Release History

AWS::AmazonMQ::Broker

The following attributes are now available using the Fn::Getatt intrinsic function:

• IpAddresses

• MqttEndpoints

• OpenWireEndpoints

• AmqpEndpoints

• StompEndpoints

• WssEndpoints

AWS::AmazonMQ::ConfigurationAssociation

Use the AWS::AmazonMQ::ConfigurationAssociation resource to associate a configuration with a broker, or return information about the specified configuration association.

AWS::IoTAnalytics::Channel

Use the AWS::IoTAnalytics::Channel resource to create a channel. A channel collects data from an MQTT topic and archives the raw, unprocessed messages before publishing the data to a pipeline.

AWS::IoTAnalytics::Dataset

Use the AWS::IoTAnalytics::Dataset resource to create a data set. A data set retrieves data from a data store and allows you to explore and analyze your data using machine learning tools.

AWS::IoTAnalytics::Datastore

Use the AWS::IoTAnalytics::Datastore resource to create a data store. A data store holds messages from a channel which have been processed through a pipeline.

AWS::IoTAnalytics::Pipeline

Use the AWS::IoTAnalytics::Pipeline resource to create a pipeline. A pipeline consumes messages from one or more channels and allows you to process the messages before storing them in a data store.

AWS::CodeBuild::Project

• In the AWS CodeBuild Project Environment property type, you can use the Certificate property to specify a certificate to use with your build project.

• In the AWS CodeBuild Project Artifacts property type, you can use the ArtifactIdentifier property to identify the project artifact.

• In the AWS CodeBuild Project Source property type, you can use the SourceIdentifier property to identify the project source.

AWS::Lambda::Function

Use the Layers property to specify a list of Amazon Resource Names (ARNs) for the function layers to add to the function's execution environment.

AWS::Lambda::LayerVersion

Use the AWS CloudFormation AWS::Lambda::LayerVersion resource to create a layer version in AWS Lambda.

AWS::Lambda::LayerVersionPermission

Use the AWS CloudFormation AWS::Lambda::LayerVersionPermission resource to give other accounts permission to use a layer version in AWS Lambda.

AWS::DynamoDB::Table

Use the BillingMode property to specify how you are charged for read and write throughput and how you manage capacity.

The ProvisionedThroughput property is now conditional.

In the GlobalSecondaryIndex property type, the ProvisionedThroughput property is now conditional.

AWS::EC2::Instance

Use the ElasticInferenceAccelerators property to specify a list of elastic inference accelerators for an instance.

Use the LicenseSpecifications property to associate a list of license configuration with an instance.

AWS::ServiceDiscovery::Service

Use the NamespaceId property to specify the ID of the namespace that you want to use to create the service.

In the DnsConfig property type, use the RoutingPolicy property to specify the routing policy that you want to apply to all DNS records that AWS Cloud Map creates when you register an instance and specify this service.

AWS::ServiceDiscovery::HttpNamespace

Use the HttpNamespace resource to create an HTTP namespace for Cloud Map.

AWS::EC2::TransitGateway

Use the AWS::EC2::TransitGateway resource to create a transit gateway.

AWS::EC2::TransitGatewayAttachment

Use the AWS::EC2::TransitGatewayAttachment resource to create an attachment between a VPC and a transit gateway.

AWS::EC2::TransitGatewayRouteTable

Use the AWS::EC2::TransitGatewayRouteTable resource to create a static route for a transit gateway route table.

AWS::EC2::TransitGatewayRouteTable

Use the AWS::EC2::TransitGatewayRouteTable resource to create a route table for a transit gateway.

AWS::EC2::TransitGatewayRouteTableAssociation

Use the AWS::EC2::TransitGatewayRouteTableAssociation resource to associate an attachment with a transit gateway route table.

AWS::EC2::TransitGatewayRouteTablePropagation

Use the AWS::EC2::TransitGatewayRouteTablePropagation resource to enable an attachment to propagate routes.

Alexa::ASK::Skill

Use the Alexa::ASK::Skill resource to create an Alexa skill.

AWS::AppSync::FunctionConfiguration

Use the AWS::AppSync::FunctionConfiguration resource to describe the functions defined with appsync datasource in AWS AppSync.

AWS::EC2::EC2Fleet

Use the AWS::EC2::EC2Fleet resource to launch an EC2 Fleet that can include multiple launch specifications that vary by instance type, AMI, Availability Zone, or subnet.

AWS::Kinesis::StreamConsumer

Use the AWS::Kinesis::StreamConsumer resource to to register a consumer with a Kinesis data stream.

AWS::Route53Resolver::ResolverEndpoint

Use the AWS::Route53Resolver::ResolverEndpoint resource to specify settings for inbound or outbound endpoints for Amazon Route 53.

AWS::Route53Resolver::ResolverRule

Use the AWS::Route53Resolver::ResolverRule resource to specify detailed information about a resolver rule, which specifies how to route DNS queries out of a VPC for Amazon Route 53.

AWS::ApiGateway::Deployment

In the StageDescription property type, use the Tags property to specify the AWS CloudFormation resource tags to associate with the stage.

AWS::ApiGateway::Stage

Use the Tags property to specify the AWS CloudFormation resource tags to associate with the stage.

AWS::AutoScaling::AutoScalingGroup

Use the MixedInstancesPolicy property to provision a combination of On-Demand Instances and Spot Instances across multiple instance types. When you create your Auto Scaling group, you can specify a launch configuration or template as a parameter for the top-level object, or you can specify a mixed instances policy, but not both at the same time.

AWS::EC2::EIP

Use the PublicIpv4Pool property to specify the ID of an address pool that you own to let Amazon EC2 select an address from the address pool.

AWS::ElasticLoadBalancingV2::Listener

In the Action property type:

• Use the AuthenticateCognitoConfig property to specify request parameters to use when integrating with Amazon Cognito to authenticate users.

• Use the AuthenticateOidcConfig property to request parameters when using an identity provider (IdP) that is compliant with OpenID Connect (OIDC) to authenticate users.

• Use the FixedResponseConfig property to specify information about an action that returns a custom HTTP response.

• Use the RedirectConfig property to specify information about a redirect action.

AWS::ElasticLoadBalancingV2::ListenerRule

In the Actions property type:

• Use the AuthenticateCognitoConfig property to specify request parameters to use when integrating with Amazon Cognito to authenticate users.

• Use the AuthenticateOidcConfig property to request parameters when using an identity provider (IdP) that is compliant with OpenID Connect (OIDC) to authenticate users.

• Use the FixedResponseConfig property to specify information about an action that returns a custom HTTP response.

• Use the RedirectConfig property to specify information about a redirect action.

AWS::EMR::Cluster

Use the Amazon EMR Cluster HadoopJarStepConfig property type to specify a job flow step consisting of a JAR file whose main function will be executed.

Use the Amazon EMR Cluster StepConfig property type to specify a cluster (job flow) step.

Use the Amazon EMR Cluster KeyValue property type to specify a key value pair.

In the Amazon EMR Cluster JobFlowInstancesConfig property type, use KeepJobFlowAliveWhenNoSteps property to specify whether the cluster should remain available after completing all steps.

AWS OpsWorks VolumeConfiguration

In the VolumeConfiguration property type, use the Encrypted property to specify whether an Amazon EBS volume is encrypted.

AWS::RDS::DBCluster

Use the DeletionProtection property to indicate whether the DB cluster should have deletion protection enabled. The database can't be deleted when this value is set to true. If you want to delete a stack with a protected cluster, update this value to false before you delete the stack.

AWS::RDS::DBInstance

Use the DeleteAutomatedBackups property to indicate whether automated backups should be deleted (true) or retained (false) when you delete a DB instance. The default is true.

Use the DeletionProtection property to indicate whether the DB instance should have deletion protection enabled. The database can't be deleted when this value is set to true. If you want to delete a stack with a protected instance, update this value to false before you delete the stack.

AWS::S3::Bucket

Use the PublicAccessBlockConfiguration property to specify the public access configuration for an Amazon S3 bucket.

AWS::SNS::Topic

Use the KmsMasterKeyId property to specify an AWS KMS key identifier. This can be a key ID, key ARN, or key alias.

AWS::CodePipeline::Pipeline

Use the ArtifactStores property to specify a list of ArtifactStoreMap mappings. There must be an artifact store for the pipeline region and for each cross-region action within the pipeline. You can only use either ArtifactStore or ArtifactStores, not both.

In the Actions property type, use the Region property to specify the action’s AWS Region, such as us-east-1.

AWS::ApiGateway::Deployment

In the StageDescription property type, use the TracingEnabled property to specify whether active tracing with X-ray is enabled for this stage.

AWS::ApiGateway::Stage

Use the TracingEnabled property to specify whether active tracing with X-ray is enabled for this stage.

AWS::CloudWatch::Alarm

Use the DatapointsToAlarm property to specify the number of datapoints that must be breaching to trigger the alarm. This is used only if you are setting an "M out of N" alarm. In that case, this value is the M.

AWS::EC2::SecurityGroupIngress

Use the SourcePrefixListId property to specify the AWS service prefix of an Amazon VPC endpoint.

AWS::IAM::Role

Use the PermissionsBoundary property to specify the policy that is used to set the permissions boundary for the role.

AWS::IAM::User

Use the PermissionsBoundary property to specify the policy that is used to set the permissions boundary for the user.

AWS::IoT::TopicRule

In the TopicRulePayload property type, use the ErrorActions property to specify the action to take when an error occurs.

In the Action property type:

• Use the IoTAnalytics property to send message data to an AWS IoT Analytics channel.

• Use the StepFunctionsAction property to start execution of a Step Functions state machine.

AWS::KMS::Key

Use the PendingWindowInDays property to specify the waiting period, specified in number of days, after which AWS KMS deletes the customer master key (CMK).

AWS::RDS::DBInstance

Use the EnableCloudwatchLogExports property to specify the list of log types that need to be enabled for exporting to CloudWatch Logs.

Use the EnableIAMDatabaseAuthentication property to enable mapping of AWS Identity and Access Management (IAM) accounts to database accounts.

Use the EnablePerformanceInsights property to enable Performance Insights for the DB instance.

Use the PerformanceInsightsKMSKeyId property to specify the AWS KMS key identifier for encryption of Performance Insights data. The AWS KMS key ID is the Amazon Resource Name (ARN), AWS KMS key identifier, or the AWS KMS key alias for the AWS KMS encryption key.

Use the PerformanceInsightsRetentionPeriod property to specify the amount of time, in days, to retain Performance Insights data.

Use the ProcessorFeatures property to specify the number of CPU cores and the number of threads per core for the DB instance class of the DB instance.

Use the PromotionTier property to specify the order in which an Aurora Replica is promoted to the primary instance after a failure of the existing primary instance.

AWS::RDS::DBCluster

Use the EnableCloudwatchLogExports property to specify the list of log types that need to be enabled for exporting to CloudWatch Logs.

Use the EnableIAMDatabaseAuthentication property to enable mapping of AWS Identity and Access Management (IAM) accounts to database accounts.

Use the BacktrackWindow property to specify the target backtrack window, in seconds. To disable backtracking, specify 0. If specified, this property must be set to a number from 0 to 259,200 (72 hours).

AWS::Route53::RecordSet

Use the MultiValueAnswer property to route traffic approximately randomly to multiple resources, such as web servers. Create one multivalue answer record for each resource and specify true for MultiValueAnswer.

AWS::S3::Bucket

Use the RegionalDomainName attribute with the Fn::GetAtt function to return the regional domain name of the specified bucket.

AWS::WorkSpaces::Workspace

Use the Tags property to specify the tags (key-value pairs) that you want to attach to the WorkSpace.

Use the WorkspaceProperties property to specify information about a WorkSpace.

AWS::DLM::LifecyclePolicy

The AWS::DLM::LifecyclePolicy resource creates a lifecycle policy for Amazon Data Lifecycle Manager.

AWS::SecretsManager::ResourcePolicy

Use the AWS::SecretsManager::ResourcePolicy resource to define a resource-based policy and attach it to a secret that's stored in Secrets Manager.

AWS::SecretsManager::RotationSchedule

Use the AWS::SecretsManager::RotationSchedule resource to configure rotation for a secret.

AWS::SecretsManager::Secret

Use the AWS::SecretsManager::Secret resource to create a secret and stores it in Secrets Manager.

AWS::SecretsManager::SecretTargetAttachment

Use the AWS::SecretsManager::SecretTargetAttachment resource to complete the final link between a Secrets Manager secret and its associated database.

AWS::SSM::MaintenanceWindow

Use the StartDate and StartDate property types to specify when you want the Maintenance Window to become active or inactive. Use the ScheduleTimezone property type to specify the time zone to base scheduled Maintenance Window executions on, in Internet Assigned Numbers Authority (IANA) format.

AWS::AppSync::DataSource

Use the RelationalDatabaseConfig property type to specify RelationalDatabaseConfig for an AWS AppSync data source.

In the HttpConfig property type, use the AuthorizationConfig property to specify the authorization type and configurations for an AWS AppSync http data source.

AWS::AppSync::Resolver

Use the PipelineConfig property type to specify PipelineConfig for an AWS AppSync data source to connect with functions.

AWS::AutoScalingPlans::ScalingPlan

Use the ScalingInstruction property type to configure predictive scaling as part of the scaling configuration for an Amazon EC2 Auto Scaling group in an AWS Auto Scaling scaling plan.

Use the PredefinedLoadMetricSpecification property type to specify a predefined load metric for predictive scaling to use with AWS Auto Scaling.

Use the CustomizedLoadMetricSpecification property type to specify a customized load metric for predictive scaling to use with AWS Auto Scaling.

AWS::Batch::JobDefinition

The AWS::Batch::JobDefinition resource was updated to support AWS Batch multi-node parallel jobs.

AWS::Batch::ComputeEnvironment

The AWS::Batch::ComputeEnvironment resource was updated to support Amazon EC2 launch templates and placement groups.

AWS::CloudWatch::Alarm

Use the Metrics property to specify the metric data to return.

The MetricName, Namespace, and Period properties are now optional.

AWS::IoT1Click::Placement

The PlacementName property is now optional.

AWS::IoT1Click::Project

The ProjectName property is now optional.

AWS::AppStream::DirectoryConfig

Use the AWS::AppStream::DirectoryConfig resource to describe the configuration information required to join Amazon AppStream 2.0 fleets and image builders to Microsoft Active Directory domains.

AWS::AppStream::Fleet

Use the AWS::AppStream::Fleet resource to create a fleet for Amazon AppStream 2.0. A fleet consists of streaming instances that run a specified image.

AWS::AppStream::ImageBuilder

Use the AWS::AppStream::ImageBuilder resource to create an image builder for Amazon AppStream 2.0.

AWS::AppStream::Stack

Use the AWS::AppStream::Stack resource to create a stack to start streaming applications to Amazon AppStream 2.0 users.

AWS::AppStream::StackFleetAssociation

Use the AWS::AppStream::StackFleetAssociation resource to associate a fleet with a stack for Amazon AppStream 2.0.

AWS::AppStream::StackUserAssociation

Use the AWS::AppStream::StackUserAssociation resource to associate the specified stacks with the specified users for Amazon AppStream 2.0. Users in a user pool cannot be assigned to stacks with fleets that are joined to an Active Directory domain.

AWS::AppStream::User

Use the AWS::AppStream::User resource to create a new user in the user pool for Amazon AppStream 2.0.

AWS::AmazonMQ::Broker

Amazon MQ now supports engine versions 5.15.6 and 5.15.0. Property changes include:

• The EngineVersion property now requires some interruptions upon update.

• The AutoMinorVersionUpgrade property now requires no interruption upon update.

AWS::GuardDuty::Detector

Use the FindingPublishingFrequency property to specify the frequency of notifications sent about the subsequent finding occurrences.

AWS::SSM::PatchBaseline

Use the PatchSource property type to provide information about the patches to use to update target instances.

AWS::Events::EventBusPolicy

Use the AWS::Events::EventBusPolicy resource to grant permission to other AWS accounts that send events to your account.

AWS::ApiGateway::Deployment

Use the DeploymentCanarySettings property to specify settings for the canary deployment.

In the StageDescription property type:

• Use the AccessLogSetting property to specify settings for logging access in this stage.

• Use the CanarySetting property to specify settings for the canary deployment in this stage.

AWS::ApiGateway::Method

Use the AuthorizationScopes property to specify a list of authorization scopes configured on the method.

In the Integration:

• Use the ConnectionId property to specify the ID of the VpcLink used for the integration when connectionType=VPC_LINK.

• Use the ConnectionType property to specify the type of the network connection to the integration endpoint.

• Use the TimeoutInMillis property to specify a custom timeout between 50 and 29,000 milliseconds.

AWS::ApiGateway::Stage

Use the AccessLogSetting property to specify settings for logging access in this stage.

Use the CanarySetting property to specify settings for the canary deployment in this stage.

AWS::ApiGateway::UsagePlan

In the Amazon API Gateway UsagePlan ApiStage property type, use the Throttle property to specify a map containing method-level throttling information for API stage in a usage plan.

AWS::CodeBuild::Project

Use the LogsConfig property specify logs for a project. Logs can be CloudWatch Logs, uploaded to a specified S3 bucket, or both.

In the AWS CodeBuild Project LogsConfig property type:

• Use the CloudWatchLogs property to specify details about CloudWatch Logs.

• Use the S3Logs property to specify details about logs that are uploaded to an S3 bucket.

AWS::CodeDeploy::DeploymentGroup

Use the Ec2TagSet property to specify information about groups of tags applied to EC2 instances. The deployment group will include only EC2 instances identified by all the tag groups.

Use the OnPremisesInstanceTagSet property to specify information about groups of tags applied to on-premises instances. The deployment group will include only on-premises instances identified by all the tag groups.

The DeliverLogsPermissionArn and LogGroupName properties are no longer required.

AWS::EC2::FlowLog

Use the LogDestination property to specify the destination to which the flow log data is to be published.

Use the LogDestinationType property to specify the type of destination to which the flow log data is to be published. Flow log data can be published to CloudWatch Logs or Amazon S3.

AWS::EC2::SpotFleet

In the SpotFleetRequestConfigData property type, use the InstanceInterruptionBehavior property to specify the behavior when a Spot Instance is interrupted.

In the SpotFleetRequestConfigData property type, use the LoadBalancersConfig property to specify one or more Classic Load Balancers and target groups to attach to the Spot Fleet request. Spot Fleet registers the running Spot Instances with the specified Classic Load Balancers and target groups.

In the Placement property type, use the Tenancy property to specify the tenancy of the instance (if the instance is running in a VPC). An instance with a tenancy of dedicated runs on single-tenant hardware. The host tenancy is not supported for Spot Instances.

AWS::EC2::VPCEndpoint

Use the following attributes with the Fn::GetAtt function to return attribute values.

• Use CreationTimestamp to return the date and time the VPC endpoint was created.

• Use DnsEntries to return the DNS entries for the endpoint.

• Use NetworkInterfaceIds to return the network interfaces for the endpoint.

AWS::ECS::Service

The ServiceRegistries property now requires replacement upon update.

Use the SchedulingStrategy property to specify the scheduling strategy to use for the service.

In the ServiceRegistry property type:

• Use the ContainerName property to specify the container name value, already specified in the task definition, to be used for your service discovery service.

• Use the ContainerPort property to specify the port value, already specified in the task definition, to be used for your service discovery service.

AWS::ECS::TaskDefinition

In the LinuxParameters property type:

• Use the Tmpfs property to specify the container path, mount options, and size of the tmpfs mount.

• Use the SharedMemorySize property to specify the size (in MiB) of the /dev/shm volume.

In the Volumes property type, use the DockerVolumeConfiguration property to specify the configuration of a Docker volume.

In the ContainerDefinition property type, use the RepositoryCredentials property to specify the repository credentials for private registry authentication.

AWS::ElastiCache::ReplicationGroup

The NodeGroupConfiguration and NumNodeGroups properties are now conditional for some update operations.

In the NodeGroupConfiguration property type, use the NodeGroupId property to specify either the ElastiCache for Redis supplied 4-digit id or a user supplied id for the node group these configuration values apply to.

AWS::RDS::DBCluster

Use the EngineMode property to specify the DB engine mode of the DB cluster.

Use the ScalingConfiguration property to specify the scaling properties of the DB cluster, for DB clusters in serverless DB engine mode.

AWS::IoT1Click::Device

Use the AWS::IoT1Click::Device resource to change the enabled state of an AWS IoT 1-Click compatible device.

AWS::IoT1Click::Placement

Use the AWS::IoT1Click::Placement resource to create an empty AWS IoT 1-Click placement.

AWS::IoT1Click::Project

Use the AWS::IoT1Click::Project resource to create an empty project with a placement template.

AWS::CloudFormation::Macro

Use the AWS::CloudFormation::Macro resource to create a template macro to perform custom processing on AWS CloudFormation templates.

AWS::AmazonMQ::Broker

Use the Logs property to enable general or audit logging for an Amazon MQ broker.

AWS::CodeBuild::Project

In the AWS CodeBuild Project Artifacts property type, you can use the SecondaryArtifacts property to specify secondary artifacts for a build project. You can use the SecondarySources property to specify secondary inputs for a build project.

AWS::Glue::Crawler

Use the Configuration property to specify crawler configuration information. This versioned JSON string allows users to specify aspects of a crawler's behavior.

AWS::Glue::Classifier

Use the JsonClassifier property to specify AWS Glue classifier for JSON.

Use the XMLClassifier property to specify AWS Glue classifier for XML content.

AWS::ApiGateway::DomainName

Use the following attributes with the Fn::GetAtt intrinsic function:

• The DistributionHostedZoneId attribute returns the region-agnostic Amazon Route 53 Hosted Zone ID of the edge-optimized endpoint.

• The RegionalDomainName attribute returns the domain name associated with the regional endpoint for this custom domain name.

• The RegionalHostedZoneId attribute returns the region-specific Amazon Route 53 Hosted Zone ID of the regional endpoint.

AWS::CertificateManager::Certificate

Use the ValidationMethod property to specify the method you want to use if you are requesting a public certificate to validate that you own or control a domain.

AWS::EC2::VPCPeeringConnection

Use the PeerRegion property to specify the region code for the accepter VPC, if the accepter VPC is located in a region other than the region in which you make the request.

AWS::EFS::FileSystem

• Use the ProvisionedThroughputInMibps property to specify the throughput, measured in MiB/s, that you want to provision for a file system that you're creating.

• Use the ThroughputMode property to specify the throughput mode for the file system to be created.

AWS::EMR::Cluster

Use the KerberosAttributes property to specify attributes for Kerberos configuration when Kerberos authentication is enabled using a security configuration.

AWS::RDS::DBClusterParameterGroup

The Tags property now requires no interruption to update.

AWS::SNS::Subscription

• Use the DeliveryPolicy property to specify the JSON serialization of the subscription's delivery policy.

• Use the FilterPolicy property to specify the filter policy JSON that is assigned to the subscription.

• Use the RawMessageDelivery property to specify if raw message delivery is enabled for the subscription.

• Use the Region property to specify the region in which the topic resides.

AWS::SQS::Queue

Use the Tags property to specify the tags that you want to attach to this queue.

AWS::DAX::Cluster

Use the SSESpecification property to specify the settings to enable server-side encryption.

AWS::EC2::VPCEndpointServicePermissions

Grant or revoke permissions for service consumers to connect the VPC endpoint service.

AWS::CodeBuild::Project

In the AWS CodeBuild Project Artifacts property type, set the OverrideArtifactName property to true to override the artifact name with a name specified in the buildspec file. The name specified in a buildspec file is calculated at build time and uses the Shell command language. For example, you can append a date and time to your artifact name so that it is always unique.

AWS::CodeBuild::Project

In the AWS CodeBuild Project Artifacts property type, set the EncryptionDisabled property to true to disable encryption for build output artifacts. This option is only valid if your artifact type is Amazon S3. If this is set to true with another artifact type, an invalidInputException will be thrown.

AWS::Batch::JobDefinition

Use the Timeout property type to specify a job timeout configuration.

AWS::IAM::ServiceLinkedRole

Use the AWS::IAM::ServiceLinkedRole resource to create a service-linked role in IAM. A service-linked role is a unique type of IAM role that is linked directly to an AWS service. Service-linked roles are predefined by the service and include all the permissions that the service requires to call other AWS services on your behalf.

AWS::CloudFront::Distribution

In the CloudFront Distribution CacheBehavior and CloudFront Distribution DefaultCacheBehavior property types, use the FieldLevelEncryptionId property to specify the ID for the field-level encryption configuration that you want CloudFront to use for encrypting specific fields of data for a cache behavior or for the default cache behavior.

AWS::AppSync::DataSource

Use the HttpConfig property type to specify HttpConfig for an AWS AppSync data source.

AWS::CodeBuild::Project

In the AWS CodeBuild Project Source property type, use the ReportBuildStatus property to specify whether to send your source provider the status of a build's start and completion.

AWS::CodePipeline::Webhook

Use the AWS::CodePipeline::Webhook resource to create a webhook that connects your pipeline to an external event, such as a GitHub source repository change, which triggers your pipeline to start every time the external event occurs.

AWS::EC2::VPCEndpoint

Use the PrivateDnsEnabled property to indicate whether to associate a private hosted zone with the specified VPC.

Use the SecurityGroupIds property to specify the ID of one or more security groups to associate with the endpoint network interface.

Use the SubnetIds property to specify the ID of one or more subnets in which to create an endpoint network interface.

Use the VpcEndpointType property to specify the type of endpoint.

AWS::EC2::VPCEndpointConnectionNotification

Use the AWS::EC2::VPCEndpointConnectionNotification resource to create a connection notification for the specified VPC endpoint or VPC endpoint service.

AWS::EC2::VPCEndpointService

Use the AWS::EC2::VPCEndpointService resource to create a VPC endpoint service configuration to which service consumers (AWS accounts, IAM users, and IAM roles) can connect.

AWS::ServiceDiscovery::Service

Use the HealthCheckCustomConfig property to specify information about an optional custom health check.

AWS::AmazonMQ::Broker

Use the AWS::AmazonMQ::Broker resource to create a broker, add configuration changes or modify users for the specified broker, return information about the specified broker, or delete the specified broker.

AWS::AmazonMQ::Configuration

Use the AWS::AmazonMQ::Configuration resource to create a configuration, update the specified configuration, or return information about the specified configuration.

AWS::SSM::ResourceDataSync

Use the AWS::SSM::ResourceDataSync resource to create or delete a Resource Data Sync for Systems Manager Inventory. You can use Resource Data Sync to send Inventory data collected from all of your Systems Manager managed instances to a single Amazon S3 bucket.

AWS::EKS::Cluster

Use the AWS::EKS::Cluster resource to create Amazon EKS clusters.

AWS::GuardDuty::Master

The InvitationId property is now optional.

AWS::SageMaker::Endpoint

Use the AWS::SageMaker::Endpoint resource to create a SageMaker endpoint to host trained models.

AWS::SageMaker::EndpointConfig

Use the AWS::SageMaker::EndpointConfig resource to create a configuration for an endpoint.

AWS::SageMaker::Model

Use the AWS::SageMaker::Model resource to create a model to host at an Amazon SageMaker endpoint.

AWS::SageMaker::NotebookInstance

Use the AWS::SageMaker::NotebookInstance resource to create an Amazon SageMaker notebook instance.

AWS::SageMaker::NotebookInstanceLifecycleConfig

Use the AWS::SageMaker::NotebookInstanceLifecycleConfig resource to specify shell scripts that run when you create or start a notebook instance.

AWS::Neptune::DBCluster

Use the AWS::Neptune::DBCluster resource to create an Amazon Neptune DB cluster.

AWS::Neptune::DBClusterParameterGroup

Use the AWS::Neptune::DBClusterParameterGroup resource to create a DB cluster parameter group.

AWS::Neptune::DBInstance

Use the AWS::Neptune::DBInstance resource to create an Amazon Neptune database instance.

AWS::Neptune::DBParameterGroup

Use the AWS::Neptune::DBParameterGroup resource to create a custom parameter group for Amazon Neptune.

AWS::Neptune::DBSubnetGroup

Use the AWS::Neptune::DBSubnetGroup resource to create an Amazon Neptune database subnet group that contains subnets.

AWS::ApiGateway::RestApi

Use the Policy property to specify a policy document that contains the permissions for the specified RestAPI.

AWS::AutoScaling::AutoScalingGroup

Use the ServiceLinkedRoleARN property to specify the Amazon Resource Name (ARN) of the service-linked role that the Auto Scaling group uses to call other AWS services on your behalf.

AWS::AutoScaling::LaunchConfiguration

Use the LaunchConfigurationName property to specify the name of the launch configuration.

AWS::DirectoryService::MicrosoftAD

Use the Edition property to specify the AWS Microsoft AD edition to use.

AWS::DynamoDB::Table

Use the PointInTimeRecoverySpecification property to specify the settings used to enable point in time recovery.

AWS::EC2::Instance

Use the LaunchTemplate property to specify the launch template to use for an Amazon EC2 instance.

AWS::ECS::Service

Use the ServiceRegistry property type to specify the details of the service registry.

AWS::ECS::TaskDefinition

Use the HealthCheck property type to specify a container health check.

AWS::Elasticsearch::Domain

Use the EncryptionAtRestOptions property type to specify whether the domain should encrypt data at rest, and if so, the AWS Key Management Service (KMS) key to use.

AWS::IAM::Role

Use the RoleId attribute to have Fn::GetAtt return the stable and unique string identifying the role.

Use the MaxSessionDuration property to specify the maximum session duration (in seconds) for the specified role.

AWS::KinesisFirehose::DeliveryStream

Use the SplunkDestinationConfiguration property to specify the configuration of a destination in Splunk for a Kinesis Data Firehose delivery stream.

AWS::Lambda::EventSourceMapping

The StartingPosition property is no longer required.

AWS::Logs::MetricFilter

In the CloudWatch Logs MetricFilter MetricTransformation Property property type, use the DefaultValue property to specify the value to emit when a filter pattern does not match a log event.

AWS::SSM::Association

Use the OutputLocation property to specify an Amazon S3 bucket where you want to store the results of an association request.

AWS::ServiceCatalog::AcceptedPortfolioShare

Use the AWS::ServiceCatalog::AcceptedPortfolioShare resource to accept an offer to share the specified portfolio for AWS Service Catalog.

AWS::ServiceCatalog::CloudFormationProduct

Use the AWS::ServiceCatalog::CloudFormationProduct resource to create a product for AWS Service Catalog.

AWS::ServiceCatalog::LaunchNotificationConstraint

Use the AWS::ServiceCatalog::LaunchNotificationConstraint resource to create a notification constraint for AWS Service Catalog.

AWS::ServiceCatalog::LaunchRoleConstraint

Use the AWS::ServiceCatalog::LaunchRoleConstraint resource to create a launch constraint for AWS Service Catalog.

AWS::ServiceCatalog::LaunchTemplateConstraint

Use the AWS::ServiceCatalog::LaunchTemplateConstraint resource to create a template constraint for AWS Service Catalog.

AWS::ServiceCatalog::Portfolio

Use the AWS::ServiceCatalog::Portfolio resource to create a portfolio for AWS Service Catalog.

AWS::ServiceCatalog::PortfolioPrincipalAssociation

Use the AWS::ServiceCatalog::PortfolioPrincipalAssociation resource to associate a principal with a portfolio for AWS Service Catalog.

AWS::ServiceCatalog::PortfolioProductAssociation

Use the AWS::ServiceCatalog::PortfolioProductAssociation resource to associate a product with a portfolio for AWS Service Catalog.

AWS::ServiceCatalog::PortfolioShare

Use the AWS::ServiceCatalog::PortfolioShare resource to share a portfolio for AWS Service Catalog.

AWS::ServiceCatalog::TagOption

Use the AWS::ServiceCatalog::TagOption resource to create a TagOption.

AWS::ServiceCatalog::TagOptionAssociation

Use the AWS::ServiceCatalog::TagOptionAssociation resource to associate a TagOption with a resource for AWS Service Catalog.

AWS::Budgets::Budget

Use the AWS::Budgets::Budget resource to create a budget.

AWS::AutoScalingPlans::ScalingPlan

Use the AWS::AutoScalingPlans::ScalingPlan resource to create a scaling plan for the scalable resources for your application.

AWS::GuardDuty::Filter

Use the AWS::GuardDuty::Filter resource to create a filter for your GuardDuty findings.

AWS::AppSync::GraphQLApi

Use the OpenIDConnectConfig property to specify the authorization configuration for using an OpenId Connect compliant service with your GraphQL endpoint.

AWS::GuardDuty::Member

Use the DisableEmailNotification property to specify whether an email notification is to be sent to the accounts that you want to invite to GuardDuty as members. When set to 'True', email notification is not sent to the invitees.

AWS::ServiceCatalog::CloudFormationProvisionedProduct

Use the AWS::ServiceCatalog::CloudFormationProvisionedProduct resource to provision the specified product for AWS Service Catalog.

AWS::AppSync::ApiKey

Use the AWS::AppSync::ApiKey resource to create a unique key that you can distribute to clients who are executing GraphQL operations with AWS AppSync.

AWS::AppSync::DataSource

Use the AWS::AppSync::DataSource resource to create data sources for resolvers in AWS AppSync.

AWS::AppSync::GraphQLApi

Use the AWS::AppSync::GraphQLApi resource to create a new AWS AppSync GraphQL API.

AWS::AppSync::GraphQLSchema

Use the AWS::AppSync::GraphQLSchema resource to create the data model for your AWS AppSync GraphQL API.

AWS::AppSync::Resolver

Use the AWS::AppSync::Resolver resource to define the logical GraphQL resolver that you will attach to fields in a schema.

AWS::Config::ConfigurationAggregator

Use the OrganizationAggregationSource property type to specify the regions of AWS Config data to aggregate into an AWS Config configuration aggregator and the IAM role to use to retrieve AWS Organizations details.

AWS::Config::AggregationAuthorization

Use the AWS::Config::AggregationAuthorization resource to grant permission to an aggregator account to collect your AWS Config data.

AWS::Config::ConfigurationAggregator

Use the AWS::Config::ConfigurationAggregator resource to create a configuration aggregator for AWS Config.

AWS::EC2::LaunchTemplate

Use the AWS::EC2::LaunchTemplate resource to create a launch template for an Amazon EC2 instance.

AWS::AutoScaling::AutoScalingGroup

Use the LaunchTemplate property to specify the launch template to use to launch instances.

AWS::EC2::SpotFleet

In the Amazon EC2 SpotFleet SpotFleetRequestConfigData property type, use the LaunchTemplateConfigs property to describe a launch template and overrides.

AWS::ApiGateway::VpcLink

Use the AWS::ApiGateway::VpcLink resource to specify an API Gateway VPC link for a AWS::ApiGateway::RestApi to access resources in an Amazon Virtual Private Cloud (VPC).

AWS::GuardDuty::Master

Use the AWS::GuardDuty::Master resource to create a GuardDuty master account.

AWS::GuardDuty::Member

Use the AWS::GuardDuty::Member resource to create a GuardDuty member account.

AWS::SES::ConfigurationSet

Use the AWS::SES::ConfigurationSet resource to to create groups of rules that you can apply to the emails you send.

AWS::SES::ConfigurationSetEventDestination

Use the AWS::SES::ConfigurationSetEventDestination resource to specify a configuration set event destination.

AWS::SES::ReceiptFilter

Use the AWS::SES::ReceiptFilter resource to specify whether to accept or reject mail originating from an IP address or range of IP addresses.

AWS::SES::ReceiptRule

Use the AWS::SES::ReceiptRule resource to specify which actions Amazon SES should take when it receives mail on behalf of one or more email addresses or domains that you own.

AWS::SES::ReceiptRuleSet

Use the AWS::SES::ReceiptRuleSet resource to specify an empty rule set for Amazon SES.

AWS::SES::Template

Use the AWS::SES::Template resource to to specify the content of the email, composed of a subject line, an HTML part, and a text-only part.

AWS::AutoScaling::AutoScalingGroup

Use the AutoScalingGroupName property to specify the name of the Auto Scaling group.

AWS::ApiGateway::RestApi

Use the ApiKeySourceType property to specify the source of the API key for metering requests according to a usage plan.

Use the MinimumCompressionSize property to specify a nullable integer that is used to enable compression or disable compression on an API.

AWS::ApplicationAutoScaling::ScalingPolicy

In the Application Auto Scaling ScalingPolicy TargetTrackingScalingPolicyConfiguration property type, use the DisableScaleIn property to specify whether scale in by the target tracking policy is disabled.

AWS::EC2::SpotFleet

In the LaunchSpecifications property type, use the TagSpecifications property to specify the tags to apply during SpotFleet creation.

AWS::Elasticsearch::Domain

Use the Arn attribute to have Fn::GetAtt return the Amazon Resource Name (ARN) of the domain.

The DomainArn attribute of Fn::GetAtt has been deprecated.

AWS::RDS::DBCluster

Use the DBClusterIdentifier property to specify the DB cluster identifier.

AWS::RDS::DBCluster

Use the DBClusterIdentifier property to specify the DB cluster identifier.

AWS::Redshift::Cluster

Use the ClusterIdentifier property to specify the unique identifier of the cluster.

AWS::Route53::HealthCheck

In the HealthCheckConfig property type, use the Regions property to specify the regions from which you want Route 53 health checkers to check the specified endpoint.

AWS::SSM::Document

Use the Tags property to specify the AWS CloudFormation resource tags to apply to the document.

AWS::CodeBuild::Project

Use the Triggers property to configure a webhook for the project to begin to automatically rebuild the source code every time a code change is pushed to the repository. This is available only for GitHub projects in AWS CloudFormation. It is not available for GitHub Enterprise projects.

AWS::DynamoDB::Table

Use the SSESpecification property to specify the settings to enable server-side encryption.

AWS::CodeBuild::Project

In the AWS CodeBuild Project Source property type:

• Use the GitCloneDepth property to specify the depth of history to download.

• Use the InsecureSsl property to specify whether to ignore SSL warnings while connecting to your GitHub Enterprise project repository.

AWS::AutoScaling::LifecycleHook

Use the LifecycleHookName property to specify the name of the lifecycle hook.

AWS::DynamoDB::Table

The AttributeDefinitions property now requires replacement when updated.

AWS::EC2::Instance

Use the CreditSpecification property to specify the credit option for CPU usage of a T2 instance.

Use the ElasticGpuSpecifications property to specify Elastic GPUs, GPU resources that you can attach to your instance to accelerate the graphics performance of your applications.

AWS::EC2::VPC

The InstanceTenancy property now requires no interruption when updated from "dedicated" to "default".

AWS::ECS::Service

Use the HealthCheckGracePeriodSeconds property to specify the period of time, in seconds, that the Amazon ECS service scheduler ignores unhealthy Elastic Load Balancing target health checks after a task has first started.

AWS::IoT::TopicRule

In the DynamoDBAction property type, the RangeKeyField and RangeKeyValue properties are no longer required.

AWS::KinesisAnalytics::ApplicationOutput

In the ApplicationOutput property type, use the LambdaOutput property to identify a Lambda function as the destination when configuring application output.

AWS::Kinesis::Stream

Use the StreamEncryption property to enable or update server-side encryption using an AWS KMS key for a specified stream.

AWS::Lambda::Function

Use the ReservedConcurrentExecutions property to specify the maximum of concurrent executions you want reserved for the function.

AWS::RDS::DBSubnetGroup

Use the DBSubnetGroupName property to specify the name for the DB Subnet Group.

AWS::S3::Bucket

Use the BucketEncryption property to specify default encryption for a bucket using server-side encryption with Amazon S3-managed keys SSE-S3 or AWS KMS-managed Keys (SSE-KMS) bucket.

In the ReplicationRule property type, use the SourceSelectionCriteria property to specify additional filters in identifying source objects that you want to replicate.

In the ReplicationDestination property type:

• Use the AccessControlTranslation property to specify replica ownership of the AWS account that owns the destination bucket.

• Use the Account property to specify destination bucket owner account ID.

• Use the EncryptionConfiguration property to specify encryption-related information for a bucket that is a destination for replicated objects.

AWS::SSM::Association

Use the AssociationName property to specify the name of the association between an SSM document and EC2 instances that contain a configuration agent to process the document.

AWS::SSM::Parameter

Use the AllowedPattern property to specify a regular expression used to validate the parameter value.

AWS::Inspector::AssessmentTarget

Use the AWS::Inspector::AsssmentTarget resource to create an Amazon Inspector assessment target.

AWS::Inspector::AssessmentTemplate

Use the AWS::Inspector::AssessmentTemplate resource to create an Amazon Inspector assessment template.

AWS::Inspector::ResourceGroup

Use the AWS::Inspector::ResourceGroup resource to create an Amazon Inspector resource group, which defines tags that identify AWS resources that make up an Amazon Inspector assessment target.

AWS::ServiceDiscovery::Instance

Use the AWS::ServiceDiscovery::Instance resource to specify information about an instance that Amazon Route 53 creates.

AWS::ServiceDiscovery::PrivateDnsNamespace

Use the AWS::ServiceDiscovery::PrivateDnsNamespace resource to specify information about a private namespace for Amazon Route 53.

AWS::ServiceDiscovery::PublicDnsNamespace

Use the AWS::ServiceDiscovery::PublicDnsNamespace resource to specify information about a public namespace for Amazon Route 53.

AWS::ServiceDiscovery::Service

Use the AWS::ServiceDiscovery::Service resource to define a template for up to five records and an optional health check that you want Amazon Route 53 to create when you register an instance.

AWS::KinesisAnalytics::Application

In the Input property type, use the InputProcessingConfiguration property to transform records as they are received from the stream.

AWS::CodeBuild::Project

Use the BadgeEnabled property to generate a publicly accessible URL for a project's build badge.

Use the Cache property to configure cache settings for build dependencies.

Use the VpcConfig property to enable AWS CodeBuild to access resources in an Amazon VPC.

In the EnvironmentVariable property type, use the Type property to specify the type of environment variable.

AWS::Cloud9::EnvironmentEC2

Use the AWS::Cloud9::EnvironmentEC2 resource to create an Amazon EC2 development environment in AWS Cloud9.

AWS::ECS::TaskDefinition

Use the Cpu property to specify the number of cpu units needed for the task.

Use the ExecutionRoleArn property to specify the ARN of the execution role.

Use the Memory property to specify the amount (in MiB) of memory needed for the task.

Use the RequiresCompatibilities property to specify the launch type the task requires.

AWS::ECS::Service

Use the LaunchType property to specify the launch type on which to run your service.

Use the NetworkConfiguration property to specify the network configuration for the service.

Use the PlatformVersion property to specify the platform version on which to run your service.

AWS::GuardDuty::Detector

Use the AWS::GuardDuty::Detector resource to create a single Amazon GuardDuty detector.

AWS::GuardDuty::IPSet

Use the AWS::GuardDuty::IPSet resource to create an Amazon GuardDuty IP set.

AWS::GuardDuty::ThreatIntelSet

Use the AWS::GuardDuty::ThreatIntelSet resource to create a ThreatIntelSet.

AWS::CodeDeploy::Application

Use the ComputePlatform property to specify an AWS Lambda compute platform for AWS CodeDeploy to deploy an application to.

AWS::CodeDeploy::DeploymentGroup

In the DeploymentStyle property type, use the DeploymentType property to specify a blue/green deployment on a Lambda compute platform.

AWS::EC2::SpotFleet

In the SpotFleetRequestConfigData property type, the SpotPrice property is now optional.

AWS::Lambda::Alias

Use the RoutingConfig property to specify two different versions of an AWS Lambda function, allowing you to dictate what percentage of traffic will invoke each version.

AWS::ApiGateway::ApiKey

Use the CustomerId property to specify an AWS Marketplace customer identifier.

Use the GenerateDistinctId property to specify whether the key identifier is distinct from the created API key value.

AWS::ApiGateway::Authorizer

Use the AuthType property to specify a customer-defined field that's used in Swagger imports and exports without functional impact.

AWS::ApiGateway::DomainName

Use the EndpointConfiguration property to specify the endpoint types of an API Gateway domain name.

Use the RegionalCertificateArn property to reference a certificate for use by the regional endpoint for a domain name.

AWS::ApiGateway::Method

In the Integration and IntegrationResponse property types, use the ContentHandling property to specify how to handle request payload content type conversions.

AWS::ApiGateway::RestApi

Use the EndpointConfiguration property to specify the endpoint types of an API Gateway REST API.

AWS::ApplicationAutoScaling::ScalableTarget

Use the ScheduledActions property to specify scheduled actions for an Application Auto Scaling scalable target.

AWS::ECR::Repository

Use the LifecyclePolicy property to specify a lifecycle policy for an Amazon ECR repository.

AWS::ECS::TaskDefinition

In the ContainerDefinition property type, use the LinuxParameters property to specify Linux-specific options for an Amazon ECS container.

AWS::ElastiCache::ReplicationGroup

Use the AtRestEncryptionEnabled property to enable encryption at rest.

Use the AuthToken property to specify a password that's used to access a password-protected server.

Use the TransitEncryptionEnabled property to enable in-transit encryption.

AWS::ElasticLoadBalancingV2::TargetGroup

Use the TargetGroupName attribute with the Fn::GetAtt function to get the name of an Elastic Load Balancing target group.

AWS::Elasticsearch::Domain

Use the VPCOptions property to specify a VPC configuration for the Amazon ES domain.

AWS::EMR::Cluster

Use the EbsRootVolumeSize property to specify the size of the EBS root volume for an Amazon EMR cluster.

AWS::RDS::DBInstance

Use the SourceRegion and KmsKeyId properties to create an encrypted read replica from a cross-region source DB instance.

AWS::Route53::HostedZone

Use the QueryLoggingConfig property to specify a configuration for DNS query logging.

AWS::StepFunctions::StateMachine

You can use AWS::StepFunctions::StateMachine to specify a StateMachineName when creating a state machine, and both DefinitionString and RoleArn can be updated without replacing the state machine.

AWS::CloudFront::CloudFrontOriginAccessIdentity

Use the AWS::CloudFront::CloudFrontOriginAccessIdentity resource to specify the Amazon CloudFront origin access identity to associate with the origin of a CloudFront distribution.

AWS::CloudFront::StreamingDistribution

Use the AWS::CloudFront::StreamingDistribution resource to specify an Adobe Real-Time Messaging Protocol (RTMP) streaming distribution for CloudFront.

AWS::ApiGateway::Deployment

The StageName property has been deprecated on the StageDescription property type.

AWS::ApiGateway::Method

Use the OperationName property to assign a friendly name to an API Gateway method.

Use the RequestValidatorId property to associate a request validator with a method.

AWS::AutoScaling::AutoScalingGroup

Use the LifecycleHookSpecificationList property to specify actions to perform when Auto Scaling launches or terminates instances.

AWS::CloudFront::Distribution

Use the Tags property to specify an arbitrary set of tags (key–value pairs) to associate with a CloudFront distribution.

In the CacheBehavior and DefaultCacheBehavior property types, use the LambdaFunctionAssociations property to specify Lambda function associations for a CloudFront distribution.

In the CustomOriginConfig property type, use the OriginKeepaliveTimeout property to specify a custom keep-alive timeout, and use the OriginReadTimeout property to specify a custom origin read timeout.

In the DistributionConfig property type, use the IPV6Enabled property to specify whether CloudFront responds to IPv6 DNS requests with an IPv6 address for your distribution.

AWS::CodeDeploy::DeploymentGroup

In the LoadBalancerInfo property type, use the TargetGroupInfoList property to specify information about a target group in Elastic Load Balancing to use in a deployment.

AWS::EC2::SecurityGroup, AWS::EC2::SecurityGroupEgress, and AWS::EC2::SecurityGroupIngress

Use the Description property to specify the description of a security group rule.

AWS::EC2::Subnet

The Ipv6CidrBlock property now supports No interruption updates.

AWS::EC2::VPNGateway

Use the AmazonSideAsn property to specify a private Autonomous System Number (ASN) for the Amazon side of a BGP session.

AWS::EC2::VPNConnection

Use the VpnTunnelOptionsSpecifications property to configure tunnel options for a VPN connection.

AWS::ElasticBeanstalk::ConfigurationTemplate and AWS::ElasticBeanstalk::Environment

In the ConfigurationOptionSetting and OptionSetting property types, use the ResourceName property to specify a resource name for a time-based scaling configuration option.

AWS::EMR::Cluster

Use the CustomAmiId property to specify a custom Amazon Linux AMI for a cluster.

AWS::KinesisFirehose::DeliveryStream

Use the Arn attribute with the Fn::GetAtt function to get the Amazon Resource Name (ARN) of the delivery stream.

AWS::KMS::Key

Use the Tags property to specify an arbitrary set of tags (key–value pairs) to associate with a custom master key (CMS).

AWS::OpsWorks::Layer and AWS::OpsWorks::Stack

Use the Tags property to specify an arbitrary set of tags (key–value pairs) to associate with an AWS OpsWorks layer or stack.

AWS::RDS::OptionGroup

In the OptionConfiguration property type, use the OptionVersion property to specify a version for the option.

AWS::S3::Bucket

Use the AnalyticsConfigurations property to configure an analysis filter for an Amazon S3 bucket.

AWS::Glue::Classifier

Use the AWS::Glue::Classifier resource to create an AWS Glue classifier.

AWS::Glue::Connection

Use the AWS::Glue::Connection resource to specify an AWS Glue connection to a data source.

AWS::Glue::Crawler

Use the AWS::Glue::Crawler resource to specify an AWS Glue crawler.

AWS::Glue::Database

Use the AWS::Glue::Database resource to create an AWS Glue database.

AWS::Glue::DevEndpoint

Use the AWS::Glue::DevEndpoint resource to specify a development endpoint for remotely debugging ETL scripts.

AWS::Glue::Job

Use the AWS::Glue::Job resource to specify an AWS Glue job in the data catalog.

AWS::Glue::Partition

Use the AWS::Glue::Partition resource to create an AWS Glue partition, which represents a slice of table data.

AWS::Glue::Table

Use the AWS::Glue::Table resource to create an AWS Glue table.

AWS::Glue::Trigger

Use the AWS::Glue::Trigger resource to specify triggers that run AWS Glue jobs.

AWS::SSM::MaintenanceWindow

Use the AWS::SSM::MaintenanceWindow resource to create an AWS Systems Manager Maintenance Window.

AWS::SSM::MaintenanceWindowTarget

Use the AWS::SSM::MaintenanceWindowTarget resource to register a target with a Maintenance Window.

AWS::SSM::MaintenanceWindowTask

Use the AWS::SSM::MaintenanceWindowTask resource to define a Maintenance Window task.

AWS::SSM::PatchBaseline

Use the AWS::SSM::PatchBaseline resource to define a Systems Manager patch baseline.

AWS::ElasticLoadBalancingV2::ListenerCertificate

Use the AWS::ElasticLoadBalancingV2::ListenerCertificate resource to specify certificates for an Elastic Load Balancing listener.

AWS::Athena::NamedQuery

Use the AWS::Athena::NamedQuery resource to create an Amazon Athena query.

AWS::EC2::NatGateway

Use the Tags property to specify resource tags for a NAT gateway.

AWS::ElasticBeanstalk::Application

Use the ResourceLifecycleConfig property to define lifecycle settings for resources that belong to the application, and the service role that Elastic Beanstalk assumes in order to apply lifecycle settings.

AWS::ElasticBeanstalk::ConfigurationTemplate and AWS::ElasticBeanstalk::Environment

Use the PlatformArn property to specify a custom platform for Elastic Beanstalk.

AWS::ElasticLoadBalancingV2::TargetGroup

In the TargetDescription property type, use the AvailabilityZone property to specify the Availability Zone where the IP address is to be registered.

AWS::Events::Rule

In the Target property type, use the following properties for input transformation of events and setting Amazon ECS task and Kinesis stream targets.

• EcsParameters

• InputTransformer

• KinesisParameters

• RunCommandParameters

AWS::KinesisFirehose::DeliveryStream

Use the DeliveryStreamType property to specify the stream type and the KinesisStreamSourceConfiguration property to specify the stream and role ARNs for a Kinesis stream used as the source for a delivery stream.

AWS::RDS::DBInstance

For the Engine property, if you have specified oracle-se or oracle-se1, you can update to oracle-se2 without the database instance being replaced.

AWS::S3::Bucket

Use the AccelerateConfiguration property to configure the transfer acceleration state for an Amazon S3 bucket.

AWS::ElasticLoadBalancingV2::LoadBalancer

Use the SubnetMappings property to specify the IDs of the subnets to attach to the load balancer.

Use the Type property to specify the type of load balancer to create.

AWS::ElasticLoadBalancingV2::TargetGroup

Use the TargetType property to specify the registration type of the targets in this target group.

AWS::EC2::VPCCidrBlock

Use the CidrBlock property to associate an IPv4 CIDR block with a VPC.

AWS::EC2::VPC

Use the CidrBlockAssociations attribute with the Fn::GetAtt function to get a list of IPv4 CIDR block association IDs associated with the VPC.

AWS::S3::Bucket

In the Rule property type, use the TagFilters property to specify tags to use in identifying a subset of objects for an Amazon S3 bucket.

Use the MetricsConfiguration property to specify a metrics configuration for the CloudWatch request metrics from an Amazon S3 bucket.

AWS::IoT::TopicRule

In the Action property type, use the DynamoDBv2Action property to describe an AWS IoT action that writes data to a DynamoDB table.

In the Action property type, the DynamoDBAction property now supports the HashKeyType and RangeKeyType properties.

AWS::Lambda::Permission

Use the EventSourceToken property to specify a unique token that must be supplied by the principal invoking the function.

AWS::DAX::Cluster

Use the AWS::DAX::Cluster resource to create a DAX cluster for use with Amazon DynamoDB.

AWS::DAX::ParameterGroup

Use the AWS::DAX::ParameterGroup resource to create a parameter group for use with Amazon DynamoDB.

AWS::DAX::SubnetGroup

Use the AWS::DAX::SubnetGroup resource to create a subnet group for use with DAX (DynamoDB Accelerator).

AWS::ApiGateway::DocumentationPart and AWS::ApiGateway::DocumentationVersion

Use the AWS::ApiGateway::DocumentationPart and AWS::ApiGateway::DocumentationVersion resources to create documentation for your API Gateway API.

AWS::ApiGateway::GatewayResponse

Use the AWS::ApiGateway::GatewayResponse resource to create a custom response for your API Gateway API.

AWS::ApiGateway::RequestValidator

Use the AWS::ApiGateway::RequestValidator resource to set up validation rules for incoming requests to your API Gateway API.

AWS::EC2::NetworkInterfacePermission

Use the AWS::EC2::NetworkInterfacePermission resource to grant an AWS account permission to a network interface.

AWS::ApiGateway::Stage

Use the DocumentationVersion property to specify a versioned snapshot of the API documentation.

AWS::AutoScaling::ScalingPolicy

Use the TargetTrackingConfiguration property to specify an Auto Scaling target tracking scaling policy configuration.

AWS::CloudTrail::Trail

Use the EventSelectors property for Amazon S3 Data Events support.

AWS::CodeDeploy::DeploymentGroup

Use the LoadBalancerInfo and DeploymentStyle properties to specify an Elastic Load Balancing load balancer for an in-place deployment.

Use the AutoRollbackConfiguration property to configure automatic rollback for the deployment.

AWS::EC2::SpotFleet

In the SpotFleetRequestConfigData property type, use the ReplaceUnhealthyInstances property to indicate whether the Spot fleet should replace unhealthy instances and the Type property to specify the type of request.

AWS::EC2::Subnet

Use the AssignIpv6AddressOnCreation and Ipv6CidrBlock properties to create a subnet with an IPv6 CIDR block.

AWS::KinesisFirehose::DeliveryStream

Use the ExtendedS3DestinationConfiguration property to configure a destination in Amazon S3.

Use the ProcessingConfiguration subproperty within each destination configuration to invoke Lambda functions that transform incoming source data and deliver the transformed data to destinations.

AWS::RDS::DBCluster and AWS::RDS::DBInstance

The default DeletionPolicy is now Snapshot for AWS::RDS::DBCluster resources and for AWS::RDS::DBInstance resources that don't specify the DBClusterIdentifier property. For more information about how AWS CloudFormation deletes resources, see DeletionPolicy Attribute.

AWS::S3::Bucket

In the Rule property type, use the AbortIncompleteMultipartUpload property to specify a lifecycle rule that aborts incomplete multipart uploads to an Amazon S3 bucket.

AWS::SQS::Queue

Use the KmsMasterKeyId and KmsDataKeyReusePeriodSeconds properties to configure server-side encryption for Amazon SQS.

AWS::EFS::FileSystem

Use the Encrypted property to encrypt an Amazon EFS file system during creation.

Use the KmsKeyId property to optionally specify a custom customer master key to use to protect the encrypted file system.

AWS::Batch::ComputeEnvironment

Use the AWS::Batch::ComputeEnvironment resource to define your AWS Batch compute environment.

AWS::Batch::JobDefinition

Use the AWS::Batch::JobDefinition resource to specify the parameters for an AWS Batch job definition.

AWS::Batch::JobQueue

Use the AWS::Batch::JobQueue resource to define your AWS Batch job queue.

AWS::KinesisAnalytics::Application

Use the AWS::KinesisAnalytics::Application resource to create an Amazon Kinesis Data Analytics application.

AWS::KinesisAnalytics::ApplicationOutput

Use the AWS::KinesisAnalytics::ApplicationOutput resource to add an external destination to your Amazon Kinesis Data Analytics application.

AWS::KinesisAnalytics::ApplicationReferenceDataSource

Use the AWS::KinesisAnalytics::ApplicationReferenceDataSource resource to add a reference data source to an existing Amazon Kinesis Data Analytics application.

AWS::DMS::Certificate

Use the AWS::DMS::Certificate resource to create an SSL certificate that encrypts connections between AWS DMS endpoints and the replication instance.

AWS::DMS::Endpoint

Use the AWS::DMS::Endpoint resource to create an AWS DMS endpoint.

AWS::DMS::EventSubscription

Use the AWS::DMS::EventSubscription resource to get notifications for AWS DMS events through the Amazon Simple Notification Service.

AWS::DMS::ReplicationInstance

Use the AWS::DMS::ReplicationInstance resource to create an AWS DMS replication instance.

AWS::DMS::ReplicationSubnetGroup

Use the AWS::DMS::ReplicationSubnetGroup resource to create an AWS DMS replication subnet group.

AWS::DMS::ReplicationTask

Use the AWS::DMS::ReplicationTask resource to create an AWS DMS replication task.

AWS::CloudWatch::Dashboard

Use the AWS::CloudWatch::Dashboard resource to specify a custom CloudWatch dashboard for your CloudWatch console.

AWS::ApiGateway::DomainName

Use the AWS::ApiGateway::DomainName resource to specify a custom, friendly URL for your API that's deployed to Amazon API Gateway.

AWS::EC2::EgressOnlyInternetGateway

Use the AWS::EC2::EgressOnlyInternetGateway resource to create an egress-only internet gateway for your VPC.

AWS::EMR::InstanceFleetConfig

Use the InstanceFleetConfig resource to configure a Spot Instance fleet for an Amazon EMR cluster.

AWS::ApiGateway::RestApi

Use the BinaryMediaTypes property to specify supported binary media types.

AWS::ApplicationAutoScaling::ScalingPolicy

Use the TargetTrackingScalingPolicyConfiguration property to specify a a target tracking scaling policy configuration.

AWS::CloudTrail::Trail

Use the TrailName property to specify a custom name for an AWS CloudTrail resource.

Use the Tags property to specify resource tags.

AWS::CodeDeploy::DeploymentGroup

Use the AlarmConfiguration property to configure alarms for the deployment group.

Use the TriggerConfigurations property to configure notification triggers for the deployment group.

AWS::EMR::Cluster

Use the CoreInstanceFleet property and the MasterInstanceFleet property in the Amazon EMR Cluster JobFlowInstancesConfig property type to configure the Spot Instance fleet for an Amazon EMR cluster.

AWS::DynamoDB::Table

Use the TimeToLiveSpecification property to specify the Time to Live (TTL) settings for an Amazon DynamoDB table.

Use the Tags property to specify resource tags for a DynamoDB table.

AWS::EC2::Instance

The IamInstanceProfile property now supports No interruption updates.

AWS::EC2::Route

Use the EgressOnlyInternetGatewayId property to specify an egress-only Internet gateway for an EC2 route.

AWS::Kinesis::Stream

Use the RetentionPeriodHours property to specify the number of hours that data records stored in shards remain accessible.

AWS::RDS::DBCluster

Use the ReplicationSourceIdentifier property to create a DB cluster as a Read Replica of another DB cluster or an Amazon RDS MySQL DB instance.

AWS::Redshift::Cluster

Use the LoggingProperties property to create audit log files and store them in Amazon S3.

AWS::EMR::SecurityConfiguration

Use the AWS::EMR::SecurityConfiguration resource to create a security configuration, which is stored in the service and can be specified when a cluster is created.

AWS::AutoScaling::LifecycleHook

The NotificationTargetARN and RoleARN properties are now optional.

AWS::CloudWatch::Alarm

You can now use the EvaluateLowSampleCountPercentile, ExtendedStatistic, and TreatMissingData properties when creating AWS::CloudWatch::Alarm resources.

AWS::EC2::SpotFleet

AWS CloudFormation supports mutable changes to Spot fleet properties.

The following properties of the SpotFleetRequestConfigData property support Replacement updates:

• AllocationStrategy

• IamFleetRole

• LaunchSpecifications

• SpotPrice

• TerminateInstancesWithExpiration

• ValidFrom

• ValidUntil

The following properties of the SpotFleetRequestConfigData property support No interruption updates:

• ExcessCapacityTerminationPolicy

• TargetCapacity

AWS::EMR::InstanceGroupConfig

AWS CloudFormation now supports Auto Scaling for Amazon EMR task instance groups.

AWS::Events::Rule

The RoleArn property is deprecated on the Rule resource.

Use the RoleArn property on the Target property type to specify the IAM role to use for a target.

AWS::Kinesis::Stream

The ShardCount property now supports No interruption updates.

AWS::Lambda::Function

Use the TracingConfig property to configure tracing settings for Lambda functions.

AWS::Redshift::Cluster, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, and AWS::Redshift::ClusterSubnetGroup

Use the Tags property to specify resource tags.

AWS::RDS::DBCluster

Added the ReadEndpoint.Address attribute to the Fn::GetAtt intrinsic function.

AWS::S3::Bucket

Added the Arn attribute to the Fn::GetAtt intrinsic function.

The following new resources support using AWS WAF with Elastic Load Balancing (ELB) Application Load Balancers.

AWS::WAFRegional::ByteMatchSet

Use the AWS::WAFRegional::ByteMatchSet resource to identify a part of a web request that you want to inspect.

AWS::WAFRegional::IPSet

Use the AWS::WAFRegional::IPSet resource to specify which web requests to permit or block based on the IP addresses from which the requests originate.

AWS::WAFRegional::Rule

Use the AWS::WAFRegional::Rule resource to specify a combination of IPSet, ByteMatchSet, and SqlInjectionMatchSet objects that identify the web requests to allow, block, or count.

AWS::WAFRegional::SizeConstraintSet

Use the AWS::WAFRegional::SizeConstraintSet resource to specify a size constraint used to check the size of a web request and which parts of the request to check.

AWS::WAFRegional::SqlInjectionMatchSet

Use the AWS::WAFRegional::SqlInjectionMatchSet resource to allow, block, or count requests that contain malicious SQL code in a specific part of web requests.

AWS::WAFRegional::WebACL

Use the AWS::WAFRegional::WebACL resource to identify the web requests that you want to allow, block, or count.

AWS::WAFRegional::WebACLAssociation

Use the AWS::WAFRegional::WebACLAssociation resource to associate a web access control group (ACL) with a resource.

AWS::WAFRegional::XssMatchSet

Use the AWS::WAFRegional::XssMatchSet resource to specify the parts of web requests that you want AWS WAF to inspect for cross-site scripting attacks and the name of the header to inspect.

AWS::Cognito::IdentityPool

Use the AWS::Cognito::IdentityPool resource to create an Amazon Cognito identity pool.

AWS::Cognito::IdentityPoolRoleAttachment

Use the AWS::Cognito::IdentityPoolRoleAttachment resource to manage the role configuration for an Amazon Cognito identity pool.

AWS::Cognito::UserPool

Use the AWS::Cognito::UserPool resource to create an Amazon Cognito user pool.

AWS::Cognito::UserPoolClient

Use the AWS::Cognito::UserPoolClient resource to create a user pool client.

AWS::Cognito::UserPoolGroup

Use the AWS::Cognito::UserPoolGroup resource to create a user group in an Amazon Cognito user pool.

AWS::Cognito::UserPoolUser

Use the AWS::Cognito::UserPoolUser resource to create an Amazon Cognito user pool user.

AWS::Cognito::UserPoolUserToGroupAttachment

Use the AWS::Cognito::UserPoolUserToGroupAttachment resource to attach a user to an Amazon Cognito user pool group.

AWS Config ConfigRule SourceDetails

Use the MaximumExecutionFrequency subproperty of the AWS::Config::ConfigRule resource to run evaluations for a custom rule using a periodic trigger.

AWS::EC2::Volume

We now support Elastic Volumes for Amazon Elastic Block Store (Amazon EBS) in CloudFormation. We now support No interruption updates on three properties: VolumeType, Size, and Iops.

AWS::EC2::SecurityGroup

Use the GroupName property to specify a name for your Amazon EC2 security group.

AWS::ECS::Service

There are three new properties for AWS::ECS::Service: PlacementConstraints, PlacementStrategies, and ServiceName.

AWS::ECS::TaskDefinition

Use the PlacementConstraints property to define placement constraints for tasks in the service.

AWS::ElastiCache::ReplicationGroup

Added the ConfigurationEndPoint.Address attribute and the ConfigurationEndPoint.Port attribute to the Fn::GetAtt intrinsic function.

AWS::ElasticLoadBalancingV2::LoadBalancer

Use the IpAddressType property to specify the type of IP addresses that are used by the load balancer's subnets.

AWS::EMR::Cluster

AWS CloudFormation now supports Auto Scaling for Amazon EMR clusters.

AWS::IAM::ManagedPolicy

Use the ManagedPolicyName property to specify a custom name for your IAM managed policy.

AWS::Lambda::Function

Use the Tags property to add tags to your Lambda function.

AWS::OpsWorks::Instance

Added the following attributes to the Fn::GetAtt intrinsic function: AvailabilityZone, PrivateDnsName, PrivateIp, and PublicDnsName.

AWS::OpsWorks::UserProfile

Use the SshUsername property to specify a user's SSH name.

Added the SshUsername attribute to the Fn::GetAtt intrinsic function.

AWS::Redshift::Cluster

Use the IamRoles property to provide a list of one or more AWS Identity and Access Management roles that the Amazon Redshift cluster can use to access other AWS services.

AWS::SSM::Parameter

Use the AWS::SSM::Parameter resource to create an SSM parameter in Parameter Store.

AWS::ApiGateway::UsagePlanKey

Use the AWS::ApiGateway::UsagePlanKey resource to associate a usage plan key and determine which users the usage plan is applied to.

AWS::EC2::VPCPeeringConnection

Use the PeerOwnerId property and the PeerRoleArn property to peer with a VPC in another AWS account.

For more information, see Walkthrough: Peer with an Amazon VPC in Another AWS Account.

AWS::IAM::InstanceProfile

Use the InstanceProfileName property to configure an instance profile.

AWS::Lambda::Function

Use the DeadLetterConfig property to configure how AWS Lambda handles events that it can't process.

Node.js v0.10 is no longer supported for the Runtime property.

AWS::Route53::HealthCheck

There are seven new resource subproperty types for the Route 53 HealthCheck HealthCheckConfig HealthCheckConfig property: AlarmIdentifier, ChildHealthChecks, EnableSNI, HealthThreshold, InsufficientDataHealthStatus, Inverted, and MeasureLatency.

AWS::SQS::Queue

Use the ContentBasedDeduplication and FifoQueue properties to create First-In-First-Out (FIFO) Amazon Simple Queue Service queues.

AWS::S3::Bucket

You can now specify IPv6 domain names for your Amazon S3 buckets.

AWS::StepFunctions::Activity

Use the AWS::StepFunctions::Activity resource to create an AWS Step Functions activity.

AWS::StepFunctions::StateMachine

Use the AWS::StepFunctions::StateMachine resource to create a Step Functions state machine.

AWS::AutoScaling::AutoScalingGroup

The LoadBalancerNames property can be updated without replacing the Auto Scaling group.

AWS::ECS::TaskDefinition

Added the NetworkMode and MemoryReservation properties.

AWS::RDS::DBCluster

AWS CloudFormation supports updates to the Tags property.

AWS::RDS::DBInstance

Added the Timezone property.

AWS IoT TopicRule FirehoseAction

Added the Separator property.

AWS::OpsWorks::Instance

Added the PublicIp attribute for the Fn::GetAtt intrinsic function.

AWS::CodeBuild::Project

Use the AWS::CodeBuild::Project resource to create an AWS CodeBuild project that defines how AWS CodeBuild builds your source code.

AWS::SSM::Association

Use the AWS::SSM::Association resource to associate an Amazon EC2 Systems Manager document with EC2 instances.

AWS::EC2::SubnetCidrBlock

Use the AWS::EC2::SubnetCidrBlock resource to associate a single IPv6 CIDR block with an Amazon VPC subnet.

AWS::EC2::VPCCidrBlock

Use the AWS::EC2::VPCCidrBlock resource to associate a single Amazon-provided IPv6 CIDR block with an Amazon VPC VPC.

AWS::EC2::Instance

Added the Ipv6AddressCount and Ipv6Addresses properties.

AWS::EC2::NetworkAclEntry

Added the Ipv6CidrBlock property.

AWS::EC2::NetworkInterface

Added the Ipv6AddressCount and Ipv6Addresses properties.

AWS::EC2::Route

Added the DestinationIpv6CidrBlock property.

AWS::EC2::SecurityGroupEgress

Added the CidrIpv6 property.

AWS::EC2::SecurityGroupIngress

Added the CidrIpv6 property.

AWS::EC2::SpotFleet

Added the Ipv6AddressCount and Ipv6Addresses properties for the launch specification network interfaces.

AWS::EC2::Subnet

Added the Ipv6CidrBlocks attribute for the Fn::GetAtt function.

AWS::EC2::VPC

Added the Ipv6CidrBlocks attribute for the Fn::GetAtt function.

AWS::SSM::Document

Added the DocumentType property.

AWS::OpsWorks::UserProfile

Use the AWS::OpsWorks::UserProfile resource to configure SSH access for users who require access to instances in an AWS OpsWorks stack.

AWS::OpsWorks::Volume

Use the AWS::OpsWorks::Volume resource to register an Amazon Elastic Block Store volume with an AWS OpsWorks stack.

AWS::OpsWorks::App

Added the DataSources property.

AWS::OpsWorks::Instance

Added the BlockDeviceMappings, AgentVersion, ElasticIps, Hostname, Tenancy, and Volumes properties.

AWS::OpsWorks::Layer

Added the CustomJson and VolumeConfigurations properties.

AWS::OpsWorks::Stack

Added the ElasticIps, EcsClusterArn, RdsDbInstances, CloneAppIds, ClonePermissions, and SourceStackId properties.

AWS::RDS::DBInstance

Added the CopyTagsToSnapshot property.

AWS::SNS::Subscription

Use the AWS::SNS::Subscription resource to subscribe an endpoint to an Amazon Simple Notification Service topic.

AWS::Lambda::Function

Use the Environment property to specify key-value pairs (environment variables) that your AWS Lambda function can access.

Use the KmsKeyArn property to specify an AWS Key Management Service key that AWS Lambda uses to encrypt and decrypt environment variables.

Uploading Local Artifacts to an S3 Bucket

Use the aws cloudformation package command to upload local artifacts that are referenced in an AWS CloudFormation template to an S3 bucket.

Quickly Deploying Templates with Transforms

Use the aws cloudformation deploy command to combine the create and execute change set actions into a single command. This command is useful for quickly creating or updating stacks that contain transforms.

AWS::CloudFront::Distribution

For the CloudFront Distribution DistributionConfig property, use the HttpVersion property to specify the latest HTTP version that viewers can use to communicate with Amazon CloudFront.

For the CloudFront Distribution ForwardedValues property, use the QueryStringCacheKeys property to specify the query string parameters that CloudFront uses to determine which content to cache.

AWS::ElastiCache::CacheCluster

Update the CacheNodeType property without replacing the cluster.

AWS::ElastiCache::ReplicationGroup

You can create a Redis (cluster mode enabled) replication group that can contain multiple node groups (shards), each with a primary cluster and read replicas.

AWS::ElastiCache::SubnetGroup

Use the CacheSubnetGroupName property to specify a name for an Amazon ElastiCache subnet group.

AWS::ApiGateway::UsagePlan

Use the AWS::ApiGateway::UsagePlan resource to specify a usage plan for deployed Amazon API Gateway APIs.

AWS::CodeCommit::Repository

Use the AWS::CodeCommit::Repository resource to create an AWS CodeCommit repository that is hosted by Amazon Web Services.

AWS::ApiGateway::Authorizer

Use the ProviderARNs property to use Amazon Cognito user pools as Amazon API Gateway API authorizers.

AWS::ApiGateway::Deployment

The StageName property is no longer required.

AWS::ElasticLoadBalancingV2::TargetGroup

For the GetAtt function, use the LoadBalancerArns attribute to retrieve the Amazon Resource Names (ARNs) of the load balancers that route traffic to the target group.

AWS::RDS::DBInstance

Use the Domain and DomainIAMRoleName properties to use Windows Authentication when users connect to the RDS DB instance.

AWS::EC2::SecurityGroupEgress

Use the DestinationPrefixListId property to specify the AWS service prefix of an Amazon VPC endpoint.

AWS::KMS::Alias

Use the AWS::KMS::Alias resource to create an alias for an AWS Key Management Service customer master key.

AWS::EC2::SpotFleet

For the LaunchSpecifications property, use the SpotPrice property to specify a bid price for a specific instance type.

AWS::ECS::Cluster

Use the ClusterName property to specify a name for an Amazon Elastic Container Service cluster.

AWS::ECS::TaskDefinition

Use the TaskRoleArn property to specify an AWS Identity and Access Management role that Amazon Elastic Container Service containers use to make AWS calls on your behalf.

Use the Family property to register a task definition to a specific family.

AWS::Elasticsearch::Domain

Use the ElasticsearchVersion property to specify which version of Elasticsearch to use.

AWS::AutoScaling::AutoScalingGroup

Use the TargetGroupARNs property to associate the Auto Scaling group with one or more Application Load Balancer target groups.

AWS::ECS::Service

For the load LoadBalancers property, use the TargetGroupArn property to associate an Amazon Elastic Container Service service with an Application Load Balancer target group.

AWS::ApplicationAutoScaling::ScalableTarget and AWS::ApplicationAutoScaling::ScalingPolicy

Use an Application Auto Scaling scaling policy to define when and how a target resource scales.

AWS::CertificateManager::Certificate

Provision an AWS Certificate Manager certificate that you can use with other AWS services to enable secure connections.

AWS::CloudFront::Distribution

For the distribution configuration ViewerCertificate property, you can specify an AWS Certificate Manager certificate. For the distribution configuration Origin property, you can specify custom headers and the SSL protocols for custom origins.

AWS::EFS::FileSystem

You can specify the performance mode for an Amazon Elastic File System file system.

AWS IoT

Use AWS IoT to declare an AWS IoT policy, an X.509 certificate, an association between a policy and a principal (an X.509 certificate or other credential), an AWS IoT thing, an association between a principal and a thing, or an AWS IoT rule.

• AWS::IoT::Certificate

• AWS::IoT::Policy

• AWS::IoT::PolicyPrincipalAttachment

• AWS::IoT::Thing

• AWS::IoT::ThingPrincipalAttachment

• AWS::IoT::TopicRule

AWS::IAM::Group, AWS::IAM::Role, AWS::IAM::User

Use the name properties to specify a custom name for AWS Identity and Access Management (IAM) resources.

AWS::ApiGateway::Method

For the Integration property, you can use the PassthroughBehavior property to specify when Amazon API Gateway passes requests to the targeted back end.

AWS::ApiGateway::Model and AWS::ApiGateway::RestApi

You can specify JSON objects for the Schema and Body properties.