feat(cloudformation): update L1 CloudFormation resource definitions (#34425)

aws-cdk-automation · web-flow · commit 6460ffeca6ba · 2025-05-13T22:34:26.000Z
Updates the L1 CloudFormation resource definitions with the latest changes from `@aws-cdk/aws-service-spec` **L1 CloudFormation resource definition changes:** ``` ├[~] service aws-amazonmq │ └ resources │ └[~] resource AWS::AmazonMQ::Broker │ └ types │ └[~] type User │ └ properties │ └ JolokiaApiAccess: (documentation changed) ├[~] service aws-apigateway │ └ resources │ ├[~] resource AWS::ApiGateway::DomainName │ │ └ attributes │ │ └[+] DomainNameArn: string │ └[~] resource AWS::ApiGateway::DomainNameV2 │ └ types │ └[~] type EndpointConfiguration │ └ properties │ └ IpAddressType: (documentation changed) ├[~] service aws-backup │ └ resources │ ├[~] resource AWS::Backup::BackupPlan │ │ └ types │ │ ├[~] type BackupRuleResourceType │ │ │ └ properties │ │ │ └ IndexActions: (documentation changed) │ │ ├[~] type IndexActionsResourceType │ │ │ ├ - documentation: undefined │ │ │ │ + documentation: Specifies index actions. │ │ │ └ properties │ │ │ └ ResourceTypes: (documentation changed) │ │ └[~] type LifecycleResourceType │ │ └ properties │ │ ├ DeleteAfterDays: (documentation changed) │ │ └ MoveToColdStorageAfterDays: (documentation changed) │ └[~] resource AWS::Backup::LogicallyAirGappedBackupVault │ └ attributes │ ├ BackupVaultArn: (documentation changed) │ ├ EncryptionKeyArn: (documentation changed) │ ├ VaultState: (documentation changed) │ └ VaultType: (documentation changed) ├[~] service aws-bedrock │ └ resources │ ├[~] resource AWS::Bedrock::Agent │ │ └ types │ │ ├[~] type CustomOrchestration │ │ │ └ - documentation: Details of custom orchestration. │ │ │ + documentation: Contains details of the custom orchestration configured for the agent. │ │ └[~] type OrchestrationExecutor │ │ └ - documentation: Contains details about the Lambda function containing the orchestration logic carried out upon invoking the custom orchestration. │ │ + documentation: The structure of the executor invoking the actions in custom orchestration. │ ├[~] resource AWS::Bedrock::Flow │ │ └ types │ │ └[~] type FlowNodeConfiguration │ │ └ properties │ │ ├ Condition: (documentation changed) │ │ ├ Retrieval: (documentation changed) │ │ └ Storage: (documentation changed) │ ├[~] resource AWS::Bedrock::FlowVersion │ │ └ types │ │ └[~] type FlowNodeConfiguration │ │ └ properties │ │ ├ Condition: (documentation changed) │ │ ├ Retrieval: (documentation changed) │ │ └ Storage: (documentation changed) │ └[+] resource AWS::Bedrock::IntelligentPromptRouter │ ├ name: IntelligentPromptRouter │ │ cloudFormationType: AWS::Bedrock::IntelligentPromptRouter │ │ documentation: Definition of AWS::Bedrock::IntelligentPromptRouter Resource Type │ │ tagInformation: {"tagPropertyName":"Tags","variant":"standard"} │ ├ properties │ │ ├ Description: string (immutable) │ │ ├ FallbackModel: PromptRouterTargetModel (required, immutable) │ │ ├ Models: Array<PromptRouterTargetModel> (required, immutable) │ │ ├ PromptRouterName: string (required, immutable) │ │ ├ RoutingCriteria: RoutingCriteria (required, immutable) │ │ └ Tags: Array<tag> │ ├ attributes │ │ ├ CreatedAt: string │ │ ├ PromptRouterArn: string │ │ ├ Status: string │ │ ├ Type: string │ │ └ UpdatedAt: string │ └ types │ ├ type PromptRouterTargetModel │ │ ├ documentation: The target model for a prompt router. │ │ │ name: PromptRouterTargetModel │ │ └ properties │ │ └ ModelArn: string (required) │ └ type RoutingCriteria │ ├ documentation: Routing criteria for a prompt router. │ │ name: RoutingCriteria │ └ properties │ └ ResponseQualityDifference: number (required) ├[~] service aws-budgets │ └ resources │ └[~] resource AWS::Budgets::Budget │ └ types │ ├[~] type BudgetData │ │ └ properties │ │ ├[+] FilterExpression: Expression │ │ └[+] Metrics: Array<string> │ ├[+] type CostCategoryValues │ │ ├ documentation: The cost category values used for filtering the costs. │ │ │ name: CostCategoryValues │ │ └ properties │ │ ├ Values: Array<string> │ │ ├ Key: string │ │ └ MatchOptions: Array<string> │ ├[+] type Expression │ │ ├ documentation: Use Expression to filter in various Budgets APIs. │ │ │ name: Expression │ │ └ properties │ │ ├ Not: Expression │ │ ├ Or: Array<Expression> │ │ ├ And: Array<Expression> │ │ ├ Dimensions: ExpressionDimensionValues │ │ ├ CostCategories: CostCategoryValues │ │ └ Tags: TagValues │ ├[+] type ExpressionDimensionValues │ │ ├ documentation: Contains the specifications for the filters to use for your request. │ │ │ name: ExpressionDimensionValues │ │ └ properties │ │ ├ Values: Array<string> │ │ ├ Key: string │ │ └ MatchOptions: Array<string> │ └[+] type TagValues │ ├ documentation: The values that are available for a tag. │ │ name: TagValues │ └ properties │ ├ Values: Array<string> │ ├ Key: string │ └ MatchOptions: Array<string> ├[~] service aws-cleanrooms │ └ resources │ └[~] resource AWS::CleanRooms::Collaboration │ └ properties │ └ AnalyticsEngine: - string (immutable) │ + string ├[~] service aws-cognito │ └ resources │ ├[~] resource AWS::Cognito::ManagedLoginBranding │ │ └ properties │ │ └ ClientId: (documentation changed) │ └[~] resource AWS::Cognito::UserPoolClient │ ├ properties │ │ └ RefreshTokenRotation: (documentation changed) │ └ types │ └[~] type RefreshTokenRotation │ ├ - documentation: undefined │ │ + documentation: The configuration of your app client for refresh token rotation. When enabled, your app client issues new ID, access, and refresh tokens when users renew their sessions with refresh tokens. When disabled, token refresh issues only ID and access tokens. │ └ properties │ ├ Feature: (documentation changed) │ └ RetryGracePeriodSeconds: (documentation changed) ├[~] service aws-datazone │ └ resources │ ├[~] resource AWS::DataZone::Domain │ │ ├ properties │ │ │ └ ServiceRole: (documentation changed) │ │ ├ attributes │ │ │ └ RootDomainUnitId: (documentation changed) │ │ └ types │ │ └[~] type SingleSignOn │ │ └ properties │ │ └ IdcInstanceArn: (documentation changed) │ ├[~] resource AWS::DataZone::DomainUnit │ │ ├ - documentation: A domain unit enables you to easily organize your assets and other domain entities under specific business units and teams. │ │ │ + documentation: The summary of the domain unit. │ │ ├ properties │ │ │ └ DomainIdentifier: (documentation changed) │ │ └ attributes │ │ ├ CreatedAt: (documentation changed) │ │ └ DomainId: (documentation changed) │ └[+] resource AWS::DataZone::Owner │ ├ name: Owner │ │ cloudFormationType: AWS::DataZone::Owner │ │ documentation: The owner that you want to add to the entity. │ ├ properties │ │ ├ EntityType: string (required, immutable) │ │ ├ Owner: OwnerProperties (required, immutable) │ │ ├ EntityIdentifier: string (required, immutable) │ │ └ DomainIdentifier: string (required, immutable) │ └ types │ ├ type OwnerGroupProperties │ │ ├ documentation: The properties of the domain unit owners group. │ │ │ name: OwnerGroupProperties │ │ └ properties │ │ └ GroupIdentifier: string │ ├ type OwnerProperties │ │ ├ documentation: The properties of a domain unit's owner. │ │ │ name: OwnerProperties │ │ └ properties │ │ ├ Group: OwnerGroupProperties │ │ └ User: OwnerUserProperties │ └ type OwnerUserProperties │ ├ documentation: The properties of the owner user. │ │ name: OwnerUserProperties │ └ properties │ └ UserIdentifier: string ├[~] service aws-docdb │ └ resources │ └[~] resource AWS::DocDB::DBCluster │ └ properties │ └ EngineVersion: (documentation changed) ├[~] service aws-dsql │ └ resources │ └[~] resource AWS::DSQL::Cluster │ ├ - documentation: Resource Type definition for AWS::DSQL::Cluster │ │ + documentation: Creates a cluster in Amazon Aurora DSQL. │ ├ properties │ │ ├ DeletionProtectionEnabled: (documentation changed) │ │ └ Tags: (documentation changed) │ └ attributes │ ├ CreationTime: (documentation changed) │ ├ Identifier: (documentation changed) │ ├ ResourceArn: (documentation changed) │ ├ Status: (documentation changed) │ └ VpcEndpointServiceName: (documentation changed) ├[~] service aws-ec2 │ └ resources │ ├[~] resource AWS::EC2::ClientVpnEndpoint │ │ ├ properties │ │ │ ├ ClientRouteEnforcementOptions: (documentation changed) │ │ │ └ DisconnectOnSessionTimeout: (documentation changed) │ │ └ types │ │ └[~] type ClientRouteEnforcementOptions │ │ ├ - documentation: undefined │ │ │ + documentation: Client Route Enforcement is a feature of Client VPN that helps enforce administrator defined routes on devices connected through the VPN. This feature helps improve your security posture by ensuring that network traffic originating from a connected client is not inadvertently sent outside the VPN tunnel. │ │ │ Client Route Enforcement works by monitoring the route table of a connected device for routing policy changes to the VPN connection. If the feature detects any VPN routing policy modifications, it will automatically force an update to the route table, reverting it back to the expected route configurations. │ │ └ properties │ │ └ Enforced: (documentation changed) │ ├[~] resource AWS::EC2::NetworkInsightsAnalysis │ │ └ properties │ │ └[+] FilterOutArns: Array<string> (immutable) │ ├[~] resource AWS::EC2::TransitGateway │ │ └ properties │ │ ├ DefaultRouteTableAssociation: (documentation changed) │ │ └ DefaultRouteTablePropagation: (documentation changed) │ └[~] resource AWS::EC2::Volume │ └ properties │ └[+] VolumeInitializationRate: integer ├[~] service aws-ecs │ └ resources │ └[~] resource AWS::ECS::Service │ └ types │ └[~] type ServiceManagedEBSVolumeConfiguration │ └ properties │ └[+] VolumeInitializationRate: integer ├[~] service aws-elasticloadbalancingv2 │ └ resources │ ├[~] resource AWS::ElasticLoadBalancingV2::Listener │ │ └ properties │ │ └ SslPolicy: (documentation changed) │ └[~] resource AWS::ElasticLoadBalancingV2::LoadBalancer │ └ properties │ ├ EnforceSecurityGroupInboundRulesOnPrivateLinkTraffic: (documentation changed) │ └ Ipv4IpamPoolId: (documentation changed) ├[~] service aws-imagebuilder │ └ resources │ └[~] resource AWS::ImageBuilder::ImageRecipe │ ├ - documentation: An Image Builder image recipe is a document that defines the base image and the components to be applied to the base image to produce the desired configuration for the output image. You can use an image recipe to duplicate builds. Image Builder image recipes can be shared, branched, and edited using the console wizard, the AWS CLI , or the API. You can use image recipes with your version control software to maintain shareable versioned image recipes. │ │ + documentation: Creates a new image recipe. Image recipes define how images are configured, tested, and assessed. │ └ properties │ ├ Components: (documentation changed) │ ├ ParentImage: (documentation changed) │ └ Version: (documentation changed) ├[~] service aws-kinesis │ └ resources │ └[~] resource AWS::Kinesis::StreamConsumer │ └ - documentation: Use the AWS CloudFormation `AWS::Kinesis::StreamConsumer` resource to register a consumer with a Kinesis data stream. The consumer you register can then call [SubscribeToShard](https://docs.aws.amazon.com/kinesis/latest/APIReference/API_SubscribeToShard.html) to receive data from the stream using enhanced fan-out, at a rate of up to 2 MiB per second for every shard you subscribe to. This rate is unaffected by the total number of consumers that read from the same stream. │ You can register up to five consumers per stream. However, you can request a limit increase using the [Kinesis Data Streams limits form](https://docs.aws.amazon.com/support/v1?#/) . A given consumer can only be registered with one stream at a time. │ For more information, see [Using Consumers with Enhanced Fan-Out](https://docs.aws.amazon.com/streams/latest/dev/introduction-to-enhanced-consumers.html) . │ + documentation: Use the AWS CloudFormation `AWS::Kinesis::StreamConsumer` resource to register a consumer with a Kinesis data stream. The consumer you register can then call [SubscribeToShard](https://docs.aws.amazon.com/kinesis/latest/APIReference/API_SubscribeToShard.html) to receive data from the stream using enhanced fan-out, at a rate of up to 2 MiB per second for every shard you subscribe to. This rate is unaffected by the total number of consumers that read from the same stream. │ You can register up to 20 consumers per stream. However, you can request a limit increase using the [Kinesis Data Streams limits form](https://docs.aws.amazon.com/support/v1?#/) . A given consumer can only be registered with one stream at a time. │ For more information, see [Using Consumers with Enhanced Fan-Out](https://docs.aws.amazon.com/streams/latest/dev/introduction-to-enhanced-consumers.html) . ├[~] service aws-kinesisanalyticsv2 │ └ resources │ └[~] resource AWS::KinesisAnalyticsV2::Application │ ├ properties │ │ ├ ApplicationMaintenanceConfiguration: (documentation changed) │ │ └ RuntimeEnvironment: (documentation changed) │ └ types │ └[~] type ApplicationMaintenanceConfiguration │ ├ - documentation: Specifies the maintence window parameters for a Kinesis Data Analytics application. │ │ + documentation: Describes the maintenance configuration for the application. │ └ properties │ └ ApplicationMaintenanceWindowStartTime: (documentation changed) ├[~] service aws-lambda │ └ resources │ └[~] resource AWS::Lambda::Version │ └ types │ └[~] type RuntimePolicy │ ├ - documentation: Runtime Management Config of a function. │ │ + documentation: Sets the runtime management configuration for a function's version. For more information, see [Runtime updates](https://docs.aws.amazon.com/lambda/latest/dg/runtimes-update.html) . │ └ properties │ ├ RuntimeVersionArn: (documentation changed) │ └ UpdateRuntimeOn: (documentation changed) ├[~] service aws-logs │ └ resources │ └[~] resource AWS::Logs::DeliveryDestination │ ├ properties │ │ └ DeliveryDestinationPolicy: - json │ │ + json ⇐ DestinationPolicy │ └ types │ └[+] type DestinationPolicy │ ├ name: DestinationPolicy │ └ properties │ ├ DeliveryDestinationName: string │ └ DeliveryDestinationPolicy: json ├[~] service aws-quicksight │ └ resources │ ├[~] resource AWS::QuickSight::Analysis │ │ └ types │ │ └[~] type ResourcePermission │ │ └ properties │ │ └ Principal: (documentation changed) │ ├[~] resource AWS::QuickSight::Dashboard │ │ ├ - documentation: Creates a dashboard from a template. To first create a template, see the `CreateTemplate` API operation. │ │ │ A dashboard is an entity in Amazon QuickSight that identifies Amazon QuickSight reports, created from analyses. You can share Amazon QuickSight dashboards. With the right permissions, you can create scheduled email reports from them. If you have the correct permissions, you can create a dashboard from a template that exists in a different AWS account . │ │ │ + documentation: Creates a dashboard from a template. To first create a template, see the `CreateTemplate` API operation. │ │ │ A dashboard is an entity in QuickSight that identifies QuickSight reports, created from analyses. You can share QuickSight dashboards. With the right permissions, you can create scheduled email reports from them. If you have the correct permissions, you can create a dashboard from a template that exists in a different AWS account . │ │ └ types │ │ └[~] type ResourcePermission │ │ └ properties │ │ └ Principal: (documentation changed) │ ├[~] resource AWS::QuickSight::DataSet │ │ └ types │ │ ├[~] type ColumnLevelPermissionRule │ │ │ └ properties │ │ │ └ Principals: (documentation changed) │ │ ├[~] type JoinKeyProperties │ │ │ └ properties │ │ │ └ UniqueKey: (documentation changed) │ │ └[~] type ResourcePermission │ │ └ properties │ │ └ Principal: (documentation changed) │ ├[~] resource AWS::QuickSight::DataSource │ │ └ types │ │ └[~] type ResourcePermission │ │ └ properties │ │ └ Principal: (documentation changed) │ ├[~] resource AWS::QuickSight::RefreshSchedule │ │ ├ - documentation: Creates a refresh schedule for a dataset in Amazon QuickSight . │ │ │ + documentation: Creates a refresh schedule for a dataset in QuickSight . │ │ └ types │ │ └[~] type RefreshScheduleMap │ │ └ properties │ │ └ RefreshType: (documentation changed) │ ├[~] resource AWS::QuickSight::Template │ │ ├ - documentation: Creates a template from an existing Amazon QuickSight analysis or template. You can use the resulting template to create a dashboard. │ │ │ A *template* is an entity in Amazon QuickSight that encapsulates the metadata required to create an analysis and that you can use to create s dashboard. A template adds a layer of abstraction by using placeholders to replace the dataset associated with the analysis. You can use templates to create dashboards by replacing dataset placeholders with datasets that follow the same schema that was used to create the source analysis and template. │ │ │ + documentation: Creates a template from an existing QuickSight analysis or template. You can use the resulting template to create a dashboard. │ │ │ A *template* is an entity in QuickSight that encapsulates the metadata required to create an analysis and that you can use to create s dashboard. A template adds a layer of abstraction by using placeholders to replace the dataset associated with the analysis. You can use templates to create dashboards by replacing dataset placeholders with datasets that follow the same schema that was used to create the source analysis and template. │ │ └ types │ │ └[~] type ResourcePermission │ │ └ properties │ │ └ Principal: (documentation changed) │ └[~] resource AWS::QuickSight::Theme │ └ types │ └[~] type ResourcePermission │ └ properties │ └ Principal: (documentation changed) ├[~] service aws-redshiftserverless │ └ resources │ └[~] resource AWS::RedshiftServerless::Workgroup │ ├ properties │ │ └ ConfigParameters: (documentation changed) │ └ types │ └[~] type ConfigParameter │ └ properties │ └ ParameterKey: (documentation changed) ├[~] service aws-sagemaker │ └ resources │ └[~] resource AWS::SageMaker::Domain │ └ types │ ├[~] type CodeEditorAppSettings │ │ └ properties │ │ └[+] BuiltInLifecycleConfigArn: string │ ├[+] type HiddenSageMakerImage │ │ ├ name: HiddenSageMakerImage │ │ └ properties │ │ ├ SageMakerImageName: string │ │ └ VersionAliases: Array<string> │ ├[~] type JupyterLabAppSettings │ │ └ properties │ │ └[+] BuiltInLifecycleConfigArn: string │ ├[~] type StudioWebPortalSettings │ │ └ properties │ │ ├[+] HiddenInstanceTypes: Array<string> │ │ └[+] HiddenSageMakerImageVersionAliases: Array<HiddenSageMakerImage> │ └[~] type UserSettings │ └ properties │ └[+] AutoMountHomeEFS: string ├[~] service aws-ses │ └ resources │ ├[~] resource AWS::SES::MailManagerRuleSet │ │ └ types │ │ └[~] type DeliverToQBusinessAction │ │ └ properties │ │ ├ ActionFailurePolicy: (documentation changed) │ │ └ RoleArn: (documentation changed) │ └[~] resource AWS::SES::ReceiptRule │ └ types │ └[~] type SNSAction │ ├ - documentation: When included in a receipt rule, this action publishes a notification to Amazon Simple Notification Service (Amazon SNS). This action includes a complete copy of the email content in the Amazon SNS notifications. Amazon SNS notifications for all other actions simply provide information about the email. They do not include the email content itself. │ │ If you own the Amazon SNS topic, you don't need to do anything to give Amazon SES permission to publish emails to it. However, if you don't own the Amazon SNS topic, you need to attach a policy to the topic to give Amazon SES permissions to access it. For information about giving permissions, see the [Amazon SES Developer Guide](https://docs.aws.amazon.com/ses/latest/dg/receiving-email-permissions.html) . │ │ > You can only publish emails that are 150 KB or less (including the header) to Amazon SNS. Larger emails bounce. If you anticipate emails larger than 150 KB, use the S3 action instead. │ │ For information about using a receipt rule to publish an Amazon SNS notification, see the [Amazon SES Developer Guide](https://docs.aws.amazon.com/ses/latest/dg/receiving-email-action-sns.html) . │ │ + documentation: The action to publish the email content to an Amazon SNS topic. When executed, this action will send the email as a notification to the specified SNS topic. │ └ properties │ ├ Encoding: (documentation changed) │ └ TopicArn: (documentation changed) ├[~] service aws-ssmcontacts │ └ resources │ └[~] resource AWS::SSMContacts::Contact │ ├ - tagInformation: undefined │ │ + tagInformation: {"tagPropertyName":"Tags","variant":"standard"} │ └ properties │ └[+] Tags: Array<tag> ├[~] service aws-ssmguiconnect │ └ resources │ └[~] resource AWS::SSMGuiConnect::Preferences │ ├ - documentation: Definition of AWS::SSMGuiConnect::Preferences Resource Type │ │ + documentation: Specify new or changed connection recording preferences for your AWS Systems Manager GUI Connect connections. │ ├ properties │ │ └ ConnectionRecordingPreferences: (documentation changed) │ ├ attributes │ │ └ AccountId: (documentation changed) │ └ types │ └[~] type ConnectionRecordingPreferences │ └ - documentation: The set of preferences used for recording RDP connections in the requesting AWS account and AWS Region. This includes details such as which S3 bucket recordings are stored in. │ + documentation: The set of preferences used for recording RDP connections in the requesting AWS account and AWS Region . This includes details such as which S3 bucket recordings are stored in. ├[~] service aws-verifiedpermissions │ └ resources │ └[~] resource AWS::VerifiedPermissions::PolicyStore │ ├ - tagInformation: undefined │ │ + tagInformation: {"tagPropertyName":"Tags","variant":"standard"} │ ├ properties │ │ ├[+] DeletionProtection: DeletionProtection │ │ └[+] Tags: Array<tag> │ └ types │ └[+] type DeletionProtection │ ├ name: DeletionProtection │ └ properties │ └ Mode: string (required, default="DISABLED") ├[~] service aws-vpclattice │ └ resources │ └[~] resource AWS::VpcLattice::ResourceConfiguration │ └ types │ └[~] type DnsResource │ └ properties │ └ IpAddressType: (documentation changed) └[~] service aws-wisdom └ resources └[~] resource AWS::Wisdom::AIAgent └ types ├[~] type AnswerRecommendationAIAgentConfiguration │ └ properties │ └ Locale: (documentation changed) └[~] type ManualSearchAIAgentConfiguration └ properties └ Locale: (documentation changed) ``` BREAKING CHANGE: Some L1 resources experienced breaking changes due to updated CloudFormation resources. Please check the notes for each specific module for more information. * **Logs**: The type of property `DeliveryDestinationPolicy` of resource `AWS::Logs::DeliveryDestination` changed to be `DestinationPolicy` instead of JSON.
diff --git a/packages/aws-cdk-lib/package.json b/packages/aws-cdk-lib/package.json
@@ -136,7 +136,7 @@
   },
   "devDependencies": {
     "@aws-cdk/lambda-layer-kubectl-v31": "^2.0.3",
-    "@aws-cdk/aws-service-spec": "^0.1.71",
+    "@aws-cdk/aws-service-spec": "^0.1.72",
     "@aws-cdk/cdk-build-tools": "0.0.0",
     "@aws-cdk/custom-resource-handlers": "0.0.0",
     "@aws-cdk/pkglint": "0.0.0",
diff --git a/tools/@aws-cdk/spec2cdk/package.json b/tools/@aws-cdk/spec2cdk/package.json
@@ -32,9 +32,9 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-cdk/aws-service-spec": "^0.1.71",
-    "@aws-cdk/service-spec-importers": "^0.0.78",
-    "@aws-cdk/service-spec-types": "^0.0.137",
+    "@aws-cdk/aws-service-spec": "^0.1.72",
+    "@aws-cdk/service-spec-importers": "^0.0.79",
+    "@aws-cdk/service-spec-types": "^0.0.138",
     "@cdklabs/tskb": "^0.0.3",
     "@cdklabs/typewriter": "^0.0.5",
     "camelcase": "^6",
diff --git a/yarn.lock b/yarn.lock
@@ -58,14 +58,22 @@
   resolved "https://registry.npmjs.org/@aws-cdk/asset-node-proxy-agent-v6/-/asset-node-proxy-agent-v6-2.1.0.tgz#6d3c7860354d4856a7e75375f2f0ecab313b4989"
   integrity sha512-7bY3J8GCVxLupn/kNmpPc5VJz8grx+4RKfnnJiO1LG+uxkZfANZG3RMHhE+qQxxwkyQ9/MfPtTpf748UhR425A==
 
-"@aws-cdk/aws-service-spec@0.1.71", "@aws-cdk/aws-service-spec@^0.1.71":
+"@aws-cdk/aws-service-spec@0.1.71":
   version "0.1.71"
   resolved "https://registry.npmjs.org/@aws-cdk/aws-service-spec/-/aws-service-spec-0.1.71.tgz#8ebc0e428c588bd362bc46abd372c91a1e5e1370"
   integrity sha512-tSDXj6tdy+k1whXJppJH3ireaP57H6ENYPyLscevT6EesdETzwm0kLJdzykcRGAUl0lDrEoIqRpylceN6wKSOQ==
   dependencies:
     "@aws-cdk/service-spec-types" "^0.0.137"
     "@cdklabs/tskb" "^0.0.3"
 
+"@aws-cdk/aws-service-spec@^0.1.72":
+  version "0.1.72"
+  resolved "https://registry.npmjs.org/@aws-cdk/aws-service-spec/-/aws-service-spec-0.1.72.tgz#e8bc6612656bac42ed3c891cca7c356afaefb778"
+  integrity sha512-DvRPSYzH13B4VTtGuDIpYf2mQ+Wf9jP299VqvpZgEQwrlL5LeY0Kr0biGo+Yv9M8exB0UE/Dgm9gQoubJFYyhw==
+  dependencies:
+    "@aws-cdk/service-spec-types" "^0.0.138"
+    "@cdklabs/tskb" "^0.0.3"
+
 "@aws-cdk/cloud-assembly-schema@^41.2.0":
   version "41.2.0"
   resolved "https://registry.npmjs.org/@aws-cdk/cloud-assembly-schema/-/cloud-assembly-schema-41.2.0.tgz#c1ef513e1cc0528dbc05948ae39d5631306af423"
@@ -109,12 +117,12 @@
   resolved "https://registry.npmjs.org/@aws-cdk/lambda-layer-kubectl-v32/-/lambda-layer-kubectl-v32-2.1.0.tgz#6b9beb4b6b09af74ec48f0c778e50732d7bbb54b"
   integrity sha512-a+zvCLapTg8R0P/Nrecc8mKV+ZgAwvkndn4/zlb43e14zRlc4/ozvmeghUT2eoyyaWJv+PwqgWohEXXec3kpSw==
 
-"@aws-cdk/service-spec-importers@^0.0.78":
-  version "0.0.78"
-  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-importers/-/service-spec-importers-0.0.78.tgz#344e7b10965d95c2793c15233fa6d2cf8d4456c9"
-  integrity sha512-mua9t4ZFzu9oeRA1UTu1bzGR9CHR4FazhM4Ik0HS7yUGz3rT43eL9VxkecMGqrU8e8gSLa44xzJn0m+DWyq+Sw==
+"@aws-cdk/service-spec-importers@^0.0.79":
+  version "0.0.79"
+  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-importers/-/service-spec-importers-0.0.79.tgz#5ed813f18d8c2edf0d22cfd63b7856bca522e49e"
+  integrity sha512-P/5hgMEFKehI8HW9ZhpMBHi8urqeSkVegjjWqb7CtqXg1n0lRrJQa95QOcQIZL7c7BKmPCqCSfhLGRSDew2VgQ==
   dependencies:
-    "@aws-cdk/service-spec-types" "^0.0.137"
+    "@aws-cdk/service-spec-types" "^0.0.138"
     "@cdklabs/tskb" "^0.0.3"
     ajv "^6"
     canonicalize "^2.1.0"
@@ -132,6 +140,13 @@
   dependencies:
     "@cdklabs/tskb" "^0.0.3"
 
+"@aws-cdk/service-spec-types@^0.0.138":
+  version "0.0.138"
+  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-types/-/service-spec-types-0.0.138.tgz#4e19c280c1f705a3813325410b26e9d47ea24b91"
+  integrity sha512-II9zZ1XEAEnLhODnItDnS92na1qp8eexSml8hOa2KhM4CkVdeq4SopWKRv5/uU4CfxRBvkfq3rciR+i2rpu8PA==
+  dependencies:
+    "@cdklabs/tskb" "^0.0.3"
+
 "@aws-crypto/crc32@5.2.0":
   version "5.2.0"
   resolved "https://registry.npmjs.org/@aws-crypto/crc32/-/crc32-5.2.0.tgz#cfcc22570949c98c6689cfcbd2d693d36cdae2e1"
