feat(sources): update cfn-schema

[aws-cdk-automation]

⚠️ This Pull Request updates daily and will overwrite all manual changes pushed to the branch

Updates the cfn-schema source from upstream. See details in workflow run.

---

Automatically created by projen via the "update-source-cfn-schema" workflow

[github-actions]

To work on this Pull Request, please create a new branch and PR. This prevents your work from being deleted by the automation.

Run the following commands inside the repo:

gh co 1146
git switch -c fix-pr-1146 && git push -u origin HEAD
gh pr create -t "fix: PR #1146" --body "Fixes https:/cdklabs/awscdk-service-spec/pull/1146"

[github-actions]

To work on this Pull Request, please create a new branch and PR. This prevents your work from being deleted by the automation.

Run the following commands inside the repo:

gh co 1146
git switch -c fix-pr-1146 && git push -u origin HEAD
gh pr create -t "fix: PR #1146" --body "Fixes https:/cdklabs/awscdk-service-spec/pull/1146"

[github-actions]

To work on this Pull Request, please create a new branch and PR. This prevents your work from being deleted by the automation.

Run the following commands inside the repo:

gh co 1146
git switch -c fix-pr-1146 && git push -u origin HEAD
gh pr create -t "fix: PR #1146" --body "Fixes https:/cdklabs/awscdk-service-spec/pull/1146"

[github-actions]

To work on this Pull Request, please create a new branch and PR. This prevents your work from being deleted by the automation.

Run the following commands inside the repo:

gh co 1146
git switch -c fix-pr-1146 && git push -u origin HEAD
gh pr create -t "fix: PR #1146" --body "Fixes https:/cdklabs/awscdk-service-spec/pull/1146"

[github-actions]

To work on this Pull Request, please create a new branch and PR. This prevents your work from being deleted by the automation.

Run the following commands inside the repo:

gh co 1146
git switch -c fix-pr-1146 && git push -u origin HEAD
gh pr create -t "fix: PR #1146" --body "Fixes https:/cdklabs/awscdk-service-spec/pull/1146"

[github-actions]

To work on this Pull Request, please create a new branch and PR. This prevents your work from being deleted by the automation.

Run the following commands inside the repo:

gh co 1146
git switch -c fix-pr-1146 && git push -u origin HEAD
gh pr create -t "fix: PR #1146" --body "Fixes https:/cdklabs/awscdk-service-spec/pull/1146"

[github-actions]

To work on this Pull Request, please create a new branch and PR. This prevents your work from being deleted by the automation.

Run the following commands inside the repo:

gh co 1146
git switch -c fix-pr-1146 && git push -u origin HEAD
gh pr create -t "fix: PR #1146" --body "Fixes https:/cdklabs/awscdk-service-spec/pull/1146"

[github-actions]

To work on this Pull Request, please create a new branch and PR. This prevents your work from being deleted by the automation.

Run the following commands inside the repo:

gh co 1146
git switch -c fix-pr-1146 && git push -u origin HEAD
gh pr create -t "fix: PR #1146" --body "Fixes https:/cdklabs/awscdk-service-spec/pull/1146"

[github-actions]

To work on this Pull Request, please create a new branch and PR. This prevents your work from being deleted by the automation.

Run the following commands inside the repo:

gh co 1146
git switch -c fix-pr-1146 && git push -u origin HEAD
gh pr create -t "fix: PR #1146" --body "Fixes https:/cdklabs/awscdk-service-spec/pull/1146"

[github-actions]

To work on this Pull Request, please create a new branch and PR. This prevents your work from being deleted by the automation.

Run the following commands inside the repo:

gh co 1146
git switch -c fix-pr-1146 && git push -u origin HEAD
gh pr create -t "fix: PR #1146" --body "Fixes https:/cdklabs/awscdk-service-spec/pull/1146"

[github-actions]

To work on this Pull Request, please create a new branch and PR. This prevents your work from being deleted by the automation.

Run the following commands inside the repo:

gh co 1146
git switch -c fix-pr-1146 && git push -u origin HEAD
gh pr create -t "fix: PR #1146" --body "Fixes https:/cdklabs/awscdk-service-spec/pull/1146"

[github-actions]

To work on this Pull Request, please create a new branch and PR. This prevents your work from being deleted by the automation.

Run the following commands inside the repo:

gh co 1146
git switch -c fix-pr-1146 && git push -u origin HEAD
gh pr create -t "fix: PR #1146" --body "Fixes https:/cdklabs/awscdk-service-spec/pull/1146"

[github-actions]

To work on this Pull Request, please create a new branch and PR. This prevents your work from being deleted by the automation.

Run the following commands inside the repo:

gh co 1146
git switch -c fix-pr-1146 && git push -u origin HEAD
gh pr create -t "fix: PR #1146" --body "Fixes https:/cdklabs/awscdk-service-spec/pull/1146"

[github-actions]

To work on this Pull Request, please create a new branch and PR. This prevents your work from being deleted by the automation.

Run the following commands inside the repo:

gh co 1146
git switch -c fix-pr-1146 && git push -u origin HEAD
gh pr create -t "fix: PR #1146" --body "Fixes https:/cdklabs/awscdk-service-spec/pull/1146"

[github-actions]

To work on this Pull Request, please create a new branch and PR. This prevents your work from being deleted by the automation.

Run the following commands inside the repo:

gh co 1146
git switch -c fix-pr-1146 && git push -u origin HEAD
gh pr create -t "fix: PR #1146" --body "Fixes https:/cdklabs/awscdk-service-spec/pull/1146"

[github-actions]

To work on this Pull Request, please create a new branch and PR. This prevents your work from being deleted by the automation.

Run the following commands inside the repo:

gh co 1146
git switch -c fix-pr-1146 && git push -u origin HEAD
gh pr create -t "fix: PR #1146" --body "Fixes https:/cdklabs/awscdk-service-spec/pull/1146"

[github-actions]

To work on this Pull Request, please create a new branch and PR. This prevents your work from being deleted by the automation.

Run the following commands inside the repo:

gh co 1146
git switch -c fix-pr-1146 && git push -u origin HEAD
gh pr create -t "fix: PR #1146" --body "Fixes https:/cdklabs/awscdk-service-spec/pull/1146"

[github-actions]

@aws-cdk/aws-service-spec: Model database diff detected

├[~] service aws-amazonmq
│ └ resources
│    ├[~] resource AWS::AmazonMQ::Broker
│    │ └ properties
│    │    ├ AutoMinorVersionUpgrade: - boolean (required)
│    │    │                          + boolean
│    │    └ EngineVersion: - string (required)
│    │                     + string
│    └[~] resource AWS::AmazonMQ::Configuration
│      └ properties
│         └ EngineVersion: - string (required, immutable)
│                          + string (immutable)
├[~] service aws-arczonalshift
│ └ resources
│    └[+] resource AWS::ARCZonalShift::AutoshiftObserverNotificationStatus
│      ├  name: AutoshiftObserverNotificationStatus
│      │  cloudFormationType: AWS::ARCZonalShift::AutoshiftObserverNotificationStatus
│      │  documentation: Definition of AWS::ARCZonalShift::AutoshiftObserverNotificationStatus Resource Type
│      ├ properties
│      │  └Status: string (required, immutable)
│      └ attributes
│         ├AccountId: string
│         └Region: string
├[~] service aws-batch
│ └ resources
│    └[~] resource AWS::Batch::JobDefinition
│      └ types
│         └[~] type NodeRangeProperty
│           └ properties
│              └[+] EksProperties: EksProperties
├[~] service aws-bedrock
│ └ resources
│    ├[+] resource AWS::Bedrock::Flow
│    │ ├  name: Flow
│    │ │  cloudFormationType: AWS::Bedrock::Flow
│    │ │  documentation: Creates a prompt flow that you can use to send an input through various steps to yield an output. You define a flow by configuring nodes, each of which corresponds to a step of the flow, and creating connections between the nodes to create paths to different outputs. You can define the flow in one of the following ways:
│    │ │  - Define a [FlowDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-flow-flowdefinition.html) in the `Definition` property.
│    │ │  - Provide the definition in the `DefinitionString` property as a JSON-formatted string matching the [FlowDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-flow-flowdefinition.html) property.
│    │ │  - Provide an Amazon S3 location in the `DefinitionS3Location` property that matches the [FlowDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-flow-flowdefinition.html) .
│    │ │  If you use the `DefinitionString` or `DefinitionS3Location` property, you can use the `DefinitionSubstitutions` property to define key-value pairs to replace at runtime.
│    │ │  For more information, see [How it works](https://docs.aws.amazon.com/bedrock/latest/userguide/flows-how-it-works.html) and [Create a prompt flow in Amazon Bedrock](https://docs.aws.amazon.com/bedrock/latest/userguide/flows-create.html) in the Amazon Bedrock User Guide.
│    │ │  tagInformation: {"tagPropertyName":"Tags","variant":"map"}
│    │ ├ properties
│    │ │  ├Definition: FlowDefinition
│    │ │  ├DefinitionString: string
│    │ │  ├DefinitionS3Location: S3Location
│    │ │  ├DefinitionSubstitutions: Map<string, string | integer | boolean>
│    │ │  ├Description: string
│    │ │  ├ExecutionRoleArn: string (required)
│    │ │  ├Name: string (required)
│    │ │  ├CustomerEncryptionKeyArn: string
│    │ │  ├Tags: Map<string, string>
│    │ │  └TestAliasTags: Map<string, string>
│    │ ├ attributes
│    │ │  ├Arn: string
│    │ │  ├CreatedAt: string
│    │ │  ├Id: string
│    │ │  ├Status: string
│    │ │  ├UpdatedAt: string
│    │ │  └Version: string
│    │ └ types
│    │    ├type FlowDefinition
│    │    │├  documentation: The definition of the nodes and connections between nodes in the flow.
│    │    ││  name: FlowDefinition
│    │    │└ properties
│    │    │   ├Nodes: Array<FlowNode>
│    │    │   └Connections: Array<FlowConnection>
│    │    ├type FlowNode
│    │    │├  documentation: Contains configurations about a node in the flow.
│    │    ││  name: FlowNode
│    │    │└ properties
│    │    │   ├Name: string (required)
│    │    │   ├Type: string (required)
│    │    │   ├Configuration: FlowNodeConfiguration
│    │    │   ├Inputs: Array<FlowNodeInput>
│    │    │   └Outputs: Array<FlowNodeOutput>
│    │    ├type FlowNodeConfiguration
│    │    │├  documentation: Contains configurations for a node in your flow. For more information, see [Node types in Amazon Bedrock works](https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html) in the Amazon Bedrock User Guide.
│    │    ││  name: FlowNodeConfiguration
│    │    │└ properties
│    │    │   ├Input: json
│    │    │   ├Output: json
│    │    │   ├KnowledgeBase: KnowledgeBaseFlowNodeConfiguration
│    │    │   ├Condition: ConditionFlowNodeConfiguration
│    │    │   ├Lex: LexFlowNodeConfiguration
│    │    │   ├Prompt: PromptFlowNodeConfiguration
│    │    │   └LambdaFunction: LambdaFunctionFlowNodeConfiguration
│    │    ├type KnowledgeBaseFlowNodeConfiguration
│    │    │├  documentation: Contains configurations for a knowledge base node in a flow. This node takes a query as the input and returns, as the output, the retrieved responses directly (as an array) or a response generated based on the retrieved responses. For more information, see [Node types in Amazon Bedrock works](https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html) in the Amazon Bedrock User Guide.
│    │    ││  name: KnowledgeBaseFlowNodeConfiguration
│    │    │└ properties
│    │    │   ├KnowledgeBaseId: string (required)
│    │    │   └ModelId: string
│    │    ├type ConditionFlowNodeConfiguration
│    │    │├  documentation: Defines a condition node in your flow. You can specify conditions that determine which node comes next in the flow. For more information, see [Node types in Amazon Bedrock works](https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html) in the Amazon Bedrock User Guide.
│    │    ││  name: ConditionFlowNodeConfiguration
│    │    │└ properties
│    │    │   └Conditions: Array<FlowCondition> (required)
│    │    ├type FlowCondition
│    │    │├  documentation: Defines a condition in the condition node.
│    │    ││  name: FlowCondition
│    │    │└ properties
│    │    │   ├Name: string (required)
│    │    │   └Expression: string
│    │    ├type LexFlowNodeConfiguration
│    │    │├  documentation: Contains configurations for a Lex node in the flow. You specify a Amazon Lex bot to invoke. This node takes an utterance as the input and returns as the output the intent identified by the Amazon Lex bot. For more information, see [Node types in Amazon Bedrock works](https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html) in the Amazon Bedrock User Guide.
│    │    ││  name: LexFlowNodeConfiguration
│    │    │└ properties
│    │    │   ├BotAliasArn: string (required)
│    │    │   └LocaleId: string (required)
│    │    ├type PromptFlowNodeConfiguration
│    │    │├  documentation: Contains configurations for a prompt node in the flow. You can use a prompt from Prompt management or you can define one in this node. If the prompt contains variables, the inputs into this node will fill in the variables. The output from this node is the response generated by the model. For more information, see [Node types in Amazon Bedrock works](https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html) in the Amazon Bedrock User Guide.
│    │    ││  name: PromptFlowNodeConfiguration
│    │    │└ properties
│    │    │   └SourceConfiguration: PromptFlowNodeSourceConfiguration (required)
│    │    ├type PromptFlowNodeSourceConfiguration
│    │    │├  documentation: Contains configurations for a prompt and whether it is from Prompt management or defined inline.
│    │    ││  name: PromptFlowNodeSourceConfiguration
│    │    │└ properties
│    │    │   ├Resource: PromptFlowNodeResourceConfiguration
│    │    │   └Inline: PromptFlowNodeInlineConfiguration
│    │    ├type PromptFlowNodeResourceConfiguration
│    │    │├  documentation: Contains configurations for a prompt from Prompt management to use in a node.
│    │    ││  name: PromptFlowNodeResourceConfiguration
│    │    │└ properties
│    │    │   └PromptArn: string (required)
│    │    ├type PromptFlowNodeInlineConfiguration
│    │    │├  documentation: Contains configurations for a prompt defined inline in the node.
│    │    ││  name: PromptFlowNodeInlineConfiguration
│    │    │└ properties
│    │    │   ├TemplateType: string (required)
│    │    │   ├TemplateConfiguration: PromptTemplateConfiguration (required)
│    │    │   ├ModelId: string (required)
│    │    │   └InferenceConfiguration: PromptInferenceConfiguration
│    │    ├type PromptTemplateConfiguration
│    │    │├  documentation: Contains the message for a prompt. For more information, see [Prompt management in Amazon Bedrock](https://docs.aws.amazon.com/bedrock/latest/userguide/prompt-management.html) .
│    │    ││  name: PromptTemplateConfiguration
│    │    │└ properties
│    │    │   └Text: TextPromptTemplateConfiguration (required)
│    │    ├type TextPromptTemplateConfiguration
│    │    │├  documentation: Contains configurations for a text prompt template. To include a variable, enclose a word in double curly braces as in `{{variable}}` .
│    │    ││  name: TextPromptTemplateConfiguration
│    │    │└ properties
│    │    │   ├Text: string (required)
│    │    │   └InputVariables: Array<PromptInputVariable>
│    │    ├type PromptInputVariable
│    │    │├  documentation: Contains information about a variable in the prompt.
│    │    ││  name: PromptInputVariable
│    │    │└ properties
│    │    │   └Name: string
│    │    ├type PromptInferenceConfiguration
│    │    │├  documentation: Contains inference configurations for the prompt.
│    │    ││  name: PromptInferenceConfiguration
│    │    │└ properties
│    │    │   └Text: PromptModelInferenceConfiguration (required)
│    │    ├type PromptModelInferenceConfiguration
│    │    │├  documentation: Contains inference configurations related to model inference for a prompt. For more information, see [Inference parameters](https://docs.aws.amazon.com/bedrock/latest/userguide/inference-parameters.html) .
│    │    ││  name: PromptModelInferenceConfiguration
│    │    │└ properties
│    │    │   ├Temperature: number
│    │    │   ├TopP: number
│    │    │   ├TopK: number
│    │    │   ├MaxTokens: number
│    │    │   └StopSequences: Array<string>
│    │    ├type LambdaFunctionFlowNodeConfiguration
│    │    │├  documentation: Contains configurations for a Lambda function node in the flow. You specify the Lambda function to invoke and the inputs into the function. The output is the response that is defined in the Lambda function. For more information, see [Node types in Amazon Bedrock works](https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html) in the Amazon Bedrock User Guide.
│    │    ││  name: LambdaFunctionFlowNodeConfiguration
│    │    │└ properties
│    │    │   └LambdaArn: string (required)
│    │    ├type FlowNodeInput
│    │    │├  documentation: Contains configurations for an input to a node.
│    │    ││  name: FlowNodeInput
│    │    │└ properties
│    │    │   ├Name: string (required)
│    │    │   ├Type: string (required)
│    │    │   └Expression: string (required)
│    │    ├type FlowNodeOutput
│    │    │├  documentation: Contains configurations for an output from a node.
│    │    ││  name: FlowNodeOutput
│    │    │└ properties
│    │    │   ├Name: string (required)
│    │    │   └Type: string (required)
│    │    ├type FlowConnection
│    │    │├  documentation: Contains information about a connection between two nodes in the flow.
│    │    ││  name: FlowConnection
│    │    │└ properties
│    │    │   ├Type: string (required)
│    │    │   ├Name: string (required)
│    │    │   ├Source: string (required)
│    │    │   ├Target: string (required)
│    │    │   └Configuration: FlowConnectionConfiguration
│    │    ├type FlowConnectionConfiguration
│    │    │├  documentation: The configuration of the connection.
│    │    ││  name: FlowConnectionConfiguration
│    │    │└ properties
│    │    │   ├Data: FlowDataConnectionConfiguration
│    │    │   └Conditional: FlowConditionalConnectionConfiguration
│    │    ├type FlowDataConnectionConfiguration
│    │    │├  documentation: The configuration of a connection originating from a node that isn't a Condition node.
│    │    ││  name: FlowDataConnectionConfiguration
│    │    │└ properties
│    │    │   ├SourceOutput: string (required)
│    │    │   └TargetInput: string (required)
│    │    ├type FlowConditionalConnectionConfiguration
│    │    │├  documentation: The configuration of a connection between a condition node and another node.
│    │    ││  name: FlowConditionalConnectionConfiguration
│    │    │└ properties
│    │    │   └Condition: string (required)
│    │    └type S3Location
│    │     ├  documentation: The S3 location of the flow definition.
│    │     │  name: S3Location
│    │     └ properties
│    │        ├Bucket: string (required)
│    │        ├Key: string (required)
│    │        └Version: string
│    ├[+] resource AWS::Bedrock::FlowAlias
│    │ ├  name: FlowAlias
│    │ │  cloudFormationType: AWS::Bedrock::FlowAlias
│    │ │  documentation: Creates an alias of a flow for deployment. For more information, see [Deploy a flow in Amazon Bedrock](https://docs.aws.amazon.com/bedrock/latest/userguide/flows-deploy.html) in the Amazon Bedrock User Guide.
│    │ │  tagInformation: {"tagPropertyName":"Tags","variant":"map"}
│    │ ├ properties
│    │ │  ├FlowArn: string (required, immutable)
│    │ │  ├Description: string
│    │ │  ├Name: string (required)
│    │ │  ├RoutingConfiguration: Array<FlowAliasRoutingConfigurationListItem> (required)
│    │ │  └Tags: Map<string, string>
│    │ ├ attributes
│    │ │  ├Arn: string
│    │ │  ├CreatedAt: string
│    │ │  ├FlowId: string
│    │ │  ├Id: string
│    │ │  └UpdatedAt: string
│    │ └ types
│    │    └type FlowAliasRoutingConfigurationListItem
│    │     ├  documentation: Contains information about a version that the alias maps to.
│    │     │  name: FlowAliasRoutingConfigurationListItem
│    │     └ properties
│    │        └FlowVersion: string
│    ├[+] resource AWS::Bedrock::FlowVersion
│    │ ├  name: FlowVersion
│    │ │  cloudFormationType: AWS::Bedrock::FlowVersion
│    │ │  documentation: Creates a version of the flow that you can deploy. For more information, see [Deploy a flow in Amazon Bedrock](https://docs.aws.amazon.com/bedrock/latest/userguide/flows-deploy.html) in the Amazon Bedrock User Guide.
│    │ ├ properties
│    │ │  ├FlowArn: string (required, immutable)
│    │ │  └Description: string (immutable)
│    │ ├ attributes
│    │ │  ├CreatedAt: string
│    │ │  ├Definition: FlowDefinition
│    │ │  ├ExecutionRoleArn: string
│    │ │  ├FlowId: string
│    │ │  ├Name: string
│    │ │  ├Status: string
│    │ │  └Version: string
│    │ └ types
│    │    ├type FlowDefinition
│    │    │├  documentation: The definition of the nodes and connections between nodes in the flow.
│    │    ││  name: FlowDefinition
│    │    │└ properties
│    │    │   ├Nodes: Array<FlowNode>
│    │    │   └Connections: Array<FlowConnection>
│    │    ├type FlowNode
│    │    │├  documentation: Contains configurations about a node in the flow.
│    │    ││  name: FlowNode
│    │    │└ properties
│    │    │   ├Name: string (required)
│    │    │   ├Type: string (required)
│    │    │   ├Configuration: FlowNodeConfiguration
│    │    │   ├Inputs: Array<FlowNodeInput>
│    │    │   └Outputs: Array<FlowNodeOutput>
│    │    ├type FlowNodeConfiguration
│    │    │├  documentation: Contains configurations for a node in your flow. For more information, see [Node types in Amazon Bedrock works](https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html) in the Amazon Bedrock User Guide.
│    │    ││  name: FlowNodeConfiguration
│    │    │└ properties
│    │    │   ├Input: json
│    │    │   ├Output: json
│    │    │   ├KnowledgeBase: KnowledgeBaseFlowNodeConfiguration
│    │    │   ├Condition: ConditionFlowNodeConfiguration
│    │    │   ├Lex: LexFlowNodeConfiguration
│    │    │   ├Prompt: PromptFlowNodeConfiguration
│    │    │   └LambdaFunction: LambdaFunctionFlowNodeConfiguration
│    │    ├type KnowledgeBaseFlowNodeConfiguration
│    │    │├  documentation: Contains configurations for a knowledge base node in a flow. This node takes a query as the input and returns, as the output, the retrieved responses directly (as an array) or a response generated based on the retrieved responses. For more information, see [Node types in Amazon Bedrock works](https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html) in the Amazon Bedrock User Guide.
│    │    ││  name: KnowledgeBaseFlowNodeConfiguration
│    │    │└ properties
│    │    │   ├KnowledgeBaseId: string (required)
│    │    │   └ModelId: string
│    │    ├type ConditionFlowNodeConfiguration
│    │    │├  documentation: Defines a condition node in your flow. You can specify conditions that determine which node comes next in the flow. For more information, see [Node types in Amazon Bedrock works](https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html) in the Amazon Bedrock User Guide.
│    │    ││  name: ConditionFlowNodeConfiguration
│    │    │└ properties
│    │    │   └Conditions: Array<FlowCondition> (required)
│    │    ├type FlowCondition
│    │    │├  documentation: Defines a condition in the condition node.
│    │    ││  name: FlowCondition
│    │    │└ properties
│    │    │   ├Name: string (required)
│    │    │   └Expression: string
│    │    ├type LexFlowNodeConfiguration
│    │    │├  documentation: Contains configurations for a Lex node in the flow. You specify a Amazon Lex bot to invoke. This node takes an utterance as the input and returns as the output the intent identified by the Amazon Lex bot. For more information, see [Node types in Amazon Bedrock works](https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html) in the Amazon Bedrock User Guide.
│    │    ││  name: LexFlowNodeConfiguration
│    │    │└ properties
│    │    │   ├BotAliasArn: string (required)
│    │    │   └LocaleId: string (required)
│    │    ├type PromptFlowNodeConfiguration
│    │    │├  documentation: Contains configurations for a prompt node in the flow. You can use a prompt from Prompt management or you can define one in this node. If the prompt contains variables, the inputs into this node will fill in the variables. The output from this node is the response generated by the model. For more information, see [Node types in Amazon Bedrock works](https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html) in the Amazon Bedrock User Guide.
│    │    ││  name: PromptFlowNodeConfiguration
│    │    │└ properties
│    │    │   └SourceConfiguration: PromptFlowNodeSourceConfiguration (required)
│    │    ├type PromptFlowNodeSourceConfiguration
│    │    │├  documentation: Contains configurations for a prompt and whether it is from Prompt management or defined inline.
│    │    ││  name: PromptFlowNodeSourceConfiguration
│    │    │└ properties
│    │    │   ├Resource: PromptFlowNodeResourceConfiguration
│    │    │   └Inline: PromptFlowNodeInlineConfiguration
│    │    ├type PromptFlowNodeResourceConfiguration
│    │    │├  documentation: Contains configurations for a prompt from Prompt management to use in a node.
│    │    ││  name: PromptFlowNodeResourceConfiguration
│    │    │└ properties
│    │    │   └PromptArn: string (required)
│    │    ├type PromptFlowNodeInlineConfiguration
│    │    │├  documentation: Contains configurations for a prompt defined inline in the node.
│    │    ││  name: PromptFlowNodeInlineConfiguration
│    │    │└ properties
│    │    │   ├TemplateType: string (required)
│    │    │   ├TemplateConfiguration: PromptTemplateConfiguration (required)
│    │    │   ├ModelId: string (required)
│    │    │   └InferenceConfiguration: PromptInferenceConfiguration
│    │    ├type PromptTemplateConfiguration
│    │    │├  documentation: Contains the message for a prompt. For more information, see [Prompt management in Amazon Bedrock](https://docs.aws.amazon.com/bedrock/latest/userguide/prompt-management.html) .
│    │    ││  name: PromptTemplateConfiguration
│    │    │└ properties
│    │    │   └Text: TextPromptTemplateConfiguration (required)
│    │    ├type TextPromptTemplateConfiguration
│    │    │├  documentation: Contains configurations for a text prompt template. To include a variable, enclose a word in double curly braces as in `{{variable}}` .
│    │    ││  name: TextPromptTemplateConfiguration
│    │    │└ properties
│    │    │   ├Text: string (required)
│    │    │   └InputVariables: Array<PromptInputVariable>
│    │    ├type PromptInputVariable
│    │    │├  documentation: Contains information about a variable in the prompt.
│    │    ││  name: PromptInputVariable
│    │    │└ properties
│    │    │   └Name: string
│    │    ├type PromptInferenceConfiguration
│    │    │├  documentation: Contains inference configurations for the prompt.
│    │    ││  name: PromptInferenceConfiguration
│    │    │└ properties
│    │    │   └Text: PromptModelInferenceConfiguration (required)
│    │    ├type PromptModelInferenceConfiguration
│    │    │├  documentation: Contains inference configurations related to model inference for a prompt. For more information, see [Inference parameters](https://docs.aws.amazon.com/bedrock/latest/userguide/inference-parameters.html) .
│    │    ││  name: PromptModelInferenceConfiguration
│    │    │└ properties
│    │    │   ├Temperature: number
│    │    │   ├TopP: number
│    │    │   ├TopK: number
│    │    │   ├MaxTokens: number
│    │    │   └StopSequences: Array<string>
│    │    ├type LambdaFunctionFlowNodeConfiguration
│    │    │├  documentation: Contains configurations for a Lambda function node in the flow. You specify the Lambda function to invoke and the inputs into the function. The output is the response that is defined in the Lambda function. For more information, see [Node types in Amazon Bedrock works](https://docs.aws.amazon.com/bedrock/latest/userguide/flows-nodes.html) in the Amazon Bedrock User Guide.
│    │    ││  name: LambdaFunctionFlowNodeConfiguration
│    │    │└ properties
│    │    │   └LambdaArn: string (required)
│    │    ├type FlowNodeInput
│    │    │├  documentation: Contains configurations for an input to a node.
│    │    ││  name: FlowNodeInput
│    │    │└ properties
│    │    │   ├Name: string (required)
│    │    │   ├Type: string (required)
│    │    │   └Expression: string (required)
│    │    ├type FlowNodeOutput
│    │    │├  documentation: Contains configurations for an output from a node.
│    │    ││  name: FlowNodeOutput
│    │    │└ properties
│    │    │   ├Name: string (required)
│    │    │   └Type: string (required)
│    │    ├type FlowConnection
│    │    │├  documentation: Contains information about a connection between two nodes in the flow.
│    │    ││  name: FlowConnection
│    │    │└ properties
│    │    │   ├Type: string (required)
│    │    │   ├Name: string (required)
│    │    │   ├Source: string (required)
│    │    │   ├Target: string (required)
│    │    │   └Configuration: FlowConnectionConfiguration
│    │    ├type FlowConnectionConfiguration
│    │    │├  documentation: The configuration of the connection.
│    │    ││  name: FlowConnectionConfiguration
│    │    │└ properties
│    │    │   ├Data: FlowDataConnectionConfiguration
│    │    │   └Conditional: FlowConditionalConnectionConfiguration
│    │    ├type FlowDataConnectionConfiguration
│    │    │├  documentation: The configuration of a connection originating from a node that isn't a Condition node.
│    │    ││  name: FlowDataConnectionConfiguration
│    │    │└ properties
│    │    │   ├SourceOutput: string (required)
│    │    │   └TargetInput: string (required)
│    │    └type FlowConditionalConnectionConfiguration
│    │     ├  documentation: The configuration of a connection between a condition node and another node.
│    │     │  name: FlowConditionalConnectionConfiguration
│    │     └ properties
│    │        └Condition: string (required)
│    ├[~] resource AWS::Bedrock::Guardrail
│    │ ├ properties
│    │ │  └[+] ContextualGroundingPolicyConfig: ContextualGroundingPolicyConfig
│    │ └ types
│    │    ├[+] type ContextualGroundingFilterConfig
│    │    │ ├  documentation: A config for grounding filter.
│    │    │ │  name: ContextualGroundingFilterConfig
│    │    │ └ properties
│    │    │    ├Type: string (required)
│    │    │    └Threshold: number (required)
│    │    └[+] type ContextualGroundingPolicyConfig
│    │      ├  documentation: Contextual grounding policy config for a guardrail.
│    │      │  name: ContextualGroundingPolicyConfig
│    │      └ properties
│    │         └FiltersConfig: Array<ContextualGroundingFilterConfig> (required)
│    ├[~] resource AWS::Bedrock::KnowledgeBase
│    │ └ types
│    │    ├[+] type BedrockEmbeddingModelConfiguration
│    │    │ ├  documentation: The vector configuration details for the Bedrock embeddings model.
│    │    │ │  name: BedrockEmbeddingModelConfiguration
│    │    │ └ properties
│    │    │    └Dimensions: integer
│    │    ├[+] type EmbeddingModelConfiguration
│    │    │ ├  documentation: The configuration details for the embeddings model.
│    │    │ │  name: EmbeddingModelConfiguration
│    │    │ └ properties
│    │    │    └BedrockEmbeddingModelConfiguration: BedrockEmbeddingModelConfiguration
│    │    └[~] type VectorKnowledgeBaseConfiguration
│    │      └ properties
│    │         └[+] EmbeddingModelConfiguration: EmbeddingModelConfiguration
│    ├[+] resource AWS::Bedrock::Prompt
│    │ ├  name: Prompt
│    │ │  cloudFormationType: AWS::Bedrock::Prompt
│    │ │  documentation: Creates a prompt in your prompt library that you can add to a flow. For more information, see [Prompt management in Amazon Bedrock](https://docs.aws.amazon.com/bedrock/latest/userguide/prompt-management.html) , [Create a prompt using Prompt management](https://docs.aws.amazon.com/bedrock/latest/userguide/prompt-management-create.html) and [Prompt flows in Amazon Bedrock](https://docs.aws.amazon.com/bedrock/latest/userguide/flows.html) in the Amazon Bedrock User Guide.
│    │ │  tagInformation: {"tagPropertyName":"Tags","variant":"map"}
│    │ ├ properties
│    │ │  ├DefaultVariant: string
│    │ │  ├Description: string
│    │ │  ├Name: string (required)
│    │ │  ├Variants: Array<PromptVariant>
│    │ │  ├Tags: Map<string, string>
│    │ │  └CustomerEncryptionKeyArn: string
│    │ ├ attributes
│    │ │  ├Arn: string
│    │ │  ├CreatedAt: string
│    │ │  ├Id: string
│    │ │  ├UpdatedAt: string
│    │ │  └Version: string
│    │ └ types
│    │    ├type PromptVariant
│    │    │├  documentation: Contains details about a variant of the prompt.
│    │    ││  name: PromptVariant
│    │    │└ properties
│    │    │   ├Name: string (required)
│    │    │   ├TemplateType: string (required)
│    │    │   ├TemplateConfiguration: PromptTemplateConfiguration
│    │    │   ├ModelId: string
│    │    │   └InferenceConfiguration: PromptInferenceConfiguration
│    │    ├type PromptTemplateConfiguration
│    │    │├  documentation: Contains the message for a prompt. For more information, see [Prompt management in Amazon Bedrock](https://docs.aws.amazon.com/bedrock/latest/userguide/prompt-management.html) .
│    │    ││  name: PromptTemplateConfiguration
│    │    │└ properties
│    │    │   └Text: TextPromptTemplateConfiguration (required)
│    │    ├type TextPromptTemplateConfiguration
│    │    │├  documentation: Contains configurations for a text prompt template. To include a variable, enclose a word in double curly braces as in `{{variable}}` .
│    │    ││  name: TextPromptTemplateConfiguration
│    │    │└ properties
│    │    │   ├Text: string
│    │    │   ├TextS3Location: TextS3Location
│    │    │   └InputVariables: Array<PromptInputVariable>
│    │    ├type TextS3Location
│    │    │├  documentation: The Amazon S3 location of the prompt text.
│    │    ││  name: TextS3Location
│    │    │└ properties
│    │    │   ├Bucket: string (required)
│    │    │   ├Key: string (required)
│    │    │   └Version: string
│    │    ├type PromptInputVariable
│    │    │├  documentation: Contains information about a variable in the prompt.
│    │    ││  name: PromptInputVariable
│    │    │└ properties
│    │    │   └Name: string
│    │    ├type PromptInferenceConfiguration
│    │    │├  documentation: Contains inference configurations for the prompt.
│    │    ││  name: PromptInferenceConfiguration
│    │    │└ properties
│    │    │   └Text: PromptModelInferenceConfiguration (required)
│    │    └type PromptModelInferenceConfiguration
│    │     ├  documentation: Contains inference configurations related to model inference for a prompt. For more information, see [Inference parameters](https://docs.aws.amazon.com/bedrock/latest/userguide/inference-parameters.html) .
│    │     │  name: PromptModelInferenceConfiguration
│    │     └ properties
│    │        ├Temperature: number
│    │        ├TopP: number
│    │        ├TopK: number
│    │        ├MaxTokens: number
│    │        └StopSequences: Array<string>
│    └[+] resource AWS::Bedrock::PromptVersion
│      ├  name: PromptVersion
│      │  cloudFormationType: AWS::Bedrock::PromptVersion
│      │  documentation: Creates a static snapshot of your prompt that can be deployed to production. For more information, see [Deploy prompts using Prompt management by creating versions](https://docs.aws.amazon.com/bedrock/latest/userguide/prompt-management-deploy.html) in the Amazon Bedrock User Guide.
│      ├ properties
│      │  ├PromptArn: string (required, immutable)
│      │  └Description: string (immutable)
│      ├ attributes
│      │  ├Arn: string
│      │  ├CreatedAt: string
│      │  ├PromptId: string
│      │  ├UpdatedAt: string
│      │  ├Version: string
│      │  ├Name: string
│      │  ├DefaultVariant: string
│      │  └Variants: Array<PromptVariant>
│      └ types
│         ├type PromptVariant
│         │├  documentation: Contains details about a variant of the prompt.
│         ││  name: PromptVariant
│         │└ properties
│         │   ├Name: string (required)
│         │   ├TemplateType: string (required)
│         │   ├TemplateConfiguration: PromptTemplateConfiguration
│         │   ├ModelId: string
│         │   └InferenceConfiguration: PromptInferenceConfiguration
│         ├type PromptTemplateConfiguration
│         │├  documentation: Contains the message for a prompt. For more information, see [Prompt management in Amazon Bedrock](https://docs.aws.amazon.com/bedrock/latest/userguide/prompt-management.html) .
│         ││  name: PromptTemplateConfiguration
│         │└ properties
│         │   └Text: TextPromptTemplateConfiguration (required)
│         ├type TextPromptTemplateConfiguration
│         │├  documentation: Contains configurations for a text prompt template. To include a variable, enclose a word in double curly braces as in `{{variable}}` .
│         ││  name: TextPromptTemplateConfiguration
│         │└ properties
│         │   ├Text: string (required)
│         │   └InputVariables: Array<PromptInputVariable>
│         ├type PromptInputVariable
│         │├  documentation: Contains information about a variable in the prompt.
│         ││  name: PromptInputVariable
│         │└ properties
│         │   └Name: string
│         ├type PromptInferenceConfiguration
│         │├  documentation: Contains inference configurations for the prompt.
│         ││  name: PromptInferenceConfiguration
│         │└ properties
│         │   └Text: PromptModelInferenceConfiguration (required)
│         └type PromptModelInferenceConfiguration
│          ├  documentation: Contains inference configurations related to model inference for a prompt. For more information, see [Inference parameters](https://docs.aws.amazon.com/bedrock/latest/userguide/inference-parameters.html) .
│          │  name: PromptModelInferenceConfiguration
│          └ properties
│             ├Temperature: number
│             ├TopP: number
│             ├TopK: number
│             ├MaxTokens: number
│             └StopSequences: Array<string>
├[~] service aws-cleanrooms
│ └ resources
│    ├[~] resource AWS::CleanRooms::ConfiguredTable
│    │ └ types
│    │    ├[~] type AnalysisRuleAggregation
│    │    │ └ properties
│    │    │    └[+] AdditionalAnalyses: string
│    │    ├[~] type AnalysisRuleCustom
│    │    │ └ properties
│    │    │    ├[+] AdditionalAnalyses: string
│    │    │    └[+] DisallowedOutputColumns: Array<string>
│    │    └[~] type AnalysisRuleList
│    │      └ properties
│    │         └[+] AdditionalAnalyses: string
│    ├[~] resource AWS::CleanRooms::ConfiguredTableAssociation
│    │ ├ properties
│    │ │  └[+] ConfiguredTableAssociationAnalysisRules: Array<ConfiguredTableAssociationAnalysisRule>
│    │ └ types
│    │    ├[+] type ConfiguredTableAssociationAnalysisRule
│    │    │ ├  documentation: An analysis rule for a configured table association. This analysis rule specifies how data from the table can be used within its associated collaboration. In the console, the `ConfiguredTableAssociationAnalysisRule` is referred to as the *collaboration analysis rule* .
│    │    │ │  name: ConfiguredTableAssociationAnalysisRule
│    │    │ └ properties
│    │    │    ├Type: string (required)
│    │    │    └Policy: ConfiguredTableAssociationAnalysisRulePolicy (required)
│    │    ├[+] type ConfiguredTableAssociationAnalysisRuleAggregation
│    │    │ ├  documentation: The configured table association analysis rule applied to a configured table with the aggregation analysis rule.
│    │    │ │  name: ConfiguredTableAssociationAnalysisRuleAggregation
│    │    │ └ properties
│    │    │    ├AllowedResultReceivers: Array<string>
│    │    │    └AllowedAdditionalAnalyses: Array<string>
│    │    ├[+] type ConfiguredTableAssociationAnalysisRuleCustom
│    │    │ ├  documentation: The configured table association analysis rule applied to a configured table with the custom analysis rule.
│    │    │ │  name: ConfiguredTableAssociationAnalysisRuleCustom
│    │    │ └ properties
│    │    │    ├AllowedResultReceivers: Array<string>
│    │    │    └AllowedAdditionalAnalyses: Array<string>
│    │    ├[+] type ConfiguredTableAssociationAnalysisRuleList
│    │    │ ├  documentation: The configured table association analysis rule applied to a configured table with the list analysis rule.
│    │    │ │  name: ConfiguredTableAssociationAnalysisRuleList
│    │    │ └ properties
│    │    │    ├AllowedResultReceivers: Array<string>
│    │    │    └AllowedAdditionalAnalyses: Array<string>
│    │    ├[+] type ConfiguredTableAssociationAnalysisRulePolicy
│    │    │ ├  documentation: Controls on the query specifications that can be run on an associated configured table.
│    │    │ │  name: ConfiguredTableAssociationAnalysisRulePolicy
│    │    │ └ properties
│    │    │    └V1: ConfiguredTableAssociationAnalysisRulePolicyV1 (required)
│    │    └[+] type ConfiguredTableAssociationAnalysisRulePolicyV1
│    │      ├  documentation: Controls on the query specifications that can be run on an associated configured table.
│    │      │  name: ConfiguredTableAssociationAnalysisRulePolicyV1
│    │      └ properties
│    │         ├List: ConfiguredTableAssociationAnalysisRuleList
│    │         ├Aggregation: ConfiguredTableAssociationAnalysisRuleAggregation
│    │         └Custom: ConfiguredTableAssociationAnalysisRuleCustom
│    ├[+] resource AWS::CleanRooms::IdMappingTable
│    │ ├  name: IdMappingTable
│    │ │  cloudFormationType: AWS::CleanRooms::IdMappingTable
│    │ │  documentation: Describes information about the ID mapping table.
│    │ │  tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ ├ properties
│    │ │  ├InputReferenceConfig: IdMappingTableInputReferenceConfig (required, immutable)
│    │ │  ├MembershipIdentifier: string (required, immutable)
│    │ │  ├Description: string
│    │ │  ├Name: string (required, immutable)
│    │ │  ├KmsKeyArn: string
│    │ │  └Tags: Array<tag>
│    │ ├ attributes
│    │ │  ├IdMappingTableIdentifier: string
│    │ │  ├Arn: string
│    │ │  ├MembershipArn: string
│    │ │  ├CollaborationIdentifier: string
│    │ │  ├CollaborationArn: string
│    │ │  └InputReferenceProperties: IdMappingTableInputReferenceProperties
│    │ └ types
│    │    ├type IdMappingTableInputReferenceConfig
│    │    │├  documentation: Provides the input reference configuration for the ID mapping table.
│    │    ││  name: IdMappingTableInputReferenceConfig
│    │    │└ properties
│    │    │   ├InputReferenceArn: string (required)
│    │    │   └ManageResourcePolicies: boolean (required)
│    │    ├type IdMappingTableInputReferenceProperties
│    │    │├  documentation: The input reference properties for the ID mapping table.
│    │    ││  name: IdMappingTableInputReferenceProperties
│    │    │└ properties
│    │    │   └IdMappingTableInputSource: Array<IdMappingTableInputSource> (required)
│    │    └type IdMappingTableInputSource
│    │     ├  documentation: The input source of the ID mapping table.
│    │     │  name: IdMappingTableInputSource
│    │     └ properties
│    │        ├IdNamespaceAssociationId: string (required)
│    │        └Type: string (required)
│    └[+] resource AWS::CleanRooms::IdNamespaceAssociation
│      ├  name: IdNamespaceAssociation
│      │  cloudFormationType: AWS::CleanRooms::IdNamespaceAssociation
│      │  documentation: Provides information to create the ID namespace association.
│      │  tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│      ├ properties
│      │  ├MembershipIdentifier: string (required, immutable)
│      │  ├InputReferenceConfig: IdNamespaceAssociationInputReferenceConfig (required, immutable)
│      │  ├Tags: Array<tag>
│      │  ├Name: string (required)
│      │  ├Description: string
│      │  └IdMappingConfig: IdMappingConfig
│      ├ attributes
│      │  ├IdNamespaceAssociationIdentifier: string
│      │  ├Arn: string
│      │  ├MembershipArn: string
│      │  ├CollaborationIdentifier: string
│      │  ├CollaborationArn: string
│      │  └InputReferenceProperties: IdNamespaceAssociationInputReferenceProperties
│      └ types
│         ├type IdNamespaceAssociationInputReferenceConfig
│         │├  documentation: Provides the information for the ID namespace association input reference configuration.
│         ││  name: IdNamespaceAssociationInputReferenceConfig
│         │└ properties
│         │   ├InputReferenceArn: string (required)
│         │   └ManageResourcePolicies: boolean (required)
│         ├type IdMappingConfig
│         │├  documentation: The configuration settings for the ID mapping table.
│         ││  name: IdMappingConfig
│         │└ properties
│         │   └AllowUseAsDimensionColumn: boolean (required)
│         └type IdNamespaceAssociationInputReferenceProperties
│          ├  documentation: Provides the information for the ID namespace association input reference properties.
│          │  name: IdNamespaceAssociationInputReferenceProperties
│          └ properties
│             ├IdNamespaceType: string
│             └IdMappingWorkflowsSupported: Array<json>
├[~] service aws-cloudformation
│ └ resources
│    └[~] resource AWS::CloudFormation::StackSet
│      └ types
│         └[~] type OperationPreferences
│           └ properties
│              └[+] ConcurrencyMode: string
├[~] service aws-cloudwatch
│ └ resources
│    └[~] resource AWS::CloudWatch::Dashboard
│      └ attributes
│         └[-] Id: string
├[~] service aws-codepipeline
│ └ resources
│    └[~] resource AWS::CodePipeline::Pipeline
│      ├ properties
│      │  └ ExecutionMode: - string
│      │                   + string (default="SUPERSEDED")
│      ├ attributes
│      │  └[-] Id: string
│      └ types
│         └[~] type FailureConditions
│           └ properties
│              └ Result: - string (required)
│                        + string
├[~] service aws-cognito
│ └ resources
│    └[~] resource AWS::Cognito::UserPoolUICustomizationAttachment
│      └ attributes
│         └[-] Id: string
├[~] service aws-deadline
│ └ resources
│    ├[~] resource AWS::Deadline::Fleet
│    │ └ properties
│    │    └ FarmId: - string (immutable)
│    │              + string (required, immutable)
│    ├[~] resource AWS::Deadline::MeteredProduct
│    │ ├ properties
│    │ │  ├[-] Family: string
│    │ │  ├[-] Port: integer
│    │ │  └[-] Vendor: string
│    │ └ attributes
│    │    ├[+] Family: string
│    │    ├[+] Port: integer
│    │    └[+] Vendor: string
│    ├[~] resource AWS::Deadline::Queue
│    │ └ properties
│    │    └ FarmId: - string (immutable)
│    │              + string (required, immutable)
│    └[~] resource AWS::Deadline::StorageProfile
│      └ properties
│         └ FarmId: - string (immutable)
│                   + string (required, immutable)
├[~] service aws-dms
│ └ resources
│    └[~] resource AWS::DMS::ReplicationConfig
│      └ properties
│         ├ ComputeConfig: - ComputeConfig
│         │                + ComputeConfig (required)
│         ├ ReplicationConfigIdentifier: - string
│         │                              + string (required)
│         ├ ReplicationType: - string
│         │                  + string (required)
│         ├ SourceEndpointArn: - string
│         │                    + string (required)
│         ├ TableMappings: - json
│         │                + json (required)
│         └ TargetEndpointArn: - string
│                              + string (required)
├[~] service aws-ec2
│ └ resources
│    ├[~] resource AWS::EC2::EIPAssociation
│    │ └ properties
│    │    └ EIP: (documentation changed)
│    ├[~] resource AWS::EC2::TrafficMirrorFilterRule
│    │ ├  - tagInformation: undefined
│    │ │  + tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ └ properties
│    │    └[+] Tags: Array<tag>
│    └[~] resource AWS::EC2::VPNConnection
│      └ properties
│         └[+] EnableAcceleration: boolean (immutable)
├[~] service aws-ecr
│ └ resources
│    └[~] resource AWS::ECR::RepositoryCreationTemplate
│      └ properties
│         └[+] CustomRoleArn: string
├[~] service aws-eks
│ └ resources
│    └[~] resource AWS::EKS::Cluster
│      ├ properties
│      │  └[+] UpgradePolicy: UpgradePolicy
│      └ types
│         └[+] type UpgradePolicy
│           ├  documentation: An object representing the Upgrade Policy to use for the cluster.
│           │  name: UpgradePolicy
│           └ properties
│              └SupportType: string
├[~] service aws-elasticache
│ └ resources
│    └[~] resource AWS::ElastiCache::ParameterGroup
│      └ attributes
│         └[-] Id: string
├[~] service aws-emrserverless
│ └ resources
│    └[~] resource AWS::EMRServerless::Application
│      ├ properties
│      │  └[+] InteractiveConfiguration: InteractiveConfiguration
│      └ types
│         └[+] type InteractiveConfiguration
│           ├  documentation: The configuration to use to enable the different types of interactive use cases in an application.
│           │  name: InteractiveConfiguration
│           └ properties
│              ├LivyEndpointEnabled: boolean (default=false)
│              └StudioEnabled: boolean (default=false)
├[~] service aws-entityresolution
│ └ resources
│    ├[~] resource AWS::EntityResolution::IdMappingWorkflow
│    │ └ types
│    │    ├[+] type IdMappingRuleBasedProperties
│    │    │ ├  documentation: An object that defines the list of matching rules to run in an ID mapping workflow.
│    │    │ │  name: IdMappingRuleBasedProperties
│    │    │ └ properties
│    │    │    ├AttributeMatchingModel: string (required)
│    │    │    ├RuleDefinitionType: string
│    │    │    ├Rules: Array<Rule>
│    │    │    └RecordMatchingModel: string (required)
│    │    ├[~] type IdMappingTechniques
│    │    │ └ properties
│    │    │    └[+] RuleBasedProperties: IdMappingRuleBasedProperties
│    │    └[+] type Rule
│    │      ├  documentation: An object containing `RuleName` , and `MatchingKeys` .
│    │      │  name: Rule
│    │      └ properties
│    │         ├MatchingKeys: Array<string> (required)
│    │         └RuleName: string (required)
│    ├[~] resource AWS::EntityResolution::IdNamespace
│    │ └ types
│    │    ├[~] type IdNamespaceIdMappingWorkflowProperties
│    │    │ └ properties
│    │    │    └[+] RuleBasedProperties: NamespaceRuleBasedProperties
│    │    ├[+] type NamespaceRuleBasedProperties
│    │    │ ├  documentation: The rule-based properties of an ID namespace. These properties define how the ID namespace can be used in an ID mapping workflow.
│    │    │ │  name: NamespaceRuleBasedProperties
│    │    │ └ properties
│    │    │    ├Rules: Array<Rule>
│    │    │    ├RuleDefinitionTypes: Array<string>
│    │    │    ├AttributeMatchingModel: string
│    │    │    └RecordMatchingModels: Array<string>
│    │    └[+] type Rule
│    │      ├  documentation: An object containing `RuleName` , and `MatchingKeys` .
│    │      │  name: Rule
│    │      └ properties
│    │         ├RuleName: string (required)
│    │         └MatchingKeys: Array<string> (required)
│    ├[~] resource AWS::EntityResolution::MatchingWorkflow
│    │ └ types
│    │    └[~] type RuleBasedProperties
│    │      └ properties
│    │         └[+] MatchPurpose: string
│    └[~] resource AWS::EntityResolution::SchemaMapping
│      └ types
│         └[~] type SchemaInputAttribute
│           └ properties
│              └[+] Hashed: boolean
├[~] service aws-globalaccelerator
│ └ resources
│    └[~] resource AWS::GlobalAccelerator::CrossAccountAttachment
│      └ types
│         └[~] type Resource
│           └ properties
│              └[+] Cidr: string
├[~] service aws-glue
│ └ resources
│    └[~] resource AWS::Glue::Trigger
├[~] service aws-iam
│ └ resources
│    └[~] resource AWS::IAM::OIDCProvider
│      └ properties
│         └ ThumbprintList: - Array<string> (required)
│                           + Array<string>
├[~] service aws-inspectorv2
│ └ resources
│    └[~] resource AWS::InspectorV2::CisScanConfiguration
│      └ properties
│         ├ ScanName: - string
│         │           + string (required)
│         ├ Schedule: - Schedule
│         │           + Schedule (required)
│         ├ SecurityLevel: - string
│         │                + string (required)
│         └ Targets: - CisTargets
│                    + CisTargets (required)
├[~] service aws-kinesisfirehose
│ └ resources
│    └[~] resource AWS::KinesisFirehose::DeliveryStream
│      ├ properties
│      │  └[+] IcebergDestinationConfiguration: IcebergDestinationConfiguration (immutable)
│      └ types
│         ├[+] type CatalogConfiguration
│         │ ├  documentation: Describes the containers where the destination Apache Iceberg Tables are persisted.
│         │ │  Amazon Data Firehose is in preview release and is subject to change.
│         │ │  name: CatalogConfiguration
│         │ └ properties
│         │    └CatalogArn: string
│         ├[+] type DestinationTableConfiguration
│         │ ├  documentation: Describes the configuration of a destination in Apache Iceberg Tables.
│         │ │  Amazon Data Firehose is in preview release and is subject to change.
│         │ │  name: DestinationTableConfiguration
│         │ └ properties
│         │    ├DestinationTableName: string (required)
│         │    ├DestinationDatabaseName: string (required)
│         │    ├S3ErrorOutputPrefix: string
│         │    └UniqueKeys: Array<string>
│         ├[+] type IcebergDestinationConfiguration
│         │ ├  documentation: Specifies the destination configure settings for Apache Iceberg Table.
│         │ │  Amazon Data Firehose is in preview release and is subject to change.
│         │ │  name: IcebergDestinationConfiguration
│         │ └ properties
│         │    ├DestinationTableConfigurationList: Array<DestinationTableConfiguration>
│         │    ├ProcessingConfiguration: ProcessingConfiguration
│         │    ├CloudWatchLoggingOptions: CloudWatchLoggingOptions
│         │    ├CatalogConfiguration: CatalogConfiguration (required)
│         │    ├RoleARN: string (required)
│         │    ├RetryOptions: RetryOptions
│         │    ├s3BackupMode: string
│         │    ├BufferingHints: BufferingHints
│         │    └S3Configuration: S3DestinationConfiguration (required)
│         ├[+] type SnowflakeBufferingHints
│         │ ├  documentation: Describes the buffering to perform before delivering data to the Snowflake destination. If you do not specify any value, Firehose uses the default values.
│         │ │  name: SnowflakeBufferingHints
│         │ └ properties
│         │    ├IntervalInSeconds: integer
│         │    └SizeInMBs: integer
│         └[~] type SnowflakeDestinationConfiguration
│           └ properties
│              └[+] BufferingHints: SnowflakeBufferingHints
├[~] service aws-lambda
│ └ resources
│    └[~] resource AWS::Lambda::Alias
│      ├ attributes
│      │  ├[+] AliasArn: string
│      │  └[-] Id: string
│      └ types
│         └[~] type AliasRoutingConfiguration
│           └ properties
│              └ AdditionalVersionWeights: - Array<VersionWeight> (required)
│                                          + Array<VersionWeight>
├[+] service aws-launchwizard
│ ├  capitalized: LaunchWizard
│ │  cloudFormationNamespace: AWS::LaunchWizard
│ │  name: aws-launchwizard
│ │  shortName: launchwizard
│ └ resources
│    └resource AWS::LaunchWizard::Deployment
│     ├  name: Deployment
│     │  cloudFormationType: AWS::LaunchWizard::Deployment
│     │  documentation: Creates a deployment for the given workload. Deployments created by this operation are not available in the Launch Wizard console to use the `Clone deployment` action on.
│     │  tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│     ├ properties
│     │  ├DeploymentPatternName: string (required, immutable)
│     │  ├Name: string (required, immutable)
│     │  ├Specifications: Map<string, string> (required)
│     │  ├Tags: Array<tag>
│     │  └WorkloadName: string (required, immutable)
│     └ attributes
│        ├Arn: string
│        ├CreatedAt: string
│        ├DeletedAt: string
│        ├DeploymentId: string
│        ├ResourceGroup: string
│        └Status: string
├[~] service aws-mediaconnect
│ └ resources
│    ├[~] resource AWS::MediaConnect::FlowOutput
│    │ └ properties
│    │    └[+] OutputStatus: string
│    └[~] resource AWS::MediaConnect::FlowSource
│      └ properties
│         ├ MaxLatency: - integer (default=2000)
│         │             + integer
│         └ MinLatency: - integer (default=2000)
│                       + integer
├[~] service aws-medialive
│ └ resources
│    └[~] resource AWS::MediaLive::Multiplexprogram
│      ├ properties
│      │  └[-] ChannelId: string
│      └ attributes
│         └[+] ChannelId: string
├[~] service aws-mediapackagev2
│ └ resources
│    ├[~] resource AWS::MediaPackageV2::Channel
│    │ └ properties
│    │    └[+] InputType: string (immutable)
│    └[~] resource AWS::MediaPackageV2::OriginEndpoint
│      ├ properties
│      │  └[+] ForceEndpointErrorConfiguration: ForceEndpointErrorConfiguration
│      └ types
│         └[+] type ForceEndpointErrorConfiguration
│           ├  documentation: <p>The failover settings for the endpoint.</p>
│           │  name: ForceEndpointErrorConfiguration
│           └ properties
│              └EndpointErrorConditions: Array<string>
├[~] service aws-osis
│ └ resources
│    └[~] resource AWS::OSIS::Pipeline
│      └ types
│         ├[+] type VpcAttachmentOptions
│         │ ├  documentation: Options for attaching a VPC to the pipeline.
│         │ │  name: VpcAttachmentOptions
│         │ └ properties
│         │    ├AttachToVpc: boolean (required)
│         │    └CidrBlock: string (required)
│         └[~] type VpcOptions
│           └ properties
│              └[+] VpcAttachmentOptions: VpcAttachmentOptions
├[~] service aws-panorama
│ └ resources
│    └[~] resource AWS::Panorama::Package
│      └ attributes
│         ├ StorageLocation.BinaryPrefixLocation: (documentation changed)
│         ├ StorageLocation.Bucket: (documentation changed)
│         ├ StorageLocation.GeneratedPrefixLocation: (documentation changed)
│         ├ StorageLocation.ManifestPrefixLocation: (documentation changed)
│         └ StorageLocation.RepoPrefixLocation: (documentation changed)
├[~] service aws-qbusiness
│ └ resources
│    └[~] resource AWS::QBusiness::Application
│      ├ properties
│      │  └[+] QAppsConfiguration: QAppsConfiguration
│      └ types
│         └[+] type QAppsConfiguration
│           ├  documentation: Configuration information about Amazon Q Apps. (preview feature)
│           │  name: QAppsConfiguration
│           └ properties
│              └QAppsControlMode: string (required)
├[~] service aws-rds
│ └ resources
│    └[~] resource AWS::RDS::DBCluster
│      ├ properties
│      │  └ BacktrackWindow: - integer (default=0)
│      │                     + integer
│      └ attributes
│         ├ Endpoint: (documentation changed)
│         └ ReadEndpoint: (documentation changed)
├[~] service aws-sagemaker
│ └ resources
│    ├[~] resource AWS::SageMaker::App
│    │ └ types
│    │    └[~] type ResourceSpec
│    │      └ properties
│    │         └[+] LifecycleConfigArn: string
│    ├[~] resource AWS::SageMaker::Domain
│    │ └ types
│    │    ├[~] type JupyterServerAppSettings
│    │    │ └ properties
│    │    │    └[+] LifecycleConfigArns: Array<string>
│    │    ├[~] type KernelGatewayAppSettings
│    │    │ └ properties
│    │    │    └[+] LifecycleConfigArns: Array<string>
│    │    ├[+] type StudioWebPortalSettings
│    │    │ ├  documentation: Studio settings. If these settings are applied on a user level, they take priority over the settings applied on a domain level.
│    │    │ │  name: StudioWebPortalSettings
│    │    │ └ properties
│    │    │    ├HiddenMlTools: Array<string>
│    │    │    └HiddenAppTypes: Array<string>
│    │    └[~] type UserSettings
│    │      └ properties
│    │         └[+] StudioWebPortalSettings: StudioWebPortalSettings
│    ├[+] resource AWS::SageMaker::MlflowTrackingServer
│    │ ├  name: MlflowTrackingServer
│    │ │  cloudFormationType: AWS::SageMaker::MlflowTrackingServer
│    │ │  documentation: Creates an MLflow Tracking Server using a general purpose Amazon S3 bucket as the artifact store. For more information, see [Create an MLflow Tracking Server](https://docs.aws.amazon.com/sagemaker/latest/dg/mlflow-create-tracking-server.html) .
│    │ │  tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ ├ properties
│    │ │  ├TrackingServerName: string (required, immutable)
│    │ │  ├TrackingServerSize: string
│    │ │  ├MlflowVersion: string
│    │ │  ├RoleArn: string (required)
│    │ │  ├ArtifactStoreUri: string (required)
│    │ │  ├AutomaticModelRegistration: boolean
│    │ │  ├WeeklyMaintenanceWindowStart: string
│    │ │  └Tags: Array<tag>
│    │ └ attributes
│    │    └TrackingServerArn: string
│    ├[~] resource AWS::SageMaker::Model
│    │ └ types
│    │    ├[+] type HubAccessConfig
│    │    │ ├  name: HubAccessConfig
│    │    │ └ properties
│    │    │    └HubContentArn: string (required)
│    │    └[~] type S3DataSource
│    │      └ properties
│    │         └[+] HubAccessConfig: HubAccessConfig
│    ├[~] resource AWS::SageMaker::ModelPackage
│    │ ├ properties
│    │ │  ├[+] ModelCard: ModelCard
│    │ │  ├[+] SecurityConfig: SecurityConfig (immutable)
│    │ │  └[+] SourceUri: string
│    │ └ types
│    │    ├[+] type ModelAccessConfig
│    │    │ ├  documentation: Specifies the access configuration file for the ML model.
│    │    │ │  name: ModelAccessConfig
│    │    │ └ properties
│    │    │    └AcceptEula: boolean (required)
│    │    ├[+] type ModelCard
│    │    │ ├  documentation: The model card associated with the model package.
│    │    │ │  name: ModelCard
│    │    │ └ properties
│    │    │    ├ModelCardContent: string (required)
│    │    │    └ModelCardStatus: string (required)
│    │    ├[+] type ModelDataSource
│    │    │ ├  documentation: Specifies the location of ML model data to deploy during endpoint creation.
│    │    │ │  name: ModelDataSource
│    │    │ └ properties
│    │    │    └S3DataSource: S3ModelDataSource
│    │    ├[~] type ModelPackageContainerDefinition
│    │    │ └ properties
│    │    │    └[+] ModelDataSource: ModelDataSource
│    │    ├[+] type S3ModelDataSource
│    │    │ ├  documentation: Specifies the S3 location of ML model data to deploy.
│    │    │ │  name: S3ModelDataSource
│    │    │ └ properties
│    │    │    ├S3DataType: string (required)
│    │    │    ├S3Uri: string (required)
│    │    │    ├CompressionType: string (required)
│    │    │    └ModelAccessConfig: ModelAccessConfig
│    │    └[+] type SecurityConfig
│    │      ├  documentation: An optional AWS Key Management Service key to encrypt, decrypt, and re-encrypt model package information for regulated workloads with highly sensitive data.
│    │      │  name: SecurityConfig
│    │      └ properties
│    │         └KmsKeyId: string (required)
│    ├[~] resource AWS::SageMaker::Space
│    │ └ types
│    │    ├[~] type JupyterServerAppSettings
│    │    │ └ properties
│    │    │    └[+] LifecycleConfigArns: Array<string>
│    │    ├[~] type KernelGatewayAppSettings
│    │    │ └ properties
│    │    │    └[+] LifecycleConfigArns: Array<string>
│    │    └[~] type ResourceSpec
│    │      └ properties
│    │         └[+] LifecycleConfigArn: string
│    ├[+] resource AWS::SageMaker::StudioLifecycleConfig
│    │ ├  name: StudioLifecycleConfig
│    │ │  cloudFormationType: AWS::SageMaker::StudioLifecycleConfig
│    │ │  documentation: Resource Type definition for AWS::SageMaker::StudioLifecycleConfig
│    │ │  tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ ├ properties
│    │ │  ├StudioLifecycleConfigAppType: string (required, immutable)
│    │ │  ├StudioLifecycleConfigContent: string (required, immutable)
│    │ │  ├StudioLifecycleConfigName: string (required, immutable)
│    │ │  └Tags: Array<tag> (immutable)
│    │ └ attributes
│    │    └StudioLifecycleConfigArn: string
│    └[~] resource AWS::SageMaker::UserProfile
│      └ types
│         ├[~] type JupyterServerAppSettings
│         │ └ properties
│         │    └[+] LifecycleConfigArns: Array<string>
│         ├[~] type KernelGatewayAppSettings
│         │ └ properties
│         │    └[+] LifecycleConfigArns: Array<string>
│         ├[~] type ResourceSpec
│         │ └ properties
│         │    └[+] LifecycleConfigArn: string
│         ├[+] type StudioWebPortalSettings
│         │ ├  documentation: Studio settings. If these settings are applied on a user level, they take priority over the settings applied on a domain level.
│         │ │  name: StudioWebPortalSettings
│         │ └ properties
│         │    ├HiddenMlTools: Array<string>
│         │    └HiddenAppTypes: Array<string>
│         └[~] type UserSettings
│           └ properties
│              └[+] StudioWebPortalSettings: StudioWebPortalSettings
├[~] service aws-secretsmanager
│ └ resources
│    └[~] resource AWS::SecretsManager::ResourcePolicy
│      ├ properties
│      │  └ ResourcePolicy: - json (required)
│      │                    + string | json ⇐ json (required)
│      └ attributes
│         └ Id: (documentation changed)
├[~] service aws-securityhub
│ └ resources
│    └[~] resource AWS::SecurityHub::SecurityControl
│      └ properties
│         └ SecurityControlId: - string
│                              + string (immutable)
├[~] service aws-ses
│ └ resources
│    ├[+] resource AWS::SES::MailManagerAddonInstance
│    │ ├  name: MailManagerAddonInstance
│    │ │  cloudFormationType: AWS::SES::MailManagerAddonInstance
│    │ │  documentation: Creates an Add On instance for the subscription indicated in the request. The resulting Amazon Resource Name (ARN) can be used in a conditional statement for a rule set or traffic policy.
│    │ │  tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ ├ properties
│    │ │  ├AddonSubscriptionId: string (required, immutable)
│    │ │  └Tags: Array<tag>
│    │ └ attributes
│    │    ├AddonInstanceArn: string
│    │    ├AddonInstanceId: string
│    │    └AddonName: string
│    ├[+] resource AWS::SES::MailManagerAddonSubscription
│    │ ├  name: MailManagerAddonSubscription
│    │ │  cloudFormationType: AWS::SES::MailManagerAddonSubscription
│    │ │  documentation: Creates a subscription for an Add On representing the acceptance of its terms of use and additional pricing. The subscription can then be used to create an instance for use in rule sets or traffic policies.
│    │ │  tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ ├ properties
│    │ │  ├AddonName: string (required, immutable)
│    │ │  └Tags: Array<tag>
│    │ └ attributes
│    │    ├AddonSubscriptionArn: string
│    │    └AddonSubscriptionId: string
│    ├[+] resource AWS::SES::MailManagerArchive
│    │ ├  name: MailManagerArchive
│    │ │  cloudFormationType: AWS::SES::MailManagerArchive
│    │ │  documentation: Creates a new email archive resource for storing and retaining emails.
│    │ │  tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ ├ properties
│    │ │  ├ArchiveName: string
│    │ │  ├KmsKeyArn: string (immutable)
│    │ │  ├Retention: ArchiveRetention
│    │ │  └Tags: Array<tag>
│    │ ├ attributes
│    │ │  ├ArchiveArn: string
│    │ │  ├ArchiveId: string
│    │ │  └ArchiveState: string
│    │ └ types
│    │    └type ArchiveRetention
│    │     ├  documentation: The retention policy for an email archive that specifies how long emails are kept before being automatically deleted.
│    │     │  name: ArchiveRetention
│    │     └ properties
│    │        └RetentionPeriod: string (required)
│    ├[+] resource AWS::SES::MailManagerIngressPoint
│    │ ├  name: MailManagerIngressPoint
│    │ │  cloudFormationType: AWS::SES::MailManagerIngressPoint
│    │ │  documentation: Resource to provision an ingress endpoint for receiving email. An ingress endpoint serves as the entry point for incoming emails, allowing you to define how emails are received and processed within your AWS environment.
│    │ │  tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ ├ properties
│    │ │  ├TrafficPolicyId: string (required)
│    │ │  ├IngressPointConfiguration: IngressPointConfiguration
│    │ │  ├IngressPointName: string
│    │ │  ├RuleSetId: string (required)
│    │ │  ├StatusToUpdate: string
│    │ │  ├Tags: Array<tag>
│    │ │  └Type: string (required, immutable)
│    │ ├ attributes
│    │ │  ├IngressPointId: string
│    │ │  ├IngressPointArn: string
│    │ │  ├Status: string
│    │ │  └ARecord: string
│    │ └ types
│    │    └type IngressPointConfiguration
│    │     ├  documentation: The configuration of the ingress endpoint resource.
│    │     │  > This data type is a UNION, so only one of the following members can be specified when used or returned.
│    │     │  name: IngressPointConfiguration
│    │     └ properties
│    │        ├SmtpPassword: string
│    │        └SecretArn: string
│    ├[+] resource AWS::SES::MailManagerRelay
│    │ ├  name: MailManagerRelay
│    │ │  cloudFormationType: AWS::SES::MailManagerRelay
│    │ │  documentation: Resource to create an SMTP relay, which can be used within a Mail Manager rule set to forward incoming emails to defined relay destinations.
│    │ │  tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ ├ properties
│    │ │  ├Authentication: RelayAuthentication (required)
│    │ │  ├RelayName: string
│    │ │  ├ServerName: string (required)
│    │ │  ├ServerPort: number (required)
│    │ │  └Tags: Array<tag>
│    │ ├ attributes
│    │ │  ├RelayArn: string
│    │ │  └RelayId: string
│    │ └ types
│    │    └type RelayAuthentication
│    │     ├  documentation: Authentication for the relay destination server—specify the secretARN where the SMTP credentials are stored, or specify an empty NoAuthentication structure if the relay destination server does not require SMTP credential authentication.
│    │     │  > This data type is a UNION, so only one of the following members can be specified when used or returned.
│    │     │  name: RelayAuthentication
│    │     └ properties
│    │        ├SecretArn: string
│    │        └NoAuthentication: json
│    ├[+] resource AWS::SES::MailManagerRuleSet
│    │ ├  name: MailManagerRuleSet
│    │ │  cloudFormationType: AWS::SES::MailManagerRuleSet
│    │ │  documentation: Resource to create a rule set for a Mail Manager ingress endpoint which contains a list of rules that are evaluated sequentially for each email.
│    │ │  tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ ├ properties
│    │ │  ├RuleSetName: string
│    │ │  ├Rules: Array<Rule> (required)
│    │ │  └Tags: Array<tag>
│    │ ├ attributes
│    │ │  ├RuleSetArn: string
│    │ │  └RuleSetId: string
│    │ └ types
│    │    ├type Rule
│    │    │├  documentation: A rule contains conditions, "unless conditions" and actions. For each envelope recipient of an email, if all conditions match and none of the "unless conditions" match, then all of the actions are executed sequentially. If no conditions are provided, the rule always applies and the actions are implicitly executed. If only "unless conditions" are provided, the rule applies if the email does not match the evaluation of the "unless conditions".
│    │    ││  name: Rule
│    │    │└ properties
│    │    │   ├Name: string
│    │    │   ├Conditions: Array<RuleCondition>
│    │    │   ├Unless: Array<RuleCondition>
│    │    │   └Actions: Array<RuleAction> (required)
│    │    ├type RuleCondition
│    │    │├  documentation: The conditional expression used to evaluate an email for determining if a rule action should be taken.
│    │    ││  > This data type is a UNION, so only one of the following members can be specified when used or returned.
│    │    ││  name: RuleCondition
│    │    │└ properties
│    │    │   ├BooleanExpression: RuleBooleanExpression
│    │    │   ├StringExpression: RuleStringExpression
│    │    │   ├NumberExpression: RuleNumberExpression
│    │    │   ├IpExpression: RuleIpExpression
│    │    │   ├VerdictExpression: RuleVerdictExpression
│    │    │   └DmarcExpression: RuleDmarcExpression
│    │    ├type RuleBooleanExpression
│    │    │├  documentation: A boolean expression to be used in a rule condition.
│    │    ││  name: RuleBooleanExpression
│    │    │└ properties
│    │    │   ├Evaluate: RuleBooleanToEvaluate (required)
│    │    │   └Operator: string (required)
│    │    ├type RuleBooleanToEvaluate
│    │    │├  documentation: The union type representing the allowed types of operands for a boolean condition.
│    │    ││  name: RuleBooleanToEvaluate
│    │    │└ properties
│    │    │   └Attribute: string (required)
│    │    ├type RuleStringExpression
│    │    │├  documentation: A string expression is evaluated against strings or substrings of the email.
│    │    ││  name: RuleStringExpression
│    │    │└ properties
│    │    │   ├Evaluate: RuleStringToEvaluate (required)
│    │    │   ├Operator: string (required)
│    │    │   └Values: Array<string> (required)
│    │    ├type RuleStringToEvaluate
│    │    │├  documentation: The string to evaluate in a string condition expression.
│    │    ││  name: RuleStringToEvaluate
│    │    │└ properties
│    │    │   └Attribute: string (required)
│    │    ├type RuleNumberExpression
│    │    │├  documentation: A number expression to match numeric conditions with integers from the incoming email.
│    │    ││  name: RuleNumberExpression
│    │    │└ properties
│    │    │   ├Evaluate: RuleNumberToEvaluate (required)
│    │    │   ├Operator: string (required)
│    │    │   └Value: number (required)
│    │    ├type RuleNumberToEvaluate
│    │    │├  documentation: The number to evaluate in a numeric condition expression.
│    │    ││  name: RuleNumberToEvaluate
│    │    │└ properties
│    │    │   └Attribute: string (required)
│    │    ├type RuleIpExpression
│    │    │├  documentation: An IP address expression matching certain IP addresses within a given range of IP addresses.
│    │    ││  name: RuleIpExpression
│    │    │└ properties
│    │    │   ├Evaluate: RuleIpToEvaluate (required)
│    │    │   ├Operator: string (required)
│    │    │   └Values: Array<string> (required)
│    │    ├type RuleIpToEvaluate
│    │    │├  documentation: The IP address to evaluate for this condition.
│    │    ││  name: RuleIpToEvaluate
│    │    │└ properties
│    │    │   └Attribute: string (required)
│    │    ├type RuleVerdictExpression
│    │    │├  documentation: A verdict expression is evaluated against verdicts of the email.
│    │    ││  name: RuleVerdictExpression
│    │    │└ properties
│    │    │   ├Evaluate: RuleVerdictToEvaluate (required)
│    │    │   ├Operator: string (required)
│    │    │   └Values: Array<string> (required)
│    │    ├type RuleVerdictToEvaluate
│    │    │├  documentation: The verdict to evaluate in a verdict condition expression.
│    │    ││  > This data type is a UNION, so only one of the following members can be specified when used or returned.
│    │    ││  name: RuleVerdictToEvaluate
│    │    │└ properties
│    │    │   ├Attribute: string
│    │    │   └Analysis: Analysis
│    │    ├type Analysis
│    │    │├  documentation: The result of an analysis can be used in conditions to trigger actions. Analyses can inspect the email content and report a certain aspect of the email.
│    │    ││  name: Analysis
│    │    │└ properties
│    │    │   ├Analyzer: string (required)
│    │    │   └ResultField: string (required)
│    │    ├type RuleDmarcExpression
│    │    │├  documentation: A DMARC policy expression. The condition matches if the given DMARC policy matches that of the incoming email.
│    │    ││  name: RuleDmarcExpression
│    │    │└ properties
│    │    │   ├Operator: string (required)
│    │    │   └Values: Array<string> (required)
│    │    ├type RuleAction
│    │    │├  documentation: The action for a rule to take. Only one of the contained actions can be set.
│    │    ││  > This data type is a UNION, so only one of the following members can be specified when used or returned.
│    │    ││  name: RuleAction
│    │    │└ properties
│    │    │   ├Drop: json
│    │    │   ├Relay: RelayAction
│    │    │   ├Archive: ArchiveAction
│    │    │   ├WriteToS3: S3Action
│    │    │   ├Send: SendAction
│    │    │   ├AddHeader: AddHeaderAction
│    │    │   ├ReplaceRecipient: ReplaceRecipientAction
│    │    │   └DeliverToMailbox: DeliverToMailboxAction
│    │    ├type RelayAction
│    │    │├  documentation: The action relays the email via SMTP to another specific SMTP server.
│    │    ││  name: RelayAction
│    │    │└ properties
│    │    │   ├ActionFailurePolicy: string
│    │    │   ├Relay: string (required)
│    │    │   └MailFrom: string
│    │    ├type ArchiveAction
│    │    │├  documentation: The action to archive the email by delivering the email to an Amazon SES archive.
│    │    ││  name: ArchiveAction
│    │    │└ properties
│    │    │   ├ActionFailurePolicy: string
│    │    │   └TargetArchive: string (required)
│    │    ├type S3Action
│    │    │├  documentation: Writes the MIME content of the email to an S3 bucket.
│    │    ││  name: S3Action
│    │    │└ properties
│    │    │   ├ActionFailurePolicy: string
│    │    │   ├RoleArn: string (required)
│    │    │   ├S3Bucket: string (required)
│    │    │   ├S3Prefix: string
│    │    │   └S3SseKmsKeyId: string
│    │    ├type SendAction
│    │    │├  documentation: Sends the email to the internet using the ses:SendRawEmail API.
│    │    ││  name: SendAction
│    │    │└ properties
│    │    │   ├ActionFailurePolicy: string
│    │    │   └RoleArn: string (required)
│    │    ├type AddHeaderAction
│    │    │├  documentation: The action to add a header to a message. When executed, this action will add the given header to the message.
│    │    ││  name: AddHeaderAction
│    │    │└ properties
│    │    │   ├HeaderName: string (required)
│    │    │   └HeaderValue: string (required)
│    │    ├type ReplaceRecipientAction
│    │    │├  documentation: This action replaces the email envelope recipients with the given list of recipients. If the condition of this action applies only to a subset of recipients, only those recipients are replaced with the recipients specified in the action. The message contents and headers are unaffected by this action, only the envelope recipients are updated.
│    │    ││  name: ReplaceRecipientAction
│    │    │└ properties
│    │    │   └ReplaceWith: Array<string>
│    │    └type DeliverToMailboxAction
│    │     ├  documentation: This action to delivers an email to a mailbox.
│    │     │  name: DeliverToMailboxAction
│    │     └ properties
│    │        ├ActionFailurePolicy: string
│    │        ├MailboxArn: string (required)
│    │        └RoleArn: string (required)
│    └[+] resource AWS::SES::MailManagerTrafficPolicy
│      ├  name: MailManagerTrafficPolicy
│      │  cloudFormationType: AWS::SES::MailManagerTrafficPolicy
│      │  documentation: Resource to create a traffic policy for a Mail Manager ingress endpoint which contains policy statements used to evaluate whether incoming emails should be allowed or denied.
│      │  tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│      ├ properties
│      │  ├DefaultAction: string (required)
│      │  ├MaxMessageSizeBytes: number
│      │  ├PolicyStatements: Array<PolicyStatement> (required)
│      │  ├Tags: Array<tag>
│      │  └TrafficPolicyName: string
│      ├ attributes
│      │  ├TrafficPolicyArn: string
│      │  └TrafficPolicyId: string
│      └ types
│         ├type PolicyStatement
│         │├  documentation: The structure containing traffic policy conditions and actions.
│         ││  name: PolicyStatement
│         │└ properties
│         │   ├Conditions: Array<PolicyCondition> (required)
│         │   └Action: string (required)
│         ├type PolicyCondition
│         │├  documentation: The email traffic filtering conditions which are contained in a traffic policy resource.
│         ││  > This data type is a UNION, so only one of the following members can be specified when used or returned.
│         ││  name: PolicyCondition
│         │└ properties
│         │   ├StringExpression: IngressStringExpression
│         │   ├IpExpression: IngressIpv4Expression
│         │   ├TlsExpression: IngressTlsProtocolExpression
│         │   └BooleanExpression: IngressBooleanExpression
│         ├type IngressStringExpression
│         │├  documentation: The structure for a string based condition matching on the incoming mail.
│         ││  name: IngressStringExpression
│         │└ properties
│         │   ├Evaluate: IngressStringToEvaluate (required)
│         │   ├Operator: string (required)
│         │   └Values: Array<string> (required)
│         ├type IngressStringToEvaluate
│         │├  documentation: The union type representing the allowed types for the left hand side of a string condition.
│         ││  name: IngressStringToEvaluate
│         │└ properties
│         │   └Attribute: string (required)
│         ├type IngressIpv4Expression
│         │├  documentation: The union type representing the allowed types for the left hand side of an IP condition.
│         ││  name: IngressIpv4Expression
│         │└ properties
│         │   ├Evaluate: IngressIpToEvaluate (required)
│         │   ├Operator: string (required)
│         │   └Values: Array<string> (required)
│         ├type IngressIpToEvaluate
│         │├  documentation: The structure for an IP based condition matching on the incoming mail.
│         ││  name: IngressIpToEvaluate
│         │└ properties
│         │   └Attribute: string (required)
│         ├type IngressTlsProtocolExpression
│         │├  documentation: The structure for a TLS related condition matching on the incoming mail.
│         ││  name: IngressTlsProtocolExpression
│         │└ properties
│         │   ├Evaluate: IngressTlsProtocolToEvaluate (required)
│         │   ├Operator: string (required)
│         │   └Value: string (required)
│         ├type IngressTlsProtocolToEvaluate
│         │├  documentation: The union type representing the allowed types for the left hand side of a TLS condition.
│         ││  name: IngressTlsProtocolToEvaluate
│         │└ properties
│         │   └Attribute: string (required)
│         ├type IngressBooleanExpression
│         │├  documentation: The structure for a boolean condition matching on the incoming mail.
│         ││  name: IngressBooleanExpression
│         │└ properties
│         │   ├Evaluate: IngressBooleanToEvaluate (required)
│         │   └Operator: string (required)
│         ├type IngressBooleanToEvaluate
│         │├  documentation: The union type representing the allowed types of operands for a boolean condition.
│         ││  name: IngressBooleanToEvaluate
│         │└ properties
│         │   └Analysis: IngressAnalysis (required)
│         └type IngressAnalysis
│          ├  documentation: The Add On ARN and its returned value that is evaluated in a policy statement's conditional expression to either deny or block the incoming email.
│          │  name: IngressAnalysis
│          └ properties
│             ├Analyzer: string (required)
│             └ResultField: string (required)
├[~] service aws-stepfunctions
│ └ resources
│    ├[~] resource AWS::StepFunctions::Activity
│    │ ├ properties
│    │ │  └[+] EncryptionConfiguration: EncryptionConfiguration (immutable)
│    │ └ types
│    │    └[+] type EncryptionConfiguration
│    │      ├  documentation: Settings to configure server-side encryption for an activity. By default, Step Functions provides transparent server-side encryption. With this configuration, you can specify a customer managed AWS KMS key for encryption.
│    │      │  name: EncryptionConfiguration
│    │      └ properties
│    │         ├KmsKeyId: string
│    │         ├KmsDataKeyReusePeriodSeconds: integer
│    │         └Type: string (required)
│    └[~] resource AWS::StepFunctions::StateMachine
│      ├ properties
│      │  └[+] EncryptionConfiguration: EncryptionConfiguration
│      └ types
│         └[+] type EncryptionConfiguration
│           ├  documentation: Settings to configure server-side encryption for a state machine. By default, Step Functions provides transparent server-side encryption. With this configuration, you can specify a customer managed AWS KMS key for encryption.
│           │  name: EncryptionConfiguration
│           └ properties
│              ├KmsKeyId: string
│              ├KmsDataKeyReusePeriodSeconds: integer
│              └Type: string (required)
├[~] service aws-workspacesthinclient
│ └ resources
│    └[~] resource AWS::WorkSpacesThinClient::Environment
│      └ properties
│         └[+] DeviceCreationTags: Array<tag>
└[~] service aws-workspacesweb
  └ resources
     └[~] resource AWS::WorkSpacesWeb::UserSettings
       └ properties
          └[+] DeepLinkAllowed: string