pulumi · pulumi-bot · Oct 24, 2024 · Oct 24, 2024 · Oct 24, 2024
diff --git a/.docs.version b/.docs.version
@@ -1 +1 @@
-e85b52d7ef350840f279cc004f4b97f62cb4c71c
+b957155700147a6e0595415b618e75a3377d0b0d
diff --git a/aws-cloudformation-schema/aws-appsync-graphqlapi.json b/aws-cloudformation-schema/aws-appsync-graphqlapi.json
@@ -3,91 +3,119 @@
   "description" : "Resource Type definition for AWS::AppSync::GraphQLApi",
   "additionalProperties" : false,
   "properties" : {
-    "OpenIDConnectConfig" : {
-      "$ref" : "#/definitions/OpenIDConnectConfig"
+    "AdditionalAuthenticationProviders" : {
+      "type" : "array",
+      "description" : "A list of additional authentication providers for the GraphqlApi API.",
+      "uniqueItems" : true,
+      "items" : {
+        "$ref" : "#/definitions/AdditionalAuthenticationProvider"
+      }
     },
-    "MergedApiExecutionRoleArn" : {
+    "ApiId" : {
+      "description" : "Unique AWS AppSync GraphQL API identifier.",
       "type" : "string"
     },
-    "EnhancedMetricsConfig" : {
-      "$ref" : "#/definitions/EnhancedMetricsConfig"
-    },
-    "RealtimeDns" : {
+    "ApiType" : {
+      "description" : "The value that indicates whether the GraphQL API is a standard API (GRAPHQL) or merged API (MERGED).",
       "type" : "string"
     },
-    "Name" : {
+    "Arn" : {
+      "description" : "The Amazon Resource Name (ARN) of the API key",
       "type" : "string"
     },
-    "GraphQLUrl" : {
+    "AuthenticationType" : {
+      "description" : "Security configuration for your GraphQL API",
       "type" : "string"
     },
+    "EnhancedMetricsConfig" : {
+      "description" : "Enables and controls the enhanced metrics feature. Enhanced metrics emit granular data on API usage and performance such as AppSync request and error counts, latency, and cache hits/misses. All enhanced metric data is sent to your CloudWatch account, and you can configure the types of data that will be sent.",
+      "$ref" : "#/definitions/EnhancedMetricsConfig"
+    },
     "EnvironmentVariables" : {
-      "type" : "object"
+      "description" : "A map containing the list of resources with their properties and environment variables.",
+      "type" : "object",
+      "additionalProperties" : false,
+      "patternProperties" : {
+        "^[A-Za-z]+\\w*$" : {
+          "type" : "string"
+        }
+      }
     },
     "GraphQLDns" : {
+      "description" : "The fully qualified domain name (FQDN) of the endpoint URL of your GraphQL API.",
       "type" : "string"
     },
-    "ApiType" : {
+    "GraphQLEndpointArn" : {
+      "description" : "The GraphQL endpoint ARN.",
+      "type" : "string"
+    },
+    "GraphQLUrl" : {
+      "description" : "The Endpoint URL of your GraphQL API.",
+      "type" : "string"
+    },
+    "IntrospectionConfig" : {
+      "description" : "Sets the value of the GraphQL API to enable (ENABLED) or disable (DISABLED) introspection. If no value is provided, the introspection configuration will be set to ENABLED by default. This field will produce an error if the operation attempts to use the introspection feature while this field is disabled.",
       "type" : "string"
     },
     "LambdaAuthorizerConfig" : {
+      "description" : "A LambdaAuthorizerConfig holds configuration on how to authorize AWS AppSync API access when using the AWS_LAMBDA authorizer mode. Be aware that an AWS AppSync API may have only one Lambda authorizer configured at a time.",
       "$ref" : "#/definitions/LambdaAuthorizerConfig"
     },
-    "Tags" : {
-      "type" : "array",
-      "uniqueItems" : false,
-      "items" : {
-        "$ref" : "#/definitions/Tag"
-      }
+    "LogConfig" : {
+      "description" : "The Amazon CloudWatch Logs configuration.",
+      "$ref" : "#/definitions/LogConfig"
     },
-    "GraphQLEndpointArn" : {
+    "MergedApiExecutionRoleArn" : {
+      "description" : "The AWS Identity and Access Management service role ARN for a merged API. ",
       "type" : "string"
     },
-    "AuthenticationType" : {
+    "Name" : {
+      "description" : "The API name",
+      "type" : "string"
+    },
+    "OpenIDConnectConfig" : {
+      "description" : "The OpenID Connect configuration.",
+      "$ref" : "#/definitions/OpenIDConnectConfig"
+    },
+    "OwnerContact" : {
+      "description" : "The owner contact information for an API resource.",
       "type" : "string"
     },
     "QueryDepthLimit" : {
+      "description" : "The maximum depth a query can have in a single request. Depth refers to the amount of nested levels allowed in the body of query.",
       "type" : "integer"
     },
-    "IntrospectionConfig" : {
+    "RealtimeDns" : {
+      "description" : "The fully qualified domain name (FQDN) of the real-time endpoint URL of your GraphQL API.",
       "type" : "string"
     },
-    "OwnerContact" : {
+    "RealtimeUrl" : {
+      "description" : "The GraphQL API real-time endpoint URL.",
       "type" : "string"
     },
     "ResolverCountLimit" : {
+      "description" : "The maximum number of resolvers that can be invoked in a single request.",
       "type" : "integer"
     },
-    "AdditionalAuthenticationProviders" : {
+    "Tags" : {
+      "description" : "An arbitrary set of tags (key-value pairs) for this GraphQL API.\n\n",
       "type" : "array",
-      "uniqueItems" : false,
+      "uniqueItems" : true,
       "items" : {
-        "$ref" : "#/definitions/AdditionalAuthenticationProvider"
+        "$ref" : "#/definitions/Tag"
       }
     },
-    "RealtimeUrl" : {
-      "type" : "string"
-    },
-    "XrayEnabled" : {
-      "type" : "boolean"
-    },
-    "Visibility" : {
-      "type" : "string"
-    },
-    "Id" : {
-      "type" : "string"
-    },
-    "Arn" : {
-      "type" : "string"
-    },
     "UserPoolConfig" : {
+      "description" : "Optional authorization configuration for using Amazon Cognito user pools with your GraphQL endpoint.\n\n",
       "$ref" : "#/definitions/UserPoolConfig"
     },
-    "ApiId" : {
+    "Visibility" : {
+      "description" : "Sets the scope of the GraphQL API to public (GLOBAL) or private (PRIVATE). By default, the scope is set to Global if no value is provided.",
       "type" : "string"
     },
-    "LogConfig" : {
-      "$ref" : "#/definitions/LogConfig"
+    "XrayEnabled" : {
+      "description" : "A flag indicating whether to use AWS X-Ray tracing for this GraphqlApi.\n\n",
+      "type" : "boolean"
     }
   },
   "definitions" : {
@@ -96,15 +124,19 @@
       "additionalProperties" : false,
       "properties" : {
         "ClientId" : {
+          "description" : "The client identifier of the Relying party at the OpenID identity provider.",
           "type" : "string"
         },
         "AuthTTL" : {
+          "description" : "The number of milliseconds that a token is valid after being authenticated.",
           "type" : "number"
         },
         "Issuer" : {
+          "description" : "The issuer for the OIDC configuration. ",
           "type" : "string"
         },
         "IatTTL" : {
+          "description" : "The number of milliseconds that a token is valid after it's issued to a user.\n\n",
           "type" : "number"
         }
       }
@@ -114,12 +146,15 @@
       "additionalProperties" : false,
       "properties" : {
         "OperationLevelMetricsConfig" : {
+          "description" : "Controls how operation metrics will be emitted to CloudWatch. Operation metrics include:\n\n",
           "type" : "string"
         },
         "ResolverLevelMetricsBehavior" : {
+          "description" : "Controls how resolver metrics will be emitted to CloudWatch. Resolver metrics include:\n\n",
           "type" : "string"
         },
         "DataSourceLevelMetricsBehavior" : {
+          "description" : "Controls how data source metrics will be emitted to CloudWatch. Data source metrics include:\n\n",
           "type" : "string"
         }
       },
@@ -130,12 +165,15 @@
       "additionalProperties" : false,
       "properties" : {
         "AppIdClientRegex" : {
+          "description" : "A regular expression for validating the incoming Amazon Cognito user pool app client ID. ",
           "type" : "string"
         },
         "UserPoolId" : {
+          "description" : "The user pool ID",
           "type" : "string"
         },
         "AwsRegion" : {
+          "description" : "The AWS Region in which the user pool was created.",
           "type" : "string"
         }
       }
@@ -145,13 +183,16 @@
       "additionalProperties" : false,
       "properties" : {
         "IdentityValidationExpression" : {
+          "description" : "A regular expression for validation of tokens before the Lambda function is called.",
           "type" : "string"
         },
         "AuthorizerUri" : {
+          "description" : "The ARN of the Lambda function to be called for authorization.",
           "type" : "string"
         },
         "AuthorizerResultTtlInSeconds" : {
-          "type" : "number"
+          "description" : "The number of seconds a response should be cached for.",
+          "type" : "integer"
         }
       }
     },
@@ -173,15 +214,19 @@
       "additionalProperties" : false,
       "properties" : {
         "AppIdClientRegex" : {
+          "description" : "A regular expression for validating the incoming Amazon Cognito user pool app client ID.",
           "type" : "string"
         },
         "UserPoolId" : {
+          "description" : "The user pool ID.",
           "type" : "string"
         },
         "AwsRegion" : {
+          "description" : "The AWS Region in which the user pool was created.",
           "type" : "string"
         },
         "DefaultAction" : {
+          "description" : "The action that you want your GraphQL API to take when a request that uses Amazon Cognito user pool authentication doesn't match the Amazon Cognito user pool configuration.",
           "type" : "string"
         }
       }
@@ -200,6 +245,7 @@
           "$ref" : "#/definitions/CognitoUserPoolConfig"
         },
         "AuthenticationType" : {
+          "description" : "The authentication type for API key, AWS Identity and Access Management, OIDC, Amazon Cognito user pools, or AWS Lambda.",
           "type" : "string"
         }
       },
@@ -210,18 +256,46 @@
       "additionalProperties" : false,
       "properties" : {
         "ExcludeVerboseContent" : {
+          "description" : "Set to TRUE to exclude sections that contain information such as headers, context, and evaluated mapping templates, regardless of logging level.",
           "type" : "boolean"
         },
         "FieldLogLevel" : {
+          "description" : "The field logging level. Values can be NONE, ERROR, INFO, DEBUG, or ALL.",
           "type" : "string"
         },
         "CloudWatchLogsRoleArn" : {
+          "description" : "The service role that AWS AppSync will assume to publish to Amazon CloudWatch Logs in your account.",
           "type" : "string"
         }
       }
     }
   },
+  "tagging" : {
+    "taggable" : true,
+    "tagOnCreate" : true,
+    "tagUpdatable" : true,
+    "cloudFormationSystemTags" : false,
+    "tagProperty" : "/properties/Tags",
+    "permissions" : [ "appsync:TagResource", "appsync:UntagResource", "appsync:ListTagsForResource" ]
+  },
   "required" : [ "Name", "AuthenticationType" ],
-  "primaryIdentifier" : [ "/properties/Id" ],
-  "readOnlyProperties" : [ "/properties/ApiId", "/properties/GraphQLEndpointArn", "/properties/Id", "/properties/GraphQLDns", "/properties/GraphQLUrl", "/properties/RealtimeDns", "/properties/RealtimeUrl", "/properties/Arn" ]
+  "primaryIdentifier" : [ "/properties/ApiId" ],
+  "readOnlyProperties" : [ "/properties/ApiId", "/properties/Arn", "/properties/GraphQLEndpointArn", "/properties/GraphQLDns", "/properties/GraphQLUrl", "/properties/RealtimeDns", "/properties/RealtimeUrl" ],
+  "handlers" : {
+    "create" : {
+      "permissions" : [ "appsync:CreateGraphqlApi", "appsync:TagResource" ]
+    },
+    "read" : {
+      "permissions" : [ "appsync:GetGraphqlApi", "appsync:GetGraphqlApiEnvironmentVariables", "appsync:ListTagsForResource" ]
+    },
+    "update" : {
+      "permissions" : [ "appsync:GetGraphqlApi", "appsync:UpdateGraphqlApi", "appsync:TagResource", "appsync:UntagResource" ]
+    },
+    "delete" : {
+      "permissions" : [ "appsync:DeleteGraphqlApi" ]
+    },
+    "list" : {
+      "permissions" : [ "appsync:ListGraphqlApis" ]
+    }
+  }
 }
diff --git a/aws-cloudformation-schema/aws-bedrock-agent.json b/aws-cloudformation-schema/aws-bedrock-agent.json
@@ -57,7 +57,7 @@
     "ActionGroupSignature" : {
       "type" : "string",
       "description" : "Action Group Signature for a BuiltIn Action",
-      "enum" : [ "AMAZON.UserInput" ]
+      "enum" : [ "AMAZON.UserInput", "AMAZON.CodeInterpreter" ]
     },
     "ActionGroupState" : {
       "type" : "string",
@@ -459,7 +459,7 @@
       "type" : "string",
       "maxLength" : 2048,
       "minLength" : 1,
-      "pattern" : "^arn:aws(-[^:]+)?:bedrock:[a-z0-9-]{1,20}:(([0-9]{12}:custom-model/[a-z0-9-]{1,63}[.]{1}[a-z0-9-]{1,63}(([:][a-z0-9-]{1,63}){0,2})?/[a-z0-9]{12})|(:foundation-model/([a-z0-9-]{1,63}[.]{1}[a-z0-9-]{1,63}([.]?[a-z0-9-]{1,63})([:][a-z0-9-]{1,63}){0,2})))|(([a-z0-9-]{1,63}[.]{1}[a-z0-9-]{1,63}([.]?[a-z0-9-]{1,63})([:][a-z0-9-]{1,63}){0,2}))|(([0-9a-zA-Z][_-]?)+)$",
+      "pattern" : "^arn:aws(-[^:]+)?:bedrock:[a-z0-9-]{1,20}:(([0-9]{12}:custom-model/[a-z0-9-]{1,63}[.]{1}[a-z0-9-]{1,63}(([:][a-z0-9-]{1,63}){0,2})?/[a-z0-9]{12})|(:foundation-model/([a-z0-9-]{1,63}[.]{1}[a-z0-9-]{1,63}([.]?[a-z0-9-]{1,63})([:][a-z0-9-]{1,63}){0,2}))|([0-9]{12}:(inference-profile|application-inference-profile)/[a-zA-Z0-9-:.]+))|(([a-z0-9-]{1,63}[.]{1}[a-z0-9-]{1,63}([.]?[a-z0-9-]{1,63})([:][a-z0-9-]{1,63}){0,2}))|(([0-9a-zA-Z][_-]?)+)$",
       "description" : "ARN or name of a Bedrock model."
     },
     "GuardrailConfiguration" : {

diff --git a/aws-cloudformation-schema/aws-connect-hoursofoperation.json b/aws-cloudformation-schema/aws-connect-hoursofoperation.json
@@ -16,7 +16,7 @@
       "permissions" : [ "connect:CreateHoursOfOperation", "connect:TagResource", "connect:CreateHoursOfOperationOverride" ]
     },
     "update" : {
-      "permissions" : [ "connect:UpdateHoursOfOperation", "connect:CreateHoursOfOperationOverride", "connect:UpdateHoursOfOperationOverride", "connect:DeleteHoursOfOperationOverride", "connect:TagResource", "connect:UntagResource" ]
+      "permissions" : [ "connect:UpdateHoursOfOperation", "connect:CreateHoursOfOperationOverride", "connect:UpdateHoursOfOperationOverride", "connect:DeleteHoursOfOperationOverride", "connect:ListHoursOfOperationOverrides", "connect:TagResource", "connect:UntagResource" ]
     },
     "list" : {
       "permissions" : [ "connect:ListHoursOfOperations" ],

diff --git a/aws-cloudformation-schema/aws-devopsguru-notificationchannel.json b/aws-cloudformation-schema/aws-devopsguru-notificationchannel.json
@@ -86,6 +86,9 @@
     }
   },
   "additionalProperties" : false,
+  "tagging" : {
+    "taggable" : false
+  },
   "required" : [ "Config" ],
   "createOnlyProperties" : [ "/properties/Config" ],
   "readOnlyProperties" : [ "/properties/Id" ],

diff --git a/aws-cloudformation-schema/aws-ec2-networkinsightsaccessscope.json b/aws-cloudformation-schema/aws-ec2-networkinsightsaccessscope.json
@@ -172,6 +172,14 @@
     }
   },
   "additionalProperties" : false,
+  "tagging" : {
+    "taggable" : true,
+    "tagOnCreate" : true,
+    "tagUpdatable" : true,
+    "cloudFormationSystemTags" : false,
+    "tagProperty" : "/properties/Tags",
+    "permissions" : [ "ec2:CreateTags", "ec2:DeleteTags" ]
+  },
   "readOnlyProperties" : [ "/properties/NetworkInsightsAccessScopeId", "/properties/NetworkInsightsAccessScopeArn", "/properties/CreatedDate", "/properties/UpdatedDate" ],
   "createOnlyProperties" : [ "/properties/MatchPaths", "/properties/ExcludePaths" ],
   "writeOnlyProperties" : [ "/properties/MatchPaths", "/properties/ExcludePaths" ],

diff --git a/aws-cloudformation-schema/aws-ec2-networkinsightspath.json b/aws-cloudformation-schema/aws-ec2-networkinsightspath.json
@@ -113,6 +113,14 @@
     }
   },
   "additionalProperties" : false,
+  "tagging" : {
+    "taggable" : true,
+    "tagOnCreate" : true,
+    "tagUpdatable" : true,
+    "cloudFormationSystemTags" : false,
+    "tagProperty" : "/properties/Tags",
+    "permissions" : [ "ec2:CreateTags", "ec2:DeleteTags" ]
+  },
   "required" : [ "Protocol", "Source" ],
   "readOnlyProperties" : [ "/properties/NetworkInsightsPathId", "/properties/NetworkInsightsPathArn", "/properties/CreatedDate", "/properties/SourceArn", "/properties/DestinationArn" ],
   "primaryIdentifier" : [ "/properties/NetworkInsightsPathId" ],

diff --git a/aws-cloudformation-schema/aws-ec2-volume.json b/aws-cloudformation-schema/aws-ec2-volume.json
@@ -90,7 +90,8 @@
   },
   "handlers" : {
     "create" : {
-      "permissions" : [ "ec2:CreateVolume", "ec2:DescribeVolumes", "ec2:DescribeVolumeAttribute", "ec2:ModifyVolumeAttribute", "ec2:CreateTags", "kms:GenerateDataKeyWithoutPlaintext", "kms:CreateGrant" ]
+      "permissions" : [ "ec2:CreateVolume", "ec2:DescribeVolumes", "ec2:DescribeVolumeAttribute", "ec2:ModifyVolumeAttribute", "ec2:CreateTags", "kms:GenerateDataKeyWithoutPlaintext", "kms:CreateGrant" ],
+      "timeoutInMinutes" : 725
     },
     "read" : {
       "permissions" : [ "ec2:DescribeVolumes", "ec2:DescribeVolumeAttribute", "ec2:DescribeTags" ]