⭐ Add 15 new typed resources and ~50 fields across 23 AWS services

New typed resources:
- aws.fsx.volume: FSx ONTAP and OpenZFS volumes with flattened config fields
- aws.ec2.transitgateway: Transit gateways with flattened Options fields
- aws.neptune.snapshot: Neptune DB cluster snapshots (per-cluster)
- aws.redshift.snapshot: Redshift cluster snapshots (per-cluster)
- aws.backup.plan: Backup plans with lazy-loaded rules
- aws.backup.plan.rule: Backup plan rules with schedule, lifecycle, copy actions
- aws.backup.plan.rule.copyAction: Cross-region/account backup copies
- aws.backup.plan.advancedBackupSetting: Resource-specific backup options
- aws.backup.lifecycle: Typed lifecycle settings (cold storage, deletion)
- aws.elb.listener: ALB/NLB listeners with protocol, port, SSL policy
- aws.elb.loadbalancer.attribute: Typed LB attributes (deletion protection, access logs, etc.)
- aws.elb.targetgroup.attributes: Typed TG attributes (stickiness, algorithm, etc.)
- aws.vpc.routetable.route: Typed VPC route table entries
- aws.s3.bucket.encryptionRule: Typed S3 encryption rules
- aws.s3.bucket.replicationRule: Typed S3 replication rules

New fields on existing resources:
- EC2: bootMode, sourceDestCheck, ipv6Address on instances; description on images
- ECS: enableExecuteCommand, schedulingStrategy, platformFamily, cpu/memory on tasks
- ELB: ipAddressType, listeners(), instances(), typed attributes on load balancers
- RDS: licenseModel, maxAllocatedStorage, dedicatedLogVolume, storageThroughput,
  engineMode, earliestRestorableTime on clusters
- IAM: path on users, roles, and groups
- S3: typed encryptionRules() and replicationRules() on buckets
- Lambda: state, codeSize, stateReason, lastUpdateStatus
- CloudWatch: actionsEnabled on alarms; dataProtectionStatus, deletionProtection on log groups
- CodeBuild: createdAt, modifiedAt, privilegedMode, encryptionKey, timeouts
- ElastiCache: preferredMaintenanceWindow; subnets on serverless caches
- SageMaker: rootAccess, minimumInstanceMetadataServiceVersion, subnet
- SNS: kmsMasterKey on topics
- SQS: deduplicationScope, fifoThroughputLimit on queues
- SSM: agentVersion, lastPingedAt, computerName on instances
- Redshift: clusterAvailabilityStatus, multiAZ, ipAddressType, snapshots()
- ACM: renewalEligible, signatureAlgorithm on certificates
- CloudFront: comment on distributions
- DynamoDB: latestStreamLabel on tables
- ECR: lifecyclePolicy, scanningFrequency on repositories
- Neptune: snapshots() on clusters
- FSx: volumes() on service
- Backup: plans() on service

Signed-off-by: Tim Smith <tsmith84@gmail.com>

Author: Mondoo

.github/actions/spelling/expect.txt

@@ -1,6 +1,7 @@
 aad
 ACCOUNTADMIN
 advancedthreatprotection
+alpn
 antispam
 appslot
 atlassian
@@ -15,6 +16,7 @@ backupconfiguration
 backupsetting
 backupshorttermretentionpolicy
 bigquery
+blackhole
 bytematchstatement
 cavium
 cdn
@@ -41,7 +43,9 @@ dfw
 dlp
 dlq
 dlv
+dsse
 eas
+Ecmp
 eip
 ekm
 ekus
@@ -51,6 +55,8 @@ failback
 fargate
 filesz
 firefox
+FLEXGROUP
+FLEXVOL
 frontmatter
 ftps
 fumadocs
@@ -119,11 +125,14 @@ nullstring
 oidc
 OIDs
 ondemand
+ontap
 opcplc
 opensearch
 openssl
+openzfs
 orstatement
 ospf
+parallelquery
 paravirtual
 PAYG
 Pids
@@ -172,8 +181,10 @@ timestream
 toplevel
 tpu
 serviceconnection
+transitgateway
 Vnet
 udid
+uefi
 Uocm
 usb
 Utc
@@ -191,4 +202,5 @@ webide
 WEBSERVERS
 wil
 xssmatchstatement
+ZSTD
 zrt

providers/aws/go.mod

@@ -6,8 +6,8 @@ go 1.25.1
 
 require (
 	github.com/aws/aws-sdk-go-v2 v1.41.1
-	github.com/aws/aws-sdk-go-v2/config v1.32.7
-	github.com/aws/aws-sdk-go-v2/credentials v1.19.7
+	github.com/aws/aws-sdk-go-v2/config v1.32.9
+	github.com/aws/aws-sdk-go-v2/credentials v1.19.9
 	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.17
 	github.com/aws/aws-sdk-go-v2/service/accessanalyzer v1.45.8
 	github.com/aws/aws-sdk-go-v2/service/account v1.30.1
@@ -16,22 +16,22 @@ require (
 	github.com/aws/aws-sdk-go-v2/service/applicationautoscaling v1.41.10
 	github.com/aws/aws-sdk-go-v2/service/autoscaling v1.64.0
 	github.com/aws/aws-sdk-go-v2/service/backup v1.54.6
-	github.com/aws/aws-sdk-go-v2/service/cloudfront v1.59.0
+	github.com/aws/aws-sdk-go-v2/service/cloudfront v1.60.0
 	github.com/aws/aws-sdk-go-v2/service/cloudtrail v1.55.5
-	github.com/aws/aws-sdk-go-v2/service/cloudwatch v1.53.1
+	github.com/aws/aws-sdk-go-v2/service/cloudwatch v1.54.0
 	github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.63.1
 	github.com/aws/aws-sdk-go-v2/service/codebuild v1.68.9
 	github.com/aws/aws-sdk-go-v2/service/codedeploy v1.35.9
 	github.com/aws/aws-sdk-go-v2/service/configservice v1.61.0
 	github.com/aws/aws-sdk-go-v2/service/databasemigrationservice v1.61.5
 	github.com/aws/aws-sdk-go-v2/service/drs v1.36.9
-	github.com/aws/aws-sdk-go-v2/service/dynamodb v1.54.0
-	github.com/aws/aws-sdk-go-v2/service/ec2 v1.289.0
-	github.com/aws/aws-sdk-go-v2/service/ecr v1.55.1
+	github.com/aws/aws-sdk-go-v2/service/dynamodb v1.55.0
+	github.com/aws/aws-sdk-go-v2/service/ec2 v1.290.0
+	github.com/aws/aws-sdk-go-v2/service/ecr v1.55.2
 	github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.38.9
-	github.com/aws/aws-sdk-go-v2/service/ecs v1.71.0
+	github.com/aws/aws-sdk-go-v2/service/ecs v1.72.0
 	github.com/aws/aws-sdk-go-v2/service/efs v1.41.10
-	github.com/aws/aws-sdk-go-v2/service/eks v1.77.0
+	github.com/aws/aws-sdk-go-v2/service/eks v1.80.0
 	github.com/aws/aws-sdk-go-v2/service/elasticache v1.51.9
 	github.com/aws/aws-sdk-go-v2/service/elasticloadbalancing v1.33.19
 	github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2 v1.54.6
@@ -40,23 +40,23 @@ require (
 	github.com/aws/aws-sdk-go-v2/service/fsx v1.65.3
 	github.com/aws/aws-sdk-go-v2/service/guardduty v1.73.0
 	github.com/aws/aws-sdk-go-v2/service/iam v1.53.2
-	github.com/aws/aws-sdk-go-v2/service/inspector2 v1.46.2
-	github.com/aws/aws-sdk-go-v2/service/kms v1.49.5
-	github.com/aws/aws-sdk-go-v2/service/lambda v1.87.1
+	github.com/aws/aws-sdk-go-v2/service/inspector2 v1.47.0
+	github.com/aws/aws-sdk-go-v2/service/kms v1.50.0
+	github.com/aws/aws-sdk-go-v2/service/lambda v1.88.0
 	github.com/aws/aws-sdk-go-v2/service/macie2 v1.50.9
 	github.com/aws/aws-sdk-go-v2/service/neptune v1.43.9
 	github.com/aws/aws-sdk-go-v2/service/opensearch v1.57.1
-	github.com/aws/aws-sdk-go-v2/service/organizations v1.50.1
-	github.com/aws/aws-sdk-go-v2/service/rds v1.114.0
-	github.com/aws/aws-sdk-go-v2/service/redshift v1.62.0
-	github.com/aws/aws-sdk-go-v2/service/s3 v1.95.1
-	github.com/aws/aws-sdk-go-v2/service/s3control v1.67.3
-	github.com/aws/aws-sdk-go-v2/service/sagemaker v1.230.1
+	github.com/aws/aws-sdk-go-v2/service/organizations v1.50.2
+	github.com/aws/aws-sdk-go-v2/service/rds v1.116.0
+	github.com/aws/aws-sdk-go-v2/service/redshift v1.62.1
+	github.com/aws/aws-sdk-go-v2/service/s3 v1.96.0
+	github.com/aws/aws-sdk-go-v2/service/s3control v1.68.0
+	github.com/aws/aws-sdk-go-v2/service/sagemaker v1.233.0
 	github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.41.1
-	github.com/aws/aws-sdk-go-v2/service/securityhub v1.67.3
+	github.com/aws/aws-sdk-go-v2/service/securityhub v1.67.4
 	github.com/aws/aws-sdk-go-v2/service/sns v1.39.11
 	github.com/aws/aws-sdk-go-v2/service/sqs v1.42.21
-	github.com/aws/aws-sdk-go-v2/service/ssm v1.67.8
+	github.com/aws/aws-sdk-go-v2/service/ssm v1.68.0
 	github.com/aws/aws-sdk-go-v2/service/sts v1.41.6
 	github.com/aws/aws-sdk-go-v2/service/timestreaminfluxdb v1.18.1
 	github.com/aws/aws-sdk-go-v2/service/timestreamwrite v1.35.16
@@ -117,8 +117,8 @@ require (
 	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.17 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.17 // indirect
 	github.com/aws/aws-sdk-go-v2/service/signin v1.0.5 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sso v1.30.9 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.13 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sso v1.30.10 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.14 // indirect
 	github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.11.0 // indirect
 	github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect