Version 248.0.0

Issued

cfn.fyi compares each version of the AWS CloudFormation resource specification with the version before it. See new resource types and changed properties as AWS releases them.

  • added
  • modified
  • removed

01Added resource types4

addedAWS::Chime::AppInstancedocs ↗#Link to AWS::Chime::AppInstance
Type: AWS::Chime::AppInstanceProperties:  Metadata: String  Tags:    - Value: String      Key: String  Name: StringFn::GetAtt:  CreatedTimestamp: Double  LastUpdatedTimestamp: Double  AppInstanceArn: String
addedAWS::Chime::AppInstanceBotdocs ↗#Link to AWS::Chime::AppInstanceBot
Type: AWS::Chime::AppInstanceBotProperties:  Configuration:    Lex:      LexBotAliasArn: String      InvokedBy:        StandardMessages: String        TargetedMessages: String      LocaleId: String      RespondsTo: String      WelcomeIntent: String  Metadata: String  AppInstanceArn: String  Tags:    - Value: String      Key: String  Name: StringFn::GetAtt:  CreatedTimestamp: Double  LastUpdatedTimestamp: Double  AppInstanceBotArn: String
addedAWS::CloudWatch::OTelEnrichmentdocs ↗#Link to AWS::CloudWatch::OTelEnrichment
Type: AWS::CloudWatch::OTelEnrichmentFn::GetAtt:  Status: String  AccountId: String
addedAWS::DevOpsAgent::PrivateConnectiondocs ↗#Link to AWS::DevOpsAgent::PrivateConnection
Type: AWS::DevOpsAgent::PrivateConnectionProperties:  ConnectionConfiguration:    SelfManaged:      ResourceConfigurationId: String    ServiceManaged:      IpAddressType: String      VpcId: String      PortRanges:        - String      Ipv4AddressesPerEni: Integer      HostAddress: String      SubnetIds:        - String      SecurityGroupIds:        - String  Tags:    - Value: String      Key: String  Name: String  Certificate: StringFn::GetAtt:  Status: String  CertificateExpiryTime: String  Arn: String

02Modified resource types46

modifiedAWS::ARCRegionSwitch::Planhistorydocs ↗#Link to AWS::ARCRegionSwitch::Plan
Type: AWS::ARCRegionSwitch::PlanProperties:  Workflows:    - Steps:        - ExecutionBlockConfiguration:added:             LambdaEventSourceMappingConfig:added:               Action: Stringadded:               TimeoutMinutes: Doubleadded:               RegionEventSourceMappings:                <key>:added:                   ExternalId: Stringadded:                   Arn: Stringadded:                   CrossAccountRole: Stringadded:               Ungraceful:added:                 Behavior: String            ParallelConfig:              Steps:  # Step: see above
modifiedAWS::Batch::ConsumableResourcehistorydocs ↗#Link to AWS::Batch::ConsumableResource
Type: AWS::Batch::ConsumableResourceProperties:  # Update requires: Replacement → No interruptionmodified:   Tags:    <key>: String
modifiedAWS::Batch::JobDefinitionhistorydocs ↗#Link to AWS::Batch::JobDefinition
Type: AWS::Batch::JobDefinitionProperties:  ContainerProperties:    Volumes:added:       - S3FilesVolumeConfiguration:added:           FileSystemArn: Stringadded:           AccessPointArn: Stringadded:           RootDirectory: Stringadded:           TransitEncryptionPort: Integer  EcsProperties:    TaskProperties:      - Containers:added:           - StartTimeout: Integeradded:             StopTimeout: Integer        Volumes:  # Volume: see above  NodeProperties:    NodeRangeProperties:      - Container:          Volumes:  # Volume: see above        EcsProperties:          TaskProperties:            - Containers:  # TaskContainerProperties: see above              Volumes:  # Volume: see above
modifiedAWS::Batch::JobQueuehistorydocs ↗#Link to AWS::Batch::JobQueue
Type: AWS::Batch::JobQueueProperties:  # Update requires: Replacement → No interruptionmodified:   Tags:    <key>: String
modifiedAWS::Batch::SchedulingPolicyhistorydocs ↗#Link to AWS::Batch::SchedulingPolicy
Type: AWS::Batch::SchedulingPolicyProperties:  # Update requires: Replacement → No interruptionmodified:   Tags:    <key>: String
modifiedAWS::BedrockAgentCore::BrowserCustomhistorydocs ↗#Link to AWS::BedrockAgentCore::BrowserCustom
Type: AWS::BedrockAgentCore::BrowserCustomProperties:added:   Certificates:added:     - CertificateLocation:added:         SecretArn: Stringadded:   EnterprisePolicies:added:     - Type: Stringadded:       Location:added:         Bucket: Stringadded:         Prefix: String
modifiedAWS::BedrockAgentCore::CodeInterpreterCustomhistorydocs ↗#Link to AWS::BedrockAgentCore::CodeInterpreterCustom
Type: AWS::BedrockAgentCore::CodeInterpreterCustomProperties:added:   Certificates:added:     - CertificateLocation:added:         SecretArn: String
modifiedAWS::BedrockAgentCore::Evaluatorhistorydocs ↗#Link to AWS::BedrockAgentCore::Evaluator
Type: AWS::BedrockAgentCore::EvaluatorProperties:added:   KmsKeyArn: String
modifiedAWS::BedrockAgentCore::GatewayTargethistorydocs ↗#Link to AWS::BedrockAgentCore::GatewayTarget
Type: AWS::BedrockAgentCore::GatewayTargetProperties:  TargetConfiguration:    Mcp:      McpServer:added:         ListingMode: String
modifiedAWS::BedrockAgentCore::Memoryhistorydocs ↗#Link to AWS::BedrockAgentCore::Memory
Type: AWS::BedrockAgentCore::MemoryProperties:added:   IndexedKeys:added:     - Type: Stringadded:       Key: String  MemoryStrategies:    - CustomMemoryStrategy:        Configuration:          EpisodicOverride:            Reflection:added:               MemoryRecordSchema:added:                 MetadataSchema:added:                   - Type: Stringadded:                     ExtractionConfig:added:                       LlmExtractionConfig:added:                         Validation:added:                           StringValidation:added:                             AllowedValues:added:                               - Stringadded:                           NumberValidation:added:                             MinValue: Doubleadded:                             MaxValue: Doubleadded:                           StringListValidation:added:                             AllowedValues:added:                               - Stringadded:                             MaxItems: Integeradded:                         Definition: Stringadded:                         LlmExtractionInstruction: Stringadded:                     Key: Stringadded:         MemoryRecordSchema:  # MemoryRecordSchema: see above      EpisodicMemoryStrategy:added:         MemoryRecordSchema:  # MemoryRecordSchema: see above        ReflectionConfiguration:added:           MemoryRecordSchema:  # MemoryRecordSchema: see above      SemanticMemoryStrategy:added:         MemoryRecordSchema:  # MemoryRecordSchema: see above      SummaryMemoryStrategy:added:         MemoryRecordSchema:  # MemoryRecordSchema: see above      UserPreferenceMemoryStrategy:added:         MemoryRecordSchema:  # MemoryRecordSchema: see above
modifiedAWS::BedrockAgentCore::OAuth2CredentialProviderhistorydocs ↗#Link to AWS::BedrockAgentCore::OAuth2CredentialProvider
Type: AWS::BedrockAgentCore::OAuth2CredentialProviderProperties:  Oauth2ProviderConfigInput:    CustomOauth2ProviderConfig:      # Required: Yes → Nomodified:       ClientId: String      # Required: Yes → Nomodified:       ClientSecret: Stringadded:       OnBehalfOfTokenExchangeConfig:added:         GrantType: Stringadded:         TokenExchangeGrantTypeConfig:added:           ActorTokenContent: Stringadded:           ActorTokenScopes:added:             - StringFn::GetAtt:  Oauth2ProviderConfigOutput:added:     OnBehalfOfTokenExchangeConfig:  # OnBehalfOfTokenExchangeConfig: see aboveadded:   Oauth2ProviderConfigOutput.OnBehalfOfTokenExchangeConfig:  # OnBehalfOfTokenExchangeConfig: see aboveadded:   Oauth2ProviderConfigOutput.OnBehalfOfTokenExchangeConfig.GrantType: Stringadded:   Oauth2ProviderConfigOutput.OnBehalfOfTokenExchangeConfig.TokenExchangeGrantTypeConfig:  # TokenExchangeGrantTypeConfig: see above
modifiedAWS::CloudFront::Distributionhistorydocs ↗#Link to AWS::CloudFront::Distribution
Type: AWS::CloudFront::DistributionProperties:  DistributionConfig:added:     CacheTagConfig:added:       HeaderName: String
modifiedAWS::CloudFront::Functionhistorydocs ↗#Link to AWS::CloudFront::Function
Type: AWS::CloudFront::FunctionProperties:added:   Tags:added:     - Value: Stringadded:       Key: String
modifiedAWS::CloudFront::TrustStorehistorydocs ↗#Link to AWS::CloudFront::TrustStore
Type: AWS::CloudFront::TrustStoreProperties:added:   UseClientCertificateOCSPEndpoint: Boolean
modifiedAWS::CloudWatch::Dashboardhistorydocs ↗#Link to AWS::CloudWatch::Dashboard
Type: AWS::CloudWatch::DashboardProperties:added:   Tags:added:     - Value: Stringadded:       Key: String
modifiedAWS::Cognito::UserPoolhistorydocs ↗#Link to AWS::Cognito::UserPool
Type: AWS::Cognito::UserPoolProperties:added:   WebAuthnFactorConfiguration: String
modifiedAWS::Connect::EvaluationFormhistorydocs ↗#Link to AWS::Connect::EvaluationForm
Type: AWS::Connect::EvaluationFormProperties:  Items:    - Section:        Items:          - Question:              QuestionTypeProperties:                MultiSelect:                  Automation:                    # Required: Yes → Nomodified:                     Options:                      - EvaluationFormMultiSelectQuestionAutomationOption                SingleSelect:                  Automation:                    # Required: Yes → Nomodified:                     Options:                      - EvaluationFormSingleSelectQuestionAutomationOption            Section:  # EvaluationFormSection: see above
modifiedAWS::DataZone::Connectionhistorydocs ↗#Link to AWS::DataZone::Connection
Type: AWS::DataZone::ConnectionProperties:added:   Configurations:added:     - Classification: Stringadded:       Properties:added:         <key>: String  Props:added:     LakehouseProperties:added:       GlueLineageSyncEnabled: Boolean    S3Properties:added:       RegisterS3AccessGrantLocation: Boolean
modifiedAWS::DataZone::Domainhistorydocs ↗#Link to AWS::DataZone::Domain
Type: AWS::DataZone::DomainProperties:  # Required: Yes → Nomodified:   DomainExecutionRole: String
modifiedAWS::DataZone::GroupProfilehistorydocs ↗#Link to AWS::DataZone::GroupProfile
Type: AWS::DataZone::GroupProfileProperties:  # Required: Yes → Nomodified:   GroupIdentifier: Stringadded:   GroupType: Stringadded:   RolePrincipalArn: StringFn::GetAtt:added:   RolePrincipalId: String
modifiedAWS::DataZone::Projecthistorydocs ↗#Link to AWS::DataZone::Project
Type: AWS::DataZone::ProjectProperties:added:   MembershipAssignments:added:     - Designation: Stringadded:       Member:added:         UserIdentifier: Stringadded:         GroupIdentifier: Stringadded:   ProjectCategory: Stringadded:   ProjectExecutionRole: String
modifiedAWS::DataZone::UserProfilehistorydocs ↗#Link to AWS::DataZone::UserProfile
Type: AWS::DataZone::UserProfileProperties:added:   SessionName: StringFn::GetAtt:  Details:    Iam:added:       GroupProfileId: Stringadded:       SessionName: String  Details.Iam:  # IamUserProfileDetails: see aboveadded:   Details.Iam.GroupProfileId: Stringadded:   Details.Iam.SessionName: String
modifiedAWS::DevOpsAgent::AgentSpacehistorydocs ↗#Link to AWS::DevOpsAgent::AgentSpace
Type: AWS::DevOpsAgent::AgentSpaceProperties:added:   Locale: String
modifiedAWS::DevOpsAgent::Associationhistorydocs ↗#Link to AWS::DevOpsAgent::Association
Type: AWS::DevOpsAgent::AssociationProperties:  Configuration:added:     Azure:added:       SubscriptionId: String    MCPServer:      # Required: Yes → Nomodified:       Endpoint: String      # Required: Yes → Nomodified:       Name: String    MCPServerDatadog:      # Required: Yes → Nomodified:       Endpoint: String      # Required: Yes → Nomodified:       Name: Stringadded:     MCPServerGrafana:added:       Endpoint: Stringadded:       Tools:added:         - Stringadded:       EnableWebhookUpdates: Booleanadded:     MCPServerSigV4:added:       Tools:added:         - String    MCPServerSplunk:      # Required: Yes → Nomodified:       Endpoint: String      # Required: Yes → Nomodified:       Name: Stringadded:     PagerDuty:added:       Services:added:         - Stringadded:       CustomerEmail: Stringadded:       EnableWebhookUpdates: Boolean
modifiedAWS::DevOpsAgent::Servicehistorydocs ↗#Link to AWS::DevOpsAgent::Service
Type: AWS::DevOpsAgent::ServiceProperties:  # Update requires: Replacement → No interruptionmodified:   ServiceDetails:added:     AzureIdentity:added:       WebIdentityRoleArn: Stringadded:       TenantId: Stringadded:       ClientId: Stringadded:       WebIdentityTokenAudiences:added:         - Stringadded:     MCPServerSigV4:added:       Description: Stringadded:       Endpoint: Stringadded:       AuthorizationConfig:added:         Region: Stringadded:         Service: Stringadded:         RoleArn: Stringadded:         CustomHeaders:added:           <key>: Stringadded:       Name: Stringadded:     PagerDuty:added:       Scopes:added:         - Stringadded:       AuthorizationConfig:added:         OAuthClientCredentials:added:           ClientId: Stringadded:           ClientName: Stringadded:           ExchangeParameters: Jsonadded:           ClientSecret: StringFn::GetAtt:  AdditionalServiceDetails:added:     AzureIdentity:added:       WebIdentityRoleArn: Stringadded:       TenantId: Stringadded:       ClientId: Stringadded:       WebIdentityTokenAudiences:added:         - Stringadded:     MCPServerSigV4:added:       Description: Stringadded:       Endpoint: Stringadded:       Region: Stringadded:       Service: Stringadded:       RoleArn: Stringadded:       CustomHeaders:added:         <key>: Stringadded:       Name: Stringadded:     PagerDuty:added:       Scopes:added:         - Stringadded:   AdditionalServiceDetails.AzureIdentity:  # RegisteredAzureIdentityDetails: see aboveadded:   AdditionalServiceDetails.AzureIdentity.ClientId: Stringadded:   AdditionalServiceDetails.AzureIdentity.TenantId: Stringadded:   AdditionalServiceDetails.AzureIdentity.WebIdentityRoleArn: Stringadded:   AdditionalServiceDetails.AzureIdentity.WebIdentityTokenAudiences:added:     - Stringadded:   AdditionalServiceDetails.MCPServerSigV4:  # RegisteredMCPServerSigV4Details: see aboveadded:   AdditionalServiceDetails.MCPServerSigV4.CustomHeaders:added:     <key>: Stringadded:   AdditionalServiceDetails.MCPServerSigV4.Description: Stringadded:   AdditionalServiceDetails.MCPServerSigV4.Endpoint: Stringadded:   AdditionalServiceDetails.MCPServerSigV4.Name: Stringadded:   AdditionalServiceDetails.MCPServerSigV4.Region: Stringadded:   AdditionalServiceDetails.MCPServerSigV4.RoleArn: Stringadded:   AdditionalServiceDetails.MCPServerSigV4.Service: Stringadded:   AdditionalServiceDetails.PagerDuty:  # RegisteredPagerDutyDetails: see aboveadded:   AdditionalServiceDetails.PagerDuty.Scopes:added:     - String
modifiedAWS::EC2::VPNConnectionhistorydocs ↗#Link to AWS::EC2::VPNConnection
Type: AWS::EC2::VPNConnectionProperties:  # Update requires: Replacement → No interruptionmodified:   TunnelBandwidth: String
modifiedAWS::ECS::Servicehistorydocs ↗#Link to AWS::ECS::Service
Type: AWS::ECS::ServiceProperties:  DeploymentConfiguration:    LifecycleHooks:      - # Required: Yes → Nomodified:         HookTargetArn: String        # Required: Yes → Nomodified:         RoleArn: Stringadded:         TimeoutConfiguration: Json
modifiedAWS::ElastiCache::CacheClusterhistorydocs ↗#Link to AWS::ElastiCache::CacheCluster
Type: AWS::ElastiCache::CacheClusterProperties:  # Update requires: Some interruptions → No interruptionmodified:   AZMode: Stringremoved:   CacheSecurityGroupNames:removed:     - String  # Update requires: No interruption → Some interruptionsmodified:   IpDiscovery: String  # Duplicates allowed: No → Yesmodified:   LogDeliveryConfigurations:    - LogDeliveryConfigurationRequest  # Update requires: Some interruptions → No interruptionmodified:   NumCacheNodes: Integer  # Update requires: Some interruptions → No interruptionmodified:   PreferredAvailabilityZone: String  # Duplicates allowed: No → Yesmodified:   PreferredAvailabilityZones:    - StringFn::GetAtt:added:   ConfigurationEndpoint:added:     Address: Stringadded:     Port: Stringadded:   RedisEndpoint:  # Endpoint: see above
modifiedAWS::ElastiCache::ReplicationGrouphistorydocs ↗#Link to AWS::ElastiCache::ReplicationGroup
Type: AWS::ElastiCache::ReplicationGroupProperties:  # Update requires: Replacement → No interruptionmodified:   ReplicasPerNodeGroup: Integer
modifiedAWS::EMRServerless::Applicationhistorydocs ↗#Link to AWS::EMRServerless::Application
Type: AWS::EMRServerless::ApplicationProperties:  InteractiveConfiguration:added:     SessionEnabled: Boolean
modifiedAWS::Interconnect::Connectionhistorydocs ↗#Link to AWS::Interconnect::Connection
Type: AWS::Interconnect::ConnectionProperties:added:   RemoteAccount:added:     Identifier: String
modifiedAWS::MediaConnect::FlowVpcInterfacehistorydocs ↗#Link to AWS::MediaConnect::FlowVpcInterface
Type: AWS::MediaConnect::FlowVpcInterfaceProperties:added:   Tags:added:     - Value: Stringadded:       Key: String
modifiedAWS::MediaConvert::Queuehistorydocs ↗#Link to AWS::MediaConvert::Queue
Type: AWS::MediaConvert::QueueProperties:added:   MaximumConcurrentFeeds: Integer
modifiedAWS::MSK::Clusterhistorydocs ↗#Link to AWS::MSK::Cluster
Type: AWS::MSK::ClusterProperties:added:   ZookeeperAccess:added:     Enabled: Boolean
modifiedAWS::ObservabilityAdmin::OrganizationTelemetryRulehistorydocs ↗#Link to AWS::ObservabilityAdmin::OrganizationTelemetryRule
Type: AWS::ObservabilityAdmin::OrganizationTelemetryRuleProperties:  Rule:added:     AllRegions: Booleanadded:     AllowFieldUpdates: Booleanadded:     Regions:added:       - StringFn::GetAtt:added:   RegionStatuses:added:     - Status: Stringadded:       RuleArn: Stringadded:       Region: String
modifiedAWS::ObservabilityAdmin::TelemetryRulehistorydocs ↗#Link to AWS::ObservabilityAdmin::TelemetryRule
Type: AWS::ObservabilityAdmin::TelemetryRuleProperties:  Rule:added:     AllRegions: Booleanadded:     AllowFieldUpdates: Booleanadded:     Regions:added:       - StringFn::GetAtt:added:   RegionStatuses:added:     - Status: Stringadded:       RuleArn: Stringadded:       Region: String
modifiedAWS::ODB::OdbNetworkhistorydocs ↗#Link to AWS::ODB::OdbNetwork
Type: AWS::ODB::OdbNetworkFn::GetAtt:added:   Ec2PlacementGroupIds:added:     - String
modifiedAWS::QuickSight::DataSethistorydocs ↗#Link to AWS::QuickSight::DataSet
Type: AWS::QuickSight::DataSetProperties:  SemanticModelConfiguration:added:     SemanticMetadata:added:       - CustomInstructions:added:           - InlineCustomInstruction:added:               InstructionText: Stringadded:               UploadedDocumentMetadata:added:                 Name: Stringadded:         Description:added:           Text: String    TableMap:      <key>:added:         SemanticMetadata:added:           ColumnMetadata:added:             - ColumnNames:added:                 - Stringadded:               ColumnProperties:added:                 - SemanticType:added:                     GeographicalRole: Stringadded:                   Description:added:                     Text: Stringadded:                   AdditionalNotes:added:                     Text: String
modifiedAWS::RDS::CustomDBEngineVersionhistorydocs ↗#Link to AWS::RDS::CustomDBEngineVersion
Type: AWS::RDS::CustomDBEngineVersionProperties:added:   DatabaseInstallationFiles:added:     - String
modifiedAWS::Route53GlobalResolver::GlobalResolverhistorydocs ↗#Link to AWS::Route53GlobalResolver::GlobalResolver
Type: AWS::Route53GlobalResolver::GlobalResolverProperties:  # Update requires: Replacement → No interruptionmodified:   Regions:    - String
modifiedAWS::Route53Resolver::FirewallRuleGrouphistorydocs ↗#Link to AWS::Route53Resolver::FirewallRuleGroup
Type: AWS::Route53Resolver::FirewallRuleGroupProperties:  FirewallRules:added:     - FirewallRuleType:added:         FirewallAdvancedThreatCategory:added:           Category: Stringadded:         FirewallAdvancedContentCategory:added:           Category: String
modifiedAWS::Route53Resolver::ResolverEndpointhistorydocs ↗#Link to AWS::Route53Resolver::ResolverEndpoint
Type: AWS::Route53Resolver::ResolverEndpointProperties:added:   Dns64Enabled: Booleanadded:   Ipv6InternetAccessEnabled: Boolean
modifiedAWS::RTBFabric::ResponderGatewayhistorydocs ↗#Link to AWS::RTBFabric::ResponderGateway
Type: AWS::RTBFabric::ResponderGatewayProperties:  # Update requires: Some interruptions → No interruptionmodified:   ManagedEndpointConfiguration:    # Update requires: Some interruptions → No interruptionmodified:     AutoScalingGroupsConfiguration:      # Update requires: Some interruptions → No interruptionmodified:       AutoScalingGroupNameList:        - Stringadded:       HealthCheckConfig:added:         Path: Stringadded:         TimeoutMs: Integeradded:         HealthyThresholdCount: Integeradded:         Port: Integeradded:         StatusCodeMatcher: Stringadded:         Protocol: Stringadded:         UnhealthyThresholdCount: Integeradded:         IntervalSeconds: Integer      # Update requires: Some interruptions → No interruptionmodified:       RoleArn: String    # Update requires: Some interruptions → No interruptionmodified:     EksEndpointsConfiguration:      # Update requires: Some interruptions → No interruptionmodified:       ClusterApiServerCaCertificateChain: String      # Update requires: Some interruptions → No interruptionmodified:       ClusterApiServerEndpointUri: String      # Update requires: Some interruptions → No interruptionmodified:       ClusterName: String      # Update requires: Some interruptions → No interruptionmodified:       EndpointsResourceName: String      # Update requires: Some interruptions → No interruptionmodified:       EndpointsResourceNamespace: String      # Update requires: Some interruptions → No interruptionmodified:       RoleArn: String
modifiedAWS::S3Express::DirectoryBuckethistorydocs ↗#Link to AWS::S3Express::DirectoryBucket
Type: AWS::S3Express::DirectoryBucketProperties:  MetricsConfigurations:    - # Required: No → Yesmodified:       Id: String
modifiedAWS::SageMaker::EndpointConfighistorydocs ↗#Link to AWS::SageMaker::EndpointConfig
Type: AWS::SageMaker::EndpointConfigProperties:  ProductionVariants:added:     - InstancePools:added:         - ModelNameOverride: Stringadded:           Priority: Integeradded:           InstanceType: Stringadded:       VariantInstanceProvisionTimeoutInSeconds: Integer  ShadowProductionVariants:  # ProductionVariant: see above
modifiedAWS::VpcLattice::ResourceGatewayhistorydocs ↗#Link to AWS::VpcLattice::ResourceGateway
Type: AWS::VpcLattice::ResourceGatewayProperties:added:   ResourceConfigDnsResolution: String