feat(sources): update cfn-schema

[aws-cdk-automation]

⚠️ This Pull Request updates daily and will overwrite all manual changes pushed to the branch

Updates the cfn-schema source from upstream. See details in workflow run.

---

Automatically created by projen via the "update-source-cfn-schema" workflow

[github-actions]

To work on this Pull Request, please create a new branch and PR. This prevents your work from being deleted by the automation.

Run the following commands inside the repo:

gh co 2222
git switch -c fix-pr-2222 && git push -u origin HEAD
gh pr create -t "fix: PR #2222" --body "Fixes https://github.com/cdklabs/awscdk-service-spec/pull/2222"

[github-actions]

@aws-cdk/aws-service-spec: Model database diff detected
📁 Download full diff

├[~] service aws-appstream
│ └ resources
│    └[~]  resource AWS::AppStream::Fleet
│       ├ properties
│       │  └[+] RootVolumeConfig: VolumeConfig
│       └ types
│          └[+]  type VolumeConfig
│             ├      name: VolumeConfig
│             └ properties
│                └ VolumeSizeInGb: integer
├[~] service aws-backup
│ └ resources
│    └[~]  resource AWS::Backup::LogicallyAirGappedBackupVault
│       └ properties
│          └[+] EncryptionKeyArn: string (immutable)
├[~] service aws-cloudfront
│ └ resources
│    └[+]  resource AWS::CloudFront::ConnectionFunction
│       ├      name: ConnectionFunction
│       │      cloudFormationType: AWS::CloudFront::ConnectionFunction
│       │      documentation: Resource Type definition for AWS::CloudFront::ConnectionFunction
│       │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│       ├ properties
│       │  ├ Name: string (required, immutable)
│       │  ├ ConnectionFunctionCode: string (required)
│       │  ├ ConnectionFunctionConfig: ConnectionFunctionConfig (required)
│       │  ├ AutoPublish: boolean (default=false)
│       │  └ Tags: Array<tag>
│       ├ attributes
│       │  ├ Id: string
│       │  ├ ConnectionFunctionArn: string
│       │  ├ Stage: string
│       │  ├ Status: string
│       │  ├ ETag: string
│       │  ├ CreatedTime: string
│       │  └ LastModifiedTime: string
│       └ types
│          ├ type ConnectionFunctionConfig
│          │ ├      name: ConnectionFunctionConfig
│          │ └ properties
│          │    ├ Comment: string (required)
│          │    ├ Runtime: string (required, immutable)
│          │    └ KeyValueStoreAssociations: Array<KeyValueStoreAssociation>
│          └ type KeyValueStoreAssociation
│            ├      name: KeyValueStoreAssociation
│            └ properties
│               └ KeyValueStoreARN: string (required)
├[~] service aws-customerprofiles
│ └ resources
│    └[~]  resource AWS::CustomerProfiles::Domain
│       ├ properties
│       │  └[+] DataStore: DataStore
│       ├ attributes
│       │  └[+] DataStore.Readiness: Readiness
│       └ types
│          ├[+]  type DataStore
│          │  ├      documentation: Configuration and status of the data store for the domain.
│          │  │      name: DataStore
│          │  └ properties
│          │     ├ Enabled: boolean
│          │     └ Readiness: Readiness
│          └[+]  type Readiness
│             ├      documentation: Progress information for data store setup.
│             │      name: Readiness
│             └ properties
│                ├ ProgressPercentage: integer
│                └ Message: string
├[~] service aws-datazone
│ └ resources
│    └[~]  resource AWS::DataZone::Connection
│       └ types
│          └[~] type SparkEmrPropertiesInput
│            └ properties
│               └[+] ManagedEndpointArn: string
├[~] service aws-imagebuilder
│ └ resources
│    ├[~]  resource AWS::ImageBuilder::ContainerRecipe
│    │  ├ attributes
│    │  │  ├[+] LatestVersion: LatestVersion
│    │  │  ├[+] LatestVersion.Arn: string
│    │  │  ├[+] LatestVersion.Major: string
│    │  │  ├[+] LatestVersion.Minor: string
│    │  │  └[+] LatestVersion.Patch: string
│    │  └ types
│    │     └[+]  type LatestVersion
│    │        ├      documentation: The latest version references of the container recipe.
│    │        │      name: LatestVersion
│    │        └ properties
│    │           ├ Arn: string
│    │           ├ Major: string
│    │           ├ Minor: string
│    │           └ Patch: string
│    └[~]  resource AWS::ImageBuilder::ImageRecipe
│       ├ attributes
│       │  ├[+] LatestVersion: LatestVersion
│       │  ├[+] LatestVersion.Arn: string
│       │  ├[+] LatestVersion.Major: string
│       │  ├[+] LatestVersion.Minor: string
│       │  └[+] LatestVersion.Patch: string
│       └ types
│          └[+]  type LatestVersion
│             ├      documentation: The latest version references of the image recipe.
│             │      name: LatestVersion
│             └ properties
│                ├ Arn: string
│                ├ Major: string
│                ├ Minor: string
│                └ Patch: string
├[~] service aws-lambda
│ └ resources
│    └[~]  resource AWS::Lambda::EventSourceMapping
│       ├ properties
│       │  └[+] LoggingConfig: LoggingConfig
│       └ types
│          ├[+]  type LoggingConfig
│          │  ├      name: LoggingConfig
│          │  └ properties
│          │     └ SystemLogLevel: string
│          └[~] type ProvisionedPollerConfig
│            └ properties
│               └[+] PollerGroupName: string
├[~] service aws-mediaconnect
│ └ resources
│    ├[~]  resource AWS::MediaConnect::FlowOutput
│    │  └ properties
│    │     └ Protocol: - string (required)
│    │                 + string
│    ├[+]  resource AWS::MediaConnect::RouterInput
│    │  ├      name: RouterInput
│    │  │      cloudFormationType: AWS::MediaConnect::RouterInput
│    │  │      documentation: Represents a router input in AWS Elemental MediaConnect that is used to ingest content to be transmitted to router outputs
│    │  │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │  ├ properties
│    │  │  ├ AvailabilityZone: string (immutable)
│    │  │  ├ Configuration: RouterInputConfiguration (required)
│    │  │  ├ MaintenanceConfiguration: MaintenanceConfiguration
│    │  │  ├ MaximumBitrate: integer (required)
│    │  │  ├ Name: string (required)
│    │  │  ├ RegionName: string (immutable)
│    │  │  ├ RoutingScope: string (required)
│    │  │  ├ Tags: Array<tag>
│    │  │  ├ Tier: string (required)
│    │  │  └ TransitEncryption: RouterInputTransitEncryption
│    │  ├ attributes
│    │  │  ├ Arn: string
│    │  │  ├ CreatedAt: string
│    │  │  ├ Id: string
│    │  │  ├ InputType: string
│    │  │  ├ IpAddress: string
│    │  │  ├ MaintenanceType: string
│    │  │  ├ RoutedOutputs: integer
│    │  │  ├ State: string
│    │  │  └ UpdatedAt: string
│    │  └ types
│    │     ├ type FailoverRouterInputConfiguration
│    │     │ ├      documentation: Configuration settings for a failover router input that allows switching between two input sources.
│    │     │ │      name: FailoverRouterInputConfiguration
│    │     │ └ properties
│    │     │    ├ NetworkInterfaceArn: string (required, immutable)
│    │     │    ├ ProtocolConfigurations: Array<FailoverRouterInputProtocolConfiguration> (required)
│    │     │    ├ SourcePriorityMode: string (required)
│    │     │    └ PrimarySourceIndex: integer
│    │     ├ type FailoverRouterInputProtocolConfiguration
│    │     │ ├      name: FailoverRouterInputProtocolConfiguration
│    │     │ └ properties
│    │     │    ├ Rtp: RtpRouterInputConfiguration
│    │     │    ├ Rist: RistRouterInputConfiguration
│    │     │    ├ SrtListener: SrtListenerRouterInputConfiguration
│    │     │    └ SrtCaller: SrtCallerRouterInputConfiguration
│    │     ├ type FlowTransitEncryption
│    │     │ ├      documentation: The configuration that defines how content is encrypted during transit between the MediaConnect router and a MediaConnect flow.
│    │     │ │      name: FlowTransitEncryption
│    │     │ └ properties
│    │     │    ├ EncryptionKeyType: string
│    │     │    └ EncryptionKeyConfiguration: FlowTransitEncryptionKeyConfiguration (required)
│    │     ├ type FlowTransitEncryptionKeyConfiguration
│    │     │ ├      name: FlowTransitEncryptionKeyConfiguration
│    │     │ └ properties
│    │     │    ├ SecretsManager: SecretsManagerEncryptionKeyConfiguration
│    │     │    └ Automatic: json
│    │     ├ type MaintenanceConfiguration
│    │     │ ├      name: MaintenanceConfiguration
│    │     │ └ properties
│    │     │    ├ PreferredDayTime: PreferredDayTimeMaintenanceConfiguration
│    │     │    └ Default: json
│    │     ├ type MediaConnectFlowRouterInputConfiguration
│    │     │ ├      documentation: Configuration settings for connecting a router input to a flow output.
│    │     │ │      name: MediaConnectFlowRouterInputConfiguration
│    │     │ └ properties
│    │     │    ├ FlowArn: string
│    │     │    ├ FlowOutputArn: string
│    │     │    └ SourceTransitDecryption: FlowTransitEncryption (required)
│    │     ├ type MergeRouterInputConfiguration
│    │     │ ├      documentation: Configuration settings for a merge router input that combines two input sources.
│    │     │ │      name: MergeRouterInputConfiguration
│    │     │ └ properties
│    │     │    ├ NetworkInterfaceArn: string (required, immutable)
│    │     │    ├ ProtocolConfigurations: Array<MergeRouterInputProtocolConfiguration> (required)
│    │     │    └ MergeRecoveryWindowMilliseconds: integer (required)
│    │     ├ type MergeRouterInputProtocolConfiguration
│    │     │ ├      name: MergeRouterInputProtocolConfiguration
│    │     │ └ properties
│    │     │    ├ Rtp: RtpRouterInputConfiguration
│    │     │    └ Rist: RistRouterInputConfiguration
│    │     ├ type PreferredDayTimeMaintenanceConfiguration
│    │     │ ├      documentation: Configuration for preferred day and time maintenance settings.
│    │     │ │      name: PreferredDayTimeMaintenanceConfiguration
│    │     │ └ properties
│    │     │    ├ Day: string (required)
│    │     │    └ Time: string (required)
│    │     ├ type RistRouterInputConfiguration
│    │     │ ├      documentation: The configuration settings for a router input using the RIST (Reliable Internet Stream Transport) protocol, including the port and recovery latency.
│    │     │ │      name: RistRouterInputConfiguration
│    │     │ └ properties
│    │     │    ├ Port: integer (required)
│    │     │    └ RecoveryLatencyMilliseconds: integer (required)
│    │     ├ type RouterInputConfiguration
│    │     │ ├      name: RouterInputConfiguration
│    │     │ └ properties
│    │     │    ├ Standard: StandardRouterInputConfiguration
│    │     │    ├ Failover: FailoverRouterInputConfiguration
│    │     │    ├ Merge: MergeRouterInputConfiguration
│    │     │    └ MediaConnectFlow: MediaConnectFlowRouterInputConfiguration
│    │     ├ type RouterInputProtocolConfiguration
│    │     │ ├      name: RouterInputProtocolConfiguration
│    │     │ └ properties
│    │     │    ├ Rtp: RtpRouterInputConfiguration
│    │     │    ├ Rist: RistRouterInputConfiguration
│    │     │    ├ SrtListener: SrtListenerRouterInputConfiguration
│    │     │    └ SrtCaller: SrtCallerRouterInputConfiguration
│    │     ├ type RouterInputTransitEncryption
│    │     │ ├      documentation: The transit encryption settings for a router input.
│    │     │ │      name: RouterInputTransitEncryption
│    │     │ └ properties
│    │     │    ├ EncryptionKeyType: string
│    │     │    └ EncryptionKeyConfiguration: RouterInputTransitEncryptionKeyConfiguration (required)
│    │     ├ type RouterInputTransitEncryptionKeyConfiguration
│    │     │ ├      name: RouterInputTransitEncryptionKeyConfiguration
│    │     │ └ properties
│    │     │    ├ SecretsManager: SecretsManagerEncryptionKeyConfiguration
│    │     │    └ Automatic: json
│    │     ├ type RtpRouterInputConfiguration
│    │     │ ├      documentation: The configuration settings for a Router Input using the RTP (Real-Time Transport Protocol) protocol, including the port and forward error correction state.
│    │     │ │      name: RtpRouterInputConfiguration
│    │     │ └ properties
│    │     │    ├ Port: integer (required)
│    │     │    └ ForwardErrorCorrection: string
│    │     ├ type SecretsManagerEncryptionKeyConfiguration
│    │     │ ├      documentation: The configuration settings for transit encryption using AWS Secrets Manager, including the secret ARN and role ARN.
│    │     │ │      name: SecretsManagerEncryptionKeyConfiguration
│    │     │ └ properties
│    │     │    ├ SecretArn: string (required)
│    │     │    └ RoleArn: string (required)
│    │     ├ type SrtCallerRouterInputConfiguration
│    │     │ ├      documentation: The configuration settings for a router input using the SRT (Secure Reliable Transport) protocol in caller mode, including the source address and port, minimum latency, stream ID, and decryption key configuration.
│    │     │ │      name: SrtCallerRouterInputConfiguration
│    │     │ └ properties
│    │     │    ├ SourceAddress: string (required)
│    │     │    ├ SourcePort: integer (required)
│    │     │    ├ MinimumLatencyMilliseconds: integer (required)
│    │     │    ├ StreamId: string
│    │     │    └ DecryptionConfiguration: SrtDecryptionConfiguration
│    │     ├ type SrtDecryptionConfiguration
│    │     │ ├      documentation: Contains the configuration settings for decrypting SRT streams, including the encryption key details and decryption parameters.
│    │     │ │      name: SrtDecryptionConfiguration
│    │     │ └ properties
│    │     │    └ EncryptionKey: SecretsManagerEncryptionKeyConfiguration (required)
│    │     ├ type SrtListenerRouterInputConfiguration
│    │     │ ├      documentation: The configuration settings for a router input using the SRT (Secure Reliable Transport) protocol in listener mode, including the port, minimum latency, and decryption key configuration.
│    │     │ │      name: SrtListenerRouterInputConfiguration
│    │     │ └ properties
│    │     │    ├ Port: integer (required)
│    │     │    ├ MinimumLatencyMilliseconds: integer (required)
│    │     │    └ DecryptionConfiguration: SrtDecryptionConfiguration
│    │     └ type StandardRouterInputConfiguration
│    │       ├      documentation: The configuration settings for a standard router input, including the protocol, protocol-specific configuration, network interface, and availability zone.
│    │       │      name: StandardRouterInputConfiguration
│    │       └ properties
│    │          ├ NetworkInterfaceArn: string (required, immutable)
│    │          ├ ProtocolConfiguration: RouterInputProtocolConfiguration (required)
│    │          └ Protocol: string
│    └[+]  resource AWS::MediaConnect::RouterOutput
│       ├      name: RouterOutput
│       │      cloudFormationType: AWS::MediaConnect::RouterOutput
│       │      documentation: Represents a router input in AWS Elemental MediaConnect that can be used to egress content transmitted from router inputs
│       │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│       ├ properties
│       │  ├ AvailabilityZone: string (immutable)
│       │  ├ Configuration: RouterOutputConfiguration (required)
│       │  ├ MaintenanceConfiguration: MaintenanceConfiguration
│       │  ├ MaximumBitrate: integer (required)
│       │  ├ Name: string (required)
│       │  ├ RegionName: string (immutable)
│       │  ├ RoutingScope: string (required)
│       │  ├ Tags: Array<tag>
│       │  └ Tier: string (required)
│       ├ attributes
│       │  ├ Arn: string
│       │  ├ CreatedAt: string
│       │  ├ Id: string
│       │  ├ IpAddress: string
│       │  ├ MaintenanceType: string
│       │  ├ OutputType: string
│       │  ├ RoutedState: string
│       │  ├ State: string
│       │  └ UpdatedAt: string
│       └ types
│          ├ type FlowTransitEncryption
│          │ ├      documentation: The configuration that defines how content is encrypted during transit between the MediaConnect router and a MediaConnect flow.
│          │ │      name: FlowTransitEncryption
│          │ └ properties
│          │    ├ EncryptionKeyType: string
│          │    └ EncryptionKeyConfiguration: FlowTransitEncryptionKeyConfiguration (required)
│          ├ type FlowTransitEncryptionKeyConfiguration
│          │ ├      name: FlowTransitEncryptionKeyConfiguration
│          │ └ properties
│          │    ├ SecretsManager: SecretsManagerEncryptionKeyConfiguration
│          │    └ Automatic: json
│          ├ type MaintenanceConfiguration
│          │ ├      name: MaintenanceConfiguration
│          │ └ properties
│          │    ├ PreferredDayTime: PreferredDayTimeMaintenanceConfiguration
│          │    └ Default: json
│          ├ type MediaConnectFlowRouterOutputConfiguration
│          │ ├      documentation: Configuration settings for connecting a router output to a MediaConnect flow source.
│          │ │      name: MediaConnectFlowRouterOutputConfiguration
│          │ └ properties
│          │    ├ FlowArn: string
│          │    ├ FlowSourceArn: string
│          │    └ DestinationTransitEncryption: FlowTransitEncryption (required)
│          ├ type MediaLiveInputRouterOutputConfiguration
│          │ ├      documentation: Configuration settings for connecting a router output to a MediaLive input.
│          │ │      name: MediaLiveInputRouterOutputConfiguration
│          │ └ properties
│          │    ├ MediaLiveInputArn: string
│          │    ├ MediaLivePipelineId: string
│          │    └ DestinationTransitEncryption: MediaLiveTransitEncryption (required)
│          ├ type MediaLiveTransitEncryption
│          │ ├      documentation: The encryption configuration that defines how content is encrypted during transit between MediaConnect Router and MediaLive. This configuration determines whether encryption keys are automatically managed by the service or manually managed through AWS Secrets Manager.
│          │ │      name: MediaLiveTransitEncryption
│          │ └ properties
│          │    ├ EncryptionKeyType: string
│          │    └ EncryptionKeyConfiguration: MediaLiveTransitEncryptionKeyConfiguration (required)
│          ├ type MediaLiveTransitEncryptionKeyConfiguration
│          │ ├      name: MediaLiveTransitEncryptionKeyConfiguration
│          │ └ properties
│          │    ├ SecretsManager: SecretsManagerEncryptionKeyConfiguration
│          │    └ Automatic: json
│          ├ type PreferredDayTimeMaintenanceConfiguration
│          │ ├      documentation: Configuration for preferred day and time maintenance settings.
│          │ │      name: PreferredDayTimeMaintenanceConfiguration
│          │ └ properties
│          │    ├ Day: string (required)
│          │    └ Time: string (required)
│          ├ type RistRouterOutputConfiguration
│          │ ├      documentation: The configuration settings for a router output using the RIST (Reliable Internet Stream Transport) protocol, including the destination address and port.
│          │ │      name: RistRouterOutputConfiguration
│          │ └ properties
│          │    ├ DestinationAddress: string (required)
│          │    └ DestinationPort: integer (required)
│          ├ type RouterOutputConfiguration
│          │ ├      name: RouterOutputConfiguration
│          │ └ properties
│          │    ├ Standard: StandardRouterOutputConfiguration
│          │    ├ MediaConnectFlow: MediaConnectFlowRouterOutputConfiguration
│          │    └ MediaLiveInput: MediaLiveInputRouterOutputConfiguration
│          ├ type RouterOutputProtocolConfiguration
│          │ ├      name: RouterOutputProtocolConfiguration
│          │ └ properties
│          │    ├ Rtp: RtpRouterOutputConfiguration
│          │    ├ Rist: RistRouterOutputConfiguration
│          │    ├ SrtListener: SrtListenerRouterOutputConfiguration
│          │    └ SrtCaller: SrtCallerRouterOutputConfiguration
│          ├ type RtpRouterOutputConfiguration
│          │ ├      documentation: The configuration settings for a router output using the RTP (Real-Time Transport Protocol) protocol, including the destination address and port, and forward error correction state.
│          │ │      name: RtpRouterOutputConfiguration
│          │ └ properties
│          │    ├ DestinationAddress: string (required)
│          │    ├ DestinationPort: integer (required)
│          │    └ ForwardErrorCorrection: string
│          ├ type SecretsManagerEncryptionKeyConfiguration
│          │ ├      documentation: The configuration settings for transit encryption using AWS Secrets Manager, including the secret ARN and role ARN.
│          │ │      name: SecretsManagerEncryptionKeyConfiguration
│          │ └ properties
│          │    ├ SecretArn: string (required)
│          │    └ RoleArn: string (required)
│          ├ type SrtCallerRouterOutputConfiguration
│          │ ├      documentation: The configuration settings for a router output using the SRT (Secure Reliable Transport) protocol in caller mode, including the destination address and port, minimum latency, stream ID, and encryption key configuration.
│          │ │      name: SrtCallerRouterOutputConfiguration
│          │ └ properties
│          │    ├ DestinationAddress: string (required)
│          │    ├ DestinationPort: integer (required)
│          │    ├ MinimumLatencyMilliseconds: integer (required)
│          │    ├ StreamId: string
│          │    └ EncryptionConfiguration: SrtEncryptionConfiguration
│          ├ type SrtEncryptionConfiguration
│          │ ├      documentation: Contains the configuration settings for encrypting SRT streams, including the encryption key details and encryption parameters.
│          │ │      name: SrtEncryptionConfiguration
│          │ └ properties
│          │    └ EncryptionKey: SecretsManagerEncryptionKeyConfiguration (required)
│          ├ type SrtListenerRouterOutputConfiguration
│          │ ├      documentation: The configuration settings for a router output using the SRT (Secure Reliable Transport) protocol in listener mode, including the port, minimum latency, and encryption key configuration.
│          │ │      name: SrtListenerRouterOutputConfiguration
│          │ └ properties
│          │    ├ Port: integer (required)
│          │    ├ MinimumLatencyMilliseconds: integer (required)
│          │    └ EncryptionConfiguration: SrtEncryptionConfiguration
│          └ type StandardRouterOutputConfiguration
│            ├      documentation: The configuration settings for a standard router output, including the protocol, protocol-specific configuration, network interface, and availability zone.
│            │      name: StandardRouterOutputConfiguration
│            └ properties
│               ├ NetworkInterfaceArn: string (required, immutable)
│               ├ ProtocolConfiguration: RouterOutputProtocolConfiguration (required)
│               └ Protocol: string
├[~] service aws-msk
│ └ resources
│    └[~]  resource AWS::MSK::Cluster
│       ├ properties
│       │  └[-] Rebalancing: Rebalancing
│       ├ attributes
│       │  └[-] CurrentVersion: string
│       └ types
│          └[-]  type Rebalancing
│             ├      name: Rebalancing
│             └ properties
│                └ Status: string (required)
├[~] service aws-servicecatalog
│ └ resources
│    └[~]  resource AWS::ServiceCatalog::CloudFormationProduct
│       ├ attributes
│       │  └ Id: (documentation changed)
│       └ types
│          └[~] type Info
│            ├      - documentation: Specify the template source with one of the following options, but not both. Keys accepted: [ LoadTemplateFromURL, ImportFromPhysicalId ] The URL of the AWS CloudFormation template in Amazon S3 in JSON format. Specify the URL in JSON format as follows:
│            │      "LoadTemplateFromURL": "https://s3.amazonaws.com/cf-templates-ozkq9d3hgiq2-us-east-1/..."
│            │      ImportFromPhysicalId: The physical id of the resource that contains the template. Currently only supports AWS CloudFormation stack arn. Specify the physical id in JSON format as follows: ImportFromPhysicalId: "arn:aws:cloudformation:[us-east-1]:[accountId]:stack/[StackName]/[resourceId]
│            │      + documentation: undefined
│            └ properties
│               ├ ImportFromPhysicalId: (documentation changed)
│               └ LoadTemplateFromURL: (documentation changed)
├[~] service aws-vpclattice
│ └ resources
│    ├[+]  resource AWS::VpcLattice::DomainVerification
│    │  ├      name: DomainVerification
│    │  │      cloudFormationType: AWS::VpcLattice::DomainVerification
│    │  │      documentation: Creates a Lattice Domain Verification
│    │  │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │  ├ properties
│    │  │  ├ DomainName: string (required, immutable)
│    │  │  └ Tags: Array<tag>
│    │  ├ attributes
│    │  │  ├ TxtMethodConfig: TxtMethodConfig
│    │  │  ├ Status: string
│    │  │  ├ Id: string
│    │  │  └ Arn: string
│    │  └ types
│    │     └ type TxtMethodConfig
│    │       ├      name: TxtMethodConfig
│    │       └ properties
│    │          ├ name: string
│    │          └ value: string
│    ├[~]  resource AWS::VpcLattice::ResourceConfiguration
│    │  └ properties
│    │     ├[+] CustomDomainName: string (immutable)
│    │     ├[+] DomainVerificationId: string (immutable)
│    │     └[+] GroupDomain: string (immutable)
│    └[~]  resource AWS::VpcLattice::ServiceNetworkResourceAssociation
│       └ properties
│          └[+] PrivateDnsEnabled: boolean (immutable)
├[~] service aws-wisdom
│ └ resources
│    └[~]  resource AWS::Wisdom::AIAgent
│       └ types
│          ├[~] type AIAgentConfiguration
│          │ └ properties
│          │    ├[+] EmailGenerativeAnswerAIAgentConfiguration: EmailGenerativeAnswerAIAgentConfiguration
│          │    ├[+] EmailOverviewAIAgentConfiguration: EmailOverviewAIAgentConfiguration
│          │    └[+] EmailResponseAIAgentConfiguration: EmailResponseAIAgentConfiguration
│          ├[+]  type EmailGenerativeAnswerAIAgentConfiguration
│          │  ├      name: EmailGenerativeAnswerAIAgentConfiguration
│          │  └ properties
│          │     ├ EmailGenerativeAnswerAIPromptId: string
│          │     ├ EmailQueryReformulationAIPromptId: string
│          │     ├ AssociationConfigurations: Array<AssociationConfiguration>
│          │     └ Locale: string
│          ├[+]  type EmailOverviewAIAgentConfiguration
│          │  ├      name: EmailOverviewAIAgentConfiguration
│          │  └ properties
│          │     ├ EmailOverviewAIPromptId: string
│          │     └ Locale: string
│          └[+]  type EmailResponseAIAgentConfiguration
│             ├      name: EmailResponseAIAgentConfiguration
│             └ properties
│                ├ EmailResponseAIPromptId: string
│                ├ EmailQueryReformulationAIPromptId: string
│                ├ AssociationConfigurations: Array<AssociationConfiguration>
│                └ Locale: string
├[~] service aws-workspacesweb
│ └ resources
│    └[~]  resource AWS::WorkSpacesWeb::BrowserSettings
│       ├ properties
│       │  └[+] WebContentFilteringPolicy: WebContentFilteringPolicy
│       └ types
│          └[+]  type WebContentFilteringPolicy
│             ├      name: WebContentFilteringPolicy
│             └ properties
│                ├ BlockedCategories: Array<string>
│                ├ AllowedUrls: Array<string>
│                └ BlockedUrls: Array<string>
└[+] service dev-fsx
  ├      capitalized: FSx
  │      cloudFormationNamespace: Dev::FSx
  │      name: dev-fsx
  │      shortName: fsx
  └ resources
     └ resource Dev::FSx::StorageVirtualMachine
       ├      name: StorageVirtualMachine
       │      cloudFormationType: Dev::FSx::StorageVirtualMachine
       │      documentation: Resource Type definition for Dev::FSx::StorageVirtualMachine
       │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
       ├ properties
       │  ├ SvmAdminPassword: string
       │  ├ ActiveDirectoryConfiguration: ActiveDirectoryConfiguration
       │  ├ RootVolumeSecurityStyle: string (immutable)
       │  ├ FileSystemId: string (required, immutable)
       │  ├ Tags: Array<tag>
       │  └ Name: string (required, immutable)
       ├ attributes
       │  ├ ResourceARN: string
       │  ├ UUID: string
       │  └ StorageVirtualMachineId: string
       └ types
          ├ type ActiveDirectoryConfiguration
          │ ├      name: ActiveDirectoryConfiguration
          │ └ properties
          │    ├ SelfManagedActiveDirectoryConfiguration: SelfManagedActiveDirectoryConfiguration
          │    └ NetBiosName: string
          └ type SelfManagedActiveDirectoryConfiguration
            ├      name: SelfManagedActiveDirectoryConfiguration
            └ properties
               ├ FileSystemAdministratorsGroup: string
               ├ UserName: string
               ├ DomainName: string
               ├ OrganizationalUnitDistinguishedName: string
               ├ DomainJoinServiceAccountSecret: string
               ├ DnsIps: Array<string>
               └ Password: string

[github-actions]

To work on this Pull Request, please create a new branch and PR. This prevents your work from being deleted by the automation.

Run the following commands inside the repo:

gh co 2222
git switch -c fix-pr-2222 && git push -u origin HEAD
gh pr create -t "fix: PR #2222" --body "Fixes https://github.com/cdklabs/awscdk-service-spec/pull/2222"

[github-actions]

@aws-cdk/aws-service-spec: Model database diff detected
📁 Download full diff

├[~] service aws-appstream
│ └ resources
│    └[~]  resource AWS::AppStream::Fleet
│       ├ properties
│       │  └[+] RootVolumeConfig: VolumeConfig
│       └ types
│          └[+]  type VolumeConfig
│             ├      name: VolumeConfig
│             └ properties
│                └ VolumeSizeInGb: integer
├[~] service aws-backup
│ └ resources
│    └[~]  resource AWS::Backup::LogicallyAirGappedBackupVault
│       ├ properties
│       │  └[+] EncryptionKeyArn: string (immutable)
│       └ attributes
│          └[-] EncryptionKeyArn: string
├[~] service aws-bedrock
│ └ resources
│    └[~]  resource AWS::Bedrock::DataAutomationProject
│       └ types
│          ├[+]  type AudioLanguageConfiguration
│          │  ├      name: AudioLanguageConfiguration
│          │  └ properties
│          │     ├ InputLanguages: Array<string>
│          │     ├ GenerativeOutputLanguage: string
│          │     └ IdentifyMultipleLanguages: boolean
│          └[~] type AudioOverrideConfiguration
│            └ properties
│               └[+] LanguageConfiguration: AudioLanguageConfiguration
├[~] service aws-cloudfront
│ └ resources
│    └[+]  resource AWS::CloudFront::ConnectionFunction
│       ├      name: ConnectionFunction
│       │      cloudFormationType: AWS::CloudFront::ConnectionFunction
│       │      documentation: Resource Type definition for AWS::CloudFront::ConnectionFunction
│       │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│       ├ properties
│       │  ├ Name: string (required, immutable)
│       │  ├ ConnectionFunctionCode: string (required)
│       │  ├ ConnectionFunctionConfig: ConnectionFunctionConfig (required)
│       │  ├ AutoPublish: boolean (default=false)
│       │  └ Tags: Array<tag>
│       ├ attributes
│       │  ├ Id: string
│       │  ├ ConnectionFunctionArn: string
│       │  ├ Stage: string
│       │  ├ Status: string
│       │  ├ ETag: string
│       │  ├ CreatedTime: string
│       │  └ LastModifiedTime: string
│       └ types
│          ├ type ConnectionFunctionConfig
│          │ ├      name: ConnectionFunctionConfig
│          │ └ properties
│          │    ├ Comment: string (required)
│          │    ├ Runtime: string (required, immutable)
│          │    └ KeyValueStoreAssociations: Array<KeyValueStoreAssociation>
│          └ type KeyValueStoreAssociation
│            ├      name: KeyValueStoreAssociation
│            └ properties
│               └ KeyValueStoreARN: string (required)
├[~] service aws-cloudtrail
│ └ resources
│    └[~]  resource AWS::CloudTrail::Trail
│       └ types
│          └[~] type InsightSelector
│            └ properties
│               └[+] EventCategories: Array<string>
├[~] service aws-customerprofiles
│ └ resources
│    └[~]  resource AWS::CustomerProfiles::Domain
│       ├ properties
│       │  └[+] DataStore: DataStore
│       ├ attributes
│       │  └[+] DataStore.Readiness: Readiness
│       └ types
│          ├[+]  type DataStore
│          │  ├      documentation: Configuration and status of the data store for the domain.
│          │  │      name: DataStore
│          │  └ properties
│          │     ├ Enabled: boolean
│          │     └ Readiness: Readiness
│          └[+]  type Readiness
│             ├      documentation: Progress information for data store setup.
│             │      name: Readiness
│             └ properties
│                ├ ProgressPercentage: integer
│                └ Message: string
├[~] service aws-datazone
│ └ resources
│    └[~]  resource AWS::DataZone::Connection
│       └ types
│          └[~] type SparkEmrPropertiesInput
│            └ properties
│               └[+] ManagedEndpointArn: string
├[~] service aws-ec2
│ └ resources
│    ├[~]  resource AWS::EC2::VPCEndpoint
│    │  └ types
│    │     └[~] type DnsOptionsSpecification
│    │       └ properties
│    │          ├[+] PrivateDnsPreference: string (immutable)
│    │          └[+] PrivateDnsSpecifiedDomains: Array<string> (immutable)
│    ├[+]  resource AWS::EC2::VPNConcentrator
│    │  ├      name: VPNConcentrator
│    │  │      cloudFormationType: AWS::EC2::VPNConcentrator
│    │  │      documentation: Resource Type definition for AWS::EC2::VPNConcentrator
│    │  │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │  ├ properties
│    │  │  ├ TransitGatewayId: string (required, immutable)
│    │  │  ├ Type: string (required, immutable)
│    │  │  └ Tags: Array<tag>
│    │  └ attributes
│    │     ├ VpnConcentratorId: string
│    │     └ TransitGatewayAttachmentId: string
│    └[~]  resource AWS::EC2::VPNConnection
│       ├ properties
│       │  ├[+] TunnelBandwidth: string (default="standard", immutable)
│       │  └[+] VpnConcentratorId: string (immutable)
│       └ types
│          └[~] type CloudwatchLogOptionsSpecification
│            └ properties
│               ├[+] BgpLogEnabled: boolean
│               ├[+] BgpLogGroupArn: string
│               └[+] BgpLogOutputFormat: string
├[~] service aws-elasticloadbalancingv2
│ └ resources
│    ├[~]  resource AWS::ElasticLoadBalancingV2::Listener
│    │  └ types
│    │     ├[~] type JwtValidationActionAdditionalClaim
│    │     │ └ properties
│    │     │    ├ Format: (documentation changed)
│    │     │    ├ Name: (documentation changed)
│    │     │    └ Values: (documentation changed)
│    │     └[~] type JwtValidationConfig
│    │       └ properties
│    │          ├ AdditionalClaims: (documentation changed)
│    │          ├ Issuer: (documentation changed)
│    │          └ JwksEndpoint: (documentation changed)
│    └[~]  resource AWS::ElasticLoadBalancingV2::ListenerRule
│       └ types
│          ├[~] type JwtValidationActionAdditionalClaim
│          │ └ properties
│          │    ├ Format: (documentation changed)
│          │    ├ Name: (documentation changed)
│          │    └ Values: (documentation changed)
│          └[~] type JwtValidationConfig
│            └ properties
│               ├ AdditionalClaims: (documentation changed)
│               ├ Issuer: (documentation changed)
│               └ JwksEndpoint: (documentation changed)
├[~] service aws-fsx
│ └ resources
│    ├[~]  resource AWS::FSx::FileSystem
│    │  └ types
│    │     └[~] type SelfManagedActiveDirectoryConfiguration
│    │       └ properties
│    │          └[+] DomainJoinServiceAccountSecret: string
│    └[~]  resource AWS::FSx::StorageVirtualMachine
│       └ types
│          └[~] type SelfManagedActiveDirectoryConfiguration
│            └ properties
│               └[+] DomainJoinServiceAccountSecret: string
├[~] service aws-glue
│ └ resources
│    └[+]  resource AWS::Glue::Integration
│       ├      name: Integration
│       │      cloudFormationType: AWS::Glue::Integration
│       │      documentation: Resource Type definition for AWS::Glue::Integration
│       │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│       │      arnTemplate: arn:${Partition}:glue:${Region}:${Account}:integration:${IntegrationId}
│       ├ properties
│       │  ├ DataFilter: string
│       │  ├ IntegrationName: string (required, immutable)
│       │  ├ Description: string
│       │  ├ SourceArn: string (required, immutable)
│       │  ├ IntegrationConfig: IntegrationConfig (immutable)
│       │  ├ KmsKeyId: string (immutable)
│       │  ├ TargetArn: string (required, immutable)
│       │  ├ AdditionalEncryptionContext: Map<string, string> (immutable)
│       │  └ Tags: Array<tag>
│       ├ attributes
│       │  ├ IntegrationArn: string
│       │  ├ CreateTime: string
│       │  └ Status: string
│       └ types
│          └ type IntegrationConfig
│            ├      documentation: The configuration settings for the integration.
│            │      name: IntegrationConfig
│            └ properties
│               ├ ContinuousSync: boolean
│               ├ RefreshInterval: string (immutable)
│               └ SourceProperties: Map<string, string>
├[~] service aws-imagebuilder
│ └ resources
│    ├[~]  resource AWS::ImageBuilder::ContainerRecipe
│    │  ├ attributes
│    │  │  ├[+] LatestVersion: LatestVersion
│    │  │  ├[+] LatestVersion.Arn: string
│    │  │  ├[+] LatestVersion.Major: string
│    │  │  ├[+] LatestVersion.Minor: string
│    │  │  └[+] LatestVersion.Patch: string
│    │  └ types
│    │     └[+]  type LatestVersion
│    │        ├      documentation: The latest version references of the container recipe.
│    │        │      name: LatestVersion
│    │        └ properties
│    │           ├ Arn: string
│    │           ├ Major: string
│    │           ├ Minor: string
│    │           └ Patch: string
│    └[~]  resource AWS::ImageBuilder::ImageRecipe
│       ├ attributes
│       │  ├[+] LatestVersion: LatestVersion
│       │  ├[+] LatestVersion.Arn: string
│       │  ├[+] LatestVersion.Major: string
│       │  ├[+] LatestVersion.Minor: string
│       │  └[+] LatestVersion.Patch: string
│       └ types
│          └[+]  type LatestVersion
│             ├      documentation: The latest version references of the image recipe.
│             │      name: LatestVersion
│             └ properties
│                ├ Arn: string
│                ├ Major: string
│                ├ Minor: string
│                └ Patch: string
├[~] service aws-lakeformation
│ └ resources
│    └[~]  resource AWS::LakeFormation::DataLakeSettings
│       └ properties
│          └[+] ReadOnlyAdmins: json
├[~] service aws-lambda
│ └ resources
│    └[~]  resource AWS::Lambda::EventSourceMapping
│       ├ properties
│       │  └[+] LoggingConfig: LoggingConfig
│       └ types
│          ├[+]  type LoggingConfig
│          │  ├      name: LoggingConfig
│          │  └ properties
│          │     └ SystemLogLevel: string
│          └[~] type ProvisionedPollerConfig
│            └ properties
│               └[+] PollerGroupName: string
├[~] service aws-mediaconnect
│ └ resources
│    ├[~]  resource AWS::MediaConnect::FlowOutput
│    │  └ properties
│    │     └ Protocol: - string (required)
│    │                 + string
│    ├[+]  resource AWS::MediaConnect::RouterInput
│    │  ├      name: RouterInput
│    │  │      cloudFormationType: AWS::MediaConnect::RouterInput
│    │  │      documentation: Represents a router input in AWS Elemental MediaConnect that is used to ingest content to be transmitted to router outputs
│    │  │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │  ├ properties
│    │  │  ├ AvailabilityZone: string (immutable)
│    │  │  ├ Configuration: RouterInputConfiguration (required)
│    │  │  ├ MaintenanceConfiguration: MaintenanceConfiguration
│    │  │  ├ MaximumBitrate: integer (required)
│    │  │  ├ Name: string (required)
│    │  │  ├ RegionName: string (immutable)
│    │  │  ├ RoutingScope: string (required)
│    │  │  ├ Tags: Array<tag>
│    │  │  ├ Tier: string (required)
│    │  │  └ TransitEncryption: RouterInputTransitEncryption
│    │  ├ attributes
│    │  │  ├ Arn: string
│    │  │  ├ CreatedAt: string
│    │  │  ├ Id: string
│    │  │  ├ InputType: string
│    │  │  ├ IpAddress: string
│    │  │  ├ MaintenanceType: string
│    │  │  ├ RoutedOutputs: integer
│    │  │  ├ State: string
│    │  │  └ UpdatedAt: string
│    │  └ types
│    │     ├ type FailoverRouterInputConfiguration
│    │     │ ├      documentation: Configuration settings for a failover router input that allows switching between two input sources.
│    │     │ │      name: FailoverRouterInputConfiguration
│    │     │ └ properties
│    │     │    ├ NetworkInterfaceArn: string (required, immutable)
│    │     │    ├ ProtocolConfigurations: Array<FailoverRouterInputProtocolConfiguration> (required)
│    │     │    ├ SourcePriorityMode: string (required)
│    │     │    └ PrimarySourceIndex: integer
│    │     ├ type FailoverRouterInputProtocolConfiguration
│    │     │ ├      name: FailoverRouterInputProtocolConfiguration
│    │     │ └ properties
│    │     │    ├ Rtp: RtpRouterInputConfiguration
│    │     │    ├ Rist: RistRouterInputConfiguration
│    │     │    ├ SrtListener: SrtListenerRouterInputConfiguration
│    │     │    └ SrtCaller: SrtCallerRouterInputConfiguration
│    │     ├ type FlowTransitEncryption
│    │     │ ├      documentation: The configuration that defines how content is encrypted during transit between the MediaConnect router and a MediaConnect flow.
│    │     │ │      name: FlowTransitEncryption
│    │     │ └ properties
│    │     │    ├ EncryptionKeyType: string
│    │     │    └ EncryptionKeyConfiguration: FlowTransitEncryptionKeyConfiguration (required)
│    │     ├ type FlowTransitEncryptionKeyConfiguration
│    │     │ ├      name: FlowTransitEncryptionKeyConfiguration
│    │     │ └ properties
│    │     │    ├ SecretsManager: SecretsManagerEncryptionKeyConfiguration
│    │     │    └ Automatic: json
│    │     ├ type MaintenanceConfiguration
│    │     │ ├      name: MaintenanceConfiguration
│    │     │ └ properties
│    │     │    ├ PreferredDayTime: PreferredDayTimeMaintenanceConfiguration
│    │     │    └ Default: json
│    │     ├ type MediaConnectFlowRouterInputConfiguration
│    │     │ ├      documentation: Configuration settings for connecting a router input to a flow output.
│    │     │ │      name: MediaConnectFlowRouterInputConfiguration
│    │     │ └ properties
│    │     │    ├ FlowArn: string
│    │     │    ├ FlowOutputArn: string
│    │     │    └ SourceTransitDecryption: FlowTransitEncryption (required)
│    │     ├ type MergeRouterInputConfiguration
│    │     │ ├      documentation: Configuration settings for a merge router input that combines two input sources.
│    │     │ │      name: MergeRouterInputConfiguration
│    │     │ └ properties
│    │     │    ├ NetworkInterfaceArn: string (required, immutable)
│    │     │    ├ ProtocolConfigurations: Array<MergeRouterInputProtocolConfiguration> (required)
│    │     │    └ MergeRecoveryWindowMilliseconds: integer (required)
│    │     ├ type MergeRouterInputProtocolConfiguration
│    │     │ ├      name: MergeRouterInputProtocolConfiguration
│    │     │ └ properties
│    │     │    ├ Rtp: RtpRouterInputConfiguration
│    │     │    └ Rist: RistRouterInputConfiguration
│    │     ├ type PreferredDayTimeMaintenanceConfiguration
│    │     │ ├      documentation: Configuration for preferred day and time maintenance settings.
│    │     │ │      name: PreferredDayTimeMaintenanceConfiguration
│    │     │ └ properties
│    │     │    ├ Day: string (required)
│    │     │    └ Time: string (required)
│    │     ├ type RistRouterInputConfiguration
│    │     │ ├      documentation: The configuration settings for a router input using the RIST (Reliable Internet Stream Transport) protocol, including the port and recovery latency.
│    │     │ │      name: RistRouterInputConfiguration
│    │     │ └ properties
│    │     │    ├ Port: integer (required)
│    │     │    └ RecoveryLatencyMilliseconds: integer (required)
│    │     ├ type RouterInputConfiguration
│    │     │ ├      name: RouterInputConfiguration
│    │     │ └ properties
│    │     │    ├ Standard: StandardRouterInputConfiguration
│    │     │    ├ Failover: FailoverRouterInputConfiguration
│    │     │    ├ Merge: MergeRouterInputConfiguration
│    │     │    └ MediaConnectFlow: MediaConnectFlowRouterInputConfiguration
│    │     ├ type RouterInputProtocolConfiguration
│    │     │ ├      name: RouterInputProtocolConfiguration
│    │     │ └ properties
│    │     │    ├ Rtp: RtpRouterInputConfiguration
│    │     │    ├ Rist: RistRouterInputConfiguration
│    │     │    ├ SrtListener: SrtListenerRouterInputConfiguration
│    │     │    └ SrtCaller: SrtCallerRouterInputConfiguration
│    │     ├ type RouterInputTransitEncryption
│    │     │ ├      documentation: The transit encryption settings for a router input.
│    │     │ │      name: RouterInputTransitEncryption
│    │     │ └ properties
│    │     │    ├ EncryptionKeyType: string
│    │     │    └ EncryptionKeyConfiguration: RouterInputTransitEncryptionKeyConfiguration (required)
│    │     ├ type RouterInputTransitEncryptionKeyConfiguration
│    │     │ ├      name: RouterInputTransitEncryptionKeyConfiguration
│    │     │ └ properties
│    │     │    ├ SecretsManager: SecretsManagerEncryptionKeyConfiguration
│    │     │    └ Automatic: json
│    │     ├ type RtpRouterInputConfiguration
│    │     │ ├      documentation: The configuration settings for a Router Input using the RTP (Real-Time Transport Protocol) protocol, including the port and forward error correction state.
│    │     │ │      name: RtpRouterInputConfiguration
│    │     │ └ properties
│    │     │    ├ Port: integer (required)
│    │     │    └ ForwardErrorCorrection: string
│    │     ├ type SecretsManagerEncryptionKeyConfiguration
│    │     │ ├      documentation: The configuration settings for transit encryption using AWS Secrets Manager, including the secret ARN and role ARN.
│    │     │ │      name: SecretsManagerEncryptionKeyConfiguration
│    │     │ └ properties
│    │     │    ├ SecretArn: string (required)
│    │     │    └ RoleArn: string (required)
│    │     ├ type SrtCallerRouterInputConfiguration
│    │     │ ├      documentation: The configuration settings for a router input using the SRT (Secure Reliable Transport) protocol in caller mode, including the source address and port, minimum latency, stream ID, and decryption key configuration.
│    │     │ │      name: SrtCallerRouterInputConfiguration
│    │     │ └ properties
│    │     │    ├ SourceAddress: string (required)
│    │     │    ├ SourcePort: integer (required)
│    │     │    ├ MinimumLatencyMilliseconds: integer (required)
│    │     │    ├ StreamId: string
│    │     │    └ DecryptionConfiguration: SrtDecryptionConfiguration
│    │     ├ type SrtDecryptionConfiguration
│    │     │ ├      documentation: Contains the configuration settings for decrypting SRT streams, including the encryption key details and decryption parameters.
│    │     │ │      name: SrtDecryptionConfiguration
│    │     │ └ properties
│    │     │    └ EncryptionKey: SecretsManagerEncryptionKeyConfiguration (required)
│    │     ├ type SrtListenerRouterInputConfiguration
│    │     │ ├      documentation: The configuration settings for a router input using the SRT (Secure Reliable Transport) protocol in listener mode, including the port, minimum latency, and decryption key configuration.
│    │     │ │      name: SrtListenerRouterInputConfiguration
│    │     │ └ properties
│    │     │    ├ Port: integer (required)
│    │     │    ├ MinimumLatencyMilliseconds: integer (required)
│    │     │    └ DecryptionConfiguration: SrtDecryptionConfiguration
│    │     └ type StandardRouterInputConfiguration
│    │       ├      documentation: The configuration settings for a standard router input, including the protocol, protocol-specific configuration, network interface, and availability zone.
│    │       │      name: StandardRouterInputConfiguration
│    │       └ properties
│    │          ├ NetworkInterfaceArn: string (required, immutable)
│    │          ├ ProtocolConfiguration: RouterInputProtocolConfiguration (required)
│    │          └ Protocol: string
│    └[+]  resource AWS::MediaConnect::RouterOutput
│       ├      name: RouterOutput
│       │      cloudFormationType: AWS::MediaConnect::RouterOutput
│       │      documentation: Represents a router input in AWS Elemental MediaConnect that can be used to egress content transmitted from router inputs
│       │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│       ├ properties
│       │  ├ AvailabilityZone: string (immutable)
│       │  ├ Configuration: RouterOutputConfiguration (required)
│       │  ├ MaintenanceConfiguration: MaintenanceConfiguration
│       │  ├ MaximumBitrate: integer (required)
│       │  ├ Name: string (required)
│       │  ├ RegionName: string (immutable)
│       │  ├ RoutingScope: string (required)
│       │  ├ Tags: Array<tag>
│       │  └ Tier: string (required)
│       ├ attributes
│       │  ├ Arn: string
│       │  ├ CreatedAt: string
│       │  ├ Id: string
│       │  ├ IpAddress: string
│       │  ├ MaintenanceType: string
│       │  ├ OutputType: string
│       │  ├ RoutedState: string
│       │  ├ State: string
│       │  └ UpdatedAt: string
│       └ types
│          ├ type FlowTransitEncryption
│          │ ├      documentation: The configuration that defines how content is encrypted during transit between the MediaConnect router and a MediaConnect flow.
│          │ │      name: FlowTransitEncryption
│          │ └ properties
│          │    ├ EncryptionKeyType: string
│          │    └ EncryptionKeyConfiguration: FlowTransitEncryptionKeyConfiguration (required)
│          ├ type FlowTransitEncryptionKeyConfiguration
│          │ ├      name: FlowTransitEncryptionKeyConfiguration
│          │ └ properties
│          │    ├ SecretsManager: SecretsManagerEncryptionKeyConfiguration
│          │    └ Automatic: json
│          ├ type MaintenanceConfiguration
│          │ ├      name: MaintenanceConfiguration
│          │ └ properties
│          │    ├ PreferredDayTime: PreferredDayTimeMaintenanceConfiguration
│          │    └ Default: json
│          ├ type MediaConnectFlowRouterOutputConfiguration
│          │ ├      documentation: Configuration settings for connecting a router output to a MediaConnect flow source.
│          │ │      name: MediaConnectFlowRouterOutputConfiguration
│          │ └ properties
│          │    ├ FlowArn: string
│          │    ├ FlowSourceArn: string
│          │    └ DestinationTransitEncryption: FlowTransitEncryption (required)
│          ├ type MediaLiveInputRouterOutputConfiguration
│          │ ├      documentation: Configuration settings for connecting a router output to a MediaLive input.
│          │ │      name: MediaLiveInputRouterOutputConfiguration
│          │ └ properties
│          │    ├ MediaLiveInputArn: string
│          │    ├ MediaLivePipelineId: string
│          │    └ DestinationTransitEncryption: MediaLiveTransitEncryption (required)
│          ├ type MediaLiveTransitEncryption
│          │ ├      documentation: The encryption configuration that defines how content is encrypted during transit between MediaConnect Router and MediaLive. This configuration determines whether encryption keys are automatically managed by the service or manually managed through AWS Secrets Manager.
│          │ │      name: MediaLiveTransitEncryption
│          │ └ properties
│          │    ├ EncryptionKeyType: string
│          │    └ EncryptionKeyConfiguration: MediaLiveTransitEncryptionKeyConfiguration (required)
│          ├ type MediaLiveTransitEncryptionKeyConfiguration
│          │ ├      name: MediaLiveTransitEncryptionKeyConfiguration
│          │ └ properties
│          │    ├ SecretsManager: SecretsManagerEncryptionKeyConfiguration
│          │    └ Automatic: json
│          ├ type PreferredDayTimeMaintenanceConfiguration
│          │ ├      documentation: Configuration for preferred day and time maintenance settings.
│          │ │      name: PreferredDayTimeMaintenanceConfiguration
│          │ └ properties
│          │    ├ Day: string (required)
│          │    └ Time: string (required)
│          ├ type RistRouterOutputConfiguration
│          │ ├      documentation: The configuration settings for a router output using the RIST (Reliable Internet Stream Transport) protocol, including the destination address and port.
│          │ │      name: RistRouterOutputConfiguration
│          │ └ properties
│          │    ├ DestinationAddress: string (required)
│          │    └ DestinationPort: integer (required)
│          ├ type RouterOutputConfiguration
│          │ ├      name: RouterOutputConfiguration
│          │ └ properties
│          │    ├ Standard: StandardRouterOutputConfiguration
│          │    ├ MediaConnectFlow: MediaConnectFlowRouterOutputConfiguration
│          │    └ MediaLiveInput: MediaLiveInputRouterOutputConfiguration
│          ├ type RouterOutputProtocolConfiguration
│          │ ├      name: RouterOutputProtocolConfiguration
│          │ └ properties
│          │    ├ Rtp: RtpRouterOutputConfiguration
│          │    ├ Rist: RistRouterOutputConfiguration
│          │    ├ SrtListener: SrtListenerRouterOutputConfiguration
│          │    └ SrtCaller: SrtCallerRouterOutputConfiguration
│          ├ type RtpRouterOutputConfiguration
│          │ ├      documentation: The configuration settings for a router output using the RTP (Real-Time Transport Protocol) protocol, including the destination address and port, and forward error correction state.
│          │ │      name: RtpRouterOutputConfiguration
│          │ └ properties
│          │    ├ DestinationAddress: string (required)
│          │    ├ DestinationPort: integer (required)
│          │    └ ForwardErrorCorrection: string
│          ├ type SecretsManagerEncryptionKeyConfiguration
│          │ ├      documentation: The configuration settings for transit encryption using AWS Secrets Manager, including the secret ARN and role ARN.
│          │ │      name: SecretsManagerEncryptionKeyConfiguration
│          │ └ properties
│          │    ├ SecretArn: string (required)
│          │    └ RoleArn: string (required)
│          ├ type SrtCallerRouterOutputConfiguration
│          │ ├      documentation: The configuration settings for a router output using the SRT (Secure Reliable Transport) protocol in caller mode, including the destination address and port, minimum latency, stream ID, and encryption key configuration.
│          │ │      name: SrtCallerRouterOutputConfiguration
│          │ └ properties
│          │    ├ DestinationAddress: string (required)
│          │    ├ DestinationPort: integer (required)
│          │    ├ MinimumLatencyMilliseconds: integer (required)
│          │    ├ StreamId: string
│          │    └ EncryptionConfiguration: SrtEncryptionConfiguration
│          ├ type SrtEncryptionConfiguration
│          │ ├      documentation: Contains the configuration settings for encrypting SRT streams, including the encryption key details and encryption parameters.
│          │ │      name: SrtEncryptionConfiguration
│          │ └ properties
│          │    └ EncryptionKey: SecretsManagerEncryptionKeyConfiguration (required)
│          ├ type SrtListenerRouterOutputConfiguration
│          │ ├      documentation: The configuration settings for a router output using the SRT (Secure Reliable Transport) protocol in listener mode, including the port, minimum latency, and encryption key configuration.
│          │ │      name: SrtListenerRouterOutputConfiguration
│          │ └ properties
│          │    ├ Port: integer (required)
│          │    ├ MinimumLatencyMilliseconds: integer (required)
│          │    └ EncryptionConfiguration: SrtEncryptionConfiguration
│          └ type StandardRouterOutputConfiguration
│            ├      documentation: The configuration settings for a standard router output, including the protocol, protocol-specific configuration, network interface, and availability zone.
│            │      name: StandardRouterOutputConfiguration
│            └ properties
│               ├ NetworkInterfaceArn: string (required, immutable)
│               ├ ProtocolConfiguration: RouterOutputProtocolConfiguration (required)
│               └ Protocol: string
├[~] service aws-msk
│ └ resources
│    └[~]  resource AWS::MSK::Cluster
│       ├ properties
│       │  └[-] Rebalancing: Rebalancing
│       ├ attributes
│       │  └[-] CurrentVersion: string
│       └ types
│          └[-]  type Rebalancing
│             ├      name: Rebalancing
│             └ properties
│                └ Status: string (required)
├[~] service aws-opensearchserverless
│ └ resources
│    └[~]  resource AWS::OpenSearchServerless::Collection
│       ├ properties
│       │  ├[+] CollectionGroupName: string (immutable)
│       │  └[+] EncryptionConfig: EncryptionConfig (immutable)
│       └ types
│          └[+]  type EncryptionConfig
│             ├      documentation: The configuration to encrypt the collection
│             │      name: EncryptionConfig
│             └ properties
│                ├ AWSOwnedKey: boolean
│                └ KmsKeyArn: string
├[~] service aws-sagemaker
│ └ resources
│    └[~]  resource AWS::SageMaker::PartnerApp
│       ├ properties
│       │  ├[+] AppVersion: string
│       │  └[+] EnableAutoMinorVersionUpgrade: boolean
│       └ attributes
│          └[+] CurrentVersionEolDate: string
├[~] service aws-servicecatalog
│ └ resources
│    └[~]  resource AWS::ServiceCatalog::CloudFormationProduct
│       ├ attributes
│       │  └ Id: (documentation changed)
│       └ types
│          ├[-]  type Info
│          │  ├      documentation: Specify the template source with one of the following options, but not both. Keys accepted: [ LoadTemplateFromURL, ImportFromPhysicalId ] The URL of the AWS CloudFormation template in Amazon S3 in JSON format. Specify the URL in JSON format as follows:
│          │  │      "LoadTemplateFromURL": "https://s3.amazonaws.com/cf-templates-ozkq9d3hgiq2-us-east-1/..."
│          │  │      ImportFromPhysicalId: The physical id of the resource that contains the template. Currently only supports AWS CloudFormation stack arn. Specify the physical id in JSON format as follows: ImportFromPhysicalId: "arn:aws:cloudformation:[us-east-1]:[accountId]:stack/[StackName]/[resourceId]
│          │  │      name: Info
│          │  └ properties
│          │     ├ LoadTemplateFromURL: string
│          │     └ ImportFromPhysicalId: string
│          └[~] type ProvisioningArtifactProperties
│            └ properties
│               └ Info: - Info ⇐ json (required)
│                       + json (required)
├[~] service aws-vpclattice
│ └ resources
│    ├[+]  resource AWS::VpcLattice::DomainVerification
│    │  ├      name: DomainVerification
│    │  │      cloudFormationType: AWS::VpcLattice::DomainVerification
│    │  │      documentation: Creates a Lattice Domain Verification
│    │  │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │  ├ properties
│    │  │  ├ DomainName: string (required, immutable)
│    │  │  └ Tags: Array<tag>
│    │  ├ attributes
│    │  │  ├ TxtMethodConfig: TxtMethodConfig
│    │  │  ├ Status: string
│    │  │  ├ Id: string
│    │  │  └ Arn: string
│    │  └ types
│    │     └ type TxtMethodConfig
│    │       ├      name: TxtMethodConfig
│    │       └ properties
│    │          ├ name: string
│    │          └ value: string
│    ├[~]  resource AWS::VpcLattice::ResourceConfiguration
│    │  └ properties
│    │     ├[+] CustomDomainName: string (immutable)
│    │     ├[+] DomainVerificationId: string (immutable)
│    │     └[+] GroupDomain: string (immutable)
│    └[~]  resource AWS::VpcLattice::ServiceNetworkResourceAssociation
│       └ properties
│          └[+] PrivateDnsEnabled: boolean (immutable)
├[~] service aws-wisdom
│ └ resources
│    └[~]  resource AWS::Wisdom::AIAgent
│       └ types
│          ├[~] type AIAgentConfiguration
│          │ └ properties
│          │    ├[+] EmailGenerativeAnswerAIAgentConfiguration: EmailGenerativeAnswerAIAgentConfiguration
│          │    ├[+] EmailOverviewAIAgentConfiguration: EmailOverviewAIAgentConfiguration
│          │    └[+] EmailResponseAIAgentConfiguration: EmailResponseAIAgentConfiguration
│          ├[+]  type EmailGenerativeAnswerAIAgentConfiguration
│          │  ├      name: EmailGenerativeAnswerAIAgentConfiguration
│          │  └ properties
│          │     ├ EmailGenerativeAnswerAIPromptId: string
│          │     ├ EmailQueryReformulationAIPromptId: string
│          │     ├ AssociationConfigurations: Array<AssociationConfiguration>
│          │     └ Locale: string
│          ├[+]  type EmailOverviewAIAgentConfiguration
│          │  ├      name: EmailOverviewAIAgentConfiguration
│          │  └ properties
│          │     ├ EmailOverviewAIPromptId: string
│          │     └ Locale: string
│          └[+]  type EmailResponseAIAgentConfiguration
│             ├      name: EmailResponseAIAgentConfiguration
│             └ properties
│                ├ EmailResponseAIPromptId: string
│                ├ EmailQueryReformulationAIPromptId: string
│                ├ AssociationConfigurations: Array<AssociationConfiguration>
│                └ Locale: string
└[~] service aws-workspacesweb
  └ resources
     └[~]  resource AWS::WorkSpacesWeb::BrowserSettings
        ├ properties
        │  └[+] WebContentFilteringPolicy: WebContentFilteringPolicy
        └ types
           └[+]  type WebContentFilteringPolicy
              ├      documentation: The policy that specifies which URLs end users are allowed to access or which URLs or domain categories they are restricted from accessing for enhanced security.
              │      name: WebContentFilteringPolicy
              └ properties
                 ├ BlockedCategories: Array<string>
                 ├ AllowedUrls: Array<string>
                 └ BlockedUrls: Array<string>