| Change | Description | Date |
|---|
Updated resource | The following resource was updated: AWS::GuardDuty::Detector.
-
AWS::GuardDuty::Detector
-
Use the CFNDataSourceConfigurations property to specify which optional data sources are enabled for a detector.
| January 27, 2022 |
Updated resource | The following resource was updated: AWS::IVS::RecordingConfiguration
-
AWS::IVS::RecordingConfiguration
-
Use the ThumbnailConfiguration property to specify an
Amazon IVS ThumbnailConfiguration, which stores configuration
information related to generating thumbnail images for your live stream.
| January 27, 2022 |
Updated resources | The following resources were updated: AWS::DataBrew::Job
-
AWS::DataBrew::Job
-
Add BucketOwner parameter to the S3Location data type to define the owner of
the specified S3 bucket.
| January 20, 2022 |
Updated resource | The following resources were updated:
AWS::Location::Tracker, | January 20, 2022 |
New resources | The following resources were added: AWS::Lightsail::Certificate, AWS::Lightsail::Container, and AWS::Lightsail::Distribution
-
AWS::Lightsail::Certificate
-
Use the AWS::Lightsail::Certificate resource to specify an Amazon Lightsail certificate that you can use with a Lightsail content delivery network (CDN) distribution and a container service.
-
AWS::Lightsail::Container
-
Use the AWS::Lightsail::Container resource to specify an Amazon Lightsail container service.
-
AWS::Lightsail::Distribution
-
Use the AWS::Lightsail::Distribution resource to specify an Amazon Lightsail CDN distribution.
| January 20, 2022 |
Updated resource | The following resources were updated: AWS::AppSync::Resolver and
AWS::AppSync::FunctionConfiguration
-
AWS::AppSync::Resolver
-
Use the MaxBatchSize property to specify the maximum number
of resolver request inputs that will be sent to a single AWS Lambda function
in a BatchInvoke operation.
-
AWS::AppSync::FunctionConfiguration
-
Use the MaxBatchSize property to specify the maximum number
of resolver request inputs that will be sent to a single AWS Lambda function in a BatchInvoke operation.
| January 13, 2022 |
Updated resource | The following resource was updated: AWS::FMS::Policy.
-
AWS::FMS::Policy
-
The AWS::FMS::Policy resource now allows you to manage Shield Advanced automatic application layer DDoS mitigation for Shield Advanced policies that you use for Amazon CloudFront distributions.
| January 7, 2022 |
Updated resource | The following property was updated: AWS::EKS::Cluster KubernetesNetworkConfig | January 6, 2022 |
Updated resource | The following property type was updated: AWS::Lex::Bot.
- AWS::Lex::Bot
-
In the ExternalSourceSetting property type, use the
GrammarSlotTypeSetting property to
specify that the slot type is defined by an external
grammar.
In the GrammarSlotTypeSetting property type, use
the Source property to specify the location
of a file that contains a grammar defining the slot
type.
In the GrammarSlotTypeSource property type, use the
KmsKeyArn, S3BucketName,
and S3ObjectKey properties to specify the
S3 bucket location of a file that contains a grammar
defining the slot type.
| January 6, 2022 |
New resources | The following resources were added: AWS::Lightsail::Alarm, AWS::Lightsail::Bucket, AWS::Lightsail::LoadBalancer, and AWS::Lightsail::LoadBalancerTlsCertificate | January 6, 2022 |
New resource | The following resource was added: AWS::InspectorV2::Filter. | January 6, 2022 |
New resource | The following resource is new: AWS::IoT::JobTemplate | January 6, 2022 |
New resources | The following resources were added:
AWS::AppStream::ApplicationEntitlementAssociation and
AWS::AppStream::Entitlement | January 5, 2022 |
Updated resources | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup.
-
AWS::WAFv2::WebACL
-
You can now use single regular expression (regex) match statements with RegexMatchStatement. You can
now specify a CAPTCHA rule action.
-
AWS::WAFv2::RuleGroup
-
You can now use single regular expression (regex) match statements with RegexMatchStatement. You can
now specify a CAPTCHA rule action.
| December 9, 2021 |
Updated resource | The following resource was updated: AWS::Kinesis::Stream.
-
AWS::Kinesis::Stream
-
Use the StreamModeDetails property to specify the capacity
mode to which you want to set your data stream. Currently, in
Kinesis Data Streams, you can choose between an on-demand capacity mode and a provisioned capacity mode for your data
streams.
| December 9, 2021 |
Properties updated | For the AWS::Chatbot::SlackChannelConfiguration resource, the GuardrailPolicies property was updated and the UserRoleRequired property was added. | December 9, 2021 |
New resources | The following resources were added: AWS::Lex:Bot,
AWS::Lex::BotAlias, AWS::Lex::BotVersion, and
AWS::Lex::ResourcePolicy.
-
AWS::Lex::Bot
-
Use the AWS::Lex::Bot resource to
specify an Amazon Lex chatbot.
-
AWS::Lex::BotAlias
-
Use the AWS::Lex::BotAlias resource to
specify an alias for an Amazon Lex
chatbot.
-
AWS::Lex::BotVersion
-
Use the AWS::Lex::BotVersion resource to
specify a version of an Amazon Lex
chatbot.
-
AWS::Lex::ResourcePolicy
-
Use the AWS::Lex::ResourcePolicy
resource to specify a new resource policy for an Amazon Lex chatbot.
| December 9, 2021 |
New resources | The following resources were added: AWS::AppSync::DomainName and
AWS::AppSync::DomainNameApiAssociation | December 6, 2021 |
Updated resources | The following resource was updated: AWS::WAFv2::LoggingConfiguration.
-
AWS::WAFv2::LoggingConfiguration
-
You can now log web ACL traffic to an Amazon CloudWatch Logs log group or an Amazon Simple Storage Service (Amazon S3) bucket. These options
are in addition to the existing option of logging to an Amazon Kinesis Data Firehose.
| December 3, 2021 |
Updated resource | The following resource was updated: AWS::S3::StorageLens. | December 3, 2021 |
Updated resource | The following resource was updated: AWS::S3::Bucket OwnershipControlsRule.
-
AWS::S3::Bucket OwnershipControlsRule
-
Updated ObjectOwnership property to add a new allowed value: BucketOwnerEnforced. You can apply this S3 Object Ownership setting to disable access control lists (ACLs) and take ownership of all the objects in your bucket.
| December 3, 2021 |
Updated resource | The following resource was updated: AWS::SageMaker::EndpointConfig
-
AWS::SageMaker::EndpointConfig
-
Use the ServerlessConfig property to specify a serverless configuration for a serverless endpoint.
Use the MaxConcurrency property to specify the maximum concurrent invocations for a serverless endpoint.
Use the MemorySizeInMB property to specify the memory size (in MB) for a serverless endpoint.
| December 3, 2021 |
New resources | The following resources were added: AWS::AmplifyUIBuilder::Component and AWS::AmplifyUIBuilder::Theme.
-
AWS::AmplifyUIBuilder::Component
-
Use the
AWS::AmplifyUIBuilder::Component resource to specify a component within an Amplify app.
-
AWS::AmplifyUIBuilder::Theme
-
Use the
AWS::AmplifyUIBuilder::Theme resource to specify a collection of style settings to apply globally to the components in an Amplify app.
| December 3, 2021 |
New resources | The following resources were added: | December 3, 2021 |
New resource | The following resources were added: AWS::Connect::ContactFlow and
AWS::Connect::ContactFlowModule | December 3, 2021 |
New resource | The following resources were added: AWS::Evidently::Experiment, AWS::Evidently::Feature,
AWS::Evidently::Launch, and AWS::Evidently::Project
-
Evidently resource type reference
-
Use Amazon CloudWatch Evidently to safely validate new features by serving them to a
specified percentage
of your users while you roll out the feature. You can monitor the performance of the new feature
to help you decide when to ramp up traffic to your users. This helps you
reduce risk and identify unintended consequences before you fully launch the feature.
You can also conduct A/B experiments to make feature design decisions based on evidence
and data.
For more information,
see
Perform launches and A/B experiments with CloudWatch Evidently.
| December 3, 2021 |
New resource | The following new resource was added: AWS::FSx::Snapshot
- AWS::FSx::Snapshot
-
Use the Snapshot resource to create a snapshot of an FSx for ONTAP or Amazon FSx for OpenZFS volume.
| December 3, 2021 |
New resource | The following new resource was added: AWS::FSx::StorageVirtualMachine | December 3, 2021 |
New resource | The following new resource was added: AWS::FSx::Volume
- AWS::FSx::Volume
-
Use the Volume resource to create an FSx for ONTAP or Amazon FSx for OpenZFS volume.
| December 3, 2021 |
New resource | The following resource was added: AWS::RUM::AppMonitor. | December 3, 2021 |
New resource | The following resource was added: AWS::Timestream::ScheduledQuery.
-
AWS::Timestream::ScheduledQuery
-
Use the
AWS::Timestream::ScheduledQuery resource to create a new scheduled query for an existing table in Amazon Timestream.
| December 3, 2021 |
Updated resources | AWS::ElastiCache::ReplicationGroup.
-
AWS::ElastiCache::ReplicationGroup
-
The data-tiering-enabled parameter enables data tiering. Data tiering is only supported for replication groups using the r6gd node type. If you elect not to use data-tiering, set
the parameter to no-data-tiering-enabled.
For more information, see Data tiering.
| November 23, 2021 |
Updated resource | The following resource was updated: AWS::Logs::LogGroup. | November 22, 2021 |
Import stacks to stack set | The AWS CloudFormation stack import operation can import existing stacks into new or
existing stack sets, so that you can migrate existing stacks to a stack set in one operation for service-managed stacks. For more information, see Importing stacks into a stack set for service-managed stacks. | November 22, 2021 |
Updated resources | The following resources were updated: AWS::AppStream::Fleet
-
AWS::AppStream::Fleet
-
Use the FleetType property to specify an ELASTIC fleet.
Use the Platform property to specify platform of the fleet.
Use the MaxConcurrentSessions property to specify the maximum concurrent sessions of an Elastic fleet.
Use the UsbDeviceFilterStrings property to specify the USB device filter strings for an Elastic fleet..
| November 18, 2021 |
Updated resources | The following resource was updated: AWS::CloudFormation::StackSet.
-
AWS::CloudFormation::StackSet
-
Use the ManagedExecution property to specify whether StackSets performs non-conflicting operations concurrently and queues conflicting operations.
| November 18, 2021 |
Updated resources | The following resources were updated: AWS::DataBrew::Job,
AWS::DataBrew::Ruleset
-
AWS::DataBrew::Job
-
Updates to support the following features: handling personally
identifiable information (PII), data quality rules, and custom SQL
queries.
| November 18, 2021 |
Updated resources | The following resources were updated:
-
AWS::Transfer::Server
-
Use the IdentityProviderType resource to specify a the identity provider to use with your AWS Transfer Family server. A new type, LAMBDA, was added.
| November 18, 2021 |
Updated resource | The following resource was updated: AWS::FinSpace::Environment
-
AWS::FinSpace::Environment
-
Use the DataBundles property to specify a list of data bundles to install.
Use the SuperuserParameters property to specify configuration information of the superuser.
| November 18, 2021 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
- AWS::FSx::FileSystem
-
Use ONTAP for the FileSystemType, to use an ONTAP file system. Use
OntapConfiguration parameter to configure an Amazon
FSx ONTAP file system.
| November 18, 2021 |
Updated resource | The following resource was updated: AWS::MSK::Cluster | November 18, 2021 |
StackSets managed execution | You can activate managed execution for your stack set so that StackSets performs non-conflicting operations concurrently and queues conflicting operations. After conflicting operations finish, StackSets starts queued operations in request order. For more information, see Create a stack set. | November 18, 2021 |
New resources | The following resources were added: AWS::AppStream::Application,
AWS::AppStream::AppBlock, and
AWS::AppStream::ApplicationFleetAssociation | November 18, 2021 |
New resource | The following resource was updated: AWS::FSx::FileSystem
- AWS::FSx::FileSystem
-
Use the FileSystemTypeVersion attribute to specify
the file system version of an Amazon FSx for Lustre file
system.
| November 18, 2021 |
Updated resource | The following resource was updated: AWS::Location::Tracker
-
AWS::Location::Tracker
-
Use the PositionFiltering property to specify how
you want positions in your tracker to be filtered.
| November 12, 2021 |
Updated resources | The following resources were updated:
AWS::Batch::ComputeEnvironment,
AWS::Batch::JobDefinition,
and AWS::Batch::JobQueue | November 11, 2021 |
Updated resources | The following resource was updated: AWS::SageMaker::Endpoint
-
AWS::SageMaker::Endpoint
-
Use the DeploymentConfig property to specify the deployment configuration for an endpoint,
which contains the desired deployment strategy and rollback configurations.
Use the AutoRollbackConfig property to specify the the automatic rollback configuration for handling endpoint deployment failures and recovery.
Use the Alarm property to specify a list of CloudWatch alarms that are configured to monitor metrics on an endpoint.
Use the AlarmName property to specify the name of a CloudWatch alarm in your account.
Use the BlueGreenUpdatePolicy property to specify the update policy for a blue/green deployment.
Use the MaximumExecutionTimeoutInSeconds property to specify the maximum execution timeout for a blue/green deployment.
Use the TerminationWaitInSeconds property to specify additional waiting time in seconds after the completion of an endpoint deployment before terminating the old endpoint fleet
Use the TrafficRoutingConfig property to specify the traffic routing strategy during a blue/green endpoint deployment.
Use the CanarySize property to specify the batch size for the first step to turn on traffic on the new endpoint fleet.
Use the LinearStepSize property to specify the batch size for each step to turn on traffic on the new endpoint fleet
Use the Type property to specify the traffic routing strategy type (all at once, canary, or linear).
Use the WaitIntervalInSeconds property to specify the waiting time (in seconds) between incremental steps to turn on traffic on the new endpoint fleet.
Use the CapacitySize property to specify the endpoint capacity to activate for production.
Use the Type property to specify the endpoint capacity type to use (instance count or capacity percent).
Use the Value property to specify the capacity size, either as a number of instances or a capacity percentage.
Use the RetainDeploymentConfig property to specify whether to reuse
the last deployment configuration. The default value is false (the configuration is not reused)
| November 11, 2021 |
New resources | The following resource was added:
AWS::Batch::SchedulingPolicy | November 11, 2021 |
New resources | The following resources were added: AWS::IoTWireless::FuotaTask, AWS::IoTWireless::MulticastGroup | November 11, 2021 |
Updated resource | The following resource was updated: AWS::Backup::BackupSelection
-
AWS::Backup::BackupSelection
-
The BackupSelection resource type supports a number of new
resource assignment options, including StringLike and the
ability to exclude resources from your backup plans.
| November 10, 2021 |
Updated resource | The following resource was updated: AWS::EKS::Cluster
-
AWS::EKS::Cluster ClusterLogging
-
Use the ClusterLogging property to specify the cluster control plane configuration for your cluster.
-
AWS::EKS::Cluster Logging
-
Use the Logging property to enable or disable exporting the Kubernetes control plane logs for your cluster to CloudWatch Log.
-
AWS::EKS::Cluster LoggingTypeConfig
-
Use the LoggingTypeConfig property to specify the enabled logging type.
-
AWS::EKS::Cluster ResourcesVpcConfig
-
Use the EndpointPrivateAccess property to enable or disable private access for your cluster's Kubernetes API server endpoint.
Use the EndpointPublicAccess property to enable or disable public access to your cluster's Kubernetes API server endpoint.
Use the PublicAccessCidrs property to specify the CIDR blocks that are allowed access to your cluster's public Kubernetes API server endpoint.
| November 10, 2021 |
Updated resources | The following resources were updated: AWS::EC2::SpotFleet and
AWS::EC2::EC2Fleet. | November 4, 2021 |
Updated resources | The following resources were updated: AWS::NetworkFirewall::FirewallPolicy and AWS::NetworkFirewall::RuleGroup
-
AWS::NetworkFirewall::FirewallPolicy
-
Use the StatefulDefaultActions property to establish default actions to take on a packet that doesn't match any stateful rules when using strict rule ordering.
Use the StatefulEngineOptions property to govern how Network Firewall handles stateful rules.
Use the StatefulRuleGroupReference property to
reference the stateful rule groups that are used in the policy. This
existing property now includes a Priority field.
-
AWS::NetworkFirewall::RuleGroup
-
Use the StatefulRuleOptions property to govern how Network Firewall handles stateful rules.
| November 4, 2021 |
Updated resources | The following resource was updated: AWS::Pinpoint::Campaign. | November 4, 2021 |
Updated resource | The following resource was updated: AWS::CloudFront::Distribution. | November 4, 2021 |
Updated resource | The following resource was updated: AWS::MWAA::Environment
-
TagMap
-
The TagMap property has been removed the service resource specification.
| November 4, 2021 |
Updated resource | The following resource was updated: AWS::Redshift.
-
Amazon Redshift resource type reference
-
AWS::Redshift::EndpointAccess to create a Amazon Redshift-managed VPC endpoint.
AWS::Redshift::EndpointAuthorization to describe an endpoint authorization for authorizing Amazon Redshift-managed VPC endpoint access to a cluster across AWS accounts.
AWS::Redshift::EventSubscription to create an event notification subscription.
AWS::Redshift::ScheduledAction to create a scheduled action to run an API operation.
| November 4, 2021 |
New resources | The following resource was added: AWS::Pinpoint::InAppTemplate. | November 4, 2021 |
New resource | The following resource was added: AWS::CloudFront::ResponseHeadersPolicy. | November 4, 2021 |
New resource | The following resource was added: AWS::DataSync::LocationHDFS.
-
AWS::DataSync::LocationHDFS
-
Use the AWS::DataSync::LocationHDFS resource to specify an
endpoint for a Hadoop Distributed File System (HDFS).
| November 4, 2021 |
Updated resource | The following resource was updated: AWS::EC2::EC2Fleet.
-
InstanceRequirementsRequest
-
Use the InstanceRequirementsRequest property to specify
instance attributes, which Amazon EC2 uses to identify instance
types.
| October 28, 2021 |
Updated resource | The following resource was updated: AWS::EC2::SpotFleet.
-
InstanceRequirementsRequest
-
Use the InstanceRequirementsRequest property to specify
instance attributes, which Amazon EC2 uses to identify instance
types.
| October 28, 2021 |
Updated resource | The following resource was updated: AWS::AutoScaling::AutoScalingGroup. | October 28, 2021 |
New resources | The following resources were added: AWS::Lightsail::Database and AWS::Lightsail::StaticIp
-
AWS::Lightsail::Database
-
Use the AWS::Lightsail::Database resource to specify an
Amazon Lightsail database.
-
AWS::Lightsail::StaticIp
-
Use the AWS::Lightsail::StaticIp resource to specify a
static IP that can be attached to an Amazon Lightsail instance
that is in the same AWS Region and Availability
Zone.
| October 28, 2021 |
New resource | The following resource was added: AWS::Route53Resolver::ResolverConfig | October 28, 2021 |
Updated resource | The following resources were updated: AWS::MediaConnect::Flow.Source,
AWS::MediaConnect::FlowOutput | October 27, 2021 |
Updated resource | The following resource was updated: AWS::FMS::Policy.
-
AWS::FMS::Policy
-
The AWS::FMS::Policy resource now allows you to automatically remove protections from resources that leave policy scope.
| October 21, 2021 |
Updated resource | The following resource was updated: AWS::Cassandra::Table.
-
AWS::Cassandra::Table
-
Use the DefaultTimeToLive property to set a default Time to Live (TTL) value for
a table in Amazon Keyspaces (for Apache Cassandra).
| October 21, 2021 |
Updated resource | The following resource was updated: AWS::SageMaker::NotebookInstance | October 21, 2021 |
New resources | Use these resources to deploy computer vision applications to an AWS Panorama Appliance. | October 21, 2021 |
New resource | The following resource was added: AWS::Rekognition:Project. | October 21, 2021 |
New resources | The following resources were added: AWS::DeviceFarm::DevicePool,
AWS::DeviceFarm::InstanceProfile, AWS::DeviceFarm::NetworkProfile,
AWS::DeviceFarm::Project AWS::DeviceFarm::TestGridProject, and
AWS::DeviceFarm::VPCEConfiguration. | October 14, 2021 |
New resource | The following resources were added: AWS::Wisdom::Assistant, AWS::Wisdom::AssistantAssociation, and AWS::Wisdom::KnowledgeBase | October 14, 2021 |
Updated resource | The following resource was updated: AWS::CodeBuild::Project ProjectBuildBatchConfig | October 13, 2021 |
New resource | The following resources were added: AWS::Connect::HoursOfOperation,
AWS::Connect::User, AWS::Connect::UserHierarchyGroup | October 12, 2021 |
Updated resource | The following resource was updated: AWS::Backup::BackupVault
-
AWS::Backup::BackupVault
-
Use the LockConfiguration property to specify the
configuration of AWS Backup; Vault Lock.
-
AWS::Backup::Framework
-
Use the Framework property to specify the configuration of
an AWS Backup; Audit Manager framework.
-
AWS::Backup::ReportPlan
-
Use the Report Plan property to specify the configuration of
an AWS Backup; Audit Manager report plan.
| October 7, 2021 |
New resources | The following resources were added: AWS::Lightsail::Disk and AWS::Lightsail::Instance
-
AWS::Lightsail::Instance
-
Use the AWS::Lightsail::Instance resource to specify an
Amazon Lightsail instance.
-
AWS::Lightsail::Disk
-
Use the AWS::Lightsail::Disk resource to specify a disk that
can be attached to an Amazon Lightsail instance that is in the
same AWS Region and Availability Zone.
| October 7, 2021 |
New resource | The following resource was added: AWS::IoT::JobTemplate.
-
AWS::IoT::JobTemplate
-
Use the
AWS::IoT::DomainConfJobTemplateiguration resource to specify a job template in AWS IoT Core.
| October 7, 2021 |
Updated resources | The following resources were updated: AWS::ECR::ReplicationConfiguration
-
AWS::ECR::ReplicationConfiguration
-
Use the AWS::ECR::ReplicationConfiguration property
to configure replication for the contents of a private repository.
Support has been added to specify repository filters on a
replication rule.
| September 30, 2021 |
Updated resource | The following resource was updated: AWS::APS::Workspace. | September 30, 2021 |
Updated resource | The following resource was updated: AWS::KinesisFirehose::DeliveryStream.
-
AWS::KinesisFirehose::DeliveryStream
-
Use the AmazonopensearchserviceDestinationConfiguration
property type to specify the destination in Amazon OpenSearch Service. You
can specify only one destination.
| September 30, 2021 |
Updated resource | The following resources were updated: AWS::Lambda::LayerVersion and AWS::Lambda::Function.
-
AWS::Lambda::Function
-
Use the Architectures property to set the instruction set architecture for the function.
| September 30, 2021 |
New resource | The following resource was added: AWS::APS::RuleGroupsNamespace. | September 30, 2021 |
Updated resource | The following resource was updated: AWS::AppSync::DataSource
-
AWS::AppSync::DataSource
-
Use the OpenSearchServiceConfig property to specify the
configuration for an Amazon OpenSearch Service domain for an AWS AppSync data source.
| September 23, 2021 |
New resources | The following resources were added: AWS::MemoryDB::Cluster, AWS::MemoryDB::ACL,
AWS::MemoryDB::ParameterGroup, AWS::MemoryDB::SubnetGroup, and
AWS::MemoryDB::User. | September 23, 2021 |
Updated resources | The following resource was updated: AWS::EMR::Studio.
-
AWS::EMR::Studio
-
Use the
IdpAuthUrl property to specify the authentication endpoint of your identity provider (IdP) when you use IAM authentication and want to let federated users log in to an Amazon EMR Studio with the Studio URL and credentials from your IdP.
Use the IdpRelayStateParameterName property to specify the name that your identity provider uses for its RelayState parameter.
Use the UserRole property only when you set AuthMode to SSO.
| September 17, 2021 |
Updated resource | The following resource was updated: AWS::S3::Bucket. | September 17, 2021 |
Updated resource | The following resource was added: AWS::ACMPCA::Permission
-
AWS::ACMPCA::Permission
-
Use the AWS::ACMPCA::Permission object to grant
permissions on a private CA to the AWS Certificate
Manager (ACM) service principal (acm.amazonaws.com). These
permissions allow ACM to renew ACM certificates that reside in the
same AWS account as the CA.
| September 16, 2021 |
Updated resource | The following resource was updated: AWS::MSK::Cluster
-
AWS::MSK::Cluster
-
You can now update the authentication and encryption settings for
an existing MSK cluster.
| September 16, 2021 |
New resources | The following resource was added: AWS::OpenSearchService::Domain. | September 16, 2021 |
New resource | The following resource was added: AWS::APS::Workspace. | September 16, 2021 |
Updated resource | The following resource was updated: AWS::CloudTrail::Trail
-
AWS::CloudTrail::Trail
-
Use the
ExcludeManagementEventSources property to exclude exclude AWS Key Management Service (AWS KMS) events from a trail's logs.
Use the
InsightSelectors property to specify the Insights event type when you want to log Insights events on your trail.
Use the
IsOrganizationTrail property to create an AWS Organizations trail, if Organizations is enabled in your account.
| September 10, 2021 |
Updated resource | The following resource was updated: AWS::Cassandra::Table.
-
AWS::Cassandra::Table
-
Use the AWS::Cassandra::Table resource to add new regular columns to existing tables in Amazon Keyspaces (for Apache
Cassandra).
| September 3, 2021 |
Updated resources | The following resource was updated: AWS::Transfer::Server | September 2, 2021 |
Updated resource | The following resource was added: AWS::ACMPCA::CertificateAuthority
OcspConfiguration. The following resource was updated:
AWS::ACMPCA::CertificateAuthority RevocationConfiguration. | September 2, 2021 |
Updated resource | The following resource was updated: AWS::DataSync::Task. | September 2, 2021 |
Updated resource | The following resource was Updated: AWS::EventSchemas::Discoverer. | September 2, 2021 |
Updated resource | The following resource was updated: AWS::KinesisFirehose::DeliveryStream. | September 2, 2021 |
New resource | The following resource is new: AWS::IoT::FleetMetric | September 2, 2021 |
New resource | The following resources were added: AWS::S3::MultiRegionAccessPoint and
AWS::S3::MultiRegionAccessPointPolicy. | September 2, 2021 |
Terminology change | AWS KMS is replacing the term customer master key
(CMK) with AWS KMS key and KMS key.
The concept has not changed. To prevent breaking changes, AWS KMS is keeping
some variations of this term. | August 30, 2021 |
Stack failure options | You can iteratively develop your applications when provisioning failures are encountered by
starting from the point of failure without rolling back successfully provisioned resources. By
specifying stack failure options, you can troubleshoot resources in a CREATE_FAILED
or UPDATE_FAILED status. You can provision failure options for all stack deployments
and change set operations. For more information, see Stack failure options. | August 30, 2021 |
Updated resource | The following resource was updated: AWS::CodeBuild::Project | August 19, 2021 |
Updated resource | The following resource was updated: AWS::AutoScaling::ScalingPolicy.
-
AWS::AutoScaling::ScalingPolicy
-
Use the PredictiveScalingConfiguration property to specify a
predictive scaling policy configuration for an Auto Scaling group.
| August 19, 2021 |
Updated resource | The following resource was updated: AWS::SageMaker::EndpointConfig
-
AWS::SageMaker::EndpointConfig
-
In the AsyncInferenceClientConfig property type, use the MaxConcurrentInvocationsPerInstance property to set the maximum number of concurent requests.
In the AsyncInferenceConfig property type, use the ClientConfig to configure the behavior of the client SageMaker uses. Use OutputConfig to spcify invocation outputs.
In the AsyncInferenceNotificationConfig property, use the ErrorTopic and SuccessTopic to define Amazon SNS topics to post a notification if the inference fails or completes successfully, respectively.
In the OutputConfig property type use the KmsKeyId to encrypt the asynchronous inference output. Use NotificationConfig to specify the notification configuration and S3OutputPath to specify the output location in S3.
| August 19, 2021 |
Updated resource | The following resource was updated: AWS::Elasticsearch::Domain. | August 17, 2021 |
Updated resources | The following resource was updated: AWS::WAFv2::WebACL.
-
AWS::WAFv2::WebACL
-
You can now specify the version to use for managed rule groups. For information, see ManagedRuleGroupStatement.
| August 12, 2021 |
Updated resource | The following resource was updated: AWS::ApiGateway::DomainName.
-
AWS::ApiGateway::DomainName
-
Use the OwnershipVerificationCertificateArn property to specify the certificate ARN used to verify ownership of the domain using mutual TLS.
| August 12, 2021 |
Updated resource | The following resource was updated: AWS::ApiGatewayV2::DomainName.
-
AWS::ApiGatewayV2::DomainName
-
Use the OwnershipVerificationCertificateArn property to specify the certificate ARN used to verify ownership of the domain using mutual TLS.
| August 12, 2021 |
Updated resource | The following resource was updated: AWS::LookoutEquipment::InferenceScheduler | August 12, 2021 |
Updated resource | The following resource was updated: AWS::SageMaker::Model.
-
AWS::SageMaker::Model
-
In the
ImageConfig
property type, use the RepositoryAuthConfig property to
specify an authentication configuration for the private docker
registry where your model image is hosted.
| August 12, 2021 |
Updated resource | The following resource was added: AWS::WAFv2::LoggingConfiguration. | August 12, 2021 |
Updated resource | The following resource was updated: AWS::AppSync::GraphQLApi
-
AWS::AppSync::GraphQLApi
-
Use the LambdaAuthorizerConfig property to specify the
configuration for AWS Lambda function authorization.
| August 5, 2021 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
-
AWS::FSx::FileSystem
-
In the WindowsConfiguration property type, use the
AuditLogConfiguration property to enable audit
event logging of end-user accesses of files, folders, and file
shares on an Amazon FSx Windows File Server instance.
| August 5, 2021 |
New resource | The following resource was added: AWS::Athena::PreparedStatement
-
AWS::Athena::PreparedStatement
-
Use the AWS::Athena::PreparedStatement resource to specify a prepared statement for use with SQL queries in Athena. Use prepared statements for repeated execution of the same query with different query parameters. A prepared statement contains parameter placeholders whose values are supplied at execution time.
| August 5, 2021 |
Updated resource | The following resource was updated: AWS::DataBrew::Job
-
AWS::DataBrew::Job
-
Use the AWS::DataBrew::Job.DatabaseOutputs property
type to define the output destination for a DataBrew
job to be written into.
Use the AWS::DataBrew::Job.ProfileConfiguration
property type to configure which statistics to include when running
DataBrew profile jobs.
| July 29, 2021 |
Updated resource | The following resource was updated: AWS::S3Outposts::EndPoint | July 29, 2021 |
New resource | The following resources were released: AWS::Route53RecoveryControl::Cluster, AWS::Route53RecoveryControl::ControlPanel, AWS::Route53RecoveryControl::RoutingControl, AWS::Route53RecoveryControl::SafetyRule | July 29, 2021 |
New resource | The following resources were released: AWS::Route53RecoveryReadiness::Cell, AWS::Route53RecoveryReadiness::ReadinessCheck, AWS::Route53RecoveryReadiness::RecoveryGroup, AWS::Route53RecoveryReadiness::ResourceSet
-
AWS::Route53RecoveryReadiness::Cell
-
Use the AWS::Route53RecoveryReadiness::Cell to define a single cell for an application.
-
AWS::Route53RecoveryReadiness::ReadinessCheck
-
Use the AWS::Route53RecoveryReadiness::ReadinessCheck to check application readiness for failover. Amazon Route 53 Application Recovery Controller uses readiness checks to
determine the readiness of the resources in a resource set.
-
AWS::Route53RecoveryReadiness::RecoveryGroup
-
Use the AWS::Route53RecoveryReadiness::RecoveryGroup to define a recovery group for an application. A recovery group models an application and includes cells that represent application replicas.
-
AWS::Route53RecoveryReadiness::ResourceSet
-
Use the AWS::Route53RecoveryReadiness::ResourceSet to define a group of resources of a single type that you can associate with a readiness check.
| July 29, 2021 |
Import stacks to stack set | The AWS CloudFormation stack import operation can import existing stacks into new or
existing stack sets, so that you can migrate existing stacks to a stack set in one operation for self-managed stacks. For more information, see Importing stacks into a stack set for self-managed stacks. | July 28, 2021 |
Updated resource | The following resource was updated: AWS::CloudWatch::Alarm.
-
AWS::CloudWatch::Alarm
-
In the MetricDataQuery property type, use the AccountId property to specify the ID of the account where the metrics are located, if this is a cross-account alarm.
| July 22, 2021 |
Updated resource | The following resource was updated: AWS::QLDB::Ledger
-
AWS::QLDB::Ledger
-
Use the KmsKey property to specify a customer managed AWS KMS key to use for encryption at rest in the ledger.
| July 22, 2021 |
New resources | The following resources were added: AWS::LookoutEquipment::InferenceScheduler | July 22, 2021 |
Updated resource | The following resource was updated: AWS::EC2::VPCCidrBlock.
-
AWS::EC2::VPCCidrBlock
-
Use the Ipv6CidrBlock property to specify an IPv6 CIDR block
from the IPv6 address pool.
Use the Ipv6Pool property to specify the ID of an IPv6
address pool from which to allocate the IPv6 CIDR block.
| July 21, 2021 |
Updated resource | The following resource was updated: AWS::Cassandra::Table. | July 21, 2021 |
New resource | The following resource was added : AWS::Logs::ResourcePolicy | July 15, 2021 |
Increased quota | The following AWS CloudFormation quota has been updated. | July 15, 2021 |
Updated resource | The following resource was updated: AWS::DataBrew::Job
-
AWS::DataBrew::Job
-
Use the AWS::DataBrew::Job.DataCatalogOutput property
type to define outputs from DataBrew recipe jobs to the
AWS Glue Data Catalog.
| July 9, 2021 |
Updated resources | The following resources were updated: AWS::ServiceDiscovery::PrivateDnsNamespace and
AWS::ServiceDiscovery::PublicDnsNamespace. | July 8, 2021 |
Updated resources | The following resources were updated: AWS::CodeDeploy::Application,
AWS::CodeDeploy::DeploymentConfig, and AWS::CodeDeploy::DeploymentGroup
-
AWS::CodeDeploy::Application
-
Use the Tags property to specify metadata to add to CodeDeploy applications.
-
AWS::CodeDeploy::DeploymentConfig
-
Use the TrafficRoutingConfig property to specify how deployment
traffic is routed.
Use the ComputePlatform property to specify the destination
platform type for the deployment (Lambda,
Server, or ECS).
-
AWS::CodeDeploy::DeploymentGroup
-
Use the BlueGreenDeploymentConfiguration property to specify information about blue/green deployment options for a deployment group.
Use the ECSServices property to specify the target Amazon ECS services in the deployment group.
| July 8, 2021 |
Updated resource | The following resource was updated: AWS::AutoScaling::LaunchConfiguration. | July 8, 2021 |
Updated resources | The following resources were updated: AWS::ImageBuilder::ContainerRecipe and AWS::ImageBuilder::DistributionConfiguration.
-
AWS::ImageBuilder::DistributionConfiguration
-
Use the LaunchTemplateConfiguration property to
use an Amazon EC2 launch template for specified accounts where you distribute your Image Builder image.
-
AWS::ImageBuilder::ContainerRecipe
-
-
Retrieve the container recipe Name attribute with the GN::GetAtt function.
-
Use the InstanceBlockDeviceMapping property to
define block device mappings for the build instance used to configure your image.
| July 1, 2021 |
Updated resource | The following resource was updated:
AWS::ApplicationAutoScaling::ScalableTarget. | July 1, 2021 |
China Rebrand Update | China rebrand updates | June 29, 2021 |
Updated resources | The following resource was updated: AWS::Transfer::Server ProtocolDetails | June 24, 2021 |
Updated resource | The following resource was updated: AWS::DAX::Cluster
-
AWS::DAX::Cluster
-
Use the ClusterEndpointEncryptionType to specify the encryption type of the cluster's endpoint.
| June 24, 2021 |
New resources | The following resources were added: AWS::CloudFormation::PublicTypeVersion,
AWS::CloudFormation::Publisher, and AWS::CloudFormation::TypeActivation.
-
AWS::CloudFormation::PublicTypeVersion
-
Use the AWS::CloudFormation::PublicTypeVersion resource to test and
publish a registered extension as a public, third-party extension.
-
AWS::CloudFormation::Publisher
-
Use the AWS::CloudFormation::Publisher resource to register your
account as a publisher of public extensions in the CloudFormation
registry.
-
AWS::CloudFormation::TypeActivation
-
Use the AWS::CloudFormation::TypeActivation resource to activate a
public third-party extension, making it available for use in CloudFormation
operations.
| June 24, 2021 |
New resource | The following resource was added: AWS::Connect::QuickConnect | June 24, 2021 |
Updated resource | The following resource was updated: AWS::MWAA::Environment
-
Schedulers
-
Use the Schedulers property to specify the number of Apache Airflow schedulers that run in an environment.
| June 21, 2021 |
Publish public third-party extensions | Use public extensions provided by third-party publishers, just as you would
extensions from Amazon. For more information, see Using public
extensions. For information on publishing third-party public
extensions, see Publishing
extensions in the CloudFormation CLI User
Guide. | June 21, 2021 |
Updated resource | The following resource was updated: AWS::AutoScaling::ScheduledAction.
-
AWS::AutoScaling::ScheduledAction
-
Use the TimeZone property to create recurring scheduled actions in
the local time zone. If your time zone observes Daylight Saving Time (DST), the
recurring action automatically adjusts for Daylight Saving Time.
| June 18, 2021 |
Updated resources | The following resources were updated: AWS::AppMesh::VirtualNode,
AWS::AppMesh::GatewayRoute, and AWS::AppMesh::Route
-
AWS::AppMesh::VirtualNode
-
Use the DnsServiceDiscovery property to represent the DNS
service discovery information for your virtual node.
-
AWS::AppMesh::GatewayRoute
-
Use the GatewayRouteHostnameMatch property to represent the
gateway route hostname to match.
Use the GatewayRouteHostnameRewrite property to represent
the gateway route host name to rewrite.
Use the GrpcGatewayRouteMetadata property to represent the
metadata of the gateway route.
Use the GrpcGatewayRouteRewrite property to represent the
the gateway route to rewrite.
Use the GrpcMetadataMatchMethod property to represent the
method header to be matched.
Use the HttpGatewayRouteHeader property to represent the
HTTP header in the gateway route.
Use the HttpGatewayRoutePathRewrite property to represent
the path to rewrite.
Use the HttpGatewayRoutePrefixRewrite property to represent
the beginning characters of the route to rewrite.
Use the HttpGatewayRouteRewrite property to represent the
beginning characters of the route to rewrite.
Use the HttpGatewayRoutePathRewrite property to represent
the beginning characters of the route to rewrite.
-
AWS::AppMesh::Route
-
Use the HttpQueryParameter property to represent the query
parameter in the request.
| June 17, 2021 |
Updated resource | The following resource was updated: AWS::KMS::Key.
-
AWS::KMS::Key
-
Use the MultiRegionKey property to specify multi-Region primary
keys.
| June 17, 2021 |
New resource | The following resource was added: AWS::KMS::ReplicaKey.
-
AWS::KMS::ReplicaKey
-
Use the AWS::KMS::ReplicaKey resource to specify a replica of a
specified multi-Region primary key.
| June 17, 2021 |
Parallel Node Upgrade and Scale to Zero | In the NodegroupUpdateConfig, use either the MaxUnavailable and
MaxUnavailablePercentage values to define the number of nodes to upgrade in
parallel. In the scalingconfig, the minsize and desiredsize values can both be set to
zero. | June 16, 2021 |
Updated resource | The following resource was updated: AWS::EC2::NatGateway
-
AWS::EC2::NatGateway
-
Use the ConnectivityType property to indicate whether the
NAT gateway supports public or private connectivity.
| June 11, 2021 |
Updated resources | The following resource was updated: AWS::RAM:ResourceShare
-
AWS::RAM::ResourceShare
-
Use the PermissionArns property to specify the Amazon Resource Names (ARNs) of the permissions to associate with the resource share.
| June 10, 2021 |
Updated resource | The following resource was updated: AWS::KinesisAnalyticsV2::Application
-
AWS::KinesisAnalyticsV2::Application ApplicationConfiguration
-
You can use the ZeppelinApplicationConfiguration property to create Studio notebook applications that use Apache Zeppelin. You can use the notebook interactively, and you can deploy it as a continuously running streaming application with durable state and autoscaling features.
| June 10, 2021 |
Updated resource | The following resource was updated: AWS::SQS::Queue
-
AWS::SQS::Queue
-
You can now use the DeduplicationScope and FifoThroughputLimitproperties
to enable higher throughput for FIFO queues.
| June 10, 2021 |
Updated resource | The following resource was updated: AWS::SSM::Document
-
AWS::SSM::Document
-
Use the Attachments property to specify a list of key and value
pairs that describe attachments to a version of a document. Use the
Requires property to specify a list of SSM documents required by a
document. This parameter is used exclusively by AWS AppConfig. When a user creates
an AWS AppConfig configuration in an SSM document, the user must also specify a
required document for validation purposes. In this case, an ApplicationConfiguration
document requires an ApplicationConfigurationSchema document for validation
purposes. For more information, see Creating a configuration and a configuration profile in the
AWS AppConfig User Guide.
| June 10, 2021 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
- AWS::FSx::FileSystem
-
Use the DNSName attribute to access the DNS name of
your Amazon FSx file system.
| June 7, 2021 |
New resource | The following resources were added:
AWS::Location::GeofenceCollection, AWS::Location::Map,
AWS::Location::PlaceIndex,
AWS::Location::RouteCalculator,
AWS::Location::Tracker, and
AWS::Location::TrackerConsumer.
-
AWS::Location::GeofenceCollection
-
Use the AWS::Location::GeofenceCollection resource to
specify the ability to detect and act when a tracked device enters
or exits a defined geographical boundary.
-
AWS::Location::Map
-
Use the AWS::Location::Map resource to specify a map
resource in your AWS account, which provides map
tiles of different styles sourced from available data
providers.
-
AWS::Location::PlaceIndex
-
Use the AWS::Location::PlaceIndex resource to specify
a place index resource in your AWS account, which
supports Places functions with geospatial data sourced from your
chosen data provider.
-
AWS::Location::RouteCalculator
-
Use the AWS::Location::RouteCalculator resource to
specify a route calculator resource in your AWS
account.
-
AWS::Location::Tracker
-
Use the AWS::Location::Tracker resource to specify a tracker resource in your AWS account, which lets you receive current and historical location of devices.
-
AWS::Location::TrackerConsumer
-
Use the AWS::Location::TrackerConsumer resource to
specify an association between a geofence collection and a tracker
resource.
| June 7, 2021 |
Updated resources | The following resources were updated: AWS::MediaPackage::Channel, AWS::MediaPackage::OriginEndpoint, AWS::MediaPackage::PackagingConfiguration, and AWS::MediaPackage::PackagingGroup.
-
AWS::MediaPackage::Channel.
-
Use the EgressAccessLogs property to specify egress access logs for your channel.
Use the IngressAccessLogs property to specify ingress access logs for your channel.
-
AWS::MediaPackage::OriginEndpoint.
-
Use the CmafEncryption.ConstantInitializationVector property to specify an optional 128-bit, 16-byte hex value represented by a 32-character string, used in conjunction with the key for encrypting blocks. If you don't specify a value, then MediaPackage creates the constant initialization vector (IV).
-
AWS::MediaPackage::PackagingConfiguration.
-
Use the CmafPackage.IncludeEncoderConfigurationInSegments property to place your encoder's metadata into every video segment instead of the init fragment, which is the default behavior. This lets you use different SPS/PPS/VPS settings for your assets during content playback.
-
AWS::MediaPackage::PackagingGroup.
-
Use the EgressAccessLogs property to configure egress access logs for your packaging group.
| May 27, 2021 |
Updated resources | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup. | May 27, 2021 |
Updated resource | The following resource was updated: AWS::ACMPCA::CertificateAuthority. | May 27, 2021 |
Updated resource | The following resource was updated: AWS::FraudDetector::Detector. | May 27, 2021 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem | May 27, 2021 |
Updated resource | The following resource was updated: AWS::MWAA::Environment
-
ModuleLoggingConfiguration
-
In the ModuleLoggingConfiguration property type, the CloudWatchLogGroupArn response property type for the CloudWatch Logs ARN where Apache Airflow DAG logs are published was removed from the request to enable logs, and is being returned in the response.
-
AirflowConfigurationOptions
-
In the AirflowConfigurationOptions property type, use a PrimitiveType of Json to add an Apache Airflow configuration option.
-
MinWorkers
-
Use the MinWorkers property to specify the minimum number of Apache Airflow workers that run in an environment.
| May 27, 2021 |
Updated resource | The following resource was updated: AWS::QLDB::Ledger
-
AWS::QLDB::Ledger
-
The PermissionsMode property has changed so that an update requires no interruption.
| May 27, 2021 |
New resource | The following resource was added: AWS::CUR::ReportDefinition | May 27, 2021 |
Region availability | The following resources were updated: AWS::AmazonMQ::Broker
-
AWS::AmazonMQ::Broker
-
Amazon MQ for RabbitMQ is now available in the Amazon Web Services China (Bejing) and the Amazon Web Services China (Ningxia) Regions.
| May 26, 2021 |
New resources | The following resource was added: AWS::EC2::TransitGatewayPeeringAttachment.
-
AWS::EC2::TransitGatewayPeeringAttachment
-
Use the TransitGatewayPeeringAttachment resource to request
transit gateway peering attachment between the specified transit gateway
(requester) and a peer transit gateway (accepter).
| May 20, 2021 |
New resource | The following resource was added: AWS::AppRunner::Service. | May 20, 2021 |
New resource | The following resource was added: AWS::IoTCoreDeviceAdvisor::SuiteDefinition
-
SuiteDefinition
-
Use the SuiteDefinition resource to create a new test suite configuration for Device Advisor.
| May 20, 2021 |
Updated resources | The following resource was updated: AWS::CloudFormation::StackSet.
-
AWS::CloudFormation::StackSet
-
Use the CallAs property type to specify whether you are acting as
an account administrator in the organization's management account or as a delegated
administrator in a member account.
| May 14, 2021 |
Updated resource | The following resource was updated: AWS::ECS::TaskDefinition | May 14, 2021 |
Updated resource | The following resource was updated: AWS::ECS::CapacityProvider | May 14, 2021 |
Updated resource | The following resource was updated: AWS::EKS::Nodegroup
-
AWS::EKS::Nodegroup
-
Use the Taints property to specify whether you want
to have the effect of No_Schedule,
Prefer_No_Schedule, or No_Execute
applied to your node group.
| May 14, 2021 |
Updated resource | The following resource was updated: AWS::Elasticsearch::Domain.
-
AWS::Elasticsearch::Domain
-
Use the EncryptionAtRestOptions property to specify whether the domain should encrypt data at rest, and if so, the AWS Key Management Service (KMS) key to use.
Use the NodeToNodeEncryptionOptions property to specify whether node-to-node encryption is enabled.
| May 14, 2021 |
New resources | The following resources were added: AWS::SSMContacts::Contact and
AWS::SSMContacts::ContactChannel
-
AWS::SSMContacts::Contact
-
Use the AWS::SSMContacts::Contact resource to specify
an Incident Manager contact or escalation plan.
-
AWS::SSMContacts::ContactChannel
-
Use the AWS::SSMContacts::ContactChannel resource to
specify a contact channel as the method that Incident Manager uses
to engage your contact.
| May 14, 2021 |
New resource | The following resource was added: AWS::DynamoDB::GlobalTable | May 14, 2021 |
New resource | The following resources were added: AWS::SSMIncidents::ReplicationSet and
AWS::SSMIncidents::ResponsePlan
-
AWS::SSMIncidents::ReplicationSet
-
Use the ReplicationSet resource to specify a set of
Regions that Incident Manager data is replicated to and the KMS key
used to encrypt the data.
-
AWS::SSMIncidents::ResponsePlan
-
Use the ResponsePlan resource to specify the details
of the response plan that are used when creating an incident.
| May 14, 2021 |
Updated resources | The following resources were updated: AWS::ECR::Repository
-
AWS::ECR::Repository
-
Use the AWS::ECR::Repository.EncryptionConfiguration
property to configure encryption for the contents of a private
repository.
| May 13, 2021 |
Updated resource | The following resource was updated: AWS::S3::Bucket.
-
AWS::S3::Bucket
-
Use the ExpiredObjectDeleteMarker property to specify whether
Amazon S3 will remove a delete marker with no noncurrent versions.
| May 13, 2021 |
Updated resource | The following resource was updated: AWS::ACMPCA::CertificateAuthority. | May 6, 2021 |
Updated resource | The following resource was updated: AWS::CloudFront::Distribution. | May 6, 2021 |
Updated resource | The following resources were updated: AWS::GameLift:Fleet, AWS::GameLift::GameSessionQueue.
-
AWS::GameLift::Fleet
-
In the LocationCapacity property type, use DesiredEc2Instance to specify the number of desired EC2 instance and
MinSize and MaxSize to specify the minimum and maximum capacity size.
In the LocationConfiguration property type, use location Location to specify an AWS Region code and
LocationConfiguration to specify resource capacity settings in a specified fleet.
-
AWS::GameLift::GameSessionQueue
-
Use the
PriorityConfiguration property to specify priority destinations and locations for game session placements.
Use the
FilterConfiguration property to specify a list of locations where a queue is allowed to place new game sessions.
| May 6, 2021 |
Updated resource | The following resource was updated: AWS::IoT::TopicRule
-
AWS::IoT::TopicRule
-
Use the CloudwatchLogsAction property to specify a Cloudwatch logs action.
Use the TimestreamAction property to specify a timestream action.
Use the KafkaAction property to specify a kafka action.
In the S3Action property, use the CannedAcl value to specify a canned ACL action.
| May 6, 2021 |
Updated resource | The following resource was updated: AWS::MSK::Cluster
-
AWS::MSK::Cluster
-
You can now create clusters with IAM access control. This enables
you to authenticate clients, as well as to authorize Apache Kafka
actions.
| May 6, 2021 |
New resources | The following resources were added: AWS::FraudDetector::Detector, AWS::FraudDetector::EntityType, AWS::FraudDetector::EventType, AWS::FraudDetector::Label, AWS::FraudDetector::Outcome, and AWS::FraudDetector::Variable | May 6, 2021 |
New resources | The following resources were added: AWS::XRay::Group and AWS::XRay::SamplingRule. | May 6, 2021 |
New resource | The following resource was added: AWS::CloudFront::Function. | May 6, 2021 |
New resource | The following resource was added: AWS::FinSpace::Environment | May 6, 2021 |
Updated resource | The following resource was updated: AWS::Detective::Graph | April 29, 2021 |
New resource | The following resource was added: AWS::IoTFleetHub::Application
-
AWS::IoTFleetHub::Application
-
Use the AWS::IoTFleetHub::Application resource to create a Fleet Hub for AWS IoT Device Management web application.
| April 29, 2021 |
New resource | The following resource was added: AWS::SES::ContactList
-
AWS::SES::ContactList
-
Use the AWS::SES::ContactList resource to create a
list that contains contacts that have subscribed to a particular
topic or topics.
| April 29, 2021 |
Updated resource | The following resources were updated: AWS::IAM::InstanceProfile and AWS::IAM::ManagedPolicy.
-
AWS::IAM::InstanceProfile
-
Use the Tags property to specify a list of tags that you want to attach to the newly created instance profile.
-
AWS::IAM::ManagedPolicy
-
Use the Tags property to specify a list of tags that you want to attach to the newly created managed policy.
| April 27, 2021 |
New resources | The following resources were added: AWS::IoTWireless::PartnerAccount, AWS::IoTWireless::TaskDefinition | April 26, 2021 |
New resources | The following resources were added: AWS::NimbleStudio::Studio,
AWS::NimbleStudio::StudioComponent, AWS::NimbleStudio::StreamingImage, and
AWS::NimbleStudio::LaunchProfile.
-
AWS::NimbleStudio::Studio
-
Use the AWS::NimbleStudio::Studio resource to specify
a studio resource.
-
AWS::NimbleStudio::StudioComponent
-
Use the AWS::NimbleStudio::StudioComponent resource
to configure studio components, including types of workstations,
render farms, license servers, and shared file systems.
-
AWS::NimbleStudio::StreamingImage
-
Use the AWS::NimbleStudio::StreamingImage resource to
configure a machine image, including operating system and software,
that can be launched as a virtual workstation in a streaming
session.
-
AWS::NimbleStudio::LaunchProfile
-
Use the AWS::NimbleStudio::LaunchProfile resource to
specify user access permissions to studio components.
| April 26, 2021 |
Updated resources | AWS::ElastiCache::CacheCluster, AWS::ElastiCache::ReplicationGroup. | April 22, 2021 |
Updated resources | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup.
-
AWS::WAFv2::WebACL
-
You can now nest rule statements without using different names for statements at different levels. For example, instead of using AndStatementOne and AndStatementTwo to nest an AND rule statement inside another AND rule statement, you can use AndStatement for both. The new statement properties are AndStatement, NotStatement, OrStatement, RateBasedStatement, and Statement.
-
AWS::WAFv2::RuleGroup
-
You can now nest rule statements without using different names for statements at different levels. For example, instead of using AndStatementOne and AndStatementTwo to nest an AND rule statement inside another AND rule statement, you can use AndStatement for both. The new statement properties are AndStatement, NotStatement, OrStatement, RateBasedStatement, and Statement.
| April 22, 2021 |
Updated resource | The following resource was updated: AWS::ResourceGroups::Group
-
AWS::ResourceGroups::Group
-
Use the Configuration property to specify settings
for an AWS service that automatically apply to
members of the resource group.
| April 22, 2021 |
New resource | The following resource was added: AWS::AutoScaling::WarmPool. | April 22, 2021 |
Updated resources | The following resource was updated: AWS::CloudFormation::StackSet.
-
AWS::CloudFormation::StackSet
-
Use the RegionConcurrencyType property type to specify the
concurrency type of deploying StackSets operations in Regions.
| April 15, 2021 |
Updated resource | The following resource was updated: AWS::ApiGateway::RestApi.
-
AWS::ApiGateway::RestApi
-
Use the Mode property to specify how API Gateway handles resource updates when you use OpenAPI to define your REST API.
| April 15, 2021 |
Updated resource | The following resource was updated: AWS::IVS::Channel
-
AWS::IVS::Channel
-
Use the RecordingConfiguration property to specify an
Amazon IVS RecordingConfiguration, which stores configuration
information related to recording your live stream to a data
store.
| April 15, 2021 |
New resources | The following resource was added:
AWS::EC2::EnclaveCertificateIamRoleAssociation. | April 15, 2021 |
New resource | The following resource was added: AWS::IVS::RecordingConfiguration
-
AWS::IVS::RecordingConfiguration
-
Use the AWS::IVS::RecordingConfiguration resource to
specify an Amazon IVS RecordingConfiguration, which stores
configuration information related to recording your live stream to a
data store.
| April 15, 2021 |
Reference macros in stack set templates | StackSets now supports creating or updating stack sets with self-managed
permissions from templates that reference macros. For more information about macros, see Using AWS
CloudFormation macros to perform custom processing on templates. | April 14, 2021 |
Use the latest value of an SSM parameter in a dynamic reference. | When using dynamic references, you can now have CloudFormation use the latest
version of an SSM parameter whenever you create or update a stack. You are no longer
required to specify a specific version. For more details, see SSM parameters. | April 13, 2021 |
Updated resources | AWS::ElastiCache::ParameterGroup, AWS::ElastiCache::SecurityGroup, AWS::ElastiCache::SubnetGroup. | April 8, 2021 |
Updated resource | The following resource was updated: AWS::DynamoDB::Table.
-
AWS::DynamoDB::Table
-
Use the KinesisStreamSpecification property to specify the Kinesis Data Streams configuration for a table.
| April 8, 2021 |
Modules support using period delimiters in resource names | You can now use a period as a delimiter in specifying the fully-qualified logical
name for a resource contained in a module. For more information, see Referencing resources in a module. | April 8, 2021 |
AWS CloudFormation StackSets now supports parallel region deployment | You can now choose to deploy StackSets into Regions sequentially or in parallel. For more information, see Stack set operation options. | April 6, 2021 |
Updated resources | The following resources were updated: AWS::DataBrew::Dataset and
AWS::DataBrew::Job
-
AWS::DataBrew::Dataset
-
Use the CsvOptions property to define how DataBrew will read a comma-separated value (CSV) file when
creating a dataset from that file.
Use the DatabaseInputDefinition property to define
connection information for dataset input files stored in a database.
Use the DataCatalogInputDefinition property to define
how metadata stored in the AWS Glue Data Catalog is defined in
a DataBrew dataset.
Use the DatasetParameter property to define the type
and conditions for a parameter in the Amazon S3 path of
the dataset.
Use the DatetimeOptions property to define the
correct interpretation of datetime parameters used in the Amazon S3 path of a dataset.
Use the ExcelOptions property to define how DataBrew will interpret a Microsoft Excel file when
creating a dataset from that file.
Use the FilesLimit property to limit the number of
Amazon S3 files that should be selected for a dataset
from a connected Amazon S3 path.
Use the FilterExpression property to define parameter
conditions.
Use the FilterValue property to define a single entry
in the ValuesMap of a
FilterExpression.
Use the FormatOptions property to define the
structure of either comma-separated value (CSV), Excel, or JSON
input.
Use the Input property to define how DataBrew can find data, in either the AWS Glue Data Catalog or Amazon S3.
Use the JsonOptions property to define how input is
to be interpreted by AWS Glue DataBrew.
Use the PathOptions property to define how DataBrew selects files for a given Amazon S3
path in a dataset.
Use the PathParameter property to define the file
format of a dataset.
Use the S3Location property to define a single entry
in the path parameters of a dataset.
-
AWS::DataBrew::Job
-
Use the JobSample property to define the number of
rows on which a profile job is run.
Use the OutputLocation property to define the
location in Amazon S3 where the job writes its output.
Use the Recipe property to define the actions to be
performed on a dataset.
| April 1, 2021 |
Updated resources | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup.
-
AWS::WAFv2::WebACL
-
You can now inspect a web request body as JSON. You can now add custom request and response handling to web ACL default action and rule action settings. You can now define labels for rules, which are added automatically to matching requests and that persist with requests during web ACL evaluation. You can match against labels using the new rule LabelMatchStatement. You can now add a scope-down statement to managed rule group statements.
-
AWS::WAFv2::RuleGroup
-
You can now inspect a web request body as JSON. You can now add custom request and response handling to rule action settings. You can now define labels for rules, which are added automatically to matching requests and that persist with requests during web ACL evaluation. You can match against labels using the new rule LabelMatchStatement.
| April 1, 2021 |
Updated resource | The following resource was updated: AWS::Config::DeliveryChannel.
-
AWS::Config::DeliveryChannel
-
Use the S3KmsKeyArn property to specify the Amazon Resource Name (ARN) of the AWS Key Management Service (KMS) customer managed key (CMK) used to encrypt objects delivered by AWS Config.
| April 1, 2021 |
Updated resource | The following resource was updated: AWS::ApiGateway::RestApi. | April 1, 2021 |
Updated resource | The following resource was updated: AWS::Budgets::BudgetsAction
-
AWS::Budgets::BudgetsAction
-
Use the AWS::Budgets::BudgetsAction resource to take predefined actions that are initiated when a budget threshold has been exceeded.
| April 1, 2021 |
Updated resource | The following resource was updated: AWS::Cloud9::EnvironmentEC2 | April 1, 2021 |
Updated resource | The following resource was updated: AWS::EC2::LaunchTemplate. | April 1, 2021 |
Updated resource | The following resource was updated: AWS::ElasticBeanstalk::Environment.
-
AWS::ElasticBeanstalk::Environment
-
Use the OperationsRole property to specify the Amazon Resource Name (ARN) of an existing IAM role to be used as the environment's operations role.
| April 1, 2021 |
Updated resource | The following resource was updated: AWS::Events::Rule.
-
AWS::Events::Rule
-
The SageMakerPipelineParameter property is a Name / Value pair of a parameter
to start execution of a SageMaker Model Building Pipeline to create an API
destination. An API destination defines an HTTP invocation endpoint to use as the
target of a rule.
The SageMakerPipelineParameters contains the SageMaker Model Building
Pipeline parameters to start execution of a SageMaker Model Building
Pipeline.
| April 1, 2021 |
Updated resource | The following resource was updated: AWS::FMS::Policy.
-
AWS::FMS::Policy
-
The AWS::FMS::Policy resource now allows you to manage DNS Firewall policies for Amazon RouteĀ 53 Resolver DNS Firewall.
| April 1, 2021 |
Updated resource | The following resource was updated: AWS::GameLift::GameSessionQueue.
-
AWS::GameLift::GameSessionQueue
-
Use the
NotificationTarget property to specify an SNS topic ARN to publish game session placement events that are emitted by the queue.
Use the
CustomEventData property to specify a string value to add to all game session placement events that are emitted by the queue.
| April 1, 2021 |
New resources | The following resources were added: AWS::Route53Resolver::FirewallDomainList, AWS::Route53Resolver::FirewallRuleGroup, AWS::Route53Resolver::FirewallRuleGroupAssociation | April 1, 2021 |
New resource | The following resource was added: AWS::CloudWatch::MetricStream. | April 1, 2021 |
New resource | The following resource was added : AWS::Logs::QueryDefinition | April 1, 2021 |
Updated resource | The following resource was updated: AWS::Batch::JobDefinition | March 31, 2021 |
New resources | The following resources were added: AWS::LookoutMetrics::Alert | March 25, 2021 |
New resource | The following resource was added: AWS::AppIntegrations::EventIntegration | March 25, 2021 |
Updated resource | The following resource was updated: AWS::ServiceDiscovery::Service.
- AWS::ServiceDiscovery::Service
-
Use the Type property to allow service instances in a service in a public or private DNS
namespace to only be discovered with the DiscoverInstances API operation.
| March 18, 2021 |
New resources | The following resource was added: AWS::FIS::ExperimentTemplate.
-
AWS::FIS::ExperimentTemplate
-
Use the
AWS::FIS::ExperimentTemplate resource to create an experiment template in AWS Fault Injection Simulator.
| March 18, 2021 |
New resource | The following resources were added: AWS::S3ObjectLambda::AccessPoint and
AWS::S3ObjectLambda::AccessPointPolicy | March 18, 2021 |
New resources | The following resources were updated: AWS::ECS::Service
-
AWS::ECS::Service
-
Use the AWS::ECS::Service resource and the
EnableExecuteCommand property to enable ECS Exec
for the tasks in a service.
| March 16, 2021 |
New resources | The following resources were updated: AWS::ECS::Cluster
ExecuteCommandLogConfiguration | March 16, 2021 |
New resources | The following resources were updated: AWS::ECS::Cluster
ExecuteCommandConfiguration | March 16, 2021 |
Updated resource | The following resource was updated: AWS::Detective::MemberInvitation
- AWS::Detective::MemberInvitation
-
Use the DisableEmailNotification property to prevent the sending of invitation emails to member accounts.
The term "master account" is changed to "administrator account."
| March 15, 2021 |
Updated resources | The following resources were updated: AWS::ECR::PublicRepository | March 11, 2021 |
Updated resource | The following resource was updated: AWS::CertificateManager::Account
-
AWS::CertificateManager::Account
-
Use the ExpiryEventsConfiguration property to specify
options for certificate expiration events associated with an AWS account.
| March 11, 2021 |
Updated resource | The following resource was updated: AWS::EFS::FileSystem
- AWS::EFS::FileSystem
Use the AvailabilityZoneName property to create a file system that uses EFS One Zone storage classes, which store data
redundantly within a single Availability Zone within an AWS Region. | March 11, 2021 |
New resources | The following resources were added: AWS::CE::AnomalySubscription and AWS::CE::AnomalyMonitor.
-
AWS::CE::AnomalySubscription
-
Use the AWS::CE::AnomalySubscription resource to deliver notifications about anomalies detected by a monitor that exceeds a threshold.
-
AWS::CE::AnomalyMonitor
-
Use the AWS::CE::AnomalyMonitor resource to continuously inspect your account's cost data for anomalies, based on MonitorType and MonitorSpecification.
| March 11, 2021 |
New resources | The following resources were updated:
AWS::ECS::ClusterCapacityProviderAssociations | March 11, 2021 |
New resource | The following resource was added: AWS::RDS::DBProxyEndpoint. | March 11, 2021 |
Updated resource | The following resource was updated:
AWS::StepFunctions::StateMachine.
-
AWS::StepFunctions::StateMachine
-
The AWS::StepFunctions::StateMachine has a new Definition property that lets
you define your state machine in the language of your template file.
| March 10, 2021 |
Updated resource | The following resource was updated: AWS::AutoScaling::AutoScalingGroup. | March 8, 2021 |
Updated resource | The following new resource was updated: AWS::SecretsManager::Secret
- AWS::SecretsManager::Secret
-
Use the ReplicaRegions property to replicate secrets into
additional Regions for resiliency and disaster recovery.
| March 4, 2021 |
New resource | The following resource was added: AWS::Events::ApiDestination.
-
AWS::Events::ApiDestination
-
Use the ApiDestination resource to create an API destination. An
API destination defines an HTTP invocation endpoint to use as the target of a
rule.
| March 4, 2021 |
New resource | The following resource was added: AWS::Events::Connection.
-
AWS::Events::Connection
-
Use the Connection resource to create a connection to use with Api
destinations. A connection defines the authorization method and parameters to use to
connect to the HTTP invocation endpoint for an Api destination.
| March 4, 2021 |
New resource | The following resources were added: AWS::IoT::AccountAuditConfiguration,AWS::IoT::CustomMetric, AWS::IoT::Dimension, AWS::IoT::MitigationAction, AWS::IoT::ScheduledAudit, AWS::IoT::SecurityProfile. | March 4, 2021 |
New resource | The following resources were added: AWS::S3Outposts::Bucket, AWS::S3Outposts::BucketPolicy,
AWS::S3Outposts::AccessPoint, and AWS::S3Outposts::EndPoint | March 4, 2021 |
Updated resource | The following resources were updated: AWS::IoTSiteWise::AccessPolicy and AWS::IoTSiteWise::Portal. | March 2, 2021 |
Updated resource | The following resource was updated: AWS::IoTSiteWise::AssetModel. | March 1, 2021 |
Updated resource | The following resource was updated: AWS::DataBrew::Dataset Format. | February 25, 2021 |
Updated resource | The following resource was updated: AWS::ManagedBlockchain::Node | February 25, 2021 |
Updated resource | The following resource was updated: AWS::SageMaker::Model
-
AWS::SageMaker::Model
-
Use the InferenceExecutionConfig property to specify
details of how containers in a multi-container endpoint are
called.
| February 25, 2021 |
New resources | The following resource was added: AWS::EC2::TransitGatewayConnect. | February 25, 2021 |
New resources | The following resources were added: AWS::EMR::Studio and AWS::EMR::StudioSessionMapping.
-
AWS::EMR::Studio
-
Use the
AWS::EMR::Studio resource to create a new Amazon EMR Studio.
-
AWS::EMR::StudioSessionMapping
-
Use the
AWS::EMR::StudioSessionMapping resource to assign a user or group to an Amazon EMR Studio, and apply an IAM session policy to refine Studio permissions for that user or group.
| February 25, 2021 |
New resources | The following resources were added: AWS::SageMaker::Image,
AWS::SageMaker::ImageVersion. | February 25, 2021 |
New resource | The following resource was added: AWS::EKS::Addon.
-
AWS::EKS::Addon
-
Use the AWS::EKS::Addon resource to create an Amazon EKS add-on.
| February 25, 2021 |
New resource | The following resources were added: AWS::IAM::OIDCProvider, AWS::IAM::SAMLProvider, AWS::IAM::ServerCertificate, and AWS::IAM::VirtualMFADevice.
-
AWS::IAM::OIDCProvider
-
Use the AWS::IAM::OIDCProvider resource to create an IAM entity to describe an identity provider (IdP) that supports OpenID Connect (OIDC).
-
AWS::IAM::SAMLProvider
-
Use the AWS::IAM::SAMLProvider resource to create an IAM resource that describes an identity provider (IdP) that supports SAML
2.0.
-
AWS::IAM::ServerCertificate
-
Use the AWS::IAM::ServerCertificate resource to retrieve information about the specified server certificate stored in IAM.
-
AWS::IAM::VirtualMFADevice
-
Use the AWS::IAM::VirtualMFADevice resource to create a new virtual MFA device for the AWS account.
| February 25, 2021 |
New attributes | The following parameters were added for 10DLC support: EntityId, TemplateId,
OriginationNumber. | February 24, 2021 |
Updated resource | The following resource was updated: AWS::DynamoDB::Table
-
AWS::DynamoDB::Table
-
Use the ContributorInsightsSpecification property to
enable or disable CloudWatch Contributor Insights on a
table or global secondary index.
| February 22, 2021 |
Updated resource | The following resource was updated: AWS::CodeCommit::Repository Code
-
AWS::CodeCommit::Repository Code
-
The behavior of the
BranchName property on update has changed to be consistent with all other aspects of AWS:CodeCommit:Repository Code. All properties of
AWS:CodeCommit:Repository Code are ignored on update, as they only apply to initial resource creation.
| February 19, 2021 |
Updated resources | The following resources were updated: AWS::AppMesh::VirtualNode and
AWS::AppMesh::VirtualGateway
-
AWS::AppMesh::VirtualNode
-
Use the ClientTlsCertificate property to represent the
client's certificate.
Use the SubjectAlternativeNames property to represent the
subject alternative names secured by the certificate.
Use the TlsValidationContextSdsTrust property to represent a
Transport Layer Security (TLS) Secret Discovery Service validation context
trust.
Use the ListenerTlsValidationContextTrust property to
represent a listener's Transport Layer Security (TLS) validation context
trust.
Use the SubjectAlternativeNameMatchers property to represent
the methods by which a subject alternative name on a peer Transport Layer
Security (TLS) certificate can be matched.
Use the ListenerTlsSdsCertificate property to represent the
listener's Secret Discovery Service certificate.
Use the ListenerTlsValidationContext property to represent a
listener's Transport Layer Security (TLS) validation context.
-
AWS::AppMesh::VirtualGateway
-
Use the VirtualGatewayListenerTlsValidationContextTrust
property to specify validation context trust.
Use the VirtualGatewayTlsValidationContextSdsTrust property
to represent a virtual gateway's listener's Transport Layer Security (TLS)
Secret Discovery Service validation context trust.
Use the SubjectAlternativeNames property represents the
subject alternative names secured by the certificate.
Use the VirtualGatewayListenerTlsSdsCertificate property to
represent the virtual gateway's listener's Secret Discovery Service
certificate.
Use the VirtualGatewayClientTlsCertificate property to
represent the virtual gateway's client's Transport Layer Security (TLS)
certificate.
Use the VirtualGatewayListenerTlsValidationContext property
to represent a virtual gateway's listener's Transport Layer Security (TLS)
validation context.
Use the SubjectAlternativeNameMatchers property to represent
the methods by which a subject alternative name on a peer Transport Layer
Security (TLS) certificate can be matched.
| February 18, 2021 |
Updated resources | The following resource was updated: AWS::IoTWireless::ServiceProfile
-
AWS::IoTWireless::ServiceProfile
-
Use the attributes of LoRaWANGetServiceProfileInfo with LoRaWANServiceProfile
instead as ReadOnly properties that you can return using Fn::GetAtt.
| February 18, 2021 |
Updated resources | The following resources were updated: AWS::Kendra::DataSource,
AWS::Kendra::Index.
- AWS::Kendra::DataSource
-
Use the ConfluenceConfiguration
property of the resource to specify
configuration information for indexing a
Confluence data source.
- AWS::Kendra::DataSource
-
Use the GoogleDriveConfiguration
property of the resource to specify
configuration information for indexing a Google
Drive data source.
- AWS::Kendra::Index
-
Use the UserContextPolicy and
UserTokenConfiguration
properties of the resource to specify how Amazon
Kendra uses user tokens for access to the
index.
| February 18, 2021 |
Updated resource | The following resource was updated: AWS::DataBrew::Job JobSample. | February 18, 2021 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem | February 18, 2021 |
Updated resource | The following resource was updated: AWS::IoTAnalytics::Dataset.
-
AWS::IoTAnalytics::Dataset
-
Added the following properties: LateDataRule and LateDataRuleConfiguration.
You can use these properties to specify a late data rule for your dataset. The late data rule enables AWS IoT Analytics to send notifications
through Amazon CloudWatch when late data arrives.
For more information,
see Getting late data notifications
in the AWS IoT Analytics User Guide.
| February 18, 2021 |
AWS CloudFormation StackSets now supports delegated administrator with AWS Organizations | In addition to the organization's management account, delegated administrator
accounts can create and manage stack sets with service-managed permissions for their
organization. For more information, see Register a delegated administrator and Create a stack set with service-managed permissions. | February 18, 2021 |
New resources | The following resources were added: AWS::EC2::TransitGatewayMulticastDomain,
AWS::EC2::TransitGatewayMulticastDomainAssociation,
AWS::EC2::TransitGatewayMulticastGroupMembers and
AWS::EC2::TransitGatewayMulticastGroupSource. | February 12, 2021 |
Updated resources | The following resources were updated: AWS::IoTWireless::Destination, AWS::IoTWireless::DeviceProfile, AWS::IoTWireless::ServiceProfile, AWS::IoTWireless::WirelessDevice, and AWS::IoTWireless::WirelessGateway.
-
AWS::IoTWireless::Destination
-
Use the ExpressionType property of the resource to specify whether to
use a new value MqttTopic or to use RuleName. In addition,
the property descriptions now list any maximum values, minimum values, and patterns.
-
AWS::IoTWireless::DeviceProfile
-
Use the new LoRaWAN property which is a renaming of the LoRaWANDeviceProfile
property. The property type has not changed from LoRaWANDeviceProfile. In addition,
the property descriptions now list any maximum values, minimum values, and patterns.
-
AWS::IoTWireless::ServiceProfile
-
Use the new LoRaWAN property which is a renaming of the LoRaWANServiceProfile
property. The property type has not changed from LoRaWANServiceProfile. In addition,
the property descriptions now list any maximum values, minimum values, and patterns.
-
AWS::IoTWireless::WirelessDevice
-
Use the new LoRaWAN property which is a renaming of the LoRaWANDevice
property. The property type has not changed from LoRaWANDevice. In addition,
the property descriptions now list any maximum values, minimum values, and patterns.
-
AWS::IoTWireless::WirelessGateway
-
Use the new LoRaWAN property which is a renaming of the LoRaWANGateway
property. The property type has not changed from LoRaWANGateway. In addition,
the property descriptions now list any maximum values, minimum values, and patterns.
| February 11, 2021 |
Updated resource | The following resource was updated: AWS::DMS::Endpoint. | February 11, 2021 |
Updated resource | The following resource was updated: AWS::GroundStation::Config. | February 11, 2021 |
New resources | The following resources were added: AWS::CloudFormation::ResourceDefaultVersion and
AWS::CloudFormation::ResourceVersion.
-
AWS::CloudFormation::ResourceDefaultVersion
-
Use the AWS::CloudFormation::ResourceDefaultVersion resource to
specify the default resource version to be used in CloudFormation
operations.
-
AWS::CloudFormation::ResourceVersion
-
Use the AWS::CloudFormation::ResourceVersion resource to specify a
resource version with the CloudFormation service, making it available for
use in CloudFormation operations.
| February 11, 2021 |
New resources | The following resources were added: AWS::SageMaker::App,
AWS::SageMaker::AppImageConfig, AWS::SageMaker::Domain,
AWS::SageMaker::UserProfile.
-
AWS::SageMaker::App
-
Use the AWS::SageMaker::App resource to create a
running app for a user profile in SageMaker Studio.
-
AWS::SageMaker::AppImageConfig
-
Use the AWS::SageMaker::AppImageConfig resource to
create a configuration for running a SageMaker image as a
KernelGateway app in SageMaker Studio.
-
AWS::SageMaker::Domain
-
Use the AWS::SageMaker::Domain resource to create a
domain used by SageMaker Studio.
-
AWS::SageMaker::UserProfile
-
Use the AWS::SageMaker::UserProfile resource to
create a user profile used by SageMaker Studio.
| February 11, 2021 |
New resources | The following resources were added: AWS::ServiceCatalog::ServiceAction and AWS::ServiceCatalog::ServiceActionAssociation. | February 11, 2021 |
AWS CloudFormation StackSets Region availability | AWS CloudFormation StackSets is now available in the Asia Pacific (Osaka)
Region. For more information, see Working with
AWS CloudFormation StackSets. | February 10, 2021 |
Updated resource | The following resource was updated: AWS::IoTAnalytics::Datastore.
-
AWS::IoTAnalytics::Datastore
-
Added the following properties: Column, FileFormatConfiguration, JsonConfiguration,
ParquetConfiguration, and SchemaDefinition.
You can use these properties to specify JSON or Parquet file format for your data store.
For more information, see File formats
in the AWS IoT Analytics User Guide.
| February 5, 2021 |
Updated resources | The following resources were updated: AWS::ECR::ReplicationConfiguration | February 4, 2021 |
Updated resources | The following resources were updated: AWS::IoTWireless::DeviceProfile, AWS::IoTWireless::ServiceProfile, AWS::IoTWireless::WirelessDevice, and AWS::IoTWireless::WirelessGateway. | February 4, 2021 |
Updated resources | The following resources were updated: AWS::Cassandra::Keyspace and
AWS::Cassandra::Table.
-
AWS::Cassandra::Keyspace.Tags
-
Use the AWS::Cassandra::Keyspace.Tags property to add
tags to new or existing keyspaces in Amazon Keyspaces (for Apache
Cassandra).
-
AWS::Cassandra::Table.Tags
-
Use the AWS::Cassandra::Table.Tags property to create
and add tags to new or existing tables in Amazon Keyspaces (for Apache
Cassandra).
-
AWS::Cassandra::Table.PointInTimeRecoveryEnabled
-
Use the
AWS::Cassandra::Table.PointInTimeRecoveryEnabled
property to enable point-in-time recovery in Amazon Keyspaces (for
Apache Cassandra).
| February 4, 2021 |
Updated resource | The following resource was updated: AWS::DataBrew::Job.
-
AWS::DataBrew::Job
-
Use the CsvOutputOptions property to define how
DataBrew will write a CSV file.
Use the OutputFormatOptions property to define the
structure of CSV job output.
| February 4, 2021 |
Updated resource | The following resource was updated: AWS::ElastiCache::GlobalReplicationGroup.
-
AWS::ElastiCache::GlobalReplicationGroup
-
Consists of a primary cluster that accepts writes and an associated secondary cluster that resides in a different Amazon region. The secondary cluster accepts only reads. The primary cluster automatically replicates updates to the secondary cluster.
| February 4, 2021 |
New resource | Added the following resource: AWS::ImageBuilder::ContainerRecipe. | February 4, 2021 |
Updated resource | The following resource was updated: AWS::ApiGatewayV2::Stage. | January 28, 2021 |
New resource | The following resource was added: AWS::LookoutVision:Project. | January 28, 2021 |
Updated resources | The following resources were updated:
AWS::Location::GeofenceCollection,
AWS::Location::Map,
AWS::Location::PlaceIndex,
AWS::Location::RouteCalculator, and
AWS::Location::Tracker. | January 27, 2021 |
New collection resource | The following resource was added: AWS::Rekognition::Collection.
-
AWS::Rekognition::Collection
-
The AWS::Rekognition::Collection type creates a server-side container called a collection. You can use a collection
to store information about detected faces and search for known faces in images, stored videos, and streaming videos.
| January 27, 2021 |
Updated resource | The following resource was updated: AWS::ACMPCA::Certificate.
-
AWS::ACMPCA::Certificate
-
Use the ApiPassthrough property to include parameters
in certificates during issuance.
Use the ValidityNotBefore property to customize the
start of certificate validity.
| January 21, 2021 |
Updated resource | The following resource was updated:
AWS::MediaConnect::FlowVpcInterface. | January 21, 2021 |
Updated resource | The following resources were updated: AWS::SageMaker::Device,
AWS::SageMaker::DeviceFleet, and AWS::SageMaker::Model.
-
AWS::SageMaker::Device
-
Use the DeviceFleetName property to get the name of
the fleet the device belongs to.
Use the Device property to make the edge device you
want to create.
Use the Tags property to get the tags registered to a
specific device.
Use the Device.Device property/resource to get
information about a particular device.
Use the Device.Device.Description property/resource
to get a description of the device.
Use the Device.Device.DeviceName property/resource to
get the device name.
Use the Device.Device.IotThingName property/resource
to get the IoT object name.
-
AWS::SageMaker::DeviceFleet
-
Use the DeviceFleet.Description property to get
information about a fleet.
Use the OutputConfig property to get the output
configuration for the fleet.
Use the RoleArn property to get the ARN of the IoT
thing.
Use the Tags property to get the tags registered to a
specific fleet.
Use the EdgeOutputConfig.KmsKeyId property/resource
to set the KMS key ID.
Use the EdgeOutputConfig.S3OutputLocation
property/resource to set the S3 bucket URI.
-
AWS::SageMaker::Model
-
Use the MultiModelConfiguration property to specify
configuration details for a multi-model endpoint.
| January 21, 2021 |
New resources | The following resource was added: AWS::SageMaker::Project. | January 21, 2021 |
Updated resource | The following resource was updated with examples: AWS::S3::AccessPoint
-
Access
Points
-
Use the AWS::S3::AccessPoint resource to specify an S3 access
point.
| January 20, 2021 |
Updated resource | The following resource was updated: AWS::MSK::Cluster | January 15, 2021 |
New resource | The AWS::EMRContainers::VirtualCluster resource was added. | January 14, 2021 |
New resource | The following resource was added: AWS::QuickSight::DataSet and
AWS::QuickSight::DataSource. | January 14, 2021 |
New resource | The following resource was added: AWS::QuickSight::Analysis,
AWS::QuickSight::Dashboard, AWS::QuickSight::Template, and
AWS::QuickSight::Theme.
-
AWS::QuickSight::Analysis
-
Use the AWS::QuickSight::Analysis resource to
create an analysis in Amazon QuickSight.
-
AWS::QuickSight::Dashboard
-
Use the AWS::QuickSight::Dashboard resource to
create a dashboard from a template in Amazon QuickSight.
-
AWS::QuickSight::Template
-
Use the AWS::QuickSight::Template resource to
create a template from an existing Amazon QuickSight analysis or
template.
-
AWS::QuickSight::Theme
-
Use the AWS::QuickSight::Theme resource to
create a theme in Amazon QuickSight.
| January 14, 2021 |
New resource | The following new resources were added:
AWS::ServiceCatalogAppRegistry::Application, AWS::ServiceCatalogAppRegistry::AttributeGroup, AWS::ServiceCatalogAppRegistry::AttributeGroupAssociation, AWS::ServiceCatalogAppRegistry::ResourceAssociation | January 14, 2021 |
Updates to resource | The following resource was updated:
AWS::SSO::InstanceAccessControlAttributeConfiguration. | January 7, 2021 |
Updated resources | The following resources were updated: AWS::IoTWireless::Destination, AWS::IoTWireless::DeviceProfile, AWS::IoTWireless::ServiceProfile, AWS::IoTWireless::WirelessDevice, and AWS::IoTWireless::WirelessGateway. | January 7, 2021 |
Updated resource | The following resource was updated: AWS::ApiGatewayV2::Integration. | January 7, 2021 |
Updated resource | The following resource was updated: AWS::EC2::LaunchTemplate | January 7, 2021 |
Updated resource | The following resources were updated: AWS::FMS::Policy.
-
AWS::FMS::Policy
-
The AWS::FMS::Policy resource now allows you to manage AWS Network Firewall policies.
| January 7, 2021 |
New resources | The following resources were added: AWS::MediaConnect::Flow,
AWS::MediaConnect::FlowEntitlement,
AWS::MediaConnect::FlowOutput,
AWS::MediaConnect::FlowSource, and
AWS::MediaConnect::FlowVpcInterface.
-
AWS::MediaConnect::Flow
-
Use the AWS::MediaConnect::Flow resource to create a
connection between one or more video sources and one or more
outputs.
-
AWS::MediaConnect::FlowEntitlement
-
Use the AWS::MediaConnect::FlowEntitlement resource
to grant permission to another AWS account to allow
access to the content in a specific AWS Elemental
MediaConnect flow.
-
AWS::MediaConnect::FlowOutput
-
Use the AWS::MediaConnect::FlowOutput resource to
define the destination address, protocol, and port that you want
MediaConnect to send the ingested video to.
-
AWS::MediaConnect::FlowSource
-
Use the AWS::MediaConnect::FlowSource resource to
define where the external video content comes from.
-
AWS::MediaConnect::FlowVpcInterface
-
Use the AWS::MediaConnect::FlowVpcInterface resource
to create a connection between your MediaConnect flow and a virtual
private cloud (VPC) that you created using the Amazon Virtual
Private Cloud service.
| January 7, 2021 |
New resources | The following resources were added: AWS::Route53::DNSSEC and AWS::Route53::KeySigningKey.
-
AWS::Route53::DNSSEC
-
Use the AWS::Route53::DNSSEC resource to enable DNSSEC signing for a hosted zone.
-
AWS::Route53::KeySigningKey
-
Use the AWS::Route53::KeySigningKey resource to specify configuration settings for a key-signing key (KSK) that's
associated with a hosted zone.
| January 7, 2021 |
New resource | The following resource was added: AWS::Route53Resolver::ResolverDNSSECConfig. | January 7, 2021 |
New Resources | The following resources were added: AWS::DataSync::Agent, AWS::DataSync::LocationEFS,
AWS::DataSync::LocationFSxWindows, AWS::DataSync::LocationNFS,
AWS::DataSync::LocationObjectStorage, AWS::DataSync::LocationS3,
AWS::DataSync::LocationSMB, and AWS::DataSync::Task. | January 7, 2021 |
Updated resource | The following resource was updated: AWS::Glue::Table
-
AWS::Glue::Table
-
Use the SchemaReference property to specify an object that references a schema stored in the AWS Glue Schema Registry.
Use the TableInput.TargetTable property to specify a TableIdentifier structure that describes a target table for resource linking.
Use the Table.TableIdentifier property to specify a target table for resource linking.
| December 22, 2020 |
Updated resource | The following resource was updated: AWS::Glue::Partition
-
AWS::Glue::Partition
-
Use the SchemaReference property to specify an object that references a schema stored in the AWS Glue Schema Registry.
| December 22, 2020 |
Updated resource | The following resource was updated: AWS::Glue::Database
-
AWS::Glue::Database
-
Use the
DatabaseInput.TargetDatabase property to specify a TableIdentifier structure that describes a target table for resource linking.
Use the
Database.DatabaseIdentifier property to specify a target database for resource linking.
| December 22, 2020 |
Updated resource | The following resource was updated: AWS::Glue::MLTransform
-
AWS::Glue::MLTransform
-
Use the
TransformEncryption property to specify the encryption-at-rest settings of the transform that apply to accessing user data.
Use the
MLUserDataEncryption property to specify the encryption mode and customer-provided KMS key ID.
| December 22, 2020 |
New resource | The following resource was added: AWS::MWAA::Environment
-
AWS::MWAA::Environment
-
Use the AWS::MWAA::Environment resource to create an Amazon Managed Workflows for Apache Airflow (MWAA) environment.
| December 21, 2020 |
Updated resources | The following resources were updated: AWS::EC2::Instance, AWS::EC2::SpotFleet,
AWS::EC2::Volume. | December 18, 2020 |
Updated resources | The following resources were updated: AWS::ECS::Service
-
AWS::ECS::Service
-
Use the DeploymentCircuitBreaker property to enable
the deployment circuit breaker for a service.
| December 18, 2020 |
Updated resources | The following resources were updated: AWS::ElastiCache::User AWS::ElastiCache::UserGroup and AWS::ElastiCache::ReplicationGroup. | December 18, 2020 |
Updated resource | The following resource was updated: AWS::Batch::JobDefinition
- AWS::Batch::JobDefinition
-
Use the PlatformCapabilities property to specify whether the job requires EC2 or
FARGATE resources.
Use the PropagateTags property to specify whether to propagate tags from the job definition to
the corresponding Amazon ECS task.
In the ContainerProperties property type:
-
Use the FargatePlatformConfiguration property to specify the Fargate platform version to use
for jobs running on Fargate resources.
-
Use the NetworkConfiguration property to specify the network configuration for jobs running
on Fargate resources.
- AWS::Batch::JobDefinition
-
In the ContainerProperties property type, use the FargatePlatformConfiguration property to define the version of the Fargate platform used for the
job.
| December 18, 2020 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem | December 18, 2020 |
Updated resource | The following resources were updated: AWS::S3::Bucket
-
SourceSelectionCriteria
-
Use the ReplicaModifications property in AWS::S3::Bucket
SourceSelectionCriteria to filter modifications on replicas.
-
Amazon S3 Bucket
Keys
-
Use the BucketKeyEnabled property to specify an S3 Bucket Key with
default encryption using AWS Key Management Service.
| December 18, 2020 |
New resources | The following resources were added: AWS::CloudFormation::ModuleDefaultVersion and
AWS::CloudFormation::ModuleVersion.
-
AWS::CloudFormation::ModuleDefaultVersion
-
Use the AWS::CloudFormation::ModuleDefaultVersion resource to
specify the default version of a module, which will be used in CloudFormation operations for this account and Region.
-
AWS::CloudFormation::ModuleVersion
-
Use the AWS::CloudFormation::ModuleVersion resource to register the
specified version of the module with the CloudFormation service, making it
available for use in CloudFormation templates in this account and
Region.
| December 18, 2020 |
New resources | The following resources were added: AWS::DevOpsGuru::NotificationChannel, AWS::DevOpsGuru::ResourceCollection
-
AWS::DevOpsGuru::NotificationChannel
Use the AWS::DevOpsGuru::NotificationChannel resource to add a notification
channel to Amazon DevOps Guru. The notification channel is used to notify you about
important events. For example, the creation of an insight or a change in an
insight's severity. -
AWS::DevOpsGuru::ResourceCollection
Use the AWS::DevOpsGuru::ResourceCollection resource to specify a collection of resources in your account that you want Amazon DevOps Guru to analyze. The
specified resources are analyzed to generate insights that contain recommendations, related metrics, and operational data to help you improve the performance of your operational solutions.
| December 18, 2020 |
New resources | The following resources were added: AWS::EC2::NetworkInsightsPath and
AWS::EC2::NetworkInsightsAnalysis. | December 18, 2020 |
New resources | The following resources were added: AWS::ECR::PublicRepository | December 18, 2020 |
New resources | The following resources were added: AWS::LicenseManager::Grant and AWS::LicenseManager::License. | December 18, 2020 |
New resources | The following resources were added: AWS::SageMaker::DataQualityJobDefinition,
AWS::SageMaker::Device, AWS::SageMaker::DeviceFleet,
AWS::SageMaker::ModelBiasJobDefinition,
AWS::SageMaker::ModelExplainabilityJobDefinition,
AWS::SageMaker::ModelQualityJobDefinition, AWS::SageMaker::ModelPackageGroup, and
AWS::SageMaker::Pipeline.
-
AWS::SageMaker::DataQualityJobDefinition
-
Use the AWS::SageMaker::DataQualityJobDefinition
resource to create a monitoring job that monitors drift in data
quality.
-
AWS::SageMaker::Device
-
Use the AWS::SageMaker::Device resource to register
your Devices against an existing SageMaker Edge Manager DeviceFleet.
Each device must be listed individually in the CFN
specification.
-
AWS::SageMaker::DeviceFleet
-
Use the AWS::SageMaker::DeviceFleet resource to
create a DeviceFleet that manages your SageMaker Edge Manager
Devices. You must register your devices against the
DeviceFleet separately.
-
AWS::SageMaker::ModelBiasJobDefinition
-
Use the AWS::SageMaker::ModelBiasJobDefinition
resource to create a monitoring job that monitors potential bias in
your model.
-
AWS::SageMaker::ModelExplainabilityJobDefinition
-
Use the
AWS::SageMaker::ModelExplainabilityJobDefinition
resource to create a monitoring job that monitors feature
attribution drift in your model.
-
AWS::SageMaker::ModelQualityJobDefinition
-
Use the AWS::SageMaker::ModelQualityJobDefinition
resource to create a monitoring job that monitors quality drift in
your model.
-
AWS::SageMaker::ModelPackageGroup
-
Use the AWS::SageMaker::ModelPackageGroup resource to
create a group of related models.
-
AWS::SageMaker::Pipeline
-
Use the AWS::SageMaker::Pipeline resource to specify
shell scripts that run when you create and/or start a SageMaker
Pipeline. For information about SageMaker Pipelines, see SageMaker Pipelines in the Amazon SageMaker
Developer Guide.
| December 18, 2020 |
New resource | The following resource was added: AWS::AuditManager::Assessment | December 18, 2020 |
New resource | The following resources were added: AWS::GreengrassV2::ComponentVersion. | December 18, 2020 |
New resource | The following resources were added: AWS::IoTSitewise::AccessPolicy, AWS::IoTSiteWise::Dasboard, AWS::IoTSiteWise::Portal, and AWS::IoTSiteWise::Project. | December 18, 2020 |
New resource | The following resources were updated: AWS::Lambda::CreateEventSourceMapping and AWS::Lambda::Function.
-
AWS::Lambda::EventSourceMapping
-
Use the TumblingWindowInSeconds property to set the window size for SQS event sources.
Lambda now supports a Self-Managed Apache Kafka cluster as an event source.
-
AWS::Lambda::Function
-
Lambda now supports functions deployed as container images. Use the
ImageUri
property to specify the container image location.
In the Code
property type, new property ImageUri specifies the image to associate with your Lambda function.
| December 18, 2020 |
New resource | The following resource was added:
AWS::SSO::InstanceAccessControlAttributeConfiguration. | December 18, 2020 |
Updated resource | The following resource was updated to support specifying a capacity type for a
node group: AWS::EKS::Nodegroup.
-
AWS::EKS::Nodegroup
-
Use the CapacityType property to specify whether you
want to use Spot or On-Demand instance types for your node
group.
| December 17, 2020 |
Updated resource | The following resource was updated: AWS::GameLift::MatchmakingConfiguration. | November 24, 2020 |
Updated resource | The following resource was updated: AWS::Lambda::CreateEventSourceMapping. | November 24, 2020 |
Modules | Modules are a way for you to package resource configurations for inclusion across
stack templates, in a transparent, manageable, and repeatable way. Modules can
encapsulate common service configurations and best practices as modular, customizable
building blocks for you to include in your stack templates. For more information, see Using modules to
encapsulate and reuse resource configurations. | November 24, 2020 |
New resource | The following resource was added: AWS::Lambda::CodeSigningConfig. | November 23, 2020 |
Updated resource | The following resource was updated: AWS::CloudFront::Distribution. | November 19, 2020 |
Updated resource | The following resources were updated: AWS::EC2::LaunchTemplate and
AWS::EC2::ClientVpnEndpoint.
-
AWS::EC2::ClientVpnEndpoint
-
Use the ClientConnectOptions property to indicate whether
client connect options are used for Client VPN.
-
AWS::EC2::LaunchTemplate
-
Use the AssociateCarrierIpAddress property to indicates
whether to associate a Carrier IP address with eth0 for a new network
interface.
-
AWS::EC2::LaunchTemplate
-
Use the EnclaveOptions property to indicate whether the
instance is enabled for AWS Nitro Enclaves.
-
AWS::EC2::LaunchTemplate
-
Use the NetworkCardIndex property to specify the network
card index.
| November 19, 2020 |
Updated resource | The following resource was updated: AWS::Events::EventBusPolicy.
-
AWS::Events::EventBusPolicy
-
Added the Statement property. Use the Statement
property to add a statement to the policy attached to an event bus.
| November 19, 2020 |
Updated resource | The following resource was updated: AWS::KMS::Key.
-
AWS::KMS::Key
-
Added support for asymmetric KMS keys, including the KeySpec property
and the SIGN_VERIFY value for the KeyUsage property.
| November 19, 2020 |
New resources | The following resources were added: AWS::CloudFront::KeyGroup and AWS::CloudFront::PublicKey. | November 19, 2020 |
New resource | The following resource was added: AWS::Glue::Registry
-
AWS::Glue::Registry
-
Use the
AWS::Glue::Registry resource to manage registries in the AWS Glue Schema Registry.
| November 19, 2020 |
New resource | The following resource was added: AWS::Glue::Schema
-
AWS::Glue::Schema
-
Use the
AWS::Glue::Schema resource to manage schemas in the AWS Glue Schema Registry.
| November 19, 2020 |
New resource | The following resource was added: AWS::Glue::SchemaVersion
-
AWS::Glue::SchemaVersion
-
Use the
AWS::Glue::SchemaVersion resource to manage schema versions in the AWS Glue Schema Registry.
| November 19, 2020 |
New resource | The following resource was added: AWS::Glue::SchemaVersionMetadata | November 19, 2020 |
New resource | The following resource is new: AWS::IoT::TopicRuleDestination | November 19, 2020 |
New resource | The following resources were added: AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::LoggingConfiguration, and AWS::NetworkFirewall::RuleGroup
-
AWS::NetworkFirewall::Firewall
-
Use the AWS::NetworkFirewall::Firewall resource to specify stateful, managed, network firewall and intrusion detection and prevention for your VPCs in Amazon VPC.
-
AWS::NetworkFirewall::FirewallPolicy
-
Use the AWS::NetworkFirewall::FirewallPolicy resource to specify the stateless and stateful network traffic filtering behavior for your AWS::NetworkFirewall::Firewall.
-
AWS::NetworkFirewall::LoggingConfiguration
-
Use the AWS::NetworkFirewall::LoggingConfiguration resource to specify the destinations and logging options for an AWS::NetworkFirewall::Firewall.
-
AWS::NetworkFirewall::RuleGroup
-
Use the AWS::NetworkFirewall::RuleGroup resource to specify a reusable collection of stateless or stateful network traffic filtering rules for use in your AWS::NetworkFirewall::FirewallPolicy.
| November 19, 2020 |
New resource | The following resource was added: AWS::S3::StorageLens
-
S3 Storage
Lens
-
Use the AWS::S3::StorageLens resource to create a S3 Storage Lens
configuration in the Amazon Simple Storage Service.
| November 19, 2020 |
Change sets for nested stacks | With change sets for nested stacks you can preview the changes to your application
and infrastructure resources across the entire nested stack hierarchy and proceed
with updates when you've confirmed that all the changes are as intended. For more information, see Change sets for nested stacks. | November 18, 2020 |
Updated resources | The following resources were updated: AWS::AppMesh::VirtualNode and
AWS::AppMesh::VirtualGateway
-
AWS::AppMesh::VirtualNode
-
Use the ConnectionPool property to specify the type of
connection pool for the listener.
Use the VirtualNodeHttp2ConnectionPool property to specify
an http2 type of connection pool.
Use the VirtualNodeGrpcConnectionPool property to specify a
grpc type of connection pool.
Use the VirtualNodeConnectionPool property to specify the
type of virtual node connection pool.
Use the VirtualNodeHttpConnectionPool property to specify an
http type of connection pool.
Use the OutlierDetection property to specify the type of
outlier detection for the listener.
Use the VirtualNodeTcpConnectionPool property to specify an
http2 type of connection pool.
-
AWS::AppMesh::VirtualGateway
-
Use the ConnectionPool property to specify the type of
connection pool for the listener.
Use the VirtualGatewayHttpConnectionPool property to specify
an http type of connection pool.
Use the VirtualGatewayHttp2ConnectionPool property to
specify an http2 type of connection pool.
Use the VirtualGatewayConnectionPool property to specify the
type of virtual gateway connection pool.
Use the VirtualGatewayGrpcConnectionPool property to specify
a grpc type of connection pool.
| November 12, 2020 |
Updated resource | The following resources were updated: AWS::EC2::Route and
AWS::EC2::VPCEndpointService.
-
AWS::EC2::Route
-
Use the VpcEndpointId property to create a route to a
Gateway Load Balancer endpoint.
-
AWS::EC2::VPCEndpointService
-
Use the GatewayLoadBalancerArns property to specify a
Gateway Load Balancer for your VPC endpoint service.
| November 12, 2020 |
Updated resource | The following resource was updated:
AWS::Kendra::DataSource. | November 12, 2020 |
New resources: | This is the first release of AWS Glue DataBrew. | November 12, 2020 |
Updated resource | The following resources were updated: AWS::S3::Bucket | November 9, 2020 |
Updated resources | The following resources were updated: AWS::CodeArtifact::Domain and AWS::CodeArtifact::Repository. | November 5, 2020 |
Updated resource | The following resource was updated: AWS::Batch::JobDefinition | November 5, 2020 |
Updated resource | The following resource was updated: AWS::EC2::Route.
-
AWS::EC2::Route
-
Use the CarrierGatewayId property to create a route to a
carrier gateway.
| November 5, 2020 |
Updated resource | The following resource was updated: AWS::AutoScaling::AutoScalingGroup.
-
CapacityRebalance
-
Use the CapacityRebalance property to indicate whether Capacity
Rebalancing is enabled.
| November 5, 2020 |
Updated resource | The following resource was updated: AWS::Lambda::EventSourceMapping.
-
AWS::Lambda::EventSourceMapping
-
Use the Queues property to specify the Amazon MQ queue to stream to a Lambda function.
Use the Source access configuration property to specify the Secrets Manager secret that stores
your MQ broker credentials.
| November 5, 2020 |
New resource | The following new resource was added: AWS::Events::Archive. | November 5, 2020 |
New resource | The following resource was added: AWS::IoT::DomainConfiguration. | November 5, 2020 |
New resource | The following resource was added: AWS::RDS::GlobalCluster.
-
AWS::RDS::GlobalCluster
-
Use the AWS::RDS::GlobalCluster resource to create or update an Aurora global database cluster.
| November 5, 2020 |
Updated resource | The following resources were updated: AWS::AmazonMQ::Broker, AWS::AmazonMQ::Configuration, AWS::AmazonMQ::ConfigurationAssociation | November 4, 2020 |
Updated resource | The following resource was updated: AWS::GlobalAccelerator::EndpointGroup. | October 29, 2020 |
New resources | The following resources were added: AWS::IVS::Channel, AWS::IVS::StreamKey, and
AWS::IVS::PlaybackKeyPair
-
AWS::IVS::Channel
-
Use the AWS::IVS::Channel resource to specify an
Amazon IVS Channel, which stores configuration information related
to your live stream.
-
AWS::IVS::StreamKey
-
Use the AWS::IVS::StreamKey resource to specify an
Amazon IVS Stream Key, which creates a stream key for the specified
IVS Channel. Use a stream key to initiate a live stream.
-
AWS::IVS::PlaybackKeyPair
-
Use the AWS::IVS::PlaybackKeyPair resource to specify
an Amazon IVS PlaybackKeyPair, which is used to sign and validate a
playback authorization token for a private channel.
| October 29, 2020 |
New resource | The following resources were added: AWS::IoTSitewise::Asset, AWS::IoTSiteWise::AssetModel, and AWS::IoTSiteWise::Gateway. | October 28, 2020 |
Updated resource | The following resource was updated: AWS::AutoScaling::AutoScalingGroup.
-
AWS::AutoScaling::AutoScalingGroup
-
Use the NewInstancesProtectedFromScaleIn property to specify
whether newly launched instances are protected from termination by Amazon EC2 Auto
Scaling when scaling in.
| October 26, 2020 |
Updated resources | The following resources were updated: AWS::Batch::ComputeEnvironment, AWS::Batch::JobDefinition,
and AWS::Batch::JobQueue. | October 22, 2020 |
Updated resource | The following resource was updated: AWS::AppSync::ApiKey. | October 22, 2020 |
Updated resource | The following resource was updated: AWS::CloudFront::Distribution. | October 22, 2020 |
Updated resource | The following resource was updated: AWS::EMR::Cluster.
-
AWS::EMR::Cluster
-
Use the LogEncryptionKmsKeyId property to specify the AWS KMS key used for encrypting log files.
Use the ManagedScalingPolicy property to create a managed scaling policy for an Amazon EMR cluster.
Use the StepConcurrencyLevel property to specify the number of steps that can be executed concurrently.
| October 22, 2020 |
Updated resource | The following resource was updated: AWS::Events::Rule. | October 22, 2020 |
Updated resource | Added a new property, FileFormat, to the FAQ
resource. For more information, see https://docs.aws.amazon.com/kendra/latest/dg/in-creating-faq.html | October 22, 2020 |
Updated resource | The following resource was updated: AWS::KinesisFirehose::DeliveryStream. | October 22, 2020 |
Updated resource | The following resource was updated: AWS::Elasticsearch::Domain.
-
AWS::Elasticsearch::Domain
-
In the ElasticsearchClusterConfig property type:
-
Use the WarmCount property to specify the number of warm nodes in the cluster.
-
Use the WarmEnabled property to specify whether to enable warm storage for the cluster.
-
Use the WarmType property to specify the instance type for the cluster's warm nodes.
| October 22, 2020 |
Updated resource | The following resource was updated: AWS::SNS::Topic.
-
AWS::SNS::Topic
-
Use the ContentBasedDeduplication property to enable content-based deduplication for FIFO topics.
Use the FifoTopic property to create a FIFO topic.
| October 22, 2020 |
New resources | The following resources were added: AWS::MediaPackage::Asset, AWS::MediaPackage::Channel,
, AWS::MediaPackage::OriginEndpoint, AWS::MediaPackage::PackagingConfiguration, and AWS::MediaPackage::PackagingGroup. | October 22, 2020 |
New resource | The following updated resource was added: BlockPublicPolicy | October 22, 2020 |
Increased quotas | The following AWS CloudFormation quotas have been updated.
-
You can now declare a maximum of 200 mappings in your
AWS CloudFormation template.
-
You can now declare a maximum of 200 mapping attributes for
each mapping in your AWS CloudFormation template.
-
You can now declare a maximum of 200 outputs in your
AWS CloudFormation template.
-
You can now declare a maximum of 200 parameters in your
AWS CloudFormation template.
-
You can now declare a maximum of 500 resources in your
AWS CloudFormation template.
-
You can now pass a template body with a maximum size of 1 MB
in an Amazon S3 object.
| October 22, 2020 |
Updated resource | The following resource was updated: AWS::Synthetics::Canary. | October 21, 2020 |
Updated resource | The following resource was updated: AWS::AmazonMQ::Broker.
-
AWS::AmazonMQ::Broker
-
Use the LdapServerMetadata property to to authenticate and authorize connections to a broker.
| October 9, 2020 |
New resources | The following resources were added: AWS::CodeArtifact::Domain and AWS::CodeArtifact::Repository. | October 8, 2020 |
New resources | The following resources were added: AWS::Timestream::Table and AWS::Timestream::Database.
-
AWS::Timestream::Table
-
Use the
AWS::Timestream::Table resource to create a new table in an existing database in Amazon Timestream.
-
AWS::Timestream::Database
-
Use the
AWS::Timestream::Database resource to create a new database in Amazon Timestream.
| October 8, 2020 |
Updated resources | The following resources were updated: AWS::ECS::Service
-
AWS::ECS::Service
-
Use the CapacityProviderStrategy property to specify
a custom capacity provider strategy when creating a service.
| October 1, 2020 |
Updated resource | The following resource was updated: AWS::Batch::JobDefinition. These property types were added.
- LogConfiguration
-
Use the LogConfiguration property type to specify the log configuration options to send to a custom log driver
for the container.
- Secrets
-
Use the Secrets
property type to specify a secret to expose to the container.
- Tmpfs
-
Use the Tmpfs property
type to specify the details of a tmpfs mount.
These property types were updated.
- ContainerProperties
-
These properties were added.
- ExecutionRoleArn
-
Specifies the execution role to be assumed for the job.
- LogConfiguration
-
Specifies the log configuration for a custom log driver for the job.
- Secrets
-
Specifies the secrets provided for the job.
- LinuxParameters
-
These properties were added.
- InitProcessEnabled
-
Indicates that an init process should be enabled inside the container that forwards signals and reaps
processes.
- MaxSwap
-
Specifies the total amount of swap memory (in MiB) a job can use.
- SharedMemorySize
-
Specifies the size (in MiB) of the /dev/shm volume.
- Swappiness
-
Specifies the job container's memory swappiness behavior.
- Tmpfs
-
Specifies the details of the job's tmpfs mount.
| October 1, 2020 |
Updated resource | The following resource was updated: AWS::CloudFront::CachePolicy. | October 1, 2020 |
Updated resource | The following resource was updated to support specifying a custom CIDR for
Kubernetes service IP address assignment: AWS::EKS::Cluster. | October 1, 2020 |
New resource | The following resource was added: AWS::WorkSpaces::ConnectionAlias
-
AWS::WorkSpaces::ConnectionAlias
-
Use the AWS::WorkSpaces::ConnectionAlias resource to specify a connection alias. Connection aliases are used for cross-Region redirection.
| October 1, 2020 |
Drift detection for private resources | CloudFormation supports drift detection operations on an expanded list of AWS
resources, as well as private resources that are defined as provisonable. In addition to the resources that previously supported drift detection,
CloudFormation now supports drift detection on all resources defined as
provisionable in the CloudFormation registry. For more information, see Resources that support import and drift detection operations. | October 1, 2020 |
Updated resource | The following resource was updated: AWS::MSK::Cluster
-
AWS::MSK::Cluster
-
Adding support for SASL/Scram (username- and password-based client
authentication.)
| September 24, 2020 |
Updated resource | The following resource was updated: AWS::ApiGateway::DomainName. | September 17, 2020 |
Updated resource | The following resource was updated: AWS::ApiGatewayV2::DomainName. | September 17, 2020 |
Updated resource | The following resource was updated: AWS::ApiGatewayV2::Api.
-
AWS::ApiGatewayV2::Api
-
Use the AWS::ApiGatewayV2::Api resource to disable the default endpoint for an HTTP API.
| September 17, 2020 |
New resources | The following resources were added: AWS::AppFlow::Flow and
AWS::AppFlow::ConnectorProfile. | September 17, 2020 |
New resource | The following resource was added: AWS::CloudFormation::StackSet.
-
AWS::CloudFormation::StackSet
-
Use the AWS::CloudFormation::StackSet resource to provision stacks
into AWS accounts and across Regions by using a single CloudFormation template.
| September 17, 2020 |
Updated resource | The following resource was updated: AWS::ApiGatewayV2::Authorizer. | September 10, 2020 |
Updated resource | The following resource was updated: AWS::CodeBuild::ReportGroup
-
AWS::CodeBuild::ReportGroup
-
Use the DeleteReports property to specify if any reports that
belong to the report group should be deleted when the report group
is deleted.
| September 10, 2020 |
Updated resource | The following resource was updated:
AWS::StepFunctions::StateMachine.
-
AWS::StepFunctions::StateMachine
-
The AWS::StepFunctions::StateMachine now supports X-Ray
tracing. You can use the TracingConfiguration property to
enable X-Ray tracing for your state machines.
| September 10, 2020 |
New resources | This is the first release of Amazon Kendra in AWS
CloudFormation. | September 10, 2020 |
New resources | The following resources were added: AWS::SSO::Assignment, AWS::SSO::PermissionSet.
-
AWS::SSO::Assignment
-
Use the AWS::SSO::Assignment resource to assign access to a
principal for a specified AWS account using a specified permission
set.
-
AWS::SSO::PermissionSet
-
Use the AWS::SSO::PermissionSet resource to create a
permission set within a specified SSO instance.
| September 10, 2020 |
Update resource | The following resource was updated: AWS::CloudFront::Distribution. | September 3, 2020 |
New resources | The following resources were added: AWS::CloudFront::CachePolicy, AWS::CloudFront::OriginRequestPolicy, and AWS::CloudFront::RealtimeLogConfig. | September 3, 2020 |
New resource | The following resource was added: AWS::CodeGuruReviewer::RepositoryAssociation | September 3, 2020 |
New resource | The following resource was added: AWS::EKS::FargateProfile. | September 3, 2020 |
Updated resource | The following resource was updated: AWS::CodeCommit::Repository Code | August 31, 2020 |
Updated resource | The following resource was updated: AWS::ServiceCatalog::CloudFormationProvisionedProduct. | August 27, 2020 |
New resources | The following resources were added: AWS::GameLift::GameServerGroup
-
AWS::GameLift::GameServerGroup
-
Use the AWS::GameLift::GameServerGroup resource to
create a GameLift FleetIQ game server group to run low-cost game hosting on your Amazon EC2 instances.
| August 27, 2020 |
New resources | The following resources were added: AWS::Route53Resolver::ResolverQueryLoggingConfig and AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation. | August 27, 2020 |
Updated resource | The following resource was updated: AWS::KMS::Key. | August 26, 2020 |
Updated resource | The following resource was updated to support use of a launch template:
AWS::EKS::Nodegroup.
-
AWS::EKS::Nodegroup
-
Use the LaunchTemplate property to specify a launch
template specification that can be used to deploy or update a
managed node group. If you use a launch template to deploy a node
group, some settings that you normally set for a node group must be
moved into the launch template. The text for affected settings has
been updated to note that.
| August 20, 2020 |
Updated resources | The following resources were updated: AWS::ECS::TaskDefinition
-
AWS::ECS::TaskDefinition
-
Use the EnvironmentFiles property to specify a list
of files containing the environment variables to pass to a
container.
| August 13, 2020 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
- AWS::FSx::FileSystem
-
In the LustreConfiguration property type, use
DriveCacheType to specify the type of drive cache
used by PERSISTENT_1 file systems that are provisioned
with HDD storage devices.
| August 13, 2020 |
Updated resource | The following resource was updated: AWS::Lambda::EventSourceMapping. | August 13, 2020 |
New resource | The following resource was added: AWS::ApplicationInsights::Application
| August 13, 2020 |
New resource | The following resource was added: AWS::EC2::CarrierGateway. | August 13, 2020 |
Updated permissions required for registering resource providers | Registering a resource provider in your account now requires you have permission
to access the schema handler package uploaded to an S3 bucket for that resource
provider. For more information, see Registering resource providers in CloudFormation. | August 7, 2020 |
Updated resource | The following resource was updated: AWS::CodeBuild::Project | August 6, 2020 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
- AWS::FSx::FileSystem
-
In the LustreConfiguration property type,
AutoImportPolicyType was changed to
AutoImportPolicy. Use AutoImportPolicy
to configure your Amazon FSx for Lustre file system to automatically
import metadata of objects that are added to or changed in your
linked S3 bucket after file system creation.
| August 6, 2020 |
Updated resources | The following resources were updated: AWS::ECS::TaskDefinition
-
AWS::ECS::TaskDefinition
-
Use the EFSVolumeConfiguration property to specify an
Amazon Elastic File System file system for task storage.
| July 30, 2020 |
Updated resource | The following resource was updated: AWS::EC2::FlowLog.
-
AWS::EC2::FlowLog
-
Use the LogFormat property to specify the fields for the
flow log record.
Use the MaxAggregationInterval property to specify the
maximum interval for capturing and aggregating flows.
Use the Tags property to specify tags for the flow
log.
| July 30, 2020 |
Updated resource | The following resource was updated: AWS::GroundStation::DataflowEndpointGroup.
-
MTU property
-
The MTU property sets the maximum transmission unit used for a dataflow endpoint.
| July 30, 2020 |
New resources | The following resources were added: AWS::AppMesh::VirtualGateway and
AWS::AppMesh::GatewayRoute
-
AWS::AppMesh::VirtualGateway
-
Use the AWS::AppMesh::VirtualGateway resource to create a
virtual gateway that allows resources outside of your mesh to communicate to
resources that are inside of your mesh.
-
AWS::AppMesh::GatewayRoute
-
Use the AWS::AppMesh::GatewayRoute resource to create a
gateway route that routes traffic to a virtual service.
| July 30, 2020 |
New resources | The following resource was added: AWS::SageMaker::MonitoringSchedule
-
AWS::SageMaker::MonitoringSchedule
-
Use the AWS::SageMaker::MonitoringSchedule resource
to create a monitoring schedule to regularly start an Amazon
SageMaker processing job to monitor the data captured for a
SageMaker endpoint.
| July 30, 2020 |
New property | The following properties were added:
AWS::CodeGuruProfiler::ProfilingGroup.AnomalyDetectionNotificationConfiguration
and AWS::CodeGuruProfiler::ProfilingGroup.Tags. | July 30, 2020 |
Updated resources | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup.
-
AWS::WAFv2::WebACL
-
Rule statements that use IP addresses now support using IP addresses that are forwarded in an HTTP header in the web request, instead of using the IP address that's reported by the web request origin. This option is available for all rule statements that use an IP address: GeoMatchStatement, RateBasedStatement, and IPSetReferenceStatement. The following new properties support this functionality: IPSetForwardedIPConfiguration and ForwardedIPConfiguration.
-
AWS::WAFv2::RuleGroup
-
Rule statements that use IP addresses now support using IP addresses that are forwarded in an HTTP header in the web request, instead of using the IP address that's reported by the web request origin. This option is available for all rule statements that use an IP address: GeoMatchStatement, RateBasedStatement, and IPSetReferenceStatement. The following new properties support this functionality: IPSetForwardedIPConfiguration and ForwardedIPConfiguration.
| July 23, 2020 |
Updated resource | The following resource was updated: AWS::EFS::FileSystem
- AWS::EFS::FileSystem
Use the BackupPolicy property to turn automatic backups on or off for your Amazon EFS file system. | July 23, 2020 |
Updated resource | The following resource was updated: AWS::CloudFront::Distribution. | July 23, 2020 |
Updated resource | The following resource was updated: AWS::CodeStarConnections::Connection | July 23, 2020 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
- AWS::FSx::FileSystem
-
In the LustreConfiguration property type, use
AutoImportPolicyType to configure how FSx imports
new files and file changes in the linked data repository into the
file system.
| July 23, 2020 |
Updated resource | The following resource was updated: EndpointConfig
-
AWS::SageMaker::EndpointConfig
-
Use the CaptureContentTypeHeader property to specify
content types (JSON and/or CSV) to capture.
Use the CaptureOption property to specify whether to
capture input data, output data, or both.
Use the DataCaptureConfig resource/property to
configure how the endpoint captures data.
| July 23, 2020 |
New resource | The following resource was added:
AWS::SecretsManager::RotationSchedule.HostedRotationLambda. | July 23, 2020 |
Updated resource | The following resource was updated: AWS::Amplify::App
-
AWS::Amplify::App
-
Use the EnableBranchAutoDeletion property to automatically
disconnect a branch in the Amplify Console when you delete a branch from your Git
repository.
| July 9, 2020 |
Updated resource | The following resource was updated: AWS::Amplify::Domain
-
AWS::Amplify::Domain
-
Use the AutoSubDomainCreationPatterns property to set branch
patterns for automatic subdomain creation.
Use the AutoSubDomainIAMRole property to specify the required AWS Identity and Access Management (IAM) service role for the Amazon Resource Name (ARN)
for automatically creating subdomains.
Use the EnableAutoSubDomain property to enable the automated
creation of subdomains for branches.
| July 9, 2020 |
Updated resource | The following resource was updated: AWS::Synthetics::Canary.
-
AWS::Synthetics::Canary
-
The MemoryInMB parameter was added. Also, the RunConfig parameter is no longer
required, and DurationInSeconds is no longer required.
| July 9, 2020 |
Updated resource | The following resource was updated: AWS::ElasticLoadBalancingV2::Listener. | July 9, 2020 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
- AWS::FSx::FileSystem
-
The StorageCapacity property has changed so that an
update requires no interruption.
In the WindowsConfiguration property type, the
ThroughputCapacity property has changed so that an
update requires no interruption.
In the LustreConfiguration property type:
-
Use the DailyAutomaticBackupStartTime
property to specify the time that the daily automatic backup
window starts.
-
Use the CopyTagsToBackups boolean property to
copy file system tags to its backups.
-
Use the AutomaticBackupRetentionDays property
to set the number of days to retain file system
backups.
| July 9, 2020 |
Updated resource | The following resource was updated: AWS::ServiceCatalog::CloudFormationProvisionedProduct. | July 9, 2020 |
New resource | The following resource was added: AWS::Athena::DataCatalog | July 9, 2020 |
New resource | The following resource was added: AWS::EC2::PrefixList. | July 9, 2020 |
New resource | The following resource was added: AWS::QLDB::Stream
-
AWS::QLDB::Stream
-
Use the AWS::QLDB::Stream resource to specify a new journal
stream for a given Amazon Quantum Ledger Database (Amazon QLDB) ledger.
| July 9, 2020 |
New property | The following property was added to AWS::CodeBuild::Project Source: BuildStatusConfig | July 9, 2020 |
New property | The following resource was added:
AWS::CodeGuruProfiler::ProfilingGroup.ComputePlatform. | July 9, 2020 |
Updated resource | The following resource was updated: AWS::Events::Rule.
-
AWS::Events::Rule
-
In the Target property type, use the HttpParameters property to
specify the HTTP parameters to use when the target is a API Gateway REST
endpoint.
| July 6, 2020 |
Updated resource | The following resource was updated: AWS::ApplicationAutoScaling::ScalableTarget. | July 1, 2020 |
New resource | The following resource was added: AWS::AppConfig::HostedConfigurationVersion | June 25, 2020 |
Updated resources | The following resources were updated: AWS::ServiceDiscovery::HttpNamespace,
AWS::ServiceDiscovery::PrivateDnsNamespace, AWS::ServiceDiscovery::PublicDnsNamespace,
AWS::ServiceDiscovery::Service. | June 22, 2020 |
Updated resources | The following resources were updated: AWS::ECS::Cluster
-
AWS::ECS::Cluster
-
Use the CapacityProviderStrategyItem property to
specify the capacity provider strategy when creating a
cluster.
| June 18, 2020 |
Updated resource | The following resources were updated: AWS::FMS::Policy IEMap.
-
AWS::FMS::Policy IEMap
-
The AWS::FMS::Policy IEMap resource now allows you to specify accounts using AWS Organizations organizational units (OUs),
in addition to account IDs.
| June 18, 2020 |
New resources | The following resources were added: AWS::ECS::CapacityProvider. | June 18, 2020 |
Updated resource | The following resource was updated: AWS::EFS::FileSystem
- AWS::EFS::FileSystem
Use the FileSystemPolicy property to create a new resource policy to control NFS access to your Amazon EFS file system. | June 16, 2020 |
Updated resource | The following resource was updated: AWS::EFS::AccessPoint | June 16, 2020 |
Updated resource | The following resource was updated: AWS::Lambda::Function.
-
AWS::Lambda::Function
-
Use the FileSystemConfigs property to specify connection settings for an Amazon EFS
file system.
| June 16, 2020 |
Updated resources | The following resource was updated: AWS::EC2::Volume.
-
AWS::EC2::Volume
-
Use the OutpostArn property to specify the Amazon Resource
Name (ARN) of the Outpost.
| June 11, 2020 |
Updated resource | The following resource was updated: AWS::CertificateManager::Certificate
-
AWS::CertificateManager::Certificate
-
Use the CertificateAuthorityArn property to specify the
Amazon Resource Name (ARN) of the private certificate authority (CA) that
will be used to issue the certificate.
Use the CertificateTransparencyLoggingPreference property to
enable or disable certificate transparency logging.
| June 11, 2020 |
Updated resource | The following resource was updated: AWS::CloudFront::Distribution.
-
AWS::CloudFront::Distribution
-
In the Origin property type, use the ConnectionAttempts property to specify the number of times that CloudFront attempts to connect to the origin.
In the Origin property type, use the ConnectionTimeout property to specify the number of seconds that CloudFront waits when trying to establish a connection to the origin.
| June 11, 2020 |
Updated resource | The following resource was updated: AWS::ElasticLoadBalancingV2::LoadBalancer. | June 11, 2020 |
Updated resource | The following resource was updated: AWS::ElastiCache::ReplicationGroup. | June 11, 2020 |
New resource | The following resources were added: AWS::RDS::DBProxy and
AWS::RDS::DBProxyTargetGroup.
-
AWS::RDS::DBProxy
-
Use the AWS::RDS::DBProxy resource to create or
update a DB proxy. Use the AWS::RDS::DBProxyTargetGroup
resource to specify a set of RDS DB instances, Aurora DB clusters,
or both that a proxy can connect to.
| June 4, 2020 |
Resource import supports provisionable private resource types | Import operations now support private resource types that are
provisionable; that is, whose provisioning type is either
FULLY_MUTABLE or IMMUTABLE. For more information, see
Resources that support import operations. | June 3, 2020 |
New property | The following property was added:
AWS::CodeGuruProfiler::ProfilingGroup.AgentPermissions. | June 3, 2020 |
Updated resource | The following resource was updated: AWS::EC2::ClientVpnEndpoint | May 28, 2020 |
Updated resource | The following resource was updated: AWS::MSK::Cluster
-
AWS::MSK::Cluster
-
You can now update an existing MSK cluster to a newer version of
Apache Kafka. You can't update it to an older version.
| May 28, 2020 |
Updated resource | The following resource was updated: AWS::CodeBuild::ReportGroup
-
AWS::CodeBuild::ReportGroup
-
Use the tags property to specify the name and value of any
tags that you want supporting AWS services to use for a report
group.
| May 21, 2020 |
Updated resource | The following resource was updated:
AWS::StepFunctions::StateMachine.
-
AWS::StepFunctions::StateMachine
-
The AWS::StepFunctions::StateMachine has two new properties.
You can use the DefinitionS3Location property to reference a
state machine JSON definition file stored in an S3 bucket. You can use the
DefinitionSubstitutions property to pass variables into the
state machine definition file referenced by
DefinitionS3Location.
| May 21, 2020 |
Updated resource | The following resource was updated: AWS::SSM::Parameter
-
AWS::SSM::Parameter
-
When you create a String parameter, you can now specify a DataType value as aws:ec2:image to ensure that the parameter value you enter is a valid Amazon Machine Image (AMI) ID format. Support for AMI ID formats lets you avoid updating all your scripts and templates with a new ID each time the AMI that you want to use in your processes changes. You can create a parameter with the data type aws:ec2:image, and for its value, enter the ID of an AMI. This is the AMI from which you currently want new instances to be created. You then reference this parameter in your templates and commands. When youāre ready to use a different AMI, update the parameter value. Parameter Store validates the new AMI ID, and you donāt need to update your scripts and templates.
| May 21, 2020 |
ECS blue/green deployments through CodeDeploy | You can now use CloudFormation to perform ECS blue/green deployments through
CodeDeploy. Blue/green deployments are a safe deployment strategy provided by AWS
CodeDeploy for minimizing interruptions caused by changing application
versions. For more information, see Performing ECS
blue/green deployments through CodeDeploy using AWS CloudFormation. | May 19, 2020 |
AWS CloudFormation StackSets Region availability | AWS CloudFormation StackSets is now available in the AWS GovCloud (US-West)
Region. | May 18, 2020 |
Updated resource | The following resource was updated: AWS::Synthetics::Canary. | May 14, 2020 |
Updated resource | The following resource was updated: AWS::CodeStarConnections::Connection | May 14, 2020 |
Updated resource | The following resource was updated: AWS::ServiceCatalog::CloudFormationProduct. | May 14, 2020 |
New resources | The following resources were added: AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, and AWS::GlobalAccelerator::Listener | May 14, 2020 |
New resources | The following resources were added: AWS::Macie::CustomDataIdentifier,
AWS::Macie::FindingsFilter, and AWS::Macie::Session | May 14, 2020 |
Updated resource | The following resource was updated: AWS::IoTEvents::DetectorModel.
-
AWS::IoTEvents::DetectorModel
-
Added the following properties: AssetPropertyTimestamp, AssetPropertyValue, AssetPropertyVariant,
DynamoDB, DynamoDBv2, IotSiteWise, and Payload.
Updated the following property: SetTimer.
| May 7, 2020 |
Updated resource | The following resource was updated: AWS::SSM::Association
-
AWS::SSM::Association
-
Use the WaitForSuccessTimeoutSeconds property to specify the
number of seconds the service should wait for the association status to show
"Success" before proceeding with the stack execution. If the association
status doesn't show "Success" after the specified number of seconds, then
stack creation fails.
| May 7, 2020 |
New resource | The following resource was added: AWS::ImageBuilder::Image. | May 7, 2020 |
Updated resource | The following resource was updated: AWS::Synthetics::Canary. | April 30, 2020 |
New resource | The following resource was added: AWS::EventSchemas::RegistryPolicy. | April 30, 2020 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
- AWS::FSx::FileSystem
-
Use the LustreMountName attribute when mounting an
Amazon FSx for Lustre file system.
| April 23, 2020 |
New resources | The following resources were added: AWS::ImageBuilder::Component,
AWS::ImageBuilder::DistributionConfiguration,
AWS::ImageBuilder::ImagePipeline, AWS::ImageBuilder::ImageRecipe, and
AWS::ImageBuilder::InfrastructureConfiguration. | April 23, 2020 |
New resource | The following resource was added: AWS::Synthetics::Canary.
-
AWS::Synthetics::Canary
-
Use the AWS::Synthetics::Canary resource to create a canary.
Canaries are configurable scripts that run on a schedule and monitor your endpoints and APIs.
By using canaries, you can discover issues before your customers do.
| April 23, 2020 |
New resource | The following resource was added: AWS::CE::CostCategory
-
AWS::CE::CostCategory
-
Use the
AWS::CE::CostCategory resource to create groupings of costs that you can use across products in the AWS Billing and Cost Management console.
| April 23, 2020 |
Updated resource | The following resource was updated: AWS::Glue::DevEndpoint
-
AWS::Glue::DevEndpoint
-
Use the
PublicKeys property to specify a list of public keys to be used by a development endpoint for authentication.
| April 16, 2020 |
Updated resource | The following resource was updated: AWS::Glue::MLTransform
-
AWS::Glue::MLTransform
-
Use the
Tags property to specify the AWS resource tags to use to manage access to a machine learning transform.
| April 16, 2020 |
New resource | The following resource was added: AWS::ResourceGroups::Group
-
AWS::ResourceGroups::Group
-
Use the AWS::ResourceGroups::Group resource to create
a resource group with the specified name, description, and resource
query.
| April 16, 2020 |
Updated resource | The following resource was updated: AWS::CloudWatch::InsightRule. | April 2, 2020 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
- AWS::FSx::FileSystem
-
Use the StorageType property to specify the type of
storage for the file system, either solid state drive,
SSD or hard disk drive, HDD.
In the WindowsConfiguration property type, use the
DeploymentType property to specify a new Amazon FSx
for Windows File Server file system deployment type,
SINGLE_AZ_2, the latest generation of Single-AZ
file systems.
| April 2, 2020 |
Updated resource | The following resource was updated: AWS::ServiceCatalog::LaunchRoleConstraint. | April 2, 2020 |
Updated resource | The following resource was updated: AWS::ApiGatewayV2::Integration. | March 26, 2020 |
Updated resource | The following resource was updated: AWS::Cognito::UserPool
-
AWS::Cognito::UserPool
-
Use the
UsernameConfiguration property to set case sensitivity on the username input for the selected sign-in option.
| March 26, 2020 |
Updated resource | The following resource was updated: AWS::EC2::Volume
-
AWS::EC2::Volume
-
Use the MultiAttachEnabled property to indicate whether
Amazon EBS Multi-Attach is enabled.
| March 26, 2020 |
Updated resource | The following resource was updated: AWS::AutoScaling::AutoScalingGroup. | March 26, 2020 |
Updated resource | The following resource was updated: AWS::RDS::DBInstance
-
AWS::RDS::DBInstance
-
The AWS::RDS::DBInstance resource now supports Read
Replica across multiple Availability Zone deployments.
| March 26, 2020 |
New resources | The following resources were added: AWS::Detective::Graph and AWS::Detective::MemberInvitation | March 26, 2020 |
Updated resource | The following resource was updated: AWS::EC2::ClientVpnEndpoint. | March 19, 2020 |
New resources | The following resources were added: AWS::NetworkManager::CustomerGatewayAssociation, AWS::NetworkManager::Device, AWS::NetworkManager::GlobalNetwork, AWS::NetworkManager::Link, AWS::NetworkManager::LinkAssociation, AWS::NetworkManager::Site, and AWS::NetworkManager::TransitGatewayRegistration | March 19, 2020 |
New resource | The following resource was added:
AWS::CodeGuruProfiler::ProfilingGroup. | March 19, 2020 |
New resources | The following resources were added: AWS::Cassandra::Keyspace and
AWS::Cassandra::Table.
-
AWS::Cassandra::Keyspace
-
Use the AWS::Cassandra::Keyspace resource to create a
new keyspace in Amazon Keyspaces (for Apache Cassandra).
-
AWS::Cassandra::Table
-
Use the AWS::Cassandra::Table resource to create a
new table in Amazon Keyspaces (for Apache Cassandra).
| March 16, 2020 |
Updated resource | The following resources were updated: AWS::AppMesh::VirtualNode,
AWS::AppMesh::VirtualRouter, AWS::AppMesh::VirtualService, and
AWS::AppMesh::Route | March 12, 2020 |
Updated resource | The following resource was updated: AWS::MSK::Cluster
-
AWS::MSK::Cluster
-
Use LoggingInfo to stream broker logs to one or more
of the following destination types: Amazon CloudWatch Logs,
Amazon S3, Kinesis Data Firehose.
| March 12, 2020 |
New and updated resources | The following resources were added or updated: AWS::ApiGatewayV2::ApiGatewayManagedOverrides, AWS::ApiGatewayV2::Integration, and AWS::ApiGatewayV2::VpcLink. | March 12, 2020 |
Updated resources | The following resources were updated: AWS::Greengrass::ResourceDefinition and AWS::Greengrass::ResourceDefinitionVersion | March 9, 2020 |
Updated resource | The following resource was updated: AWS::CloudFront::Distribution. | March 5, 2020 |
Updated resource | The following resource was updated to support envelope encryption of secrets with
AWS Key Management Service: AWS::EKS::Cluster
-
AWS::EKS::Cluster EncryptionConfig
-
Use the AWS::EKS::Cluster EncryptionConfig property
to specify the encryption configuration for an Amazon EKS
cluster.
-
AWS::EKS::Cluster Provider
-
Use the AWS::EKS::Cluster Provider property to
specify the AWS Key Management Service customer master key (CMK) used to
encrypt the secrets for an Amazon EKS cluster.
| March 5, 2020 |
New resource | The following resource was added: AWS::Athena::WorkGroup
-
AWS::Athena::WorkGroup
-
Use the AWS::Athena::WorkGroup resource to separate
users, teams, applications, or workloads, set limits on the amount
of data the workgroup or its queries can process, and track
costs.
| March 5, 2020 |
New resource | The following resource was added: AWS::Chatbot::SlackChannelConfiguration | March 5, 2020 |
New resource | The following resource was added: AWS::CodeStarConnections::Connection | March 5, 2020 |
New resource | The following resource was added: AWS::CloudWatch::CompositeAlarm.
-
AWS::CloudWatch::CompositeAlarm
-
Use the AWS::CloudWatch::CompositeAlarm property to create a composite alarm.
Composite alarms evaluate their alarm state based on the alarm states of other CloudWatchrules.
| March 2, 2020 |
Updated resource | The following resource was updated: AWS::AppMesh::VirtualNode
-
AWS::AppMesh::VirtualNode
-
Use the BackendDefaults property to specify a client policy
for a backend.
Use the ClientPolicy property to specify a client
policy.
Use the ClientPolicyTls property to specify a Transport
Layer Security (TLS) client policy.
Use the ListenerTls property to specify a TLS
listener.
Use the ListenerTlsCertificate property to specify the type
of certificate to use for a client policy.
Use the ListenerTlsAcmCertificate property to specify an
AWS Certificate Manager certificate.
Use the ListenerTlsFileCertificate property to specify
properties of a local file certificate.
Use the TlsValidationContext property to specify a TLS
validation context trust.
Use the TlsValidationContextAcmTrust property to specify a
context trust for an AWS Certificate Manager
certificate.
Use the TlsValidationContextFileTrust property to specify a
file that contains the certificate trust chain for a local file
certificate.
Use the TlsValidationContextTrust property to specify a TLS
validation context trust.
Use the VirtualNodeSpec property to specify
BackendDefaults.
Use the Listener property to specify a
ListenerTls.
| February 27, 2020 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
- AWS::FSx::FileSystem
-
In the LustreConfiguration property type:
-
Use the DeploymentType property to specify
the Amazon FSx for Lustre file system deployment type,
either PERSISTENT_1, SCRATCH_2, or
SCRATCH_1.
-
Use the PerUnitStorageThroughput property to
specify the throughput in MB/s/TiB for a
PERSISTENT_1 Amazon FSx for Lustre file
system deployment type.
| February 27, 2020 |
New resources | The following resources were added: AWS::GroundStation::Config, AWS::GroundStation::DataflowEndpointGroup, and AWS::GroundStation::MissionProfile | February 27, 2020 |
Updated resource | The following resources was updated: AWS::CodeBuild::Project | February 20, 2020 |
Updated resource | The following resource was updated: AWS::Neptune::DBCluster
- AWS::Neptune::DBCluster
-
Use the DeletionProtection property to help prevent inadvertent deletion of your DB cluster.
Use the EngineVersion property to specify the engine version that your new DB cluster will use.
| February 18, 2020 |
New resources | The following resources were added: AWS::EC2::LocalGatewayRoute and
AWS::EC2::LocalGatewayRouteTableVPCAssociation. | February 14, 2020 |
Updated resources | The following resource were updated: AWS::ElasticLoadBalancingV2::Listener and
AWS::ElasticLoadBalancingV2::ListenerRule | February 13, 2020 |
New resource | The following resource was added: AWS::Config::ConformancePack
-
AWS::Config::ConformancePack
-
Use the AWS::Config::ConformancePack
resource to create a Conformance Pack that is a
collection of AWS rules that can be easily deployed in an account and
a region and across AWS Organizations.
| February 13, 2020 |
New resource | The following resource was added: AWS::Config::OrganizationConformancePack
-
AWS::Config::OrganizationConformancePack
-
Use the
AWS::Config::OrganizationConformancePack resource to create an OrganizationConformancePack that has information about
conformance packs that AWS Config creates in the member accounts.
| February 13, 2020 |
New resource | The following resources were added: AWS::FMS::NotificationChannel and AWS::FMS::Policy.
-
AWS::FMS::NotificationChannel
-
Use the AWS::FMS::NotificationChannel resource to
designate the IAM role and Amazon Simple Notification Service (SNS) topic
that AWS Firewall Manager uses to record SNS logs.
-
AWS::FMS::Policy
-
Use the AWS::FMS::Policy resource to specify an AWS Firewall Manager policy.
| February 13, 2020 |
AWS CloudFormation StackSets integrates with AWS Organizations | Use StackSets to centrally manage deployments to all the accounts in your
organization or specific organizational units (OUs) in AWS Organizations. You can enable
automatic deployments to any new accounts added to your organization or OUs. The
permissions needed to deploy across accounts will automatically be handled by
StackSets. For more information, see Working with
AWS CloudFormation StackSets. | February 11, 2020 |
Updated resources | The following resources were updated: AWS::EC2::LaunchTemplate and
AWS::EC2::ClientVpnEndpoint
-
AWS::EC2::LaunchTemplate
-
Use the MetadataOptions property to configure the Instance
Metadata Service (IMDS) for the instance.
Use the HostResourceGroupArn property to specify the ARN of
the host resource group in which to launch the instances.
Use the PartitionNumber property to specify a target
partition in a partition placement group.
Use the LaunchTemplateElasticInferenceAccelerator property
to specify the number of elastic inference accelerators to attach to the
instance.
-
AWS::EC2::ClientVpnEndpoint
-
Use the VpnPort property to assign a port number for TCP and
UDP traffic.
| February 6, 2020 |
Updated resource | The following resource was updated: AWS::AppSync::GraphQLApi. | February 6, 2020 |
Updated resource | The following resource was updated: AWS::Cognito::UserPool
-
AWS::Cognito::UserPool
-
Added AccountRecoverySetting parameter to define which verified
available method a user can use to recover their password.
| February 6, 2020 |
Updated resource | The following resource was updated: AWS::OpsWorksCM::Server
-
AWS::OpsWorksCM::Server
-
Use the Tags property to add tag keys and values to an AWS OpsWorks for Chef Automate or OpsWorks for Puppet Enterprise server.
| February 6, 2020 |
New resource | The following resource was added: AWS::WAFv2::WebACLAssociation.
-
AWS WAFv2
-
Use the web ACL association to define an association between a web ACL and a regional application resource, to protect the resource. A regional application can be an Application Load Balancer (ALB), Amazon API Gateway REST API, or an AWS AppSync GraphQL API. For Amazon CloudFront distributions, you use AWS::CloudFront::Distribution to manage the association.
| February 6, 2020 |
New resources | The following resources were added: AWS::ACMPCA::Certificate,
AWS::ACMPCA::CertificateAuthority,
AWS::ACMPCA::CertificateAuthorityActivation. | January 23, 2020 |
New resource | The following resources were added: AWS::AppConfig::Application,
AWS::AppConfig::ConfigurationProfile, AWS::AppConfig::Deployment,
AWS::AppConfig::Environment, and AWS::AppConfig::DeploymentStrategy
-
AWS::AppConfig::Application
-
The AWS::AppConfig::Application resource creates an application,
which is a logical unit of code that provides capabilities for your
customers.
-
AWS::AppConfig::ConfigurationProfile
-
The AWS::AppConfig::ConfigurationProfile resource creates a
configuration profile that enables AWS AppConfig to access the configuration source.
-
AWS::AppConfig::Deployment
-
The AWS::AppConfig::Deployment resource starts a deployment.
-
AWS::AppConfig::Environment
-
The AWS::AppConfig::Environment resource creates an environment,
which is a logical deployment group of AWS AppConfig targets, such as applications in a
Beta or Production environment.
-
AWS::AppConfig::DeploymentStrategy
-
The AWS::AppConfig::DeploymentStrategy resource creates an
AWS AppConfig deployment strategy.
| January 23, 2020 |
Updated resource | The following resource was updated: AWS::Glue::Crawler
-
AWS::Glue::Crawler
-
Use the MongoDBTarget property to specify an Amazon DocumentDB or MongoDB data store to crawl.
Use the RecrawlPolicy.RecrawlBehavior property to specify a new CRAWL_EVENT_MODE that specifies crawling only the changes identified by Amazon S3 events.
Use the S3Target.SampleSize property to specify the number of files in each leaf folder to be crawled when crawling sample files in a dataset.
Use the S3Target.EventQueueArn property to specify a valid Amazon SQS ARN.
Use the S3Target.DlqEventQueueArn property to specify a valid Amazon dead-letter SQS ARN.
| January 20, 2020 |
Updated resources | The following resource was updated: AWS::Lambda::Function. | January 16, 2020 |
Updated resource | The following resource was updated: AWS::EC2::Instance.
-
AWS::EC2::Instance
-
Use the HibernationOptions property to indicate whether the
instance is enabled for hibernation.
Use the HostResourceGroupArn property to specify the ARN of
the host resource group in which to launch the instances.
| January 16, 2020 |
Updated resource | The following resource was updated: AWS::AutoScaling::AutoScalingGroup.
-
AWS::AutoScaling::AutoScalingGroup
-
Use the WeightedCapacity property to specify the number of capacity
units, which gives the instance type a proportional weight to other instance
types.
| January 16, 2020 |
Updated resource | The following resource was updated: AWS::LakeFormation::Permissions
-
AWS::LakeFormation::Permissions
-
Use the
DataLocationResource property to specify a structure for a data location object where permissions are granted or revoked.
Use the
TableWithColumnsResource property to specify a structure for a table with columns object. This object is only used when granting a SELECT permission.
| January 16, 2020 |
Updated resource | The following resource was updated: AWS::RDS::DBInstance.
-
AWS::RDS::DBInstance
-
Use the CACertificateIdentifier property to specify
the identifier of the CA certificate for this DB instance.
| January 16, 2020 |
Updated resource | The following resource was updated: AWS::SSM::ResourceDataSync
-
AWS::SSM::ResourceDataSync
-
Use the SyncType property with SyncFromSource
to synchronize Systems Manager Explorer OpsItems and OpsData from AWS Organizations or from multiple AWS Regions.
| January 16, 2020 |
Updated resources | The following resources were updated: AWS::MSK::Cluster, AWS::RDS::DBInstance, and
AWS::SSM::Document
-
AWS::MSK::Cluster
-
Use the OpenMonitoring property to enable monitoring with
Prometheus, an open-source monitoring system for time-series metric data.
You can also use tools that are compatible with Prometheus-formatted
metrics or tools that integrate with Amazon MSK Open Monitoring.
-
AWS::SSM::Document
-
Use the Name property to specify a name for the Systems
Manager document.
-
AWS::RDS::DBInstance
-
Use the MaxAllocatedStorage property to specify the upper
limit to which Amazon RDS can automatically scale the storage of the DB
instance.
| December 20, 2019 |
New resource | The following resource was added: AWS::CodeBuild::ReportGroup
-
AWS::CodeBuild::ReportGroup
-
Use the AWS::CodeBuild::ReportGroup resource to specify
information about a report group. When you specify a report group in a
CodeBuild project, a build of the project creates reports in the report
group that contain results from running test cases.
| December 20, 2019 |
New resource | The following resource was added: AWS::EC2::GatewayRouteTableAssociation. | December 20, 2019 |
Updated resources | The following resource was updated: AWS::RDS::DBInstance.
-
AWS::RDS::DBInstance
-
Use the MaxAllocatedStorage property to specify the
upper limit to which Amazon RDS can automatically scale the storage
of the DB instance.
| December 19, 2019 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
-
AWS::FSx::FileSystem
-
In the WindowsConfiguration property type:
-
Use the DeploymentType property to specify
the Amazon FSx Windows file system deployment type.
-
Use the PreferredSubnetId property to specify
the subnet in which you want the preferred file server to be
located for a MULTI_AZ_1 Amazon FSx for Windows
file system deployment type.
| December 19, 2019 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem | December 19, 2019 |
New resource | The following resource was added: AWS::EC2::GatewayRouteTableAssociation. | December 19, 2019 |
Updated resource | The following resource was updated: AWS::EC2::Instance. | December 12, 2019 |
New resource | The following resource was added: AWS::CodeBuild::ReportGroup
-
AWS::CodeBuild::ReportGroup
-
Use the
AWS::CodeBuild::ReportGroup resource to specify information about a report group. When you specify a report group
in a CodeBuild project, a build of the project creates reports in the report group that contain results from running test cases.
| December 12, 2019 |
Updated resources | The following resources were updated: AWS::ApiGatewayV2::Api, AWS::ApiGatewayV2::Authorizer, AWS::ApiGatewayV2::Integration, AWS::ApiGatewayV2::Stage. | December 4, 2019 |
Updated resources | The following resources were updated: AWS::Lambda::Alias and AWS::Lambda::Version.
-
AWS::Lambda::Alias
-
Use the ProvisionedConcurrencyConfiguration property to specify a provisioned
concurrency configuration for a function's alias.
-
AWS::Lambda::Version
-
Use the ProvisionedConcurrencyConfiguration property to specify a provisioned
concurrency configuration for a function's version.
| December 3, 2019 |
Updated resource | The following resource was updated:
AWS::StepFunctions::StateMachine.
-
AWS::StepFunctions::StateMachine
-
The AWS::StepFunctions::StateMachine now supports Express
workflows using the new StateMachineType parameter. You can
also configure CloudWatch Logging information for Express workflows using
LoggingConfiguration, LogDestination, and
CloudWatchLogsLogGroup.
| December 3, 2019 |
New resource | The following resource was added: AWS::S3::AccessPoint
-
Access
Points
-
Use the AWS::S3::AccessPoint resource to specify an S3 access
point.
| December 3, 2019 |
New resource | The following resource was added: AWS::AccessAnalyzer::Analyzer | December 2, 2019 |
New resource | The following resources were added: AWS::EventSchemas::Discoverer,
AWS::EventSchemas::Registry, and
AWS::EventSchemas::Schema.
-
AWS::EventSchemas::Discoverer
-
Use the AWS::EventSchemas::Discoverer resource to
specify a discoverer that is associated with an event bus. A
discoverer allows the Amazon EventBridge Schema Registry to
automatically generate schemas based on events on an event
bus.
-
AWS::EventSchemas::Registry
-
Use the AWS::EventSchemas::Registry to specify a
schema registry. Schema registries are containers for Schemas.
Registries collect and organize schemas so that your schemas are in
logical groups.
-
AWS::EventSchemas::Schema
-
Use the AWS::EventSchemas::Schema resource to specify
an event schema.
| December 1, 2019 |
New resource | The following resource was added: AWS::Lambda::EventInvokeConfig | November 26, 2019 |
Updated resource | The following resource was updated: AWS::CloudWatch::Alarm. | November 25, 2019 |
Updated resource | The following resource was updated: AWS::CodePipeline::Pipeline.
-
AWS::CodePipeline::Pipeline
-
In the ActionDeclaration property type, use the Namespace property
to specify the variable namespace associated with the action. All variables produced
as output by this action fall under this namespace.
| November 25, 2019 |
Updated resource | The following resource was updated: AWS::Lambda::EventSourceMapping.
-
AWS::Lambda::EventSourceMapping
-
For stream sources (DynamoDB and Kinesis), use the BisectBatchOnFunctionError property
to split the batch in two and retry if the function returns an error.
For stream sources (DynamoDB and Kinesis), use the DestinationConfig property to
specify an Amazon SQS queue or Amazon SNS topic destination for discarded records.
For stream sources (DynamoDB and Kinesis), use the MaximumRecordAgeInSeconds property
to specify the maximum age of a record that Lambda sends to a function for processing.
For stream sources (DynamoDB and Kinesis), use the MaximumRetryAttempts property to
specify the maximum number of times to retry when the function returns an error.
For stream sources (DynamoDB and Kinesis), use the ParallelizationFactor property to
specify the number of batches to process from each shard concurrently.
| November 25, 2019 |
Updated resource | The following resource was updated: AWS::CloudWatch::Alarm. | November 25, 2019 |
New resources | The following resources were added: AWS::ECS::PrimaryTaskSet,
AWS::ECS::TaskSet.
-
AWS::ECS::PrimaryTaskSet
-
Use the AWS::ECS::PrimaryTaskSet resource to specify
which task set in a service is the primary task set. Any parameters
that are updated on the primary task set in a service will
transition to the service. This is used when a service uses the
EXTERNAL deployment controller type.
-
AWS::ECS::TaskSet
-
Use the AWS::ECS::TaskSet resource to create a task
set in the specified cluster and service. This is used when a
service uses the EXTERNAL deployment controller
type.
| November 25, 2019 |
New resource | The following resource was added: AWS::CloudWatch::InsightRule.
-
AWS::CloudWatch::InsightRule
-
Use the AWS::CloudWatch::InsightRule property to create a Contributor Insights rule. Rules evaluate log events in
a CloudWatch Logs log group, enabling you to find contributor data
for the log events in that log group.
| November 25, 2019 |
New resource | The following resource was added: AWS WAFv2.
-
AWS WAFv2
-
This is the latest version of AWS WAF, a web application firewall that lets you monitor HTTP(S) requests that are forwarded to an Amazon API Gateway REST API, Amazon CloudFront, Application Load Balancer, or an AWS AppSync GraphQL API. AWS WAF also lets you control access to your content.
| November 25, 2019 |
Updated resources | The following resources were updated: AWS::AppSync::Resolver,
AWS::AppSync::DataSource.
-
AWS::AppSync::Resolver
-
Use the CachingConfig property to specify the caching
behavior of your AWS AppSync resolver.
-
AWS::AppSync::Resolver
-
Use the SyncConfig property to specify the conflict
detection and resolution strategy of your AWS AppSync
resolver.
-
AWS::AppSync::Resolver
-
Use the LambdaConflictHandlerConfig property to specify the
ARN of the lambda that is used for handling conflicts in your AWS AppSync resolver.
-
AWS::AppSync::DataSource
-
Use the DeltaSyncConfig property to specify the delta sync
configurations for your versioned AWS AppSync data source.
| November 21, 2019 |
Updated resources | The following resources were updated: AWS::ECS::Cluster, AWS::ECS::Service, and
AWS::ECS::TaskDefinition.
-
AWS::ECS::Cluster
-
Use the ClusterSettings property to specify the
setting to use when creating a cluster. This parameter is used to
enable CloudWatch Container Insights for a cluster.
-
AWS::ECS::Service
-
Use the DeploymentController property to specify the
deployment controller to use for the service.
-
AWS::ECS::TaskDefinition
-
In the ContainerDefinition property type, use the
FirelensConfiguration property to specify the
FireLens configuration for the container. This is used to specify
and configure a log router for container logs.
In the LinuxParameters property type:
-
use the MaxSwap property to specify the total
amount of swap memory (in MiB) a container can use.
-
use the Swappiness property to tune a
container's memory swappiness behavior. A
swappiness value of 0 will
cause swapping to not happen unless absolutely necessary. A
swappiness value of 100 will
cause pages to be swapped very aggressively.
| November 21, 2019 |
Updated resources | The following resources were updated: AWS::RDS::DBCluster and
AWS::RDS::DBInstance.
-
AWS::RDS::DBCluster
-
Use the EnableHttpEndpoint property to indicate
whether to enable the HTTP endpoint for an Aurora Serverless DB
cluster. By default, the HTTP endpoint is disabled. When enabled,
the HTTP endpoint provides a connectionless web service API for
running SQL queries on the Aurora Serverless DB cluster. You can
also query your database from inside the RDS console with the query
editor.
-
AWS::RDS::DBInstance
-
For Oracle DB instances, Amazon RDS can use Kerberos
Authentication to authenticate users that connect to the DB
instance.
| November 21, 2019 |
Updated resource | The following resource was updated: AWS::ApiGateway::RestApi. | November 21, 2019 |
Updated resource | The following resource was updated: AWS::CertificateManager::Certificate
-
AWS::CertificateManager::Certificate
-
Use the CertificateTransparencyLoggingPreference property to
enable or disable certificate transparency logging.
Use the PrivateCertificateAuthorityArn property to specify
an ACM Private CA as certificate issuer.
Use the GetAtt function to retrieve the
CertificateARN of the
AWS::CertificateManager::Certificate resource.
Use the GetAtt function to retrieve the
CertificateStatus of the
AWS::CertificateManager::Certificate resource.
In the DomainValidationOption property type, use the
HostedZoneId property to validate a domain with a Route 53
hosted zone ID.
| November 21, 2019 |
Updated resource | The following resources were updated: AWS::Cognito::UserPool
-
AWS::Cognito::UserPool
-
Added ConfigurationSet and From properties to the
EmailConfiguration parameter.
-
AWS::Cognito::UserPoolClient
-
Added PreventUserExistenceErrors parameter to help manage errors
and responses when a user does not exist in the user pool.
-
AWS::Cognito::UserPoolUser
-
Use the ClientMetadata parameter to provide input to the AWS Lambda
function that is invoked by the pre sign-up trigger.
| November 21, 2019 |
Updated resource | The following resource was updated: AWS::EC2::EIP.
-
AWS::EC2::EIP
-
Use the Tags property to specify any tags for the Elastic IP
address.
| November 21, 2019 |
Updated resource | The following resource was updated: AWS::Glue::MLTransform
-
AWS::Glue::MLTransform
-
Use the
GlueVersion property to specify which version of AWS Glue this machine learning transform is compatible with.
| November 21, 2019 |
Updated resource | The following resource was updated: AWS::IAM::User.
-
AWS::IAM::User
-
Use the Tags property to specify a list of tags that you want to attach to the newly created user.
| November 21, 2019 |
Updated resource | The following resource was updated: AWS::Elasticsearch::Domain.
-
AWS::Elasticsearch::Domain
-
Use the CognitoOptions property to configure OpenSearch Service to use
Amazon Cognito authentication for OpenSearch Dashboards.
Use the EnableVersionUpgrade update policy to update the
ElasticsearchVersion property without replacing the
AWS::Elasticsearch::Domain resource.
| November 21, 2019 |
Updated resource | The following resource was updated: AWS::OpsWorksCM::Server
-
AWS::OpsWorksCM::Server
-
Use the CustomDomain property to specify a custom domain on an AWS OpsWorks for Chef Automate Server running Chef Automate 2.0.
Use the CustomCertificate property to specify a PEM-formatted HTTPS certificate for a server with a custom domain.
Use the CustomPrivateKey property to specify a private key in PEM format for connecting to a server that uses a custom domain.
| November 21, 2019 |
Updated resource | The following resource was updated: AWS::S3::Bucket. | November 21, 2019 |
Updated resource | The following resource was updated: AWS::Lambda::Function. | November 21, 2019 |
New resource | The following resource was added: AWS::AppSync::ApiCache. | November 21, 2019 |
Drift Detection for Stack Sets | You can now run drift detection on a stack set and all the stack instances it
includes. When CloudFormation performs drift detection on a stack set, it performs drift
detection on the stack associated with each stack instance in the stack set. For
more details, see Detecting
Unmanaged Configuration Changes in Stack Sets. | November 19, 2019 |
Updated resource | The following resource was updated to support Amazon EKS managed node
groups: AWS::EKS::Cluster
-
AWS::EKS::Cluster
-
Use the AWS::EKS::Cluster resource to create a new
Amazon EKS cluster.
| November 18, 2019 |
New resource | The following resource was added: AWS::EKS::Nodegroup
-
AWS::EKS::Nodegroup
-
Use the AWS::EKS::Nodegroup resource to create a new
Amazon EKS managed node group.
| November 18, 2019 |
CloudFormation registry now available | Use the CloudFormation registry to view private and public resources that are
available for use in your CloudFormation account. For more information, see Using the CloudFormation
Registry | November 18, 2019 |
CloudFormation registry API actions | The following API actions for managing types in the CloudFormation registry are
now available. For more information about the CloudFormation registry, see Using the CloudFormation Registry
-
DeregisterType
-
Removes a type or type version from active use in the CloudFormation
registry.
-
DescribeType
-
Returns detailed information about a registered type.
-
DescribeTypeRegistration
-
Returns information about a type's registration, including its current
status and type and version identifiers.
-
ListTypeRegistrations
-
Returns a list of registration request identifiers for the specified
type.
-
ListTypes
-
Returns summary information about types that have been registered with
CloudFormation.
-
ListTypeVersions
-
Returns summary information about the versions of a type.
-
RegisterType
-
Registers a type with the CloudFormation service. Registering a type
makes it available for use in CloudFormation templates in your AWS
account.
-
SetTypeDefaultVersion
-
Specify the default version of a type. The default version of a type
will be used in CloudFormation operations.
| November 18, 2019 |
Updated resources | The following resources were updated: AWS::GameLift::Build, AWS::GameLift::Fleet.
-
AWS::GameLift::Build
-
Use the OperatingSystem property to specify the operating system
that the build files run on.
-
AWS::GameLift::Fleet
-
Use the CertificateConfiguration property to generate a TLS/SSL certificate for the new fleet.
Use the FleetType property to specify use of On-Demand or Spot
instances in the fleet.
Use the InstanceRoleArn property to manage access to your
non-GameLift AWS resources from GameLift fleet instances.
Use the MetricGroups property to add fleet metrics to a CloudWatch metric group.
Use the NewGameSessionProtectionPolicy property to prevent the
fleet's active game sessions from being terminated during a scale down event.
Use the PeerVpcAwsAccountId property when setting up VPC peering
for the fleet.
Use the PeerVpcId property when setting up VPC peering for the
fleet.
Use the ResourceCreationLimitPolicy property to limit an individual
player's ability to use the fleet's available hosting resources.
Use the RuntimeConfiguration property to configure what processes
are run on each instance in the fleet.
Use the ScriptId property to create a Realtime Servers fleet and
configure it with a Realtime script.
| November 14, 2019 |
New resources | The following resources were added: AWS::GameLift::Script, AWS::GameLift::GameSessionQueue, AWS::GameLift::MatchmakingConfiguration, AWS::GameLift::MatchmakingRuleSet. | November 14, 2019 |
Resource import added | If you created an AWS resource outside of AWS CloudFormation management, you can bring this
existing resource into CloudFormation management using resource
import. For more information, see Bringing Existing
Resources Into CloudFormation Management. | November 11, 2019 |
New resource | The following resource was added: AWS::CodeStarNotifications::NotificationRule
-
AWS::CodeStarNotifications::NotificationRule
-
Use the
AWS::CodeStarNotifications::NotificationRule resource to create notification rules for resources in AWS CodeBuild,
AWS CodeCommit, AWS CodeDeploy, and AWS CodePipeline.
| November 7, 2019 |
New resource | The following resources were added: AWS::MediaConvert::JobTemplate,
AWS::MediaConvert::Preset, AWS::MediaConvert::Queue | November 6, 2019 |
Updated resource | The following resource was updated: AWS::Glue::Crawler
-
AWS::Glue::Crawler
-
Use the
DynamoDBTargets property to specify a list of Amazon DynamoDB targets.
Use the
CatalogTargets property to specify a list of AWS Glue Data Catalog targets.
| November 4, 2019 |
Updated resources | The following resources were updated: AWS::ApiGateway::ApiKey, AWS::ApiGateway::ClientCertificate, AWS::ApiGateway::DomainName, AWS::ApiGateway::RestApi, and AWS::ApiGateway::UsagePlan.
-
AWS::ApiGateway::ApiKey
-
Use the
Tags property to specify an array of arbitrary tags (key-value pairs) to associate with the API key.
-
AWS::ApiGateway::ClientCertificate
-
Use the
Tags property to specify an array of arbitrary tags (key-value pairs) to associate with the client certificate.
-
AWS::ApiGateway::DomainName
-
Use the
SecurityPolicy property to the Transport Layer Security (TLS) version + cipher suite for this domain name.
Use the
Tags property to specify an array of arbitrary tags (key-value pairs) to associate with the domain name.
-
AWS::ApiGateway::RestApi
-
Use the
Tags property to specify an array of arbitrary tags (key-value pairs) to associate with the API.
-
AWS::ApiGateway::UsagePlan
-
Use the
Tags property to specify an array of arbitrary tags (key-value pairs) to associate with the usage plan.
| October 31, 2019 |
Updated resources | The following resources were updated: AWS::CodePipeline::CustomActionType,
AWS::CodePipeline::Pipeline. | October 31, 2019 |
Updated resource | The following resource was updated: AWS::Amplify::App
-
AWS::Amplify::App
-
Use the EnablePullRequestPreview property to specify whether pull
request previews are enabled for each branch that Amplify Console automatically
creates for your app.
Use the PullRequestEnvironmentName property to specify a dedicated
backend environment for your pull request previews.
| October 31, 2019 |
Updated resource | The following resource was updated: AWS::ECS::TaskDefinition.
-
AWS::ECS::TaskDefinition
-
Use the InferenceAccelerator property to specify the
Elastic Inference accelerators to use for the containers in the
task.
| October 31, 2019 |
Updated resource | The following resource was updated: AWS::Events::Rule.
-
AWS::Events::Rule
-
In the Target property type, use the BatchParameters property to
specify the job definition, job name, and other parameters, if the event target is
an AWS Batch job.
| October 31, 2019 |
Updated resource | The following resource was updated: AWS::Elasticsearch::Domain. | October 31, 2019 |
New resources | The following resources were added: AWS::Pinpoint::EmailTemplate,
AWS::Pinpoint::PushTemplate, and AWS::Pinpoint::SmsTemplate.
-
AWS::Pinpoint::EmailTemplate
-
Use the AWS::Pinpoint::EmailTemplate resource to
create a message template that you can use in messages that are sent
through the email channel.
-
AWS::Pinpoint::PushTemplate
-
Use the AWS::Pinpoint::PushTemplate resource to
create a message template that you can use in messages that are sent
through a push notification channel.
-
AWS::Pinpoint::SmsTemplate
-
Use the AWS::Pinpoint::SmsTemplate resource to create
a message template that you can use in messages that are sent
through the SMS channel.
| October 31, 2019 |
Updated resource | The following resource was updated: AWS::Amplify::Branch
-
AWS::Amplify::Branch
-
Use the EnablePullRequestPreview property to specify whether
Amplify Console creates a preview for each pull request that is made for the
branch.
Use the PullRequestEnvironmentName property to specify a dedicated
backend environment for your pull request previews.
| October 24, 2019 |
Updated resource | The following resource was updated: AWS::Cognito::UserPool
-
AWS::Cognito::UserPool
-
Use the Schema parameter to add or update schema attributes.
-
AWS::Cognito::UserPool
-
Use the AliasAttributes parameter to add or update an alias for the
user pool.
-
AWS::Cognito::UserPool
-
Use the UsernameAttributes parameter to determine if email
addresses or phone numbers can be used as user names when a user signs up.
| October 24, 2019 |
Updated resources | The following resource was updated: AWS::MSK::Cluster.
-
AWS::MSK::Cluster
-
Use the NumberOfBrokerNodes property to submit an update
to change the number of broker nodes in the cluster.
| October 17, 2019 |
Updated resource | The following resource was updated: AWS::Cognito::IdentityPoolRoleAttachment | October 17, 2019 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
-
AWS::FSx::FileSystem
-
In the WindowsConfiguration property type, use the
SelfManagedActiveDirectoryConfiguration property to
join an Amazon FSx Windows File Server instance to your self-managed
(including on-premises) Microsoft Active Directory (AD)
directory.
| October 17, 2019 |
Updated Resource | The following resource was updated: AWS::Batch::ComputeEnvironment | October 17, 2019 |
Updated resources | The following resource were updated: AWS::Events::EventBusPolicy,
AWS::Events::Rule
-
AWS::Events::EventBusPolicy
-
Use the EventBusName property to specify the name of the event bus
to associate with this policy.
-
AWS::Events::Rule
-
Use the EventBusName property to specify the name of the event bus
to associate with this rule.
| October 3, 2019 |
Updated resources | The following resource was updated: AWS::Pinpoint::App, AWS::Pinpoint::Campaign,
and AWS::Pinpoint::Segment.
-
AWS::Pinpoint::App
-
The ARN attribute returns the Amazon Resource Name
(ARN) of the application.
Use the Tags property to specify a string-to-string
map of key-value pairs that defines the tags to associate with the
application.
-
AWS::Pinpoint::Campaign
-
The ARN attribute returns the Amazon Resource Name
(ARN) of the campaign.
Use the Tags property to specify a string-to-string
map of key-value pairs that defines the tags to associate with the
campaign.
-
AWS::Pinpoint::Segment
-
The ARN attribute returns the Amazon Resource Name
(ARN) of the segment.
Use the Tags property to specify a string-to-string
map of key-value pairs that defines the tags to associate with the
segment.
| October 3, 2019 |
Updated resource | The following resource was updated: AWS::Budgets::Budget
-
AWS::Budgets::Budget
-
In the BudgetData property type, use the
PlannedBudgetLimits property to specify a map containing multiple budget limits, including current or future limits.
| October 3, 2019 |
Updated resource | The following resource was updated: AWS::Cognito::UserPool | October 3, 2019 |
New resources | The following resources were added: AWS::Cognito::UserPoolDomain,
AWS::Cognito::UserPoolResourceServer, AWS::Cognito::UserPoolIdentityProvider,
AWS::Cognito::RiskConfigurationAttachment, AWS::Cognito::UICustomizationAttachment. | October 3, 2019 |
New resources | The following resource were added: AWS::EC2::TrafficMirrorFilter,
AWS::EC2::TrafficMirrorFilterRule, AWS::EC2::TrafficMirrorSession, and
AWS::EC2::TrafficMirrorTarget | October 3, 2019 |
New resource | The following resource was added: AWS::Events::EventBus
-
AWS::Events::EventBus
-
Use the EventBus resource to create or update a custom event bus or
a partner event bus.
| October 3, 2019 |
Updated resource | The following resource was updated: AWS::Glue::DevEndpoint
-
AWS::Glue::DevEndpoint
-
Use the
WorkerType property to specify a type of predefined worked allocated to the development endpoint.
Use the
NumberOfWorkers property to specify the number of workers of a defined workerType that are allocated to the development endpoint.
Use the
GlueVersion property to specify the versions of Apache Spark and Python that AWS Glue supports for the development endpoint.
Use the
Arguments property to specify a map of arguments used to configure the DevEndpoint.
| September 27, 2019 |
Updated resource | The following resource was updated: AWS::Glue::Job
-
AWS::Glue::Job
-
Use the
Timeout property to specify the job timeout in minutes.
Use the
NotificationProperty property to specify the configuration properties of a notification.
Use the
NotifyDelayAfter property to specify the number of minutes to wait before sending a job run delay notification after a job run starts.
| September 26, 2019 |
Updated resource | The following resource was updated: AWS::Glue::Trigger
-
AWS::Glue::Trigger
-
Use the
StartOnCreation property to specify starting SCHEDULED and CONDITIONAL triggers when created.
Use the
WorkflowName property to specify the name of the workflow associated with the trigger.
| September 26, 2019 |
Updated resource | The following resource was updated: AWS::DocDB::DBCluster.
-
AWS::DocDB::DBCluster
-
Use the EnableCloudwatchLogsExports property to specify
the list of log types that need to be enabled for exporting to CloudWatch
Logs.
| September 26, 2019 |
New resource | The following resource was added: AWS::Glue::Workflow | September 26, 2019 |
Updated resource | The following resource was updated: AWS::Config::RemediationConfiguration. | September 12, 2019 |
New resource | The following resource was added: AWS::QLDB::Ledger
-
AWS::QLDB::Ledger
-
Use the
AWS::QLDB::Ledger resource to specify a new Amazon Quantum Ledger Database (Amazon QLDB) ledger.
| September 12, 2019 |
Updated resources | The following resources were updated: AWS::ApplicationAutoScaling::ScalableTarget,
AWS::DynamoDB::Table, AWS::EC2::Instance, AWS::ECS::TaskDefinition,
AWS::ElastiCache::ReplicationGroup, AWS::Events::Rule, AWS::IAM::Role, and
AWS::Lambda::EventSourceMapping.
-
AWS::ApplicationAutoScaling::ScalableTarget
-
Use the SuspendedState property to suspend and resume
automatic scaling. Setting the value of an attribute to true
suspends the specified scaling activities. Setting it to
false (default) resumes the specified scaling
activities.
-
AWS::DynamoDB::Table
-
In the SSESpecification property type, use the SSEType
property to specify server-side encryption type.
-
AWS::EC2::Instance
-
Use the CpuOptions property to specify the CPU options
for the instance.
In the Ebs property type, use the KmsKeyId property to
specify an identifier (key ID, key alias, ID ARN, or alias ARN) for a
customer managed key under which the EBS volume is encrypted.
-
AWS::ECS::TaskDefinition
-
Use the IpcMode property to specify the IPC resource
namespace to use for the containers in the task. The valid values are
host, task, or none.
Use the PidMode property to specify the process namespace
to use for the containers in the task. The valid values are
host or task.
In the ContainerDefinition property type:
-
When the Interactive property is set to
true, this allows you to deploy containerized
applications that require stdin or a tty
to be allocated.
-
When the PseudoTerminal proprety is set to
true, a TTY is allocated.
-
Use the SystemControls property to specify a list
of namespaced kernel parameters to set in the container.
In the LogConfiguration property type, use the
SecretOptions property to specify the secrets to pass to
the log configuration.
-
AWS::ElastiCache::ReplicationGroup
-
Use the KmsKeyId property to specify the ID of the KMS key used to encrypt the disk on the cluster.
-
AWS::Events::Rule
-
In the EcsParameters property type:
-
Use the Group property to specify an ECS task group
for the task.
-
Use the LaunchType property to specify the launch
type on which your task is running.
-
If the ECS task uses the awsvpc network mode, use
the NetworkConfiguration property to specify the VPC
subnets and security groups associated with the task and whether a
public IP address is to be used.
-
Use the PlatformVersion property to specify the
platform version for the task.
-
AWS::IAM::Role
-
Use the Description property to provide a description for
the role.
Use the Tags property to specify a list of tags that are
attached to the specified role.
-
AWS::Lambda::EventSourceMapping
-
Use the MaximumBatchingWindowInSeconds property to
specify the maximum amount of time to gather records before invoking the
function, in seconds.
| August 29, 2019 |
Updated resources | The following resources were updated: AWS::RDS::DBCluster and
AWS::RDS::DBInstance
-
AWS::RDS::DBCluster
-
Use the AssociatedRoles property to specify the AWS
Identity and Access Management (IAM) roles associated with the DB
instance.
Use the RestoreType property to specify the type of
restore to be performed.
Use the SourceDBClusterIdentifier property to specify
the identifier of the source DB cluster from which to restore.
Use the UseLatestRestorableTime property to specify
whether to restore the DB cluster to the latest restorable backup
time.
-
AWS::RDS::DBInstance
-
Use the AssociatedRoles property to specify the AWS
Identity and Access Management (IAM) roles associated with the DB
instance.
| August 29, 2019 |
Updated resource | The following resource was updated: AWS::CloudWatch::Alarm
-
AWS::CloudWatch::Alarm
-
Use the
ThresholdMetricId property to specify the ID of the ANOMALY_DETECTION_BAND function used as the threshold for the alarm.
| August 29, 2019 |
Updated resource | The following resource was updated: AWS::Elasticsearch::Domain. | August 29, 2019 |
New resource | The following resource was added: AWS::Config::OrganizationConfigRule
-
AWS::Config::OrganizationConfigRule
-
Use the
AWS::Config::OrganizationConfigRule resource to create an OrganizationConfigRule that has information about config rules that AWS Config creates in the member accounts.
| August 29, 2019 |
Updated resource | The following resource was updated: AWS::Neptune::DBCluster.
-
AWS::Neptune::DBCluster
-
Use the EnableCloudwatchLogsExports property to specify a
list of log types that are enabled for export to CloudWatch Logs.
| August 22, 2019 |
Updated resource | The following resource was updated: AWS::DMS::ReplicationTask
-
AWS::DMS::ReplicationTask
-
Use the CdcStartPosition property to indicate when you want a change data capture (CDC) operation to start.
Use the CdcStopPosition property to indicate when you want a change data capture (CDC) operation to stop.
| August 16, 2019 |
Updated resources | The following resources were updated: AWS::EC2::ClientVpnEndpoint,
AWS::Greengrass::Group, AWS::Greengrass::ConnectorDefinition,
AWS::Greengrass::CoreDefinition, AWS::Greengrass::DeviceDefinition,
AWS::Greengrass::FunctionDefinition, AWS::Greengrass::LoggerDefinition,
AWS::Greengrass::ResourceDefinition, and
AWS::Greengrass::SubscriptionDefinition. | August 8, 2019 |
Updated resource | The following resource was updated: AWS::AppSync::GraphQLApi.
-
AWS::AppSync::GraphQLApi
-
In the LogConfig property type, when set to TRUE, the
excludeVerboseContent property excludes sections that
contain information such as headers, context, and evaluated mapping
templates, regardless of logging level.
| August 8, 2019 |
New resources | The following resources were added: AWS::ManagedBlockchain::Member and
AWS::ManagedBlockchain::Node. | August 8, 2019 |
New resource | The following resource was added: AWS::Glue::MLTransform | August 8, 2019 |
New resource | The following resource was added: AWS::LakeFormation::DataLakeSettings | August 8, 2019 |
New resource | The following resource was added: AWS::LakeFormation::Permissions | August 8, 2019 |
New resource | The following resource was added: AWS::LakeFormation::Resource | August 8, 2019 |
New resource | The following resource was added: AWS::CodeBuild::SourceCredential
-
AWS::CodeBuild::SourceCredential
-
Use the
AWS::CodeBuild::SourceCredential resource to specify information about the credentials for
a GitHub, GitHub Enterprise, or Bitbucket repository used in an AWS CodeBuild build project.
| August 7, 2019 |
Updated resources | The following resources were updated: AWS::Batch::JobDefinition,
AWS::Cognito::UserPool, AWS::Cognito::UserPoolClient, and AWS::Glue::Job.
-
AWS::Batch::JobDefinition
-
In the ContainerProperties property type, use the
LinuxParameters property to specify Linux-specific
modifications that are applied to the container, such as details for
device mappings.
- AWS::Cognito::UserPool
-
Use the UserPoolAddOns property to enable advanced
security risk detection.
Use the VerificationMessageTemplate property to define
the template for verification messages.
- AWS::Cognito::UserPoolClient
-
Use the AnalyticsConfiguration property to define the
Amazon Pinpoint analytics configuration for collecting metrics for this user
pool.
-
AWS::Glue::Job
-
Use the GlueVersion property to determine the versions of
Apache Spark and Python that AWS Glue supports. The Python version indicates
the version supported for jobs of type Spark.
Use the MaxCapacity property to specify the number of
AWS Glue data processing units (DPUs) that can be allocated when this
job runs. A DPU is a relative measure of processing power that consists
of 4 vCPUs of compute capacity and 16 GB of memory.
For the NumberofWorkers property, when you specify a
Python shell job (JobCommand.Name="pythonshell"), you can
allocate either 0.0625 or 1 DPU. The default is 0.0625 DPU. When you
specify an Apache Spark ETL job (JobCommand.Name="glueetl"),
you can allocate from 2 to 100 DPUs. The default is 10 DPUs. This job
type cannot have a fractional DPU allocation.
Use the WorkerType property to specify the type of
predefined worker that is allocated when a job runs.
In the JobCommand property type, use the PythonVersion
property to specify the Python version being used to execute a Python
shell job.
| August 2, 2019 |
Stack set limit increases | You can now create a maximum of 100 stack sets in your administrator account,
create a maximum of 2000 stack instances per stack set, and run a maximum of 3500
stack instance operations in each region at the same time, per administrator
account. For more details, see AWS CloudFormation quotas. | August 2, 2019 |
New resource | The following resource was added: AWS::CodeStar::GitHubRepository.
-
AWS::CodeStar::GitHubRepository
-
Use the AWS::CodeStar::GitHubRepository resource to
create a GitHub repository where you can store source code for use with
AWS workflows. If provided, your source code is uploaded to the
repository after it is created.
| August 2, 2019 |
Updated resource | You can now add tags to a CodeCommit repository in your AWS CloudFormation template.
-
AWS::CodeCommit::Repository
-
Use the Tags property to provide information about one or
more tag key-value pairs to use when tagging a repository.
| July 25, 2019 |
Updated resources | The following resource was updated: AWS::AmazonMQ::Broker.
-
AWS::AmazonMQ::Broker
-
Use the encryptionOptions property to specify an
AWS owned key or a customer managed key.
| July 22, 2019 |
Updated resources | The following resources were updated: AWS::Amplify::App and
AWS::Amplify::Branch.
- AWS::Amplify::App
-
Use the AutoBranchCreationConfig property type to
automatically create branches that match a certain pattern.
- AWS::Amplify::Branch
-
Use the EnableAutoBuild property to enable automatic
builds for a branch.
| July 18, 2019 |
New resources | The following resources were added: AWS::IoTEvents::DetectorModel and
AWS::IoTEvents::Input. | July 18, 2019 |
New resource | The following resource was added: AWS::CloudWatch::AnomalyDetector.
-
AWS::CloudWatch::AnomalyDetector
-
Use the AWS::CloudWatch::AnomalyDetector resource to
specify an anomaly detection band for a certain metric and statistic. The
band represents the expected "normal" range for the metric values.
| July 12, 2019 |
Updated resources | The following resources were updated: AWS::IoTAnalytics::Channel and
AWS::IoTAnalytics::Datastore. | June 27, 2019 |
New resources | The following resources were added: AWS::MediaLive::Channel,
AWS::MediaLive::Input, and AWS::MediaLive::InputSecurityGroup.
-
AWS::MediaLive::Channel
-
The AWS::MediaLive::Channel resource creates a channel. A
MediaLive channel ingests and transcodes (decodes and encodes) source
content from the inputs that are attached to that channel, and packages
the new content into outputs.
-
AWS::MediaLive::Input
-
The AWS::MediaLive::Input resource creates an input. A
MediaLive input holds information that describes how the MediaLive
channel is connected to the upstream system that is providing the source
content that is to be transcoded.
-
AWS::MediaLive::InputSecurityGroup
-
The AWS::MediaLive::InputSecurityGroup resource creates
an input security group. A MediaLive input security group is associated
with a MediaLive input. The input security group is an "allow list" of IP
addresses that controls whether an external IP address can push content
to the associated MediaLive input.
| June 27, 2019 |
Updated resource | The following resource was updated: AWS::EC2::LaunchTemplate
-
AWS::EC2::LaunchTemplate
-
In the SpotOptions property type, use
BlockDurationMinutes to specify the required duration for
the Spot Instances, and use ValidUntil to specify the end
date for the Spot request.
| June 25, 2019 |
New resource | The following resource was added: AWS::SecurityHub::Hub | June 25, 2019 |
Updated resources | The following resource were updated: AWS::AppStream::Fleet,
AWS::ServiceCatalog::CloudFormationProvisionedProduct
-
AWS::ServiceCatalog::CloudFormationProvisionedProduct
-
Use the ProvisioningPreferences property to specify
user-defined preferences that will be applied when updating a provisioned
product.
-
AWS::AppStream::Fleet
-
Use the IdleDisconnectTimeoutInSeconds property to
specify the amount of time that users can be idle (inactive) before they
are disconnected from their streaming session and the
DisconnectTimeoutInSeconds time interval begins.
| June 20, 2019 |
New resources | The following resource was added: AWS::Config::RemediationConfiguration,
AWS::ServiceCatalog::StackSetConstraint | June 20, 2019 |
Updated resources | The following resources were updated: AWS::AppMesh::VirtualNode,
AWS::CodeBuild::Project, AWS::EC2::Host, AWS::EC2::Route, AWS::EC2::VPNConnection,
AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition,
AWS::EFS::MountTarget, AWS::ElasticLoadBalancingV2::ListenerRule, AWS::EMR::Cluster,
AWS::IoTAnalytics::Dataset, AWS::KinesisFirehose::DeliveryStream,
AWS::S3::Bucket.
-
AWS::AppMesh::VirtualNode
-
Use ServiceDiscovery to specify whether to use
AWSCloudMap or DNS for service discovery. If
using AWS Cloud Map for service discovery, use
AwsCloudMapServiceDiscovery to specify
ServiceName, NamespaceName, and
Attributes properties. Use
AwsCloudMapInstanceAttribute to specify key and value
pairs for AwsCloudMapServiceDiscovery.
-
AWS::CodeBuild::Project
-
Use the SecondarySourceVersions property to specify an
array of ProjectSourceVersion objects. If
secondarySourceVersions is specified at the build level,
then they take over these secondarySourceVersions (at the
project level).
-
AWS::DLM::LifecyclePolicy
-
In the PolicyDetails property type:
-
Use the PolicyType property to determine the valid
target resource types and actions a policy can manage. This field
defaults to EBS_SNAPSHOT_MANAGEMENT if not present.
-
Use the Parameters property to specify a set of
optional parameters that can be provided by the policy.
In the Schedule property type, use the VariableTags
property to specify a collection of key/value pairs with values
determined dynamically when the policy is executed. Keys may be any valid
Amazon EC2 tag key. Values must be in one of the two following formats:
$(instance-id) or $(timestamp). Variable
tags are only valid for EBS Snapshot Management ā Instance
policies.
-
AWS::EC2::Host
-
Use the HostRecovery property to indicates whether to
enable or disable host recovery for the Dedicated Host.
-
AWS::EC2::Route
-
Use the TransitGatewayId property to specify the ID of a
transit gateway.
-
AWS::EC2::VPNConnection
-
Use the TransitGatewayId property to specify the ID of
the transit gateway associated with the VPN connection.
Use the VpnGatewayId property to specify the ID of the
virtual private gateway at the AWS side of the VPN connection.
-
AWS::ECR::Repository
-
Use the Tags property to specify an array of key-value
pairs to apply to this resource.
-
AWS::ECS::Cluster
-
Use the Tags property to apply metadata to clusters to
help you categorize and organize them.
-
AWS::ECS::Service
-
Use the EnableECSManagedTags property to specify whether
to enable Amazon ECS managed tags for the tasks within the service.
Use the PropagateTags property to specify whether to
propagate the tags from the task definition or the service to the tasks
in the service.
Use the Tags property to apply metadata to services to
help you categorize and organize them.
-
AWS::ECS::TaskDefinition
-
In the ContainerDefinition property type:
-
Use the ResourceRequirements property to specify
the type and amount of a resource to assign to a container. The
only supported resource is a GPU.
-
Use the Secrets property to specify the secrets to
pass to the container.
Use the Tags property to apply metadata to task
definitions to help you categorize and organize them.
-
AWS::EFS::FileSystem
-
Use the LifecyclePolicies property to specify a list of
policies used by EFS lifecycle management to transition files to the
Infrequent Access (IA) storage class.
-
AWS::EFS::MountTarget
-
Use the IpAddress attribute to return the IPv4 address of
the mount target.
-
AWS::ElasticLoadBalancingV2::ListenerRule
-
In the RuleCondition property type:
-
Use the HostHeaderConfig property to specify
information for a host header condition.
-
Use the HttpHeaderConfig property to specify
information for an HTTP header condition.
-
Use the HttpRequestMethodConfig property to specify
information for an HTTP method condition.
-
Use the PathPatternConfig property to specify
information for a path pattern condition.
-
Use the QueryStringConfig property to specify
information for a query string condition.
-
Use the SourceIpConfig property to specify
information for a source IP condition.
-
AWS::EMR::Cluster
-
In the JobFlowInstancesConfig property type, use the
Ec2SubnetIds property to specify multiple EC2 subnet
IDs.
-
AWS::IoTAnalytics::Dataset
-
When data set contents are created they are delivered to destinations
specified in the ContentDeliveryRules property.
Use the VersioningConfiguration property to specify how
many versions of data set contents are kept. If not specified or set to
null, only the latest version plus the latest succeeded version (if they
are different) are kept for the time period specified by the
"retentionPeriod" parameter.
-
AWS::KinesisFirehose::DeliveryStream
-
In the ExtendedS3DestinationConfiguration property type:
-
Use the DataFormatConversionConfiguration property
to specify the serializer, deserializer, and schema for converting
data from the JSON format to the Parquet or ORC format before
writing it to Amazon S3.
-
Use the ErrorOutputPrefix property to specify a
prefix that Kinesis Data Firehose evaluates and adds to failed
records before writing them to S3.
-
The Prefix property is no longer required.
In the S3DestinationConfiguration property type, use the
ErrorOutputPrefix property to specify a prefix that
Kinesis Data Firehose evaluates and adds to failed records before writing
them to S3.
-
AWS::S3::Bucket
-
Use the ObjectLockConfiguration property to specify an
object lock configuration for the specified bucket.
Use the ObjectLockEnabled property to specify whether
this bucket has an object lock configuration enabled.
| June 13, 2019 |
New resources | The following resources were added: AWS::Amplify::App, AWS::Amplify::Branch,
AWS::Amplify::Domain, AWS::EC2::ClientVpnAuthorizationRule,
AWS::EC2::ClientVpnEndpoint, AWS::EC2::ClientVpnRoute,
AWS::EC2::ClientVpnTargetNetworkAssociation, AWS::MSK::Cluster.
- AWS::Amplify::App
-
Creates apps in AWS Amplify Console. An app is a collection of
branches.
- AWS::Amplify::Branch
-
Creates a new branch within an AWS Amplify Console app.
- AWS::Amplify::Domain
-
Allows you to connect a custom domain to your AWS Amplify Console
app.
-
AWS::EC2::ClientVpnAuthorizationRule
-
Specifies an ingress authorization rule to add to a Client VPN
endpoint. Ingress authorization rules act as firewall rules that grant
access to networks.
-
AWS::EC2::ClientVpnEndpoint
-
Specifies a Client VPN endpoint. A Client VPN endpoint is the resource
you create and configure to enable and manage client VPN sessions. It is
the destination endpoint at which all client VPN sessions are
terminated.
-
AWS::EC2::ClientVpnRoute
-
Specifies a network route to add to a Client VPN endpoint. Each Client
VPN endpoint has a route table that describes the available destination
network routes. Each route in the route table specifies the path for
traļ¬c to speciļ¬c resources or networks.
-
AWS::EC2::ClientVpnTargetNetworkAssociation
-
Specifies a target network to associate with a Client VPN endpoint. A
target network is a subnet in a VPC. You can associate multiple subnets
from the same VPC with a Client VPN endpoint.
-
AWS::MSK::Cluster
-
Use the AWS::MSK::Cluster resource to create an Amazon MSK
cluster.
| June 13, 2019 |
Updated resources | The following resource was updated: AWS::SageMaker::NotebookInstance.
-
AWS::SageMaker::NotebookInstance
-
Use the AcceleratorTypes property to specify a list of
Elastic Inference (EI) instance types to associate with this notebook
instance.
Use the AdditionalCodeRepositories property to specify an
array of up to three Git repositories associated with the notebook
instance.
Use the DefaultCodeRepository property to specify the Git
repository associated with the notebook instance as its default code
repository.
| June 3, 2019 |
New resources | The following resources were added: AWS::IoTThingsGraph::FlowTemplate,
AWS::Pinpoint::ADMChannel, AWS::Pinpoint::APNSChannel,
AWS::Pinpoint::APNSSandboxChannel, AWS::Pinpoint::APNSVoipChannel,
AWS::Pinpoint::APNSVoipSandboxChannel, AWS::Pinpoint::App,
AWS::Pinpoint::ApplicationSettings, AWS::Pinpoint::BaiduChannel,
AWS::Pinpoint::Campaign, AWS::Pinpoint::EmailChannel, AWS::Pinpoint::EventStream,
AWS::Pinpoint::GCMChannel, AWS::Pinpoint::SMSChannel, AWS::Pinpoint::Segment,
AWS::Pinpoint::VoiceChannel, AWS::SageMaker::CodeRepository, and
AWS::MSK::Cluster.
-
AWS::IoTThingsGraph::FlowTemplate
-
Use the AWS::IoTThingsGraph::FlowTemplate resource to
specify a workflow template.
-
AWS::Pinpoint::ADMChannel
-
Use the AWS::Pinpoint::ADMChannel resource to specify an
ADM channel. You can use the ADM channel to send push notifications
through the Amazon Device Messaging (ADM) service to apps that run on
Amazon devices, such as Kindle Fire tablets.
-
AWS::Pinpoint::APNSChannel
-
Use the AWS::Pinpoint::APNSChannel resource to specify an
APNs channel. You can use the APNs channel to send push notification
messages to the Apple Push Notification service (APNs).
-
AWS::Pinpoint::APNSSandboxChannel
-
Use the AWS::Pinpoint::APNSSandboxChannel resource to
specify an APNs sandbox channel. You can use the APNs sandbox channel to
send push notification messages to the sandbox environment of the Apple
Push Notification service (APNs).
-
AWS::Pinpoint::APNSVoipChannel
-
Use the AWS::Pinpoint::APNSVoipChannel resource to
specify an APNs VoIP channel. You can use the APNs VoIP channel to send
VoIP notification messages to the Apple Push Notification service
(APNs).
-
AWS::Pinpoint::APNSVoipSandboxChannel
-
Use the AWS::Pinpoint::APNSVoipSandboxChannel resource to
specify an APNs VoIP sandbox channel. You can use the APNs VoIP sandbox
channel to send VoIP notification messages to the sandbox environment of
the Apple Push Notification service (APNs).
-
AWS::Pinpoint::App
-
Use the AWS::Pinpoint::App resource to specify an
app.
-
AWS::Pinpoint::ApplicationSettings
-
Use the AWS::Pinpoint::ApplicationSettings resource to
specify the settings for an Amazon Pinpoint app.
-
AWS::Pinpoint::BaiduChannel
-
Use the AWS::Pinpoint::BaiduChannel resource to update
the settings of the Baidu channel for an application.
-
AWS::Pinpoint::Campaign
-
Use the AWS::Pinpoint::Campaign resource to update the
settings for a campaign.
-
AWS::Pinpoint::EmailChannel
-
Use the AWS::Pinpoint::EmailChannel resource to update
the status and settings of the email channel for an application.
-
AWS::Pinpoint::EventStream
-
Use the AWS::Pinpoint::EventStream resource to create a
new event stream for an application or update the settings of an existing
event stream for an application.
-
AWS::Pinpoint::GCMChannel
-
Use the AWS::Pinpoint::GCMChannel resource to specify a
GCM channel. You can use the GCM channel to send push notification
messages to the Firebase Cloud Messaging (FCM) service, which replaced
the Google Cloud Messaging (GCM) service.
-
AWS::Pinpoint::SMSChannel
-
Use the AWS::Pinpoint::SMSChannel resource to specify an
SMS channel. To send an SMS text message, you send the message through
the SMS channel.
-
AWS::Pinpoint::Segment
-
Use the AWS::Pinpoint::Segment resource to create a new
segment for an application or update the configuration, dimension, and
other settings for an existing segment that's associated with an
application.
-
AWS::Pinpoint::VoiceChannel
-
Use the AWS::Pinpoint::VoiceChannel resource to update
the status and settings of the voice channel for an application.
-
AWS::SageMaker::CodeRepository
-
Use the AWS::SageMaker::CodeRepository resource to
specify a Git repository as a resource in your SageMaker account.
| June 3, 2019 |
Updated resources | The following resources were updated: AWS::CodeCommit::Repository and
AWS::EC2::LaunchTemplate.
-
Code
-
Use the Code resource to provide information about code
to be committed.
-
S3
-
Use the S3 resource to provide information about the
Amazon S3 bucket that contains the code that will be committed to the new
repository.
-
AWS::EC2::LaunchTemplate
-
In the NetworkInterface property, use InterfaceType to
specify the type of network interface.
| May 23, 2019 |
New resources | The following resources were added: AWS::Backup::BackupPlan,
AWS::Backup::BackupSelection, AWS::Backup::BackupVault,
AWS::PinpointEmail::ConfigurationSet,
AWS::PinpointEmail::ConfigurationSetEventDestination,
AWS::PinpointEmail::DedicatedIpPool, AWS::PinpointEmail::Identity,
AWS::Transfer::Server, AWS::Transfer::User, AWS::WAFRegional::GeoMatchSet,
AWS::WAFRegional::RateBasedRule, and AWS::WAFRegional::RegexPatternSet.
-
AWS::Backup::BackupPlan
-
Contains an optional backup plan display name and an array of
BackupRule objects, each of which specifies a backup rule. Each rule in a
backup plan is a separate scheduled task and can back up a different
selection of AWS resources.
- AWS::Backup::BackupSelection
-
Specifies a set of resources to assign to a backup plan.
- AWS::Backup::BackupVault
-
Creates a logical container where backups are stored. A
CreateBackupVault request includes a name, optionally one or more
resource tags, an encryption key, and a request ID.
-
AWS::PinpointEmail::ConfigurationSet
-
Use the AWS::PinpointEmail::ConfigurationSet resource to
specify configuration sets for the Amazon Pinpoint Email API.
-
AWS::PinpointEmail::ConfigurationSetEventDestination
-
Use the
AWS::PinpointEmail::ConfigurationSetEventDestination
resource to specify destinations for events related to sending email in
the Amazon Pinpoint Email API.
-
AWS::PinpointEmail::DedicatedIpPool
-
Use the AWS::PinpointEmail::DedicatedIpPool resource to
specify groups of dedicated IP addresses in the Amazon Pinpoint Email API.
-
AWS::PinpointEmail::Identity
-
Use the AWS::PinpointEmail::Identity resource to specify
identities (email addresses or domains) for sending email through the
Amazon Pinpoint Email API.
-
AWS::Transfer::Server
-
Creates an autoscaling virtual server based on Secure File Transfer
Protocol (SFTP) in AWS.
-
AWS::Transfer::User
-
Creates a user and associates them with an existing Secure File
Transfer Protocol (SFTP) server.
-
AWS::WafRegional::GeoMatchSet
-
The AWS::WAFRegional::GeoMatchSet resource contains one
or more countries that AWS WAF will search for.
-
AWS::WafRegional::RateBasedRule
-
The AWS::WAFRegional::RateBasedRule resource is identical
to a regular Rule, with one addition: a RateBasedRule counts the number
of requests that arrive from a specified IP address every five
minutes.
-
AWS::WafRegional::RegexPatternSet
-
The AWS::WAFRegional::RegexPatternSet resource specifies
the regular expression (regex) pattern that you want AWS WAF to search
for.
| May 23, 2019 |
Updated resources | The following resources were updated: AWS::AppSync::GraphQLApi,
AWS::Cognito::UserPool, AWS::Glue::Classifier, AWS::Glue::Crawler,
AWS::Glue::DevEndpoint, AWS::Glue::Job, and AWS::Glue::Trigger.
-
AWS::AppSync::GraphQLApi
-
Use the AdditionalAuthenticationProviders property to
specify a list of additional authentication providers for the GraphqlApi
API.
Use the Tags property to specify an arbitrary set of tags
(key-value pairs) for this GraphQL API.
-
AWS::Cognito::UserPool
-
In the PasswordPolicy property type, use the
TemporaryPasswordValidityDays property to specify the
number of days a temporary password is valid. If the user does not
sign-in during this time, their password will need to be reset by an
administrator.
When you set TemporaryPasswordValidityDays for a user
pool, you will no longer be able to set the deprecated
UnusedAccountValidityDays value for that user
pool.
- AWS::Glue::Classifier
-
Use the CsvClassifier property to specify a classifier
for comma-separated values (CSV).
-
AWS::Glue::Crawler
-
Use the CrawlerSecurityConfiguration property to specify
the name of the SecurityConfiguration structure to be used
by this crawler.
Use the Tags property to specify the tags to use with
this crawler request. You can use tags to limit access to the
crawler.
-
AWS::Glue::DevEndpoint
-
Use the SecurityConfiguration property to specify the
name of the SecurityConfiguration structure to be used by
this DevEndpoint.
Use the Tags property to specify the tags to use with
this DevEndpoint. You can use tags to limit access to the
DevEndpoint.
-
AWS::Glue::Job
-
Use the SecurityConfiguration property to specify the
name of the SecurityConfiguration structure to be used with
this job.
Use the Tags property to specify the tags to use with
this job. You can use tags to limit access to the job.
-
AWS::Glue::Trigger
-
Use the Tags property to specify the tags to use with
this trigger. You can use tags to limit access to the trigger.
| May 17, 2019 |
New resources | The following resources were added: AWS::Glue::DataCatalogEncryptionSettings,
AWS::Glue::SecurityConfiguration, and AWS::MediaStore::Container.
-
AWS::Glue::DataCatalogEncryptionSettings
-
Sets the security configuration for a specified catalog. After the
configuration has been set, the specified encryption is applied to every
catalog write thereafter.
-
AWS::Glue::SecurityConfiguration
-
Creates a new security configuration.
- AWS::MediaStore::Container
-
The AWS::MediaStore::Container resource specifies a
storage container to hold objects. A container is similar to a bucket in
Amazon S3.
When you create a container using AWS CloudFormation, the template manages data for
five API actions: creating a container, setting access logging, updating
the default container policy, adding a cross-origin resource sharing
(CORS) policy, and adding an object lifecycle policy.
| May 17, 2019 |
Updated resource | The following resource was updated:
AWS::ServiceCatalog::CloudFormationProduct. | May 3, 2019 |
New resources | The following resources were added: AWS::ApiGatewayV2::ApiMapping and
AWS::ApiGatewayV2::DomainName. | May 3, 2019 |
Limit for resources in concurrent stack operations | CloudFormation now enforces an account limit for the number of resources in
concurrent stack operations. This limit is determined by region. For more information, see AWS CloudFormation quotas | April 30, 2019 |
Updated resources | The following resources were updated: AWS::Greengrass::FunctionDefinition and
AWS::Greengrass::FunctionDefinitionVersion. | April 25, 2019 |
Updated resources | The following resources were updated: AWS::ECS::TaskDefinition,
AWS::ElasticLoadBalancingV2::TargetGroup
-
AWS::ECS::TaskDefinition
-
Use the ProxyConfiguration property to specify the
configuration details for an App Mesh proxy.
In the ContainerDefinition property type:
-
Use the DependsOn property to specify the
dependencies defined for container startup and shutdown.
-
Use the StartTimeout property to specify the time
duration to wait before giving up on resolving dependencies for a
container.
-
Use the StopTimeout property to specify the time
duration to wait before the container is forcefully killed if it
doesn't exit normally on its own.
-
AWS::ElasticLoadBalancingV2::TargetGroup
-
Use the HealthCheckEnabled property to indicate whether
health checks are enabled.
The Port, Protocol, and VpcId
properties are now required only if the target type is
instance or ip.
| April 18, 2019 |
New resource | The following resource was added: AWS::EC2::CapacityReservation. | April 18, 2019 |
Updated resources | The following resource was updated: AWS::Batch::JobDefinition and
AWS::ServiceCatalog::CloudFormationProvisionedProduct.
-
AWS::ServiceCatalog::CloudFormationProvisionedProduct
-
The Tags property requires the provisioned product to
have a RESOURCE_UPDATE constraint with
TagUpdatesOnProvisionedProduct set to
ALLOWED to allow tag updates.
The Tags property now requires no interruption upon
update.
| April 4, 2019 |
New resource | The following resource was added:
AWS::ServiceCatalog::ResourceUpdateConstraint. | April 4, 2019 |
Updated resources | The following resources were updated: AWS::AppStream::Fleet,
AWS::AppStream::ImageBuilder, AWS::AppStream::Stack, and AWS::EKS::Cluster. | March 28, 2019 |
New resources | The following resources were added: AWS::AppMesh::Mesh, AWS::AppMesh::Route,
AWS::AppMesh::VirtualNode, AWS::AppMesh::VirtualRouter, and
AWS::AppMesh::VirtualService.
-
AWS::AppMesh::Mesh
-
The AWS::AppMesh::Mesh resource to specify a service
mesh. A service mesh is a logical boundary for network traffic between
the services that reside within it.
-
AWS::AppMesh::Route
-
Use the AWS::AppMesh::Route resource to specify a route
that is associated with a virtual router.
-
AWS::AppMesh::VirtualNode
-
Use the AWS::AppMesh::VirtualNode resource to specify a
virtual node within a service mesh.
-
AWS::AppMesh::VirtualRouter
-
Use the AWS::AppMesh::VirtualRouter resource to specify a
virtual router within a service mesh.
-
AWS::AppMesh::VirtualService
-
Use the AWS::AppMesh::VirtualService resource to specify
a virtual service within a service mesh.
| March 27, 2019 |
New resources | The following resources were added: AWS::Greengrass::ConnectorDefinition,
AWS::Greengrass::ConnectorDefinitionVersion, AWS::Greengrass::CoreDefinition,
AWS::Greengrass::CoreDefinitionVersion, AWS::Greengrass::DeviceDefinition,
AWS::Greengrass::DeviceDefinitionVersion, AWS::Greengrass::FunctionDefinition,
AWS::Greengrass::FunctionDefinitionVersion, AWS::Greengrass::Group,
AWS::Greengrass::GroupVersion, AWS::Greengrass::LoggerDefinition,
AWS::Greengrass::LoggerDefinitionVersion, AWS::Greengrass::ResourceDefinition,
AWS::Greengrass::ResourceDefinitionVersion, AWS::Greengrass::SubscriptionDefinition,
and AWS::Greengrass::SubscriptionDefinitionVersion. | March 15, 2019 |
Updated resources | The following resources were updated: AWS::CodeBuild::Project,
AWS::OpsWorksCM::Server, and AWS::SageMaker::NotebookInstance.
-
AWS::CodeBuild::Project
-
In the Project Source property type, use the
GitSubmodulesConfig property to get information about Git
submodules for a project.
In the Project S3Logs property type, use the
EncryptionDisabled property to disable encryption on S3
build logs.
-
AWS::OpsWorksCM::Server
-
Use the AssociatePublicIpAddress property to associate a
public IP address with the server.
-
AWS::SageMaker::NotebookInstance
-
Use the RootAccess property to specify whether root
access is enabled or disabled for users of the notebook instance.
| March 14, 2019 |
Updated resources | The following resources were updated: AWS::StepFunctions::Activity and
AWS::StepFunctions::StateMachine. | March 7, 2019 |
Updated resource | The following resource was updated: AWS::SageMaker::NotebookInstance.
-
AWS::SageMaker::NotebookInstance
-
Use the VolumeSizeInGB property to specify the size in GB
of the persisted machine learning storage volume that is provisioned and
attached to the SageMaker notebook instance.
| February 28, 2019 |
Updated resources | The following resources were updated: AWS::ApiGateway::ApiKey,
AWS::CodeBuild::Project, AWS::Elasticsearch::Domain, AWS::RDS::DBCluster, and
AWS::RDS::DBInstance.
-
AWS::ApiGateway::ApiKey
-
Use the Value property to specify the value of the API
key.
-
AWS::CodeBuild::Project
-
In the ProjectCache property type, you can use the
Modes property to specify the type cache an AWS CodeBuild
project uses.
-
AWS::Elasticsearch::Domain
-
Use the NodeToNodeEncryptionOptions property to specify
whether node-to-node encryption is enabled.
-
AWS::RDS::DBCluster
-
Use the SourceRegion property to specify the AWS Region
which contains the source DB cluster when replicating a DB
cluster.
-
AWS::RDS::DBInstance
-
Use the UseDefaultProcessorFeatures property to specify
that the DB instance class of the DB instance uses its default processor
features.
| February 21, 2019 |
New resources | The following resources were added: AWS::RAM::ResourceShare,
AWS::RoboMaker::Fleet, AWS::RoboMaker::Robot, AWS::RoboMaker::RobotApplication,
AWS::RoboMaker::RobotApplicationVersion, AWS::RoboMaker::SimulationApplication, and
AWS::RoboMaker::SimulationApplicationVersion. | February 21, 2019 |
Updated resource | The following resource was updated: AWS::CodeBuild::Project. | February 15, 2019 |
New resources | The following resources were added: AWS::FSx::FileSystem,
AWS::KinesisAnalyticsv2::Application,
AWS::KinesisAnalyticsv2::ApplicationCloudWatchLoggingOption,
AWS::KinesisAnalyticsv2::ApplicationOutput, and
AWS::KinesisAnalyticsv2::ApplicationReferenceDataSource. | February 15, 2019 |
Updated resources | The following resources were updated: AWS::OpsWorksCM::Server,
AWS::ServiceDiscovery::Instance, and AWS::ServiceDiscovery::Service. | February 8, 2019 |
New resources | The following resources were added: AWS::ApiGatewayV2::Api,
AWS::ApiGatewayV2::Authorizer,
AWS::ApiGatewayV2::Deployment,
AWS::ApiGatewayV2::Integration, AWS::ApiGatewayV2::IntegrationResponse,
AWS::ApiGatewayV2::Model, AWS::ApiGatewayV2::Route, AWS::ApiGatewayV2::RouteResponse,
and AWS::ApiGatewayV2::Stage.
- AWS::ApiGatewayV2::Api
-
Use the AWS::ApiGatewayV2::Api resource to manage an
API Gateway WebSocket API.
- AWS::ApiGatewayV2::Authorizer
-
Use the AWS::ApiGatewayV2::Authorizer resource to
represent an API Gateway authorizer function.
- AWS::ApiGatewayV2::Deployment
-
Use the AWS::ApiGatewayV2::Deployment resource to create
an API Gateway WebSocket API deployment.
- AWS::ApiGatewayV2::Integration
-
Use the AWS::ApiGatewayV2::Integration resource to
specify information about the target backend that an API Gateway route
calls.
- AWS::ApiGatewayV2::IntegrationResponse
-
Use the AWS::ApiGatewayV2::IntegrationResponse resource
to specify the response that API Gateway sends after a route's backend finishes
processing a WebSocket message.
- AWS::ApiGatewayV2::Model
-
Use the AWS::ApiGatewayV2::Model resource to define the
structure of a route request or response payload for an API Gateway WebSocket
API.
- AWS::ApiGatewayV2::Route
-
Use the AWS::ApiGatewayV2::Route resource to specify
information that is expected to be present in a WebSocket message
payload.
- AWS::ApiGatewayV2::RouteResponse
-
Use the AWS::ApiGatewayV2::RouteResponse resource to
define the responses that can be sent to the client that sends a message
to an API Gateway WebSocket API.
- AWS::ApiGatewayV2::Stage
-
Use the AWS::ApiGatewayV2::Stage resource to create a
stage for an API Gateway WebSocket API deployment.
| February 8, 2019 |
Updated resources | The following resources were updated: AWS::CodeBuild::Project and
AWS::ElasticLoadBalancingV2::Listener.
-
AWS::CodeBuild::Project
-
In the Environment property type, you can use the
ImagePullCredentialsType property to specify the type of
credentials AWS CodeBuild uses to pull images in your build.
In the Environment property type, you can use the
RegistryCredential property to provide information about
credentials that provide access to a private Docker registry.
-
AWS::ElasticLoadBalancingV2::Listener
-
Create TLS listeners for your Network Load Balancers.
| January 24, 2019 |
New resource | The following resource was added: AWS::OpsWorksCM::Server.
-
AWS::OpsWorksCM::Server
-
Use the AWS::OpsWorksCM::Server resource to create an
AWS OpsWorks for Chef Automate or AWS OpsWorks for Puppet Enterprise server.
| January 24, 2019 |
UpdateReplacePolicy attribute added | Use the UpdateReplacePolicy attribute to retain or (in some cases) backup the
existing physical instance of a resource when it is replaced during a stack update
operation. For more information, see UpdateReplacePolicy Attribute. | January 23, 2019 |
Updated resource | The following resource was updated: AWS::Inspector::AssessmentTarget
-
AWS::Inspector::AssessmentTarget
-
The ResourceGroupArn property is no longer required. If
unspecified, all Amazon EC2 instances in your AWS account in the current
region will be included in the assessment target.
| January 17, 2019 |
Updated resource | The following resource was updated:
AWS::ServiceCatalog::CloudFormationProvisionedProduct.
-
AWS::ServiceCatalog::CloudFormationProvisionedProduct
-
The ProductId property now requires no interruption upon
update.
The ProductName property now requires no interruption
upon update.
Each time a stack is created or updated, if ProductName
is provided it will successfully resolve to ProductId as
long as only one product exists in the account/region with that
ProductName.
| January 10, 2019 |
New resources | The following resources were added: AWS::DocDB::DBCluster,
AWS::DocDB::DBClusterParameterGroup, AWS::DocDB::DBInstance, and
AWS::DocDB::DBSubnetGroup. | January 10, 2019 |
Updated resources | The following resources were updated: AWS::AmazonMQ::Broker,
AWS::AmazonMQ::Configuration, and AWS::SageMaker::Model. | January 3, 2019 |
New resource | The following resource was added:
AWS::Route53Resolver::ResolverRuleAssociation.
-
AWS::Route53Resolver::ResolverRuleAssociation
-
Use the AWS::Route53Resolver::ResolverRuleAssociation
resource to associate an Amazon Route 53 Resolver rule and a VPC that you
created using Amazon Virtual Private Cloud (Amazon VPC).
| January 3, 2019 |
Updated resource | The following resource was updated: AWS::AmazonMQ::Broker.
-
AWS::AmazonMQ::Broker
-
The following attributes are now available using the
Fn::Getatt intrinsic function:
-
IpAddresses
-
MqttEndpoints
-
OpenWireEndpoints
-
AmqpEndpoints
-
StompEndpoints
-
WssEndpoints
| December 13, 2018 |
Stack instance operation limit | For StackSets, you can have a maximum of 1500 stack instance operations running in
a given region at the same time, per administrator account. For more information, see AWS CloudFormation quotas. | December 13, 2018 |
New resources | The following resources were added: AWS::AmazonMQ::ConfigurationAssociation,
AWS::IoTAnalytics::Channel, AWS::IoTAnalytics::Dataset, AWS::IoTAnalytics::Datastore,
and AWS::IoTAnalytics::Pipeline.
- AWS::AmazonMQ::ConfigurationAssociation
-
Use the AWS::AmazonMQ::ConfigurationAssociation resource
to associate a configuration with a broker, or return information about
the specified configuration association.
-
AWS::IoTAnalytics::Channel
-
Use the AWS::IoTAnalytics::Channel resource to create a
channel. A channel collects data from an MQTT topic and archives the raw,
unprocessed messages before publishing the data to a pipeline.
-
AWS::IoTAnalytics::Dataset
-
Use the AWS::IoTAnalytics::Dataset resource to create a
data set. A data set retrieves data from a data store and allows you to
explore and analyze your data using machine learning tools.
-
AWS::IoTAnalytics::Datastore
-
Use the AWS::IoTAnalytics::Datastore resource to create a
data store. A data store holds messages from a channel which have been
processed through a pipeline.
-
AWS::IoTAnalytics::Pipeline
-
Use the AWS::IoTAnalytics::Pipeline resource to create a
pipeline. A pipeline consumes messages from one or more channels and
allows you to process the messages before storing them in a data
store.
| December 13, 2018 |
The CAPABILITY_AUTO_EXPAND capability is now available. | Use the CAPABILITY_AUTO_EXPAND capability to create or update a stack
directly from a stack template that contains macros, without first reviewing the
resulting changes in a change set first. For more information, see CreateStack or UpdateStack in AWS CloudFormation API Reference. | December 7, 2018 |
Updated resource | The following resource was updated: AWS::CodeBuild::Project.
-
AWS::CodeBuild::Project
-
-
In the Environment property type, you can use the
Certificate property to specify a certificate to
use with your build project.
-
In the Artifacts property type, you can use the
ArtifactIdentifier property to identify the project
artifact.
-
In the Source property type, you can use the
SourceIdentifier property to identify the project
source.
| December 6, 2018 |
Updated resource | The following resource was updated: AWS::Lambda::Function
-
AWS::Lambda::Function
-
Use the Layers property to specify a list of Amazon
Resource Names (ARNs) for the function layers to add to the function's
execution environment.
| November 29, 2018 |
New resources | The following resources were added: AWS::Lambda::LayerVersion,
AWS::Lambda::LayerVersionPermission.
-
AWS::Lambda::LayerVersion
-
Use the AWS CloudFormation AWS::Lambda::LayerVersion resource to
create a layer version in AWS Lambda.
-
AWS::Lambda::LayerVersionPermission
-
Use the AWS CloudFormation AWS::Lambda::LayerVersionPermission
resource to give other accounts permission to use a layer version in
AWS Lambda.
| November 29, 2018 |
Updated resources | The following resources were updated: AWS::DynamoDB::Table, AWS::EC2::Instance,
and AWS::ServiceDiscovery::Service.
-
AWS::DynamoDB::Table
-
Use the BillingMode property to specify how you are
charged for read and write throughput and how you manage capacity.
The ProvisionedThroughput property is now
conditional.
In the GlobalSecondaryIndex property type, the
ProvisionedThroughput property is now conditional.
-
AWS::EC2::Instance
-
Use the ElasticInferenceAccelerators property to specify
a list of elastic inference accelerators for an instance.
Use the LicenseSpecifications property to associate a
list of license configuration with an instance.
-
AWS::ServiceDiscovery::Service
-
Use the NamespaceId property to specify the ID of the
namespace that you want to use to create the service.
In the DnsConfig property type, use the RoutingPolicy
property to specify the routing policy that you want to apply to all DNS
records that AWS Cloud Map creates when you register an instance and
specify this service.
| November 28, 2018 |
New resource | The following resource was added: AWS::ServiceDiscovery::HttpNamespace. | November 28, 2018 |
New resources | The following resources were added: AWS::EC2::TransitGateway,
AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRoute,
AWS::EC2::TransitGatewayRouteTable, AWS::EC2::TransitGatewayRouteTableAssociation,
and AWS::EC2::TransitGatewayRouteTablePropagation. | November 26, 2018 |
New resources | The following resources were added: Alexa::ASK::Skill,
AWS::AppSync::FunctionConfiguration, AWS::EC2::EC2Fleet,
AWS::Kinesis::StreamConsumer, AWS::Route53Resolver:ResolverEndpoint, and
AWS::Route53Resolver::ResolverRule.
-
Alexa::ASK::Skill
-
Use the Alexa::ASK::Skill resource to create an Alexa
skill.
-
AWS::AppSync::FunctionConfiguration
-
Use the AWS::AppSync::FunctionConfiguration resource to
describe the functions defined with appsync datasource in AWS AppSync.
-
AWS::EC2::EC2Fleet
-
Use the AWS::EC2::EC2Fleet resource to launch an EC2
Fleet that can include multiple launch specifications that vary by
instance type, AMI, Availability Zone, or subnet.
-
AWS::Kinesis::StreamConsumer
-
Use the AWS::Kinesis::StreamConsumer resource to to
register a consumer with a Kinesis data stream.
-
AWS::Route53Resolver::ResolverEndpoint
-
Use the AWS::Route53Resolver::ResolverEndpoint resource
to specify settings for inbound or outbound endpoints for
Amazon RouteĀ 53.
-
AWS::Route53Resolver::ResolverRule
-
Use the AWS::Route53Resolver::ResolverRule resource to
specify detailed information about a resolver rule, which specifies how
to route DNS queries out of a VPC for Amazon RouteĀ 53.
| November 20, 2018 |
Updated resources | The following resources were updated: AWS::ApiGateway::Deployment,
AWS::ApiGateway::Stage, AWS::AutoScaling::AutoScalingGroup, AWS::EC2::EIP,
AWS::ElasticLoadBalancingV2::Listener, AWS::EMR::Cluster, AWS::OpsWorks::Layer,
AWS::RDS::DBCluster, AWS::RDS::DBInstance, AWS::S3::Bucket, and
AWS::SNS::Topic.
-
AWS::ApiGateway::Deployment
-
In the StageDescription property type, use the Tags
property to specify the AWS CloudFormation resource tags to associate with the
stage.
-
AWS::ApiGateway::Stage
-
Use the Tags property to specify the AWS CloudFormation resource tags
to associate with the stage.
-
AWS::AutoScaling::AutoScalingGroup
-
Use the MixedInstancesPolicy property to provision a
combination of On-Demand Instances and Spot Instances across multiple
instance types. When you create your Auto Scaling group, you can specify a launch
configuration or template as a parameter for the top-level object, or you
can specify a mixed instances policy, but not both at the same
time.
-
AWS::EC2::EIP
-
Use the PublicIpv4Pool property to specify the ID of an
address pool that you own to let Amazon EC2 select an address from the address
pool.
-
AWS::ElasticLoadBalancingV2::Listener
-
In the Action property type:
-
Use the AuthenticateCognitoConfig property to
specify request parameters to use when integrating with Amazon
Cognito to authenticate users.
-
Use the AuthenticateOidcConfig property to request
parameters when using an identity provider (IdP) that is compliant
with OpenID Connect (OIDC) to authenticate users.
-
Use the FixedResponseConfig property to specify
information about an action that returns a custom HTTP
response.
-
Use the RedirectConfig property to specify
information about a redirect action.
-
AWS::ElasticLoadBalancingV2::ListenerRule
-
In the Actions property type:
-
Use the AuthenticateCognitoConfig property to
specify request parameters to use when integrating with Amazon
Cognito to authenticate users.
-
Use the AuthenticateOidcConfig property to request
parameters when using an identity provider (IdP) that is compliant
with OpenID Connect (OIDC) to authenticate users.
-
Use the FixedResponseConfig property to specify
information about an action that returns a custom HTTP
response.
-
Use the RedirectConfig property to specify
information about a redirect action.
-
AWS::EMR::Cluster
-
Use the HadoopJarStepConfig property type to specify a job flow step
consisting of a JAR file whose main function will be executed.
Use the StepConfig property type to specify a cluster (job flow)
step.
Use the KeyValue property type to specify a key value pair.
In the JobFlowInstancesConfig property type, use
KeepJobFlowAliveWhenNoSteps property to specify whether
the cluster should remain available after completing all steps.
-
AWS::OpsWorks::Layer
-
In the VolumeConfiguration property type, use the
Encrypted property to specify whether an Amazon EBS
volume is encrypted.
-
AWS::RDS::DBCluster
-
Use the DeletionProtection property to indicate whether
the DB cluster should have deletion protection enabled. The database
can't be deleted when this value is set to true. If you want
to delete a stack with a protected cluster, update this value to
false before you delete the stack.
-
AWS::RDS::DBInstance
-
Use the DeleteAutomatedBackups property to indicate
whether automated backups should be deleted (true) or
retained (false) when you delete a DB instance. The default
is true.
Use the DeletionProtection property to indicate whether
the DB instance should have deletion protection enabled. The database
can't be deleted when this value is set to true. If you want
to delete a stack with a protected instance, update this value to
false before you delete the stack.
-
AWS::S3::Bucket
-
Use the PublicAccessBlockConfiguration property to
specify the public access configuration for an Amazon S3 bucket.
-
AWS::SNS::Topic
-
Use the KmsMasterKeyId property to specify an AWS KMS key
identifier. This can be a key ID, key ARN, or key alias.
| November 19, 2018 |
Updated resource | The following resource was updated: AWS::CodePipeline::Pipeline.
-
AWS::CodePipeline::Pipeline
-
Use the ArtifactStores property to specify a list of
ArtifactStoreMap mappings. There must be an artifact
store for the pipeline region and for each cross-region action within the
pipeline. You can only use either ArtifactStore or
ArtifactStores, not both.
In the Actions property type, use the Region property
to specify the action's AWS Region, such as
us-east-1.
| November 13, 2018 |
Stack drift detection added | Drift detection enables you to detect whether a stack's actual configuration
differs, or has drifted, from its expected template
configuration as defined within AWS CloudFormation. You can have AWS CloudFormation detect drift on an entire
stack, or individual stack resources. For more information, see Detecting
Unmanaged Configuration Changes to Stacks and Resources. | November 13, 2018 |
Updated resources | The following resources have been updated: AWS::ApiGateway::Deployment,
AWS::ApiGateway::Stage, AWS::CloudWatch::Alarm, AWS::EC2::SecurityGroupIngress,
AWS::IAM::Role, AWS::IAM::User, AWS::IoT::TopicRule, AWS::KMS::Key,
AWS::RDS::DBCluster, AWS::RDS::DBInstance, AWS::Route53::RecordSet, AWS::S3::Bucket,
and AWS::Workspaces::Workspace.
-
AWS::ApiGateway::Deployment
-
In the StageDescription property type, use the
TracingEnabled property to specify whether active tracing
with X-ray is enabled for this stage.
-
AWS::ApiGateway::Stage
-
Use the TracingEnabled property to specify whether active
tracing with X-ray is enabled for this stage.
-
AWS::CloudWatch::Alarm
-
Use the DatapointsToAlarm property to specify the number
of datapoints that must be breaching to trigger the alarm. This is used
only if you are setting an "M out of N" alarm. In that case, this value
is the M.
-
AWS::EC2::SecurityGroupIngress
-
Use the SourcePrefixListId property to specify the AWS
service prefix of an Amazon VPC endpoint.
-
AWS::IAM::Role
-
Use the PermissionsBoundary property to specify the
policy that is used to set the permissions boundary for the role.
-
AWS::IAM::User
-
Use the PermissionsBoundary property to specify the
policy that is used to set the permissions boundary for the user.
-
AWS::IoT::TopicRule
-
In the TopicRulePayload property type, use the
ErrorActions property to specify the action to take when
an error occurs.
In the Action property type:
-
AWS::KMS::Key
-
Use the PendingWindowInDays property to specify the
waiting period, specified in number of days, after which AWS Key Management Service
deletes the AWS KMS key.
-
AWS::RDS::DBInstance
-
Use the EnableCloudwatchLogsExports property to specify
the list of log types that need to be enabled for exporting to
CloudWatch Logs.
Use the EnableIAMDatabaseAuthentication property to
enable mapping of AWS Identity and Access Management (IAM) accounts to database accounts.
Use the EnablePerformanceInsights property to enable
Performance Insights for the DB instance.
Use the PerformanceInsightsKMSKeyId property to specify
the KMS key identifier for encryption of Performance Insights data. The
KMS key ID is the Amazon Resource Name (ARN), KMS key identifier, or
the KMS key alias for the AWS KMS encryption key.
Use the PerformanceInsightsRetentionPeriod property to
specify the amount of time, in days, to retain Performance Insights
data.
Use the ProcessorFeatures property to specify the number
of CPU cores and the number of threads per core for the DB instance class
of the DB instance.
Use the PromotionTier property to specify the order in
which an Aurora Replica is promoted to the primary instance after a
failure of the existing primary instance.
-
AWS::RDS::DBCluster
-
Use the EnableCloudwatchLogsExports property to specify
the list of log types that need to be enabled for exporting to
CloudWatch Logs.
Use the EnableIAMDatabaseAuthentication property to
enable mapping of AWS Identity and Access Management (IAM) accounts to database accounts.
Use the BacktrackWindow property to specify the target
backtrack window, in seconds. To disable backtracking, specify 0. If
specified, this property must be set to a number from 0 to 259,200 (72
hours).
-
AWS::Route53::RecordSet
-
Use the MultiValueAnswer property to route traffic
approximately randomly to multiple resources, such as web servers. Create
one multivalue answer record for each resource and specify true for
MultiValueAnswer.
-
AWS::S3::Bucket
-
Use the RegionalDomainName attribute with the Fn::GetAtt
function to return the regional domain name of the specified
bucket.
-
AWS::Workspaces::Workspace
-
Use the Tags property to specify the tags (key-value
pairs) that you want to attach to the WorkSpace.
Use the WorkspaceProperties property to specify
information about a WorkSpace.
| November 9, 2018 |
The secretsmanager dynamic reference is now available. | Use the secretsmanager dynamic reference to retrieve entire secrets
or secret values that are stored in AWS Secrets Manager for use in your templates.
Secrets can be database credentials, passwords, third-party
API keys, and even arbitrary text. Using the secretsmanager dynamic
reference guarantees that neither Secrets Manager nor CloudFormation logs or persists
any resolved secret value. For more information, see Using Dynamic
References to Specify Template Values. | November 9, 2018 |
New resources | The following resources were added: AWS::DLM::LifecyclePolicy,
AWS::SecretsManager::ResourcePolicy, AWS::SecretsManager::RotationSchedule,
AWS::SecretsManager::Secret, and AWS::SecretsManager::SecretTargetAttachment. | November 9, 2018 |
Updated resource | The following resource was updated: AWS::SSM:MaintenanceWindow.
-
AWS::SSM:MaintenanceWindow
-
Use the StartDate and StartDate property
types to specify when you want the Maintenance Window to become active or
inactive. Use the ScheduleTimezone property type to specify
the time zone to base scheduled Maintenance Window executions on, in
Internet Assigned Numbers Authority (IANA) format.
| November 1, 2018 |
Updated resources | The following resources were updated: AWS::AppSync::DataSource,
AWS::AppSync::Resolver, AWS::AutoScalingPlans::ScalingPlan,
AWS::Batch::JobDefinition, AWS::Batch::ComputeEnvironment, AWS::CloudWatch::Alarm,
AWS::IoT1Click::Placement, and AWS::IoT1Click::Project.
-
AWS::AppSync::DataSource
-
Use the RelationalDatabaseConfig property type to specify
RelationalDatabaseConfig for an AWS AppSync data source.
In the HttpConfig property type, use the
AuthorizationConfig property to specify the authorization
type and configurations for an AWS AppSync http data source.
-
AWS::AppSync::Resolver
-
Use the PipelineConfig property type to specify
PipelineConfig for an AWS AppSync data source to connect with
functions.
-
AWS::AutoScalingPlans::ScalingPlan
-
Use the ScalingInstruction property type to configure
predictive scaling as part of the scaling configuration for an Amazon EC2 Auto Scaling
group in an AWS Auto Scaling scaling plan.
Use the PredefinedLoadMetricSpecification property type
to specify a predefined load metric for predictive scaling to use with
AWS Auto Scaling.
Use the CustomizedLoadMetricSpecification property type
to specify a customized load metric for predictive scaling to use with
AWS Auto Scaling.
-
AWS::Batch::JobDefinition
-
The AWS::Batch::JobDefinition resource was updated to
support AWS Batch multi-node parallel jobs.
-
AWS::Batch::ComputeEnvironment
-
The AWS::Batch::ComputeEnvironment resource was updated
to support Amazon EC2 launch templates and placement groups.
-
AWS::CloudWatch::Alarm
-
Use the Metrics property to specify the metric data to
return.
The MetricName, Namespace, and
Period properties are now optional.
-
AWS::IoT1Click::Placement
-
The PlacementName property is now optional.
-
AWS::IoT1Click::Project
-
The ProjectName property is now optional.
| October 25, 2018 |
New resources | The following resources were added: AWS::AppStream::DirectoryConfig,
AWS::AppStream::Fleet, AWS::AppStream::ImageBuilder, AWS::AppStream::Stack,
AWS::AppStream::StackFleetAssociation, AWS::AppStream::StackUserAssociation,
AWS::AppStream::User.
-
AWS::AppStream::DirectoryConfig
-
Use the AWS::AppStream::DirectoryConfig resource to
describe the configuration information required to join Amazon AppStream 2.0 fleets
and image builders to Microsoft Active Directory domains.
-
AWS::AppStream::Fleet
-
Use the AWS::AppStream::Fleet resource to create a fleet
for Amazon AppStream 2.0. A fleet consists of streaming instances that run a
specified image.
-
AWS::AppStream::ImageBuilder
-
Use the AWS::AppStream::ImageBuilder resource to create
an image builder for Amazon AppStream 2.0.
-
AWS::AppStream::Stack
-
Use the AWS::AppStream::Stack resource to create a stack
to start streaming applications to Amazon AppStream 2.0 users.
-
AWS::AppStream::StackFleetAssociation
-
Use the AWS::AppStream::StackFleetAssociation resource to
associate a fleet with a stack for Amazon AppStream 2.0.
-
AWS::AppStream::StackUserAssociation
-
Use the AWS::AppStream::StackUserAssociation resource to
associate the specified stacks with the specified users for Amazon AppStream 2.0.
Users in a user pool cannot be assigned to stacks with fleets that are
joined to an Active Directory domain.
-
AWS::AppStream::User
-
Use the AWS::AppStream::User resource to create a new
user in the user pool for Amazon AppStream 2.0.
| October 25, 2018 |
Updated resource | Updated the following resources: AWS::AmazonMQ::Broker, AWS::GuardDuty::Detector,
and AWS::SSM::PatchBaseline.
- AWS::AmazonMQ::Broker
-
Amazon MQ now supports engine versions 5.15.6 and 5.15.0. Property changes
include:
-
AWS::GuardDuty::Detector
-
Use the FindingPublishingFrequency property to specify
the frequency of notifications sent about the subsequent finding
occurrences.
-
AWS::SSM::PatchBaseline
-
Use the PatchSource property type to provide information
about the patches to use to update target instances.
| October 18, 2018 |
New resource | Added the AWS::Events::EventBusPolicy resource.
-
AWS::Events::EventBusPolicy
-
Use the AWS::Events::EventBusPolicy resource to grant
permission to other AWS accounts that send events to your
account.
| October 18, 2018 |
UseOnlineResharding update policy now available. | To modify a replication group's shards by adding or removing shards, rather than
replacing the entire AWS::ElastiCache::ReplicationGroup resource, use
the UseOnlineResharding update policy. For more information, see UseOnlineResharding Policy. | September 20, 2018 |
Updated resources | The following resources have been updated: AWS::ApiGateway::Deployment,
AWS::ApiGateway::Method, AWS::ApiGateway::Stage, AWS::ApiGateway::UsagePlan,
AWS::CodeBuild::Project, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::FlowLog,
AWS::EC2::SpotFleet, AWS::EC2::VPCEndpoint, AWS::ECS::Service,
AWS::ECS::TaskDefinition, and AWS::RDS::DBCluster.
-
AWS::ApiGateway::Deployment
-
Use the DeploymentCanarySettings property to specify
settings for the canary deployment.
In the StageDescription property type:
-
AWS::ApiGateway::Method
-
Use the AuthorizationScopes property to specify a list of
authorization scopes configured on the method.
In the Integration:
-
Use the ConnectionId property to specify the ID of
the VpcLink used for the integration when
connectionType=VPC_LINK.
-
Use the ConnectionType property to specify the type
of the network connection to the integration endpoint.
-
Use the TimeoutInMillis property to specify a
custom timeout between 50 and 29,000 milliseconds.
-
AWS::ApiGateway::Stage
-
Use the AccessLogSetting property to specify settings for
logging access in this stage.
Use the CanarySetting property to specify settings for
the canary deployment in this stage.
-
AWS::ApiGateway::UsagePlan
-
In the ApiStage property type, use the Throttle
property to specify a map containing method-level throttling information
for API stage in a usage plan.
-
AWS::CodeBuild::Project
-
Use the LogsConfig property specify logs for a project.
Logs can be CloudWatch Logs, uploaded to a specified S3 bucket, or both.
In the LogsConfig property type:
-
AWS::CodeDeploy::DeploymentGroup
-
Use the Ec2TagSet property to specify information about
groups of tags applied to EC2 instances. The deployment group will
include only EC2 instances identified by all the tag groups.
Use the OnPremisesInstanceTagSet property to specify
information about groups of tags applied to on-premises instances. The
deployment group will include only on-premises instances identified by
all the tag groups.
The DeliverLogsPermissionArn and
LogGroupName properties are no longer required.
-
AWS::EC2::FlowLog
-
Use the LogDestination property to specify the
destination to which the flow log data is to be published.
Use the LogDestinationType property to specify the type
of destination to which the flow log data is to be published. Flow log
data can be published to CloudWatch Logs or Amazon S3.
-
AWS::EC2::SpotFleet
-
In the SpotFleetRequestConfigData property type, use the
InstanceInterruptionBehavior property to specify the
behavior when a Spot Instance is interrupted.
In the SpotFleetRequestConfigData property type, use the
LoadBalancersConfig property to specify one or more
Classic Load Balancers and target groups to attach to the Spot Fleet
request. Spot Fleet registers the running Spot Instances with the
specified Classic Load Balancers and target groups.
In the Placement property type, use the
Tenancy property to specify the tenancy of the instance
(if the instance is running in a VPC). An instance with a tenancy of
dedicated runs on single-tenant hardware. The host tenancy is not
supported for Spot Instances.
-
AWS::EC2::VPCEndpoint
-
Use the following attributes with the Fn::GetAtt function
to return attribute values.
-
Use CreationTimestamp to return the date and time
the VPC endpoint was created.
-
Use DnsEntries to return the DNS entries for the
endpoint.
-
Use NetworkInterfaceIds to return the network
interfaces for the endpoint.
-
AWS::ECS::Service
-
The ServiceRegistries property now requires replacement
upon update.
Use the SchedulingStrategy property to specify the
scheduling strategy to use for the service.
In the ServiceRegistry property type:
-
Use the ContainerName property to specify the
container name value, already specified in the task definition, to
be used for your service discovery service.
-
Use the ContainerPort property to specify the port
value, already specified in the task definition, to be used for
your service discovery service.
-
AWS::ECS::TaskDefinition
-
In the LinuxParameters property type:
-
Use the Tmpfs property to specify the container
path, mount options, and size of the tmpfs mount.
-
Use the SharedMemorySize property to specify the
size (in MiB) of the /dev/shm volume.
In the Volumes property type, use the
DockerVolumeConfiguration property to specify the
configuration of a Docker volume.
In the ContainerDefinition property type, use the
RepositoryCredentials property to specify the repository
credentials for private registry authentication.
-
AWS::ElastiCache::ReplicationGroup
-
The NodeGroupConfiguration and NumNodeGroups
properties are now conditional for some update operations.
In the NodeGroupConfiguration property type, use the
NodeGroupId property to specify either the ElastiCache
for Redis supplied 4-digit id or a user supplied id for the node group
these configuration values apply to.
-
AWS::RDS::DBCluster
-
Use the EngineMode property to specify the DB engine mode
of the DB cluster.
Use the ScalingConfiguration property to specify the
scaling properties of the DB cluster, for DB clusters in
serverless DB engine mode.
| September 20, 2018 |
New resources | The following resources were added: AWS::IoT1Click::Device,
AWS::IoT1Click::Placement, and AWS::IoT1Click::Project.
-
AWS::IoT1Click::Device
-
Use the AWS::IoT1Click::Device resource to change the
enabled state of an AWS IoT 1-Click compatible device.
-
AWS::IoT1Click::Placement
-
Use the AWS::IoT1Click::Placement resource to create an
empty AWS IoT 1-Click placement.
-
AWS::IoT1Click::Project
-
Use the AWS::IoT1Click::Project resource to create an
empty project with a placement template.
| September 20, 2018 |
New resource | Added the AWS::CloudFormation::Macro resource.
-
AWS::CloudFormation::Macro
-
Use the AWS::CloudFormation::Macro resource to create a
template macro to perform custom processing on AWS CloudFormation templates.
| September 6, 2018 |
Macros now available | Use macros to to perform custom processing on templates, from simple actions like
find-and-replace operations to extensive transformations of entire templates. See Using AWS
CloudFormation Macros to Perform Custom Processing on Templates for
more information. | September 6, 2018 |
Updated resources | Added the Logs property to AWS::AmazonMQ::Broker. Added the SecondaryArtifacts and
SecondarySources properties to AWS::CodeBuild::Project.
- AWS::AmazonMQ::Broker
-
Use the Logs property to enable general or audit logging
for an Amazon MQ broker.
-
AWS::CodeBuild::Project
-
In the Artifacts property type, you can use the
SecondaryArtifacts property to specify secondary
artifacts for a build project. You can use the
SecondarySources property to specify secondary inputs for
a build project.
| August 30, 2018 |
Updated resources | Added the Configuration property to AWS::Glue::Crawler. Added the JsonClassifier
and XMLClassifier properties to AWS::Glue::Classifier.
-
AWS::Glue::Crawler
-
Use the Configuration property to specify crawler
configuration information. This versioned JSON string allows users to
specify aspects of a crawler's behavior.
-
AWS::Glue::Classifier
-
Use the JsonClassifier property to specify AWS Glue
classifier for JSON.
Use the XMLClassifier property to specify AWS Glue
classifier for XML content.
| August 23, 2018 |
AWS CloudFormation now supports VPC endpoints powered by PrivateLink. | You can use a VPC endpoint to create a private connection between your VPC and
AWS CloudFormation without requiring access over the Internet, through a NAT instance, a VPN
connection, or AWS Direct Connect. For more information, see Setting Up
VPC Endpoints for AWS CloudFormation. | August 22, 2018 |
Dynamic references support secure strings | Use new dynamic references to specify values that are stored and managed in other
services, including Systems Manager Parameter Store SecureString type parameters, in
your stack templates. For more information, see Using Dynamic
References to Specify Template Values. | August 16, 2018 |
Updated resources | The following resources were updated: AWS::ApiGateway::DomainName,
AWS::CertificateManager::Certificate, AWS::EC2::VPCPeeringConnection,
AWS::EFS::FileSystem, AWS::EMR::Cluster, AWS::RDS::DBClusterParameterGroup,
AWS::SNS::Subscription, and AWS::SQS::Queue.
-
AWS::ApiGateway::DomainName
-
Use the following attributes with the Fn::GetAtt
intrinsic function:
-
The DistributionHostedZoneId attribute returns the
region-agnostic Amazon RouteĀ 53 Hosted Zone ID of the edge-optimized
endpoint.
-
The RegionalDomainName attribute returns the domain
name associated with the regional endpoint for this custom domain
name.
-
The RegionalHostedZoneId attribute returns the
region-specific Amazon RouteĀ 53 Hosted Zone ID of the regional
endpoint.
-
AWS::CertificateManager::Certificate
-
Use the ValidationMethod property to specify the method
you want to use if you are requesting a public certificate to validate
that you own or control a domain.
-
AWS::EC2::VPCPeeringConnection
-
Use the PeerRegion property to specify the region code
for the accepter VPC, if the accepter VPC is located in a region other
than the region in which you make the request.
-
AWS::EFS::FileSystem
-
-
Use the ProvisionedThroughputInMibps property to
specify the throughput, measured in MiB/s, that you want to
provision for a file system that you're creating.
-
Use the ThroughputMode property to specify the
throughput mode for the file system to be created.
-
AWS::EMR::Cluster
-
Use the KerberosAttributes property to specify attributes
for Kerberos configuration when Kerberos authentication is enabled using
a security configuration.
-
AWS::RDS::DBClusterParameterGroup
-
The Tags property now requires no interruption to
update.
-
AWS::SNS::Subscription
-
-
Use the DeliveryPolicy property to specify the JSON
serialization of the subscription's delivery policy.
-
Use the FilterPolicy property to specify the filter
policy JSON that is assigned to the subscription.
-
Use the RawMessageDelivery property to specify if
raw message delivery is enabled for the subscription.
-
Use the Region property to specify the region in
which the topic resides.
-
AWS::SQS::Queue
-
Use the Tags property to specify the tags that you want
to attach to this queue.
| August 15, 2018 |
Updated resource | Added the SSESpecification property to AWS::DAX::Cluster.
-
AWS::DAX::Cluster
-
Use the SSESpecification property to specify the settings
to enable server-side encryption.
| August 9, 2018 |
New resource | Added the AWS::EC2::VPCEndpointServicePermissions resource. | August 9, 2018 |
Updated resource | Added the OverrideArtifactName property to AWS::CodeBuild::Project.
-
AWS::CodeBuild::Project
-
In the Artifacts property type, set the
OverrideArtifactName property to true to override the
artifact name with a name specified in the buildspec file. The name
specified in a buildspec file is calculated at build time and uses the
Shell command language. For example, you can append a date and time to
your artifact name so that it is always unique.
| August 7, 2018 |
Updated resource | Added the EncryptionDisabled property to AWS::CodeBuild::Project.
-
AWS::CodeBuild::Project
-
In the Artifacts property type, set the
EncryptionDisabled property to true to disable encryption
for build output artifacts. This option is only valid if your artifact
type is Amazon S3. If this is set to true with another artifact type, an
invalidInputException will be thrown.
| July 26, 2018 |
Updated resource | Added the Timeout property to AWS::Batch::JobDefinition. | July 19, 2018 |
New resource | The following resource was added: AWS::IAM::ServiceLinkedRole.
-
AWS::IAM::ServiceLinkedRole
-
Use the AWS::IAM::ServiceLinkedRole resource to create a
service-linked role in IAM. A service-linked role is a unique type of
IAM role that is linked directly to an AWS service. Service-linked
roles are predefined by the service and include all the permissions that
the service requires to call other AWS services on your behalf.
| July 19, 2018 |
Updated resources | Added the FieldLevelEncryptionId property to AWS::CloudFront::Distribution
property types.
-
AWS::CloudFront::Distribution
-
In the CacheBehavior and DefaultCacheBehavior property types, use the
FieldLevelEncryptionId property to specify the ID for the
field-level encryption configuration that you want CloudFront to use for
encrypting specific fields of data for a cache behavior or for the
default cache behavior.
| July 18, 2018 |
Updated resource | Added the HttpConfig property to AWS::AppSync::DataSource. | July 12, 2018 |
Updated resource | Added the ReportBuildStatus property to AWS::CodeBuild::Project.
-
AWS::CodeBuild::Project
-
In the Source property type, use the ReportBuildStatus
property to specify whether to send your source provider the status of a
build's start and completion.
| July 10, 2018 |
New resource | The following resource was added: AWS::CodePipeline::Webhook.
-
AWS::CodePipeline::Webhook
-
Use the AWS::CodePipeline::Webhook resource to create a
webhook that connects your pipeline to an external event, such as a
GitHub source repository change, which triggers your pipeline to start
every time the external event occurs.
| July 5, 2018 |
Updated resource | Added the following properties to AWS::EC2::VPCEndpoint: PrivateDnsEnabled,
SecurityGroupIds, SubnetIds, and VpcEndpointType.
-
AWS::EC2::VPCEndpoint
-
Use the PrivateDnsEnabled property to indicate whether to
associate a private hosted zone with the specified VPC.
Use the SecurityGroupIds property to specify the ID of
one or more security groups to associate with the endpoint network
interface.
Use the SubnetIds property to specify the ID of one or
more subnets in which to create an endpoint network interface.
Use the VpcEndpointType property to specify the type of
endpoint.
| June 21, 2018 |
New resources | The following resources were added: AWS::EC2::VPCEndpointConnectionNotification
and AWS::EC2::VPCEndpointService.
-
AWS::EC2::VPCEndpointConnectionNotification
-
Use the AWS::EC2::VPCEndpointConnectionNotification
resource to create a connection notification for the specified VPC
endpoint or VPC endpoint service.
-
AWS::EC2::VPCEndpointService
-
Use the AWS::EC2::VPCEndpointService resource to create a
VPC endpoint service configuration to which service consumers (AWS
accounts, IAM users, and IAM roles) can connect.
| June 21, 2018 |
Updated resource | Added the following property to AWS::ServiceDiscovery::Service:
HealthCheckCustomConfig. | June 14, 2018 |
New resources | The following new resources were released: AWS::AmazonMQ::Broker and
AWS::AmazonMQ::Configuration.
-
AWS::AmazonMQ::Broker
-
Use the AWS::AmazonMQ::Broker resource to create a
broker, add configuration changes or modify users for the specified
broker, return information about the specified broker, or delete the
specified broker.
-
AWS::AmazonMQ::Configuration
-
Use the AWS::AmazonMQ::Configuration resource to create a
configuration, update the specified configuration, or return information
about the specified configuration.
| June 14, 2018 |
New resource | The following resource was added: AWS::SSM::ResourceDataSync.
-
AWS::SSM::ResourceDataSync
-
Use the AWS::SSM::ResourceDataSync resource to create or
delete a Resource Data Sync for Systems Manager Inventory. You can use Resource
Data Sync to send Inventory data collected from all of your Systems Manager managed
instances to a single Amazon S3 bucket.
| June 11, 2018 |
New resource | The following resource was released: AWS::EKS::Cluster. | June 5, 2018 |
Updated resource | For the AWS::GuardDuty::Master resource, the InvitationId property is now
optional. | May 31, 2018 |
New resources | The following new resources were released: AWS::SageMaker::Endpoint,
AWS::SageMaker::EndpointConfig, AWS::SageMaker::Model,
AWS::SageMaker::NotebookInstance, and
AWS::SageMaker::NotebookInstanceLifecycleConfig. | May 31, 2018 |
Stack sets now support customized execution roles | Use customized execution roles in target accounts to control the stack resources
that users or groups can include in their stack sets. For more information, see Granting
Permissions for Stack Set Operations. | May 30, 2018 |
Selective updates of stack instances | Use the optional Accounts and Regions parameters to specify the accounts and
regions in which to update stack instances during a stack set update
operation. For more information, see UpdateStackSet in the AWS CloudFormation API Reference. | May 30, 2018 |
New resources | The following new resources were released: AWS::Neptune::DBCluster,
AWS::Neptune::DBClusterParameterGroup, AWS::Neptune::DBInstance,
AWS::Neptune::DBParameterGroup, and AWS::Neptune::DBSubnetGroup. | May 30, 2018 |
Updated resources | The following resources were updated: AWS::ApiGateway::RestApi,
AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration,
AWS::DirectoryService::MicrosoftAD, AWS::DynamoDB::Table, AWS::EC2::Instance,
AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::Elasticsearch::Domain,
AWS::IAM::Role, AWS::KinesisFirehose::DeliveryStream,
AWS::Lambda::EventSourceMapping, AWS::Logs::MetricFilter, and
AWS::SSM::Association.
-
AWS::ApiGateway::RestApi
-
Use the Policy property to specify a policy document that
contains the permissions for the specified RestAPI.
-
AWS::AutoScaling::AutoScalingGroup
-
Use the ServiceLinkedRoleARN property to specify the
Amazon Resource Name (ARN) of the service-linked role that the Auto
Scaling group uses to call other AWS services on your behalf.
-
AWS::AutoScaling::LaunchConfiguration
-
Use the LaunchConfigurationName property to specify the
name of the launch configuration.
-
AWS::DirectoryService::MicrosoftAD
-
Use the Edition property to specify the AWS Microsoft
AD edition to use.
-
AWS::DynamoDB::Table
-
Use the PointInTimeRecoverySpecification property to
specify the settings used to enable point in time recovery.
-
AWS::EC2::Instance
-
Use the LaunchTemplate property to specify the launch
template to use for an Amazon EC2 instance.
-
AWS::ECS::Service
-
Use the ServiceRegistry property type to specify the
details of the service registry.
-
AWS::ECS::TaskDefinition
-
Use the HealthCheck property type to specify a container
health check.
-
AWS::Elasticsearch::Domain
-
Use the EncryptionAtRestOptions property type to specify
whether the domain should encrypt data at rest, and if so, the AWS Key
Management Service (KMS) key to use.
-
AWS::IAM::Role
-
Use the RoleId attribute to have Fn::GetAtt
return the stable and unique string identifying the role.
Use the MaxSessionDuration property to specify the
maximum session duration (in seconds) for the specified role.
-
AWS::KinesisFirehose::DeliveryStream
-
Use the SplunkDestinationConfiguration property to
specify the configuration of a destination in Splunk for a Kinesis Data Firehose delivery
stream.
-
AWS::Lambda::EventSourceMapping
-
The StartingPosition property is no longer
required.
-
AWS::Logs::MetricFilter
-
In the MetricTransformation property type, use the
DefaultValue property to specify the value to emit when a
filter pattern does not match a log event.
-
AWS::SSM::Association
-
Use the OutputLocation property to specify an Amazon S3 bucket
where you want to store the results of an association request.
| May 24, 2018 |
New resources | The following new resources were released:
AWS::ServiceCatalog::AcceptedPortfolioShare,
AWS::ServiceCatalog::CloudFormationProduct,
AWS::ServiceCatalog::LaunchNotificationConstraint,
AWS::ServiceCatalog::LaunchRoleConstraint,
AWS::ServiceCatalog::LaunchTemplateConstraint, AWS::ServiceCatalog::Portfolio,
AWS::ServiceCatalog::PortfolioPrincipalAssociation,
AWS::ServiceCatalog::PortfolioProductAssociation,
AWS::ServiceCatalog::PortfolioShare, AWS::ServiceCatalog::TagOption, and
AWS::ServiceCatalog::TagOptionAssociation. | May 24, 2018 |
AWS CloudFormation now creates S3 buckets with encryption enabled | For Amazon S3 buckets that AWS CloudFormation creates to store uploaded stack
templates, server-side encryption is now enabled by default, thereby encrypting all
objects stored in those buckets. For more information, see Selecting a Stack Template. | May 24, 2018 |
New resource | The following resource was released: AWS::Budgets::Budget. | May 22, 2018 |
FIPS endpoints added | AWS CloudFormation now offers new endpoints which use FIPS 140-2 validated
cryptographic modules in the following public US regions: US-East-1, US-East-2,
US-West-1, and US-West-2. See Regions and
Endpoints in the Amazon Web Services General Reference for the new FIPS-compliant endpoint
URLs. | May 17, 2018 |
New resource | The following resource was released: AWS::AutoScalingPlans::ScalingPlan. | May 9, 2018 |
New resource | The following resource was released: AWS::GuardDuty::Filter.
-
AWS::GuardDuty::Filter
-
Use the AWS::GuardDuty::Filter resource to create a
filter for your GuardDuty findings.
| May 8, 2018 |
Updated resources | The following resources were updated: AWS::AppSync::GraphQLApi and
AWS::GuardDuty::Member.
-
AWS::AppSync::GraphQLApi
-
Use the OpenIDConnectConfig property to specify the
authorization configuration for using an OpenId Connect compliant service
with your GraphQL endpoint.
-
AWS::GuardDuty::Member
-
Use the DisableEmailNotification property to specify
whether an email notification is to be sent to the accounts that you want
to invite to GuardDuty as members. When set to 'True', email notification
is not sent to the invitees.
| May 1, 2018 |
New resource | The following resource was released:
AWS::ServiceCatalog::CloudFormationProvisionedProduct. | May 1, 2018 |