Version 268.0.0

 Type: AWS::AppFabric::IngestionDestination Properties:   AppBundleArn: String   DestinationConfiguration:     AuditLog:       Destination:         S3Bucket:           BucketName: String           Prefix: String         FirehoseStream:           StreamName: String   IngestionArn: String   ProcessingConfiguration:     AuditLog:       Format: String       Schema: String   Tags:     - Value: String       Key: String Fn::GetAtt:   Status: String   CreatedAt: String   Arn: String   UpdatedAt: String

 Type: AWS::BedrockAgentCore::ConsentPortal Properties:   IdpConfig:     CredentialProviderArn: String     Audience: String     Scopes:       - String   ExecutionRoleArn: String   Description: String   Sources:     - Type: String       Identifier: String   Tags:     - Value: String       Key: String   Name: String Fn::GetAtt:   Status: String   PortalUrl: String   ConsentPortalId: String   ConsentPortalArn: String   CreatedAt: String   UpdatedAt: String

 Type: AWS::CleanRooms::ConfiguredAudienceModelAssociation Fn::GetAtt:   CollaborationIdentifier: String   Description: String   MembershipArn: String   CreateTime: String   CollaborationArn: String   Name: String   MembershipIdentifier: String   ConfiguredAudienceModelAssociationIdentifier: String   ManageResourcePolicies: Boolean   UpdateTime: String   Arn: String   ConfiguredAudienceModelArn: String   Tags:     - Value: String       Key: String

 Type: AWS::CloudFront::FieldLevelEncryptionConfig Properties:   Comment: String   ContentTypeProfileConfig:     ContentTypeProfiles:       - ProfileId: String         Format: String         ContentType: String     ForwardWhenContentTypeIsUnknown: Boolean   QueryArgProfileConfig:     QueryArgProfiles:       - ProfileId: String         QueryArg: String     ForwardWhenQueryArgProfileIsUnknown: Boolean   CallerReference: String Fn::GetAtt:   LastModifiedTime: String   Id: String   Arn: String

 Type: AWS::CloudWatch::Integration Properties:   Credential:     ApiKeyCredential:       ApiKeyValue: String   IntegrationAttributes:     <key>: String   IntegrationType: String   RoleArn: String   Tags:     - Value: String       Key: String   Name: String Fn::GetAtt:   Status: String   IntegrationArn: String   CreatedAt: String   IntegrationId: String   UpdatedAt: String

 Type: AWS::CustomerProfiles::RecommenderFilter Properties:   Description: String   DomainName: String   RecommenderFilterExpression: String   RecommenderSchemaName: String   Tags:     - Value: String       Key: String   RecommenderFilterName: String Fn::GetAtt:   Status: String   CreatedAt: String   RecommenderFilterArn: String

 Type: AWS::EC2::IpamInternetRegistryAssociation Properties:   OrganizationHandle: String   Description: String   IpamId: String   Rir: String   Tags:     - Value: String       Key: String Fn::GetAtt:   IpamInternetRegistryAssociationArn: String   OwnerId: String   State: String   ChildRequestXml: String   IpamInternetRegistryAssociationId: String   IpamRegion: String

 Type: AWS::LicenseManager::LicenseConfiguration Properties:   LicenseCount: Integer   Description: String   DisassociateWhenNotFound: Boolean   LicenseRules:     - String   ProductInformationList:     - ProductInformationFilterList:         - ProductInformationFilterName: String           ProductInformationFilterValue:             - String           ProductInformationFilterComparator: String       ResourceType: String   LicenseCountHardLimit: Boolean   LicenseExpiry: Integer   LicenseCountingType: String   Tags:     - Value: String       Key: String   Name: String Fn::GetAtt:   Status: String   LicenseConfigurationId: String   LicenseConfigurationArn: String   OwnerAccountId: String

 Type: AWS::LicenseManagerUserSubscriptions::LicenseServerEndpoint Properties:   IdentityProviderArn: String   LicenseServerSettings:     ServerType: String     ServerSettings:       RdsSalSettings:         RdsSalCredentialsProvider:           SecretsManagerCredentialsProvider:             SecretId: String   Tags:     - Value: String       Key: String Fn::GetAtt:   ServerType: String   LicenseServerEndpointId: String   LicenseServerEndpointArn: String   CreationTime: String   ServerEndpoint:     Endpoint: String   LicenseServerEndpointProvisioningStatus: String   LicenseServers:     - ProvisioningStatus: String       HealthStatus: String       Ipv6Address: String       Ipv4Address: String   ServerEndpoint.Endpoint: String

 Type: AWS::MediaConvert::CertificateAssociation Properties:   Arn: String

 Type: AWS::Organizations::ResponsibilityTransfer Properties:   Type: String   StartTimestamp: String   Tags:     - Value: String       Key: String   Name: String Fn::GetAtt:   Status: String   Target.ManagementAccountEmail: String   Target:     ManagementAccountId: String     ManagementAccountEmail: String   Source.ManagementAccountId: String   Target.ManagementAccountId: String   EndTimestamp: String   Id: String   OrganizationId: String   Source.ManagementAccountEmail: String   Arn: String   Source:  # TransferParticipant: see above

 Type: AWS::Polly::Lexicon Properties:   Content: String   Name: String Fn::GetAtt:   Alphabet: String   LastModified: String   LanguageCode: String   LexemesCount: Integer   Size: Integer   Arn: String

 Type: AWS::QuickSight::Assignment Properties:   AssignmentName: String   PolicyArn: String   AssignmentStatus: String   Identities: Json   Namespace: String Fn::GetAtt:   AssignmentId: String   Arn: String

 Type: AWS::QuickSight::Brand Properties:   BrandDefinition:     BrandName: String     Description: String     ApplicationTheme:       BrandColorPalette:         Secondary:           Background: String           Foreground: String         Warning:  # Palette: see above         Accent:  # Palette: see above         Primary:  # Palette: see above         Danger:  # Palette: see above         Measure:  # Palette: see above         Dimension:  # Palette: see above         Info:  # Palette: see above         Success:  # Palette: see above       BrandElementStyle:         NavbarStyle:           GlobalNavbar:  # Palette: see above           ContextualNavbar:  # Palette: see above   BrandId: String   Tags:     - Value: String       Key: String Fn::GetAtt:   VersionId: String   BrandStatus: String   CreatedTime: String   AwsAccountId: String   LastUpdatedTime: String   Arn: String   VersionStatus: String

 Type: AWS::QuickSight::Group Properties:   GroupName: String   Description: String   Namespace: String Fn::GetAtt:   PrincipalId: String   Arn: String

 Type: AWS::RDS::Deployment Properties:   BlueGreenDeploymentName: String   TargetAllocatedStorage: Integer   UpgradeTargetStorageConfig: Boolean   TargetDBParameterGroupName: String   TargetDBInstanceClass: String   TargetIops: Integer   TargetStorageThroughput: Integer   TargetDBClusterParameterGroupName: String   TargetEngineVersion: String   Source: String   TargetStorageType: String   Tags:     - Value: String       Key: String Fn::GetAtt:   Status: String   Target: String   Tasks:     - TaskName: String       TaskStatus: String   CreateTime: String   BlueGreenDeploymentIdentifier: String   SwitchoverDetails:     - SourceMember: String       SwitchoverDetailStatus: String       TargetMember: String   Arn: String

 Type: AWS::Rekognition::ProjectVersion Properties:   ProjectArn: String   VersionDescription: String   OutputConfig:     S3Bucket: String     S3KeyPrefix: String   KmsKeyId: String   FeatureConfig:     ContentModeration:       ConfidenceThreshold: Double   VersionName: String Fn::GetAtt:   Status: String   CreationTimestamp: String   BillableTrainingTimeInSeconds: Double   BaseModelVersion: String   EvaluationResult.F1Score: Double   TrainingEndTimestamp: String   ProjectVersionArn: String   Feature: String   EvaluationResult:     F1Score: Double   Tags:     - Value: String       Key: String

 Type: AWS::SecurityAgent::Integration Properties:   PrivateConnectionName: String   KmsKeyId: String   ProviderInput:     Github:       OrganizationName: String       InstallationId: String       State: String       TargetUrl: String       Code: String     Confluence:       InstallationId: String       State: String       SiteUrl: String       Code: String     Bitbucket:       InstallationId: String       State: String       Code: String       Workspace: String     Gitlab:       TokenType: String       AccessToken: String       TargetUrl: String       GroupId: String   DisplayName: String   Tags:     - Value: String       Key: String   Provider: String Fn::GetAtt:   InstallationId: String   IntegrationId: String   ProviderType: String   TargetUrl: String   Arn: String

 Type: AWS::SecurityAgent::PentestJob Properties:   PentestId: String   AgentSpaceId: String Fn::GetAtt:   SourceCode:     - S3Location: String   VpcConfig:     SubnetArns:       - String     VpcArn: String     SecurityGroupArns:       - String   CreatedAt: String   ExcludeRiskTypes:     - String   VpcConfig.VpcArn: String   AllowedDomains:     - Uri: String   VpcConfig.SecurityGroupArns:     - String   NetworkTrafficConfig.CustomHeaders:     - Value: String       Name: String   Endpoints:  # Endpoint: see above   ServiceRole: String   IntegratedRepositories:     - ProviderResourceId: String       Branch: String       IntegrationId: String   DisableManagedSkills:     - String   Status: String   NetworkTrafficConfig:     Rules:       - Pattern: String         Effect: String         NetworkTrafficRuleType: String     CustomHeaders:  # CustomHeader: see above   LogConfig.LogGroup: String   PentestJobId: String   Title: String   Actors:     - Identifier: String       Description: String       Authentication:         Value: String         ProviderType: String       Uris:         - String   UpdatedAt: String   CodeRemediationStrategy: String   ExcludePaths:  # Endpoint: see above   CleanUpStrategy: String   Documents:     - ArtifactId: String       IntegratedDocument:         ResourceId: String         IntegrationId: String       S3Location: String   VpcConfig.SubnetArns:     - String   NetworkTrafficConfig.Rules:  # NetworkTrafficRule: see above   Arn: String   LogConfig.LogStream: String   LogConfig:     LogGroup: String     LogStream: String

 Type: AWS::StorageGateway::NFSFileShare Properties:   ReadOnly: Boolean   GuessMIMETypeEnabled: Boolean   EncryptionType: String   ObjectACL: String   FileShareName: String   DefaultStorageClass: String   ClientList:     - String   Squash: String   GatewayARN: String   Role: String   KMSKey: String   AuditDestinationARN: String   KMSEncrypted: Boolean   BucketRegion: String   RequesterPays: Boolean   NFSFileShareDefaults:     FileMode: String     DirectoryMode: String     OwnerId: Integer     GroupId: Integer   VPCEndpointDNSName: String   LocationARN: String   Tags:     - Value: String       Key: String   NotificationPolicy: String   CacheAttributes:     CacheStaleTimeoutInSeconds: Integer Fn::GetAtt:   Path: String   FileShareId: String   FileShareARN: String   FileShareStatus: String

 Type: AWS::StorageGateway::SMBFileShare Properties:   GuessMIMETypeEnabled: Boolean   ObjectACL: String   AccessBasedEnumeration: Boolean   FileShareName: String   DefaultStorageClass: String   SMBACLEnabled: Boolean   GatewayARN: String   KMSEncrypted: Boolean   RequesterPays: Boolean   CaseSensitivity: String   ValidUserList:     - String   LocationARN: String   AdminUserList:     - String   InvalidUserList:     - String   Tags:     - Value: String       Key: String   CacheAttributes:     CacheStaleTimeoutInSeconds: Integer   ReadOnly: Boolean   EncryptionType: String   Role: String   KMSKey: String   AuditDestinationARN: String   BucketRegion: String   OplocksEnabled: Boolean   Authentication: String   VPCEndpointDNSName: String   NotificationPolicy: String Fn::GetAtt:   Path: String   FileShareId: String   FileShareARN: String   FileShareStatus: String

 Type: AWS::Timestream::InfluxDBBackup Properties:   RetentionDays: Integer   DbResourceId: String   Tags:     - Value: String       Key: String   Name: String Fn::GetAtt:   DbParameterGroupId: String   InfluxAuthParametersSecretArn: String   CreatedAt: String   Port: Integer   DbInstanceType: String   VpcSubnetIds:     - String   DeploymentType: String   ClusterConfiguration:     IngestQueryInstances: Integer     DedicatedCompactor: Boolean     QueryOnlyInstances: Integer   ExpiresAfter: String   LogDeliveryConfiguration.S3Configuration.BucketName: String   ClusterConfiguration.DedicatedCompactor: Boolean   VpcSecurityGroupIds:     - String   NetworkType: String   MaintenanceSchedule.PreferredMaintenanceWindow: String   EngineType: String   MaintenanceSchedule.Timezone: String   Status: String   KmsKeyId: String   ClusterConfiguration.QueryOnlyInstances: Integer   LogDeliveryConfiguration.S3Configuration:     BucketName: String     Enabled: Boolean   ClusterConfiguration.IngestQueryInstances: Integer   FailoverMode: String   AllocatedStorage: Integer   LogDeliveryConfiguration.S3Configuration.Enabled: Boolean   Type: String   LogDeliveryConfiguration:     S3Configuration:  # S3Configuration: see above   DbStorageType: String   Id: String   PubliclyAccessible: Boolean   Arn: String   MaintenanceSchedule:     Timezone: String     PreferredMaintenanceWindow: String

 Type: AWS::AgentRegistry::Registry Properties:+added:   CustomMetadataSchemaConfiguration:+added:     RecordTypeSchemaOverrides:+added:       - RecordType: String+added:         Schema: String+added:     DefaultSchema: String

 Type: AWS::AgentRegistry::RegistryRecord Properties:+added:   CustomMetadata: Json

 Type: AWS::AppSync::GraphQLSchema Properties:   # Update requires: Replacement → No interruption~modified:   ApiId: String Fn::GetAtt:+added:   Id: String

 Type: AWS::ARCRegionSwitch::Plan Properties:   Workflows:     - Steps:         - ExecutionBlockConfiguration:+added:             SsmSendCommandConfig:+added:               RegionDocuments:                 <key>:+added:                   Parameters: Json+added:                   ExternalId: String+added:                   Targets:+added:                     - Values:+added:                         - String+added:                       Key: String+added:                   DocumentVersion: String+added:                   CrossAccountRole: String+added:                   DocumentArn: String+added:               RetryIntervalMinutes: Double+added:               TimeoutMinutes: Double+added:               Ungraceful:+added:                 Behavior: String

 Type: AWS::AutoScalingPlans::ScalingPlan Properties:   ApplicationSource:     # Duplicates allowed: Not specified → Yes~modified:     TagFilters:       - # Duplicates allowed: Not specified → Yes~modified:         Values:           - String   # Duplicates allowed: Not specified → Yes~modified:   ScalingInstructions:     - CustomizedLoadMetricSpecification:         # Duplicates allowed: Not specified → Yes~modified:         Dimensions:           - MetricDimension       # Duplicates allowed: Not specified → Yes~modified:       TargetTrackingConfigurations:         - CustomizedScalingMetricSpecification:             # Duplicates allowed: Not specified → Yes~modified:             Dimensions:  # MetricDimension: see above Fn::GetAtt:+added:   ScalingPlanArn: String

 Type: AWS::BedrockAgentCore::Evaluator Properties:   EvaluatorConfig:     Derived:       ModelConfig:         BedrockEvaluatorModelConfig:           InferenceConfig:+added:             StopSequences:+added:               - String     LlmAsAJudge:       ModelConfig:  # EvaluatorModelConfig: see above

 Type: AWS::BedrockAgentCore::Harness Properties:   AuthorizerConfiguration:     CustomJWTAuthorizer:+added:       AdvertisedScopeMapping:+added:         <key>: String   Memory:     AgentCoreMemoryConfiguration:       RetrievalConfig:         <key>:~modified:           RelevanceScore: String → Double~modified:           TopK: String → Integer   Model:     GeminiModelConfig:+added:       AdditionalParams: Json     OpenAiModelConfig:+added:       ApiBase: String

 Type: AWS::Budgets::Budget Properties:   Budget:     FilterExpression:       # Duplicates allowed: Not specified → Yes~modified:       And:  # Expression: see above       CostCategories:         # Duplicates allowed: Not specified → Yes~modified:         MatchOptions:           - String         # Duplicates allowed: Not specified → Yes~modified:         Values:           - String       Dimensions:         # Duplicates allowed: Not specified → Yes~modified:         MatchOptions:           - String         # Duplicates allowed: Not specified → Yes~modified:         Values:           - String       Not:  # Expression: see above       # Duplicates allowed: Not specified → Yes~modified:       Or:  # Expression: see above       Tags:         # Duplicates allowed: Not specified → Yes~modified:         MatchOptions:           - String         # Duplicates allowed: Not specified → Yes~modified:         Values:           - String     # Duplicates allowed: Not specified → Yes~modified:     Metrics:       - String   # Duplicates allowed: Not specified → Yes~modified:   NotificationsWithSubscribers:     - # Update requires: No interruption → Replacement~modified:       Notification:         # Update requires: No interruption → Replacement~modified:         ComparisonOperator: String         # Update requires: No interruption → Replacement~modified:         NotificationType: String         # Update requires: No interruption → Replacement~modified:         Threshold: Double         # Update requires: No interruption → Replacement~modified:         ThresholdType: String       # Update requires: No interruption → Replacement       # Duplicates allowed: Not specified → Yes~modified:       Subscribers:         - # Update requires: No interruption → Replacement~modified:           Address: String           # Update requires: No interruption → Replacement~modified:           SubscriptionType: String   # Duplicates allowed: Not specified → Yes~modified:   ResourceTags:     - ResourceTag Fn::GetAtt:+added:   Id: String

 Type: AWS::CloudWatch::AnomalyDetector Properties:~modified:   Configuration: MetricConfiguration → Configuration     # Duplicates allowed: Yes → Not specified~modified:     ExcludedTimeRanges:       - Range   # Duplicates allowed: Yes → Not specified~modified:   Dimensions:     - Dimension   MetricMathAnomalyDetector:     # Duplicates allowed: Yes → Not specified~modified:     MetricDataQueries:       - # Update requires: Replacement → No interruption~modified:         Label: String         MetricStat:           Metric:             # Duplicates allowed: Yes → Not specified~modified:             Dimensions:  # Dimension: see above         # Update requires: Replacement → No interruption~modified:         ReturnData: Boolean   SingleMetricAnomalyDetector:     # Duplicates allowed: Yes → Not specified~modified:     Dimensions:  # Dimension: see above Fn::GetAtt:−removed:   AnomalyDetectorId: String PropertyTypes:+added:   MetricDataQueries:+added:     - AccountId: String+added:       ReturnData: Boolean+added:       Expression: String+added:       MetricStat:+added:         Stat: String+added:         Period: Integer+added:         Metric:+added:           MetricName: String+added:           Dimensions:+added:             - Value: String+added:               Name: String+added:           Namespace: String+added:         Unit: String+added:       Label: String+added:       Period: Integer+added:       Id: String

 Type: AWS::Connect::Rule Properties:   Actions:+added:     SendInAppNotificationActions:+added:       - Content:+added:           DeDE: String+added:           PtBR: String+added:           ZhCN: String+added:           IdID: String+added:           ItIT: String+added:           EnUS: String+added:           KoKR: String+added:           FrFR: String+added:           ZhTW: String+added:           EsES: String+added:           JaJP: String+added:         Priority: String+added:         Exclusion:+added:           UserTags:+added:             <key>: String+added:           UserArns:+added:             - String+added:         Recipient:  # InAppNotificationRecipientType: see above

 Type: AWS::DAX::SubnetGroup Properties:   # Duplicates allowed: Not specified → Yes~modified:   SubnetIds:     - String

 Type: AWS::Deadline::Fleet Properties:   Configuration:     ServiceManagedEc2:       InstanceCapabilities:+added:         SoftwareAddOns:+added:           - Name: String

 Type: AWS::DevOpsAgent::AgentSpace Properties:   OperatorApp:+added:     Idp:+added:       IssuerUrl: String+added:       ClientSecret: String+added:       UserIdClaim: String+added:       CreatedAt: String+added:       OperatorAppRoleArn: String+added:       ClientId: String+added:       UpdatedAt: String+added:       Provider: String Fn::GetAtt:+added:   OperatorApp.Idp.CreatedAt: String+added:   OperatorApp.Idp.UpdatedAt: String+added:   OperatorApp.Idp.UserIdClaim: String

 Type: AWS::DevOpsAgent::Association Properties:   Configuration:     Aws:+added:       AgentElevatedRoleArn: String     MCPServerDatadog:+added:       EnabledElevatedTools:+added:         - String     MCPServerGrafana:+added:       EnabledElevatedTools:+added:         - String     Slack:+added:       Bidirectional:+added:         Enabled: Boolean+added:         RoleArn: String     SourceAws:+added:       AgentElevatedRoleArn: String

 Type: AWS::DevOpsAgent::Service Properties:+added:   Name: String   ServiceDetails:+added:     GitHub:+added:       DirectAccess:+added:         OrganizationName: String+added:         TargetUrl: String+added:         TokenValue: String+added:       AppVerification:+added:         OrganizationName: String+added:         TargetUrl: String+added:         AppVariant: String+added:         TokenValue: String Fn::GetAtt:   AdditionalServiceDetails:+added:     GitHub:+added:       Owner: String+added:       OwnerType: String+added:       HostingType: String+added:       TargetUrl: String+added:       AppVariant: String+added:       AuthMode: String+added:   AdditionalServiceDetails.GitHub:  # RegisteredGitHubServiceDetails: see above+added:   AdditionalServiceDetails.GitHub.AppVariant: String+added:   AdditionalServiceDetails.GitHub.AuthMode: String+added:   AdditionalServiceDetails.GitHub.HostingType: String+added:   AdditionalServiceDetails.GitHub.Owner: String+added:   AdditionalServiceDetails.GitHub.OwnerType: String+added:   AdditionalServiceDetails.GitHub.TargetUrl: String

 Type: AWS::DMS::DataMigration Properties:−removed:   DataMigrationIdentifier: String

 Type: AWS::DMS::DataProvider Properties:−removed:   DataProviderIdentifier: String

 Type: AWS::DMS::InstanceProfile Properties:−removed:   InstanceProfileIdentifier: String

 Type: AWS::DMS::MigrationProject Properties:−removed:   InstanceProfileArn: String−removed:   InstanceProfileName: String−removed:   MigrationProjectIdentifier: String Fn::GetAtt:+added:   InstanceProfileArn: String+added:   InstanceProfileName: String

 Type: AWS::EC2::CapacityReservation Properties:   # Update requires: Replacement → No interruption~modified:   TagSpecifications:     - # Update requires: Replacement → No interruption~modified:       ResourceType: String       # Update requires: Replacement → No interruption~modified:       Tags:         - Tag

 Type: AWS::EC2::NetworkInsightsAnalysis Fn::GetAtt:   Explanations:+added:     - TransitGatewayPolicyTable:+added:         Arn: String+added:         Id: String+added:       TransitGatewayPolicyTableEntry:+added:         DestinationPortRange:+added:           From: Integer+added:           To: Integer+added:         SourcePortRange:  # PortRange: see above+added:         SourceCidr: String+added:         RuleNumber: Integer+added:         TargetRouteTableId: String+added:         Protocol: String+added:         DestinationCidr: String   ForwardPathComponents:     - Explanations:  # Explanation: see above+added:       TransitGatewayPolicyTableEntry:  # AnalysisTransitGatewayPolicyTableEntry: see above   ReturnPathComponents:  # PathComponent: see above

 Type: AWS::EC2::VPCPeeringConnection Properties:   # Update requires: Replacement → No interruption~modified:   AssumeRoleRegion: String   # Update requires: Replacement → No interruption~modified:   PeerRoleArn: String

 Type: AWS::ECS::Daemon Properties:+added:   Critical: Boolean

 Type: AWS::ECS::TaskDefinition Properties:   ContainerDefinitions:     - ResourceRequirements:         - # Required: Yes → No~modified:           Value: String

 Type: AWS::EKS::Capability Properties:   Configuration:     ArgoCd:+added:       EndpointPrefix: String

 Type: AWS::EMR::InstanceFleetConfig Properties:   # Duplicates allowed: No → Yes~modified:   InstanceTypeConfigs:     - # Duplicates allowed: No → Yes~modified:       Configurations: List of Configuration → List of ApplicationConfiguration         # Update requires: Replacement → No interruption~modified:         Classification: String         # Update requires: Replacement → No interruption         # Duplicates allowed: No → Not specified~modified:         ConfigurationProperties:           <key>: String         # Update requires: Replacement → No interruption         # Duplicates allowed: No → Yes~modified:         Configurations: List of Configuration → List of ApplicationConfiguration  # ApplicationConfiguration: see above       # Update requires: Replacement → No interruption~modified:       CustomAmiId: String       EbsConfiguration:         # Update requires: Replacement → No interruption         # Duplicates allowed: No → Yes~modified:         EbsBlockDeviceConfigs:           - # Update requires: Replacement → No interruption~modified:             VolumeSpecification:               # Update requires: Replacement → No interruption~modified:               Iops: Integer               # Update requires: Replacement → No interruption~modified:               SizeInGB: Integer               # Update requires: Replacement → No interruption~modified:               Throughput: Integer               # Update requires: Replacement → No interruption~modified:               VolumeType: String             # Update requires: Replacement → No interruption~modified:             VolumesPerInstance: Integer         # Update requires: Replacement → No interruption~modified:         EbsOptimized: Boolean   LaunchSpecifications:     # Update requires: No interruption → Replacement~modified:     OnDemandSpecification:       # Update requires: No interruption → Replacement~modified:       AllocationStrategy: String       # Update requires: No interruption → Replacement~modified:       CapacityReservationOptions:         # Update requires: No interruption → Some interruptions~modified:         CapacityReservationPreference: String         # Update requires: No interruption → Some interruptions~modified:         CapacityReservationResourceGroupArn: String         # Update requires: No interruption → Some interruptions~modified:         UsageStrategy: String     # Update requires: No interruption → Replacement~modified:     SpotSpecification:       # Update requires: No interruption → Replacement~modified:       AllocationStrategy: String       # Update requires: No interruption → Replacement~modified:       BlockDurationMinutes: Integer       # Update requires: No interruption → Replacement~modified:       TimeoutAction: String       # Update requires: No interruption → Replacement~modified:       TimeoutDurationMinutes: Integer   ResizeSpecifications:     OnDemandResizeSpecification:       CapacityReservationOptions:  # OnDemandCapacityReservationOptions: see above Fn::GetAtt:+added:   InstanceFleetId: String

 Type: AWS::EventsV2::Subscriber Properties:   InvokeConfiguration:~modified:     TargetArn: Json → String

 Type: AWS::FSx::Snapshot Properties:   # Duplicates allowed: Not specified → Yes~modified:   Tags:     - Tag Fn::GetAtt:+added:   Id: String

 Type: AWS::FSx::StorageVirtualMachine Properties:   ActiveDirectoryConfiguration:     SelfManagedActiveDirectoryConfiguration:       # Duplicates allowed: Not specified → Yes~modified:       DnsIps:         - String   # Duplicates allowed: Not specified → Yes~modified:   Tags:     - Tag

 Type: AWS::FSx::Volume Properties:   OntapConfiguration:     # Update requires: No interruption → Replacement~modified:     AggregateConfiguration:       # Duplicates allowed: Not specified → Yes~modified:       Aggregates:         - String   OpenZFSConfiguration:     # Duplicates allowed: Not specified → Yes~modified:     NfsExports:       - # Duplicates allowed: Not specified → Yes~modified:         ClientConfigurations:           - # Duplicates allowed: Not specified → Yes~modified:             Options:               - String     # Duplicates allowed: Not specified → Yes~modified:     Options:       - String     # Duplicates allowed: Not specified → Yes~modified:     UserAndGroupQuotas:       - UserAndGroupQuotas   # Duplicates allowed: Not specified → Yes~modified:   Tags:     - Tag

 Type: AWS::GameLift::ContainerGroupDefinition Properties:   GameServerContainerDefinition:+added:     Vcpu: Double

 Type: AWS::HealthLake::FHIRDatastore Properties:+added:   AnalyticsConfiguration:+added:     Status: String   # Update requires: Replacement → No interruption~modified:   DatastoreName: String   # Update requires: Replacement → No interruption~modified:   IdentityProviderConfiguration:     # Update requires: Replacement → No interruption~modified:     AuthorizationStrategy: String     # Update requires: Replacement → No interruption~modified:     FineGrainedAuthorizationEnabled: Boolean     # Update requires: Replacement → No interruption~modified:     IdpLambdaArn: String     # Update requires: Replacement → No interruption~modified:     Metadata: String+added:   NlpConfiguration:+added:     Status: String+added:   ProfileConfiguration:+added:     DefaultProfiles:+added:       - String

 Type: AWS::InspectorV2::Filter Properties:   FilterCriteria:+added:     EcrImageInUseCount:+added:       - LowerInclusive: Double+added:         UpperInclusive: Double

 Type: AWS::Lambda::NetworkConnector Properties:   Configuration:     VpcEgressConfiguration:       # Required: No → Yes~modified:       NetworkProtocol: String       # Required: No → Yes~modified:       SecurityGroupIds:         - String Fn::GetAtt:+added:   LatestVersion: Integer+added:   LatestVersionArn: String

 Type: AWS::Lambda::WebFunctionRevision Properties:   ServiceConfig:+added:     EgressNetworkConnectorArn: String

 Type: AWS::MediaConnect::Flow Properties:   Source:     NdiSourceSettings:+added:       AudioReferenceLevel: Integer

 Type: AWS::MediaConnect::FlowOutput Properties:+added:   NdiAudioReferenceLevel: Integer

 Type: AWS::MediaLive::InputSecurityGroup Properties:   # Update requires: Replacement → No interruption~modified:   Tags: Json → Map of String   # Duplicates allowed: Not specified → Yes~modified:   WhitelistRules: List of InputWhitelistRuleCidr → List of InputWhitelistRule Fn::GetAtt:+added:   Id: String+added:   Inputs:+added:     - String

 Type: AWS::MediaPackageV2::OriginEndpoint Properties:   DashManifests:     - FilterConfiguration:+added:         Multiview:+added:           Layout: String+added:           Sources:+added:             - String   HlsManifests:     - FilterConfiguration:  # FilterConfiguration: see above   LowLatencyHlsManifests:~modified:     - FilterConfiguration: FilterConfiguration → LowLatencyHlsFilterConfiguration   MssManifests:~modified:     - FilterConfiguration: FilterConfiguration → MssFilterConfiguration   Segment:     Encryption:       SpekeKeyProvider:+added:         ContentKeyPeriodConfiguration:+added:           ContentKeyPeriodTiming: String+added:         SpekeVersion: String

 Type: AWS::MediaTailor::PlaybackConfiguration Properties:+added:   BeaconingConfiguration:+added:     ClientSide:+added:       ReportingMode: String+added:       AdditionalEventTypes:+added:         - String

 Type: AWS::PaymentCryptography::Key Fn::GetAtt:   ReplicationStatus:     <key>:+added:       KmsKeyArn: String+added:       KmsKeyId: String

 Type: AWS::QuickSight::DataSource Properties:   AlternateDataSourceParameters:     - DatabricksParameters:+added:         AuthenticationType: String+added:         OAuthParameters:+added:           TokenProviderUrl: String+added:           OAuthScope: String+added:           IdentityProviderVpcConnectionProperties:+added:             VpcConnectionArn: String+added:           IdentityProviderResourceUri: String   Credentials:     CredentialPair:       AlternateDataSourceParameters:  # DataSourceParameters: see above+added:     OAuthClientCredentials:+added:       Username: String+added:       ClientSecret: String+added:       ClientId: String   DataSourceParameters:  # DataSourceParameters: see above

 Type: AWS::Route53::HostedZone Properties:+added:   DelegationSetId: String

 Type: AWS::SES::Tenant Properties:+added:   ReputationEntity:+added:     Policy:+added:       ReputationEntityPolicy: String+added:   SuppressionAttributes:+added:     SuppressionScope: String+added:     SuppressedReasons:+added:       - String

 Type: AWS::Transfer::Server Properties:+added:   CreateWithHostKey: Boolean