Skip to content

integ-coverage.md

Latest commit

 

History

History
177 lines (160 loc) · 44.9 KB

integ-coverage.md

File metadata and controls

177 lines (160 loc) · 44.9 KB
Raw

Integration Test Coverage Matrix

Run vp run integ-coverage to regenerate.

105 / 114 registered SDK Providers have at least one integ fixture exercising them. 9 are explicitly allow-listed (registered without an integ, with a rationale comment on the register line). 0 are orphans — registered with neither an integ nor an allow-list rationale.

How this is computed

For each fixture under tests/integration/<name>/, the script scans lib/*.ts and bin/*.ts for three signals against the resource types registered in src/provisioning/register-providers.ts:

  • literal — a 'AWS::Service::Type' string anywhere in the file (covers CfnResource usage and addPropertyOverride shapes).
  • l1 — a new <ns>.Cfn<TypeName>( call resolved via the aws-cdk-lib/aws-<module> import alias.
  • l2 — a new <ns>.<Construct>( call against the curated L2 -> L1 lookup table inside the script.

L2 detection is a hand-curated lower bound — a missed L2 wrapper produces a false-negative ("type appears uncovered"). When you add a fixture that uses an L2 the matrix does not see, extend CDK_L2_TO_L1 in scripts/build-integ-coverage-matrix.ts.

Orphan providers

None. Every registered SDK Provider has at least one integ fixture or an explicit // allow-no-integ: rationale.

Allow-listed providers (9)

Registered without an integ fixture, with an explicit // allow-no-integ: <rationale> comment on the register line in src/provisioning/register-providers.ts. The hook accepts these — but each is a deliberate verification gap and should be revisited if a real-AWS bug surfaces against the type.

Resource Type Rationale
AWS::Glue::Connection drift coverage only; Connection is a passive config object, no real-AWS lifecycle to exercise.
AWS::Glue::Crawler drift coverage only; Crawler has its own start/stop schedule lifecycle, deferred until a user-reported regression makes integ ROI clear.
AWS::Glue::Job drift coverage only; standalone Job integ deferred until a real-AWS issue surfaces (current usage at user sites is Studio-driven).
AWS::Glue::SecurityConfiguration immutable resource type; unit roundtrip + drift coverage suffice. Add integ if a future bug surfaces a real-AWS-only behavior.
AWS::Glue::Trigger drift coverage only; Trigger has DEACTIVATED-ACTIVATED state-machine semantics in update() that warrant a real-AWS integ — file follow-up.
AWS::Glue::Workflow drift-revert coverage only; no end-to-end Workflow integ yet (file follow-up if real-AWS Workflow lifecycle needs verification).
AWS::Kinesis::StreamConsumer immutable type (every property change replaces); unit roundtrip suffices. Add integ if a Lambda EFO consumer pattern bug surfaces.
AWS::RDS::DBProxy rds-aurora integ does not currently provision DBProxy + TargetGroup + Endpoint (cost + 5-15 min create/delete). Unit roundtrip covers the diff matrix; extend rds-aurora when a real-AWS Proxy lifecycle bug warrants the integ time.
AWS::RDS::DBProxyTargetGroup see DBProxy above — same rds-aurora-extend reasoning.

Covered providers (105)

Resource Type Integ Fixture(s)
AWS::ApiGateway::Account apigateway (literal)
AWS::ApiGateway::Authorizer api-cognito (l1)
apigateway (l1)
local-start-api (l2)
AWS::ApiGateway::Deployment api-cognito (literal)
apigateway (literal)
AWS::ApiGateway::Method api-cognito (literal)
apigateway (literal)
AWS::ApiGateway::Resource api-cognito (literal)
apigateway (literal)
AWS::ApiGateway::Stage api-cognito (literal)
apigateway (literal)
AWS::ApiGatewayV2::Api drift-revert (l1)
export (l2,literal)
local-start-api (l2)
local-start-api-container (l2)
local-start-api-websocket (l1,literal)
migrate-from-cfn (l2)
serverless-api (l1)
AWS::ApiGatewayV2::Authorizer serverless-api (l1)
AWS::ApiGatewayV2::Integration export (l2,literal)
local-start-api (l1,l2)
local-start-api-container (l2)
local-start-api-websocket (l1,literal)
migrate-from-cfn (l2)
serverless-api (l1)
AWS::ApiGatewayV2::Route export (l2)
local-start-api (l1,l2)
local-start-api-container (l2)
local-start-api-websocket (l1,literal)
migrate-from-cfn (l2)
serverless-api (l1)
AWS::ApiGatewayV2::Stage drift-revert (l1)
export (l2,literal)
local-start-api (l2)
local-start-api-container (l2)
local-start-api-websocket (l1,literal)
migrate-from-cfn (l2)
serverless-api (l1)
AWS::AppSync::ApiKey appsync (l1)
AWS::AppSync::DataSource appsync (l1)
AWS::AppSync::GraphQLApi appsync (l1)
AWS::AppSync::GraphQLSchema appsync (l1)
AWS::AppSync::Resolver appsync (l1)
AWS::AutoScaling::AutoScalingGroup drift-revert-vpc (l1,literal)
remove-protection (l2,literal)
AWS::BedrockAgentCore::Runtime bedrock-agentcore (literal)
AWS::CertificateManager::Certificate acm-certificate (l2)
AWS::CloudFormation::Stack export-nested-stack (literal)
import-nested-stack (literal)
nested-stack (literal)
nested-stack-deep (literal)
AWS::CloudFront::CloudFrontOriginAccessIdentity s3-cloudfront (l2)
AWS::CloudFront::Distribution bench-cdk-sample (l2)
cloudfront-function-url (l2)
local-start-cloudfront (l2)
s3-cloudfront (l2)
AWS::CloudTrail::Trail infra-security (l2,literal)
AWS::CloudWatch::Alarm cloudwatch (l2,literal)
composite-stack (l2,literal)
full-stack-demo (l2)
log-pipeline (l2)
scheduled-task (l2)
AWS::CodeBuild::Project ci-cd (l2,literal)
AWS::Cognito::UserPool api-cognito (l2)
cognito (l1,l2,literal)
remove-protection (l2,literal)
serverless-api (l2)
AWS::DocDB::DBCluster docdb-neptune (l1)
AWS::DocDB::DBInstance docdb-neptune (l1)
AWS::DocDB::DBSubnetGroup docdb-neptune (l1)
AWS::DynamoDB::GlobalTable dynamodb-globaltable (l2,literal)
lambda (l2,literal)
AWS::DynamoDB::Table appsync (l2)
bench-sdk (l2)
composite-stack (l2,literal)
data-pipeline (l2)
dynamodb-ondemand (l2)
dynamodb-streams (l2)
full-stack-demo (l2)
lambda (l2)
local-invoke-from-cfn-stack (l2)
local-run-task-from-state (l2)
multi-resource (l2)
multi-stack-deps (l2)
remove-protection (l2,literal)
serverless-api (l2)
AWS::EC2::Instance ec2-instance (l1)
remove-protection (l2,literal)
AWS::EC2::InternetGateway alb (l2)
alb-advanced (l2)
batch (l2)
bench-cdk-sample (l2)
cache-streaming (l2)
docdb-neptune (l2)
drift-revert-vpc (l2)
ec2-instance (l2)
ec2-vpc (l2)
ecs-fargate (l2)
efs-lambda (l2)
efs-standalone (l2)
infra-security (l2)
local-start-alb-from-state (l2,literal)
multi-stack-deps (l2)
rds-aurora (l2)
rds-dbinstance-backfill (l2)
remove-protection (l2)
vpc-lambda (l2)
vpc-lambda-cr-race (l2)
vpc-nat-gateway (l2)
AWS::EC2::NatGateway alb (l2)
alb-advanced (l2)
batch (l2)
bench-cdk-sample (l2)
cache-streaming (l2)
docdb-neptune (l2)
drift-revert-vpc (l2)
ec2-instance (l2)
ec2-vpc (l2)
ecs-fargate (l2)
efs-lambda (l2)
efs-standalone (l2)
infra-security (l2)
local-start-alb-from-state (l2)
multi-stack-deps (l2)
rds-aurora (l2)
rds-dbinstance-backfill (l2)
remove-protection (l2)
vpc-lambda (l2)
vpc-lambda-cr-race (l2)
vpc-nat-gateway (l2,literal)
AWS::EC2::NetworkAcl ec2-vpc (l2)
AWS::EC2::NetworkAclEntry ec2-vpc (literal)
AWS::EC2::Route alb (l2)
alb-advanced (l2)
batch (l2)
bench-cdk-sample (l2)
cache-streaming (l2)
docdb-neptune (l2)
drift-revert-vpc (l2)
ec2-instance (l2)
ec2-vpc (l2)
ecs-fargate (l2)
efs-lambda (l2)
efs-standalone (l2)
infra-security (l2)
local-start-alb-from-state (l2,literal)
multi-stack-deps (l2)
rds-aurora (l2)
rds-dbinstance-backfill (l2)
remove-protection (l2)
vpc-lambda (l2)
vpc-lambda-cr-race (l2)
vpc-nat-gateway (l2)
AWS::EC2::RouteTable alb (l2)
alb-advanced (l2)
batch (l2)
bench-cdk-sample (l2)
cache-streaming (l2)
docdb-neptune (l2)
drift-revert-vpc (l2)
ec2-instance (l2)
ec2-vpc (l2)
ecs-fargate (l2)
efs-lambda (l2)
efs-standalone (l2)
infra-security (l2)
local-start-alb-from-state (l2,literal)
multi-stack-deps (l2)
rds-aurora (l2)
rds-dbinstance-backfill (l2)
remove-protection (l2)
vpc-lambda (l2)
vpc-lambda-cr-race (l2)
vpc-nat-gateway (l2)
AWS::EC2::SecurityGroup alb (l2)
alb-advanced (l2)
batch (l2)
bench-cdk-sample (l2)
cache-streaming (l2)
docdb-neptune (l2)
drift-revert-vpc (l2)
ec2-instance (l2)
ec2-vpc (l2)
efs-standalone (literal)
local-start-alb-from-state (l2,literal)
multi-stack-deps (l2)
rds-aurora (l2)
rds-dbinstance-backfill (l2)
remove-protection (l2)
vpc-lambda (l2)
vpc-lambda-cr-race (l2)
AWS::EC2::SecurityGroupIngress alb (literal)
AWS::EC2::Subnet alb (l2)
alb-advanced (l2)
batch (l2)
bench-cdk-sample (l2)
cache-streaming (l2)
docdb-neptune (l2)
drift-revert-vpc (l2)
ec2-instance (l2)
ec2-vpc (l2)
ecs-fargate (l2)
efs-lambda (l2)
efs-standalone (l2)
infra-security (l2)
local-start-alb-from-state (l2,literal)
multi-stack-deps (l2)
rds-aurora (l2)
rds-dbinstance-backfill (l2)
remove-protection (l2)
vpc-lambda (l2)
vpc-lambda-cr-race (l2)
vpc-nat-gateway (l2)
AWS::EC2::SubnetNetworkAclAssociation ec2-vpc (literal)
AWS::EC2::SubnetRouteTableAssociation alb (l2)
alb-advanced (l2)
batch (l2)
bench-cdk-sample (l2)
cache-streaming (l2)
docdb-neptune (l2)
drift-revert-vpc (l2)
ec2-instance (l2)
ec2-vpc (l2)
ecs-fargate (l2)
efs-lambda (l2)
efs-standalone (l2)
infra-security (l2)
local-start-alb-from-state (l2,literal)
multi-stack-deps (l2)
rds-aurora (l2)
rds-dbinstance-backfill (l2)
remove-protection (l2)
vpc-lambda (l2)
vpc-lambda-cr-race (l2)
vpc-nat-gateway (l2)
AWS::EC2::VPC alb (l2)
alb-advanced (l2)
batch (l2)
bench-cdk-sample (l2)
cache-streaming (l2)
docdb-neptune (l2)
drift-revert-vpc (l2)
ec2-instance (l2)
ec2-vpc (l2)
ecs-fargate (l2)
efs-lambda (l2)
efs-standalone (l2,literal)
infra-security (l2)
local-start-alb-from-state (l2,literal)
multi-stack-deps (l2)
rds-aurora (l2)
rds-dbinstance-backfill (l2)
remove-protection (l2)
vpc-lambda (l2)
vpc-lambda-cr-race (l2)
vpc-nat-gateway (l2)
AWS::EC2::VPCGatewayAttachment alb (l2)
alb-advanced (l2)
batch (l2)
bench-cdk-sample (l2)
cache-streaming (l2)
docdb-neptune (l2)
drift-revert-vpc (l2)
ec2-instance (l2)
ec2-vpc (l2)
ecs-fargate (l2)
efs-lambda (l2)
efs-standalone (l2)
infra-security (l2)
local-start-alb-from-state (l2,literal)
multi-stack-deps (l2)
rds-aurora (l2)
rds-dbinstance-backfill (l2)
remove-protection (l2)
vpc-lambda (l2)
vpc-lambda-cr-race (l2)
vpc-nat-gateway (l2)
AWS::ECR::Repository ecr (l2,literal)
local-run-task-from-state (l2,literal)
migrate-from-cfn (l2,literal)
AWS::ECS::Cluster drift-revert (l1)
ecs-fargate (l2)
local-ecs-service-connect (l1)
local-start-alb (l1,literal)
local-start-alb-from-state (l2,literal)
local-start-service (l1)
local-start-service-watch-fast (l1)
AWS::ECS::Service ecs-fargate (l2,literal)
local-ecs-service-connect (l1,literal)
local-start-alb (l1,literal)
local-start-alb-from-state (l2,literal)
local-start-service (l1,literal)
local-start-service-watch-fast (l1,literal)
AWS::ECS::TaskDefinition ecs-fargate (l2)
local-ecs-service-connect (l1)
local-run-task (l2)
local-run-task-awsvpc (l2,literal)
local-run-task-from-state (l1,l2,literal)
local-run-task-multi-container (l2)
local-start-alb (l1,literal)
local-start-alb-from-state (l2,literal)
local-start-service (l1)
local-start-service-watch-fast (l2)
AWS::EFS::AccessPoint ecs-fargate (l2)
efs-lambda (literal)
efs-standalone (literal)
AWS::EFS::FileSystem drift-revert-vpc (l1,literal)
ecs-fargate (l2)
efs-lambda (l2,literal)
efs-standalone (l2,literal)
AWS::EFS::MountTarget drift-revert-vpc (l1,literal)
ecs-fargate (l2)
efs-lambda (l2,literal)
efs-standalone (l2,literal)
AWS::ElastiCache::CacheCluster cache-streaming (l1,l2)
AWS::ElastiCache::SubnetGroup cache-streaming (l1,l2)
AWS::ElasticLoadBalancingV2::Listener alb (literal)
local-start-alb (l1,literal)
local-start-alb-from-state (literal)
AWS::ElasticLoadBalancingV2::LoadBalancer alb (l2)
alb-advanced (l2)
drift-revert-vpc (l2,literal)
local-start-alb (l1,literal)
local-start-alb-from-state (l2,literal)
remove-protection (l2,literal)
AWS::ElasticLoadBalancingV2::TargetGroup alb (literal)
local-start-alb (l1,literal)
local-start-alb-from-state (literal)
AWS::Events::EventBus eventbridge (l2)
AWS::Events::Rule eventbridge (l2)
scheduled-task (l2)
AWS::Glue::Database data-analytics (l1,literal)
drift-revert (l1)
AWS::Glue::Table data-analytics (l1,literal)
AWS::IAM::Group infra-security (l2)
AWS::IAM::InstanceProfile remove-protection (literal)
AWS::IAM::ManagedPolicy iam-managed-policy (literal)
AWS::IAM::Policy export (l2,literal)
migrate-from-cfn (literal)
AWS::IAM::Role appsync (l2)
batch (l2)
cc-api-fallback (l2)
cc-api-fallback-transitions (l2)
composite-stack (l2,literal)
diff-intrinsic-target-change (l2)
drift-revert (l2)
eventbridge (l2)
export (l2,literal)
iam-managed-policy (l2)
infra-security (l2)
intrinsic-functions (l2)
local-invoke-dotnet (l2)
local-invoke-java (l2)
local-invoke-provided (l2)
local-invoke-ruby (l2)
local-run-task-from-state (l2)
local-start-alb-from-state (l2,literal)
local-start-api-websocket (literal)
log-pipeline (l2)
macro-expansion (literal)
migrate-from-cfn (l2)
multi-resource (l2)
multi-stack-deps (l2)
nested-stack (l2)
rds-aurora (l2)
rds-dbinstance-backfill (l2)
recreate-mixed-direction (l2)
recreate-via-cc-api (l2)
recreate-via-sdk-provider (l2)
vpc-lambda-cr-race (l2)
AWS::IAM::User infra-security (l2)
AWS::IAM::UserToGroupAddition infra-security (literal)
AWS::KMS::Alias composite-stack (literal)
infra-security (literal)
kms-encryption (literal)
AWS::KMS::Key composite-stack (literal)
drift-revert (l2)
dynamodb-streams (l2)
infra-security (l2)
kms-encryption (l2,literal)
AWS::Kinesis::Stream cache-streaming (l2)
dynamodb-ondemand (l2)
log-pipeline (l2)
AWS::KinesisFirehose::DeliveryStream log-pipeline (l1,literal)
AWS::Lambda::EventSourceMapping dynamodb-streams (literal)
AWS::Lambda::Function api-cognito (l2)
apigateway (l2)
bench-cdk-sample (l2)
cache-streaming (l2)
cc-api-fallback (l1)
cc-api-fallback-transitions (l1,literal)
cloudfront-function-url (l2)
composite-stack (l2,literal)
custom-resource-provider (l2)
data-pipeline (l2)
dynamodb-streams (l2)
ecr (l2)
efs-lambda (l2)
event-driven (l2)
eventbridge (l2)
export (l2,literal)
full-stack-demo (l2)
lambda (l2)
lambda-versioning (l2,literal)
local-invoke (l2)
local-invoke-buildkit (l2)
local-invoke-container (l2)
local-invoke-dotnet (l1,l2)
local-invoke-from-cfn-stack (l2)
local-invoke-from-cfn-stack-multi-stack (l2)
local-invoke-from-state (l2)
local-invoke-java (l1,l2)
local-invoke-layers (l2)
local-invoke-provided (l1,l2)
local-invoke-python (l2)
local-invoke-ruby (l1,l2)
local-start-api (l2)
local-start-api-container (l2)
local-start-api-rest-v1-non-proxy (l2)
local-start-api-websocket (l2,literal)
log-pipeline (l2)
macro-expansion (literal)
microservices (l2)
migrate-from-cfn (l2)
monitoring (l2)
multi-resource (l2)
multi-stack-deps (l2)
orphan-resource (l2,literal)
recreate-mixed-direction (l1)
recreate-via-cc-api (l1)
recreate-via-sdk-provider (l1)
scheduled-task (l2)
serverless-api (l2)
sns-sqs-event (l2)
stepfunctions (l2)
vpc-lambda (l2)
vpc-lambda-cr-race (l2)
AWS::Lambda::LayerVersion lambda (l2)
local-invoke-layers (l2)
AWS::Lambda::Permission cloudfront-function-url (l1,literal)
export (literal)
migrate-from-cfn (literal)
serverless-api (l1)
AWS::Lambda::Url composite-stack (literal)
AWS::Logs::LogGroup cloudwatch (l2)
composite-stack (l2,literal)
drift-revert (l1)
ecs-fargate (l2)
full-stack-demo (l2)
local-start-alb-from-state (l2,literal)
log-pipeline (l2)
monitoring (l2)
remove-protection (l1,literal)
scheduled-task (l2)
AWS::Neptune::DBCluster docdb-neptune (l1)
AWS::Neptune::DBInstance docdb-neptune (l1)
AWS::Neptune::DBSubnetGroup docdb-neptune (l1)
AWS::RDS::DBCluster rds-aurora (l1,l2)
AWS::RDS::DBInstance rds-aurora (l2)
rds-dbinstance-backfill (l1)
AWS::RDS::DBProxyEndpoint rds-aurora (literal)
AWS::RDS::DBSubnetGroup rds-aurora (l2)
rds-dbinstance-backfill (l2)
AWS::Route53::HostedZone route53 (l2)
AWS::Route53::RecordSet route53 (l1,l2,literal)
AWS::S3::Bucket basic (l2)
bench-sdk (l2)
ci-cd (l2,literal)
composite-stack (l2,literal)
conditions (l1,l2)
context-test (l2)
cross-stack-references (l2)
data-analytics (l2,literal)
diff-intrinsic-target-change (l2)
drift-revert (l2)
event-driven (l2)
export (l2,literal)
full-stack-demo (l2)
import-value-strong-ref (l2)
infra-security (l2)
intrinsic-functions (l2)
kms-encryption (l2,literal)
local-invoke-agentcore-from-state (l2)
local-invoke-from-state (l2)
local-start-cloudfront (l2)
log-pipeline (l2)
migrate-from-cfn (l2)
multi-resource (l2)
multi-stack-deps (l2)
nested-stack (l2)
orphan-resource (l2,literal)
recreate-via-cc-api (l1)
s3-cloudfront (l2)
state-destroy (l2)
AWS::S3::BucketPolicy migrate-from-cfn (literal)
AWS::S3Express::DirectoryBucket s3-directory-bucket (l1)
AWS::S3Tables::Namespace s3-tables (l1)
AWS::S3Tables::Table s3-tables (l1,literal)
AWS::S3Tables::TableBucket s3-tables (l1,literal)
AWS::S3Vectors::VectorBucket s3-vectors (l1)
AWS::SNS::Subscription composite-stack (literal)
sns-sqs-event (literal)
AWS::SNS::Topic bench-sdk (l2)
cloudwatch (l2)
composite-stack (l2,literal)
drift-revert (l2)
event-driven (l2)
export (l2,literal)
full-stack-demo (l2)
microservices (l2)
migrate-from-cfn (l2)
monitoring (l2)
scheduled-task (l2)
serverless-api (l2)
sns-sqs-event (l2)
AWS::SNS::TopicPolicy migrate-from-cfn (literal)
sns-sqs-event (l2)
AWS::SQS::Queue basic (l1)
bench-cdk-sample (l2)
bench-sdk (l2)
composite-stack (l2,literal)
data-pipeline (l2)
event-driven (l2)
eventbridge (l2)
full-stack-demo (l2)
microservices (l2)
migrate-from-cfn (l2)
multi-resource (l2)
sns-sqs-event (l2)
AWS::SQS::QueuePolicy migrate-from-cfn (literal)
AWS::SSM::Parameter bench-sdk (l2)
composite-stack (l2,literal)
context-test (l2)
cross-region-state-bucket (l1)
cross-stack-references (l1)
deletion-policy-retain (l2,literal)
export-nested-stack (l2,literal)
import-nested-stack (l2,literal)
import-value-strong-ref (l2)
infra-security (l2)
legacy-bucket-name-fallback (l2)
legacy-state-migration (l2)
local-invoke-from-cfn-stack-multi-stack (l2)
microservices (l2)
multi-region-same-stack (l2)
nested-stack (l2)
nested-stack-deep (l2)
schema-v5-to-v6-migration (l2)
schema-v6-to-v7-migration (l2)
schema-v7-to-v8-migration (l1,l2)
state-info-command (l2)
vpc-lookup (l2)
AWS::SecretsManager::Secret composite-stack (l2,literal)
event-driven (l2)
full-stack-demo (l2)
local-run-task-from-state (l2,literal)
AWS::ServiceDiscovery::PrivateDnsNamespace drift-revert-vpc (l2,literal)
local-ecs-service-connect (literal)
AWS::ServiceDiscovery::Service local-ecs-service-connect (literal)
AWS::StepFunctions::StateMachine stepfunctions (l2)
AWS::WAFv2::WebACL wafv2 (l1,literal)

Resource types referenced in integs without an SDK Provider (25)

These resource types appear in integ fixtures but no SDK Provider is registered for them — they fall through to the Cloud Control API fallback. Listed here for visibility; not actionable on its own.

  • AWS::ApiGateway::RestApi
  • AWS::ApplicationAutoScaling::ScalableTarget
  • AWS::Athena::NamedQuery
  • AWS::Athena::WorkGroup
  • AWS::CloudFront::OriginAccessControl
  • AWS::CodePipeline::Pipeline
  • AWS::Cognito::UserPoolDomain
  • AWS::EC2::EIP
  • AWS::EC2::SecurityGroupEgress
  • AWS::ELBv2::LoadBalancer
  • AWS::ElasticLoadBalancingV2::ListenerRule
  • AWS::KMS::Grant
  • AWS::Lambda::Alias
  • AWS::Lambda::Version
  • AWS::Logs::LogStream
  • AWS::Logs::MetricFilter
  • AWS::Logs::SubscriptionFilter
  • AWS::Pipes::Pipe
  • AWS::Route53::CidrCollection
  • AWS::Route53::HealthCheck
  • AWS::SSM::Document
  • AWS::Scheduler::Schedule
  • AWS::Serverless::Function
  • AWS::WAFv2::IPSet
  • AWS::WAFv2::WebACLAssociation