Version 246.0.0

 Type: AWS::Batch::ComputeEnvironment Properties:   ComputeResources:     Ec2Configuration:+added:       - BatchImageStatus: String

 Type: AWS::EC2::ClientVpnEndpoint Properties:+added:   TransitGatewayConfiguration:+added:     TransitGatewayId: String+added:     AvailabilityZoneIds:+added:       - String+added:     AvailabilityZones:+added:       - String

 Type: AWS::EC2::ClientVpnTargetNetworkAssociation Properties:+added:   AvailabilityZone: String+added:   AvailabilityZoneId: String

 Type: AWS::EC2::EC2Fleet Properties:   LaunchTemplateConfigs:     - LaunchTemplateSpecification:+added:         LaunchTemplateSpecificationUserData: String       Overrides:+added:         - IamInstanceProfile:+added:             Arn: String+added:             Name: String+added:           KeyName: String+added:           MetadataOptions:+added:             HttpPutResponseHopLimit: Integer+added:             HttpTokens: String+added:             HttpEndpoint: String+added:           NetworkInterfaces:+added:             - Description: String+added:               PrivateIpAddress: String+added:               PrivateIpAddresses:+added:                 - PrivateIpAddress: String+added:                   Primary: Boolean+added:               SecondaryPrivateIpAddressCount: Integer+added:               DeviceIndex: Integer+added:               Ipv6Addresses:+added:                 - Ipv6Address: String+added:               SubnetId: String+added:               AssociatePublicIpAddress: Boolean+added:               NetworkCardIndex: Integer+added:               NetworkInterfaceId: String+added:               InterfaceType: String+added:               Groups:+added:                 - String+added:               Ipv6AddressCount: Integer+added:               DeleteOnTermination: Boolean

 Type: AWS::ECS::CapacityProvider Properties:   ManagedInstancesProvider:+added:     AutoRepairConfiguration:+added:       ActionsStatus: String

 Type: AWS::Glue::Table Properties:+added:   Name: String   OpenTableFormatInput:     IcebergInput:+added:       IcebergTableInput:+added:         Schema:+added:           Type: String+added:           Fields:+added:             - Type: String+added:               Required: Boolean+added:               Doc: String+added:               Id: Integer+added:               Name: String+added:           SchemaId: Integer+added:           IdentifierFieldIds:+added:             - Integer+added:         WriteOrder:+added:           Fields:+added:             - SourceId: Integer+added:               NullOrder: String+added:               Transform: String+added:               Direction: String+added:           OrderId: Integer+added:         Properties: Json+added:         PartitionSpec:+added:           Fields:+added:             - SourceId: Integer+added:               FieldId: Integer+added:               Transform: String+added:               Name: String+added:           SpecId: Integer+added:         Location: String   # Required: Yes → No~modified:   TableInput:+added:     ViewDefinition:+added:       SubObjects:+added:         - String+added:       IsProtected: Boolean+added:       Definer: String+added:       Representations:+added:         - ViewOriginalText: String+added:           ViewExpandedText: String+added:           ValidationConnection: String+added:           Dialect: String+added:           DialectVersion: String

 Type: AWS::IoT::TopicRule Properties:−removed:   Tags:−removed:     - Value: String−removed:       Key: String   TopicRulePayload:     # Duplicates allowed: Yes → No~modified:     Actions:−removed:       - CloudwatchLogs:−removed:           BatchMode: Boolean−removed:           LogGroupName: String−removed:           RoleArn: String         Firehose:−removed:           BatchMode: Boolean         Http:−removed:           BatchConfig:−removed:             MaxBatchOpenMs: Integer−removed:             MaxBatchSize: Integer−removed:             MaxBatchSizeBytes: Integer−removed:           EnableBatching: Boolean         IotAnalytics:−removed:           BatchMode: Boolean         IotEvents:−removed:           BatchMode: Boolean−removed:         Kafka:−removed:           Partition: String−removed:           ClientProperties:−removed:             <key>: String−removed:           Headers:−removed:             - Value: String−removed:               Key: String−removed:           Topic: String−removed:           DestinationArn: String−removed:           Key: String−removed:         Location:−removed:           TrackerName: String−removed:           DeviceId: String−removed:           Latitude: String−removed:           Longitude: String−removed:           Timestamp:−removed:             Value: String−removed:             Unit: String−removed:           RoleArn: String−removed:         OpenSearch:−removed:           Type: String−removed:           Endpoint: String−removed:           Index: String−removed:           Id: String−removed:           RoleArn: String         Republish:−removed:           Headers:−removed:             CorrelationData: String−removed:             UserProperties:−removed:               - Value: String−removed:                 Key: String−removed:             PayloadFormatIndicator: String−removed:             ContentType: String−removed:             MessageExpiry: String−removed:             ResponseTopic: String         S3:−removed:           CannedAcl: String−removed:         Timestream:−removed:           TableName: String−removed:           DatabaseName: String−removed:           Dimensions:−removed:             - Value: String−removed:               Name: String−removed:           Timestamp:−removed:             Value: String−removed:             Unit: String−removed:           RoleArn: String     ErrorAction:  # Action: see above     # Required: No → Yes~modified:     RuleDisabled: Boolean

 Type: AWS::Logs::ResourcePolicy Properties:~modified:   PolicyDocument: String → Json

 Type: AWS::MediaConnect::RouterInput Properties:   Configuration:+added:     MediaLiveChannel:+added:       MediaLiveChannelArn: String+added:       MediaLivePipelineId: String+added:       MediaLiveChannelOutputName: String+added:       SourceTransitDecryption:+added:         EncryptionKeyType: String+added:         EncryptionKeyConfiguration:+added:           SecretsManager:+added:             SecretArn: String+added:             RoleArn: String+added:           Automatic: Json

 Type: AWS::MSK::Replicator Properties:   KafkaClusters:     - # Required: Yes → No~modified:       AmazonMskCluster: AmazonMskCluster+added:       ApacheKafkaCluster:+added:         ApacheKafkaClusterId: String+added:         BootstrapBrokerString: String+added:       ClientAuthentication:+added:         SaslScram:+added:           SecretArn: String+added:           Mechanism: String+added:       EncryptionInTransit:+added:         EncryptionType: String+added:         RootCaCertificate: String       # Required: Yes → No~modified:       VpcConfig: KafkaClusterClientVpcConfig+added:   LogDelivery:+added:     ReplicatorLogDelivery:+added:       S3:+added:         Bucket: String+added:         Enabled: Boolean+added:         Prefix: String+added:       Firehose:+added:         DeliveryStream: String+added:         Enabled: Boolean+added:       CloudWatchLogs:+added:         LogGroup: String+added:         Enabled: Boolean   ReplicationInfoList:     - ConsumerGroupReplication:+added:         ConsumerGroupOffsetSyncMode: String       # Required: Yes → No~modified:       SourceKafkaClusterArn: String+added:       SourceKafkaClusterId: String       # Required: Yes → No~modified:       TargetKafkaClusterArn: String+added:       TargetKafkaClusterId: String

 Type: AWS::NeptuneGraph::Graph Properties:+added:   KmsKeyIdentifier: String

 Type: AWS::S3Express::DirectoryBucket Properties:+added:   InventoryConfigurations:+added:     - Destination:+added:         BucketArn: String+added:         Format: String+added:         BucketAccountId: String+added:         Prefix: String+added:       OptionalFields:+added:         - String+added:       IncludedObjectVersions: String+added:       Enabled: Boolean+added:       Id: String+added:       Prefix: String+added:       ScheduleFrequency: String

 Type: AWS::SageMaker::Cluster Properties:   InstanceGroups:     - # Required: Yes → No~modified:       LifeCycleConfig:         # Required: Yes → No~modified:         OnCreate: String+added:         OnInitComplete: String         # Required: Yes → No~modified:         SourceS3Uri: String

 Type: AWS::SageMaker::Domain Properties:   # Update requires: Replacement → No interruption~modified:   Tags:     - Tag

 Type: AWS::SES::MailManagerIngressPoint Properties:   IngressPointConfiguration:+added:     TlsAuthConfiguration:+added:       TrustStore:+added:         KmsKeyArn: String+added:         CrlContent: String+added:         CAContent: String+added:   TlsPolicy: String

 Type: AWS::SES::MailManagerRuleSet Properties:   Rules:     - Actions:+added:         - Bounce:+added:             Sender: String+added:             SmtpReplyCode: String+added:             DiagnosticMessage: String+added:             Message: String+added:             ActionFailurePolicy: String+added:             StatusCode: String+added:             RoleArn: String+added:           InvokeLambda:+added:             FunctionArn: String+added:             RetryTimeMinutes: Integer+added:             InvocationType: String+added:             ActionFailurePolicy: String+added:             RoleArn: String       Conditions:         - StringExpression:             Evaluate:+added:               ClientCertificateAttribute: String       Unless:  # RuleCondition: see above