegionalConfigurationAttachment.InboundFederation" + }, + "KMSKeyID": { + "type": "string" + }, + "PostAuthentication": { + "type": "string" + }, + "PostConfirmation": { + "type": "string" + }, + "PreAuthentication": { + "type": "string" + }, + "PreSignUp": { + "type": "string" + }, + "PreTokenGeneration": { + "type": "string" + }, + "PreTokenGenerationConfig": { + "$ref": "#/definitions/AWS::Cognito::UserPoolRegionalConfigurationAttachment.PreTokenGenerationConfig" + }, + "UserMigration": { + "type": "string" + }, + "VerifyAuthChallengeResponse": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::Cognito::UserPoolRegionalConfigurationAttachment.PreTokenGenerationConfig": { + "additionalProperties": false, + "properties": { + "LambdaArn": { + "type": "string" + }, + "LambdaVersion": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::Cognito::UserPoolRegionalConfigurationAttachment.SmsConfiguration": { + "additionalProperties": false, + "properties": { + "EumsSms": { + "$ref": "#/definitions/AWS::Cognito::UserPoolRegionalConfigurationAttachment.EumsSmsConfiguration" + }, + "ExternalId": { + "type": "string" + }, + "SnsCallerArn": { + "type": "string" + }, + "SnsRegion": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::Cognito::UserPoolReplica": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "RegionName": { + "type": "string" + }, + "UserPoolId": { + "type": "string" + }, + "UserPoolTagsAtCreate": { + "additionalProperties": true, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "type": "object" + } + }, + "required": [ + "RegionName", + "UserPoolId" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Cognito::UserPoolReplica" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Cognito::UserPoolResourceServer": { "additionalProperties": false, "properties": { "Condition": { @@ -77392,6 +79423,12 @@ "title": "DeliveryS3KeyPrefix", "type": "string" }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + }, "TemplateBody": { "markdownDescription": "A string containing full conformance pack template body. Structure containing the template body with a minimum length of 1 byte and a maximum length of 51,200 bytes.\n\n> You can only use a YAML template with two resource types: config rule ( `AWS::Config::ConfigRule` ) and a remediation action ( `AWS::Config::RemediationConfiguration` ).", "title": "TemplateBody", @@ -77470,6 +79507,102 @@ }, "type": "object" }, + "AWS::Config::Connector": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "ConnectorConfiguration": { + "$ref": "#/definitions/AWS::Config::Connector.ConnectorConfiguration" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "ConnectorConfiguration" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Config::Connector" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Config::Connector.AzureConnectorConfiguration": { + "additionalProperties": false, + "properties": { + "ClientIdentifier": { + "type": "string" + }, + "TenantIdentifier": { + "type": "string" + } + }, + "required": [ + "ClientIdentifier", + "TenantIdentifier" + ], + "type": "object" + }, + "AWS::Config::Connector.ConnectorConfiguration": { + "additionalProperties": false, + "properties": { + "Azure": { + "$ref": "#/definitions/AWS::Config::Connector.AzureConnectorConfiguration" + } + }, + "type": "object" + }, "AWS::Config::DeliveryChannel": { "additionalProperties": false, "properties": { @@ -77916,6 +80049,12 @@ "title": "OrganizationConformancePackName", "type": "string" }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + }, "TemplateBody": { "markdownDescription": "A string containing full conformance pack template body. Structure containing the template body with a minimum length of 1 byte and a maximum length of 51,200 bytes.", "title": "TemplateBody", @@ -78098,31 +80237,6 @@ }, "type": "object" }, - "AWS::Config::RemediationConfiguration.RemediationParameterValue": { - "additionalProperties": false, - "properties": { - "ResourceValue": { - "$ref": "#/definitions/AWS::Config::RemediationConfiguration.ResourceValue", - "markdownDescription": "The value is dynamic and changes at run-time.", - "title": "ResourceValue" - }, - "StaticValue": { - "$ref": "#/definitions/AWS::Config::RemediationConfiguration.StaticValue", - "markdownDescription": "The value is static and does not change at run-time.", - "title": "StaticValue" - } - }, - "type": "object" - }, - "AWS::Config::RemediationConfiguration.ResourceValue": { - "additionalProperties": false, - "properties": { - "Value": { - "type": "string" - } - }, - "type": "object" - }, "AWS::Config::RemediationConfiguration.SsmControls": { "additionalProperties": false, "properties": { @@ -78139,18 +80253,6 @@ }, "type": "object" }, - "AWS::Config::RemediationConfiguration.StaticValue": { - "additionalProperties": false, - "properties": { - "Values": { - "items": { - "type": "string" - }, - "type": "array" - } - }, - "type": "object" - }, "AWS::Config::StoredQuery": { "additionalProperties": false, "properties": { @@ -78854,6 +80956,78 @@ ], "type": "object" }, + "AWS::Connect::DataLakeAssociation": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "DataSetId": { + "type": "string" + }, + "InstanceId": { + "type": "string" + }, + "TargetAccountId": { + "type": "string" + } + }, + "required": [ + "DataSetId", + "InstanceId" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Connect::DataLakeAssociation" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, "AWS::Connect::DataTable": { "additionalProperties": false, "properties": { @@ -78928,6 +81102,13 @@ "type": "string" } }, + "required": [ + "InstanceArn", + "Name", + "Status", + "TimeZone", + "ValueLockLevel" + ], "type": "object" }, "Type": { @@ -78946,7 +81127,8 @@ } }, "required": [ - "Type" + "Type", + "Properties" ], "type": "object" }, @@ -79032,6 +81214,12 @@ "type": "string" } }, + "required": [ + "DataTableArn", + "InstanceArn", + "Name", + "ValueType" + ], "type": "object" }, "Type": { @@ -79050,7 +81238,8 @@ } }, "required": [ - "Type" + "Type", + "Properties" ], "type": "object" }, @@ -79196,6 +81385,11 @@ "type": "string" } }, + "required": [ + "DataTableArn", + "DataTableRecord", + "InstanceArn" + ], "type": "object" }, "Type": { @@ -79214,7 +81408,8 @@ } }, "required": [ - "Type" + "Type", + "Properties" ], "type": "object" }, @@ -79725,11 +81920,23 @@ "AWS::Connect::EvaluationForm.EvaluationFormMultiSelectQuestionOption": { "additionalProperties": false, "properties": { + "AutomaticFail": { + "type": "boolean" + }, + "AutomaticFailConfiguration": { + "$ref": "#/definitions/AWS::Connect::EvaluationForm.AutomaticFailConfiguration" + }, + "PointsConfiguration": { + "$ref": "#/definitions/AWS::Connect::EvaluationForm.QuestionOptionPointsConfiguration" + }, "RefId": { "markdownDescription": "Reference identifier for this option.", "title": "RefId", "type": "string" }, + "Score": { + "type": "number" + }, "Text": { "markdownDescription": "Display text for this option.", "title": "Text", @@ -79808,6 +82015,9 @@ "title": "MinValue", "type": "number" }, + "PointsConfiguration": { + "$ref": "#/definitions/AWS::Connect::EvaluationForm.QuestionOptionPointsConfiguration" + }, "Score": { "markdownDescription": "The score assigned to answer values within the range option.\n\n*Minimum* : 0\n\n*Maximum* : 10", "title": "Score", @@ -79886,6 +82096,9 @@ "title": "RefId", "type": "string" }, + "ScoringConfiguration": { + "$ref": "#/definitions/AWS::Connect::EvaluationForm.EvaluationFormQuestionScoringConfiguration" + }, "Title": { "markdownDescription": "The title of the question.\n\n*Length Constraints* : Minimum length of 1. Maximum length of 350.", "title": "Title", @@ -79918,6 +82131,24 @@ ], "type": "object" }, + "AWS::Connect::EvaluationForm.EvaluationFormQuestionScoringConfiguration": { + "additionalProperties": false, + "properties": { + "IsExcludedFromScoring": { + "type": "boolean" + }, + "PointsConfiguration": { + "$ref": "#/definitions/AWS::Connect::EvaluationForm.QuestionPointsConfiguration" + }, + "ScoreThresholds": { + "items": { + "$ref": "#/definitions/AWS::Connect::EvaluationForm.EvaluationFormScoreThreshold" + }, + "type": "array" + } + }, + "type": "object" + }, "AWS::Connect::EvaluationForm.EvaluationFormQuestionTypeProperties": { "additionalProperties": false, "properties": { @@ -79944,6 +82175,24 @@ }, "type": "object" }, + "AWS::Connect::EvaluationForm.EvaluationFormScoreThreshold": { + "additionalProperties": false, + "properties": { + "MaxScorePercentage": { + "type": "number" + }, + "MinScorePercentage": { + "type": "number" + }, + "PerformanceCategory": { + "type": "string" + } + }, + "required": [ + "PerformanceCategory" + ], + "type": "object" + }, "AWS::Connect::EvaluationForm.EvaluationFormSection": { "additionalProperties": false, "properties": { @@ -79952,6 +82201,9 @@ "title": "Instructions", "type": "string" }, + "IsExcludedFromScoring": { + "type": "boolean" + }, "Items": { "items": { "$ref": "#/definitions/AWS::Connect::EvaluationForm.EvaluationFormItem" @@ -79965,6 +82217,12 @@ "title": "RefId", "type": "string" }, + "ScoreThresholds": { + "items": { + "$ref": "#/definitions/AWS::Connect::EvaluationForm.EvaluationFormScoreThreshold" + }, + "type": "array" + }, "Title": { "markdownDescription": "The title of the section.\n\n*Length Constraints* : Minimum length of 1. Maximum length of 128.", "title": "Title", @@ -80033,6 +82291,9 @@ "markdownDescription": "Whether automatic fail is configured on a single select question.", "title": "AutomaticFailConfiguration" }, + "PointsConfiguration": { + "$ref": "#/definitions/AWS::Connect::EvaluationForm.QuestionOptionPointsConfiguration" + }, "RefId": { "markdownDescription": "The identifier of the answer option. An identifier must be unique within the question.\n\n*Length Constraints* : Minimum length of 1. Maximum length of 40.", "title": "RefId", @@ -80204,6 +82465,36 @@ ], "type": "object" }, + "AWS::Connect::EvaluationForm.QuestionOptionPointsConfiguration": { + "additionalProperties": false, + "properties": { + "IsBonus": { + "type": "boolean" + }, + "PointValue": { + "type": "number" + } + }, + "required": [ + "PointValue" + ], + "type": "object" + }, + "AWS::Connect::EvaluationForm.QuestionPointsConfiguration": { + "additionalProperties": false, + "properties": { + "IsBonus": { + "type": "boolean" + }, + "MaxPointValue": { + "type": "number" + }, + "MinPointValue": { + "type": "number" + } + }, + "type": "object" + }, "AWS::Connect::EvaluationForm.ScoringStrategy": { "additionalProperties": false, "properties": { @@ -80212,6 +82503,12 @@ "title": "Mode", "type": "string" }, + "ScoreThresholds": { + "items": { + "$ref": "#/definitions/AWS::Connect::EvaluationForm.EvaluationFormScoreThreshold" + }, + "type": "array" + }, "Status": { "markdownDescription": "The scoring status of the evaluation form.\n\n*Allowed values* : `ENABLED` | `DISABLED`", "title": "Status", @@ -81742,6 +84039,18 @@ ], "type": "object" }, + "AWS::Connect::QuickConnect.FlowQuickConnectConfig": { + "additionalProperties": false, + "properties": { + "ContactFlowArn": { + "type": "string" + } + }, + "required": [ + "ContactFlowArn" + ], + "type": "object" + }, "AWS::Connect::QuickConnect.PhoneNumberQuickConnectConfig": { "additionalProperties": false, "properties": { @@ -81779,6 +84088,9 @@ "AWS::Connect::QuickConnect.QuickConnectConfig": { "additionalProperties": false, "properties": { + "FlowConfig": { + "$ref": "#/definitions/AWS::Connect::QuickConnect.FlowQuickConnectConfig" + }, "PhoneConfig": { "$ref": "#/definitions/AWS::Connect::QuickConnect.PhoneNumberQuickConnectConfig", "markdownDescription": "The phone configuration. This is required only if QuickConnectType is PHONE_NUMBER.", @@ -82163,6 +84475,12 @@ "title": "AssignContactCategoryActions", "type": "array" }, + "AssignSlaActions": { + "items": { + "$ref": "#/definitions/AWS::Connect::Rule.AssignSlaAction" + }, + "type": "array" + }, "CreateCaseActions": { "items": { "$ref": "#/definitions/AWS::Connect::Rule.CreateCaseAction" @@ -82222,6 +84540,51 @@ }, "type": "object" }, + "AWS::Connect::Rule.AssignSlaAction": { + "additionalProperties": false, + "properties": { + "CaseSlaConfiguration": { + "$ref": "#/definitions/AWS::Connect::Rule.CaseSlaConfiguration" + }, + "SlaAssignmentType": { + "type": "string" + } + }, + "required": [ + "CaseSlaConfiguration", + "SlaAssignmentType" + ], + "type": "object" + }, + "AWS::Connect::Rule.CaseSlaConfiguration": { + "additionalProperties": false, + "properties": { + "FieldId": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "TargetFieldValues": { + "items": { + "$ref": "#/definitions/AWS::Connect::Rule.SlaTargetFieldValue" + }, + "type": "array" + }, + "TargetSlaMinutes": { + "type": "number" + }, + "Type": { + "type": "string" + } + }, + "required": [ + "Name", + "TargetSlaMinutes", + "Type" + ], + "type": "object" + }, "AWS::Connect::Rule.CreateCaseAction": { "additionalProperties": false, "properties": { @@ -82387,6 +84750,9 @@ "title": "DeliveryMethod", "type": "string" }, + "Exclusion": { + "$ref": "#/definitions/AWS::Connect::Rule.NotificationRecipientType" + }, "Recipient": { "$ref": "#/definitions/AWS::Connect::Rule.NotificationRecipientType", "markdownDescription": "Notification recipient.", @@ -82406,6 +84772,15 @@ ], "type": "object" }, + "AWS::Connect::Rule.SlaTargetFieldValue": { + "additionalProperties": false, + "properties": { + "StringValue": { + "type": "string" + } + }, + "type": "object" + }, "AWS::Connect::Rule.SubmitAutoEvaluationAction": { "additionalProperties": false, "properties": { @@ -82708,10 +85083,6 @@ "type": "string" } }, - "required": [ - "ApplicationPermissions", - "Namespace" - ], "type": "object" }, "AWS::Connect::SecurityProfile.DataTableAccessControlConfiguration": { @@ -82735,10 +85106,6 @@ "type": "string" } }, - "required": [ - "FlowModuleId", - "Type" - ], "type": "object" }, "AWS::Connect::SecurityProfile.GranularAccessControlConfiguration": { @@ -82764,9 +85131,6 @@ "type": "array" } }, - "required": [ - "PrimaryAttributeValues" - ], "type": "object" }, "AWS::Connect::SecurityProfile.PrimaryAttributeValue": { @@ -82791,11 +85155,6 @@ "type": "array" } }, - "required": [ - "AccessType", - "AttributeName", - "Values" - ], "type": "object" }, "AWS::Connect::TaskTemplate": { @@ -83063,6 +85422,136 @@ ], "type": "object" }, + "AWS::Connect::TestCase": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Content": { + "type": "string" + }, + "Description": { + "type": "string" + }, + "EntryPoint": { + "$ref": "#/definitions/AWS::Connect::TestCase.EntryPoint" + }, + "InitializationData": { + "type": "string" + }, + "InstanceArn": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "Status": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "Content", + "InstanceArn", + "Name" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Connect::TestCase" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Connect::TestCase.ChatEntryPointParameters": { + "additionalProperties": false, + "properties": { + "FlowId": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::Connect::TestCase.EntryPoint": { + "additionalProperties": false, + "properties": { + "ChatEntryPointParameters": { + "$ref": "#/definitions/AWS::Connect::TestCase.ChatEntryPointParameters" + }, + "Type": { + "type": "string" + }, + "VoiceCallEntryPointParameters": { + "$ref": "#/definitions/AWS::Connect::TestCase.VoiceCallEntryPointParameters" + } + }, + "type": "object" + }, + "AWS::Connect::TestCase.VoiceCallEntryPointParameters": { + "additionalProperties": false, + "properties": { + "DestinationPhoneNumber": { + "type": "string" + }, + "FlowId": { + "type": "string" + }, + "SourcePhoneNumber": { + "type": "string" + } + }, + "type": "object" + }, "AWS::Connect::TrafficDistributionGroup": { "additionalProperties": false, "properties": { @@ -83311,6 +85800,9 @@ "AWS::Connect::User.AfterContactWorkConfig": { "additionalProperties": false, "properties": { + "AfterContactWorkMode": { + "type": "string" + }, "AfterContactWorkTimeLimit": { "type": "number" } @@ -86323,6 +88815,119 @@ ], "type": "object" }, + "AWS::CustomerProfiles::DomainObjectType": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Description": { + "type": "string" + }, + "DomainName": { + "type": "string" + }, + "EncryptionKey": { + "type": "string" + }, + "Fields": { + "additionalProperties": false, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "$ref": "#/definitions/AWS::CustomerProfiles::DomainObjectType.DomainObjectTypeField" + } + }, + "type": "object" + }, + "ObjectTypeName": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "DomainName", + "Fields", + "ObjectTypeName" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::CustomerProfiles::DomainObjectType" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::CustomerProfiles::DomainObjectType.DomainObjectTypeField": { + "additionalProperties": false, + "properties": { + "ContentType": { + "type": "string" + }, + "FeatureType": { + "type": "string" + }, + "Source": { + "type": "string" + }, + "Target": { + "type": "string" + } + }, + "required": [ + "Source", + "Target" + ], + "type": "object" + }, "AWS::CustomerProfiles::EventStream": { "additionalProperties": false, "properties": { @@ -103780,6 +106385,9 @@ "AWS::DevOpsAgent::PrivateConnection.ServiceManagedMode": { "additionalProperties": false, "properties": { + "DnsResolution": { + "type": "string" + }, "HostAddress": { "type": "string" }, @@ -104049,6 +106657,9 @@ "ApiKey": { "$ref": "#/definitions/AWS::DevOpsAgent::Service.ApiKeyDetails" }, + "BearerToken": { + "$ref": "#/definitions/AWS::DevOpsAgent::Service.BearerTokenDetails" + }, "OAuthClientCredentials": { "$ref": "#/definitions/AWS::DevOpsAgent::Service.MCPServerOAuthClientCredentialsConfig" } @@ -104157,6 +106768,9 @@ }, "type": "object" }, + "McpRoleArn": { + "type": "string" + }, "Region": { "type": "string" }, @@ -104169,7 +106783,6 @@ }, "required": [ "Region", - "RoleArn", "Service" ], "type": "object" @@ -104468,6 +107081,9 @@ "Endpoint": { "type": "string" }, + "McpRoleArn": { + "type": "string" + }, "Name": { "type": "string" }, @@ -107285,9 +109901,6 @@ "title": "ResourcePolicy" } }, - "required": [ - "ResourcePolicy" - ], "type": "object" }, "AWS::DynamoDB::GlobalTable.ResourcePolicy": { @@ -117165,6 +119778,9 @@ "Properties": { "additionalProperties": false, "properties": { + "ParentGroupId": { + "type": "string" + }, "PartitionCount": { "markdownDescription": "The number of partitions. Valid only when *Strategy* is set to `partition` .", "title": "PartitionCount", @@ -121696,7 +124312,7 @@ }, "type": "object" }, - "AWS::EC2::TransitGatewayRoute": { + "AWS::EC2::TransitGatewayPolicyTable": { "additionalProperties": false, "properties": { "Condition": { @@ -121731,36 +124347,24 @@ "Properties": { "additionalProperties": false, "properties": { - "Blackhole": { - "markdownDescription": "Indicates whether to drop traffic that matches this route.", - "title": "Blackhole", - "type": "boolean" - }, - "DestinationCidrBlock": { - "markdownDescription": "The CIDR block used for destination matches.", - "title": "DestinationCidrBlock", - "type": "string" - }, - "TransitGatewayAttachmentId": { - "markdownDescription": "The ID of the attachment.", - "title": "TransitGatewayAttachmentId", - "type": "string" + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" }, - "TransitGatewayRouteTableId": { - "markdownDescription": "The ID of the transit gateway route table.", - "title": "TransitGatewayRouteTableId", + "TransitGatewayId": { "type": "string" } }, "required": [ - "DestinationCidrBlock", - "TransitGatewayRouteTableId" + "TransitGatewayId" ], "type": "object" }, "Type": { "enum": [ - "AWS::EC2::TransitGatewayRoute" + "AWS::EC2::TransitGatewayPolicyTable" ], "type": "string" }, @@ -121779,7 +124383,7 @@ ], "type": "object" }, - "AWS::EC2::TransitGatewayRouteTable": { + "AWS::EC2::TransitGatewayPolicyTableAssociation": { "additionalProperties": false, "properties": { "Condition": { @@ -121814,28 +124418,22 @@ "Properties": { "additionalProperties": false, "properties": { - "Tags": { - "items": { - "$ref": "#/definitions/Tag" - }, - "markdownDescription": "Any tags assigned to the route table.", - "title": "Tags", - "type": "array" + "TransitGatewayAttachmentId": { + "type": "string" }, - "TransitGatewayId": { - "markdownDescription": "The ID of the transit gateway.", - "title": "TransitGatewayId", + "TransitGatewayPolicyTableId": { "type": "string" } }, "required": [ - "TransitGatewayId" + "TransitGatewayAttachmentId", + "TransitGatewayPolicyTableId" ], "type": "object" }, "Type": { "enum": [ - "AWS::EC2::TransitGatewayRouteTable" + "AWS::EC2::TransitGatewayPolicyTableAssociation" ], "type": "string" }, @@ -121854,7 +124452,7 @@ ], "type": "object" }, - "AWS::EC2::TransitGatewayRouteTableAssociation": { + "AWS::EC2::TransitGatewayPolicyTableEntry": { "additionalProperties": false, "properties": { "Condition": { @@ -121889,26 +124487,30 @@ "Properties": { "additionalProperties": false, "properties": { - "TransitGatewayAttachmentId": { - "markdownDescription": "The ID of the attachment.", - "title": "TransitGatewayAttachmentId", + "PolicyRule": { + "$ref": "#/definitions/AWS::EC2::TransitGatewayPolicyTableEntry.TransitGatewayPolicyRule" + }, + "PolicyRuleNumber": { "type": "string" }, - "TransitGatewayRouteTableId": { - "markdownDescription": "The ID of the route table for the transit gateway.", - "title": "TransitGatewayRouteTableId", + "TargetRouteTableId": { + "type": "string" + }, + "TransitGatewayPolicyTableId": { "type": "string" } }, "required": [ - "TransitGatewayAttachmentId", - "TransitGatewayRouteTableId" + "PolicyRule", + "PolicyRuleNumber", + "TargetRouteTableId", + "TransitGatewayPolicyTableId" ], "type": "object" }, "Type": { "enum": [ - "AWS::EC2::TransitGatewayRouteTableAssociation" + "AWS::EC2::TransitGatewayPolicyTableEntry" ], "type": "string" }, @@ -121927,7 +124529,28 @@ ], "type": "object" }, - "AWS::EC2::TransitGatewayRouteTablePropagation": { + "AWS::EC2::TransitGatewayPolicyTableEntry.TransitGatewayPolicyRule": { + "additionalProperties": false, + "properties": { + "DestinationCidrBlock": { + "type": "string" + }, + "DestinationPortRange": { + "type": "string" + }, + "Protocol": { + "type": "string" + }, + "SourceCidrBlock": { + "type": "string" + }, + "SourcePortRange": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::EC2::TransitGatewayRoute": { "additionalProperties": false, "properties": { "Condition": { @@ -121962,26 +124585,36 @@ "Properties": { "additionalProperties": false, "properties": { + "Blackhole": { + "markdownDescription": "Indicates whether to drop traffic that matches this route.", + "title": "Blackhole", + "type": "boolean" + }, + "DestinationCidrBlock": { + "markdownDescription": "The CIDR block used for destination matches.", + "title": "DestinationCidrBlock", + "type": "string" + }, "TransitGatewayAttachmentId": { "markdownDescription": "The ID of the attachment.", "title": "TransitGatewayAttachmentId", "type": "string" }, "TransitGatewayRouteTableId": { - "markdownDescription": "The ID of the propagation route table.", + "markdownDescription": "The ID of the transit gateway route table.", "title": "TransitGatewayRouteTableId", "type": "string" } }, "required": [ - "TransitGatewayAttachmentId", + "DestinationCidrBlock", "TransitGatewayRouteTableId" ], "type": "object" }, "Type": { "enum": [ - "AWS::EC2::TransitGatewayRouteTablePropagation" + "AWS::EC2::TransitGatewayRoute" ], "type": "string" }, @@ -122000,7 +124633,7 @@ ], "type": "object" }, - "AWS::EC2::TransitGatewayVpcAttachment": { + "AWS::EC2::TransitGatewayRouteTable": { "additionalProperties": false, "properties": { "Condition": { @@ -122035,40 +124668,11 @@ "Properties": { "additionalProperties": false, "properties": { - "AddSubnetIds": { - "items": { - "type": "string" - }, - "markdownDescription": "The IDs of one or more subnets to add. You can specify at most one subnet per Availability Zone.", - "title": "AddSubnetIds", - "type": "array" - }, - "Options": { - "$ref": "#/definitions/AWS::EC2::TransitGatewayVpcAttachment.Options", - "markdownDescription": "The VPC attachment options.", - "title": "Options" - }, - "RemoveSubnetIds": { - "items": { - "type": "string" - }, - "markdownDescription": "The IDs of one or more subnets to remove.", - "title": "RemoveSubnetIds", - "type": "array" - }, - "SubnetIds": { - "items": { - "type": "string" - }, - "markdownDescription": "The IDs of the subnets.", - "title": "SubnetIds", - "type": "array" - }, "Tags": { "items": { "$ref": "#/definitions/Tag" }, - "markdownDescription": "The tags for the VPC attachment.", + "markdownDescription": "Any tags assigned to the route table.", "title": "Tags", "type": "array" }, @@ -122076,23 +124680,16 @@ "markdownDescription": "The ID of the transit gateway.", "title": "TransitGatewayId", "type": "string" - }, - "VpcId": { - "markdownDescription": "The ID of the VPC.", - "title": "VpcId", - "type": "string" } }, "required": [ - "SubnetIds", - "TransitGatewayId", - "VpcId" + "TransitGatewayId" ], "type": "object" }, "Type": { "enum": [ - "AWS::EC2::TransitGatewayVpcAttachment" + "AWS::EC2::TransitGatewayRouteTable" ], "type": "string" }, @@ -122111,33 +124708,7 @@ ], "type": "object" }, - "AWS::EC2::TransitGatewayVpcAttachment.Options": { - "additionalProperties": false, - "properties": { - "ApplianceModeSupport": { - "markdownDescription": "Enable or disable appliance mode support. The default is `disable` .", - "title": "ApplianceModeSupport", - "type": "string" - }, - "DnsSupport": { - "markdownDescription": "Enable or disable DNS support. The default is `disable` .", - "title": "DnsSupport", - "type": "string" - }, - "Ipv6Support": { - "markdownDescription": "Enable or disable IPv6 support. The default is `disable` .", - "title": "Ipv6Support", - "type": "string" - }, - "SecurityGroupReferencingSupport": { - "markdownDescription": "Enables you to reference a security group across VPCs attached to a transit gateway (TGW). Use this option to simplify security group management and control of instance-to-instance traffic across VPCs that are connected by transit gateway. You can also use this option to migrate from VPC peering (which was the only option that supported security group referencing) to transit gateways (which now also support security group referencing). This option is disabled by default and there are no additional costs to use this feature.\n\nFor important information about this feature, see [Create a transit gateway](https://docs.aws.amazon.com/vpc/latest/tgw/tgw-transit-gateways.html#create-tgw) in the *AWS Transit Gateway Guide* .", - "title": "SecurityGroupReferencingSupport", - "type": "string" - } - }, - "type": "object" - }, - "AWS::EC2::VPC": { + "AWS::EC2::TransitGatewayRouteTableAssociation": { "additionalProperties": false, "properties": { "Condition": { @@ -122172,50 +124743,26 @@ "Properties": { "additionalProperties": false, "properties": { - "CidrBlock": { - "markdownDescription": "The IPv4 network range for the VPC, in CIDR notation. For example, `10.0.0.0/16` . We modify the specified CIDR block to its canonical form; for example, if you specify `100.68.0.18/18` , we modify it to `100.68.0.0/18` .\n\nYou must specify either `CidrBlock` or `Ipv4IpamPoolId` .", - "title": "CidrBlock", - "type": "string" - }, - "EnableDnsHostnames": { - "markdownDescription": "Indicates whether the instances launched in the VPC get DNS hostnames. If enabled, instances in the VPC get DNS hostnames; otherwise, they do not. Disabled by default for nondefault VPCs. For more information, see [DNS attributes in your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-dns.html#vpc-dns-support) .\n\nYou can only enable DNS hostnames if you've enabled DNS support.", - "title": "EnableDnsHostnames", - "type": "boolean" - }, - "EnableDnsSupport": { - "markdownDescription": "Indicates whether the DNS resolution is supported for the VPC. If enabled, queries to the Amazon provided DNS server at the 169.254.169.253 IP address, or the reserved IP address at the base of the VPC network range \"plus two\" succeed. If disabled, the Amazon provided DNS service in the VPC that resolves public DNS hostnames to IP addresses is not enabled. Enabled by default. For more information, see [DNS attributes in your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-dns.html#vpc-dns-support) .", - "title": "EnableDnsSupport", - "type": "boolean" - }, - "InstanceTenancy": { - "markdownDescription": "The allowed tenancy of instances launched into the VPC.\n\n- `default` : An instance launched into the VPC runs on shared hardware by default, unless you explicitly specify a different tenancy during instance launch.\n- `dedicated` : An instance launched into the VPC runs on dedicated hardware by default, unless you explicitly specify a tenancy of `host` during instance launch. You cannot specify a tenancy of `default` during instance launch.\n\nUpdating `InstanceTenancy` requires no replacement only if you are updating its value from `dedicated` to `default` . Updating `InstanceTenancy` from `default` to `dedicated` requires replacement.", - "title": "InstanceTenancy", + "TransitGatewayAttachmentId": { + "markdownDescription": "The ID of the attachment.", + "title": "TransitGatewayAttachmentId", "type": "string" }, - "Ipv4IpamPoolId": { - "markdownDescription": "The ID of an IPv4 IPAM pool you want to use for allocating this VPC's CIDR. For more information, see [What is IPAM?](https://docs.aws.amazon.com//vpc/latest/ipam/what-is-it-ipam.html) in the *Amazon VPC IPAM User Guide* .\n\nYou must specify either `CidrBlock` or `Ipv4IpamPoolId` .", - "title": "Ipv4IpamPoolId", + "TransitGatewayRouteTableId": { + "markdownDescription": "The ID of the route table for the transit gateway.", + "title": "TransitGatewayRouteTableId", "type": "string" - }, - "Ipv4NetmaskLength": { - "markdownDescription": "The netmask length of the IPv4 CIDR you want to allocate to this VPC from an Amazon VPC IP Address Manager (IPAM) pool. For more information about IPAM, see [What is IPAM?](https://docs.aws.amazon.com//vpc/latest/ipam/what-is-it-ipam.html) in the *Amazon VPC IPAM User Guide* .", - "title": "Ipv4NetmaskLength", - "type": "number" - }, - "Tags": { - "items": { - "$ref": "#/definitions/Tag" - }, - "markdownDescription": "The tags for the VPC.", - "title": "Tags", - "type": "array" } }, + "required": [ + "TransitGatewayAttachmentId", + "TransitGatewayRouteTableId" + ], "type": "object" }, "Type": { "enum": [ - "AWS::EC2::VPC" + "AWS::EC2::TransitGatewayRouteTableAssociation" ], "type": "string" }, @@ -122229,11 +124776,12 @@ } }, "required": [ - "Type" + "Type", + "Properties" ], "type": "object" }, - "AWS::EC2::VPCBlockPublicAccessExclusion": { + "AWS::EC2::TransitGatewayRouteTablePropagation": { "additionalProperties": false, "properties": { "Condition": { @@ -122268,38 +124816,26 @@ "Properties": { "additionalProperties": false, "properties": { - "InternetGatewayExclusionMode": { - "markdownDescription": "The desired VPC Block Public Access mode for a specific VPC or subnet exclusion.\n\n- `allow-bidirectional` : Allow all internet traffic to and from the excluded VPCs and subnets.\n- `allow-egress` : Allow outbound internet traffic from the excluded VPCs and subnets. Block inbound internet traffic to the excluded VPCs and subnets. Only applies when VPC Block Public Access is set to `block-bidirectional` .", - "title": "InternetGatewayExclusionMode", - "type": "string" - }, - "SubnetId": { - "markdownDescription": "The ID of the subnet you want to exclude. Required only if you don't specify VpcId.", - "title": "SubnetId", + "TransitGatewayAttachmentId": { + "markdownDescription": "The ID of the attachment.", + "title": "TransitGatewayAttachmentId", "type": "string" }, - "Tags": { - "items": { - "$ref": "#/definitions/Tag" - }, - "markdownDescription": "An array of key-value pairs to apply to this resource.", - "title": "Tags", - "type": "array" - }, - "VpcId": { - "markdownDescription": "The ID of the VPC you want to exclude. Required only if you don't specify SubnetId.", - "title": "VpcId", + "TransitGatewayRouteTableId": { + "markdownDescription": "The ID of the propagation route table.", + "title": "TransitGatewayRouteTableId", "type": "string" } }, "required": [ - "InternetGatewayExclusionMode" + "TransitGatewayAttachmentId", + "TransitGatewayRouteTableId" ], "type": "object" }, "Type": { "enum": [ - "AWS::EC2::VPCBlockPublicAccessExclusion" + "AWS::EC2::TransitGatewayRouteTablePropagation" ], "type": "string" }, @@ -122318,7 +124854,418 @@ ], "type": "object" }, - "AWS::EC2::VPCBlockPublicAccessOptions": { + "AWS::EC2::TransitGatewayVpcAttachment": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "AddSubnetIds": { + "items": { + "type": "string" + }, + "markdownDescription": "The IDs of one or more subnets to add. You can specify at most one subnet per Availability Zone.", + "title": "AddSubnetIds", + "type": "array" + }, + "Options": { + "$ref": "#/definitions/AWS::EC2::TransitGatewayVpcAttachment.Options", + "markdownDescription": "The VPC attachment options.", + "title": "Options" + }, + "RemoveSubnetIds": { + "items": { + "type": "string" + }, + "markdownDescription": "The IDs of one or more subnets to remove.", + "title": "RemoveSubnetIds", + "type": "array" + }, + "SubnetIds": { + "items": { + "type": "string" + }, + "markdownDescription": "The IDs of the subnets.", + "title": "SubnetIds", + "type": "array" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "The tags for the VPC attachment.", + "title": "Tags", + "type": "array" + }, + "TransitGatewayId": { + "markdownDescription": "The ID of the transit gateway.", + "title": "TransitGatewayId", + "type": "string" + }, + "VpcId": { + "markdownDescription": "The ID of the VPC.", + "title": "VpcId", + "type": "string" + } + }, + "required": [ + "SubnetIds", + "TransitGatewayId", + "VpcId" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::EC2::TransitGatewayVpcAttachment" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::EC2::TransitGatewayVpcAttachment.Options": { + "additionalProperties": false, + "properties": { + "ApplianceModeSupport": { + "markdownDescription": "Enable or disable appliance mode support. The default is `disable` .", + "title": "ApplianceModeSupport", + "type": "string" + }, + "DnsSupport": { + "markdownDescription": "Enable or disable DNS support. The default is `disable` .", + "title": "DnsSupport", + "type": "string" + }, + "Ipv6Support": { + "markdownDescription": "Enable or disable IPv6 support. The default is `disable` .", + "title": "Ipv6Support", + "type": "string" + }, + "SecurityGroupReferencingSupport": { + "markdownDescription": "Enables you to reference a security group across VPCs attached to a transit gateway (TGW). Use this option to simplify security group management and control of instance-to-instance traffic across VPCs that are connected by transit gateway. You can also use this option to migrate from VPC peering (which was the only option that supported security group referencing) to transit gateways (which now also support security group referencing). This option is disabled by default and there are no additional costs to use this feature.\n\nFor important information about this feature, see [Create a transit gateway](https://docs.aws.amazon.com/vpc/latest/tgw/tgw-transit-gateways.html#create-tgw) in the *AWS Transit Gateway Guide* .", + "title": "SecurityGroupReferencingSupport", + "type": "string" + } + }, + "type": "object" + }, + "AWS::EC2::VPC": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "CidrBlock": { + "markdownDescription": "The IPv4 network range for the VPC, in CIDR notation. For example, `10.0.0.0/16` . We modify the specified CIDR block to its canonical form; for example, if you specify `100.68.0.18/18` , we modify it to `100.68.0.0/18` .\n\nYou must specify either `CidrBlock` or `Ipv4IpamPoolId` .", + "title": "CidrBlock", + "type": "string" + }, + "EnableDnsHostnames": { + "markdownDescription": "Indicates whether the instances launched in the VPC get DNS hostnames. If enabled, instances in the VPC get DNS hostnames; otherwise, they do not. Disabled by default for nondefault VPCs. For more information, see [DNS attributes in your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-dns.html#vpc-dns-support) .\n\nYou can only enable DNS hostnames if you've enabled DNS support.", + "title": "EnableDnsHostnames", + "type": "boolean" + }, + "EnableDnsSupport": { + "markdownDescription": "Indicates whether the DNS resolution is supported for the VPC. If enabled, queries to the Amazon provided DNS server at the 169.254.169.253 IP address, or the reserved IP address at the base of the VPC network range \"plus two\" succeed. If disabled, the Amazon provided DNS service in the VPC that resolves public DNS hostnames to IP addresses is not enabled. Enabled by default. For more information, see [DNS attributes in your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-dns.html#vpc-dns-support) .", + "title": "EnableDnsSupport", + "type": "boolean" + }, + "InstanceTenancy": { + "markdownDescription": "The allowed tenancy of instances launched into the VPC.\n\n- `default` : An instance launched into the VPC runs on shared hardware by default, unless you explicitly specify a different tenancy during instance launch.\n- `dedicated` : An instance launched into the VPC runs on dedicated hardware by default, unless you explicitly specify a tenancy of `host` during instance launch. You cannot specify a tenancy of `default` during instance launch.\n\nUpdating `InstanceTenancy` requires no replacement only if you are updating its value from `dedicated` to `default` . Updating `InstanceTenancy` from `default` to `dedicated` requires replacement.", + "title": "InstanceTenancy", + "type": "string" + }, + "Ipv4IpamPoolId": { + "markdownDescription": "The ID of an IPv4 IPAM pool you want to use for allocating this VPC's CIDR. For more information, see [What is IPAM?](https://docs.aws.amazon.com//vpc/latest/ipam/what-is-it-ipam.html) in the *Amazon VPC IPAM User Guide* .\n\nYou must specify either `CidrBlock` or `Ipv4IpamPoolId` .", + "title": "Ipv4IpamPoolId", + "type": "string" + }, + "Ipv4NetmaskLength": { + "markdownDescription": "The netmask length of the IPv4 CIDR you want to allocate to this VPC from an Amazon VPC IP Address Manager (IPAM) pool. For more information about IPAM, see [What is IPAM?](https://docs.aws.amazon.com//vpc/latest/ipam/what-is-it-ipam.html) in the *Amazon VPC IPAM User Guide* .", + "title": "Ipv4NetmaskLength", + "type": "number" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "The tags for the VPC.", + "title": "Tags", + "type": "array" + }, + "VpcEncryptionControl": { + "$ref": "#/definitions/AWS::EC2::VPC.VpcEncryptionControl" + } + }, + "type": "object" + }, + "Type": { + "enum": [ + "AWS::EC2::VPC" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type" + ], + "type": "object" + }, + "AWS::EC2::VPC.VpcEncryptionControl": { + "additionalProperties": false, + "properties": { + "EgressOnlyInternetGatewayExclusion": { + "type": "string" + }, + "ElasticFileSystemExclusion": { + "type": "string" + }, + "InternetGatewayExclusion": { + "type": "string" + }, + "LambdaExclusion": { + "type": "string" + }, + "Mode": { + "type": "string" + }, + "NatGatewayExclusion": { + "type": "string" + }, + "ResourceExclusions": { + "$ref": "#/definitions/AWS::EC2::VPC.VpcEncryptionControlExclusions" + }, + "State": { + "type": "string" + }, + "StateMessage": { + "type": "string" + }, + "VirtualPrivateGatewayExclusion": { + "type": "string" + }, + "VpcEncryptionControlId": { + "type": "string" + }, + "VpcId": { + "type": "string" + }, + "VpcLatticeExclusion": { + "type": "string" + }, + "VpcPeeringExclusion": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::EC2::VPC.VpcEncryptionControlExclusion": { + "additionalProperties": false, + "properties": { + "State": { + "type": "string" + }, + "StateMessage": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::EC2::VPC.VpcEncryptionControlExclusions": { + "additionalProperties": false, + "properties": { + "EgressOnlyInternetGateway": { + "$ref": "#/definitions/AWS::EC2::VPC.VpcEncryptionControlExclusion" + }, + "ElasticFileSystem": { + "$ref": "#/definitions/AWS::EC2::VPC.VpcEncryptionControlExclusion" + }, + "InternetGateway": { + "$ref": "#/definitions/AWS::EC2::VPC.VpcEncryptionControlExclusion" + }, + "Lambda": { + "$ref": "#/definitions/AWS::EC2::VPC.VpcEncryptionControlExclusion" + }, + "NatGateway": { + "$ref": "#/definitions/AWS::EC2::VPC.VpcEncryptionControlExclusion" + }, + "VirtualPrivateGateway": { + "$ref": "#/definitions/AWS::EC2::VPC.VpcEncryptionControlExclusion" + }, + "VpcLattice": { + "$ref": "#/definitions/AWS::EC2::VPC.VpcEncryptionControlExclusion" + }, + "VpcPeering": { + "$ref": "#/definitions/AWS::EC2::VPC.VpcEncryptionControlExclusion" + } + }, + "type": "object" + }, + "AWS::EC2::VPCBlockPublicAccessExclusion": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "InternetGatewayExclusionMode": { + "markdownDescription": "The desired VPC Block Public Access mode for a specific VPC or subnet exclusion.\n\n- `allow-bidirectional` : Allow all internet traffic to and from the excluded VPCs and subnets.\n- `allow-egress` : Allow outbound internet traffic from the excluded VPCs and subnets. Block inbound internet traffic to the excluded VPCs and subnets. Only applies when VPC Block Public Access is set to `block-bidirectional` .", + "title": "InternetGatewayExclusionMode", + "type": "string" + }, + "SubnetId": { + "markdownDescription": "The ID of the subnet you want to exclude. Required only if you don't specify VpcId.", + "title": "SubnetId", + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "An array of key-value pairs to apply to this resource.", + "title": "Tags", + "type": "array" + }, + "VpcId": { + "markdownDescription": "The ID of the VPC you want to exclude. Required only if you don't specify SubnetId.", + "title": "VpcId", + "type": "string" + } + }, + "required": [ + "InternetGatewayExclusionMode" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::EC2::VPCBlockPublicAccessExclusion" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::EC2::VPCBlockPublicAccessOptions": { "additionalProperties": false, "properties": { "Condition": { @@ -127949,6 +130896,9 @@ "title": "Tags", "type": "array" }, + "TaskDefinitionArn": { + "type": "string" + }, "TaskRoleArn": { "markdownDescription": "The ARN of the task role for the service revision.", "title": "TaskRoleArn", @@ -127956,9 +130906,7 @@ } }, "required": [ - "ExecutionRoleArn", - "InfrastructureRoleArn", - "PrimaryContainer" + "InfrastructureRoleArn" ], "type": "object" }, @@ -128211,6 +131159,9 @@ "title": "ServiceRevisionArn", "type": "string" }, + "TaskDefinitionArn": { + "type": "string" + }, "TaskRoleArn": { "markdownDescription": "The ARN of the task role for the service revision.", "title": "TaskRoleArn", @@ -128774,10 +131725,16 @@ "title": "Enable", "type": "boolean" }, + "ResetOnHealthyTask": { + "type": "boolean" + }, "Rollback": { "markdownDescription": "Determines whether to configure Amazon ECS to roll back the service if a service deployment fails. If rollback is on, when a service deployment fails, the service is rolled back to the last deployment that completed successfully.", "title": "Rollback", "type": "boolean" + }, + "ThresholdConfiguration": { + "$ref": "#/definitions/AWS::ECS::Service.ThresholdConfiguration" } }, "required": [ @@ -129443,6 +132400,22 @@ ], "type": "object" }, + "AWS::ECS::Service.ThresholdConfiguration": { + "additionalProperties": false, + "properties": { + "Type": { + "type": "string" + }, + "Value": { + "type": "number" + } + }, + "required": [ + "Type", + "Value" + ], + "type": "object" + }, "AWS::ECS::Service.TimeoutConfiguration": { "additionalProperties": false, "properties": { @@ -132095,6 +135068,9 @@ "title": "RoleArn", "type": "string" }, + "RollbackConfig": { + "$ref": "#/definitions/AWS::EKS::Cluster.RollbackConfig" + }, "StorageConfig": { "$ref": "#/definitions/AWS::EKS::Cluster.StorageConfig", "markdownDescription": "Indicates the current configuration of the block storage capability on your EKS Auto Mode cluster. For example, if the capability is enabled or disabled. If the block storage capability is enabled, EKS Auto Mode will create and delete EBS volumes in your AWS account. For more information, see EKS Auto Mode block storage capability in the *Amazon EKS User Guide* .", @@ -132475,6 +135451,15 @@ ], "type": "object" }, + "AWS::EKS::Cluster.RollbackConfig": { + "additionalProperties": false, + "properties": { + "TimeoutMinutes": { + "type": "number" + } + }, + "type": "object" + }, "AWS::EKS::Cluster.StorageConfig": { "additionalProperties": false, "properties": { @@ -135921,6 +138906,9 @@ "ReleaseLabel": { "type": "string" }, + "SessionIdleTimeoutInMinutes": { + "type": "number" + }, "Tags": { "items": { "$ref": "#/definitions/Tag" @@ -136404,6 +139392,9 @@ "title": "SecurityConfigurationId", "type": "string" }, + "SessionEnabled": { + "type": "boolean" + }, "Tags": { "items": { "$ref": "#/definitions/Tag" @@ -137141,12 +140132,8 @@ } }, "required": [ - "ConnectivityInfo", - "LicenseInfo", "ServiceAccessSubnetId", - "SiteId", "TermsAccepted", - "VcfHostnames", "VcfVersion", "VpcId" ], @@ -140208,6 +143195,12 @@ "markdownDescription": "[HTTPS and TLS listeners] The security policy that defines which protocols and ciphers are supported. For more information, see [Security policies](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/describe-ssl-policies.html) in the *Application Load Balancers Guide* and [Security policies](https://docs.aws.amazon.com/elasticloadbalancing/latest/network/describe-ssl-policies.html) in the *Network Load Balancers Guide* .\n\n[HTTPS listeners] Updating the security policy can result in interruptions if the load balancer is handling a high volume of traffic. To decrease the possibility of an interruption if your load balancer is handling a high volume of traffic, create an additional load balancer or request an LCU reservation.", "title": "SslPolicy", "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" } }, "required": [ @@ -140799,6 +143792,12 @@ "title": "Priority", "type": "number" }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + }, "Transforms": { "items": { "$ref": "#/definitions/AWS::ElasticLoadBalancingV2::ListenerRule.Transform" @@ -141377,6 +144376,9 @@ "AWS::ElasticLoadBalancingV2::ListenerRule.SourceIpConfig": { "additionalProperties": false, "properties": { + "IpAddressType": { + "type": "string" + }, "Values": { "items": { "type": "string" @@ -143587,6 +146589,9 @@ "AWS::EntityResolution::MatchingWorkflow.ResolutionTechniques": { "additionalProperties": false, "properties": { + "EnableRealTimeMatching": { + "type": "boolean" + }, "ProviderProperties": { "$ref": "#/definitions/AWS::EntityResolution::MatchingWorkflow.ProviderProperties", "markdownDescription": "The properties of the provider service.", @@ -153855,6 +156860,15 @@ "title": "Enabled", "type": "boolean" }, + "FlowLogsEnabled": { + "type": "boolean" + }, + "FlowLogsS3Bucket": { + "type": "string" + }, + "FlowLogsS3Prefix": { + "type": "string" + }, "IpAddressType": { "markdownDescription": "The IP address type that an accelerator supports. For a standard accelerator, the value can be IPV4 or DUAL_STACK.", "title": "IpAddressType", @@ -154295,6 +157309,84 @@ ], "type": "object" }, + "AWS::Glue::Blueprint": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "BlueprintLocation": { + "type": "string" + }, + "Description": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "BlueprintLocation", + "Name" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Glue::Blueprint" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, "AWS::Glue::Catalog": { "additionalProperties": false, "properties": { @@ -158609,6 +161701,30 @@ ], "type": "object" }, + "AWS::Glue::TableOptimizer.CompactionConfiguration": { + "additionalProperties": false, + "properties": { + "IcebergConfiguration": { + "$ref": "#/definitions/AWS::Glue::TableOptimizer.IcebergCompactionConfiguration" + } + }, + "type": "object" + }, + "AWS::Glue::TableOptimizer.IcebergCompactionConfiguration": { + "additionalProperties": false, + "properties": { + "DeleteFileThreshold": { + "type": "number" + }, + "MinInputFiles": { + "type": "number" + }, + "Strategy": { + "type": "string" + } + }, + "type": "object" + }, "AWS::Glue::TableOptimizer.IcebergConfiguration": { "additionalProperties": false, "properties": { @@ -158671,6 +161787,9 @@ "AWS::Glue::TableOptimizer.TableOptimizerConfiguration": { "additionalProperties": false, "properties": { + "CompactionConfiguration": { + "$ref": "#/definitions/AWS::Glue::TableOptimizer.CompactionConfiguration" + }, "Enabled": { "markdownDescription": "Whether the table optimization is enabled.", "title": "Enabled", @@ -159088,6 +162207,105 @@ }, "type": "object" }, + "AWS::Glue::UserDefinedFunction": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "ClassName": { + "type": "string" + }, + "DatabaseName": { + "type": "string" + }, + "FunctionName": { + "type": "string" + }, + "FunctionType": { + "type": "string" + }, + "OwnerName": { + "type": "string" + }, + "OwnerType": { + "type": "string" + }, + "ResourceUris": { + "items": { + "$ref": "#/definitions/AWS::Glue::UserDefinedFunction.ResourceUri" + }, + "type": "array" + } + }, + "required": [ + "DatabaseName", + "FunctionName" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Glue::UserDefinedFunction" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Glue::UserDefinedFunction.ResourceUri": { + "additionalProperties": false, + "properties": { + "ResourceType": { + "type": "string" + }, + "Uri": { + "type": "string" + } + }, + "type": "object" + }, "AWS::Glue::Workflow": { "additionalProperties": false, "properties": { @@ -159298,6 +162516,12 @@ "title": "StackSetName", "type": "string" }, + "Tags": { + "items": { + "$ref": "#/definitions/AWS::Grafana::Workspace.TagsItems" + }, + "type": "array" + }, "VpcConfiguration": { "$ref": "#/definitions/AWS::Grafana::Workspace.VpcConfiguration", "markdownDescription": "The configuration settings for an Amazon VPC that contains data sources for your Grafana workspace to connect to.\n\n> Connecting to a private VPC is not yet available in the Asia Pacific (Seoul) Region (ap-northeast-2).", @@ -159465,6 +162689,22 @@ ], "type": "object" }, + "AWS::Grafana::Workspace.TagsItems": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, "AWS::Grafana::Workspace.VpcConfiguration": { "additionalProperties": false, "properties": { @@ -165384,6 +168624,151 @@ ], "type": "object" }, + "AWS::HealthLake::DataTransformationProfile": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "KmsKeyId": { + "type": "string" + }, + "ProfileDescription": { + "type": "string" + }, + "ProfileName": { + "type": "string" + }, + "Source": { + "$ref": "#/definitions/AWS::HealthLake::DataTransformationProfile.Source" + }, + "SourceFormat": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "ProfileName", + "SourceFormat" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::HealthLake::DataTransformationProfile" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::HealthLake::DataTransformationProfile.ExistingVersionedProfileSource": { + "additionalProperties": false, + "properties": { + "ProfileId": { + "type": "string" + }, + "Version": { + "type": "number" + } + }, + "required": [ + "ProfileId", + "Version" + ], + "type": "object" + }, + "AWS::HealthLake::DataTransformationProfile.ProfileMappingSource": { + "additionalProperties": false, + "properties": { + "ProfileMapping": { + "additionalProperties": true, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "type": "object" + } + }, + "required": [ + "ProfileMapping" + ], + "type": "object" + }, + "AWS::HealthLake::DataTransformationProfile.Source": { + "additionalProperties": false, + "properties": { + "ExistingVersionedProfileId": { + "$ref": "#/definitions/AWS::HealthLake::DataTransformationProfile.ExistingVersionedProfileSource" + }, + "ProfileMapping": { + "$ref": "#/definitions/AWS::HealthLake::DataTransformationProfile.ProfileMappingSource" + }, + "StarterProfile": { + "$ref": "#/definitions/AWS::HealthLake::DataTransformationProfile.StarterProfileSource" + } + }, + "type": "object" + }, + "AWS::HealthLake::DataTransformationProfile.StarterProfileSource": { + "additionalProperties": false, + "properties": { + "StarterProfileName": { + "type": "string" + } + }, + "required": [ + "StarterProfileName" + ], + "type": "object" + }, "AWS::HealthLake::FHIRDatastore": { "additionalProperties": false, "properties": { @@ -169813,6 +173198,15 @@ "markdownDescription": "Contains settings for vulnerability scans.", "title": "ImageScanningConfiguration" }, + "ImageTags": { + "additionalProperties": true, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "type": "object" + }, "ImageTestsConfiguration": { "$ref": "#/definitions/AWS::ImageBuilder::ImagePipeline.ImageTestsConfiguration", "markdownDescription": "The configuration of the image tests that run after image creation to ensure the quality of the image that was created.", @@ -169988,6 +173382,9 @@ "markdownDescription": "The cron expression determines how often EC2 Image Builder evaluates your `pipelineExecutionStartCondition` .\n\nFor information on how to format a cron expression in Image Builder, see [Use cron expressions in EC2 Image Builder](https://docs.aws.amazon.com/imagebuilder/latest/userguide/image-builder-cron.html) .", "title": "ScheduleExpression", "type": "string" + }, + "Timezone": { + "type": "string" } }, "type": "object" @@ -170091,6 +173488,12 @@ "title": "AmiTags", "type": "object" }, + "AmiWatermarks": { + "items": { + "type": "string" + }, + "type": "array" + }, "BlockDeviceMappings": { "items": { "$ref": "#/definitions/AWS::ImageBuilder::ImageRecipe.InstanceBlockDeviceMapping" @@ -196399,8 +199802,6 @@ "type": "string" }, "S3ObjectStorageMode": { - "markdownDescription": "Controls how Lambda stores the deployment package: `COPY` (Lambda copies the object to its own storage) or `REFERENCE` (Lambda references the object in your S3 bucket; the object must remain in place for the lifetime of the function).", - "title": "S3ObjectStorageMode", "type": "string" }, "S3ObjectVersion": { @@ -196440,6 +199841,9 @@ "title": "ExecutionTimeout", "type": "number" }, + "KMSKeyArn": { + "type": "string" + }, "RetentionPeriodInDays": { "markdownDescription": "The number of days to retain execution history after a durable execution completes. After this period, execution history is no longer available through the GetDurableExecutionHistory API.", "title": "RetentionPeriodInDays", @@ -196808,8 +200212,6 @@ "type": "string" }, "S3ObjectStorageMode": { - "markdownDescription": "Controls how Lambda stores the layer archive: `COPY` (Lambda copies the object to its own storage) or `REFERENCE` (Lambda references the object in your S3 bucket; the object must remain in place for the lifetime of the layer version).", - "title": "S3ObjectStorageMode", "type": "string" }, "S3ObjectVersion": { @@ -196908,7 +200310,7 @@ ], "type": "object" }, - "AWS::Lambda::Permission": { + "AWS::Lambda::MicrovmImage": { "additionalProperties": false, "properties": { "Condition": { @@ -196943,62 +200345,87 @@ "Properties": { "additionalProperties": false, "properties": { - "Action": { - "markdownDescription": "The action that the principal can use on the function. For example, `lambda:InvokeFunction` or `lambda:GetFunction` .", - "title": "Action", - "type": "string" + "AdditionalOsCapabilities": { + "items": { + "type": "string" + }, + "type": "array" }, - "EventSourceToken": { - "markdownDescription": "For Alexa Smart Home functions, a token that the invoker must supply.", - "title": "EventSourceToken", + "BaseImageArn": { "type": "string" }, - "FunctionName": { - "markdownDescription": "The name or ARN of the Lambda function, version, or alias.\n\n**Name formats** - *Function name* \u2013 `my-function` (name-only), `my-function:v1` (with alias).\n- *Function ARN* \u2013 `arn:aws:lambda:us-west-2:123456789012:function:my-function` .\n- *Partial ARN* \u2013 `123456789012:function:my-function` .\n\nYou can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.", - "title": "FunctionName", + "BaseImageVersion": { "type": "string" }, - "FunctionUrlAuthType": { - "markdownDescription": "The type of authentication that your function URL uses. Set to `AWS_IAM` if you want to restrict access to authenticated users only. Set to `NONE` if you want to bypass IAM authentication to create a public endpoint. For more information, see [Control access to Lambda function URLs](https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html) .", - "title": "FunctionUrlAuthType", + "BuildRoleArn": { "type": "string" }, - "InvokedViaFunctionUrl": { - "markdownDescription": "Indicates whether the permission applies when the function is invoked through a function URL.", - "title": "InvokedViaFunctionUrl", - "type": "boolean" + "CodeArtifact": { + "$ref": "#/definitions/AWS::Lambda::MicrovmImage.CodeArtifact" }, - "Principal": { - "markdownDescription": "The AWS service , AWS account , IAM user, or IAM role that invokes the function. If you specify a service, use `SourceArn` or `SourceAccount` to limit who can invoke the function through that service.", - "title": "Principal", - "type": "string" + "CpuConfigurations": { + "items": { + "$ref": "#/definitions/AWS::Lambda::MicrovmImage.CpuConfiguration" + }, + "type": "array" }, - "PrincipalOrgID": { - "markdownDescription": "The identifier for your organization in AWS Organizations . Use this to grant permissions to all the AWS accounts under this organization.", - "title": "PrincipalOrgID", + "Description": { "type": "string" }, - "SourceAccount": { - "markdownDescription": "For AWS service , the ID of the AWS account that owns the resource. Use this together with `SourceArn` to ensure that the specified account owns the resource. It is possible for an Amazon S3 bucket to be deleted by its owner and recreated by another account.", - "title": "SourceAccount", - "type": "string" + "EgressNetworkConnectors": { + "items": { + "type": "string" + }, + "type": "array" }, - "SourceArn": { - "markdownDescription": "For AWS services , the ARN of the AWS resource that invokes the function. For example, an Amazon S3 bucket or Amazon SNS topic.\n\nNote that Lambda configures the comparison using the `StringLike` operator.", - "title": "SourceArn", + "EnvironmentVariables": { + "items": { + "$ref": "#/definitions/AWS::Lambda::MicrovmImage.EnvironmentVariable" + }, + "type": "array" + }, + "Hooks": { + "$ref": "#/definitions/AWS::Lambda::MicrovmImage.Hooks" + }, + "Logging": { + "$ref": "#/definitions/AWS::Lambda::MicrovmImage.Logging" + }, + "Name": { "type": "string" + }, + "Resources": { + "items": { + "$ref": "#/definitions/AWS::Lambda::MicrovmImage.Resources" + }, + "type": "array" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" } }, "required": [ - "Action", - "FunctionName", - "Principal" + "AdditionalOsCapabilities", + "BaseImageArn", + "BaseImageVersion", + "BuildRoleArn", + "CodeArtifact", + "CpuConfigurations", + "Description", + "EgressNetworkConnectors", + "EnvironmentVariables", + "Hooks", + "Logging", + "Name", + "Resources" ], "type": "object" }, "Type": { "enum": [ - "AWS::Lambda::Permission" + "AWS::Lambda::MicrovmImage" ], "type": "string" }, @@ -197017,7 +200444,375 @@ ], "type": "object" }, - "AWS::Lambda::Url": { + "AWS::Lambda::MicrovmImage.CloudWatchLogging": { + "additionalProperties": false, + "properties": { + "LogGroup": { + "type": "string" + }, + "LogStream": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::Lambda::MicrovmImage.CodeArtifact": { + "additionalProperties": false, + "properties": { + "Uri": { + "type": "string" + } + }, + "required": [ + "Uri" + ], + "type": "object" + }, + "AWS::Lambda::MicrovmImage.CpuConfiguration": { + "additionalProperties": false, + "properties": { + "Architecture": { + "type": "string" + } + }, + "required": [ + "Architecture" + ], + "type": "object" + }, + "AWS::Lambda::MicrovmImage.EnvironmentVariable": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, + "AWS::Lambda::MicrovmImage.Hooks": { + "additionalProperties": false, + "properties": { + "MicrovmHooks": { + "$ref": "#/definitions/AWS::Lambda::MicrovmImage.MicrovmHooks" + }, + "MicrovmImageHooks": { + "$ref": "#/definitions/AWS::Lambda::MicrovmImage.MicrovmImageHooks" + }, + "Port": { + "type": "number" + } + }, + "type": "object" + }, + "AWS::Lambda::MicrovmImage.Logging": { + "additionalProperties": false, + "properties": { + "CloudWatch": { + "$ref": "#/definitions/AWS::Lambda::MicrovmImage.CloudWatchLogging" + }, + "Disabled": { + "type": "boolean" + } + }, + "type": "object" + }, + "AWS::Lambda::MicrovmImage.MicrovmHooks": { + "additionalProperties": false, + "properties": { + "Resume": { + "type": "string" + }, + "ResumeTimeoutInSeconds": { + "type": "number" + }, + "Run": { + "type": "string" + }, + "RunTimeoutInSeconds": { + "type": "number" + }, + "Suspend": { + "type": "string" + }, + "SuspendTimeoutInSeconds": { + "type": "number" + }, + "Terminate": { + "type": "string" + }, + "TerminateTimeoutInSeconds": { + "type": "number" + } + }, + "type": "object" + }, + "AWS::Lambda::MicrovmImage.MicrovmImageHooks": { + "additionalProperties": false, + "properties": { + "Ready": { + "type": "string" + }, + "ReadyTimeoutInSeconds": { + "type": "number" + }, + "Validate": { + "type": "string" + }, + "ValidateTimeoutInSeconds": { + "type": "number" + } + }, + "type": "object" + }, + "AWS::Lambda::MicrovmImage.Resources": { + "additionalProperties": false, + "properties": { + "MinimumMemoryInMiB": { + "type": "number" + } + }, + "required": [ + "MinimumMemoryInMiB" + ], + "type": "object" + }, + "AWS::Lambda::NetworkConnector": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Configuration": { + "$ref": "#/definitions/AWS::Lambda::NetworkConnector.Config" + }, + "Name": { + "type": "string" + }, + "OperatorRole": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "Configuration" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Lambda::NetworkConnector" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Lambda::NetworkConnector.Config": { + "additionalProperties": false, + "properties": { + "VpcEgressConfiguration": { + "$ref": "#/definitions/AWS::Lambda::NetworkConnector.VpcEgressConfiguration" + } + }, + "required": [ + "VpcEgressConfiguration" + ], + "type": "object" + }, + "AWS::Lambda::NetworkConnector.VpcEgressConfiguration": { + "additionalProperties": false, + "properties": { + "AssociatedComputeResourceTypes": { + "items": { + "type": "string" + }, + "type": "array" + }, + "NetworkProtocol": { + "type": "string" + }, + "SecurityGroupIds": { + "items": { + "type": "string" + }, + "type": "array" + }, + "SubnetIds": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "AssociatedComputeResourceTypes", + "SubnetIds" + ], + "type": "object" + }, + "AWS::Lambda::Permission": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Action": { + "markdownDescription": "The action that the principal can use on the function. For example, `lambda:InvokeFunction` or `lambda:GetFunction` .", + "title": "Action", + "type": "string" + }, + "EventSourceToken": { + "markdownDescription": "For Alexa Smart Home functions, a token that the invoker must supply.", + "title": "EventSourceToken", + "type": "string" + }, + "FunctionName": { + "markdownDescription": "The name or ARN of the Lambda function, version, or alias.\n\n**Name formats** - *Function name* \u2013 `my-function` (name-only), `my-function:v1` (with alias).\n- *Function ARN* \u2013 `arn:aws:lambda:us-west-2:123456789012:function:my-function` .\n- *Partial ARN* \u2013 `123456789012:function:my-function` .\n\nYou can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.", + "title": "FunctionName", + "type": "string" + }, + "FunctionUrlAuthType": { + "markdownDescription": "The type of authentication that your function URL uses. Set to `AWS_IAM` if you want to restrict access to authenticated users only. Set to `NONE` if you want to bypass IAM authentication to create a public endpoint. For more information, see [Control access to Lambda function URLs](https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html) .", + "title": "FunctionUrlAuthType", + "type": "string" + }, + "InvokedViaFunctionUrl": { + "markdownDescription": "Indicates whether the permission applies when the function is invoked through a function URL.", + "title": "InvokedViaFunctionUrl", + "type": "boolean" + }, + "Principal": { + "markdownDescription": "The AWS service , AWS account , IAM user, or IAM role that invokes the function. If you specify a service, use `SourceArn` or `SourceAccount` to limit who can invoke the function through that service.", + "title": "Principal", + "type": "string" + }, + "PrincipalOrgID": { + "markdownDescription": "The identifier for your organization in AWS Organizations . Use this to grant permissions to all the AWS accounts under this organization.", + "title": "PrincipalOrgID", + "type": "string" + }, + "SourceAccount": { + "markdownDescription": "For AWS service , the ID of the AWS account that owns the resource. Use this together with `SourceArn` to ensure that the specified account owns the resource. It is possible for an Amazon S3 bucket to be deleted by its owner and recreated by another account.", + "title": "SourceAccount", + "type": "string" + }, + "SourceArn": { + "markdownDescription": "For AWS services , the ARN of the AWS resource that invokes the function. For example, an Amazon S3 bucket or Amazon SNS topic.\n\nNote that Lambda configures the comparison using the `StringLike` operator.", + "title": "SourceArn", + "type": "string" + } + }, + "required": [ + "Action", + "FunctionName", + "Principal" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Lambda::Permission" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Lambda::Url": { "additionalProperties": false, "properties": { "Condition": { @@ -207672,6 +211467,429 @@ ], "type": "object" }, + "AWS::MSK::Channel": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "ChannelName": { + "type": "string" + }, + "ClusterArn": { + "type": "string" + }, + "EncryptionConfiguration": { + "$ref": "#/definitions/AWS::MSK::Channel.EncryptionConfiguration" + }, + "IcebergDestinationConfiguration": { + "$ref": "#/definitions/AWS::MSK::Channel.IcebergDestinationConfiguration" + }, + "LoggingInfo": { + "$ref": "#/definitions/AWS::MSK::Channel.ChannelLoggingInfo" + }, + "S3DestinationConfiguration": { + "$ref": "#/definitions/AWS::MSK::Channel.S3DestinationConfiguration" + }, + "Tags": { + "additionalProperties": true, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "type": "object" + }, + "TopicConfigurationList": { + "items": { + "$ref": "#/definitions/AWS::MSK::Channel.TopicConfiguration" + }, + "type": "array" + } + }, + "required": [ + "ChannelName", + "TopicConfigurationList" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::MSK::Channel" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::MSK::Channel.Catalog": { + "additionalProperties": false, + "properties": { + "CatalogArn": { + "type": "string" + }, + "WarehouseLocation": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::MSK::Channel.ChannelLoggingInfo": { + "additionalProperties": false, + "properties": { + "CloudWatchLogs": { + "$ref": "#/definitions/AWS::MSK::Channel.CloudWatchLogsLogDestination" + }, + "Firehose": { + "$ref": "#/definitions/AWS::MSK::Channel.FirehoseLogDestination" + }, + "S3": { + "$ref": "#/definitions/AWS::MSK::Channel.S3LogDestination" + } + }, + "type": "object" + }, + "AWS::MSK::Channel.ChannelStateInfo": { + "additionalProperties": false, + "properties": { + "Code": { + "type": "string" + }, + "Message": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::MSK::Channel.CloudWatchLogsLogDestination": { + "additionalProperties": false, + "properties": { + "Enabled": { + "type": "boolean" + }, + "LogGroup": { + "type": "string" + } + }, + "required": [ + "Enabled" + ], + "type": "object" + }, + "AWS::MSK::Channel.DeadLetterQueueS3": { + "additionalProperties": false, + "properties": { + "BucketArn": { + "type": "string" + }, + "ErrorOutputPrefix": { + "type": "string" + }, + "ExpectedBucketOwner": { + "type": "string" + } + }, + "required": [ + "BucketArn", + "ErrorOutputPrefix" + ], + "type": "object" + }, + "AWS::MSK::Channel.DestinationTable": { + "additionalProperties": false, + "properties": { + "DestinationDatabaseName": { + "type": "string" + }, + "DestinationTableName": { + "type": "string" + }, + "PartitionSpec": { + "$ref": "#/definitions/AWS::MSK::Channel.PartitionSpec" + } + }, + "required": [ + "DestinationDatabaseName", + "DestinationTableName" + ], + "type": "object" + }, + "AWS::MSK::Channel.EncryptionConfiguration": { + "additionalProperties": false, + "properties": { + "KmsKeyArn": { + "type": "string" + } + }, + "required": [ + "KmsKeyArn" + ], + "type": "object" + }, + "AWS::MSK::Channel.FirehoseLogDestination": { + "additionalProperties": false, + "properties": { + "DeliveryStream": { + "type": "string" + }, + "Enabled": { + "type": "boolean" + } + }, + "required": [ + "Enabled" + ], + "type": "object" + }, + "AWS::MSK::Channel.IcebergDestinationConfiguration": { + "additionalProperties": false, + "properties": { + "AppendOnly": { + "type": "boolean" + }, + "Catalog": { + "$ref": "#/definitions/AWS::MSK::Channel.Catalog" + }, + "CompressionType": { + "type": "string" + }, + "DataFreshnessInSeconds": { + "type": "number" + }, + "DeadLetterQueueS3": { + "$ref": "#/definitions/AWS::MSK::Channel.DeadLetterQueueS3" + }, + "DestinationTableList": { + "items": { + "$ref": "#/definitions/AWS::MSK::Channel.DestinationTable" + }, + "type": "array" + }, + "SchemaEvolution": { + "$ref": "#/definitions/AWS::MSK::Channel.SchemaEvolution" + }, + "ServiceExecutionRoleArn": { + "type": "string" + }, + "TableCreation": { + "$ref": "#/definitions/AWS::MSK::Channel.TableCreation" + } + }, + "required": [ + "AppendOnly", + "DeadLetterQueueS3", + "DestinationTableList", + "SchemaEvolution", + "ServiceExecutionRoleArn", + "TableCreation" + ], + "type": "object" + }, + "AWS::MSK::Channel.PartitionSource": { + "additionalProperties": false, + "properties": { + "SourceName": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::MSK::Channel.PartitionSpec": { + "additionalProperties": false, + "properties": { + "PartitionStrategy": { + "type": "string" + }, + "SourceList": { + "items": { + "$ref": "#/definitions/AWS::MSK::Channel.PartitionSource" + }, + "type": "array" + } + }, + "required": [ + "PartitionStrategy" + ], + "type": "object" + }, + "AWS::MSK::Channel.RecordConverter": { + "additionalProperties": false, + "properties": { + "ValueConverter": { + "type": "string" + } + }, + "required": [ + "ValueConverter" + ], + "type": "object" + }, + "AWS::MSK::Channel.RecordSchema": { + "additionalProperties": false, + "properties": { + "GsrArn": { + "type": "string" + } + }, + "required": [ + "GsrArn" + ], + "type": "object" + }, + "AWS::MSK::Channel.S3DestinationConfiguration": { + "additionalProperties": false, + "properties": { + "DataFreshnessInSeconds": { + "type": "number" + }, + "DeadLetterQueueS3": { + "$ref": "#/definitions/AWS::MSK::Channel.DeadLetterQueueS3" + }, + "ServiceExecutionRoleArn": { + "type": "string" + }, + "Storage": { + "$ref": "#/definitions/AWS::MSK::Channel.S3Storage" + } + }, + "required": [ + "DeadLetterQueueS3", + "ServiceExecutionRoleArn", + "Storage" + ], + "type": "object" + }, + "AWS::MSK::Channel.S3LogDestination": { + "additionalProperties": false, + "properties": { + "Bucket": { + "type": "string" + }, + "Enabled": { + "type": "boolean" + }, + "Prefix": { + "type": "string" + } + }, + "required": [ + "Enabled" + ], + "type": "object" + }, + "AWS::MSK::Channel.S3Storage": { + "additionalProperties": false, + "properties": { + "BucketArn": { + "type": "string" + }, + "CompressionType": { + "type": "string" + }, + "ExpectedBucketOwner": { + "type": "string" + }, + "OutputKeyTemplate": { + "type": "string" + }, + "OutputPrefix": { + "type": "string" + }, + "StorageClass": { + "type": "string" + } + }, + "required": [ + "BucketArn", + "CompressionType", + "StorageClass" + ], + "type": "object" + }, + "AWS::MSK::Channel.SchemaEvolution": { + "additionalProperties": false, + "properties": { + "EnableSchemaEvolution": { + "type": "boolean" + } + }, + "required": [ + "EnableSchemaEvolution" + ], + "type": "object" + }, + "AWS::MSK::Channel.TableCreation": { + "additionalProperties": false, + "properties": { + "EnableTableCreation": { + "type": "boolean" + } + }, + "required": [ + "EnableTableCreation" + ], + "type": "object" + }, + "AWS::MSK::Channel.TopicConfiguration": { + "additionalProperties": false, + "properties": { + "RecordConverter": { + "$ref": "#/definitions/AWS::MSK::Channel.RecordConverter" + }, + "RecordSchema": { + "$ref": "#/definitions/AWS::MSK::Channel.RecordSchema" + }, + "TopicArn": { + "type": "string" + } + }, + "required": [ + "RecordConverter", + "TopicArn" + ], + "type": "object" + }, "AWS::MSK::Cluster": { "additionalProperties": false, "properties": { @@ -208777,13 +212995,13 @@ "AWS::MSK::Replicator.KafkaClusterClientAuthentication": { "additionalProperties": false, "properties": { + "MTLS": { + "$ref": "#/definitions/AWS::MSK::Replicator.KafkaClusterMtlsAuthentication" + }, "SaslScram": { "$ref": "#/definitions/AWS::MSK::Replicator.KafkaClusterSaslScramAuthentication" } }, - "required": [ - "SaslScram" - ], "type": "object" }, "AWS::MSK::Replicator.KafkaClusterClientVpcConfig": { @@ -208826,6 +213044,18 @@ ], "type": "object" }, + "AWS::MSK::Replicator.KafkaClusterMtlsAuthentication": { + "additionalProperties": false, + "properties": { + "SecretArn": { + "type": "string" + } + }, + "required": [ + "SecretArn" + ], + "type": "object" + }, "AWS::MSK::Replicator.KafkaClusterSaslScramAuthentication": { "additionalProperties": false, "properties": { @@ -213055,6 +217285,9 @@ "markdownDescription": "", "title": "Configuration" }, + "ContentQualityAnalysisConfiguration": { + "$ref": "#/definitions/AWS::MediaConnect::RouterInput.RouterContentQualityAnalysisConfiguration" + }, "MaintenanceConfiguration": { "$ref": "#/definitions/AWS::MediaConnect::RouterInput.MaintenanceConfiguration", "markdownDescription": "The maintenance configuration settings applied to this router input.", @@ -213129,6 +217362,37 @@ ], "type": "object" }, + "AWS::MediaConnect::RouterInput.BlackFramesConfiguration": { + "additionalProperties": false, + "properties": { + "State": { + "type": "string" + }, + "ThresholdSeconds": { + "type": "number" + } + }, + "required": [ + "State", + "ThresholdSeconds" + ], + "type": "object" + }, + "AWS::MediaConnect::RouterInput.ContentQualityAnalysisFeatureConfiguration": { + "additionalProperties": false, + "properties": { + "BlackFrames": { + "$ref": "#/definitions/AWS::MediaConnect::RouterInput.BlackFramesConfiguration" + }, + "FrozenFrames": { + "$ref": "#/definitions/AWS::MediaConnect::RouterInput.FrozenFramesConfiguration" + }, + "SilentAudio": { + "$ref": "#/definitions/AWS::MediaConnect::RouterInput.SilentAudioConfiguration" + } + }, + "type": "object" + }, "AWS::MediaConnect::RouterInput.FailoverRouterInputConfiguration": { "additionalProperties": false, "properties": { @@ -213224,6 +217488,22 @@ }, "type": "object" }, + "AWS::MediaConnect::RouterInput.FrozenFramesConfiguration": { + "additionalProperties": false, + "properties": { + "State": { + "type": "string" + }, + "ThresholdSeconds": { + "type": "number" + } + }, + "required": [ + "State", + "ThresholdSeconds" + ], + "type": "object" + }, "AWS::MediaConnect::RouterInput.MaintenanceConfiguration": { "additionalProperties": false, "properties": { @@ -213397,6 +217677,18 @@ ], "type": "object" }, + "AWS::MediaConnect::RouterInput.RouterContentQualityAnalysisConfiguration": { + "additionalProperties": false, + "properties": { + "ContentLevel": { + "$ref": "#/definitions/AWS::MediaConnect::RouterInput.ContentQualityAnalysisFeatureConfiguration" + } + }, + "required": [ + "ContentLevel" + ], + "type": "object" + }, "AWS::MediaConnect::RouterInput.RouterInputConfiguration": { "additionalProperties": false, "properties": { @@ -213526,6 +217818,22 @@ ], "type": "object" }, + "AWS::MediaConnect::RouterInput.SilentAudioConfiguration": { + "additionalProperties": false, + "properties": { + "State": { + "type": "string" + }, + "ThresholdSeconds": { + "type": "number" + } + }, + "required": [ + "State", + "ThresholdSeconds" + ], + "type": "object" + }, "AWS::MediaConnect::RouterInput.SrtCallerRouterInputConfiguration": { "additionalProperties": false, "properties": { @@ -222161,6 +226469,125 @@ }, "type": "object" }, + "AWS::MediaLive::Node": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "ClusterId": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "NodeInterfaceMappings": { + "items": { + "$ref": "#/definitions/AWS::MediaLive::Node.NodeInterfaceMapping" + }, + "type": "array" + }, + "Role": { + "type": "string" + }, + "SdiSourceMappings": { + "items": { + "$ref": "#/definitions/AWS::MediaLive::Node.SdiSourceMapping" + }, + "type": "array" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "ClusterId" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::MediaLive::Node" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::MediaLive::Node.NodeInterfaceMapping": { + "additionalProperties": false, + "properties": { + "LogicalInterfaceName": { + "type": "string" + }, + "NetworkInterfaceMode": { + "type": "string" + }, + "PhysicalInterfaceName": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::MediaLive::Node.SdiSourceMapping": { + "additionalProperties": false, + "properties": { + "CardNumber": { + "type": "number" + }, + "ChannelNumber": { + "type": "number" + }, + "SdiSource": { + "type": "string" + } + }, + "type": "object" + }, "AWS::MediaLive::SdiSource": { "additionalProperties": false, "properties": { @@ -230007,6 +234434,125 @@ ], "type": "object" }, + "AWS::NetworkFlowMonitor::Monitor": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "LocalResources": { + "items": { + "$ref": "#/definitions/AWS::NetworkFlowMonitor::Monitor.MonitorLocalResource" + }, + "type": "array" + }, + "MonitorName": { + "type": "string" + }, + "RemoteResources": { + "items": { + "$ref": "#/definitions/AWS::NetworkFlowMonitor::Monitor.MonitorRemoteResource" + }, + "type": "array" + }, + "ScopeArn": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "LocalResources", + "MonitorName" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::NetworkFlowMonitor::Monitor" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::NetworkFlowMonitor::Monitor.MonitorLocalResource": { + "additionalProperties": false, + "properties": { + "Identifier": { + "type": "string" + }, + "Type": { + "type": "string" + } + }, + "required": [ + "Identifier", + "Type" + ], + "type": "object" + }, + "AWS::NetworkFlowMonitor::Monitor.MonitorRemoteResource": { + "additionalProperties": false, + "properties": { + "Identifier": { + "type": "string" + }, + "Type": { + "type": "string" + } + }, + "required": [ + "Identifier", + "Type" + ], + "type": "object" + }, "AWS::NetworkManager::ConnectAttachment": { "additionalProperties": false, "properties": { @@ -237856,6 +242402,45 @@ ], "type": "object" }, + "AWS::OpenSearchServerless::Index.Analysis": { + "additionalProperties": false, + "properties": { + "Analyzer": { + "additionalProperties": false, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "$ref": "#/definitions/AWS::OpenSearchServerless::Index.AnalyzerItems" + } + }, + "type": "object" + } + }, + "type": "object" + }, + "AWS::OpenSearchServerless::Index.AnalyzerItems": { + "additionalProperties": false, + "properties": { + "CharFilter": { + "items": { + "type": "string" + }, + "type": "array" + }, + "Filter": { + "items": { + "type": "string" + }, + "type": "array" + }, + "Tokenizer": { + "type": "string" + }, + "Type": { + "type": "string" + } + }, + "type": "object" + }, "AWS::OpenSearchServerless::Index.Index": { "additionalProperties": false, "properties": { @@ -237880,6 +242465,9 @@ "AWS::OpenSearchServerless::Index.IndexSettings": { "additionalProperties": false, "properties": { + "Analysis": { + "$ref": "#/definitions/AWS::OpenSearchServerless::Index.Analysis" + }, "Index": { "$ref": "#/definitions/AWS::OpenSearchServerless::Index.Index", "markdownDescription": "Index settings.", @@ -237953,6 +242541,15 @@ "AWS::OpenSearchServerless::Index.PropertyMapping": { "additionalProperties": false, "properties": { + "Analyzer": { + "type": "string" + }, + "CompressionLevel": { + "type": "string" + }, + "DataType": { + "type": "string" + }, "Dimension": { "markdownDescription": "Dimension size for vector fields, defines the number of dimensions in the vector.", "title": "Dimension", @@ -237979,6 +242576,9 @@ "title": "Properties", "type": "object" }, + "SpaceType": { + "type": "string" + }, "Type": { "markdownDescription": "The field data type. Must be a valid OpenSearch field type.", "title": "Type", @@ -238691,6 +243291,9 @@ "markdownDescription": "Whether the domain should encrypt data at rest, and if so, the AWS key to use. See [Encryption of data at rest for Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/encryption-at-rest.html) .\n\nIf no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property.", "title": "EncryptionAtRestOptions" }, + "EngineMode": { + "type": "string" + }, "EngineVersion": { "markdownDescription": "The version of OpenSearch to use. The value must be in the format `OpenSearch_X.Y` or `Elasticsearch_X.Y` . If not specified, the latest version of OpenSearch is used. For information about the versions that OpenSearch Service supports, see [Supported versions of OpenSearch and Elasticsearch](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/what-is.html#choosing-version) in the *Amazon OpenSearch Service Developer Guide* .\n\nIf you set the [EnableVersionUpgrade](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatepolicy.html#cfn-attributes-updatepolicy-upgradeopensearchdomain) update policy to `true` , you can update `EngineVersion` without interruption. When `EnableVersionUpgrade` is set to `false` , or is not specified, updating `EngineVersion` results in [replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) .", "title": "EngineVersion", @@ -238750,6 +243353,9 @@ "title": "Tags", "type": "array" }, + "UseCase": { + "type": "string" + }, "VPCOptions": { "$ref": "#/definitions/AWS::OpenSearchService::Domain.VPCOptions", "markdownDescription": "The virtual private cloud (VPC) configuration for the OpenSearch Service domain. For more information, see [Launching your Amazon OpenSearch Service domains within a VPC](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/vpc.html) in the *Amazon OpenSearch Service Developer Guide* .\n\nIf you remove this entity altogether, along with its associated properties, it causes a replacement. You might encounter this scenario if you're updating your security configuration from a VPC to a public endpoint.", @@ -241059,17 +245665,197 @@ "Properties": { "additionalProperties": false, "properties": { - "FeatureSet": { - "markdownDescription": "Specifies the feature set supported by the new organization. Each feature set supports different levels of functionality.\n\n- `ALL` In addition to all the features supported by the consolidated billing feature set, the management account gains access to advanced features that give you more control over accounts in your organization. For more information, see [All features](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#feature-set-all) in the *AWS Organizations User Guide* .\n- `CONSOLIDATED_BILLING` All member accounts have their bills consolidated to and paid by the management account. For more information, see [Consolidated billing](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#feature-set-cb-only) in the *AWS Organizations User Guide* .\n\n> The consolidated billing feature feature set isn't available for organizations in the AWS GovCloud (US) Region.\n\nIf you don't specify this property, the default value is `ALL` .", - "title": "FeatureSet", + "FeatureSet": { + "markdownDescription": "Specifies the feature set supported by the new organization. Each feature set supports different levels of functionality.\n\n- `ALL` In addition to all the features supported by the consolidated billing feature set, the management account gains access to advanced features that give you more control over accounts in your organization. For more information, see [All features](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#feature-set-all) in the *AWS Organizations User Guide* .\n- `CONSOLIDATED_BILLING` All member accounts have their bills consolidated to and paid by the management account. For more information, see [Consolidated billing](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#feature-set-cb-only) in the *AWS Organizations User Guide* .\n\n> The consolidated billing feature feature set isn't available for organizations in the AWS GovCloud (US) Region.\n\nIf you don't specify this property, the default value is `ALL` .", + "title": "FeatureSet", + "type": "string" + } + }, + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Organizations::Organization" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type" + ], + "type": "object" + }, + "AWS::Organizations::OrganizationalUnit": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Name": { + "markdownDescription": "The friendly name of this OU.\n\nThe [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) that is used to validate this parameter is a string of any of the characters in the ASCII character range.", + "title": "Name", + "type": "string" + }, + "ParentId": { + "markdownDescription": "The unique identifier (ID) of the parent root or OU that you want to create the new OU in.\n\n> To update the `ParentId` parameter value, you must first remove all accounts attached to the organizational unit (OU). OUs can't be moved within the organization with accounts still attached. \n\nThe [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) for a parent ID string requires one of the following:\n\n- *Root* - A string that begins with \"r-\" followed by from 4 to 32 lowercase letters or digits.\n- *Organizational unit (OU)* - A string that begins with \"ou-\" followed by from 4 to 32 lowercase letters or digits (the ID of the root that the OU is in). This string is followed by a second \"-\" dash and from 8 to 32 additional lowercase letters or digits.", + "title": "ParentId", + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "A list of tags that you want to attach to the newly created OU. For each tag in the list, you must specify both a tag key and a value. You can set the value to an empty string, but you can't set it to `null` . For more information about tagging, see [Tagging AWS Organizations resources](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html) in the AWS Organizations User Guide.\n\n> If any one of the tags is not valid or if you exceed the allowed number of tags for an OU, then the entire request fails and the OU is not created.", + "title": "Tags", + "type": "array" + } + }, + "required": [ + "Name", + "ParentId" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Organizations::OrganizationalUnit" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::Organizations::Policy": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Content": { + "markdownDescription": "The policy text content. You can specify the policy content as a JSON object or a JSON string.\n\n> When you specify the policy content as a JSON string, you can't perform drift detection on the CloudFormation stack. For this reason, we recommend specifying the policy content as a JSON object instead. \n\nThe text that you supply must adhere to the rules of the policy type you specify in the `Type` parameter. The following AWS Organizations quotas are enforced for the maximum size of a policy document:\n\n- Service control policies: 5,120 characters\n- Resource control policies: 5,120 characters\n- Declarative policies: 10,000 characters\n- Backup policies: 10,000 characters\n- Tag policies: 10,000 characters\n- Chat applications policies: 10,000 characters\n- AI services opt-out policies: 2,500 characters\n- Security Hub policies: 10,000 characters\n- Amazon Inspector policies: 10,000 characters\n- Amazon Bedrock policies: 10,000 characters\n- Upgrade rollout policies: 10,000 characters\n\nFor more information about Organizations service quotas, see [Quotas for AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html) in the *AWS Organizations User Guide* .", + "title": "Content", + "type": "object" + }, + "Description": { + "markdownDescription": "Human readable description of the policy.", + "title": "Description", + "type": "string" + }, + "Name": { + "markdownDescription": "Name of the policy.\n\nThe [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) that is used to validate this parameter is a string of any of the characters in the ASCII character range.", + "title": "Name", + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "A list of tags that you want to attach to the newly created policy. For each tag in the list, you must specify both a tag key and a value. You can set the value to an empty string, but you can't set it to `null` . For more information about tagging, see [Tagging AWS Organizations resources](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html) in the AWS Organizations User Guide.\n\n> If any one of the tags is not valid or if you exceed the allowed number of tags for a policy, then the entire request fails and the policy is not created.", + "title": "Tags", + "type": "array" + }, + "TargetIds": { + "items": { + "type": "string" + }, + "markdownDescription": "List of unique identifiers (IDs) of the root, OU, or account that you want to attach the policy to. You can get the ID by calling the [ListRoots](https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListRoots.html) , [ListOrganizationalUnitsForParent](https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListOrganizationalUnitsForParent.html) , or [ListAccounts](https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListAccounts.html) operations. If you don't specify this parameter, the policy is created but not attached to any organization resource.\n\nThe [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) for a target ID string requires one of the following:\n\n- *Root* - A string that begins with \"r-\" followed by from 4 to 32 lowercase letters or digits.\n- *Account* - A string that consists of exactly 12 digits.\n- *Organizational unit (OU)* - A string that begins with \"ou-\" followed by from 4 to 32 lowercase letters or digits (the ID of the root that the OU is in). This string is followed by a second \"-\" dash and from 8 to 32 additional lowercase letters or digits.", + "title": "TargetIds", + "type": "array" + }, + "Type": { + "markdownDescription": "The type of policy to create.", + "title": "Type", "type": "string" } }, + "required": [ + "Content", + "Name", + "Type" + ], "type": "object" }, "Type": { "enum": [ - "AWS::Organizations::Organization" + "AWS::Organizations::Policy" ], "type": "string" }, @@ -241083,11 +245869,12 @@ } }, "required": [ - "Type" + "Type", + "Properties" ], "type": "object" }, - "AWS::Organizations::OrganizationalUnit": { + "AWS::Organizations::ResourcePolicy": { "additionalProperties": false, "properties": { "Condition": { @@ -241122,34 +245909,28 @@ "Properties": { "additionalProperties": false, "properties": { - "Name": { - "markdownDescription": "The friendly name of this OU.\n\nThe [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) that is used to validate this parameter is a string of any of the characters in the ASCII character range.", - "title": "Name", - "type": "string" - }, - "ParentId": { - "markdownDescription": "The unique identifier (ID) of the parent root or OU that you want to create the new OU in.\n\n> To update the `ParentId` parameter value, you must first remove all accounts attached to the organizational unit (OU). OUs can't be moved within the organization with accounts still attached. \n\nThe [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) for a parent ID string requires one of the following:\n\n- *Root* - A string that begins with \"r-\" followed by from 4 to 32 lowercase letters or digits.\n- *Organizational unit (OU)* - A string that begins with \"ou-\" followed by from 4 to 32 lowercase letters or digits (the ID of the root that the OU is in). This string is followed by a second \"-\" dash and from 8 to 32 additional lowercase letters or digits.", - "title": "ParentId", - "type": "string" + "Content": { + "markdownDescription": "The policy text of the organization resource policy. You can specify the resource policy content as a JSON object or a JSON string.\n\n> When you specify the resource policy content as a JSON string, you can't perform drift detection on the CloudFormation stack. For this reason, we recommend specifying the resource policy content as a JSON object instead.", + "title": "Content", + "type": "object" }, "Tags": { "items": { "$ref": "#/definitions/Tag" }, - "markdownDescription": "A list of tags that you want to attach to the newly created OU. For each tag in the list, you must specify both a tag key and a value. You can set the value to an empty string, but you can't set it to `null` . For more information about tagging, see [Tagging AWS Organizations resources](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html) in the AWS Organizations User Guide.\n\n> If any one of the tags is not valid or if you exceed the allowed number of tags for an OU, then the entire request fails and the OU is not created.", + "markdownDescription": "A list of tags that you want to attach to the newly created resource policy. For each tag in the list, you must specify both a tag key and a value. You can set the value to an empty string, but you can't set it to `null` . For more information about tagging, see [Tagging AWS Organizations resources](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html) in the *AWS Organizations User Guide* .\n\n> If any one of the tags is not valid or if you exceed the allowed number of tags for the resource policy, then the entire request fails and the resource policy is not created.", "title": "Tags", "type": "array" } }, "required": [ - "Name", - "ParentId" + "Content" ], "type": "object" }, "Type": { "enum": [ - "AWS::Organizations::OrganizationalUnit" + "AWS::Organizations::ResourcePolicy" ], "type": "string" }, @@ -241168,7 +245949,7 @@ ], "type": "object" }, - "AWS::Organizations::Policy": { + "AWS::Outposts::Site": { "additionalProperties": false, "properties": { "Condition": { @@ -241203,53 +245984,39 @@ "Properties": { "additionalProperties": false, "properties": { - "Content": { - "markdownDescription": "The policy text content. You can specify the policy content as a JSON object or a JSON string.\n\n> When you specify the policy content as a JSON string, you can't perform drift detection on the CloudFormation stack. For this reason, we recommend specifying the policy content as a JSON object instead. \n\nThe text that you supply must adhere to the rules of the policy type you specify in the `Type` parameter. The following AWS Organizations quotas are enforced for the maximum size of a policy document:\n\n- Service control policies: 5,120 characters\n- Resource control policies: 5,120 characters\n- Declarative policies: 10,000 characters\n- Backup policies: 10,000 characters\n- Tag policies: 10,000 characters\n- Chat applications policies: 10,000 characters\n- AI services opt-out policies: 2,500 characters\n- Security Hub policies: 10,000 characters\n- Amazon Inspector policies: 10,000 characters\n- Amazon Bedrock policies: 10,000 characters\n- Upgrade rollout policies: 10,000 characters\n\nFor more information about Organizations service quotas, see [Quotas for AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html) in the *AWS Organizations User Guide* .", - "title": "Content", - "type": "object" - }, "Description": { - "markdownDescription": "Human readable description of the policy.", - "title": "Description", "type": "string" }, "Name": { - "markdownDescription": "Name of the policy.\n\nThe [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) that is used to validate this parameter is a string of any of the characters in the ASCII character range.", - "title": "Name", "type": "string" }, + "Notes": { + "type": "string" + }, + "OperatingAddress": { + "$ref": "#/definitions/AWS::Outposts::Site.Address" + }, + "RackPhysicalProperties": { + "$ref": "#/definitions/AWS::Outposts::Site.RackPhysicalProperties" + }, + "ShippingAddress": { + "$ref": "#/definitions/AWS::Outposts::Site.Address" + }, "Tags": { "items": { "$ref": "#/definitions/Tag" }, - "markdownDescription": "A list of tags that you want to attach to the newly created policy. For each tag in the list, you must specify both a tag key and a value. You can set the value to an empty string, but you can't set it to `null` . For more information about tagging, see [Tagging AWS Organizations resources](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html) in the AWS Organizations User Guide.\n\n> If any one of the tags is not valid or if you exceed the allowed number of tags for a policy, then the entire request fails and the policy is not created.", - "title": "Tags", - "type": "array" - }, - "TargetIds": { - "items": { - "type": "string" - }, - "markdownDescription": "List of unique identifiers (IDs) of the root, OU, or account that you want to attach the policy to. You can get the ID by calling the [ListRoots](https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListRoots.html) , [ListOrganizationalUnitsForParent](https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListOrganizationalUnitsForParent.html) , or [ListAccounts](https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListAccounts.html) operations. If you don't specify this parameter, the policy is created but not attached to any organization resource.\n\nThe [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) for a target ID string requires one of the following:\n\n- *Root* - A string that begins with \"r-\" followed by from 4 to 32 lowercase letters or digits.\n- *Account* - A string that consists of exactly 12 digits.\n- *Organizational unit (OU)* - A string that begins with \"ou-\" followed by from 4 to 32 lowercase letters or digits (the ID of the root that the OU is in). This string is followed by a second \"-\" dash and from 8 to 32 additional lowercase letters or digits.", - "title": "TargetIds", "type": "array" - }, - "Type": { - "markdownDescription": "The type of policy to create.", - "title": "Type", - "type": "string" } }, "required": [ - "Content", - "Name", - "Type" + "Name" ], "type": "object" }, "Type": { "enum": [ - "AWS::Organizations::Policy" + "AWS::Outposts::Site" ], "type": "string" }, @@ -241268,81 +246035,87 @@ ], "type": "object" }, - "AWS::Organizations::ResourcePolicy": { + "AWS::Outposts::Site.Address": { "additionalProperties": false, "properties": { - "Condition": { + "AddressLine1": { "type": "string" }, - "DeletionPolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], + "AddressLine2": { "type": "string" }, - "DependsOn": { - "anyOf": [ - { - "pattern": "^[a-zA-Z0-9]+$", - "type": "string" - }, - { - "items": { - "pattern": "^[a-zA-Z0-9]+$", - "type": "string" - }, - "type": "array" - } - ] + "AddressLine3": { + "type": "string" }, - "Metadata": { - "type": "object" + "City": { + "type": "string" }, - "Properties": { - "additionalProperties": false, - "properties": { - "Content": { - "markdownDescription": "The policy text of the organization resource policy. You can specify the resource policy content as a JSON object or a JSON string.\n\n> When you specify the resource policy content as a JSON string, you can't perform drift detection on the CloudFormation stack. For this reason, we recommend specifying the resource policy content as a JSON object instead.", - "title": "Content", - "type": "object" - }, - "Tags": { - "items": { - "$ref": "#/definitions/Tag" - }, - "markdownDescription": "A list of tags that you want to attach to the newly created resource policy. For each tag in the list, you must specify both a tag key and a value. You can set the value to an empty string, but you can't set it to `null` . For more information about tagging, see [Tagging AWS Organizations resources](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html) in the *AWS Organizations User Guide* .\n\n> If any one of the tags is not valid or if you exceed the allowed number of tags for the resource policy, then the entire request fails and the resource policy is not created.", - "title": "Tags", - "type": "array" - } - }, - "required": [ - "Content" - ], - "type": "object" + "ContactName": { + "type": "string" }, - "Type": { - "enum": [ - "AWS::Organizations::ResourcePolicy" - ], + "ContactPhoneNumber": { "type": "string" }, - "UpdateReplacePolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], + "CountryCode": { + "type": "string" + }, + "DistrictOrCounty": { + "type": "string" + }, + "Municipality": { + "type": "string" + }, + "PostalCode": { + "type": "string" + }, + "StateOrRegion": { "type": "string" } }, "required": [ - "Type", - "Properties" + "AddressLine1", + "City", + "ContactName", + "ContactPhoneNumber", + "CountryCode", + "PostalCode", + "StateOrRegion" ], "type": "object" }, + "AWS::Outposts::Site.RackPhysicalProperties": { + "additionalProperties": false, + "properties": { + "FiberOpticCableType": { + "type": "string" + }, + "MaximumSupportedWeightLbs": { + "type": "string" + }, + "OpticalStandard": { + "type": "string" + }, + "PowerConnector": { + "type": "string" + }, + "PowerDrawKva": { + "type": "string" + }, + "PowerFeedDrop": { + "type": "string" + }, + "PowerPhase": { + "type": "string" + }, + "UplinkCount": { + "type": "string" + }, + "UplinkGbps": { + "type": "string" + } + }, + "type": "object" + }, "AWS::PCAConnectorAD::Connector": { "additionalProperties": false, "properties": { @@ -243410,6 +248183,9 @@ "title": "Name", "type": "string" }, + "NodeLifecycleActions": { + "$ref": "#/definitions/AWS::PCS::ComputeNodeGroup.NodeLifecycleActions" + }, "PurchaseOption": { "markdownDescription": "Specifies how EC2 instances are purchased on your behalf. AWS PCS supports On-Demand Instances, Spot Instances, and Amazon EC2 Capacity Blocks for ML. For more information, see [Amazon EC2 billing and purchasing options](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-purchasing-options.html) in the *Amazon Elastic Compute Cloud User Guide* . For more information about AWS PCS support for Capacity Blocks, see [Using Amazon EC2 Capacity Blocks for ML with AWS PCS](https://docs.aws.amazon.com/pcs/latest/userguide/capacity-blocks.html) in the *AWS PCS User Guide* . If you don't provide this option, it defaults to On-Demand.", "title": "PurchaseOption", @@ -243527,6 +248303,67 @@ }, "type": "object" }, + "AWS::PCS::ComputeNodeGroup.NodeLifecycleActions": { + "additionalProperties": false, + "properties": { + "ScriptCachingPolicy": { + "type": "string" + }, + "Stages": { + "$ref": "#/definitions/AWS::PCS::ComputeNodeGroup.NodeLifecycleStages" + } + }, + "required": [ + "Stages" + ], + "type": "object" + }, + "AWS::PCS::ComputeNodeGroup.NodeLifecycleScript": { + "additionalProperties": false, + "properties": { + "Arguments": { + "items": { + "type": "string" + }, + "type": "array" + }, + "ExecutionPolicy": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "OnError": { + "type": "string" + }, + "ScriptSource": { + "$ref": "#/definitions/AWS::PCS::ComputeNodeGroup.ScriptSource" + } + }, + "required": [ + "Name", + "ScriptSource" + ], + "type": "object" + }, + "AWS::PCS::ComputeNodeGroup.NodeLifecycleStages": { + "additionalProperties": false, + "properties": { + "NodeBootstrapped": { + "items": { + "$ref": "#/definitions/AWS::PCS::ComputeNodeGroup.NodeLifecycleScript" + }, + "type": "array" + }, + "NodeReady": { + "items": { + "$ref": "#/definitions/AWS::PCS::ComputeNodeGroup.NodeLifecycleScript" + }, + "type": "array" + } + }, + "type": "object" + }, "AWS::PCS::ComputeNodeGroup.ScalingConfiguration": { "additionalProperties": false, "properties": { @@ -243547,6 +248384,24 @@ ], "type": "object" }, + "AWS::PCS::ComputeNodeGroup.ScriptSource": { + "additionalProperties": false, + "properties": { + "Checksum": { + "type": "string" + }, + "S3VersionId": { + "type": "string" + }, + "ScriptLocation": { + "type": "string" + } + }, + "required": [ + "ScriptLocation" + ], + "type": "object" + }, "AWS::PCS::ComputeNodeGroup.SlurmConfiguration": { "additionalProperties": false, "properties": { @@ -252902,6 +257757,220 @@ ], "type": "object" }, + "AWS::QuickSight::Agent": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "ActionConnectors": { + "items": { + "type": "string" + }, + "type": "array" + }, + "AgentId": { + "type": "string" + }, + "AgentLifecycle": { + "type": "string" + }, + "AwsAccountId": { + "type": "string" + }, + "CustomPromptInput": { + "$ref": "#/definitions/AWS::QuickSight::Agent.CustomPromptInput" + }, + "Description": { + "type": "string" + }, + "IconId": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "Spaces": { + "items": { + "type": "string" + }, + "type": "array" + }, + "StarterPrompts": { + "items": { + "type": "string" + }, + "type": "array" + }, + "Tags": { + "items": { + "$ref": "#/definitions/AWS::QuickSight::Agent.AgentTag" + }, + "type": "array" + }, + "WelcomeMessage": { + "type": "string" + } + }, + "required": [ + "AgentId", + "AwsAccountId", + "Name" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::QuickSight::Agent" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::QuickSight::Agent.AgentTag": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, + "AWS::QuickSight::Agent.CustomPromptInput": { + "additionalProperties": false, + "properties": { + "ExistingPrompt": { + "$ref": "#/definitions/AWS::QuickSight::Agent.CustomPromptProfile" + }, + "NewPrompt": { + "$ref": "#/definitions/AWS::QuickSight::Agent.CustomPromptInputParameters" + } + }, + "type": "object" + }, + "AWS::QuickSight::Agent.CustomPromptInputParameters": { + "additionalProperties": false, + "properties": { + "CustomInstructions": { + "type": "string" + }, + "Identity": { + "type": "string" + }, + "OutputStyle": { + "type": "string" + }, + "ResponseLength": { + "type": "string" + }, + "Tone": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::QuickSight::Agent.CustomPromptInterface": { + "additionalProperties": false, + "properties": { + "CustomInstructions": { + "type": "string" + }, + "Identity": { + "type": "string" + }, + "ModelProfileId": { + "type": "string" + }, + "OutputStyle": { + "type": "string" + }, + "PromptSummary": { + "type": "string" + }, + "QbsAwsAccountId": { + "type": "string" + }, + "ResponseLength": { + "type": "string" + }, + "SubscriptionId": { + "type": "string" + }, + "Tone": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::QuickSight::Agent.CustomPromptProfile": { + "additionalProperties": false, + "properties": { + "ModelProfileId": { + "type": "string" + }, + "QbsAwsAccountId": { + "type": "string" + }, + "SubscriptionId": { + "type": "string" + } + }, + "required": [ + "ModelProfileId", + "QbsAwsAccountId", + "SubscriptionId" + ], + "type": "object" + }, "AWS::QuickSight::Analysis": { "additionalProperties": false, "properties": { @@ -285857,6 +290926,123 @@ ], "type": "object" }, + "AWS::QuickSight::Flow": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "AwsAccountId": { + "type": "string" + }, + "Description": { + "type": "string" + }, + "FlowDefinition": { + "type": "object" + }, + "Name": { + "type": "string" + }, + "Permissions": { + "items": { + "$ref": "#/definitions/AWS::QuickSight::Flow.Permission" + }, + "type": "array" + } + }, + "required": [ + "AwsAccountId", + "FlowDefinition", + "Name" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::QuickSight::Flow" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::QuickSight::Flow.Permission": { + "additionalProperties": false, + "properties": { + "Actions": { + "items": { + "type": "string" + }, + "type": "array" + }, + "Principal": { + "type": "string" + } + }, + "required": [ + "Actions", + "Principal" + ], + "type": "object" + }, + "AWS::QuickSight::Flow.StepAliasMapping": { + "additionalProperties": false, + "properties": { + "StepAlias": { + "type": "string" + }, + "StepId": { + "type": "string" + } + }, + "required": [ + "StepAlias", + "StepId" + ], + "type": "object" + }, "AWS::QuickSight::Folder": { "additionalProperties": false, "properties": { @@ -285893,57 +291079,187 @@ "additionalProperties": false, "properties": { "AwsAccountId": { - "markdownDescription": "The ID for the AWS account where you want to create the folder.", - "title": "AwsAccountId", + "markdownDescription": "The ID for the AWS account where you want to create the folder.", + "title": "AwsAccountId", + "type": "string" + }, + "FolderId": { + "markdownDescription": "The ID of the folder.", + "title": "FolderId", + "type": "string" + }, + "FolderType": { + "markdownDescription": "The type of folder it is.", + "title": "FolderType", + "type": "string" + }, + "Name": { + "markdownDescription": "A display name for the folder.", + "title": "Name", + "type": "string" + }, + "ParentFolderArn": { + "markdownDescription": "The Amazon Resource Name (ARN) for the folder.", + "title": "ParentFolderArn", + "type": "string" + }, + "Permissions": { + "items": { + "$ref": "#/definitions/AWS::QuickSight::Folder.ResourcePermission" + }, + "markdownDescription": "A structure that describes the principals and the resource-level permissions of a folder.\n\nTo specify no permissions, omit `Permissions` .", + "title": "Permissions", + "type": "array" + }, + "SharingModel": { + "markdownDescription": "The sharing scope of the folder.", + "title": "SharingModel", + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "A list of tags for the folders that you want to apply overrides to.", + "title": "Tags", + "type": "array" + } + }, + "type": "object" + }, + "Type": { + "enum": [ + "AWS::QuickSight::Folder" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type" + ], + "type": "object" + }, + "AWS::QuickSight::Folder.ResourcePermission": { + "additionalProperties": false, + "properties": { + "Actions": { + "items": { + "type": "string" + }, + "markdownDescription": "", + "title": "Actions", + "type": "array" + }, + "Principal": { + "markdownDescription": "", + "title": "Principal", + "type": "string" + } + }, + "required": [ + "Actions", + "Principal" + ], + "type": "object" + }, + "AWS::QuickSight::KnowledgeBase": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "AccessControlConfiguration": { + "$ref": "#/definitions/AWS::QuickSight::KnowledgeBase.AccessControlConfiguration" + }, + "AwsAccountId": { "type": "string" }, - "FolderId": { - "markdownDescription": "The ID of the folder.", - "title": "FolderId", + "DataSourceArn": { "type": "string" }, - "FolderType": { - "markdownDescription": "The type of folder it is.", - "title": "FolderType", + "Description": { "type": "string" }, - "Name": { - "markdownDescription": "A display name for the folder.", - "title": "Name", + "IsEmailNotificationOptedForIngestionFailures": { + "type": "boolean" + }, + "KnowledgeBaseConfiguration": { + "$ref": "#/definitions/AWS::QuickSight::KnowledgeBase.KnowledgeBaseConfiguration" + }, + "KnowledgeBaseId": { "type": "string" }, - "ParentFolderArn": { - "markdownDescription": "The Amazon Resource Name (ARN) for the folder.", - "title": "ParentFolderArn", + "MediaExtractionConfiguration": { + "$ref": "#/definitions/AWS::QuickSight::KnowledgeBase.MediaExtractionConfiguration" + }, + "Name": { "type": "string" }, "Permissions": { "items": { - "$ref": "#/definitions/AWS::QuickSight::Folder.ResourcePermission" + "$ref": "#/definitions/AWS::QuickSight::KnowledgeBase.ResourcePermission" }, - "markdownDescription": "A structure that describes the principals and the resource-level permissions of a folder.\n\nTo specify no permissions, omit `Permissions` .", - "title": "Permissions", "type": "array" }, - "SharingModel": { - "markdownDescription": "The sharing scope of the folder.", - "title": "SharingModel", + "PrimaryOwnerArn": { "type": "string" }, "Tags": { "items": { "$ref": "#/definitions/Tag" }, - "markdownDescription": "A list of tags for the folders that you want to apply overrides to.", - "title": "Tags", "type": "array" } }, + "required": [ + "AwsAccountId", + "DataSourceArn", + "KnowledgeBaseConfiguration", + "KnowledgeBaseId", + "Name" + ], "type": "object" }, "Type": { "enum": [ - "AWS::QuickSight::Folder" + "AWS::QuickSight::KnowledgeBase" ], "type": "string" }, @@ -285957,24 +291273,90 @@ } }, "required": [ - "Type" + "Type", + "Properties" ], "type": "object" }, - "AWS::QuickSight::Folder.ResourcePermission": { + "AWS::QuickSight::KnowledgeBase.AccessControlConfiguration": { + "additionalProperties": false, + "properties": { + "IsACLEnabled": { + "type": "boolean" + } + }, + "type": "object" + }, + "AWS::QuickSight::KnowledgeBase.AudioExtractionConfiguration": { + "additionalProperties": false, + "properties": { + "AudioExtractionStatus": { + "type": "string" + } + }, + "required": [ + "AudioExtractionStatus" + ], + "type": "object" + }, + "AWS::QuickSight::KnowledgeBase.ImageExtractionConfiguration": { + "additionalProperties": false, + "properties": { + "ImageExtractionStatus": { + "type": "string" + } + }, + "required": [ + "ImageExtractionStatus" + ], + "type": "object" + }, + "AWS::QuickSight::KnowledgeBase.KbTemplateConfiguration": { + "additionalProperties": false, + "properties": { + "Template": { + "type": "object" + } + }, + "type": "object" + }, + "AWS::QuickSight::KnowledgeBase.KnowledgeBaseConfiguration": { + "additionalProperties": false, + "properties": { + "TemplateConfiguration": { + "$ref": "#/definitions/AWS::QuickSight::KnowledgeBase.KbTemplateConfiguration" + } + }, + "type": "object" + }, + "AWS::QuickSight::KnowledgeBase.MediaExtractionConfiguration": { + "additionalProperties": false, + "properties": { + "AudioExtractionConfiguration": { + "$ref": "#/definitions/AWS::QuickSight::KnowledgeBase.AudioExtractionConfiguration" + }, + "ImageExtractionConfiguration": { + "$ref": "#/definitions/AWS::QuickSight::KnowledgeBase.ImageExtractionConfiguration" + }, + "VideoExtractionConfiguration": { + "$ref": "#/definitions/AWS::QuickSight::KnowledgeBase.VideoExtractionConfiguration" + } + }, + "type": "object" + }, + "AWS::QuickSight::KnowledgeBase.ResourcePermission": { "additionalProperties": false, "properties": { "Actions": { "items": { "type": "string" }, - "markdownDescription": "", - "title": "Actions", "type": "array" }, "Principal": { - "markdownDescription": "", - "title": "Principal", + "type": "string" + }, + "Resource": { "type": "string" } }, @@ -285984,6 +291366,134 @@ ], "type": "object" }, + "AWS::QuickSight::KnowledgeBase.VideoExtractionConfiguration": { + "additionalProperties": false, + "properties": { + "VideoExtractionStatus": { + "type": "string" + }, + "VideoExtractionType": { + "type": "string" + } + }, + "required": [ + "VideoExtractionStatus" + ], + "type": "object" + }, + "AWS::QuickSight::OAuthClientApplication": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "ClientId": { + "type": "string" + }, + "ClientSecret": { + "type": "string" + }, + "DataSourceType": { + "type": "string" + }, + "IdentityProviderVpcConnectionProperties": { + "$ref": "#/definitions/AWS::QuickSight::OAuthClientApplication.IdentityProviderVpcConnectionProperties" + }, + "Name": { + "type": "string" + }, + "OAuthAuthorizationEndpointUrl": { + "type": "string" + }, + "OAuthClientApplicationId": { + "type": "string" + }, + "OAuthClientAuthenticationType": { + "type": "string" + }, + "OAuthScopes": { + "type": "string" + }, + "OAuthTokenEndpointUrl": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "Name", + "OAuthClientApplicationId", + "OAuthClientAuthenticationType", + "OAuthTokenEndpointUrl" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::QuickSight::OAuthClientApplication" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::QuickSight::OAuthClientApplication.IdentityProviderVpcConnectionProperties": { + "additionalProperties": false, + "properties": { + "VpcConnectionArn": { + "type": "string" + } + }, + "required": [ + "VpcConnectionArn" + ], + "type": "object" + }, "AWS::QuickSight::RefreshSchedule": { "additionalProperties": false, "properties": { @@ -286125,6 +291635,135 @@ }, "type": "object" }, + "AWS::QuickSight::Space": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "AwsAccountId": { + "type": "string" + }, + "Description": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "Permissions": { + "items": { + "$ref": "#/definitions/AWS::QuickSight::Space.ResourcePermission" + }, + "type": "array" + }, + "Resources": { + "items": { + "$ref": "#/definitions/AWS::QuickSight::Space.SpaceResource" + }, + "type": "array" + }, + "SpaceId": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "AwsAccountId", + "Name", + "SpaceId" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::QuickSight::Space" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::QuickSight::Space.ResourcePermission": { + "additionalProperties": false, + "properties": { + "Actions": { + "items": { + "type": "string" + }, + "type": "array" + }, + "Principal": { + "type": "string" + } + }, + "required": [ + "Actions", + "Principal" + ], + "type": "object" + }, + "AWS::QuickSight::Space.SpaceResource": { + "additionalProperties": false, + "properties": { + "ResourceArn": { + "type": "string" + }, + "ResourceType": { + "type": "string" + } + }, + "required": [ + "ResourceArn", + "ResourceType" + ], + "type": "object" + }, "AWS::QuickSight::Template": { "additionalProperties": false, "properties": { @@ -309881,6 +315520,9 @@ "Name": { "type": "string" }, + "SharingEnabled": { + "type": "boolean" + }, "Tags": { "items": { "$ref": "#/definitions/Tag" @@ -314772,6 +320414,9 @@ "markdownDescription": "The DNS query type you want the rule to evaluate. Allowed values are;\n\n- A: Returns an IPv4 address.\n- AAAA: Returns an Ipv6 address.\n- CAA: Restricts CAs that can create SSL/TLS certifications for the domain.\n- CNAME: Returns another domain name.\n- DS: Record that identifies the DNSSEC signing key of a delegated zone.\n- MX: Specifies mail servers.\n- NAPTR: Regular-expression-based rewriting of domain names.\n- NS: Authoritative name servers.\n- PTR: Maps an IP address to a domain name.\n- SOA: Start of authority record for the zone.\n- SPF: Lists the servers authorized to send emails from a domain.\n- SRV: Application specific values that identify servers.\n- TXT: Verifies email senders and application-specific values.\n- A query type you define by using the DNS type ID, for example 28 for AAAA. The values must be defined as TYPE NUMBER , where the NUMBER can be 1-65334, for example, TYPE28. For more information, see [List of DNS record types](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/List_of_DNS_record_types) .", "title": "Qtype", "type": "string" + }, + "Status": { + "type": "string" } }, "required": [ @@ -314788,10 +320433,25 @@ }, "FirewallAdvancedThreatCategory": { "$ref": "#/definitions/AWS::Route53Resolver::FirewallRuleGroup.FirewallAdvancedThreatCategoryConfig" + }, + "PartnerThreatProtection": { + "$ref": "#/definitions/AWS::Route53Resolver::FirewallRuleGroup.PartnerThreatProtectionConfig" } }, "type": "object" }, + "AWS::Route53Resolver::FirewallRuleGroup.PartnerThreatProtectionConfig": { + "additionalProperties": false, + "properties": { + "Partner": { + "type": "string" + } + }, + "required": [ + "Partner" + ], + "type": "object" + }, "AWS::Route53Resolver::FirewallRuleGroupAssociation": { "additionalProperties": false, "properties": { @@ -321653,120 +327313,386 @@ "Properties": { "additionalProperties": false, "properties": { - "EncryptionConfiguration": { - "$ref": "#/definitions/AWS::S3Vectors::VectorBucket.EncryptionConfiguration", - "markdownDescription": "The encryption configuration for the vector bucket.", - "title": "EncryptionConfiguration" - }, - "Tags": { - "items": { - "$ref": "#/definitions/Tag" - }, - "type": "array" + "EncryptionConfiguration": { + "$ref": "#/definitions/AWS::S3Vectors::VectorBucket.EncryptionConfiguration", + "markdownDescription": "The encryption configuration for the vector bucket.", + "title": "EncryptionConfiguration" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + }, + "VectorBucketName": { + "markdownDescription": "A name for the vector bucket. The bucket name must contain only lowercase letters, numbers, and hyphens (-). The bucket name must be unique in the same AWS account for each AWS Region. If you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID for the bucket name.\n\nThe bucket name must be between 3 and 63 characters long and must not contain uppercase characters or underscores.\n\n> If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you need to replace the resource, specify a new name.", + "title": "VectorBucketName", + "type": "string" + } + }, + "type": "object" + }, + "Type": { + "enum": [ + "AWS::S3Vectors::VectorBucket" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type" + ], + "type": "object" + }, + "AWS::S3Vectors::VectorBucket.EncryptionConfiguration": { + "additionalProperties": false, + "properties": { + "KmsKeyArn": { + "markdownDescription": "AWS Key Management Service (KMS) customer managed key ARN to use for the encryption configuration. This parameter is required if and only if `SseType` is set to `aws:kms` .\n\nYou must specify the full ARN of the KMS key. Key IDs or key aliases aren't supported.\n\n> Amazon S3 Vectors only supports symmetric encryption KMS keys. For more information, see [Asymmetric keys in AWS KMS](https://docs.aws.amazon.com//kms/latest/developerguide/symmetric-asymmetric.html) in the *AWS Key Management Service Developer Guide* .", + "title": "KmsKeyArn", + "type": "string" + }, + "SseType": { + "markdownDescription": "The server-side encryption type to use for the encryption configuration of the vector bucket. Valid values are `AES256` for Amazon S3 managed keys and `aws:kms` for AWS KMS keys.", + "title": "SseType", + "type": "string" + } + }, + "type": "object" + }, + "AWS::S3Vectors::VectorBucketPolicy": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Policy": { + "markdownDescription": "A policy document containing permissions to add to the specified vector bucket. In IAM , you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM .", + "title": "Policy", + "type": "object" + }, + "VectorBucketArn": { + "markdownDescription": "The Amazon Resource Name (ARN) of the S3 vector bucket to which the policy applies.", + "title": "VectorBucketArn", + "type": "string" + }, + "VectorBucketName": { + "markdownDescription": "The name of the S3 vector bucket to which the policy applies.", + "title": "VectorBucketName", + "type": "string" + } + }, + "required": [ + "Policy" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::S3Vectors::VectorBucketPolicy" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::SCN::Dataset": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Description": { + "type": "string" + }, + "InstanceId": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "Namespace": { + "type": "string" + }, + "PartitionSpec": { + "$ref": "#/definitions/AWS::SCN::Dataset.PartitionSpec" + }, + "Schema": { + "$ref": "#/definitions/AWS::SCN::Dataset.Schema" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "InstanceId", + "Name", + "Namespace" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SCN::Dataset" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::SCN::Dataset.DataLakeDatasetPartitionField": { + "additionalProperties": false, + "properties": { + "Name": { + "type": "string" + }, + "Transform": { + "$ref": "#/definitions/AWS::SCN::Dataset.Transform" + } + }, + "required": [ + "Name", + "Transform" + ], + "type": "object" + }, + "AWS::SCN::Dataset.DataLakeDatasetPrimaryKeyField": { + "additionalProperties": false, + "properties": { + "Name": { + "type": "string" + } + }, + "required": [ + "Name" + ], + "type": "object" + }, + "AWS::SCN::Dataset.DataLakeDatasetSchemaField": { + "additionalProperties": false, + "properties": { + "IsRequired": { + "type": "boolean" + }, + "Name": { + "type": "string" + }, + "Type": { + "type": "string" + } + }, + "required": [ + "IsRequired", + "Name", + "Type" + ], + "type": "object" + }, + "AWS::SCN::Dataset.PartitionSpec": { + "additionalProperties": false, + "properties": { + "Fields": { + "items": { + "$ref": "#/definitions/AWS::SCN::Dataset.DataLakeDatasetPartitionField" + }, + "type": "array" + } + }, + "required": [ + "Fields" + ], + "type": "object" + }, + "AWS::SCN::Dataset.Schema": { + "additionalProperties": false, + "properties": { + "Fields": { + "items": { + "$ref": "#/definitions/AWS::SCN::Dataset.DataLakeDatasetSchemaField" + }, + "type": "array" + }, + "Name": { + "type": "string" + }, + "PrimaryKeys": { + "items": { + "$ref": "#/definitions/AWS::SCN::Dataset.DataLakeDatasetPrimaryKeyField" + }, + "type": "array" + } + }, + "required": [ + "Fields", + "Name" + ], + "type": "object" + }, + "AWS::SCN::Dataset.Transform": { + "additionalProperties": false, + "properties": { + "Type": { + "type": "string" + } + }, + "required": [ + "Type" + ], + "type": "object" + }, + "AWS::SCN::Namespace": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Description": { + "type": "string" }, - "VectorBucketName": { - "markdownDescription": "A name for the vector bucket. The bucket name must contain only lowercase letters, numbers, and hyphens (-). The bucket name must be unique in the same AWS account for each AWS Region. If you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID for the bucket name.\n\nThe bucket name must be between 3 and 63 characters long and must not contain uppercase characters or underscores.\n\n> If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you need to replace the resource, specify a new name.", - "title": "VectorBucketName", + "InstanceId": { "type": "string" - } - }, - "type": "object" - }, - "Type": { - "enum": [ - "AWS::S3Vectors::VectorBucket" - ], - "type": "string" - }, - "UpdateReplacePolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], - "type": "string" - } - }, - "required": [ - "Type" - ], - "type": "object" - }, - "AWS::S3Vectors::VectorBucket.EncryptionConfiguration": { - "additionalProperties": false, - "properties": { - "KmsKeyArn": { - "markdownDescription": "AWS Key Management Service (KMS) customer managed key ARN to use for the encryption configuration. This parameter is required if and only if `SseType` is set to `aws:kms` .\n\nYou must specify the full ARN of the KMS key. Key IDs or key aliases aren't supported.\n\n> Amazon S3 Vectors only supports symmetric encryption KMS keys. For more information, see [Asymmetric keys in AWS KMS](https://docs.aws.amazon.com//kms/latest/developerguide/symmetric-asymmetric.html) in the *AWS Key Management Service Developer Guide* .", - "title": "KmsKeyArn", - "type": "string" - }, - "SseType": { - "markdownDescription": "The server-side encryption type to use for the encryption configuration of the vector bucket. Valid values are `AES256` for Amazon S3 managed keys and `aws:kms` for AWS KMS keys.", - "title": "SseType", - "type": "string" - } - }, - "type": "object" - }, - "AWS::S3Vectors::VectorBucketPolicy": { - "additionalProperties": false, - "properties": { - "Condition": { - "type": "string" - }, - "DeletionPolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], - "type": "string" - }, - "DependsOn": { - "anyOf": [ - { - "pattern": "^[a-zA-Z0-9]+$", + }, + "Name": { "type": "string" }, - { + "Tags": { "items": { - "pattern": "^[a-zA-Z0-9]+$", - "type": "string" + "$ref": "#/definitions/Tag" }, "type": "array" } - ] - }, - "Metadata": { - "type": "object" - }, - "Properties": { - "additionalProperties": false, - "properties": { - "Policy": { - "markdownDescription": "A policy document containing permissions to add to the specified vector bucket. In IAM , you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM .", - "title": "Policy", - "type": "object" - }, - "VectorBucketArn": { - "markdownDescription": "The Amazon Resource Name (ARN) of the S3 vector bucket to which the policy applies.", - "title": "VectorBucketArn", - "type": "string" - }, - "VectorBucketName": { - "markdownDescription": "The name of the S3 vector bucket to which the policy applies.", - "title": "VectorBucketName", - "type": "string" - } }, "required": [ - "Policy" + "InstanceId", + "Name" ], "type": "object" }, "Type": { "enum": [ - "AWS::S3Vectors::VectorBucketPolicy" + "AWS::SCN::Namespace" ], "type": "string" }, @@ -326312,6 +332238,77 @@ }, "type": "object" }, + "AWS::SMSVOICE::Registration": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "RegistrationType": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "RegistrationType" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SMSVOICE::Registration" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, "AWS::SMSVOICE::ResourcePolicy": { "additionalProperties": false, "properties": { @@ -328200,6 +334197,94 @@ }, "type": "object" }, + "AWS::SSM::OpsItem": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Category": { + "type": "string" + }, + "Description": { + "type": "string" + }, + "Priority": { + "type": "number" + }, + "Severity": { + "type": "string" + }, + "Source": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + }, + "Title": { + "type": "string" + } + }, + "required": [ + "Description", + "Source", + "Title" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SSM::OpsItem" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, "AWS::SSM::Parameter": { "additionalProperties": false, "properties": { @@ -330888,75 +336973,327 @@ "Properties": { "additionalProperties": false, "properties": { - "CustomerManagedPolicyReferences": { - "items": { - "$ref": "#/definitions/AWS::SSO::PermissionSet.CustomerManagedPolicyReference" - }, - "markdownDescription": "Specifies the names and paths of the customer managed policies that you have attached to your permission set.", - "title": "CustomerManagedPolicyReferences", - "type": "array" - }, - "Description": { - "markdownDescription": "The description of the `PermissionSet` .", - "title": "Description", - "type": "string" - }, - "InlinePolicy": { - "markdownDescription": "The inline policy that is attached to the permission set.\n\n> For `Length Constraints` , if a valid ARN is provided for a permission set, it is possible for an empty inline policy to be returned.", - "title": "InlinePolicy", - "type": "object" - }, - "InstanceArn": { - "markdownDescription": "The ARN of the instance under which the operation will be executed. For more information about ARNs, see [Amazon Resource Names (ARNs) and AWS Service Namespaces](https://docs.aws.amazon.com//general/latest/gr/aws-arns-and-namespaces.html) in the *AWS General Reference* .", - "title": "InstanceArn", + "CustomerManagedPolicyReferences": { + "items": { + "$ref": "#/definitions/AWS::SSO::PermissionSet.CustomerManagedPolicyReference" + }, + "markdownDescription": "Specifies the names and paths of the customer managed policies that you have attached to your permission set.", + "title": "CustomerManagedPolicyReferences", + "type": "array" + }, + "Description": { + "markdownDescription": "The description of the `PermissionSet` .", + "title": "Description", + "type": "string" + }, + "InlinePolicy": { + "markdownDescription": "The inline policy that is attached to the permission set.\n\n> For `Length Constraints` , if a valid ARN is provided for a permission set, it is possible for an empty inline policy to be returned.", + "title": "InlinePolicy", + "type": "object" + }, + "InstanceArn": { + "markdownDescription": "The ARN of the instance under which the operation will be executed. For more information about ARNs, see [Amazon Resource Names (ARNs) and AWS Service Namespaces](https://docs.aws.amazon.com//general/latest/gr/aws-arns-and-namespaces.html) in the *AWS General Reference* .", + "title": "InstanceArn", + "type": "string" + }, + "ManagedPolicies": { + "items": { + "type": "string" + }, + "markdownDescription": "A structure that stores a list of managed policy ARNs that describe the associated AWS managed policy.", + "title": "ManagedPolicies", + "type": "array" + }, + "Name": { + "markdownDescription": "The name of the permission set.", + "title": "Name", + "type": "string" + }, + "PermissionsBoundary": { + "$ref": "#/definitions/AWS::SSO::PermissionSet.PermissionsBoundary", + "markdownDescription": "Specifies the configuration of the AWS managed or customer managed policy that you want to set as a permissions boundary. Specify either `CustomerManagedPolicyReference` to use the name and path of a customer managed policy, or `ManagedPolicyArn` to use the ARN of an AWS managed policy. A permissions boundary represents the maximum permissions that any policy can grant your role. For more information, see [Permissions boundaries for IAM entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html) in the *IAM User Guide* .\n\n> Policies used as permissions boundaries don't provide permissions. You must also attach an IAM policy to the role. To learn how the effective permissions for a role are evaluated, see [IAM JSON policy evaluation logic](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html) in the *IAM User Guide* .", + "title": "PermissionsBoundary" + }, + "RelayStateType": { + "markdownDescription": "Used to redirect users within the application during the federation authentication process.", + "title": "RelayStateType", + "type": "string" + }, + "SessionDuration": { + "markdownDescription": "The length of time that the application user sessions are valid for in the ISO-8601 standard.", + "title": "SessionDuration", + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "The tags to attach to the new `PermissionSet` .", + "title": "Tags", + "type": "array" + } + }, + "required": [ + "InstanceArn", + "Name" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SSO::PermissionSet" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::SSO::PermissionSet.CustomerManagedPolicyReference": { + "additionalProperties": false, + "properties": { + "Name": { + "markdownDescription": "The name of the IAM policy that you have configured in each account where you want to deploy your permission set.", + "title": "Name", + "type": "string" + }, + "Path": { + "markdownDescription": "The path to the IAM policy that you have configured in each account where you want to deploy your permission set. The default is `/` . For more information, see [Friendly names and paths](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names) in the *IAM User Guide* .", + "title": "Path", + "type": "string" + } + }, + "required": [ + "Name" + ], + "type": "object" + }, + "AWS::SSO::PermissionSet.PermissionsBoundary": { + "additionalProperties": false, + "properties": { + "CustomerManagedPolicyReference": { + "$ref": "#/definitions/AWS::SSO::PermissionSet.CustomerManagedPolicyReference", + "markdownDescription": "Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each AWS account where you want to deploy your permission set.", + "title": "CustomerManagedPolicyReference" + }, + "ManagedPolicyArn": { + "markdownDescription": "The AWS managed policy ARN that you want to attach to a permission set as a permissions boundary.", + "title": "ManagedPolicyArn", + "type": "string" + } + }, + "type": "object" + }, + "AWS::SageMaker::Action": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "ActionName": { + "type": "string" + }, + "ActionType": { + "type": "string" + }, + "Description": { + "type": "string" + }, + "MetadataProperties": { + "$ref": "#/definitions/AWS::SageMaker::Action.MetadataProperties" + }, + "Properties": { + "additionalProperties": true, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "type": "object" + }, + "Source": { + "$ref": "#/definitions/AWS::SageMaker::Action.ActionSource" + }, + "Status": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "ActionName", + "ActionType", + "Source" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SageMaker::Action" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::SageMaker::Action.ActionSource": { + "additionalProperties": false, + "properties": { + "SourceId": { + "type": "string" + }, + "SourceType": { + "type": "string" + }, + "SourceUri": { + "type": "string" + } + }, + "required": [ + "SourceUri" + ], + "type": "object" + }, + "AWS::SageMaker::Action.MetadataProperties": { + "additionalProperties": false, + "properties": { + "CommitId": { + "type": "string" + }, + "GeneratedBy": { + "type": "string" + }, + "ProjectId": { + "type": "string" + }, + "Repository": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::SageMaker::Algorithm": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "AlgorithmDescription": { "type": "string" }, - "ManagedPolicies": { - "items": { - "type": "string" - }, - "markdownDescription": "A structure that stores a list of managed policy ARNs that describe the associated AWS managed policy.", - "title": "ManagedPolicies", - "type": "array" - }, - "Name": { - "markdownDescription": "The name of the permission set.", - "title": "Name", + "AlgorithmName": { "type": "string" }, - "PermissionsBoundary": { - "$ref": "#/definitions/AWS::SSO::PermissionSet.PermissionsBoundary", - "markdownDescription": "Specifies the configuration of the AWS managed or customer managed policy that you want to set as a permissions boundary. Specify either `CustomerManagedPolicyReference` to use the name and path of a customer managed policy, or `ManagedPolicyArn` to use the ARN of an AWS managed policy. A permissions boundary represents the maximum permissions that any policy can grant your role. For more information, see [Permissions boundaries for IAM entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html) in the *IAM User Guide* .\n\n> Policies used as permissions boundaries don't provide permissions. You must also attach an IAM policy to the role. To learn how the effective permissions for a role are evaluated, see [IAM JSON policy evaluation logic](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html) in the *IAM User Guide* .", - "title": "PermissionsBoundary" - }, - "RelayStateType": { - "markdownDescription": "Used to redirect users within the application during the federation authentication process.", - "title": "RelayStateType", - "type": "string" + "CertifyForMarketplace": { + "type": "boolean" }, - "SessionDuration": { - "markdownDescription": "The length of time that the application user sessions are valid for in the ISO-8601 standard.", - "title": "SessionDuration", - "type": "string" + "InferenceSpecification": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.InferenceSpecification" }, "Tags": { "items": { "$ref": "#/definitions/Tag" }, - "markdownDescription": "The tags to attach to the new `PermissionSet` .", - "title": "Tags", "type": "array" + }, + "TrainingSpecification": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.TrainingSpecification" } }, "required": [ - "InstanceArn", - "Name" + "AlgorithmName", + "TrainingSpecification" ], "type": "object" }, "Type": { "enum": [ - "AWS::SSO::PermissionSet" + "AWS::SageMaker::Algorithm" ], "type": "string" }, @@ -330975,39 +337312,310 @@ ], "type": "object" }, - "AWS::SSO::PermissionSet.CustomerManagedPolicyReference": { + "AWS::SageMaker::Algorithm.CategoricalParameterRangeSpecification": { + "additionalProperties": false, + "properties": { + "Values": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "Values" + ], + "type": "object" + }, + "AWS::SageMaker::Algorithm.ChannelSpecification": { "additionalProperties": false, "properties": { + "Description": { + "type": "string" + }, + "IsRequired": { + "type": "boolean" + }, "Name": { - "markdownDescription": "The name of the IAM policy that you have configured in each account where you want to deploy your permission set.", - "title": "Name", "type": "string" }, - "Path": { - "markdownDescription": "The path to the IAM policy that you have configured in each account where you want to deploy your permission set. The default is `/` . For more information, see [Friendly names and paths](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names) in the *IAM User Guide* .", - "title": "Path", + "SupportedCompressionTypes": { + "items": { + "type": "string" + }, + "type": "array" + }, + "SupportedContentTypes": { + "items": { + "type": "string" + }, + "type": "array" + }, + "SupportedInputModes": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "Name", + "SupportedContentTypes", + "SupportedInputModes" + ], + "type": "object" + }, + "AWS::SageMaker::Algorithm.ContinuousParameterRangeSpecification": { + "additionalProperties": false, + "properties": { + "MaxValue": { + "type": "string" + }, + "MinValue": { "type": "string" } }, "required": [ - "Name" + "MaxValue", + "MinValue" ], "type": "object" }, - "AWS::SSO::PermissionSet.PermissionsBoundary": { + "AWS::SageMaker::Algorithm.HyperParameterSpecification": { "additionalProperties": false, "properties": { - "CustomerManagedPolicyReference": { - "$ref": "#/definitions/AWS::SSO::PermissionSet.CustomerManagedPolicyReference", - "markdownDescription": "Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each AWS account where you want to deploy your permission set.", - "title": "CustomerManagedPolicyReference" + "DefaultValue": { + "type": "string" }, - "ManagedPolicyArn": { - "markdownDescription": "The AWS managed policy ARN that you want to attach to a permission set as a permissions boundary.", - "title": "ManagedPolicyArn", + "Description": { + "type": "string" + }, + "IsRequired": { + "type": "boolean" + }, + "IsTunable": { + "type": "boolean" + }, + "Name": { + "type": "string" + }, + "Range": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.ParameterRange" + }, + "Type": { + "type": "string" + } + }, + "required": [ + "Name", + "Type" + ], + "type": "object" + }, + "AWS::SageMaker::Algorithm.HyperParameterTuningJobObjective": { + "additionalProperties": false, + "properties": { + "MetricName": { + "type": "string" + }, + "Type": { + "type": "string" + } + }, + "required": [ + "MetricName", + "Type" + ], + "type": "object" + }, + "AWS::SageMaker::Algorithm.InferenceSpecification": { + "additionalProperties": false, + "properties": { + "Containers": { + "items": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.ModelPackageContainerDefinition" + }, + "type": "array" + }, + "SupportedContentTypes": { + "items": { + "type": "string" + }, + "type": "array" + }, + "SupportedRealtimeInferenceInstanceTypes": { + "items": { + "type": "string" + }, + "type": "array" + }, + "SupportedResponseMIMETypes": { + "items": { + "type": "string" + }, + "type": "array" + }, + "SupportedTransformInstanceTypes": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "Containers" + ], + "type": "object" + }, + "AWS::SageMaker::Algorithm.IntegerParameterRangeSpecification": { + "additionalProperties": false, + "properties": { + "MaxValue": { + "type": "string" + }, + "MinValue": { + "type": "string" + } + }, + "required": [ + "MaxValue", + "MinValue" + ], + "type": "object" + }, + "AWS::SageMaker::Algorithm.MetricDefinition": { + "additionalProperties": false, + "properties": { + "Name": { + "type": "string" + }, + "Regex": { + "type": "string" + } + }, + "required": [ + "Name", + "Regex" + ], + "type": "object" + }, + "AWS::SageMaker::Algorithm.ModelInput": { + "additionalProperties": false, + "properties": { + "DataInputConfig": { + "type": "string" + } + }, + "required": [ + "DataInputConfig" + ], + "type": "object" + }, + "AWS::SageMaker::Algorithm.ModelPackageContainerDefinition": { + "additionalProperties": false, + "properties": { + "ContainerHostname": { + "type": "string" + }, + "Environment": { + "additionalProperties": true, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "type": "object" + }, + "Framework": { + "type": "string" + }, + "FrameworkVersion": { + "type": "string" + }, + "Image": { + "type": "string" + }, + "ImageDigest": { + "type": "string" + }, + "IsCheckpoint": { + "type": "boolean" + }, + "ModelInput": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.ModelInput" + }, + "NearestModelName": { + "type": "string" + } + }, + "required": [ + "Image" + ], + "type": "object" + }, + "AWS::SageMaker::Algorithm.ParameterRange": { + "additionalProperties": false, + "properties": { + "CategoricalParameterRangeSpecification": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.CategoricalParameterRangeSpecification" + }, + "ContinuousParameterRangeSpecification": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.ContinuousParameterRangeSpecification" + }, + "IntegerParameterRangeSpecification": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.IntegerParameterRangeSpecification" + } + }, + "type": "object" + }, + "AWS::SageMaker::Algorithm.TrainingSpecification": { + "additionalProperties": false, + "properties": { + "MetricDefinitions": { + "items": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.MetricDefinition" + }, + "type": "array" + }, + "SupportedHyperParameters": { + "items": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.HyperParameterSpecification" + }, + "type": "array" + }, + "SupportedTrainingInstanceTypes": { + "items": { + "type": "string" + }, + "type": "array" + }, + "SupportedTuningJobObjectiveMetrics": { + "items": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.HyperParameterTuningJobObjective" + }, + "type": "array" + }, + "SupportsDistributedTraining": { + "type": "boolean" + }, + "TrainingChannels": { + "items": { + "$ref": "#/definitions/AWS::SageMaker::Algorithm.ChannelSpecification" + }, + "type": "array" + }, + "TrainingImage": { + "type": "string" + }, + "TrainingImageDigest": { "type": "string" } }, + "required": [ + "SupportedTrainingInstanceTypes", + "TrainingChannels", + "TrainingImage" + ], "type": "object" }, "AWS::SageMaker::App": { @@ -331502,6 +338110,24 @@ ], "type": "object" }, + "AWS::SageMaker::Cluster.AutoPatchConfig": { + "additionalProperties": false, + "properties": { + "DeploymentConfig": { + "$ref": "#/definitions/AWS::SageMaker::Cluster.DeploymentConfig" + }, + "PatchSchedule": { + "$ref": "#/definitions/AWS::SageMaker::Cluster.PatchSchedule" + }, + "PatchingStrategy": { + "type": "string" + } + }, + "required": [ + "PatchingStrategy" + ], + "type": "object" + }, "AWS::SageMaker::Cluster.CapacitySizeConfig": { "additionalProperties": false, "properties": { @@ -331615,6 +338241,9 @@ "AWS::SageMaker::Cluster.ClusterInstanceGroup": { "additionalProperties": false, "properties": { + "AutoPatchConfig": { + "$ref": "#/definitions/AWS::SageMaker::Cluster.AutoPatchConfig" + }, "CapacityRequirements": { "$ref": "#/definitions/AWS::SageMaker::Cluster.ClusterCapacityRequirements", "markdownDescription": "", @@ -332014,6 +338643,15 @@ }, "type": "object" }, + "AWS::SageMaker::Cluster.PatchSchedule": { + "additionalProperties": false, + "properties": { + "NextPatchDate": { + "type": "string" + } + }, + "type": "object" + }, "AWS::SageMaker::Cluster.RestrictedInstanceGroupsConfig": { "additionalProperties": false, "properties": { @@ -332228,6 +338866,131 @@ ], "type": "object" }, + "AWS::SageMaker::Context": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "ContextName": { + "type": "string" + }, + "ContextType": { + "type": "string" + }, + "Description": { + "type": "string" + }, + "Properties": { + "additionalProperties": true, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "type": "object" + }, + "Source": { + "$ref": "#/definitions/AWS::SageMaker::Context.Source" + }, + "Tags": { + "items": { + "$ref": "#/definitions/AWS::SageMaker::Context.TagsItems" + }, + "type": "array" + } + }, + "required": [ + "ContextName", + "ContextType", + "Source" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SageMaker::Context" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::SageMaker::Context.Source": { + "additionalProperties": false, + "properties": { + "SourceId": { + "type": "string" + }, + "SourceType": { + "type": "string" + }, + "SourceUri": { + "type": "string" + } + }, + "required": [ + "SourceUri" + ], + "type": "object" + }, + "AWS::SageMaker::Context.TagsItems": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, "AWS::SageMaker::DataQualityJobDefinition": { "additionalProperties": false, "properties": { @@ -333891,11 +340654,6 @@ "title": "EndpointConfigName", "type": "string" }, - "EndpointName": { - "markdownDescription": "The name of the endpoint. The name must be unique within an AWS Region in your AWS account. The name is case-insensitive in `CreateEndpoint` , but the case is preserved and must be matched in [](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_runtime_InvokeEndpoint.html) .", - "title": "EndpointName", - "type": "string" - }, "ExcludeRetainedVariantProperties": { "items": { "$ref": "#/definitions/AWS::SageMaker::Endpoint.VariantProperty" @@ -334767,6 +341525,231 @@ ], "type": "object" }, + "AWS::SageMaker::Experiment": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Description": { + "type": "string" + }, + "DisplayName": { + "type": "string" + }, + "ExperimentName": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/AWS::SageMaker::Experiment.TagsItems" + }, + "type": "array" + } + }, + "required": [ + "ExperimentName" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SageMaker::Experiment" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::SageMaker::Experiment.TagsItems": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, + "AWS::SageMaker::ExperimentTrialComponent": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "DisplayName": { + "type": "string" + }, + "EndTime": { + "type": "string" + }, + "MetadataProperties": { + "$ref": "#/definitions/AWS::SageMaker::ExperimentTrialComponent.MetadataProperties" + }, + "StartTime": { + "type": "string" + }, + "Status": { + "$ref": "#/definitions/AWS::SageMaker::ExperimentTrialComponent.Status" + }, + "Tags": { + "items": { + "$ref": "#/definitions/AWS::SageMaker::ExperimentTrialComponent.TagsItems" + }, + "type": "array" + }, + "TrialComponentName": { + "type": "string" + } + }, + "required": [ + "TrialComponentName" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SageMaker::ExperimentTrialComponent" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::SageMaker::ExperimentTrialComponent.MetadataProperties": { + "additionalProperties": false, + "properties": { + "CommitId": { + "type": "string" + }, + "GeneratedBy": { + "type": "string" + }, + "ProjectId": { + "type": "string" + }, + "Repository": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::SageMaker::ExperimentTrialComponent.Status": { + "additionalProperties": false, + "properties": { + "Message": { + "type": "string" + }, + "PrimaryStatus": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::SageMaker::ExperimentTrialComponent.TagsItems": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, "AWS::SageMaker::FeatureGroup": { "additionalProperties": false, "properties": { @@ -334802,74 +341785,332 @@ "Properties": { "additionalProperties": false, "properties": { - "Description": { - "markdownDescription": "A free form description of a `FeatureGroup` .", - "title": "Description", + "Description": { + "markdownDescription": "A free form description of a `FeatureGroup` .", + "title": "Description", + "type": "string" + }, + "EventTimeFeatureName": { + "markdownDescription": "The name of the feature that stores the `EventTime` of a Record in a `FeatureGroup` .\n\nA `EventTime` is point in time when a new event occurs that corresponds to the creation or update of a `Record` in `FeatureGroup` . All `Records` in the `FeatureGroup` must have a corresponding `EventTime` .", + "title": "EventTimeFeatureName", + "type": "string" + }, + "FeatureDefinitions": { + "items": { + "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.FeatureDefinition" + }, + "markdownDescription": "A list of `Feature` s. Each `Feature` must include a `FeatureName` and a `FeatureType` .\n\nValid `FeatureType` s are `Integral` , `Fractional` and `String` .\n\n`FeatureName` s cannot be any of the following: `is_deleted` , `write_time` , `api_invocation_time` .\n\nYou can create up to 2,500 `FeatureDefinition` s per `FeatureGroup` .", + "title": "FeatureDefinitions", + "type": "array" + }, + "FeatureGroupName": { + "markdownDescription": "The name of the `FeatureGroup` .", + "title": "FeatureGroupName", + "type": "string" + }, + "OfflineStoreConfig": { + "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.OfflineStoreConfig", + "markdownDescription": "The configuration of an `OfflineStore` .", + "title": "OfflineStoreConfig" + }, + "OnlineStoreConfig": { + "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.OnlineStoreConfig", + "markdownDescription": "The configuration of an `OnlineStore` .", + "title": "OnlineStoreConfig" + }, + "RecordIdentifierFeatureName": { + "markdownDescription": "The name of the `Feature` whose value uniquely identifies a `Record` defined in the `FeatureGroup` `FeatureDefinitions` .", + "title": "RecordIdentifierFeatureName", + "type": "string" + }, + "RoleArn": { + "markdownDescription": "The Amazon Resource Name (ARN) of the IAM execution role used to create the feature group.", + "title": "RoleArn", + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "Tags used to define a `FeatureGroup` .", + "title": "Tags", + "type": "array" + }, + "ThroughputConfig": { + "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.ThroughputConfig", + "markdownDescription": "Used to set feature group throughput configuration. There are two modes: `ON_DEMAND` and `PROVISIONED` . With on-demand mode, you are charged for data reads and writes that your application performs on your feature group. You do not need to specify read and write throughput because Feature Store accommodates your workloads as they ramp up and down. You can switch a feature group to on-demand only once in a 24 hour period. With provisioned throughput mode, you specify the read and write capacity per second that you expect your application to require, and you are billed based on those limits. Exceeding provisioned throughput will result in your requests being throttled.\n\nNote: `PROVISIONED` throughput mode is supported only for feature groups that are offline-only, or use the [`Standard`](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_OnlineStoreConfig.html#sagemaker-Type-OnlineStoreConfig-StorageType) tier online store.", + "title": "ThroughputConfig" + } + }, + "required": [ + "EventTimeFeatureName", + "FeatureDefinitions", + "FeatureGroupName", + "RecordIdentifierFeatureName" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SageMaker::FeatureGroup" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::SageMaker::FeatureGroup.DataCatalogConfig": { + "additionalProperties": false, + "properties": { + "Catalog": { + "markdownDescription": "The name of the Glue table catalog.", + "title": "Catalog", + "type": "string" + }, + "Database": { + "markdownDescription": "The name of the Glue table database.", + "title": "Database", + "type": "string" + }, + "TableName": { + "markdownDescription": "The name of the Glue table.", + "title": "TableName", + "type": "string" + } + }, + "required": [ + "Catalog", + "Database", + "TableName" + ], + "type": "object" + }, + "AWS::SageMaker::FeatureGroup.FeatureDefinition": { + "additionalProperties": false, + "properties": { + "FeatureName": { + "markdownDescription": "The name of a feature. The type must be a string. `FeatureName` cannot be any of the following: `is_deleted` , `write_time` , `api_invocation_time` .\n\nThe name:\n\n- Must start with an alphanumeric character.\n- Can only include alphanumeric characters, underscores, and hyphens. Spaces are not allowed.", + "title": "FeatureName", + "type": "string" + }, + "FeatureType": { + "markdownDescription": "The value type of a feature. Valid values are Integral, Fractional, or String.", + "title": "FeatureType", + "type": "string" + } + }, + "required": [ + "FeatureName", + "FeatureType" + ], + "type": "object" + }, + "AWS::SageMaker::FeatureGroup.OfflineStoreConfig": { + "additionalProperties": false, + "properties": { + "DataCatalogConfig": { + "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.DataCatalogConfig", + "markdownDescription": "The meta data of the Glue table that is autogenerated when an `OfflineStore` is created.", + "title": "DataCatalogConfig" + }, + "DisableGlueTableCreation": { + "markdownDescription": "Set to `True` to disable the automatic creation of an AWS Glue table when configuring an `OfflineStore` . If set to `False` , Feature Store will name the `OfflineStore` Glue table following [Athena's naming recommendations](https://docs.aws.amazon.com/athena/latest/ug/tables-databases-columns-names.html) .\n\nThe default value is `False` .", + "title": "DisableGlueTableCreation", + "type": "boolean" + }, + "S3StorageConfig": { + "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.S3StorageConfig", + "markdownDescription": "The Amazon Simple Storage (Amazon S3) location of `OfflineStore` .", + "title": "S3StorageConfig" + }, + "TableFormat": { + "markdownDescription": "Format for the offline store table. Supported formats are Glue (Default) and [Apache Iceberg](https://docs.aws.amazon.com/https://iceberg.apache.org/) .", + "title": "TableFormat", + "type": "string" + } + }, + "required": [ + "S3StorageConfig" + ], + "type": "object" + }, + "AWS::SageMaker::FeatureGroup.OnlineStoreConfig": { + "additionalProperties": false, + "properties": { + "EnableOnlineStore": { + "markdownDescription": "Turn `OnlineStore` off by specifying `False` for the `EnableOnlineStore` flag. Turn `OnlineStore` on by specifying `True` for the `EnableOnlineStore` flag.\n\nThe default value is `False` .", + "title": "EnableOnlineStore", + "type": "boolean" + }, + "SecurityConfig": { + "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.OnlineStoreSecurityConfig", + "markdownDescription": "Use to specify KMS Key ID ( `KMSKeyId` ) for at-rest encryption of your `OnlineStore` .", + "title": "SecurityConfig" + }, + "StorageType": { + "markdownDescription": "Option for different tiers of low latency storage for real-time data retrieval.\n\n- `Standard` : A managed low latency data store for feature groups.\n- `InMemory` : A managed data store for feature groups that supports very low latency retrieval.", + "title": "StorageType", + "type": "string" + }, + "TtlDuration": { + "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.TtlDuration", + "markdownDescription": "Time to live duration, where the record is hard deleted after the expiration time is reached; `ExpiresAt` = `EventTime` + `TtlDuration` . For information on HardDelete, see the [DeleteRecord](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_feature_store_DeleteRecord.html) API in the Amazon SageMaker API Reference guide.", + "title": "TtlDuration" + } + }, + "type": "object" + }, + "AWS::SageMaker::FeatureGroup.OnlineStoreSecurityConfig": { + "additionalProperties": false, + "properties": { + "KmsKeyId": { + "markdownDescription": "The AWS Key Management Service (KMS) key ARN that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.\n\nThe caller (either user or IAM role) of `CreateFeatureGroup` must have below permissions to the `OnlineStore` `KmsKeyId` :\n\n- `\"kms:Encrypt\"`\n- `\"kms:Decrypt\"`\n- `\"kms:DescribeKey\"`\n- `\"kms:CreateGrant\"`\n- `\"kms:RetireGrant\"`\n- `\"kms:ReEncryptFrom\"`\n- `\"kms:ReEncryptTo\"`\n- `\"kms:GenerateDataKey\"`\n- `\"kms:ListAliases\"`\n- `\"kms:ListGrants\"`\n- `\"kms:RevokeGrant\"`\n\nThe caller (either user or IAM role) to all DataPlane operations ( `PutRecord` , `GetRecord` , `DeleteRecord` ) must have the following permissions to the `KmsKeyId` :\n\n- `\"kms:Decrypt\"`", + "title": "KmsKeyId", + "type": "string" + } + }, + "type": "object" + }, + "AWS::SageMaker::FeatureGroup.S3StorageConfig": { + "additionalProperties": false, + "properties": { + "KmsKeyId": { + "markdownDescription": "The AWS Key Management Service (KMS) key ARN of the key used to encrypt any objects written into the `OfflineStore` S3 location.\n\nThe IAM `roleARN` that is passed as a parameter to `CreateFeatureGroup` must have below permissions to the `KmsKeyId` :\n\n- `\"kms:GenerateDataKey\"`", + "title": "KmsKeyId", + "type": "string" + }, + "S3Uri": { + "markdownDescription": "The S3 URI, or location in Amazon S3, of `OfflineStore` .\n\nS3 URIs have a format similar to the following: `s3://example-bucket/prefix/` .", + "title": "S3Uri", + "type": "string" + } + }, + "required": [ + "S3Uri" + ], + "type": "object" + }, + "AWS::SageMaker::FeatureGroup.ThroughputConfig": { + "additionalProperties": false, + "properties": { + "ProvisionedReadCapacityUnits": { + "markdownDescription": "For provisioned feature groups with online store enabled, this indicates the read throughput you are billed for and can consume without throttling.\n\nThis field is not applicable for on-demand feature groups.", + "title": "ProvisionedReadCapacityUnits", + "type": "number" + }, + "ProvisionedWriteCapacityUnits": { + "markdownDescription": "For provisioned feature groups, this indicates the write throughput you are billed for and can consume without throttling.\n\nThis field is not applicable for on-demand feature groups.", + "title": "ProvisionedWriteCapacityUnits", + "type": "number" + }, + "ThroughputMode": { + "markdownDescription": "The mode used for your feature group throughput: `ON_DEMAND` or `PROVISIONED` .", + "title": "ThroughputMode", + "type": "string" + } + }, + "required": [ + "ThroughputMode" + ], + "type": "object" + }, + "AWS::SageMaker::FeatureGroup.TtlDuration": { + "additionalProperties": false, + "properties": { + "Unit": { + "markdownDescription": "`TtlDuration` time unit.", + "title": "Unit", + "type": "string" + }, + "Value": { + "markdownDescription": "`TtlDuration` time value.", + "title": "Value", + "type": "number" + } + }, + "type": "object" + }, + "AWS::SageMaker::Hub": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "HubDescription": { "type": "string" }, - "EventTimeFeatureName": { - "markdownDescription": "The name of the feature that stores the `EventTime` of a Record in a `FeatureGroup` .\n\nA `EventTime` is point in time when a new event occurs that corresponds to the creation or update of a `Record` in `FeatureGroup` . All `Records` in the `FeatureGroup` must have a corresponding `EventTime` .", - "title": "EventTimeFeatureName", + "HubDisplayName": { "type": "string" }, - "FeatureDefinitions": { + "HubName": { + "type": "string" + }, + "HubSearchKeywords": { "items": { - "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.FeatureDefinition" + "type": "string" }, - "markdownDescription": "A list of `Feature` s. Each `Feature` must include a `FeatureName` and a `FeatureType` .\n\nValid `FeatureType` s are `Integral` , `Fractional` and `String` .\n\n`FeatureName` s cannot be any of the following: `is_deleted` , `write_time` , `api_invocation_time` .\n\nYou can create up to 2,500 `FeatureDefinition` s per `FeatureGroup` .", - "title": "FeatureDefinitions", "type": "array" }, - "FeatureGroupName": { - "markdownDescription": "The name of the `FeatureGroup` .", - "title": "FeatureGroupName", - "type": "string" - }, - "OfflineStoreConfig": { - "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.OfflineStoreConfig", - "markdownDescription": "The configuration of an `OfflineStore` .", - "title": "OfflineStoreConfig" - }, - "OnlineStoreConfig": { - "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.OnlineStoreConfig", - "markdownDescription": "The configuration of an `OnlineStore` .", - "title": "OnlineStoreConfig" - }, - "RecordIdentifierFeatureName": { - "markdownDescription": "The name of the `Feature` whose value uniquely identifies a `Record` defined in the `FeatureGroup` `FeatureDefinitions` .", - "title": "RecordIdentifierFeatureName", - "type": "string" - }, - "RoleArn": { - "markdownDescription": "The Amazon Resource Name (ARN) of the IAM execution role used to create the feature group.", - "title": "RoleArn", - "type": "string" + "S3StorageConfig": { + "$ref": "#/definitions/AWS::SageMaker::Hub.S3StorageConfig" }, "Tags": { "items": { "$ref": "#/definitions/Tag" }, - "markdownDescription": "Tags used to define a `FeatureGroup` .", - "title": "Tags", "type": "array" - }, - "ThroughputConfig": { - "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.ThroughputConfig", - "markdownDescription": "Used to set feature group throughput configuration. There are two modes: `ON_DEMAND` and `PROVISIONED` . With on-demand mode, you are charged for data reads and writes that your application performs on your feature group. You do not need to specify read and write throughput because Feature Store accommodates your workloads as they ramp up and down. You can switch a feature group to on-demand only once in a 24 hour period. With provisioned throughput mode, you specify the read and write capacity per second that you expect your application to require, and you are billed based on those limits. Exceeding provisioned throughput will result in your requests being throttled.\n\nNote: `PROVISIONED` throughput mode is supported only for feature groups that are offline-only, or use the [`Standard`](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_OnlineStoreConfig.html#sagemaker-Type-OnlineStoreConfig-StorageType) tier online store.", - "title": "ThroughputConfig" } }, "required": [ - "EventTimeFeatureName", - "FeatureDefinitions", - "FeatureGroupName", - "RecordIdentifierFeatureName" + "HubDescription", + "HubName" ], "type": "object" }, "Type": { "enum": [ - "AWS::SageMaker::FeatureGroup" + "AWS::SageMaker::Hub" ], "type": "string" }, @@ -334888,173 +342129,11 @@ ], "type": "object" }, - "AWS::SageMaker::FeatureGroup.DataCatalogConfig": { - "additionalProperties": false, - "properties": { - "Catalog": { - "markdownDescription": "The name of the Glue table catalog.", - "title": "Catalog", - "type": "string" - }, - "Database": { - "markdownDescription": "The name of the Glue table database.", - "title": "Database", - "type": "string" - }, - "TableName": { - "markdownDescription": "The name of the Glue table.", - "title": "TableName", - "type": "string" - } - }, - "required": [ - "Catalog", - "Database", - "TableName" - ], - "type": "object" - }, - "AWS::SageMaker::FeatureGroup.FeatureDefinition": { - "additionalProperties": false, - "properties": { - "FeatureName": { - "markdownDescription": "The name of a feature. The type must be a string. `FeatureName` cannot be any of the following: `is_deleted` , `write_time` , `api_invocation_time` .\n\nThe name:\n\n- Must start with an alphanumeric character.\n- Can only include alphanumeric characters, underscores, and hyphens. Spaces are not allowed.", - "title": "FeatureName", - "type": "string" - }, - "FeatureType": { - "markdownDescription": "The value type of a feature. Valid values are Integral, Fractional, or String.", - "title": "FeatureType", - "type": "string" - } - }, - "required": [ - "FeatureName", - "FeatureType" - ], - "type": "object" - }, - "AWS::SageMaker::FeatureGroup.OfflineStoreConfig": { - "additionalProperties": false, - "properties": { - "DataCatalogConfig": { - "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.DataCatalogConfig", - "markdownDescription": "The meta data of the Glue table that is autogenerated when an `OfflineStore` is created.", - "title": "DataCatalogConfig" - }, - "DisableGlueTableCreation": { - "markdownDescription": "Set to `True` to disable the automatic creation of an AWS Glue table when configuring an `OfflineStore` . If set to `False` , Feature Store will name the `OfflineStore` Glue table following [Athena's naming recommendations](https://docs.aws.amazon.com/athena/latest/ug/tables-databases-columns-names.html) .\n\nThe default value is `False` .", - "title": "DisableGlueTableCreation", - "type": "boolean" - }, - "S3StorageConfig": { - "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.S3StorageConfig", - "markdownDescription": "The Amazon Simple Storage (Amazon S3) location of `OfflineStore` .", - "title": "S3StorageConfig" - }, - "TableFormat": { - "markdownDescription": "Format for the offline store table. Supported formats are Glue (Default) and [Apache Iceberg](https://docs.aws.amazon.com/https://iceberg.apache.org/) .", - "title": "TableFormat", - "type": "string" - } - }, - "required": [ - "S3StorageConfig" - ], - "type": "object" - }, - "AWS::SageMaker::FeatureGroup.OnlineStoreConfig": { - "additionalProperties": false, - "properties": { - "EnableOnlineStore": { - "markdownDescription": "Turn `OnlineStore` off by specifying `False` for the `EnableOnlineStore` flag. Turn `OnlineStore` on by specifying `True` for the `EnableOnlineStore` flag.\n\nThe default value is `False` .", - "title": "EnableOnlineStore", - "type": "boolean" - }, - "SecurityConfig": { - "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.OnlineStoreSecurityConfig", - "markdownDescription": "Use to specify KMS Key ID ( `KMSKeyId` ) for at-rest encryption of your `OnlineStore` .", - "title": "SecurityConfig" - }, - "StorageType": { - "markdownDescription": "Option for different tiers of low latency storage for real-time data retrieval.\n\n- `Standard` : A managed low latency data store for feature groups.\n- `InMemory` : A managed data store for feature groups that supports very low latency retrieval.", - "title": "StorageType", - "type": "string" - }, - "TtlDuration": { - "$ref": "#/definitions/AWS::SageMaker::FeatureGroup.TtlDuration", - "markdownDescription": "Time to live duration, where the record is hard deleted after the expiration time is reached; `ExpiresAt` = `EventTime` + `TtlDuration` . For information on HardDelete, see the [DeleteRecord](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_feature_store_DeleteRecord.html) API in the Amazon SageMaker API Reference guide.", - "title": "TtlDuration" - } - }, - "type": "object" - }, - "AWS::SageMaker::FeatureGroup.OnlineStoreSecurityConfig": { - "additionalProperties": false, - "properties": { - "KmsKeyId": { - "markdownDescription": "The AWS Key Management Service (KMS) key ARN that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.\n\nThe caller (either user or IAM role) of `CreateFeatureGroup` must have below permissions to the `OnlineStore` `KmsKeyId` :\n\n- `\"kms:Encrypt\"`\n- `\"kms:Decrypt\"`\n- `\"kms:DescribeKey\"`\n- `\"kms:CreateGrant\"`\n- `\"kms:RetireGrant\"`\n- `\"kms:ReEncryptFrom\"`\n- `\"kms:ReEncryptTo\"`\n- `\"kms:GenerateDataKey\"`\n- `\"kms:ListAliases\"`\n- `\"kms:ListGrants\"`\n- `\"kms:RevokeGrant\"`\n\nThe caller (either user or IAM role) to all DataPlane operations ( `PutRecord` , `GetRecord` , `DeleteRecord` ) must have the following permissions to the `KmsKeyId` :\n\n- `\"kms:Decrypt\"`", - "title": "KmsKeyId", - "type": "string" - } - }, - "type": "object" - }, - "AWS::SageMaker::FeatureGroup.S3StorageConfig": { - "additionalProperties": false, - "properties": { - "KmsKeyId": { - "markdownDescription": "The AWS Key Management Service (KMS) key ARN of the key used to encrypt any objects written into the `OfflineStore` S3 location.\n\nThe IAM `roleARN` that is passed as a parameter to `CreateFeatureGroup` must have below permissions to the `KmsKeyId` :\n\n- `\"kms:GenerateDataKey\"`", - "title": "KmsKeyId", - "type": "string" - }, - "S3Uri": { - "markdownDescription": "The S3 URI, or location in Amazon S3, of `OfflineStore` .\n\nS3 URIs have a format similar to the following: `s3://example-bucket/prefix/` .", - "title": "S3Uri", - "type": "string" - } - }, - "required": [ - "S3Uri" - ], - "type": "object" - }, - "AWS::SageMaker::FeatureGroup.ThroughputConfig": { + "AWS::SageMaker::Hub.S3StorageConfig": { "additionalProperties": false, "properties": { - "ProvisionedReadCapacityUnits": { - "markdownDescription": "For provisioned feature groups with online store enabled, this indicates the read throughput you are billed for and can consume without throttling.\n\nThis field is not applicable for on-demand feature groups.", - "title": "ProvisionedReadCapacityUnits", - "type": "number" - }, - "ProvisionedWriteCapacityUnits": { - "markdownDescription": "For provisioned feature groups, this indicates the write throughput you are billed for and can consume without throttling.\n\nThis field is not applicable for on-demand feature groups.", - "title": "ProvisionedWriteCapacityUnits", - "type": "number" - }, - "ThroughputMode": { - "markdownDescription": "The mode used for your feature group throughput: `ON_DEMAND` or `PROVISIONED` .", - "title": "ThroughputMode", - "type": "string" - } - }, - "required": [ - "ThroughputMode" - ], - "type": "object" - }, - "AWS::SageMaker::FeatureGroup.TtlDuration": { - "additionalProperties": false, - "properties": { - "Unit": { - "markdownDescription": "`TtlDuration` time unit.", - "title": "Unit", + "S3OutputPath": { "type": "string" - }, - "Value": { - "markdownDescription": "`TtlDuration` time value.", - "title": "Value", - "type": "number" } }, "type": "object" @@ -342512,40 +349591,147 @@ "Properties": { "additionalProperties": false, "properties": { - "StudioLifecycleConfigAppType": { - "markdownDescription": "The App type to which the Lifecycle Configuration is attached.", - "title": "StudioLifecycleConfigAppType", + "StudioLifecycleConfigAppType": { + "markdownDescription": "The App type to which the Lifecycle Configuration is attached.", + "title": "StudioLifecycleConfigAppType", + "type": "string" + }, + "StudioLifecycleConfigContent": { + "markdownDescription": "", + "title": "StudioLifecycleConfigContent", + "type": "string" + }, + "StudioLifecycleConfigName": { + "markdownDescription": "The name of the Amazon SageMaker AI Studio Lifecycle Configuration.", + "title": "StudioLifecycleConfigName", + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "", + "title": "Tags", + "type": "array" + } + }, + "required": [ + "StudioLifecycleConfigAppType", + "StudioLifecycleConfigContent", + "StudioLifecycleConfigName" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SageMaker::StudioLifecycleConfig" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::SageMaker::TrialComponent": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "DisplayName": { "type": "string" }, - "StudioLifecycleConfigContent": { - "markdownDescription": "", - "title": "StudioLifecycleConfigContent", - "type": "string" + "InputArtifacts": { + "additionalProperties": false, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "$ref": "#/definitions/AWS::SageMaker::TrialComponent.TrialComponentArtifact" + } + }, + "type": "object" }, - "StudioLifecycleConfigName": { - "markdownDescription": "The name of the Amazon SageMaker AI Studio Lifecycle Configuration.", - "title": "StudioLifecycleConfigName", - "type": "string" + "MetadataProperties": { + "$ref": "#/definitions/AWS::SageMaker::TrialComponent.MetadataProperties" + }, + "OutputArtifacts": { + "additionalProperties": false, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "$ref": "#/definitions/AWS::SageMaker::TrialComponent.TrialComponentArtifact" + } + }, + "type": "object" + }, + "Parameters": { + "additionalProperties": false, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "$ref": "#/definitions/AWS::SageMaker::TrialComponent.TrialComponentParameterValue" + } + }, + "type": "object" + }, + "Status": { + "$ref": "#/definitions/AWS::SageMaker::TrialComponent.TrialComponentStatus" }, "Tags": { "items": { - "$ref": "#/definitions/Tag" + "$ref": "#/definitions/AWS::SageMaker::TrialComponent.TagsItems" }, - "markdownDescription": "", - "title": "Tags", "type": "array" + }, + "TrialComponentName": { + "type": "string" } }, "required": [ - "StudioLifecycleConfigAppType", - "StudioLifecycleConfigContent", - "StudioLifecycleConfigName" + "TrialComponentName" ], "type": "object" }, "Type": { "enum": [ - "AWS::SageMaker::StudioLifecycleConfig" + "AWS::SageMaker::TrialComponent" ], "type": "string" }, @@ -342564,6 +349750,79 @@ ], "type": "object" }, + "AWS::SageMaker::TrialComponent.MetadataProperties": { + "additionalProperties": false, + "properties": { + "CommitId": { + "type": "string" + }, + "GeneratedBy": { + "type": "string" + }, + "ProjectId": { + "type": "string" + }, + "Repository": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::SageMaker::TrialComponent.TagsItems": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, + "AWS::SageMaker::TrialComponent.TrialComponentArtifact": { + "additionalProperties": false, + "properties": { + "MediaType": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Value" + ], + "type": "object" + }, + "AWS::SageMaker::TrialComponent.TrialComponentParameterValue": { + "additionalProperties": false, + "properties": { + "NumberValue": { + "type": "number" + }, + "StringValue": { + "type": "string" + } + }, + "type": "object" + }, + "AWS::SageMaker::TrialComponent.TrialComponentStatus": { + "additionalProperties": false, + "properties": { + "Message": { + "type": "string" + }, + "PrimaryStatus": { + "type": "string" + } + }, + "type": "object" + }, "AWS::SageMaker::UserProfile": { "additionalProperties": false, "properties": { @@ -342838,6 +350097,24 @@ ], "type": "object" }, + "AWS::SageMaker::UserProfile.EmrSettings": { + "additionalProperties": false, + "properties": { + "AssumableRoleArns": { + "items": { + "type": "string" + }, + "type": "array" + }, + "ExecutionRoleArns": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, "AWS::SageMaker::UserProfile.FSxLustreFileSystemConfig": { "additionalProperties": false, "properties": { @@ -342936,6 +350213,9 @@ "markdownDescription": "The default instance type and the Amazon Resource Name (ARN) of the default SageMaker image used by the JupyterLab app.", "title": "DefaultResourceSpec" }, + "EmrSettings": { + "$ref": "#/definitions/AWS::SageMaker::UserProfile.EmrSettings" + }, "LifecycleConfigArns": { "items": { "type": "string" @@ -343031,6 +350311,9 @@ "markdownDescription": "The ARN of the image version created on the instance. To clear the value set for `SageMakerImageVersionArn` , pass `None` as the value.", "title": "SageMakerImageVersionArn", "type": "string" + }, + "TrainingPlanArn": { + "type": "string" } }, "type": "object" @@ -344602,6 +351885,34 @@ }, "type": "object" }, + "AWS::SecurityAgent::AgentSpace.BitbucketCapabilitiesResource": { + "additionalProperties": false, + "properties": { + "LeaveComments": { + "type": "boolean" + }, + "RemediateCode": { + "type": "boolean" + } + }, + "type": "object" + }, + "AWS::SecurityAgent::AgentSpace.BitbucketRepositoryResource": { + "additionalProperties": false, + "properties": { + "Name": { + "type": "string" + }, + "Workspace": { + "type": "string" + } + }, + "required": [ + "Name", + "Workspace" + ], + "type": "object" + }, "AWS::SecurityAgent::AgentSpace.CodeReviewSettings": { "additionalProperties": false, "properties": { @@ -344618,6 +351929,47 @@ ], "type": "object" }, + "AWS::SecurityAgent::AgentSpace.ConfluenceCapabilitiesResource": { + "additionalProperties": false, + "properties": { + "CreateDocument": { + "type": "boolean" + }, + "FetchDocument": { + "type": "boolean" + }, + "UpdateDocument": { + "type": "boolean" + } + }, + "type": "object" + }, + "AWS::SecurityAgent::AgentSpace.ConfluenceDocumentResource": { + "additionalProperties": false, + "properties": { + "Name": { + "type": "string" + }, + "PageId": { + "type": "string" + }, + "SpaceKey": { + "type": "string" + }, + "SpaceTitle": { + "type": "string" + }, + "Title": { + "type": "string" + } + }, + "required": [ + "Name", + "PageId", + "SpaceKey" + ], + "type": "object" + }, "AWS::SecurityAgent::AgentSpace.GitHubCapabilitiesResource": { "additionalProperties": false, "properties": { @@ -344650,6 +352002,34 @@ ], "type": "object" }, + "AWS::SecurityAgent::AgentSpace.GitLabCapabilitiesResource": { + "additionalProperties": false, + "properties": { + "LeaveComments": { + "type": "boolean" + }, + "RemediateCode": { + "type": "boolean" + } + }, + "type": "object" + }, + "AWS::SecurityAgent::AgentSpace.GitLabRepositoryResource": { + "additionalProperties": false, + "properties": { + "Name": { + "type": "string" + }, + "Namespace": { + "type": "string" + } + }, + "required": [ + "Name", + "Namespace" + ], + "type": "object" + }, "AWS::SecurityAgent::AgentSpace.IntegratedResource": { "additionalProperties": false, "properties": { @@ -344672,17 +352052,31 @@ "AWS::SecurityAgent::AgentSpace.ProviderResource": { "additionalProperties": false, "properties": { + "BitbucketCapabilities": { + "$ref": "#/definitions/AWS::SecurityAgent::AgentSpace.BitbucketCapabilitiesResource" + }, + "BitbucketRepository": { + "$ref": "#/definitions/AWS::SecurityAgent::AgentSpace.BitbucketRepositoryResource" + }, + "ConfluenceCapabilities": { + "$ref": "#/definitions/AWS::SecurityAgent::AgentSpace.ConfluenceCapabilitiesResource" + }, + "ConfluenceDocument": { + "$ref": "#/definitions/AWS::SecurityAgent::AgentSpace.ConfluenceDocumentResource" + }, "GitHubCapabilities": { "$ref": "#/definitions/AWS::SecurityAgent::AgentSpace.GitHubCapabilitiesResource" }, "GitHubRepository": { "$ref": "#/definitions/AWS::SecurityAgent::AgentSpace.GitHubRepositoryResource" + }, + "GitLabCapabilities": { + "$ref": "#/definitions/AWS::SecurityAgent::AgentSpace.GitLabCapabilitiesResource" + }, + "GitLabRepository": { + "$ref": "#/definitions/AWS::SecurityAgent::AgentSpace.GitLabRepositoryResource" } }, - "required": [ - "GitHubCapabilities", - "GitHubRepository" - ], "type": "object" }, "AWS::SecurityAgent::AgentSpace.VpcConfig": { @@ -344832,9 +352226,18 @@ "Assets": { "$ref": "#/definitions/AWS::SecurityAgent::Pentest.Assets" }, + "CleanUpStrategy": { + "type": "string" + }, "CodeRemediationStrategy": { "type": "string" }, + "DisableManagedSkills": { + "items": { + "type": "string" + }, + "type": "array" + }, "ExcludeRiskTypes": { "items": { "type": "string" @@ -345078,6 +352481,119 @@ }, "type": "object" }, + "AWS::SecurityAgent::SecurityRequirementPack": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Description": { + "type": "string" + }, + "KmsKeyId": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "SecurityRequirements": { + "items": { + "$ref": "#/definitions/AWS::SecurityAgent::SecurityRequirementPack.SecurityRequirement" + }, + "type": "array" + }, + "Status": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "Name" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SecurityAgent::SecurityRequirementPack" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::SecurityAgent::SecurityRequirementPack.SecurityRequirement": { + "additionalProperties": false, + "properties": { + "Description": { + "type": "string" + }, + "Domain": { + "type": "string" + }, + "Evaluation": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "Remediation": { + "type": "string" + } + }, + "required": [ + "Description", + "Domain", + "Evaluation", + "Name" + ], + "type": "object" + }, "AWS::SecurityAgent::TargetDomain": { "additionalProperties": false, "properties": { @@ -346668,6 +354184,156 @@ }, "type": "object" }, + "AWS::SecurityHub::Connector": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Description": { + "type": "string" + }, + "Name": { + "type": "string" + }, + "Provider": { + "$ref": "#/definitions/AWS::SecurityHub::Connector.Provider" + }, + "Tags": { + "additionalProperties": true, + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, + "type": "object" + } + }, + "required": [ + "Name", + "Provider" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::SecurityHub::Connector" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::SecurityHub::Connector.AzureProviderConfiguration": { + "additionalProperties": false, + "properties": { + "AWSConfigConnectorArn": { + "type": "string" + }, + "AzureRegions": { + "items": { + "type": "string" + }, + "type": "array" + }, + "ScopeConfiguration": { + "$ref": "#/definitions/AWS::SecurityHub::Connector.AzureScopeConfiguration" + } + }, + "required": [ + "AWSConfigConnectorArn", + "AzureRegions", + "ScopeConfiguration" + ], + "type": "object" + }, + "AWS::SecurityHub::Connector.AzureScopeConfiguration": { + "additionalProperties": false, + "properties": { + "ScopeType": { + "type": "string" + }, + "ScopeValues": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "ScopeType" + ], + "type": "object" + }, + "AWS::SecurityHub::Connector.HealthIssue": { + "additionalProperties": false, + "properties": { + "Code": { + "type": "string" + }, + "Message": { + "type": "string" + } + }, + "required": [ + "Code", + "Message" + ], + "type": "object" + }, + "AWS::SecurityHub::Connector.Provider": { + "additionalProperties": false, + "properties": { + "Azure": { + "$ref": "#/definitions/AWS::SecurityHub::Connector.AzureProviderConfiguration" + } + }, + "required": [ + "Azure" + ], + "type": "object" + }, "AWS::SecurityHub::ConnectorV2": { "additionalProperties": false, "properties": { @@ -346762,6 +354428,63 @@ ], "type": "object" }, + "AWS::SecurityHub::ConnectorV2.AzureProviderConfiguration": { + "additionalProperties": false, + "properties": { + "AWSConfigConnectorArn": { + "type": "string" + }, + "AzureRegions": { + "items": { + "type": "string" + }, + "type": "array" + }, + "ScopeConfiguration": { + "$ref": "#/definitions/AWS::SecurityHub::ConnectorV2.AzureScopeConfiguration" + } + }, + "required": [ + "AWSConfigConnectorArn", + "AzureRegions", + "ScopeConfiguration" + ], + "type": "object" + }, + "AWS::SecurityHub::ConnectorV2.AzureScopeConfiguration": { + "additionalProperties": false, + "properties": { + "ScopeType": { + "type": "string" + }, + "ScopeValues": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "ScopeType" + ], + "type": "object" + }, + "AWS::SecurityHub::ConnectorV2.HealthIssue": { + "additionalProperties": false, + "properties": { + "Code": { + "type": "string" + }, + "Message": { + "type": "string" + } + }, + "required": [ + "Code", + "Message" + ], + "type": "object" + }, "AWS::SecurityHub::ConnectorV2.JiraCloudProviderConfiguration": { "additionalProperties": false, "properties": { @@ -346779,6 +354502,9 @@ "AWS::SecurityHub::ConnectorV2.Provider": { "additionalProperties": false, "properties": { + "Azure": { + "$ref": "#/definitions/AWS::SecurityHub::ConnectorV2.AzureProviderConfiguration" + }, "JiraCloud": { "$ref": "#/definitions/AWS::SecurityHub::ConnectorV2.JiraCloudProviderConfiguration", "markdownDescription": "Details about a Jira Cloud integration.", @@ -349407,6 +357133,18 @@ }, "type": "object" }, + "AWS::ServiceCatalog::CloudFormationProduct.Info": { + "additionalProperties": false, + "properties": { + "ImportFromPhysicalId": { + "type": "string" + }, + "LoadTemplateFromURL": { + "type": "string" + } + }, + "type": "object" + }, "AWS::ServiceCatalog::CloudFormationProduct.ProvisioningArtifactProperties": { "additionalProperties": false, "properties": { @@ -349421,9 +357159,9 @@ "type": "boolean" }, "Info": { + "$ref": "#/definitions/AWS::ServiceCatalog::CloudFormationProduct.Info", "markdownDescription": "Specify the template source with one of the following options, but not both. Keys accepted: [ `LoadTemplateFromURL` , `ImportFromPhysicalId` ]\n\nThe URL of the AWS CloudFormation template in Amazon S3 in JSON format. Specify the URL in JSON format as follows:\n\n`\"LoadTemplateFromURL\": \"https://s3.amazonaws.com/cf-templates-ozkq9d3hgiq2-us-east-1/...\"`\n\n`ImportFromPhysicalId` : The physical id of the resource that contains the template. Currently only supports AWS CloudFormation stack arn. Specify the physical id in JSON format as follows: `ImportFromPhysicalId: \u201carn:aws:cloudformation:[us-east-1]:[accountId]:stack/[StackName]/[resourceId]`", - "title": "Info", - "type": "object" + "title": "Info" }, "Name": { "markdownDescription": "The name of the provisioning artifact (for example, v1 v2beta). No spaces are allowed.", @@ -351599,7 +359337,13 @@ "type": "string" }, "ServiceAttributes": { + "additionalProperties": true, "markdownDescription": "A complex type that contains information about attributes associated with a specific service.", + "patternProperties": { + "^[a-zA-Z0-9]+$": { + "type": "string" + } + }, "title": "ServiceAttributes", "type": "object" }, @@ -353015,6 +360759,87 @@ ], "type": "object" }, + "AWS::StorageGateway::TapePool": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "PoolName": { + "type": "string" + }, + "RetentionLockTimeInDays": { + "type": "number" + }, + "RetentionLockType": { + "type": "string" + }, + "StorageClass": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "PoolName", + "StorageClass" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::StorageGateway::TapePool" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, "AWS::SupportApp::AccountAlias": { "additionalProperties": false, "properties": { @@ -354954,6 +362779,93 @@ }, "type": "object" }, + "AWS::Transcribe::VocabularyFilter": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "DataAccessRoleArn": { + "type": "string" + }, + "LanguageCode": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + }, + "VocabularyFilterFileUri": { + "type": "string" + }, + "VocabularyFilterName": { + "type": "string" + }, + "Words": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "required": [ + "LanguageCode", + "VocabularyFilterName" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::Transcribe::VocabularyFilter" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, "AWS::Transfer::Agreement": { "additionalProperties": false, "properties": { @@ -358587,6 +366499,9 @@ "markdownDescription": "Describes the DNS information of the service. This field is read-only.", "title": "DnsEntry" }, + "IdleTimeoutSeconds": { + "type": "number" + }, "Name": { "markdownDescription": "The name of the service. The name must be unique within the account. The valid characters are a-z, 0-9, and hyphens (-). You can't use a hyphen as the first or last character, or immediately after another hyphen.\n\nIf you don't specify a name, CloudFormation generates one. However, if you specify a name, and later want to replace the resource, you must specify a new name.", "title": "Name", @@ -365546,26 +373461,294 @@ "Properties": { "additionalProperties": false, "properties": { - "ResourceArn": { - "markdownDescription": "The Amazon Resource Name (ARN) of the resource to associate with the web ACL.\n\nThe ARN must be in one of the following formats:\n\n- For an Application Load Balancer: `arn: *partition* :elasticloadbalancing: *region* : *account-id* :loadbalancer/app/ *load-balancer-name* / *load-balancer-id*`\n- For an Amazon API Gateway REST API: `arn: *partition* :apigateway: *region* ::/restapis/ *api-id* /stages/ *stage-name*`\n- For an AWS AppSync GraphQL API: `arn: *partition* :appsync: *region* : *account-id* :apis/ *GraphQLApiId*`\n- For an Amazon Cognito user pool: `arn: *partition* :cognito-idp: *region* : *account-id* :userpool/ *user-pool-id*`\n- For an AWS App Runner service: `arn: *partition* :apprunner: *region* : *account-id* :service/ *apprunner-service-name* / *apprunner-service-id*`\n- For an AWS Verified Access instance: `arn: *partition* :ec2: *region* : *account-id* :verified-access-instance/ *instance-id*`\n- For an AWS Amplify instance: `arn: *partition* :amplify: *region* : *account-id* :apps/ *app-id*`", - "title": "ResourceArn", + "ResourceArn": { + "markdownDescription": "The Amazon Resource Name (ARN) of the resource to associate with the web ACL.\n\nThe ARN must be in one of the following formats:\n\n- For an Application Load Balancer: `arn: *partition* :elasticloadbalancing: *region* : *account-id* :loadbalancer/app/ *load-balancer-name* / *load-balancer-id*`\n- For an Amazon API Gateway REST API: `arn: *partition* :apigateway: *region* ::/restapis/ *api-id* /stages/ *stage-name*`\n- For an AWS AppSync GraphQL API: `arn: *partition* :appsync: *region* : *account-id* :apis/ *GraphQLApiId*`\n- For an Amazon Cognito user pool: `arn: *partition* :cognito-idp: *region* : *account-id* :userpool/ *user-pool-id*`\n- For an AWS App Runner service: `arn: *partition* :apprunner: *region* : *account-id* :service/ *apprunner-service-name* / *apprunner-service-id*`\n- For an AWS Verified Access instance: `arn: *partition* :ec2: *region* : *account-id* :verified-access-instance/ *instance-id*`\n- For an AWS Amplify instance: `arn: *partition* :amplify: *region* : *account-id* :apps/ *app-id*`", + "title": "ResourceArn", + "type": "string" + }, + "WebACLArn": { + "markdownDescription": "The Amazon Resource Name (ARN) of the web ACL that you want to associate with the resource.", + "title": "WebACLArn", + "type": "string" + } + }, + "required": [ + "ResourceArn", + "WebACLArn" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::WAFv2::WebACLAssociation" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::WellArchitected::Lens": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "JSONString": { + "type": "string" + }, + "LensVersion": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/AWS::WellArchitected::Lens.TagsItems" + }, + "type": "array" + } + }, + "type": "object" + }, + "Type": { + "enum": [ + "AWS::WellArchitected::Lens" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type" + ], + "type": "object" + }, + "AWS::WellArchitected::Lens.TagsItems": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, + "AWS::WellArchitected::Profile": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "ProfileDescription": { + "type": "string" + }, + "ProfileName": { + "type": "string" + }, + "ProfileQuestions": { + "items": { + "$ref": "#/definitions/AWS::WellArchitected::Profile.ProfileQuestionUpdate" + }, + "type": "array" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "type": "array" + } + }, + "required": [ + "ProfileDescription", + "ProfileName", + "ProfileQuestions" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::WellArchitected::Profile" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::WellArchitected::Profile.ProfileQuestionUpdate": { + "additionalProperties": false, + "properties": { + "QuestionId": { + "type": "string" + }, + "SelectedChoiceIds": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, + "AWS::WellArchitected::ReviewTemplate": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "Description": { "type": "string" }, - "WebACLArn": { - "markdownDescription": "The Amazon Resource Name (ARN) of the web ACL that you want to associate with the resource.", - "title": "WebACLArn", + "Lenses": { + "items": { + "type": "string" + }, + "type": "array" + }, + "Notes": { + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/AWS::WellArchitected::ReviewTemplate.TagsItems" + }, + "type": "array" + }, + "TemplateName": { "type": "string" } }, "required": [ - "ResourceArn", - "WebACLArn" + "Description", + "Lenses", + "TemplateName" ], "type": "object" }, "Type": { "enum": [ - "AWS::WAFv2::WebACLAssociation" + "AWS::WellArchitected::ReviewTemplate" ], "type": "string" }, @@ -365584,6 +373767,22 @@ ], "type": "object" }, + "AWS::WellArchitected::ReviewTemplate.TagsItems": { + "additionalProperties": false, + "properties": { + "Key": { + "type": "string" + }, + "Value": { + "type": "string" + } + }, + "required": [ + "Key", + "Value" + ], + "type": "object" + }, "AWS::Wisdom::AIAgent": { "additionalProperties": false, "properties": { @@ -368590,161 +376789,272 @@ "Properties": { "additionalProperties": false, "properties": { - "ConnectionString": { - "markdownDescription": "The connection string specified for the connection alias. The connection string must be in the form of a fully qualified domain name (FQDN), such as `www.example.com` .", - "title": "ConnectionString", + "ConnectionString": { + "markdownDescription": "The connection string specified for the connection alias. The connection string must be in the form of a fully qualified domain name (FQDN), such as `www.example.com` .", + "title": "ConnectionString", + "type": "string" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "The tags to associate with the connection alias.", + "title": "Tags", + "type": "array" + } + }, + "required": [ + "ConnectionString" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::WorkSpaces::ConnectionAlias" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::WorkSpaces::ConnectionAlias.ConnectionAliasAssociation": { + "additionalProperties": false, + "properties": { + "AssociatedAccountId": { + "markdownDescription": "The identifier of the AWS account that associated the connection alias with a directory.", + "title": "AssociatedAccountId", + "type": "string" + }, + "AssociationStatus": { + "markdownDescription": "The association status of the connection alias.", + "title": "AssociationStatus", + "type": "string" + }, + "ConnectionIdentifier": { + "markdownDescription": "The identifier of the connection alias association. You use the connection identifier in the DNS TXT record when you're configuring your DNS routing policies.", + "title": "ConnectionIdentifier", + "type": "string" + }, + "ResourceId": { + "markdownDescription": "The identifier of the directory associated with a connection alias.", + "title": "ResourceId", + "type": "string" + } + }, + "type": "object" + }, + "AWS::WorkSpaces::Workspace": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "BundleId": { + "markdownDescription": "The identifier of the bundle for the WorkSpace.", + "title": "BundleId", + "type": "string" + }, + "DirectoryId": { + "markdownDescription": "The identifier of the Directory Service directory for the WorkSpace.", + "title": "DirectoryId", + "type": "string" + }, + "RootVolumeEncryptionEnabled": { + "markdownDescription": "Indicates whether the data stored on the root volume is encrypted.", + "title": "RootVolumeEncryptionEnabled", + "type": "boolean" + }, + "Tags": { + "items": { + "$ref": "#/definitions/Tag" + }, + "markdownDescription": "The tags for the WorkSpace.", + "title": "Tags", + "type": "array" + }, + "UserName": { + "markdownDescription": "The user name of the user for the WorkSpace. This user name must exist in the Directory Service directory for the WorkSpace.", + "title": "UserName", + "type": "string" + }, + "UserVolumeEncryptionEnabled": { + "markdownDescription": "Indicates whether the data stored on the user volume is encrypted.", + "title": "UserVolumeEncryptionEnabled", + "type": "boolean" + }, + "VolumeEncryptionKey": { + "markdownDescription": "The symmetric AWS KMS key used to encrypt data stored on your WorkSpace. Amazon WorkSpaces does not support asymmetric KMS keys.", + "title": "VolumeEncryptionKey", + "type": "string" + }, + "WorkspaceProperties": { + "$ref": "#/definitions/AWS::WorkSpaces::Workspace.WorkspaceProperties", + "markdownDescription": "The WorkSpace properties.", + "title": "WorkspaceProperties" + } + }, + "required": [ + "BundleId", + "DirectoryId", + "UserName" + ], + "type": "object" + }, + "Type": { + "enum": [ + "AWS::WorkSpaces::Workspace" + ], + "type": "string" + }, + "UpdateReplacePolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + } + }, + "required": [ + "Type", + "Properties" + ], + "type": "object" + }, + "AWS::WorkSpaces::Workspace.WorkspaceProperties": { + "additionalProperties": false, + "properties": { + "ComputeTypeName": { + "markdownDescription": "The compute type. For more information, see [Amazon WorkSpaces Bundles](https://docs.aws.amazon.com/workspaces/details/#Amazon_WorkSpaces_Bundles) .", + "title": "ComputeTypeName", + "type": "string" + }, + "RootVolumeSizeGib": { + "markdownDescription": "The size of the root volume. For important information about how to modify the size of the root and user volumes, see [Modify a WorkSpace](https://docs.aws.amazon.com/workspaces/latest/adminguide/modify-workspaces.html) .", + "title": "RootVolumeSizeGib", + "type": "number" + }, + "RunningMode": { + "markdownDescription": "The running mode. For more information, see [Manage the WorkSpace Running Mode](https://docs.aws.amazon.com/workspaces/latest/adminguide/running-mode.html) .", + "title": "RunningMode", + "type": "string" + }, + "RunningModeAutoStopTimeoutInMinutes": { + "markdownDescription": "The time after a user logs off when WorkSpaces are automatically stopped. Configured in 60-minute intervals.", + "title": "RunningModeAutoStopTimeoutInMinutes", + "type": "number" + }, + "UserVolumeSizeGib": { + "markdownDescription": "The size of the user storage. For important information about how to modify the size of the root and user volumes, see [Modify a WorkSpace](https://docs.aws.amazon.com/workspaces/latest/adminguide/modify-workspaces.html) .", + "title": "UserVolumeSizeGib", + "type": "number" + } + }, + "type": "object" + }, + "AWS::WorkSpaces::WorkspaceIpGroup": { + "additionalProperties": false, + "properties": { + "Condition": { + "type": "string" + }, + "DeletionPolicy": { + "enum": [ + "Delete", + "Retain", + "Snapshot" + ], + "type": "string" + }, + "DependsOn": { + "anyOf": [ + { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + { + "items": { + "pattern": "^[a-zA-Z0-9]+$", + "type": "string" + }, + "type": "array" + } + ] + }, + "Metadata": { + "type": "object" + }, + "Properties": { + "additionalProperties": false, + "properties": { + "GroupDesc": { "type": "string" }, - "Tags": { - "items": { - "$ref": "#/definitions/Tag" - }, - "markdownDescription": "The tags to associate with the connection alias.", - "title": "Tags", - "type": "array" - } - }, - "required": [ - "ConnectionString" - ], - "type": "object" - }, - "Type": { - "enum": [ - "AWS::WorkSpaces::ConnectionAlias" - ], - "type": "string" - }, - "UpdateReplacePolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], - "type": "string" - } - }, - "required": [ - "Type", - "Properties" - ], - "type": "object" - }, - "AWS::WorkSpaces::ConnectionAlias.ConnectionAliasAssociation": { - "additionalProperties": false, - "properties": { - "AssociatedAccountId": { - "markdownDescription": "The identifier of the AWS account that associated the connection alias with a directory.", - "title": "AssociatedAccountId", - "type": "string" - }, - "AssociationStatus": { - "markdownDescription": "The association status of the connection alias.", - "title": "AssociationStatus", - "type": "string" - }, - "ConnectionIdentifier": { - "markdownDescription": "The identifier of the connection alias association. You use the connection identifier in the DNS TXT record when you're configuring your DNS routing policies.", - "title": "ConnectionIdentifier", - "type": "string" - }, - "ResourceId": { - "markdownDescription": "The identifier of the directory associated with a connection alias.", - "title": "ResourceId", - "type": "string" - } - }, - "type": "object" - }, - "AWS::WorkSpaces::Workspace": { - "additionalProperties": false, - "properties": { - "Condition": { - "type": "string" - }, - "DeletionPolicy": { - "enum": [ - "Delete", - "Retain", - "Snapshot" - ], - "type": "string" - }, - "DependsOn": { - "anyOf": [ - { - "pattern": "^[a-zA-Z0-9]+$", + "GroupName": { "type": "string" }, - { + "Tags": { "items": { - "pattern": "^[a-zA-Z0-9]+$", - "type": "string" + "$ref": "#/definitions/Tag" }, "type": "array" - } - ] - }, - "Metadata": { - "type": "object" - }, - "Properties": { - "additionalProperties": false, - "properties": { - "BundleId": { - "markdownDescription": "The identifier of the bundle for the WorkSpace.", - "title": "BundleId", - "type": "string" }, - "DirectoryId": { - "markdownDescription": "The identifier of the Directory Service directory for the WorkSpace.", - "title": "DirectoryId", - "type": "string" - }, - "RootVolumeEncryptionEnabled": { - "markdownDescription": "Indicates whether the data stored on the root volume is encrypted.", - "title": "RootVolumeEncryptionEnabled", - "type": "boolean" - }, - "Tags": { + "UserRules": { "items": { - "$ref": "#/definitions/Tag" + "$ref": "#/definitions/AWS::WorkSpaces::WorkspaceIpGroup.IpRuleItem" }, - "markdownDescription": "The tags for the WorkSpace.", - "title": "Tags", "type": "array" - }, - "UserName": { - "markdownDescription": "The user name of the user for the WorkSpace. This user name must exist in the Directory Service directory for the WorkSpace.", - "title": "UserName", - "type": "string" - }, - "UserVolumeEncryptionEnabled": { - "markdownDescription": "Indicates whether the data stored on the user volume is encrypted.", - "title": "UserVolumeEncryptionEnabled", - "type": "boolean" - }, - "VolumeEncryptionKey": { - "markdownDescription": "The symmetric AWS KMS key used to encrypt data stored on your WorkSpace. Amazon WorkSpaces does not support asymmetric KMS keys.", - "title": "VolumeEncryptionKey", - "type": "string" - }, - "WorkspaceProperties": { - "$ref": "#/definitions/AWS::WorkSpaces::Workspace.WorkspaceProperties", - "markdownDescription": "The WorkSpace properties.", - "title": "WorkspaceProperties" } }, "required": [ - "BundleId", - "DirectoryId", - "UserName" + "GroupName" ], "type": "object" }, "Type": { "enum": [ - "AWS::WorkSpaces::Workspace" + "AWS::WorkSpaces::WorkspaceIpGroup" ], "type": "string" }, @@ -368763,35 +377073,19 @@ ], "type": "object" }, - "AWS::WorkSpaces::Workspace.WorkspaceProperties": { + "AWS::WorkSpaces::WorkspaceIpGroup.IpRuleItem": { "additionalProperties": false, "properties": { - "ComputeTypeName": { - "markdownDescription": "The compute type. For more information, see [Amazon WorkSpaces Bundles](https://docs.aws.amazon.com/workspaces/details/#Amazon_WorkSpaces_Bundles) .", - "title": "ComputeTypeName", + "IpRule": { "type": "string" }, - "RootVolumeSizeGib": { - "markdownDescription": "The size of the root volume. For important information about how to modify the size of the root and user volumes, see [Modify a WorkSpace](https://docs.aws.amazon.com/workspaces/latest/adminguide/modify-workspaces.html) .", - "title": "RootVolumeSizeGib", - "type": "number" - }, - "RunningMode": { - "markdownDescription": "The running mode. For more information, see [Manage the WorkSpace Running Mode](https://docs.aws.amazon.com/workspaces/latest/adminguide/running-mode.html) .", - "title": "RunningMode", + "RuleDesc": { "type": "string" - }, - "RunningModeAutoStopTimeoutInMinutes": { - "markdownDescription": "The time after a user logs off when WorkSpaces are automatically stopped. Configured in 60-minute intervals.", - "title": "RunningModeAutoStopTimeoutInMinutes", - "type": "number" - }, - "UserVolumeSizeGib": { - "markdownDescription": "The size of the user storage. For important information about how to modify the size of the root and user volumes, see [Modify a WorkSpace](https://docs.aws.amazon.com/workspaces/latest/adminguide/modify-workspaces.html) .", - "title": "UserVolumeSizeGib", - "type": "number" } }, + "required": [ + "IpRule" + ], "type": "object" }, "AWS::WorkSpaces::WorkspacesPool": { @@ -372350,6 +380644,9 @@ { "$ref": "#/definitions/AWS::AuditManager::Assessment" }, + { + "$ref": "#/definitions/AWS::AuditManager::AssessmentFramework" + }, { "$ref": "#/definitions/AWS::AutoScaling::AutoScalingGroup" }, @@ -372401,6 +380698,9 @@ { "$ref": "#/definitions/AWS::Backup::Framework" }, + { + "$ref": "#/definitions/AWS::Backup::LegalHold" + }, { "$ref": "#/definitions/AWS::Backup::LogicallyAirGappedBackupVault" }, @@ -372494,6 +380794,9 @@ { "$ref": "#/definitions/AWS::Bedrock::KnowledgeBase" }, + { + "$ref": "#/definitions/AWS::Bedrock::KnowledgeBasePolicy" + }, { "$ref": "#/definitions/AWS::Bedrock::Prompt" }, @@ -372506,9 +380809,6 @@ { "$ref": "#/definitions/AWS::BedrockAgentCore::ApiKeyCredentialProvider" }, - { - "$ref": "#/definitions/AWS::BedrockAgentCore::Browser" - }, { "$ref": "#/definitions/AWS::BedrockAgentCore::BrowserCustom" }, @@ -372638,6 +380938,15 @@ { "$ref": "#/definitions/AWS::CertificateManager::Account" }, + { + "$ref": "#/definitions/AWS::CertificateManager::AcmeDomainValidation" + }, + { + "$ref": "#/definitions/AWS::CertificateManager::AcmeEndpoint" + }, + { + "$ref": "#/definitions/AWS::CertificateManager::AcmeExternalAccountBinding" + }, { "$ref": "#/definitions/AWS::CertificateManager::Certificate" }, @@ -372656,6 +380965,9 @@ { "$ref": "#/definitions/AWS::Chime::AppInstanceBot" }, + { + "$ref": "#/definitions/AWS::Chime::AppInstanceUser" + }, { "$ref": "#/definitions/AWS::CleanRooms::AnalysisTemplate" }, @@ -372674,6 +380986,9 @@ { "$ref": "#/definitions/AWS::CleanRooms::IdNamespaceAssociation" }, + { + "$ref": "#/definitions/AWS::CleanRooms::IntermediateTable" + }, { "$ref": "#/definitions/AWS::CleanRooms::Membership" }, @@ -372695,6 +381010,9 @@ { "$ref": "#/definitions/AWS::CloudFormation::CustomResource" }, + { + "$ref": "#/definitions/AWS::CloudFormation::GeneratedTemplate" + }, { "$ref": "#/definitions/AWS::CloudFormation::GuardHook" }, @@ -372947,6 +381265,12 @@ { "$ref": "#/definitions/AWS::Cognito::UserPoolIdentityProvider" }, + { + "$ref": "#/definitions/AWS::Cognito::UserPoolRegionalConfigurationAttachment" + }, + { + "$ref": "#/definitions/AWS::Cognito::UserPoolReplica" + }, { "$ref": "#/definitions/AWS::Cognito::UserPoolResourceServer" }, @@ -372986,6 +381310,9 @@ { "$ref": "#/definitions/AWS::Config::ConformancePack" }, + { + "$ref": "#/definitions/AWS::Config::Connector" + }, { "$ref": "#/definitions/AWS::Config::DeliveryChannel" }, @@ -373022,6 +381349,9 @@ { "$ref": "#/definitions/AWS::Connect::ContactFlowVersion" }, + { + "$ref": "#/definitions/AWS::Connect::DataLakeAssociation" + }, { "$ref": "#/definitions/AWS::Connect::DataTable" }, @@ -373082,6 +381412,9 @@ { "$ref": "#/definitions/AWS::Connect::TaskTemplate" }, + { + "$ref": "#/definitions/AWS::Connect::TestCase" + }, { "$ref": "#/definitions/AWS::Connect::TrafficDistributionGroup" }, @@ -373124,6 +381457,9 @@ { "$ref": "#/definitions/AWS::CustomerProfiles::Domain" }, + { + "$ref": "#/definitions/AWS::CustomerProfiles::DomainObjectType" + }, { "$ref": "#/definitions/AWS::CustomerProfiles::EventStream" }, @@ -373673,6 +382009,15 @@ { "$ref": "#/definitions/AWS::EC2::TransitGatewayPeeringAttachment" }, + { + "$ref": "#/definitions/AWS::EC2::TransitGatewayPolicyTable" + }, + { + "$ref": "#/definitions/AWS::EC2::TransitGatewayPolicyTableAssociation" + }, + { + "$ref": "#/definitions/AWS::EC2::TransitGatewayPolicyTableEntry" + }, { "$ref": "#/definitions/AWS::EC2::TransitGatewayRoute" }, @@ -374132,6 +382477,9 @@ { "$ref": "#/definitions/AWS::GlobalAccelerator::Listener" }, + { + "$ref": "#/definitions/AWS::Glue::Blueprint" + }, { "$ref": "#/definitions/AWS::Glue::Catalog" }, @@ -374204,6 +382552,9 @@ { "$ref": "#/definitions/AWS::Glue::UsageProfile" }, + { + "$ref": "#/definitions/AWS::Glue::UserDefinedFunction" + }, { "$ref": "#/definitions/AWS::Glue::Workflow" }, @@ -374309,6 +382660,9 @@ { "$ref": "#/definitions/AWS::HealthImaging::Datastore" }, + { + "$ref": "#/definitions/AWS::HealthLake::DataTransformationProfile" + }, { "$ref": "#/definitions/AWS::HealthLake::FHIRDatastore" }, @@ -374786,6 +383140,12 @@ { "$ref": "#/definitions/AWS::Lambda::LayerVersionPermission" }, + { + "$ref": "#/definitions/AWS::Lambda::MicrovmImage" + }, + { + "$ref": "#/definitions/AWS::Lambda::NetworkConnector" + }, { "$ref": "#/definitions/AWS::Lambda::Permission" }, @@ -374951,6 +383311,9 @@ { "$ref": "#/definitions/AWS::MSK::BatchScramSecret" }, + { + "$ref": "#/definitions/AWS::MSK::Channel" + }, { "$ref": "#/definitions/AWS::MSK::Cluster" }, @@ -375080,6 +383443,9 @@ { "$ref": "#/definitions/AWS::MediaLive::Network" }, + { + "$ref": "#/definitions/AWS::MediaLive::Node" + }, { "$ref": "#/definitions/AWS::MediaLive::SdiSource" }, @@ -375203,6 +383569,9 @@ { "$ref": "#/definitions/AWS::NetworkFirewall::VpcEndpointAssociation" }, + { + "$ref": "#/definitions/AWS::NetworkFlowMonitor::Monitor" + }, { "$ref": "#/definitions/AWS::NetworkManager::ConnectAttachment" }, @@ -375413,6 +383782,9 @@ { "$ref": "#/definitions/AWS::Organizations::ResourcePolicy" }, + { + "$ref": "#/definitions/AWS::Outposts::Site" + }, { "$ref": "#/definitions/AWS::PCAConnectorAD::Connector" }, @@ -375584,6 +383956,9 @@ { "$ref": "#/definitions/AWS::QuickSight::ActionConnector" }, + { + "$ref": "#/definitions/AWS::QuickSight::Agent" + }, { "$ref": "#/definitions/AWS::QuickSight::Analysis" }, @@ -375599,12 +383974,24 @@ { "$ref": "#/definitions/AWS::QuickSight::DataSource" }, + { + "$ref": "#/definitions/AWS::QuickSight::Flow" + }, { "$ref": "#/definitions/AWS::QuickSight::Folder" }, + { + "$ref": "#/definitions/AWS::QuickSight::KnowledgeBase" + }, + { + "$ref": "#/definitions/AWS::QuickSight::OAuthClientApplication" + }, { "$ref": "#/definitions/AWS::QuickSight::RefreshSchedule" }, + { + "$ref": "#/definitions/AWS::QuickSight::Space" + }, { "$ref": "#/definitions/AWS::QuickSight::Template" }, @@ -376019,6 +384406,12 @@ { "$ref": "#/definitions/AWS::S3Vectors::VectorBucketPolicy" }, + { + "$ref": "#/definitions/AWS::SCN::Dataset" + }, + { + "$ref": "#/definitions/AWS::SCN::Namespace" + }, { "$ref": "#/definitions/AWS::SDB::Domain" }, @@ -376100,6 +384493,9 @@ { "$ref": "#/definitions/AWS::SMSVOICE::ProtectConfiguration" }, + { + "$ref": "#/definitions/AWS::SMSVOICE::Registration" + }, { "$ref": "#/definitions/AWS::SMSVOICE::ResourcePolicy" }, @@ -376142,6 +384538,9 @@ { "$ref": "#/definitions/AWS::SSM::MaintenanceWindowTask" }, + { + "$ref": "#/definitions/AWS::SSM::OpsItem" + }, { "$ref": "#/definitions/AWS::SSM::Parameter" }, @@ -376199,6 +384598,12 @@ { "$ref": "#/definitions/AWS::SSO::PermissionSet" }, + { + "$ref": "#/definitions/AWS::SageMaker::Action" + }, + { + "$ref": "#/definitions/AWS::SageMaker::Algorithm" + }, { "$ref": "#/definitions/AWS::SageMaker::App" }, @@ -376211,6 +384616,9 @@ { "$ref": "#/definitions/AWS::SageMaker::CodeRepository" }, + { + "$ref": "#/definitions/AWS::SageMaker::Context" + }, { "$ref": "#/definitions/AWS::SageMaker::DataQualityJobDefinition" }, @@ -376229,9 +384637,18 @@ { "$ref": "#/definitions/AWS::SageMaker::EndpointConfig" }, + { + "$ref": "#/definitions/AWS::SageMaker::Experiment" + }, + { + "$ref": "#/definitions/AWS::SageMaker::ExperimentTrialComponent" + }, { "$ref": "#/definitions/AWS::SageMaker::FeatureGroup" }, + { + "$ref": "#/definitions/AWS::SageMaker::Hub" + }, { "$ref": "#/definitions/AWS::SageMaker::Image" }, @@ -376298,6 +384715,9 @@ { "$ref": "#/definitions/AWS::SageMaker::StudioLifecycleConfig" }, + { + "$ref": "#/definitions/AWS::SageMaker::TrialComponent" + }, { "$ref": "#/definitions/AWS::SageMaker::UserProfile" }, @@ -376331,6 +384751,9 @@ { "$ref": "#/definitions/AWS::SecurityAgent::Pentest" }, + { + "$ref": "#/definitions/AWS::SecurityAgent::SecurityRequirementPack" + }, { "$ref": "#/definitions/AWS::SecurityAgent::TargetDomain" }, @@ -376346,6 +384769,9 @@ { "$ref": "#/definitions/AWS::SecurityHub::ConfigurationPolicy" }, + { + "$ref": "#/definitions/AWS::SecurityHub::Connector" + }, { "$ref": "#/definitions/AWS::SecurityHub::ConnectorV2" }, @@ -376499,6 +384925,9 @@ { "$ref": "#/definitions/AWS::StepFunctions::StateMachineVersion" }, + { + "$ref": "#/definitions/AWS::StorageGateway::TapePool" + }, { "$ref": "#/definitions/AWS::SupportApp::AccountAlias" }, @@ -376532,6 +384961,9 @@ { "$ref": "#/definitions/AWS::Timestream::Table" }, + { + "$ref": "#/definitions/AWS::Transcribe::VocabularyFilter" + }, { "$ref": "#/definitions/AWS::Transfer::Agreement" }, @@ -376691,6 +385123,15 @@ { "$ref": "#/definitions/AWS::WAFv2::WebACLAssociation" }, + { + "$ref": "#/definitions/AWS::WellArchitected::Lens" + }, + { + "$ref": "#/definitions/AWS::WellArchitected::Profile" + }, + { + "$ref": "#/definitions/AWS::WellArchitected::ReviewTemplate" + }, { "$ref": "#/definitions/AWS::Wisdom::AIAgent" }, @@ -376733,6 +385174,9 @@ { "$ref": "#/definitions/AWS::WorkSpaces::Workspace" }, + { + "$ref": "#/definitions/AWS::WorkSpaces::WorkspaceIpGroup" + }, { "$ref": "#/definitions/AWS::WorkSpaces::WorkspacesPool" },