pulumi · t0yv0 · Oct 14, 2024 · Oct 14, 2024 · Oct 14, 2024 · Oct 14, 2024
diff --git a/.docs.version b/.docs.version
@@ -1 +1 @@
-fb382a056363bbba3d354043e6adbc2c9c6b8a4b
+d889c0ffa60e67860a97ecb57b38054bf83dcb8f
diff --git a/aws-cloudformation-schema/aws-connect-contactflow.json b/aws-cloudformation-schema/aws-connect-contactflow.json
@@ -83,7 +83,8 @@
     "tagOnCreate" : true,
     "tagUpdatable" : true,
     "cloudFormationSystemTags" : true,
-    "tagProperty" : "/properties/Tags"
+    "tagProperty" : "/properties/Tags",
+    "permissions" : [ "connect:ListTagsForResource", "connect:UntagResource", "connect:TagResource" ]
   },
   "handlers" : {
     "create" : {

diff --git a/aws-cloudformation-schema/aws-connect-contactflowmodule.json b/aws-cloudformation-schema/aws-connect-contactflowmodule.json
@@ -85,7 +85,8 @@
     "tagOnCreate" : true,
     "tagUpdatable" : true,
     "cloudFormationSystemTags" : true,
-    "tagProperty" : "/properties/Tags"
+    "tagProperty" : "/properties/Tags",
+    "permissions" : [ "connect:ListTagsForResource", "connect:UntagResource", "connect:TagResource" ]
   },
   "handlers" : {
     "create" : {

diff --git a/aws-cloudformation-schema/aws-controltower-enabledcontrol.json b/aws-cloudformation-schema/aws-controltower-enabledcontrol.json
@@ -132,6 +132,7 @@
     "tagOnCreate" : true,
     "tagUpdatable" : true,
     "cloudFormationSystemTags" : true,
-    "tagProperty" : "/properties/Tags"
+    "tagProperty" : "/properties/Tags",
+    "permissions" : [ "controltower:UntagResource", "controltower:TagResource", "controltower:ListTagsForResource" ]
   }
 }
diff --git a/aws-cloudformation-schema/aws-controltower-landingzone.json b/aws-cloudformation-schema/aws-controltower-landingzone.json
@@ -1,5 +1,6 @@
 {
   "tagging" : {
+    "permissions" : [ "controltower:UntagResource", "controltower:TagResource", "controltower:ListTagsForResource" ],
     "taggable" : true,
     "tagOnCreate" : true,
     "tagUpdatable" : true,

diff --git a/aws-cloudformation-schema/aws-dms-replicationinstance.json b/aws-cloudformation-schema/aws-dms-replicationinstance.json
@@ -40,6 +40,9 @@
         "type" : "string"
       }
     },
+    "NetworkType" : {
+      "type" : "string"
+    },
     "AllowMajorVersionUpgrade" : {
       "type" : "boolean"
     },

diff --git a/aws-cloudformation-schema/aws-ec2-transitgatewayroutetable.json b/aws-cloudformation-schema/aws-ec2-transitgatewayroutetable.json
@@ -1,9 +1,11 @@
 {
   "sourceUrl" : "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-transitgateway.git",
   "tagging" : {
+    "permissions" : [ "ec2:CreateTags", "ec2:DeleteTags" ],
     "taggable" : true,
     "tagOnCreate" : true,
-    "tagUpdatable" : false,
+    "tagUpdatable" : true,
+    "tagProperty" : "/properties/Tags",
     "cloudFormationSystemTags" : false
   },
   "handlers" : {
@@ -13,6 +15,9 @@
     "create" : {
       "permissions" : [ "ec2:CreateTransitGatewayRouteTable", "ec2:CreateTags", "ec2:DescribeTransitGatewayRouteTables" ]
     },
+    "update" : {
+      "permissions" : [ "ec2:DescribeTransitGatewayRouteTables", "ec2:CreateTags", "ec2:DeleteTags" ]
+    },
     "list" : {
       "permissions" : [ "ec2:DescribeTransitGatewayRouteTables" ]
     },
@@ -23,7 +28,7 @@
   "typeName" : "AWS::EC2::TransitGatewayRouteTable",
   "readOnlyProperties" : [ "/properties/TransitGatewayRouteTableId" ],
   "description" : "Resource Type definition for AWS::EC2::TransitGatewayRouteTable",
-  "createOnlyProperties" : [ "/properties/TransitGatewayId", "/properties/Tags" ],
+  "createOnlyProperties" : [ "/properties/TransitGatewayId" ],
   "additionalProperties" : false,
   "primaryIdentifier" : [ "/properties/TransitGatewayRouteTableId" ],
   "definitions" : {

diff --git a/aws-cloudformation-schema/aws-ec2-vpnconnection.json b/aws-cloudformation-schema/aws-ec2-vpnconnection.json
@@ -32,18 +32,220 @@
   "additionalProperties" : false,
   "primaryIdentifier" : [ "/properties/VpnConnectionId" ],
   "definitions" : {
+    "CloudwatchLogOptionsSpecification" : {
+      "description" : "",
+      "additionalProperties" : false,
+      "type" : "object",
+      "properties" : {
+        "LogEnabled" : {
+          "type" : "boolean"
+        },
+        "LogOutputFormat" : {
+          "type" : "string",
+          "enum" : [ "json", "text" ]
+        },
+        "LogGroupArn" : {
+          "type" : "string"
+        }
+      }
+    },
+    "Phase1IntegrityAlgorithmsRequestListValue" : {
+      "description" : "",
+      "additionalProperties" : false,
+      "type" : "object",
+      "properties" : {
+        "Value" : {
+          "type" : "string",
+          "enum" : [ "SHA1", "SHA2-256", "SHA2-384", "SHA2-512" ]
+        }
+      }
+    },
+    "Phase2EncryptionAlgorithmsRequestListValue" : {
+      "description" : "",
+      "additionalProperties" : false,
+      "type" : "object",
+      "properties" : {
+        "Value" : {
+          "type" : "string",
+          "enum" : [ "AES128", "AES256", "AES128-GCM-16", "AES256-GCM-16" ]
+        }
+      }
+    },
+    "Phase2IntegrityAlgorithmsRequestListValue" : {
+      "description" : "",
+      "additionalProperties" : false,
+      "type" : "object",
+      "properties" : {
+        "Value" : {
+          "type" : "string",
+          "enum" : [ "SHA1", "SHA2-256", "SHA2-384", "SHA2-512" ]
+        }
+      }
+    },
+    "Phase1DHGroupNumbersRequestListValue" : {
+      "description" : "",
+      "additionalProperties" : false,
+      "type" : "object",
+      "properties" : {
+        "Value" : {
+          "type" : "integer",
+          "enum" : [ 2, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24 ]
+        }
+      }
+    },
     "VpnTunnelOptionsSpecification" : {
       "description" : "The tunnel options for a single VPN tunnel.",
       "additionalProperties" : false,
       "type" : "object",
       "properties" : {
-        "PreSharedKey" : {
-          "description" : "The pre-shared key (PSK) to establish initial authentication between the virtual private gateway and customer gateway.\n Constraints: Allowed characters are alphanumeric characters, periods (.), and underscores (_). Must be between 8 and 64 characters in length and cannot start with zero (0).",
+        "Phase2EncryptionAlgorithms" : {
+          "uniqueItems" : false,
+          "description" : "",
+          "insertionOrder" : false,
+          "type" : "array",
+          "items" : {
+            "$ref" : "#/definitions/Phase2EncryptionAlgorithmsRequestListValue"
+          }
+        },
+        "Phase2DHGroupNumbers" : {
+          "uniqueItems" : false,
+          "description" : "",
+          "insertionOrder" : false,
+          "type" : "array",
+          "items" : {
+            "$ref" : "#/definitions/Phase2DHGroupNumbersRequestListValue"
+          }
+        },
+        "TunnelInsideIpv6Cidr" : {
+          "description" : "",
           "type" : "string"
         },
+        "StartupAction" : {
+          "description" : "",
+          "type" : "string",
+          "enum" : [ "add", "start" ]
+        },
         "TunnelInsideCidr" : {
           "description" : "The range of inside IP addresses for the tunnel. Any specified CIDR blocks must be unique across all VPN connections that use the same virtual private gateway. \n Constraints: A size /30 CIDR block from the ``169.254.0.0/16`` range. The following CIDR blocks are reserved and cannot be used:\n  +   ``169.254.0.0/30`` \n  +   ``169.254.1.0/30`` \n  +   ``169.254.2.0/30`` \n  +   ``169.254.3.0/30`` \n  +   ``169.254.4.0/30`` \n  +   ``169.254.5.0/30`` \n  +   ``169.254.169.252/30``",
           "type" : "string"
+        },
+        "IKEVersions" : {
+          "uniqueItems" : false,
+          "description" : "",
+          "insertionOrder" : false,
+          "type" : "array",
+          "items" : {
+            "$ref" : "#/definitions/IKEVersionsRequestListValue"
+          }
+        },
+        "LogOptions" : {
+          "description" : "",
+          "$ref" : "#/definitions/VpnTunnelLogOptionsSpecification"
+        },
+        "Phase1DHGroupNumbers" : {
+          "uniqueItems" : false,
+          "description" : "",
+          "insertionOrder" : false,
+          "type" : "array",
+          "items" : {
+            "$ref" : "#/definitions/Phase1DHGroupNumbersRequestListValue"
+          }
+        },
+        "ReplayWindowSize" : {
+          "description" : "",
+          "maximum" : 2048,
+          "type" : "integer",
+          "minimum" : 64
+        },
+        "EnableTunnelLifecycleControl" : {
+          "description" : "",
+          "type" : "boolean"
+        },
+        "RekeyMarginTimeSeconds" : {
+          "description" : "",
+          "type" : "integer",
+          "minimum" : 60
+        },
+        "DPDTimeoutAction" : {
+          "description" : "",
+          "type" : "string",
+          "enum" : [ "clear", "none", "restart" ]
+        },
+        "Phase2LifetimeSeconds" : {
+          "description" : "",
+          "maximum" : 3600,
+          "type" : "integer",
+          "minimum" : 900
+        },
+        "Phase2IntegrityAlgorithms" : {
+          "uniqueItems" : false,
+          "description" : "",
+          "insertionOrder" : false,
+          "type" : "array",
+          "items" : {
+            "$ref" : "#/definitions/Phase2IntegrityAlgorithmsRequestListValue"
+          }
+        },
+        "Phase1IntegrityAlgorithms" : {
+          "uniqueItems" : false,
+          "description" : "",
+          "insertionOrder" : false,
+          "type" : "array",
+          "items" : {
+            "$ref" : "#/definitions/Phase1IntegrityAlgorithmsRequestListValue"
+          }
+        },
+        "PreSharedKey" : {
+          "description" : "The pre-shared key (PSK) to establish initial authentication between the virtual private gateway and customer gateway.\n Constraints: Allowed characters are alphanumeric characters, periods (.), and underscores (_). Must be between 8 and 64 characters in length and cannot start with zero (0).",
+          "type" : "string"
+        },
+        "Phase1LifetimeSeconds" : {
+          "description" : "",
+          "maximum" : 28800,
+          "type" : "integer",
+          "minimum" : 900
+        },
+        "RekeyFuzzPercentage" : {
+          "description" : "",
+          "maximum" : 100,
+          "type" : "integer",
+          "minimum" : 0
+        },
+        "Phase1EncryptionAlgorithms" : {
+          "uniqueItems" : false,
+          "description" : "",
+          "insertionOrder" : false,
+          "type" : "array",
+          "items" : {
+            "$ref" : "#/definitions/Phase1EncryptionAlgorithmsRequestListValue"
+          }
+        },
+        "DPDTimeoutSeconds" : {
+          "description" : "",
+          "type" : "integer",
+          "minimum" : 30
+        }
+      }
+    },
+    "Phase1EncryptionAlgorithmsRequestListValue" : {
+      "description" : "",
+      "additionalProperties" : false,
+      "type" : "object",
+      "properties" : {
+        "Value" : {
+          "type" : "string",
+          "enum" : [ "AES128", "AES256", "AES128-GCM-16", "AES256-GCM-16" ]
+        }
+      }
+    },
+    "IKEVersionsRequestListValue" : {
+      "description" : "",
+      "additionalProperties" : false,
+      "type" : "object",
+      "properties" : {
+        "Value" : {
+          "type" : "string",
+          "enum" : [ "ikev1", "ikev2" ]
         }
       }
     },
@@ -62,15 +264,36 @@
         }
       },
       "required" : [ "Value", "Key" ]
+    },
+    "VpnTunnelLogOptionsSpecification" : {
+      "description" : "",
+      "additionalProperties" : false,
+      "type" : "object",
+      "properties" : {
+        "CloudwatchLogOptions" : {
+          "$ref" : "#/definitions/CloudwatchLogOptionsSpecification"
+        }
+      }
+    },
+    "Phase2DHGroupNumbersRequestListValue" : {
+      "description" : "",
+      "additionalProperties" : false,
+      "type" : "object",
+      "properties" : {
+        "Value" : {
+          "type" : "integer",
+          "enum" : [ 2, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24 ]
+        }
+      }
     }
   },
   "properties" : {
     "RemoteIpv6NetworkCidr" : {
-      "description" : "",
+      "description" : "The IPv6 CIDR on the AWS side of the VPN connection.\n Default: ``::/0``",
       "type" : "string"
     },
     "RemoteIpv4NetworkCidr" : {
-      "description" : "",
+      "description" : "The IPv4 CIDR on the AWS side of the VPN connection.\n Default: ``0.0.0.0/0``",
       "type" : "string"
     },
     "VpnTunnelOptionsSpecifications" : {
@@ -87,7 +310,7 @@
       "type" : "string"
     },
     "OutsideIpAddressType" : {
-      "description" : "",
+      "description" : "The type of IPv4 address assigned to the outside interface of the customer gateway device.\n Valid values: ``PrivateIpv4`` | ``PublicIpv4`` \n Default: ``PublicIpv4``",
       "type" : "string"
     },
     "StaticRoutesOnly" : {
@@ -107,27 +330,27 @@
       "type" : "string"
     },
     "LocalIpv4NetworkCidr" : {
-      "description" : "",
+      "description" : "The IPv4 CIDR on the customer gateway (on-premises) side of the VPN connection.\n Default: ``0.0.0.0/0``",
       "type" : "string"
     },
     "VpnGatewayId" : {
       "description" : "The ID of the virtual private gateway at the AWS side of the VPN connection.\n You must specify either ``TransitGatewayId`` or ``VpnGatewayId``, but not both.",
       "type" : "string"
     },
     "TransportTransitGatewayAttachmentId" : {
-      "description" : "",
+      "description" : "The transit gateway attachment ID to use for the VPN tunnel.\n Required if ``OutsideIpAddressType`` is set to ``PrivateIpv4``.",
       "type" : "string"
     },
     "LocalIpv6NetworkCidr" : {
-      "description" : "",
+      "description" : "The IPv6 CIDR on the customer gateway (on-premises) side of the VPN connection.\n Default: ``::/0``",
       "type" : "string"
     },
     "VpnConnectionId" : {
       "description" : "",
       "type" : "string"
     },
     "TunnelInsideIpVersion" : {
-      "description" : "",
+      "description" : "Indicate whether the VPN tunnels process IPv4 or IPv6 traffic.\n Default: ``ipv4``",
       "type" : "string"
     },
     "Tags" : {

diff --git a/aws-cloudformation-schema/aws-emr-walworkspace.json b/aws-cloudformation-schema/aws-emr-walworkspace.json
@@ -48,7 +48,8 @@
     "tagOnCreate" : true,
     "tagUpdatable" : true,
     "cloudFormationSystemTags" : false,
-    "tagProperty" : "/properties/Tags"
+    "tagProperty" : "/properties/Tags",
+    "permissions" : [ "emrwal:TagResource", "emrwal:UntagResource", "emrwal:ListTagsForResource" ]
   },
   "primaryIdentifier" : [ "/properties/WALWorkspaceName" ],
   "createOnlyProperties" : [ "/properties/WALWorkspaceName" ],