Version 166.0.0

Issued

cfn.fyi compares each version of the AWS CloudFormation resource specification with the version before it. See new resource types and changed properties as AWS releases them.

  • added
  • modified
  • removed

01Added resource types5

addedAWS::AppIntegrations::Applicationdocs ↗#Link to AWS::AppIntegrations::Application
Type: AWS::AppIntegrations::ApplicationProperties:  ApplicationSourceConfig:    ExternalUrlConfig:      ApprovedOrigins:        - String      AccessUrl: String  Description: String  Namespace: String  Tags:    - Value: String      Key: String  Name: StringFn::GetAtt:  ApplicationArn: String  Id: String
addedAWS::CodeArtifact::PackageGroupdocs ↗#Link to AWS::CodeArtifact::PackageGroup
Type: AWS::CodeArtifact::PackageGroupProperties:  Pattern: String  Description: String  DomainName: String  OriginConfiguration:    Restrictions:      ExternalUpstream:        Repositories:          - String        RestrictionMode: String      Publish:  # RestrictionType: see above      InternalUpstream:  # RestrictionType: see above  ContactInfo: String  DomainOwner: String  Tags:    - Value: String      Key: StringFn::GetAtt:  Arn: String
addedAWS::SecurityHub::DelegatedAdmindocs ↗#Link to AWS::SecurityHub::DelegatedAdmin
Type: AWS::SecurityHub::DelegatedAdminProperties:  AdminAccountId: StringFn::GetAtt:  Status: String  DelegatedAdminIdentifier: String
addedAWS::SecurityHub::Insightdocs ↗#Link to AWS::SecurityHub::Insight
Type: AWS::SecurityHub::InsightProperties:  Filters:    ResourceAwsEc2InstanceIamInstanceProfileArn:      - Comparison: String        Value: String    SourceUrl:  # StringFilter: see above    ProcessName:  # StringFilter: see above    FindingProviderFieldsConfidence:      - Gte: Double        Eq: Double        Lte: Double    FirstObservedAt:      - DateRange:          Value: Double          Unit: String        Start: String        End: String    CreatedAt:  # DateFilter: see above    MalwareState:  # StringFilter: see above    UserDefinedFields:      - Comparison: String        Value: String        Key: String    NetworkSourcePort:  # NumberFilter: see above    ResourceAwsIamUserUserName:  # StringFilter: see above    NetworkSourceDomain:  # StringFilter: see above    ResourcePartition:  # StringFilter: see above    FindingProviderFieldsRelatedFindingsId:  # StringFilter: see above    NetworkDirection:  # StringFilter: see above    Criticality:  # NumberFilter: see above    ResourceApplicationArn:  # StringFilter: see above    ComplianceSecurityControlParametersValue:  # StringFilter: see above    SeverityLabel:  # StringFilter: see above    RelatedFindingsProductArn:  # StringFilter: see above    ResourceAwsIamAccessKeyPrincipalName:  # StringFilter: see above    ThreatIntelIndicatorCategory:  # StringFilter: see above    ComplianceStatus:  # StringFilter: see above    ThreatIntelIndicatorValue:  # StringFilter: see above    ResourceContainerImageName:  # StringFilter: see above    MalwareType:  # StringFilter: see above    ThreatIntelIndicatorSource:  # StringFilter: see above    ResourceAwsIamAccessKeyCreatedAt:  # DateFilter: see above    ResourceAwsEc2InstanceType:  # StringFilter: see above    RecommendationText:  # StringFilter: see above    AwsAccountName:  # StringFilter: see above    FindingProviderFieldsRelatedFindingsProductArn:  # StringFilter: see above    AwsAccountId:  # StringFilter: see above    Id:  # StringFilter: see above    ProcessParentPid:  # NumberFilter: see above    ResourceApplicationName:  # StringFilter: see above    ProductArn:  # StringFilter: see above    ResourceAwsEc2InstanceIpV6Addresses:      - Cidr: String    MalwareName:  # StringFilter: see above    Description:  # StringFilter: see above    ResourceContainerLaunchedAt:  # DateFilter: see above    ProcessPid:  # NumberFilter: see above    NoteText:  # StringFilter: see above    ResourceAwsEc2InstanceKeyName:  # StringFilter: see above    FindingProviderFieldsTypes:  # StringFilter: see above    ComplianceSecurityControlId:  # StringFilter: see above    NoteUpdatedBy:  # StringFilter: see above    VerificationState:  # StringFilter: see above    GeneratorId:  # StringFilter: see above    ResourceType:  # StringFilter: see above    NetworkProtocol:  # StringFilter: see above    UpdatedAt:  # DateFilter: see above    ProcessPath:  # StringFilter: see above    WorkflowStatus:  # StringFilter: see above    ResourceContainerName:  # StringFilter: see above    Type:  # StringFilter: see above    ResourceId:  # StringFilter: see above    NetworkDestinationDomain:  # StringFilter: see above    ProductName:  # StringFilter: see above    ResourceTags:  # MapFilter: see above    ResourceAwsEc2InstanceVpcId:  # StringFilter: see above    ResourceAwsS3BucketOwnerName:  # StringFilter: see above    LastObservedAt:  # DateFilter: see above    ComplianceSecurityControlParametersName:  # StringFilter: see above    NetworkSourceIpV4:  # IpFilter: see above    ProcessLaunchedAt:  # DateFilter: see above    ResourceAwsEc2InstanceLaunchedAt:  # DateFilter: see above    NoteUpdatedAt:  # DateFilter: see above    ThreatIntelIndicatorType:  # StringFilter: see above    CompanyName:  # StringFilter: see above    ResourceRegion:  # StringFilter: see above    ResourceAwsIamAccessKeyStatus:  # StringFilter: see above    NetworkSourceIpV6:  # IpFilter: see above    Confidence:  # NumberFilter: see above    ProductFields:  # MapFilter: see above    ThreatIntelIndicatorLastObservedAt:  # DateFilter: see above    ResourceAwsEc2InstanceSubnetId:  # StringFilter: see above    ComplianceAssociatedStandardsId:  # StringFilter: see above    ResourceAwsEc2InstanceImageId:  # StringFilter: see above    ResourceAwsEc2InstanceIpV4Addresses:  # IpFilter: see above    RelatedFindingsId:  # StringFilter: see above    ProcessTerminatedAt:  # DateFilter: see above    ResourceContainerImageId:  # StringFilter: see above    NetworkDestinationIpV4:  # IpFilter: see above    Region:  # StringFilter: see above    NetworkDestinationIpV6:  # IpFilter: see above    VulnerabilitiesExploitAvailable:  # StringFilter: see above    FindingProviderFieldsCriticality:  # NumberFilter: see above    NetworkDestinationPort:  # NumberFilter: see above    ResourceDetailsOther:  # MapFilter: see above    FindingProviderFieldsSeverityLabel:  # StringFilter: see above    ThreatIntelIndicatorSourceUrl:  # StringFilter: see above    FindingProviderFieldsSeverityOriginal:  # StringFilter: see above    MalwarePath:  # StringFilter: see above    Sample:      - Value: Boolean    RecordState:  # StringFilter: see above    Title:  # StringFilter: see above    WorkflowState:  # StringFilter: see above    NetworkSourceMac:  # StringFilter: see above    ResourceAwsS3BucketOwnerId:  # StringFilter: see above    VulnerabilitiesFixAvailable:  # StringFilter: see above  GroupByAttribute: String  Name: StringFn::GetAtt:  InsightArn: String
addedAWS::SecurityHub::ProductSubscriptiondocs ↗#Link to AWS::SecurityHub::ProductSubscription
Type: AWS::SecurityHub::ProductSubscriptionProperties:  ProductArn: StringFn::GetAtt:  ProductSubscriptionArn: String

02Modified resource types12

modifiedAWS::Connect::SecurityProfilehistorydocs ↗#Link to AWS::Connect::SecurityProfile
Type: AWS::Connect::SecurityProfileProperties:added:   AllowedAccessControlHierarchyGroupId: Stringadded:   Applications:added:     - ApplicationPermissions:added:         - Stringadded:       Namespace: Stringadded:   HierarchyRestrictedResources:added:     - StringFn::GetAtt:added:   LastModifiedRegion: Stringadded:   LastModifiedTime: Double
modifiedAWS::DataSync::Taskhistorydocs ↗#Link to AWS::DataSync::Task
Type: AWS::DataSync::TaskProperties:added:   ManifestConfig:added:     Action: Stringadded:     Format: Stringadded:     Source:added:       S3:added:         S3BucketArn: Stringadded:         BucketAccessRoleArn: Stringadded:         ManifestObjectVersionId: Stringadded:         ManifestObjectPath: String  TaskReportConfig:    Destination:modified:       S3: S3 → TaskReportConfigDestinationS3
modifiedAWS::DynamoDB::GlobalTablehistorydocs ↗#Link to AWS::DynamoDB::GlobalTable
Type: AWS::DynamoDB::GlobalTableProperties:  Replicas:added:     - ReplicaStreamSpecification:added:         ResourcePolicy:added:           PolicyDocument: Jsonadded:       ResourcePolicy:  # ResourcePolicy: see above
modifiedAWS::DynamoDB::Tablehistorydocs ↗#Link to AWS::DynamoDB::Table
Type: AWS::DynamoDB::TableProperties:added:   ResourcePolicy:added:     PolicyDocument: Json  StreamSpecification:added:     ResourcePolicy:  # ResourcePolicy: see above
modifiedAWS::EC2::Instancehistorydocs ↗#Link to AWS::EC2::Instance
Type: AWS::EC2::InstanceProperties:  BlockDeviceMappings:    - # Update requires: No interruption → Some interruptionsmodified:       DeviceName: String      # Update requires: No interruption → Some interruptionsmodified:       Ebs:        # Update requires: No interruption → Some interruptionsmodified:         DeleteOnTermination: Boolean        # Update requires: No interruption → Some interruptionsmodified:         Encrypted: Boolean        # Update requires: No interruption → Some interruptionsmodified:         Iops: Integer        # Update requires: Replacement → Some interruptionsmodified:         KmsKeyId: String        # Update requires: No interruption → Some interruptionsmodified:         SnapshotId: String        # Update requires: No interruption → Some interruptionsmodified:         VolumeSize: Integer        # Update requires: No interruption → Some interruptionsmodified:         VolumeType: String      # Update requires: No interruption → Some interruptionsmodified:       NoDevice: NoDevice → Json      # Update requires: No interruption → Some interruptionsmodified:       VirtualName: String  CpuOptions:    # Update requires: No interruption → Replacementmodified:     CoreCount: Integer    # Update requires: No interruption → Replacementmodified:     ThreadsPerCore: Integer  # Duplicates allowed: No → Yesmodified:   ElasticGpuSpecifications:    - # Update requires: No interruption → Replacementmodified:       Type: String  # Duplicates allowed: No → Yesmodified:   ElasticInferenceAccelerators:    - # Update requires: No interruption → Replacementmodified:       Count: Integer      # Update requires: No interruption → Replacementmodified:       Type: String  EnclaveOptions:    # Update requires: No interruption → Replacementmodified:     Enabled: Boolean  HibernationOptions:    # Update requires: No interruption → Replacementmodified:     Configured: Boolean  Ipv6Addresses:    - # Update requires: No interruption → Replacementmodified:       Ipv6Address: String  LaunchTemplate:    # Update requires: No interruption → Replacementmodified:     LaunchTemplateId: String    # Update requires: No interruption → Replacementmodified:     LaunchTemplateName: String    # Update requires: No interruption → Replacementmodified:     Version: String  # Duplicates allowed: No → Yesmodified:   LicenseSpecifications:    - # Update requires: No interruption → Replacementmodified:       LicenseConfigurationArn: String  NetworkInterfaces:    - # Update requires: No interruption → Replacementmodified:       AssociateCarrierIpAddress: Boolean      # Update requires: No interruption → Replacementmodified:       AssociatePublicIpAddress: Boolean      # Update requires: No interruption → Replacementmodified:       DeleteOnTermination: Boolean      # Update requires: No interruption → Replacementmodified:       Description: String      # Update requires: No interruption → Replacementmodified:       DeviceIndex: String      # Update requires: No interruption → Replacementmodified:       GroupSet:        - String      # Update requires: No interruption → Replacementmodified:       Ipv6AddressCount: Integer      # Update requires: No interruption → Replacementmodified:       Ipv6Addresses:  # InstanceIpv6Address: see above      # Update requires: No interruption → Replacementmodified:       NetworkInterfaceId: String      # Update requires: No interruption → Replacementmodified:       PrivateIpAddress: String      # Update requires: No interruption → Replacementmodified:       PrivateIpAddresses:        - # Update requires: No interruption → Replacementmodified:           Primary: Boolean          # Update requires: No interruption → Replacementmodified:           PrivateIpAddress: String      # Update requires: No interruption → Replacementmodified:       SecondaryPrivateIpAddressCount: Integer      # Update requires: No interruption → Replacementmodified:       SubnetId: String  PrivateDnsNameOptions:    # Update requires: No interruption → Some interruptionsmodified:     EnableResourceNameDnsAAAARecord: Boolean    # Update requires: No interruption → Some interruptionsmodified:     EnableResourceNameDnsARecord: Boolean    # Update requires: No interruption → Some interruptionsmodified:     HostnameType: StringFn::GetAtt:added:   InstanceId: Stringadded:   VpcId: String
modifiedAWS::EC2::NetworkInterfacehistorydocs ↗#Link to AWS::EC2::NetworkInterface
Type: AWS::EC2::NetworkInterfaceFn::GetAtt:added:   VpcId: String
modifiedAWS::FIS::ExperimentTemplatehistorydocs ↗#Link to AWS::FIS::ExperimentTemplate
Type: AWS::FIS::ExperimentTemplateProperties:  ExperimentOptions:    # Update requires: No interruption → Replacementmodified:     AccountTargeting: String
modifiedAWS::Glue::Crawlerhistorydocs ↗#Link to AWS::Glue::Crawler
Type: AWS::Glue::CrawlerProperties:added:   LakeFormationConfiguration:added:     AccountId: Stringadded:     UseLakeFormationCredentials: Boolean
modifiedAWS::IoTSiteWise::Gatewayhistorydocs ↗#Link to AWS::IoTSiteWise::Gateway
Type: AWS::IoTSiteWise::GatewayProperties:  GatewayPlatform:added:     SiemensIE:added:       IotCoreThingName: String
modifiedAWS::KafkaConnect::Connectorhistorydocs ↗#Link to AWS::KafkaConnect::Connector
Type: AWS::KafkaConnect::ConnectorProperties:added:   Tags:added:     - Value: Stringadded:       Key: String
modifiedAWS::Kendra::Faqhistorydocs ↗#Link to AWS::Kendra::Faq
Type: AWS::Kendra::FaqProperties:added:   LanguageCode: String
modifiedAWS::ResilienceHub::ResiliencyPolicyhistorydocs ↗#Link to AWS::ResilienceHub::ResiliencyPolicy
Type: AWS::ResilienceHub::ResiliencyPolicyProperties:modified:   Policy: Map of FailurePolicy → PolicyMapadded:     # Required: Yesadded:     AZ:added:       RpoInSecs: Integeradded:       RtoInSecs: Integeradded:     # Required: Yesadded:     Hardware:  # FailurePolicy: see aboveadded:     Region:  # FailurePolicy: see aboveremoved:     RpoInSecs: Integerremoved:     RtoInSecs: Integeradded:     # Required: Yesadded:     Software:  # FailurePolicy: see above