Version 226.0.0

 Type: AWS::CloudFront::TrustStore Properties:   CaCertificatesBundleSource:     CaCertificatesBundleS3Location:       Bucket: String       Version: String       Region: String       Key: String   Tags:     - Value: String       Key: String   Name: String Fn::GetAtt:   Status: String   ETag: String   LastModifiedTime: String   Id: String   NumberOfCaCertificates: Integer   Arn: String

 Type: AWS::Connect::DataTable Properties:   Status: String   ValueLockLevel: String   TimeZone: String   Description: String   InstanceArn: String   Tags:     - Value: String       Key: String   Name: String Fn::GetAtt:   LockVersion:     DataTable: String   CreatedTime: Double   LockVersion.DataTable: String   LastModifiedTime: Double   Arn: String   LastModifiedRegion: String

 Type: AWS::Connect::DataTableAttribute Properties:   Validation:     ExclusiveMinimum: Double     Enum:       Strict: Boolean       Values:         - String     Minimum: Double     Maximum: Double     ExclusiveMaximum: Double     MinLength: Integer     MaxValues: Integer     MaxLength: Integer     MinValues: Integer     MultipleOf: Double   Description: String   ValueType: String   InstanceArn: String   Primary: Boolean   DataTableArn: String   Name: String Fn::GetAtt:   LockVersion.Attribute: String   LockVersion:     DataTable: String     Attribute: String   LockVersion.DataTable: String   AttributeId: String   LastModifiedTime: Double   LastModifiedRegion: String

 Type: AWS::Connect::DataTableRecord Properties:   DataTableRecord:     PrimaryValues:       - AttributeValue: String         AttributeId: String     Values:  # Value: see above   InstanceArn: String   DataTableArn: String Fn::GetAtt:   RecordId: String

 Type: AWS::Connect::Workspace Properties:   Pages:     - ResourceArn: String       Page: String       Slug: String       InputData: String   Description: String   InstanceArn: String   Media:     - Type: String       Source: String   Title: String   Theme:     Light:       Palette:         Navigation:           TextBackgroundHover: String           Background: String           TextBackgroundActive: String           Text: String           TextHover: String           TextActive: String           InvertActionsColors: Boolean         Header:           Background: String           Text: String           TextHover: String           InvertActionsColors: Boolean         Canvas:           ContainerBackground: String           ActiveBackground: String           PageBackground: String         Primary:           Active: String           Default: String           ContrastText: String       Typography:         FontFamily:           Default: String     Dark:  # WorkspaceThemeConfig: see above   Visibility: String   Associations:     - String   Tags:     - Value: String       Key: String   Name: String Fn::GetAtt:   Id: String   Arn: String

 Type: AWS::DevOpsAgent::AgentSpace Properties:   Description: String   Name: String Fn::GetAtt:   CreatedAt: String   Arn: String   AgentSpaceId: String   UpdatedAt: String

 Type: AWS::DevOpsAgent::Association Properties:   Configuration:     MCPServer:       Description: String       Endpoint: String       Tools:         - String       Name: String       EnableWebhookUpdates: Boolean     EventChannel:       EnableWebhookUpdates: Boolean     ServiceNow:       InstanceId: String       EnableWebhookUpdates: Boolean     SourceAws:       AssumableRoleArn: String       AccountId: String       Resources:         - ResourceArn: String           ResourceType: String           ResourceMetadata: Json       AccountType: String       Tags:         - Value: String           Key: String     Slack:       TransmissionTarget:         IncidentResponseTarget:           ChannelName: String           ChannelId: String       WorkspaceId: String       WorkspaceName: String     GitHub:       Owner: String       OwnerType: String       RepoName: String       RepoId: String     MCPServerDatadog:       Description: String       Endpoint: String       Name: String       EnableWebhookUpdates: Boolean     Dynatrace:       EnvId: String       Resources:         - String       EnableWebhookUpdates: Boolean     MCPServerSplunk:       Description: String       Endpoint: String       Name: String       EnableWebhookUpdates: Boolean     Aws:       AssumableRoleArn: String       AccountId: String       Resources:  # AWSResource: see above       AccountType: String       Tags:  # KeyValuePair: see above     MCPServerNewRelic:       AccountId: String       Endpoint: String     GitLab:       ProjectId: String       InstanceIdentifier: String       ProjectPath: String       EnableWebhookUpdates: Boolean   LinkedAssociationIds:     - String   AgentSpaceId: String   ServiceId: String Fn::GetAtt:   CreatedAt: String   UpdatedAt: String   AssociationId: String

 Type: AWS::EC2::TransitGatewayMeteringPolicy Properties:   TransitGatewayId: String   MiddleboxAttachmentIds:     - String   Tags:     - Value: String       Key: String Fn::GetAtt:   State: String   UpdateEffectiveAt: String   TransitGatewayMeteringPolicyId: String

 Type: AWS::EC2::TransitGatewayMeteringPolicyEntry Properties:   DestinationPortRange: String   DestinationTransitGatewayAttachmentId: String   MeteredAccount: String   SourcePortRange: String   PolicyRuleNumber: Integer   DestinationTransitGatewayAttachmentType: String   SourceCidrBlock: String   DestinationCidrBlock: String   Protocol: String   TransitGatewayMeteringPolicyId: String   SourceTransitGatewayAttachmentId: String   SourceTransitGatewayAttachmentType: String Fn::GetAtt:   UpdateEffectiveAt: String   State: String

 Type: AWS::EC2::VPCEncryptionControl Properties:   VpcPeeringExclusionInput: String   ElasticFileSystemExclusionInput: String   VpcLatticeExclusionInput: String   VpcId: String   NatGatewayExclusionInput: String   EgressOnlyInternetGatewayExclusionInput: String   VirtualPrivateGatewayExclusionInput: String   Mode: String   InternetGatewayExclusionInput: String   LambdaExclusionInput: String   Tags:     - Value: String       Key: String Fn::GetAtt:   ResourceExclusions.ElasticFileSystem.State: String   ResourceExclusions.VpcLattice.State: String   ResourceExclusions.VirtualPrivateGateway.StateMessage: String   VpcEncryptionControlId: String   ResourceExclusions.VpcLattice:     State: String     StateMessage: String   ResourceExclusions.Lambda:  # VpcEncryptionControlExclusion: see above   ResourceExclusions.NatGateway.State: String   ResourceExclusions.InternetGateway:  # VpcEncryptionControlExclusion: see above   ResourceExclusions.VirtualPrivateGateway:  # VpcEncryptionControlExclusion: see above   StateMessage: String   ResourceExclusions.EgressOnlyInternetGateway.StateMessage: String   ResourceExclusions.NatGateway:  # VpcEncryptionControlExclusion: see above   ResourceExclusions.VpcPeering:  # VpcEncryptionControlExclusion: see above   ResourceExclusions.EgressOnlyInternetGateway:  # VpcEncryptionControlExclusion: see above   ResourceExclusions.InternetGateway.State: String   ResourceExclusions.ElasticFileSystem.StateMessage: String   ResourceExclusions.ElasticFileSystem:  # VpcEncryptionControlExclusion: see above   ResourceExclusions.EgressOnlyInternetGateway.State: String   ResourceExclusions.NatGateway.StateMessage: String   ResourceExclusions.Lambda.State: String   ResourceExclusions.InternetGateway.StateMessage: String   ResourceExclusions.Lambda.StateMessage: String   ResourceExclusions.VpcPeering.State: String   State: String   ResourceExclusions.VpcPeering.StateMessage: String   ResourceExclusions.VpcLattice.StateMessage: String   ResourceExclusions:     ElasticFileSystem:  # VpcEncryptionControlExclusion: see above     VpcLattice:  # VpcEncryptionControlExclusion: see above     VpcPeering:  # VpcEncryptionControlExclusion: see above     InternetGateway:  # VpcEncryptionControlExclusion: see above     EgressOnlyInternetGateway:  # VpcEncryptionControlExclusion: see above     VirtualPrivateGateway:  # VpcEncryptionControlExclusion: see above     NatGateway:  # VpcEncryptionControlExclusion: see above     Lambda:  # VpcEncryptionControlExclusion: see above   ResourceExclusions.VirtualPrivateGateway.State: String

 Type: AWS::ECR::PullTimeUpdateExclusion Properties:   PrincipalArn: String

 Type: AWS::ECR::SigningConfiguration Properties:   Rules:     - RepositoryFilters:         - FilterType: String           Filter: String       SigningProfileArn: String Fn::GetAtt:   RegistryId: String

 Type: AWS::ECS::ExpressGatewayService Properties:   TaskRoleArn: String   ExecutionRoleArn: String   InfrastructureRoleArn: String   ScalingTarget:     MinTaskCount: Integer     AutoScalingMetric: String     AutoScalingTargetValue: Integer     MaxTaskCount: Integer   PrimaryContainer:     RepositoryCredentials:       CredentialsParameter: String     Secrets:       - ValueFrom: String         Name: String     Command:       - String     AwsLogsConfiguration:       LogStreamPrefix: String       LogGroup: String     ContainerPort: Integer     Environment:       - Value: String         Name: String     Image: String   ServiceName: String   Memory: String   HealthCheckPath: String   Cluster: String   Cpu: String   NetworkConfiguration:     SecurityGroups:       - String     Subnets:       - String   Tags:     - Value: String       Key: String Fn::GetAtt:   Status:     StatusCode: String   ECSManagedResourceArns.IngressPath.LoadBalancerArn: String   ECSManagedResourceArns.AutoScaling.ScalableTarget: String   CreatedAt: String   ECSManagedResourceArns.LogGroups:     - String   ECSManagedResourceArns.AutoScaling:     ScalableTarget: String     ApplicationAutoScalingPolicies:       - String   ServiceArn: String   ECSManagedResourceArns:     LogGroups:       - String     ServiceSecurityGroups:       - String     MetricAlarms:       - String     IngressPath:       ListenerArn: String       LoadBalancerArn: String       TargetGroupArns:         - String       ListenerRuleArn: String       LoadBalancerSecurityGroups:         - String       CertificateArn: String     AutoScaling:  # AutoScalingArns: see above   ECSManagedResourceArns.IngressPath.TargetGroupArns:     - String   UpdatedAt: String   ECSManagedResourceArns.MetricAlarms:     - String   ActiveConfigurations:     - ServiceRevisionArn: String       ExecutionRoleArn: String       TaskRoleArn: String       ScalingTarget:  # ExpressGatewayScalingTarget: see above       IngressPaths:         - Endpoint: String           AccessType: String       PrimaryContainer:  # ExpressGatewayContainer: see above       Memory: String       HealthCheckPath: String       CreatedAt: String       Cpu: String       NetworkConfiguration:  # ExpressGatewayServiceNetworkConfiguration: see above   Status.StatusCode: String   Endpoint: String   ECSManagedResourceArns.IngressPath:  # IngressPathArns: see above   ECSManagedResourceArns.IngressPath.CertificateArn: String   ECSManagedResourceArns.AutoScaling.ApplicationAutoScalingPolicies:     - String   ECSManagedResourceArns.ServiceSecurityGroups:     - String   ECSManagedResourceArns.IngressPath.ListenerArn: String   ECSManagedResourceArns.IngressPath.ListenerRuleArn: String   ECSManagedResourceArns.IngressPath.LoadBalancerSecurityGroups:     - String

 Type: AWS::EKS::Capability Properties:   Type: String   Configuration:     ArgoCd:       ServerUrl: String       NetworkAccess:         VpceIds:           - String       AwsIdc:         IdcRegion: String         IdcManagedApplicationArn: String         IdcInstanceArn: String       RbacRoleMappings:         - Role: String           Identities:             - Type: String               Id: String       Namespace: String   ClusterName: String   DeletePropagationPolicy: String   CapabilityName: String   RoleArn: String   Tags:     - Value: String       Key: String Fn::GetAtt:   Status: String   ModifiedAt: String   Configuration.ArgoCd.ServerUrl: String   Version: String   CreatedAt: String   Arn: String   Configuration.ArgoCd.AwsIdc.IdcManagedApplicationArn: String

 Type: AWS::Glue::IdentityCenterConfiguration Properties:   UserBackgroundSessionsEnabled: Boolean   Scopes:     - String   InstanceArn: String Fn::GetAtt:   ApplicationArn: String   AccountId: String

 Type: AWS::Lambda::CapacityProvider Properties:   CapacityProviderScalingConfig:     ScalingPolicies:       - PredefinedMetricType: String         TargetValue: Double     ScalingMode: String     MaxVCpuCount: Integer   KmsKeyArn: String   VpcConfig:     SubnetIds:       - String     SecurityGroupIds:       - String   CapacityProviderName: String   InstanceRequirements:     AllowedInstanceTypes:       - String     ExcludedInstanceTypes:       - String     Architectures:       - String   PermissionsConfig:     CapacityProviderOperatorRoleArn: String   Tags:     - Value: String       Key: String Fn::GetAtt:   State: String   Arn: String

 Type: AWS::NetworkManager::CoreNetworkPrefixListAssociation Properties:   CoreNetworkId: String   PrefixListArn: String   PrefixListAlias: String

 Type: AWS::ObservabilityAdmin::S3TableIntegration Properties:   LogSources:     - Type: String       Identifier: String       Name: String   Encryption:     KmsKeyArn: String     SseAlgorithm: String   RoleArn: String   Tags:     - Value: String       Key: String Fn::GetAtt:   Arn: String

 Type: AWS::ObservabilityAdmin::TelemetryPipelines Properties:   Configuration:     Body: String   Tags:     - Value: String       Key: String   Name: String Fn::GetAtt:   Status: String   Pipeline.Status: String   Pipeline.Tags:  # Tag: see above   Pipeline.LastUpdateTimeStamp: Double   Pipeline.Configuration:  # TelemetryPipelineConfiguration: see above   StatusReason:     Description: String   Pipeline.Arn: String   StatusReason.Description: String   Pipeline.StatusReason:  # TelemetryPipelineStatusReason: see above   Pipeline:     Status: String     LastUpdateTimeStamp: Double     CreatedTimeStamp: Double     Configuration:  # TelemetryPipelineConfiguration: see above     StatusReason:  # TelemetryPipelineStatusReason: see above     Arn: String     Tags:  # Tag: see above     Name: String   Pipeline.Configuration.Body: String   Pipeline.Name: String   Pipeline.CreatedTimeStamp: Double   PipelineIdentifier: String   Pipeline.StatusReason.Description: String   Arn: String

 Type: AWS::RTBFabric::OutboundExternalLink Properties:   LinkAttributes:     ResponderErrorMasking:       - HttpCode: String         Action: String         ResponseLoggingPercentage: Double         LoggingTypes:           - String     CustomerProvidedId: String   LinkLogSettings:     ApplicationLogs:       LinkApplicationLogSampling:         FilterLog: Double         ErrorLog: Double   PublicEndpoint: String   GatewayId: String   Tags:     - Value: String       Key: String Fn::GetAtt:   LinkStatus: String   UpdatedTimestamp: String   CreatedTimestamp: String   Arn: String   LinkId: String

 Type: AWS::SecurityHub::ConnectorV2 Properties:   Description: String   KmsKeyArn: String   Tags:     <key>: String   Name: String   Provider:     ServiceNow:       InstanceName: String       SecretArn: String       AuthStatus: String     JiraCloud:       ProjectKey: String       AuthStatus: String       AuthUrl: String       Domain: String       CloudId: String Fn::GetAtt:   ConnectorArn: String   LastCheckedAt: String   Provider.JiraCloud.AuthUrl: String   Provider.ServiceNow.AuthStatus: String   Message: String   LastUpdatedAt: String   ConnectorStatus: String   CreatedAt: String   Provider.JiraCloud.AuthStatus: String   Provider.JiraCloud.Domain: String   ConnectorId: String   Provider.JiraCloud.CloudId: String

 Type: AWS::Athena::WorkGroup Properties:   WorkGroupConfiguration:+added:     EngineConfiguration:+added:       SparkProperties:+added:         <key>: String+added:       Classifications:+added:         - Properties:+added:             <key>: String+added:           Name: String+added:       MaxConcurrentDpus: Integer+added:       CoordinatorDpuSize: Integer+added:       DefaultExecutorDpuSize: Integer+added:       AdditionalConfigs:+added:         <key>: String+added:     MonitoringConfiguration:+added:       S3LoggingConfiguration:+added:         LogLocation: String+added:         Enabled: Boolean+added:         KmsKey: String+added:       ManagedLoggingConfiguration:+added:         Enabled: Boolean+added:         KmsKey: String+added:       CloudWatchLoggingConfiguration:+added:         LogGroup: String+added:         Enabled: Boolean+added:         LogStreamNamePrefix: String+added:         LogTypes: Json

 Type: AWS::Backup::BackupPlan Properties:   BackupPlan:     BackupPlanRule:+added:       - TargetLogicallyAirGappedBackupVaultArn: String

 Type: AWS::Bedrock::DataAutomationProject Properties:   OverrideConfiguration:     Audio:+added:       SensitiveDataConfiguration:+added:         DetectionMode: String+added:         PiiEntitiesConfiguration:+added:           PiiEntityTypes:+added:             - String+added:           RedactionMaskMode: String+added:         DetectionScope:+added:           - String     Document:+added:       SensitiveDataConfiguration:  # SensitiveDataConfiguration: see above     Image:+added:       SensitiveDataConfiguration:  # SensitiveDataConfiguration: see above     Video:+added:       SensitiveDataConfiguration:  # SensitiveDataConfiguration: see above+added:   ProjectType: String

 Type: AWS::Bedrock::KnowledgeBase Properties:   KnowledgeBaseConfiguration:     VectorKnowledgeBaseConfiguration:       EmbeddingModelConfiguration:         BedrockEmbeddingModelConfiguration:+added:           Audio:+added:             - SegmentationConfiguration:+added:                 FixedLengthDuration: Integer+added:           Video:+added:             - SegmentationConfiguration:+added:                 FixedLengthDuration: Integer   StorageConfiguration:+added:     S3VectorsConfiguration:+added:       IndexName: String+added:       VectorBucketArn: String+added:       IndexArn: String

 Type: AWS::BillingConductor::CustomLineItem Properties:   CustomLineItemChargeDetails:     LineItemFilters:+added:       - AttributeValues:+added:           - String         # Required: Yes → No~modified:         Values:           - String

 Type: AWS::Cassandra::Table Properties:+added:   WarmThroughput:+added:     ReadUnitsPerSecond: Integer+added:     WriteUnitsPerSecond: Integer

 Type: AWS::CleanRooms::AnalysisTemplate Properties:+added:   SyntheticDataParameters:+added:     MlSyntheticDataParameters:+added:       ColumnClassification:+added:         ColumnMapping:+added:           - ColumnName: String+added:             ColumnType: String+added:             IsPredictiveValue: Boolean+added:       Epsilon: Double+added:       MaxMembershipInferenceAttackScore: Double

 Type: AWS::CleanRooms::Collaboration Properties:   CreatorPaymentConfiguration:     MachineLearning:+added:       SyntheticDataGeneration:+added:         IsResponsible: Boolean   Members:     - PaymentConfiguration:  # PaymentConfiguration: see above

 Type: AWS::CleanRooms::Membership Properties:   PaymentConfiguration:     MachineLearning:+added:       SyntheticDataGeneration:+added:         IsResponsible: Boolean

 Type: AWS::CloudFormation::StackSet Properties:   AutoDeployment:+added:     DependsOn:+added:       - String

 Type: AWS::CloudFront::AnycastIpList Properties:+added:   IpamCidrConfigs:+added:     - Cidr: String+added:       IpamPoolArn: String Fn::GetAtt:   AnycastIpList:+added:     IpamCidrConfigResults:+added:       - Status: String+added:         AnycastIp: String+added:         Cidr: String+added:         IpamPoolArn: String+added:   AnycastIpList.IpamCidrConfigResults:  # IpamCidrConfigResult: see above+added:   IpamCidrConfigResults:  # IpamCidrConfigResult: see above

 Type: AWS::CloudFront::Distribution Properties:   DistributionConfig:+added:     ConnectionFunctionAssociation:+added:       Id: String+added:     ViewerMtlsConfig:+added:       Mode: String+added:       TrustStoreConfig:+added:         TrustStoreId: String+added:         IgnoreCertificateExpiry: Boolean+added:         AdvertiseTrustStoreCaNames: Boolean

 Type: AWS::Connect::EvaluationForm Properties:   Items:     - Section:         Items:           - Question:               QuestionTypeProperties:+added:                 MultiSelect:+added:                   DisplayAs: String+added:                   Options:+added:                     - Text: String+added:                       RefId: String+added:                   Automation:+added:                     Options:+added:                       - RuleCategory:+added:                           Condition: String+added:                           Category: String+added:                           OptionRefIds:+added:                             - String+added:                     AnswerSource:+added:                       SourceType: String+added:                     DefaultOptionRefIds:+added:                       - String             Section:  # EvaluationFormSection: see above+added:   LanguageConfiguration:+added:     FormLanguage: String+added:   TargetConfiguration:+added:     ContactInteractionType: String

 Type: AWS::ConnectCampaignsV2::Campaign Properties:   # Required: Yes → No~modified:   ChannelSubtypeConfig:     Telephony:       DefaultOutboundConfig:+added:         RingTimeout: Integer+added:     WhatsApp:+added:       OutboundMode:+added:         AgentlessConfig: Json+added:       Capacity: Double+added:       DefaultOutboundConfig:+added:         ConnectSourcePhoneNumberArn: String+added:         WisdomTemplateArn: String   CommunicationTimeConfig:+added:     WhatsApp:+added:       OpenHours:+added:         DailyHours:+added:           - Value:+added:               - EndTime: String+added:                 StartTime: String+added:             Key: String+added:       RestrictedPeriods:+added:         RestrictedPeriodList:+added:           - StartDate: String+added:             EndDate: String+added:             Name: String+added:   Type: String

 Type: AWS::CustomerProfiles::SegmentDefinition Properties:   # Required: Yes → No~modified:   SegmentGroups: SegmentGroup+added:   SegmentSqlQuery: String Fn::GetAtt:+added:   SegmentType: String

 Type: AWS::DataZone::Connection Properties:   Props:+added:     MlflowProperties:+added:       TrackingServerArn: String     SparkEmrProperties:+added:       ManagedEndpointArn: String

 Type: AWS::DSQL::Cluster Fn::GetAtt:+added:   VpcEndpoint: String

 Type: AWS::EC2::EC2Fleet Properties:   LaunchTemplateConfigs:     - Overrides:         - InstanceRequirements:+added:             RequireEncryptionInTransit: Boolean   TargetCapacitySpecification:     # Update requires: No interruption → Replacement~modified:     DefaultTargetCapacityType: String     # Update requires: No interruption → Replacement~modified:     TargetCapacityUnitType: String

 Type: AWS::EC2::NetworkInterface Properties:+added:   PublicIpDnsHostnameTypeSpecification: String Fn::GetAtt:+added:   PublicIpDnsNameOptions:+added:     DnsHostnameType: String+added:     PublicIpv4DnsName: String+added:     PublicDualStackDnsName: String+added:     PublicIpv6DnsName: String+added:   PublicIpDnsNameOptions.DnsHostnameType: String+added:   PublicIpDnsNameOptions.PublicDualStackDnsName: String+added:   PublicIpDnsNameOptions.PublicIpv4DnsName: String+added:   PublicIpDnsNameOptions.PublicIpv6DnsName: String

 Type: AWS::EC2::SpotFleet Properties:   SpotFleetRequestConfigData:     LaunchSpecifications:       - InstanceRequirements:+added:           RequireEncryptionInTransit: Boolean     LaunchTemplateConfigs:       - Overrides:           - InstanceRequirements:  # InstanceRequirementsRequest: see above+added:   Tags:+added:     - Value: String+added:       Key: String

 Type: AWS::EKS::Cluster Properties:+added:   ControlPlaneScalingConfig:+added:     Tier: String

 Type: AWS::EKS::Nodegroup Properties:   NodeRepairConfig:+added:     MaxParallelNodesRepairedCount: Integer+added:     MaxParallelNodesRepairedPercentage: Integer+added:     MaxUnhealthyNodeThresholdCount: Integer+added:     MaxUnhealthyNodeThresholdPercentage: Integer+added:     NodeRepairConfigOverrides:+added:       - NodeUnhealthyReason: String+added:         RepairAction: String+added:         MinRepairWaitTimeMins: Integer+added:         NodeMonitoringCondition: String

 Type: AWS::FSx::S3AccessPointAttachment Properties:+added:   OntapConfiguration:+added:     VolumeId: String+added:     FileSystemIdentity:+added:       Type: String+added:       UnixUser:+added:         Name: String+added:       WindowsUser:+added:         Name: String   # Required: Yes → No~modified:   OpenZFSConfiguration: S3AccessPointOpenZFSConfiguration

 Type: AWS::KinesisVideo::Stream Properties:+added:   StreamStorageConfiguration:+added:     DefaultStorageTier: String

 Type: AWS::Lambda::Function Properties:+added:   CapacityProviderConfig:+added:     LambdaManagedInstancesCapacityProviderConfig:+added:       ExecutionEnvironmentMemoryGiBPerVCpu: Double+added:       CapacityProviderArn: String+added:       PerExecutionEnvironmentMaxConcurrency: Integer+added:   DurableConfig:+added:     ExecutionTimeout: Integer+added:     RetentionPeriodInDays: Integer+added:   FunctionScalingConfig:+added:     MinExecutionEnvironments: Integer+added:     MaxExecutionEnvironments: Integer+added:   PublishToLatestPublished: Boolean

 Type: AWS::Lambda::Version Properties:+added:   FunctionScalingConfig:+added:     MinExecutionEnvironments: Integer+added:     MaxExecutionEnvironments: Integer

 Type: AWS::MediaLive::Channel Properties:   EncoderSettings:     VideoDescriptions:       - CodecSettings:           Av1Settings:+added:             SpatialAq: String+added:             TemporalAq: String           H265Settings:             ColorSpaceSettings:+added:               Hlg2020Settings: {}

 Type: AWS::MediaLive::Input Properties:+added:   RouterSettings:+added:     SecretArn: String+added:     EncryptionType: String+added:     Destinations:+added:       - AvailabilityZoneName: String PropertyTypes:+added:   SpecialRouterSettings:+added:     RouterArn: String

 Type: AWS::MSK::Cluster Properties:   BrokerNodeGroupInfo:     ConnectivityInfo:+added:       NetworkType: String

 Type: AWS::NetworkManager::ConnectAttachment Properties:+added:   RoutingPolicyLabel: String

 Type: AWS::NetworkManager::DirectConnectGatewayAttachment Properties:+added:   RoutingPolicyLabel: String

 Type: AWS::NetworkManager::SiteToSiteVpnAttachment Properties:+added:   RoutingPolicyLabel: String

 Type: AWS::NetworkManager::TransitGatewayRouteTableAttachment Properties:+added:   RoutingPolicyLabel: String

 Type: AWS::NetworkManager::VpcAttachment Properties:+added:   RoutingPolicyLabel: String

 Type: AWS::ObservabilityAdmin::OrganizationTelemetryRule Properties:   Rule:     DestinationConfiguration:+added:       CloudtrailParameters:+added:         AdvancedEventSelectors:+added:           - FieldSelectors:+added:               - Field: String+added:                 Equals:+added:                   - String+added:                 NotStartsWith:+added:                   - String+added:                 NotEndsWith:+added:                   - String+added:                 StartsWith:+added:                   - String+added:                 EndsWith:+added:                   - String+added:                 NotEquals:+added:                   - String+added:             Name: String+added:       ELBLoadBalancerLoggingParameters:+added:         FieldDelimiter: String+added:         OutputFormat: String+added:       WAFLoggingParameters:+added:         RedactedFields:+added:           - UriPath: String+added:             QueryString: String+added:             Method: String+added:             SingleHeader:+added:               Name: String+added:         LoggingFilter:+added:           Filters:+added:             - Requirement: String+added:               Behavior: String+added:               Conditions:+added:                 - LabelNameCondition:+added:                     LabelName: String+added:                   ActionCondition:+added:                     Action: String+added:           DefaultBehavior: String+added:         LogType: String+added:     TelemetrySourceTypes:+added:       - String

 Type: AWS::ObservabilityAdmin::TelemetryRule Properties:   Rule:     DestinationConfiguration:+added:       CloudtrailParameters:+added:         AdvancedEventSelectors:+added:           - FieldSelectors:+added:               - Field: String+added:                 Equals:+added:                   - String+added:                 NotStartsWith:+added:                   - String+added:                 NotEndsWith:+added:                   - String+added:                 StartsWith:+added:                   - String+added:                 EndsWith:+added:                   - String+added:                 NotEquals:+added:                   - String+added:             Name: String+added:       ELBLoadBalancerLoggingParameters:+added:         FieldDelimiter: String+added:         OutputFormat: String+added:       LogDeliveryParameters:+added:         LogTypes:+added:           - String+added:       WAFLoggingParameters:+added:         RedactedFields:+added:           - UriPath: String+added:             QueryString: String+added:             Method: String+added:             SingleHeader:+added:               Name: String+added:         LoggingFilter:+added:           Filters:+added:             - Requirement: String+added:               Behavior: String+added:               Conditions:+added:                 - LabelNameCondition:+added:                     LabelName: String+added:                   ActionCondition:+added:                     Action: String+added:           DefaultBehavior: String+added:         LogType: String+added:     TelemetrySourceTypes:+added:       - String

 Type: AWS::OpenSearchServerless::Collection Properties:−removed:   CollectionGroupName: String−removed:   EncryptionConfig:−removed:     KmsKeyArn: String−removed:     AWSOwnedKey: Boolean

 Type: AWS::PaymentCryptography::Key Properties:+added:   ReplicationRegions:+added:     - String Fn::GetAtt:+added:   ReplicationStatus:     <key>:+added:       Status: String+added:       StatusMessage: String

 Type: AWS::PCS::Cluster Properties:   SlurmConfiguration:+added:     JwtAuth:+added:       JwtKey:+added:         SecretArn: String+added:         SecretVersion: String+added:     SlurmRest:+added:       Mode: String

 Type: AWS::RAM::ResourceShare Fn::GetAtt:+added:   CreationTime: String+added:   FeatureSet: String+added:   LastUpdatedTime: String+added:   OwningAccountId: String+added:   Status: String

 Type: AWS::RoboMaker::Fleet Properties:~modified:   Tags: Map of String → Json

 Type: AWS::RoboMaker::Robot Properties:~modified:   Tags: Map of String → Json Fn::GetAtt:−removed:   Arn: String

 Type: AWS::RoboMaker::RobotApplication Properties:−removed:   Environment: String   # Update requires: No interruption → Replacement~modified:   RobotSoftwareSuite:     # Required: No → Yes~modified:     Version: String   # Required: No → Yes   # Duplicates allowed: Yes → Not specified~modified:   Sources:     - SourceConfig~modified:   Tags: Map of String → Json

 Type: AWS::RoboMaker::RobotApplicationVersion Fn::GetAtt:−removed:   ApplicationVersion: String−removed:   Arn: String

 Type: AWS::RoboMaker::SimulationApplication Properties:−removed:   Environment: String   # Required: No → Yes   # Update requires: No interruption → Replacement~modified:   RenderingEngine: RenderingEngine   # Update requires: No interruption → Replacement~modified:   RobotSoftwareSuite:     # Required: No → Yes~modified:     Version: String   # Update requires: No interruption → Replacement~modified:   SimulationSoftwareSuite:     # Required: No → Yes~modified:     Version: String   # Required: No → Yes   # Duplicates allowed: Yes → Not specified~modified:   Sources:     - SourceConfig~modified:   Tags: Map of String → Json

 Type: AWS::RoboMaker::SimulationApplicationVersion Fn::GetAtt:−removed:   ApplicationVersion: String−removed:   Arn: String

 Type: AWS::Route53::HostedZone Properties:+added:   HostedZoneFeatures:+added:     EnableAcceleratedRecovery: Boolean

 Type: AWS::S3::AccessGrantsLocation Properties:   # Required: No → Yes~modified:   IamRoleArn: String   # Required: No → Yes~modified:   LocationScope: String

 Type: AWS::S3::Bucket Properties:+added:   AbacStatus: String   MetadataConfiguration:     InventoryTableConfiguration:       EncryptionConfiguration:         # Update requires: Some interruptions → No interruption~modified:         KmsKeyArn: String         # Update requires: Some interruptions → No interruption~modified:         SseAlgorithm: String     JournalTableConfiguration:       # Update requires: Replacement → No interruption~modified:       EncryptionConfiguration:  # MetadataTableEncryptionConfiguration: see above

 Type: AWS::S3::StorageLens Properties:   StorageLensConfiguration:     AccountLevel:+added:       AdvancedPerformanceMetrics:+added:         IsEnabled: Boolean       BucketLevel:+added:         AdvancedPerformanceMetrics:  # AdvancedPerformanceMetrics: see above     DataExport:+added:       StorageLensTableDestination:+added:         IsEnabled: Boolean+added:         Encryption:+added:           SSEKMS:+added:             KeyId: String+added:           SSES3: Json+added:     ExpandedPrefixesDataExport:+added:       StorageLensTableDestination:  # StorageLensTableDestination: see above+added:       S3BucketDestination:+added:         OutputSchemaVersion: String+added:         Format: String+added:         AccountId: String+added:         Prefix: String+added:         Encryption:  # Encryption: see above+added:         Arn: String+added:     PrefixDelimiter: String

 Type: AWS::S3Tables::Table Properties:+added:   StorageClassConfiguration:+added:     StorageClass: String

 Type: AWS::S3Tables::TableBucket Properties:+added:   StorageClassConfiguration:+added:     StorageClass: String

 Type: AWS::S3Vectors::Index Properties:+added:   EncryptionConfiguration:+added:     KmsKeyArn: String+added:     SseType: String

 Type: AWS::SageMaker::Cluster Properties:   InstanceGroups:+added:     - CapacityRequirements:+added:         Spot: Json+added:         OnDemand: Json+added:       KubernetesConfig:+added:         Labels:+added:           <key>: String+added:         Taints:+added:           - Value: String+added:             Effect: String+added:             Key: String

 Type: AWS::SecretsManager::RotationSchedule Properties:+added:   ExternalSecretRotationMetadata:+added:     - Value: String+added:       Key: String+added:   ExternalSecretRotationRoleArn: String

 Type: AWS::SecretsManager::Secret Properties:+added:   Type: String

 Type: AWS::Transfer::Connector Fn::GetAtt:+added:   ErrorMessage: String

 Type: AWS::Wisdom::AIAgent Properties:   Configuration:+added:     EmailGenerativeAnswerAIAgentConfiguration:+added:       EmailGenerativeAnswerAIPromptId: String+added:       Locale: String+added:       EmailQueryReformulationAIPromptId: String+added:       AssociationConfigurations:+added:         - AssociationType: String+added:           AssociationConfigurationData:+added:             KnowledgeBaseAssociationConfigurationData:+added:               MaxResults: Double+added:               ContentTagFilter:+added:                 OrConditions:+added:                   - AndConditions:+added:                       - Value: String+added:                         Key: String+added:                     TagCondition:  # TagCondition: see above+added:                 AndConditions:  # TagCondition: see above+added:                 TagCondition:  # TagCondition: see above+added:               OverrideKnowledgeBaseSearchType: String+added:           AssociationId: String+added:     EmailOverviewAIAgentConfiguration:+added:       Locale: String+added:       EmailOverviewAIPromptId: String+added:     EmailResponseAIAgentConfiguration:+added:       Locale: String+added:       EmailResponseAIPromptId: String+added:       EmailQueryReformulationAIPromptId: String+added:       AssociationConfigurations:  # AssociationConfiguration: see above