Automated SDK generation @ aws-cloudformation-user-guide 19dc52cd3f20…

…07d6d268b65b739ffb5ebf8c1e76 (#2006)

.docs.version

@@ -1 +1 @@
-2a28a32b8166d9c424d34fa9a3eef3a6d28ca191
+c972fb9cb9a2363477e3b770873104e646806f92

aws-cloudformation-schema/aws-acmpca-certificateauthority.json

@@ -383,7 +383,8 @@
     "tagOnCreate" : true,
     "tagUpdatable" : true,
     "cloudFormationSystemTags" : false,
-    "tagProperty" : "/properties/Tags"
+    "tagProperty" : "/properties/Tags",
+    "permissions" : [ "acm-pca:TagCertificateAuthority", "acm-pca:UntagCertificateAuthority" ]
   },
   "additionalProperties" : false,
   "required" : [ "Type", "KeyAlgorithm", "SigningAlgorithm", "Subject" ],

aws-cloudformation-schema/aws-athena-datacatalog.json

@@ -77,7 +77,7 @@
       "permissions" : [ "athena:DeleteDataCatalog" ]
     },
     "list" : {
-      "permissions" : [ "athena:ListDataCatalog" ]
+      "permissions" : [ "athena:ListDataCatalogs" ]
     }
   },
   "primaryIdentifier" : [ "/properties/Name" ],

aws-cloudformation-schema/aws-budgets-budgetsaction.json

@@ -204,6 +204,7 @@
     "tagOnCreate" : true,
     "tagUpdatable" : true,
     "cloudFormationSystemTags" : true,
-    "tagProperty" : "/properties/ResourceTags"
+    "tagProperty" : "/properties/ResourceTags",
+    "permissions" : [ "budgets:TagResource", "budgets:UntagResource", "budgets:ListTagsForResource" ]
   }
 }

aws-cloudformation-schema/aws-codeconnections-connection.json

@@ -78,7 +78,8 @@
     "tagOnCreate" : true,
     "tagUpdatable" : true,
     "cloudFormationSystemTags" : true,
-    "tagProperty" : "/properties/Tags"
+    "tagProperty" : "/properties/Tags",
+    "permissions" : [ "codeconnections:TagResource", "codeconnections:ListTagsForResource", "codeconnections:UntagResource" ]
   },
   "handlers" : {
     "create" : {

aws-cloudformation-schema/aws-config-configrule.json

@@ -1,6 +1,6 @@
 {
   "typeName" : "AWS::Config::ConfigRule",
-  "description" : "You must first create and start the CC configuration recorder in order to create CC managed rules with CFNlong. For more information, see [Managing the Configuration Recorder](https://docs.aws.amazon.com/config/latest/developerguide/stop-start-recorder.html).\n Adds or updates an CC rule to evaluate if your AWS resources comply with your desired configurations. For information on how many CC rules you can have per account, see [Service Limits](https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html) in the *Developer Guide*.\n There are two types of rules: *Managed Rules* and *Custom Rules*. You can use the ``ConfigRule`` resource to create both CC Managed Rules and CC Custom Rules.\n CC Managed Rules are predefined, customizable rules created by CC. For a list of managed rules, see [List of Managed Rules](https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html). If you are adding an CC managed rule, you must specify the rule's identifier for the ``SourceIdentifier`` key.\n CC Custom Rules are rules that you create from scratch. There are two ways to create CC custom rules: with Lambda functions ([Developer Guide](https://docs.aws.amazon.com/config/latest/developerguide/gettingstarted-concepts.html#gettingstarted-concepts-function)) and with CFNGUARDshort ([Guard GitHub Repository](https://docs.aws.amazon.com/https://github.com/aws-cloudformation/cloudformation-guard)), a policy-as-code language. CC custom rules created with LAMlong are called *Custom Lambda Rules* and CC custom rules created with CFNGUARDshort are called *Custom Policy Rules*.\n If you are adding a new CC Custom LAM rule, you first need to create an LAMlong function that the rule invokes to evaluate your resources. When you use the ``ConfigRule`` resource to add a Custom LAM rule to CC, you must specify the Amazon Resource Name (ARN) that LAMlong assigns to the function. You specify the ARN in the ``SourceIdentifier`` key. This key is part of the ``Source`` object, which is part of the ``ConfigRule`` object. \n For any new CC rule that you add, specify the ``ConfigRuleName`` in the ``ConfigRule`` object. Do not specify the ``ConfigRuleArn`` or the ``ConfigRuleId``. These values are generated by CC for new rules.\n If you are updating a rule that you added previously, you can specify the rule by ``ConfigRuleName``, ``ConfigRuleId``, or ``ConfigRuleArn`` in the ``ConfigRule`` data type that you use in this request.\n For more information about developing and using CC rules, see [Evaluating Resources with Rules](https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html) in the *Developer Guide*.",
+  "description" : "You must first create and start the CC configuration recorder in order to create CC managed rules with CFNlong. For more information, see [Managing the Configuration Recorder](https://docs.aws.amazon.com/config/latest/developerguide/stop-start-recorder.html).\n  Adds or updates an CC rule to evaluate if your AWS resources comply with your desired configurations. For information on how many CC rules you can have per account, see [Service Limits](https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html) in the *Developer Guide*.\n There are two types of rules: *Managed Rules* and *Custom Rules*. You can use the ``ConfigRule`` resource to create both CC Managed Rules and CC Custom Rules.\n  CC Managed Rules are predefined, customizable rules created by CC. For a list of managed rules, see [List of Managed Rules](https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html). If you are adding an CC managed rule, you must specify the rule's identifier for the ``SourceIdentifier`` key.\n  CC Custom Rules are rules that you create from scratch. There are two ways to create CC custom rules: with Lambda functions ([Developer Guide](https://docs.aws.amazon.com/config/latest/developerguide/gettingstarted-concepts.html#gettingstarted-concepts-function)) and with CFNGUARDshort ([Guard GitHub Repository](https://docs.aws.amazon.com/https://github.com/aws-cloudformation/cloudformation-guard)), a policy-as-code language. CC custom rules created with LAMlong are called *Custom Lambda Rules* and CC custom rules created with CFNGUARDshort are called *Custom Policy Rules*.\n If you are adding a new CC Custom LAM rule, you first need to create an LAMlong function that the rule invokes to evaluate your resources. When you use the ``ConfigRule`` resource to add a Custom LAM rule to CC, you must specify the Amazon Resource Name (ARN) that LAMlong assigns to the function. You specify the ARN in the ``SourceIdentifier`` key. This key is part of the ``Source`` object, which is part of the ``ConfigRule`` object. \n For any new CC rule that you add, specify the ``ConfigRuleName`` in the ``ConfigRule`` object. Do not specify the ``ConfigRuleArn`` or the ``ConfigRuleId``. These values are generated by CC for new rules.\n If you are updating a rule that you added previously, you can specify the rule by ``ConfigRuleName``, ``ConfigRuleId``, or ``ConfigRuleArn`` in the ``ConfigRule`` data type that you use in this request.\n For more information about developing and using CC rules, see [Evaluating Resources with Rules](https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html) in the *Developer Guide*.",
   "sourceUrl" : "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-config.git",
   "definitions" : {
     "Scope" : {

aws-cloudformation-schema/aws-connect-instance.json

@@ -148,7 +148,8 @@
     "tagOnCreate" : true,
     "tagUpdatable" : true,
     "cloudFormationSystemTags" : true,
-    "tagProperty" : "/properties/Tags"
+    "tagProperty" : "/properties/Tags",
+    "permissions" : [ "connect:ListTagsForResource", "connect:UntagResource", "connect:TagResource" ]
   },
   "handlers" : {
     "create" : {

aws-cloudformation-schema/aws-connect-quickconnect.json

@@ -185,6 +185,7 @@
     "tagOnCreate" : true,
     "tagUpdatable" : true,
     "cloudFormationSystemTags" : true,
-    "tagProperty" : "/properties/Tags"
+    "tagProperty" : "/properties/Tags",
+    "permissions" : [ "connect:TagResource", "connect:UntagResource" ]
   }
 }

aws-cloudformation-schema/aws-connect-routingprofile.json

@@ -6,7 +6,7 @@
     "Channel" : {
       "description" : "The channels that agents can handle in the Contact Control Panel (CCP).",
       "type" : "string",
-      "enum" : [ "VOICE", "CHAT", "TASK" ]
+      "enum" : [ "VOICE", "CHAT", "TASK", "EMAIL" ]
     },
     "Concurrency" : {
       "description" : "The number of contacts an agent can have on a channel simultaneously.",

aws-cloudformation-schema/aws-datasync-locationefs.json

@@ -120,7 +120,7 @@
   "required" : [ "Ec2Config" ],
   "readOnlyProperties" : [ "/properties/LocationArn", "/properties/LocationUri" ],
   "primaryIdentifier" : [ "/properties/LocationArn" ],
-  "createOnlyProperties" : [ "/properties/Ec2Config", "/properties/EfsFilesystemArn", "/properties/Subdirectory", "/properties/FileSystemAccessRoleArn", "/properties/InTransitEncryption", "/properties/AccessPointArn" ],
+  "createOnlyProperties" : [ "/properties/Ec2Config", "/properties/EfsFilesystemArn" ],
   "writeOnlyProperties" : [ "/properties/EfsFilesystemArn", "/properties/Subdirectory" ],
   "handlers" : {
     "create" : {
@@ -130,7 +130,7 @@
       "permissions" : [ "datasync:DescribeLocationEfs", "datasync:ListTagsForResource" ]
     },
     "update" : {
-      "permissions" : [ "datasync:DescribeLocationEfs", "datasync:ListTagsForResource", "datasync:TagResource", "datasync:UntagResource" ]
+      "permissions" : [ "datasync:UpdateLocationEfs", "datasync:DescribeLocationEfs", "datasync:ListTagsForResource", "datasync:TagResource", "datasync:UntagResource", "elasticfilesystem:DescribeFileSystems", "elasticfilesystem:DescribeAccessPoints" ]
     },
     "delete" : {
       "permissions" : [ "datasync:DeleteLocation" ]

aws-cloudformation-schema/aws-datasync-locationfsxlustre.json

@@ -88,7 +88,7 @@
   "readOnlyProperties" : [ "/properties/LocationArn", "/properties/LocationUri" ],
   "writeOnlyProperties" : [ "/properties/Subdirectory", "/properties/FsxFilesystemArn" ],
   "primaryIdentifier" : [ "/properties/LocationArn" ],
-  "createOnlyProperties" : [ "/properties/FsxFilesystemArn", "/properties/SecurityGroupArns", "/properties/Subdirectory" ],
+  "createOnlyProperties" : [ "/properties/FsxFilesystemArn", "/properties/SecurityGroupArns" ],
   "handlers" : {
     "create" : {
       "permissions" : [ "datasync:CreateLocationFsxLustre", "datasync:DescribeLocationFsxLustre", "datasync:ListTagsForResource", "datasync:TagResource", "fsx:DescribeFileSystems", "ec2:DescribeNetworkInterfaces", "ec2:DescribeSubnets", "ec2:DescribeSecurityGroups" ]
@@ -97,7 +97,7 @@
       "permissions" : [ "datasync:DescribeLocationFsxLustre", "datasync:ListTagsForResource" ]
     },
     "update" : {
-      "permissions" : [ "datasync:DescribeLocationFsxLustre", "datasync:ListTagsForResource", "datasync:TagResource", "datasync:UntagResource" ]
+      "permissions" : [ "datasync:DescribeLocationFsxLustre", "datasync:ListTagsForResource", "datasync:UpdateLocationFsxLustre", "datasync:TagResource", "datasync:UntagResource", "fsx:DescribeFileSystems", "ec2:DescribeNetworkInterfaces" ]
     },
     "delete" : {
       "permissions" : [ "datasync:DeleteLocation" ]

aws-cloudformation-schema/aws-datasync-locationfsxontap.json

@@ -174,7 +174,7 @@
   "readOnlyProperties" : [ "/properties/LocationArn", "/properties/LocationUri", "/properties/FsxFilesystemArn" ],
   "writeOnlyProperties" : [ "/properties/Protocol", "/properties/Subdirectory" ],
   "primaryIdentifier" : [ "/properties/LocationArn" ],
-  "createOnlyProperties" : [ "/properties/StorageVirtualMachineArn", "/properties/SecurityGroupArns", "/properties/Protocol", "/properties/Subdirectory" ],
+  "createOnlyProperties" : [ "/properties/StorageVirtualMachineArn", "/properties/SecurityGroupArns" ],
   "handlers" : {
     "create" : {
       "permissions" : [ "datasync:CreateLocationFsxOntap", "datasync:DescribeLocationFsxOntap", "datasync:ListTagsForResource", "datasync:TagResource", "fsx:DescribeStorageVirtualMachines", "fsx:DescribeFileSystems", "ec2:DescribeNetworkInterfaces", "ec2:DescribeSubnets", "ec2:DescribeSecurityGroups" ]
@@ -183,7 +183,7 @@
       "permissions" : [ "datasync:DescribeLocationFsxOntap", "datasync:ListTagsForResource" ]
     },
     "update" : {
-      "permissions" : [ "datasync:DescribeLocationFsxOntap", "datasync:ListTagsForResource", "datasync:TagResource", "datasync:UntagResource" ]
+      "permissions" : [ "datasync:UpdateLocationFsxOntap", "datasync:DescribeLocationFsxOntap", "datasync:ListTagsForResource", "datasync:TagResource", "datasync:UntagResource", "fsx:DescribeFileSystems", "fsx:DescribeStorageVirtualMachines", "ec2:DescribeNetworkInterfaces" ]
     },
     "delete" : {
       "permissions" : [ "datasync:DeleteLocation" ]

aws-cloudformation-schema/aws-datasync-locationfsxopenzfs.json

@@ -124,7 +124,7 @@
   "readOnlyProperties" : [ "/properties/LocationArn", "/properties/LocationUri" ],
   "writeOnlyProperties" : [ "/properties/Subdirectory", "/properties/FsxFilesystemArn" ],
   "primaryIdentifier" : [ "/properties/LocationArn" ],
-  "createOnlyProperties" : [ "/properties/FsxFilesystemArn", "/properties/SecurityGroupArns", "/properties/Protocol", "/properties/Subdirectory" ],
+  "createOnlyProperties" : [ "/properties/FsxFilesystemArn", "/properties/SecurityGroupArns" ],
   "handlers" : {
     "create" : {
       "permissions" : [ "datasync:CreateLocationFsxOpenZfs", "datasync:DescribeLocationFsxOpenZfs", "datasync:ListTagsForResource", "datasync:TagResource", "fsx:DescribeFileSystems", "ec2:DescribeNetworkInterfaces", "ec2:DescribeSubnets", "ec2:DescribeSecurityGroups" ]
@@ -133,7 +133,7 @@
       "permissions" : [ "datasync:DescribeLocationFsxOpenZfs", "datasync:ListTagsForResource" ]
     },
     "update" : {
-      "permissions" : [ "datasync:DescribeLocationFsxOpenZfs", "datasync:ListTagsForResource", "datasync:TagResource", "datasync:UntagResource" ]
+      "permissions" : [ "datasync:DescribeLocationFsxOpenZfs", "datasync:UpdateLocationFsxOpenZfs", "datasync:ListTagsForResource", "datasync:TagResource", "datasync:UntagResource", "fsx:DescribeFileSystems", "ec2:DescribeNetworkInterfaces" ]
     },
     "delete" : {
       "permissions" : [ "datasync:DeleteLocation" ]

aws-cloudformation-schema/aws-datasync-locationfsxwindows.json

@@ -103,7 +103,7 @@
   "readOnlyProperties" : [ "/properties/LocationArn", "/properties/LocationUri" ],
   "writeOnlyProperties" : [ "/properties/Password", "/properties/Subdirectory", "/properties/FsxFilesystemArn" ],
   "primaryIdentifier" : [ "/properties/LocationArn" ],
-  "createOnlyProperties" : [ "/properties/Domain", "/properties/FsxFilesystemArn", "/properties/Password", "/properties/SecurityGroupArns", "/properties/Subdirectory", "/properties/User" ],
+  "createOnlyProperties" : [ "/properties/FsxFilesystemArn", "/properties/SecurityGroupArns" ],
   "handlers" : {
     "create" : {
       "permissions" : [ "datasync:CreateLocationFsxWindows", "datasync:DescribeLocationFsxWindows", "datasync:ListTagsForResource", "datasync:TagResource", "fsx:DescribeFileSystems", "ec2:DescribeNetworkInterfaces", "ec2:DescribeSubnets", "ec2:DescribeSecurityGroups" ]
@@ -112,7 +112,7 @@
       "permissions" : [ "datasync:DescribeLocationFsxWindows", "datasync:ListTagsForResource" ]
     },
     "update" : {
-      "permissions" : [ "datasync:DescribeLocationFsxWindows", "datasync:ListTagsForResource", "datasync:TagResource", "datasync:UntagResource" ]
+      "permissions" : [ "datasync:DescribeLocationFsxWindows", "datasync:UpdateLocationFsxWindows", "datasync:ListTagsForResource", "datasync:TagResource", "datasync:UntagResource", "fsx:DescribeFileSystems", "ec2:DescribeNetworkInterfaces" ]
     },
     "delete" : {
       "permissions" : [ "datasync:DeleteLocation" ]

aws-cloudformation-schema/aws-datasync-locations3.json

@@ -91,12 +91,13 @@
     "tagOnCreate" : true,
     "tagUpdatable" : true,
     "cloudFormationSystemTags" : true,
-    "tagProperty" : "/properties/Tags"
+    "tagProperty" : "/properties/Tags",
+    "permissions" : [ "datasync:TagResource", "datasync:UntagResource", "datasync:ListTagsForResource" ]
   },
   "required" : [ "S3Config" ],
   "readOnlyProperties" : [ "/properties/LocationArn", "/properties/LocationUri" ],
   "primaryIdentifier" : [ "/properties/LocationArn" ],
-  "createOnlyProperties" : [ "/properties/S3Config", "/properties/S3StorageClass", "/properties/Subdirectory", "/properties/S3BucketArn" ],
+  "createOnlyProperties" : [ "/properties/S3BucketArn" ],
   "writeOnlyProperties" : [ "/properties/Subdirectory", "/properties/S3BucketArn" ],
   "handlers" : {
     "create" : {
@@ -106,7 +107,7 @@
       "permissions" : [ "datasync:DescribeLocationS3", "datasync:ListTagsForResource" ]
     },
     "update" : {
-      "permissions" : [ "datasync:DescribeLocationS3", "datasync:ListTagsForResource", "datasync:TagResource", "datasync:UntagResource" ]
+      "permissions" : [ "datasync:DescribeLocationS3", "datasync:ListTagsForResource", "datasync:TagResource", "datasync:UntagResource", "datasync:UpdateLocationS3" ]
     },
     "delete" : {
       "permissions" : [ "datasync:DeleteLocation" ]

aws-cloudformation-schema/aws-ec2-clientvpnendpoint.json

@@ -46,6 +46,9 @@
         "type" : "string"
       }
     },
+    "DisconnectOnSessionTimeout" : {
+      "type" : "boolean"
+    },
     "ConnectionLogOptions" : {
       "$ref" : "#/definitions/ConnectionLogOptions"
     },