Version 202.0.0

Issued

cfn.fyi compares each version of the AWS CloudFormation resource specification with the version before it. See new resource types and changed properties as AWS releases them.

  • added
  • modified
  • removed

01Added resource types11

addedAWS::AIOps::InvestigationGroupdocs ↗#Link to AWS::AIOps::InvestigationGroup
Type: AWS::AIOps::InvestigationGroupProperties:  RetentionInDays: Integer  CrossAccountConfigurations:    - SourceRoleArn: String  InvestigationGroupPolicy: String  ChatbotNotificationChannels:    - SNSTopicArn: String      ChatConfigurationArns:        - String  IsCloudTrailEventHistoryEnabled: Boolean  TagKeyBoundaries:    - String  EncryptionConfig:    EncryptionConfigurationType: String    KmsKeyId: String  RoleArn: String  Tags:    - Key: String      Value: String  Name: StringFn::GetAtt:  LastModifiedBy: String  CreatedBy: String  LastModifiedAt: String  CreatedAt: String  Arn: String
addedAWS::FSx::S3AccessPointAttachmentdocs ↗#Link to AWS::FSx::S3AccessPointAttachment
Type: AWS::FSx::S3AccessPointAttachmentProperties:  OpenZFSConfiguration:    VolumeId: String    FileSystemIdentity:      Type: String      PosixUser:        Uid: Double        SecondaryGids:          - Gid: Double        Gid: Double  Type: String  S3AccessPoint:    Policy: Json    ResourceARN: String    Alias: String    VpcConfiguration:      VpcId: String  Name: StringFn::GetAtt:  S3AccessPoint.Alias: String  S3AccessPoint.ResourceARN: String
addedAWS::MPA::ApprovalTeamdocs ↗#Link to AWS::MPA::ApprovalTeam
Type: AWS::MPA::ApprovalTeamProperties:  ApprovalStrategy:    MofN:      MinApprovalsRequired: Integer  Policies:    - PolicyArn: String  Description: String  Approvers:    - PrimaryIdentityStatus: String      PrimaryIdentitySourceArn: String      ApproverId: String      PrimaryIdentityId: String      ResponseTime: String  Tags:    - Key: String      Value: String  Name: StringFn::GetAtt:  VersionId: String  Status: String  NumberOfApprovers: Integer  LastUpdateTime: String  CreationTime: String  Arn: String  StatusCode: String  UpdateSessionArn: String  StatusMessage: String
addedAWS::MPA::IdentitySourcedocs ↗#Link to AWS::MPA::IdentitySource
Type: AWS::MPA::IdentitySourceProperties:  IdentitySourceParameters:    IamIdentityCenter:      ApprovalPortalUrl: String      InstanceArn: String      Region: String  Tags:    - Key: String      Value: StringFn::GetAtt:  Status: String  IdentitySourceArn: String  IdentitySourceParameters.IamIdentityCenter.ApprovalPortalUrl: String  CreationTime: String  IdentitySourceType: String  StatusCode: String  StatusMessage: String
addedAWS::S3Tables::Namespacedocs ↗#Link to AWS::S3Tables::Namespace
Type: AWS::S3Tables::NamespaceProperties:  TableBucketARN: String  Namespace: String
addedAWS::SecurityHub::AggregatorV2docs ↗#Link to AWS::SecurityHub::AggregatorV2
Type: AWS::SecurityHub::AggregatorV2Properties:  RegionLinkingMode: String  LinkedRegions:    - String  Tags:    <key>: StringFn::GetAtt:  AggregationRegion: String  AggregatorV2Arn: String
addedAWS::SecurityHub::AutomationRuleV2docs ↗#Link to AWS::SecurityHub::AutomationRuleV2
Type: AWS::SecurityHub::AutomationRuleV2Properties:  Description: String  Actions:    - Type: String      ExternalIntegrationConfiguration:        ConnectorArn: String      FindingFieldsUpdate:        Comment: String        StatusId: Integer        SeverityId: Integer  RuleStatus: String  Criteria:    OcsfFindingCriteria:      CompositeFilters:        - Operator: String          StringFilters:            - Filter:                Comparison: String                Value: String              FieldName: String          BooleanFilters:            - Filter:                Value: Boolean              FieldName: String          DateFilters:            - Filter:                DateRange:                  Value: Double                  Unit: String                Start: String                End: String              FieldName: String          NumberFilters:            - Filter:                Gte: Double                Eq: Double                Lte: Double              FieldName: String          MapFilters:            - Filter:                Comparison: String                Value: String                Key: String              FieldName: String      CompositeOperator: String  RuleOrder: Double  RuleName: String  Tags:    <key>: StringFn::GetAtt:  RuleArn: String  RuleId: String  CreatedAt: String  UpdatedAt: String
addedAWS::SecurityHub::HubV2docs ↗#Link to AWS::SecurityHub::HubV2
Type: AWS::SecurityHub::HubV2Properties:  Tags:    <key>: StringFn::GetAtt:  HubV2Arn: String  SubscribedAt: String
addedAWS::WorkspacesInstances::Volumedocs ↗#Link to AWS::WorkspacesInstances::Volume
Type: AWS::WorkspacesInstances::VolumeProperties:  SizeInGB: Integer  SnapshotId: String  VolumeType: String  KmsKeyId: String  TagSpecifications:    - ResourceType: String      Tags:        - Key: String          Value: String  Encrypted: Boolean  AvailabilityZone: String  Throughput: Integer  Iops: IntegerFn::GetAtt:  VolumeId: String
addedAWS::WorkspacesInstances::VolumeAssociationdocs ↗#Link to AWS::WorkspacesInstances::VolumeAssociation
Type: AWS::WorkspacesInstances::VolumeAssociationProperties:  VolumeId: String  WorkspaceInstanceId: String  Device: String  DisassociateMode: String
addedAWS::WorkspacesInstances::WorkspaceInstancedocs ↗#Link to AWS::WorkspacesInstances::WorkspaceInstance
Type: AWS::WorkspacesInstances::WorkspaceInstanceProperties:  ManagedInstance:    HibernationOptions:      Configured: Boolean    MetadataOptions:      HttpPutResponseHopLimit: Integer      HttpProtocolIpv6: String      HttpTokens: String      InstanceMetadataTags: String      HttpEndpoint: String    NetworkPerformanceOptions:      BandwidthWeighting: String    TagSpecifications:      - ResourceType: String        Tags:          - Key: String            Value: String    UserData: String    DisableApiStop: Boolean    CpuOptions:      ThreadsPerCore: Integer      CoreCount: Integer    BlockDeviceMappings:      - Ebs:          VolumeType: String          KmsKeyId: String          Encrypted: Boolean          Throughput: Integer          Iops: Integer          VolumeSize: Integer        NoDevice: String        VirtualName: String        DeviceName: String    MaintenanceOptions:      AutoRecovery: String    PrivateDnsNameOptions:      EnableResourceNameDnsARecord: Boolean      HostnameType: String      EnableResourceNameDnsAAAARecord: Boolean    IamInstanceProfile:      Name: String    EbsOptimized: Boolean    KeyName: String    Placement:      GroupName: String      Tenancy: String      AvailabilityZone: String    EnclaveOptions:      Enabled: Boolean    NetworkInterfaces:      - Description: String        DeviceIndex: Integer        Groups:          - String        SubnetId: String    ImageId: String    InstanceType: String    CreditSpecification:      CpuCredits: String    Monitoring:      Enabled: Boolean  Tags:  # Tag: see aboveFn::GetAtt:  EC2ManagedInstance.InstanceId: String  WorkspaceInstanceId: String  EC2ManagedInstance:    InstanceId: String  ProvisionState: String

02Modified resource types29

modifiedAWS::AccessAnalyzer::Analyzerhistorydocs ↗#Link to AWS::AccessAnalyzer::Analyzer
Type: AWS::AccessAnalyzer::AnalyzerProperties:  AnalyzerConfiguration:added:     InternalAccessConfiguration:added:       InternalAccessAnalysisRule:added:         Inclusions:added:           - ResourceTypes:added:               - Stringadded:             AccountIds:added:               - Stringadded:             ResourceArns:added:               - String
modifiedAWS::Amplify::Apphistorydocs ↗#Link to AWS::Amplify::App
Type: AWS::Amplify::AppProperties:added:   JobConfig:added:     BuildComputeType: String
modifiedAWS::B2BI::Partnershiphistorydocs ↗#Link to AWS::B2BI::Partnership
Type: AWS::B2BI::PartnershipProperties:  CapabilityOptions:added:     InboundEdi:added:       X12:added:         AcknowledgmentOptions:added:           TechnicalAcknowledgment: Stringadded:           FunctionalAcknowledgment: String    OutboundEdi:      X12:        Common:added:           ControlNumbers:added:             StartingFunctionalGroupControlNumber: Doubleadded:             StartingInterchangeControlNumber: Doubleadded:             StartingTransactionSetControlNumber: Doubleadded:           Gs05TimeFormat: Stringadded:         WrapOptions:added:           LineLength: Doubleadded:           WrapBy: Stringadded:           LineTerminator: String
modifiedAWS::B2BI::Transformerhistorydocs ↗#Link to AWS::B2BI::Transformer
Type: AWS::B2BI::TransformerProperties:  InputConversion:added:     AdvancedOptions:added:       X12:added:         SplitOptions:added:           SplitBy: String
modifiedAWS::Batch::ComputeEnvironmenthistorydocs ↗#Link to AWS::Batch::ComputeEnvironment
Type: AWS::Batch::ComputeEnvironmentProperties:  ComputeResources:    LaunchTemplate:      Overrides:added:         - UserdataType: Stringadded:       UserdataType: String
modifiedAWS::Bedrock::Guardrailhistorydocs ↗#Link to AWS::Bedrock::Guardrail
Type: AWS::Bedrock::GuardrailProperties:added:   CrossRegionConfig:added:     GuardrailProfileArn: String
modifiedAWS::Budgets::Budgethistorydocs ↗#Link to AWS::Budgets::Budget
Type: AWS::Budgets::BudgetProperties:  Budget:    # Update requires: Replacement → No interruptionmodified:     AutoAdjustData: AutoAdjustData    # Update requires: Replacement → No interruptionmodified:     PlannedBudgetLimits: Json
modifiedAWS::CleanRooms::Collaborationhistorydocs ↗#Link to AWS::CleanRooms::Collaboration
Type: AWS::CleanRooms::CollaborationProperties:  # Required: Yes → Nomodified:   CreatorMemberAbilities:    - String  # Required: Yes → Nomodified:   Members:    - # Required: Yes → Nomodified:       MemberAbilities:        - String
modifiedAWS::CloudFront::Distributionhistorydocs ↗#Link to AWS::CloudFront::Distribution
Type: AWS::CloudFront::DistributionProperties:  DistributionConfig:    Origins:added:       - ResponseCompletionTimeout: Integer        S3OriginConfig:added:           OriginReadTimeout: Integer
modifiedAWS::Connect::EvaluationFormhistorydocs ↗#Link to AWS::Connect::EvaluationForm
Type: AWS::Connect::EvaluationFormProperties:added:   AutoEvaluationConfiguration:added:     Enabled: Boolean  Items:    - Section:        Items:          - Question:              QuestionTypeProperties:                Numeric:                  Automation:added:                     AnswerSource: Json                    # Required: Yes → Nomodified:                     PropertyValue: NumericQuestionPropertyValueAutomation            Section:  # EvaluationFormSection: see above
modifiedAWS::ConnectCampaignsV2::Campaignhistorydocs ↗#Link to AWS::ConnectCampaignsV2::Campaign
Type: AWS::ConnectCampaignsV2::CampaignProperties:  CommunicationLimitsOverride:added:     InstanceLimitsHandling: String
modifiedAWS::CustomerProfiles::SegmentDefinitionhistorydocs ↗#Link to AWS::CustomerProfiles::SegmentDefinition
Type: AWS::CustomerProfiles::SegmentDefinitionProperties:  SegmentGroups:    Groups:      - Dimensions:          - ProfileAttributes:added:               ProfileType:added:                 DimensionType: Stringadded:                 Values:added:                   - String
modifiedAWS::DataZone::ProjectProfilehistorydocs ↗#Link to AWS::DataZone::ProjectProfile
Type: AWS::DataZone::ProjectProfileProperties:added:   EnvironmentConfigurations:added:     - Description: Stringadded:       AwsRegion:added:         RegionName: Stringadded:       AwsAccount:added:         AwsAccountId: Stringadded:       DeploymentMode: Stringadded:       Id: Stringadded:       EnvironmentBlueprintId: Stringadded:       ConfigurationParameters:added:         ParameterOverrides:added:           - IsEditable: Booleanadded:             Value: Stringadded:             Name: Stringadded:         ResolvedParameters:  # EnvironmentConfigurationParameter: see aboveadded:         SsmPath: Stringadded:       DeploymentOrder: Doubleadded:       Name: String
modifiedAWS::DSQL::Clusterhistorydocs ↗#Link to AWS::DSQL::Cluster
Type: AWS::DSQL::ClusterProperties:added:   KmsEncryptionKey: StringFn::GetAtt:added:   EncryptionDetails:added:     EncryptionType: Stringadded:     EncryptionStatus: Stringadded:     KmsKeyArn: Stringadded:   EncryptionDetails.EncryptionStatus: Stringadded:   EncryptionDetails.EncryptionType: Stringadded:   EncryptionDetails.KmsKeyArn: String
modifiedAWS::EC2::Subnethistorydocs ↗#Link to AWS::EC2::Subnet
Type: AWS::EC2::SubnetFn::GetAtt:added:   BlockPublicAccessStates:added:     InternetGatewayBlockMode: Stringadded:   BlockPublicAccessStates.InternetGatewayBlockMode: String
modifiedAWS::EC2::TrafficMirrorFilterhistorydocs ↗#Link to AWS::EC2::TrafficMirrorFilter
Type: AWS::EC2::TrafficMirrorFilterProperties:  # Duplicates allowed: Not specified → Nomodified:   NetworkServices:    - String  # Duplicates allowed: Not specified → Yesmodified:   Tags:    - TagFn::GetAtt:added:   Id: String
modifiedAWS::EC2::TrafficMirrorFilterRulehistorydocs ↗#Link to AWS::EC2::TrafficMirrorFilterRule
Type: AWS::EC2::TrafficMirrorFilterRuleProperties:  # Duplicates allowed: Not specified → Yesmodified:   Tags:    - TagFn::GetAtt:added:   TrafficMirrorFilterRuleId: String
modifiedAWS::ECS::TaskDefinitionhistorydocs ↗#Link to AWS::ECS::TaskDefinition
Type: AWS::ECS::TaskDefinitionProperties:removed:   InferenceAccelerators:removed:     - DeviceType: Stringremoved:       DeviceName: String
modifiedAWS::InspectorV2::Filterhistorydocs ↗#Link to AWS::InspectorV2::Filter
Type: AWS::InspectorV2::FilterProperties:  FilterCriteria:added:     CodeVulnerabilityDetectorName:added:       - Comparison: Stringadded:         Value: Stringadded:     CodeVulnerabilityDetectorTags:  # StringFilter: see aboveadded:     CodeVulnerabilityFilePath:  # StringFilter: see aboveadded:     EpssScore:added:       - LowerInclusive: Doubleadded:         UpperInclusive: Doubleadded:     ExploitAvailable:  # StringFilter: see aboveadded:     FixAvailable:  # StringFilter: see aboveadded:     LambdaFunctionExecutionRoleArn:  # StringFilter: see aboveadded:     LambdaFunctionLastModifiedAt:added:       - EndInclusive: Integeradded:         StartInclusive: Integeradded:     LambdaFunctionLayers:  # StringFilter: see aboveadded:     LambdaFunctionName:  # StringFilter: see aboveadded:     LambdaFunctionRuntime:  # StringFilter: see above    VulnerablePackages:added:       - FilePath:  # StringFilter: see aboveadded:         SourceLambdaLayerArn:  # StringFilter: see aboveadded:   Tags:added:     <key>: String
modifiedAWS::Kendra::DataSourcehistorydocs ↗#Link to AWS::Kendra::DataSource
Type: AWS::Kendra::DataSourceProperties:  DataSourceConfiguration:added:     TemplateConfiguration:added:       Template: Json
modifiedAWS::Lex::Bothistorydocs ↗#Link to AWS::Lex::Bot
Type: AWS::Lex::BotProperties:  BotLocales:added:     - GenerativeAISettings:added:         RuntimeSettings:added:           SlotResolutionImprovementSpecification:added:             Enabled: Booleanadded:             BedrockModelSpecification:added:               ModelArn: Stringadded:               BedrockTraceStatus: Stringadded:               BedrockModelCustomPrompt: Stringadded:               BedrockGuardrailConfiguration:added:                 BedrockGuardrailVersion: Stringadded:                 BedrockGuardrailIdentifier: Stringadded:           NluImprovementSpecification:added:             Enabled: Booleanadded:         BuildtimeSettings:added:           DescriptiveBotBuilderSpecification:added:             Enabled: Booleanadded:             BedrockModelSpecification:  # BedrockModelSpecification: see aboveadded:           SampleUtteranceGenerationSpecification:added:             Enabled: Booleanadded:             BedrockModelSpecification:  # BedrockModelSpecification: see above
modifiedAWS::Logs::Transformerhistorydocs ↗#Link to AWS::Logs::Transformer
Type: AWS::Logs::TransformerProperties:  TransformerConfig:added:     - ParseToOCSF:added:         EventSource: Stringadded:         OcsfVersion: Stringadded:         Source: String
modifiedAWS::MediaTailor::PlaybackConfigurationhistorydocs ↗#Link to AWS::MediaTailor::PlaybackConfiguration
Type: AWS::MediaTailor::PlaybackConfigurationProperties:added:   InsertionMode: Stringadded:   LogConfiguration:added:     EnabledLoggingStrategies:added:       - Stringadded:     PercentEnabled: Integeradded:     AdsInteractionLog:added:       ExcludeEventTypes:added:         - Stringadded:       PublishOptInEventTypes:added:         - Stringadded:     ManifestServiceInteractionLog:added:       ExcludeEventTypes:added:         - String
modifiedAWS::MWAA::Environmenthistorydocs ↗#Link to AWS::MWAA::Environment
Type: AWS::MWAA::EnvironmentProperties:added:   WorkerReplacementStrategy: String
modifiedAWS::NetworkManager::VpcAttachmenthistorydocs ↗#Link to AWS::NetworkManager::VpcAttachment
Type: AWS::NetworkManager::VpcAttachmentProperties:  Options:added:     DnsSupport: Booleanadded:     SecurityGroupReferencingSupport: Boolean
modifiedAWS::Route53Resolver::ResolverRulehistorydocs ↗#Link to AWS::Route53Resolver::ResolverRule
Type: AWS::Route53Resolver::ResolverRuleProperties:added:   DelegationRecord: String
modifiedAWS::Synthetics::Canaryhistorydocs ↗#Link to AWS::Synthetics::Canary
Type: AWS::Synthetics::CanaryProperties:  RunConfig:added:     EphemeralStorage: Integer
modifiedAWS::WAFv2::RuleGrouphistorydocs ↗#Link to AWS::WAFv2::RuleGroup
Type: AWS::WAFv2::RuleGroupProperties:  Rules:    - Statement:added:         AsnMatchStatement:added:           ForwardedIPConfig:added:             FallbackBehavior: Stringadded:             HeaderName: Stringadded:           AsnList:added:             - Integer        NotStatement:          Statement:  # Statement: see above        OrStatement:          Statements:  # Statement: see above        RateBasedStatement:          CustomKeys:added:             - ASN: Json          ScopeDownStatement:  # Statement: see above
modifiedAWS::WAFv2::WebACLhistorydocs ↗#Link to AWS::WAFv2::WebACL
Type: AWS::WAFv2::WebACLProperties:modified:   OnSourceDDoSProtectionConfig: Json → OnSourceDDoSProtectionConfigadded:     ALBLowReputationMode: String  Rules:    - Statement:added:         AsnMatchStatement:added:           ForwardedIPConfig:added:             FallbackBehavior: Stringadded:             HeaderName: Stringadded:           AsnList:added:             - Integer        ManagedRuleGroupStatement:          ManagedRuleGroupConfigs:added:             - AWSManagedRulesAntiDDoSRuleSet:added:                 ClientSideActionConfig:added:                   Challenge:added:                     UsageOfAction: Stringadded:                     Sensitivity: Stringadded:                     ExemptUriRegularExpressions:added:                       - RegexString: Stringadded:                 SensitivityToBlock: String          ScopeDownStatement:  # Statement: see above        NotStatement:          Statement:  # Statement: see above        OrStatement:          Statements:  # Statement: see above        RateBasedStatement:          CustomKeys:added:             - ASN: Json          ScopeDownStatement:  # Statement: see above