Version 255.0.0

 Type: AWS::CertificateManager::AcmeDomainValidation Properties:   DomainName: String   PrevalidationOptions:     DnsPrevalidation:       DomainScope:         Wildcards: String         ExactDomain: String         Subdomains: String       HostedZoneId: String   Tags:     - Value: String       Key: String   AcmeEndpointArn: String Fn::GetAtt:   Arn: String

 Type: AWS::CertificateManager::AcmeEndpoint Properties:   CertificateTags:     - Value: String       Key: String   AuthorizationBehavior: String   CertificateAuthority:     PublicCertificateAuthority:       AllowedKeyAlgorithms:         - String   Tags:     - Value: String       Key: String   Contact: String Fn::GetAtt:   EndpointUrl: String   AcmeEndpointArn: String

 Type: AWS::CertificateManager::AcmeExternalAccountBinding Properties:   Expiration:     Type: String     Value: Integer   RoleArn: String   Tags:     - Value: String       Key: String   AcmeEndpointArn: String Fn::GetAtt:   AcmeExternalAccountBindingArn: String

 Type: AWS::Chime::AppInstanceUser Properties:   AppInstanceUserId: String   ExpirationSettings:     ExpirationCriterion: String     ExpirationDays: Integer   Metadata: String   AppInstanceArn: String   Tags:     - Value: String       Key: String   Name: String Fn::GetAtt:   AppInstanceUserArn: String

 Type: AWS::Cognito::UserPoolRegionalConfigurationAttachment Properties:   Status: String   UserPoolTags:     <key>: String   UserPoolId: String   EmailConfiguration:     ReplyToEmailAddress: String     ConfigurationSet: String     EmailSendingAccount: String     SourceArn: String     From: String   SmsConfiguration:     SnsRegion: String     ExternalId: String     SnsCallerArn: String   LambdaConfig:     CreateAuthChallenge: String     PreSignUp: String     KMSKeyID: String     UserMigration: String     PostAuthentication: String     VerifyAuthChallengeResponse: String     PreAuthentication: String     DefineAuthChallenge: String     PreTokenGeneration: String     InboundFederation:       LambdaArn: String       LambdaVersion: String     CustomSMSSender:       LambdaArn: String       LambdaVersion: String     PostConfirmation: String     CustomMessage: String     PreTokenGenerationConfig:       LambdaArn: String       LambdaVersion: String     CustomEmailSender:       LambdaArn: String       LambdaVersion: String

 Type: AWS::Cognito::UserPoolReplica Properties:   UserPoolId: String   RegionName: String   UserPoolTagsAtCreate:     <key>: String

 Type: AWS::Config::Connector Properties:   ConnectorConfiguration:     Azure:       TenantIdentifier: String       ClientIdentifier: String   Tags:     - Value: String       Key: String Fn::GetAtt:   CreatedTime: String   Arn: String   Name: String

 Type: AWS::Connect::TestCase Properties:   Status: String   Description: String   Content: String   InstanceArn: String   EntryPoint:     Type: String     ChatEntryPointParameters:       FlowId: String     VoiceCallEntryPointParameters:       FlowId: String       SourcePhoneNumber: String       DestinationPhoneNumber: String   InitializationData: String   Tags:     - Value: String       Key: String   Name: String Fn::GetAtt:   LastModifiedTime: Double   TestCaseArn: String   LastModifiedRegion: String

 Type: AWS::CustomerProfiles::DomainObjectType Properties:   Description: String   Fields:     <key>:       FeatureType: String       Target: String       ContentType: String       Source: String   DomainName: String   ObjectTypeName: String   EncryptionKey: String   Tags:     - Value: String       Key: String Fn::GetAtt:   LastUpdatedAt: String   CreatedAt: String

 Type: AWS::Lambda::MicrovmImage Properties:   Logging:     CloudWatch:       LogGroup: String       LogStream: String     Disabled: Boolean   Description: String   CpuConfigurations:     - Architecture: String   CodeArtifact:     Uri: String   Name: String   EnvironmentVariables:     - Value: String       Key: String   BaseImageVersion: String   BuildRoleArn: String   AdditionalOsCapabilities:     - String   Hooks:     Port: Integer     MicrovmImageHooks:       Ready: String       Validate: String       ValidateTimeoutInSeconds: Integer       ReadyTimeoutInSeconds: Integer     MicrovmHooks:       RunTimeoutInSeconds: Integer       SuspendTimeoutInSeconds: Integer       TerminateTimeoutInSeconds: Integer       Suspend: String       Run: String       ResumeTimeoutInSeconds: Integer       Terminate: String       Resume: String   Resources:     - MinimumMemoryInMiB: Integer   BaseImageArn: String   EgressNetworkConnectors:     - String   Tags:     - Value: String       Key: String Fn::GetAtt:   State: String   CreatedAt: String   LatestActiveImageVersion: String   LatestFailedImageVersion: String   UpdatedAt: String   ImageArn: String

 Type: AWS::Lambda::NetworkConnector Properties:   Configuration:     VpcEgressConfiguration:       AssociatedComputeResourceTypes:         - String       NetworkProtocol: String       SubnetIds:         - String       SecurityGroupIds:         - String   OperatorRole: String   Tags:     - Value: String       Key: String   Name: String Fn::GetAtt:   State: String   Arn: String

 Type: AWS::MediaLive::Node Properties:   Role: String   NodeInterfaceMappings:     - NetworkInterfaceMode: String       PhysicalInterfaceName: String       LogicalInterfaceName: String   ClusterId: String   SdiSourceMappings:     - CardNumber: Integer       ChannelNumber: Integer       SdiSource: String   Tags:     - Value: String       Key: String   Name: String Fn::GetAtt:   State: String   InstanceArn: String   ConnectionState: String   Id: String   Arn: String   ChannelPlacementGroups:     - String

 Type: AWS::Outposts::Site Properties:   RackPhysicalProperties:     OpticalStandard: String     PowerConnector: String     PowerPhase: String     UplinkGbps: String     MaximumSupportedWeightLbs: String     PowerDrawKva: String     UplinkCount: String     FiberOpticCableType: String     PowerFeedDrop: String   Description: String   ShippingAddress:     AddressLine3: String     DistrictOrCounty: String     AddressLine2: String     StateOrRegion: String     AddressLine1: String     Municipality: String     ContactPhoneNumber: String     PostalCode: String     City: String     CountryCode: String     ContactName: String   Notes: String   Tags:     - Value: String       Key: String   Name: String   OperatingAddress:  # Address: see above Fn::GetAtt:   SiteId: String   SiteArn: String

 Type: AWS::QuickSight::Flow Properties:   Description: String   AwsAccountId: String   Permissions:     - Actions:         - String       Principal: String   FlowDefinition: Json   Name: String Fn::GetAtt:   FlowId: String   CreatedTime: String   StepAliases:     - StepId: String       StepAlias: String   LastUpdatedTime: String   Arn: String   PublishState: String

 Type: AWS::QuickSight::OAuthClientApplication Properties:   OAuthClientApplicationId: String   ClientSecret: String   OAuthClientAuthenticationType: String   DataSourceType: String   ClientId: String   IdentityProviderVpcConnectionProperties:     VpcConnectionArn: String   OAuthAuthorizationEndpointUrl: String   OAuthTokenEndpointUrl: String   Tags:     - Value: String       Key: String   Name: String   OAuthScopes: String Fn::GetAtt:   CreatedTime: String   LastUpdatedTime: String   Arn: String

 Type: AWS::SageMaker::Algorithm Properties:   InferenceSpecification:     SupportedContentTypes:       - String     SupportedRealtimeInferenceInstanceTypes:       - String     Containers:       - ModelInput:           DataInputConfig: String         NearestModelName: String         ContainerHostname: String         ImageDigest: String         FrameworkVersion: String         Environment:           <key>: String         Image: String         IsCheckpoint: Boolean         Framework: String     SupportedTransformInstanceTypes:       - String     SupportedResponseMIMETypes:       - String   AlgorithmDescription: String   TrainingSpecification:     SupportedTrainingInstanceTypes:       - String     TrainingImageDigest: String     SupportedHyperParameters:       - DefaultValue: String         Type: String         Description: String         IsRequired: Boolean         IsTunable: Boolean         Range:           IntegerParameterRangeSpecification:             MinValue: String             MaxValue: String           CategoricalParameterRangeSpecification:             Values:               - String           ContinuousParameterRangeSpecification:             MinValue: String             MaxValue: String         Name: String     SupportsDistributedTraining: Boolean     MetricDefinitions:       - Regex: String         Name: String     TrainingChannels:       - SupportedInputModes:           - String         Description: String         IsRequired: Boolean         SupportedContentTypes:           - String         SupportedCompressionTypes:           - String         Name: String     TrainingImage: String     SupportedTuningJobObjectiveMetrics:       - MetricName: String         Type: String   AlgorithmName: String   Tags:     - Value: String       Key: String   CertifyForMarketplace: Boolean Fn::GetAtt:   CreationTime: String   AlgorithmArn: String

 Type: AWS::SageMaker::Hub Properties:   HubName: String   HubDisplayName: String   HubDescription: String   S3StorageConfig:     S3OutputPath: String   HubSearchKeywords:     - String   Tags:     - Value: String       Key: String Fn::GetAtt:   HubArn: String   CreationTime: String   LastModifiedTime: String   HubStatus: String

 Type: AWS::SageMaker::ModelCardExportJob Properties:   ModelCardExportJobName: String   ModelCardName: String   OutputConfig:     S3OutputPath: String   ModelCardVersion: Integer Fn::GetAtt:   Status: String   ExportArtifacts.S3ExportArtifacts: String   LastModifiedAt: String   CreatedAt: String   ExportArtifacts:     S3ExportArtifacts: String   ModelCardExportJobArn: String

 Type: AWS::SecurityAgent::SecurityRequirementPack Properties:   Status: String   Description: String   KmsKeyId: String   SecurityRequirements:     - Evaluation: String       Description: String       Remediation: String       Domain: String       Name: String   Tags:     - Value: String       Key: String   Name: String Fn::GetAtt:   PackId: String

 Type: AWS::SecurityHub::Connector Properties:   Description: String   Tags:     <key>: String   Name: String   Provider:     Azure:       AWSConfigConnectorArn: String       ScopeConfiguration:         ScopeType: String         ScopeValues:           - String       AzureRegions:         - String Fn::GetAtt:   ConnectorArn: String   LastCheckedAt: String   EnablementStatus: String   CreatedBy: String   Message: String   LastUpdatedAt: String   Issues:     - Message: String       Code: String   ConnectorStatus: String   CreatedAt: String   ConnectorId: String

 Type: AWS::AmazonMQ::Broker Properties:+added:   ResourceShareArns:+added:     - String

 Type: AWS::AppStream::Stack Properties:+added:   AgentAccessConfig:+added:     ScreenResolution: String+added:     ScreenImageFormat: String+added:     ScreenshotsUploadEnabled: Boolean+added:     UserControlMode: String+added:     S3BucketArn: String+added:     Settings:+added:       - Permission: String+added:         AgentAction: String

 Type: AWS::Bedrock::DataSource Properties:   DataSourceConfiguration:+added:     ManagedKnowledgeBaseConnectorConfiguration:+added:       MediaExtractionConfiguration:+added:         VideoExtractionConfiguration:+added:           VideoExtractionStatus: String+added:         AudioExtractionConfiguration:+added:           AudioExtractionStatus: String+added:         ImageExtractionConfiguration:+added:           ImageExtractionStatus: String+added:       ConnectorParameters: Json+added:       DeletionProtectionConfiguration:+added:         DeletionProtectionStatus: String+added:         DeletionProtectionThreshold: Integer

 Type: AWS::Bedrock::KnowledgeBase Properties:   KnowledgeBaseConfiguration:+added:     ManagedKnowledgeBaseConfiguration:+added:       EmbeddingModelConfiguration:+added:         BedrockEmbeddingModelConfiguration:+added:           EmbeddingDataType: String+added:           Video:+added:             - SegmentationConfiguration:+added:                 FixedLengthDuration: Integer+added:           Dimensions: Integer+added:           Audio:+added:             - SegmentationConfiguration:+added:                 FixedLengthDuration: Integer+added:       EmbeddingModelArn: String+added:       ServerSideEncryptionConfiguration:+added:         KmsKeyArn: String+added:       EmbeddingModelType: String

 Type: AWS::BedrockAgentCore::Harness Properties:   Memory:+added:     Disabled: Json+added:     ManagedMemoryConfiguration:+added:       EncryptionKeyArn: String+added:       Strategies:+added:         - String+added:       Arn: String+added:       EventExpiryDuration: Integer   Skills:+added:     - AwsSkills:+added:         Paths:+added:           - String Fn::GetAtt:+added:   Memory.ManagedMemoryConfiguration.Arn: String+added:   Version: String

 Type: AWS::CloudWatch::InsightRule Properties:   # Duplicates allowed: Not specified → No~modified:   Tags:     - Tag

 Type: AWS::CodePipeline::Pipeline Fn::GetAtt:+added:   Arn: String

 Type: AWS::Cognito::UserPool Properties:+added:   IssuerConfiguration:+added:     Type: String+added:   KeyConfiguration:+added:     KeyType: String+added:     KmsKeyArn: String

 Type: AWS::Cognito::UserPoolDomain Properties:+added:   Routing:+added:     Failover:+added:       PrimaryRoute53HealthCheckId: String+added:       SecondaryRegion: String

 Type: AWS::Connect::EvaluationForm Properties:   Items:     - Section:+added:         IsExcludedFromScoring: Boolean         Items:           - Question:               QuestionTypeProperties:                 MultiSelect:                   Options:+added:                     - AutomaticFail: Boolean+added:                       AutomaticFailConfiguration:+added:                         TargetSection: String+added:                       PointsConfiguration:+added:                         PointValue: Integer+added:                         IsBonus: Boolean+added:                       Score: Integer                 Numeric:                   Options:+added:                     - PointsConfiguration:  # QuestionOptionPointsConfiguration: see above                 SingleSelect:                   Options:+added:                     - PointsConfiguration:  # QuestionOptionPointsConfiguration: see above+added:               ScoringConfiguration:+added:                 ScoreThresholds:+added:                   - MaxScorePercentage: Double+added:                     MinScorePercentage: Double+added:                     PerformanceCategory: String+added:                 PointsConfiguration:+added:                   MaxPointValue: Integer+added:                   MinPointValue: Integer+added:                   IsBonus: Boolean+added:                 IsExcludedFromScoring: Boolean             Section:  # EvaluationFormSection: see above+added:         ScoreThresholds:  # EvaluationFormScoreThreshold: see above   ScoringStrategy:+added:     ScoreThresholds:  # EvaluationFormScoreThreshold: see above

 Type: AWS::Connect::Rule Properties:   Actions:+added:     AssignSlaActions:+added:       - SlaAssignmentType: String+added:         CaseSlaConfiguration:+added:           Type: String+added:           FieldId: String+added:           TargetSlaMinutes: Double+added:           Name: String+added:           TargetFieldValues:+added:             - StringValue: String     SendNotificationActions:+added:       - Exclusion:+added:           UserTags:+added:             <key>: String+added:           UserArns:+added:             - String

 Type: AWS::Connect::User Properties:   AfterContactWorkConfigs:     - AfterContactWorkConfig:+added:         AfterContactWorkMode: String       AgentFirstCallbackAfterContactWorkConfig:  # AfterContactWorkConfig: see above

 Type: AWS::DevOpsAgent::Service Properties:   ServiceDetails:     MCPServerSigV4:       AuthorizationConfig:+added:         McpRoleArn: String         # Required: Yes → No~modified:         RoleArn: String Fn::GetAtt:   AdditionalServiceDetails:     MCPServerSigV4:+added:       McpRoleArn: String   AdditionalServiceDetails.MCPServerSigV4:  # RegisteredMCPServerSigV4Details: see above+added:   AdditionalServiceDetails.MCPServerSigV4.McpRoleArn: String

 Type: AWS::ECS::ExpressGatewayService Properties:   # Required: Yes → No~modified:   ExecutionRoleArn: String   # Required: Yes → No~modified:   PrimaryContainer: ExpressGatewayContainer+added:   TaskDefinitionArn: String Fn::GetAtt:   ActiveConfigurations:+added:     - TaskDefinitionArn: String

 Type: AWS::ECS::Service Properties:   DeploymentConfiguration:     DeploymentCircuitBreaker:+added:       ResetOnHealthyTask: Boolean+added:       ThresholdConfiguration:+added:         Type: String+added:         Value: Integer

 Type: AWS::EKS::Cluster Properties:+added:   RollbackConfig:+added:     TimeoutMinutes: Integer

 Type: AWS::EMRContainers::Endpoint Properties:+added:   SessionIdleTimeoutInMinutes: Integer Fn::GetAtt:+added:   AuthProxyUrl: String

 Type: AWS::EMRContainers::VirtualCluster Properties:   # Update requires: No interruption → Replacement~modified:   SecurityConfigurationId: String+added:   SessionEnabled: Boolean

 Type: AWS::EVS::Environment Properties:   # Required: Yes → No~modified:   ConnectivityInfo: ConnectivityInfo   # Required: Yes → No~modified:   LicenseInfo: LicenseInfo   # Required: Yes → No~modified:   SiteId: String   # Required: Yes → No~modified:   VcfHostnames: VcfHostnames

 Type: AWS::ImageBuilder::ImagePipeline Properties:+added:   ImageTags:+added:     <key>: String

 Type: AWS::ImageBuilder::ImageRecipe Properties:   # Update requires: No interruption → Replacement~modified:   AdditionalInstanceConfiguration:     # Update requires: No interruption → Replacement~modified:     SystemsManagerAgent:       # Update requires: No interruption → Replacement~modified:       UninstallAfterBuild: Boolean     # Update requires: No interruption → Replacement~modified:     UserDataOverride: String   # Update requires: No interruption → Replacement~modified:   AmiTags:     <key>: String+added:   AmiWatermarks:+added:     - String

 Type: AWS::Lambda::Function Properties:   Code:+added:     S3ObjectStorageMode: String   DurableConfig:+added:     KMSKeyArn: String

 Type: AWS::MediaConnect::RouterInput Properties:+added:   ContentQualityAnalysisConfiguration:+added:     ContentLevel:+added:       BlackFrames:+added:         State: String+added:         ThresholdSeconds: Integer+added:       SilentAudio:+added:         State: String+added:         ThresholdSeconds: Integer+added:       FrozenFrames:+added:         State: String+added:         ThresholdSeconds: Integer Fn::GetAtt:+added:   ContentQualityAnalysisType: String

 Type: AWS::MSK::Replicator Properties:   KafkaClusters:     - ClientAuthentication:+added:         MTLS:+added:           SecretArn: String         # Required: Yes → No~modified:         SaslScram: KafkaClusterSaslScramAuthentication

 Type: AWS::OpenSearchServerless::Index Properties:   Mappings:     Properties:       <key>:+added:         Analyzer: String+added:         CompressionLevel: String         Properties:  # PropertyMapping: see above+added:         SpaceType: String   Settings:+added:     Analysis:+added:       Analyzer:         <key>:+added:           Type: String+added:           Filter:+added:             - String+added:           CharFilter:+added:             - String+added:           Tokenizer: String

 Type: AWS::PCS::Cluster Properties:   # Update requires: Replacement → No interruption~modified:   Scheduler:     # Update requires: Replacement → No interruption~modified:     Type: String     # Update requires: Replacement → No interruption~modified:     Version: String

 Type: AWS::ResilienceHubV2::System Properties:+added:   SharingEnabled: Boolean

 Type: AWS::Route53Resolver::FirewallRuleGroup Properties:   FirewallRules:     - FirewallRuleType:+added:         PartnerThreatProtection:+added:           Partner: String+added:       Status: String

 Type: AWS::SageMaker::Endpoint Properties:   DeploymentConfig:     AutoRollbackConfiguration:       # Duplicates allowed: Not specified → No~modified:       Alarms:         - Alarm−removed:   EndpointName: String   # Duplicates allowed: Not specified → Yes~modified:   ExcludeRetainedVariantProperties:     - VariantProperty   # Duplicates allowed: Not specified → Yes~modified:   Tags:     - Tag Fn::GetAtt:+added:   EndpointArn: String

 Type: AWS::SecurityAgent::AgentSpace Properties:   IntegratedResources:     - ProviderResources:+added:         - BitbucketCapabilities:+added:             RemediateCode: Boolean+added:             LeaveComments: Boolean+added:           BitbucketRepository:+added:             Name: String+added:             Workspace: String+added:           ConfluenceCapabilities:+added:             FetchDocument: Boolean+added:             UpdateDocument: Boolean+added:             CreateDocument: Boolean+added:           ConfluenceDocument:+added:             PageId: String+added:             SpaceTitle: String+added:             Title: String+added:             SpaceKey: String+added:             Name: String           # Required: Yes → No~modified:           GitHubCapabilities: GitHubCapabilitiesResource           # Required: Yes → No~modified:           GitHubRepository: GitHubRepositoryResource+added:           GitLabCapabilities:+added:             RemediateCode: Boolean+added:             LeaveComments: Boolean+added:           GitLabRepository:+added:             Namespace: String+added:             Name: String

 Type: AWS::SecurityAgent::Pentest Properties:+added:   CleanUpStrategy: String+added:   DisableManagedSkills:+added:     - String

 Type: AWS::SecurityHub::ConnectorV2 Properties:   Provider:+added:     Azure:+added:       AWSConfigConnectorArn: String+added:       ScopeConfiguration:+added:         ScopeType: String+added:         ScopeValues:+added:           - String+added:       AzureRegions:+added:         - String Fn::GetAtt:+added:   EnablementStatus: String+added:   EnablementStatusReason: String+added:   Issues:+added:     - Message: String+added:       Code: String

 Type: AWS::ServiceCatalog::CloudFormationProduct Properties:   # Duplicates allowed: Not specified → Yes~modified:   ProvisioningArtifactParameters:~modified:     - Info: Json → Info+added:         LoadTemplateFromURL: String+added:         ImportFromPhysicalId: String   # Duplicates allowed: Not specified → Yes~modified:   Tags:     - Tag Fn::GetAtt:+added:   Id: String

 Type: AWS::SSM::Parameter Fn::GetAtt:+added:   Arn: String

 Type: AWS::VpcLattice::Service Properties:+added:   IdleTimeoutSeconds: Integer