| Change | Description | Date |
|---|
Updated resources | The following resources were updated: AWS::ECS::TaskDefinition. | December 2, 2022 |
Updated resource | The following resource was updated: AWS::SSMIncidents::ResponsePlan
-
AWS::SSMIncidents::ResponsePlan
-
Use the Integration resource to specify information
about third-party services integrated into the response plan, such
as PagerDuty.
Use the PagerDuty resource to provide details about
the PagerDuty configuration for a response plan.
| December 2, 2022 |
Updated resource | The following resource was updated: AWS::Lambda::Function.
-
AWS::Lambda::Function
-
Use the SnapStart property to specify the function's AWS Lambda SnapStart setting. SnapStart creates a snapshot of the initialized execution environment when you publish a function version.
| December 2, 2022 |
Updated resource | The following resource was updated: AWS::Logs::LogGroup. | December 2, 2022 |
New resources | The following resources were added: AWS::ECS::Cluster ServiceConnectDefaults,
AWS::ECS::Service ServiceConnectClientAlias, and AWS::ECS::Service
ServiceConnectConfiguration. | December 2, 2022 |
New resources | The following resources were added: AWS::Pipes::Pipe.
-
AWS::Pipes::Pipe
-
Use the
AWS::Pipes::Pipe resource to specify a new Amazon EventBridge Pipes pipe.
| December 2, 2022 |
New resources | The following resources were added: AWS::Oam::Sink and AWS::Oam::Link.
-
AWS::Oam::Sink
-
Use the AWS::Oam::Sink resource to specify a sink, which is an attachment
point in a monitoring account that source accounts can create links to. Use the
AWS::Oam::Link resource to specify a link from a source account to a monitoring
account sink. For more information,
see CloudWatch cross-account observability.
| December 2, 2022 |
New resource | The following resource was added: AWS::EC2::NetworkPerformanceMetricSubscription. | December 2, 2022 |
New resource | The following resource was added: AWS::IoT::TopicRule RepublishActionHeaders. | December 2, 2022 |
Updated resource | The following resource was updated: AWS::S3::AccessPoint.
-
AWS::S3::AccessPoint
-
Use AWS::S3::AccessPoint BucketAccountId to specify which AWS account is associated with the S3 bucket associated with an access
point.
| November 30, 2022 |
Updated resources | The following properties were added: AWS::IoTTwinMaker::ComponentType.PropertyGroups, and Entity.PropertyGroup. | November 17, 2022 |
Updated resources | The following resources were updated: AWS::Amplify::App and AWS::Amplify::Branch
-
AWS::Amplify::App
-
Use the Platform property to specify the platform type for the Amplify app.
-
AWS::Amplify::Branch
-
Use the Framework property to specify the framework for the Amplify app.
| November 17, 2022 |
Updated resource | The following resources were updated: AWS::AppSync::Resolver and
AWS::AppSync::FunctionConfiguration | November 17, 2022 |
Updated resource | The following resource was updated: AWS::CloudFront::Distribution. | November 17, 2022 |
Updated resource | The following resource was updated: AWS::CloudTrail::EventDataStore | November 17, 2022 |
Updated resource | The following resource was updated: AWS::AutoScaling::AutoScalingGroup. | November 17, 2022 |
Updated resource | The following resource was updated: AWS::IVS::RecordingConfiguration | November 17, 2022 |
Updated resource | The following resource was updated: AWS::S3::StorageLens. | November 17, 2022 |
New resources | The following resources were added: AWS::Organizations::Account,
AWS::Organizations::OrganizationalUnit, and
AWS::Organizations::Policy.
-
AWS::Organizations::Account
-
Use the AWS::Organizations::Account resource to
create an AWS account that is automatically a member
of the organization whose credentials made the request.
-
AWS::Organizations::OrganizationalUnit
-
Use the AWS::Organizations::OrganizationalUnit
resource to create an organizational unit (OU) within a root or
parent OU in AWS Organizations.
-
AWS::Organizations::Policy
-
Use the AWS::Organizations::Policy resource to create
a policy of a specified type that you can attach to a root, an
organizational unit (OU), or an individual AWS account in AWS Organizations.
| November 17, 2022 |
New Resource | The following resource was added: AWS::CloudFront::ContinuousDeploymentPolicy. | November 17, 2022 |
Updated resources | The following resources were updated: AWS::AppStream::DirectoryConfig
-
AWS::AppStream::DirectoryConfig
RSS
-
Use the CertificateBasedAuthProperties property to specify the certificate-based authentication properties used to authenticate SAML 2.0 Identity Provider (IdP) user identities to Active Directory domain-joined streaming instances.
| November 10, 2022 |
Updated resources | The following resources were updated: AWS::Batch::ComputeEnvironment and AWS::Batch::JobDefinition | November 10, 2022 |
Updated resource | The following resource was updated: AWS::AutoScaling::AutoScalingGroup. | November 10, 2022 |
Updated resource | The following resource was updated: AWS::RDS::DBInstance
-
AWS::RDS::DBInstance
-
Use the StorageThroughput property to specify the storage throughput value for the DB instance. This setting is applicable only for gp3 storage type.
| November 10, 2022 |
New resources | The following resources were added: AWS::MemoryDB::Cluster.DataTiering | November 10, 2022 |
Launch of Resource Explorer | Initially added the resources for AWS Resource Explorer. | November 7, 2022 |
Updated resource | The following resource was updated: AWS::RDS::DBCluster
-
AWS::RDS::DBCluster
-
Use the TimeoutAction value in ScalingConfiguration property syntax to define the action to take when the timeout is reached.
The DBClusterArn return value is the Amazon Resource Name (ARN) for the DB cluster.
The DBClusterResourceId return value is the AWS Region-unique, immutable identifier for the DB cluster.
| November 3, 2022 |
Updated resource | The following resource was updated: AWS::RDS::DBInstance
-
AWS::RDS::DBInstance
-
Use the ReplicaMode property to define the open mode of an Oracle read replica.
The DBInstanceArn return value is the Amazon Resource Name (ARN) for the your instance.
The DbiResourceId return value is the AWS Region-unique, immutable identifier for the DB instance.
| November 3, 2022 |
Updated resource | The following resource was updated: AWS::RDS::DBClusterParameterGroup | November 3, 2022 |
Updated resource | The following resource was updated: AWS::RDS::OptionGroup | November 3, 2022 |
Updated resource | The following resource was updated: AWS::RDS::DBInstance | November 3, 2022 |
New resource | The following resource and properties were added: AWS::SES::VdmAttributes,
AWS::SES::ConfigurationSet VdmOptions . | November 3, 2022 |
New resource | The following resource was added:
AWS::SupportApp::SlackWorkspaceConfiguration. | November 3, 2022 |
Updated resource | The following resource was updated: AWS::AutoScaling::AutoScalingGroup.
-
AWS::AutoScaling::AutoScalingGroup
-
Use the DefaultInstanceWarmup property to unify all the warm-up and
cooldown settings for an Auto Scaling group and optimize the performance of scaling
policies that scale continuously, such as target tracking and step scaling
policies.
| November 2, 2022 |
Updated resource | The following resource was updated: AWS::AppRunner::Service | October 31, 2022 |
New resource | The following resource was added: AWS::AppRunner::VpcIngressConnection | October 31, 2022 |
New resource | The following resource was added: AWS::IoT::TopicRule LocationAction. | October 31, 2022 |
Updated resource | The following resource was updated: AWS::Connect::User UserIdentityInfo
-
AWS::Connect::User UserIdentityInfo
-
Use the Mobile property to specify the user's mobile number.
Use the SecondaryEmail property to specify the user's
secondary email address.
| October 27, 2022 |
Updated resource | The following resource was updated: AWS::RUM::AppMonitor. | October 27, 2022 |
Updated resource | The following resource was updated: AWS::Cognito::UserPoolClient
-
AWS::Cognito::UserPool
-
The DeletionProtection property of a user pool prevents accidental
deletion of user pools.
| October 24, 2022 |
Updated resource | The following property was added to the AWS::SES::DedicatedIpPool resource: | October 20, 2022 |
Updated resource | The following resource was updated: AWS::RDS::DBCluster
-
AWS::RDS::DBCluster
-
Use the Domain property to specify the directory ID of the Active Directory to create the DB cluster.
Use the DomainIAMRoleName property to specify the name of the IAM role to use when making API calls to the Directory Service.
Use the NetworkType property to indicate the network type of the DB cluster.
The following properties now supported for Multi-AZ DB clusters: AllocatedStorage, AutoMinorVersionUpgrade, BackupRetentionPeriod, CopyTagsToSnapshot,
DatabaseName, DBClusterIdentifier, DBClusterInstanceClass, DBClusterParameterGroupName, DBSubnetGroupName, DeletionProtection, EnableCloudwatchLogsExports,
Engine, EngineVersion, Iops, KmsKeyId, MasterUsername, MasterUserPassword, MonitoringInterval, MonitoringRoleArn, PerformanceInsightsEnabled,
PerformanceInsightsKmsKeyId, PerformanceInsightsRetentionPeriod, Port, PreferredBackupWindow, PreferredMaintenanceWindow, PubliclyAccessible,
StorageEncrypted, StorageType, Tags, and VpcSecurityGroupIds
| October 13, 2022 |
Updated resource | The following resource was updated: AWS::RDS::DBInstance | October 13, 2022 |
Updated resource | The following resource was updated: AWS::Connect::PhoneNumber
-
AWS::Connect::PhoneNumber
-
Use the AWS::Connect::PhoneNumber resource to claim a phone
number to an Amazon Connect instance or traffic distribution
group.
| October 10, 2022 |
New resource | The following resources were added: AWS::GreengrassV2::Deployment.
-
AWS::GreengrassV2::Deployment
-
Use the AWS::GreengrassV2::Deployment resource to create a new
deployment to your core devices in AWS IoT Greengrass.
| October 6, 2022 |
New and updated resources | The following resources were added: AWS::Transfer::Agreement, AWS::Transfer::Connector, AWS::Transfer::Certificate, and
AWS::Transfer::Profile. The following resource was updated: AWS::Transfer::Server WorkflowDetails
-
AWS::Transfer::Agreement
-
Use the Agreement resource to specify an agreement between trading partners in AWS Transfer Family.
-
AWS::Transfer::Certificate
-
Use the Certificate resource to import signing and encryption certificates for AS2 in AWS Transfer Family.
-
AWS::Transfer::Connector
-
Use the Connector resource to create an entity that captures the parameters for an outbound AS2 connection in AWS Transfer Family.
-
AWS::Transfer::Profile
-
Use the Profile resource to specify local and partner profiles for servers in AWS Transfer Family that use the AS2 protocol.
-
AWS::Transfer::Server WorkflowDetails
-
Use the OnPartialUpload parameter to trigger a workflow in the case a transfer is interrupted and does not complete.
| October 6, 2022 |
Updated resource | The following resource was updated: AWS::RDS::DBCluster
-
AWS::RDS::DBCluster
-
Use the ServerlessV2ScalingConfiguration property to specify the scaling configuration of an Aurora Serverless V2 DB cluster.
The DBClusterResourceId return value is the AWS Region-unique, immutable identifier for the DB cluster.
Use the DBInstanceParameterGroupName property to specify the name of the DB parameter group to apply to all instances of the DB cluster.
| September 29, 2022 |
Updated resource | The following resource was updated: AWS::RDS::DBInstance
-
AWS::RDS::DBInstance
-
Use the NcharCharacterSetName property to specify the name of the NCHAR character set for the Oracle DB instance.
Use the CustomIAMInstanceProfile property to specify the instance profile associated with the underlying Amazon EC2
instance of an RDS Custom DB instance.
| September 29, 2022 |
New resources | The following resources were added: AWS::IdentityStore::Group and AWS::IdentityStore::GroupMembership. | September 29, 2022 |
New resource | The following resource was added: AWS::CloudFront::MonitoringSubscription. | September 29, 2022 |
Updated resource | The following resource was updated: AWS::IoT::CACertificate. | September 22, 2022 |
New resource | The following resource was added: AWS::IoTFleetWise::Campaign | September 22, 2022 |
New resource | The following resource was added: AWS::IoTFleetWise::DecoderManifest | September 22, 2022 |
New resource | The following resource was added: AWS::IoTFleetWise::Fleet | September 22, 2022 |
New resource | The following resource was added: AWS::IoTFleetWise::ModelManifest | September 22, 2022 |
New resource | The following resource was added: AWS::IoTFleetWise::SignalCatalog | September 22, 2022 |
New resource | The following resource was added: AWS::IoTFleetWise::Vehicle | September 22, 2022 |
Updated resource | The following resource was updated: AWS::Cognito::UserPoolClient
-
AWS::Cognito::UserPoolClient
-
The AuthSessionValidity property of a user pool client makes it
possible to increase the duration of a prompt for authentication input like a
password or MFA code.
| September 15, 2022 |
Updated resource | The following property was updated: AWS::EKS::Cluster
-
AWS::EKS::Cluster
-
Use the OutpostConfig property to specify the
configuration of your local Amazon EKS cluster on an
Outpost.
| September 15, 2022 |
New resource | A new parameter was added to the AWS::Evidently::Project. | September 15, 2022 |
Updated resources | The following resource was updated: AWS::EC2::LaunchTemplate. | September 8, 2022 |
Updated resource | The following resource was updated: AWS::KMS::Key.
-
AWS::KMS::Key
-
Add full AWS::KMS::Key support to Middle East (UAE) Region (me-central-1), including support for using a CloudFormation template to
create and manage asymmetric KMS keys and multi-Region KMS keys (primary or replica).
| September 8, 2022 |
Updated resource | The following resource was updated: AWS::OpenSearchService::Domain.
-
AWS::OpenSearchService::Domain
-
Use the Throughput property to specify the throughput of the EBS volumes attached to data nodes. This propertly applies only to the
gp3 volume type.
| September 8, 2022 |
Updated resource | The following resource was updated: AWS::SNS::Topic.
-
AWS::SNS::Topic
-
Use the DataProtectionPolicy property to attach a
DataProtectionPolicy to an SNS topic.
| September 8, 2022 |
New resource | The following resource was added: AWS::CloudFront::OriginAccessControl. | September 8, 2022 |
New resource | The following resource was added: AWS::Connect::InstanceStorageConfig | September 1, 2022 |
New resource | The following resource was added: AWS::ControlTower::EnabledControl. | September 1, 2022 |
New resource | The following resource was added: AWS::Macie::AllowList.
-
AWS::Macie::AllowList
-
Use the AWS::Macie::AllowList resource to specify
text or a text pattern for Amazon Macie to ignore when
it inspects data sources for sensitive data.
| September 1, 2022 |
Updated resources | The following resources were updated: AWS::AppMesh::VirtualNode,
AWS::AppMesh::VirtualGateway, AWS::AppMesh::GatewayRoute and AWS::AppMesh::Route
-
AWS::AppMesh::VirtualNode
-
Use the Format property to represent the specified format
for the logs. The format is either json_format or
text_format.
Use the JsonFormatRef resource to represent object that
represents the key value pairs for the JSON.
Use the LoggingFormat resource to represent object that
represents the format for the logs.
-
AWS::AppMesh::VirtualGateway
-
Use the VirtualGatewayFileAccessLogFormat property to
represent the specified format for the logs. The format is either
json_format or text_format.
Use the JsonFormatRef resource to represent object that
represents the key value pairs for the JSON.
Use the LoggingFormat resource to represent object that
represents the format for the logs.
-
AWS::AppMesh::GatewayRoute
-
Use the Port property to represent the port number of the
gateway route target.
-
AWS::AppMesh::Route
-
Use the Port property to represent the port number of the
gateway route target.
Use the Port property to represent an object that is the
criteria for determining a request match.
Use the TcpRouteMatch resource to represent an object that
is the TCP route to match.
| August 25, 2022 |
Updated resource | The following resource was updated: AWS::MediaPackage::OriginEndpoint. | August 25, 2022 |
New resource | The following resource was added: AWS::Connect::Instance | August 25, 2022 |
New resource | The following resource was added:
AWS::SupportApp::SlackChannelConfiguration. | August 25, 2022 |
New resource | The following resource was added: AWS::SupportApp::AccountAlias.
-
AWS::SupportApp::AccountAlias
-
Use the AWS::SupportApp::AccountAlias resource to
specify your alias name. You can use this alias to identify your
AWS account in the AWS Support App.
| August 25, 2022 |
Fn::ToJsonString intrinsic function | The Fn::ToJsonString intrinsic function converts an object or array to its
corresponding JSON string. For more information, see Fn::ToJsonString. | August 24, 2022 |
Fn::Length intrinsic function | The Fn::Length intrinsic function returns the number of elements within an array
or an intrinsic function that returns an array. For more information, see Fn::Length. | August 24, 2022 |
AWS::LanguageExtensions transform | The AWS::LanguageExtensions transform is a macro hosted by AWS CloudFormation that lets you use
intrinsic functions and other functionalities not included by default in
AWS CloudFormation. For more information, see AWS::LanguageExtensions transform. | August 24, 2022 |
Updated resources | The following resource was updated: AWS::WAFv2::WebACLAssociation. | August 23, 2022 |
Updated resource | The following resource was updated: AWS::Lambda::EventSourceMapping.
-
AWS::Lambda::EventSourceMapping
-
Use the SelfManagedKafkaEventSourceConfig property to define specific configuration settings for a self-managed
Kafka event source, such as the consumer group ID. Use the AmazonManagedKafkaEventSourceConfig property to define
specific configuration settings for an MSK event source, such as the consumer group ID.
| August 18, 2022 |
New resource | The following resource was added:
AWS::DynamoDB::Table.ImportSourceSpecification | August 18, 2022 |
Updated resource | The following resource was updated: AWS::CloudFront::Distribution. | August 15, 2022 |
Updated resource | The following resources were updated: AWS::GuardDuty::Filter,
AWS::GuardDuty::IPSet, and AWS::GuardDuty::ThreatIntelSet
-
AWS::GuardDuty::Filter
-
Use Tags property to specify metadata to
add to a new filter resource.
Use Rank property to specify position of
the filter in the list of the current filters.
-
AWS::GuardDuty::IPSet
Use Tags property to specify metadata to
add to a new IP set resource. -
AWS::GuardDuty::ThreatIntelSet
Use Tags property to specify metadata to
add to a new threat list resource. | August 15, 2022 |
New resources | The following resources were added: AWS::M2::Application and
AWS::M2::Environment.
-
AWS::M2::Application
-
Use the AWS::M2::Application resource to specify an
application in the AWS Mainframe Modernization service.
-
AWS::M2::Environment
-
Use the AWS::M2::Environment resource to specify a runtime
environment in the AWS Mainframe Modernization service.
| August 11, 2022 |
New resource | The following resource was added: AWS::MSK::ServerlessCluster | August 11, 2022 |
Updated resources | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup. | August 4, 2022 |
Updated resource | The following resource was updated: AWS::GuardDuty::Detector
-
AWS::GuardDuty::Detector
-
Use the CFNDataSourceConfigurations
property to specify the data source when detector is
created.
Use the
CFNMalwareProtectionConfiguration
property to specify enabling Malware Protection data
source.
Use the
CFNScanEc2InstanceWithFindingsConfiguration
property to specify enabling data source as Malware
Protection for EC2 findings.
| August 4, 2022 |
Updated resource | The following resource was updated: AWS::IoT::CACertificate.
-
AWS::IoT::CACertificate
-
The AWS::IoT::CACertificate resource adds RegistrationConfig type in RegistrationConfig property.
| August 4, 2022 |
Updated resource | The following resource was updated: AWS::IoT::ProvisioningTemplate. | August 4, 2022 |
Updated resource | The following resource was updated: AWS::RedshiftServerless::Workgroup | July 28, 2022 |
Updated resource | The following resource was updated: | July 28, 2022 |
Updates to resource | The following resource was updated:
AWS::SSO::PermissionSet.
-
AWS::SSO::PermissionSet
-
Use the CustomerManagedPolicyReferences and PermissionsBoundary properties of the
AWS::SSO::PermissionSet
resource to assign customer managed policies and permissions boundaries in IAM Identity Center.
| July 21, 2022 |
Updated resources | The following resource was updated: AWS::EC2::PlacementGroup. | July 21, 2022 |
New resource | The following resource was added: AWS::Synthetics::Group.
-
AWS::Synthetics::Group
-
Use the AWS::Synthetics::Group resource to create a group.
You can use groups to associate canaries with
each other, including cross-Region canaries. Using groups can help you with managing
and automating your canaries, and you can also view aggregated run results and statistics
for all canaries in a group.
| July 21, 2022 |
New resource | The AWS::Evidently::Segment resource was added. | July 21, 2022 |
Managing events with AWS CloudFormation and Amazon EventBridge | Receive notifications when specific AWS CloudFormation events such as object creation or
deletion occur in an AWS CloudFormation with EventBridge. For more information, see Managing
events with Amazon EventBridge. | July 20, 2022 |
Updated resource | The following resource was updated: AWS::KMS::Key.
-
AWS::KMS::Key
-
Added support for SM2 key pairs (China Regions only), including the SM2 value for the KeySpec property.
| July 14, 2022 |
Updated resource | The following resource was updated: AWS::SageMaker::NotebookInstance
-
AWS::SageMaker::NotebookInstance
-
Use the InstanceMetadataServiceConfiguration property to specify information about the IMDS configuration of the notebook instance.
Use the InstanceMetadataServiceConfiguration.MinimumInstanceMetadataServiceVersion property to specify the minimum IMDS version that the notebook instance supports.
| July 14, 2022 |
New resources | Use these resources to manage your Amazon Redshift Serverless instance. | July 12, 2022 |
Account level | AWS CloudFormation announces the general availability of account filter
type, a feature that allows customers to limit deployment targets to
individual accounts or include additional accounts with provided OUs. For more information, see Account
level targets. | July 7, 2022 |
Updated resource | The following resource was updated: AWS::RefactorSpaces::Route. | June 30, 2022 |
New resources | The following resources were added: AWS::LakeFormation::DataCellsFilter, AWS::LakeFormation::TagAssociation, documentation target="AWS::LakeFormation::Tag, AWS::LakeFormation::PrincipalPermissions | June 30, 2022 |
New resource | The following resource was added: AWS::DataSync::LocationFSxONTAP. | June 30, 2022 |
New resource | The following resource was added: AWS::IoT::CACertificate | June 30, 2022 |
New resource | The following resource was added: AWS::SES::DedicatedIpPool. | June 30, 2022 |
New resource | The following resource and properties were added: AWS::SES::EmailIdentity,
AWS::SES::EmailIdentity ConfigurationSetAttributes, AWS::SES::EmailIdentity
DkimAttributes, AWS::SES::EmailIdentity DkimSigningAttributes,
AWS::SES::EmailIdentity FeedbackAttributes, and AWS::SES::EmailIdentity
MailFromAttributes. | June 30, 2022 |
Updated resources | The following resources were updated: AWS::AppStream::Stack
-
AWS::AppStream::Stack
-
Use the StreamingExperienceSettings property to specify the streaming protocol you want your stack to prefer. This can be UDP or TCP. Currently, UDP is only supported in the Windows native client.
| June 28, 2022 |
New resource | The following resource was added: AWS::CloudTrail::EventDataStore
-
AWS::CloudTrail::EventDataStore
-
Use the EventDataStore resource to specify an event data
store in CloudTrail Lake. Event data stores are immutable collections
of events based on criteria that you select by applying advanced event
selectors. For
more information, see Working with
CloudTrail Lake in the AWS CloudTrail
User Guide.
-
AWS::CloudTrail::EventDataStore.AdvancedEventSelector
-
Use the AdvancedEventSelector property to specify
fine-grained event properties for data events that you want to log to an
event data store. For more information, see Data events in the AWS CloudTrail User
Guide.
-
AWS::CloudTrail::EventDataStore.AdvancedFieldSelector
-
Use the AdvancedFieldSelector property to specify
fine-grained event properties for data events that you want to log to an
event data store. An AdvancedFieldSelector is a single selector
statement within an advanced event selector. For more information, see
Data events in the AWS CloudTrail User
Guide.
| June 23, 2022 |
New resource | The following resources were added: AWS::ConnectCampaigns::Campaign | June 23, 2022 |
Updated resources | The following resource updated: AWS::MediaTailor::PlaybackConfiguration.
-
AWS::MediaTailor::PlaybackConfiguration
-
Added DashConfiguration.ManifestEndpointPrefix,
HlsConfiguration.ManifestEndpointPrefix,
PlaybackConfigurationArn,
PlaybackEndpointPrefix, and
SessionInitializationEndpointPrefix return values.
| June 16, 2022 |
New resources | The following resource and properties were added: AWS::Route53::CidrCollection, AWS::Route53::RecordSet.CidrRoutingConfig, and AWS::Route53::RecordSetGroup CidrRoutingConfig | June 16, 2022 |
Updated resources | The following resource was updated: AWS::EC2::LaunchTemplate. | June 9, 2022 |
Updated resource | The following resource was updated: AWS::DataSync::LocationEFS.
- AWS::DataSync::LocationEFS
-
Use the AccessPointArn property to specify an access point for your Amazon EFS file system.
Use the FileSystemAccessRoleArn property to specify an IAM role that DataSync assumes when mounting your file system.
Use the InTransitEncryption property to specify whether you want DataSync to use Transport Layer Security (TLS) 1.2 encryption when it copies data to or from your file system.
| June 9, 2022 |
Updated resource | The following property was added to the AWS::SES::ConfigurationSetEventDestination
resource: | June 9, 2022 |
Updated resource | The following properties were updated to SES API v2 for the
AWS::SES::ConfigurationSet resource: | June 9, 2022 |
New resource | The following resources were added: AWS::Connect::TaskTemplate | June 9, 2022 |
Updated resource | The following property was updated: AWS::IoTEvents::AlarmModel.IotSiteWise. | May 26, 2022 |
Updated resource | The following resource was updated: | May 26, 2022 |
New resource | The following resource was added: AWS::EMRServerless::Application. | May 26, 2022 |
New resources | The following resources were added: AWS::IoTWireless::NetworkAnalyzerConfiguration | May 25, 2022 |
Updated resource | The following resource was updated: AWS::Cognito::UserPoolClient
-
AWS::Cognito::UserPoolClient
-
The EnablePropagateAdditionalUserContextData property of a user
pool client makes it possible to pass IP address information to advanced security
features with unauthenticated API requests.
| May 20, 2022 |
Updated resources | The following resources were updated: AWS::AppMesh::VirtualNode and
AWS::AppMesh::Mesh
-
AWS::AppMesh::VirtualNode
-
Use the DnsServiceDiscovery property to represent the DNS
service discovery information for your virtual node.
Use the AwsCloudMapServiceDiscovery property to represent
the AWS Cloud Map service discovery information for your virtual
node.
-
AWS::AppMesh::Mesh
-
Use the MeshServiceDiscovery resource to represent the
service discovery information for a service mesh.
| May 19, 2022 |
Updated resources | The following resources were updated: AWS::Lightsail::LoadBalancer and AWS::Lightsail::LoadBalancerTlsCertificate | May 19, 2022 |
Updated resource | The following resource was updated: AWS::Synthetics::Canary.
-
AWS::Synthetics::Canary
-
The DeleteLambdaResourcesOnCanaryDeletion parameter was added. You can specify this parameter
when you create or update a canary to have the canary's Lambda resources deleted when the
canary is deleted.
| May 12, 2022 |
Updated resource | The following resource was updated: AWS::DataSync::Task.
- AWS::DataSync::Task
-
In the Options property type, use the ObjectTags property to specify whether object tags are maintained when transferring between object storage systems.
| May 12, 2022 |
New resource | The following resource was added: AWS::IoT::RoleAlias | May 12, 2022 |
New resources | New resources were added to Network Manager:
AWS::NetworkManager::CoreNetwork, AWS::NetworkManager::ConnectAttachment, AWS::NetworkManager::ConnectPeer, AWS::NetworkManager::SiteToSiteVpnAttachment, and AWS::NetworkManager::VpcAttachment.
| May 11, 2022 |
Updated resources | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup.
-
AWS::WAFv2::WebACL
-
Use the Cookies property to specify that a rule statement should inspect the cookies in web requests.
Use the CookieMatchPattern property to specify a subset of all cookies for inspection.
Use the Headers property to specify that a rule statement should inspect the headers in web requests.
Use the HeaderMatchPattern property to specify a subset of all headers for inspection.
In the Body property type, use the OversizeHandling property to specify how to handle web requests that have oversize body contents.
In the JsonBody property type, use the OversizeHandling property to specify how to handle web requests that have oversize body contents.
-
AWS::WAFv2::RuleGroup
-
Use the Cookies property to specify that a rule statement should inspect the cookies in web requests.
Use the CookieMatchPattern property to specify a subset of all cookies for inspection.
Use the Headers property to specify that a rule statement should inspect the headers in web requests.
Use the HeaderMatchPattern property to specify a subset of all headers for inspection.
In the Body property type, use the OversizeHandling property to specify how to handle web requests that have oversize body contents.
In the JsonBody property type, use the OversizeHandling property to specify how to handle web requests that have oversize body contents.
| May 5, 2022 |
New resource | The following resource was added: AWS::Rekognition::StreamProcessor.
-
AWS::Rekognition::StreamProcessor
-
The AWS::Rekognition::StreamProcessor type creates a stream processor used to detect
and recognize faces or to detect connected home
labels in a streaming video.
| May 5, 2022 |
New resource | The following resources were added: AWS::VoiceID::Domain | May 5, 2022 |
New resource | The following resource was added: AWS::EC2::KeyPair. | April 28, 2022 |
Updated resources | The following resource was updated: AWS::Batch::ComputeEnvironment
-
AWS::Batch::ComputeEnvironment
-
Use the ReplaceComputeEnvironment property to specify whether the compute environment should
be replaced if an update is made that requires replacing the instances in the compute environment.
Use the UpdatePolicy property to specify the infrastructure update policy for the compute
environment.
-
AWS::Batch::JobDefinition
-
Added a JobQueueArn attribute to the return values.
| April 21, 2022 |
Updated resource | New parameters were added to AWS::Evidently::Experiment and
AWS::Evidently::Launch | April 21, 2022 |
New resources | The following resources were added: AWS::IoTTwinMaker::ComponentType, AWS::IoTTwinMaker::Entity, AWS::IoTTwinMaker::Scene, and AWS::IoTTwinMaker::Workspace | April 21, 2022 |
New resource | The following resources were added: AWS::Connect::PhoneNumber | April 21, 2022 |
Updated resource | The following resource was updated: AWS::KMS::Key.
-
AWS::KMS::Key
-
Added support for HMAC KMS keys, including new HMAC values for the KeySpec property
and the GENERATE_VERIFY_MAC value for the KeyUsage property.
You can also use the AWS::KMS::ReplicaKey resource to create a replica of
a multi-Region HMAC key. However, the properties of this resource did not change. | April 19, 2022 |
Updated resources | The following resources were updated: AWS::AppStream::Fleet
-
AWS::AppStream::Fleet
-
Use the SessionScriptS3Location property to specify the S3 location of the session scripts configuration zip file. This only applies to Elastic fleets.
| April 14, 2022 |
Updated resource | The following resource was updated: AWS::CloudWatch::MetricStream. | April 14, 2022 |
Updated resource | The following resource was updated: AWS::AppRunner::Service | April 12, 2022 |
New resource | The following resource was added: AWS::AppRunner::ObservabilityConfiguration | April 12, 2022 |
Updated resources | The following resource was updated: AWS::EC2::LaunchTemplate.
-
AWS::EC2::LaunchTemplate NetworkInterface
-
Use the Ipv4PrefixCount or Ipv4Prefixes properties
to assign IPv4 prefixes to a network interface.
Use the Ipv6PrefixCount or Ipv6Prefixes properties
to assign IPv6 prefixes to a network interface.
| April 7, 2022 |
New resource | The following resource was added: AWS::Events::Endpoint.
-
AWS::Events::Endpoint
-
Use the AWS::Events::Endpoint resource to create a Amazon EventBridge global endpoint and mae your application Regional-fault tolerant.
| April 7, 2022 |
New resource | The following resource was added: AWS::Lambda::Url.
-
AWS::Lambda::Url
-
Use the Url resource to add a function URL endpoint to your Lambda function.
| April 7, 2022 |
Updated resource | The following resources were updated: AWS::SageMaker::Domain,
AWS::SageMaker::UserProfile
-
AWS::SageMaker::Domain
-
Use the UserSettings.RStudioServerProAppSettings
property to configure user interaction with the
RStudioServerPro app.
Use the RStudioServerProAppSettings property to
configure user interaction with the RStudioServerPro
app.
Use the RStudioServerProAppSettings.AccessStatus
property to indicate whether the current user has access to the
RStudioServerPro app.
Use the RStudioServerProAppSettings.UserGroup
property to indicate the level of permissions that the user has
within the RStudioServerPro app.
Use the RStudioServerProDomainSettings property to
configure the RStudioServerPro Domain-level app.
Use the
RStudioServerProDomainSettings.DefaultResourceSpec
property to define the default InstanceType,
SageMakerImageArn and
SageMakerImageVersionArn for the Domain.
Use the
RStudioServerProDomainSettings.DomainExecutionRoleArn
property to indicate the ARN of the execution role for the
RStudioServerPro Domain-level app.
Use the
RStudioServerProDomainSettings.RStudioConnectUrl
property to indicate a URL pointing to an RStudio Connect
server.
Use the
RStudioServerProDomainSettings.RStudioPackageManagerUrl
property to indicate a URL pointing to an RStudio Package Manager
server.
Use the DomainSettings property to indicate a
collection of settings that apply to the SageMaker
Domain.
Use the DomainSettings.RStudioServerProDomainSettings
property to configure the RStudioServerPro Domain-level
app.
Use the DomainSettings.SecurityGroupIds property to
indicate security groups for the Amazon Virtual Private Cloud
(Amazon VPC) that the Domain uses for communication
between Domain-level apps and user apps.
-
AWS::SageMaker::UserProfile
-
Use the UserSettings.RStudioServerProAppSettings
property to configure user interaction with the
RStudioServerPro app.
Use the RStudioServerProAppSettings property to
configure user interaction with the RStudioServerPro
app.
Use the RStudioServerProAppSettings.AccessStatus
property to indicate whether the current user has access to the
RStudioServerPro app.
Use the RStudioServerProAppSettings.UserGroup
property to indicate the level of permissions that the user has
within the RStudioServerPro app.
| March 31, 2022 |
New resource | The following resource was added: AWS::DataSync::LocationFSxOpenZFS. | March 31, 2022 |
Updated resource | The following resource was updated: AWS::Lambda::Function.
-
AWS::Lambda::Function
-
Use the EphemeralStorage property to set the function's ephemeral (/tmp) storage to any any whole number between 512 and 10240 MB.
| March 24, 2022 |
Updated resource | The following property type was updated: AWS::Lex::Bot.
- AWS::Lex::Bot
-
Use the AudioLogSetting property to configure
logging of audio conversation with your users.
Use the AudioLogSetting property to configure the
Lambda functions used for each of your
bot's locales.
Use the ConversationLogsSettings property to manage
logging that saves audio, text, and metadata of the
conversations with your users.
Use the CustomVocabulary property to define custom
vocabularies for your slot types.
Use the LambdaCodeHook property to specify a Lambda function that verifies requests to the bot
or fulfills the user's request.
Use the S3BucketLogDestination property to configure
the Amazon S3 bucket to hold audio conversation
logs.
Use the SlotValueSelectionSetting property to
configure advanced settings for recognizing slot
values.
Use the TestBotAliasSettings property to configure
the alias used for testing a bot.
Use the TextLogSetting property to configure text
logs for conversations.
| March 24, 2022 |
New resource | The following resource was added: AWS::IoTEvents::AlarmModel. | March 24, 2022 |
Updated resource | The following resources were updated: AWS::ACMPCA::Certificate and
AWS::ACMPCA::CertificateAuthority. | March 17, 2022 |
Updated resource | The following resource was updated: AWS::FSx::Filesystem
- AWS::FSx::Filesystem
FSx for OpenZFS file system root volumes now support the LZ4 DataCompressionType. | March 17, 2022 |
Updated resource | The following resource was updated: AWS::FSx::Volume
- AWS::FSx::Volume
FSx for OpenZFS volumes now support the LZ4 DataCompressionType. | March 17, 2022 |
Updated resource | The following resource was updated: AWS::FSx::Volume
- AWS::FSx::Volume
FSx for OpenZFS volumes now support using the value 0 to un-set the StorageCapacityQuotaGiB for a volume. | March 17, 2022 |
Updated resource | The following resource was updated: AWS::FSx::Volume
- AWS::FSx::Volume
FSx for OpenZFS volumes now support using the value 0 to un-set the StorageCapacityReservationGiB for a volume. | March 17, 2022 |
Updated resource | The following resource was updated: AWS::FSx::Volume
- AWS::FSx::Volume
FSx for OpenZFS volumes now support setting the suggested block size for a volume. | March 17, 2022 |
Updated resource | The following resource was updated: AWS::FSx::Filesystem | March 17, 2022 |
Updated resource | The following resource was updated: AWS::FIS::ExperimentTemplate.
-
AWS::FIS::ExperimentTemplate
-
Use the LogConfiguration property to configure experiment logging.
Use the Parameters property to specify criteria used to identify target resources.
| March 11, 2022 |
Updated resource | The following resource was updated: AWS::AutoScaling::ScalingPolicy.
-
AWS::AutoScaling::ScalingPolicy
-
Use the AWS::AutoScaling::ScalingPolicy property to specify custom
metrics when you create predictive scaling policies. You can also use metric math to
further customize the metrics that you include in your policy.
| March 10, 2022 |
New resources | The following resources were added: AWS::Personalize::Dataset, AWS::Personalize::Dataset DatasetImportJob,
AWS::Personalize::DatasetGroup, AWS::Personalize::Schema, AWS::Personalize::Solution,
and AWS::Personalize::Solution SolutionConfig. | March 10, 2022 |
New resource | The following resource was added:
AWS::EKS::IdentityProviderConfig
-
AWS::EKS::IdentityProviderConfig
-
Use the OidcIdentityProviderConfig property to
specify an identity provider config and RequiredClaim
to specify required claims.
| March 7, 2022 |
Updated resources | The following resources were updated: AWS::DataBrew::Job
-
AWS::DataBrew::Job
-
Add MaxOutputFiles parameter to the Output data type to specify the maximum number
of files to be generated by a profile job and written to the output folder.
| March 3, 2022 |
Updated resources | The following resources were updated: AWS::Batch::ComputeEnvironment, and AWS::Batch::JobQueue | February 24, 2022 |
Updated resource | The following resource was updated: AWS::AutoScaling::WarmPool.
-
AWS::AutoScaling::WarmPool
-
Use the PoolState property to specify Hibernated to
stop instances in a warm pool without deleting their RAM contents. Use the
InstanceReusePolicy property to return instances to the warm pool on
scale in, instead of always terminating instance capacity that you will need
later.
| February 24, 2022 |
Updated resource | The following resource was updated:
-
AWS::Transfer::Server
-
Use the PreAuthenticationLoginBanner property to specify a string to display when users connect to a server, before they authenticate.
Use the PostAuthenticationLoginBanner property to specify a string to display when users connect to a server, after they authenticate.
| February 24, 2022 |
New resource | The following resource was added: AWS::DataSync::LocationFSxLustre. | February 24, 2022 |
New resource | The following resource was added: AWS::MSK::BatchScramSecret
-
AWS::MSK::BatchScramSecret
-
This resource represents a secret stored in the Amazon Secrets
Manager that can be used to authenticate with a cluster using a user
name and a password.
| February 24, 2022 |
New resource | The following resource was added: AWS::MSK::Configuration | February 24, 2022 |
Updated resource | The following resource was updated: AWS::WAFv2::WebACL.
-
AWS::WAFv2::WebACL
-
You can now define ManagedRuleGroupConfigs for a ManagedRuleGroupStatement, to provide
configuration specific to the managed rule group. This is required to use the managed rule group, AWSManagedRulesATPRuleSet.
| February 17, 2022 |
New resources | The following new resources were added to Network Manager: AWS::NetworkManager::ConnectAttachment, AWS::NetworkManager::ConnectPeer, AWS::NetworkManager::CoreNetwork, AWS::NetworkManager::SiteToSiteVPNAttachment, and AWS::NetworkManager::VPCAttachment. | February 17, 2022 |
Updated resources | The following resource was updated: AWS::EC2::LaunchTemplate. | February 10, 2022 |
New resources | The following resources were added: AWS::CloudFormation::HookDefaultVersion,
AWS::CloudFormation::HookTypeConfig, and AWS::CloudFormation::HookVersion. | February 10, 2022 |
New resources | The following resources were added: AWS::ECR::PullThroughCacheRule
-
AWS::ECR::PullThroughCacheRule
-
Use the AWS::ECR::PullThroughCacheRule property to
create a pull through cache rule for your private registry. Pull
through cache rules provide a way to cache images from an external
public registry in your private registry
| February 10, 2022 |
CloudFormation registry | AWS CloudFormation announces the general availability of
hooks, a feature that allows customers to invoke custom logic
to automate actions or inspect resource configurations prior to a create, update or
delete stack operation. For more information, see Developing hooks
in the User Guide for Extension Development. | February 10, 2022 |
Updated resource | The following resource was updated: AWS::AppRunner::Service | February 8, 2022 |
New resource | The following resource was added: AWS::AppRunner::VpcConnector | February 8, 2022 |
Updated resource | The following resource was updated: AWS::Events::Rule. | February 3, 2022 |
New properties | The following properties were added under AWS::ApplicationInsights::Application.ConfigurationDetails:
-
HANAPrometheusExporter
-
Use the HANAPrometheusExporter property of the
AWS::ApplicationInsights::Application resource to
define the HANA DB Prometheus Exporter settings.
- HAClusterPrometheusExporter
Use the HAClusterPrometheusExporter property of the
AWS::ApplicationInsights::Application resource to
define the HA Cluster Prometheus Exporter settings. | February 3, 2022 |
Updated resource | The following resource was updated: RotationRules | January 31, 2022 |
Updated resources | The following resource was updated: AWS::CustomerProfiles::Integration. | January 27, 2022 |
Updated resources | The following resources were updated:
AWS::Location::GeofenceCollection,
AWS::Location::Map,
AWS::Location::PlaceIndex,
AWS::Location::RouteCalculator, and
AWS::Location::Tracker. | January 27, 2022 |
Updated resource | The following resource was updated: AWS::IVS::RecordingConfiguration
-
AWS::IVS::RecordingConfiguration
-
Use the ThumbnailConfiguration property to specify an
Amazon IVS ThumbnailConfiguration, which stores configuration
information related to generating thumbnail images for your live stream.
| January 27, 2022 |
New resource | The following resource was added: AWS::AppIntegrations::DataIntegration | January 27, 2022 |
New collection resource | The following resource was added: AWS::Rekognition::Collection.
-
AWS::Rekognition::Collection
-
The AWS::Rekognition::Collection type creates a server-side container called a collection. You can use a collection
to store information about detected faces and search for known faces in images, stored videos, and streaming videos.
| January 27, 2022 |
New resources | The following resources were added: AWS::Forecast::Dataset and AWS::Forecast::DatasetGroup. | January 23, 2022 |
Updated resources | The following resources were updated: AWS::DataBrew::Job
-
AWS::DataBrew::Job
-
Add BucketOwner parameter to the S3Location data type to define the owner of
the specified S3 bucket.
| January 20, 2022 |
Updated resource | The following resources were updated:
AWS::Location::Tracker, | January 20, 2022 |
New resources | The following resources were added: AWS::Lightsail::Certificate, AWS::Lightsail::Container, and AWS::Lightsail::Distribution
-
AWS::Lightsail::Certificate
-
Use the AWS::Lightsail::Certificate resource to specify an Amazon Lightsail certificate that you can use with a Lightsail content delivery network (CDN) distribution and a container service.
-
AWS::Lightsail::Container
-
Use the AWS::Lightsail::Container resource to specify an Amazon Lightsail container service.
-
AWS::Lightsail::Distribution
-
Use the AWS::Lightsail::Distribution resource to specify an Amazon Lightsail CDN distribution.
| January 20, 2022 |
New resource | The following resource was added: AWS::KafkaConnect::Connector | January 20, 2022 |
Updated resource | The following resources were updated: AWS::AppSync::Resolver and
AWS::AppSync::FunctionConfiguration
-
AWS::AppSync::Resolver
-
Use the MaxBatchSize property to specify the maximum number of resolver request
inputs that will be sent to a single AWS Lambda function in a
BatchInvoke operation.
-
AWS::AppSync::FunctionConfiguration
-
Use the MaxBatchSize property to specify the maximum number of resolver request
inputs that will be sent to a single AWS Lambda function in a
BatchInvoke operation.
| January 13, 2022 |
Updated resource | The following resource was updated: AWS::FMS::Policy.
-
AWS::FMS::Policy
-
The AWS::FMS::Policy resource now allows you to manage Shield Advanced automatic application layer DDoS mitigation for Shield Advanced policies that you use for Amazon CloudFront distributions.
| January 7, 2022 |
Updated resource | The following property was updated: AWS::EKS::Cluster
KubernetesNetworkConfig | January 6, 2022 |
Updated resource | The following property type was updated: AWS::Lex::Bot.
- AWS::Lex::Bot
-
In the ExternalSourceSetting property type, use the
GrammarSlotTypeSetting property to
specify that the slot type is defined by an external
grammar.
In the GrammarSlotTypeSetting property type, use
the Source property to specify the location
of a file that contains a grammar defining the slot
type.
In the GrammarSlotTypeSource property type, use the
KmsKeyArn, S3BucketName,
and S3ObjectKey properties to specify the
S3 bucket location of a file that contains a grammar
defining the slot type.
| January 6, 2022 |
New resources | The following resources were added: AWS::Lightsail::Alarm, AWS::Lightsail::Bucket, AWS::Lightsail::LoadBalancer, and AWS::Lightsail::LoadBalancerTlsCertificate | January 6, 2022 |
New resource | The following resource was added: AWS::InspectorV2::Filter. | January 6, 2022 |
New resource | The following resource is new: AWS::IoT::JobTemplate | January 6, 2022 |
New resources | The following resources were added:
AWS::AppStream::ApplicationEntitlementAssociation and
AWS::AppStream::Entitlement | January 5, 2022 |
Updated resources | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup.
-
AWS::WAFv2::WebACL
-
You can now use single regular expression (regex) match statements with RegexMatchStatement. You can
now specify a CAPTCHA rule action.
-
AWS::WAFv2::RuleGroup
-
You can now use single regular expression (regex) match statements with RegexMatchStatement. You can
now specify a CAPTCHA rule action.
| December 9, 2021 |
Updated resource | The following resource was updated: AWS::Kinesis::Stream.
-
AWS::Kinesis::Stream
-
Use the StreamModeDetails property to specify the capacity
mode to which you want to set your data stream. Currently, in
Kinesis Data Streams, you can choose between an on-demand capacity mode and a provisioned capacity mode for your data
streams.
| December 9, 2021 |
Properties updated | For the AWS::Chatbot::SlackChannelConfiguration resource, the GuardrailPolicies property was updated and the UserRoleRequired property was added. | December 9, 2021 |
New resources | The following resources were added: AWS::Lex:Bot,
AWS::Lex::BotAlias, AWS::Lex::BotVersion, and
AWS::Lex::ResourcePolicy.
-
AWS::Lex::Bot
-
Use the AWS::Lex::Bot resource to
specify an Amazon Lex chatbot.
-
AWS::Lex::BotAlias
-
Use the AWS::Lex::BotAlias resource to
specify an alias for an Amazon Lex
chatbot.
-
AWS::Lex::BotVersion
-
Use the AWS::Lex::BotVersion resource to
specify a version of an Amazon Lex
chatbot.
-
AWS::Lex::ResourcePolicy
-
Use the AWS::Lex::ResourcePolicy
resource to specify a new resource policy for an Amazon Lex chatbot.
| December 9, 2021 |
Updated resource | The following resources were updated: AWS::GameLift::GameSessionQueue, AWS::GameLift::MatchmakingConfiguration, AWS::GameLift::MatchmakingRuleSet, AWS::GameLift::Script | December 8, 2021 |
New resources | The following resources were added: AWS::AppSync::DomainName and
AWS::AppSync::DomainNameApiAssociation | December 6, 2021 |
Updated resources | The following resource was updated: AWS::WAFv2::LoggingConfiguration.
-
AWS::WAFv2::LoggingConfiguration
-
You can now log web ACL traffic to an Amazon CloudWatch Logs log group or an Amazon Simple Storage Service (Amazon S3) bucket. These options
are in addition to the existing option of logging to an Amazon Kinesis Data Firehose.
| December 3, 2021 |
Updated resource | The following resource was updated: AWS::S3::StorageLens. | December 3, 2021 |
Updated resource | The following resource was updated: AWS::S3::Bucket OwnershipControlsRule.
-
AWS::S3::Bucket OwnershipControlsRule
-
Updated ObjectOwnership property to add a new allowed value:
BucketOwnerEnforced. You can apply this S3 Object Ownership setting
to disable access control lists (ACLs) and take ownership of all the objects in your
bucket.
| December 3, 2021 |
Updated resource | The following resource was updated: AWS::SageMaker::EndpointConfig
-
AWS::SageMaker::EndpointConfig
-
Use the ServerlessConfig property to specify a
serverless configuration for a serverless endpoint.
Use the MaxConcurrency property to specify the
maximum concurrent invocations for a serverless endpoint.
Use the MemorySizeInMB property to specify the memory
size (in MB) for a serverless endpoint.
| December 3, 2021 |
New resources | The following resources were added: AWS::AmplifyUIBuilder::Component and AWS::AmplifyUIBuilder::Theme.
-
AWS::AmplifyUIBuilder::Component
-
Use the
AWS::AmplifyUIBuilder::Component resource to specify a component within an Amplify app.
-
AWS::AmplifyUIBuilder::Theme
-
Use the
AWS::AmplifyUIBuilder::Theme resource to specify a collection of style settings to apply globally to the components in an Amplify app.
| December 3, 2021 |
New resources | The following resources were added: | December 3, 2021 |
New resource | The following resources were added: AWS::Connect::ContactFlow and
AWS::Connect::ContactFlowModule | December 3, 2021 |
New resource | The following resources were added: AWS::Evidently::Experiment, AWS::Evidently::Feature,
AWS::Evidently::Launch, and AWS::Evidently::Project
-
Evidently resource type reference
-
Use Amazon CloudWatch Evidently to safely validate new features by serving them to a
specified percentage
of your users while you roll out the feature. You can monitor the performance of the new feature
to help you decide when to ramp up traffic to your users. This helps you
reduce risk and identify unintended consequences before you fully launch the feature.
You can also conduct A/B experiments to make feature design decisions based on evidence
and data.
For more information,
see
Perform launches and A/B experiments with CloudWatch Evidently.
| December 3, 2021 |
New resource | The following new resource was added: AWS::FSx::Snapshot
- AWS::FSx::Snapshot
-
Use the Snapshot resource to create a snapshot of an FSx for ONTAP or Amazon FSx for OpenZFS volume.
| December 3, 2021 |
New resource | The following new resource was added: AWS::FSx::StorageVirtualMachine | December 3, 2021 |
New resource | The following new resource was added: AWS::FSx::Volume
- AWS::FSx::Volume
-
Use the Volume resource to create an FSx for ONTAP or Amazon FSx for OpenZFS volume.
| December 3, 2021 |
New resource | The following resource was added: AWS::RUM::AppMonitor. | December 3, 2021 |
New resource | The following resource was added: AWS::Timestream::ScheduledQuery.
-
AWS::Timestream::ScheduledQuery
-
Use the
AWS::Timestream::ScheduledQuery resource to create a new scheduled query for an existing table in Amazon Timestream.
| December 3, 2021 |
Updated resource | The following resource was updated:
AWS::SES::ConfigurationSetEventDestination
-
AWS::SES::ConfigurationSetEventDestination
-
Use the new property SnsDestination with the
ConfigurationSetEventDestination resource as an
event destination associated with a configuration set which enables
you to publish email sending events.
In the property type EventDestination, new property
SnsDestination specifies the topic ARN associated
with an Amazon Simple Notification Service (Amazon SNS) event
destination.
| November 25, 2021 |
Updated resources | AWS::ElastiCache::ReplicationGroup.
-
AWS::ElastiCache::ReplicationGroup
-
The data-tiering-enabled parameter enables data tiering. Data tiering is only supported for replication groups using the r6gd node type. If you elect not to use data-tiering, set
the parameter to no-data-tiering-enabled.
For more information, see Data tiering.
| November 23, 2021 |
Updated resource | The following resource was updated: AWS::Logs::LogGroup. | November 22, 2021 |
Updated resources | The following resources were updated: AWS::AppStream::Fleet
-
AWS::AppStream::Fleet
-
Use the FleetType property to specify an ELASTIC fleet.
Use the Platform property to specify platform of the fleet.
Use the MaxConcurrentSessions property to specify the maximum concurrent sessions of an Elastic fleet.
Use the UsbDeviceFilterStrings property to specify the USB device filter strings for an Elastic fleet..
| November 18, 2021 |
Updated resources | The following resources were updated: AWS::DataBrew::Job,
AWS::DataBrew::Ruleset
-
AWS::DataBrew::Job
-
Updates to support the following features: handling personally
identifiable information (PII), data quality rules, and custom SQL
queries.
| November 18, 2021 |
Updated resources | The following resources were updated:
-
AWS::Transfer::Server
-
Use the IdentityProviderType resource to specify a the identity provider to use with your AWS Transfer Family server. A new type, LAMBDA, was added.
| November 18, 2021 |
Updated resource | The following resource was updated: AWS::FinSpace::Environment
-
AWS::FinSpace::Environment
-
Use the DataBundles property to specify a list of data bundles to install.
Use the SuperuserParameters property to specify configuration information of the superuser.
| November 18, 2021 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
- AWS::FSx::FileSystem
-
Use ONTAP for the FileSystemType, to use an ONTAP file system. Use
OntapConfiguration parameter to configure an Amazon
FSx ONTAP file system.
| November 18, 2021 |
Updated resource | The following resource was updated: AWS::MSK::Cluster | November 18, 2021 |
New resources | The following resources were added: AWS::AppStream::Application,
AWS::AppStream::AppBlock, and
AWS::AppStream::ApplicationFleetAssociation | November 18, 2021 |
New resource | The following resource was updated: AWS::FSx::FileSystem
- AWS::FSx::FileSystem
-
Use the FileSystemTypeVersion attribute to specify
the file system version of an Amazon FSx for Lustre file
system.
| November 18, 2021 |
New resource | The following resource was added:
-
AWS::Transfer::Workflow
-
Use the Workflow resource to specify a managed workflow for file processing using AWS Transfer Family.
| November 18, 2021 |
New resource | The following resource was added: AWS::SSM::ResourcePolicy
-
AWS::SSM::ResourcePolicy
-
Creates or updates a Systems Manager resource policy. A resource policy helps you to
define the IAM entity (for example, an AWS account) that can manage your Systems Manager
resources. Currently, OpsItemGroup is the only resource that supports Systems Manager resource
policies. The resource policy for OpsItemGroup enables AWS accounts to view and
interact with OpsCenter operational work items (OpsItems). OpsCenter is a capability of Systems Manager.
For more information about OpsCenter, see Systems Manager OpsCenter in the Systems Manager User Guide.
| November 17, 2021 |
Updated resource | The following resource was updated: AWS::Location::Tracker
-
AWS::Location::Tracker
-
Use the PositionFiltering property to specify how
you want positions in your tracker to be filtered.
| November 12, 2021 |
Updated resources | The following resources were updated: AWS::Batch::ComputeEnvironment, AWS::Batch::JobDefinition,
and AWS::Batch::JobQueue | November 11, 2021 |
Updated resources | The following resource was updated: AWS::SageMaker::Endpoint
-
AWS::SageMaker::Endpoint
-
Use the DeploymentConfig property to specify the
deployment configuration for an endpoint, which contains the desired
deployment strategy and rollback configurations.
Use the AutoRollbackConfig property to specify the
the automatic rollback configuration for handling endpoint
deployment failures and recovery.
Use the Alarm property to specify a list of
CloudWatch alarms that are configured to monitor metrics on an
endpoint.
Use the AlarmName property to specify the name of a
CloudWatch alarm in your account.
Use the BlueGreenUpdatePolicy property to specify the
update policy for a blue/green deployment.
Use the MaximumExecutionTimeoutInSeconds property to
specify the maximum execution timeout for a blue/green
deployment.
Use the TerminationWaitInSeconds property to specify
additional waiting time in seconds after the completion of an
endpoint deployment before terminating the old endpoint fleet
Use the TrafficRoutingConfig property to specify the
traffic routing strategy during a blue/green endpoint
deployment.
Use the CanarySize property to specify the batch size
for the first step to turn on traffic on the new endpoint
fleet.
Use the LinearStepSize property to specify the batch
size for each step to turn on traffic on the new endpoint
fleet
Use the Type property to specify the traffic routing
strategy type (all at once, canary, or linear).
Use the WaitIntervalInSeconds property to specify the
waiting time (in seconds) between incremental steps to turn on
traffic on the new endpoint fleet.
Use the CapacitySize property to specify the endpoint
capacity to activate for production.
Use the Type property to specify the endpoint
capacity type to use (instance count or capacity percent).
Use the Value property to specify the capacity size,
either as a number of instances or a capacity percentage.
Use the RetainDeploymentConfig property to specify
whether to reuse the last deployment configuration. The default
value is false (the configuration is not reused)
| November 11, 2021 |
New resources | The following resource was added: AWS::Batch::SchedulingPolicy | November 11, 2021 |
New resources | The following resources were added: AWS::IoTWireless::FuotaTask, AWS::IoTWireless::MulticastGroup | November 11, 2021 |
Updated resource | The following resource was updated: AWS::Backup::BackupSelection
-
AWS::Backup::BackupSelection
-
The BackupSelection resource type supports a number of new
resource assignment options, including StringLike and the
ability to exclude resources from your backup plans.
| November 10, 2021 |
Updated resource | The following resource was updated: AWS::EKS::Cluster
-
AWS::EKS::Cluster ClusterLogging
-
Use the ClusterLogging property to specify the
cluster control plane configuration for your cluster.
-
AWS::EKS::Cluster Logging
-
Use the Logging property to enable or disable
exporting the Kubernetes control plane logs for your cluster to
CloudWatch Log.
-
AWS::EKS::Cluster LoggingTypeConfig
-
Use the LoggingTypeConfig property to specify the
enabled logging type.
-
AWS::EKS::Cluster ResourcesVpcConfig
-
Use the EndpointPrivateAccess property to enable or
disable private access for your cluster's Kubernetes API server
endpoint.
Use the EndpointPublicAccess property to enable or
disable public access to your cluster's Kubernetes API server
endpoint.
Use the PublicAccessCidrs property to specify the
CIDR blocks that are allowed access to your cluster's public
Kubernetes API server endpoint.
| November 10, 2021 |
Updated resources | The following resources were updated: AWS::EC2::SpotFleet and
AWS::EC2::EC2Fleet. | November 4, 2021 |
Updated resources | The following resources were updated: AWS::NetworkFirewall::FirewallPolicy and AWS::NetworkFirewall::RuleGroup
-
AWS::NetworkFirewall::FirewallPolicy
-
Use the StatefulDefaultActions property to establish default actions to take on a packet that doesn't match any stateful rules when using strict rule ordering.
Use the StatefulEngineOptions property to govern how Network Firewall handles stateful rules.
Use the StatefulRuleGroupReference property to
reference the stateful rule groups that are used in the policy. This
existing property now includes a Priority field.
-
AWS::NetworkFirewall::RuleGroup
-
Use the StatefulRuleOptions property to govern how Network Firewall handles stateful rules.
| November 4, 2021 |
Updated resources | The following resource was updated: AWS::Pinpoint::Campaign. | November 4, 2021 |
Updated resource | The following resource was updated: AWS::CloudFront::Distribution. | November 4, 2021 |
Updated resource | The following resource was updated: AWS::MWAA::Environment
-
TagMap
-
The TagMap property has been removed the service resource specification.
| November 4, 2021 |
Updated resource | The following resource was updated: AWS::Redshift. | November 4, 2021 |
New resources | The following resource was added: AWS::Pinpoint::InAppTemplate. | November 4, 2021 |
New resource | The following resource was added: AWS::CloudFront::ResponseHeadersPolicy. | November 4, 2021 |
New resource | The following resource was added: AWS::DataSync::LocationHDFS.
-
AWS::DataSync::LocationHDFS
-
Use the AWS::DataSync::LocationHDFS resource to specify an
endpoint for a Hadoop Distributed File System (HDFS).
| November 4, 2021 |
New resource | The following resource was added: AWS::EC2::CapacityReservationFleet. | November 4, 2021 |
Updated resource | The following resource was updated: AWS::EC2::EC2Fleet.
-
InstanceRequirementsRequest
-
Use the InstanceRequirementsRequest property to specify
instance attributes, which Amazon EC2 uses to identify instance
types.
| October 28, 2021 |
Updated resource | The following resource was updated: AWS::EC2::SpotFleet.
-
InstanceRequirementsRequest
-
Use the InstanceRequirementsRequest property to specify
instance attributes, which Amazon EC2 uses to identify instance
types.
| October 28, 2021 |
Updated resource | The following resource was updated: AWS::AutoScaling::AutoScalingGroup. | October 28, 2021 |
New resources | The following resources were added: AWS::Lightsail::Database and AWS::Lightsail::StaticIp
-
AWS::Lightsail::Database
-
Use the AWS::Lightsail::Database resource to specify an
Amazon Lightsail database.
-
AWS::Lightsail::StaticIp
-
Use the AWS::Lightsail::StaticIp resource to specify a
static IP that can be attached to an Amazon Lightsail instance
that is in the same AWS Region and Availability
Zone.
| October 28, 2021 |
Updated resource | The following resources were updated: AWS::MediaConnect::Flow.Source,
AWS::MediaConnect::FlowOutput | October 27, 2021 |
Updated resource | The following resource was updated: AWS::FMS::Policy.
-
AWS::FMS::Policy
-
The AWS::FMS::Policy resource now allows you to automatically remove protections from resources that leave policy scope.
| October 21, 2021 |
Updated resource | The following resource was updated: AWS::Cassandra::Table.
-
AWS::Cassandra::Table
-
Use the DefaultTimeToLive property to set a default Time to Live (TTL) value for
a table in Amazon Keyspaces (for Apache Cassandra).
| October 21, 2021 |
Updated resource | The following resource was updated: AWS::SageMaker::NotebookInstance | October 21, 2021 |
New resources | Use these resources to deploy computer vision applications to an AWS Panorama Appliance. | October 21, 2021 |
New resource | The following resource was added: AWS::Rekognition:Project. | October 21, 2021 |
New resources | The following resources were added: AWS::DeviceFarm::DevicePool,
AWS::DeviceFarm::InstanceProfile, AWS::DeviceFarm::NetworkProfile,
AWS::DeviceFarm::Project AWS::DeviceFarm::TestGridProject, and
AWS::DeviceFarm::VPCEConfiguration. | October 14, 2021 |
New resource | The following resources were added: AWS::Wisdom::Assistant, AWS::Wisdom::AssistantAssociation, and AWS::Wisdom::KnowledgeBase | October 14, 2021 |
Updated resource | The following resource was updated: AWS::CodeBuild::Project ProjectBuildBatchConfig | October 13, 2021 |
New resource | The following resources were added: AWS::Connect::HoursOfOperation,
AWS::Connect::User, AWS::Connect::UserHierarchyGroup | October 12, 2021 |
Updated resource | The following resource was updated: AWS::Backup::BackupVault
-
AWS::Backup::BackupVault
-
Use the LockConfiguration property to specify the
configuration of AWS Backup; Vault Lock.
-
AWS::Backup::Framework
-
Use the Framework property to specify the configuration of
an AWS Backup; Audit Manager framework.
-
AWS::Backup::ReportPlan
-
Use the Report Plan property to specify the configuration of
an AWS Backup; Audit Manager report plan.
| October 7, 2021 |
New resources | The following resources were added: AWS::Lightsail::Disk and AWS::Lightsail::Instance
-
AWS::Lightsail::Instance
-
Use the AWS::Lightsail::Instance resource to specify an
Amazon Lightsail instance.
-
AWS::Lightsail::Disk
-
Use the AWS::Lightsail::Disk resource to specify a disk that
can be attached to an Amazon Lightsail instance that is in the
same AWS Region and Availability Zone.
| October 7, 2021 |
New resource | The following resource was added: AWS::IoT::JobTemplate.
-
AWS::IoT::JobTemplate
-
Use the
AWS::IoT::DomainConfJobTemplateiguration resource to specify a job template in AWS IoT Core.
| October 7, 2021 |
New resource | The following resource was added: AWS::Route53Resolver::ResolverConfig | October 7, 2021 |
Updated resources | The following resources were updated: AWS::ECR::ReplicationConfiguration
-
AWS::ECR::ReplicationConfiguration
-
Use the AWS::ECR::ReplicationConfiguration property
to configure replication for the contents of a private repository.
Support has been added to specify repository filters on a
replication rule.
| September 30, 2021 |
Updated resource | The following resource was updated: AWS::APS::Workspace. | September 30, 2021 |
Updated resource | The following resource was updated: AWS::KinesisFirehose::DeliveryStream.
-
AWS::KinesisFirehose::DeliveryStream
-
Use the AmazonopensearchserviceDestinationConfiguration
property type to specify the destination in Amazon OpenSearch Service. You
can specify only one destination.
| September 30, 2021 |
Updated resource | The following resources were updated: AWS::Lambda::LayerVersion and AWS::Lambda::Function.
-
AWS::Lambda::Function
-
Use the Architectures property to set the instruction set architecture for the function.
| September 30, 2021 |
New resource | The following resource was added: AWS::APS::RuleGroupsNamespace. | September 30, 2021 |
Updated resource | The following resource was updated: AWS::AppSync::DataSource
-
AWS::AppSync::DataSource
-
Use the OpenSearchServiceConfig property to specify the configuration for an
Amazon OpenSearch Service domain for an AWS AppSync data source.
| September 23, 2021 |
New resources | The following resources were added: AWS::MemoryDB::Cluster, AWS::MemoryDB::ACL,
AWS::MemoryDB::ParameterGroup, AWS::MemoryDB::SubnetGroup, and
AWS::MemoryDB::User. | September 23, 2021 |
Updated resources | The following resource was updated: AWS::EMR::Studio.
-
AWS::EMR::Studio
-
Use the
IdpAuthUrl property to specify the authentication endpoint of your identity provider (IdP) when you use IAM authentication and want to let federated users log in to an Amazon EMR Studio with the Studio URL and credentials from your IdP.
Use the IdpRelayStateParameterName property to specify the name that your identity provider uses for its RelayState parameter.
Use the UserRole property only when you set AuthMode to SSO.
| September 17, 2021 |
Updated resource | The following resource was updated: AWS::S3::Bucket. | September 17, 2021 |
Updated resource | The following resource was added: AWS::ACMPCA::Permission.
-
AWS::ACMPCA::Permission
-
Use the AWS::ACMPCA::Permission object to grant
permissions on a private CA to the AWS Certificate Manager (ACM) service principal (acm.amazonaws.com). These
permissions allow ACM to issue and renew ACM certificates that
reside in the same AWS account as the CA.
| September 16, 2021 |
Updated resource | The following resource was updated: AWS::MSK::Cluster
-
AWS::MSK::Cluster
-
You can now update the authentication and encryption settings for
an existing MSK cluster.
| September 16, 2021 |
New resources | The following resource was added: AWS::OpenSearchService::Domain. | September 16, 2021 |
New resource | The following resource was added: AWS::APS::Workspace. | September 16, 2021 |
Updated resource | The following resource was updated: AWS::Cassandra::Table.
-
AWS::Cassandra::Table
-
Use the AWS::Cassandra::Table resource to add new regular columns to existing tables in Amazon Keyspaces (for Apache
Cassandra).
| September 3, 2021 |
Updated resources | The following resource was updated: AWS::Transfer::Server | September 2, 2021 |
Updated resource | The following resource was added: AWS::ACMPCA::CertificateAuthority
OcspConfiguration. The following resource was updated:
AWS::ACMPCA::CertificateAuthority RevocationConfiguration. | September 2, 2021 |
Updated resource | The following resource was updated: AWS::DataSync::Task. | September 2, 2021 |
Updated resource | The following resource was Updated: AWS::EventSchemas::Discoverer. | September 2, 2021 |
Updated resource | The following resource was updated: AWS::KinesisFirehose::DeliveryStream. | September 2, 2021 |
New resource | The following resource is new: AWS::IoT::FleetMetric | September 2, 2021 |
New resource | The following resources were added: AWS::S3::MultiRegionAccessPoint and
AWS::S3::MultiRegionAccessPointPolicy. | September 2, 2021 |
Terminology change | AWS KMS is replacing the term customer master key
(CMK) with AWS KMS key and KMS key.
The concept has not changed. To prevent breaking changes, AWS KMS is keeping
some variations of this term. | August 30, 2021 |
Stack failure options | You can iteratively develop your applications when provisioning failures are
encountered by starting from the point of failure without rolling back successfully
provisioned resources. By specifying stack failure options, you can troubleshoot
resources in a CREATE_FAILED or UPDATE_FAILED status. You
can provision failure options for all stack deployments and change set
operations. For more information, see Stack
failure options. | August 30, 2021 |
Updated resource | The following resource was updated: AWS::CodeBuild::Project | August 19, 2021 |
Updated resource | The following resource was updated: AWS::AutoScaling::ScalingPolicy.
-
AWS::AutoScaling::ScalingPolicy
-
Use the PredictiveScalingConfiguration property to specify a
predictive scaling policy configuration for an Auto Scaling group.
| August 19, 2021 |
Updated resource | The following resource was updated: AWS::SageMaker::EndpointConfig
-
AWS::SageMaker::EndpointConfig
-
In the AsyncInferenceClientConfig property type, use the
MaxConcurrentInvocationsPerInstance property to set
the maximum number of concurent requests.
In the AsyncInferenceConfig property type, use the
ClientConfig to configure the behavior of the
client SageMaker uses. Use OutputConfig to spcify
invocation outputs.
In the AsyncInferenceNotificationConfig property, use the
ErrorTopic and SuccessTopic to define
Amazon SNS topics to post a notification if the inference fails or
completes successfully, respectively.
In the OutputConfig property type use the
KmsKeyId to encrypt the asynchronous inference
output. Use NotificationConfig to specify the
notification configuration and S3OutputPath to specify
the output location in S3.
| August 19, 2021 |
Updated resource | The following resource was updated: AWS::Elasticsearch::Domain. | August 17, 2021 |
Updated resources | The following resource was updated: AWS::WAFv2::WebACL.
-
AWS::WAFv2::WebACL
-
You can now specify the version to use for managed rule groups. For information, see ManagedRuleGroupStatement.
| August 12, 2021 |
Updated resource | The following resource was updated: AWS::ApiGateway::DomainName.
-
AWS::ApiGateway::DomainName
-
Use the OwnershipVerificationCertificateArn property to specify the certificate ARN used to verify ownership of the domain using mutual TLS.
| August 12, 2021 |
Updated resource | The following resource was updated: AWS::ApiGatewayV2::DomainName.
-
AWS::ApiGatewayV2::DomainName
-
Use the OwnershipVerificationCertificateArn property to specify the certificate ARN used to verify ownership of the domain using mutual TLS.
| August 12, 2021 |
Updated resource | The following resource was updated: AWS::LookoutEquipment::InferenceScheduler | August 12, 2021 |
Updated resource | The following resource was updated: AWS::SageMaker::Model.
-
AWS::SageMaker::Model
-
In the ImageConfig property type, use the
RepositoryAuthConfig property to specify an
authentication configuration for the private docker registry where
your model image is hosted.
| August 12, 2021 |
Updated resource | The following resource was added: AWS::WAFv2::LoggingConfiguration. | August 12, 2021 |
Updated resource | The following resource was updated: AWS::AppSync::GraphQLApi
-
AWS::AppSync::GraphQLApi
-
Use the LambdaAuthorizerConfig property to specify the configuration for AWS Lambda function authorization.
| August 5, 2021 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
-
AWS::FSx::FileSystem
-
In the WindowsConfiguration property type, use the
AuditLogConfiguration property to enable audit
event logging of end-user accesses of files, folders, and file
shares on an Amazon FSx Windows File Server instance.
| August 5, 2021 |
New resource | The following resource was added: AWS::Athena::PreparedStatement
-
AWS::Athena::PreparedStatement
-
Use the AWS::Athena::PreparedStatement resource to
specify a prepared statement for use with SQL queries in Athena. Use
prepared statements for repeated execution of the same query with
different query parameters. A prepared statement contains parameter
placeholders whose values are supplied at execution time.
| August 5, 2021 |
Updated resource | The following resource was updated: AWS::DataBrew::Job
-
AWS::DataBrew::Job
-
Use the AWS::DataBrew::Job.DatabaseOutputs property
type to define the output destination for a DataBrew
job to be written into.
Use the AWS::DataBrew::Job.ProfileConfiguration
property type to configure which statistics to include when running
DataBrew profile jobs.
| July 29, 2021 |
Updated resource | The following resource was updated: AWS::S3Outposts::EndPoint | July 29, 2021 |
New resource | The following resources were released: AWS::Route53RecoveryControl::Cluster, AWS::Route53RecoveryControl::ControlPanel, AWS::Route53RecoveryControl::RoutingControl, AWS::Route53RecoveryControl::SafetyRule | July 29, 2021 |
New resource | The following resources were released: AWS::Route53RecoveryReadiness::Cell, AWS::Route53RecoveryReadiness::ReadinessCheck, AWS::Route53RecoveryReadiness::RecoveryGroup, AWS::Route53RecoveryReadiness::ResourceSet
-
AWS::Route53RecoveryReadiness::Cell
-
Use the AWS::Route53RecoveryReadiness::Cell to define a single cell for an application.
-
AWS::Route53RecoveryReadiness::ReadinessCheck
-
Use the AWS::Route53RecoveryReadiness::ReadinessCheck to check application readiness for failover. Amazon Route 53 Application Recovery Controller uses readiness checks to
determine the readiness of the resources in a resource set.
-
AWS::Route53RecoveryReadiness::RecoveryGroup
-
Use the AWS::Route53RecoveryReadiness::RecoveryGroup to define a recovery group for an application. A recovery group models an application and includes cells that represent application replicas.
-
AWS::Route53RecoveryReadiness::ResourceSet
-
Use the AWS::Route53RecoveryReadiness::ResourceSet to define a group of resources of a single type that you can associate with a readiness check.
| July 29, 2021 |
Import stacks to stack set | The AWS CloudFormation stack import operation can import existing stacks
into new or existing stack sets, so that you can migrate existing stacks to a stack
set in one operation. For more information, see Importing stacks
into a stack set. | July 28, 2021 |
Updated resource | The following resource was updated: AWS::CloudWatch::Alarm.
-
AWS::CloudWatch::Alarm
-
In the MetricDataQuery property type, use the AccountId property to specify the ID of the account where the metrics are located, if this is a cross-account alarm.
| July 22, 2021 |
Updated resource | The following resource was updated: AWS::QLDB::Ledger
-
AWS::QLDB::Ledger
-
Use the KmsKey property to specify a customer managed AWS KMS key to use for encryption at rest in the ledger.
| July 22, 2021 |
New resources | The following resources were added: AWS::LookoutEquipment::InferenceScheduler | July 22, 2021 |
Updated resource | The following resource was updated: AWS::EC2::VPCCidrBlock.
-
AWS::EC2::VPCCidrBlock
-
Use the Ipv6CidrBlock property to specify an IPv6 CIDR block
from the IPv6 address pool.
Use the Ipv6Pool property to specify the ID of an IPv6
address pool from which to allocate the IPv6 CIDR block.
| July 21, 2021 |
Updated resource | The following resource was updated: AWS::Cassandra::Table. | July 21, 2021 |
New resource | The following resource was added : AWS::Logs::ResourcePolicy | July 15, 2021 |
Increased quota | The following AWS CloudFormation quota has been updated. | July 15, 2021 |
Updated resource | The following resource was updated: AWS::DataBrew::Job
-
AWS::DataBrew::Job
-
Use the AWS::DataBrew::Job.DataCatalogOutput property
type to define outputs from DataBrew recipe jobs to the
AWS Glue Data Catalog.
| July 9, 2021 |
Updated resources | The following resources were updated: AWS::ServiceDiscovery::PrivateDnsNamespace and
AWS::ServiceDiscovery::PublicDnsNamespace. | July 8, 2021 |
Updated resources | The following resources were updated: AWS::CodeDeploy::Application,
AWS::CodeDeploy::DeploymentConfig, and AWS::CodeDeploy::DeploymentGroup
-
AWS::CodeDeploy::Application
-
Use the Tags property to specify metadata to add to CodeDeploy applications.
-
AWS::CodeDeploy::DeploymentConfig
-
Use the TrafficRoutingConfig property to specify how deployment
traffic is routed.
Use the ComputePlatform property to specify the destination
platform type for the deployment (Lambda,
Server, or ECS).
-
AWS::CodeDeploy::DeploymentGroup
-
Use the BlueGreenDeploymentConfiguration property to specify information about blue/green deployment options for a deployment group.
Use the ECSServices property to specify the target Amazon ECS services in the deployment group.
| July 8, 2021 |
Updated resource | The following resource was updated: AWS::AutoScaling::LaunchConfiguration. | July 8, 2021 |
Updated resources | The following resources were updated: AWS::ImageBuilder::ContainerRecipe and AWS::ImageBuilder::DistributionConfiguration.
-
AWS::ImageBuilder::DistributionConfiguration
-
Use the LaunchTemplateConfiguration property to
use an Amazon EC2 launch template for specified accounts where you distribute your Image Builder image.
-
AWS::ImageBuilder::ContainerRecipe
-
-
Retrieve the container recipe Name attribute with the GN::GetAtt function.
-
Use the InstanceBlockDeviceMapping property to
define block device mappings for the build instance used to configure your image.
| July 1, 2021 |
China Rebrand Update | China rebrand updates | June 29, 2021 |
Updated resources | The following resource was updated: AWS::Transfer::Server ProtocolDetails | June 24, 2021 |
Updated resource | The following resource was updated: AWS::DAX::Cluster
-
AWS::DAX::Cluster
-
Use the ClusterEndpointEncryptionType to specify the encryption type of the cluster's endpoint.
| June 24, 2021 |
New resources | The following resources were added: AWS::CloudFormation::PublicTypeVersion,
AWS::CloudFormation::Publisher, and AWS::CloudFormation::TypeActivation.
-
AWS::CloudFormation::PublicTypeVersion
-
Use the AWS::CloudFormation::PublicTypeVersion resource to test and
publish a registered extension as a public, third-party extension.
-
AWS::CloudFormation::Publisher
-
Use the AWS::CloudFormation::Publisher resource to register your
account as a publisher of public extensions in the CloudFormation
registry.
-
AWS::CloudFormation::TypeActivation
-
Use the AWS::CloudFormation::TypeActivation resource to activate a
public third-party extension, making it available for use in CloudFormation
operations.
| June 24, 2021 |
New resource | The following resource was added: AWS::Connect::QuickConnect | June 24, 2021 |
Updated resource | The following resource was updated: AWS::MWAA::Environment
-
Schedulers
-
Use the Schedulers property to specify the number of Apache Airflow schedulers that run in an environment.
| June 21, 2021 |
Publish public third-party extensions | Use public extensions provided by third-party publishers, just as you would
extensions from AWS. For more information, see Using public
extensions. For information about publishing third-party public
extensions, see Publishing
extensions in the CloudFormation CLI User
Guide. | June 21, 2021 |
Updated resource | The following resource was updated: AWS::AutoScaling::ScheduledAction.
-
AWS::AutoScaling::ScheduledAction
-
Use the TimeZone property to create recurring scheduled actions in
the local time zone. If your time zone observes Daylight Saving Time (DST), the
recurring action automatically adjusts for Daylight Saving Time.
| June 18, 2021 |
Updated resources | The following resources were updated: AWS::AppMesh::VirtualNode,
AWS::AppMesh::GatewayRoute, and AWS::AppMesh::Route
-
AWS::AppMesh::VirtualNode
-
Use the DnsServiceDiscovery property to represent the DNS
service discovery information for your virtual node.
-
AWS::AppMesh::GatewayRoute
-
Use the GatewayRouteHostnameMatch property to represent the
gateway route hostname to match.
Use the GatewayRouteHostnameRewrite property to represent
the gateway route host name to rewrite.
Use the GrpcGatewayRouteMetadata property to represent the
metadata of the gateway route.
Use the GrpcGatewayRouteRewrite property to represent the
the gateway route to rewrite.
Use the GrpcMetadataMatchMethod property to represent the
method header to be matched.
Use the HttpGatewayRouteHeader property to represent the
HTTP header in the gateway route.
Use the HttpGatewayRoutePathRewrite property to represent
the path to rewrite.
Use the HttpGatewayRoutePrefixRewrite property to represent
the beginning characters of the route to rewrite.
Use the HttpGatewayRouteRewrite property to represent the
beginning characters of the route to rewrite.
Use the HttpGatewayRoutePathRewrite property to represent
the beginning characters of the route to rewrite.
-
AWS::AppMesh::Route
-
Use the HttpQueryParameter property to represent the query
parameter in the request.
| June 17, 2021 |
Updated resource | The following resource was updated: AWS::KMS::Key.
-
AWS::KMS::Key
-
Use the MultiRegionKey property to specify multi-Region primary
keys.
| June 17, 2021 |
New resource | The following resource was added: AWS::KMS::ReplicaKey.
-
AWS::KMS::ReplicaKey
-
Use the AWS::KMS::ReplicaKey resource to specify a replica of a
specified multi-Region primary key.
| June 17, 2021 |
Parallel Node Upgrade and Scale to Zero | In the NodegroupUpdateConfig, use either the MaxUnavailable and
MaxUnavailablePercentage values to define the number of nodes to upgrade in
parallel. In the scalingconfig, the minsize and desiredsize values can both be set
to zero. | June 16, 2021 |
Updated resource | The following resource was updated: AWS::EC2::NatGateway
-
AWS::EC2::NatGateway
-
Use the ConnectivityType property to indicate whether the
NAT gateway supports public or private connectivity.
| June 11, 2021 |
Updated resources | The following resource was updated: AWS::RAM:ResourceShare
-
AWS::RAM::ResourceShare
-
Use the PermissionArns property to specify the Amazon Resource Names (ARNs) of the permissions to associate with the resource share.
| June 10, 2021 |
Updated resource | The following resource was updated: AWS::KinesisAnalyticsV2::Application
-
AWS::KinesisAnalyticsV2::Application ApplicationConfiguration
-
You can use the ZeppelinApplicationConfiguration property to create Studio notebook applications that use Apache Zeppelin. You can use the notebook interactively, and you can deploy it as a continuously running streaming application with durable state and autoscaling features.
| June 10, 2021 |
Updated resource | The following resource was updated: AWS::SQS::Queue
-
AWS::SQS::Queue
-
You can now use the DeduplicationScope and
FifoThroughputLimitproperties to enable higher throughput for FIFO
queues.
| June 10, 2021 |
Updated resource | The following resource was updated: AWS::SSM::Document
-
AWS::SSM::Document
-
Use the Attachments property to specify a list of key and value
pairs that describe attachments to a version of a document. Use the
Requires property to specify a list of SSM documents required by a
document. This parameter is used exclusively by AWS AppConfig. When a user creates
an AWS AppConfig configuration in an SSM document, the user must also specify a
required document for validation purposes. In this case, an ApplicationConfiguration
document requires an ApplicationConfigurationSchema document for validation
purposes. For more information, see Creating a configuration and a configuration profile in the
AWS AppConfig User Guide.
| June 10, 2021 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
- AWS::FSx::FileSystem
-
Use the DNSName attribute to access the DNS name of
your Amazon FSx file system.
| June 7, 2021 |
New resource | The following resources were added:
AWS::Location::GeofenceCollection, AWS::Location::Map,
AWS::Location::PlaceIndex,
AWS::Location::RouteCalculator,
AWS::Location::Tracker, and
AWS::Location::TrackerConsumer.
-
AWS::Location::GeofenceCollection
-
Use the AWS::Location::GeofenceCollection resource to
specify the ability to detect and act when a tracked device enters
or exits a defined geographical boundary.
-
AWS::Location::Map
-
Use the AWS::Location::Map resource to specify a map
resource in your AWS account, which provides map
tiles of different styles sourced from available data
providers.
-
AWS::Location::PlaceIndex
-
Use the AWS::Location::PlaceIndex resource to specify
a place index resource in your AWS account, which
supports Places functions with geospatial data sourced from your
chosen data provider.
-
AWS::Location::RouteCalculator
-
Use the AWS::Location::RouteCalculator resource to
specify a route calculator resource in your AWS
account.
-
AWS::Location::Tracker
-
Use the AWS::Location::Tracker resource to specify a tracker resource in your AWS account, which lets you receive current and historical location of devices.
-
AWS::Location::TrackerConsumer
-
Use the AWS::Location::TrackerConsumer resource to
specify an association between a geofence collection and a tracker
resource.
| June 7, 2021 |
Updated resources | The following resources were updated: AWS::MediaPackage::Channel, AWS::MediaPackage::OriginEndpoint, AWS::MediaPackage::PackagingConfiguration, and AWS::MediaPackage::PackagingGroup.
-
AWS::MediaPackage::Channel.
-
Use the EgressAccessLogs property to specify egress access logs for your channel.
Use the IngressAccessLogs property to specify ingress access logs for your channel.
-
AWS::MediaPackage::OriginEndpoint.
-
Use the CmafEncryption.ConstantInitializationVector property to specify an optional 128-bit, 16-byte hex value represented by a 32-character string, used in conjunction with the key for encrypting blocks. If you don't specify a value, then AWS Elemental MediaPackage creates the constant initialization vector (IV).
-
AWS::MediaPackage::PackagingConfiguration.
-
Use the CmafPackage.IncludeEncoderConfigurationInSegments property to place your encoder's metadata into every video segment instead of the init fragment, which is the default behavior. This lets you use different SPS/PPS/VPS settings for your assets during content playback.
-
AWS::MediaPackage::PackagingGroup.
-
Use the EgressAccessLogs property to configure egress access logs for your packaging group.
| May 27, 2021 |
Updated resources | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup. | May 27, 2021 |
Updated resource | The following resource was updated: AWS::ACMPCA::CertificateAuthority. | May 27, 2021 |
Updated resource | The following resource was updated: AWS::FraudDetector::Detector. | May 27, 2021 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem | May 27, 2021 |
Updated resource | The following resource was updated: AWS::MWAA::Environment
-
ModuleLoggingConfiguration
-
In the ModuleLoggingConfiguration property type, the CloudWatchLogGroupArn response property type for the CloudWatch Logs ARN where Apache Airflow DAG logs are published was removed from the request to enable logs, and is being returned in the response.
-
AirflowConfigurationOptions
-
In the AirflowConfigurationOptions property type, use a PrimitiveType of Json to add an Apache Airflow configuration option.
-
MinWorkers
-
Use the MinWorkers property to specify the minimum number of Apache Airflow workers that run in an environment.
| May 27, 2021 |
Updated resource | The following resource was updated: AWS::QLDB::Ledger
-
AWS::QLDB::Ledger
-
The PermissionsMode property has changed so that an update requires no interruption.
| May 27, 2021 |
New resource | The following resource was added: AWS::CUR::ReportDefinition | May 27, 2021 |
Region availability | The following resources were updated: AWS::AmazonMQ::Broker
-
AWS::AmazonMQ::Broker
-
Amazon MQ for RabbitMQ is now available in the Amazon Web Services China (Bejing) and the Amazon Web Services China (Ningxia) Regions.
| May 26, 2021 |
New resources | The following resource was added: AWS::EC2::TransitGatewayPeeringAttachment.
-
AWS::EC2::TransitGatewayPeeringAttachment
-
Use the TransitGatewayPeeringAttachment resource to request
transit gateway peering attachment between the specified transit gateway
(requester) and a peer transit gateway (accepter).
| May 20, 2021 |
New resource | The following resource was added: AWS::AppRunner::Service | May 20, 2021 |
New resource | The following resource was added: AWS::IoTCoreDeviceAdvisor::SuiteDefinition
-
SuiteDefinition
-
Use the SuiteDefinition resource to create a new test suite configuration for Device Advisor.
| May 20, 2021 |
Updated resources | The following resource was updated: AWS::CloudFormation::StackSet.
-
AWS::CloudFormation::StackSet
-
Use the CallAs property type to specify whether you are acting as
an account administrator in the organization's management account or as a delegated
administrator in a member account.
| May 14, 2021 |
Updated resource | The following resource was updated: AWS::ECS::TaskDefinition. | May 14, 2021 |
Updated resource | The following resource was updated: AWS::ECS::CapacityProvider. | May 14, 2021 |
Updated resource | The following resource was updated: AWS::EKS::Nodegroup
-
AWS::EKS::Nodegroup
-
Use the Taints property to specify whether you want
to have the effect of No_Schedule,
Prefer_No_Schedule, or No_Execute
applied to your node group.
| May 14, 2021 |
Updated resource | The following resource was updated: AWS::Elasticsearch::Domain.
-
AWS::Elasticsearch::Domain
-
Use the EncryptionAtRestOptions property to specify whether the domain should encrypt data at rest, and if so, the AWS Key Management Service (KMS) key to use.
Use the NodeToNodeEncryptionOptions property to specify whether node-to-node encryption is enabled.
| May 14, 2021 |
New resources | The following resources were added: AWS::SSMContacts::Contact and
AWS::SSMContacts::ContactChannel
-
AWS::SSMContacts::Contact
-
Use the AWS::SSMContacts::Contact resource to specify
an Incident Manager contact or escalation plan.
-
AWS::SSMContacts::ContactChannel
-
Use the AWS::SSMContacts::ContactChannel resource to
specify a contact channel as the method that Incident Manager uses
to engage your contact.
| May 14, 2021 |
New resource | The following resource was added: AWS::DynamoDB::GlobalTable | May 14, 2021 |
New resource | The following resources were added: AWS::SSMIncidents::ReplicationSet and
AWS::SSMIncidents::ResponsePlan
-
AWS::SSMIncidents::ReplicationSet
-
Use the ReplicationSet resource to specify a set of
Regions that Incident Manager data is replicated to and
the KMS key used to encrypt the data.
-
AWS::SSMIncidents::ResponsePlan
-
Use the ResponsePlan resource to specify the details
of the response plan that are used when creating an incident.
| May 14, 2021 |
Updated resources | The following resources were updated: AWS::ECR::Repository
-
AWS::ECR::Repository
-
Use the AWS::ECR::Repository.EncryptionConfiguration
property to configure encryption for the contents of a private
repository.
| May 13, 2021 |
Updated resource | The following resource was updated: AWS::S3::Bucket.
-
AWS::S3::Bucket
-
Use the ExpiredObjectDeleteMarker property to specify whether
Amazon S3 will remove a delete marker with no noncurrent versions.
| May 13, 2021 |
Updated resource | The following resource was updated: AWS::ACMPCA::CertificateAuthority. | May 6, 2021 |
Updated resource | The following resource was updated: AWS::CloudFront::Distribution. | May 6, 2021 |
Updated resource | The following resources were updated: AWS::GameLift:Fleet, AWS::GameLift::GameSessionQueue.
-
AWS::GameLift::Fleet
-
In the LocationCapacity property type, use DesiredEc2Instance to specify the number of desired EC2 instance and
MinSize and MaxSize to specify the minimum and maximum capacity size.
In the LocationConfiguration property type, use location Location to specify an AWS Region code and
LocationConfiguration to specify resource capacity settings in a specified fleet.
-
AWS::GameLift::GameSessionQueue
-
Use the
PriorityConfiguration property to specify priority destinations and locations for game session placements.
Use the
FilterConfiguration property to specify a list of locations where a queue is allowed to place new game sessions.
| May 6, 2021 |
Updated resource | The following resource was updated: AWS::IoT::TopicRule
-
AWS::IoT::TopicRule
-
Use the CloudwatchLogsAction property to specify a Cloudwatch logs action.
Use the TimestreamAction property to specify a timestream action.
Use the KafkaAction property to specify a kafka action.
In the S3Action property, use the CannedAcl value to specify a canned ACL action.
| May 6, 2021 |
Updated resource | The following resource was updated: AWS::MSK::Cluster
-
AWS::MSK::Cluster
-
You can now create clusters with IAM access control. This enables
you to authenticate clients, as well as to authorize Apache Kafka
actions.
| May 6, 2021 |
New resources | The following resources were added: AWS::FraudDetector::Detector, AWS::FraudDetector::EntityType, AWS::FraudDetector::EventType, AWS::FraudDetector::Label, AWS::FraudDetector::Outcome, and AWS::FraudDetector::Variable | May 6, 2021 |
New resources | The following resources were added: AWS::XRay::Group and AWS::XRay::SamplingRule. | May 6, 2021 |
New resource | The following resource was added: AWS::CloudFront::Function. | May 6, 2021 |
New resource | The following resource was added: AWS::FinSpace::Environment | May 6, 2021 |
Updated resource | The following resource was updated: AWS::Detective::Graph | April 29, 2021 |
New resource | The following resource was added: AWS::IoTFleetHub::Application
-
AWS::IoTFleetHub::Application
-
Use the AWS::IoTFleetHub::Application resource to create a Fleet Hub for AWS IoT Device Management web application.
| April 29, 2021 |
New resource | The following resource was added: AWS::SES::ContactList
-
AWS::SES::ContactList
-
Use the AWS::SES::ContactList resource to create a
list that contains contacts that have subscribed to a particular
topic or topics.
| April 29, 2021 |
Updated resource | The following resources were updated: AWS::IAM::InstanceProfile and AWS::IAM::ManagedPolicy.
-
AWS::IAM::InstanceProfile
-
Use the Tags property to specify a list of tags that you want to attach to the newly created instance profile.
-
AWS::IAM::ManagedPolicy
-
Use the Tags property to specify a list of tags that you want to attach to the newly created managed policy.
| April 27, 2021 |
New resources | The following resources were added: AWS::IoTWireless::PartnerAccount, AWS::IoTWireless::TaskDefinition | April 26, 2021 |
New resources | The following resources were added: AWS::NimbleStudio::Studio,
AWS::NimbleStudio::StudioComponent, AWS::NimbleStudio::StreamingImage, and
AWS::NimbleStudio::LaunchProfile.
-
AWS::NimbleStudio::Studio
-
Use the AWS::NimbleStudio::Studio resource to specify
a studio resource.
-
AWS::NimbleStudio::StudioComponent
-
Use the AWS::NimbleStudio::StudioComponent resource
to configure studio components, including types of workstations,
render farms, license servers, and shared file systems.
-
AWS::NimbleStudio::StreamingImage
-
Use the AWS::NimbleStudio::StreamingImage resource to
configure a machine image, including operating system and software,
that can be launched as a virtual workstation in a streaming
session.
-
AWS::NimbleStudio::LaunchProfile
-
Use the AWS::NimbleStudio::LaunchProfile resource to
specify user access permissions to studio components.
| April 26, 2021 |
Updated resources | AWS::ElastiCache::CacheCluster, AWS::ElastiCache::ReplicationGroup. | April 22, 2021 |
Updated resources | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup.
-
AWS::WAFv2::WebACL
-
You can now nest rule statements without using different names for statements at different levels. For example, instead of using AndStatementOne and AndStatementTwo to nest an AND rule statement inside another AND rule statement, you can use AndStatement for both. The new statement properties are AndStatement, NotStatement, OrStatement, RateBasedStatement, and Statement.
-
AWS::WAFv2::RuleGroup
-
You can now nest rule statements without using different names for statements at different levels. For example, instead of using AndStatementOne and AndStatementTwo to nest an AND rule statement inside another AND rule statement, you can use AndStatement for both. The new statement properties are AndStatement, NotStatement, OrStatement, RateBasedStatement, and Statement.
| April 22, 2021 |
Updated resource | The following resource was updated: AWS::ResourceGroups::Group
-
AWS::ResourceGroups::Group
-
Use the Configuration property to specify settings
for an AWS service that automatically apply to
members of the resource group.
| April 22, 2021 |
New resource | The following resource was added: AWS::AutoScaling::WarmPool. | April 22, 2021 |
Updated resources | The following resource was updated: AWS::CloudFormation::StackSet.
-
AWS::CloudFormation::StackSet
-
Use the RegionConcurrencyType property type to specify the
concurrency type of deploying StackSets operations in Regions.
| April 15, 2021 |
Updated resource | The following resource was updated: AWS::ApiGateway::RestApi.
-
AWS::ApiGateway::RestApi
-
Use the Mode property to specify how API Gateway handles resource updates when you use OpenAPI to define your REST API.
| April 15, 2021 |
Updated resource | The following resource was updated: AWS::IVS::Channel
-
AWS::IVS::Channel
-
Use the RecordingConfiguration property to specify an
Amazon IVS RecordingConfiguration, which stores configuration
information related to recording your live stream to a data
store.
| April 15, 2021 |
New resources | The following resource was added:
AWS::EC2::EnclaveCertificateIamRoleAssociation. | April 15, 2021 |
New resource | The following resource was added: AWS::IVS::RecordingConfiguration
-
AWS::IVS::RecordingConfiguration
-
Use the AWS::IVS::RecordingConfiguration resource to
specify an Amazon IVS RecordingConfiguration, which stores
configuration information related to recording your live stream to a
data store.
| April 15, 2021 |
Reference macros in stack set templates | StackSets now supports creating or updating stack sets with self-managed
permissions from templates that reference macros. For more information about macros, see Using AWS
CloudFormation macros to perform custom processing on templates. | April 14, 2021 |
Use the latest value of an SSM parameter in a dynamic reference. | When using dynamic references, you can now have CloudFormation use the latest
version of an SSM parameter whenever you create or update a stack. You are no longer
required to specify a specific version. For more details, see SSM parameters. | April 13, 2021 |
Updated resources | AWS::ElastiCache::ParameterGroup, AWS::ElastiCache::SecurityGroup, AWS::ElastiCache::SubnetGroup. | April 8, 2021 |
Updated resource | The following resource was updated: AWS::DynamoDB::Table.
-
AWS::DynamoDB::Table
-
Use the KinesisStreamSpecification property to
specify the Kinesis Data Streams configuration for a table.
| April 8, 2021 |
Modules support using period delimiters in resource names | You can now use a period as a delimiter in specifying the fully-qualified logical
name for a resource contained in a module. For more information, see Referencing resources in a module. | April 8, 2021 |
AWS CloudFormation StackSets now supports parallel region deployment | You can now choose to deploy StackSets into Regions sequentially or in
parallel. For more information, see Stack set operation options. | April 6, 2021 |
Updated resources | The following resources were updated: AWS::DataBrew::Dataset and
AWS::DataBrew::Job
-
AWS::DataBrew::Dataset
-
Use the CsvOptions property to define how DataBrew will read a comma-separated value (CSV) file when
creating a dataset from that file.
Use the DatabaseInputDefinition property to define
connection information for dataset input files stored in a database.
Use the DataCatalogInputDefinition property to define
how metadata stored in the AWS Glue Data Catalog is defined in
a DataBrew dataset.
Use the DatasetParameter property to define the type
and conditions for a parameter in the Amazon S3 path of
the dataset.
Use the DatetimeOptions property to define the
correct interpretation of datetime parameters used in the Amazon S3 path of a dataset.
Use the ExcelOptions property to define how DataBrew will interpret a Microsoft Excel file when
creating a dataset from that file.
Use the FilesLimit property to limit the number of
Amazon S3 files that should be selected for a dataset
from a connected Amazon S3 path.
Use the FilterExpression property to define parameter
conditions.
Use the FilterValue property to define a single entry
in the ValuesMap of a
FilterExpression.
Use the FormatOptions property to define the
structure of either comma-separated value (CSV), Excel, or JSON
input.
Use the Input property to define how DataBrew can find data, in either the AWS Glue Data Catalog or Amazon S3.
Use the JsonOptions property to define how input is
to be interpreted by AWS Glue DataBrew.
Use the PathOptions property to define how DataBrew selects files for a given Amazon S3
path in a dataset.
Use the PathParameter property to define the file
format of a dataset.
Use the S3Location property to define a single entry
in the path parameters of a dataset.
-
AWS::DataBrew::Job
-
Use the JobSample property to define the number of
rows on which a profile job is run.
Use the OutputLocation property to define the
location in Amazon S3 where the job writes its output.
Use the Recipe property to define the actions to be
performed on a dataset.
| April 1, 2021 |
Updated resources | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup.
-
AWS::WAFv2::WebACL
-
You can now inspect a web request body as JSON. You can now add custom request and response handling to web ACL default action and rule action settings. You can now define labels for rules, which are added automatically to matching requests and that persist with requests during web ACL evaluation. You can match against labels using the new rule LabelMatchStatement. You can now add a scope-down statement to managed rule group statements.
-
AWS::WAFv2::RuleGroup
-
You can now inspect a web request body as JSON. You can now add custom request and response handling to rule action settings. You can now define labels for rules, which are added automatically to matching requests and that persist with requests during web ACL evaluation. You can match against labels using the new rule LabelMatchStatement.
| April 1, 2021 |
Updated resource | The following resource was updated: AWS::Config::DeliveryChannel.
-
AWS::Config::DeliveryChannel
-
Use the S3KmsKeyArn property to specify the Amazon Resource Name (ARN) of the AWS Key Management Service (KMS) customer managed key (CMK) used to encrypt objects delivered by AWS Config.
| April 1, 2021 |
Updated resource | The following resource was updated: AWS::ApiGateway::RestApi. | April 1, 2021 |
Updated resource | The following resource was updated: AWS::Budgets::BudgetsAction
-
AWS::Budgets::BudgetsAction
-
Use the AWS::Budgets::BudgetsAction resource to take predefined actions that are initiated when a budget threshold has been exceeded.
| April 1, 2021 |
Updated resource | The following resource was updated: AWS::Cloud9::EnvironmentEC2 | April 1, 2021 |
Updated resource | The following resource was updated: AWS::EC2::LaunchTemplate. | April 1, 2021 |
Updated resource | The following resource was updated: AWS::ElasticBeanstalk::Environment.
-
AWS::ElasticBeanstalk::Environment
-
Use the OperationsRole property to specify the Amazon Resource Name (ARN) of an existing IAM role to be used as the environment's operations role.
| April 1, 2021 |
Updated resource | The following resource was updated: AWS::Events::Rule.
-
AWS::Events::Rule
-
The SageMakerPipelineParameter property is a Name / Value pair of a parameter
to start execution of a SageMaker Model Building Pipeline to create an API
destination. An API destination defines an HTTP invocation endpoint to use as the
target of a rule.
The SageMakerPipelineParameters contains the SageMaker Model Building
Pipeline parameters to start execution of a SageMaker Model Building
Pipeline.
| April 1, 2021 |
Updated resource | The following resource was updated: AWS::FMS::Policy.
-
AWS::FMS::Policy
-
The AWS::FMS::Policy resource now allows you to manage DNS Firewall policies for Amazon Route 53 Resolver DNS Firewall.
| April 1, 2021 |
Updated resource | The following resource was updated: AWS::GameLift::GameSessionQueue.
-
AWS::GameLift::GameSessionQueue
-
Use the
NotificationTarget property to specify an SNS topic ARN to publish game session placement events that are emitted by the queue.
Use the
CustomEventData property to specify a string value to add to all game session placement events that are emitted by the queue.
| April 1, 2021 |
New resources | The following resources were added: AWS::Route53Resolver::FirewallDomainList, AWS::Route53Resolver::FirewallRuleGroup, AWS::Route53Resolver::FirewallRuleGroupAssociation | April 1, 2021 |
New resource | The following resource was added: AWS::CloudWatch::MetricStream. | April 1, 2021 |
New resource | The following resource was added : AWS::Logs::QueryDefinition | April 1, 2021 |
Updated resource | The following resource was updated: AWS::Batch::JobDefinition | March 31, 2021 |
New resources | The following resources were added: AWS::LookoutMetrics::Alert | March 25, 2021 |
New resource | The following resource was added: AWS::AppIntegrations::EventIntegration | March 25, 2021 |
New resources | The following resources were added: AWS::CustomerProfiles::Domain,
AWS::CustomerProfiles::Integration and AWS::CustomerProfiles::ObjectType. | March 24, 2021 |
Updated resource | The following resource was updated: AWS::ServiceDiscovery::Service.
- AWS::ServiceDiscovery::Service
-
Use the Type property to allow service instances in a service in a public or private DNS
namespace to only be discovered with the DiscoverInstances API operation.
| March 18, 2021 |
New resource | The following resource was added: AWS::FIS::ExperimentTemplate.
-
AWS::FIS::ExperimentTemplate
-
Use the
AWS::FIS::ExperimentTemplate resource to create an experiment template in AWS Fault Injection Simulator.
| March 18, 2021 |
New resource | The following resources were added: AWS::S3ObjectLambda::AccessPoint and
AWS::S3ObjectLambda::AccessPointPolicy | March 18, 2021 |
New resources | The following resources were updated: AWS::ECS::Service.
-
AWS::ECS::Service
-
Use the AWS::ECS::Service resource and the
EnableExecuteCommand property to enable ECS Exec
for the tasks in a service.
| March 16, 2021 |
New resources | The following resources were updated: AWS::ECS::Cluster
ExecuteCommandLogConfiguration. | March 16, 2021 |
New resources | The following resources were updated: AWS::ECS::Cluster
ExecuteCommandConfiguration. | March 16, 2021 |
Updated resource | The following resource was updated: AWS::Detective::MemberInvitation
- AWS::Detective::MemberInvitation
-
Use the DisableEmailNotification property to prevent the sending of invitation emails to member accounts.
The term "master account" is changed to "administrator account."
| March 15, 2021 |
Updated resources | The following resources were updated: AWS::ECR::PublicRepository | March 11, 2021 |
Updated resource | The following resource was updated: AWS::CertificateManager::Account
-
AWS::CertificateManager::Account
-
Use the ExpiryEventsConfiguration property to specify
options for certificate expiration events associated with an AWS account.
| March 11, 2021 |
Updated resource | The following resource was updated: AWS::EFS::FileSystem
- AWS::EFS::FileSystem
Use the AvailabilityZoneName property to create a file system that uses EFS One Zone storage classes, which store data
redundantly within a single Availability Zone within an AWS Region. | March 11, 2021 |
New resources | The following resources were added: AWS::CE::AnomalySubscription and AWS::CE::AnomalyMonitor.
-
AWS::CE::AnomalySubscription
-
Use the AWS::CE::AnomalySubscription resource to deliver notifications about anomalies detected by a monitor that exceeds a threshold.
-
AWS::CE::AnomalyMonitor
-
Use the AWS::CE::AnomalyMonitor resource to continuously inspect your account's cost data for anomalies, based on MonitorType and MonitorSpecification.
| March 11, 2021 |
New resources | The following resources were updated:
AWS::ECS::ClusterCapacityProviderAssociations. | March 11, 2021 |
New resource | The following resource was added: AWS::RDS::DBProxyEndpoint. | March 11, 2021 |
Updated resource | The following resource was updated:
AWS::StepFunctions::StateMachine.
-
AWS::StepFunctions::StateMachine
-
The AWS::StepFunctions::StateMachine has a new Definition property that lets
you define your state machine in the language of your template file.
| March 10, 2021 |
Updated resource | The following resource was updated: AWS::AutoScaling::AutoScalingGroup. | March 8, 2021 |
Updated resource | The following new resource was updated: AWS::SecretsManager::Secret
- AWS::SecretsManager::Secret
-
Use the ReplicaRegions property to replicate secrets into
additional Regions for resiliency and disaster recovery.
| March 4, 2021 |
New resource | The following resource was added: AWS::Events::ApiDestination.
-
AWS::Events::ApiDestination
-
Use the ApiDestination resource to create an API destination. An
API destination defines an HTTP invocation endpoint to use as the target of a
rule.
| March 4, 2021 |
New resource | The following resource was added: AWS::Events::Connection.
-
AWS::Events::Connection
-
Use the Connection resource to create a connection to use with Api
destinations. A connection defines the authorization method and parameters to use to
connect to the HTTP invocation endpoint for an Api destination.
| March 4, 2021 |
New resource | The following resources were added: AWS::IoT::AccountAuditConfiguration,AWS::IoT::CustomMetric, AWS::IoT::Dimension, AWS::IoT::MitigationAction, AWS::IoT::ScheduledAudit, AWS::IoT::SecurityProfile. | March 4, 2021 |
New resource | The following resources were added: AWS::S3Outposts::Bucket, AWS::S3Outposts::BucketPolicy,
AWS::S3Outposts::AccessPoint, and AWS::S3Outposts::EndPoint | March 4, 2021 |
Updated resource | The following resources were updated: AWS::IoTSiteWise::AccessPolicy and AWS::IoTSiteWise::Portal. | March 2, 2021 |
Updated resource | The following resource was updated: AWS::IoTSiteWise::AssetModel. | March 1, 2021 |
Updated resource | The following resource was updated: AWS::DataBrew::Dataset Format. | February 25, 2021 |
Updated resource | The following resource was updated: AWS::ManagedBlockchain::Node | February 25, 2021 |
Updated resource | The following resource was updated: AWS::SageMaker::Model
-
AWS::SageMaker::Model
-
Use the InferenceExecutionConfig property to specify
details of how containers in a multi-container endpoint are
called.
| February 25, 2021 |
New resources | The following resource was added: AWS::EC2::TransitGatewayConnect. | February 25, 2021 |
New resources | The following resources were added: AWS::EMR::Studio and AWS::EMR::StudioSessionMapping.
-
AWS::EMR::Studio
-
Use the
AWS::EMR::Studio resource to create a new Amazon EMR Studio.
-
AWS::EMR::StudioSessionMapping
-
Use the
AWS::EMR::StudioSessionMapping resource to assign a user or group to an Amazon EMR Studio, and apply an IAM session policy to refine Studio permissions for that user or group.
| February 25, 2021 |
New resources | The following resources were added: AWS::SageMaker::Image,
AWS::SageMaker::ImageVersion. | February 25, 2021 |
New resource | The following resource was added: AWS::EKS::Addon.
-
AWS::EKS::Addon
-
Use the AWS::EKS::Addon resource to create an Amazon EKS add-on.
| February 25, 2021 |
New resource | The following resources were added: AWS::IAM::OIDCProvider, AWS::IAM::SAMLProvider, AWS::IAM::ServerCertificate, and AWS::IAM::VirtualMFADevice.
-
AWS::IAM::OIDCProvider
-
Use the AWS::IAM::OIDCProvider resource to create an IAM entity to describe an identity provider (IdP) that supports OpenID Connect (OIDC).
-
AWS::IAM::SAMLProvider
-
Use the AWS::IAM::SAMLProvider resource to create an IAM resource that describes an identity provider (IdP) that supports SAML
2.0.
-
AWS::IAM::ServerCertificate
-
Use the AWS::IAM::ServerCertificate resource to retrieve information about the specified server certificate stored in IAM.
-
AWS::IAM::VirtualMFADevice
-
Use the AWS::IAM::VirtualMFADevice resource to create a new virtual MFA device for the AWS account.
| February 25, 2021 |
New attributes | The following parameters were added for 10DLC support: EntityId, TemplateId,
OriginationNumber. | February 24, 2021 |
Updated resource | The following resource was updated: AWS::DynamoDB::Table
-
AWS::DynamoDB::Table
-
Use the ContributorInsightsSpecification property to
enable or disable CloudWatch Contributor Insights on a
table or global secondary index.
| February 22, 2021 |
Updated resource | The following resource was updated: AWS::CodeCommit::Repository Code
-
AWS::CodeCommit::Repository Code
-
The behavior of the
BranchName property on update has changed to be consistent with all other aspects of AWS:CodeCommit:Repository Code. All properties of
AWS:CodeCommit:Repository Code are ignored on update, as they only apply to initial resource creation.
| February 19, 2021 |
Updated resources | The following resources were updated: AWS::AppMesh::VirtualNode and
AWS::AppMesh::VirtualGateway
-
AWS::AppMesh::VirtualNode
-
Use the ClientTlsCertificate property to represent the
client's certificate.
Use the SubjectAlternativeNames property to represent the
subject alternative names secured by the certificate.
Use the TlsValidationContextSdsTrust property to represent a
Transport Layer Security (TLS) Secret Discovery Service validation context
trust.
Use the ListenerTlsValidationContextTrust property to
represent a listener's Transport Layer Security (TLS) validation context
trust.
Use the SubjectAlternativeNameMatchers property to represent
the methods by which a subject alternative name on a peer Transport Layer
Security (TLS) certificate can be matched.
Use the ListenerTlsSdsCertificate property to represent the
listener's Secret Discovery Service certificate.
Use the ListenerTlsValidationContext property to represent a
listener's Transport Layer Security (TLS) validation context.
-
AWS::AppMesh::VirtualGateway
-
Use the VirtualGatewayListenerTlsValidationContextTrust
property to specify validation context trust.
Use the VirtualGatewayTlsValidationContextSdsTrust property
to represent a virtual gateway's listener's Transport Layer Security (TLS)
Secret Discovery Service validation context trust.
Use the SubjectAlternativeNames property represents the
subject alternative names secured by the certificate.
Use the VirtualGatewayListenerTlsSdsCertificate property to
represent the virtual gateway's listener's Secret Discovery Service
certificate.
Use the VirtualGatewayClientTlsCertificate property to
represent the virtual gateway's client's Transport Layer Security (TLS)
certificate.
Use the VirtualGatewayListenerTlsValidationContext property
to represent a virtual gateway's listener's Transport Layer Security (TLS)
validation context.
Use the SubjectAlternativeNameMatchers property to represent
the methods by which a subject alternative name on a peer Transport Layer
Security (TLS) certificate can be matched.
| February 18, 2021 |
Updated resources | The following resource was updated: AWS::IoTWireless::ServiceProfile
-
AWS::IoTWireless::ServiceProfile
-
Use the attributes of LoRaWANGetServiceProfileInfo with LoRaWANServiceProfile
instead as ReadOnly properties that you can return using Fn::GetAtt.
| February 18, 2021 |
Updated resources | The following resources were updated: AWS::Kendra::DataSource,
AWS::Kendra::Index.
- AWS::Kendra::DataSource
-
Use the ConfluenceConfiguration
property of the resource to specify
configuration information for indexing a
Confluence data source.
- AWS::Kendra::DataSource
-
Use the GoogleDriveConfiguration
property of the resource to specify
configuration information for indexing a Google
Drive data source.
- AWS::Kendra::Index
-
Use the UserContextPolicy and
UserTokenConfiguration
properties of the resource to specify how Amazon
Kendra uses user tokens for access to the
index.
| February 18, 2021 |
Updated resource | The following resource was updated: AWS::DataBrew::Job JobSample. | February 18, 2021 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem | February 18, 2021 |
Updated resource | The following resource was updated: AWS::IoTAnalytics::Dataset.
-
AWS::IoTAnalytics::Dataset
-
Added the following properties: LateDataRule and LateDataRuleConfiguration.
You can use these properties to specify a late data rule for your dataset. The late data rule enables AWS IoT Analytics to send notifications
through Amazon CloudWatch when late data arrives.
For more information,
see Getting late data notifications
in the AWS IoT Analytics User Guide.
| February 18, 2021 |
AWS CloudFormation StackSets now supports delegated administrator with AWS Organizations | In addition to the organization's management account, delegated administrator
accounts can create and manage stack sets with service-managed permissions for their
organization. For more information, see Register a delegated administrator and Create a stack set with service-managed permissions. | February 18, 2021 |
New resources | The following resources were added: AWS::EC2::TransitGatewayMulticastDomain,
AWS::EC2::TransitGatewayMulticastDomainAssociation,
AWS::EC2::TransitGatewayMulticastGroupMembers and
AWS::EC2::TransitGatewayMulticastGroupSource. | February 12, 2021 |
Updated resources | The following resources were updated: AWS::IoTWireless::Destination, AWS::IoTWireless::DeviceProfile, AWS::IoTWireless::ServiceProfile, AWS::IoTWireless::WirelessDevice, and AWS::IoTWireless::WirelessGateway.
-
AWS::IoTWireless::Destination
-
Use the ExpressionType property of the resource to specify whether to
use a new value MqttTopic or to use RuleName. In addition,
the property descriptions now list any maximum values, minimum values, and patterns.
-
AWS::IoTWireless::DeviceProfile
-
Use the new LoRaWAN property which is a renaming of the LoRaWANDeviceProfile
property. The property type has not changed from LoRaWANDeviceProfile. In addition,
the property descriptions now list any maximum values, minimum values, and patterns.
-
AWS::IoTWireless::ServiceProfile
-
Use the new LoRaWAN property which is a renaming of the LoRaWANServiceProfile
property. The property type has not changed from LoRaWANServiceProfile. In addition,
the property descriptions now list any maximum values, minimum values, and patterns.
-
AWS::IoTWireless::WirelessDevice
-
Use the new LoRaWAN property which is a renaming of the LoRaWANDevice
property. The property type has not changed from LoRaWANDevice. In addition,
the property descriptions now list any maximum values, minimum values, and patterns.
-
AWS::IoTWireless::WirelessGateway
-
Use the new LoRaWAN property which is a renaming of the LoRaWANGateway
property. The property type has not changed from LoRaWANGateway. In addition,
the property descriptions now list any maximum values, minimum values, and patterns.
| February 11, 2021 |
Updated resource | The following resource was updated: AWS::DMS::Endpoint. | February 11, 2021 |
Updated resource | The following resource was updated: AWS::GroundStation::Config. | February 11, 2021 |
New resources | The following resources were added: AWS::CloudFormation::ResourceDefaultVersion and
AWS::CloudFormation::ResourceVersion.
-
AWS::CloudFormation::ResourceDefaultVersion
-
Use the AWS::CloudFormation::ResourceDefaultVersion resource to
specify the default resource version to be used in CloudFormation
operations.
-
AWS::CloudFormation::ResourceVersion
-
Use the AWS::CloudFormation::ResourceVersion resource to specify a
resource version with the CloudFormation service, making it available for
use in CloudFormation operations.
| February 11, 2021 |
New resources | The following resources were added: AWS::SageMaker::App,
AWS::SageMaker::AppImageConfig, AWS::SageMaker::Domain,
AWS::SageMaker::UserProfile.
-
AWS::SageMaker::App
-
Use the AWS::SageMaker::App resource to create a
running app for a user profile in SageMaker Studio.
-
AWS::SageMaker::AppImageConfig
-
Use the AWS::SageMaker::AppImageConfig resource to
create a configuration for running a SageMaker image as a
KernelGateway app in SageMaker Studio.
-
AWS::SageMaker::Domain
-
Use the AWS::SageMaker::Domain resource to create a
Domain used by SageMaker Studio.
-
AWS::SageMaker::UserProfile
-
Use the AWS::SageMaker::UserProfile resource to
create a user profile used by SageMaker Studio.
| February 11, 2021 |
New resources | The following resources were added: AWS::ServiceCatalog::ServiceAction and AWS::ServiceCatalog::ServiceActionAssociation. | February 11, 2021 |
AWS CloudFormation StackSets Region availability | AWS CloudFormation StackSets is now available in the Asia Pacific (Osaka)
Region. For more information, see Working with
AWS CloudFormation StackSets. | February 10, 2021 |
Updated resource | The following resource was updated: AWS::IoTAnalytics::Datastore.
-
AWS::IoTAnalytics::Datastore
-
Added the following properties: Column, FileFormatConfiguration, JsonConfiguration,
ParquetConfiguration, and SchemaDefinition.
You can use these properties to specify JSON or Parquet file format for your data store.
For more information, see File formats
in the AWS IoT Analytics User Guide.
| February 5, 2021 |
Updated resources | The following resources were updated: AWS::ECR::ReplicationConfiguration | February 4, 2021 |
Updated resources | The following resources were updated: AWS::IoTWireless::DeviceProfile, AWS::IoTWireless::ServiceProfile, AWS::IoTWireless::WirelessDevice, and AWS::IoTWireless::WirelessGateway. | February 4, 2021 |
Updated resources | The following resources were updated: AWS::Cassandra::Keyspace and
AWS::Cassandra::Table.
-
AWS::Cassandra::Keyspace.Tags
-
Use the AWS::Cassandra::Keyspace.Tags property to add
tags to new or existing keyspaces in Amazon Keyspaces (for Apache
Cassandra).
-
AWS::Cassandra::Table.Tags
-
Use the AWS::Cassandra::Table.Tags property to create
and add tags to new or existing tables in Amazon Keyspaces (for Apache
Cassandra).
-
AWS::Cassandra::Table.PointInTimeRecoveryEnabled
-
Use the
AWS::Cassandra::Table.PointInTimeRecoveryEnabled
property to enable point-in-time recovery in Amazon Keyspaces (for
Apache Cassandra).
| February 4, 2021 |
Updated resource | The following resource was updated: AWS::DataBrew::Job.
-
AWS::DataBrew::Job
-
Use the CsvOutputOptions property to define how
DataBrew will write a CSV file.
Use the OutputFormatOptions property to define the
structure of CSV job output.
| February 4, 2021 |
Updated resource | The following resource was updated: AWS::ElastiCache::GlobalReplicationGroup.
-
AWS::ElastiCache::GlobalReplicationGroup
-
Consists of a primary cluster that accepts writes and an associated secondary cluster that resides in a different Region. The secondary cluster accepts only reads. The primary cluster automatically replicates updates to the secondary cluster.
| February 4, 2021 |
New resource | Added the following resource: AWS::ImageBuilder::ContainerRecipe. | February 4, 2021 |
Updated resource | The following resource was updated: AWS::ApiGatewayV2::Stage. | January 28, 2021 |
New resource | The following resource was added: AWS::LookoutVision:Project. | January 28, 2021 |
Updated resource | The following resource was updated: AWS::ACMPCA::Certificate.
-
AWS::ACMPCA::Certificate
-
Use the ApiPassthrough property to include parameters
in certificates during issuance.
Use the ValidityNotBefore property to customize the
start of certificate validity.
| January 21, 2021 |
Updated resource | The following resource was updated:
AWS::MediaConnect::FlowVpcInterface. | January 21, 2021 |
Updated resource | The following resources were updated: AWS::SageMaker::Device,
AWS::SageMaker::DeviceFleet, and AWS::SageMaker::Model.
-
AWS::SageMaker::Device
-
Use the DeviceFleetName property to get the name of
the fleet the device belongs to.
Use the Device property to make the edge device you
want to create.
Use the Tags property to get the tags registered to a
specific device.
Use the Device.Device property/resource to get
information about a particular device.
Use the Device.Device.Description property/resource
to get a description of the device.
Use the Device.Device.DeviceName property/resource to
get the device name.
Use the Device.Device.IotThingName property/resource
to get the IoT object name.
-
AWS::SageMaker::DeviceFleet
-
Use the DeviceFleet.Description property to get
information about a fleet.
Use the OutputConfig property to get the output
configuration for the fleet.
Use the RoleArn property to get the ARN of the IoT
thing.
Use the Tags property to get the tags registered to a
specific fleet.
Use the EdgeOutputConfig.KmsKeyId property/resource
to set the KMS key ID.
Use the EdgeOutputConfig.S3OutputLocation
property/resource to set the S3 bucket URI.
-
AWS::SageMaker::Model
-
Use the MultiModelConfiguration property to specify
configuration details for a multi-model endpoint.
| January 21, 2021 |
New resources | The following resource was added: AWS::SageMaker::Project. | January 21, 2021 |
Updated resource | The following resource was updated with examples: AWS::S3::AccessPoint
-
Access
Points
-
Use the AWS::S3::AccessPoint resource to specify an S3 access
point.
| January 20, 2021 |
Updated resource | The following resource was updated: AWS::MSK::Cluster | January 15, 2021 |
New resource | The AWS::EMRContainers::VirtualCluster resource was added. | January 14, 2021 |
New resource | The following resource was added: AWS::QuickSight::DataSet and
AWS::QuickSight::DataSource. | January 14, 2021 |
New resource | The following resource was added: AWS::QuickSight::Analysis,
AWS::QuickSight::Dashboard, AWS::QuickSight::Template, and
AWS::QuickSight::Theme.
-
AWS::QuickSight::Analysis
-
Use the AWS::QuickSight::Analysis resource to
create an analysis in Amazon QuickSight.
-
AWS::QuickSight::Dashboard
-
Use the AWS::QuickSight::Dashboard resource to
create a dashboard from a template in Amazon QuickSight.
-
AWS::QuickSight::Template
-
Use the AWS::QuickSight::Template resource to
create a template from an existing Amazon QuickSight analysis or
template.
-
AWS::QuickSight::Theme
-
Use the AWS::QuickSight::Theme resource to
create a theme in Amazon QuickSight.
| January 14, 2021 |
New resource | The following new resources were added:
AWS::ServiceCatalogAppRegistry::Application, AWS::ServiceCatalogAppRegistry::AttributeGroup, AWS::ServiceCatalogAppRegistry::AttributeGroupAssociation, AWS::ServiceCatalogAppRegistry::ResourceAssociation | January 14, 2021 |
Updates to resource | The following resource was updated:
AWS::SSO::InstanceAccessControlAttributeConfiguration. | January 7, 2021 |
Updated resources | The following resources were updated: AWS::IoTWireless::Destination, AWS::IoTWireless::DeviceProfile, AWS::IoTWireless::ServiceProfile, AWS::IoTWireless::WirelessDevice, and AWS::IoTWireless::WirelessGateway. | January 7, 2021 |
Updated resource | The following resource was updated: AWS::ApiGatewayV2::Integration. | January 7, 2021 |
Updated resource | The following resource was updated: AWS::EC2::LaunchTemplate | January 7, 2021 |
Updated resource | The following resources were updated: AWS::FMS::Policy.
-
AWS::FMS::Policy
-
The AWS::FMS::Policy resource now allows you to manage AWS Network Firewall policies.
| January 7, 2021 |
New resources | The following resources were added: AWS::MediaConnect::Flow,
AWS::MediaConnect::FlowEntitlement,
AWS::MediaConnect::FlowOutput,
AWS::MediaConnect::FlowSource, and
AWS::MediaConnect::FlowVpcInterface.
-
AWS::MediaConnect::Flow
-
Use the AWS::MediaConnect::Flow resource to create a
connection between one or more video sources and one or more
outputs.
-
AWS::MediaConnect::FlowEntitlement
-
Use the AWS::MediaConnect::FlowEntitlement resource
to grant permission to another AWS account to allow
access to the content in a specific AWS Elemental
MediaConnect flow.
-
AWS::MediaConnect::FlowOutput
-
Use the AWS::MediaConnect::FlowOutput resource to
define the destination address, protocol, and port that you want
MediaConnect to send the ingested video to.
-
AWS::MediaConnect::FlowSource
-
Use the AWS::MediaConnect::FlowSource resource to
define where the external video content comes from.
-
AWS::MediaConnect::FlowVpcInterface
-
Use the AWS::MediaConnect::FlowVpcInterface resource
to create a connection between your MediaConnect flow and a virtual
private cloud (VPC) that you created using the Amazon Virtual
Private Cloud service.
| January 7, 2021 |
New resources | The following resources were added: AWS::Route53::DNSSEC and AWS::Route53::KeySigningKey.
-
AWS::Route53::DNSSEC
-
Use the AWS::Route53::DNSSEC resource to enable DNSSEC signing for a hosted zone.
-
AWS::Route53::KeySigningKey
-
Use the AWS::Route53::KeySigningKey resource to specify configuration settings for a key-signing key (KSK) that's
associated with a hosted zone.
| January 7, 2021 |
New resource | The following resource was added: AWS::Route53Resolver::ResolverDNSSECConfig. | January 7, 2021 |
New Resources | The following resources were added: AWS::DataSync::Agent, AWS::DataSync::LocationEFS,
AWS::DataSync::LocationFSxWindows, AWS::DataSync::LocationNFS,
AWS::DataSync::LocationObjectStorage, AWS::DataSync::LocationS3,
AWS::DataSync::LocationSMB, and AWS::DataSync::Task. | January 7, 2021 |
Updated resource | The following resource was updated: AWS::Glue::Table
-
AWS::Glue::Table
-
Use the SchemaReference property to specify an object that references a schema stored in the AWS Glue Schema Registry.
Use the TableInput.TargetTable property to specify a TableIdentifier structure that describes a target table for resource linking.
Use the Table.TableIdentifier property to specify a target table for resource linking.
| December 22, 2020 |
Updated resource | The following resource was updated: AWS::Glue::Partition
-
AWS::Glue::Partition
-
Use the SchemaReference property to specify an object that references a schema stored in the AWS Glue Schema Registry.
| December 22, 2020 |
Updated resource | The following resource was updated: AWS::Glue::Database
-
AWS::Glue::Database
-
Use the
DatabaseInput.TargetDatabase property to specify a TableIdentifier structure that describes a target table for resource linking.
Use the
Database.DatabaseIdentifier property to specify a target database for resource linking.
| December 22, 2020 |
Updated resource | The following resource was updated: AWS::Glue::MLTransform
-
AWS::Glue::MLTransform
-
Use the
TransformEncryption property to specify the encryption-at-rest settings of the transform that apply to accessing user data.
Use the
MLUserDataEncryption property to specify the encryption mode and customer-provided KMS key ID.
| December 22, 2020 |
New resource | The following resource was added: AWS::MWAA::Environment
-
AWS::MWAA::Environment
-
Use the AWS::MWAA::Environment resource to create an Amazon Managed Workflows for Apache Airflow (MWAA) environment.
| December 21, 2020 |
Updated resources | The following resources were updated: AWS::EC2::Instance, AWS::EC2::SpotFleet,
AWS::EC2::Volume. | December 18, 2020 |
Updated resources | The following resources were updated: AWS::ECS::Service.
-
AWS::ECS::Service
-
Use the DeploymentCircuitBreaker property to enable
the deployment circuit breaker for a service.
| December 18, 2020 |
Updated resources | The following resources were updated: AWS::ElastiCache::User AWS::ElastiCache::UserGroup and AWS::ElastiCache::ReplicationGroup. | December 18, 2020 |
Updated resource | The following resource was updated: AWS::Batch::JobDefinition
- AWS::Batch::JobDefinition
-
Use the PlatformCapabilities property to specify whether the job requires EC2 or
FARGATE resources.
Use the PropagateTags property to specify whether to propagate tags from the job definition to
the corresponding Amazon ECS task.
In the ContainerProperties property type:
-
Use the FargatePlatformConfiguration property to specify the Fargate platform version to use
for jobs running on Fargate resources.
-
Use the NetworkConfiguration property to specify the network configuration for jobs running
on Fargate resources.
- AWS::Batch::JobDefinition
-
In the ContainerProperties property type, use the FargatePlatformConfiguration property to define the version of the Fargate platform used for the
job.
| December 18, 2020 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem | December 18, 2020 |
Updated resource | The following resources were updated: AWS::S3::Bucket
-
SourceSelectionCriteria
-
Use the ReplicaModifications property in AWS::S3::Bucket
SourceSelectionCriteria to filter modifications on replicas.
-
Amazon S3 Bucket
Keys
-
Use the BucketKeyEnabled property to specify an S3 Bucket Key with
default encryption using AWS Key Management Service.
| December 18, 2020 |
New resources | The following resources were added: AWS::CloudFormation::ModuleDefaultVersion and
AWS::CloudFormation::ModuleVersion.
-
AWS::CloudFormation::ModuleDefaultVersion
-
Use the AWS::CloudFormation::ModuleDefaultVersion resource to
specify the default version of a module, which will be used in CloudFormation operations for this account and Region.
-
AWS::CloudFormation::ModuleVersion
-
Use the AWS::CloudFormation::ModuleVersion resource to register the
specified version of the module with the CloudFormation service, making it
available for use in CloudFormation templates in this account and
Region.
| December 18, 2020 |
New resources | The following resources were added: AWS::DevOpsGuru::NotificationChannel, AWS::DevOpsGuru::ResourceCollection
-
AWS::DevOpsGuru::NotificationChannel
Use the AWS::DevOpsGuru::NotificationChannel resource to add a notification
channel to Amazon DevOps Guru. The notification channel is used to notify you about
important events. For example, the creation of an insight or a change in an
insight's severity. -
AWS::DevOpsGuru::ResourceCollection
Use the AWS::DevOpsGuru::ResourceCollection resource to specify a collection of resources in your account that you want Amazon DevOps Guru to analyze. The
specified resources are analyzed to generate insights that contain recommendations, related metrics, and operational data to help you improve the performance of your operational solutions.
| December 18, 2020 |
New resources | The following resources were added: AWS::EC2::NetworkInsightsPath and
AWS::EC2::NetworkInsightsAnalysis. | December 18, 2020 |
New resources | The following resources were added: AWS::ECR::PublicRepository | December 18, 2020 |
New resources | The following resources were added: AWS::LicenseManager::Grant and AWS::LicenseManager::License. | December 18, 2020 |
New resources | The following resources were added: AWS::SageMaker::DataQualityJobDefinition,
AWS::SageMaker::Device, AWS::SageMaker::DeviceFleet,
AWS::SageMaker::ModelBiasJobDefinition,
AWS::SageMaker::ModelExplainabilityJobDefinition,
AWS::SageMaker::ModelQualityJobDefinition, AWS::SageMaker::ModelPackageGroup, and
AWS::SageMaker::Pipeline.
-
AWS::SageMaker::DataQualityJobDefinition
-
Use the AWS::SageMaker::DataQualityJobDefinition
resource to create a monitoring job that monitors drift in data
quality.
-
AWS::SageMaker::Device
-
Use the AWS::SageMaker::Device resource to register
your Devices against an existing SageMaker Edge Manager DeviceFleet.
Each device must be listed individually in the CFN
specification.
-
AWS::SageMaker::DeviceFleet
-
Use the AWS::SageMaker::DeviceFleet resource to
create a DeviceFleet that manages your SageMaker Edge Manager
Devices. You must register your devices against the
DeviceFleet separately.
-
AWS::SageMaker::ModelBiasJobDefinition
-
Use the AWS::SageMaker::ModelBiasJobDefinition
resource to create a monitoring job that monitors potential bias in
your model.
-
AWS::SageMaker::ModelExplainabilityJobDefinition
-
Use the
AWS::SageMaker::ModelExplainabilityJobDefinition
resource to create a monitoring job that monitors feature
attribution drift in your model.
-
AWS::SageMaker::ModelQualityJobDefinition
-
Use the AWS::SageMaker::ModelQualityJobDefinition
resource to create a monitoring job that monitors quality drift in
your model.
-
AWS::SageMaker::ModelPackageGroup
-
Use the AWS::SageMaker::ModelPackageGroup resource to
create a group of related models.
-
AWS::SageMaker::Pipeline
-
Use the AWS::SageMaker::Pipeline resource to specify
shell scripts that run when you create and/or start a SageMaker
Pipeline. For information about SageMaker Pipelines, see SageMaker Pipelines in the Amazon SageMaker
Developer Guide.
| December 18, 2020 |
New resource | The following resource was added: AWS::AuditManager::Assessment | December 18, 2020 |
New resource | The following resources were added: AWS::GreengrassV2::ComponentVersion. | December 18, 2020 |
New resource | The following resources were added: AWS::IoTSitewise::AccessPolicy, AWS::IoTSiteWise::Dasboard, AWS::IoTSiteWise::Portal, and AWS::IoTSiteWise::Project. | December 18, 2020 |
New resource | The following resources were updated: AWS::Lambda::CreateEventSourceMapping and AWS::Lambda::Function.
-
AWS::Lambda::EventSourceMapping
-
Use the TumblingWindowInSeconds property to set the window size for SQS event sources.
Lambda now supports a Self-Managed Apache Kafka cluster as an event source.
-
AWS::Lambda::Function
-
Lambda now supports functions deployed as container images. Use the
ImageUri
property to specify the container image location.
In the Code
property type, new property ImageUri specifies the image to associate with your Lambda function.
| December 18, 2020 |
New resource | The following resource was added:
AWS::SSO::InstanceAccessControlAttributeConfiguration. | December 18, 2020 |
Updated resource | The following resource was updated to support specifying a capacity type for a
node group: AWS::EKS::Nodegroup.
-
AWS::EKS::Nodegroup
-
Use the CapacityType property to specify whether you
want to use Spot or On-Demand instance types for your node
group.
| December 17, 2020 |
Updated resource | The following resource was updated: AWS::GameLift::MatchmakingConfiguration. | November 24, 2020 |
Updated resource | The following resource was updated: AWS::Lambda::CreateEventSourceMapping. | November 24, 2020 |
Modules | Modules are a way for you to package resource configurations for inclusion across
stack templates, in a transparent, manageable, and repeatable way. Modules can
encapsulate common service configurations and best practices as modular, customizable
building blocks for you to include in your stack templates. For more information, see Using modules to
encapsulate and reuse resource configurations. | November 24, 2020 |
New resource | The following resource was added: AWS::Lambda::CodeSigningConfig. | November 23, 2020 |
Updated resource | The following resource was updated: AWS::CloudFront::Distribution. | November 19, 2020 |
Updated resource | The following resources were updated: AWS::EC2::LaunchTemplate and
AWS::EC2::ClientVpnEndpoint.
-
AWS::EC2::ClientVpnEndpoint
-
Use the ClientConnectOptions property to indicate whether
client connect options are used for Client VPN.
-
AWS::EC2::LaunchTemplate
-
Use the AssociateCarrierIpAddress property to indicates
whether to associate a Carrier IP address with eth0 for a new network
interface.
-
AWS::EC2::LaunchTemplate
-
Use the EnclaveOptions property to indicate whether the
instance is enabled for AWS Nitro Enclaves.
-
AWS::EC2::LaunchTemplate
-
Use the NetworkCardIndex property to specify the network
card index.
| November 19, 2020 |
Updated resource | The following resource was updated: AWS::Events::EventBusPolicy.
-
AWS::Events::EventBusPolicy
-
Added the Statement property. Use the Statement
property to add a statement to the policy attached to an event bus.
| November 19, 2020 |
Updated resource | The following resource was updated: AWS::KMS::Key.
-
AWS::KMS::Key
-
Added support for asymmetric KMS keys, including the KeySpec property
and the SIGN_VERIFY value for the KeyUsage property.
| November 19, 2020 |
New resources | The following resources were added: AWS::CloudFront::KeyGroup and AWS::CloudFront::PublicKey. | November 19, 2020 |
New resource | The following resource was added: AWS::Glue::Registry
-
AWS::Glue::Registry
-
Use the
AWS::Glue::Registry resource to manage registries in the AWS Glue Schema Registry.
| November 19, 2020 |
New resource | The following resource was added: AWS::Glue::Schema
-
AWS::Glue::Schema
-
Use the
AWS::Glue::Schema resource to manage schemas in the AWS Glue Schema Registry.
| November 19, 2020 |
New resource | The following resource was added: AWS::Glue::SchemaVersion
-
AWS::Glue::SchemaVersion
-
Use the
AWS::Glue::SchemaVersion resource to manage schema versions in the AWS Glue Schema Registry.
| November 19, 2020 |
New resource | The following resource was added: AWS::Glue::SchemaVersionMetadata | November 19, 2020 |
New resource | The following resource is new: AWS::IoT::TopicRuleDestination | November 19, 2020 |
New resource | The following resources were added: AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::LoggingConfiguration, and AWS::NetworkFirewall::RuleGroup
-
AWS::NetworkFirewall::Firewall
-
Use the AWS::NetworkFirewall::Firewall resource to specify stateful, managed, network firewall and intrusion detection and prevention for your VPCs in Amazon VPC.
-
AWS::NetworkFirewall::FirewallPolicy
-
Use the AWS::NetworkFirewall::FirewallPolicy resource to specify the stateless and stateful network traffic filtering behavior for your AWS::NetworkFirewall::Firewall.
-
AWS::NetworkFirewall::LoggingConfiguration
-
Use the AWS::NetworkFirewall::LoggingConfiguration resource to specify the destinations and logging options for an AWS::NetworkFirewall::Firewall.
-
AWS::NetworkFirewall::RuleGroup
-
Use the AWS::NetworkFirewall::RuleGroup resource to specify a reusable collection of stateless or stateful network traffic filtering rules for use in your AWS::NetworkFirewall::FirewallPolicy.
| November 19, 2020 |
New resource | The following resource was added: AWS::S3::StorageLens
-
S3 Storage
Lens
-
Use the AWS::S3::StorageLens resource to create a S3 Storage Lens
configuration in the Amazon Simple Storage Service.
| November 19, 2020 |
Change sets for nested stacks | With change sets for nested stacks you can preview the changes to your application
and infrastructure resources across the entire nested stack hierarchy and proceed
with updates when you've confirmed that all the changes are as intended. For more information, see Change sets for nested stacks. | November 18, 2020 |
Updated resources | The following resources were updated: AWS::AppMesh::VirtualNode and
AWS::AppMesh::VirtualGateway
-
AWS::AppMesh::VirtualNode
-
Use the ConnectionPool property to specify the type of
connection pool for the listener.
Use the VirtualNodeHttp2ConnectionPool property to specify
an http2 type of connection pool.
Use the VirtualNodeGrpcConnectionPool property to specify a
grpc type of connection pool.
Use the VirtualNodeConnectionPool property to specify the
type of virtual node connection pool.
Use the VirtualNodeHttpConnectionPool property to specify an
http type of connection pool.
Use the OutlierDetection property to specify the type of
outlier detection for the listener.
Use the VirtualNodeTcpConnectionPool property to specify an
http2 type of connection pool.
-
AWS::AppMesh::VirtualGateway
-
Use the ConnectionPool property to specify the type of
connection pool for the listener.
Use the VirtualGatewayHttpConnectionPool property to specify
an http type of connection pool.
Use the VirtualGatewayHttp2ConnectionPool property to
specify an http2 type of connection pool.
Use the VirtualGatewayConnectionPool property to specify the
type of virtual gateway connection pool.
Use the VirtualGatewayGrpcConnectionPool property to specify
a grpc type of connection pool.
| November 12, 2020 |
Updated resource | The following resources were updated: AWS::EC2::Route and
AWS::EC2::VPCEndpointService.
-
AWS::EC2::Route
-
Use the VpcEndpointId property to create a route to a
Gateway Load Balancer endpoint.
-
AWS::EC2::VPCEndpointService
-
Use the GatewayLoadBalancerArns property to specify a
Gateway Load Balancer for your VPC endpoint service.
| November 12, 2020 |
Updated resource | The following resource was updated:
AWS::Kendra::DataSource. | November 12, 2020 |
New resources: | This is the first release of AWS Glue DataBrew. | November 12, 2020 |
Updated resource | The following resources were updated: AWS::S3::Bucket | November 9, 2020 |
Updated resources | The following resources were updated: AWS::CodeArtifact::Domain and AWS::CodeArtifact::Repository. | November 5, 2020 |
Updated resource | The following resource was updated: AWS::Batch::JobDefinition | November 5, 2020 |
Updated resource | The following resource was updated: AWS::EC2::Route.
-
AWS::EC2::Route
-
Use the CarrierGatewayId property to create a route to a
carrier gateway.
| November 5, 2020 |
Updated resource | The following resource was updated: AWS::AutoScaling::AutoScalingGroup.
-
CapacityRebalance
-
Use the CapacityRebalance property to indicate whether Capacity
Rebalancing is enabled.
| November 5, 2020 |
Updated resource | The following resource was updated: AWS::Lambda::EventSourceMapping.
-
AWS::Lambda::EventSourceMapping
-
Use the Queues property to specify the Amazon MQ queue to stream to a Lambda function.
Use the Source access configuration property to specify the Secrets Manager secret that stores
your MQ broker credentials.
| November 5, 2020 |
New resource | The following new resource was added: AWS::Events::Archive. | November 5, 2020 |
New resource | The following resource was added: AWS::IoT::DomainConfiguration. | November 5, 2020 |
New resource | The following resource was added: AWS::RDS::GlobalCluster.
-
AWS::RDS::GlobalCluster
-
Use the AWS::RDS::GlobalCluster resource to create or update an Aurora global database cluster.
| November 5, 2020 |
Updated resource | The following resources were updated: AWS::AmazonMQ::Broker, AWS::AmazonMQ::Configuration, AWS::AmazonMQ::ConfigurationAssociation | November 4, 2020 |
Updated resource | The following resource was updated: AWS::GlobalAccelerator::EndpointGroup. | October 29, 2020 |
New resources | The following resources were added: AWS::IVS::Channel, AWS::IVS::StreamKey, and
AWS::IVS::PlaybackKeyPair
-
AWS::IVS::Channel
-
Use the AWS::IVS::Channel resource to specify an
Amazon IVS Channel, which stores configuration information related
to your live stream.
-
AWS::IVS::StreamKey
-
Use the AWS::IVS::StreamKey resource to specify an
Amazon IVS Stream Key, which creates a stream key for the specified
IVS Channel. Use a stream key to initiate a live stream.
-
AWS::IVS::PlaybackKeyPair
-
Use the AWS::IVS::PlaybackKeyPair resource to specify
an Amazon IVS PlaybackKeyPair, which is used to sign and validate a
playback authorization token for a private channel.
| October 29, 2020 |
New resource | The following resources were added: AWS::IoTSitewise::Asset, AWS::IoTSiteWise::AssetModel, and AWS::IoTSiteWise::Gateway. | October 28, 2020 |
Updated resource | The following resource was updated: AWS::AutoScaling::AutoScalingGroup.
-
AWS::AutoScaling::AutoScalingGroup
-
Use the NewInstancesProtectedFromScaleIn property to specify
whether newly launched instances are protected from termination by Amazon EC2 Auto
Scaling when scaling in.
| October 26, 2020 |
Updated resources | The following resources were updated: AWS::Batch::ComputeEnvironment, AWS::Batch::JobDefinition,
and AWS::Batch::JobQueue. | October 22, 2020 |
Updated resource | The following resource was updated: AWS::AppSync::ApiKey. | October 22, 2020 |
Updated resource | The following resource was updated: AWS::CloudFront::Distribution. | October 22, 2020 |
Updated resource | The following resource was updated: AWS::EMR::Cluster.
-
AWS::EMR::Cluster
-
Use the LogEncryptionKmsKeyId property to specify the AWS KMS key used for encrypting log files.
Use the ManagedScalingPolicy property to create a managed scaling policy for an Amazon EMR cluster.
Use the StepConcurrencyLevel property to specify the number of steps that can be executed concurrently.
| October 22, 2020 |
Updated resource | The following resource was updated: AWS::Events::Rule. | October 22, 2020 |
Updated resource | Added a new property, FileFormat, to the FAQ
resource. For more information, see https://docs.aws.amazon.com/kendra/latest/dg/in-creating-faq.html | October 22, 2020 |
Updated resource | The following resource was updated: AWS::KinesisFirehose::DeliveryStream. | October 22, 2020 |
Updated resource | The following resource was updated: AWS::Elasticsearch::Domain.
-
AWS::Elasticsearch::Domain
-
In the ElasticsearchClusterConfig property type:
-
Use the WarmCount property to specify the number of warm nodes in the cluster.
-
Use the WarmEnabled property to specify whether to enable warm storage for the cluster.
-
Use the WarmType property to specify the instance type for the cluster's warm nodes.
| October 22, 2020 |
New resources | The following resources were added: AWS::MediaPackage::Asset, AWS::MediaPackage::Channel, AWS::MediaPackage::OriginEndpoint, AWS::MediaPackage::PackagingConfiguration, and AWS::MediaPackage::PackagingGroup. | October 22, 2020 |
New resource | The following updated resource was added: BlockPublicPolicy | October 22, 2020 |
Increased quotas | The following AWS CloudFormation quotas have been updated.
-
You can now declare a maximum of 200 mappings in your
AWS CloudFormation template.
-
You can now declare a maximum of 200 mapping attributes for
each mapping in your AWS CloudFormation template.
-
You can now declare a maximum of 200 outputs in your
AWS CloudFormation template.
-
You can now declare a maximum of 200 parameters in your
AWS CloudFormation template.
-
You can now declare a maximum of 500 resources in your
AWS CloudFormation template.
-
You can now pass a template body with a maximum size of 1 MB
in an Amazon S3 object.
| October 22, 2020 |
Updated resource | The following resource was updated: AWS::Synthetics::Canary. | October 21, 2020 |
Updated resource | The following resource was updated: AWS::AmazonMQ::Broker.
-
AWS::AmazonMQ::Broker
-
Use the LdapServerMetadata property to to authenticate and authorize connections to a broker.
| October 9, 2020 |
New resources | The following resources were added: AWS::CodeArtifact::Domain and AWS::CodeArtifact::Repository. | October 8, 2020 |
New resources | The following resources were added: AWS::Timestream::Table and AWS::Timestream::Database.
-
AWS::Timestream::Table
-
Use the
AWS::Timestream::Table resource to create a new table in an existing database in Amazon Timestream.
-
AWS::Timestream::Database
-
Use the
AWS::Timestream::Database resource to create a new database in Amazon Timestream.
| October 8, 2020 |
Updated resources | The following resources were updated: AWS::ECS::Service.
-
AWS::ECS::Service
-
Use the CapacityProviderStrategy property to specify
a custom capacity provider strategy when creating a service.
| October 1, 2020 |
Updated resource | The following resource was updated: AWS::Batch::JobDefinition. These property types were added.
- LogConfiguration
-
Use the LogConfiguration property type to specify the log configuration options to send to a custom log driver
for the container.
- Secrets
-
Use the Secrets
property type to specify a secret to expose to the container.
- Tmpfs
-
Use the Tmpfs property
type to specify the details of a tmpfs mount.
These property types were updated.
- ContainerProperties
-
These properties were added.
- ExecutionRoleArn
-
Specifies the execution role to be assumed for the job.
- LogConfiguration
-
Specifies the log configuration for a custom log driver for the job.
- Secrets
-
Specifies the secrets provided for the job.
- LinuxParameters
-
These properties were added.
- InitProcessEnabled
-
Indicates that an init process should be enabled inside the container that forwards signals and reaps
processes.
- MaxSwap
-
Specifies the total amount of swap memory (in MiB) a job can use.
- SharedMemorySize
-
Specifies the size (in MiB) of the /dev/shm volume.
- Swappiness
-
Specifies the job container's memory swappiness behavior.
- Tmpfs
-
Specifies the details of the job's tmpfs mount.
| October 1, 2020 |
Updated resource | The following resource was updated: AWS::CloudFront::CachePolicy. | October 1, 2020 |
Updated resource | The following resource was updated to support specifying a custom CIDR for
Kubernetes service IP address assignment: AWS::EKS::Cluster. | October 1, 2020 |
New resource | The following resource was added: AWS::WorkSpaces::ConnectionAlias
-
AWS::WorkSpaces::ConnectionAlias
-
Use the AWS::WorkSpaces::ConnectionAlias resource to specify a connection alias. Connection aliases are used for cross-Region redirection.
| October 1, 2020 |
Drift detection for private resources | CloudFormation supports drift detection operations on an expanded list of AWS
resources, as well as private resources that are defined as provisonable. In addition to the resources that previously supported drift detection,
CloudFormation now supports drift detection on all resources defined as
provisionable in the CloudFormation registry. For more information, see Resources that support import and drift detection operations. | October 1, 2020 |
Updated resource | The following resource was updated: AWS::MSK::Cluster
-
AWS::MSK::Cluster
-
Adding support for SASL/Scram (username- and password-based client
authentication.)
| September 24, 2020 |
Updated resource | The following resource was updated: AWS::ApiGateway::DomainName. | September 17, 2020 |
Updated resource | The following resource was updated: AWS::ApiGatewayV2::DomainName. | September 17, 2020 |
Updated resource | The following resource was updated: AWS::ApiGatewayV2::Api.
-
AWS::ApiGatewayV2::Api
-
Use the AWS::ApiGatewayV2::Api resource to disable the default endpoint for an HTTP API.
| September 17, 2020 |
New resources | The following resources were added: AWS::AppFlow::Flow and
AWS::AppFlow::ConnectorProfile. | September 17, 2020 |
New resource | The following resource was added: AWS::CloudFormation::StackSet.
-
AWS::CloudFormation::StackSet
-
Use the AWS::CloudFormation::StackSet resource to provision stacks
into AWS accounts and across Regions by using a single CloudFormation template.
| September 17, 2020 |
Updated resource | The following resource was updated: AWS::ApiGatewayV2::Authorizer. | September 10, 2020 |
Updated resource | The following resource was updated: AWS::CodeBuild::ReportGroup
-
AWS::CodeBuild::ReportGroup
-
Use the DeleteReports property to specify if any reports that
belong to the report group should be deleted when the report group
is deleted.
| September 10, 2020 |
Updated resource | The following resource was updated:
AWS::StepFunctions::StateMachine.
-
AWS::StepFunctions::StateMachine
-
The AWS::StepFunctions::StateMachine now supports X-Ray
tracing. You can use the TracingConfiguration property to
enable X-Ray tracing for your state machines.
| September 10, 2020 |
New resources | This is the first release of Amazon Kendra in AWS
CloudFormation. | September 10, 2020 |
New resources | The following resources were added: AWS::SSO::Assignment, AWS::SSO::PermissionSet.
-
AWS::SSO::Assignment
-
Use the AWS::SSO::Assignment resource to assign access to a
principal for a specified AWS account using a specified permission
set.
-
AWS::SSO::PermissionSet
-
Use the AWS::SSO::PermissionSet resource to create a
permission set within a specified IAM Identity Center instance.
| September 10, 2020 |
Update resource | The following resource was updated: AWS::CloudFront::Distribution. | September 3, 2020 |
New resources | The following resources were added: AWS::CloudFront::CachePolicy, AWS::CloudFront::OriginRequestPolicy, and AWS::CloudFront::RealtimeLogConfig. | September 3, 2020 |
New resource | The following resource was added: AWS::CodeGuruReviewer::RepositoryAssociation | September 3, 2020 |
New resource | The following resource was added: AWS::EKS::FargateProfile. | September 3, 2020 |
Updated resource | The following resource was updated: AWS::CodeCommit::Repository Code | August 31, 2020 |
Updated resource | The following resource was updated: AWS::ServiceCatalog::CloudFormationProvisionedProduct. | August 27, 2020 |
New resources | The following resources were added: AWS::GameLift::GameServerGroup
-
AWS::GameLift::GameServerGroup
-
Use the AWS::GameLift::GameServerGroup resource to
create a GameLift FleetIQ game server group to run low-cost game hosting on your Amazon EC2 instances.
| August 27, 2020 |
New resources | The following resources were added: AWS::Route53Resolver::ResolverQueryLoggingConfig and AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation. | August 27, 2020 |
Updated resource | The following resource was updated: AWS::KMS::Key. | August 26, 2020 |
Updated resource | The following resource was updated to support use of a launch template:
AWS::EKS::Nodegroup.
-
AWS::EKS::Nodegroup
-
Use the LaunchTemplate property to specify a launch
template specification that can be used to deploy or update a
managed node group. If you use a launch template to deploy a node
group, some settings that you normally set for a node group must be
moved into the launch template. The text for affected settings has
been updated to note that.
| August 20, 2020 |
Updated resources | The following resources were updated: AWS::ECS::TaskDefinition.
-
AWS::ECS::TaskDefinition
-
Use the EnvironmentFiles property to specify a list
of files containing the environment variables to pass to a
container.
| August 13, 2020 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
- AWS::FSx::FileSystem
-
In the LustreConfiguration property type, use
DriveCacheType to specify the type of drive cache
used by PERSISTENT_1 file systems that are provisioned
with HDD storage devices.
| August 13, 2020 |
Updated resource | The following resource was updated: AWS::Lambda::EventSourceMapping. | August 13, 2020 |
New resource | The following resource was added: AWS::ApplicationInsights::Application
| August 13, 2020 |
New resource | The following resource was added: AWS::EC2::CarrierGateway. | August 13, 2020 |
Updated permissions required for registering resource providers | Registering a resource provider in your account now requires you have permission
to access the schema handler package uploaded to an S3 bucket for that resource
provider. For more information, see Registering resource providers in CloudFormation. | August 7, 2020 |
Updated resource | The following resource was updated: AWS::CodeBuild::Project | August 6, 2020 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
- AWS::FSx::FileSystem
-
In the LustreConfiguration property type,
AutoImportPolicyType was changed to
AutoImportPolicy. Use AutoImportPolicy
to configure your Amazon FSx for Lustre file system to automatically
import metadata of objects that are added to or changed in your
linked S3 bucket after file system creation.
| August 6, 2020 |
Updated resources | The following resources were updated: AWS::ECS::TaskDefinition.
-
AWS::ECS::TaskDefinition
-
Use the EFSVolumeConfiguration property to specify an
Amazon Elastic File System file system for task storage.
| July 30, 2020 |
Updated resource | The following resource was updated: AWS::EC2::FlowLog.
-
AWS::EC2::FlowLog
-
Use the LogFormat property to specify the fields for the
flow log record.
Use the MaxAggregationInterval property to specify the
maximum interval for capturing and aggregating flows.
Use the Tags property to specify tags for the flow
log.
| July 30, 2020 |
Updated resource | The following resource was updated: AWS::GroundStation::DataflowEndpointGroup.
-
MTU property
-
The MTU property sets the maximum transmission unit used for a dataflow endpoint.
| July 30, 2020 |
New resources | The following resources were added: AWS::AppMesh::VirtualGateway and
AWS::AppMesh::GatewayRoute
-
AWS::AppMesh::VirtualGateway
-
Use the AWS::AppMesh::VirtualGateway resource to create a
virtual gateway that allows resources outside of your mesh to communicate to
resources that are inside of your mesh.
-
AWS::AppMesh::GatewayRoute
-
Use the AWS::AppMesh::GatewayRoute resource to create a
gateway route that routes traffic to a virtual service.
| July 30, 2020 |
New resources | The following resource was added: AWS::SageMaker::MonitoringSchedule
-
AWS::SageMaker::MonitoringSchedule
-
Use the AWS::SageMaker::MonitoringSchedule resource
to create a monitoring schedule to regularly start an Amazon
SageMaker processing job to monitor the data captured for a
SageMaker endpoint.
| July 30, 2020 |
New property | The following properties were added:
AWS::CodeGuruProfiler::ProfilingGroup.AnomalyDetectionNotificationConfiguration
and AWS::CodeGuruProfiler::ProfilingGroup.Tags. | July 30, 2020 |
Updated resources | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup.
-
AWS::WAFv2::WebACL
-
Rule statements that use IP addresses now support using IP addresses that are forwarded in an HTTP header in the web request, instead of using the IP address that's reported by the web request origin. This option is available for all rule statements that use an IP address: GeoMatchStatement, RateBasedStatement, and IPSetReferenceStatement. The following new properties support this functionality: IPSetForwardedIPConfiguration and ForwardedIPConfiguration.
-
AWS::WAFv2::RuleGroup
-
Rule statements that use IP addresses now support using IP addresses that are forwarded in an HTTP header in the web request, instead of using the IP address that's reported by the web request origin. This option is available for all rule statements that use an IP address: GeoMatchStatement, RateBasedStatement, and IPSetReferenceStatement. The following new properties support this functionality: IPSetForwardedIPConfiguration and ForwardedIPConfiguration.
| July 23, 2020 |
Updated resource | The following resource was updated: AWS::EFS::FileSystem
- AWS::EFS::FileSystem
Use the BackupPolicy property to turn automatic backups on or off for your Amazon EFS file system. | July 23, 2020 |
Updated resource | The following resource was updated: AWS::CloudFront::Distribution. | July 23, 2020 |
Updated resource | The following resource was updated: AWS::CodeStarConnections::Connection | July 23, 2020 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
- AWS::FSx::FileSystem
-
In the LustreConfiguration property type, use
AutoImportPolicyType to configure how FSx imports
new files and file changes in the linked data repository into the
file system.
| July 23, 2020 |
Updated resource | The following resource was updated: EndpointConfig
-
AWS::SageMaker::EndpointConfig
-
Use the CaptureContentTypeHeader property to specify
content types (JSON and/or CSV) to capture.
Use the CaptureOption property to specify whether to
capture input data, output data, or both.
Use the DataCaptureConfig resource/property to
configure how the endpoint captures data.
| July 23, 2020 |
New resource | The following resource was added:
AWS::SecretsManager::RotationSchedule.HostedRotationLambda. | July 23, 2020 |
Updated resource | The following resource was updated: AWS::Amplify::App
-
AWS::Amplify::App
-
Use the EnableBranchAutoDeletion property to automatically
disconnect a branch in the Amplify Console when you delete a branch from your Git
repository.
| July 9, 2020 |
Updated resource | The following resource was updated: AWS::Amplify::Domain
-
AWS::Amplify::Domain
-
Use the AutoSubDomainCreationPatterns property to set branch
patterns for automatic subdomain creation.
Use the AutoSubDomainIAMRole property to specify the required
AWS Identity and Access Management (IAM) service role for the Amazon Resource Name (ARN) for
automatically creating subdomains.
Use the EnableAutoSubDomain property to enable the automated
creation of subdomains for branches.
| July 9, 2020 |
Updated resource | The following resource was updated: AWS::Synthetics::Canary.
-
AWS::Synthetics::Canary
-
The MemoryInMB parameter was added. Also, the RunConfig parameter is no longer
required, and DurationInSeconds is no longer required.
| July 9, 2020 |
Updated resource | The following resource was updated: AWS::ElasticLoadBalancingV2::Listener. | July 9, 2020 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
- AWS::FSx::FileSystem
-
The StorageCapacity property has changed so that an
update requires no interruption.
In the WindowsConfiguration property type, the
ThroughputCapacity property has changed so that an
update requires no interruption.
In the LustreConfiguration property type:
-
Use the DailyAutomaticBackupStartTime
property to specify the time that the daily automatic backup
window starts.
-
Use the CopyTagsToBackups boolean property to
copy file system tags to its backups.
-
Use the AutomaticBackupRetentionDays property
to set the number of days to retain file system
backups.
| July 9, 2020 |
Updated resource | The following resource was updated: AWS::ServiceCatalog::CloudFormationProvisionedProduct. | July 9, 2020 |
New resource | The following resource was added: AWS::Athena::DataCatalog | July 9, 2020 |
New resource | The following resource was added: AWS::EC2::PrefixList. | July 9, 2020 |
New resource | The following resource was added: AWS::QLDB::Stream
-
AWS::QLDB::Stream
-
Use the AWS::QLDB::Stream resource to specify a new journal
stream for a given Amazon Quantum Ledger Database (Amazon QLDB) ledger.
| July 9, 2020 |
New property | The following property was added to AWS::CodeBuild::Project Source: BuildStatusConfig | July 9, 2020 |
New property | The following resource was added:
AWS::CodeGuruProfiler::ProfilingGroup.ComputePlatform. | July 9, 2020 |
Updated resource | The following resource was updated: AWS::Events::Rule.
-
AWS::Events::Rule
-
In the Target property type, use the HttpParameters property to
specify the HTTP parameters to use when the target is a API Gateway REST
endpoint.
| July 6, 2020 |
Updated resource | The following resource was updated: AWS::ApplicationAutoScaling::ScalableTarget. | July 1, 2020 |
New resource | The following resource was added: AWS::AppConfig::HostedConfigurationVersion | June 25, 2020 |
Updated resources | The following resources were updated: AWS::ServiceDiscovery::HttpNamespace,
AWS::ServiceDiscovery::PrivateDnsNamespace, AWS::ServiceDiscovery::PublicDnsNamespace,
AWS::ServiceDiscovery::Service. | June 22, 2020 |
Updated resources | The following resources were updated: AWS::ECS::Cluster.
-
AWS::ECS::Cluster
-
Use the CapacityProviderStrategyItem property to
specify the capacity provider strategy when creating a
cluster.
| June 18, 2020 |
Updated resource | The following resources were updated: AWS::FMS::Policy IEMap.
-
AWS::FMS::Policy IEMap
-
The AWS::FMS::Policy IEMap resource now allows you to specify accounts using AWS Organizations organizational units (OUs),
in addition to account IDs.
| June 18, 2020 |
New resources | The following resources were added: AWS::ECS::CapacityProvider. | June 18, 2020 |
Updated resource | The following resource was updated: AWS::EFS::FileSystem
- AWS::EFS::FileSystem
Use the FileSystemPolicy property to create a new resource policy to control NFS access to your Amazon EFS file system. | June 16, 2020 |
Updated resource | The following resource was updated: AWS::EFS::AccessPoint | June 16, 2020 |
Updated resource | The following resource was updated: AWS::Lambda::Function.
-
AWS::Lambda::Function
-
Use the FileSystemConfigs property to specify connection settings for an Amazon EFS
file system.
| June 16, 2020 |
Updated resources | The following resource was updated: AWS::EC2::Volume.
-
AWS::EC2::Volume
-
Use the OutpostArn property to specify the Amazon Resource
Name (ARN) of the Outpost.
| June 11, 2020 |
Updated resource | The following resource was updated: AWS::CertificateManager::Certificate
-
AWS::CertificateManager::Certificate
-
Use the CertificateAuthorityArn property to specify the
Amazon Resource Name (ARN) of the private certificate authority (CA) that
will be used to issue the certificate.
Use the CertificateTransparencyLoggingPreference property to
enable or disable certificate transparency logging.
| June 11, 2020 |
Updated resource | The following resource was updated: AWS::CloudFront::Distribution.
-
AWS::CloudFront::Distribution
-
In the Origin property type, use the ConnectionAttempts property to specify the number of times that CloudFront attempts to connect to the origin.
In the Origin property type, use the ConnectionTimeout property to specify the number of seconds that CloudFront waits when trying to establish a connection to the origin.
| June 11, 2020 |
Updated resource | The following resource was updated: AWS::ElasticLoadBalancingV2::LoadBalancer. | June 11, 2020 |
Updated resource | The following resource was updated: AWS::ElastiCache::ReplicationGroup. | June 11, 2020 |
New resource | The following resources were added: AWS::RDS::DBProxy and
AWS::RDS::DBProxyTargetGroup.
-
AWS::RDS::DBProxy
-
Use the AWS::RDS::DBProxy resource to create or
update a DB proxy. Use the AWS::RDS::DBProxyTargetGroup
resource to specify a set of RDS DB instances, Aurora DB clusters,
or both that a proxy can connect to.
| June 4, 2020 |
Resource import supports provisionable private resource types | Import operations now support private resource types that are
provisionable; that is, whose provisioning type is either
FULLY_MUTABLE or IMMUTABLE. For more information, see
Resources that support import operations. | June 3, 2020 |
New property | The following property was added:
AWS::CodeGuruProfiler::ProfilingGroup.AgentPermissions. | June 3, 2020 |
Updated resource | The following resource was updated: AWS::EC2::ClientVpnEndpoint | May 28, 2020 |
Updated resource | The following resource was updated: AWS::MSK::Cluster
-
AWS::MSK::Cluster
-
You can now update an existing MSK cluster to a newer version of
Apache Kafka. You can't update it to an older version.
| May 28, 2020 |
Updated resource | The following resource was updated: AWS::CodeBuild::ReportGroup
-
AWS::CodeBuild::ReportGroup
-
Use the tags property to specify the name and value of any
tags that you want supporting AWS services to use for a report
group.
| May 21, 2020 |
Updated resource | The following resource was updated:
AWS::StepFunctions::StateMachine.
-
AWS::StepFunctions::StateMachine
-
The AWS::StepFunctions::StateMachine has two new properties.
You can use the DefinitionS3Location property to reference a
state machine JSON definition file stored in an S3 bucket. You can use the
DefinitionSubstitutions property to pass variables into the
state machine definition file referenced by
DefinitionS3Location.
| May 21, 2020 |
Updated resource | The following resource was updated: AWS::SSM::Parameter
-
AWS::SSM::Parameter
-
When you create a String parameter, you can now specify a DataType value as aws:ec2:image to ensure that the parameter value you enter is a valid Amazon Machine Image (AMI) ID format. Support for AMI ID formats lets you avoid updating all your scripts and templates with a new ID each time the AMI that you want to use in your processes changes. You can create a parameter with the data type aws:ec2:image, and for its value, enter the ID of an AMI. This is the AMI from which you currently want new instances to be created. You then reference this parameter in your templates and commands. When you’re ready to use a different AMI, update the parameter value. Parameter Store validates the new AMI ID, and you don’t need to update your scripts and templates.
| May 21, 2020 |
ECS blue/green deployments through CodeDeploy | You can now use CloudFormation to perform ECS blue/green deployments through
CodeDeploy. Blue/green deployments are a safe deployment strategy provided by AWS
CodeDeploy for minimizing interruptions caused by changing application
versions. For more information, see Performing ECS
blue/green deployments through CodeDeploy using AWS CloudFormation. | May 19, 2020 |
AWS CloudFormation StackSets Region availability | AWS CloudFormation StackSets is now available in the AWS GovCloud (US-West)
Region. | May 18, 2020 |
Updated resource | The following resource was updated: AWS::Synthetics::Canary. | May 14, 2020 |
Updated resource | The following resource was updated: AWS::CodeStarConnections::Connection | May 14, 2020 |
Updated resource | The following resource was updated: AWS::ServiceCatalog::CloudFormationProduct. | May 14, 2020 |
New resources | The following resources were added: AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, and AWS::GlobalAccelerator::Listener | May 14, 2020 |
New resources | The following resources were added: AWS::Macie::CustomDataIdentifier,
AWS::Macie::FindingsFilter, and
AWS::Macie::Session | May 14, 2020 |
Updated resource | The following resource was updated: AWS::IoTEvents::DetectorModel.
-
AWS::IoTEvents::DetectorModel
-
Added the following properties: AssetPropertyTimestamp, AssetPropertyValue, AssetPropertyVariant,
DynamoDB, DynamoDBv2, IotSiteWise, and Payload.
Updated the following property: SetTimer.
| May 7, 2020 |
Updated resource | The following resource was updated: AWS::SSM::Association
-
AWS::SSM::Association
-
Use the WaitForSuccessTimeoutSeconds property to specify the
number of seconds the service should wait for the association status to show
"Success" before proceeding with the stack execution. If the association
status doesn't show "Success" after the specified number of seconds, then
stack creation fails.
| May 7, 2020 |
New resource | The following resource was added: AWS::ImageBuilder::Image. | May 7, 2020 |
Updated resource | The following resource was updated: AWS::Synthetics::Canary. | April 30, 2020 |
New resource | The following resource was added: AWS::EventSchemas::RegistryPolicy. | April 30, 2020 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
- AWS::FSx::FileSystem
-
Use the LustreMountName attribute when mounting an
Amazon FSx for Lustre file system.
| April 23, 2020 |
New resources | The following resources were added: AWS::ImageBuilder::Component,
AWS::ImageBuilder::DistributionConfiguration,
AWS::ImageBuilder::ImagePipeline, AWS::ImageBuilder::ImageRecipe, and
AWS::ImageBuilder::InfrastructureConfiguration. | April 23, 2020 |
New resource | The following resource was added: AWS::Synthetics::Canary.
-
AWS::Synthetics::Canary
-
Use the AWS::Synthetics::Canary resource to create a canary.
Canaries are configurable scripts that run on a schedule and monitor your endpoints and APIs.
By using canaries, you can discover issues before your customers do.
| April 23, 2020 |
New resource | The following resource was added: AWS::CE::CostCategory
-
AWS::CE::CostCategory
-
Use the
AWS::CE::CostCategory resource to create groupings of costs that you can use across products in the AWS Billing and Cost Management console.
| April 23, 2020 |
Updated resource | The following resource was updated: AWS::Glue::DevEndpoint
-
AWS::Glue::DevEndpoint
-
Use the
PublicKeys property to specify a list of public keys to be used by a development endpoint for authentication.
| April 16, 2020 |
Updated resource | The following resource was updated: AWS::Glue::MLTransform
-
AWS::Glue::MLTransform
-
Use the
Tags property to specify the AWS resource tags to use to manage access to a machine learning transform.
| April 16, 2020 |
New resource | The following resource was added: AWS::ResourceGroups::Group
-
AWS::ResourceGroups::Group
-
Use the AWS::ResourceGroups::Group resource to create
a resource group with the specified name, description, and resource
query.
| April 16, 2020 |
Updated resource | The following resource was updated: AWS::CloudWatch::InsightRule. | April 2, 2020 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
- AWS::FSx::FileSystem
-
Use the StorageType property to specify the type of
storage for the file system, either solid state drive,
SSD or hard disk drive, HDD.
In the WindowsConfiguration property type, use the
DeploymentType property to specify a new Amazon FSx
for Windows File Server file system deployment type,
SINGLE_AZ_2, the latest generation of Single-AZ
file systems.
| April 2, 2020 |
Updated resource | The following resource was updated: AWS::ServiceCatalog::LaunchRoleConstraint. | April 2, 2020 |
Updated resource | The following resource was updated: AWS::ApiGatewayV2::Integration. | March 26, 2020 |
Updated resource | The following resource was updated: AWS::Cognito::UserPool
-
AWS::Cognito::UserPool
-
Use the UsernameConfiguration property to set case sensitivity on
the username input for the selected sign-in option.
| March 26, 2020 |
Updated resource | The following resource was updated: AWS::EC2::Volume
-
AWS::EC2::Volume
-
Use the MultiAttachEnabled property to indicate whether
Amazon EBS Multi-Attach is enabled.
| March 26, 2020 |
Updated resource | The following resource was updated: AWS::AutoScaling::AutoScalingGroup. | March 26, 2020 |
Updated resource | The following resource was updated: AWS::RDS::DBInstance
-
AWS::RDS::DBInstance
-
The AWS::RDS::DBInstance resource now supports Read
Replica across multiple Availability Zone deployments.
| March 26, 2020 |
New resources | The following resources were added: AWS::Detective::Graph and AWS::Detective::MemberInvitation | March 26, 2020 |
Updated resource | The following resource was updated: AWS::EC2::ClientVpnEndpoint. | March 19, 2020 |
New resources | The following resources were added: AWS::NetworkManager::CustomerGatewayAssociation, AWS::NetworkManager::Device, AWS::NetworkManager::GlobalNetwork, AWS::NetworkManager::Link, AWS::NetworkManager::LinkAssociation, AWS::NetworkManager::Site, and AWS::NetworkManager::TransitGatewayRegistration | March 19, 2020 |
New resource | The following resource was added:
AWS::CodeGuruProfiler::ProfilingGroup. | March 19, 2020 |
New resources | The following resources were added: AWS::Cassandra::Keyspace and
AWS::Cassandra::Table.
-
AWS::Cassandra::Keyspace
-
Use the AWS::Cassandra::Keyspace resource to create a
new keyspace in Amazon Keyspaces (for Apache Cassandra).
-
AWS::Cassandra::Table
-
Use the AWS::Cassandra::Table resource to create a
new table in Amazon Keyspaces (for Apache Cassandra).
| March 16, 2020 |
Updated resource | The following resources were updated: AWS::AppMesh::VirtualNode,
AWS::AppMesh::VirtualRouter, AWS::AppMesh::VirtualService, and
AWS::AppMesh::Route | March 12, 2020 |
Updated resource | The following resource was updated: AWS::MSK::Cluster
-
AWS::MSK::Cluster
-
Use LoggingInfo to stream broker logs to one or more
of the following destination types: Amazon CloudWatch Logs,
Amazon S3, Kinesis Data Firehose.
| March 12, 2020 |
New and updated resources | The following resources were added or updated: AWS::ApiGatewayV2::ApiGatewayManagedOverrides, AWS::ApiGatewayV2::Integration, and AWS::ApiGatewayV2::VpcLink. | March 12, 2020 |
Updated resources | The following resources were updated: AWS::Greengrass::ResourceDefinition and AWS::Greengrass::ResourceDefinitionVersion | March 9, 2020 |
Updated resource | The following resource was updated: AWS::CloudFront::Distribution. | March 5, 2020 |
Updated resource | The following resource was updated to support envelope encryption of secrets with
AWS Key Management Service: AWS::EKS::Cluster
-
AWS::EKS::Cluster EncryptionConfig
-
Use the AWS::EKS::Cluster EncryptionConfig property
to specify the encryption configuration for an Amazon EKS
cluster.
-
AWS::EKS::Cluster Provider
-
Use the AWS::EKS::Cluster Provider property to
specify the AWS Key Management Service customer master key (CMK) used to
encrypt the secrets for an Amazon EKS cluster.
| March 5, 2020 |
New resource | The following resource was added: AWS::Athena::WorkGroup
-
AWS::Athena::WorkGroup
-
Use the AWS::Athena::WorkGroup resource to separate
users, teams, applications, or workloads, set limits on the amount
of data the workgroup or its queries can process, and track
costs.
| March 5, 2020 |
New resource | The following resource was added: AWS::Chatbot::SlackChannelConfiguration | March 5, 2020 |
New resource | The following resource was added: AWS::CodeStarConnections::Connection | March 5, 2020 |
New resource | The following resource was added: AWS::CloudWatch::CompositeAlarm.
-
AWS::CloudWatch::CompositeAlarm
-
Use the AWS::CloudWatch::CompositeAlarm property to create a composite alarm.
Composite alarms evaluate their alarm state based on the alarm states of other CloudWatchrules.
| March 2, 2020 |
Updated resource | The following resource was updated: AWS::AppMesh::VirtualNode
-
AWS::AppMesh::VirtualNode
-
Use the BackendDefaults property to specify a client policy
for a backend.
Use the ClientPolicy property to specify a client
policy.
Use the ClientPolicyTls property to specify a Transport
Layer Security (TLS) client policy.
Use the ListenerTls property to specify a TLS
listener.
Use the ListenerTlsCertificate property to specify the type
of certificate to use for a client policy.
Use the ListenerTlsAcmCertificate property to specify an
AWS Certificate Manager certificate.
Use the ListenerTlsFileCertificate property to specify
properties of a local file certificate.
Use the TlsValidationContext property to specify a TLS
validation context trust.
Use the TlsValidationContextAcmTrust property to specify a
context trust for an AWS Certificate Manager
certificate.
Use the TlsValidationContextFileTrust property to specify a
file that contains the certificate trust chain for a local file
certificate.
Use the TlsValidationContextTrust property to specify a TLS
validation context trust.
Use the VirtualNodeSpec property to specify
BackendDefaults.
Use the Listener property to specify a
ListenerTls.
| February 27, 2020 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
- AWS::FSx::FileSystem
-
In the LustreConfiguration property type:
-
Use the DeploymentType property to specify
the Amazon FSx for Lustre file system deployment type,
either PERSISTENT_1, SCRATCH_2, or
SCRATCH_1.
-
Use the PerUnitStorageThroughput property to
specify the throughput in MB/s/TiB for a
PERSISTENT_1 Amazon FSx for Lustre file
system deployment type.
| February 27, 2020 |
New resources | The following resources were added: AWS::GroundStation::Config, AWS::GroundStation::DataflowEndpointGroup, and AWS::GroundStation::MissionProfile | February 27, 2020 |
Updated resource | The following resources was updated: AWS::CodeBuild::Project | February 20, 2020 |
Updated resource | The following resource was updated: AWS::Neptune::DBCluster
- AWS::Neptune::DBCluster
-
Use the DeletionProtection property to help prevent inadvertent deletion of your DB cluster.
Use the EngineVersion property to specify the engine version that your new DB cluster will use.
| February 18, 2020 |
New resources | The following resources were added: AWS::EC2::LocalGatewayRoute and
AWS::EC2::LocalGatewayRouteTableVPCAssociation. | February 14, 2020 |
Updated resources | The following resource were updated: AWS::ElasticLoadBalancingV2::Listener and
AWS::ElasticLoadBalancingV2::ListenerRule | February 13, 2020 |
New resource | The following resource was added: AWS::Config::ConformancePack
-
AWS::Config::ConformancePack
-
Use the AWS::Config::ConformancePack
resource to create a Conformance Pack that is a
collection of AWS rules that can be easily deployed in an account and
a region and across AWS Organizations.
| February 13, 2020 |
New resource | The following resource was added: AWS::Config::OrganizationConformancePack
-
AWS::Config::OrganizationConformancePack
-
Use the
AWS::Config::OrganizationConformancePack resource to create an OrganizationConformancePack that has information about
conformance packs that AWS Config creates in the member accounts.
| February 13, 2020 |
New resource | The following resources were added: AWS::FMS::NotificationChannel and AWS::FMS::Policy.
-
AWS::FMS::NotificationChannel
-
Use the AWS::FMS::NotificationChannel resource to
designate the IAM role and Amazon Simple Notification Service (SNS) topic
that AWS Firewall Manager uses to record SNS logs.
-
AWS::FMS::Policy
-
Use the AWS::FMS::Policy resource to specify an AWS Firewall Manager policy.
| February 13, 2020 |
AWS CloudFormation StackSets integrates with AWS Organizations | Use StackSets to centrally manage deployments to all the accounts in your
organization or specific organizational units (OUs) in AWS Organizations. You can enable
automatic deployments to any new accounts added to your organization or OUs. The
permissions needed to deploy across accounts will automatically be handled by
StackSets. For more information, see Working with
AWS CloudFormation StackSets. | February 11, 2020 |
Updated resources | The following resources were updated: AWS::EC2::LaunchTemplate and
AWS::EC2::ClientVpnEndpoint
-
AWS::EC2::LaunchTemplate
-
Use the MetadataOptions property to configure the Instance
Metadata Service (IMDS) for the instance.
Use the HostResourceGroupArn property to specify the ARN of
the host resource group in which to launch the instances.
Use the PartitionNumber property to specify a target
partition in a partition placement group.
Use the LaunchTemplateElasticInferenceAccelerator property
to specify the number of elastic inference accelerators to attach to the
instance.
-
AWS::EC2::ClientVpnEndpoint
-
Use the VpnPort property to assign a port number for TCP and
UDP traffic.
| February 6, 2020 |
Updated resource | The following resource was updated: AWS::AppSync::GraphQLApi. | February 6, 2020 |
Updated resource | The following resource was updated: AWS::Cognito::UserPool
-
AWS::Cognito::UserPool
-
Added AccountRecoverySetting parameter to define which verified
available method a user can use to recover their password.
| February 6, 2020 |
Updated resource | The following resource was updated: AWS::OpsWorksCM::Server
-
AWS::OpsWorksCM::Server
-
Use the Tags property to add tag keys and values to an AWS OpsWorks for Chef Automate or OpsWorks for Puppet Enterprise server.
| February 6, 2020 |
New resource | The following resource was added: AWS::WAFv2::WebACLAssociation.
-
AWS WAFv2
-
Use the web ACL association to define an association between a web ACL and a regional application resource, to protect the resource. A regional application can be an Application Load Balancer (ALB), Amazon API Gateway REST API, an AWS AppSync GraphQL API, or an Amazon Cognito user pool. For Amazon CloudFront distributions, you use AWS::CloudFront::Distribution to manage the association.
| February 6, 2020 |
New resources | The following resources were added: AWS::ACMPCA::Certificate,
AWS::ACMPCA::CertificateAuthority,
AWS::ACMPCA::CertificateAuthorityActivation. | January 23, 2020 |
New resource | The following resources were added: AWS::AppConfig::Application,
AWS::AppConfig::ConfigurationProfile, AWS::AppConfig::Deployment,
AWS::AppConfig::Environment, and AWS::AppConfig::DeploymentStrategy
-
AWS::AppConfig::Application
-
The AWS::AppConfig::Application resource creates an application,
which is a logical unit of code that provides capabilities for your
customers.
-
AWS::AppConfig::ConfigurationProfile
-
The AWS::AppConfig::ConfigurationProfile resource creates a
configuration profile that enables AWS AppConfig to access the configuration source.
-
AWS::AppConfig::Deployment
-
The AWS::AppConfig::Deployment resource starts a deployment.
-
AWS::AppConfig::Environment
-
The AWS::AppConfig::Environment resource creates an environment,
which is a logical deployment group of AWS AppConfig targets, such as applications in a
Beta or Production environment.
-
AWS::AppConfig::DeploymentStrategy
-
The AWS::AppConfig::DeploymentStrategy resource creates an
AWS AppConfig deployment strategy.
| January 23, 2020 |
Updated resource | The following resource was updated: AWS::Glue::Crawler
-
AWS::Glue::Crawler
-
Use the MongoDBTarget property to specify an Amazon DocumentDB or MongoDB data store to crawl.
Use the RecrawlPolicy.RecrawlBehavior property to specify a new CRAWL_EVENT_MODE that specifies crawling only the changes identified by Amazon S3 events.
Use the S3Target.SampleSize property to specify the number of files in each leaf folder to be crawled when crawling sample files in a dataset.
Use the S3Target.EventQueueArn property to specify a valid Amazon SQS ARN.
Use the S3Target.DlqEventQueueArn property to specify a valid Amazon dead-letter SQS ARN.
| January 20, 2020 |
Updated resources | The following resource was updated: AWS::Lambda::Function. | January 16, 2020 |
Updated resource | The following resource was updated: AWS::EC2::Instance.
-
AWS::EC2::Instance
-
Use the HibernationOptions property to indicate whether the
instance is enabled for hibernation.
Use the HostResourceGroupArn property to specify the ARN of
the host resource group in which to launch the instances.
| January 16, 2020 |
Updated resource | The following resource was updated: AWS::AutoScaling::AutoScalingGroup.
-
AWS::AutoScaling::AutoScalingGroup
-
Use the WeightedCapacity property to specify the number of capacity
units, which gives the instance type a proportional weight to other instance
types.
| January 16, 2020 |
Updated resource | The following resource was updated: AWS::LakeFormation::Permissions
-
AWS::LakeFormation::Permissions
-
Use the
DataLocationResource property to specify a structure for a data location object where permissions are granted or revoked.
Use the
TableWithColumnsResource property to specify a structure for a table with columns object. This object is only used when granting a SELECT permission.
| January 16, 2020 |
Updated resource | The following resource was updated: AWS::RDS::DBInstance.
-
AWS::RDS::DBInstance
-
Use the CACertificateIdentifier property to specify
the identifier of the CA certificate for this DB instance.
| January 16, 2020 |
Updated resource | The following resource was updated: AWS::SSM::ResourceDataSync
-
AWS::SSM::ResourceDataSync
-
Use the SyncType property with SyncFromSource
to synchronize Systems Manager Explorer OpsItems and OpsData from AWS Organizations or from multiple AWS Regions.
| January 16, 2020 |
Updated resources | The following resources were updated: AWS::MSK::Cluster, AWS::RDS::DBInstance, and
AWS::SSM::Document
-
AWS::MSK::Cluster
-
Use the OpenMonitoring property to enable monitoring with
Prometheus, an open-source monitoring system for time-series metric data.
You can also use tools that are compatible with Prometheus-formatted
metrics or tools that integrate with Amazon MSK Open Monitoring.
-
AWS::SSM::Document
-
Use the Name property to specify a name for the Systems
Manager document.
-
AWS::RDS::DBInstance
-
Use the MaxAllocatedStorage property to specify the upper
limit to which Amazon RDS can automatically scale the storage of the DB
instance.
| December 20, 2019 |
New resource | The following resource was added: AWS::CodeBuild::ReportGroup
-
AWS::CodeBuild::ReportGroup
-
Use the AWS::CodeBuild::ReportGroup resource to specify
information about a report group. When you specify a report group in a
CodeBuild project, a build of the project creates reports in the report
group that contain results from running test cases.
| December 20, 2019 |
New resource | The following resource was added: AWS::EC2::GatewayRouteTableAssociation. | December 20, 2019 |
Updated resources | The following resource was updated: AWS::RDS::DBInstance.
-
AWS::RDS::DBInstance
-
Use the MaxAllocatedStorage property to specify the
upper limit to which Amazon RDS can automatically scale the storage
of the DB instance.
| December 19, 2019 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
-
AWS::FSx::FileSystem
-
In the WindowsConfiguration property type:
-
Use the DeploymentType property to specify
the Amazon FSx Windows file system deployment type.
-
Use the PreferredSubnetId property to specify
the subnet in which you want the preferred file server to be
located for a MULTI_AZ_1 Amazon FSx for Windows
file system deployment type.
| December 19, 2019 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem | December 19, 2019 |
New resource | The following resource was added: AWS::EC2::GatewayRouteTableAssociation. | December 19, 2019 |
Updated resource | The following resource was updated: AWS::EC2::Instance. | December 12, 2019 |
New resource | The following resource was added: AWS::CodeBuild::ReportGroup
-
AWS::CodeBuild::ReportGroup
-
Use the
AWS::CodeBuild::ReportGroup resource to specify information about a report group. When you specify a report group
in a CodeBuild project, a build of the project creates reports in the report group that contain results from running test cases.
| December 12, 2019 |
Updated resources | The following resources were updated: AWS::ApiGatewayV2::Api, AWS::ApiGatewayV2::Authorizer, AWS::ApiGatewayV2::Integration, AWS::ApiGatewayV2::Stage. | December 4, 2019 |
Updated resources | The following resources were updated: AWS::Lambda::Alias and AWS::Lambda::Version.
-
AWS::Lambda::Alias
-
Use the ProvisionedConcurrencyConfiguration property to specify a provisioned
concurrency configuration for a function's alias.
-
AWS::Lambda::Version
-
Use the ProvisionedConcurrencyConfiguration property to specify a provisioned
concurrency configuration for a function's version.
| December 3, 2019 |
Updated resource | The following resource was updated:
AWS::StepFunctions::StateMachine.
-
AWS::StepFunctions::StateMachine
-
The AWS::StepFunctions::StateMachine now supports Express
workflows using the new StateMachineType parameter. You can
also configure CloudWatch Logging information for Express workflows using
LoggingConfiguration, LogDestination, and
CloudWatchLogsLogGroup.
| December 3, 2019 |
New resource | The following resource was added: AWS::S3::AccessPoint
-
Access
Points
-
Use the AWS::S3::AccessPoint resource to specify an S3 access
point.
| December 3, 2019 |
New resource | The following resource was added: AWS::AccessAnalyzer::Analyzer | December 2, 2019 |
New resource | The following resources were added: AWS::EventSchemas::Discoverer,
AWS::EventSchemas::Registry, and
AWS::EventSchemas::Schema.
-
AWS::EventSchemas::Discoverer
-
Use the AWS::EventSchemas::Discoverer resource to
specify a discoverer that is associated with an event bus. A
discoverer allows the Amazon EventBridge Schema Registry to
automatically generate schemas based on events on an event
bus.
-
AWS::EventSchemas::Registry
-
Use the AWS::EventSchemas::Registry to specify a
schema registry. Schema registries are containers for Schemas.
Registries collect and organize schemas so that your schemas are in
logical groups.
-
AWS::EventSchemas::Schema
-
Use the AWS::EventSchemas::Schema resource to specify
an event schema.
| December 1, 2019 |
New resource | The following resource was added: AWS::Lambda::EventInvokeConfig | November 26, 2019 |
Updated resource | The following resource was updated: AWS::CloudWatch::Alarm. | November 25, 2019 |
Updated resource | The following resource was updated: AWS::CodePipeline::Pipeline.
-
AWS::CodePipeline::Pipeline
-
In the ActionDeclaration property type, use the Namespace property
to specify the variable namespace associated with the action. All variables produced
as output by this action fall under this namespace.
| November 25, 2019 |
Updated resource | The following resource was updated: AWS::Lambda::EventSourceMapping.
-
AWS::Lambda::EventSourceMapping
-
For stream sources (DynamoDB and Kinesis), use the BisectBatchOnFunctionError property
to split the batch in two and retry if the function returns an error.
For stream sources (DynamoDB and Kinesis), use the DestinationConfig property to
specify an Amazon SQS queue or Amazon SNS topic destination for discarded records.
For stream sources (DynamoDB and Kinesis), use the MaximumRecordAgeInSeconds property
to specify the maximum age of a record that Lambda sends to a function for processing.
For stream sources (DynamoDB and Kinesis), use the MaximumRetryAttempts property to
specify the maximum number of times to retry when the function returns an error.
For stream sources (DynamoDB and Kinesis), use the ParallelizationFactor property to
specify the number of batches to process from each shard concurrently.
| November 25, 2019 |
Updated resource | The following resource was updated: AWS::CloudWatch::Alarm. | November 25, 2019 |
New resources | The following resources were added: AWS::ECS::PrimaryTaskSet,
AWS::ECS::TaskSet.
-
AWS::ECS::PrimaryTaskSet
-
Use the AWS::ECS::PrimaryTaskSet resource to specify
which task set in a service is the primary task set. Any parameters
that are updated on the primary task set in a service will
transition to the service. This is used when a service uses the
EXTERNAL deployment controller type.
-
AWS::ECS::TaskSet
-
Use the AWS::ECS::TaskSet resource to create a task
set in the specified cluster and service. This is used when a
service uses the EXTERNAL deployment controller
type.
| November 25, 2019 |
New resource | The following resource was added: AWS::CloudWatch::InsightRule.
-
AWS::CloudWatch::InsightRule
-
Use the AWS::CloudWatch::InsightRule property to create a Contributor Insights rule. Rules evaluate log events in
a CloudWatch Logs log group, enabling you to find contributor data
for the log events in that log group.
| November 25, 2019 |
New resource | The following resource was added: AWS WAFv2.
-
AWS WAFv2
-
This is the latest version of AWS WAF, a web application firewall that lets you monitor HTTP(S) requests that are forwarded to an Amazon API Gateway REST API, Amazon CloudFront, Application Load Balancer, an AWS AppSync GraphQL API, or an Amazon Cognito user pool. AWS WAF also lets you control access to your content.
| November 25, 2019 |
Updated resources | The following resources were updated: AWS::AppSync::Resolver, AWS::AppSync::DataSource.
-
AWS::AppSync::Resolver
-
Use the CachingConfig property to specify the caching behavior of your AWS AppSync resolver.
-
AWS::AppSync::Resolver
-
Use the SyncConfig property to specify the conflict detection and resolution
strategy of your AWS AppSync resolver.
-
AWS::AppSync::Resolver
-
Use the LambdaConflictHandlerConfig property to specify the ARN of the lambda
that is used for handling conflicts in your AWS AppSync resolver.
-
AWS::AppSync::DataSource
-
Use the DeltaSyncConfig property to specify the delta sync configurations for
your versioned AWS AppSync data source.
| November 21, 2019 |
Updated resources | The following resources were updated: AWS::ECS::Cluster, AWS::ECS::Service, and
AWS::ECS::TaskDefinition.
-
AWS::ECS::Cluster
-
Use the ClusterSettings property to specify the
setting to use when creating a cluster. This parameter is used to
enable CloudWatch Container Insights for a cluster.
-
AWS::ECS::Service
-
Use the DeploymentController property to specify the
deployment controller to use for the service.
-
AWS::ECS::TaskDefinition
-
In the ContainerDefinition property type, use the
FirelensConfiguration property to specify the
FireLens configuration for the container. This is used to specify
and configure a log router for container logs.
In the LinuxParameters property type:
-
use the MaxSwap property to specify the total
amount of swap memory (in MiB) a container can use.
-
use the Swappiness property to tune a
container's memory swappiness behavior. A
swappiness value of 0 will
cause swapping to not happen unless absolutely necessary. A
swappiness value of 100 will
cause pages to be swapped very aggressively.
| November 21, 2019 |
Updated resources | The following resources were updated: AWS::RDS::DBCluster and
AWS::RDS::DBInstance.
-
AWS::RDS::DBCluster
-
Use the EnableHttpEndpoint property to indicate
whether to enable the HTTP endpoint for an Aurora Serverless DB
cluster. By default, the HTTP endpoint is disabled. When enabled,
the HTTP endpoint provides a connectionless web service API for
running SQL queries on the Aurora Serverless DB cluster. You can
also query your database from inside the RDS console with the query
editor.
-
AWS::RDS::DBInstance
-
For Oracle DB instances, Amazon RDS can use Kerberos
Authentication to authenticate users that connect to the DB
instance.
| November 21, 2019 |
Updated resource | The following resource was updated: AWS::ApiGateway::RestApi. | November 21, 2019 |
Updated resource | The following resource was updated: AWS::CertificateManager::Certificate
-
AWS::CertificateManager::Certificate
-
Use the CertificateTransparencyLoggingPreference property to
enable or disable certificate transparency logging.
Use the PrivateCertificateAuthorityArn property to specify
a private certificate authority (CA) from AWS Private CA as certificate issuer.
Use the GetAtt function to retrieve the
CertificateARN of the
AWS::CertificateManager::Certificate resource.
Use the GetAtt function to retrieve the
CertificateStatus of the
AWS::CertificateManager::Certificate resource.
In the DomainValidationOption property type, use the
HostedZoneId property to validate a domain with a Route 53
hosted zone ID.
| November 21, 2019 |
Updated resource | The following resources were updated: AWS::Cognito::UserPool
-
AWS::Cognito::UserPool
-
Added ConfigurationSet and From properties to the
EmailConfiguration parameter.
-
AWS::Cognito::UserPoolClient
-
Added PreventUserExistenceErrors parameter to help manage errors
and responses when a user does not exist in the user pool.
-
AWS::Cognito::UserPoolUser
-
Use the ClientMetadata parameter to provide input to the AWS Lambda function that is invoked by the pre sign-up
trigger.
| November 21, 2019 |
Updated resource | The following resource was updated: AWS::EC2::EIP.
-
AWS::EC2::EIP
-
Use the Tags property to specify any tags for the Elastic IP
address.
| November 21, 2019 |
Updated resource | The following resource was updated: AWS::Glue::MLTransform
-
AWS::Glue::MLTransform
-
Use the
GlueVersion property to specify which version of AWS Glue this machine learning transform is compatible with.
| November 21, 2019 |
Updated resource | The following resource was updated: AWS::IAM::User.
-
AWS::IAM::User
-
Use the Tags property to specify a list of tags that you want to attach to the newly created user.
| November 21, 2019 |
Updated resource | The following resource was updated: AWS::Elasticsearch::Domain.
-
AWS::Elasticsearch::Domain
-
Use the CognitoOptions property to configure OpenSearch Service to use
Amazon Cognito authentication for OpenSearch Dashboards.
Use the EnableVersionUpgrade update policy to update the
ElasticsearchVersion property without replacing the
AWS::Elasticsearch::Domain resource.
| November 21, 2019 |
Updated resource | The following resource was updated: AWS::OpsWorksCM::Server
-
AWS::OpsWorksCM::Server
-
Use the CustomDomain property to specify a custom domain on an AWS OpsWorks for Chef Automate Server running Chef Automate 2.0.
Use the CustomCertificate property to specify a PEM-formatted HTTPS certificate for a server with a custom domain.
Use the CustomPrivateKey property to specify a private key in PEM format for connecting to a server that uses a custom domain.
| November 21, 2019 |
Updated resource | The following resource was updated: AWS::S3::Bucket. | November 21, 2019 |
Updated resource | The following resource was updated: AWS::Lambda::Function. | November 21, 2019 |
New resource | The following resource was added: AWS::AppSync::ApiCache. | November 21, 2019 |
Drift Detection for Stack Sets | You can now run drift detection on a stack set and all the stack instances it
includes. When CloudFormation performs drift detection on a stack set, it performs drift
detection on the stack associated with each stack instance in the stack set. For
more details, see Detecting
Unmanaged Configuration Changes in Stack Sets. | November 19, 2019 |
Updated resource | The following resource was updated to support Amazon EKS managed node
groups: AWS::EKS::Cluster
-
AWS::EKS::Cluster
-
Use the AWS::EKS::Cluster resource to create a new
Amazon EKS cluster.
| November 18, 2019 |
New resource | The following resource was added: AWS::EKS::Nodegroup
-
AWS::EKS::Nodegroup
-
Use the AWS::EKS::Nodegroup resource to create a new
Amazon EKS managed node group.
| November 18, 2019 |
CloudFormation registry now available | Use the CloudFormation registry to view private and public resources that are
available for use in your CloudFormation account. For more information, see Using the CloudFormation
Registry | November 18, 2019 |
CloudFormation registry API actions | The following API actions for managing types in the CloudFormation registry are
now available. For more information about the CloudFormation registry, see Using the CloudFormation Registry
-
DeregisterType
-
Removes a type or type version from active use in the CloudFormation
registry.
-
DescribeType
-
Returns detailed information about a registered type.
-
DescribeTypeRegistration
-
Returns information about a type's registration, including its current
status and type and version identifiers.
-
ListTypeRegistrations
-
Returns a list of registration request identifiers for the specified
type.
-
ListTypes
-
Returns summary information about types that have been registered with
CloudFormation.
-
ListTypeVersions
-
Returns summary information about the versions of a type.
-
RegisterType
-
Registers a type with the CloudFormation service. Registering a type
makes it available for use in CloudFormation templates in your AWS
account.
-
SetTypeDefaultVersion
-
Specify the default version of a type. The default version of a type
will be used in CloudFormation operations.
| November 18, 2019 |
Updated resources | The following resources were updated: AWS::GameLift::Build, AWS::GameLift::Fleet.
-
AWS::GameLift::Build
-
Use the OperatingSystem property to specify the operating system
that the build files run on.
-
AWS::GameLift::Fleet
-
Use the CertificateConfiguration property to generate a TLS/SSL certificate for the new fleet.
Use the FleetType property to specify use of On-Demand or Spot
instances in the fleet.
Use the InstanceRoleArn property to manage access to your
non-GameLift AWS resources from GameLift fleet instances.
Use the MetricGroups property to add fleet metrics to a CloudWatch metric group.
Use the NewGameSessionProtectionPolicy property to prevent the
fleet's active game sessions from being terminated during a scale down event.
Use the PeerVpcAwsAccountId property when setting up VPC peering
for the fleet.
Use the PeerVpcId property when setting up VPC peering for the
fleet.
Use the ResourceCreationLimitPolicy property to limit an individual
player's ability to use the fleet's available hosting resources.
Use the RuntimeConfiguration property to configure what processes
are run on each instance in the fleet.
Use the ScriptId property to create a Realtime Servers fleet and
configure it with a Realtime script.
| November 14, 2019 |
New resources | The following resources were added: AWS::GameLift::Script, AWS::GameLift::GameSessionQueue, AWS::GameLift::MatchmakingConfiguration, AWS::GameLift::MatchmakingRuleSet. | November 14, 2019 |
Resource import added | If you created an AWS resource outside of AWS CloudFormation management, you can bring this
existing resource into CloudFormation management using resource
import. For more information, see Bringing Existing
Resources Into CloudFormation Management. | November 11, 2019 |
New resource | The following resource was added: AWS::CodeStarNotifications::NotificationRule
-
AWS::CodeStarNotifications::NotificationRule
-
Use the
AWS::CodeStarNotifications::NotificationRule resource to create notification rules for resources in AWS CodeBuild,
AWS CodeCommit, AWS CodeDeploy, and AWS CodePipeline.
| November 7, 2019 |
New resource | The following resources were added: AWS::MediaConvert::JobTemplate,
AWS::MediaConvert::Preset, AWS::MediaConvert::Queue | November 6, 2019 |
Updated resource | The following resource was updated: AWS::Glue::Crawler
-
AWS::Glue::Crawler
-
Use the
DynamoDBTargets property to specify a list of Amazon DynamoDB targets.
Use the
CatalogTargets property to specify a list of AWS Glue Data Catalog targets.
| November 4, 2019 |
Updated resources | The following resources were updated: AWS::ApiGateway::ApiKey, AWS::ApiGateway::ClientCertificate, AWS::ApiGateway::DomainName, AWS::ApiGateway::RestApi, and AWS::ApiGateway::UsagePlan.
-
AWS::ApiGateway::ApiKey
-
Use the
Tags property to specify an array of arbitrary tags (key-value pairs) to associate with the API key.
-
AWS::ApiGateway::ClientCertificate
-
Use the
Tags property to specify an array of arbitrary tags (key-value pairs) to associate with the client certificate.
-
AWS::ApiGateway::DomainName
-
Use the
SecurityPolicy property to the Transport Layer Security (TLS) version + cipher suite for this domain name.
Use the
Tags property to specify an array of arbitrary tags (key-value pairs) to associate with the domain name.
-
AWS::ApiGateway::RestApi
-
Use the
Tags property to specify an array of arbitrary tags (key-value pairs) to associate with the API.
-
AWS::ApiGateway::UsagePlan
-
Use the
Tags property to specify an array of arbitrary tags (key-value pairs) to associate with the usage plan.
| October 31, 2019 |
Updated resources | The following resources were updated: AWS::CodePipeline::CustomActionType,
AWS::CodePipeline::Pipeline. | October 31, 2019 |
Updated resource | The following resource was updated: AWS::Amplify::App
-
AWS::Amplify::App
-
Use the EnablePullRequestPreview property to specify whether pull
request previews are enabled for each branch that Amplify Console automatically
creates for your app.
Use the PullRequestEnvironmentName property to specify a dedicated
backend environment for your pull request previews.
| October 31, 2019 |
Updated resource | The following resource was updated: AWS::ECS::TaskDefinition.
-
AWS::ECS::TaskDefinition
-
Use the InferenceAccelerator property to specify the
Elastic Inference accelerators to use for the containers in the
task.
| October 31, 2019 |
Updated resource | The following resource was updated: AWS::Events::Rule.
-
AWS::Events::Rule
-
In the Target property type, use the BatchParameters property to
specify the job definition, job name, and other parameters, if the event target is
an AWS Batch job.
| October 31, 2019 |
Updated resource | The following resource was updated: AWS::Elasticsearch::Domain. | October 31, 2019 |
New resources | The following resources were added: AWS::Pinpoint::EmailTemplate,
AWS::Pinpoint::PushTemplate, and AWS::Pinpoint::SmsTemplate.
-
AWS::Pinpoint::EmailTemplate
-
Use the AWS::Pinpoint::EmailTemplate resource to
create a message template that you can use in messages that are sent
through the email channel.
-
AWS::Pinpoint::PushTemplate
-
Use the AWS::Pinpoint::PushTemplate resource to
create a message template that you can use in messages that are sent
through a push notification channel.
-
AWS::Pinpoint::SmsTemplate
-
Use the AWS::Pinpoint::SmsTemplate resource to create
a message template that you can use in messages that are sent
through the SMS channel.
| October 31, 2019 |
Updated resource | The following resource was updated: AWS::Amplify::Branch
-
AWS::Amplify::Branch
-
Use the EnablePullRequestPreview property to specify whether
Amplify Console creates a preview for each pull request that is made for the
branch.
Use the PullRequestEnvironmentName property to specify a dedicated
backend environment for your pull request previews.
| October 24, 2019 |
Updated resource | The following resource was updated: AWS::Cognito::UserPool
-
AWS::Cognito::UserPool
-
Use the Schema parameter to add or update schema attributes.
-
AWS::Cognito::UserPool
-
Use the AliasAttributes parameter to add or update an alias for the
user pool.
-
AWS::Cognito::UserPool
-
Use the UsernameAttributes parameter to determine if email
addresses or phone numbers can be used as user names when a user signs up.
| October 24, 2019 |
Updated resources | The following resource was updated: AWS::MSK::Cluster.
-
AWS::MSK::Cluster
-
Use the NumberOfBrokerNodes property to submit an update
to change the number of broker nodes in the cluster.
| October 17, 2019 |
Updated resource | The following resource was updated: AWS::Cognito::IdentityPoolRoleAttachment | October 17, 2019 |
Updated resource | The following resource was updated: AWS::FSx::FileSystem
-
AWS::FSx::FileSystem
-
In the WindowsConfiguration property type, use the
SelfManagedActiveDirectoryConfiguration property to
join an Amazon FSx Windows File Server instance to your self-managed
(including on-premises) Microsoft Active Directory (AD)
directory.
| October 17, 2019 |
Updated Resource | The following resource was updated: AWS::Batch::ComputeEnvironment | October 17, 2019 |
Updated resources | The following resource were updated: AWS::Events::EventBusPolicy,
AWS::Events::Rule
-
AWS::Events::EventBusPolicy
-
Use the EventBusName property to specify the name of the event bus
to associate with this policy.
-
AWS::Events::Rule
-
Use the EventBusName property to specify the name of the event bus
to associate with this rule.
| October 3, 2019 |
Updated resources | The following resource was updated: AWS::Pinpoint::App, AWS::Pinpoint::Campaign,
and AWS::Pinpoint::Segment.
-
AWS::Pinpoint::App
-
The ARN attribute returns the Amazon Resource Name
(ARN) of the application.
Use the Tags property to specify a string-to-string
map of key-value pairs that defines the tags to associate with the
application.
-
AWS::Pinpoint::Campaign
-
The ARN attribute returns the Amazon Resource Name
(ARN) of the campaign.
Use the Tags property to specify a string-to-string
map of key-value pairs that defines the tags to associate with the
campaign.
-
AWS::Pinpoint::Segment
-
The ARN attribute returns the Amazon Resource Name
(ARN) of the segment.
Use the Tags property to specify a string-to-string
map of key-value pairs that defines the tags to associate with the
segment.
| October 3, 2019 |
Updated resource | The following resource was updated: AWS::Budgets::Budget
-
AWS::Budgets::Budget
-
In the BudgetData property type, use the
PlannedBudgetLimits property to specify a map containing multiple budget limits, including current or future limits.
| October 3, 2019 |
Updated resource | The following resource was updated: AWS::Cognito::UserPool | October 3, 2019 |
New resources | The following resources were added: AWS::Cognito::UserPoolDomain,
AWS::Cognito::UserPoolResourceServer, AWS::Cognito::UserPoolIdentityProvider,
AWS::Cognito::RiskConfigurationAttachment, AWS::Cognito::UICustomizationAttachment. | October 3, 2019 |
New resources | The following resource were added: AWS::EC2::TrafficMirrorFilter,
AWS::EC2::TrafficMirrorFilterRule, AWS::EC2::TrafficMirrorSession, and
AWS::EC2::TrafficMirrorTarget | October 3, 2019 |
New resource | The following resource was added: AWS::Events::EventBus
-
AWS::Events::EventBus
-
Use the EventBus resource to create or update a custom event bus or
a partner event bus.
| October 3, 2019 |
Updated resource | The following resource was updated: AWS::Glue::DevEndpoint
-
AWS::Glue::DevEndpoint
-
Use the
WorkerType property to specify a type of predefined worked allocated to the development endpoint.
Use the
NumberOfWorkers property to specify the number of workers of a defined workerType that are allocated to the development endpoint.
Use the
GlueVersion property to specify the versions of Apache Spark and Python that AWS Glue supports for the development endpoint.
Use the
Arguments property to specify a map of arguments used to configure the DevEndpoint.
| September 27, 2019 |
Updated resource | The following resource was updated: AWS::Glue::Job
-
AWS::Glue::Job
-
Use the
Timeout property to specify the job timeout in minutes.
Use the
NotificationProperty property to specify the configuration properties of a notification.
Use the
NotifyDelayAfter property to specify the number of minutes to wait before sending a job run delay notification after a job run starts.
| September 26, 2019 |
Updated resource | The following resource was updated: AWS::Glue::Trigger
-
AWS::Glue::Trigger
-
Use the
StartOnCreation property to specify starting SCHEDULED and CONDITIONAL triggers when created.
Use the
WorkflowName property to specify the name of the workflow associated with the trigger.
| September 26, 2019 |
Updated resource | The following resource was updated: AWS::DocDB::DBCluster.
-
AWS::DocDB::DBCluster
-
Use the EnableCloudwatchLogsExports property to specify
the list of log types that need to be enabled for exporting to CloudWatch
Logs.
| September 26, 2019 |
New resource | The following resource was added: AWS::Glue::Workflow | September 26, 2019 |
Updated resource | The following resource was updated: AWS::Config::RemediationConfiguration. | September 12, 2019 |
New resource | The following resource was added: AWS::QLDB::Ledger
-
AWS::QLDB::Ledger
-
Use the
AWS::QLDB::Ledger resource to specify a new Amazon Quantum Ledger Database (Amazon QLDB) ledger.
| September 12, 2019 |
Updated resources | The following resources were updated: AWS::ApplicationAutoScaling::ScalableTarget,
AWS::DynamoDB::Table, AWS::EC2::Instance, AWS::ECS::TaskDefinition,
AWS::ElastiCache::ReplicationGroup, AWS::Events::Rule, AWS::IAM::Role, and
AWS::Lambda::EventSourceMapping.
-
AWS::ApplicationAutoScaling::ScalableTarget
-
Use the SuspendedState property to suspend and resume
automatic scaling. Setting the value of an attribute to true
suspends the specified scaling activities. Setting it to
false (default) resumes the specified scaling
activities.
-
AWS::DynamoDB::Table
-
In the SSESpecification property type, use the SSEType
property to specify server-side encryption type.
-
AWS::EC2::Instance
-
Use the CpuOptions property to specify the CPU options
for the instance.
In the Ebs property type, use the KmsKeyId property to
specify an identifier (key ID, key alias, ID ARN, or alias ARN) for a
customer managed key under which the EBS volume is encrypted.
-
AWS::ECS::TaskDefinition
-
Use the IpcMode property to specify the IPC resource
namespace to use for the containers in the task. The valid values are
host, task, or none.
Use the PidMode property to specify the process namespace
to use for the containers in the task. The valid values are
host or task.
In the ContainerDefinition property type:
-
When the Interactive property is set to
true, this allows you to deploy containerized
applications that require stdin or a tty
to be allocated.
-
When the PseudoTerminal proprety is set to
true, a TTY is allocated.
-
Use the SystemControls property to specify a list
of namespaced kernel parameters to set in the container.
In the LogConfiguration property type, use the
SecretOptions property to specify the secrets to pass to
the log configuration.
-
AWS::ElastiCache::ReplicationGroup
-
Use the KmsKeyId property to specify the ID of the
KMS key used to encrypt the disk on the cluster.
-
AWS::Events::Rule
-
In the EcsParameters property type:
-
Use the Group property to specify an ECS task group
for the task.
-
Use the LaunchType property to specify the launch
type on which your task is running.
-
If the ECS task uses the awsvpc network mode, use
the NetworkConfiguration property to specify the VPC
subnets and security groups associated with the task and whether a
public IP address is to be used.
-
Use the PlatformVersion property to specify the
platform version for the task.
-
AWS::IAM::Role
-
Use the Description property to provide a description for
the role.
Use the Tags property to specify a list of tags that are
attached to the specified role.
-
AWS::Lambda::EventSourceMapping
-
Use the MaximumBatchingWindowInSeconds property to
specify the maximum amount of time to gather records before invoking the
function, in seconds.
| August 29, 2019 |
Updated resources | The following resources were updated: AWS::RDS::DBCluster and
AWS::RDS::DBInstance
-
AWS::RDS::DBCluster
-
Use the AssociatedRoles property to specify the AWS
Identity and Access Management (IAM) roles associated with the DB
instance.
Use the RestoreType property to specify the type of
restore to be performed.
Use the SourceDBClusterIdentifier property to specify
the identifier of the source DB cluster from which to restore.
Use the UseLatestRestorableTime property to specify
whether to restore the DB cluster to the latest restorable backup
time.
-
AWS::RDS::DBInstance
-
Use the AssociatedRoles property to specify the AWS
Identity and Access Management (IAM) roles associated with the DB
instance.
| August 29, 2019 |
Updated resource | The following resource was updated: AWS::CloudWatch::Alarm
-
AWS::CloudWatch::Alarm
-
Use the
ThresholdMetricId property to specify the ID of the ANOMALY_DETECTION_BAND function used as the threshold for the alarm.
| August 29, 2019 |
Updated resource | The following resource was updated: AWS::Elasticsearch::Domain. | August 29, 2019 |
New resource | The following resource was added: AWS::Config::OrganizationConfigRule
-
AWS::Config::OrganizationConfigRule
-
Use the
AWS::Config::OrganizationConfigRule resource to create an OrganizationConfigRule that has information about config rules that AWS Config creates in the member accounts.
| August 29, 2019 |
Updated resource | The following resource was updated: AWS::Neptune::DBCluster.
-
AWS::Neptune::DBCluster
-
Use the EnableCloudwatchLogsExports property to specify a
list of log types that are enabled for export to CloudWatch Logs.
| August 22, 2019 |
Updated resource | The following resource was updated: AWS::DMS::ReplicationTask
-
AWS::DMS::ReplicationTask
-
Use the CdcStartPosition property to indicate when you want a change data capture (CDC) operation to start.
Use the CdcStopPosition property to indicate when you want a change data capture (CDC) operation to stop.
| August 16, 2019 |
Updated resources | The following resources were updated: AWS::EC2::ClientVpnEndpoint,
AWS::Greengrass::Group, AWS::Greengrass::ConnectorDefinition,
AWS::Greengrass::CoreDefinition, AWS::Greengrass::DeviceDefinition,
AWS::Greengrass::FunctionDefinition, AWS::Greengrass::LoggerDefinition,
AWS::Greengrass::ResourceDefinition, and
AWS::Greengrass::SubscriptionDefinition. | August 8, 2019 |
Updated resource | The following resource was updated: AWS::AppSync::GraphQLApi.
-
AWS::AppSync::GraphQLApi
-
In the LogConfig property type, when set to TRUE, the
excludeVerboseContent property excludes sections that contain information such
as headers, context, and evaluated mapping templates, regardless of logging level.
| August 8, 2019 |
New resources | The following resources were added: AWS::ManagedBlockchain::Member and
AWS::ManagedBlockchain::Node. | August 8, 2019 |
New resource | The following resource was added: AWS::Glue::MLTransform | August 8, 2019 |
New resource | The following resource was added: AWS::LakeFormation::DataLakeSettings | August 8, 2019 |
New resource | The following resource was added: AWS::LakeFormation::Permissions | August 8, 2019 |
New resource | The following resource was added: AWS::LakeFormation::Resource | August 8, 2019 |
New resource | The following resource was added: AWS::CodeBuild::SourceCredential
-
AWS::CodeBuild::SourceCredential
-
Use the
AWS::CodeBuild::SourceCredential resource to specify information about the credentials for
a GitHub, GitHub Enterprise, or Bitbucket repository used in an AWS CodeBuild build project.
| August 7, 2019 |
Updated resources | The following resources were updated: AWS::Batch::JobDefinition,
AWS::Cognito::UserPool, AWS::Cognito::UserPoolClient, and AWS::Glue::Job.
-
AWS::Batch::JobDefinition
-
In the ContainerProperties property type, use the
LinuxParameters property to specify Linux-specific
modifications that are applied to the container, such as details for
device mappings.
- AWS::Cognito::UserPool
-
Use the UserPoolAddOns property to enable advanced
security risk detection.
Use the VerificationMessageTemplate property to define
the template for verification messages.
- AWS::Cognito::UserPoolClient
-
Use the AnalyticsConfiguration property to define the
Amazon Pinpoint analytics configuration for collecting metrics for this user
pool.
-
AWS::Glue::Job
-
Use the GlueVersion property to determine the versions of
Apache Spark and Python that AWS Glue supports. The Python version indicates
the version supported for jobs of type Spark.
Use the MaxCapacity property to specify the number of
AWS Glue data processing units (DPUs) that can be allocated when this
job runs. A DPU is a relative measure of processing power that consists
of 4 vCPUs of compute capacity and 16 GB of memory.
For the NumberofWorkers property, when you specify a
Python shell job (JobCommand.Name="pythonshell"), you can
allocate either 0.0625 or 1 DPU. The default is 0.0625 DPU. When you
specify an Apache Spark ETL job (JobCommand.Name="glueetl"),
you can allocate from 2 to 100 DPUs. The default is 10 DPUs. This job
type can't have a fractional DPU allocation.
Use the WorkerType property to specify the type of
predefined worker that is allocated when a job runs.
In the JobCommand property type, use the PythonVersion
property to specify the Python version being used to execute a Python
shell job.
| August 2, 2019 |
Stack set limit increases | You can now create a maximum of 100 stack sets in your administrator account,
create a maximum of 2000 stack instances per stack set, and run a maximum of 3500
stack instance operations in each region at the same time, per administrator
account. For more details, see AWS CloudFormation quotas. | August 2, 2019 |
New resource | The following resource was added: AWS::CodeStar::GitHubRepository.
-
AWS::CodeStar::GitHubRepository
-
Use the AWS::CodeStar::GitHubRepository resource to
create a GitHub repository where you can store source code for use with
AWS workflows. If provided, your source code is uploaded to the
repository after it is created.
| August 2, 2019 |
Updated resource | You can now add tags to a CodeCommit repository in your AWS CloudFormation template.
-
AWS::CodeCommit::Repository
-
Use the Tags property to provide information about one or
more tag key-value pairs to use when tagging a repository.
| July 25, 2019 |
Updated resources | The following resource was updated: AWS::AmazonMQ::Broker.
-
AWS::AmazonMQ::Broker
-
Use the encryptionOptions property to specify an
AWS owned key or a customer managed key.
| July 22, 2019 |
Updated resources | The following resources were updated: AWS::Amplify::App and
AWS::Amplify::Branch.
- AWS::Amplify::App
-
Use the AutoBranchCreationConfig property type to
automatically create branches that match a certain pattern.
- AWS::Amplify::Branch
-
Use the EnableAutoBuild property to enable automatic
builds for a branch.
| July 18, 2019 |
New resources | The following resources were added: AWS::IoTEvents::DetectorModel and
AWS::IoTEvents::Input. | July 18, 2019 |
New resource | The following resource was added: AWS::CloudWatch::AnomalyDetector.
-
AWS::CloudWatch::AnomalyDetector
-
Use the AWS::CloudWatch::AnomalyDetector resource to
specify an anomaly detection band for a certain metric and statistic. The
band represents the expected "normal" range for the metric values.
| July 12, 2019 |
Updated resources | The following resources were updated: AWS::IoTAnalytics::Channel and
AWS::IoTAnalytics::Datastore. | June 27, 2019 |
New resources | The following resources were added: AWS::MediaLive::Channel,
AWS::MediaLive::Input, and AWS::MediaLive::InputSecurityGroup.
-
AWS::MediaLive::Channel
-
The AWS::MediaLive::Channel resource creates a channel. A
MediaLive channel ingests and transcodes (decodes and encodes) source
content from the inputs that are attached to that channel, and packages
the new content into outputs.
-
AWS::MediaLive::Input
-
The AWS::MediaLive::Input resource creates an input. A
MediaLive input holds information that describes how the MediaLive
channel is connected to the upstream system that is providing the source
content that is to be transcoded.
-
AWS::MediaLive::InputSecurityGroup
-
The AWS::MediaLive::InputSecurityGroup resource creates
an input security group. A MediaLive input security group is associated
with a MediaLive input. The input security group is an "allow list" of IP
addresses that controls whether an external IP address can push content
to the associated MediaLive input.
| June 27, 2019 |
Updated resource | The following resource was updated: AWS::EC2::LaunchTemplate
-
AWS::EC2::LaunchTemplate
-
In the SpotOptions property type, use
BlockDurationMinutes to specify the required duration for
the Spot Instances, and use ValidUntil to specify the end
date for the Spot request.
| June 25, 2019 |
New resource | The following resource was added: AWS::SecurityHub::Hub | June 25, 2019 |
Updated resources | The following resource were updated: AWS::AppStream::Fleet,
AWS::ServiceCatalog::CloudFormationProvisionedProduct
-
AWS::ServiceCatalog::CloudFormationProvisionedProduct
-
Use the ProvisioningPreferences property to specify
user-defined preferences that will be applied when updating a provisioned
product.
-
AWS::AppStream::Fleet
-
Use the IdleDisconnectTimeoutInSeconds property to
specify the amount of time that users can be idle (inactive) before they
are disconnected from their streaming session and the
DisconnectTimeoutInSeconds time interval begins.
| June 20, 2019 |
New resources | The following resource was added: AWS::Config::RemediationConfiguration,
AWS::ServiceCatalog::StackSetConstraint | June 20, 2019 |
Updated resources | The following resources were updated: AWS::AppMesh::VirtualNode,
AWS::CodeBuild::Project, AWS::EC2::Host, AWS::EC2::Route, AWS::EC2::VPNConnection,
AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition,
AWS::EFS::MountTarget, AWS::ElasticLoadBalancingV2::ListenerRule, AWS::EMR::Cluster,
AWS::IoTAnalytics::Dataset, AWS::KinesisFirehose::DeliveryStream,
AWS::S3::Bucket.
-
AWS::AppMesh::VirtualNode
-
Use ServiceDiscovery to specify whether to use
AWSCloudMap or DNS for service discovery. If
using AWS Cloud Map for service discovery, use
AwsCloudMapServiceDiscovery to specify
ServiceName, NamespaceName, and
Attributes properties. Use
AwsCloudMapInstanceAttribute to specify key-value pairs
for AwsCloudMapServiceDiscovery.
-
AWS::CodeBuild::Project
-
Use the SecondarySourceVersions property to specify an
array of ProjectSourceVersion objects. If
secondarySourceVersions is specified at the build level,
then they take over these secondarySourceVersions (at the
project level).
-
AWS::DLM::LifecyclePolicy
-
In the PolicyDetails property type:
-
Use the PolicyType property to determine the valid
target resource types and actions a policy can manage. This field
defaults to EBS_SNAPSHOT_MANAGEMENT if not present.
-
Use the Parameters property to specify a set of
optional parameters that can be provided by the policy.
In the Schedule property type, use the VariableTags
property to specify a collection of key-value pairs with values
determined dynamically when the policy is executed. Keys may be any valid
Amazon EC2 tag key. Values must be in one of the two following formats:
$(instance-id) or $(timestamp). Variable
tags are only valid for EBS Snapshot Management Instance policies.
-
AWS::EC2::Host
-
Use the HostRecovery property to indicates whether to
enable or disable host recovery for the Dedicated Host.
-
AWS::EC2::Route
-
Use the TransitGatewayId property to specify the ID of a
transit gateway.
-
AWS::EC2::VPNConnection
-
Use the TransitGatewayId property to specify the ID of
the transit gateway associated with the VPN connection.
Use the VpnGatewayId property to specify the ID of the
virtual private gateway at the AWS side of the VPN connection.
-
AWS::ECR::Repository
-
Use the Tags property to specify an array of key-value
pairs to apply to this resource.
-
AWS::ECS::Cluster
-
Use the Tags property to apply metadata to clusters to
help you categorize and organize them.
-
AWS::ECS::Service
-
Use the EnableECSManagedTags property to specify whether
to enable Amazon ECS managed tags for the tasks within the service.
Use the PropagateTags property to specify whether to
propagate the tags from the task definition or the service to the tasks
in the service.
Use the Tags property to apply metadata to services to
help you categorize and organize them.
-
AWS::ECS::TaskDefinition
-
In the ContainerDefinition property type:
-
Use the ResourceRequirements property to specify
the type and amount of a resource to assign to a container. The
only supported resource is a GPU.
-
Use the Secrets property to specify the secrets to
pass to the container.
Use the Tags property to apply metadata to task
definitions to help you categorize and organize them.
-
AWS::EFS::FileSystem
-
Use the LifecyclePolicies property to specify a list of
policies used by EFS lifecycle management to transition files to the
Infrequent Access (IA) storage class.
-
AWS::EFS::MountTarget
-
Use the IpAddress attribute to return the IPv4 address of
the mount target.
-
AWS::ElasticLoadBalancingV2::ListenerRule
-
In the RuleCondition property type:
-
Use the HostHeaderConfig property to specify
information for a host header condition.
-
Use the HttpHeaderConfig property to specify
information for an HTTP header condition.
-
Use the HttpRequestMethodConfig property to specify
information for an HTTP method condition.
-
Use the PathPatternConfig property to specify
information for a path pattern condition.
-
Use the QueryStringConfig property to specify
information for a query string condition.
-
Use the SourceIpConfig property to specify
information for a source IP condition.
-
AWS::EMR::Cluster
-
In the JobFlowInstancesConfig property type, use the
Ec2SubnetIds property to specify multiple EC2 subnet
IDs.
-
AWS::IoTAnalytics::Dataset
-
When data set contents are created they are delivered to destinations
specified in the ContentDeliveryRules property.
Use the VersioningConfiguration property to specify how
many versions of data set contents are kept. If not specified or set to
null, only the latest version plus the latest succeeded version (if they
are different) are kept for the time period specified by the
"retentionPeriod" parameter.
-
AWS::KinesisFirehose::DeliveryStream
-
In the ExtendedS3DestinationConfiguration property type:
-
Use the DataFormatConversionConfiguration property
to specify the serializer, deserializer, and schema for converting
data from the JSON format to the Parquet or ORC format before
writing it to Amazon S3.
-
Use the ErrorOutputPrefix property to specify a
prefix that Amazon Kinesis Data Firehose evaluates and adds to failed records before
writing them to S3.
-
The Prefix property is no longer required.
In the S3DestinationConfiguration property type, use the
ErrorOutputPrefix property to specify a prefix that
Amazon Kinesis Data Firehose evaluates and adds to failed records before writing them to
S3.
-
AWS::S3::Bucket
-
Use the ObjectLockConfiguration property to specify an
object lock configuration for the specified bucket.
Use the ObjectLockEnabled property to specify whether
this bucket has an object lock configuration enabled.
| June 13, 2019 |
New resources | The following resources were added: AWS::Amplify::App, AWS::Amplify::Branch,
AWS::Amplify::Domain, AWS::EC2::ClientVpnAuthorizationRule,
AWS::EC2::ClientVpnEndpoint, AWS::EC2::ClientVpnRoute,
AWS::EC2::ClientVpnTargetNetworkAssociation, AWS::MSK::Cluster.
- AWS::Amplify::App
-
Creates apps in AWS Amplify Console. An app is a collection of
branches.
- AWS::Amplify::Branch
-
Creates a new branch within an AWS Amplify Console app.
- AWS::Amplify::Domain
-
Allows you to connect a custom domain to your AWS Amplify Console
app.
-
AWS::EC2::ClientVpnAuthorizationRule
-
Specifies an ingress authorization rule to add to a Client VPN endpoint.
Ingress authorization rules act as firewall rules that grant access to
networks.
-
AWS::EC2::ClientVpnEndpoint
-
Specifies a Client VPN endpoint. A Client VPN endpoint is the resource you
create and configure to enable and manage Client VPN sessions. It is the
destination endpoint at which all Client VPN sessions are terminated.
-
AWS::EC2::ClientVpnRoute
-
Specifies a network route to add to a Client VPN endpoint. Each Client VPN
endpoint has a route table that describes the available destination
network routes. Each route in the route table specifies the path for
traffic to specific resources or networks.
-
AWS::EC2::ClientVpnTargetNetworkAssociation
-
Specifies a target network to associate with a Client VPN endpoint. A
target network is a subnet in a VPC. You can associate multiple subnets
from the same VPC with a Client VPN endpoint.
-
AWS::MSK::Cluster
-
Use the AWS::MSK::Cluster resource to create an Amazon MSK
cluster.
| June 13, 2019 |
Updated resources | The following resource was updated: AWS::SageMaker::NotebookInstance.
-
AWS::SageMaker::NotebookInstance
-
Use the AcceleratorTypes property to specify a list of
Amazon Elastic Inference (EI) instance types to associate with this notebook
instance.
Use the AdditionalCodeRepositories property to specify an
array of up to three Git repositories associated with the notebook
instance.
Use the DefaultCodeRepository property to specify the Git
repository associated with the notebook instance as its default code
repository.
| June 3, 2019 |
New resources | The following resources were added: AWS::IoTThingsGraph::FlowTemplate,
AWS::Pinpoint::ADMChannel, AWS::Pinpoint::APNSChannel,
AWS::Pinpoint::APNSSandboxChannel, AWS::Pinpoint::APNSVoipChannel,
AWS::Pinpoint::APNSVoipSandboxChannel, AWS::Pinpoint::App,
AWS::Pinpoint::ApplicationSettings, AWS::Pinpoint::BaiduChannel,
AWS::Pinpoint::Campaign, AWS::Pinpoint::EmailChannel, AWS::Pinpoint::EventStream,
AWS::Pinpoint::GCMChannel, AWS::Pinpoint::SMSChannel, AWS::Pinpoint::Segment,
AWS::Pinpoint::VoiceChannel, AWS::SageMaker::CodeRepository, and
AWS::MSK::Cluster.
-
AWS::IoTThingsGraph::FlowTemplate
-
Use the AWS::IoTThingsGraph::FlowTemplate resource to
specify a workflow template.
-
AWS::Pinpoint::ADMChannel
-
Use the AWS::Pinpoint::ADMChannel resource to specify an
ADM channel. You can use the ADM channel to send push notifications
through the Amazon Device Messaging (ADM) service to apps that run on
Amazon devices, such as Kindle Fire tablets.
-
AWS::Pinpoint::APNSChannel
-
Use the AWS::Pinpoint::APNSChannel resource to specify an
APNs channel. You can use the APNs channel to send push notification
messages to the Apple Push Notification service (APNs).
-
AWS::Pinpoint::APNSSandboxChannel
-
Use the AWS::Pinpoint::APNSSandboxChannel resource to
specify an APNs sandbox channel. You can use the APNs sandbox channel to
send push notification messages to the sandbox environment of the Apple
Push Notification service (APNs).
-
AWS::Pinpoint::APNSVoipChannel
-
Use the AWS::Pinpoint::APNSVoipChannel resource to
specify an APNs VoIP channel. You can use the APNs VoIP channel to send
VoIP notification messages to the Apple Push Notification service
(APNs).
-
AWS::Pinpoint::APNSVoipSandboxChannel
-
Use the AWS::Pinpoint::APNSVoipSandboxChannel resource to
specify an APNs VoIP sandbox channel. You can use the APNs VoIP sandbox
channel to send VoIP notification messages to the sandbox environment of
the Apple Push Notification service (APNs).
-
AWS::Pinpoint::App
-
Use the AWS::Pinpoint::App resource to specify an
app.
-
AWS::Pinpoint::ApplicationSettings
-
Use the AWS::Pinpoint::ApplicationSettings resource to
specify the settings for an Amazon Pinpoint app.
-
AWS::Pinpoint::BaiduChannel
-
Use the AWS::Pinpoint::BaiduChannel resource to update
the settings of the Baidu channel for an application.
-
AWS::Pinpoint::Campaign
-
Use the AWS::Pinpoint::Campaign resource to update the
settings for a campaign.
-
AWS::Pinpoint::EmailChannel
-
Use the AWS::Pinpoint::EmailChannel resource to update
the status and settings of the email channel for an application.
-
AWS::Pinpoint::EventStream
-
Use the AWS::Pinpoint::EventStream resource to create a
new event stream for an application or update the settings of an existing
event stream for an application.
-
AWS::Pinpoint::GCMChannel
-
Use the AWS::Pinpoint::GCMChannel resource to specify a
GCM channel. You can use the GCM channel to send push notification
messages to the Firebase Cloud Messaging (FCM) service, which replaced
the Google Cloud Messaging (GCM) service.
-
AWS::Pinpoint::SMSChannel
-
Use the AWS::Pinpoint::SMSChannel resource to specify an
SMS channel. To send an SMS text message, you send the message through
the SMS channel.
-
AWS::Pinpoint::Segment
-
Use the AWS::Pinpoint::Segment resource to create a new
segment for an application or update the configuration, dimension, and
other settings for an existing segment that's associated with an
application.
-
AWS::Pinpoint::VoiceChannel
-
Use the AWS::Pinpoint::VoiceChannel resource to update
the status and settings of the voice channel for an application.
-
AWS::SageMaker::CodeRepository
-
Use the AWS::SageMaker::CodeRepository resource to
specify a Git repository as a resource in your SageMaker account.
| June 3, 2019 |
Updated resources | The following resources were updated: AWS::CodeCommit::Repository and
AWS::EC2::LaunchTemplate.
-
Code
-
Use the Code resource to provide information about code
to be committed.
-
S3
-
Use the S3 resource to provide information about the Amazon S3
bucket that contains the code that will be committed to the new
repository.
-
AWS::EC2::LaunchTemplate
-
In the NetworkInterface property, use InterfaceType to
specify the type of network interface.
| May 23, 2019 |
New resources | The following resources were added: AWS::Backup::BackupPlan,
AWS::Backup::BackupSelection, AWS::Backup::BackupVault,
AWS::PinpointEmail::ConfigurationSet,
AWS::PinpointEmail::ConfigurationSetEventDestination,
AWS::PinpointEmail::DedicatedIpPool, AWS::PinpointEmail::Identity,
AWS::Transfer::Server, AWS::Transfer::User, AWS::WAFRegional::GeoMatchSet,
AWS::WAFRegional::RateBasedRule, and AWS::WAFRegional::RegexPatternSet.
-
AWS::Backup::BackupPlan
-
Contains an optional backup plan display name and an array of
BackupRule objects, each of which specifies a backup rule. Each rule in a
backup plan is a separate scheduled task and can back up a different
selection of AWS resources.
- AWS::Backup::BackupSelection
-
Specifies a set of resources to assign to a backup plan.
- AWS::Backup::BackupVault
-
Creates a logical container where backups are stored. A
CreateBackupVault request includes a name, optionally one or more
resource tags, an encryption key, and a request ID.
-
AWS::PinpointEmail::ConfigurationSet
-
Use the AWS::PinpointEmail::ConfigurationSet resource to
specify configuration sets for the Amazon Pinpoint Email API.
-
AWS::PinpointEmail::ConfigurationSetEventDestination
-
Use the
AWS::PinpointEmail::ConfigurationSetEventDestination
resource to specify destinations for events related to sending email in
the Amazon Pinpoint Email API.
-
AWS::PinpointEmail::DedicatedIpPool
-
Use the AWS::PinpointEmail::DedicatedIpPool resource to
specify groups of dedicated IP addresses in the Amazon Pinpoint Email API.
-
AWS::PinpointEmail::Identity
-
Use the AWS::PinpointEmail::Identity resource to specify
identities (email addresses or domains) for sending email through the
Amazon Pinpoint Email API.
-
AWS::Transfer::Server
-
Creates an autoscaling virtual server based on Secure File Transfer
Protocol (SFTP) in AWS.
-
AWS::Transfer::User
-
Creates a user and associates them with an existing Secure File
Transfer Protocol (SFTP) server.
-
AWS::WafRegional::GeoMatchSet
-
The AWS::WAFRegional::GeoMatchSet resource contains one
or more countries that AWS WAF will search for.
-
AWS::WafRegional::RateBasedRule
-
The AWS::WAFRegional::RateBasedRule resource is identical
to a regular Rule, with one addition: a RateBasedRule counts the number
of requests that arrive from a specified IP address every 5
minutes.
-
AWS::WafRegional::RegexPatternSet
-
The AWS::WAFRegional::RegexPatternSet resource specifies
the regular expression (regex) pattern that you want AWS WAF to search
for.
| May 23, 2019 |
Updated resources | The following resources were updated: AWS::AppSync::GraphQLApi,
AWS::Cognito::UserPool, AWS::Glue::Classifier, AWS::Glue::Crawler,
AWS::Glue::DevEndpoint, AWS::Glue::Job, and AWS::Glue::Trigger.
-
AWS::AppSync::GraphQLApi
-
Use the AdditionalAuthenticationProviders property to
specify a list of additional authentication providers for the GraphqlApi
API.
Use the Tags property to specify an arbitrary set of tags
(key-value pairs) for this GraphQL API.
-
AWS::Cognito::UserPool
-
In the PasswordPolicy property type, use the
TemporaryPasswordValidityDays property to specify the
number of days a temporary password is valid. If the user does not
sign-in during this time, their password will need to be reset by an
administrator.
When you set TemporaryPasswordValidityDays for a user
pool, you will no longer be able to set the deprecated
UnusedAccountValidityDays value for that user
pool.
- AWS::Glue::Classifier
-
Use the CsvClassifier property to specify a classifier
for comma-separated values (CSV).
-
AWS::Glue::Crawler
-
Use the CrawlerSecurityConfiguration property to specify
the name of the SecurityConfiguration structure to be used
by this crawler.
Use the Tags property to specify the tags to use with
this crawler request. You can use tags to limit access to the
crawler.
-
AWS::Glue::DevEndpoint
-
Use the SecurityConfiguration property to specify the
name of the SecurityConfiguration structure to be used by
this DevEndpoint.
Use the Tags property to specify the tags to use with
this DevEndpoint. You can use tags to limit access to the
DevEndpoint.
-
AWS::Glue::Job
-
Use the SecurityConfiguration property to specify the
name of the SecurityConfiguration structure to be used with
this job.
Use the Tags property to specify the tags to use with
this job. You can use tags to limit access to the job.
-
AWS::Glue::Trigger
-
Use the Tags property to specify the tags to use with
this trigger. You can use tags to limit access to the trigger.
| May 17, 2019 |
New resources | The following resources were added: AWS::Glue::DataCatalogEncryptionSettings,
AWS::Glue::SecurityConfiguration, and AWS::MediaStore::Container.
-
AWS::Glue::DataCatalogEncryptionSettings
-
Sets the security configuration for a specified catalog. After the
configuration has been set, the specified encryption is applied to every
catalog write thereafter.
-
AWS::Glue::SecurityConfiguration
-
Creates a new security configuration.
- AWS::MediaStore::Container
-
The AWS::MediaStore::Container resource specifies a
storage container to hold objects. A container is similar to a bucket in
Amazon S3.
When you create a container using AWS CloudFormation, the template manages data for
five API actions: creating a container, setting access logging, updating
the default container policy, adding a cross-origin resource sharing
(CORS) policy, and adding an object lifecycle policy.
| May 17, 2019 |
Updated resource | The following resource was updated:
AWS::ServiceCatalog::CloudFormationProduct. | May 3, 2019 |
New resources | The following resources were added: AWS::ApiGatewayV2::ApiMapping and
AWS::ApiGatewayV2::DomainName. | May 3, 2019 |
Limit for resources in concurrent stack operations | AWS CloudFormation now enforces an account limit for the number of resources in concurrent
stack operations. This limit is determined by region. For more information, see AWS CloudFormation quotas | April 30, 2019 |
Updated resources | The following resources were updated: AWS::Greengrass::FunctionDefinition and
AWS::Greengrass::FunctionDefinitionVersion. | April 25, 2019 |
Updated resources | The following resources were updated: AWS::ECS::TaskDefinition,
AWS::ElasticLoadBalancingV2::TargetGroup
-
AWS::ECS::TaskDefinition
-
Use the ProxyConfiguration property to specify the
configuration details for an App Mesh proxy.
In the ContainerDefinition property type:
-
Use the DependsOn property to specify the
dependencies defined for container startup and shutdown.
-
Use the StartTimeout property to specify the time
duration to wait before giving up on resolving dependencies for a
container.
-
Use the StopTimeout property to specify the time
duration to wait before the container is forcefully killed if it
doesn't exit normally on its own.
-
AWS::ElasticLoadBalancingV2::TargetGroup
-
Use the HealthCheckEnabled property to indicate whether
health checks are enabled.
The Port, Protocol, and VpcId
properties are now required only if the target type is
instance or ip.
| April 18, 2019 |
New resource | The following resource was added: AWS::EC2::CapacityReservation. | April 18, 2019 |
Updated resources | The following resource was updated: AWS::Batch::JobDefinition and
AWS::ServiceCatalog::CloudFormationProvisionedProduct.
-
AWS::ServiceCatalog::CloudFormationProvisionedProduct
-
The Tags property requires the provisioned product to
have a RESOURCE_UPDATE constraint with
TagUpdatesOnProvisionedProduct set to
ALLOWED to allow tag updates.
The Tags property now requires no interruption upon
update.
| April 4, 2019 |
New resource | The following resource was added:
AWS::ServiceCatalog::ResourceUpdateConstraint. | April 4, 2019 |
Updated resources | The following resources were updated: AWS::AppStream::Fleet,
AWS::AppStream::ImageBuilder, AWS::AppStream::Stack, and AWS::EKS::Cluster. | March 28, 2019 |
New resources | The following resources were added: AWS::AppMesh::Mesh, AWS::AppMesh::Route,
AWS::AppMesh::VirtualNode, AWS::AppMesh::VirtualRouter, and
AWS::AppMesh::VirtualService.
-
AWS::AppMesh::Mesh
-
The AWS::AppMesh::Mesh resource to specify a service
mesh. A service mesh is a logical boundary for network traffic between
the services that reside within it.
-
AWS::AppMesh::Route
-
Use the AWS::AppMesh::Route resource to specify a route
that's associated with a virtual router.
-
AWS::AppMesh::VirtualNode
-
Use the AWS::AppMesh::VirtualNode resource to specify a
virtual node within a service mesh.
-
AWS::AppMesh::VirtualRouter
-
Use the AWS::AppMesh::VirtualRouter resource to specify a
virtual router within a service mesh.
-
|