Automated SDK generation @ aws-cloudformation-user-guide 19dc52cd3f20…

…07d6d268b65b739ffb5ebf8c1e76 (#2031)

*Automated PR*

#### Types
- `🟡` "aws-native:ecs:ServiceManagedEbsVolumeConfiguration": properties: "volumeInitializationRate" missing
- `🔴` "aws-native:iotsitewise:GatewayGreengrass" missing
- `🟡` "aws-native:iotsitewise:GatewayPlatform": properties: "greengrass" type changed from "#/types/aws-native:iotsitewise:GatewayGreengrass" to "pulumi.json#/Any"

.docs.version

@@ -1 +1 @@
-2e0e5c3b528d2a1fc994b7c6794edfdd37ef8d72
+6ff512d2a98403936db88a924257572843be3ffe

aws-cloudformation-schema/aws-aps-scraper.json

@@ -37,6 +37,21 @@
       } ],
       "additionalProperties" : false
     },
+    "RoleConfiguration" : {
+      "description" : "Role configuration",
+      "type" : "object",
+      "properties" : {
+        "SourceRoleArn" : {
+          "description" : "IAM Role in source account",
+          "type" : "string"
+        },
+        "TargetRoleArn" : {
+          "description" : "IAM Role in the target account",
+          "type" : "string"
+        }
+      },
+      "additionalProperties" : false
+    },
     "Source" : {
       "description" : "Scraper metrics source",
       "type" : "object",
@@ -140,6 +155,9 @@
     "ScrapeConfiguration" : {
       "$ref" : "#/definitions/ScrapeConfiguration"
     },
+    "RoleConfiguration" : {
+      "$ref" : "#/definitions/RoleConfiguration"
+    },
     "Source" : {
       "$ref" : "#/definitions/Source"
     },
@@ -170,13 +188,13 @@
   "primaryIdentifier" : [ "/properties/Arn" ],
   "handlers" : {
     "create" : {
-      "permissions" : [ "aps:CreateScraper", "aps:DescribeScraper", "aps:DescribeWorkspace", "aps:TagResource", "eks:CreateAccessEntry", "eks:AssociateAccessPolicy", "eks:DescribeCluster", "ec2:DescribeSubnets", "ec2:DescribeSecurityGroups", "iam:CreateServiceLinkedRole" ]
+      "permissions" : [ "aps:CreateScraper", "aps:DescribeScraper", "aps:DescribeWorkspace", "aps:TagResource", "eks:CreateAccessEntry", "eks:AssociateAccessPolicy", "eks:DescribeCluster", "ec2:DescribeSubnets", "ec2:DescribeSecurityGroups", "iam:CreateServiceLinkedRole", "iam:PassRole" ]
     },
     "read" : {
       "permissions" : [ "aps:DescribeScraper", "aps:ListTagsForResource" ]
     },
     "update" : {
-      "permissions" : [ "aps:CreateScraper", "aps:DescribeScraper", "aps:UpdateScraper", "aps:DescribeWorkspace", "aps:TagResource", "aps:UntagResource", "aps:ListTagsForResource" ]
+      "permissions" : [ "aps:CreateScraper", "aps:DescribeScraper", "aps:UpdateScraper", "aps:DescribeWorkspace", "aps:TagResource", "aps:UntagResource", "aps:ListTagsForResource", "iam:PassRole" ]
     },
     "delete" : {
       "permissions" : [ "aps:DeleteScraper", "aps:DescribeScraper", "aps:DescribeWorkspace", "eks:AssociateAccessPolicy", "eks:DescribeCluster", "ec2:DescribeSubnets", "ec2:DescribeSecurityGroups", "iam:DeleteServiceLinkedRole" ]

aws-cloudformation-schema/aws-backupgateway-hypervisor.json

@@ -81,25 +81,26 @@
     }
   },
   "readOnlyProperties" : [ "/properties/HypervisorArn" ],
-  "writeOnlyProperties" : [ "/properties/KmsKeyArn", "/properties/LogGroupArn", "/properties/Name", "/properties/Password", "/properties/Tags", "/properties/Username" ],
+  "writeOnlyProperties" : [ "/properties/KmsKeyArn", "/properties/LogGroupArn", "/properties/Name", "/properties/Password", "/properties/Username" ],
   "createOnlyProperties" : [ "/properties/KmsKeyArn", "/properties/Tags" ],
   "primaryIdentifier" : [ "/properties/HypervisorArn" ],
   "tagging" : {
     "taggable" : true,
     "tagOnCreate" : true,
     "tagUpdatable" : false,
     "cloudFormationSystemTags" : true,
-    "tagProperty" : "/properties/Tags"
+    "tagProperty" : "/properties/Tags",
+    "permissions" : [ "backup-gateway:UntagResource", "backup-gateway:TagResource", "backup-gateway:ListTagsForResource" ]
   },
   "handlers" : {
     "create" : {
-      "permissions" : [ "backup-gateway:ImportHypervisorConfiguration", "backup-gateway:GetHypervisor", "backup-gateway:ListHypervisors", "backup-gateway:TagResource", "kms:CreateGrant", "kms:Encrypt", "kms:Decrypt" ]
+      "permissions" : [ "backup-gateway:ListTagsForResource", "backup-gateway:ImportHypervisorConfiguration", "backup-gateway:GetHypervisor", "backup-gateway:ListHypervisors", "backup-gateway:TagResource", "kms:CreateGrant", "kms:Encrypt", "kms:Decrypt" ]
     },
     "read" : {
-      "permissions" : [ "backup-gateway:GetHypervisor", "backup-gateway:ListHypervisors" ]
+      "permissions" : [ "backup-gateway:GetHypervisor", "backup-gateway:ListHypervisors", "backup-gateway:ListTagsForResource" ]
     },
     "update" : {
-      "permissions" : [ "backup-gateway:UpdateHypervisor", "backup-gateway:GetHypervisor", "backup-gateway:ListHypervisors", "backup-gateway:ImportHypervisorConfiguration", "backup-gateway:DeleteHypervisor" ]
+      "permissions" : [ "backup-gateway:UpdateHypervisor", "backup-gateway:GetHypervisor", "backup-gateway:ListHypervisors", "backup-gateway:ImportHypervisorConfiguration", "backup-gateway:DeleteHypervisor", "backup-gateway:ListTagsForResource" ]
     },
     "delete" : {
       "permissions" : [ "backup-gateway:DeleteHypervisor", "backup-gateway:GetHypervisor", "backup-gateway:ListHypervisors" ]

aws-cloudformation-schema/aws-batch-jobdefinition.json

@@ -165,6 +165,19 @@
         }
       }
     },
+    "EksPersistentVolumeClaim" : {
+      "additionalProperties" : false,
+      "type" : "object",
+      "properties" : {
+        "ReadOnly" : {
+          "type" : "boolean"
+        },
+        "ClaimName" : {
+          "type" : "string"
+        }
+      },
+      "required" : [ "ClaimName" ]
+    },
     "NodeProperties" : {
       "additionalProperties" : false,
       "type" : "object",
@@ -546,6 +559,15 @@
       "additionalProperties" : false,
       "type" : "object",
       "properties" : {
+        "Annotations" : {
+          "patternProperties" : {
+            ".*" : {
+              "type" : "string"
+            }
+          },
+          "additionalProperties" : false,
+          "type" : "object"
+        },
         "Labels" : {
           "patternProperties" : {
             ".*" : {
@@ -554,6 +576,9 @@
           },
           "additionalProperties" : false,
           "type" : "object"
+        },
+        "Namespace" : {
+          "type" : "string"
         }
       }
     },
@@ -749,6 +774,9 @@
         "HostPath" : {
           "$ref" : "#/definitions/EksHostPath"
         },
+        "PersistentVolumeClaim" : {
+          "$ref" : "#/definitions/EksPersistentVolumeClaim"
+        },
         "Name" : {
           "type" : "string"
         }
@@ -765,6 +793,9 @@
         "ReadOnly" : {
           "type" : "boolean"
         },
+        "SubPath" : {
+          "type" : "string"
+        },
         "Name" : {
           "type" : "string"
         }

aws-cloudformation-schema/aws-cloudformation-publictypeversion.json

@@ -20,8 +20,8 @@
       "maxLength" : 64
     },
     "PublisherId" : {
-      "description" : "The publisher id assigned by CloudFormation for publishing in this region.",
-      "pattern" : "[0-9a-zA-Z-]{40}",
+      "description" : "The reserved publisher id for this type, or the publisher id assigned by CloudFormation for publishing in this region.",
+      "pattern" : "[0-9a-zA-Z-]{1,40}",
       "type" : "string",
       "minLength" : 1,
       "maxLength" : 40

aws-cloudformation-schema/aws-cloudformation-publisher.json

@@ -8,8 +8,8 @@
       "type" : "boolean"
     },
     "PublisherId" : {
-      "description" : "The publisher id assigned by CloudFormation for publishing in this region.",
-      "pattern" : "[0-9a-zA-Z-]{40}",
+      "description" : "The reserved publisher id for this type, or the publisher id assigned by CloudFormation for publishing in this region.",
+      "pattern" : "[0-9a-zA-Z-]{1,40}",
       "type" : "string",
       "minLength" : 1,
       "maxLength" : 40

aws-cloudformation-schema/aws-cloudformation-typeactivation.json

@@ -34,8 +34,8 @@
       "type" : "string"
     },
     "PublisherId" : {
-      "description" : "The publisher id assigned by CloudFormation for publishing in this region.",
-      "pattern" : "[0-9a-zA-Z-]{40}",
+      "description" : "The reserved publisher id for this type, or the publisher id assigned by CloudFormation for publishing in this region.",
+      "pattern" : "[0-9a-zA-Z-]{1,40}",
       "type" : "string",
       "minLength" : 1,
       "maxLength" : 40

aws-cloudformation-schema/aws-cloudfront-distribution.json

@@ -685,6 +685,10 @@
         "S3OriginConfig" : {
           "$ref" : "#/definitions/S3OriginConfig",
           "description" : "Use this type to specify an origin that is an Amazon S3 bucket that is not configured with static website hosting. To specify any other type of origin, including an Amazon S3 bucket that is configured with static website hosting, use the ``CustomOriginConfig`` type instead."
+        },
+        "VpcOriginConfig" : {
+          "$ref" : "#/definitions/VpcOriginConfig",
+          "description" : ""
         }
       },
       "required" : [ "DomainName", "Id" ],
@@ -900,6 +904,25 @@
       },
       "type" : "object",
       "description" : "A complex type that determines the distribution's SSL/TLS configuration for communicating with viewers.\n If the distribution doesn't use ``Aliases`` (also known as alternate domain names or CNAMEs)—that is, if the distribution uses the CloudFront domain name such as ``d111111abcdef8.cloudfront.net``—set ``CloudFrontDefaultCertificate`` to ``true`` and leave all other fields empty.\n If the distribution uses ``Aliases`` (alternate domain names or CNAMEs), use the fields in this type to specify the following settings:\n  +  Which viewers the distribution accepts HTTPS connections from: only viewers that support [server name indication (SNI)](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Server_Name_Indication) (recommended), or all viewers including those that don't support SNI.\n  +  To accept HTTPS connections from only viewers that support SNI, set ``SSLSupportMethod`` to ``sni-only``. This is recommended. Most browsers and clients support SNI. (In CloudFormation, the field name is ``SslSupportMethod``. Note the different capitalization.)\n  +  To accept HTTPS connections from all viewers, including those that don't support SNI, set ``SSLSupportMethod`` to ``vip``. This is not recommended, and results in additional monthly charges from CloudFront. (In CloudFormation, the field name is ``SslSupportMethod``. Note the different capitalization.)\n  \n  +  The minimum SSL/TLS protocol version that the distribution can use to communicate with viewers. To specify a minimum version, choose a value for ``MinimumProtocolVersion``. For more information, see [Security Policy](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValues-security-policy) in the *Amazon CloudFront Developer Guide*.\n  +  The location of the SSL/TLS certificate, [(ACM)](https://docs.aws.amazon.com/acm/latest/userguide/acm-overview.html) (recommended) or [(IAM)](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_server-certs.html). You specify the location by setting a value in one of the following fields (not both):\n  +   ``ACMCertificateArn`` (In CloudFormation, this field name is ``AcmCertificateArn``. Note the different capitalization.)\n  +   ``IAMCertificateId`` (In CloudFormation, this field name is ``IamCertificateId``. Note the different capitalization.)\n  \n  \n All distributions support HTTPS connections from viewers. To require viewers to use HTTPS only, or to redirect them from HTTP to HTTPS, use ``ViewerProtocolPolicy`` in the ``CacheBehavior`` or ``DefaultCacheBehavior``. To specify how CloudFront should use SSL/TLS to communicate with your custom origin, use ``CustomOriginConfig``.\n For more information, see [Using HTTPS with CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-https.html) and [Using Alternate Domain Names and HTTPS](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-https-alternate-domain-names.html) in the *Amazon CloudFront Developer Guide*."
+    },
+    "VpcOriginConfig" : {
+      "additionalProperties" : false,
+      "properties" : {
+        "OriginKeepaliveTimeout" : {
+          "default" : 5,
+          "type" : "integer"
+        },
+        "OriginReadTimeout" : {
+          "default" : 30,
+          "type" : "integer"
+        },
+        "VpcOriginId" : {
+          "type" : "string"
+        }
+      },
+      "required" : [ "VpcOriginId" ],
+      "type" : "object",
+      "description" : ""
     }
   },
   "deprecatedProperties" : [ "/properties/DistributionConfig/properties/CustomOrigin", "/properties/DistributionConfig/properties/S3Origin" ],

aws-cloudformation-schema/aws-comprehend-flywheel.json

@@ -59,7 +59,8 @@
     "tagOnCreate" : true,
     "tagUpdatable" : true,
     "cloudFormationSystemTags" : true,
-    "tagProperty" : "/properties/Tags"
+    "tagProperty" : "/properties/Tags",
+    "permissions" : [ "comprehend:TagResource", "comprehend:UntagResource" ]
   },
   "definitions" : {
     "Tag" : {

aws-cloudformation-schema/aws-connect-securityprofile.json

@@ -174,7 +174,8 @@
     "tagOnCreate" : true,
     "tagUpdatable" : true,
     "cloudFormationSystemTags" : true,
-    "tagProperty" : "/properties/Tags"
+    "tagProperty" : "/properties/Tags",
+    "permissions" : [ "connect:TagResource", "connect:UntagResource" ]
   },
   "required" : [ "InstanceArn", "SecurityProfileName" ],
   "createOnlyProperties" : [ "/properties/SecurityProfileName", "/properties/InstanceArn" ],

aws-cloudformation-schema/aws-ec2-eip.json

@@ -8,7 +8,8 @@
     "tagOnCreate" : true,
     "tagUpdatable" : true,
     "cloudFormationSystemTags" : true,
-    "tagProperty" : "/properties/Tags"
+    "tagProperty" : "/properties/Tags",
+    "permissions" : [ "ec2:CreateTags", "ec2:DeleteTags", "ec2:DescribeTags" ]
   },
   "definitions" : {
     "Tag" : {

aws-cloudformation-schema/aws-ecs-service.json

@@ -277,14 +277,14 @@
       "type" : "object",
       "properties" : {
         "SecurityGroups" : {
-          "description" : "The IDs of the security groups associated with the task or service. If you don't specify a security group, the default security group for the VPC is used. There's a limit of 5 security groups that can be specified per ``awsvpcConfiguration``.\n  All specified security groups must be from the same VPC.",
+          "description" : "The IDs of the security groups associated with the task or service. If you don't specify a security group, the default security group for the VPC is used. There's a limit of 5 security groups that can be specified.\n  All specified security groups must be from the same VPC.",
           "type" : "array",
           "items" : {
             "type" : "string"
           }
         },
         "Subnets" : {
-          "description" : "The IDs of the subnets associated with the task or service. There's a limit of 16 subnets that can be specified per ``awsvpcConfiguration``.\n  All specified subnets must be from the same VPC.",
+          "description" : "The IDs of the subnets associated with the task or service. There's a limit of 16 subnets that can be specified.\n  All specified subnets must be from the same VPC.",
           "type" : "array",
           "items" : {
             "type" : "string"
@@ -351,10 +351,6 @@
           "description" : "The throughput to provision for a volume, in MiB/s, with a maximum of 1,000 MiB/s. This parameter maps 1:1 with the ``Throughput`` parameter of the [CreateVolume API](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateVolume.html) in the *Amazon EC2 API Reference*.\n  This parameter is only supported for the ``gp3`` volume type.",
           "type" : "integer"
         },
-        "VolumeInitializationRate" : {
-          "description" : "",
-          "type" : "integer"
-        },
         "Iops" : {
           "description" : "The number of I/O operations per second (IOPS). For ``gp3``, ``io1``, and ``io2`` volumes, this represents the number of IOPS that are provisioned for the volume. For ``gp2`` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting.\n The following are the supported values for each volume type.\n  +   ``gp3``: 3,000 - 16,000 IOPS\n  +   ``io1``: 100 - 64,000 IOPS\n  +   ``io2``: 100 - 256,000 IOPS\n  \n This parameter is required for ``io1`` and ``io2`` volume types. The default for ``gp3`` volumes is ``3,000 IOPS``. This parameter is not supported for ``st1``, ``sc1``, or ``standard`` volume types.\n This parameter maps 1:1 with the ``Iops`` parameter of the [CreateVolume API](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateVolume.html) in the *Amazon EC2 API Reference*.",
           "type" : "integer"