Skip to content

Commit aff5e37

Browse files
Update CloudFormation schemas to 2026-08-04 (#4601)
Co-authored-by: kddejong <36457093+kddejong@users.noreply.github.com>
1 parent e00c456 commit aff5e37

6 files changed

Lines changed: 684 additions & 37 deletions

File tree

docs/rules.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ To include these rules, use the `-e/include-experimental` argument when running
4646
## Rules
4747
(_This documentation is generated by running `cfn-lint --update-documentation`, do not alter this manually_)
4848

49-
The following **323** rules are applied by this linter:
49+
The following **325** rules are applied by this linter:
5050

5151
| Rule ID | Title | Description | Config<br />(Name:Type:Default) | Source | Tags |
5252
| -------- | ----- | ----------- | ---------- | ------ | ---- |
@@ -179,6 +179,7 @@ The following **323** rules are applied by this linter:
179179
| [E3063<a name="E3063"></a>](../src/cfnlint/rules/resources/guardduty/DetectorExclusiveProperties.py) | Validate GuardDuty Detector property exclusivity | The request failed because both DataSources and Features were provided. You can provide only one; it is recommended to use Features. | | [Source](https://docs.aws.amazon.com/pt_br/guardduty/latest/ug/guardduty-features-activation-model.html) | `resources`,`guardduty` |
180180
| [E3064<a name="E3064"></a>](../src/cfnlint/rules/resources/ectwo/VpcEndpointPrivateDnsDuplicate.py) | Validate unique PrivateDnsEnabled per service per VPC | Only one Interface VPC Endpoint per service can have PrivateDnsEnabled set to true in a VPC. A second endpoint with the same service and PrivateDnsEnabled will fail to create due to a conflicting DNS domain. | | [Source](https://docs.aws.amazon.com/vpc/latest/privatelink/manage-dns-names.html) | `resources`,`ec2`,`vpc` |
181181
| [E3065<a name="E3065"></a>](../src/cfnlint/rules/resources/properties/MaxUniqueItems.py) | Check if a list has more unique values than allowed | Some lists have a maximum number of unique items allowed. Validate that the number of unique items does not exceed the limit. | | [Source](https://github.com/aws-cloudformation/cfn-lint/blob/main/docs/cfn-schema-specification.md#maxuniqueitems) | `resources`,`property`,`array`,`length` |
182+
| [E3066<a name="E3066"></a>](../src/cfnlint/rules/resources/ServerlessTransformAttributes.py) | SAM resource attributes require the Serverless Transform | Connectors and IgnoreGlobals are SAM resource attributes that require the Serverless Transform to be declared | | [Source](https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/managing-permissions-connectors.html) | `resources`,`transform` |
182183
| [E3501<a name="E3501"></a>](../src/cfnlint/rules/resources/sqs/QueueProperties.py) | Validate SQS queue properties are valid | Depending on if the queue is FIFO or not the properties and allowed values change. This rule validates properties and values based on the queue type. | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sqs-queue.html) | `resources`,`sqs` |
183184
| [E3502<a name="E3502"></a>](../src/cfnlint/rules/resources/sqs/QueueDLQ.py) | Validate SQS DLQ queues are the same type | SQS queues using DLQ have to have the destination queue as the same type (FIFO or standard) | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sqs-queue.html) | `resources`,`sqs` |
184185
| [E3503<a name="E3503"></a>](../src/cfnlint/rules/resources/certificatemanager/DomainValidationOptions.py) | ValidationDomain is superdomain of DomainName | In ValidationDomainOptions, the ValidationDomain must be a superdomain of the DomainName being validated | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-certificatemanager-certificate-domainvalidationoption.html#cfn-certificatemanager-certificate-domainvalidationoption-validationdomain) | `certificate`,`certificatemanager`,`domainvalidationoptions`,`validationdomain` |
@@ -267,6 +268,7 @@ The following **323** rules are applied by this linter:
267268
| [E3721<a name="E3721"></a>](../src/cfnlint/rules/resources/rds/DbInstanceReplicaMode.py) | Validate ReplicaMode value for Oracle and Db2 engines | When specifying ReplicaMode for Oracle or Db2 engines, the value must be 'mounted' or 'open-read-only'. | | [Source](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-read-replicas.html) | `resources`,`rds` |
268269
| [E3722<a name="E3722"></a>](../src/cfnlint/rules/resources/cloudfront/DistributionCacheBehaviorForwardEnum.py) | Cookies Forward must be a valid enum when CachePolicyId is absent | When a CloudFront cache behavior does not specify a CachePolicyId, the ForwardedValues Cookies Forward property must be one of 'all', 'none', or 'whitelist'. | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-cookies.html) | `properties`,`cloudfront` |
269270
| [E3723<a name="E3723"></a>](../src/cfnlint/rules/resources/apigateway/StageMethodSettingsResourcePath.py) | ResourcePath must start with / when method settings are configured | When an API Gateway MethodSettings entry includes actual setting properties (LoggingLevel, MetricsEnabled, etc.), the ResourcePath must match the pattern '^/.*$'. | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-stage-methodsetting.html) | `properties`,`apigateway` |
271+
| [E3724<a name="E3724"></a>](../src/cfnlint/rules/resources/GlobalsTransform.py) | Validate Globals section | The Globals section is only valid in SAM templates. Check that the Serverless transform is declared and validate the Globals section structure. | | [Source](https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/sam-specification-template-anatomy-globals.html) | `resources`,`transform`,`serverless` |
270272
| [E4001<a name="E4001"></a>](../src/cfnlint/rules/metadata/InterfaceConfiguration.py) | Metadata Interface have appropriate properties | Metadata Interface properties are properly configured | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudformation-interface.html) | `metadata` |
271273
| [E4002<a name="E4002"></a>](../src/cfnlint/rules/metadata/Configuration.py) | Validate the configuration of the Metadata section | Validates that Metadata section is an object and has no null values | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/metadata-section-structure.html) | `metadata` |
272274
| [E5001<a name="E5001"></a>](../src/cfnlint/rules/resources/Modules.py) | Check that Modules resources are valid | Check that Modules resources are valid | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/) | `resources`,`modules` |

0 commit comments

Comments
 (0)