SSO resource type reference - AWS CloudFormation