feat(sources): update documentation

[aws-cdk-automation]

⚠️ This Pull Request updates daily and will overwrite all manual changes pushed to the branch

Updates the documentation source from upstream. See details in workflow run.

---

Automatically created by projen via the "update-source-documentation" workflow

[github-actions]

To work on this Pull Request, please create a new branch and PR. This prevents your work from being deleted by the automation.

Run the following commands inside the repo:

gh co 2307
git switch -c fix-pr-2307 && git push -u origin HEAD
gh pr create -t "fix: PR #2307" --body "Fixes https://github.com/cdklabs/awscdk-service-spec/pull/2307"

[github-actions]

@aws-cdk/aws-service-spec: Model database diff detected
📁 Download full diff

├[~] service aws-cloudformation
│ └ resources
│    └[~]  resource AWS::CloudFormation::WaitCondition
│       └      - documentation: The `AWS::CloudFormation::WaitCondition` resource provides a way to coordinate stack resource creation with configuration actions that are external to the stack creation or to track the status of a configuration process. In these situations, we recommend that you associate a `CreationPolicy` attribute with the wait condition instead of using a wait condition handle. For more information and an example, see [CreationPolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-attribute-creationpolicy.html) in the *CloudFormation User Guide* . If you use a `CreationPolicy` with a wait condition, don't specify any of the wait condition's properties.
│              > If you use AWS PrivateLink , resources in the VPC that respond to wait conditions must have access to CloudFormation , specific Amazon S3 buckets. Resources must send wait condition responses to a presigned Amazon S3 URL. If they can't send responses to Amazon S3 , CloudFormation won't receive a response and the stack operation fails. For more information, see [Access CloudFormation using an interface endpoint ( AWS PrivateLink )](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/vpc-interface-endpoints.html) in the *CloudFormation User Guide* . > For Amazon EC2 and Amazon EC2 Auto Scaling resources, we recommend that you use a `CreationPolicy` attribute instead of wait conditions. Add a `CreationPolicy` attribute to those resources, and use the `cfn-signal` helper script to signal when an instance creation process has completed successfully.
│              + documentation: The `AWS::CloudFormation::WaitCondition` resource provides a way to coordinate stack resource creation with configuration actions that are external to the stack creation or to track the status of a configuration process. In these situations, we recommend that you associate a `CreationPolicy` attribute with the wait condition instead of using a wait condition handle. For more information and an example, see [CreationPolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-attribute-creationpolicy.html) in the *CloudFormation User Guide* . If you use a `CreationPolicy` with a wait condition, don't specify any of the wait condition's properties.
│              > If you use AWS PrivateLink , resources in the VPC that respond to wait conditions must have access to CloudFormation , specific Amazon S3 buckets. Resources must send wait condition responses to a presigned Amazon S3 URL. If they can't send responses to Amazon S3 , CloudFormation won't receive a response and the stack operation fails. For more information, see [Access CloudFormation using an interface endpoint ( AWS PrivateLink )](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/vpc-interface-endpoints.html) in the *CloudFormation User Guide* . > For Amazon EC2 and Auto Scaling resources, we recommend that you use a `CreationPolicy` attribute instead of wait conditions. Add a `CreationPolicy` attribute to those resources, and use the `cfn-signal` helper script to signal when an instance creation process has completed successfully.
├[~] service aws-cloudfront
│ └ resources
│    └[~]  resource AWS::CloudFront::AnycastIpList
│       ├ properties
│       │  └ IpamCidrConfigs: (documentation changed)
│       ├ attributes
│       │  └ IpamCidrConfigResults: (documentation changed)
│       └ types
│          ├[~] type AnycastIpList
│          │ └ properties
│          │    └ IpamCidrConfigResults: (documentation changed)
│          └[~] type IpamCidrConfigResult
│            ├      - documentation: undefined
│            │      + documentation: The result for the IPAM CIDR that defines a specific IP address range, IPAM pool, and associated Anycast IP address.
│            └ properties
│               ├ AnycastIp: (documentation changed)
│               ├ Cidr: (documentation changed)
│               ├ IpamPoolArn: (documentation changed)
│               └ Status: (documentation changed)
├[~] service aws-codedeploy
│ └ resources
│    └[~]  resource AWS::CodeDeploy::DeploymentGroup
│       └ properties
│          └ AutoScalingGroups: (documentation changed)
├[~] service aws-datasync
│ └ resources
│    ├[~]  resource AWS::DataSync::LocationAzureBlob
│    │  ├ properties
│    │  │  ├ CmkSecretConfig: (documentation changed)
│    │  │  └ CustomSecretConfig: (documentation changed)
│    │  └ types
│    │     ├[~] type CmkSecretConfig
│    │     │ └      - documentation: Specifies configuration information for a DataSync-managed secret, such as an authentication token or secret key that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key .
│    │     │        > You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request.
│    │     │        + documentation: Specifies configuration information for a DataSync-managed secret, such as an authentication token, secret key, password, or Kerberos keytab that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key .
│    │     │        > You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request.
│    │     └[~] type CustomSecretConfig
│    │       └      - documentation: Specifies configuration information for a customer-managed Secrets Manager secret where a storage location authentication token or secret key is stored in plain text. This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret.
│    │              > You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request.
│    │              + documentation: Specifies configuration information for a customer-managed Secrets Manager secret where a storage location credentials is stored in Secrets Manager as plain text (for authentication token, secret key, or password) or as binary (for Kerberos keytab). This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret.
│    │              > You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request.
│    ├[~]  resource AWS::DataSync::LocationObjectStorage
│    │  ├ properties
│    │  │  ├ CmkSecretConfig: (documentation changed)
│    │  │  └ CustomSecretConfig: (documentation changed)
│    │  └ types
│    │     ├[~] type CmkSecretConfig
│    │     │ └      - documentation: Specifies configuration information for a DataSync-managed secret, such as an authentication token or secret key that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key .
│    │     │        > You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request.
│    │     │        + documentation: Specifies configuration information for a DataSync-managed secret, such as an authentication token, secret key, password, or Kerberos keytab that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key .
│    │     │        > You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request.
│    │     └[~] type CustomSecretConfig
│    │       └      - documentation: Specifies configuration information for a customer-managed Secrets Manager secret where a storage location authentication token or secret key is stored in plain text. This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret.
│    │              > You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request.
│    │              + documentation: Specifies configuration information for a customer-managed Secrets Manager secret where a storage location credentials is stored in Secrets Manager as plain text (for authentication token, secret key, or password) or as binary (for Kerberos keytab). This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret.
│    │              > You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request.
│    └[~]  resource AWS::DataSync::LocationSMB
│       ├ properties
│       │  ├ CmkSecretConfig: (documentation changed)
│       │  └ CustomSecretConfig: (documentation changed)
│       └ types
│          ├[~] type CmkSecretConfig
│          │ └      - documentation: Specifies configuration information for a DataSync-managed secret, such as an authentication token or secret key that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key .
│          │        > You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request.
│          │        + documentation: Specifies configuration information for a DataSync-managed secret, such as an authentication token, secret key, password, or Kerberos keytab that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key .
│          │        > You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request.
│          └[~] type CustomSecretConfig
│            └      - documentation: Specifies configuration information for a customer-managed Secrets Manager secret where a storage location authentication token or secret key is stored in plain text. This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret.
│                   > You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request.
│                   + documentation: Specifies configuration information for a customer-managed Secrets Manager secret where a storage location credentials is stored in Secrets Manager as plain text (for authentication token, secret key, or password) or as binary (for Kerberos keytab). This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret.
│                   > You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request.
├[~] service aws-logs
│ └ resources
│    └[~]  resource AWS::Logs::Transformer
│       └ types
│          └[~] type ParseToOCSF
│            └ properties
│               └ MappingVersion: (documentation changed)
├[~] service aws-route53profiles
│ └ resources
│    └[~]  resource AWS::Route53Profiles::Profile
│       └ attributes
│          └ ShareStatus: (documentation changed)
└[~] service aws-workspacesweb
  └ resources
     └[~]  resource AWS::WorkSpacesWeb::UserSettings
        ├ properties
        │  └ BrandingConfiguration: (documentation changed)
        ├ attributes
        │  ├ BrandingConfiguration.FaviconMetadata: (documentation changed)
        │  ├ BrandingConfiguration.LogoMetadata: (documentation changed)
        │  └ BrandingConfiguration.WallpaperMetadata: (documentation changed)
        └ types
           ├[~] type BrandingConfiguration
           │ ├      - documentation: undefined
           │ │      + documentation: The branding configuration that customizes the appearance of the web portal for end users. This includes a custom logo, favicon, wallpaper, localized strings, color theme, and an optional terms of service.
           │ │      > The `LogoMetadata` , `FaviconMetadata` , and `WallpaperMetadata` properties are read-only and cannot be specified in your template. They are automatically populated by the service after you upload images and can be retrieved using the `Fn::GetAtt` intrinsic function.
           │ └ properties
           │    ├ ColorTheme: (documentation changed)
           │    ├ Favicon: (documentation changed)
           │    ├ FaviconMetadata: (documentation changed)
           │    ├ LocalizedStrings: (documentation changed)
           │    ├ Logo: (documentation changed)
           │    ├ LogoMetadata: (documentation changed)
           │    ├ TermsOfService: (documentation changed)
           │    ├ Wallpaper: (documentation changed)
           │    └ WallpaperMetadata: (documentation changed)
           ├[~] type ImageMetadata
           │ ├      - documentation: undefined
           │ │      + documentation: Metadata information about an uploaded image file.
           │ └ properties
           │    ├ FileExtension: (documentation changed)
           │    ├ LastUploadTimestamp: (documentation changed)
           │    └ MimeType: (documentation changed)
           └[~] type LocalizedBrandingStrings
             ├      - documentation: undefined
             │      + documentation: Localized text strings for a specific language that customize the web portal.
             └ properties
                ├ BrowserTabTitle: (documentation changed)
                ├ ContactButtonText: (documentation changed)
                ├ ContactLink: (documentation changed)
                ├ LoadingText: (documentation changed)
                ├ LoginButtonText: (documentation changed)
                ├ LoginDescription: (documentation changed)
                ├ LoginTitle: (documentation changed)
                └ WelcomeText: (documentation changed)