Update CloudFormation specs to 171.0.0 (#3160)

Co-authored-by: kddejong <[email protected]> Co-authored-by: Kevin DeJong <[email protected]>
aws-cloudformation · Apr 30, 2024 · 9565d74 · 9565d74
1 parent c53b104
commit 9565d74
Show file tree

Hide file tree

Showing 103 changed files with 25,316 additions and 6,397 deletions.
diff --git a/src/cfnlint/data/AdditionalSpecs/Policies.json b/src/cfnlint/data/AdditionalSpecs/Policies.json
@@ -395,6 +395,7 @@
     "CreateVirtualService",
     "DeleteGatewayRoute",
     "DeleteMesh",
+    "DeleteMeshPolicy",
     "DeleteRoute",
     "DeleteVirtualGateway",
     "DeleteVirtualNode",
@@ -407,13 +408,15 @@
     "DescribeVirtualNode",
     "DescribeVirtualRouter",
     "DescribeVirtualService",
+    "GetMeshPolicy",
     "ListGatewayRoutes",
     "ListMeshes",
     "ListRoutes",
     "ListVirtualGateways",
     "ListVirtualNodes",
     "ListVirtualRouters",
     "ListVirtualServices",
+    "PutMeshPolicy",
     "StreamAggregatedResources",
     "UpdateGatewayRoute",
     "UpdateMesh",
@@ -2411,6 +2414,7 @@
     "PutWebhook",
     "RegisterWebhookWithThirdParty",
     "RetryStageExecution",
+    "RollbackStage",
     "StartPipelineExecution",
     "StopPipelineExecution",
     "TagResource",
@@ -5211,6 +5215,7 @@
     "ListFHIRImportJobs",
     "ListTagsForResource",
     "ReadResource",
+    "SearchEverything",
     "SearchWithGet",
     "SearchWithPost",
     "StartFHIRExportJob",
@@ -5931,6 +5936,7 @@
    "Actions": [
     "CreateProfile",
     "CreateTrustAnchor",
+    "DeleteAttributeMapping",
     "DeleteCrl",
     "DeleteProfile",
     "DeleteTrustAnchor",
@@ -5950,6 +5956,7 @@
     "ListSubjects",
     "ListTagsForResource",
     "ListTrustAnchors",
+    "PutAttributeMapping",
     "PutNotificationSettings",
     "ResetNotificationSettings",
     "TagResource",
@@ -9543,6 +9550,14 @@
     "signer:ProfileVersion"
    ]
   },
+  "AWS Signin": {
+   "Actions": [
+    "CreateTrustedIdentityPropagationApplicationForConsole",
+    "ListTrustedIdentityPropagationApplicationsForConsole"
+   ],
+   "HasResource": false,
+   "StringPrefix": "signin"
+  },
   "AWS SimSpace Weaver": {
    "ARNFormat": "arn:aws:simspaceweaver:${Region}:${Account}:${ResourceType}/${ResourceId}",
    "ARNRegex": "^arn:aws:simspaceweaver:.+:.+:.+",
@@ -9672,7 +9687,8 @@
     "UntagResource",
     "UpdateMapRun",
     "UpdateStateMachine",
-    "UpdateStateMachineAlias"
+    "UpdateStateMachineAlias",
+    "ValidateStateMachineDefinition"
    ],
    "HasResource": true,
    "StringPrefix": "states",
@@ -11432,12 +11448,14 @@
    "ARNFormat": "arn:aws:bedrock:${Region}:${Account}:${ResourceType}/${ResourceId}",
    "ARNRegex": "^arn:aws:bedrock:.*:.*:.+",
    "Actions": [
+    "ApplyGuardrail",
     "AssociateAgentKnowledgeBase",
     "AssociateThirdPartyKnowledgeBase",
     "CreateAgent",
     "CreateAgentActionGroup",
     "CreateAgentAlias",
     "CreateDataSource",
+    "CreateEvaluationJob",
     "CreateFoundationModelAgreement",
     "CreateGuardrail",
     "CreateGuardrailVersion",
@@ -11466,6 +11484,7 @@
     "GetAgentVersion",
     "GetCustomModel",
     "GetDataSource",
+    "GetEvaluationJob",
     "GetFoundationModel",
     "GetFoundationModelAvailability",
     "GetGuardrail",
@@ -11487,6 +11506,7 @@
     "ListAgents",
     "ListCustomModels",
     "ListDataSources",
+    "ListEvaluationJobs",
     "ListFoundationModelAgreementOffers",
     "ListFoundationModels",
     "ListGuardrails",
@@ -11504,6 +11524,7 @@
     "Retrieve",
     "RetrieveAndGenerate",
     "StartIngestionJob",
+    "StopEvaluationJob",
     "StopModelCustomizationJob",
     "StopModelInvocationJob",
     "TagResource",
@@ -13300,6 +13321,9 @@
     "CreateRelatedItem",
     "CreateTemplate",
     "DeleteDomain",
+    "DeleteField",
+    "DeleteLayout",
+    "DeleteTemplate",
     "GetCase",
     "GetCaseAuditEvents",
     "GetCaseEventConfiguration",
@@ -14607,7 +14631,14 @@
     "ec2:VpcPeeringConnectionID",
     "ec2:VpceServiceName",
     "ec2:VpceServiceOwner",
-    "ec2:VpceServicePrivateDnsName"
+    "ec2:VpceServicePrivateDnsName",
+    "ec2:transitGatewayAttachmentId",
+    "ec2:transitGatewayConnectPeerId",
+    "ec2:transitGatewayId",
+    "ec2:transitGatewayMulticastDomainId",
+    "ec2:transitGatewayPolicyTableId",
+    "ec2:transitGatewayRouteTableAnnouncementId",
+    "ec2:transitGatewayRouteTableId"
    ]
   },
   "Amazon EC2 Auto Scaling": {
@@ -16016,6 +16047,7 @@
     "ClaimGameServer",
     "CreateAlias",
     "CreateBuild",
+    "CreateContainerGroupDefinition",
     "CreateFleet",
     "CreateFleetLocations",
     "CreateGameServerGroup",
@@ -16031,6 +16063,7 @@
     "CreateVpcPeeringConnection",
     "DeleteAlias",
     "DeleteBuild",
+    "DeleteContainerGroupDefinition",
     "DeleteFleet",
     "DeleteFleetLocations",
     "DeleteGameServerGroup",
@@ -16047,6 +16080,7 @@
     "DescribeAlias",
     "DescribeBuild",
     "DescribeCompute",
+    "DescribeContainerGroupDefinition",
     "DescribeEC2InstanceLimits",
     "DescribeFleetAttributes",
     "DescribeFleetCapacity",
@@ -16080,6 +16114,7 @@
     "ListAliases",
     "ListBuilds",
     "ListCompute",
+    "ListContainerGroupDefinitions",
     "ListFleets",
     "ListGameServerGroups",
     "ListGameServers",
@@ -18814,6 +18849,7 @@
     "AddUserLicenses",
     "BatchDeleteDocument",
     "BatchPutDocument",
+    "CancelSubscription",
     "Chat",
     "ChatSync",
     "CreateApplication",
@@ -18822,6 +18858,7 @@
     "CreateLicense",
     "CreatePlugin",
     "CreateRetriever",
+    "CreateSubscription",
     "CreateUser",
     "CreateWebExperience",
     "DeleteApplication",
@@ -18854,6 +18891,7 @@
     "ListMessages",
     "ListPlugins",
     "ListRetrievers",
+    "ListSubscriptions",
     "ListTagsForResource",
     "ListUserLicenses",
     "ListWebExperiences",
@@ -18870,6 +18908,7 @@
     "UpdateIndex",
     "UpdatePlugin",
     "UpdateRetriever",
+    "UpdateSubscription",
     "UpdateUser",
     "UpdateWebExperience"
    ],
@@ -18881,6 +18920,35 @@
     "aws:TagKeys"
    ]
   },
+  "Amazon Q Business Q Apps": {
+   "ARNFormat": "arn:aws:qapps:${Region}:${Account}:${ResourceType}:${ResourcePath}",
+   "ARNRegex": "^arn:aws:qapps:.+:.+:.+",
+   "Actions": [
+    "AssociateQAppWithUser",
+    "CopyQApp",
+    "CreateLibraryItem",
+    "CreateLibraryItemReview",
+    "CreateQApp",
+    "CreateSubscriptionToken",
+    "DeleteLibraryItem",
+    "DeleteQApp",
+    "DisassociateQAppFromUser",
+    "GetLibraryItem",
+    "GetQApp",
+    "ImportDocumentToQApp",
+    "ImportDocumentToQAppSession",
+    "ListLibraryItems",
+    "ListQApps",
+    "PredictProblemStatementFromConversation",
+    "PredictQAppFromProblemStatement",
+    "StartQAppSession",
+    "StopQAppSession",
+    "UpdateLibraryItem",
+    "UpdateQApp"
+   ],
+   "HasResource": true,
+   "StringPrefix": "qapps"
+  },
   "Amazon Q in Connect": {
    "ARNFormat": "arn:aws:wisdom:${Region}:${Account}:${Resource}/${ResourceId}",
    "ARNRegex": "^arn:aws:wisdom:.+:.+:.+",
@@ -19177,6 +19245,7 @@
     "UpdateRefreshSchedule",
     "UpdateResourcePermissions",
     "UpdateRoleCustomPermission",
+    "UpdateSPICECapacityConfiguration",
     "UpdateTemplate",
     "UpdateTemplateAlias",
     "UpdateTemplatePermissions",
@@ -19966,6 +20035,35 @@
    "HasResource": false,
    "StringPrefix": "route53domains"
   },
+  "Amazon Route 53 Profiles enables sharing DNS settings with VPCs": {
+   "ARNFormat": "arn:aws:route53profiles:${Region}:${Account}:${ResourceType}/${ResourceId}",
+   "ARNRegex": "^arn:aws:route53profiles:.+:.+:.+",
+   "Actions": [
+    "AssociateProfile",
+    "AssociateResourceToProfile",
+    "CreateProfile",
+    "DeleteProfile",
+    "DisassociateProfile",
+    "DisassociateResourceFromProfile",
+    "GetProfile",
+    "GetProfileAssociation",
+    "GetProfileResourceAssociation",
+    "ListProfileAssociations",
+    "ListProfileResourceAssociations",
+    "ListProfiles",
+    "ListTagsForResource",
+    "TagResource",
+    "UntagResource",
+    "UpdateProfileResourceAssociation"
+   ],
+   "HasResource": true,
+   "StringPrefix": "route53profiles",
+   "conditionKeys": [
+    "aws:RequestTag/${TagKey}",
+    "aws:ResourceTag/${TagKey}",
+    "aws:TagKeys"
+   ]
+  },
   "Amazon Route 53 Recovery Cluster": {
    "ARNFormat": "arn:aws:route53-recovery-control::${Account}:${ResourceType}/${ResourceName}",
    "ARNRegex": "^arn:aws:route53-recovery-control::.+:.+",
@@ -21484,6 +21582,7 @@
     "DeleteDatabase",
     "DeleteScheduledQuery",
     "DeleteTable",
+    "DescribeAccountSettings",
     "DescribeBatchLoadTask",
     "DescribeDatabase",
     "DescribeEndpoints",
@@ -21507,6 +21606,7 @@
     "TagResource",
     "Unload",
     "UntagResource",
+    "UpdateAccountSettings",
     "UpdateDatabase",
     "UpdateScheduledQuery",
     "UpdateTable",
@@ -21765,6 +21865,8 @@
    "StringPrefix": "verifiedpermissions"
   },
   "Amazon WorkDocs": {
+   "ARNFormat": "arn:aws:workdocs:${Region}:${Account}:${ResourceType}/${ResourceName}",
+   "ARNRegex": "^arn:aws:workdocs:.+:.+:.+",
    "Actions": [
     "AbortDocumentVersionUpload",
     "ActivateUser",
@@ -21798,6 +21900,7 @@
     "DescribeDocumentVersions",
     "DescribeFolderContents",
     "DescribeGroups",
+    "DescribeInstanceExports",
     "DescribeInstances",
     "DescribeNotificationPermissions",
     "DescribeNotificationSubscriptions",
@@ -21819,14 +21922,15 @@
     "RemoveResourcePermission",
     "RestoreDocumentVersions",
     "SearchResources",
+    "StartInstanceExport",
     "UpdateDocument",
     "UpdateDocumentVersion",
     "UpdateFolder",
     "UpdateInstanceAlias",
     "UpdateUser",
     "UpdateUserAdministrativeSettings"
    ],
-   "HasResource": false,
+   "HasResource": true,
    "StringPrefix": "workdocs"
   },
   "Amazon WorkLink": {
@@ -21880,7 +21984,6 @@
    "ARNFormat": "arn:aws:workmail:${Region}:${Account}:${ResourceType}/${ResourceId}",
    "ARNRegex": "^arn:aws:workmail:.+:.+:.+",
    "Actions": [
-    "AddMembersToGroup",
     "AllowVendedLogDeliveryForResource",
     "AssociateDelegateToResource",
     "AssociateMemberToGroup",
@@ -21918,19 +22021,14 @@
     "DeleteUser",
     "DeregisterFromWorkMail",
     "DeregisterMailDomain",
-    "DescribeDirectories",
     "DescribeEmailMonitoringConfiguration",
     "DescribeEntity",
     "DescribeGroup",
     "DescribeInboundDmarcSettings",
     "DescribeInboundMailFlowRule",
-    "DescribeKmsKeys",
     "DescribeMailDomains",
-    "DescribeMailGroups",
-    "DescribeMailUsers",
     "DescribeMailboxExportJob",
     "DescribeOrganization",
-    "DescribeOrganizations",
     "DescribeOutboundMailFlowRule",
     "DescribeResource",
     "DescribeSmtpGateway",
@@ -21945,7 +22043,6 @@
     "GetJournalingRules",
     "GetMailDomain",
     "GetMailDomainDetails",
-    "GetMailGroupDetails",
     "GetMailboxDetails",
     "GetMobileDeviceAccessEffect",
     "GetMobileDeviceAccessOverride",
@@ -21963,7 +22060,6 @@
     "ListMailDomains",
     "ListMailboxExportJobs",
     "ListMailboxPermissions",
-    "ListMembersInMailGroup",
     "ListMobileDeviceAccessOverrides",
     "ListMobileDeviceAccessRules",
     "ListOrganizations",
@@ -21981,11 +22077,8 @@
     "PutRetentionPolicy",
     "RegisterMailDomain",
     "RegisterToWorkMail",
-    "RemoveMembersFromGroup",
     "ResetPassword",
-    "ResetUserPassword",
     "SearchMembers",
-    "SetAdmin",
     "SetDefaultMailDomain",
     "SetJournalingRules",
     "SetMobilePolicyDetails",