feat(sources): update cfn-schema

[aws-cdk-automation]

⚠️ This Pull Request updates daily and will overwrite all manual changes pushed to the branch

Updates the cfn-schema source from upstream. See details in workflow run.

---

Automatically created by projen via the "update-source-cfn-schema" workflow

[github-actions]

To work on this Pull Request, please create a new branch and PR. This prevents your work from being deleted by the automation.

Run the following commands inside the repo:

gh co 1434
git switch -c fix-pr-1434 && git push -u origin HEAD
gh pr create -t "fix: PR #1434" --body "Fixes https://github.com/cdklabs/awscdk-service-spec/pull/1434"

[github-actions]

@aws-cdk/aws-service-spec: Model database diff detected

├[~] service aws-cloudformation
│ └ resources
│    ├[+] resource AWS::CloudFormation::GuardHook
│    │ ├  name: GuardHook
│    │ │  cloudFormationType: AWS::CloudFormation::GuardHook
│    │ │  documentation: This is a CloudFormation resource for activating the first-party AWS::Hooks::GuardHook.
│    │ ├ properties
│    │ │  ├RuleLocation: S3Location (required)
│    │ │  ├LogBucket: string
│    │ │  ├HookStatus: string (required, default="DISABLED")
│    │ │  ├TargetOperations: Array<string> (required)
│    │ │  ├FailureMode: string (required, default="WARN")
│    │ │  ├TargetFilters: TargetFilters
│    │ │  ├StackFilters: StackFilters
│    │ │  ├Alias: string (required, immutable)
│    │ │  ├ExecutionRole: string (required, immutable)
│    │ │  └Options: Options
│    │ ├ attributes
│    │ │  └HookArn: string
│    │ └ types
│    │    ├type S3Location
│    │    │├  documentation: S3 Source Location for the Guard files.
│    │    ││  name: S3Location
│    │    │└ properties
│    │    │   ├Uri: string (required)
│    │    │   └VersionId: string
│    │    ├type TargetFilters
│    │    │├  name: TargetFilters
│    │    │└ properties
│    │    │   ├TargetNames: Array<string>
│    │    │   ├Actions: Array<string>
│    │    │   └InvocationPoints: Array<string>
│    │    ├type StackFilters
│    │    │├  documentation: Filters to allow hooks to target specific stack attributes
│    │    ││  name: StackFilters
│    │    │└ properties
│    │    │   ├FilteringCriteria: string (required, default="ALL")
│    │    │   ├StackNames: StackNames
│    │    │   └StackRoles: StackRoles
│    │    ├type StackNames
│    │    │├  documentation: List of stack names as filters
│    │    ││  name: StackNames
│    │    │└ properties
│    │    │   ├Include: Array<string>
│    │    │   └Exclude: Array<string>
│    │    ├type StackRoles
│    │    │├  documentation: List of stack roles that are performing the stack operations.
│    │    ││  name: StackRoles
│    │    │└ properties
│    │    │   ├Include: Array<string>
│    │    │   └Exclude: Array<string>
│    │    └type Options
│    │     ├  name: Options
│    │     └ properties
│    │        └InputParams: S3Location
│    └[+] resource AWS::CloudFormation::LambdaHook
│      ├  name: LambdaHook
│      │  cloudFormationType: AWS::CloudFormation::LambdaHook
│      │  documentation: This is a CloudFormation resource for the first-party AWS::Hooks::LambdaHook.
│      ├ properties
│      │  ├LambdaFunction: string (required)
│      │  ├HookStatus: string (required, default="ENABLED")
│      │  ├TargetOperations: Array<string> (required)
│      │  ├FailureMode: string (required)
│      │  ├TargetFilters: TargetFilters
│      │  ├StackFilters: StackFilters
│      │  ├Alias: string (required, immutable)
│      │  └ExecutionRole: string (required)
│      ├ attributes
│      │  └HookArn: string
│      └ types
│         ├type TargetFilters
│         │├  name: TargetFilters
│         │└ properties
│         │   ├TargetNames: Array<string>
│         │   ├Actions: Array<string>
│         │   └InvocationPoints: Array<string>
│         ├type StackFilters
│         │├  documentation: Filters to allow hooks to target specific stack attributes
│         ││  name: StackFilters
│         │└ properties
│         │   ├FilteringCriteria: string (required, default="ALL")
│         │   ├StackNames: StackNames
│         │   └StackRoles: StackRoles
│         ├type StackNames
│         │├  documentation: List of stack names as filters
│         ││  name: StackNames
│         │└ properties
│         │   ├Include: Array<string>
│         │   └Exclude: Array<string>
│         └type StackRoles
│          ├  documentation: List of stack roles that are performing the stack operations.
│          │  name: StackRoles
│          └ properties
│             ├Include: Array<string>
│             └Exclude: Array<string>
├[~] service aws-cloudfront
│ └ resources
│    └[~] resource AWS::CloudFront::Function
│      └ attributes
│         └ Stage: (documentation changed)
├[~] service aws-fis
│ └ resources
│    └[~] resource AWS::FIS::ExperimentTemplate
│      ├ properties
│      │  └[+] ExperimentReportConfiguration: ExperimentTemplateExperimentReportConfiguration
│      └ types
│         ├[+] type CloudWatchDashboard
│         │ ├  name: CloudWatchDashboard
│         │ └ properties
│         │    └DashboardIdentifier: string (required)
│         ├[+] type DataSources
│         │ ├  name: DataSources
│         │ └ properties
│         │    └CloudWatchDashboards: Array<CloudWatchDashboard>
│         ├[+] type ExperimentReportS3Configuration
│         │ ├  name: ExperimentReportS3Configuration
│         │ └ properties
│         │    ├BucketName: string (required)
│         │    └Prefix: string
│         ├[+] type ExperimentTemplateExperimentReportConfiguration
│         │ ├  name: ExperimentTemplateExperimentReportConfiguration
│         │ └ properties
│         │    ├Outputs: Outputs (required)
│         │    ├DataSources: DataSources (required)
│         │    ├PreExperimentDuration: string
│         │    └PostExperimentDuration: string
│         └[+] type Outputs
│           ├  name: Outputs
│           └ properties
│              └ExperimentReportS3Configuration: ExperimentReportS3Configuration (required)
├[~] service aws-gamelift
│ └ resources
│    ├[+] resource AWS::GameLift::ContainerFleet
│    │ ├  name: ContainerFleet
│    │ │  cloudFormationType: AWS::GameLift::ContainerFleet
│    │ │  documentation: The AWS::GameLift::ContainerFleet resource creates an Amazon GameLift (GameLift) container fleet to host game servers.
│    │ │  tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ ├ properties
│    │ │  ├FleetRoleArn: string (required)
│    │ │  ├Description: string
│    │ │  ├GameServerContainerGroupDefinitionName: string
│    │ │  ├PerInstanceContainerGroupDefinitionName: string
│    │ │  ├InstanceConnectionPortRange: ConnectionPortRange
│    │ │  ├InstanceInboundPermissions: Array<IpPermission>
│    │ │  ├GameServerContainerGroupsPerInstance: integer
│    │ │  ├DeploymentConfiguration: DeploymentConfiguration
│    │ │  ├InstanceType: string (immutable)
│    │ │  ├BillingType: string (immutable)
│    │ │  ├Locations: Array<LocationConfiguration> (immutable)
│    │ │  ├ScalingPolicies: Array<ScalingPolicy>
│    │ │  ├MetricGroups: Array<string>
│    │ │  ├NewGameSessionProtectionPolicy: string
│    │ │  ├GameSessionCreationLimitPolicy: GameSessionCreationLimitPolicy
│    │ │  ├LogConfiguration: LogConfiguration
│    │ │  └Tags: Array<tag>
│    │ ├ attributes
│    │ │  ├CreationTime: string
│    │ │  ├Status: string
│    │ │  ├FleetId: string
│    │ │  ├FleetArn: string
│    │ │  ├DeploymentDetails: DeploymentDetails
│    │ │  ├GameServerContainerGroupDefinitionArn: string
│    │ │  ├PerInstanceContainerGroupDefinitionArn: string
│    │ │  └MaximumGameServerContainerGroupsPerInstance: integer
│    │ └ types
│    │    ├type ConnectionPortRange
│    │    │├  documentation: Defines the range of ports on the instance that allow inbound traffic to connect with containers in a fleet.
│    │    ││  name: ConnectionPortRange
│    │    │└ properties
│    │    │   ├FromPort: integer (required)
│    │    │   └ToPort: integer (required)
│    │    ├type IpPermission
│    │    │├  documentation: A range of IP addresses and port settings that allow inbound traffic to connect to server processes on an Amazon GameLift hosting resource. New game sessions that are started on the fleet are assigned an IP address/port number combination, which must fall into the fleet's allowed ranges. For fleets created with a custom game server, the ranges reflect the server's game session assignments. For Realtime Servers fleets, Amazon GameLift automatically opens two port ranges, one for TCP messaging and one for UDP, for use by the Realtime servers.
│    │    ││  name: IpPermission
│    │    │└ properties
│    │    │   ├FromPort: integer (required)
│    │    │   ├IpRange: string (required)
│    │    │   ├Protocol: string (required)
│    │    │   └ToPort: integer (required)
│    │    ├type DeploymentDetails
│    │    │├  documentation: Provides information about the last deployment ID and its status.
│    │    ││  name: DeploymentDetails
│    │    │└ properties
│    │    │   └LatestDeploymentId: string
│    │    ├type DeploymentConfiguration
│    │    │├  documentation: Provides details about how to drain old tasks and replace them with new updated tasks.
│    │    ││  name: DeploymentConfiguration
│    │    │└ properties
│    │    │   ├ProtectionStrategy: string
│    │    │   ├MinimumHealthyPercentage: integer
│    │    │   └ImpairmentStrategy: string
│    │    ├type LocationConfiguration
│    │    │├  documentation: A remote location where a multi-location fleet can deploy EC2 instances for game hosting.
│    │    ││  name: LocationConfiguration
│    │    │└ properties
│    │    │   ├Location: string (required)
│    │    │   ├LocationCapacity: LocationCapacity
│    │    │   └StoppedActions: Array<string>
│    │    ├type LocationCapacity
│    │    │├  documentation: Current resource capacity settings in a specified fleet or location. The location value might refer to a fleet's remote location or its home Region.
│    │    ││  name: LocationCapacity
│    │    │└ properties
│    │    │   ├DesiredEC2Instances: integer (required)
│    │    │   ├MinSize: integer (required)
│    │    │   └MaxSize: integer (required)
│    │    ├type ScalingPolicy
│    │    │├  documentation: Rule that controls how a fleet is scaled. Scaling policies are uniquely identified by the combination of name and fleet ID.
│    │    ││  name: ScalingPolicy
│    │    │└ properties
│    │    │   ├ComparisonOperator: string
│    │    │   ├EvaluationPeriods: integer
│    │    │   ├MetricName: string (required)
│    │    │   ├Name: string (required)
│    │    │   ├PolicyType: string
│    │    │   ├ScalingAdjustment: integer
│    │    │   ├ScalingAdjustmentType: string
│    │    │   ├TargetConfiguration: TargetConfiguration
│    │    │   └Threshold: number
│    │    ├type TargetConfiguration
│    │    │├  documentation: Settings for a target-based scaling policy. A target-based policy tracks a particular fleet metric specifies a target value for the metric. As player usage changes, the policy triggers Amazon GameLift to adjust capacity so that the metric returns to the target value. The target configuration specifies settings as needed for the target based policy, including the target value.
│    │    ││  name: TargetConfiguration
│    │    │└ properties
│    │    │   └TargetValue: number (required)
│    │    ├type GameSessionCreationLimitPolicy
│    │    │├  documentation: A policy that limits the number of game sessions a player can create on the same fleet. This optional policy gives game owners control over how players can consume available game server resources. A resource creation policy makes the following statement: "An individual player can create a maximum number of new game sessions within a specified time period".
│    │    ││  The policy is evaluated when a player tries to create a new game session. For example, assume you have a policy of 10 new game sessions and a time period of 60 minutes. On receiving a CreateGameSession request, Amazon GameLift checks that the player (identified by CreatorId) has created fewer than 10 game sessions in the past 60 minutes.
│    │    ││  name: GameSessionCreationLimitPolicy
│    │    │└ properties
│    │    │   ├NewGameSessionsPerCreator: integer
│    │    │   └PolicyPeriodInMinutes: integer
│    │    └type LogConfiguration
│    │     ├  documentation: A policy the location and provider of logs from the fleet.
│    │     │  name: LogConfiguration
│    │     └ properties
│    │        ├LogDestination: string
│    │        └S3BucketName: string
│    └[~] resource AWS::GameLift::ContainerGroupDefinition
│      ├ properties
│      │  ├[+] ContainerGroupType: string (immutable)
│      │  ├[+] GameServerContainerDefinition: GameServerContainerDefinition
│      │  ├ SupportContainerDefinitions: - Array<json>
│      │  │                              + Array<SupportContainerDefinition> ⇐ Array<json>
│      │  ├[+] TotalMemoryLimitMebibytes: integer (required)
│      │  ├[+] TotalVcpuLimit: number (required)
│      │  └[+] VersionDescription: string
│      ├ attributes
│      │  └[+] VersionNumber: integer
│      └ types
│         ├[+] type ContainerDependency
│         │ ├  documentation: A dependency that impacts a container's startup and shutdown.
│         │ │  name: ContainerDependency
│         │ └ properties
│         │    ├ContainerName: string (required)
│         │    └Condition: string (required)
│         ├[+] type ContainerEnvironment
│         │ ├  documentation: An environment variable to set inside a container, in the form of a key-value pair.
│         │ │  name: ContainerEnvironment
│         │ └ properties
│         │    ├Name: string (required)
│         │    └Value: string (required)
│         ├[+] type ContainerHealthCheck
│         │ ├  documentation: Specifies how the process manager checks the health of containers.
│         │ │  name: ContainerHealthCheck
│         │ └ properties
│         │    ├Command: Array<string> (required)
│         │    ├Interval: integer
│         │    ├Timeout: integer
│         │    ├Retries: integer
│         │    └StartPeriod: integer
│         ├[+] type ContainerMountPoint
│         │ ├  documentation: Defines the mount point configuration within a container.
│         │ │  name: ContainerMountPoint
│         │ └ properties
│         │    ├InstancePath: string (required)
│         │    ├ContainerPath: string
│         │    └AccessLevel: string
│         ├[+] type ContainerPortRange
│         │ ├  documentation: A set of one or more port numbers that can be opened on the container.
│         │ │  name: ContainerPortRange
│         │ └ properties
│         │    ├FromPort: integer (required)
│         │    ├Protocol: string (required)
│         │    └ToPort: integer (required)
│         ├[+] type GameServerContainerDefinition
│         │ ├  documentation: Specifies the information required to run game servers with this container group
│         │ │  name: GameServerContainerDefinition
│         │ └ properties
│         │    ├ContainerName: string (required)
│         │    ├DependsOn: Array<ContainerDependency>
│         │    ├ServerSdkVersion: string (required)
│         │    ├ImageUri: string (required)
│         │    ├ResolvedImageDigest: string
│         │    ├EnvironmentOverride: Array<ContainerEnvironment>
│         │    ├PortConfiguration: PortConfiguration
│         │    └MountPoints: Array<ContainerMountPoint>
│         ├[+] type PortConfiguration
│         │ ├  documentation: Defines the ports on a container.
│         │ │  name: PortConfiguration
│         │ └ properties
│         │    └ContainerPortRanges: Array<ContainerPortRange> (required)
│         └[+] type SupportContainerDefinition
│           ├  documentation: Supports the function of the main container group
│           │  name: SupportContainerDefinition
│           └ properties
│              ├ContainerName: string (required)
│              ├Vcpu: number
│              ├DependsOn: Array<ContainerDependency>
│              ├Essential: boolean
│              ├ImageUri: string (required)
│              ├ResolvedImageDigest: string
│              ├MemoryHardLimitMebibytes: integer
│              ├EnvironmentOverride: Array<ContainerEnvironment>
│              ├PortConfiguration: PortConfiguration
│              ├HealthCheck: ContainerHealthCheck
│              └MountPoints: Array<ContainerMountPoint>
└[~] service aws-kinesisfirehose
  └ resources
     └[~] resource AWS::KinesisFirehose::DeliveryStream
       ├ properties
       │  └[+] DatabaseSourceConfiguration: DatabaseSourceConfiguration (immutable)
       └ types
          ├[+] type DatabaseColumns
          │ ├  name: DatabaseColumns
          │ └ properties
          │    ├Include: Array<string>
          │    └Exclude: Array<string>
          ├[+] type Databases
          │ ├  name: Databases
          │ └ properties
          │    ├Include: Array<string>
          │    └Exclude: Array<string>
          ├[+] type DatabaseSourceAuthenticationConfiguration
          │ ├  name: DatabaseSourceAuthenticationConfiguration
          │ └ properties
          │    └SecretsManagerConfiguration: SecretsManagerConfiguration (required)
          ├[+] type DatabaseSourceConfiguration
          │ ├  name: DatabaseSourceConfiguration
          │ └ properties
          │    ├Type: string (required)
          │    ├Endpoint: string (required)
          │    ├Port: integer (required)
          │    ├SSLMode: string
          │    ├Databases: Databases (required)
          │    ├Tables: DatabaseTables (required)
          │    ├Columns: DatabaseColumns
          │    ├SurrogateKeys: Array<string>
          │    ├SnapshotWatermarkTable: string (required)
          │    ├DatabaseSourceAuthenticationConfiguration: DatabaseSourceAuthenticationConfiguration (required)
          │    ├DatabaseSourceVPCConfiguration: DatabaseSourceVPCConfiguration (required)
          │    ├Digest: string
          │    └PublicCertificate: string
          ├[+] type DatabaseSourceVPCConfiguration
          │ ├  name: DatabaseSourceVPCConfiguration
          │ └ properties
          │    └VpcEndpointServiceName: string (required)
          └[+] type DatabaseTables
            ├  name: DatabaseTables
            └ properties
               ├Include: Array<string>
               └Exclude: Array<string>