feat: update L1 CloudFormation resource definitions

[aws-cdk-automation]

Updates the L1 CloudFormation resource definitions with the latest changes from @aws-cdk/aws-service-spec

L1 CloudFormation resource definition changes:

├[~] service aws-appintegrations
│ └ resources
│    └[~] resource AWS::AppIntegrations::Application
│      ├  - documentation: Resource Type definition for AWS:AppIntegrations::Application
│      │  + documentation: Creates and persists an Application resource.
│      ├ properties
│      │  ├ ApplicationSourceConfig: (documentation changed)
│      │  ├ Description: (documentation changed)
│      │  └ Tags: (documentation changed)
│      └ types
│         ├[~] type ApplicationSourceConfig
│         │ ├  - documentation: Application source config
│         │ │  + documentation: The configuration for where the application should be loaded from.
│         │ └ properties
│         │    └ ExternalUrlConfig: (documentation changed)
│         └[~] type ExternalUrlConfig
│           ├  - documentation: undefined
│           │  + documentation: The external URL source for the application.
│           └ properties
│              ├ AccessUrl: (documentation changed)
│              └ ApprovedOrigins: (documentation changed)
├[~] service aws-applicationautoscaling
│ └ resources
│    └[~] resource AWS::ApplicationAutoScaling::ScalingPolicy
│      └ types
│         └[~] type TargetTrackingMetricStat
│           └  - documentation: This structure defines the CloudWatch metric to return, along with the statistic, period, and unit.
│              `TargetTrackingMetricStat` is a property of the [AWS::ApplicationAutoScaling::ScalingPolicy TargetTrackingMetricDataQuery](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationautoscaling-scalingpolicy-targettrackingmetricdataquery.html) property type.
│              For more information about the CloudWatch terminology below, see [Amazon CloudWatch concepts](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch_concepts.html) in the *Amazon CloudWatch User Guide* .
│              + documentation: This structure defines the CloudWatch metric to return, along with the statistic and unit.
│              `TargetTrackingMetricStat` is a property of the [AWS::ApplicationAutoScaling::ScalingPolicy TargetTrackingMetricDataQuery](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationautoscaling-scalingpolicy-targettrackingmetricdataquery.html) property type.
│              For more information about the CloudWatch terminology below, see [Amazon CloudWatch concepts](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch_concepts.html) in the *Amazon CloudWatch User Guide* .
├[~] service aws-appmesh
│ └ resources
│    └[~] resource AWS::AppMesh::VirtualNode
│      └  - documentation: Creates a virtual node within a service mesh.
│         A virtual node acts as a logical pointer to a particular task group, such as an Amazon ECS service or a Kubernetes deployment. When you create a virtual node, you can specify the service discovery information for your task group, and whether the proxy running in a task group will communicate with other proxies using Transport Layer Security (TLS).
│         You define a `listener` for any inbound traffic that your virtual node expects. Any virtual service that your virtual node expects to communicate to is specified as a `backend` .
│         The response metadata for your new virtual node contains the `arn` that is associated with the virtual node. Set this value to the full ARN; for example, `arn:aws:appmesh:us-west-2:123456789012:myMesh/default/virtualNode/myApp` ) as the `APPMESH_RESOURCE_ARN` environment variable for your task group's Envoy proxy container in your task definition or pod spec. This is then mapped to the `node.id` and `node.cluster` Envoy parameters.
│         > By default, App Mesh uses the name of the resource you specified in `APPMESH_RESOURCE_ARN` when Envoy is referring to itself in metrics and traces. You can override this behavior by setting the `APPMESH_RESOURCE_CLUSTER` environment variable with your own name. 
│         For more information about virtual nodes, see [Virtual nodes](https://docs.aws.amazon.com/app-mesh/latest/userguide/virtual_nodes.html) . You must be using `1.15.0` or later of the Envoy image when setting these variables. For more information about App Mesh Envoy variables, see [Envoy image](https://docs.aws.amazon.com/app-mesh/latest/userguide/envoy.html) in the AWS App Mesh User Guide.
│         + documentation: Creates a virtual node within a service mesh.
│         A virtual node acts as a logical pointer to a particular task group, such as an Amazon ECS service or a Kubernetes deployment. When you create a virtual node, you can specify the service discovery information for your task group, and whether the proxy running in a task group will communicate with other proxies using Transport Layer Security (TLS).
│         You define a `listener` for any inbound traffic that your virtual node expects. Any virtual service that your virtual node expects to communicate to is specified as a `backend` .
│         The response metadata for your new virtual node contains the `arn` that is associated with the virtual node. Set this value to the full ARN; for example, `arn:aws:appmesh:us-west-2:123456789012:myMesh/default/virtualNode/myApp` ) as the `APPMESH_RESOURCE_ARN` environment variable for your task group's Envoy proxy container in your task definition or pod spec. This is then mapped to the `node.id` and `node.cluster` Envoy parameters.
│         > By default, App Mesh uses the name of the resource you specified in `APPMESH_RESOURCE_ARN` when Envoy is referring to itself in metrics and traces. You can override this behavior by setting the `APPMESH_RESOURCE_CLUSTER` environment variable with your own name. 
│         For more information about virtual nodes, see [Virtual nodes](https://docs.aws.amazon.com/app-mesh/latest/userguide/virtual_nodes.html) . You must be using `1.15.0` or later of the Envoy image when setting these variables. For more information aboutApp Mesh Envoy variables, see [Envoy image](https://docs.aws.amazon.com/app-mesh/latest/userguide/envoy.html) in the AWS App Mesh User Guide.
├[~] service aws-aps
│ └ resources
│    ├[~] resource AWS::APS::RuleGroupsNamespace
│    │ └  - documentation: The definition of a rule groups namespace in an Amazon Managed Service for Prometheus workspace. A rule groups namespace is associated with exactly one rules file. A workspace can have multiple rule groups namespaces. For more information about rules files, seee [Creating a rules file](https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-ruler-rulesfile.html) , in the *Amazon Managed Service for Prometheus User Guide* .
│    │    + documentation: The definition of a rule groups namespace in an Amazon Managed Service for Prometheus workspace. A rule groups namespace is associated with exactly one rules file. A workspace can have multiple rule groups namespaces. For more information about rules files, see [Creating a rules file](https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-ruler-rulesfile.html) , in the *Amazon Managed Service for Prometheus User Guide* .
│    └[+] resource AWS::APS::Scraper
│      ├  name: Scraper
│      │  cloudFormationType: AWS::APS::Scraper
│      │  documentation: Resource Type definition for AWS::APS::Scraper
│      │  tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│      ├ properties
│      │  ├Alias: string (immutable)
│      │  ├ScrapeConfiguration: ScrapeConfiguration (required, immutable)
│      │  ├Source: Source (required, immutable)
│      │  ├Destination: Destination (required, immutable)
│      │  └Tags: Array<tag>
│      ├ attributes
│      │  ├ScraperId: string
│      │  ├Arn: string
│      │  └RoleArn: string
│      └ types
│         ├type ScrapeConfiguration
│         │├  documentation: Scraper configuration
│         ││  name: ScrapeConfiguration
│         │└ properties
│         │   └ConfigurationBlob: string (required)
│         ├type Source
│         │├  documentation: Scraper metrics source
│         ││  name: Source
│         │└ properties
│         │   └EksConfiguration: EksConfiguration (required)
│         ├type EksConfiguration
│         │├  documentation: Configuration for EKS metrics source
│         ││  name: EksConfiguration
│         │└ properties
│         │   ├ClusterArn: string (required)
│         │   ├SecurityGroupIds: Array<string>
│         │   └SubnetIds: Array<string> (required)
│         ├type Destination
│         │├  documentation: Scraper metrics destination
│         ││  name: Destination
│         │└ properties
│         │   └AmpConfiguration: AmpConfiguration (required)
│         └type AmpConfiguration
│          ├  documentation: Configuration for Amazon Managed Prometheus metrics destination
│          │  name: AmpConfiguration
│          └ properties
│             └WorkspaceArn: string (required)
├[~] service aws-cleanrooms
│ └ resources
│    └[~] resource AWS::CleanRooms::ConfiguredTable
│      └ types
│         ├[~] type AnalysisRuleCustom
│         │ └ properties
│         │    └[+] DifferentialPrivacy: DifferentialPrivacy
│         ├[+] type DifferentialPrivacy
│         │ ├  name: DifferentialPrivacy
│         │ └ properties
│         │    └Columns: Array<DifferentialPrivacyColumn> (required)
│         └[+] type DifferentialPrivacyColumn
│           ├  documentation: Specifies the name of the column that contains the unique identifier of your users, whose privacy you want to protect.
│           │  name: DifferentialPrivacyColumn
│           └ properties
│              └Name: string (required)
├[~] service aws-codebuild
│ └ resources
│    ├[~] resource AWS::CodeBuild::Project
│    │ └ types
│    │    ├[~] type ProjectSourceVersion
│    │    │ └ properties
│    │    │    └ SourceVersion: (documentation changed)
│    │    └[~] type Source
│    │      └ properties
│    │         ├ Location: (documentation changed)
│    │         └ Type: (documentation changed)
│    └[~] resource AWS::CodeBuild::SourceCredential
│      └ properties
│         ├ AuthType: (documentation changed)
│         └ ServerType: (documentation changed)
├[~] service aws-codestarconnections
│ └ resources
│    └[~] resource AWS::CodeStarConnections::SyncConfiguration
│      └ properties
│         ├[+] PublishDeploymentStatus: string
│         └[+] TriggerResourceUpdateOn: string
├[~] service aws-connect
│ └ resources
│    └[~] resource AWS::Connect::PredefinedAttribute
│      └ attributes
│         ├[+] LastModifiedRegion: string
│         └[+] LastModifiedTime: number
├[~] service aws-dms
│ └ resources
│    └[~] resource AWS::DMS::Endpoint
│      └ types
│         └[~] type PostgreSqlSettings
│           └ properties
│              ├ CaptureDdls: (documentation changed)
│              ├ DdlArtifactsSchema: (documentation changed)
│              ├ FailTasksOnLobTruncation: (documentation changed)
│              ├ HeartbeatEnable: (documentation changed)
│              ├ HeartbeatFrequency: (documentation changed)
│              ├ HeartbeatSchema: (documentation changed)
│              ├ MapBooleanAsBoolean: (documentation changed)
│              ├ MaxFileSize: (documentation changed)
│              └ PluginName: (documentation changed)
├[~] service aws-docdbelastic
│ └ resources
│    └[~] resource AWS::DocDBElastic::Cluster
│      └ properties
│         ├ BackupRetentionPeriod: (documentation changed)
│         ├ PreferredBackupWindow: (documentation changed)
│         └ ShardInstanceCount: (documentation changed)
├[~] service aws-ec2
│ └ resources
│    ├[~] resource AWS::EC2::Subnet
│    │ └ properties
│    │    └[+] EnableLniAtDeviceIndex: integer
│    └[~] resource AWS::EC2::TransitGatewayRouteTableAssociation
├[~] service aws-ecs
│ └ resources
│    └[~] resource AWS::ECS::TaskSet
│      └  - documentation: Create a task set in the specified cluster and service. This is used when a service uses the `EXTERNAL` deployment controller type. For more information, see [Amazon ECS deployment types](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-types.html) in the *Amazon Elastic Container Service Developer Guide* .
│         For information about the maximum number of task sets and otther quotas, see [Amazon ECS service quotas](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-quotas.html) in the *Amazon Elastic Container Service Developer Guide* .
│         + documentation: Create a task set in the specified cluster and service. This is used when a service uses the `EXTERNAL` deployment controller type. For more information, see [Amazon ECS deployment types](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-types.html) in the *Amazon Elastic Container Service Developer Guide* .
│         > On March 21, 2024, a change was made to resolve the task definition revision before authorization. When a task definition revision is not specified, authorization will occur using the latest revision of a task definition. 
│         For information about the maximum number of task sets and otther quotas, see [Amazon ECS service quotas](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-quotas.html) in the *Amazon Elastic Container Service Developer Guide* .
├[~] service aws-entityresolution
│ └ resources
│    └[~] resource AWS::EntityResolution::MatchingWorkflow
│      └ types
│         └[~] type ResolutionTechniques
│           └ properties
│              └ ResolutionType: (documentation changed)
├[~] service aws-globalaccelerator
│ └ resources
│    └[~] resource AWS::GlobalAccelerator::EndpointGroup
│      └ types
│         └[~] type EndpointConfiguration
│           └ properties
│              └ AttachmentArn: (documentation changed)
├[~] service aws-glue
│ └ resources
│    └[~] resource AWS::Glue::Crawler
│      ├ properties
│      │  └ LakeFormationConfiguration: (documentation changed)
│      └ types
│         └[~] type LakeFormationConfiguration
│           ├  - documentation: undefined
│           │  + documentation: Specifies AWS Lake Formation configuration settings for the crawler.
│           └ properties
│              ├ AccountId: (documentation changed)
│              └ UseLakeFormationCredentials: (documentation changed)
├[~] service aws-iotsitewise
│ └ resources
│    └[~] resource AWS::IoTSiteWise::AssetModel
│      └ types
│         ├[~] type AssetModelCompositeModel
│         │ └ properties
│         │    ├ Description: (documentation changed)
│         │    ├ ExternalId: (documentation changed)
│         │    ├ ParentAssetModelCompositeModelExternalId: (documentation changed)
│         │    └ Path: (documentation changed)
│         ├[~] type AssetModelHierarchy
│         │ └ properties
│         │    ├ ExternalId: (documentation changed)
│         │    └ LogicalId: (documentation changed)
│         └[~] type AssetModelProperty
│           └ properties
│              ├ ExternalId: (documentation changed)
│              └ LogicalId: (documentation changed)
├[~] service aws-kafkaconnect
│ └ resources
│    ├[~] resource AWS::KafkaConnect::CustomPlugin
│    │ ├  - documentation: An example resource schema demonstrating some basic constructs and validation rules.
│    │ │  + documentation: Creates a custom plugin using the specified properties.
│    │ ├ properties
│    │ │  ├ ContentType: (documentation changed)
│    │ │  ├ Description: (documentation changed)
│    │ │  └ Location: (documentation changed)
│    │ ├ attributes
│    │ │  └ CustomPluginArn: (documentation changed)
│    │ └ types
│    │    ├[~] type CustomPluginFileDescription
│    │    │ └  - documentation: Details about the custom plugin file.
│    │    │    + documentation: Details about a custom plugin file.
│    │    └[~] type S3Location
│    │      └  - documentation: The S3 bucket Amazon Resource Name (ARN), file key, and object version of the plugin file stored in Amazon S3.
│    │         + documentation: The location of an object in Amazon S3.
│    └[~] resource AWS::KafkaConnect::WorkerConfiguration
│      ├  - documentation: The configuration of the workers, which are the processes that run the connector logic.
│      │  + documentation: Creates a worker configuration using the specified properties.
│      ├ properties
│      │  ├ Description: (documentation changed)
│      │  └ PropertiesFileContent: (documentation changed)
│      └ attributes
│         ├ Revision: (documentation changed)
│         └ WorkerConfigurationArn: (documentation changed)
├[~] service aws-kendra
│ └ resources
│    └[~] resource AWS::Kendra::DataSource
│      └ types
│         ├[~] type ConnectionConfiguration
│         │ └ properties
│         │    └ SecretArn: (documentation changed)
│         ├[~] type CustomDocumentEnrichmentConfiguration
│         │ └ properties
│         │    └ RoleArn: (documentation changed)
│         ├[~] type HookConfiguration
│         │ └ properties
│         │    └ LambdaArn: (documentation changed)
│         ├[~] type OneDriveUsers
│         │ └ properties
│         │    └ OneDriveUserList: (documentation changed)
│         ├[~] type ProxyConfiguration
│         │ └ properties
│         │    └ Credentials: (documentation changed)
│         └[~] type WebCrawlerBasicAuthentication
│           └ properties
│              └ Credentials: (documentation changed)
├[~] service aws-kinesisfirehose
│ └ resources
│    └[~] resource AWS::KinesisFirehose::DeliveryStream
│      ├ properties
│      │  └ Tags: (documentation changed)
│      └ types
│         └[~] type ParquetSerDe
│           └  - documentation: A serializer to use for converting data to the Parquet format before storing it in Amazon S3. For more information, see [Apache Parquet](https://docs.aws.amazon.com/https://parquet.apache.org/documentation/latest/) .
│              + documentation: A serializer to use for converting data to the Parquet format before storing it in Amazon S3. For more information, see [Apache Parquet](https://docs.aws.amazon.com/https://parquet.apache.org/docs/) .
├[~] service aws-managedblockchain
│ └ resources
│    └[~] resource AWS::ManagedBlockchain::Node
│      └ properties
│         └ NetworkId: (documentation changed)
├[~] service aws-oam
│ └ resources
│    └[~] resource AWS::Oam::Link
│      └ properties
│         └ ResourceTypes: (documentation changed)
├[~] service aws-rds
│ └ resources
│    ├[~] resource AWS::RDS::DBCluster
│    │ ├ properties
│    │ │  ├ ScalingConfiguration: (documentation changed)
│    │ │  └ ServerlessV2ScalingConfiguration: (documentation changed)
│    │ └ types
│    │    ├[~] type ScalingConfiguration
│    │    │ └  - documentation: The `ScalingConfiguration` property type specifies the scaling configuration of an Aurora Serverless DB cluster.
│    │    │    For more information, see [Using Amazon Aurora Serverless](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless.html) in the *Amazon Aurora User Guide* .
│    │    │    This property is only supported for Aurora Serverless v1. For Aurora Serverless v2, Use the `ServerlessV2ScalingConfiguration` property.
│    │    │    Valid for: Aurora DB clusters only
│    │    │    + documentation: The `ScalingConfiguration` property type specifies the scaling configuration of an Aurora Serverless v1 DB cluster.
│    │    │    For more information, see [Using Amazon Aurora Serverless](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless.html) in the *Amazon Aurora User Guide* .
│    │    │    This property is only supported for Aurora Serverless v1. For Aurora Serverless v2, Use the `ServerlessV2ScalingConfiguration` property.
│    │    │    Valid for: Aurora Serverless v1 DB clusters only
│    │    └[~] type ServerlessV2ScalingConfiguration
│    │      └  - documentation: The `ServerlessV2ScalingConfiguration` property type specifies the scaling configuration of an Aurora Serverless V2 DB cluster.
│    │         For more information, see [Using Amazon Aurora Serverless v2](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.html) in the *Amazon Aurora User Guide* .
│    │         If you have an Aurora cluster, you must set the `ScalingConfigurationInfo` attribute before you add a DB instance that uses the `db.serverless` DB instance class. For more information, see [Clusters that use Aurora Serverless v2 must have a capacity range specified](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.requirements.html#aurora-serverless-v2.requirements.capacity-range) in the *Amazon Aurora User Guide* .
│    │         This property is only supported for Aurora Serverless v2. For Aurora Serverless v1, Use the `ScalingConfiguration` property.
│    │         + documentation: The `ServerlessV2ScalingConfiguration` property type specifies the scaling configuration of an Aurora Serverless V2 DB cluster.
│    │         For more information, see [Using Amazon Aurora Serverless v2](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.html) in the *Amazon Aurora User Guide* .
│    │         If you have an Aurora cluster, you must set the `ScalingConfigurationInfo` attribute before you add a DB instance that uses the `db.serverless` DB instance class. For more information, see [Clusters that use Aurora Serverless v2 must have a capacity range specified](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.requirements.html#aurora-serverless-v2.requirements.capacity-range) in the *Amazon Aurora User Guide* .
│    │         This property is only supported for Aurora Serverless v2. For Aurora Serverless v1, use the `ScalingConfiguration` property.
│    │         Valid for: Aurora Serverless v2 DB clusters
│    └[~] resource AWS::RDS::Integration
│      └ properties
│         ├[+] DataFilter: string
│         ├[+] Description: string
│         └ IntegrationName: - string (immutable)
│                            + string
├[~] service aws-securityhub
│ └ resources
│    └[~] resource AWS::SecurityHub::AutomationRule
│      └ types
│         ├[~] type AutomationRulesFindingFilters
│         │ └ properties
│         │    ├ CreatedAt: (documentation changed)
│         │    ├ FirstObservedAt: (documentation changed)
│         │    ├ LastObservedAt: (documentation changed)
│         │    ├ NoteUpdatedAt: (documentation changed)
│         │    └ UpdatedAt: (documentation changed)
│         └[~] type DateFilter
│           └ properties
│              ├ End: (documentation changed)
│              └ Start: (documentation changed)
└[+] service aws-securitylake
  ├  capitalized: SecurityLake
  │  cloudFormationNamespace: AWS::SecurityLake
  │  name: aws-securitylake
  │  shortName: securitylake
  └ resources
     └resource AWS::SecurityLake::DataLake
      ├  name: DataLake
      │  cloudFormationType: AWS::SecurityLake::DataLake
      │  documentation: Resource Type definition for AWS::SecurityLake::DataLake
      │  tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
      ├ properties
      │  ├EncryptionConfiguration: EncryptionConfiguration
      │  ├LifecycleConfiguration: LifecycleConfiguration
      │  ├ReplicationConfiguration: ReplicationConfiguration
      │  ├MetaStoreManagerRoleArn: string (immutable)
      │  └Tags: Array<tag>
      ├ attributes
      │  ├Arn: string
      │  └S3BucketArn: string
      └ types
         ├type EncryptionConfiguration
         │├  documentation: Provides encryption details of Amazon Security Lake object.
         ││  name: EncryptionConfiguration
         │└ properties
         │   └KmsKeyId: string
         ├type LifecycleConfiguration
         │├  documentation: Provides lifecycle details of Amazon Security Lake object.
         ││  name: LifecycleConfiguration
         │└ properties
         │   ├Expiration: Expiration
         │   └Transitions: Array<Transitions>
         ├type Expiration
         │├  documentation: Provides data expiration details of Amazon Security Lake object.
         ││  name: Expiration
         │└ properties
         │   └Days: integer
         ├type Transitions
         │├  name: Transitions
         │└ properties
         │   ├Days: integer
         │   └StorageClass: string
         └type ReplicationConfiguration
          ├  documentation: Provides replication details of Amazon Security Lake object.
          │  name: ReplicationConfiguration
          └ properties
             ├Regions: Array<string>
             └RoleArn: string

[aws-cdk-automation]

AWS CodeBuild CI Report

• CodeBuild project: AutoBuildv2Project1C6BFA3F-wQm2hXv2jqQv
• Commit ID: d616ee8
• Result: SUCCEEDED
• Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).