Version 23.0.0

 Type: AWS::Config::StoredQuery Properties:   QueryName: String   QueryDescription: String   QueryExpression: String   Tags:     - Key: String       Value: String Fn::GetAtt:   QueryArn: String   QueryId: String

 Type: AWS::DataSync::Agent Properties:   AgentName: String   ActivationKey: String   SecurityGroupArns:     - String   SubnetArns:     - String   VpcEndpointId: String   Tags:     - Key: String       Value: String Fn::GetAtt:   EndpointType: String   AgentArn: String

 Type: AWS::DataSync::LocationEFS Properties:   Ec2Config:     SecurityGroupArns:       - String     SubnetArn: String   EfsFilesystemArn: String   Subdirectory: String   Tags:     - Key: String       Value: String Fn::GetAtt:   LocationArn: String   LocationUri: String

 Type: AWS::DataSync::LocationFSxWindows Properties:   Domain: String   FsxFilesystemArn: String   Password: String   SecurityGroupArns:     - String   Subdirectory: String   User: String   Tags:     - Key: String       Value: String Fn::GetAtt:   LocationArn: String   LocationUri: String

 Type: AWS::DataSync::LocationNFS Properties:   MountOptions:     Version: String   OnPremConfig:     AgentArns:       - String   ServerHostname: String   Subdirectory: String   Tags:     - Key: String       Value: String Fn::GetAtt:   LocationArn: String   LocationUri: String

 Type: AWS::DataSync::LocationObjectStorage Properties:   AccessKey: String   AgentArns:     - String   BucketName: String   SecretKey: String   ServerHostname: String   ServerPort: Integer   ServerProtocol: String   Subdirectory: String   Tags:     - Key: String       Value: String Fn::GetAtt:   LocationArn: String   LocationUri: String

 Type: AWS::DataSync::LocationS3 Properties:   S3Config:     BucketAccessRoleArn: String   S3BucketArn: String   Subdirectory: String   S3StorageClass: String   Tags:     - Key: String       Value: String Fn::GetAtt:   LocationArn: String   LocationUri: String

 Type: AWS::DataSync::LocationSMB Properties:   AgentArns:     - String   Domain: String   MountOptions:     Version: String   Password: String   ServerHostname: String   Subdirectory: String   User: String   Tags:     - Key: String       Value: String Fn::GetAtt:   LocationArn: String   LocationUri: String

 Type: AWS::DataSync::Task Properties:   Excludes:     - FilterType: String       Value: String   Tags:     - Key: String       Value: String   CloudWatchLogGroupArn: String   DestinationLocationArn: String   Name: String   Options:     Atime: String     BytesPerSecond: Integer     Gid: String     LogLevel: String     Mtime: String     OverwriteMode: String     PosixPermissions: String     PreserveDeletedFiles: String     PreserveDevices: String     TaskQueueing: String     TransferMode: String     Uid: String     VerifyMode: String   Schedule:     ScheduleExpression: String   SourceLocationArn: String Fn::GetAtt:   TaskArn: String   ErrorCode: String   ErrorDetail: String   Status: String   SourceNetworkInterfaceArns:     - String   DestinationNetworkInterfaceArns:     - String

 Type: AWS::MediaConnect::Flow Properties:   Name: String   AvailabilityZone: String   Source:     SourceArn: String     Decryption:       Algorithm: String       ConstantInitializationVector: String       DeviceId: String       KeyType: String       Region: String       ResourceId: String       RoleArn: String       SecretArn: String       Url: String     Description: String     EntitlementArn: String     IngestIp: String     IngestPort: Integer     MaxBitrate: Integer     MaxLatency: Integer     Name: String     Protocol: String     StreamId: String     VpcInterfaceName: String     WhitelistCidr: String   SourceFailoverConfig:     State: String     RecoveryWindow: Integer Fn::GetAtt:   FlowArn: String   FlowAvailabilityZone: String   SourceArn: String   IngestIp: String

 Type: AWS::MediaConnect::FlowEntitlement Properties:   FlowArn: String   DataTransferSubscriberFeePercent: Integer   Description: String   Encryption:     Algorithm: String     ConstantInitializationVector: String     DeviceId: String     KeyType: String     Region: String     ResourceId: String     RoleArn: String     SecretArn: String     Url: String   EntitlementStatus: String   Name: String   Subscribers:     - String Fn::GetAtt:   EntitlementArn: String

 Type: AWS::MediaConnect::FlowOutput Properties:   FlowArn: String   CidrAllowList:     - String   Description: String   Destination: String   Encryption:     Algorithm: String     KeyType: String     RoleArn: String     SecretArn: String   MaxLatency: Integer   Name: String   Port: Integer   Protocol: String   RemoteId: String   SmoothingLatency: Integer   StreamId: String   VpcInterfaceAttachment:     VpcInterfaceName: String Fn::GetAtt:   OutputArn: String

 Type: AWS::MediaConnect::FlowSource Properties:   FlowArn: String   Decryption:     Algorithm: String     ConstantInitializationVector: String     DeviceId: String     KeyType: String     Region: String     ResourceId: String     RoleArn: String     SecretArn: String     Url: String   Description: String   EntitlementArn: String   IngestPort: Integer   MaxBitrate: Integer   MaxLatency: Integer   Name: String   Protocol: String   StreamId: String   VpcInterfaceName: String   WhitelistCidr: String Fn::GetAtt:   SourceArn: String   IngestIp: String

 Type: AWS::MediaConnect::FlowVpcInterface Properties:   RoleArn: String   SecurityGroupIds:     - String   SubnetId: String Fn::GetAtt:   FlowArn: String   Name: String   NetworkInterfaceIds:     - String

 Type: AWS::Route53::DNSSEC Properties:   HostedZoneId: String

 Type: AWS::Route53::KeySigningKey Properties:   HostedZoneId: String   Status: String   Name: String   KeyManagementServiceArn: String

 Type: AWS::Route53Resolver::ResolverDNSSECConfig Properties:   ResourceId: String Fn::GetAtt:   Id: String   OwnerId: String   ValidationStatus: String

 Type: AWS::ACMPCA::CertificateAuthority Properties:+added:   CsrExtensions:+added:     KeyUsage:+added:       DigitalSignature: Boolean+added:       NonRepudiation: Boolean+added:       KeyEncipherment: Boolean+added:       DataEncipherment: Boolean+added:       KeyAgreement: Boolean+added:       KeyCertSign: Boolean+added:       CRLSign: Boolean+added:       EncipherOnly: Boolean+added:       DecipherOnly: Boolean+added:     SubjectInformationAccess:+added:       SubjectInformationAccess:+added:         - AccessMethod:+added:             CustomObjectIdentifier: String+added:             AccessMethodType: String+added:           AccessLocation:+added:             OtherName:+added:               TypeId: String+added:               Value: String+added:             Rfc822Name: String+added:             DnsName: String+added:             DirectoryName:+added:               Country: String+added:               Organization: String+added:               OrganizationalUnit: String+added:               DistinguishedNameQualifier: String+added:               State: String+added:               CommonName: String+added:               SerialNumber: String+added:               Locality: String+added:               Title: String+added:               Surname: String+added:               GivenName: String+added:               Initials: String+added:               Pseudonym: String+added:               GenerationQualifier: String+added:             EdiPartyName:+added:               PartyName: String+added:               NameAssigner: String+added:             UniformResourceIdentifier: String+added:             IpAddress: String+added:             RegisteredId: String

 Type: AWS::ApiGateway::ClientCertificate Fn::GetAtt:+added:   ClientCertificateId: String

 Type: AWS::ApiGatewayV2::Integration Properties:+added:   ResponseParameters: Json PropertyTypes:+added:   ResponseParameter:+added:     Destination: String+added:     Source: String+added:   ResponseParameterList:+added:     ResponseParameters:  # ResponseParameter: see above

 Type: AWS::Athena::DataCatalog Properties:~modified:   Tags: Tags → List of Tag+added:     # Required: Yes+added:     Key: String−removed:     Tags:−removed:       - Key: String−removed:         Value: String+added:     # Required: Yes+added:     Value: String

 Type: AWS::Athena::WorkGroup Properties:~modified:   Tags: Tags → List of Tag+added:     # Required: Yes+added:     Key: String−removed:     Tags:−removed:       - Key: String−removed:         Value: String+added:     # Required: Yes+added:     Value: String

 Type: AWS::AuditManager::Assessment Properties:+added:   AssessmentReportsDestination:+added:     Destination: String+added:     DestinationType: String+added:   AwsAccount:+added:     Id: String+added:     EmailAddress: String+added:     Name: String+added:   Description: String+added:   FrameworkId: String+added:   Name: String+added:   Roles:+added:     - RoleArn: String+added:       RoleType: String+added:   Scope:+added:     AwsAccounts:  # AWSAccount: see above+added:     AwsServices:+added:       - ServiceName: String+added:   Status: String+added:   Tags:+added:     - Key: String+added:       Value: String−removed:   assessmentReportsDestination:−removed:     destination: String−removed:     destinationType: String−removed:   awsAccount:−removed:     id: String−removed:     emailAddress: String−removed:     name: String−removed:   description: String−removed:   frameworkId: String−removed:   name: String−removed:   roles:−removed:     Roles:−removed:       - roleArn: String−removed:         roleType: String−removed:   scope:−removed:     awsAccounts:−removed:       AWSAccounts:  # AWSAccount: see above−removed:     awsServices:−removed:       AWSServices:−removed:         - serviceName: String−removed:   status: String−removed:   tags:−removed:     Tags:−removed:       - Key: String−removed:         Value: String Fn::GetAtt:+added:   Arn: String+added:   AssessmentId: String+added:   CreationTime: Double+added:   Delegations:+added:     - LastUpdated: Double+added:       ControlSetId: String+added:       CreationTime: Double+added:       CreatedBy: String+added:       RoleArn: String+added:       AssessmentName: String+added:       Comment: String+added:       Id: String+added:       RoleType: String+added:       AssessmentId: String+added:       Status: String+added:   FrameworkId: String−removed:   arn: String−removed:   assessmentId: String−removed:   creationTime: Double−removed:   delegations:−removed:     Delegations:−removed:       - lastUpdated: Double−removed:         controlSetId: String−removed:         creationTime: Double−removed:         createdBy: String−removed:         roleArn: String−removed:         assessmentName: String−removed:         comment: String−removed:         id: String−removed:         roleType: String−removed:         assessmentId: String−removed:         status: String−removed:   frameworkId: String

 Type: AWS::EC2::CarrierGateway Properties:   # Duplicates allowed: Not specified → No~modified:   Tags: Tags → List of Tag+added:     # Required: Yes+added:     Key: String−removed:     Tags:−removed:       - Key: String−removed:         Value: String+added:     # Required: Yes+added:     Value: String

 Type: AWS::EC2::LaunchTemplate Properties:   LaunchTemplateData:     BlockDeviceMappings:       - Ebs:+added:           Throughput: Integer

 Type: AWS::EC2::LocalGatewayRouteTableVPCAssociation Properties:   # Duplicates allowed: Not specified → No~modified:   Tags: Tags → List of Tag+added:     # Required: Yes+added:     Key: String−removed:     Tags:−removed:       - Key: String−removed:         Value: String+added:     # Required: Yes+added:     Value: String

 Type: AWS::EC2::NetworkInsightsAnalysis Properties:−removed:   StatusMessage: String Fn::GetAtt:+added:   StatusMessage: String

 Type: AWS::ElastiCache::User Properties:+added:   Authentication:+added:     Type: String+added:     PasswordCount: Integer   # Duplicates allowed: Not specified → No~modified:   Passwords: PasswordList → List of String+added:   UserGroupIds:+added:     - String Fn::GetAtt:−removed:   Authentication:−removed:     Type: String−removed:     PasswordCount: Integer−removed:   UserGroupIds:−removed:     UserGroupIdList:−removed:       - String

 Type: AWS::ElastiCache::UserGroup Properties:+added:   PendingChanges:+added:     UserIdsToAdd:+added:       - String+added:     UserIdsToRemove:+added:       - String+added:   ReplicationGroupIds:+added:     - String   # Duplicates allowed: Not specified → No~modified:   UserIds: UserIdList → List of String Fn::GetAtt:−removed:   PendingChanges:−removed:     UserIdsToAdd:−removed:       - String−removed:     UserIdsToRemove:−removed:       - String−removed:   ReplicationGroupIds:−removed:     ReplicationGroupIdList:−removed:       - String

 Type: AWS::ElasticLoadBalancingV2::ListenerRule Properties:   Actions:     - AuthenticateCognitoConfig:         # Duplicates allowed: No → Not specified~modified:         AuthenticationRequestExtraParams:           <key>: String~modified:         SessionTimeout: Long → Integer       AuthenticateOidcConfig:         # Duplicates allowed: No → Not specified~modified:         AuthenticationRequestExtraParams:           <key>: String~modified:         SessionTimeout: Long → Integer+added:         UseExistingClientSecret: Boolean Fn::GetAtt:+added:   IsDefault: Boolean+added:   RuleArn: String

 Type: AWS::GameLift::GameServerGroup Properties:~modified:   InstanceDefinitions: InstanceDefinitions → List of InstanceDefinition−removed:     InstanceDefinitions:−removed:       - InstanceType: String−removed:         WeightedCapacity: String+added:     # Required: Yes+added:     InstanceType: String+added:     WeightedCapacity: String~modified:   Tags: Tags → List of Tag+added:     # Required: Yes+added:     Key: String−removed:     Tags:−removed:       - Key: String−removed:         Value: String+added:     # Required: Yes+added:     Value: String~modified:   VpcSubnets: VpcSubnets → List of String

 Type: AWS::ImageBuilder::DistributionConfiguration Properties:   Distributions:+added:     - ContainerDistributionConfiguration: Json

 Type: AWS::IoT::Authorizer Properties:~modified:   Tags: Tags → List of Tag+added:     # Required: Yes+added:     Key: String−removed:     Tags:−removed:       - Json+added:     # Required: Yes+added:     Value: String~modified:   TokenSigningPublicKeys: TokenSigningPublicKeys → Map of String

 Type: AWS::IoT::DomainConfiguration Properties:~modified:   Tags: Tags → List of Tag+added:     # Required: Yes+added:     Key: String−removed:     Tags:−removed:       - Json+added:     # Required: Yes+added:     Value: String

 Type: AWS::IoT::ProvisioningTemplate Properties:~modified:   Tags: Tags → List of Tag+added:     # Required: Yes+added:     Key: String−removed:     Tags:−removed:       - Json+added:     # Required: Yes+added:     Value: String

 Type: AWS::IoTWireless::WirelessDevice Properties:   LoRaWANDevice:     AbpV10X:       # Required: No → Yes~modified:       DevAddr: String       # Required: No → Yes~modified:       SessionKeys:         # Required: No → Yes~modified:         AppSKey: String         # Required: No → Yes~modified:         NwkSKey: String     AbpV11:       # Required: No → Yes~modified:       DevAddr: String       # Required: No → Yes~modified:       SessionKeys:         # Required: No → Yes~modified:         AppSKey: String         # Required: No → Yes~modified:         FNwkSIntKey: String         # Required: No → Yes~modified:         NwkSEncKey: String         # Required: No → Yes~modified:         SNwkSIntKey: String     OtaaV10X:       # Required: No → Yes~modified:       AppEui: String       # Required: No → Yes~modified:       AppKey: String     OtaaV11:       # Required: No → Yes~modified:       AppKey: String       # Required: No → Yes~modified:       JoinEui: String       # Required: No → Yes~modified:       NwkKey: String

 Type: AWS::IoTWireless::WirelessGateway Properties:   LoRaWANGateway:     # Required: No → Yes~modified:     GatewayEui: String     # Required: No → Yes~modified:     RfRegion: String

 Type: AWS::Kendra::DataSource Properties:~modified:   Tags: TagList → List of Tag+added:     # Required: Yes+added:     Key: String−removed:     TagList:−removed:       - Key: String−removed:         Value: String+added:     # Required: Yes+added:     Value: String

 Type: AWS::Kendra::Faq Properties:~modified:   Tags: TagList → List of Tag+added:     # Required: Yes+added:     Key: String−removed:     TagList:−removed:       - Key: String−removed:         Value: String+added:     # Required: Yes+added:     Value: String

 Type: AWS::Kendra::Index Properties:~modified:   DocumentMetadataConfigurations: DocumentMetadataConfigurationList → List of DocumentMetadataConfiguration−removed:     DocumentMetadataConfigurationList:−removed:       - Name: String−removed:         Type: String−removed:         Relevance:−removed:           Freshness: Boolean−removed:           Importance: Integer−removed:           Duration: String−removed:           RankOrder: String−removed:           ValueImportanceItems:−removed:             ValueImportanceItems:−removed:               - Key: String−removed:                 Value: Integer−removed:         Search:−removed:           Facetable: Boolean−removed:           Searchable: Boolean−removed:           Displayable: Boolean−removed:           Sortable: Boolean+added:     # Required: Yes+added:     Name: String+added:     Relevance:+added:       Freshness: Boolean+added:       Importance: Integer+added:       Duration: String+added:       RankOrder: String+added:       ValueImportanceItems:+added:         ValueImportanceItems:+added:           - Key: String+added:             Value: Integer+added:     Search:+added:       Facetable: Boolean+added:       Searchable: Boolean+added:       Displayable: Boolean+added:       Sortable: Boolean+added:     # Required: Yes+added:     Type: String~modified:   Tags: TagList → List of Tag+added:     # Required: Yes+added:     Key: String−removed:     TagList:−removed:       - Key: String−removed:         Value: String+added:     # Required: Yes+added:     Value: String~modified:   UserTokenConfigurations: UserTokenConfigurationList → List of UserTokenConfiguration+added:     JsonTokenTypeConfiguration:+added:       UserNameAttributeField: String+added:       GroupAttributeField: String+added:     JwtTokenTypeConfiguration:+added:       KeyLocation: String+added:       URL: String+added:       SecretManagerArn: String+added:       UserNameAttributeField: String+added:       GroupAttributeField: String+added:       Issuer: String+added:       ClaimRegex: String−removed:     UserTokenConfigurationList:−removed:       - JwtTokenTypeConfiguration:−removed:           KeyLocation: String−removed:           URL: String−removed:           SecretManagerArn: String−removed:           UserNameAttributeField: String−removed:           GroupAttributeField: String−removed:           Issuer: String−removed:           ClaimRegex: String−removed:         JsonTokenTypeConfiguration:−removed:           UserNameAttributeField: String−removed:           GroupAttributeField: String

 Type: AWS::LicenseManager::Grant Properties:   # Duplicates allowed: Not specified → No~modified:   AllowedOperations: AllowedOperationList → List of String   # Duplicates allowed: Not specified → No~modified:   Filters: FilterList → List of Filter−removed:     FilterList:−removed:       - Name: String−removed:         Values:−removed:           StringList:−removed:             - String+added:     # Required: Yes+added:     Name: String+added:     # Required: Yes+added:     Values:+added:       StringList:+added:         - String   # Duplicates allowed: Not specified → No~modified:   GrantArns: ArnList → List of String   # Duplicates allowed: Not specified → No~modified:   GrantedOperations: AllowedOperationList → List of String   # Duplicates allowed: Not specified → No~modified:   Principals: ArnList → List of String   # Duplicates allowed: Not specified → No~modified:   Tags: TagList → List of Tag+added:     # Required: Yes+added:     Key: String−removed:     TagList:−removed:       - Key: String−removed:         Value: String+added:     # Required: Yes+added:     Value: String

 Type: AWS::LicenseManager::License Properties:   # Duplicates allowed: Not specified → No~modified:   Entitlements: EntitlementList → List of Entitlement+added:     AllowCheckIn: Boolean+added:     CheckoutRules:+added:       RuleList:+added:         - Name: String+added:           Value: String+added:           Unit: String−removed:     EntitlementList:−removed:       - Name: String−removed:         Value: String−removed:         MaxCount: Integer−removed:         Overage: Boolean−removed:         Unit: String−removed:         AllowCheckIn: Boolean−removed:         CheckoutRules:−removed:           RuleList:−removed:             - Name: String−removed:               Value: String−removed:               Unit: String+added:     MaxCount: Integer+added:     # Required: Yes+added:     Name: String+added:     Overage: Boolean+added:     # Required: Yes+added:     Unit: String+added:     Value: String   # Duplicates allowed: Not specified → No~modified:   Filters: FilterList → List of Filter−removed:     FilterList:−removed:       - Name: String−removed:         Values:−removed:           StringList:−removed:             - String+added:     # Required: Yes+added:     Name: String+added:     # Required: Yes+added:     Values:+added:       StringList:+added:         - String   # Duplicates allowed: Not specified → No~modified:   LicenseArns: ArnList → List of String   # Duplicates allowed: Not specified → No~modified:   LicenseMetadata: MetadataList → List of Metadata−removed:     MetadataList:−removed:       - Name: String−removed:         Value: String+added:     # Required: Yes+added:     Name: String+added:     # Required: Yes+added:     Value: String   # Duplicates allowed: Not specified → No~modified:   Tags: TagList → List of Tag+added:     # Required: Yes+added:     Key: String−removed:     TagList:−removed:       - Key: String−removed:         Value: String+added:     # Required: Yes+added:     Value: String

 Type: AWS::MediaLive::Channel Properties:+added:   CdiInputSpecification:+added:     Resolution: String   EncoderSettings:     AudioDescriptions:       - CodecSettings:+added:           WavSettings:+added:             CodingMode: String+added:             SampleRate: Double+added:             BitDepth: Double     OutputGroups:       - OutputGroupSettings:           HlsGroupSettings:+added:             DiscontinuityTags: String+added:             IncompleteSegmentBehavior: String           RtmpGroupSettings:+added:             AdMarkers:+added:               - String         Outputs:           - OutputSettings:               ArchiveOutputSettings:                 ContainerSettings:+added:                   RawSettings: {}     VideoDescriptions:       - CodecSettings:+added:           Mpeg2Settings:+added:             ColorSpace: String+added:             FixedAfd: String+added:             GopSizeUnits: String+added:             FramerateNumerator: Integer+added:             GopClosedCadence: Integer+added:             AfdSignaling: String+added:             DisplayAspectRatio: String+added:             ScanType: String+added:             TimecodeInsertion: String+added:             ColorMetadata: String+added:             FramerateDenominator: Integer+added:             GopSize: Double+added:             AdaptiveQuantization: String+added:             SubgopLength: String+added:             FilterSettings:+added:               TemporalFilterSettings:+added:                 PostFilterSharpening: String+added:                 Strength: String+added:             GopNumBFrames: Integer   InputAttachments:     - AutomaticInputFailoverSettings:+added:         ErrorClearTimeMsec: Integer+added:         FailoverConditions:+added:           - FailoverConditionSettings:+added:               AudioSilenceSettings:+added:                 AudioSelectorName: String+added:                 AudioSilenceThresholdMsec: Integer+added:               VideoBlackSettings:+added:                 VideoBlackThresholdMsec: Integer+added:                 BlackDetectThreshold: Double+added:               InputLossSettings:+added:                 InputLossThresholdMsec: Integer       InputSettings:         CaptionSelectors:           - SelectorSettings:+added:               AncillarySourceSettings:+added:                 SourceAncillaryChannelNumber: Integer

 Type: AWS::SageMaker::Device Properties:+added:   # Required: Yes+added:   DeviceFleetName: String Fn::GetAtt:−removed:   DeviceFleetName: String

 Type: AWS::SageMaker::DeviceFleet Properties:+added:   # Required: Yes+added:   DeviceFleetName: String Fn::GetAtt:−removed:   DeviceFleetName: String

 Type: AWS::SSO::InstanceAccessControlAttributeConfiguration Properties:+added:   AccessControlAttributes:+added:     - Key: String+added:       Value:+added:         Source:+added:           AccessControlAttributeValueSourceList:+added:             - String   # Required: Yes → No~modified:   InstanceAccessControlAttributeConfiguration: Json   # Update requires: No interruption → Replacement~modified:   InstanceArn: String

 Type: AWS::SSO::PermissionSet Properties:~modified:   InlinePolicy: String → Json

 Type: AWS::StepFunctions::StateMachine Properties:~modified:   DefinitionSubstitutions: DefinitionSubstitutions → Map of String

 Type: AWS::Transfer::Server Properties:+added:   Domain: String

 Type: AWS::Transfer::User Properties:+added:   PosixProfile:+added:     Uid: Double+added:     SecondaryGids:+added:       - Double+added:     Gid: Double