This is the new *CloudFormation Template Reference Guide*. Please update your bookmarks and links. For help getting started with CloudFormation, see the [AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html).
# Document history for the AWS CloudFormation Template Reference
The following table describes important changes to the *AWS CloudFormation Template Reference* content. To receive notifications about documentation updates, you can subscribe to an RSS feed.
| Change | Description | Date |
| --- |--- |--- |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudWatch::Alarm
[AWS::CloudWatch::Alarm](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-alarm.html)
Use the `EvaluationInterval` and `EvaluationCriteria` properties to create PromQL-based alarms. For more information about PromQL, see [Query metrics with PromQL](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-PromQL.html) in the *Amazon CloudWatch User Guide*. | April 16, 2026 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::S3Files::FileSystem`, `AWS::S3Files::FileSystemPolicy`, `AWS::S3Files::MountTarget`, and `AWS::S3Files::AccessPoint`.
[AWS::S3Files::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-s3files-filesystem.html)
Use the `AWS::S3Files::FileSystem` resource to specify an Amazon S3 Files file system scoped to a bucket or prefix.
[AWS::S3Files::FileSystemPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-s3files-filesystempolicy.html)
Use the `AWS::S3Files::FileSystemPolicy` resource to specify a resource-based policy for an Amazon S3 Files file system.
[AWS::S3Files::MountTarget](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-s3files-mounttarget.html)
Use the `AWS::S3Files::MountTarget` resource to specify a mount target for an Amazon S3 Files file system.
[AWS::S3Files::AccessPoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-s3files-accesspoint.html)
Use the `AWS::S3Files::AccessPoint` resource to specify an access point for an Amazon S3 Files file system. | April 7, 2026 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::SecurityAgent::AgentSpace`, `AWS::SecurityAgent::Application`, `AWS::SecurityAgent::Pentest`, and `AWS::SecurityAgent::TargetDomain`.
[AWS::SecurityAgent::AgentSpace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityagent-agentspace.html)
Use the `AWS::SecurityAgent::AgentSpace` resource to specify an agent space for security testing.
[AWS::SecurityAgent::Application](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityagent-application.html)
Use the `AWS::SecurityAgent::Application` resource to specify a Security Agent application.
[AWS::SecurityAgent::Pentest](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityagent-pentest.html)
Use the `AWS::SecurityAgent::Pentest` resource to specify a penetration test within an agent space.
[AWS::SecurityAgent::TargetDomain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityagent-targetdomain.html)
Use the `AWS::SecurityAgent::TargetDomain` resource to specify a target domain for security testing. | March 31, 2026 |
| [New resources](aws-template-resource-type-ref.md) | The following resource was added: `AWS::UXC::AccountCustomization`.
[AWS::UXC::AccountCustomization](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-uxc-accountcustomization.html)
Use the `AWS::UXC::AccountCustomization` resource to specify account-level UX customization settings, including account color, visible services, and visible regions. | March 26, 2026 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::PCS::Cluster.
[AWS::PCS::Cluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcs-cluster.html)
Added support for custom Cgroup and SlurmDBD configuration settings. Use the `CgroupCustomSettings` property to configure Cgroup settings and the `SlurmdbdCustomSettings` property to configure SlurmDBD settings for your cluster.
For more information, see [Configuring custom Cgroup settings in AWS PCS](https://docs.aws.amazon.com/pcs/latest/userguide/cgroup-custom-settings.html) and [ Configuring custom SlurmDBD settings in AWS PCS](https://docs.aws.amazon.com/pcs/latest/userguide/slurmdbd-custom-settings.html) in the *AWS PCS User Guide*. | March 20, 2026 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::EC2::SqlHaStandbyDetectedInstance`.
[AWS::EC2::SqlHaStandbyDetectedInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-sqlhastandbydetectedinstance.html)
Use the `AWS::EC2::SqlHaStandbyDetectedInstance` resource to specify an instance for SQL Server High Availability standby detection monitoring. | March 20, 2026 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::Glue::Catalog`
[ AWS::Glue::Catalog](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-glue-catalog.html)
Use the `AWS::Glue::Catalog` resource to specify a catalog in the AWS Glue Data Catalog. | March 17, 2026 |
| [New service: Elemental Inference](aws-template-resource-type-ref.md) | The following resources were added: `AWS::ElementalInference::Feed`. See [ AWS::ElementalInference::Feed](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elementalinference-resource2.html) | March 13, 2026 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::CleanRoomsML::ConfiguredModelAlgorithm` and `AWS::CleanRoomsML::ConfiguredModelAlgorithmAssociation`.
[AWS::CleanRoomsML::ConfiguredModelAlgorithm](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanroomsml-configuredmodelalgorithm.html)
Use the `AWS::CleanRoomsML::ConfiguredModelAlgorithm` resource to specify a configured model algorithm using a container image stored in an ECR repository.
[AWS::CleanRoomsML::ConfiguredModelAlgorithmAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanroomsml-configuredmodelalgorithmassociation.html)
Use the `AWS::CleanRoomsML::ConfiguredModelAlgorithmAssociation` resource to specify an association of a configured model algorithm to a collaboration for use by any member of the collaboration. | March 10, 2026 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::BedrockAgentCore::PolicyEngine` and `AWS::BedrockAgentCore::Policy`.
[AWS::BedrockAgentCore::PolicyEngine](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-policyengine.html)
Use the `AWS::BedrockAgentCore::PolicyEngine` resource to specify a policy engine for Amazon Bedrock AgentCore.
[AWS::BedrockAgentCore::Policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-policy.html)
Use the `AWS::BedrockAgentCore::Policy` resource to specify a Cedar authorization policy within an Amazon Bedrock AgentCore policy engine. | March 3, 2026 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::BedrockAgentCore::Evaluator` and `AWS::BedrockAgentCore::OnlineEvaluationConfig`.
[AWS::BedrockAgentCore::Evaluator](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-evaluator.html)
Use the `AWS::BedrockAgentCore::Evaluator` resource to specify an evaluator for Amazon Bedrock AgentCore.
[AWS::BedrockAgentCore::OnlineEvaluationConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-bedrockagentcore-onlineevaluationconfig.html)
Use the `AWS::BedrockAgentCore::OnlineEvaluationConfig` resource to specify an online evaluation configuration for Amazon Bedrock AgentCore. | February 27, 2026 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::DataZone::Connection`, `AWS::DataZone::DataSource`, `AWS::DataZone::Environment`, `AWS::DataZone::EnvironmentBlueprintConfiguration`, `AWS::DataZone::FormType`, and `AWS::DataZone::PolicyGrant`.
[AWS::DataZone::Connection](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-connection.html)
Added new properties including `EnableTrustedIdentityPropagation`, `ProjectIdentifier`, and connection property types for Amazon Q, MLflow, and Amazon S3.
[AWS::DataZone::DataSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-datasource.html)
Added new properties including `ConnectionIdentifier` and SageMaker run configuration.
[AWS::DataZone::PolicyGrant](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-policygrant.html)
Added documentation for the resource and all policy grant detail types, principals, and grant filters. | February 26, 2026 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::ComputeOptimizer::AutomationRule`.
[AWS::ComputeOptimizer::AutomationRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-computeoptimizer-automationrule.html)
Use the `AWS::ComputeOptimizer::AutomationRule` resource to specify an automation rule that automatically implements recommended actions based on your defined criteria and schedule. | February 24, 2026 |
| [Updated resource](aws-template-resource-type-ref.md) | The following property was updated: AWS::Backup::BackupVault LockConfigurationType.
[ChangeableForDays](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-backup-backupvault-lockconfigurationtype.html#cfn-backup-backupvault-lockconfigurationtype-changeablefordays)
Added clarification about governance mode and compliance mode behavior for vault locks. | February 21, 2026 |
| [New resource](aws-template-resource-type-ref.md) | Updates were added to AWS::Connect::HoursOfOperation to support recurring overrides.
[AWS::Connect::Notification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-notification.html)
Use the `AWS::Connect::Notification` resource to create a new Amzon Connect notification for the specified recipients. | February 13, 2026 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::WorkSpacesWeb::Portal`.
[AWS::WorkSpacesWeb::Portal](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-portal.html)
Use the `PortalCustomDomain` property to customize the domain of the web portal to align with customer branding. | February 5, 2026 |
| [VPC connectivity support](aws-template-resource-type-ref.md) | Added VPC transit configuration support to `AWS::GameLiftStreams::StreamGroup`.
[AWS::GameLiftStreams::StreamGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gameliftstreams-streamgroup.html)
Use the new `VpcTransitConfiguration` property in `LocationConfiguration` to enable private network connectivity between your stream group and resources in your Amazon VPC using Transit Gateway. | February 4, 2026 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudFront::CustomOriginConfig
[AWS::CloudFront::CustomOriginConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-cloudfront-distribution-customoriginconfig.html)
Added `OriginMtlsConfig` for this resource.
For more information, see [Mutual TLS (origin) with CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/origin-mtls-authentication.html) in the *Amazon CloudFront Developer Guide*. | February 2, 2026 |
| [New properties](aws-template-resource-type-ref.md) | The following properties were added:
[AWS::SES::ConfigurationSet ValidationOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-configurationset-validationoptions.html)
Use the `ValidationOptions` property as the email auto validation feature that helps you validate email addresses before you send to them. It checks email addresses for syntax errors, domain validity, and other checks, and identifies risky addresses that could harm your sender reputation, helping you maintain high deliverability rates and protect your sender reputation. | February 1, 2026 |
| [Collection Group Launch](aws-template-resource-type-ref.md) | The following resource was added: AWS::OpenSearchServerless::CollectionGroup. The following properties were added: AWS::OpenSearchServerless::Collection.CollectionGroupName, AWS::OpenSearchServerless::Collection.FipsEndpoints, AWS::OpenSearchServerless::Collection.EncryptionConfig, AWS::OpenSearchServerless::SecurityConfig.IamFederationOptions.
[AWS::OpenSearchServerless::CollectionGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchserverless-collectiongroup.html)
Use the `AWS::OpenSearchServerless::CollectionGroup` resource to create collection groups with capacity limits for Amazon OpenSearch Serverless.
[AWS::OpenSearchServerless::Collection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchserverless-collection.html)
Use the `CollectionGroupName` property to associate a collection with a collection group.
Use the `FipsEndpoints` property to access FIPS-compliant endpoints for federal government workloads.
Use the `EncryptionConfig` property to configure encryption settings for the collection.
[AWS::OpenSearchServerless::SecurityConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchserverless-securityconfig.html)
Use the `IamFederationOptions` property to configure IAM federation integration with external identity providers. | January 25, 2026 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::MWAAServerless::Workflow`.
[AWS::MWAAServerless::Workflow](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mwaaserverless-workflow.html)
Use the `AWS::MWAAServerless::Workflow` resource to create a new workflow in Amazon Managed Workflows for Apache Airflow Serverless. | January 22, 2026 |
| [Updated resource](aws-template-resource-type-ref.md) | Updates were added to AWS::Connect::HoursOfOperation to support recurring overrides. | January 14, 2026 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IoT::Logging.
[AWS::IoT::Logging](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-logging.html)
Use the `EventConfigurations` property to configure event-specific logging that overrides the default log level or log group for specific event types. | December 19, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::Cases::Domain`, `AWS::Cases::Field`, `AWS::Cases::Layout`, `AWS::Cases::CaseRule`, and `AWS::Cases::Template`.
[AWS::Cases::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cases-domain.html)
Use the `AWS::Cases::Domain` resource to create a domain, which is a container for all case data, such as cases, fields, templates and layouts. Each Amazon Connect instance can be associated with only one Cases domain.
[AWS::Cases::Field](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cases-field.html)
Use the `AWS::Cases::Field` resource to create a field in the Cases domain. This field is used to define the case object model (that is, defines what data can be captured on cases) in a Cases domain.
[AWS::Cases::Layout](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cases-layout.html)
Use the `AWS::Cases::Layout` resource to create a layout in the Cases domain. Layouts define the following configuration in the top section and More Info tab of the Cases user interface: Fields to display to the users and Field ordering.
[AWS::Cases::CaseRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cases-caserule.html)
Use the `AWS::Cases::CaseRule` resource to create a case rule. In the Amazon Connect admin website, case rules are known as case field conditions. Case rules are used to define the situations under which fields should have certain effects (such as required).
[AWS::Cases::Template](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cases-template.html)
Use the `AWS::Cases::Template` resource to create a template in the Cases domain. This template is used to define the case object model (that is, to define what data can be captured on cases) in a Cases domain. A template must have a unique name within a domain, and it must reference existing field IDs and layout IDs. | December 19, 2025 |
| [Updated resources](aws-template-resource-type-ref.md) | The following properties were added to `AWS::Route53Resolver::ResolverEndpoint`.
[AWS::Route53Resolver::ResolverEndpoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverendpoint.html)
Added `RniEnhancedMetricsEnabled` and `TargetNameServerMetricsEnabled` properties to enable enhanced CloudWatch metrics for resolver endpoints. | December 15, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudFront::AnycastIpList
[AWS::CloudFront::AnycastIpList](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudfront-anycastiplist.html)
Added `IpamCidrConfigs` and `IpamCidrConfigResults` for this resource.
For more information, see [Request Anycast static IPs](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/request-static-ips.html) in the *Amazon CloudFront Developer Guide*. | December 12, 2025 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::GroundStation::Config and AWS::GroundStation::MissionProfile.
[AWS::GroundStation::Config TelemetrySinkConfig CloudFormation property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-groundstation-config-telemetrysinkconfig.html)
The `TelemetrySinkConfig` property provides information for telemetry delivery during contacts. Supports delivery to Amazon Kinesis Data Streams.
[TelemetrySinkConfigArn property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-groundstation-missionprofile.html#cfn-groundstation-missionprofile-telemetrysinkconfigarn)
The `TelemetrySinkConfigArn` property specifies the ARN of a TelemetrySinkConfig resource used for telemetry data delivery during contacts. | December 11, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::WorkSpacesWeb::UserSettings`.
[AWS::WorkSpacesWeb::UserSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-usersettings.html)
Use the `BrandingConfiguration` property to customize the appearance of the web portal with logo, wallpaper, favicon, localized text strings, color themes, and terms of service.
Use the `WebAuthnAllowed` property to specify whether the user can use WebAuthn redirection for passwordless login to websites within the streaming session. | December 10, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::DevOpsAgent::AgentSpace` and `AWS::DevOpsAgent::Association`.
[AWS::DevOpsAgent::AgentSpace](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-devopsagent-agentspace.html)
Use the `AWS::DevOpsAgent::AgentSpace` resource to create an Agent Space, which serves as a container for AI-powered DevOps agents that monitor and manage your infrastructure and applications.
[AWS::DevOpsAgent::Association](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-devopsagent-association.html)
Use the `AWS::DevOpsAgent::Association` resource to connect an Agent Space with external services such as AWS accounts, GitHub, GitLab, Slack, Dynatrace, ServiceNow, New Relic, Datadog, Splunk, and custom MCP servers. | December 2, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::SecurityHub::ConnectorV2`.
[AWS::SecurityHub::ConnectorV2](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-securityhub-connectorv2.html)
Use the `AWS::SecurityHub::ConnectorV2` resource to specify a connector resource based on input parameters. | December 2, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource were added: AWS::Connect::Workspace, AWS::Connect::DataTable, AWS::Connect::DataTableAttribute, and AWS::Connect::DataTableRecord
[AWS::Connect::Workspace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-workspace.html)
Use the `AWS::Connect::Workspace` resource to create a Workspace in the specified instance.
[AWS::Connect::DataTable](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-datatable.html)
Use the `AWS::Connect::DataTable` resource to create a DataTable in the specified instance.
[AWS::Connect::DataTableAttribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-datatableattribute.html)
Use the `AWS::Connect::DataTableAttribute` resource to create a DataTableAttribute in the specified instance.
[AWS::Connect::DataTableRecord](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-datatablerecord.html)
Use the `AWS::Connect::DataTableRecord` resource to create a DataTableRecord in the specified DataTable. | December 2, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::PCS::Cluster.
[AWS::PCS::Cluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcs-cluster.html)
Added support for Slurm REST API endpoint. Use the `SlurmRest` property to enable and configure the Slurm REST API for your cluster.
For more information, see [Slurm REST API in AWS PCS](https://docs.aws.amazon.com/pcs/latest/userguide/slurm-rest-api.html) in the *AWS PCS User Guide*. | November 25, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CloudFront::ConnectionFunction
[AWS::CloudFront::ConnectionFunction](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-connectionfunction.html)
Use the `AWS::CloudFront::ConnectionFunction` resource with mutual TLS (viewer).
For more information, see [Mutual TLS (mTLS) viewer](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/mtls-authentication.html) in the *Amazon CloudFront Developer Guide*. | November 24, 2025 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated with enhanced semantic versioning, logging, and pipeline management features: AWS::ImageBuilder::Component, AWS::ImageBuilder::ContainerRecipe, AWS::ImageBuilder::Image, AWS::ImageBuilder::ImagePipeline, AWS::ImageBuilder::ImageRecipe, and AWS::ImageBuilder::Workflow.
[AWS::ImageBuilder::Component](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-component.html), [AWS::ImageBuilder::ContainerRecipe](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-containerrecipe.html), [AWS::ImageBuilder::ImageRecipe](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-imagerecipe.html), [AWS::ImageBuilder::Workflow](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-workflow.html)
+ Enhanced semantic versioning support with detailed documentation for version assignment and patterns.
+ Added `LatestVersion` return values with wildcard variations for semantic versioning, including `Arn`, `Major`, `Minor`, and `Patch` properties.
[AWS::ImageBuilder::ImageRecipe](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-imagerecipe.html)
Added `AmiTags` property to apply tags to AMIs created during the Build phase prior to image distribution.
[AWS::ImageBuilder::Image](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-image.html)
+ Added `LoggingConfiguration` property to define custom log group names for image creation.
+ Added `DeletionSettings` for automatic cleanup of underlying resources when images are replaced or deleted.
+ Introduced `ImagePipelineExecutionSettings` with deployment ID support and configurable execution triggers on pipeline updates.
[AWS::ImageBuilder::ImagePipeline](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-imagepipeline.html)
+ Added `LoggingConfiguration` property to define custom log group names for pipeline execution.
+ Enhanced pipeline management with `AutoDisablePolicy` to automatically disable failing pipelines after a specified number of consecutive failures. | November 21, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added:
[AWS::ECR::SigningConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-signingconfiguration.html)
Use the `AWS::ECR::SigningConfiguration` property to specify a signing configuration for your private registry. | November 21, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Glue::Integration
[AWS::Glue::Integration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-integration.html)
Use `AWS::Glue::Integration` to specify zero-etl integration. | November 18, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Glue::IntegrationResourceProperty
[AWS::Glue::IntegrationResourceProperty](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-integrationresourceproperty.html)
Use `AWS::Glue::IntegrationResourceProperty` to specify zero-etl integration resource property. | November 18, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::MediaConnect::RouterInput`, `AWS::MediaConnect::RouterOutput`, and `AWS::MediaConnect::RouterNetworkInterface`.
[AWS::MediaConnect::RouterInput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-routerinput.html)
Use the `AWS::MediaConnect::RouterInput` resource to define a connection point in the MediaConnect router that can receive content from your source endpoint.
[AWS::MediaConnect::RouterOutput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-routeroutput.html)
Use the `AWS::MediaConnect::RouterOutput` resource to define a connection point in the MediaConnect router that can send content to your destination endpoint.
[AWS::MediaConnect::RouterNetworkInterface](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-routernetworkinterface.html)
Use the `AWS::MediaConnect::RouterNetworkInterface` resource to define how the router communicates with the outside world. Each router I/O needs a network interface, which determines how the router I/O connects to other resources and what security measures protect the connection. | November 17, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::WorkSpacesWeb::BrowserSettings`.
[AWS::WorkSpacesWeb::BrowserSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-browsersettings.html)
Use the `WebContentFilteringPolicy` property to specify which URLs end users are allowed to access or which URLs or domain categories they are restricted from accessing for enhanced security. | November 13, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudFront::VpcOrigin
[AWS::CloudFront::VpcOrigin](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-vpcorigin.html)
Added the `AccountId` so that you can determine the account ID of the AWS account that owns the VPC origin.
For more information, see [Restrict access with VPC origins](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-vpc-origins.html) in the *Amazon CloudFront Developer Guide*. | November 5, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudFront::AnycastIpList
[AWS::CloudFront::AnycastIpList](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudfront-anycastiplist.html)
Added `IpAddressType` for this resource to support either `ipv4` or `dualstack`.
For more information, see [Request Anycast static IPs](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/request-static-ips.html) in the *Amazon CloudFront Developer Guide*. | November 5, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::BedrockAgentCore::WorkloadIdentity`.
[AWS::BedrockAgentCore::WorkloadIdentity](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-workloadidentity.html)
Use the `AWS::BedrockAgentCore::WorkloadIdentity` resource to create a workload identity for Amazon Bedrock AgentCore. | November 3, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::S3Vectors::VectorBucket, AWS::S3Vectors::VectorBucketPolicy, and AWS::S3Vectors::Index.
[AWS::S3Vectors::VectorBucket](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3vectors-vectorbucket.html)
Use the `AWS::S3Vectors::VectorBucket` resource to create an Amazon S3 vector bucket.
[AWS::S3Vectors::VectorBucketPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3vectors-vectorbucketpolicy.html)
Use the `AWS::S3Vectors::VectorBucketPolicy` resource to apply an access policy to an S3 vector bucket.
[AWS::S3Vectors::Index](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3vectors-index.html)
Use the `AWS::S3Vectors::Index` resource to create a vector index for storing and querying your vector data within an S3 vector bucket. | October 31, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::RTBFabric::Link`, `AWS::RTBFabric::RequesterGateway` and `AWS::RTBFabric::ResponderGateway`.
[AWS::RTBFabric::Link](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rtbfabric-link.html)
Use the `AWS::RTBFabric::Link` resource to create a link between gateways.
[AWS::RTBFabric::RequesterGateway](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rtbfabric-requestergateway.html)
Use the `AWS::RTBFabric::RequesterGateway` resource to create a requester gateway.
[AWS::RTBFabric::ResponderGateway](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rtbfabric-respondergateway.html)
Use the `AWS::RTBFabric::ResponderGateway` resource to create a responder gateway. | October 30, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::APS::AnomalyDetector.
[AWS::APS::AnomalyDetector](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-aps-anomaly-detector.html)
Anomaly detection uses the Random Cut Forest algorithm for time-series analysis. The anomaly detector analyzes Amazon Managed Service for Prometheus metrics to identify unusual patterns and behaviors.
For more information, see [PreviewAnomalyDetector API](https://docs.aws.amazon.com/prometheus/latest/userguide/anomaly-detection-api.html) in the *Amazon Managed Service for Prometheus User Guide*. | October 30, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Synthetics::Canary.
[AWS::Synthetics::Canary](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-synthetics-canary.html)
The `BlueprintTypes` parameter was added. You can specify the type of monitoring the canary should perform. | October 20, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::EC2::CapacityManagerDataExport.
[ AWS::EC2::CapacityManagerDataExport](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-capacitymanagerdataexport.html)
Use the `AWS::EC2::CapacityManagerDataExport` resource to create a new data export configuration for EC2 Capacity Manager. | October 15, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::ObservabilityAdmin::OrganizationCentralizationRule`, `AWS::ObservabilityAdmin::OrganizationTelemetryRule` and `AWS::ObservabilityAdmin::TelemetryRule`.
[AWS::ObservabilityAdmin::OrganizationCentralizationRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-organizationcentralizationrule.html)
Use the `AWS::ObservabilityAdmin::OrganizationCentralizationRule` resource to define how telemetry data should be centralized across an organization, including source and destination configurations.
[AWS::ObservabilityAdmin::OrganizationTelemetryRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-observabilityadmin-organizationtelemetryrule.html)
Use the `AWS::ObservabilityAdmin::OrganizationTelemetryRule` resource to retrieve the details of a specific organization centralization rule. This operation can only be called by the organization's management account or a delegated administrator account.
[AWS::ObservabilityAdmin::TelemetryRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-telemetryrule.html)
Use the `AWS::ObservabilityAdmin::TelemetryRule` resource to create a telemetry rule that defines how telemetry should be configured forAWS resources in your account. The rule specifies which resources should have telemetry enabled and how that telemetry data should be collected based on resource type, telemetry type, and selection criteria. | October 14, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::SSMQuickSetup::LifecycleAutomation
[AWS::SSMQuickSetup::LifecycleAutomation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmquicksetup-lifecycleautomation.html)
Creates a lifecycle automation resource that executes SSM Automation documents during CloudFormation stack operations. This resource replaces inline Lambda custom resources and provides a managed way to handle lifecycle events in Quick Setup configurations. | October 14, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ApplicationSignals::GroupingConfiguration
[AWS::ApplicationSignals::GroupingConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-applicationsignals-groupingconfiguration.html)
Use the `GroupingAttributeDefinitions` property to group attribute definitions that specify how services should be grouped based on various attributes and source keys.. For more information, see [AWS::ApplicationSignals::GroupingConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationsignals-groupingconfiguration-groupingattributedefinition.html). | October 4, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::MWAA::Environment
[AirflowVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-airflowversion)
The `AirflowVersion` property has been updated to include all supported values, including `3.0.6`. | October 1, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::PCS::ComputeNodeGroup.
[AWS::PCS::ComputeNodeGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcs-computenodegroup.html)
Added support for Amazon EC2 Capacity Blocks for ML as an option for AWS PCS compute node groups to purchase and launch instances. Specify `CAPACITY_BLOCK` as the `PurchaseOption` for your compute node group. The launch template for the compute node group must also be configured to use Capacity Blocks.
For more information, see [Using Amazon EC2 Capacity Blocks for ML with AWS PCS](https://docs.aws.amazon.com/pcs/latest/userguide/capacity-blocks.html) in the *AWS PCS User Guide*. | September 30, 2025 |
| [New properties](aws-template-resource-type-ref.md) | The following resources were updated: AWS::ECS::CapacityProvider.
[AWS::ECS::CapacityProvider ManagedInstancesProvider](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-capacityprovider.html#cfn-ecs-capacityprovider-managedinstancesprovider)
Use the `ManagedInstancesProvider` property to use ECS Managed Instances for your capacity provider. | September 30, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | Updates were added to AWS::Connect::RoutingProfile to support manual contact assignment. | September 25, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::BedrockAgentCore::BrowserCustom`, `AWS::BedrockAgentCore::CodeInterpreterCustom`, `AWS::BedrockAgentCore::Runtime`, and `AWS::BedrockAgentCore::RuntimeEndpoint`.
[AWS::BedrockAgentCore::BrowserCustom](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-browsercustom.html)
Use the `AWS::BedrockAgentCore::BrowserCustom` resource to create a custom browser.
[AWS::BedrockAgentCore::CodeInterpreterCustom](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-codeinterpretercustom.html)
Use the `AWS::BedrockAgentCore::CodeInterpreterCustom` resource to create a custom code interpreter.
[AWS::BedrockAgentCore::Runtime](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-runtime.html)
Use the `AWS::BedrockAgentCore::Runtime` resource to specify the agent runtime.
[AWS::BedrockAgentCore::RuntimeEndpoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-runtimeendpoint.html)
Use the `AWS::BedrockAgentCore::RuntimeEndpoint` resource to specify the agent runtime endpoint. | September 22, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::EVS::Environment`.
[AWS::EVS::Environment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-evs-environment.html)
Use the `isHCXPublic` property to specify a public or private HCX VLAN. Use the `HcxNetworkAclId` property to specify a network ACL for an HCX VLAN. | September 17, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::Bedrock::GuardrailAutomatedReasoningPolicyConfig`.
[AWS::Bedrock::GuardrailAutomatedReasoningPolicyConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-guardrail-automatedreasoningpolicyconfig.html#cfn-bedrock-guardrail-automatedreasoningpolicyconfig-confidencethreshold)
Use the AWS::Bedrock::Guardrail AutomatedReasoningPolicyConfig resource to integrate Automated Reasoning policies with Guardrails. | September 15, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::SMSVOICE::ConfigurationSet`, `AWS::SMSVOICE::OptOutList`, `AWS::SMSVOICE::PhoneNumber`, `AWS::SMSVOICE::Pool`, `ProtectConfiguration`, `AWS::SMSVOICE::ResourcePolicy` and `AWS::SMSVOICE::SenderId`.
[AWS::SMSVOICE::ConfigurationSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-smsvoice-configurationset.html)
Use the `AWS::SMSVOICE::ConfigurationSet` resource to specify a set of rules that are applied when you send a message.
[AWS::SMSVOICE::OptOutList](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-smsvoice-optoutlist.html)
Use the `AWS::SMSVOICE::OptOutList` resource to specify a list of destination phone numbers that should not have messages sent to them.
[AWS::SMSVOICE::PhoneNumber](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-smsvoice-phonenumber.html)
Use the `AWS::SMSVOICE::PhoneNumber` resource to create specify a phone number that your recipients see on their devices when you send them an SMS or MMS message.
[AWS::SMSVOICE::Pool](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-smsvoice-pool.html)
Use the `AWS::SMSVOICE::Pool` resource to create a new pool, which is a collection of phone numbers or sender IDs that share the same settings that you can use to send messages.
[AWS::SMSVOICE::ProtectConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-smsvoice-protectconfiguration.html)
Use the `AWS::SMSVOICE::ProtectConfiguration` resource to create a set of capabilities to manage SMS deliveries to all countries where your customers are located.
[AWS::SMSVOICE::ResourcePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-smsvoice-resourcepolicy.html)
Use the `AWS::SMSVOICE::ResourcePolicy` resource to specify the permissions for another AWS account on a shared resource.
[AWS::SMSVOICE::SenderId](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-smsvoice-senderid.html)
Use the `AWS::SMSVOICE::SenderId` resource to request a new sender ID that doesn't require registration. | September 15, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudFront::Distribution
[AWS::CloudFront::Distribution](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-distribution.html)
Added `IpAddressType` for `CustomOriginConfig`.
For more information, see [IPv6 origin requests](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cloudfront-enable-ipv6.html#ipv6-origin-requests) in the *Amazon CloudFront Developer Guide*. | September 3, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added:
[AWS::SES::MailManagerAddressList](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ses-mailmanageraddresslist.html)
Use the `AddressLists` resource as the structure representing the address lists and address list attribute that will be used in evaluation of a boolean expression.
[AWS::SES::MailManagerTrafficPolicy IngressIpv6Expression](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-mailmanagertrafficpolicy-ingressipv6expression.html)
Use the `IngressIpv6Expression` resource for the union type representing the allowed types for the left hand side of an IPv6 condition.
[AWS::SES::MailManagerTrafficPolicy IngressIpv6ToEvaluate](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-mailmanagertrafficpolicy-ingressipv6toevaluate.html)
Use the `IngressIpv6ToEvaluate` resource for the structure for an IPv6 based condition matching on the incoming mail.
[AWS::SES::MailManagerTrafficPolicy IngressIsInAddressList](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-mailmanagertrafficpolicy-ingressisinaddresslist.html)
Use the `IngressIsInAddressList` resource for the address lists and the address list attribute value that is evaluated in a policy statement's conditional expression to either deny or block the incoming email. | August 30, 2025 |
| [New properties](aws-template-resource-type-ref.md) | The following properties were added to these resources:
[AWS::SES::MailManagerTrafficPolicy IngressStringToEvaluate.Analysis](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-mailmanagertrafficpolicy-ingressstringtoevaluate.html#cfn-ses-mailmanagertrafficpolicy-ingressstringtoevaluate-analysis)
Use the `Analysis` property for a string condition stating the Add On ARN and its returned value.
[AWS::SES::MailManagerTrafficPolicy IngressBooleanToEvaluate.IsInAddressList](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-mailmanagertrafficpolicy-ingressbooleantoevaluate.html#cfn-ses-mailmanagertrafficpolicy-ingressbooleantoevaluate-isinaddresslist)
Use the `IsInAddressList` property for a boolean condition that provides the address lists to evaluate incoming traffic on.
[AWS::SES::MailManagerTrafficPolicy PolicyCondition.Ipv6Expression](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-mailmanagertrafficpolicy-policycondition.html#cfn-ses-mailmanagertrafficpolicy-policycondition-ipv6expression)
Use the `Ipv6Expression` property for an IPv6 based condition matching on the incoming mail. It performs the operation configured in 'Operator' and evaluates the 'Protocol' object against the 'Value'. | August 30, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::S3Tables::Namespace`, `AWS::S3Tables::Table`, and `AWS::S3Tables::TablePolicy`.
[AWS::S3Tables::Namespace](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-s3tables-namespace.html)
Use the `AWS::S3Tables::Namespace` resource to create a namespace for an Amazon S3 table bucket.
[AWS::S3Tables::Table](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-s3tables-table.html)
Use the `AWS::S3Tables::Table` resource to create a new table associated with the given namespace in an Amazon S3 table bucket.
[AWS::S3Tables::TablePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-s3tables-tablepolicy.html)
Use the `AWS::S3Tables::TablePolicy` resource to create or replace a table policy for an Amazon S3 table bucket. | August 28, 2025 |
| [New property](aws-template-resource-type-ref.md) | The following resources were updated: AWS::ECS::Service.
[AWS::ECS::Service ForceNewDeployment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-service-forcenewdeployment.html)
Use the `ForceNewDeployment` property to force a new deployment of the service. By default, deployments aren't forced. You can use this option to start a new deployment with no service definition changes. For example, you can update a service's tasks to use a newer Docker image with the same image/tag combination or to roll Fargate tasks onto a newer platform version. | August 28, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IVS::Stage
[AWS::IVS::Stage](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-stage.html)
Use the `AutoParticipantRecordingConfiguration` property to specify a configuration for individual participant recording, including configuration information related to generating thumbnail images and the `RecordingReconnectWindowSeconds` property to control when multiple recordings from the same stage publisher session are merged together. | August 22, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoT::EncryptionConfiguration.
[AWS::IoT::EncryptionConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-encryptionconfiguration.html)
Use the AWS::IoT::EncryptionConfiguration resource to retrieve the encryption configuration for resources and data in AWS IoT Core. | August 21, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::KinesisAnalyticsV2::Application
[AWS::KinesisAnalyticsV2::Application ApplicationEncryptionConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-kinesisanalyticsv2-application-applicationencryptionconfiguration.html)
Use this property to specify the configuration for managing the encryption of your application's data at rest. | August 20, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::GuardDuty::ThreatEntitySet` and `AWS::GuardDuty::TrustedEntitySet`
[AWS::GuardDuty::ThreatEntitySet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-guardduty-threatentityset.html)
Use `AWS::GuardDuty::ThreatEntitySet` resource to create a threat entity list that includes known malicious IP address and domains names in your environment.
[AWS::GuardDuty::TrustedEntitySet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-trustedentityset.html)
Use `AWS::GuardDuty::TrustedEntitySet` resource to create a trusted entity list that includes IP address and domains names that you consider secure for communication within your environment. | August 18, 2025 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated:
[ AWS::Logs::Integration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Integration.html)
The AWS::Logs::Integration resource was updated to support creation of an integration between CloudWatch Logs and another service in this account. Currently, only integrations with OpenSearch Service are supported, and currently you can have only one integration in your account. For more information, see [Analyze with Amazon OpenSearch Service](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatchLogs-OpenSearch-Dashboards.html).
[ AWS::Logs::ParseToOCF](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/ParseToOCSF.html)
The AWS::Logs::ParseToOCSF transformer was added to convert logs into [Open Cybersecurity Schema Framework (OCSF)](https://ocsf.io) events. For more information, see [Processors that you can use](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html).
[ AWS::Logs::LogGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/LogGroup.html)
The AWS::Logs::LogGroup resource was updated to include the ResourcePolicyDocument property. For more information, see [Working with log groups and log streams](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/Working-with-log-groups-and-streams.html.html). | August 15, 2025 |
| [Added resource ](aws-template-resource-type-ref.md) | The following resource was added: AWS::APS::ResourcePolicy.
[AWS::APS::ResourcePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-aps-resourcepolicy.html)
The AWS::APS::ResourcePolicy resource was added, and includes the `PolicyDocument`, and `WorkspaceArn` properties.
For more information, see [PutResourcePolicy](https://docs.aws.amazon.com/prometheus/latest/APIReference/API_PutResourcePolicy.html) in the *Amazon Managed Service for Prometheus API Reference*. | August 15, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | Added properties related to asset model interfaces, computation models, and datasets. | August 9, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::PCS::Cluster.
[AWS::PCS::Cluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcs-cluster.html)
Added IPv6 support for AWS PCS clusters. Use the `NetworkType` property to specify `IPV4` or `IPV6` networking for your cluster.
For more information, see [Networking in AWS PCS](https://docs.aws.amazon.com/pcs/latest/userguide/working-with_networking.html) in the *AWS PCS User Guide*. | August 7, 2025 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::NetworkFirewall::Firewall
[AWS::NetworkFirewall::Firewall](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-firewall.html)
Use the `TransitGatewayId` to associate a transit gateway with this firewall. | August 4, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::NetworkFirewall::VpcEndpointAssociation
[AWS::NetworkFirewall::VpcEndpointAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-VpcEndpointAssociation.html)
Use the `AWS::NetworkFirewall::VpcEndpointAssociation` resource to specify a VPC endpoint association to expand the protections of a firewall endpoint. You can define VPC endpoint associations only in the Availability Zones that already have a subnet mapping defined in the Firewall resource. | August 4, 2025 |
| [New resource ](aws-template-resource-type-ref.md) | The following resource was added`AWS::ARCRegionSwitch::Plan`.
[AWS::ARCRegionSwitch::Plan](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-arcregionswitch-plan.html)
Use the `AWS::ARCRegionSwitch::Plan` resource to specify a Region switch plan. | August 1, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::EntityResolution::MatchingWorkflow`.
[AWS::EntityResolution::MatchingWorkflow RuleCondition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-entityresolution-matchingworkflow-rulecondition.html)
Use the `AWS::EntityResolution::MatchingWorkflow RuleCondition` property to specify the name and conditions for a matching rule.
Use the `AWS::EntityResolution::MatchingWorkflow RuleConditionProperties` property to specify the properties of a rule condition that provides the ability to use more complex syntax. | July 31, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::SageMaker::ProcessingJob.
[AWS::SageMaker::ProcessingJob](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-processingjob.html)
Use the `AWS::SageMaker::ProcessingJob` resource to create SageMaker processing jobs for analyzing data and evaluating models. | July 31, 2025 |
| [Added resource](aws-template-resource-type-ref.md) | The following resources were added or updated: `AWS::Batch::ServiceEnvironment` and `AWS::Batch::JobQueue JobQueueType`.The following resources were added or updated: [`AWS::Batch::ServiceEnvironment`. ](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-batch-serviceenvironment.html) Create a service environment. [ AWS::Batch::JobQueue JobQueueType](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-batch-jobqueue.html#cfn-batch-jobqueue-jobqueuetype) Configure the type of job queue. | July 31, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudFront::Distribution
[AWS::CloudFront::Distribution](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-distribution.html)
Added `ResponseCompletionTimeout` for origins.
Added `OriginReadTimeout` support for S3 origins.
For more information, see [Response completion timeout](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#response-completion-timeout) and [Response timeout](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginResponseTimeout) in the *Amazon CloudFront Developer Guide*. | July 30, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::Cassandra::Table`.
[AWS::Cassandra::Table.CdcSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cassandra-table.html)
Use the `AWS::Cassandra::Table.CdcSpecification` property to set tags for a change data capture (CDC) stream for a table. | July 24, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::IoTManagedIntegrations::CredentialLocker`, `AWS::IoTManagedIntegrations::ManagedThing`, and `AWS::IoTManagedIntegrations::ProvisioningProfile`.
[AWS::IoTManagedIntegrations::CredentialLocker](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotmanagedintegrations-credentiallocker.html)
Use the `AWS::IoTManagedIntegrations::CredentialLocker` to create a credential locker.
[AWS::IoTManagedIntegrations::ManagedThing](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotmanagedintegrations-managedthing.html)
Use the `AWS::IoTManagedIntegrations::ManagedThing` to create a managed thing.
[AWS::IoTManagedIntegrations::ProvisioningProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotmanagedintegrations-provisioningprofile.html)
Use the `AWS::IoTManagedIntegrations::ProvisioningProfile` to create a provisioning profile. | July 17, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::GuardDuty::IPSet` and `AWS::GuardDuty::ThreatIntelSet`
[AWS::GuardDuty::IPSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-ipset.html)
Use `ExpectedBucketOwner` property to optionally provide the AWS account ID of the Amazon S3 bucket that owns the list location.
[AWS::GuardDuty::ThreatIntelSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html)
Use `ExpectedBucketOwner` property to optionally provide the AWS account ID of the Amazon S3 bucket that owns the list location. | July 16, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBCluster
[AWS::RDS::DBCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html)
Use the `DeleteAutomatedBackups` property to specify whether to remove automated backups immediately after the DB cluster is deleted. | July 16, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::Billing::BillingView`.Use the [AWS::Billing::BillingView](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-billing-resource.html) resource to create a billing view with specified billing view attributes. | July 16, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Wisdom::QuickResponse.
[AWS::Wisdom::QuickResponse](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wisdom-quickresponse.html)
Use the `AWS::Wisdom::QuickResponse` resource to specify an Amazon Connect Wisdom quick response. | July 15, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::Cassandra::Table`.
[AWS::Cassandra::Table.CdcSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cassandra-table.html)
Use the `AWS::Cassandra::Table.CdcSpecification` property to enable or disable a change data capture (CDC) stream for the table. | July 2, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::ODB::CloudExadataInfrastructure`, `AWS::ODB::OdbNetwork`, `AWS::ODB::CloudAutonomousVmCluster`, and `AWS::ODB::CloudVmCluster`.
[AWS::ODB::CloudExadataInfrastructure](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-odb-cloudexadatainfrastructure.html)
Use the `AWS::ODB::CloudExadataInfrastructure` resource to specify an Exadata infrastructure in the Oracle Database.
[AWS::ODB::OdbNetwork](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-odb-odbnetwork.html)
Use the `AWS::ODB::OdbNetwork` resource to specify an ODB network in the Oracle Database.
[AWS::ODB::CloudAutonomousVmCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-odb-cloudautonomousvmcluster.html)
Use the `AWS::ODB::CloudAutonomousVmCluster` resource to specify an Autonomous VM cluster in the Oracle Database.
[AWS::ODB::CloudVmCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-odb-cloudvmcluster.html)
Use the `AWS::ODB::CloudVmCluster` resource to specify a VM cluster in the Oracle Database | July 2, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following properties were added to the `AWS::DynamoDB::GlobalTable` resource for multi-Region strong consistency (MRSC) support:
[AWS::DynamoDB::GlobalTable MultiRegionConsistency](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dynamodb-globaltable.html#cfn-dynamodb-globaltable-multiregionsconsistency)
Use this property to specify the consistency mode for a new global table. You can configure either multi-Region eventual consistency (MREC) or multi-Region strong consistency (MRSC).
[AWS::DynamoDB::GlobalTable GlobalTableWitnesses](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-globaltable-globaltablewitnesses.html)
Use this property to configure witnesses for MRSC global tables. A witness Region enhances availability for MRSC global tables in a two-replica configuration by providing an additional voting member without storing data.
[AWS::DynamoDB::GlobalTable GlobalTableWitness](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-globaltable-globaltablewitness.html)
Use this property to specify the witness Region for an MRSC global table. The witness must be in a different Region than the replicas and within the same Region set. | June 30, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following property was added: `AWS::Route53Resolver::ResolverRule DelegationRecord`.
[AWS::Route53Resolver::ResolverRule DelegationRecord](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverrule.html#cfn-route53resolver-resolverrule-delegationrecord)
Added a `DelegationRecord` to `ResolverRule` to support an outbound delegation rule. | June 24, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following property was updated: `AWS::Route53Resolver::ResolverEndpoint Direction`.
[AWS::Route53Resolver::ResolverEndpoint Direction](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverendpoint.html#cfn-route53resolver-resolverendpoint-direction)
Added a `INBOUND_DELEGATION` to `ResolverEndpoint Direction` to support inbound delegation. | June 24, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resource was added: `AWS::AWS_AIOps::InvestigationGroup`.
[AWS::AWS\$1AIOps::InvestigationGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-aws_aiops-investigationgroup.html)
Use the `AWS::AWS_AIOps::InvestigationGroup` resource to specify the common properties of your CloudWatch investigations. | June 23, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::MPA::ApprovalTeam` and `AWS::MPA::IdentitySource`.
[AWS::MPA::ApprovalTeam](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mpa-approvalteam.html)
Use the `AWS::MPA::ApprovalTeam` resource to specify ...
[AWS::MPA::IdentitySource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mpa-identitysource.html)
Use the `AWS::MPA::IdentitySource` resource to specify ... | June 17, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AccessAnalyzer::Analyzer
[AWS::AccessAnalyzer::Analyzer](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-accessanalyzer-analyzer.html)
In the property type `AnalyzerConfiguration`, use the property `InternalAccessConfiguration` to specify the configuration of an internal access analyzer for an AWS organization or account.
In the property type `InternalAccessAnalysisRule`, use the property `Inclusions` to specify list of rules for the internal access analyzer containing criteria to include in analysis.
In the property type `InternalAccessAnalysisRuleCriteria`, use the property `AccountIds` to specify a list of AWS account IDs to apply to the internal access analysis rule criteria.
In the property type `InternalAccessAnalysisRuleCriteria`, use the property `ResourceArns` to specify a list of resource ARNs to apply to the internal access analysis rule criteria.
In the property type `InternalAccessAnalysisRuleCriteria`, use the property `ResourceTypes` to specify a list of resource types to apply to the internal access analysis rule criteria.
In the property type `InternalAccessConfiguration`, use the property `InternalAccessAnalysisRule` to specify analysis rules for the internal access analyzer. | June 16, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Amplify::App
[AWS::Amplify::App](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-app.html)
Use the `JobConfig` property to specify the configuration details that apply to the jobs for an Amplify app. | June 13, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::EKS::PodIdentityAssociation`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-podidentityassociation.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-podidentityassociation.html)
Use the `TargetRoleArn` property to set a secondary role that EKS Pod Identity assumes. Only the credentials from the target IAM role are put into the pod. The target role can be from another account, unlike the association role.
Use the `DisableSessionTags` property to enable or disable the session tags that are added by EKS Pod Identity and lower the number of tags to stay under the session size limit.
Use the `ExternalId` return value in an IAM trust policy on the target IAM role to prevent the confused deputy problem. | June 11, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::EVS::Environment`.
[AWS::EVS::Environment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-evs-environment.html)
Use the `AWS::EVS::Environment` resource to specify an Amazon EVS environment. | June 9, 2025 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was added: AWS::MediaTailor::Channel.TimeShiftConfiguration
[AWS::MediaTailor::Channel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediatailor-channel-logconfiguration.html)
Use the `AWS::MediaTailor::Channel.LogConfiguration` resource to specify where logs are sent.
[AWS::MediaTailor::Channel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediatailor-channel-adconditioningconfiguration.html)
Use the `AWS::MediaTailor::Channel.AdConditioningConfiguration` resource to specify the conditioning that the ADS performs on ads. | June 4, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::ApiGateway::DomainName and AWS::ApiGateway::DomainNameV2 | June 3, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::DSQL::Cluster`.
[AWS::DSQL::Cluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dsql-cluster.html)
The AWS::DSQL::Cluster resource now supports the `MultiRegionProperties` property to create and manage multi-Region clusters.
The `MultiRegionProperties` property allows you to specify the witness Region and the clusters that make up the multi-Region cluster. | June 3, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::ApiGatewayV2::RoutingRule`. Use this resource to create routing rules to route traffic from your custom domain names to your APIs. The following resource was updated: `AWS::ApiGatewayV2::DomainName`. | June 3, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following structure was added: AWS::CloudTrail::EventDataStore ContextKeySelector
[AWS::CloudTrail::EventDataStore ContextKeySelector](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-eventdatastore-contextkeyselector.html)
A structure that defines criteria for filtering events based on specific context key values in the event record. | May 29, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EFS::MountTarget
[AWS::EFS::MountTarget](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-mounttarget.html)
Use the `IpAddressType` property to specify the IP address type for the mount target (IPV4\$1ONLY, IPV6\$1ONLY, or DUAL\$1STACK).
Use the `Ipv6Address` property to specify an IPv6 address for the mount target when using IPV6\$1ONLY or DUAL\$1STACK modes. | May 29, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Synthetics::Canary.
[AWS::Synthetics::Canary](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-synthetics-canary.html)
The `EphemeralStorage` parameter was added. You can specify the amount of ephemeral storage (in MB) to allocate for the canary run during execution. | May 28, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudWatch::InsightRule
[AWS::CloudWatch::InsightRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudwatch-insightrule.html)
The AWS::CloudWatch::InsightRule resource can now displays whether the rule is evaluated on the transformed versions of logs, for log groups that have Log transformation enabled. For more information, see [Transform logs during ingestion](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html). | May 25, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::XRay::TransactionSearchConfig`.
[AWS::XRay::TransactionSearchConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-xray-transactionsearchconfig.html)
Use the `AWS::XRay::TransactionSearchConfig` resource to configure the percentage of traces indexed from CloudWatch Logs to X-Ray for transaction search. | May 23, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Synthetics::Canary.
[AWS::Synthetics::Canary](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-synthetics-canary.html)
The `DryRunAndUpdate` parameter was added. You can specify the canary's retry configuration information. | May 19, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::PCS::Cluster.
[AWS::PCS::Cluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcs-cluster.html)
Use the `Accounting` property to enable accounting and set the default purge time for accounting records.
Use the `SlurmCustomSetting` property to set accounting options.
For more information, see [Slurm accounting in AWS PCS](https://docs.aws.amazon.com/pcs/latest/userguide/slurm-accounting.html) in the *AWS PCS User Guide*. | May 15, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::WorkSpaces::WorkspacesPool`
[AWS::WorkSpaces::WorkspacesPool](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspaces-workspacespool.html)
The `RunningMode` property was added to the `AWS::WorkSpaces::WorkspacesPool` resource. | May 15, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::DataZone::DomainUnit`.
[AWS::DataZone::DomainUnit](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-domainunit.html)
Use the `AWS::DataZone::DomainUnit` resource to organize your assets and other domain entities under specific business units and teams. | May 6, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::DataZone::Owner`.
[AWS::DataZone::Owner](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-owner.html)
Use the `AWS::DataZone::Owner` resource to add an owner to an entity. | May 6, 2025 |
| [Updated resource ](aws-template-resource-type-ref.md) | The following resource was updated: AWS::APS::Workspace.
[AWS::APS::Workspace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-aps-workspace.html)
The AWS::APS::Workspace resource was updated to include the `LoggingDestination`, `LoggingFilter`, and `QueryLoggingConfiguration` properties.
For more information, see [Encryption at rest](https://docs.aws.amazon.com/prometheus/latest/userguide/encryption-at-rest-Amazon-Service-Prometheus.html) in the *Amazon Managed Service for Prometheus User Guide*. | May 5, 2025 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::VerifiedPermissions::PolicyStore.
[AWS::VerifiedPermissions::PolicyStore](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-verifiedpermissions-policystore.html)
Use the new `AWS::VerifiedPermissions::PolicyStore.Tags` property to assign tags to your policy store. | May 2, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Kinesis::StreamConsumer
[AWS::Kinesis::StreamConsumer](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kinesis-streamconsumer.html)
Use the `Tag` property to specify up to 50 tag key-value pairs for your Kinesis resources. | April 29, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::SSMGuiConnect::Preferences`
[AWS::SSMGuiConnect::Preferences](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmguiconnect-preferences.html)
Use the `AWS::SSMGuiConnect::Preferences` to specify new or changed connection recording preferences for your AWS Systems Manager GUI Connect connections. | April 29, 2025 |
| [Added refresh token rotation](aws-template-resource-type-ref.md) | Added `RefreshTokenRotation` to user pool app client resource.
[AWS::Cognito::UserPoolClient RefreshTokenRotation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpoolclient-refreshtokenrotation.html)
You can configure your app client to also issue a new refresh token when you submit a token-refresh request for new ID and access tokens. | April 29, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudFront::Distribution
[AWS::CloudFront::Distribution TenantConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-tenantconfig.html)
For more information, see [Understand how multi-tenant distributions work](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html) in the *Amazon CloudFront Developer Guide*. | April 28, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CloudFront::ConnectionGroup
[AWS::CloudFront::ConnectionGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-connectiongroup.html)
Use the `AWS::CloudFront::ConnectionGroup` resource to create an Amazon CloudFront connection group.
For more information, see [Understand how multi-tenant distributions work](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html) in the *Amazon CloudFront Developer Guide*. | April 28, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CloudFront::DistributionTenant
[AWS::CloudFront::DistributionTenant](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-distributiontenant.html)
Use the `AWS::CloudFront::DistributionTenant` resource to create an Amazon CloudFront distribution tenant.
You can create a distribution tenant from your multi-tenant distribution. For more information, see [Understand how multi-tenant distributions work](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html) in the *Amazon CloudFront Developer Guide*. | April 28, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::DSQL::Cluster`.
[AWS::DSQL::Cluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dsql-cluster.html)
Use the AWS::DSQL::Cluster resource to create a cluster in Amazon Aurora DSQL. | April 25, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added:
[AWS::ECR::RegistryScanningConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-registryscanningconfiguration.html)
Use the `AWS::ECR::RegistryScanningConfiguration` property to specify a scanning configuration for your private registry. | April 25, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were added or updated: `AWS::Batch::JobDefinition FirelensConfiguration` and `AWS::Batch::JobDefinition TaskContainerProperties`.The following resources were added or updated: [`AWS::Batch::JobDefinition FirelensConfiguration`. ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-consumableresource.html) Configure Firelens logging. [ AWS::Batch::JobDefinition TaskContainerProperties](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-consumableresourceproperties.html) Configure Firelens logging for a container. | April 15, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added for the IPv6 update: AWS::MemoryDB::Cluster and AWS::MemoryDB::SubnetGroup.SupportedNetworkTypes.
[AWS::MemoryDB::SubnetGroup.SupportedNetworkTypes](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-memorydb-subnetgroup.html)
Use the `SupportedNetworkTypes` resource to list network types for the subnet group.
[AWS::MemoryDB::Cluster.IpDiscovery](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-memorydb-cluster.html#cfn-memorydb-cluster-ipdiscovery)
Use the `IpDiscovery` resource to discover IP addresses for the cluster.
[AWS::MemoryDB::Cluster.NetworkType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-memorydb-cluster.html#cfn-memorydb-cluster-networktype)
Use the `NetworkType` to choose the IP address type for the cluster. | April 10, 2025 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::CleanRooms::AnalysisTemplate`, `AWS::CleanRooms::Collaboration`, `AWS::CleanRooms::Membership`, and `AWS::CleanRooms::ConfiguredTable`.
[AWS::CleanRooms::AnalysisTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-analysistemplate.html)
Use the `AnalysisTemplateArtifacts` property to specify the entry point and additional artifacts for the analysis template.
Use the `SourceMetadata` property to specify the source metadata for the analysis template.
Use the `Schema` property to specify the entire schema object for the analysis template.
In the [Hash](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-analysistemplate-hash.html) property type, use the `Sha256` property to specify the SHA-256 hash value.
In the [S3Location](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-analysistemplate-s3location.html) property type, use the `Bucket` property to specify the bucket name and the `Key` property to specify the object key.
mw
[AWS::CleanRooms::Collaboration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-collaboration.html)
Use the `JobComputePaymentConfig` property to specify payment responsibilities for query and job compute costs.
Use the `PaymentConfiguration` property to specify the compute configuration for the job.
Use the `JobLogStatus` property to enable or disable job logging for the collaboration.
In the [ProtectedJobS3OutputConfigurationInput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-membership-protectedjobs3outputconfigurationinput.html) property type, use the `Bucket` property to specify the S3 bucket for job output and the `KeyPrefix` property to specify the S3 prefix to unload the protected job results.
[AWS::CleanRooms::Membership](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-membership.html)
Use the `MembershipProtectedJobResultConfiguration` property to specify configurations for protected job results.
Use the `MembershipJobComputePaymentConfig` property to specify the payment responsibilities for job compute costs.
Use the `DefaultJobResultConfiguration` property to specify the default job result configuration for the membership.
Use the `JobLogStatus` property to enable or disable job logging for the membership.
[AWS::CleanRooms::ConfiguredTable](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-configuredtable.html)
Use the `SelectedAnalysisMethods` property to specify the selected analysis methods for the configured table. | April 9, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::S3Express::AccessPoint`.
[AWS::S3Express::AccessPoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3express-accesspoint.html)
Use the `AWS::S3Express::AccessPoint` resource to specify access points for directory buckets.
Use the `Scope` property to filter access control to specific prefixes, API operations, or a combination of both for directory buckets.
Use the `VpcConfiguration` property to restrict access to this access point to requests from a specified Virtual Private Cloud (VPC).
Use the `PublicAccessBlockConfiguration` property to specify the public access block configuration for this access point. | April 7, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::ApiGateway::RestApi and AWS::ApiGateway::DomainName | March 31, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::ApiGatewayV2::Api` and `AWS::ApiGatewayV2::DomainName` | March 31, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ApplicationSignals::ServiceLevelObjective RequestBasedSli
[AWS::ApplicationSignals::ServiceLevelObjective](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationsignals-servicelevelobjective-requestbasedsli.html)
Use the `DependencyConfig` property to identify the dependency using the `DependencyKeyAttributes` and `DependencyOperationName`. For more information, see [ Create an SLO](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-ServiceLevelObjectives.html#CloudWatch-ServiceLevelObjectives-Create). | March 28, 2025 |
| [Updated resources](aws-template-resource-type-ref.md) | `AWS::ElastiCache::CacheCluster`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticache-cachecluster-scaleconfig.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticache-cachecluster-scaleconfig.html)
You can configure scaling operations on Memcached clusters.[Scaling clusters for Memcached](https://docs.aws.amazon.com/AmazonElastiCache/latest/dg/Scaling-self-designed.mem-heading.html). | March 27, 2025 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::WAFv2::WebACLAssociation.
[AWS::WAFv2::WebACLAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webaclassociation.html)
The `ResourceArn` property now accepts `AWS` Amplify instance ARNs. | March 26, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Timestream::InfluxDBCluster.
[AWS::Timestream::InfluxDBCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-timestream-influxdbcluster.html)
Use the `AWS::Timestream::InfluxDBCluster` resource to create a new Timestream for InfluxDB cluster. | March 25, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::DataZone::Connection`.
[AWS::DataZone::Connection](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-connection.html)
Use the `AWS::DataZone::Connection` resource to connect your resources (domains, projects, and environments) to external resources and services. | March 20, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::PCS::ComputeNodeGroup.
[AWS::PCS::ComputeNodeGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcs-computenodegroup.html)
The `CustomLaunchTemplate` property of the AWS::PCS::ComputeNodeGroup resource has changed: the `Id` property is now `TemplateId`. This change only applies to the CloudFormation resource. The API data type is unchanged. For more information, see [CustomLaunchTemplate](https://docs.aws.amazon.com/pcs/latest/APIReference/API_CustomLaunchTemplate.html) in the *AWS PCS API Reference*. | March 14, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ApplicationSignals::ServiceLevelObjective RequestBasedSli
[AWS::ApplicationSignals::Discovery](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationsignals-servicelevelobjective-requestbasedsli.html)
The `ExclusionWindow` property to enable you to add time exclusion windows that should be excluded from the SLO performance metrics. For more information, see [ Exclusion Window ](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-ServiceLevelObjectives.html). | March 13, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::ApplicationSignals::Discovery
[ AWS::ApplicationSignals::Discovery ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-applicationsignals-discovery.html)
Use `AWS::ApplicationSignals::Discovery` property to enable your AWS account to use CloudWatch; application signals to create the `AWSServiceRoleForCloudWatchApplicationSignals ` service-linked role. For more information, see [AWS::ApplicationSignals::Discovery ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-applicationsignals-discovery.html). | March 7, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::GameLiftStreams::Application` and `AWS::GameLiftStreams::StreamGroup`.
[AWS::GameLiftStreams::Application](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gameliftstreams-application.html)
Use the `AWS::GameLiftStreams::Application` resource to specify an Amazon GameLift Streams application. An application defines the game that you want to stream and its runtime environment.
[AWS::GameLiftStreams::StreamGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gameliftstreams-streamgroup.html)
Use the `AWS::GameLiftStreams::StreamGroup` resource to specify a stream group. A stream group defines the hardware configuration that will stream your game, the geographical locations where your game can run, and the number of streams that can run simultaneously in each location. | March 6, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were added or updated: `AWS::Batch::ConsumableResource` and `AWS::Batch:JobDefinition`.The following resources were added or updated: [https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-consumableresource.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-consumableresource.html) [ AWS::Batch::JobDefinition ConsumableResourceProperties](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-consumableresourceproperties.html) Contains a list of consumable resources required by a job. [ AWS::Batch::JobDefinition ConsumableResourceRequirement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-consumableresourcerequirement.html) Information about a consumable resource required to run a job. | February 27, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IoTFleetWise::DecoderManifest CanSignal
[AWS::IoTFleetWise::DecoderManifest CanSignal](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotfleetwise-decodermanifest-cansignal.html)
The `AWS::IoTFleetWise::DecoderManifest CanSignal` resource now supports `signalValueType` property to specify the value type of the signal. | February 27, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IoTFleetWise::DecoderManifest ObdSignal
[AWS::IoTFleetWise::DecoderManifest ObdSignal](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotfleetwise-decodermanifest-obdsignal.html)
The `AWS::IoTFleetWise::DecoderManifest ObdSignal` resource now supports `IsSigned` property to specify whether the message is signed and `signalValueType` property to specify the value type of the signal. | February 27, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource were added: AWS::OpenSearchServerless::SecurityConfig.IamIdentityCenterOptions.ApplicationArn, AWS::OpenSearchServerless::SecurityConfig.IamIdentityCenterOptions.ApplicationDescription, AWS::OpenSearchServerless::SecurityConfig.IamIdentityCenterOptions.ApplicationName SecurityConfig.IamIdentityCenterConfigOptions.ApplicationName, SecurityConfig.IamIdentityCenterConfigOptions.GroupAttribute .
[AWS::OpenSearchServerless::SecurityConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchserverless-securityconfig.html)
Use the `AWS::OpenSearchServerless::LifecyclePolicy` resource to create lifecycle access policies for Amazon OpenSearch Serverless. | February 25, 2025 |
| [New resource and updated resources](aws-template-resource-type-ref.md) | The following resource was added: AWS::QuickSight::ActionConnector. The following resources were updated: AWS::QuickSight::Topic, AWS::QuickSight::DataSource, AWS::QuickSight::Dashboard, AWS::QuickSight::DataSet.
[ AWS::QuickSight::ActionConnector](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-quicksight-actionconnector.html)
Use the `AWS::QuickSight::ActionConnector` resource to create an action connector in Amazon Quick.
[ AWS::QuickSight::Topic](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-quicksight-topic.html)
The `AWS::QuickSight::Topic` resource was updated to add the `Tags` and `CustomInstructions` properties.
[ AWS::QuickSight::DataSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-quicksight-datasource.html)
The `AWS::QuickSight::DataSource` resource was updated to add the `KeyPairCredentials`, `AthenaParameters.IdentityCenterConfiguration`, and `OracleParameters.UseServiceName` properties.
[ AWS::QuickSight::Dashboard](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-quicksight-dashboard.html)
The `AWS::QuickSight::Dashboard` resource was updated to add the `DataQAEnabledOption`, grid layout styling, free-form layout styling, and `AssetOptions` properties.
[ AWS::QuickSight::DataSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-quicksight-dataset.html)
The `AWS::QuickSight::DataSet` resource was updated to add data prep operations, transform steps, filter conditions, aggregation functions, and semantic model configuration properties. | February 20, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::GuardDuty::PublishingDestination`
[AWS::GuardDuty::PublishingDestination](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-publishingdestination.html)
Use `AWS::GuardDuty::PublishingDestination` resource to create a publishing destination where you can export your GuardDuty findings. | February 20, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::WorkSpacesWeb::UserSettings`.
[AWS::WorkSpacesWeb::UserSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-usersettings.html)
Use the `ToolbarConfiguration` property to specify the configuration of the toolbar. This allows administrators to select the toolbar type and visual mode, set maximum display resolution for sessions, and choose which items are visible to end users during their sessions. | February 17, 2025 |
| [Rebrand update](aws-template-resource-type-ref.md) | AWS Chatbot is now Amazon Q Developer. Mentions of the name AWS Chatbot still appear in this guide.[Learn more](https://docs.aws.amazon.com//chatbot/latest/adminguide/service-rename.html) | February 17, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::DataSync::LocationSMB`.
[AWS::DataSync::LocationSMB](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationsmb.html)
DataSync can now use Kerberos authentication when connecting to Server Message Block (SMB) file servers. | February 12, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IVS::Channel
[AWS::IVS::Channel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-channel.html)
Use the `MultitrackInputConfiguration` property to specify a multitrack input configuration for a channel. | February 12, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS ::Transfer::WebApp.
[AWS ::Transfer::WebApp ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-webapp.html)
Use the `WebApp` resource to create a AWS Transfer Family web app. | February 6, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudFront::Distribution
[AWS::CloudFront::Distribution](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-distribution.html)
Use the [VpcOriginConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-vpcoriginconfig.html) to specify the VPC origin for your distribution. | February 3, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CloudFront::VpcOrigin
[AWS::CloudFront::VpcOrigin](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-vpcorigin.html)
Use the `AWS::CloudFront::VpcOrigin` resource to create an Amazon CloudFront VPC origin.
For more information, see [Restrict access with VPC origins](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-vpc-origins.html) in the *Amazon CloudFront Developer Guide*. | February 3, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ACMPCA::CertificateAuthority.
[CrlType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-acmpca-certificateauthority-crlconfiguration.html#cfn-acmpca-certificateauthority-crlconfiguration-crltype)
Use the `CrlType` to configure either a complete or partitioned certificate revocation list (CRL).
[CustomPath](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-acmpca-certificateauthority-crlconfiguration.html#cfn-acmpca-certificateauthority-crlconfiguration-custompath)
Use the `CustomPath` to set a custom S3 path for your CRL destination. | January 31, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::Batch:JobDefinition`.The following resources were added or updated: [ AWS::Batch::JobDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobdefinition.html) [ AWS::Batch::JobDefinition EksContainerVolumeMount](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-ekscontainervolumemount.html) Use the `SubPath` property to specify a sub-path inside the referenced volume instead of its root. [ AWS::Batch::JobDefinition EksVolume](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-eksvolume.html) Use the `PersistentVolumeClaim` property to specify the configuration of a Kubernetes `persistentVolumeClaim` bounded to a `persistentVolume`. [ AWS::Batch::JobDefinition EksMetadata](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-eksmetadata.html) Use the `Annotations` property to specify key-value pairs used to attach arbitrary, non-identifying metadata to Kubernetes objects. Use the `Namespace` property to specify the namespace of the Amazon EKS cluster. | January 29, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::QBusiness::WebExperience`.
[AWS::QBusiness::WebExperience](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-webexperience.html)
Use the `BrowserExtensionConfiguration` property to configure the browser extension for your Amazon Q Business application environment. | January 28, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::SNS::Topic.FifoThroughputScope.
[FifoThroughputScope](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sns-topic.html#cfn-sns-topic-fifothroughputscope)
The `FifoThroughputScope` specifies the throughput quota and deduplication behavior to apply for the FIFO topic. Valid values are `Topic` or `MessageGroup`. | January 21, 2025 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Connect::ContactFlowVersion
[AWS::Connect::ContactFlowVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-contactflowversion.html)
Use the `AWS::Connect::ContactFlowVersion` resource to configure a ContactFlowVersion in the specified instance. | January 17, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added:
AWS::Notifications::ChannelAssociation
Use the `AWS::Notifications::ChannelAssociation` resource to specify a Channel Association for AWS User Notifications.
AWS::Notifications::EventRule
Use the `AWS::Notifications::EventRule` resource to specify an `EventRule` for AWS User Notifications.
AWS::Notifications::ManagedNotificationAccountContactAssociation
Use the `AWS::Notifications::ManagedNotificationAccountContactAssociation` resource to specify an `ManagedNotificationAccountContactAssociation` for AWS User Notifications.
AWS::Notifications::ManagedNotificationAdditionalChannelAssociation
Use the `AWS::Notifications::ManagedNotificationAdditionalChannelAssociation` resource to specify an `ManagedNotificationAdditionalChannelAssociation` for AWS User Notifications.
AWS::Notifications::NotificationConfiguration
Use the `AWS::Notifications::NotificationConfiguration` resource to specify a `NotificationConfiguration` for AWS User Notifications.
AWS::Notifications::NotificationHub
Use the `AWS::Notifications::NotificationHub` resource to specify a `NotificationHub` for AWS User Notifications. | January 15, 2025 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FMS::Policy.
[AWS::FMS::Policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fms-policy.html)
The `AWS::FMS::Policy` resource now lets you combine multiple resource tags using the logical AND operator or the logical OR operator. | January 10, 2025 |
| [New resources](aws-template-resource-type-ref.md) | The following resource was added: `AWS::NotificationsContacts::EmailContact`.
AWS::NotificationsContacts::EmailContact
Use the `AWS::NotificationsContacts::EmailContact` resource to specify a contact for AWS User Notifications. | January 8, 2025 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ImageBuilder::InfrastructureConfiguration
[AWS::ImageBuilder::InfrastructureConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html)
Use the `Placement` property to configure the physical hardware where instances that Image Builder launches during image creation will run. | January 3, 2025 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::CleanRooms::Collaboration` and `AWS::CleanRooms::Membership`.
[AWS::CleanRooms::Collaboration MLMemberAbilities](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-collaboration-mlmemberabilities.html)
Use the `MLMemberAbilities` property to specify the ML member abilities for a collaboration member.
[AWS::CleanRooms::Collaboration MLPaymentConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-collaboration-mlpaymentconfig.html)
Use the `MLPaymentConfig` property to specify the collaboration member's machine learning payment responsibilities set by the collaboration creator.
[AWS::CleanRooms::Collaboration ModelInferencePaymentConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-collaboration-modelinferencepaymentconfig.html)
Use the `ModelInferencePaymentConfig` property to specify the collaboration member's model inference payment responsibilities set by the collaboration creator.
[AWS::CleanRooms::Collaboration ModelTrainingPaymentConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-collaboration-modeltrainingpaymentconfig.html)
Use the `ModelTrainingPaymentConfig` property to specify the collaboration member's model training payment responsibilities set by the collaboration creator.
[AWS::CleanRooms::Membership MembershipMLPaymentConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-membership-membershipmlpaymentconfig.html)
Use the `MembershipMLPaymentConfig` property to specify the collaboration member's machine learning payment responsibilities set by the collaboration creator.
[AWS::CleanRooms::Membership MembershipModelInferencePaymentConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-membership-membershipmodelinferencepaymentconfig.html)
Use the `MembershipModelInferencePaymentConfig` property to specify the collaboration member's model inference payment responsibilities set by the collaboration creator.
[AWS::CleanRooms::Membership MembershipModelTrainingPaymentConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-membership-membershipmodeltrainingpaymentconfig.html)
Use the `MembershipModelTrainingPaymentConfig` property to specify the collaboration member's model training payment responsibilities set by the collaboration creator.
[AWS::CleanRooms::Membership MembershipPaymentConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-membership-membershippaymentconfiguration.html)
Use the `MachineLearning` property in the `MembershipPaymentConfiguration` to specify the payment responsibilities accepted by the collaboration member for machine learning costs. | December 30, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudFront::Distribution
[AWS::CloudFront::Distribution](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-distribution.html)
Use the [AnycastIpListId](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-distributionconfig.html#cfn-cloudfront-distribution-distributionconfig-anycastiplistid) to associate your Anycast IP list with your distribution. | December 26, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CloudFront::AnycastIpList
[AWS::CloudFront::AnycastIpList](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-anycastiplist.html)
Use the `AWS::CloudFront::AnycastIpList` resource to update an Anycast static IP list.
For more information, see [Request Anycast static IPs to use for allowlisting](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/request-static-ips.html) in the *Amazon CloudFront Developer Guide*. | December 26, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::QuickSight::CustomPermissions.
[ AWS::QuickSight::CustomPermissions](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-quicksight-custompermissions.html)
Use the `AWS::QuickSight::CustomPermissions` resource to set up custom permissions in Amazon Quick. | December 20, 2024 |
| [New property](aws-template-resource-type-ref.md) | The following resources were updated: AWS::ECS::TaskDefinition.
[AWS::ECS::TaskDefinition EnableFaultInjection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-enableFaultInjection.html)
Use the `EnableFaultInjection` property to enable fault injection and allow for fault injection requests to be accepted from the task's containers. | December 19, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::PCS::Cluster, AWS::PCS::ComputeNodeGroup, and AWS::PCS::Queue
[AWS::PCS::Cluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcs-cluster.html)
Use the `AWS::PCS::Cluster` resource to create an AWS PCS cluster. For more information, see [ Get started with CloudFormation and AWS PCS](https://docs.aws.amazon.com/pcs/latest/userguide/get-started-cfn.html) in the *AWS PCS User Guide*.
[AWS::PCS::ComputeNodeGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcs-computenodegroup.html)
Use the `AWS::PCS::ComputeNodeGroup` resource to create an AWS PCS compute node group. For more information, see [ Get started with CloudFormation and AWS PCS](https://docs.aws.amazon.com/pcs/latest/userguide/get-started-cfn.html) in the *AWS PCS User Guide*.
[AWS::PCS::Queue](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcs-queue.html)
Use the `AWS::PCS::Queue` resource to create an AWS PCS queue. For more information, see [ Get started with CloudFormation and AWS PCS](https://docs.aws.amazon.com/pcs/latest/userguide/get-started-cfn.html) in the *AWS PCS User Guide*. | December 18, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::Cassandra::Keyspace`.
[AWS::Cassandra::Keyspace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cassandra-keyspace.html)
You can now add a new Region to an existing single or multi-Region keyspace using `AWS::Cassandra::Keyspace`. | December 17, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following new resource was added: `AWS::Cassandra::Type`.
[AWS::Cassandra::Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cassandra-type.html)
Use the `AWS::Cassandra::Type` resource to create a new user-defined type in Amazon Keyspaces (for Apache Cassandra). | December 17, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::CloudFront::Distribution`
[AWS::CloudFront::Distribution](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-distribution.html)
Use the [GrpcConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-grpcconfig.html) to enable your distribution to handle gRPC requests. | December 13, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::CloudFront::Distribution`
[AWS::CloudFront::Distribution](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-distribution.html)
Use the [OriginGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-origingroup.html) to specify the `SelectionCriteria` for your primary and secondary origins. | December 13, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::ServiceDiscovery::Service`
[AWS::ServiceDiscovery::Service](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicediscovery-service.html)
Use the `ServiceAttributes` property to specify custom metadata for an AWS Cloud Map service. | December 13, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::EKS::Nodegroup`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-nodegroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-nodegroup.html)
Use the `NodeRepairConfig.Enabled` property to enable or disable node auto repair. | December 13, 2024 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::S3Express::DirectoryBucket
[AWS::S3Express::DirectoryBucket](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3express-directorybucket.html)
Amazon S3 introduces support for AWS Dedicated Local Zones. | December 12, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::QBusiness::DataAccessor` and `AWS::QBusiness::Permissions`.
[ AWS::QBusiness::DataAccessor](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-dataaccessor.html)
Use the `AWS::QBusiness::DataAccessor` resource to create an Amazon Q Business data accessor. For more information, see [Data Accessors](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/data-accessors.html).
[ AWS::QBusiness::Permission](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-permission.html)
Use the `AWS::QBusiness::Permission` resource to grant a data accessor access to your Amazon Q index. For more information, see [Granting a data accessor (ISV) permission to connect to your Amazon Q index](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/data-accessors-granting-permissions.html). | December 12, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::S3Tables::TableBucket` and `AWS::S3Tables::TableBucketPolicy`.
[AWS::S3Tables::TableBucket](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3tables-tablebucket.html)
Use the `AWS::S3Tables::TableBucket` resource to create an Amazon S3 table bucket.
[AWS::S3Tables::TableBucketPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3tables-tablebucketpolicy.html)
Use the `AWS::S3Tables::TableBucketPolicy` resource to create a new maintenance configuration or replace an existing table bucket policy for an Amazon S3 table bucket. | December 12, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Connect::EmailAddress
[AWS::Connect::EmailAddress](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-emailaddress.html)
Use the `AWS::Connect::EmailAddress` resource to configure an EmailAddress in the specified instance. | December 11, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EFS::FileSystem
[AWS::EFS::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-filesystem.html)
Use the `ReplicationOverwriteProtection` property for the new `FileSystemProtection` property type to enable or disable a file system's replication overwrite protection.
FileSystem.ReplicationDestination.Status ReplicationConfiguration.Destinations.\$1.Status ReplicationConfiguration.Destinations.\$1.StatusMessage ReplicationDestination.RoleArn ReplicationDestination.StatusMessage | December 9, 2024 |
| [Added support for user pool feature plans](aws-template-resource-type-ref.md) | Added `UserPoolTier` to user pool resource.
[AWS::Cognito::UserPool UserPoolTier](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpool.html#cfn-cognito-userpool-userpooltier)
You can choose the Plus, Lite, or Essentials feature plan for user pools and get different levels of pricing and features. | December 9, 2024 |
| [Added support for managed login branding in user pools](aws-template-resource-type-ref.md) | Added `ManagedLoginBranding` to user pool domain resource.
[AWS::Cognito::UserPoolDomain ManagedLoginVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpooldomain.html#cfn-cognito-userpooldomain-managedloginversion)
You can set a user pool domain to version `2` for managed login branding or version `1` for hosted UI (classic) branding. | December 9, 2024 |
| [Added support for choice-based authentication in user pools](aws-template-resource-type-ref.md) | Added `USER_AUTH` to `ExplicitAuthFlows` in user pool app client resource.
[AWS::Cognito::UserPoolClient ExplicitAuthFlows](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpoolclient.html#cfn-cognito-userpoolclient-explicitauthflows)
App client configurations now support choice-based authentication for passkey authenticators, passwordless OTPs, and password-based sign-in. | December 9, 2024 |
| [Added support for choice-based authentication in user pool app clients](aws-template-resource-type-ref.md) | Added `SignInPolicy` to `Policies` in user pool resource.
[AWS::Cognito::UserPool Policies SignInPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-policies.html#cfn-cognito-userpool-policies-signinpolicy)
User pool configurations now support choice-based authentication for passkey authenticators, passwordless OTPs, and password-based sign-in. | December 9, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::CleanRooms::ConfiguredTable`.
[AWS::CleanRooms::ConfiguredTable](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-configuredtable.html)
Use the `TableReference` to specify the configuration for the dataset that underlies the table. | December 1, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::EKS::Cluster`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html)
Use the `RemoteNetworkConfig` property to enable Amazon EKS Hybrid Nodes for the cluster. You can't change or update this configuration after the cluster is created.
You provide the network CIDR blocks for your on-premises (remote) networks that the nodes run in, and optionally the CIDR blocks for the pods that you plan to run Kubernetes webhooks on. | December 1, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::EKS::Cluster`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html)
Use the `ComputeConfig`, `StorageConfig`, and extended `KubernetesNetworkConfig` property to enable EKS Auto Mode for the cluster.
You must enable all three `ComputeConfig`, `StorageConfig`, and extended `KubernetesNetworkConfig.ElasticLoadBalancing` at the same type to enable EKS Auto Mode. | December 1, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added for Synchronaa AKA multi-Region update: AWS::MemoryDB::MultiRegionCluster
[AWS::MemoryDB::MultiRegionCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-memorydb-multiregioncluster.html)
Use the `MultiRegionCluster` resource to specify a MemoryDB Multi-Region cluster. | December 1, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::Wisdom::AIGuardrail` and `AWS::Wisdom::AIGuardrailVersion`
[AWS::Wisdom::AIGuardrail](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wisdom-aiguardrail.html)
Use the `AWS::Wisdom::AIGuardrail` resource to specify an Amazon Connect Wisdom guardrail.
[AWS::Wisdom::AIGuardrailVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wisdom-aiguardrailversion.html)
Use the `AWS::Wisdom::AIGuardrailVersion` resource to specify an Amazon Connect Wisdom guardrail version. | December 1, 2024 |
| [New resourcee](aws-template-resource-type-ref.md) | The following resource was added: `AWS::Invoicing::InvoiceUnit`.
[AWS::Invoicing::InvoiceUnit](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_Invoicing.html)
Use the `AWS::Invoicing::InvoiceUnit` resource to separate account costs and configure your invoice for each business entity. | December 1, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CustomerProfiles::EventTrigger.
[AWS::CustomerProfiles::EventTrigger](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-customerprofiles-eventtrigger.html)
Use the `AWS::CustomerProfiles::EventTrigger` resource to create a new event trigger in the Amazon Connect Customer Profiles Service. | December 1, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IoT::DomainConfiguration.
[AWS::IoT::DomainConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-domainconfiguration.html)
The AWS::IoT::DomainConfiguration resource adds two new parameters: `OcspAuthorizedResponderArn` and `OcspLambdaArn` parameters. | November 25, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AutoScaling::ScalingPolicy.
[AWS::AutoScaling::ScalingPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-scalingpolicy.html)
Use the `CustomizedMetricSpecification` property to specify a period for a target tracking policy. | November 22, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::WorkSpacesWeb::Portal`.
[AWS::WorkSpacesWeb::Portal](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-portal.html)
Use the `DataProtectionSettingsArn` property to specify the ARN of the data protection settings. | November 22, 2024 |
| [New resource added and properties updated](aws-template-resource-type-ref.md) | The following resource and properties were updated: AWS::Chatbot::CustomAction AWS::Chatbot::SlackChannelConfiguration AWS::Chatbot::MicrosoftTeamsChannelConfiguration
[AWS::Chatbot::CustomAction](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-chatbot-customaction.html)
Use the `AWS::Chatbot::CustomAction` resource to configure a custom action with Amazon Q Developer.
[AWS::Chatbot::SlackChannelConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-chatbot-slackchannelconfiguration.html)
Use the `CustomizationResourceArns` property to link a of list resource ARNs (for example, custom actions) with a Slack channel configuration for Amazon Q Developer.
[AWS::Chatbot::MicrosoftTeamsChannelConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-chatbot-microsoftteamschannelconfiguration.html.html)
Use the `CustomizationResourceArns` property to link a list resource ARNs (for example, custom actions) with a Microsoft Teams channel configuration for Amazon Q Developer. | November 22, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following new resource was added: AWS::CloudTrail::Dashboard
[AWS::CloudTrail::Dashboard](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-dashboard.html)
Use the `Dashboard` resource to specify a CloudTrail Lake custom dashboard. A custom dashboard can have up to 10 widgets. For more information, see [CloudTrail Lake dashboards](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/lake-dashboard.html) in the *AWS CloudTrail User Guide*. | November 22, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::ResourceGroups::TagSyncTask
[AWS::ResourceGroups::TagSyncTask](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-resourcegroups-group.html)
Use the `AWS::ResourceGroups::TagSyncTask` resource to onboard and sync resources tagged with a specific tag key-value pair to an application. | November 22, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::WorkSpacesWeb::DataProtectionSettings`.
[AWS::WorkSpacesWeb::DataProtectionSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-dataprotectionsettings.html)
Use the `AWS::WorkSpacesWeb::DataProtectionSettings` resource to specify data protection settings that can be associated with a web portal. | November 22, 2024 |
| [Updated resources](aws-template-resource-type-ref.md) | `AWS::ElastiCache::ServerlessCache`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-replicationgroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-replicationgroup.html)
User engines can now be either valkey or redis.[Parameter Groups](https://docs.aws.amazon.com/AmazonElastiCache/latest/dg/ParameterGroups.Engine.html).
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-replicationgroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-replicationgroup.html)
User engines can now be either valkey or redis. For more information see [Parameter Groups](https://docs.aws.amazon.com/AmazonElastiCache/latest/dg/ParameterGroups.Engine.html). | November 21, 2024 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::S3Express::DirectoryBucket
[AWS::S3Express::DirectoryBucket AbortIncompleteMultipartUpload](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3express-directorybucket-abortincompletemultipartupload.html)
Specifies the days since the initiation of an incomplete multipart upload that Amazon S3 will wait before permanently removing all parts of the upload.
[AWS::S3Express::DirectoryBucket LifecycleConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3express-directorybucket-lifecycleconfiguration.html)
Container for lifecycle rules. You can add as many as 1000 rules.
[AWS::S3Express::DirectoryBucket Rule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3express-directorybucket-rule.html)
Specifies lifecycle rules for an Amazon S3 bucket. | November 21, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ApplicationAutoScaling::ScalingPolicy.
[AWS::ApplicationAutoScaling::ScalingPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationautoscaling-scalingpolicy-customizedmetricspecification.html)
Use the `PredictiveScalingConfiguration` property to specify a predictive scaling policy configuration for an application. | November 21, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IoT::ThingType.
[AWS::IoT::ThingType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-thingtype.html)
The AWS::IoT::ThingType resource adds two new parameters: `Mqtt5Configuration`, `ApplicationProtocol`, and `PropagatingAttribute` parameters. | November 21, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::ApiGateway::BasePathMappingV2, AWS::ApiGateway::DomainNameV2, and AWS::ApiGateway::DomainNameAccessAssociation. Use these resources to create a private custom domain name and allow other accounts to invoke it. | November 21, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IVS::IngestConfiguration
[AWS::IVS::IngestConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-ingestconfiguration.html)
Use the `IngestConfiguration` resource to specify an ingest protocol for a stage. | November 21, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::GlobalCluster
[AWS::RDS::GlobalCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-globalcluster.html)
Use the `GlobalEndpoint` property to specify the writer endpoint for a global database cluster. | November 20, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following property was updated: `AWS::Route53Resolver::ResolverRule TargetAddress`.
[AWS::Route53Resolver::FirewallRuleGroup FirewallRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-firewallrulegroup-firewallrule.html)
Added a `DnsThreatProtection` and `ConfidenceThreshold`properties to `FirewallRule` to indicate the desired DNS Firewall Advanced protection and it's confidence level. | November 20, 2024 |
| [New property](aws-template-resource-type-ref.md) | The following property was added: AWS::ECS::Service AvailabilityZoneRebalancing
[AWS::ECS::Service AvailabilityZoneRebalancing](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-service.html#aws-resource-ecs-service-properties.html)
Use the `AvailabilityZoneRebalancing` property to enable Availability Zone service rebalancing for your service. | November 20, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::MWAA::Environment
[AirflowVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-airflowversion)
The `EnvironmentClass` property has been updated to include a new valid value: mw1.micro. | November 19, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::CloudFormation::GuardHook` and `AWS::CloudFormation::LambdaHook`.
[AWS::CloudFormation::GuardHook](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-guardhook.html)
Use the `AWS::CloudFormation::GuardHook` resource to create and activate Hooks that check if your resources follow rules that are created using AWS CloudFormation Guard.
[AWS::CloudFormation::LambdaHook](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-lambdahook.html)
Use the `AWS::CloudFormation::LambdaHook` resource to create and activate Hooks that forward requests for resource evaluation to an AWS Lambda function. | November 19, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoTFleetWise::StateTemplate
[AWS::IoTFleetWise::StateTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotfleetwise-statetemplate.html)
Use the `AWS::IoTFleetWise::StateTemplate` resource to track the state of your vehicles. State templates determine which signal updates the vehicle sends to the cloud. | November 19, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoTFleetWise::Campaign MqttTopicConfig
[AWS::IoTFleetWise::Campaign MqttTopicConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iotfleetwise-campaign-mqtttopicconfig.html)
Use the `AWS::IoTFleetWise::Campaign MqttTopicConfig` resource to route data collected during a campaign to an MQTT topic. | November 19, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AutoScaling::AutoScalingGroup.
[AWS::AutoScaling::AutoScalingGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-autoscalinggroup.html)
Use the `AvailabilityZoneImpairmentPolicy` property to specify `ImpairedZoneHealthCheckBehavior` for zonal shift. | November 18, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::Wisdom::MessageTemplate` and `AWS::Wisdom::MessageTemplateVersion`
[AWS::Wisdom::MessageTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wisdom-messagetemplate.html)
Use the `AWS::Wisdom::MessageTemplate` resource to specify an Amazon Connect Wisdom message template.
[AWS::Wisdom::MessageTemplateVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wisdom-messagetemplateversion.html)
Use the `AWS::Wisdom::MessageTemplate` resource to specify an Amazon Connect Wisdom message template version. | November 18, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CustomerProfiles::SegmentDefinition.
[AWS::CustomerProfiles::SegmentDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-customerprofiles-segmentdefinition.html)
Use the `AWS::CustomerProfiles::SegmentDefinition` resource to create a new segment definition in the Amazon Connect Customer Profiles Service. | November 18, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::ConnectCampaignsV2::Campaign
[AWS::ConnectCampaignsV2::Campaign](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_ConnectCampaignsV2.html)
Use the `AWS::ConnectCampaignsV2::Campaign` resource to create a high-volume outbound campaign. | November 18, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::RBin::Rule`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rbin-rule.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rbin-rule.html)
Use the `AWS::RBin::Rule` resource to specify a recycle bin retention rule. | November 18, 2024 |
| [New property](aws-template-resource-type-ref.md) | The following property was added: AWS::ECS::TaskDefinition VpcLatticeConfiguration
[AWS::ECS::TaskDefinition VpcLatticeConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-vpcLatticeConfiguration.html)
Use the `VpcLatticeConfiguration` property to enable VPC Lattice configuration for your service. This configuration holds the information for the target group(s) to which Amazon ECS tasks will be registered. | November 18, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ApplicationSignals::ServiceLevelObjective RequestBasedSli
[AWS::ApplicationSignals::ServiceLevelObjective](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationsignals-servicelevelobjective-requestbasedsli.html)
The `BurnRateConfiguration` property to enable you to create burn rate metric configurations for your SLOs. For more information, see [ Calculate burn rates](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-ServiceLevelObjectives.html#CloudWatch-ServiceLevelObjectives-burn). | November 15, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated:
[AWS::Deadline::Fleet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-deadline-fleet.html)
+ Use the `AcceleratorCapabilities` property to specify the number and type of GPU accelerators required for your fleet.
+ Use the `AcceleratorSelection` property to specify a specific GPU accelerator required for an Amazon EC2 worker host. | November 14, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AccessAnalyzer::Analyzer
[AWS::AccessAnalyzer::Analyzer](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-accessanalyzer-analyzer.html)
In the property type `AnalysisRule`, use the property `Exclusions` to specify a list of rules for the analyzer to exclude resources from analysis.
In the property type `AnalysisRuleCriteria`, use the property `AccountIds` to specify a list of AWS account IDs to apply to the analysis rule criteria.
In the property type `AnalysisRuleCriteria`, use the property `ResourceTags` to specify an array of key-value pairs to apply to the analysis rule criteria.
In the property type `UnusedAccessConfiguration`, use the property `AnalysisRule` to specify analysis rules for the analyzer. | November 14, 2024 |
| [Updated Resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::SecretsManager::RotationSchedule HostedRotationLambda`
[https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_available-rotation-templates.html](https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_available-rotation-templates.html)
Use `Transform: AWS::SecretsManager-2024-09-16` to enable AWS vended security updates, bug fixes, and runtime upgrades. | November 14, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following properties were added to the `AWS::DynamoDB::GlobalTable` resource and the `AWS::DynamoDB::Table` resource:
[AWS::DynamoDB::GlobalTable ReadOnDemandThroughputSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-globaltable-readondemandthroughputsettings.html)
Use this property to set the read request settings for a replica table or a replica global secondary index if the `BillingMode` is `PAY_PER_REQUEST`.
[AWS::DynamoDB::GlobalTable WriteOnDemandThroughputSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-globaltable-writeondemandthroughputsettings.html)
Use this property to set the write request settings for a global table or a global secondary index if the `BillingMode` is `PAY_PER_REQUEST`. | November 8, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AutoScaling::AutoScalingGroup.
[AWS::AutoScaling::AutoScalingGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-autoscalinggroup.html)
Use the `AvailabilityZoneDistribution` property to specify `balanced-only` or `balanced-best-effort`. | November 8, 2024 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::CleanRooms::AnalysisTemplate`, `AWS::CleanRooms::Collaboration`, and `AWS::CleanRooms::Membership`.
[AWS::CleanRooms::AnalysisTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-analysistemplate-analysisparameter.html)
Use the `Type` property in the `AnalysisParameter` to specify the type of parameter.
[AWS::CleanRooms::Collaboration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-collaboration.html)
Use the `AnalyticsEngine` property to specify the analytics engine for the collaboration.
[AWS::CleanRooms::Membership](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cleanrooms-membership-protectedquerys3outputconfiguration.html)
Use the `SingleFileOutput` property to indicate whether files should be output as a single file (`TRUE`) or output as multiple files (`FALSE`). This parameter is only supported for analyses with the Spark analytics engine. | November 7, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::AppSync::Api
[AWS::AppSync::Api](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-api.html)
Use the `AWS::AppSync::Api` resource to create an AWS AppSync API that you can use for an AWS AppSync API with your preferred configuration,. The following resources were added: AWS::AppSync::ChannelNamespace
[AWS::AppSync::ChannelNamespace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsyc-channelnamespace.html)
Use the `AWS::AppSync::ChannelNamespace` resource to creates a channel namespace associated with an `Api`. | November 4, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::DataSync::Task`.
[AWS::DataSync::Task](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-task.html)
Use the `TaskMode` property to specify Enhanced or Basic mode for your transfer task. | November 1, 2024 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::NetworkFirewall::FirewallPolicy
[AWS::NetworkFirewall::FirewallPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-firewallpolicy.html)
Use the `FlowTimeouts` property to specify a TCP idle timeout. | October 30, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resources was added: `AWS::DMS::DataMigration`.
[AWS::DMS::DataMigration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dms-datamigration.html)
Use the `AWS::DMS::DataMigration` resource to create and manage data migrations. | October 28, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Backup::LogicallyAirGappedBackupVault
[AWS::Backup::LogicallyAirGappedBackupVault](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-backup-logicallyairgappedbackupvault.html)
This resource was added for the feature Logically air-gapped vault. | October 24, 2024 |
| [Added support for CloudFormation tag operations](aws-template-resource-type-ref.md) | Amazon GuardDuty now supports updating tag key and value, and stack-level tags. To do this, add `guardduty:tagResource` permission to the IAM role. | October 24, 2024 |
| [Added support for email MFA](aws-template-resource-type-ref.md) | Added `EMAIL_OTP` to `EnabledMfas` in user pool resource.
[AWS::Cognito::UserPool EnabledMfas](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpool.html#cfn-cognito-userpool-enabledmfas)
You can request or require email MFA in user pools. You must have an `EmailSendingAccount` of `DEVELOPER`. | October 15, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following property was updated: `AWS::Route53Resolver::ResolverRule TargetAddress`.
[AWS::Route53Resolver::ResolverRule ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-resolverrule-targetaddress.html)
Added a `ServerNameIndication` property to `TargetAddress` to indicate a Server Name of the DoH server that you want to forward queries to. | October 14, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IoT::DomainConfiguration.
[AWS::IoT::DomainConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-domainconfiguration.html)
The AWS::IoT::DomainConfiguration resource adds three new parameters: `ClientCertificateConfig`, `ApplicationProtocol`, and `AuthenticationType` parameters. | October 4, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::Wisdom::AIAgent, AWS::Wisdom::AIPrompt, AWS::Wisdom::AIAgentVersion, and AWS::Wisdom::AIPromptVersion.
[AWS::Wisdom::AIAgent](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wisdom-aiagent.html)
Use the `AWS::Wisdom::AIAgent` resource to specify an Amazon Connect Wisdom AI agent.
[AWS::Wisdom::AIPrompt](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wisdom-aiprompt.html)
Use the `AWS::Wisdom::AIPrompt` resource to specify an Amazon Connect Wisdom AI prompt.
[AWS::Wisdom::AIAgentVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wisdom-aiagentversion.html)
Use the `AWS::Wisdom::AIAgentVersion` resource to specify an Amazon Connect Wisdom AI agent version.
[AWS::Wisdom::AIPromptVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wisdom-aipromptversion.html)
Use the `AWS::Wisdom::AIPromptVersion` resource to specify an Amazon Connect Wisdom AI prompt version. | October 4, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::QuickSight::Folder.
[ AWS::QuickSight::Folder](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-quicksight-folder.html)
Use the `AWS::QuickSight::Folder` resource to create a folder in Amazon Quick. | October 3, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::Bedrock::ApplicationInferenceProfile`.
[ AWS::Bedrock::ApplicationInferenceProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrock-inferenceprofile.html)
Use the AWS::Bedrock::ApplicationInferenceProfile resource to create an inference profile to route inference requests to multiple regions. For more information, see [Improve resilience with cross-region inference.](https://docs.aws.amazon.com/bedrock/latest/userguide/cross-region-inference.html). | September 30, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated AWS::IoT::SoftwarePackageVersion
[AWS::IoT::DomainConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-softwarepackageversion.html)
The AWS::IoT::SoftwarePackageVersion resource adds artifact, recipe, and sbom parameters. | September 27, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::MWAA::Environment
[AirflowVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-airflowversion)
The `AirflowVersion` property has been updated to include a new valid value for Apache Airflow version 2.10.1. | September 26, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following property was added to the AWS::SES::MailManagerRuleSet RuleStringToEvaluate resource:
[AWS::SES::MailManagerRuleSet RuleStringToEvaluate](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-mailmanagerruleset-rulestringtoevaluate.html)
Use the `MimeHeaderAttribute` property as the email MIME X-Header attribute to evaluate in a string condition expression. | September 24, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Synthetics::Canary.
[AWS::Synthetics::Canary](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-synthetics-canary.html)
The `ResourcesToReplicateTags` parameter was added. You can specify this parameter when you create or update a canary to have the tags that you apply to the canary also be replicated to the Lambda function that the canary uses. | September 19, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::S3Express::DirectoryBucket.
[AWS::S3Express::DirectoryBucket BucketEncryption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3express-directorybucket-bucketencryption.html)
Use the `AWS::S3Express::DirectoryBucket BucketEncryption` property to specify default encryption for a directory bucket.
[AWS::S3Express::DirectoryBucket ServerSideEncryptionRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3express-directorybucket-serversideencryptionrule.html)
Use the `AWS::S3Express::DirectoryBucket ServerSideEncryptionRule` resource to specify the default server-side encryption configuration for an S3 directory bucket.
[AWS::S3Express::DirectoryBucket ServerSideEncryptionByDefault](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3express-directorybucket-serversideencryptionbydefault.html)
Use the `AWS::S3Express::DirectoryBucket ServerSideEncryptionByDefault` property to apply the default server-side encryption to new objects in a directory bucket.
[AWS::S3Express::DirectoryBucket](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3express-directorybucket.html)
Use the `AvailabilityZoneName` property to return the code for the Availability Zone where the directory bucket was created. | September 18, 2024 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::Lambda::EventSourceMapping and AWS::Lambda::CodeSigningConfig.
[ AWS::Lambda::EventSourceMapping](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventsourcemapping.html)
Use the `Tags` property to specify tags for your event source mapping.
[ AWS::Lambda::CodeSigningConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-codesigningconfig.html)
Use the `Tags` property to specify tags for your code signing configuration. | September 17, 2024 |
| [New resource types](aws-template-resource-type-ref.md) | The following resources were added: `AWS::PCAConnectorSCEP::Challenge`, `AWS::PCAConnectorSCEP::Connector`.
[AWS::PCAConnectorSCEP::Challenge](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorscep-challenge.html)
The `AWS::PCAConnectorSCEP::Challenge` resource is used to create challenge passwords for AWS Private Certificate Authority general-purpose SCEP connectors. The challenge passwords are used to authenticate a request before issuing a certificate from a certificate authority (CA).
[AWS::PCAConnectorSCEP::Connector](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorscep-connector.html)
The `AWS::PCAConnectorSCEP::Connector` resource type is used to link AWS Private Certificate Authority to your SCEP-enabled devices and mobile device management (MDM) systems. | September 16, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Connect::AgentStatus
[AWS::Connect::AgentStatus](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-agentstatus.html)
Use the `AWS::Connect::AgentStatus` resource to configure an AgentStatus in the specified instance. | September 13, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Connect::UserHierarchyStructure
[AWS::Connect::UserHierarchyStructure](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-userhierarchystructure.html)
Use the `AWS::Connect::UserHierarchyStructure` resource to create a UserHierarchyStructure in the specified instance. | September 13, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::DataZone::EnvironmentActions`.
[AWS::DataZone::EnvironmentActions](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-environmentactions.html)
Use the `AWS::DataZone::EnvironmentActions` resource to specify the details about a particular action configured for an environment in Amazon DataZone. | September 13, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Pipes::Pipe.
[AWS::Pipes::Pipe](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pipes-pipe.html)
Use the [https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pipes-pipe-pipetargetparameters.html#cfn-pipes-pipe-pipetargetparameters-timestreamparameters](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pipes-pipe-pipetargetparameters.html#cfn-pipes-pipe-pipetargetparameters-timestreamparameters) property to specify the parameters for using a Timestream for LiveAnalytics table as a target. | September 10, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::MSK::Replicator ReplicationTopicNameConfiguration.
[AWS::MSK::Replicator ReplicationTopicNameConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-msk-replicator-replicationtopicnameconfiguration.html)
Configuration for specifying replicated topic names will be the identical to their corresponding upstream topics or prefixed with source cluster alias. | September 10, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following structure was added: AWS::ApplicationSignals::ServiceLevelObjective RequestBasedSli
[AWS::ApplicationSignals::ServiceLevelObjective RequestBasedSli](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationsignals-servicelevelobjective-requestbasedsli.html)
Use the `RequestBasedSli` structure to provide information about the service and the performance metric that a request-based SLO is to monitor. For more information, see [ Service level objectives](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-ServiceLevelObjectives.html). | September 6, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following structure was added: AWS::ApplicationSignals::ServiceLevelObjective RequestBasedSliMetric
[AWS::ApplicationSignals::ServiceLevelObjective RequestBasedSliMetric](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationsignals-servicelevelobjective-requestbasedslimetric.html)
Use the `RequestBasedSliMetric` structure to provide information about the metric that the request-based SLO monitors. For more information, see [ Service level objectives](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-ServiceLevelObjectives.html). | September 6, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::AppSync::GraphQLApi
[AWS::AppSync::GraphQLApi](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-graphqlapi.html)
Updated `LogConfig` property. | September 4, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following property was added to the AWS::SES::ReceiptRule S3Action resource:
[AWS::SES::ReceiptRule S3Action](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-receiptrule-s3action.html)
Use the `IamRoleArn` property to access the resources in the *Deliver to S3* action (Amazon S3 bucket, SNS topic, and KMS key) and to write to an S3 bucket that exists in a region where *SES Email receiving* isn't available. | August 29, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AutoScaling::AutoScalingGroup.
[AWS::AutoScaling::AutoScalingGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-autoscalinggroup.html)
Use the `HealthCheckType` property to specify `EBS` as the health check type for your Auto Scaling group. | August 27, 2024 |
| [New property](aws-template-resource-type-ref.md) | The following property was added: AWS::ECS::TaskDefinition RestartPolicy
[AWS::ECS::TaskDefinition RestartPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-restartpolicy.html)
Use the `RestartPolicy` property to enable restart policies for individual containers in a task. | August 26, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IVS::Stage
[AWS::IVS::Stage](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-stage.html)
Use the `AutoParticipantRecordingConfiguration` property to specify a configuration for individual participant recording. | August 20, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IVS::PublicKey
[AWS::IVS::PublicKey](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-publickey.html)
Use the `PublicKey` to sign stage participant tokens. | August 20, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Lambda::Function.
[AWS::Lambda::Function](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-recursiveloop)
Use the `RecursiveLoop` property to allow Lambda functions to be invoked in a recursive loop. | August 19, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Bedrock::Guardrail.
[ AWS::Bedrock::Guardrail](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrock-guardrail.html)
The AWS::Bedrock::Guardrail resource was updated to support the contextual grounding filter. | August 15, 2024 |
| [Added support for user log export](aws-template-resource-type-ref.md) | Added S3Configuration and FirehoseConfiguration to LogDeliveryConfiguration. Adds support for log export to Amazon S3 and Amazon Data Firehose.
[AWS::Cognito::UserPool PreTokenGenerationConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-pretokengenerationconfig.html)
You can update the version of your Lambda trigger event. Version 2 includes details to customize access tokens and ID tokens. | August 8, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::SSMQuickSetup::ConfigurationManager
[AWS::SSMQuickSetup::ConfigurationManager](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmquicksetup-configurationmanager.html)
Creates a Quick Setup configuration manager resource. This resource is a collection of desired state configurations for multiple configuration definitions and summaries describing the deployments of those definitions. Quick Setup is a capability of Systems Manager. For more information about Quick Setup, see [Systems Manager Quick Setup](https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-quick-setup.html) in the Systems Manager User Guide. | July 31, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::CodeCommit::Repository`
[AWS::CodeCommit::Repository Code](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codecommit-repository.html)
AWS CodeCommit is no longer available to new customers. Existing customers of AWS CodeCommit can continue to use the service as normal. [Learn more"](https://aws.amazon.com/blogs/devops/how-to-migrate-your-aws-codecommit-repository-to-another-git-provider) | July 25, 2024 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::CleanRooms::ConfiguredTable` and `AWS::CleanRooms::ConfiguredTableAssociation`.
[AWS::CleanRooms::ConfiguredTable](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-configuredtable.html)
Use the `AllowedAdditionalAnalyses` property to specify whether additional analyses can be applied to the output of the direct query.
[AWS::CleanRooms::ConfiguredTableAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-analysistemplate.html)
Use the `ConfiguredTableAssociationAnalysisRules` property to specify how data from the table can be used within its associated collaboration. | July 24, 2024 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::EntityResolution::MatchingWorkflow` and `AWS::EntityResolution::SchemaMapping`.
[AWS::EntityResolution::MatchingWorkflow RuleBasedProperties](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-entityresolution-matchingworkflow-rulebasedproperties.html)
Use the `MatchPurpose` property to specify whether to generate IDs and index the data or index the data without generating IDs.
[AWS::EntityResolution::SchemaMapping SchemaInputAttribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/ws-properties-entityresolution-schemamapping-schemainputattribute.html)
Use the `Hashed` property to specify if the column values are hashed in the schema input. | July 23, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::CleanRooms::IDMappingTable` and `AWS::CleanRooms::IdNamespaceAssociation`.
[AWS::CleanRooms::IDMappingTable](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-idmappingtable.html)
Use the `AWS::CleanRooms::IDMappingTable` resource to specify a new ID mapping table resource in AWS Clean Rooms.
[AWS::CleanRooms::IdNamespaceAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-idnamespaceassociation.html)
Use the `AWS::CleanRooms::IdNamespaceAssociation` resource to specify a new ID namespace association resource in AWS Clean Rooms. | July 23, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::WorkSpacesWeb::UserSettings`.
[AWS::WorkSpacesWeb::UserSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-usersettings.html)
Use the `DeepLinkAllowed` property to specify whether the user can use deep links that open automatically when connecting to a session. | July 22, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::Bedrock::Prompt`, `AWS::Bedrock::PromptVersion`, `AWS::Bedrock::Flow`, `AWS::Bedrock::FlowVersion`, and `AWS::Bedrock::FlowAlias`.
[AWS::Bedrock::Prompt](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrock-prompt.html)
Use the `AWS::Bedrock::Prompt` resource to create a prompt in Amazon Bedrock to reuse in different workflows. For more information, see [Construct and store reusable prompts with Prompt management in Amazon Bedrock](https://docs.aws.amazon.com/bedrock/latest/userguide/prompt-management.html).
[AWS::Bedrock::PromptVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrock-promptversion.html)
Use the `AWS::Bedrock::PromptVersion` resource to create a version of your prompt that acts as a static snapshot of a prompt configuration. For more information, see [Construct and store reusable prompts with Prompt management in Amazon Bedrock](https://docs.aws.amazon.com/bedrock/latest/userguide/prompt-management.html).
[AWS::Bedrock::Flow](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrock-flow.html)
Use the `AWS::Bedrock::Flow` resource to create a prompt flow in Amazon Bedrock so that you can chain resources from Amazon Bedrock and other AWS services to create complex workflows that take advantage of generative AI. For more information, see [Build an end-to-end generative AI workflow with prompt flows in Amazon Bedrock](https://docs.aws.amazon.com/bedrock/latest/userguide/prompt-flows.html).
[AWS::Bedrock::FlowVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrock-flowversion.html)
Use the `AWS::Bedrock::FlowVersion` resource to create a version of your prompt flow that acts as a static snapshot of a prompt flow. For more information, see [Build an end-to-end generative AI workflow with prompt flows in Amazon Bedrock](https://docs.aws.amazon.com/bedrock/latest/userguide/prompt-flows.html).
[AWS::Bedrock::FlowAlias](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrock-flowalias.html)
Use the `AWS::Bedrock::FlowAlias` resource to create an alias of your prompt flow that points to a version of the prompt flow. For more information, see [Build an end-to-end generative AI workflow with prompt flows in Amazon Bedrock](https://docs.aws.amazon.com/bedrock/latest/userguide/prompt-flows.html). | July 10, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::MWAA::Environment
[AirflowVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-airflowversion)
The `AirflowVersion` property has been updated to include a new valid value for Apache Airflow version 2.9.2. | July 9, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was released: [https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-launchwizard-deployment.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-launchwizard-deployment.html).Use `AWS::LaunchWizard::Deployment` to create a Launch Wizard deployment. | July 3, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::SES::MailManagerAddonInstance`, `AWS::SES::MailManagerAddonSubscription`, `AWS::SES::MailManagerArchive`, `AWS::SES::MailManagerIngressPoint`, `AWS::SES::MailManagerRelay`, `AWS::SES::MailManagerRuleSet`, and `AWS::SES::MailManagerTrafficPolicy`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ses-mailmanageraddoninstance.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ses-mailmanageraddoninstance.html)
Use the `AWS::SES::MailManagerAddonInstance` resource to create an Add On instance which represents the actual deployment and configuration of the Add On functionality within your Mail Manager environment.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ses-mailmanageraddonsubscription.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ses-mailmanageraddonsubscription.html)
Use the `AWS::SES::MailManagerAddonSubscription` resource to create an Add On subscription which represents the acceptance of the Add On's terms of use and any additional pricing.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ses-mailmanagerarchive.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ses-mailmanagerarchive.html)
Use the `AWS::SES::MailManagerArchive` resource to create a new email archive resource for storing and retaining emails.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ses-mailmanageringresspoint.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ses-mailmanageringresspoint.html)
Use the `AWS::SES::MailManagerIngressPoint` resource to provision an ingress endpoint which serves as the entry point for incoming emails, allowing you to define how emails are received and processed within your AWS environment.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ses-mailmanagerrelay.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ses-mailmanagerrelay.html)
Use the `AWS::SES::MailManagerRelay` resource to create an SMTP relay which can be used within a Mail Manager rule set to forward incoming emails to defined relay destinations.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ses-mailmanagerruleset.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ses-mailmanagerruleset.html)
Use the `AWS::SES::MailManagerRuleSet` resource to create a rule set for a Mail Manager ingress endpoint which contains a list of rules that are evaluated sequentially for each email.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ses-mailmanagertrafficpolicy.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ses-mailmanagertrafficpolicy.html)
Use the `AWS::SES::MailManagerTrafficPolicy` resource to create a traffic policy for a Mail Manager ingress endpoint which contains policy statements used to evaluate whether incoming emails should be allowed or denied. | June 30, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::WorkSpaces::WorkspacesPool`
[AWS::WorkSpaces::WorkspacesPool](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspaces-workspacespool.html)
Use the `AWS::WorkSpaces::WorkspacesPool` resource to create a pool of WorkSpaces. | June 27, 2024 |
| [New resource type](aws-template-resource-type-ref.md) | The following resource type was added: `AWS::AppTest::TestCase`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apptest-testcase.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apptest-testcase.html)
Use the `AWS::AppTest::TestCase` resource type to specify a test case. | June 26, 2024 |
| [New resources for public preview release](aws-template-resource-type-ref.md) | The following resources were added: `AWS::SecurityHub::AggregatorV2`, `AWS::SecurityHub::AutomationRuleV2`, `AWS::SecurityHub::HubV2`.
[AWS::SecurityHub::AggregatorV2](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-securityhub-aggregatorv2.html)
Use the `AWS::SecurityHub::AggregatorV2` resource to enables aggregation across Regions.
[AWS::SecurityHub::AutomationRuleV2](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-securityhub-automationrulev2.html)
Use the `AWS::SecurityHub::AutomationRuleV2` resource to specify an automation rule based on input parameters.
[AWS::SecurityHub::HubV2](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-securityhub-hubv2.html)
Use the `AWS::SecurityHub::HubV2` resource to return details about the service resource in your account. | June 19, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::GuardDuty::MalwareProtectionPlan`
[AWS::GuardDuty::MalwareProtectionPlan](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-malwareprotectionplan.html)
Use `AWS::GuardDuty::MalwareProtectionPlan` resource to configure Malware Protection for S3 that helps you detect potential malware in the newly uploaded objects in your selected S3 buckets. | June 13, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::KMS::Key`.
[AWS::KMS::Key](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html)
Added support for Module-Lattice-Based Digital Signature Algorithm (ML-DSA) asymmetric keys. | June 12, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::ApplicationSignals::ServiceLevelObjective
[AWS::ApplicationSignals::ServiceLevelObjective](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-applicationsignals-servicelevelobjective.html)
Use the AWS::ApplicationSignals::ServiceLevelObjective resource to create service level objective (SLO), which can help you ensure that your critical business operations are meeting customer expectations. For more information, see [ Service level objectives](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-ServiceLevelObjectives.html). | June 12, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::CloudFormation::CustomResource`.
[AWS::CloudFormation::CustomResource](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-customresource.html)
Use the `ServiceTimeout` property to specify the maximum time, in seconds, that can elapse before a custom resource operation times out. | June 10, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::ECS::Cluster ManagedStorageConfiguration
[AWS::ECS::Cluster ManagedStorageConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-cluster-serviceconnecttlsconfiguration.html)
Use the `AWS::ECS::Cluster ManagedStorageConfiguration` resource to represent the configuration for Managed Storage. | June 10, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AutoScaling::ScalingPolicy.
[AWS::AutoScaling::ScalingPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-as-policy.html)
Use the `AWS::AutoScaling::ScalingPolicy` property to use metric math to customize the metrics that you include in your target tracking policies. | June 6, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Pipes::Pipe.
[AWS::Pipes::Pipe](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pipes-pipe.html)
Use the [https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pipes-pipe-pipetargetparameters.html#cfn-pipes-pipe-pipetargetparameters-timestreamparameters](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pipes-pipe-pipetargetparameters.html#cfn-pipes-pipe-pipetargetparameters-timestreamparameters) property to specify the parameters for using a Timestream for LiveAnalytics table as a target. | June 4, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Bedrock::Agent.
[ AWS::Bedrock::Agent](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrock-agent.html)
The AWS::Bedrock::Agent resource was updated to support the addition of a guardrail to an agent. For more information, see [Implement safeguards for your application by associating a guardrail with your agent](https://docs.aws.amazon.com/bedrock/latest/userguide/agents-guardrail.html). | June 3, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::SecurityHub::ConfigurationPolicy`, `AWS::SecurityHub::FindingAggregator`, `AWS::SecurityHub::OrganizationConfiguration`, and `AWS::SecurityHub::PolicyAssociation`.
[AWS::SecurityHub::ConfigurationPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-configurationpolicy.html)
Use the `AWS::SecurityHub::ConfigurationPolicy` resource to create a Security Hub CSPM central configuration policy.
[AWS::SecurityHub::FindingAggregator](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-findingaggregator.html)
Use the `AWS::SecurityHub::FindingAggregator` resource to enable Security Hub CSPM cross-Region aggregation and specify aggregation settings.
[AWS::SecurityHub::OrganizationConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-organizationconfiguration.html)
Use the `AWS::SecurityHub::OrganizationConfiguration` resource to specify how an AWS organization is configured in Security Hub CSPM.
[AWS::SecurityHub::PolicyAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-policyassociation.html)
Use the `AWS::SecurityHub::PolicyAssociation` resource to associate a Security Hub CSPM configuration policy or self-managed configuration with the organization root, an account, or an organizational unit (OU). | May 30, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::SecurityLake::SubscriptionNotification`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-subscribernotification.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-subscribernotification.html)
Use the `AWS::SecurityLake::SubscriptionNotification` resource to add a notification method for the subscription (SQS or HTTPs) endpoint in Amazon Security Lake. | May 29, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::AppSync::ChannelNamespace
[AWS::AppSync::ChannelNamespace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-channelnamespace.html)
Use the `HandlerConfig` property to specify the configuration for the handler.
Use the `HandlerConfigs` property to specify the configuration for the `OnPublish` and `OnSubscribe` handlers.
Use the `Integration` property to specify the integration data source configuration for the handler.
Use the `LambdaConfig` property to specify the configuration for a Lambda data source . | May 15, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: `AWS::DataZone::GroupProfile`, `AWS::DataZone::ProjectMembership`, and `AWS::DataZone::UserProfile`.
[AWS::DataZone::GroupProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-groupprofile.html)
Use the `AWS::DataZone::GroupProfile` resource to specify the details of a group profile in Amazon DataZone.
[AWS::DataZone::ProjectMembership](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-projectmembership.html)
Use the `AWS::DataZone::ProjectMembership` resource to specify the project membership information in Amazon DataZone.
[AWS::DataZone::UserProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-userprofile.html)
Use the `AWS::DataZone::UserProfile` resource to specify the user profile information in Amazon DataZone. | May 15, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::SecurityHub::SecurityControl`.
[AWS::SecurityHub::SecurityControl](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-securitycontrol.html)
Use the `AWS::SecurityHub::SecurityControl` resource to specify control parameters for a Security Hub CSPM control. | May 15, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: [AWS::Events::EventBus](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-eventbus.html).
[AWS::Events::EventBus](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-eventbus.html)
Use the `DeadLetterConfig` property to specify configuration details of the Amazon SQS queue for EventBridge to use as a dead-letter queue (DLQ).
Use the `KmsKeyIdentifier` property to specify the AWS KMScustomer managed key for EventBridge to use for event encryption. | May 14, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Bedrock::Agent.
[ AWS::Bedrock::Agent](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrock-agent.html)
The AWS::Bedrock::Agent resource was updated to support the creation of action groups using a function schema, in addition to the configuring of action groups to return control to the agent developer instead of sending the information to a Lambda function. For more information, see [Define function details](https://docs.aws.amazon.com/bedrock/latest/userguide/agents-action-function.html) and [Return control to the agent developer](https://docs.aws.amazon.com/bedrock/latest/userguide/agents-returncontrol.html). | May 9, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::Bedrock::GuardrailVersion`.
[ AWS::Bedrock::GuardrailVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrock-guardrailversion.html)
Use the AWS::Bedrock::GuardrailVersion resource to create new versions for your guardrail. For more information, see [Stop harmful content in models using Amazon Bedrock Guardrails](https://docs.aws.amazon.com/bedrock/latest/userguide/guardrails.html). | May 6, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: `AWS::SSO::Application`, `AWS::SSO::ApplicationAssignment`, and `AWS::SSO::Instance`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-application.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-application.html)
Use the `AWS::SSO::Application` resource to create an application in IAM Identity Center.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-applicationassignment.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-applicationassignment.html)
Use the `AWS::SSO::ApplicationAssignment` resource to describe an assignment of a principal of an application.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-instance.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-instance.html)
Use the `AWS::SSO::Instance` resource to create an instance of IAM Identity Center for a standalone AWS account that is not managed by or a member AWS account in an organization. | May 6, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FMS::Policy.
[AWS::FMS::Policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fms-policy.html)
The `AWS::FMS::Policy` resource now supports centralized management of Amazon Virtual Private Cloud network ACLs. | May 3, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following properties were added to the `AWS::DynamoDB::GlobalTable` resource: `ReadOnDemandThroughputSettings` and `WriteOnDemandThroughputSettings`.
[AWS::DynamoDB::GlobalTable ReadOnDemandThroughputSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-globaltable-readondemandthroughputsettings.html)
Use this property to set the read request settings for a replica table or a replica global secondary index if the `BillingMode` is `PAY_PER_REQUEST`.
[AWS::DynamoDB::GlobalTable WriteOnDemandThroughputSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-globaltable-writeondemandthroughputsettings.html)
Use this property to set the write request settings for a global table or a global secondary index if the `BillingMode` is `PAY_PER_REQUEST`. | May 1, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following property was added to the `AWS::DynamoDB::Table` resource: `OnDemandThroughput`.
[AWS::DynamoDB::Table OnDemandThroughput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-table-ondemandthroughput.html)
Use this property to set the maximum number of read and write units for a specified on-demand table. | May 1, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::QBusiness::Application`, `AWS::QBusiness::DataSource`, `AWS::QBusiness::Index`, `AWS::QBusiness::Plugin`, `AWS::QBusiness::Retriever`, and `AWS::QBusiness::WebExperience`.
[AWS::QBusiness::Application](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-application.html)
Use the `AWS::QBusiness::Application` resource to create an Amazon Q Business application. For more information, see [Configuring an Amazon Q Business application](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/create-application.html).
[AWS::QBusiness::DataSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-datasource.html)
Use the `AWS::QBusiness::DataSource` resource to create a data source connector for an Amazon Q Business application. For more information, see [Configuring Amazon Q Business data source connectors](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/supported-connectors.html).
[AWS::QBusiness::Index](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-index.html)
Use the `AWS::QBusiness::Index` resource to create an Amazon Q Business index. For more information, see [Creating an Amazon Q Business index](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/native-retriever.html).
[AWS::QBusiness::Plugin](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-plugin.html)
Use the `AWS::QBusiness::Plugin` resource to create and configure an Amazon Q Business plugin. For more information, see [Configuring plugins with Amazon Q Business](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/plugins.html).
[AWS::QBusiness::Retriever](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-retriever.html)
Use the `AWS::QBusiness::Retriever` resource to add a retriever to an Amazon Q Business application. For more information, see [Selecting a retriever for Amazon Q Business](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/select-retriever.html).
[AWS::QBusiness::WebExperience](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-qbusiness-webexperience.html)
Use the `AWS::QBusiness::WebExperience` resource to create an Amazon Q Business web experience. For more information, see [Customizing an Amazon Q Business web experience ](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/customizing-web-experience.html). | April 30, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following property was updated: `AWS::Route53Resolver::FirewallRuleGroup FirewallRule`.
[AWS::Route53Resolver::FirewallRuleGroup FirewallRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-firewallrulegroup-firewallrule.html)
Added a `FirewallDomainRedirectionAction` property to include a DNS redirection choice for the DNS Firewall rule to evaluate. | April 30, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources was updated: AWS::Oam::Link.
[AWS::Oam::Link](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-oam-link.html)
The `AWS::Oam::Link` resource was updated with a `LinkConfiguration` structure. You can use this structure to specify that only a subset of metric namespaces or log groups are to be shared with the monitoring account. | April 26, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBInstance
[AWS::RDS::DBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html)
Use the `AutomaticBackupReplicationKmsKeyId` property to specify the AWS KMS key identifier for encryption of replicated automated backups. | April 26, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::DataSync::Task`.
[AWS::DataSync::Task](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-task.html)
Use the `Status` property to enable or disable your task schedule. | April 24, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::Bedrock::Guardrail`.
[ AWS::Bedrock::Guardrail](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrock-guardrail.html)
Use the AWS::Bedrock::Guardrail resource to block topics and to filter out harmful content. For more information, see [Stop harmful content in models using Amazon Bedrock Guardrails](https://docs.aws.amazon.com/bedrock/latest/userguide/guardrails.html). | April 24, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::PaymentCryptography::Alias` and `AWS::PaymentCryptography::Key`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-paymentcryptography-alias.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-paymentcryptography-alias.html)
Use the `AWS::PaymentCryptography::Alias` resource to specify an alias.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-paymentcryptography-key.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-paymentcryptography-key.html)
Use the `AWS::PaymentCryptography::Key` resource to specify a key. | April 23, 2024 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::WorkSpacesWeb::BrowserSettings`, `AWS::WorkSpacesWeb::IpAccessSettings`, `AWS::WorkSpacesWeb::Portal`, and `AWS::WorkSpacesWeb::UserSettings`.
[AWS::WorkSpacesWeb::BrowserSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-browsersettings.html)
Use the `AdditionalEncryptionContext` property to specify the additional encryption context of the browser settings.
Use the `CustomerManagedKey` property to specify the custom managed key of the browser settings.
[AWS::WorkSpacesWeb::IpAccessSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-ipaccesssettings.html)
Use the `AdditionalEncryptionContext` property to specify the additional encryption context of the IP access settings.
Use the `CustomerManagedKey` property to specify the custom managed key of the IP access settings.
[AWS::WorkSpacesWeb::Portal](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-portal.html)
Use the `AdditionalEncryptionContext` property to specify the additional encryption context of the portal.
Use the `CustomerManagedKey` property to specify the custom managed key of the portal.
Use the `InstanceType` property to specify the type and resources of the underlying instance.
Use the `MaxConcurrentSessions` property to specify the maximum number of concurrent sessions for the portal.
[AWS::WorkSpacesWeb::UserSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-usersettings.html)
Use the `AdditionalEncryptionContext` property to specify the additional encryption context of the user settings.
Use the `CustomerManagedKey` property to specify the custom managed key of the user settings. | April 22, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::GlobalAccelerator::CrossAccountAttachment.
[ AWS::GlobalAccelerator::CrossAccountAttachment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-globalaccelerator-crossaccountattachment.html)
Use the `AWS::GlobalAccelerator::CrossAccountAttachment` resource to create a cross-account attachment to specify the principals who have permission to work with resources in accelerators in their own account, and the resources that those principals can work with. | April 22, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: `AWS::SecurityLake::AwsLogSource`, `AWS::SecurityLake::DataLake`, `AWS::SecurityLake::Subscriber`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-awslogsource.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-awslogsource.html)
Use the `AWS::SecurityLake::AWSLogSource` to add a natively supported AWS service as an Amazon Security Lake source.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-datalake.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-datalake.html)
Use the `AWS::SecurityLake::DataLake` resource to initialize an Amazon Security Lake instance with the provided (or default) configuration.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-subscriber.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-subscriber.html)
Use the `AWS::SecurityLake::Subscriber` resource to create subscription permission for accounts that are already enabled in Amazon Security Lake. | April 12, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudWatch::AnomalyDetector
[AWS::CloudWatch::AnomalyDetector](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudwatch-anomalydetector.html)
In the [AnomalyDetector](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudwatch-anomalydetector.html) resource, the `MetricCharacteristics` object was added to enable you to specify parameters to provide information about your metric to CloudWatch to help it build more accurate anomaly detection models. Currently, this object includes the `PeriodicSpikes` parameter. Use this parameter if values for this metric consistently include spikes that should not be considered to be anomalies. | April 11, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::KMS::Key`.
[AWS::KMS::Key](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html)
Added support to specify a custom rotation period for automatic key rotations. | April 11, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::CleanRooms::ConfiguredTable`.
[AWS::CleanRooms::ConfiguredTable](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-configuredtable.html)
Use the `DifferentialPrivacy` property to specify the name of the column that contains the unique identifier of your users, whose privacy you want to protect. | April 10, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::CleanRooms::PrivacyBudgetTemplate`.
[AWS::CleanRooms::PrivacyBudgetTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-privacybudgettemplate.html)
Use the `PrivacyBudgetTemplate` to specify the differential privacy configuration. | April 10, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::IVS::EncoderConfigration, AWS::IVS::PlaybackRestrictionPolicy, AWS::IVS::StorageConfigration
[AWS::IVS::EncoderConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-encoderconfiguration.html)
Use the `EncoderConfiguration` resource to describe a stream’s video configuration.
[AWS::IVS::PlaybackRestrictionPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-playbackrestrictionpolicy.html)
Use the `PlaybackRestrictionPolicy` resource to constrain playback by country and/or origin sites.
[AWS::IVS::StorageConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-storageconfiguration.html)
Use the `StorageConfiguration` resource to describe an S3 location where recorded videos will be stored. | April 9, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudWatch::Alarm
[AWS::CloudWatch::Alarm](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-alarm.html)
The `Tags` property was added so that you can use CloudFormation to apply tags to metric alarms. | April 5, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudWatch::CompositeAlarm
[AWS::CloudWatch::CompositeAlarm](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-compositealarm.html)
The `Tags` property was added so that you can use CloudFormation to apply tags to composite alarms. | April 5, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::Bedrock::Agent`, `AWS::Bedrock::AgentAlias`, `AWS::Bedrock::KnowledgeBase`, and `AWS::Bedrock::DataSource`.
[AWS::Bedrock::Agent](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrock-agent.html)
Use the `AWS::Bedrock::Agent` resource to create an agent in Amazon Bedrock to help users fulfill tasks. For more information, see [Automate tasks in your application using conversational agents](https://docs.aws.amazon.com/bedrock/latest/userguide/agents.html).
[AWS::Bedrock::AgentAlias](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrock-agentalias.html)
Use the `AWS::Bedrock::AgentAlias` resource to create an alias that points to a version of your Amazon Bedrock agent that your application can invoke during deployment. For more information, see [Deploy an Amazon Bedrock Agent](https://docs.aws.amazon.com/bedrock/latest/userguide/agents-deploy.html).
[AWS::Bedrock::KnowledgeBase](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrock-knowledgebase.html)
Use the `AWS::Bedrock::KnowledgeBase` resource to create a knowledge base in Amazon Bedrock that can be queried and generate responses based on the retrieved results. For more information, see [Retrieve data and generate AI responses with knowledge bases ](https://docs.aws.amazon.com/bedrock/latest/userguide/knowledge-base.html).
[AWS::Bedrock::DataSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrock-datasource.html)
Use the `AWS::Bedrock::DataSource` resource to create a data source in a knowledge base in Amazon Bedrock to manage the conversion of data from an Amazon S3 bucket into vector embeddings for a knowledge base. For more information, see [Set up a data source for your knowledge base ](https://docs.aws.amazon.com/bedrock/latest/userguide/knowledge-base-ds.html). | April 4, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::SecurityHub::DelegatedAdmin`, `AWS::SecurityHub::Insight`, and `AWS::SecurityHub::ProductSubscription`.
[AWS::SecurityHub::DelegatedAdmin](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-delegatedadmin.html)
Use the `AWS::SecurityHub::DelegatedAdmin` resource to specify the delegated Security Hub CSPM administrator for an organization.
[AWS::SecurityHub::Insight](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-insight.html)
Use the `AWS::SecurityHub::Insight` resource to specify a custom Security Hub CSPM insight.
[AWS::SecurityHub::ProductSubscription](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-productsubscription.html)
Use the `AWS::SecurityHub::ProductSubscription` resource to specify a subscription to a third-party product that integrates with Security Hub CSPM. | April 3, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CleanRoomsML::TrainingDataset.
[AWS::CleanRoomsML::TrainingDataset](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanroomsml-trainingdataset.html)
Use the `AWS::CleanRoomsML::TrainingDataset` resource to specify the creation of a training dataset, which is metadata that points to a Glue table. For more information, see [Import training data](https://docs.aws.amazon.com/clean-rooms/latest/userguide/create-ml-model.html#create-ml-model-training-data). | April 3, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added:
[ AWS::Deadline::Farm ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-deadline-farm.html)
Use the AWS::Deadline::Farm resource to create a farm that contains the queues and fleets that process you jobs. For more information, see [AWS Deadline Cloud farms](https://docs.aws.amazon.com/deadline-cloud/latest/userguide/farms.html).
[ AWS::Deadline::Fleet ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-deadline-fleet.html)
Use the AWS::Deadline::Fleet resource to define a fleet of worker hosts that process the tasks for your jobs. For more information, see [Manage AWS Deadline Cloud fleets](https://docs.aws.amazon.com/deadline-cloud/latest/userguide/manage-fleets.html).
[ AWS::Deadline::LicenseEndpoint ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-deadline-licenseendpoint.html)
Use the AWS::Deadline::LicenseEndpoint resource to integrate licensed software with your jobs. For more information, see [Connect customer-managed fleets to a license endpoint](https://docs.aws.amazon.com/deadline-cloud/latest/userguide/cmf-ubl.html).
[ AWS::Deadline::MeteredProduct ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-deadline-meteredproduct.html)
Use the AWS::Deadline::MeteredProduct resource to associate a licensed application with a license endpoint.
[ AWS::Deadline::Queue ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-deadline-queue.html)
Use the AWS::Deadline::Queue resource to create queues for your farm. Jobs are submitted to a queue, and the queue sends the tasks in the job to a worker fleet for processing. For more information, see [Queues](https://docs.aws.amazon.com/deadline-cloud/latest/userguide/queues.html).
[ AWS::Deadline::QueueEnvironment ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-deadline-queueenvironment.html)
Use the AWS::Deadline::QueueEnvironment resource to create to create a processing environment for workers processing tasks from the queue. For more information, see [Create a queue environment](https://docs.aws.amazon.com/deadline-cloud/latest/userguide/queues.html#create-queue-environment).
[ AWS::Deadline::QueueFleetAssociation ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-deadline-queuefleetassociation.html)
Use the AWS::Deadline::QueueFleetAssociation resource to associate a worker fleet with a queue. Workers in the fleet process tasks for the jobs in the queue. For more information, see [Associate a queue and fleet](https://docs.aws.amazon.com/deadline-cloud/latest/userguide/queues.html#associate-a-queue-and-fleet).
[ AWS::Deadline::StorageProfile ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-deadline-storageprofile.html)
Use the AWS::Deadline::StorageProfile resource to specify the operating system, file type, and file location of resources used by a farm. For more information, see [Storage profiles in AWS Deadline Cloud ](https://docs.aws.amazon.com/deadline-cloud/latest/userguide/storage-shared.html#storage-profile). | April 2, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following new resource has been added: AWS::CodeConnections::Connection
[AWS::CodeConnections::Connection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codeconnections-connection.html)
New resource. | April 2, 2024 |
| [New and updated resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::EntityResolution::IdNamespace` and `AWS::EntityResolution::PolicyStatement`. The following resource was updated: `AWS::EntityResolution::IdMappingWorkflow`.
[AWS::EntityResolution::IdNamespace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-entityresolution-idnamespace.html)
Use the `AWS::EntityResolution::IdNamespace` resource to specify a new ID namespace resource in AWS Entity Resolution.
[AWS::EntityResolution::PolicyStatement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-entityresolution-policystatement.html)
Use the `AWS::EntityResolution::PolicyStatement` resource to specify a new policy statement resource in AWS Entity Resolution.
[AWS::EntityResolution::IdMappingWorkflow](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-entityresolution-idmappingworkflow.html)
Use the `AWS::EntityResolution::IdMappingWorkflow IdMappingWorkflowInputSource` property to specify type of ID namespace (source or target). | April 2, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::InternetMonitor::Monitor`.
[AWS::InternetMonitor::Monitor](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-internetmonitor-monitor.html)
Use `Monitor.IncludeLinkedAccounts` to located accounts that you've linked with this monitor. | March 29, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::APS::Scraper.
[AWS::APS::Scraper](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-aps-scraper.html)
Use the AWS::APS::Scraper resource to create or update an Amazon Managed Service for Prometheus scraper. A scraper is a metrics collector that pulls metrics from Amazon EKS and sends them to your Amazon Managed Service for Prometheus workspace.
For more information, see [Using an AWS managed collector](https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-collector-how-to.html) in the *Amazon Managed Service for Prometheus User Guide*. | March 29, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudWatch::AnomalyDetector SingleMetricAnomalyDetector
[AWS::CloudWatch::AnomalyDetector SingleMetricAnomalyDetector](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudwatch-anomalydetector-singlemetricanomalydetector.html)
In the [SingleMetricAnomalyDetector](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudwatch-anomalydetector-singlemetricanomalydetector.html) resource, the `AccountId` field was added to enable you to create an anomaly detector in a monitoring account that watches a metric in a source account. | March 28, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::BCMDataExports::Export`.
[AWS::BCMDataExports::Export](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_BCMDataExports.html)
Use the `Export` and `Tags` property to specify the data query, delivery preference, and any optional resource tags. | March 28, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::Integration
[AWS::RDS::Integration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-integration.html)
Use the `DataFilter` property to specify which tables from the source database are sent to the target Amazon Redshift data warehouse.
Use the `Description` property to provide a description of the integration. | March 27, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::AppIntegrations::Application
[AWS::AppIntegrations::Application](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appintegrations-application.html)
Use the `AWS::AppIntegrations::Application` resource to create an Application. | March 25, 2024 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::WAFv2::WebACL.
[AWS::WAFv2::WebACL](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webacl.html)
Use the `AssociationConfig` property to increase the body inspection size limit beyond the new default limit of 16 KB for some regional resources. Prior to this, you could only increase the limit for CloudFront distributions. | March 21, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::DataSync::Task`.
[AWS::DataSync::Task](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-task.html)
Use the `ManifestConfig` property to configure a manifest that lists the files or objects that you want to transfer. | March 20, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following property was added to the `AWS::DynamoDB::GlobalTable.ReplicaSpecification` and `AWS::DynamoDB::GlobalTable.ReplicaStreamSpecification` resources: `ResourcePolicy`.
[AWS::DynamoDB::GlobalTable.ReplicaSpecification.ResourcePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-globaltable-replicaspecification.html)
Use this property to attach a resource-based policy to the replica of a DynamoDB global table.
[AWS::DynamoDB::GlobalTable.ReplicaStreamSpecification.ResourcePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-globaltable-replicastreamspecification.html)
Use this property to attach a resource-based policy to the stream of a DynamoDB global table replica. | March 20, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following property was added to the `AWS::DynamoDB::Table` and `AWS::DynamoDB::Table.StreamSpecification` resources: `ResourcePolicy`.
[AWS::DynamoDB::Table.ResourcePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-table-resourcepolicy.html)
Use this property to attach a resource-based policy to a DynamoDB resource, such as a table and its index.
[AWS::DynamoDB::Table.StreamSpecification.ResourcePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-table-streamspecification.html)
Use this property to attach a resource-based policy to a table's stream. | March 20, 2024 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup.
[AWS::WAFv2::WebACL](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webacl.html)
Use the `EvaluationWindowSec` property in `RateBasedStatement` to specify the amount of time to include in request counts.
[AWS::WAFv2::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-rulegroup.html)
Use the `EvaluationWindowSec` property in `RateBasedStatement` to specify the amount of time to include in request counts. | March 19, 2024 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup.
[AWS::WAFv2::WebACL](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webacl.html)
Use the `JA3Fingerprint` property in `FieldToMatch` to perform an exact match against the web request's JA3 fingerprint.
[AWS::WAFv2::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-rulegroup.html)
Use the `JA3Fingerprint` property in `FieldToMatch` to perform an exact match against the web request's JA3 fingerprint. | March 7, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::AppSync::GraphQLApi, AWS::AppSync::Resolver, AWS::AppSync::DataSource [AWS::AppSync::GraphQLApi](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-graphqlapi.html) Added support for enhanced metrics logging. [AWS::AppSync::Resolver](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-resolver.html) Added support for enhanced metrics logging. [AWS::AppSync::DataSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-datasource.html) Added support for enhanced metrics logging. | March 7, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Amplify::Domain
[AWS::Amplify::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-domain.html)
Use the `Certificate` property to specify the SSL/TLS certificate for the domain association.
Use the `CertificateSettings` property to specify the type of SSL/TLS certificate to use for your custom domain. | March 1, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Timestream::InfluxDBInstance.
[AWS::Timestream::InfluxDBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-timestream-influxdbinstance.html)
Use the `AWS::Timestream::InfluxDBInstance` resource to create a new InfluxDB instance. | March 1, 2024 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::Batch:JobDefinition`.Use the support for multi-container jobs. The following resources were added or updated: [AWS::Batch::JobDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobdefinition.html) [AWS::Batch::JobDefinition EcsProperties](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobdefinition.html#cfn-batch-jobdefinition-ecsproperties) [AWS::Batch::JobDefinition EcsTaskProperties](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-ecstaskproperties.html) [AWS::Batch::JobDefinition TaskContainerDependency](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-taskcontainerdependency.html) [AWS::Batch::JobDefinition TaskContainerProperties](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-taskcontainerproperties.html) | February 29, 2024 |
| [Updated resource ](aws-template-resource-type-ref.md) | The following resource was updated: AWS::APS::Workspace.
[AWS::APS::Workspace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-aps-workspace.html)
You can use the optional `KmsKeyArn` property to specify a customer-managed KMS key to use when encrypting data in your Amazon Managed Service for Prometheus workspace.
For more information, see [Encryption at rest](https://docs.aws.amazon.com/prometheus/latest/userguide/encryption-at-rest-Amazon-Service-Prometheus.html) in the *Amazon Managed Service for Prometheus User Guide*. | February 23, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::AppSync::GraphQLApi
[AWS::AppSync::GraphQLApi](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-graphqlapi.html)
Added `EnvironmentVariables` property. | February 15, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CodePipeline::Pipeline.
[AWS::CodePipeline::Pipeline](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codepipeline-pipeline.html)
Added new trigger filtering on branches, file paths, pull request status. Added new PARALLEL and QUEUED execution modes for V2 type pipelines. Added field for manual timeout configuration in minutes. | February 15, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::IoTSiteWise::Asset and AWS::IoTSiteWise::AssetModel.
[ AWS::IoTSiteWise::Asset](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-asset.html)
Added the following properties: `AssetExternalId`.
[AWS::IoTSiteWise::AssetModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-assetmodel.html)
Added the following property: `AssetModelExternalId` and `AssetModelType`. | February 15, 2024 |
| [New properties](aws-template-resource-type-ref.md) | The following properties were added: AWS::Route53::RecordSet GeoProximityLocation and AWS::Route53::RecordSetGroup GeoProximityLocation.
[AWS::Route53::RecordSet GeoProximityLocation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53-recordset-geoproximitylocation.html)
Use the `AWS::Route53::RecordSet GeoProximityLocation` property to specify a geoproximity resource recordset.
[AWS::Route53::RecordSetGroup GeoProximityLocation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53-recordsetgroup-geoproximitylocation.html)
Use the `AWS::Route53::RecordSetGroup GeoProximityLocation` property to specify croperty to specify a geoproximity resource recordset. | February 15, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::NeptuneGraph::Graph` and `AWS::NeptuneGraph::PrivateGraphEndpoint`.
[AWS::NeptuneGraph::Graph](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-neptunegraph-graph.html)
Use the `AWS::NeptuneGraph::Graph` resource to specify a graph in Amazon Neptune Analytics.
[AWS::NeptuneGraph::PrivateGraphEndpoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-neptunegraph-privategraphendpoint.html)
Use the `AWS::NeptuneGraph::PrivateGraphEndpoint` resource to specify a private graph endpoint in Amazon Neptune Analytics. | February 13, 2024 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::FSx::Filesystem` and `AWS::FSx::Volume`
[AWS::FSx::Filesystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html)
Use the `HAPairs` and `ThroughputCapacityPerHAPair``AWS::FSx::FileSystem OntapConfiguration` properties to create a scale out FSx for ONTAP file system.
[AWS::FSx::Volume](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-volume.html)
Use the `AggregateConfiguration`, `SizeInBytes`, and `VolumeStyle``AWS::FSx::Volume OntapConfiguration` properties when creating FSx for ONTAP volumes. | February 9, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IoT::DomainConfiguration.
[AWS::IoT::DomainConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-domainconfiguration.html)
The AWS::IoT::DomainConfiguration resource adds server certificate configuration parameter. | February 9, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::Cassandra::Table`.
[AWS::Cassandra::Table.AutoScalingSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cassandra-table.html)
Use the `AWS::Cassandra::Table.AutoScalingSpecifications` property to specify auto scaling settings for a table in provisioned capacity mode in Amazon Keyspaces (for Apache Cassandra).
[AWS::Cassandra::Table.ReplicaSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cassandra-table.html)
The `AWS::Cassandra::Table.ReplicaSpecification` property allows you to define different settings for replicas of a multi-Region table in Amazon Keyspaces (for Apache Cassandra). | February 2, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AutoScaling::AutoScalingGroup.
[AWS::AutoScaling::AutoScalingGroup InstanceRequirements](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-instancerequirements.html)
Use the `MaxSpotPriceAsPercentageOfOptimalOnDemandPrice` property when using attribute-based instance type selection. | January 29, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::GroundStation::MissionProfile.
[ContactPostPassDurationSeconds property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-groundstation-missionprofile.html#cfn-groundstation-missionprofile-contactpostpassdurationseconds)
Updated description of the ContactPostPassDurationSeconds property.
[ContactPrePassDurationSeconds property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-groundstation-missionprofile.html#cfn-groundstation-missionprofile-contactprepassdurationseconds)
Updated description of the ContactPrePassDurationSeconds property. | January 29, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::RDS::Integration
[AWS::RDS::Integration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-integration.html)
Use the `AdditionalEncryptionContext` property for an optional set of non-secret key–value pairs that contain additional contextual information about the data.
Use the `IntegrationName` property for the name of the integration.
Use the `KMSKeyId` property for the AWS KMS key identifier for the key to use to encrypt the integration.
Use the `SourceArn` property for the ARN of the database to use as the source for replication.
Use the `Tags` property for a list of tags.
Use the `TargetArn` property for the ARN of the Redshift data warehouse to use as the target for replication. | January 29, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::InspectorV2::CisScanConfiguration.
[AWS::InspectorV2::CisScanConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-cisscanconfiguration.html)
Use the `AWS::InspectorV2::CisScanConfiguration` resource to specify a CIS scan configuration. | January 23, 2024 |
| [New property](aws-template-resource-type-ref.md) | The following property was added: AWS::ECS::Service TimeoutConfiguration.
[AWS::ECS::Service TimeoutConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-service-timeoutconfiguration.html)
Use the `TimeoutConfiguration` property to specify the timeout for Service Connect | January 22, 2024 |
| [New properties](aws-template-resource-type-ref.md) | The following properties were added: AWS::ECS::Service ServiceConnectTlsConfiguration and AWS::ECS::Service ServiceConnectTlsCertificateAuthority.
[AWS::ECS::Service ServiceConnectTlsConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-cluster-serviceconnecttlsconfiguration.html)
Use the `ServiceConnectTlsConfiguration` property to specify the key that encrypts and decrypts your resources for Service Connect TLS.
[AWS::ECS::Service ServiceConnectTlsConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-service-serviceconnecttlscertificateauthority.html)
Use the `ServiceConnectTlsCertificateAuthority` property to specify the AWS Private Certificate Authority certificate. | January 22, 2024 |
| [New resources](aws-template-resource-type-ref.md) | The following property was updated: `AWS::Route53Resolver::FirewallRuleGroup FirewallRule`.
[AWS::Route53Resolver::FirewallRuleGroup FirewallRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-firewallrulegroup-firewallrule.html)
Added a `Qtype` property to include a DNS query type for the DNS Firewall rule to evaluate. | January 19, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following property was added to the `AWS::DynamoDB::GlobalTable` resource: `KinesisStreamSpecification`
[AWS::DynamoDB::GlobalTable.KinesisStreamSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-globaltable-kinesisstreamspecification.html)
Use the `KinesisStreamSpecification` property to set timestamp precision for Kinesis Data Streams. | January 18, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following property was added to the `AWS::DynamoDB::Table` resource: `KinesisStreamSpecification`
[AWS::DynamoDB::Table.KinesisStreamSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-table-kinesisstreamspecification.html)
Use the `KinesisStreamSpecification` property to set timestamp precision for Kinesis Data Streams. | January 18, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: `AWS::DataZone::DataSource`, `AWS::DataZone::Domain`, `AWS::DataZone::Environment`, `AWS::DataZone::EnvironmentBlueprintConfiguration`, `AWS::DataZone::EnvironmentProfile`, `AWS::DataZone::Project`, `AWS::DataZone::SubscriptionTarget`.
[AWS::DataZone::DataSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-datasource.html)
Use the `AWS::DataZone::DataSource` resource to specify an Amazon DataZone data source that is used to import technical metadata of assets (data) from the source databases or data warehouses into Amazon DataZone.
[AWS::DataZone::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-domain.html)
Use the `AWS::DataZone::Domain` resource to specify an Amazon DataZone domain. You can use domains to organize your assets, users, and their projects.
[AWS::DataZone::Environment](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-environment.html)
Use the `AWS::DataZone::Environment` resource to specify an Amazon DataZone environment, which is a collection of zero or more configured resources with a given set of IAM principals who can operate on those resources.
[AWS::DataZone::EnvironmentBlueprintConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-environmentblueprintconfiguration.html)
Use the `AWS::DataZone::EnvironmentBlueprintConfiguration` resource to specify the configuration details of an environment blueprint.
[AWS::DataZone::EnvironmentProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-environmentprofile.html)
Use the `AWS::DataZone::EnvironmentProfile` resource to specify the details of an environment profile.
[AWS::DataZone::Project](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-project.html)
Use the `AWS::DataZone::Project` resource to specify an Amazon DataZone project. Projects enable a group of users to collaborate on various business use cases that involve publishing, discovering, subscribing to, and consuming data in the Amazon DataZone catalog. Project members consume assets from the Amazon DataZone catalog and produce new assets using one or more analytical workflows.
[AWS::DataZone::SubscriptionTarget](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-datazone-subscriptiontarget.html)
Use the `AWS::DataZone::SubscriptionTarget` resource to specify an Amazon DataZone subscription target. Subscription targets enable you to access the data to which you have subscribed in your projects. A subscription target specifies the location (for example, a database or a schema) and the required permissions (for example, an IAM role) that Amazon DataZone can use to establish a connection with the source data and to create the necessary grants so that members of the Amazon DataZone project can start querying the data to which they have subscribed. | January 18, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IVS::Stage
[AWS::IVS::Stage](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-stage.html)
Use the `Stage` resource to specify a stage, a virtual space where participants can exchange video in real time. | January 18, 2024 |
| [Added properties](aws-template-resource-type-ref.md) | Added PreTokenGenerationConfig to AWS::Cognito::UserPool LambdaConfig and AWS::Cognito::UserPool PreTokenGenerationConfig. Adds support for access token customization Lambda functions.
[AWS::Cognito::UserPool PreTokenGenerationConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-pretokengenerationconfig.html)
You can update the version of your Lambda trigger event. Version 2 includes details to customize access tokens and ID tokens. | January 18, 2024 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Logs::AccountPolicy.
[ AWS::Logs::AccountPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-accountpolicy.html)
The AWS::Logs::AccountPolicy resource was updated to support account-level subscription filter policies, in addition to account-level data protection policies. For more information, see [Account-level subscription filters](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/SubscriptionFilters-AccountLevel.html). | January 15, 2024 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::NetworkFirewall::TLSInspectionConfiguration
[AWS::NetworkFirewall::TLSInspectionConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-tlsinspectionconfiguration.html)
Use the `AWS::NetworkFirewall::TLSInspectionConfiguration` resource to specify a TLS inspection configuration for Network Firewall to use to decrypt traffic for inspection. Network Firewall re-encrypts the traffic before sending it to its destination. | January 10, 2024 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was added: AWS::MediaTailor::Channel.TimeShiftConfiguration
[AWS::MediaTailor::Channel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediatailor-channel-timeshiftconfiguration.html)
Use the `AWS::MediaTailor::Channel.TimeShiftConfiguration` resource for configuration for time-shifted viewing. | December 27, 2023 |
| [updated resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::Pinpoint::GCMChannel DefaultAuthenticationMethod` and `AWS::Pinpoint::GCMChannel DefaultAuthenticationMethod ServiceJson`.
[AWS::Pinpoint::GCMChannel DefaultAuthenticationMethod](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pinpoint-gcmchannel.html)
Added the `DefaultAuthenticationMethod` property to specify the default authentication method used for GCM.
[AWS::Pinpoint::GCMChannel ServiceJson](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pinpoint-gcmchannel.html)
Added the `ServiceJson` property to generate an access token for authentication. | December 26, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Connect::PredefinedAttribute
[AWS::Connect::PredefinedAttribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-predefinedattribute.html)
Use the `AWS::Connect::PredefinedAttribute` resource to create a predefined attribute in the specified instance. | December 22, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::CodeCommit::Repository`
[AWS::CodeCommit::Repository Code](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codecommit-repository.html)
Use the `KmsKeyId` property to encrypt and decrypt the repository. | December 21, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::Route53Resolver::ResolverEndpoint` and `AAWS::Route53Resolver::ResolverRule TargetAddress`.
[AWS::Route53Resolver::ResolverEndpoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverendpoint.html)
Added a `Protocols` property to specify the protocols for an endpoint.
[AWS::Route53Resolver::ResolverRule TargetAddress](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-resolverrule-targetaddress.html)
Added a `Protocols` property to specify the protocols for an endpoint target address. | December 20, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::AppSync::GraphQLApi
[AWS::AppSync::GraphQLApi](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-graphqlapi.html)
Use the `IntrospectionConfig` property to enable or disable introspection.
Use the `ResolverCountLimit` property to set the maximum number of resolvers that can be invoked in a single request.
Use the `QueryDepthLimit` property to set the maximum depth a query can have in a single request. | December 19, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoT::CertificateProvider.
[AWS::IoT::CertificateProvider](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-certificateprovider.html)
Use the AWS::IoT::CertificateProvider resource to create a certificate provider. | December 19, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::EKS::Cluster`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html)
Use the `AccessConfig` property to enable access entries, the `aws-auth`ConfigMap, or both for the cluster.
An *access entry* allows an IAM user or role to access your cluster. Access entries can replace the need to maintain the `aws-auth``ConfigMap` for authentication. You have the following options for authorizing an IAM user or role to access Kubernetes objects on your cluster: Kubernetes role-based access control (RBAC), Amazon EKS API, or both. | December 15, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::EKS::AccessEntry`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-accessentry.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-accessentry.html)
Use the `AccessEntry` resource to create an access entry on your cluster. Access entries allow:
+ Amazon EC2 nodes and nodes created from Fargate profiles to join your cluster.
+ IAMroles used for any other purpose or IAM users to authenticate to your cluster and access Kubernetes objects on your cluster. | December 15, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EFS::FileSystem
[AWS::EFS::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-filesystem.html)
Use the `ReplicationOverwriteProtection` property for the new `FileSystemProtection` property type to enable or disable a file system's replication overwrite protection.
Use the `TransitionToArchive` property to define the lifecycle policy for transitioning files into Archive storage. | December 14, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::B2BI::Capability
[AWS::B2BI::Capability](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-b2bi-capability)
Use the `Capability` resource to specify trading capabilities for the B2BI service.
[AWS::B2BI::Partnership](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-b2bi-partnership)
Use the `Partnership` resource to specify the connection between a profile and a trading partner for the B2BI service.
[AWS::B2BI::Profile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-b2bi-profile)
Use the `Profile` resource to specify details about one of your private networks for the B2BI service.
[AWS::B2BI::Transformer](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-b2bi-transformer)
Use the `Transformer` resource to describe how to process incoming EDI (electronic data interchange) for the B2BI service. | December 14, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::AppSync::GraphQLApi
[AWS::AppSync::GraphQLApi](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-graphqlapi.html)
Use the `GraphQLEndpointArn` return value to get the GraphQL endpoint ARN. | December 13, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ApplicationAutoScaling::ScalingPolicy.
[AWS::ApplicationAutoScaling::ScalingPolicy CustomizedMetricSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationautoscaling-scalingpolicy-customizedmetricspecification.html)
Use the `Metrics` property to use metric math to customize the metrics that you include in your target tracking scaling policy. | December 7, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudTrail::EventDataStore
[AWS::CloudTrail::EventDataStore](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-eventdatastore.html)
Use the `FederationEnabled` property to specify whether you want to federate the event data store. Federating an event data store lets you view the metadata associated with the event data store in the AWS Glue[Data Catalog](https://docs.aws.amazon.com/glue/latest/dg/components-overview.html#data-catalog-intro) and run SQL queries against your event data using Amazon Athena. The table metadata stored in the AWS Glue Data Catalog lets the Athena query engine know how to find, read, and process the data that you want to query. For more information about Lake query federation, see [Federate an event data store](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/query-federation.html).
[AWS::CloudTrail::EventDataStore](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-eventdatastore.html)
If the `FederationEnabled` property is set to `true`, use the `FederationRoleArn` property to specify the ARN for the federation role. The federation role must exist in your account and provide the [required minimum permissions](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/query-federation.html#query-federation-permissions-role). | December 7, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::SNS::Topic.
[DeliveryStatusLogging](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sns-topic.html#cfn-sns-topic-deliverystatuslogging)
Use the `DeliveryStatusLogging` to log the delivery status of messages sent from your Amazon SNS topic to subscribed endpoints with the following supported delivery protocols:
+ Amazon Kinesis Data Firehose
+ Amazon Simple Queue Service
+ AWS Lambda
+ HTTP
+ Platform application endpoint | December 7, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::DMS::DataProvider`, `AWS::DMS::InstanceProfile`, `AWS::DMS::MigrationProject`.
[AWS::DMS::DataProvider](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dms-dataprovider.html)
Use the `AWS::DMS::DataProvider` resource to create a data provider for database migration services.
[AWS::DMS::InstanceProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dms-instanceprofile.html)
Use the `AWS::DMS::InstanceProfile` resource to define instance profiles for DMS operations.
[AWS::DMS::MigrationProject](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dms-migrationproject.html)
Use the `AWS::DMS::MigrationProject` resource to create and manage migration projects. | December 7, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::SNS::Topic.LoggingConfig.
[LoggingConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sns-topic-loggingconfig.html)
The `LoggingConfig` property type specifies the `Delivery` status logging configuration for an `AWS::SNS::Topic`. | December 7, 2023 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::CleanRooms::AnalysisTemplate`, `AWS::CleanRooms::Collaboration`, `AWS::CleanRooms::ConfiguredTable`, `AWS::CleanRooms::Collaboration` and `AWS::CleanRooms::Membership`.
[AWS::CleanRooms::ConfiguredTableAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-analysistemplate.html)
Use the `Tag` property to specify a key-value pair for a collaboration.
[AWS::CleanRooms::Collaboration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-collaboration.html)
Use the `QueryComputePaymentConfig` property to specify the collaboration member's payment responsibilities for query compute costs.
Use the `Tag` property to specify a key-value pair for a collaboration.
[AWS::CleanRooms::ConfiguredTable](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-configuredtable.html)
Use the `Tag` property to specify a key-value pair for a collaboration.
[AWS::CleanRooms::ConfiguredTableAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-configuredtableassociation.html)
Use the `Tag` property to specify a key-value pair for a collaboration.
[AWS::CleanRooms::Membership](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-membership.html)
Use the `MembershipPaymentConfiguration` and `MembershipQueryComputePaymentConfig` properties to specify payment responsibilities accepted by the collaboration member. | December 5, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated:AWS::BillingConductor::CustomLineItem AccountId.
[AWS::BillingConductor::CustomLineItem AccountId](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-billingconductor-customlineitem.html)
You can specify the AWS account in which a custom line item will be charged to. | December 5, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::WorkSpacesThinClient::Environment.
[AWS::WorkSpacesThinClient::Environment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesthinclient-environment.html)
Use the `AWS::WorkSpacesThinClient::Environment` resource to create an environment for the Amazon WorkSpaces Thin Client service. | December 5, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::CodeDeploy::DeploymentConfig`.
[AWS::CodeDeploy::DeploymentConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codedeploy-deploymentconfig.html)
Use the `ZonalConfig` property if you want CodeDeploy to deploy your application to one Availability Zone at a time. | December 4, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was released: [AWS::ARCZonalShift::ZonalAutoshiftConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-arczonalshift-zonalautoshift.resource.html).Use `AWS::ARCZonalShift::ZonalAutoshiftConfiguration` to authorize AWS to shift away resource traffic for an application from an Availability Zone during events, on your behalf, to help reduce time to recovery. In addition, configure options for required weekly practice runs in zonal autoshift. Practice runs test the safety of shifting away your application traffic from one Availability Zone in an AWS Region. | December 1, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::S3Express::DirectoryBucket and AWS::S3Express::BucketPolicy.
[AWS::S3Express::DirectoryBucket](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3express-directorybucket.html)
Use the `AWS::S3Express::DirectoryBucket` resource to create an Amazon S3 directory bucket.
[AWS::S3Express::BucketPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3express-bucketpolicy.html)
Use the `AWS::S3Express::BucketPolicy` resource to apply an S3 bucket policy to an S3 directory bucket. | December 1, 2023 |
| [Updated resources](aws-template-resource-type-ref.md) | `AWS::ElastiCache::ServerlessCache`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-replicationgroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-replicationgroup.html)
ServerlessCache enables the creation of caches with a variety of features including automatic scaling and related capabilities. For more information see [Serverless caching](https://docs.aws.amazon.com/AmazonElastiCache/latest/dg/WhatIs.html#WhatIs.Overview). | November 27, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::CodeStarConnections::RepositoryLink and SyncConfiguration
[AWS::CodeStarConnections::Connection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codestarconnections-connection.html)
Use a repository link with a sync configuration to use Git sync. | November 27, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AccessAnalyzer::Analyzer
[AWS::AccessAnalyzer::Analyzer](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-accessanalyzer-analyzer.html)
Use the `AnalyzerConfiguration` property to specify the configuration for an Unused Access Analyzer. | November 27, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Backup::RestoreTestingPlan
[AWS::Backup::RestoreTestingPlan](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-backup-restoretestingplan.html)
This resource was added for the feature Restore Testing. | November 27, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Backup::RestoreTestingSelection
[AWS::Backup::RestoreTestingSelection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-backup-restoretestingselection.html)
This resource was added for the feature Restore Testing. | November 27, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ManagedBlockchain::Accessor
[AWS::ManagedBlockchain::Accessor](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-managedblockchain-accessor.html)
Use the `NetworkType` property to choose the blockchain network that you are creating the `Accessor` for. | November 26, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::EKS::PodIdentityAssociation`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-podidentityassociation.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-podidentityassociation.html)
Use the `PodIdentityAssociation` to create an EKS Pod Identity association to give IAM credentials to pods through service accounts. The previous method to do the same, IAM roles for service accounts, could only be managed inside Kubernetes. | November 26, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CodePipeline::Pipeline.
[AWS::CodePipeline::Pipeline](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codepipeline-pipeline.html)
Added trigger and variables for V2 type pipelines. | November 19, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following properties and return values have been added:
[EndpointManagement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-endpointmanagement)
The `EndpointManagement` property has added, letting you choose how you want to manage the Amazon VPC endpoints associated with your environment. You can choose to manage your own endpoints or let Amazon MWAAmanage them on your behalf.
[Return values](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#aws-resource-mwaa-environment-return-values)
Amazon MWAA is adding `CeleryExecutorQueue`, `DatabaseVpcEndpointService`, and `WebserverVpcEndpointService` as return values you can use in your templates. | November 19, 2023 |
| [Updated resources](aws-template-resource-type-ref.md) | The AWS ::Transfer::Server and AWS ::Transfer::User resources have been updated.
[AWS ::Transfer::Server S3StorageOptions ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-server-s3storageoptions.html)
Use the `S3StorageOptions` property to specify how Transfer Family works with Amazon S3 .
[AWS ::Transfer::User HomeDirectoryMapEntry ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-user-homedirectorymapentry.html)
Use the `Type` parameter to specify whether the target of a logical directory mapping is a directory or a file. | November 17, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following parameters were added to the AWS::IoT::SecurityProfile resource.
[SecurityProfile MetricsExportConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-securityprofile.html#cfn-iot-securityprofile-metricsexportconfig)
Specifies the MQTT topic and role ARN required for metric export.
[SecurityProfile Behavior ExportMetric](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-securityprofile-behavior.html#cfn-iot-securityprofile-behavior-exportmetric)
Value indicates exporting metrics related to the behavior when it is true.
[SecurityProfile MetricsExportConfig RoleArn](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-securityprofile-metricsexportconfig.html#cfn-iot-securityprofile-metricsexportconfig-rolearn)
This role ARN has permission to publish MQTT messages, after which Device Defender Detect can assume the role and publish messages on your behalf.
[SecurityProfile MetricToRetain ExportMetric](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-securityprofile-metrictoretain.html#cfn-iot-securityprofile-metrictoretain-exportmetric)
Value added in both `Behavior` and `AdditionalMetricsToRetainV2` to indicate if Device Defender Detect should export the corresponding metrics. | November 17, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were updated:
[AWS::ECR::PullThroughCacheRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pullthroughcacherule.html)
The `AWS::ECR::PullThroughCacheRule` property was updated to include the required properties to create a pull through cache rule for an upstream registry that requires authentication. | November 16, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudTrail::EventDataStore
[AWS::CloudTrail::EventDataStore](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-eventdatastore.html)
Use the `BillingMode` property to specify the billing mode to use for the event data store. The billing mode determines the cost for ingesting events and storing events, and the default and maximum retention period for the event data store. For more information, see [Event data store pricing options](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake-manage-costs.html#cloudtrail-lake-manage-costs-pricing-option) in the *AWS CloudTrail User Guide*. | November 15, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AutoScaling::AutoScalingGroup.
[AWS::AutoScaling::AutoScalingGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-autoscalinggroup.html)
Use the `InstanceMaintenancePolicy` property to meet specific capacity requirements during events that lead to instance replacement, such as health check failures or an instance refresh. | November 15, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::Grafana::Workspace`.
[AWS::Grafana::Workspace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-grafana-workspace.html)
Use the `PluginAdminEnabled` property of the `AWS::Grafana::Workspace` resource to allow workspace admins to install, uninstall, or update plugins in the Amazon Managed Grafana workspace. | November 15, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::OpenSearchServerless::LifecyclePolicy.
[AWS::OpenSearchServerless::LifecyclePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchserverless-lifecyclepolicy.html)
Use the `AWS::OpenSearchServerless::LifecyclePolicy` resource to create lifecycle access policies for Amazon OpenSearch Serverless. | November 15, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Pipes::Pipe.
[AWS::Pipes::Pipe](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pipes-pipe.html)
Use the [https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pipes-pipe-pipelogconfiguration.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pipes-pipe-pipelogconfiguration.html) property to specify the configuration settings for the logs to which the pipe should report events. | November 14, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudTrail::EventDataStore
[AWS::CloudTrail::EventDataStore](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-eventdatastore.html)
Use the `InsightsDestination` property to specify the ARN (or ID suffix of the ARN) of the destination event data store that logs Insights events.
[AWS::CloudTrail::EventDataStore InsightSelector](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-eventdatastore-insightselector.html)
Use the `AWS::CloudTrail::EventDataStore InsightSelector` property to specify the types of Insights events you want to collect in your destination event data store. `ApiCallRateInsight` and `ApiErrorRateInsight` are valid Insights types. | November 10, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBInstance
[AWS::RDS::DBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html)
Use the `AutomaticBackupReplicationRegion` property for the destination Region for the backup replication of the DB instance. | November 9, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::IPAM.
[AWS::EC2::IPAM](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-ipam.html)
IPAM is now offered in a Free Tier and an Advanced Tier. For more information about the features available in each tier and the costs associated with the tiers, see [Amazon VPC pricing > IPAM tab](https://aws.amazon.com//vpc/pricing/).' | November 8, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::MWAA::Environment
[AirflowVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-airflowversion)
The `AirflowVersion` property has been updated to include a new valid value for Apache Airflow version 2.7.2. | November 6, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The documentation for the following resource was updated: AWS::AppRunner::Service
[AWS::AppRunner::Service.Tag.Value](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apprunner-service-tag.html#aws-properties-apprunner-service-tag-properties)
The value assigned to the Tag property of the App Runner service. | November 3, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The documentation for the following resource was updated: AWS::AppRunner::AutoScalingConfiguration
[AWS::AppRunner::AutoScalingConfiguration.Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apprunner-autoscalingconfiguration-tag.html)
The `Tag` added for the autoscaling configuration resource. | November 3, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The documentation for the following resource was updated: AWS::AppRunner::ObservabilityConfiguration
[AWS::AppRunner::ObservabilityConfiguration.Tag.Key](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apprunner-observabilityconfiguration-tag.html#aws-properties-apprunner-observabilityconfiguration-tag-properties)
The key assigned to `Tag` property of the AWS App Runner observability configuration. | November 3, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The documentation for the following resource was updated: AWS::AppRunner::Service
[AWS::AppRunner::Service.Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apprunner-service-tag.html)
The Tag assigned to App Runner service. | November 3, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AppRunner::Service
[AWS::AppRunner::Service.CodeRepository.SourceDirectory](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apprunner-service-coderepository.html#aws-properties-apprunner-service-coderepository-properties)
New property. The SourceDirectory of the App Runner service. | November 3, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The documentation for the following resource was updated: AWS::AppRunner::VpcIngressConnection
[AWS::AppRunner::VpcIngressConnection.Tag.Key](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apprunner-vpcingressconnection-tag.html#aws-properties-apprunner-vpcconnector-tag-properties)
The key assigned to `Tag` property of the VpcIngressConnection resource of the App Runner service. | November 3, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The documentation for the following resource was updated: AWS::AppRunner::VpcIngressConnection
[AWS::AppRunner::VpcIngressConnection.Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apprunner-vpcingressconnection-tag.html)
The tag assigned to the VpcIngressConnection resource of the App Runner service. | November 3, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The documentation for the following resource was updated: AWS::AppRunner::VpcConnector
[AWS::AppRunner::VpcConnector.Tag.Value](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apprunner-vpcconnector-tag.html#aws-properties-apprunner-vpcconnector-tag-properties)
The value added to the `Tag` property of the VpcConnector resource. | November 3, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The documentation for the following resource was updated: AWS::AppRunner::AutoScalingConfiguration
[AWS::AppRunner::AutoScalingConfiguration.Tag.Key](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apprunner-autoscalingconfiguration-tag.html#aws-properties-apprunner-autoscalingconfiguration-tag-properties)
The key added for the `Tag` property of autoscaling configuration resource. | November 3, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The documentation for the following resource was updated: AWS::AppRunner::VpcConnector
[AWS::AppRunner::VpcConnector.Tag.Key](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apprunner-vpcconnector-tag.html#aws-properties-apprunner-vpcconnector-tag-properties)
The key added for the VpcConnector resource. | November 3, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The documentation for the following resource was updated: AWS::AppRunner::ObservabilityConfiguration
[AWS::AppRunner::ObservabilityConfiguration.Tag.Value](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apprunner-observabilityconfiguration-tag.html#aws-properties-apprunner-observabilityconfiguration-tag-properties)
The value added for the `Tag` property of the AWS App Runner observability configuration. | November 3, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The documentation for the following resource was updated: AWS::AppRunner::AutoScalingConfiguration
[AWS::AppRunner::AutoScalingConfiguration.Tag.Value](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apprunner-autoscalingconfiguration-tag.html#aws-properties-apprunner-autoscalingconfiguration-tag-properties)
The value added for the `Tag` property of autoscaling configuration resource. | November 3, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The documentation for the following resource was updated: AWS::AppRunner::VpcIngressConnection
[AWS::AppRunner::VpcIngressConnection.Tag.Value](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apprunner-vpcingressconnection-tag.html#aws-properties-apprunner-vpcconnector-tag-properties)
The value assigned to the VpcIngressConnection resource of the App Runner service. | November 3, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The documentation for the following resource was updated: AWS::AppRunner::Service
[AWS::AppRunner::Service.Tag.Key](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apprunner-service-tag.html#aws-properties-apprunner-service-tag-properties)
The key assigned to App Runner service. | November 3, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The documentation for the following resource was updated: AWS::AppRunner::ObservabilityConfiguration
[AWS::AppRunner::ObservabilityConfiguration.Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apprunner-observabilityconfiguration-tag.html)
Use the `Tag` parameter to add a key-value pair to AWS App Runner observability configuration. | November 3, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The documentation for the following resource was updated: AWS::AppRunner::VpcConnector
[AWS::AppRunner::VpcConnector.Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apprunner-vpcconnector-tag.html)
Use the `AWS::AppRunner::VpcConnector Tag` resource to assign a key-value pair. | November 3, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AppRunner::Service
[AWS::AppRunner::Service.NetworkConfiguration.IpAddressType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apprunner-service-networkconfiguration.html#aws-properties-apprunner-service-networkconfiguration-properties)
New property. Use the `IpAddressType` property to select either IP4 or dual stack for your incoming public traffic. | November 3, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::EMRServerless::Application MonitoringConfiguration`.
[AWS::EMRServerless::Application MonitoringConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-emrserverless-application.html)
Use the `MonitoringConfiguration` property to set the monitoring configuration. | November 3, 2023 |
| [New attribute](aws-template-resource-type-ref.md) | The following attribute was added: AWS::SNS::Topic.ArchivePolicy.
[AWS::SNS::Topic](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sns-topic.html)
Use the `AWS::SNS::Topic.ArchivePolicy` attribute to archive messages to an SNS topic. Only supported for FIFO topics. | October 26, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following parameter was added: DestinationPackageVersions to the AWS::IoT::JobTemplate resource in the Ningxia (cn-northest-1) Region. It is still available in the Beijing (cn-north-1) Region and other Regions where Service Package Catalog has been deployed.
[DestinationPackageVersions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-jobtemplate.html#cfn-iot-jobtemplate-destinationpackageversions)
Use the DestinationPackageVersions paremeter in the AWS::IoT::JobTemplate resource to indentify the package version Amazon Resource Names (ARNs) that are installed on the device’s reserved named shadow (\$1package) when the job successfully completes. | October 25, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following property was updated: `AWS::EKS::Cluster`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-resourcesvpcconfig.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-resourcesvpcconfig.html)
You can change the `SubnetIds` and `SecurityGroupIds` property values once the cluster is created without interruptions. Previously, changing these property values required replacement. | October 24, 2023 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::EntityResolution::MatchingWorkflow` and `AWS::EntityResolution::SchemaMapping`.
[AWS::EntityResolution::MatchingWorkflow](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-entityresolution-matchingworkflow.html)
Use the `AWS::EntityResolution::MatchingWorkflow IntermediateSourceConfiguration` property to temporarily store your data while it processes.
Use the `AWS::EntityResolution::MatchingWorkflow ProviderProperties` property to specify configuration parameters to use with a provider service.
[AWS::EntityResolution::SchemaMapping](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-entityresolution-schemamapping.html)
Use `SubType` to specify a subtype of the attribute, selected from a list of values. | October 19, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::MSK::Configuration and AWS::MSK::BatchScramSecret.
[AWS::MSK::Configuration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-msk-configuration.html)
Creates a new MSK configuration.
[AWS::MSK::BatchScramSecret](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-msk-batchscramsecret.html)
Represents a secret stored in the Amazon Secrets Manager that can be used to authenticate with a cluster using a user name and a password. | October 19, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::WAFv2::WebACL.
[AWS::WAFv2::WebACL](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webacl.html)
Use the `EnableMachineLearning` property in `AWSManagedRulesBotControlRuleSet` to indicate whether to use machine learning (ML) to analyze your web traffic for bot-related activity. This setting applies only to the targeted protection level of the Bot Control managed rule group. | October 19, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::EntityResolution::IdMappingWorkflow`.
[AWS::EntityResolution::IdMappingWorkflow](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-entityresolution-idmappingworkflow.html)
Use the `AWS::EntityResolution::IdMappingWorkflow` resource to specify a new ID mapping workflow resource in AWS Entity Resolution. | October 19, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::MSK::Replicator.
[AWS::MSK::Replicator](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-msk-replicator.html)
Use the `Replicator` property to create an MSK Replicator to reliably replicate data across Amazon MSK clusters. | October 19, 2023 |
| [Added properties](aws-template-resource-type-ref.md) | Added AWS::Cognito::LogDeliveryConfiguration and associated parameters for CloudWatch Logs configuration in user pools.
[AWS::Cognito::LogDeliveryConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-logdeliveryconfiguration.html)
You can configure a user pool to log detailed information about user errors to CloudWatch Logs. | October 19, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IoT::TopicRule KafkaAction.
[AWS::IoT::TopicRule KafkaAction](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-topicrule-kafkaaction.html)
The AWS::IoT::TopicRule KafkaAction resource adds headers parameter. | October 12, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoT::SoftwarePackageVersion.
[AWS::IoT::SoftwarePackageVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-softwarepackageversion.html)
Use the AWS::IoT::SoftwarePackageVersion resource to create a package version.
**Note:** The software package must exist before creating the package version. | October 12, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Lambda::Function.
[AWS::Lambda::Function VpcConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-vpcconfig.html)
Use the `Ipv6AllowedForDualStack` property to allow outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. | October 12, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoT::SoftwarePackage.
[AWS::IoT::SoftwarePackage](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-softwarepackage.html)
Use the AWS::IoT::SoftwarePackage resource to create a software package. | October 12, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following paremeter was added: DestinationPackageVersions to the AWS::IoT::JobTemplate resource in the Beijing (cn-north-1) Region and other Regions where Service Package Catalog has been deployed except for the the Ningxia (cn-northest-1) Region.
[DestinationPackageVersions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-jobtemplate.html#cfn-iot-jobtemplate-destinationpackageversions)
Use the DestinationPackageVersions paremeter in the AWS::IoT::JobTemplate resource to indentify the package version Amazon Resource Names (ARNs) that are installed on the device’s reserved named shadow (\$1package) when the job successfully completes. | October 12, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::InternetMonitor::Monitor`.
[AWS::InternetMonitor::Monitor](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-internetmonitor-monitor.html)
Use `Monitor.Resources` to add or remove resources when making an update. If `Monitor.Resources` is non-empty during an update, `Monitor.ResourcesToAdd` and `Monitor.ResourcesToRemove` must be empty. | October 6, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ServiceCatalog::PortfolioPrincipalAssociation.
[AWS::ServiceCatalog::PortfolioPrincipalAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-portfolioprincipalassociation.html)
Use the PrincipalType property to specify the type of principal associated with the portfolio. | October 5, 2023 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::Lightsail::Disk and AWS::Lightsail::Container
[AWS::Lightsail::Disk Location](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lightsail-disk-location.html)
Use the `location` property to specify the location of the disk, such as the AWS Region and Availability Zone.
[AWS::Lightsail::Container PrivateRegistryAccess](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lightsail-container-privateregistryaccess.html)
Use the `PrivateRegistryAccess` property to describe the configuration for a Lightsail container service to access private container image repositories, such as Amazon Elastic Container Registry (Amazon ECR) private repositories. | September 28, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EFS::FileSystem.
[AWS::EFS::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-filesystem.html)
Use the `ReplicationConfiguration` property to specify a replication configuration for a file system.
Use the `ReplicationDestination` property to specify the destination file system for a replication configuration. | September 21, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBInstance
[AWS::RDS::DBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html)
Use the `DomainAuthSecretArn` property to find the ARN for the Secrets Manager with the details for the user joining the domain.
Use the `DomainDnsIps` property for the IP addresses of the Active Directory domain controllers.
Use the `DomainFqdn` property for the fully qualified domain name (FQDN) of an Active Directory domain.
Use the `DomainOu` property for the Active Directory organizational unit for your DB instance to join. | September 21, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Connect::SecurityProfile
[AWS::Connect::SecurityProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-securityprofile.html)
Use the `AWS::Connect::SecurityProfile` resource to create a security profile in the specified instance. | September 21, 2023 |
| [New resource](aws-template-resource-type-ref.md) | Use the following resource to create a data store in AWS HealthImaging.
[AWS::HealthImaging::Datastore](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-healthimaging-datastore.html)
Creates a data store in AWS HealthImaging. | September 21, 2023 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::AppStream::Fleet` and `AWS::AppStream::Fleet ComputeCapacity`.
[AWS::AppStream::Fleet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appstream-fleet.html)
Use the `MaxSessionsPerInstance` property to specify the maximum number of user sessions on an instance. This is applicable only for multi-session fleets.
[AWS::AppStream::Fleet ComputeCapacity](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appstream-fleet-computecapacity.html)
Use the `DesiredSessions` property to specify the desired capacity in terms of number of user sessions for a multi-session fleet.
[AWS::AppStream::ApplicationFleetAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appstream-applicationfleetassociation.html)
Use the `AWS::AppStream::ApplicationFleetAssociation` resource to specify an association between an application and fleet. | September 14, 2023 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::MediaPackageV2::Channel, AWS::MediaPackageV2::ChannelGroup, AWS::MediaPackageV2::ChannelPolicy, AWS::MediaPackageV2::OriginEndpoint, and AWS::MediaPackageV2::OriginEndpointPolicy.
[AWS::MediaPackageV2::Channel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackagev2-channel.html)
Use the `AWS::MediaPackageV2::ChannelGroup` resource to specify the configuration parameters for a channel.
[AWS::MediaPackageV2::ChannelGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackagev2-channelgroup.html)
Use the `AWS::MediaPackageV2::ChannelGroup` resource to specify the configuration parameters for a channel group.
[AWS::MediaPackageV2::ChannelPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackagev2-channnelpolicy.html)
Use the `AWS::MediaPackageV2::ChannelPolicy` resource to specify the configuration parameters for a channel policy.
[AWS::MediaPackageV2::OriginEndpoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackagev2-originendpoint.html)
Use the `AWS::MediaPackageV2::OriginEndpoint` resource to specify the configuration parameters for an origin endpoint.
[AWS::MediaPackageV2::OriginEndpointPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackagev2-originendpointpolicy.html)
Use the `AWS::MediaPackageV2::OriginEndpointPolicy` resource to specify the configuration parameters for an origin endpoint policy. | September 14, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::BillingConductor::CustomLineItem LineItemFilter.
[AWS::BillingConductor::CustomLineItem LineItemFilter](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-billingconductor-customlineitem-lineitemfilter.html)
You can use `LineItemFilter` for your `CustomLineItem` to customize the definition of a billing group's total cost when you include the billing group as a resource value for a percentage custom line item. | September 7, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::CleanRooms::Membership`.
[AWS::CleanRooms::Membership](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-membership.html)
Use the `MembershipProtectedQueryOutputConfiguration`, `MembershipProtectedQueryResultConfiguration`, and `ProtectedQueryS3OutputConfiguration` properties to specify configurations for protected query results. | September 7, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Connect::View
[AWS::Connect::View](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-view.html)
Use the `AWS::Connect::View` resource to create a customer-managed view in the specified instance. | September 7, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Connect::ViewVersion
[AWS::Connect::ViewVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-viewversion.html)
Use the `AWS::Connect::ViewVersion` resource to create a version for the specified customer-managed view within the specified instance. | September 7, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::CloudFormation::Stack`.
[AWS::CloudFormation::Stack](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-stack.html)
The `Capabilities`, `ChangeSetId`, `CreationTime`, `Description`, `DisableRollback`, `EnableTerminationProtection`, `LastUpdateTime`, `Outputs`, `ParentId`, `RoleARN`, `RootId`, `StackId`, `StackName`, `StackPolicyBody`, `StackPolicyURL`, `StackStatus`, `StackStatusReason`, and `TemplateBody` properties can be accessed only when using AWS Cloud Control API. | August 31, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::DataSync::Task`.
[AWS::DataSync::Task](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-task.html)
Use the `TaskReportConfig` property to configure task reports, which can help you monitor and audit your DataSync transfers. | August 31, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::CleanRooms::AnalysisTemplate`
[AWS::CleanRooms::AnalysisTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-analysistemplate.html)
Use the `AWS::CleanRooms::AnalysisTemplate` resource to specify a new analysis template resource in AWS Clean Rooms. | August 31, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::PCAConnectorAD::Connector
[AWS::PCAConnectorAD::Connector](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorad-connector.html)
Creates and manage connector between AWS Private CA and an Active Directory. | August 31, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::PCAConnectorAD::DirectoryRegistration
[AWS::PCAConnectorAD::DirectoryRegistration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorad-directoryregistration.html)
Create and manage a directory registration that authorizes communication between AWS Private CA and an Active Directory | August 31, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::PCAConnectorAD::ServicePrincipalName
[AWS::PCAConnectorAD::ServicePrincipalName](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorad-serviceprincipalname.html)
Create and manage service principal name (SPN) for the service account in Active Directory. | August 31, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::PCAConnectorAD::TemplateGroupAccessControlEntry
[AWS::PCAConnectorAD::TemplateGroupAccessControlEntry](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorad-templategroupaccesscontrolentry.html)
Create and manage group access control entries from Active Directory groups. | August 31, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::PCAConnectorAD::Template
[AWS::PCAConnectorAD::Template](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorad-template.html)
Create and manage an Active Directory compatible certificate template. | August 31, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::WAFv2::WebACL.
[AWS::WAFv2::WebACL](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webacl.html)
Added guidance for managing web ACLs that you use with Shield Advanced automatic application layer DDoS mitigation. | August 30, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::CleanRooms::ConfiguredTable`.
[AWS::CleanRooms::ConfiguredTable](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-configuredtable.html)
Use the `AnalysisRuleCustom` property to specify a configured table resource with the `custom` analysis rule type in AWS Clean Rooms. | August 24, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::EMRServerless::Application`.
[AWS::EMRServerless::Application](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-emrserverless-application.html)
The `ReleaseLabel` property can now be modified. | August 24, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resource was added: `AWS::EntityResolution::MatchingWorkflow`.
[AWS::EntityResolution::MatchingWorkflow](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-entityresolution-matchingworkflow.html)
Use the `AWS::EntityResolution::MatchingWorkflow` resource to specify a new matching workflow resource in AWS Entity Resolution. | August 24, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::WorkSpacesWeb::BrowserSettings`, `AWS::WorkSpacesWeb::IdentityProvider`, `AWS::WorkSpacesWeb::IpAccessSettings`, `AWS::WorkSpacesWeb::NetworkSettings`, `AWS::WorkSpacesWeb::Portal`, `AWS::WorkSpacesWeb::TrustStore`, `AWS::WorkSpacesWeb::UserAccessLoggingSettings`, and `AWS::WorkSpacesWeb::UserSettings`.
[AWS::WorkSpacesWeb::BrowserSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-browsersettings.html)
Use the `AWS::WorkSpacesWeb::BrowserSettings` resource to specify browser settings that can be associated with a web portal.
[AWS::WorkSpacesWeb::IdentityProvider](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-identityprovider.html)
Use the `AWS::WorkSpacesWeb::IdentityProvider` resource to specify an identity provider that is then associated with a web portal.
[AWS::WorkSpacesWeb::IpAccessSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-ipaccesssettings.html)
Use the `AWS::WorkSpacesWeb::IpAccessSettings` resource to specify IP access settings that can be associated with a web portal.
[AWS::WorkSpacesWeb::NetworkSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-networksettings.html)
Use the `AWS::WorkSpacesWeb::NetworkSettings` resource to specify network settings that can be associated with a web portal.
[AWS::WorkSpacesWeb::Portal](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-portal.html)
Use the `AWS::WorkSpacesWeb::Portal` resource to specify a web portal, which users use to start browsing sessions.
[AWS::WorkSpacesWeb::TrustStore](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-truststore.html)
Use the `AWS::WorkSpacesWeb::TrustStore` resource to specify a trust store that can be associated with a web portal.
[AWS::WorkSpacesWeb::UserAccessLoggingSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-useraccessloggingsettings.html)
Use the `AWS::WorkSpacesWeb::UserAccessLoggingSettings` resource to specify user access logging settings that can be associated with a web portal.
[AWS::WorkSpacesWeb::UserSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspacesweb-usersettings.html)
Use the `AWS::WorkSpacesWeb::UserSettings` resource to specify user settings that can be associated with a web portal. | August 24, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | AWS::NetworkManager::ConnectPeer was updated.
[AWS::NetworkManager::ConnectPeer](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkmanager-connectpeer.html)
Use the `SubnetArn` property to specify the subnet ARN of a Connect peer. | August 23, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Kinesis::ResourcePolicy.
[AWS::Kinesis::ResourcePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kinesis-resourcepolicy.html)
Use the `ResourcePolicy` property to apply an Amazon resource policy to an Amazon Kinesis Data Streams stream or consumer. | August 23, 2023 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::MediaTailor::Channel, AWS::MediaTailor::ChannelPolicy, AWS::MediaTailor::LiveSource, AWS::MediaTailor::SourceLocation, and AWS::MediaTailor::VodSource
[AWS::MediaTailor::Channel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediatailor-channel.html)
Use the `AWS::MediaTailor::Channel` resource to specify the configuration parameters for a channel.
[AWS::MediaTailor::ChannelPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediatailor-channelpolicy.html)
Use the `AWS::MediaTailor::ChannelPolicy` resource to specify an IAM policy for the channel.
[AWS::MediaTailor::LiveSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediatailor-livesource.html)
Use the `AWS::MediaTailor::LiveSource` resource to specify configuration parameters for a live source.
[AWS::MediaTailor::SourceLocation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediatailor-sourcelocation.html)
Use the `AWS::MediaTailor::SourceLocation` resource to specify configuration parameters for a source location.
[AWS::MediaTailor::VodSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediatailor-vodsource.html)
Use the `AWS::MediaTailor::VodSource` resource to specify configuration parameters for a VOD source. | August 17, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::AppSync::GraphQLApi
[AWS::AppSync::GraphQLApi](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-graphqlapi.html)
Updated several properties to mutable values. | August 17, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::FSx::Filesystem`
[AWS::FSx::Filesystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html)
The `AWS::FSx::FileSystem OpenZFSConfiguration` and `AWS::FSx::FileSystem WindowsConfiguration` resources were updated. | August 17, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resource was added: `AWS::EntityResolution::SchemaMapping`.
[AWS::EntityResolution::SchemaMapping](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-entityresolution-schemamapping.html)
Use the `AWS::EntityResolution::SchemaMapping` resource to specify a new schema mapping resource in AWS Entity Resolution. | August 17, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::EC2::InstanceConnectEndpoint.
[ AWS::EC2::InstanceConnectEndpoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-instanceconnectendpoint.html)
Creates an EC2 Instance Connect Endpoint. | August 17, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Route53Resolver::OutpostResolver
[AWS::Route53Resolver::OutpostResolver](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-outpostresolver.html)
Use the `AWS::Route53Resolver::OutpostResolver` resource to specify information about a Route 53 Resolver on an AWS Outposts. | August 17, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::LaunchTemplate NetworkInterface.
[ AWS::EC2::LaunchTemplate NetworkInterface](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-networkinterface.html)
Use the `PrimaryIpv6` property to specify a primary IPv6 address on a network interface. | August 10, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IVS::RecordingConfiguration
[AWS::IVS::RecordingConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-recordingconfiguration.html)
Use the `RecordingConfiguration` resource to configure a stream recording. | August 10, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::WAFv2::WebACL.
[AWS::WAFv2::WebACL](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webacl.html)
Use the `AWSManagedRulesACFPRuleSet` property to configure your use of the account creation fraud prevention (ACFP) managed rule group, in a managed rule group reference statement. For protected CloudFront distributions, in addition to inspecting account registration and account creation requests, you can also use ACFP to block new account creation attempts from clients that have recently submitted too many failed account creation attempts.
Use the `EnableRegexInPath` setting in the `AWSManagedRulesATPRuleSet` property to enable the use of regex in the login page path specification. | August 10, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Connect::TrafficDistributionGroup
[AWS::Connect::TrafficDistributionGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-trafficdistributiongroup.html)
Use the `AWS::Connect::TrafficDistributionGroup` resource to get information about a traffic distribution group. | August 10, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::DataSync::LocationAzureBlob.
[AWS::DataSync::LocationAzureBlob](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationazureblob.html)
Use the `AWS::DataSync::LocationAzureBlob` resource to create a transfer location for a Microsoft Azure Blob Storage container. | August 10, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::MWAA::Environment
[AirflowVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-airflowversion)
The `AirflowVersion` property has been updated to include a new valid value for Apache Airflow version 2.6.3. | August 9, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::Batch:JobDefinition`.
[AWS::Batch::JobDefinition RuntimePlatform](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-containerproperties-runtimeplatform.html#cfn-batch-jobdefinition-containerproperties-runtimeplatform-cpuarchitecture)
Use the `RuntimePlatform` property to specify the `CpuArchitecture` and `OperatingSystemFamily` for AWS Batch jobs on AWS Fargate. | August 8, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::BillingConductor::BillingGroup AccountGrouping.
[AWS::BillingConductor::BillingGroup AccountGrouping](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-billingconductor-billinggroup-accountgrouping.html)
You can use `AutoAssociate` so that your billing group will automatically associate newly added AWS accounts that join your consolidated billing family. | August 3, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were added: `AWS::DMS::ReplicationConfig`, `AWS::DMS::ComputeConfig`. The following resources were updated: `AWS::DMS::RedshiftSettings`, `AWS::DMS::ComputeConfig`.
[AWS::DMS::Endpoint.ReplicationConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dms-replicationconfig.html)
Added `ReplicationConfig`. Use `ReplicationConfig` to configure a serverless replication.
[AWS::DMS::Endpoint.ReplicationConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-dms-replicationconfig-computeconfig.html)
Added `ComputeConfig`. Use `ComputeConfig` to configure provisioning for a serverless replication.
[AWS::DMS::Endpoint.MongoDbSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-dms-endpoint-redshiftsettings.html)
Added `MapBooleanAsBoolean` attributes to `RedshiftSettings`. Use `MapBooleanAsBoolean` to configure how DMS migrates boolean values.
[AWS::DMS::Endpoint.MongoDbSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-dms-endpoint-postgresqlsettings.html)
Added `MapBooleanAsBoolean` to `PostgreSQLSettings`. Use `MapBooleanAsBoolean` to configure how DMS migrates boolean values. | August 3, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::NetworkInterface.
[ AWS::EC2::NetworkInterface](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkinterface.html)
Use the `EnablePrimaryIpv6` property to enable a primary IPv6 address on a network interface. | August 3, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::SQS::QueueInlinePolicy
[AWS::SQS::QueueInlinePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sqs-queueinlinepolicy.html)
You can now associate one Amazon SQS policy with one queue. | August 3, 2023 |
| [New and updated resources](aws-template-resource-type-ref.md) | The AWS ::Transfer::Connector As2Config resource has been updated with several new parameters. Also, the AWS ::Transfer::Connector Sftp2Config resource has been added.
[AWS ::Transfer::Connector As2Config ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-connector-as2config.html)
Multiple parameters have been added for this resource. See the linked documentation for details.
[AWS ::Transfer::Connector SftpConfig ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-connector-sftpconfig.html)
Use the `SftpConfig` resource to specify values for a connector. The connector establishes a relationship between your AWS storage and a partner's SFTP server. | August 3, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::SNS::TopicInlinePolicy.
[AWS::SNS::TopicInlinePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sns-topicinlinepolicy.html)
Use the `AWS::SNS::TopicInlinePolicy` resource to associate one Amazon SNS topic with one policy. | August 2, 2023 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup.
[AWS::WAFv2::WebACL](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webacl.html)
Use the `AggregateKeyType` and `CustomKeys` properties in rate based rules to configure custom web request aggregation for rate limiting.
[AWS::WAFv2::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-rulegroup.html)
Use the `AggregateKeyType` and `CustomKeys` properties in rate based rules to configure custom web request aggregation for rate limiting. | July 27, 2023 |
| [`Fn::ForEach` intrinsic function](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-foreach.html) | The `Fn::ForEach` intrinsic function introduces looping capabilities to your CloudFormation templates. With `Fn::ForEach`, you can replicate parts of your templates with minimal lines of code. You can use `Fn::ForEach` to simplify your template layout and make it easier and faster for you and your peers to review your code. | July 25, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::S3::Bucket.
[AWS::S3::Bucket MetadataConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-s3-bucket-metadataconfiguration.html)
Added examples for creating a V2 S3 Metadata configuration. | July 23, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::FSx::Volume`
[AWS::FSx::Volume](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-volume.html)
Use the `SnapLockConfiguration` resource to create an ONTAP SnapLock volume. | July 20, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::IAM::GroupPolicy`, `AWS::IAM::RolePolicy`, and `AWS::IAM::UserPolicy`.
[AWS::IAM::GroupPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-grouppolicy.html)
Use the `AWS::IAM::GroupPolicy` resource to specify an inline policy document that is embedded in the IAM group.
[AWS::IAM::RolePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-rolepolicy.html)
Use the `AWS::IAM::RolePolicy` resource to specify an inline policy document that is embedded in the IAM role.
[AWS::IAM::UserPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-userpolicy.html)
Use the `AWS::IAM::UserPolicy` resource to specify an inline policy document that is embedded in the IAM user. | July 20, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Logs::LogAnomalyDetector.
[ AWS::Logs::LogAnomalyDetector](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-loganomalydetector.html)
Use the AWS::Logs::LogAnomalyDetector resource to create or update a log anomaly detector. A log anomaly detector anomaly scans the log events ingested into the log group and finds anomalies in the log data. For more information, see [ Log anomaly detection](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/LogsAnomalyDetection.html). | July 20, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Logs::AccountPolicy.
[AWS::Logs::AccountPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-accountpolicy.html)
Use the AWS::Logs::AccountPolicy resource to create or update an account-level data protection policy that applies to all log groups in the account. A data protection policy can help safeguard sensitive data that's ingested by your log groups by auditing and masking the sensitive log data. For more information, see [Protect sensitive log data with masking](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/mask-sensitive-log-data.html). | July 20, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Connect::RoutingProfile
[AWS::Connect::RoutingProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-routingprofile.html)
Use the `AWS::Connect::RoutingProfile` resource to create a routing profile for the specified Amazon Connect instance. | July 20, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Connect::Queue
[AWS::Connect::Queue](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-queue.html)
Use the `AWS::Connect::Queue` resource to create a queue for the specified Amazon Connect instance. | July 20, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::CleanRooms::ConfiguredTable`
[AWS::CleanRooms::ConfiguredTable](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-configuredtable.html)
Use the `AWS::CleanRooms::ConfiguredTable` resource to specify a new configured table resource in AWS Clean Rooms. | July 13, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::InternetMonitor::Monitor`.
[AWS::InternetMonitor::Monitor](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-internetmonitor-monitor.html)
Use `Monitor.HealthEventsConfig` to set the threshold for when Internet Monitor creates a health event. You can set the threshold for the availability score, performance score, or both. | July 13, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IoT::JobTemplate.
[AWS::IoT::JobTemplate JobExecutionsRetryConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-jobtemplate-jobexecutionsretryconfig.html)
The AWS::IoT::JobTemplate JobExecutionsRetryConfig resource adds a description for the RetryCriteriaList parameter. | July 13, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IoT::JobTemplate.
[AWS::IoT::JobTemplate JobExecutionsRolloutConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-jobtemplate-jobexecutionsrolloutconfig.html)
The AWS::IoT::JobTemplate JobExecutionsRolloutConfig resource adds a description for the ExponentialRolloutRate parameter. | July 13, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::SageMaker::Endpoint.
[AWS::SageMaker::Endpoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-endpoint.html)
Use the `RollingUpdatePolicy` in the `AWS::SageMaker::Endpoint` resource to create a new rolling deployment for updating a SageMaker endpoint. | July 13, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS ::Transfer::Server StructuredLogDestination
[AWS ::Transfer::Server StructuredLogDestination ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-server-structuredlogdestination.html)
Use the `StructuredLogDestination` resource to specify the log groups to which your AWS Transfer Family server logs are sent. | July 6, 2023 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::AppStream::AppBlock`
[AWS::AppStream::AppBlock](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appstream-appblock.html)
Use the `PackagingType` property to specify the packaging type of the app block.
[AWS::AppStream::AppBlock](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appstream-appblock.html)
Use the `PostSetupScriptDetails` property to specify the post setup script details of the app block. | June 29, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::KeyPair.
[ AWS::EC2::KeyPair](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-keypair.html)
Use the `KeyFormat` property to specify the format for the key pair. | June 29, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::WAFv2::WebACL.
[AWS::WAFv2::WebACL](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webacl.html)
Use the `AssociationConfig` property to increase the body inspection size limit for CloudFront distributions beyond the new default size limit of 16 KB. This update doesn't affect protections for regional resources. | June 29, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resource was added: `AWS::AppStream::AppBlockBuilder`
[AWS::AppStream::AppBlockBuilder](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appstream-applockbuilder.html)
Use the `AWS::AppStream::AppBlockBuilder` resource to create an app block builder. | June 29, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::VerifiedPermissions::IdentitySource, AWS::VerifiedPermissions::Policy, AWS::VerifiedPermissions::PolicyStore, and AWS::VerifiedPermissions::PolicyTemplate.
[AWS::VerifiedPermissions::IdentitySource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-verifiedpermissions-identitysource.html)
Use the `AWS::VerifiedPermissions::IdentitySource` resource to specify an identity source in Amazon Verified Permissions.
[AWS::VerifiedPermissions::Policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-verifiedpermissions-policy.html)
Use the `AWS::VerifiedPermissions::policy` resource to specify a static or template-linked policy in Amazon Verified Permissions.
[AWS::VerifiedPermissions::PolicyStore](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-verifiedpermissions-policystore.html)
Use the `AWS::VerifiedPermissions::PolicyStore` resource to specify a policy store in Amazon Verified Permissions.
[AWS::VerifiedPermissions::PolicyTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-verifiedpermissions-policytemplate.html)
Use the `AWS::VerifiedPermissions::PolicyTemplate` resource to specify a policy template in Amazon Verified Permissions. | June 29, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following new resource was added: AWS::Comprehend::DocumentClassifier.Use the [ AWS::Comprehend::DocumentClassifier](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-comprehend-documentclassifier.html) resource to create and train custom document classifiers in Amazon Comprehend. | June 29, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::Cassandra::Keyspace`.
[AWS::Cassandra::Keyspace.ReplicationSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cassandra-keyspace-replicationspecification.html)
Use the `AWS::Cassandra::Keyspace.ReplicationSpecification` property to create a multi-Region keyspace in Amazon Keyspaces (for Apache Cassandra). | June 26, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: ` AWS::StepFunctions::StateMachineAlias ` and ` AWS::StepFunctions::StateMachineVersion `.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-stepfunctions-statemachinealias.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-stepfunctions-statemachinealias.html)
Use the ` AWS::StepFunctions::StateMachineAlias ` resource to create an alias that routes traffic to one or two versions of the same state machine.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-stepfunctions-statemachineversion.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-stepfunctions-statemachineversion.html)
Use the ` AWS::StepFunctions::StateMachineVersion ` resource to create multiple versions of a state machine. | June 22, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::AppRunner::AutoScalingConfiguration
[AWS::AppRunner::AutoScalingConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apprunner-autoscalingconfiguration.html)
Use the `AWS::AppRunner::AutoScalingConfiguration` resource to create or update an AWS App Runner automatic scaling configuration resource. | June 22, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::Organizations::Organization.`
[AWS::Organizations::Organization](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-organizations-organization.html)
Use the `AWS::Organizations::Organization` resource to create an AWS organization. The account you use to create the organization automatically becomes the [management account](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#account) of the new organization. | June 22, 2023 |
| [New and updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::SecurityHub::Hub. The following resource was added: AWS::SecurityHub::Standard.
[AWS::SecurityHub::Hub](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html)
Use the `AutoEnableControls` property to specify whether you want Security Hub CSPM to automatically enable new controls as they are added to your enabled standards. For more information, see [Enabling new controls in enabled standards automatically](https://docs.aws.amazon.com/securityhub/latest/userguide/controls-auto-enable.html).
Use the `ControlFindingGenerator` property to specify whether you want Security Hub CSPM to generate a single finding or separate findings when a control applies to multiple standards. For more information, see [Consolidated control findings](https://docs.aws.amazon.com/securityhub/latest/userguide/controls-findings-create-update.html#consolidated-control-findings).
Use the `EnableDefaultStandards` property to specify whether you want to enable security standards that Security Hub CSPM has designated as default standards. For more information, see [Automatically enabled security standards](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-enable-disable.html#securityhub-auto-enabled-standards).
[AWS::SecurityHub::Standard](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-standard.html)
Use the `AWS::SecurityHub::Standard` resource to enable a specified security standard in Security Hub CSPM. | June 22, 2023 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::WAFv2::WebACLAssociation.
[AWS::WAFv2::WebACLAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webaclassociation.html)
The `ResourceArn` property now accepts `AWS` Verified Access instance ARNs. | June 17, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IVS::Channel
[AWS::IVS::Channel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-channel.html)
Use the `preset` property to set a transcode preset, based on bandwidth delivery, for the channel. Available only for advanced channel types. | June 15, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::S3::Bucket.
[AWS::S3::Bucket ServerSideEncryptionByDefault](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-serversideencryptionbydefault.html)
Updated `SSEAlgorithm` to add a new allowed value: `DSSE-KMS`. You can apply this setting to enable dual-layer server-side encryption with AWS KMS keys. | June 15, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::CleanRooms::Collaboration`, `AWS::CleanRooms::ConfiguredTable`, `AWS::CleanRooms::ConfiguredTableAssociation`, and `AWS::CleanRooms::Membership`.
[AWS::CleanRooms::Collaboration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-collaboration.html)
Use the `AWS::CleanRooms::Collaboration` resource to specify a new collaboration resource in AWS Clean Rooms.
[AWS::CleanRooms::ConfiguredTable](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-configuredtable.html)
Use the `AWS::CleanRooms::ConfiguredTable` resource to specify a new configured table resource in AWS Clean Rooms.
[AWS::CleanRooms::ConfiguredTableAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-configuredtableassociation.html)
Use the `AWS::CleanRooms::ConfiguredTable` resource to specify a new configured association resource in AWS Clean Rooms.
[AWS::CleanRooms::Membership](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cleanrooms-membership.html)
Use the `AWS::CleanRooms::Membership` resource to specify a membership for a specific collaboration identifier and join the collaboration in AWS Clean Rooms. | June 15, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::MediaConnect::Bridge`, `AWS::MediaConnect::BridgeOutput`, `AWS::MediaConnect::BridgeSource`, and `AWS::MediaConnect::Gateway`.
[AWS::MediaConnect::Bridge](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-bridge.html)
Use the `AWS::MediaConnect::Bridge` resource to create a connection between your data center instance and the cloud.
[AWS::MediaConnect::BridgeOutput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-bridgeoutput.html)
Use the `AWS::MediaConnect::BridgeOutput` resource to add new outputs to an existing bridge.
[AWS::MediaConnect::BridgeSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-bridgesource.html)
Use the `AWS::MediaConnect::BridgeSource` resource to add new sources to an existing bridge.
[AWS::MediaConnect::Gateway](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-gateway.html)
Use the `AWS::MediaConnect::Gateway` resource to create a gateway. The gateway is a logical grouping of Instances and Bridges. Each gateway utilizes user-defined IP information for communication between data centers and the cloud. | June 15, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::RDS::CustomDBEngineVersion
[AWS::RDS::CustomDBEngineVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-customdbengineversion.html)
The `DatabaseInstallationFilesS3BucketName` property is the name of an Amazon S3 bucket that contains database installation files for your CEV.
The `DatabaseInstallationFilesS3Prefix` property is the Amazon S3 directory that contains the database installation files for your CEV.
Use the `Description` property to provide an optional description of your CEV.
Use the `Engine` property to indicate the database engine to use for your custom engine version (CEV).
Use the `EngineVersion` property to indicate the name of your CEV in the format `19.customized_string`.
Use the `KMSKeyId` property for the AWS KMS key identifier for an encrypted CEV.
The `Manifest` property is the CEV manifest, which is a JSON document that describes the installation .zip files stored in Amazon S3.
The `Status` property provides the status of a custom engine version (CEV).
The `Tags` property allows you to add metadata to your RDS resource. | June 15, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::SecurityHub::AutomationRule.
[AWS::SecurityHub::AutomationRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrule.html)
Use the `AWS::SecurityHub::AutomationRule` resource to specify an automation rule based on criteria that you define. | June 15, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudTrail::EventDataStore
[AWS::CloudTrail::EventDataStore](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-eventdatastore.html)
Use the `IngestionEnabled` property to specify whether you want the event data store to ingest events. | June 8, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CustomerProfiles::EventStream.
[AWS::CustomerProfiles::EventStream](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-customerprofiles-eventstream.html)
Use the `AWS::CustomerProfiles::EventStream` resource to create a new event stream in the Amazon Connect Customer Profiles Service. | June 8, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Athena::CapacityReservation
[AWS::Athena::CapacityReservation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-capacityreservation.html)
Use the `AWS::Athena::CapacityReservation` resource to specify dedicated processing capacity for the queries you run in Athena. You can assign one or more workgroups to the reservation. Capacity is fully managed by Athena and held for you as long as you require. | June 8, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::GroundStation::DataflowEndpointGroup.
[ContactPostPassDurationSeconds property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-groundstation-dataflowendpointgroup.html#cfn-groundstation-dataflowendpointgroup-contactpostpassdurationseconds)
Updated description of the ContactPostPassDurationSeconds property.
[ContactPrePassDurationSeconds property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-groundstation-dataflowendpointgroup.html#cfn-groundstation-dataflowendpointgroup-contactprepassdurationseconds)
Updated description of the ContactPrePassDurationSeconds property. | June 2, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CustomerProfiles::CalculatedAttributeDefinition.
[AWS::CustomerProfiles::CalculatedAttributeDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-customerprofiles-calculatedattributedefinition.html)
Use the `AWS::CustomerProfiles::CalculatedAttributeDefinition` resource to create a new integration in the Amazon Connect Customer Profiles Service. | June 1, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Detective::Graph
[AWS::Detective::Graph](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-detective-organizationadmin.html)
`AutoEnableMembers` indicates whether to automatically enable new organization accounts as member accounts in the organization behavior graph. | June 1, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IoTFleetWise::Campaign
[AWS::IoTFleetWise::Campaign](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotfleetwise-campaign.html)
The `AWS::IoTFleetWise::Campaign` resource now supports sending vehicle data to Amazon S3 or Amazon Timestream. | June 1, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RefactorSpaces::Route.
[AWS::RefactorSpaces::Route](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-refactorspaces-route.html)
In the [UriPathRouteInput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-refactorspaces-route-uripathrouteinput.html) property type, use the `AppendSourcePath` property to specify whether to append the source path to the service URL endpoint. | June 1, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::WorkSpaces::ConnectionAlias`
[AWS::WorkSpaces::ConnectionAlias](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspaces-connectionalias.html)
The `ConnectionAliasAssociation` property was removed from the `AWS::WorkSpaces::ConnectionAlias` resource. | June 1, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Detective::OrganizationAdmin
[AWS::Detective::OrganizationAdmin](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-detective-organizationadmin.html)
Designates the Detective administrator account for the organization in the current region. | June 1, 2023 |
| [Added resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Cognito::IdentityPoolPrincipalTag
[AWS::Cognito::IdentityPoolPrincipalTag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-identitypoolprincipaltag.html)
AWS::Cognito::IdentityPoolPrincipalTag is a map of identity pool user claims to principal tags that you want to apply to your user's temporary session. | May 26, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::Grafana::Workspace`.
[AWS::Grafana::Workspace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-grafana-workspace.html)
Use the `GrafanaVersion` property of the `AWS::Grafana::Workspace` resource to configure the version of Grafana to support in your Amazon Managed Grafana workspace. | May 25, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::OpenSearchService::Domain.
[AWS::OpenSearchService::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html)
Use the `MultiAZWithStandbyEnabled` property within `ClusterConfig` to deploy a domain with the Multi-AZ with Standby option. | May 25, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The `ScalingMode` property was revised for the AWS::SES::DedicatedIpPool resource:
[AWS::SES::DedicatedIpPool](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ses-dedicatedippool.html#cfn-ses-dedicatedippool-scalingmode)
The `ScalingMode` property changed its *Update requires:* definition from *Replacement* to *Some interruptions*. | May 25, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::AppSync::GraphQLApi
[AWS::AppSync::GraphQLApi](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-graphqlapi.html)
Use the `ApiType` property to specify whether the type of a GraphQL API is standard or merged.
Use the `MergedApiExecutionRoleArn` property to specify the service role ARN for a merged API.
Use the `OwnerContact` property to specify the owner contact information for an API resource. The following resources were added: AWS::AppSync::SourceApiAssociation
[AWS::AppSync::SourceApiAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-sourceapiassociation.html)
Use the `AWS::AppSync::SourceApiAssociation` resource to describe the configuration of a source API. | May 25, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::Shield::DRTAccess`, `AWS::Shield::ProactiveEngagement`, `AWS::Shield::Protection`, and `AWS::Shield::ProtectionGroup`.
[AWS::Shield::DRTAccess](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-shield-drtaccess.html)
Use the `AWS::Shield::DRTAccess` resource to give permissions to the Shield response team (SRT) to access your account and your resource protections. This permits them to help you mitigate distributed denial of service (DDoS) attacks.
[AWS::Shield::ProactiveEngagement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-shield-proactiveengagement.html)
Use the `AWS::Shield::ProactiveEngagement` resource to enable and disable authorization for the the Shield Response Team (SRT) to contact you and to initiate proactive support for potential attacks.
[AWS::Shield::Protection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-shield-protection.html)
Use the `AWS::Shield::Protection` resource to enable Shield Advanced protections for a specific AWS resource.
[AWS::Shield::ProtectionGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-shield-protectiongroup.html)
Use the `AWS::Shield::ProtectionGroup` resource to combine the management of selected protected resources, to improve the accuracy of detection and reduce false positives. | May 25, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Glue::DataQualityRuleset
[AWS::Glue::Ruleset](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-dataqualityruleset.html)
Use `AWS::Glue::DataQualityRuleset` to specify data quality rulesets. | May 23, 2023 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::NetworkFirewall::FirewallPolicy
[AWS::NetworkFirewall::FirewallPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-firewallpolicy.html)
Use the `PolicyVariables` property to set your one or more CIDRs as your `HOME_NET` if your firewall uses a centralized deployment model.
Use the `IPSet` property specify list of IP addresses and address ranges, in CIDR notation for use with `IPSets`. | May 18, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS ::Transfer::Server
[AWS ::Transfer::Server IdentityProviderDetails ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-server-identityproviderdetails.html)
Use the `SftpAuthenticationMethods` property to specify how to authenticate for SFTP-enabled servers that use a custom identity provider. | May 18, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Connect::Prompt
[AWS::Connect::Prompt](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-prompt.html)
Use the `AWS::Connect::Prompt` resource to create a prompt for the specified Amazon Connect instance. | May 18, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::QuickSight::Topic.
[ AWS::QuickSight::Topic](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-quicksight-topic.html)
Use the `AWS::QuickSight::Topic` resource to create a topic in Amazon Quick. | May 18, 2023 |
| [Updated resources](aws-template-resource-type-ref.md) | `AWS::ElastiCache::ReplicationGroup`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-replicationgroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-replicationgroup.html)
To modify cluster mode from Disabled to Enabled, you must first set the cluster mode to Compatible. Compatible mode allows your Valkey or Redis OSS clients to connect using both cluster mode enabled and cluster mode disabled. After you migrate all clients to use cluster mode enabled, you can then complete cluster mode configuration and set the cluster mode to Enabled. For more information, see [Modify cluster mode](https://docs.aws.amazon.com/AmazonElastiCache/latest/dg/modify-cluster-mode.html). | May 11, 2023 |
| [Updated resources](aws-template-resource-type-ref.md) | Additional details were added for specifying resource-based policies and sampling rules.
[AWS::XRay::ResourcePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-xray-resourcepolicy.html)
Use the `ResourcePolicy` resource to specify a resource-based policy which enables access to specific X-Ray resources.
[AWS::XRay::SamplingRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-xray-samplingrule.html)
Use the `AWS::XRay::SamplingRule` resource to specify an X-Ray sampling rule. | May 11, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AppRunner::Service
[AWS::AppRunner::Service.ImageConfiguration.RuntimeEnvironmentSecrets](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apprunner-service.html#cfn-apprunner-service-imageconfiguration-runtimeenvironmentsecrets)
New property. Runtime environment secrets that can be reference when creating the App Runner service using an image configuration. | May 11, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AppRunner::Service
[AWS::AppRunner::Service.CodeConfigurationValues.RuntimeEnvironmentSecrets](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apprunner-service.html#cfn-apprunner-service-codeconfigurationvalues-runtimeenvironmentsecrets)
New property. Runtime environment secrets that can be reference when creating the App Runner service using a code configuration. | May 11, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added:AWS::LakeFormation::DataLakeSettings.CreateDatabaseDefaultPermissions, AWS::LakeFormation::DataLakeSettings.CreateTableDefaultPermissions, AWS::LakeFormation::DataLakeSettings.DataLakePrincipal, AWS::LakeFormation::DataLakeSettings ExternalDataFilteringAllowList, AWS::LakeFormation::DataLakeSettings Permissions, AWS::LakeFormation::DataLakeSettings PrincipalPermissions
[AWS::LakeFormation::DataLakeSettings CreateDatabaseDefaultPermissions ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lakeformation-datalakesettings-createdatabasedefaultpermissions.html)
Use the `CreateDatabaseDefaultPermissions` resource to set the default permissions for a newly created database.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lakeformation-datalakesettings-createtabledefaultpermissions.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lakeformation-datalakesettings-createtabledefaultpermissions.html)
Use the `CreateTableDefaultPermissions` resource to set default permissions for a newly created table.
[AWS::LakeFormation::DataLakeSettings ExternalDataFilteringAllowList](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lakeformation-datalakesettings-externaldatafilteringallowlist.html)
Use `ExternalDatafilteringAllowlist` resource to list account IDs of Amazon EMR clusters that are allowed to perform data filtering. | May 11, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoT::ThingGroup.
[AWS::IoT::ThingGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-thinggroup.html)
Use AWS::IoT::ThingGroup to create a thing group. | May 11, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoT::BillingGroup.
[AWS::IoT::BillingGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-billinggroup.html)
Use AWS::IoT::BillingGroup to create a new billing group. | May 11, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoT::ThingType.
[AWS::IoT::ThingType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-thingtype.html)
Use AWS::IoT::ThingType to create a new thing type. | May 11, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::OSIS::Pipeline.
[AWS::OSIS::Pipeline](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchingestion-pipeline.html)
Use the `AWS::OSIS::Pipeline` resource to specify an Amazon OpenSearch Ingestion pipeline. For more information, see [ Amazon OpenSearch Ingestion](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ingestion.html). | May 11, 2023 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::DeviceFarm::Project.
[AWS::DeviceFarm::Project](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-devicefarm-project.html)
Use the `AWS::DeviceFarm::Project VpcConfig` resource to specify the VPC security groups and subnets that are attached to a project. | May 4, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::AppSync::GraphQLApi
[AWS::AppSync::GraphQLApi](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-graphqlapi.html)
Use the `Visibility` property to specify the scoping of the GraphQL API. | May 4, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudWatch::MetricStreamFilter
[AWS::CloudWatch::MetricStream MetricSTreamFilter](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-metricstream.html)
In the [MetricStreamFilter](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudwatch-metricstream-metricstreamfilter.html) resource, use `MetricNames` to specify individual metrics to include or exclude from a metric stream. | May 4, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resource was added: AWS::BackupGateway::Hypervisor.
[AWS::BackupGateway::Hypervisor](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-backupgateway-hypervisor.html)
Use the `AWS::BackupGateway::Hypervisor` resource to specify a hypervisor in AWS Backup;. | May 4, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::Proton::EnvironmentAccountConnection`, `AWS::Proton::EnvironmentTemplate` and `AWS::Proton::ServiceTemplate`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-proton-servicetemplate.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-proton-servicetemplate.html)
Use the `AWS::Proton::ServiceTemplate` resource to specify standardized infrastructure and an optional CI/CD service pipeline in AWS Proton.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-proton-environmenttemplate.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-proton-environmenttemplate.html)
Use the `AWS::Proton::EnvironmentTemplate` resource to specify an environment template in AWS Proton.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-proton-environmentaccountconnection.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-proton-environmentaccountconnection.html)
Use the `AWS::Proton::EnvironmentAccountConnection` resource to specify an environment account connection resource in AWS Proton. | May 4, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::QuickSight::VPCConnection.
[ AWS::QuickSight::VPCConnection](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-quicksight-vpcconnection.html)
Use the `AWS::QuickSight::VPCConnection` resource to create a new VPC connection in Amazon Quick. | May 4, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::EC2::VerifiedAccessInstance, AWS::EC2::VerifiedAccessGroup, AWS::EC2::VerifiedAccessEndpoint and AWS::EC2::VerifiedAccessTrustProvider.
[AWS::EC2::VerifiedAccessInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-verifiedaccessinstance.html)
Use the `AWS::EC2::VerifiedAccessInstance` resource to create an instance.
[AWS::EC2::VerifiedAccessGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-verifiedaccessinstance.html)
Use the `AWS::EC2::VerifiedAccessGroup` resource to create a group.
[AWS::EC2::VerifiedAccessEndpoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-verifiedaccessinstance.html)
Use the `AWS::EC2::VerifiedAccessEndpoint` resource to create an endpoint.
[AWS::EC2::VerifiedAccessTrustProvider](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-verifiedaccesstrustprovider.html)
Use the `AWS::EC2::VerifiedAccessTrustProvider` resource to create a trust provider. | April 28, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::MSK::Cluster.
[AWS::MSK::Cluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-msk-cluster.html)
Use the `VpcConnectivity` property to specify VPC connection control settings for brokers.
Use the `VpcConnectivityClientAuthentication` property to get all client authentication information for VpcConnectivity.
Use the `VpcConnectivitySasl` property to get details for SASL client authentication for VpcConnectivity.
Use the `VpcConnectivityIam` property to get details for IAM client authentication for VpcConnectivity.
Use the `VpcConnectivity.Iam.Enabled` property get details about whether IAM authentication is on or off.
Use the `VpcConnectivityTls` property to get details for TLS client authentication for VpcConnectivity.
Use the `VpcConnectivityTls.Enabled` property get details about whether TLS authentication is on or off.
Use the `VpcConnectivityScram` property to get details for SCRAM client authentication for VpcConnectivity.
Use the `VpcConnectivityScram.Enabled` property get details about whether SCRAM authentication is on or off.
Use the `ConnectivityInfo.VpcConnectivity` property to get details for VPC connection control settings for brokers. | April 27, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::DataSync::StorageSystem.
[AWS::DataSync::StorageSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-storagesystem.html)
Use the `AWS::DataSync::StorageSystem` resource to create an AWS resource for an on-premises storage system that DataSync Discovery can collect information about. | April 27, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoT::DomainConfiguration TlsConfig.
[AWS::IoT::DomainConfiguration TlsConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-domainconfiguration-tlsconfig.html)
Use AWS::IoT::DomainConfiguration TlsConfig resource to specify security policy settings in domain configuration. | April 27, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::MSK::ClusterPolicy and AWS::MSK::VpcConnection.
[AWS::MSK::ClusterPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-msk-clusterpolicy.html)
You can now create or update cluster policy.
[AWS::MSK::VpcConnection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-msk-vpcconnection.html)
You can now create a remote VPC connection. | April 27, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Connect::EvaluationForm
[AWS::Connect::EvaluationForm](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-evaluationform.html)
Use the `AWS::Connect::EvaluationForm` resource to create an evaluation form for the specified Amazon Connect instance. | April 25, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::InternetMonitor::Monitor`.
[AWS::InternetMonitor::Monitor](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-internetmonitor-monitor.html)
Use `Monitor.TrafficPercentageToMonitor` to set the percentage of your internet-facing traffic to monitor. | April 20, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources was updated: AWS::SSMContacts::Contact and AWS::SSMContacts::Rotation
[AWS::SSMContacts::Contacts](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmcontacts-contact.html)
`ONCALL_SCHEDULE` was added as a supported contact type.
[AWS::SSMContacts::Rotation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmcontacts-rotation.html)
Use the `AWS::SSMContacts::Rotation` resource to specify a rotation in an on-call schedule. | April 20, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IVS::Channel
[AWS::IVS::Channel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-channel.html)
Use the `InsecureIngest` property to control whether a channel allows insecure RTMP ingest. | April 20, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::FraudDetector::List.
[AWS::FraudDetector::List](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-frauddetector-list.html)
Use the `AWS::FraudDetector::List` resource to create a list of input data. After creating the list, use the list in a rule to allow or deny access or a transaction. | April 20, 2023 |
| [New resource](aws-template-resource-type-ref.md) | Added new resource type `AWS::RAM::Permission`
[AWS::RAM::Permission](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ram-permission.html)
Creates a customer managed permission that you can then assign to resource shares and applies to resources of the specified resource type that are included in the share. | April 19, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The AWS::GuardDuty::Detector resource was updated. | April 13, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::MWAA::Environment
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-startupscripts3path](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-startupscripts3path)
Amazon MWAA adds the `StartupScriptS3Path` property. This property specifies the relative path to a shell script that you upload to your environment's Amazon S3 bucket.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-startupscripts3objectversion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-startupscripts3objectversion)
Amazon MWAA adds the `StartupScriptS3ObjectVersion` property. This property specifies the version ID for the shell script that you upload to your environment's Amazon S3 bucket.
[AirflowVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-airflowversion)
The `AirflowVersion` property has been updated to include a new valid value for Apache Airflow version 2.5.1. | April 13, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBInstance
[AWS::RDS::DBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html)
Use the `SourceDBClusterIdentifier` property as the identifier of the Multi-AZ DB cluster that will act as the source for the read replica. | April 13, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::QuickSight::RefreshSchedule.
[ AWS::QuickSight::RefreshSchedule](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-quicksight-refreshschedule.html)
Use the `AWS::QuickSight::RefreshSchedule` resource to create a refresh schedule for a dataset in Amazon Quick. | April 13, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::AppConfig::Extension
[AWS::AppConfig::Extension](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appconfig-extension.html)
This resource lets you creates an AWS AppConfig extension. An extension augments your ability to inject logic or behavior at different points during the AWS AppConfig workflow of creating or deploying a configuration. | April 12, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::AppConfig::ExtensionAssociation
[AWS::AppConfig::ExtensionAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appconfig-extensionassociation.html)
This resource lets you creates an AWS AppConfig extension association. An extension association is a specified relationship between an extension and an AWS AppConfig resource, such as an application or a configuration profile. | April 12, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::IoTWireless::WirelessDeviceImportTask
[AWS::IoTWireless::WirelessDeviceImportTask](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotwireless-wirelessdeviceimporttask.html)
Gets information about a wireless device import task. | April 7, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::InternetMonitor::Monitor`.
[AWS::InternetMonitor::Monitor](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-internetmonitor-monitor.html)
Use `Monitor.InternetMeasurementsLogDelivery` to publish internet measurements to another location in addition to CloudWatch Logs, such as an Amazon S3 bucket. | April 6, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Lambda::Url.
[AWS::Lambda::Url](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-url.html)
Use the `InvokeMode` property to stream responses from your functions. | April 6, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBCluster
[AWS::RDS::DBCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html)
Use the `RestoreToTime` property for the date and time to restore the DB cluster to. | April 6, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::SSMContacts::Plan` and `AWS::SSMContacts::Rotation`
[AWS::SSMContacts::Plan](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmcontacts-plan.html)
Use the `AWS::SSMContacts::Plan` resource to specify the stages that an escalation plan or engagement plan engages contacts and contact methods in.
[AWS::SSMContacts::Rotation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmcontacts-rotation.html)
Use the `AWS::SSMContacts::Rotation` resource to specify a rotation in an on-call schedule. | April 6, 2023 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::RefactorSpaces::Application, AWS::RefactorSpaces::Environment, AWS::RefactorSpaces::Route, AWS::RefactorSpaces::Service.
[AWS::RefactorSpaces::Application](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-refactorspaces-application.html)
The `EnvironmentIdentifier` property was changed to `Required: Yes`.
The `Name` property was changed to `Required: Yes`.
The `ProxyType` property was changed to `Required: Yes`.
The `VpcId` property was changed to `Required: Yes`.
[AWS::RefactorSpaces::Environment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-refactorspaces-environment.html)
The `Name` property was changed to `Required: Yes`.
The `NetworkFabricType` property was changed to `Required: Yes`.
[AWS::RefactorSpaces::Route](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-refactorspaces-route.html)
The `RouteType` property was changed to `Required: Yes`.
In the [DefaultRouteInput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-refactorspaces-route-defaultrouteinput.html) property type, the `ActivationState` property was changed to `Required: No`.
In the [UriPathRouteInput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-refactorspaces-route-uripathrouteinput.html) property type, the `SourcePath` property was changed to `Required: Yes`.
[AWS::RefactorSpaces::Service](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-refactorspaces-service.html)
The `Name` property was changed to `Required: Yes`. | March 30, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The resource AWS::GuardDuty::Detector was updated.
[AWS::GuardDuty::Detector](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-detector.html)
Use `Features` property to configure a GuardDuty feature. For more information about `features`, see [Feature activation in GuardDuty.](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-features-activation-model.html) | March 30, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::SageMaker::InferenceExperiment.
[AWS::SageMaker::InferenceExperiment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-inferenceexperiment.html)
Use the `AWS::SageMaker::InferenceExperiment` resource to create a new inference experiment for comparing model variants on a SageMaker endpoint. | March 30, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RUM::AppMonitor.
[AWS::RUM::AppMonitor](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rum-appmonitor.html)
The `DeobfuscationConfiguration` property was updated in the `AWS::RUM::AppMonitor` resource to support the use of source maps. For more information, see [Using resource-based policies with CloudWatch RUM](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-resource-policies.html). | March 26, 2023 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::Route53Resolver::ResolverEndpoint``AWS::Route53Resolver::ResolverEndpoint IpAddressRequest`, and `AWS::Route53Resolver::ResolverRule TargetAddress`
[AWS::Route53Resolver::ResolverEndpoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverendpoint.html)
Use the `ResolverEndpointType` property to specify Resolver endpoint IP address type.
[AWS::Route53Resolver::ResolverEndpoint IpAddressRequest](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-resolverendpoint-ipaddressrequest.html)
Added the `Ipv6` property to support IPv6 IP addresses.
[AWS::Route53Resolver::ResolverRule TargetAddress](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53resolver-resolverrule-targetaddress.html)
Added the `Ipv6` property to support IPv6 IP addresses. | March 23, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::OpenSearchService::Domain.
[AWS::OpenSearchService::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html)
Use the `SoftwareUpdateOptions`, `OffPeakWindowOptions`, `WindowStartTime`, and `OffPeakWindow` properties to configure an off-peak window for the domain. | March 23, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::S3ObjectLambda::AccessPoint.
[AWS::S3ObjectLambda::AccessPoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3objectlambda-accesspoint.html)
Add the `Alias` attribute to the return values. The `Alias` return value is the alias of the Object Lambda Access Point. | March 23, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::VpcLattice::AccessLogSubscription, AWS::VpcLattice::AuthPolicy, AWS::VpcLattice::Listener, AWS::VpcLattice::ResourcePolicy, AWS::VpcLattice::Rule, AWS::VpcLattice::Service, AWS::VpcLattice::ServiceNetwork, AWS::VpcLattice::ServiceNetworkServiceAssociation, AWS::VpcLattice::ServiceNetworkVpcAssociation, AWS::VpcLattice::TargetGroup
[AWS::VpcLattice::AccessLogSubscription](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-accesslogsubscription.html)
Enables access logs to be sent to Amazon CloudWatch, Amazon S3, and Amazon Kinesis Data Firehose.
[AWS::VpcLattice::AuthPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-authpolicy.html)
Creates or updates the auth policy.
[AWS::VpcLattice::Listener](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-listener.html)
Creates a listener for a service.
[AWS::VpcLattice::ResourcePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-resourcepolicy.html)
Retrieves information about the resource policy.
[AWS::VpcLattice::Rule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-rule.html)
Creates a listener rule.
[AWS::VpcLattice::Service](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-service.html)
Creates a service. A service is any software application that can run on instances containers, or serverless functions within an account or virtual private cloud (VPC).
[AWS::VpcLattice::ServiceNetwork](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-servicenetwork.html)
Creates a service network. A service network is a logical boundary for a collection of services.
[AWS::VpcLattice::ServiceNetworkServiceAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-servicenetworkserviceassociation.html)
Associates a service with a service network.
[AWS::VpcLattice::ServiceNetworkVpcAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-servicenetworkvpcassociation.html)
Associates a VPC with a service network.
[AWS::VpcLattice::TargetGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-vpclattice-targetgroup.html)
Creates a target group. | March 22, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::Cassandra::Table`.
[AWS::Cassandra::Table.ClientSideTimestampsEnabled](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cassandra-table.html)
Use the `AWS::Cassandra::Table.ClientSideTimestampsEnabled` property to turn on client-side timestamps for a table in Amazon Keyspaces (for Apache Cassandra). | March 16, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RUM::AppMonitor.
[AWS::RUM::AppMonitor](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rum-appmonitor.html)
The `ResourcePolicy` property was added to the `AWS::RUM::AppMonitor` resource to support the use of resource policies to control access to app monitors. For more information, see [Using resource-based policies with CloudWatch RUM](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-resource-policies.html). | March 16, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RUM::AppMonitor.
[AWS::RUM::AppMonitor](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rum-appmonitor.html)
The `Namespace` property was added to the `AWS::RUM::AppMonitor` resource to support Amazon CloudWatch RUM custom metrics. For more information, see [ Custom metrics and extended metrics that you can send to CloudWatch and CloudWatch Evidently](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-custom-and-extended-metrics.html). | March 16, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following new resource was added: AWS::Comprehend::Flywheel.Use the [ AWS::Comprehend::Flywheel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-comprehend-flywheel.html) resource to create a flywheel for an Amazon Comprehend model. | March 16, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Wisdom::KnowledgeBase.
[AWS::Wisdom::KnowledgeBase](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wisdom-knowledgebase.html)
The `AppIntegrationsConfiguration:ObjectFields` parameter is optional if ObjectConfiguration is included in the provided DataIntegration. | March 13, 2023 |
| [updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::Pinpoint::ApplicationSettings Limits and AWS::Pinpoint::Campaign Limits.
[AWS::Pinpoint::ApplicationSettings Limits](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pinpoint-applicationsettings-limits.html)
The MessagesPerSecond field minimum values was changed from 50 to 1.
[AWS::Pinpoint::Campaign Limits](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pinpoint-campaign-limits.html)
The MessagesPerSecond field minimum values was changed from 50 to 1. | March 9, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ServiceCatalog::CloudFormationProduct.
[AWS::ServiceCatalog::CloudFormationProduct](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-cloudformationproduct.html)
Use the `ProvisioningArtifactProperties` property to specify information about a provisioning artifact (also known as a version) for a product.
Use the `SourceConnection` property to specify details about the product’s connection. | March 9, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::WAFv2::WebACLAssociation.
[AWS::WAFv2::WebACLAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webaclassociation.html)
The `ResourceArn` property now accepts `AWS::AppRunner::Service` ARNs. | March 6, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Lambda::EventSourceMapping.
[AWS::Lambda::EventSourceMapping](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventsourcemapping.html)
Use the `DocumentDBEventSourceConfig` property to define specific configuration settings for a DocumentDB event source, such as the database name. | March 2, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::WAFv2::WebACL.
[AWS::WAFv2::WebACL](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webacl.html)
Use the `AWSManagedRulesATPRuleSet` property to configure your use of the Fraud Control account takeover prevention (ATP) managed rule group in a managed rule group reference statement. For protected CloudFront distributions, in addition to inspecting login requests, you can now use ATP to block new login attempts from clients that have recently submitted too many failed login attempts. | March 2, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::IVSChat::Room and AWS::IVSChat::LoggingConfiguration
[AWS::IVSChat::Room](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivschat-room.html)
Use the `AWS::IVSChat::Room` resource to specify and Amazon IVS Chat Room.
[AWS::IVSChat::LoggingConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivschat-loggingconfiguration.html)
Use the `AWS::IVSChat::LoggingConfiguration` resource to specify and Amazon IVS Chat Logging Configuration, which stores configuration information related to loggin your chat session to a data store. | March 2, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was released: [https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-systemsmanagersap-application.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-systemsmanagersap-application.html).Use `AWS::SystemsManagerSAP::Application` to register an SAP application with AWS Systems Manager for SAP. | March 2, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was released: [AWS::InternetMonitor::Monitor](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-internetmonitor-monitor.html).Use `AWS::InternetMonitor::Monitor` to create a monitor in Amazon CloudWatch Internet Monitor to provide visibility into the performance and availability between your applications hosted on AWS and your end users, and to reduce the time it takes for you to diagnose internet issues. | February 28, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IoT::JobTemplate.
[AWS::IoT::JobTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-jobtemplate.html)
The AWS::IoT::JobTemplate resource adds MaintenaceWindows, StartTime, and DurationInMinutes properties. | February 23, 2023 |
| [New resource](aws-template-resource-type-ref.md) | A new resource was added to Network Manager: AWS::NetworkManager::TransitGatewayRouteTableAttachment
[ AWS::NetworkManager::TransitGatewayRouteTableAttachment.](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkmanager-transitgatewayroutetableattachment.html)
Use `AWS::NetworkManager::TransitGatewayRouteTableAttachment` to create a transit gateway route table attachment. | February 23, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::Organizations::ResourcePolicy.`
[AWS::Organizations::ResourcePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-organizations-resourcepolicy.html)
Use the `AWS::Organizations::ResourcePolicy` resource to create or update a resource-based delegation policy that delegates policy management for AWS Organizations to specified member accounts to perform policy actions that are by default available only to the organization management account. | February 16, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::DataSync::LocationObjectStorage.
[AWS::DataSync::LocationObjectStorage](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationobjectstorage.html)
Use the `ServerCertificate` property to specify a certificate for authenticating with an object storage system that uses a private or self-signed certificate authority (CA). | February 9, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::SageMaker::Space.
[AWS::SageMaker::Space](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-space.html)
Use the `AWS::SageMaker::Space` resource to create a new shared space for use in a Domain. | February 9, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::SNS::Topic.
[AWS::SNS::Topic](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sns-topic.html)
Use the `TracingConfig` property send X-Ray segment data to a topic owner account. | February 8, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::Omics::Workflow, AWS::Omics::RunGroup, AWS::Omics::AnnotationStore, AWS::Omics::ReferenceStore, AWS::Omics::VariantStore, and AWS::Omics::SequenceStore.
[AWS::Omics::Workflow](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-omics-workflow.html)
Use the `AWS::Omics::Workflow` resource to specify a workflow in Amazon Omics.
[AWS::Omics::RunGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-omics-rungroup.html)
Use the `AWS::Omics::RunGroup` resource to specify a run group in Amazon Omics.
[AWS::Omics::ReferenceStore](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-omics-referencestore.html)
Use the `AWS::Omics::ReferenceStore` resource to specify a reference store in Amazon Omics.
[AWS::Omics::RunGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-omics-sequencestore.html)
Use the `AWS::Omics::SequenceStore` resource to specify a sequence store in Amazon Omics.
[AWS::Omics::ReferenceStore](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-omics-referencestore.html)
Use the `AWS::Omics::ReferenceStore` resource to specify a reference store in Amazon Omics.
[AWS::Omics::RunGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-omics-sequencestore.html)
Use the `AWS::Omics::SequenceStore` resource to specify a sequence store in Amazon Omics. | February 3, 2023 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::NetworkFirewall::FirewallPolicy and AWS::NetworkFirewall::RuleGroup
[AWS::NetworkFirewall::FirewallPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-firewallpolicy.html)
Use the `IPAddressType` property to configure your firewall endpoint as IPv4,IPv6, or dualstack.
[AWS::NetworkFirewall::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-rulegroup.html)
The `StatefulRule$Action` property now the `REJECT` option. With `REJECT`, Network Firewall drops TCP traffic that matches the conditions of the stateful rule, and sends a TCP reset packet back to sender of the packet. | February 2, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::AppSync::DataSource
[AWS::AppSync::DataSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-datasource.html#cfn-appsync-datasource-eventbridgeconfig)
Use the `EventBridgeConfig` property to add custom events to your Amazon EventBridge bus. | February 2, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::DataSync::LocationS3.
[AWS::DataSync::LocationS3](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locations3.html)
Use the `S3StorageClass` property to specify the S3 Glacier Instant Retrieval storage class (`GLACIER_INSTANT_RETRIEVAL`) for data transferred to your S3 bucket. | February 2, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBInstance
[AWS::RDS::DBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html)
Use the `CertificateDetails` property for the details of the DB instance's server certificate. | February 2, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::SageMaker::ModelCard.
[AWS::SageMaker::ModelCard](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-modelcard.html)
Use the `AWS::SageMaker::ModelCard` resource to create an Amazon SageMaker Model Card. | February 2, 2023 |
| [New resources](aws-template-resource-type-ref.md) | The following new resources were added: AWS::CloudTrail::Channel and AWS::CloudTrail::ResourcePolicy
[AWS::CloudTrail::Channel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-channel.html)
Use the `Channel` resource to specify a channel for logging events from outside AWS in CloudTrail Lake. Channels are used by partner event sources, or your custom event sources, to send events to CloudTrail Lake. For more information, see [Working with CloudTrail Lake](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake.html) in the *AWS CloudTrail User Guide*.
[AWS::CloudTrail::Channel.Channel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-channel-channel.html)
Use the `Channel` property to specify the name and ARN of a channel that you use with integrations in CloudTrail Lake. For more information, see [Working with CloudTrail Lake](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake.html) in the *AWS CloudTrail User Guide*.
[AWS::CloudTrail::Channel.Destination](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-channel-destination.html)
Use the `Destination` property to specify destination event data stores for events that arrive over a channel in CloudTrail Lake. For more information, see [Working with CloudTrail Lake](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake.html) in the *AWS CloudTrail User Guide*.
[AWS::CloudTrail::ResourcePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-resourcepolicy.html)
Use the `ResourcePolicy` resource to attach a resource-based permission policy to a CloudTrail channel that is used for an integration with an event source outside of AWS. For more information about resource-based policies, see [CloudTrail resource-based policy examples](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/security_iam_resource-based-policy-examples.html) in the *CloudTrail User Guide*.
[AWS::CloudTrail::ResourcePolicy.ResourceArn](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-resourcepolicy-resourcearn.html)
Use the `ResourceArn` property to specify the Amazon Resource Name (ARN) of the CloudTrail channel attached to the resource-based policy. The following is the format of a resource ARN: `arn:aws:cloudtrail:us-east-2:123456789012:channel/MyChannel`.
[AWS::CloudTrail::ResourcePolicy.ResourcePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-resourcepolicy-resourcepolicy.html)
Use the `ResourcePolicy` property to specify the JSON-formatted string that contains the resource-based policy to attach to the CloudTrail channel. | February 2, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Connect::IntegrationAssociation
[AWS::Connect::IntegrationAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-integrationassociation.html)
Use the `AWS::Connect::IntegrationAssociation` resource to associate Lex bots (both v1 and v2) and Lambda functions with an instance. | February 2, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Connect::ApprovedOrigin
[AWS::Connect::ApprovedOrigin](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-approvedorigin.html)
Use the `AWS::Connect::ApprovedOrigin` resource to associate Approved Origin with an instance. | February 2, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Connect::SecurityKey
[AWS::Connect::SecurityKey](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-securitykey.html)
Use the `AWS::Connect::SecurityKey` resource to associate Security Key with an instance. | February 2, 2023 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::SimSpaceWeaver::Simulation.
[AWS::SimSpaceWeaver::Simulation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-simspaceweaver-simulation.html)
Use the `AWS::SimSpaceWeaver::Simulation` resource to specify a simulation in the AWS Cloud, in your AWS account. | February 2, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Lambda::Function.
[AWS::Lambda::Function](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html)
Use the `RuntimeManagementConfig` to define how your function gets runtime version updates. Lambda releases new runtime versions that include security updates, bug fixes, and new features. You can now control when your functions get updated to the new runtime versions. | January 26, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::OpenSearchService::Domain.
[AWS::OpenSearchService::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html)
Use the `SAMLOptions` property within `AdvancedSecurityOptions` to configure SAML authentication for the domain. | January 26, 2023 |
| [New resource](aws-template-resource-type-ref.md) | A new resource was added to Network Manager: AWS::NetworkManager::TransitGatewayPeering
[ AWS::NetworkManager::TransitGatewayPeering.](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkmanager-transitgatewaypeering.html)
Use `AWS::NetworkManager::TransitGatewayPeering` to create a transit gateway peering. | January 26, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::KendraRanking::ExecutionPlan
[AWS::KendraRanking::ExecutionPlan](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kendraranking-executionplan.html)
Create a rescore execution plan, which is an Amazon Kendra Intelligent Ranking resource used for provisioning the `Rescore` API. Amazon Kendra Intelligent Ranking rescores or re-ranks a search service's results using semantic search. | January 20, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudWatch::MetricStream.
[AWS::CloudWatch::MetricStream](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-metricstream.html)
In the [MetricStream](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudwatch-metricstream.html) resource, use `IncludeLinkedAccountsMetrics` to specify whether the metric stream should metric streams from source accounts, if the metric stream is created in a monitoring account. | January 19, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Lambda::EventSourceMapping.
[AWS::Lambda::EventSourceMapping](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventsourcemapping.html)
Use the `ScalingConfig` property to specify a scaling configuration for an Amazon SQS event source. | January 19, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::AuditManager::Assessment`
[AWS::AuditManager::Assessment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-auditmanager-assessment.html)
Use the `Delegations` property to specify a delegation for an assessment. | January 12, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBCluster
[AWS::RDS::DBCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html)
The `ManageMasterUserPassword` property indicates whether to manage the master user password with AWS Secrets Manager.
The `MasterUserSecret` property 4has the secret managed by RDS in AWS Secrets Manager for the master user password. | January 12, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBInstance
[AWS::RDS::DBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html)
The `ManageMasterUserPassword` property indicates whether to manage the master user password with AWS Secrets Manager.
The `MasterUserSecret` property 4has the secret managed by RDS in AWS Secrets Manager for the master user password. | January 12, 2023 |
| [`Fn::FindInMap` enhancements](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-findinmap-enhancements.html) | Adding the `AWS::LanguageExtensions` transform in a CloudFormation template allows you to use intrinsic functions to define the fields of `Fn::FindInMap`. You can also use a new optional field to return a default value if a mapping isn't found. | January 11, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudFront::ResponseHeadersPolicy.
[AWS::CloudFront::ResponseHeadersPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-responseheaderspolicy.html)
In the [ResponseHeadersPolicyConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-responseheaderspolicy-responseheaderspolicyconfig.html) use the `RemoveHeadersConfig` to specify a list of headers that CloudFront removes from HTTP responses that it sends to viewers.
For more information, see [Adding or removing response headers](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/modifying-response-headers.html) in the *Amazon CloudFront Developer Guide*. | January 5, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::MWAA::Environment
[AirflowVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-airflowversion)
The `AirflowVersion` property has been updated to include a new valid value for Apache Airflow version 2.4.3. | January 5, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::EMRServerless::Application`.
[AWS::EMRServerless::Application](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-emrserverless-application.html)
Use the `ImageConfigurationInput` property to specify your custom image configuration for all worker types.
Use the `WorkerTypeSpecificationInput` property to specify the configuration for a worker type. | January 3, 2023 |
| [Updated resource](aws-template-resource-type-ref.md) | The following property type was updated: AWS::Lex::Bot.
[AWS::Lex::Bot](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lex-bot.html)
Use the [ AllowedInputTypes](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-allowedinputtypes) property to specify the allowed input types.
Use the [ AudioSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-audiospecification) property to specify the audio input specifications.
Use the [ AudioAndDTMFInputSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-audioanddtmfinputspecification) property to specify the audio and DTMF input specification.
Use the [Condition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-condition) property to provide an expression that evaluates to true or false.
Use the [ ConditionalBranch](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-conditionalbranch) property to configure a set of actions that Amazon Lex should run if the condition is matched.
Use the [ ConditionalSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-conditionalspecification) property to provide a list of conditional branches.
Use the [ DefaultConditionalBranch](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-defaultconditionalbranch) property to configure a set of actions that Amazon Lex should run if none of the other conditions are met.
Use the [ DialogAction](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-dialogaction) property to define the action that the bot executes at runtime.
Use the [ DialogCodeHookInvocationSetting](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-dialogcodehookinvocationsetting) property to specify the dialog code hook that is called by Amazon Lex at a step of the conversation.
Use the [ DialogState](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-dialogstate) property to configure the current state of the conversation with the user.
Use the [ DTMFSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-dtmfspecification) property to specify the DTMF input specifications.
Use the [ ElicitationCodeHookInvocationSetting](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-elicitationcodehookinvocationsetting) property to specify the dialog code hook that is called by Amazon Lex between eliciting slot values.
Use the [ InitialResponseSetting](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-initialresponsesetting) property to configure settings for a response sent to the user before Amazon Lex starts eliciting slots.
Use the [ Intent](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-intent) property to configure how Amazon Lex handles intents.
Use the [ IntentClosingSetting](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-intentclosingsetting) property to configure the statement that Amazon Lex conveys to the user when the intent is successfully fulfilled.
Use the [ IntentConfirmationSetting](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-intentconfirmationsetting.html) property to provide a prompt for making sure that the user is ready for the intent to be fulfilled.
Use the [ IntentOverride](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-intentoverride) property to override settings to configure the intent state.
Use the [ PostDialogCodeHookInvocationSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-postdialogcodehookinvocationspecification) property to specify next steps to run after the dialog code hook finishes.
Use the [ PostFulfillmentStatusSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-postfulfillmentstatusspecification) property to configure the settings of the post-fulfillment response that is sent to the user.
Use the [ PromptAttemptSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-promptattemptspecification) property to specify the settings on a prompt attempt.
Use the [ PromptSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-promptspecification.html) property to specify a list of message groups that Amazon Lex sends to a user to elicit a response.
Use the [ SessionAttribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-sessionattribute) property to specify session-specific context information.
Use the [ SlotCaptureSetting](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-slotcapturesetting) property to configure the settings that are used when Amazon Lex successfully captures a slot value from a user.
Use the [ SlotValue](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-slotvalue) property to set values in a slot.
Use the [ SlotValueElicitationSetting](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-slotvalueelicitationsetting) property to specify the settings for eliciting a slot value.
Use the [ SlotValueOverride](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-slotvalueoverride) property to set slot values in a dialog step.
Use the [ SlotValueOverrideMap](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-slotvalueoverridemap) property to map slot names to a SlotValueOVerride object.
Use the [ TextInputSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-textinputspecification) property to specify the text input specifications.
Use the [ VoiceSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-voicesettings) property to specify the Amazon Polly voice used for audio interaction with the user. | December 30, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::FSx::Filesystem`
[AWS::FSx::Filesystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html)
The `AWS::FSx::FileSystem` resource returns a file system's Amazon Resource Name (ARN). | December 29, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::FSx::Volume`
[AWS::FSx::Volume](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-volume.html)
Use the `CopyTagsToBackups``AWS::FSx::Volume OntapConfiguration` property to specify whether an ONTAP volume's tags get copied to backups. | December 29, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::FSx::Volume`
[AWS::FSx::Volume](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-volume.html)
Use the `OntapVolumeType``AWS::FSx::Volume OntapConfiguration` property to specify the type of ONTAP volume to create. | December 29, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::FSx::Volume`
[AWS::FSx::Volume](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-volume.html)
Use the `SnapshotPolicy``AWS::FSx::Volume OntapConfiguration` property to specify the snapshot policy for the volume you are creating. | December 29, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::NetworkFirewall::FirewallPolicy and AWS::NetworkFirewall::RuleGroup
[AWS::NetworkFirewall::FirewallPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-firewallpolicy.html)
Use the `StatefulDefaultActions` property to establish default actions to take on a packet that doesn't match any stateful rules when using strict rule ordering.
Use the `StatefulEngineOptions` property to govern how Network Firewall handles stateful rules.
[AWS::NetworkFirewall::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-rulegroup.html)
The `StatefulRuleGroupReference` property now includes `Priority` and `StatefulRuleGroupOverride` fields.
Use the `StatefulRuleOptions` property to govern how Network Firewall handles stateful rules.
Use the `ReferenceSets` property to configure IP set references for your stateful rules. | December 22, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::Grafana::Workspace`.
[AWS::Grafana::Workspace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-grafana-workspace.html)
Use the `vpcConfiguration` property of the `AWS::Grafana::Workspace` resource to configure a connection to a private VPC from your Amazon Managed Grafana workspace. | December 22, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBInstance
[AWS::RDS::DBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html)
The `Endpoint` property specifies the connection endpoint.
The `DBSystemId` return value is the Oracle system ID (Oracle SID) for a container database (CDB). | December 22, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::SageMaker::Project.
[AWS::SageMaker::FeatureGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-featuregroup.html)
Use the `AWS::SageMaker::FeatureGroup` resource to create a new feature group using either an Apache Iceberg or Glue table format. | December 22, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Backup::ReportPlan
[AWS::Backup::BackupSelection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-backup-reportplan.html)
This resource was updated to allow the report plan to include multiple Regions and multiple accounts. | December 21, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::M2::Application and AWS::M2::Environment.
[AWS::M2::Application](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-m2-application.html)
Use the `KmsKeyId` property to specify a customer managed key.
[AWS::M2::Environment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-m2-environment.html)
Use the `KmsKeyId` property to specify a customer managed key. | December 15, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::RefactorSpaces::Application, AWS::RefactorSpaces::Environment, AWS::RefactorSpaces::Route, AWS::RefactorSpaces::Service.
[AWS::RefactorSpaces::Application](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-refactorspaces-application.html)
The `EnvironmentIdentifier` property was changed to `Required: Yes`.
The `Name` property was changed to `Required: Yes`.
The `ProxyType` property was changed to `Required: Yes`.
The `VpcId` property was changed to `Required: Yes`.
[AWS::RefactorSpaces::Environment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-refactorspaces-environment.html)
The `Name` property was changed to `Required: Yes`.
The `NetworkFabricType` property was changed to `Required: Yes`.
[AWS::RefactorSpaces::Route](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-refactorspaces-route.html)
The `RouteType` property was changed to `Required: Yes`.
In the [DefaultRouteInput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-refactorspaces-route-defaultrouteinput.html) property type, the `ActivationState` property was changed to `Required: No`.
In the [UriPathRouteInput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-refactorspaces-route-uripathrouteinput.html) property type, the `SourcePath` property was changed to `Required: Yes`.
[AWS::RefactorSpaces::Service](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-refactorspaces-service.html)
The `Name` property was changed to `Required: Yes`.
In the [LambdaEndpointInput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-refactorspaces-service-lambdaendpointinput.html) property type, the `Arn` property description was updated. | December 15, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::SSMIncidents::AWS::SSMIncidents::ReplicationSet`
[AWS::SSMIncidents::ReplicationSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmincidents-replicationset.html)
Use the `Tags` resource to add a list of tags to the replication set. | December 15, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBInstance
[AWS::RDS::DBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html)
Use the `DBClusterSnapshotIdentifier` property as the identifier for the RDS for MySQL Multi-AZ DB cluster snapshot to restore from.
Use the `RestoreTime` property to specify the date and time to restore from.
Use the `SourceDbiResourceId` property to specify the resource ID of the source DB instance from which to restore.
Use the `SourceDBInstanceAutomatedBackupsArn` property to specify the Amazon Resource Name (ARN) of the replicated automated backups from which to restore.
Use the `UseLatestRestorableTime` property to specify a value that indicates whether the DB instance is restored from the latest backup time. | December 15, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBCluster
[AWS::RDS::DBCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html)
Use the `SecondsBeforeTimeout` value in `ScalingConfiguration` property syntax to define the amount of time (seconds) that Aurora Serverless v1 tries to find a scaling point to perform seamless scaling before enforcing the timeout action.
The `DBSystemId` property is reserved for future use. | December 15, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::DocDBElastic::Cluster.
[AWS::DocDBElastic::Cluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-docdbelastic-cluster.html)
Use the `AWS::DocDBElastic::Cluster` resource to create an elastic cluster in the Amazon DocumentDB database service. | December 15, 2022 |
| [New resources](aws-template-resource-type-ref.md) | A property was added to `VpcOptions` in Network Manager: AWS::NetworkManager::VpcAttachment VpcOptions
[ AWS::NetworkManager::VpcAttachment VpcOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-transitgatewayvpcattachment-options.html#cfn-ec2-transitgatewayvpcattachment-options-appliancemodesupport)
You can enable or disable appliance mode for VPC attachments in `VpcOptions` by using the `ApplianceModeSupport` Boolean. | December 14, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Connect::Rule
[AWS::Connect::Rule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-rule.html)
Use the `AWS::Connect::Rule` resource to create an instance. | December 12, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FIS::ExperimentTemplate. The following resource was added: AWS::FIS::TargetAccountConfiguration.
[AWS::FIS::ExperimentTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fis-experimenttemplate.html)
Use the `ExperimentOptions` property to configure experiment options.
[AWS::FIS::TargetAccountConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fis-targetaccountconfiguration.html)
Use the `TargetAccountConfiguration` resource to add a target account to a multi-account experiment template. | December 11, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup.
[AWS::WAFv2::WebACL](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webacl.html)
Use the `ChallengeConfig` property to configure request evaluations for rules that use the `Challenge` action.
Use the `TokenDomains` property to specify additional domains to accept in web request tokens.
Use the `RuleActionOverride` property in rule group reference statements to override individual rule actions to any valid action. This replaces the `ExcludedRule` property, which only allows override to `Count`.
Use the `AWSManagedRulesBotControlRuleSet` property to configure your use of the Bot Control managed rule group in a managed rule group reference statement.
[AWS::WAFv2::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-rulegroup.html)
Use the `ChallengeConfig` property to configure request evaluations for rules that use the `Challenge` action. | December 8, 2022 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::Grafana::Workspace`.
[AWS::Grafana::Workspace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-grafana-workspace.html)
Use the `AWS::Grafana::Workspace` resource to create an Amazon Managed Grafana workspace in your AWS account. An Amazon Managed Grafana workspace allows you to view and monitor metrics and alerts for your system. | December 8, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::OpenSearchServerless::AccessPolicy, AWS::OpenSearchServerless::Collection, AWS::OpenSearchServerless::SecurityConfig, AWS::OpenSearchServerless::SecurityPolicy, AWS::OpenSearchServerless::VpcEndpoint.
[AWS::OpenSearchServerless::AccessPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchserverless-accesspolicy.html)
Use the `AWS::OpenSearchServerless::AccessPolicy` resource to create data access policies for Amazon OpenSearch Serverless.
[AWS::OpenSearchServerless::Collection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchserverless-collection.html)
Use the `AWS::OpenSearchServerless::Collection` resource to create collections in Amazon OpenSearch Serverless.
[AWS::OpenSearchServerless::SecurityConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchserverless-securityconfig.html)
Use the `AWS::OpenSearchServerless::SecurityConfig` resource to specify SAML providers for Amazon OpenSearch Serverless.
[AWS::OpenSearchServerless::SecurityPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchserverless-securitypolicy.html)
Use the `AWS::OpenSearchServerless::SecurityPolicy` resource to specify network and encryption policies for Amazon OpenSearch Serverless.
[AWS::OpenSearchServerless::VpcEndpoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchserverless-vpcendpoint.html)
Use the `AWS::OpenSearchServerless::VpcEndpoint` resource to specify Amazon OpenSearch Serverless-managed VPC endpoints. | December 8, 2022 |
| [New resources ](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoTTwinMaker::SyncJob.
[ AWS::IoTTwinMaker::SyncJob](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iottwinmaker-syncjob.html)
Use the `AWS::IoTTwinMaker::SyncJob` respurce to create a new sync job request. | December 6, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::ECS::TaskDefinition.
[AWS::ECS::TaskDefinition PortMappings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-portmappings.html)
Use the `Name` property to specify the port mapping name.
Use the `AppProtocol` property to specify the port mapping's application protocol. | December 2, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Logs::LogGroup.
[AWS::Logs::LogGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-loggroup.html)
The AWS::Logs::LogGroup resource was updated with the `LogGroupClass` parameter. For more information, see [ Log classes](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch_Logs_Log_Classes.html). | December 2, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Logs::LogGroup.
[AWS::Logs::LogGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-loggroup.html)
The AWS::Logs::LogGroup resource now supports the `DataProtectionPolicy` parameter, to support the masking of sensitive data in log events in the log group. For more information, see [Protect sensitive log data with masking](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/mask-sensitive-log-data.html). | December 2, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::SSMIncidents::ResponsePlan`
[AWS::SSMIncidents::ResponsePlan](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmincidents-responseplan.html)
Use the `Integration` resource to specify information about third-party services integrated into the response plan, such as PagerDuty.
Use the `PagerDuty` resource to provide details about the PagerDuty configuration for a response plan. | December 2, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Lambda::Function.
[AWS::Lambda::Function](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html)
Use the `SnapStart` property to specify the function's AWS Lambda SnapStart setting. SnapStart creates a snapshot of the initialized execution environment when you publish a function version. | December 2, 2022 |
| [New resources](aws-template-resource-type-ref.md) | The following properties were added: AWS::ECS::Cluster ServiceConnectDefaults, AWS::ECS::Service ServiceConnectClientAlias, and AWS::ECS::Service ServiceConnectConfiguration.
[AWS::ECS::Cluster ServiceConnectDefaults](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-cluster-serviceconnectdefaults.html)
Use the `AWS::ECS::Cluster ServiceConnectDefaults` property to specify a default Service Connect namespace for new services in the cluster.
[AWS::ECS::Service ServiceConnectClientAlias](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-service-serviceconnectclientalias.html)
Use the `AWS::ECS::Service ServiceConnectClientAlias` property to specify an endpoint in the Service Connect configuration for the service.
[AWS::ECS::Service ServiceConnectConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-serviceconnectconfiguration.html)
Use the `AWS::ECS::Service ServiceConnectConfiguration` property to specify the Service Connect configuration for the service. | December 2, 2022 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::Pipes::Pipe.
[AWS::Pipes::Pipe](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pipes-pipe.html)
Use the `AWS::Pipes::Pipe` resource to specify a new Amazon EventBridge Pipes pipe. | December 2, 2022 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::Oam::Sink and AWS::Oam::Link.
[AWS::Oam::Sink](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-oam-sink.html)
Use the `AWS::Oam::Sink` resource to specify a sink, which is an attachment point in a monitoring account that source accounts can create links to. Use the `AWS::Oam::Link` resource to specify a link from a source account to a monitoring account sink. For more information, see [CloudWatch cross-account observability](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Unified-Cross-Account.html). | December 2, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::EC2::NetworkPerformanceMetricSubscription.
[ AWS::EC2::NetworkPerformanceMetricSubscription](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkperformancemetricsubscription.html)
Returns a list of Infrastructure Performance subscriptions for AWS CloudWatch. | December 2, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoT::TopicRule RepublishActionHeaders.
[AWS::IoT::TopicRule RepublishActionHeaders](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-topicrule-republishactionheaders.html)
Use AWS::IoT::TopicRule RepublishActionHeaders to specify MQTT Version 5.0 headers information. | December 2, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::S3::AccessPoint.
[AWS::S3::AccessPoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3-accesspoint.html)
Use `AWS::S3::AccessPoint BucketAccountId` to specify which AWS account is associated with the S3 bucket associated with an access point. | November 30, 2022 |
| [Updated resources ](aws-template-resource-type-ref.md) | The following properties were added: AWS::IoTTwinMaker::ComponentType.PropertyGroups, and Entity.PropertyGroup.
[ AWS::IoTTwinMaker::ComponentType.PropertyGroups](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iottwinmaker-componenttype-propertygroups.html)
Use the `AWS::IoTTwinMaker::ComponentType.PropertyGroups` property to declare a ComponentType propertyGroup.
[ Entity.PropertyGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iottwinmaker-entity-propertygroup.html.html)
Use the `AWS::IoTTwinMaker::Entity.PropertyGroup` to declare an entity PropertyGroup. | November 17, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::Amplify::App and AWS::Amplify::Branch
[AWS::Amplify::App](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-app.html)
Use the `Platform` property to specify the platform type for the Amplify app.
[AWS::Amplify::Branch](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-branch.html)
Use the `Framework` property to specify the framework for the Amplify app. | November 17, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::AppSync::Resolver and AWS::AppSync::FunctionConfiguration
[AWS::AppSync::Resolver](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-resolver.html#cfn-appsync-resolver-code)
Use the `Code` property to specify the request and response functions.
[AWS::AppSync::Resolver](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-resolver.html#cfn-appsync-resolver-runtime)
Use the `Runtime` property to specify the runtime type to be used with a pipeline resolver or function
[AWS::AppSync::Resolver](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-resolver-appsyncruntime.html)
Use the `AppSyncRuntime` to specify the name and version of your runtime property.
[AWS::AppSync::FunctionConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-functionconfiguration.html#cfn-appsync-functionconfiguration-code)
Use the `Code` property to specify the request and response functions.
[AWS::AppSync::FunctionConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-functionconfiguration.html#cfn-appsync-functionconfiguration-runtime)
Use the `Runtime` property to specify the runtime type to be used with a pipeline resolver or function
[AWS::AppSync::FunctionConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-functionconfiguration-appsyncruntime.html)
Use the `AppSyncRuntime` to specify the name and version of your runtime property. | November 17, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudFront::Distribution.
[AWS::CloudFront::Distribution](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-distribution.html)
In the [DistributionConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-distributionconfig.html) use the `ContinuousDeploymentPolicyId` to specify a continuous deployment policy to associate with the distribution.
For more information, see [Using CloudFront continuous deployment to safely test CDN configuration changes](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/continuous-deployment.html) in the *Amazon CloudFront Developer Guide*. | November 17, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudTrail::EventDataStore
[AWS::CloudTrail::EventDataStore](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-eventdatastore.html)
Use the `KmsKeyId` property to specify the AWS KMS key ID to use to encrypt the events delivered by CloudTrail. | November 17, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AutoScaling::AutoScalingGroup.
[AWS::AutoScaling::AutoScalingGroup InstanceRequirements](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-instancerequirements.html)
Use the `AllowedInstanceTypes` and `NetworkBandwidthGbpsRequest` properties when using attribute-based instance type selection. | November 17, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::EMRServerless::Application`.
[AWS::EMRServerless::Application](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-emrserverless-application.html)
Use the `Architecture` property to specify the CPU architecture type of the application. | November 17, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IVS::RecordingConfiguration
[AWS::IVS::RecordingConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-recordingconfiguration.html)
Use the `RecordingReconnectWindowSeconds` property to control when multiple streams from the same broadcast are merged together. | November 17, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::S3::StorageLens.
[AWS::S3::StorageLens AdvancedCostOptimizationMetrics](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-storagelens-advancedcostoptimizationmetrics.html)
Use `AWS::S3::StorageLens AdvancedCostOptimizationMetrics` to enable advanced cost optimization metrics for S3 Storage Lens.
[AWS::S3::StorageLens AdvancedDataProtectionMetrics](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-storagelens-advanceddataprotectionmetrics.html)
Use `AWS::S3::StorageLens AdvancedDataProtectionMetrics` to enable advanced data protection metrics for S3 Storage Lens.
[AWS::S3::StorageLens DetailedStatusCodesMetrics](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-storagelens-detailedstatuscodesmetrics.html)
Use `AWS::S3::StorageLens DetailedStatusCodesMetrics` to enable detailed status code metrics for S3 Storage Lens. | November 17, 2022 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::Organizations::Account`, `AWS::Organizations::OrganizationalUnit`, and `AWS::Organizations::Policy`.
[AWS::Organizations::Account](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-organizations-account.html)
Use the `AWS::Organizations::Account` resource to create an AWS account that is automatically a member of the organization whose credentials made the request.
[AWS::Organizations::OrganizationalUnit](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-organizations-organizationalunit.html)
Use the `AWS::Organizations::OrganizationalUnit` resource to create an organizational unit (OU) within a root or parent OU in AWS Organizations.
[AWS::Organizations::Policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-organizations-policy.html)
Use the `AWS::Organizations::Policy` resource to create a policy of a specified type that you can attach to a root, an organizational unit (OU), or an individual AWS account in AWS Organizations. | November 17, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::XRay::ResourcePolicy.
[AWS::XRay::ResourcePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-xray-resourcepolicy.html)
Use the `ResourcePolicy` resource to specify a resource-based policy which enables access to specific X-Ray resources. | November 17, 2022 |
| [New Resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CloudFront::ContinuousDeploymentPolicy.
[AWS::CloudFront::ContinuousDeploymentPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-continuousdeploymentpolicy.html)
Use the `AWS::CloudFront::ContinuousDeploymentPolicy` resource in a CloudFront continuous deployment workflow.
For more information, see [Using CloudFront continuous deployment to safely test CDN configuration changes](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/continuous-deployment.html) in the *Amazon CloudFront Developer Guide*. | November 17, 2022 |
| [New property](aws-template-resource-type-ref.md) | The following property was added: AWS::GreengrassV2::Deployment.ParentTargetArn.
[AWS::GreengrassV2::Deployment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-greengrassv2-deployment.html)
Use the `AWS::GreengrassV2::Deployment.ParentTargetArn` property to set the parent deployment of a subdeployment. | November 15, 2022 |
| [New resources for Amazon EventBridge Scheduler](aws-template-resource-type-ref.md) | The following resources were added: `AWS::Scheduler::Schedule`, `AWS::Scheduler::ScheduleGroups`.
[AWS::Scheduler::Schedule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-scheduler-schedule.html)
Use the `Schedule` resource to create a new schedule.
[AWS::Scheduler::ScheduleGroups](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-scheduler-schedulegroup.html)
Use the `Schedule` resource to create a new schedule group to tag and organize your schedules. | November 11, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::AppStream::DirectoryConfig`
[AWS::AppStream::DirectoryConfig RSS ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appstream-directoryconfig.html)
Use the `CertificateBasedAuthProperties` property to specify the certificate-based authentication properties used to authenticate SAML 2.0 Identity Provider (IdP) user identities to Active Directory domain-joined streaming instances. | November 10, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: [AWS::Batch::ComputeEnvironment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-computeenvironment.html) and [AWS::Batch::JobDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobdefinition.html)
[AWS::Batch::ComputeEnvironment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-computeenvironment.html)
Use the `EksConfiguration` property to specify the details for the EKS cluster that supports the compute environment.
[AWS::Batch::JobDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobdefinition.html)
Use the `EksProperty` property to specify properties for Amazon EKS based jobs. | November 10, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::EC2::SpotFleet, AWS::EC2::EC2Fleet, and AWS::EC2::LaunchTemplate.
[AWS::EC2::SpotFleet InstanceRequirementsRequest](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-spotfleet-instancerequirementsrequest.html)
Use the `AllowedInstanceTypes` and `NetworkBandwidthGbps` properties when using attribute-based instance type selection.
[AWS::EC2::EC2Fleet InstanceRequirementsRequest](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-ec2fleet-instancerequirementsrequest.html)
Use the `AllowedInstanceTypes` and `NetworkBandwidthGbps` properties when using attribute-based instance type selection.
[AWS::EC2::LaunchTemplate InstanceRequirements](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata-instancerequirements.html)
Use the `AllowedInstanceTypes` and `NetworkBandwidthGbps` properties when using attribute-based instance type selection. | November 10, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::LaunchTemplate.
[AWS::EC2::LaunchTemplate MaintenanceOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata-maintenanceoptions.html)
Use the `AutoRecovery` property to disable the automatic recovery of your instance or set it to default.
[AWS::EC2::LaunchTemplate Placement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata-placement.html)
Use the `GroupId` property to launch an instance in a shared placement group. | November 10, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AutoScaling::AutoScalingGroup.
[AWS::AutoScaling::AutoScalingGroup MixedInstancesPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-mixedinstancespolicy.html)
Use the `SpotAllocationStrategy` property to specify `price-capacity-optimized` as the allocation strategy for your Spot capacity. | November 10, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBInstance
[AWS::RDS::DBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html)
Use the `StorageThroughput` property to specify the storage throughput value for the DB instance. This setting is applicable only for `gp3` storage type. | November 10, 2022 |
| [Launch of Resource Explorer](aws-template-resource-type-ref.md) | Initially added the resources for AWS Resource Explorer.
[AWS::ResourceExplorer2::Index](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-resource-explorer-index.html)
Use the `AWS::ResourceExplorer2::Index` resource to turn on Resource Explorer in an AWS Region by creating an index.
[AWS::ResourceExplorer2::View](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-resource-explorer-view.html)
Use the `AWS::ResourceExplorer2::View` resource to create a view that your users can use to search.
[AWS::ResourceExplorer2::DefaultViewAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-resource-explorer-defaultviewassociation.html)
Use the `AWS::ResourceExplorer2::DefaultViewAssociation` resource to designate a view as the default for its AWS Region in the account. | November 7, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBCluster
[AWS::RDS::DBCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html)
Use the `TimeoutAction` value in `ScalingConfiguration` property syntax to define the action to take when the timeout is reached.
The `DBClusterArn` return value is the Amazon Resource Name (ARN) for the DB cluster.
The `DBClusterResourceId` return value is the AWS Region-unique, immutable identifier for the DB cluster. | November 3, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBInstance
[AWS::RDS::DBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html)
Use the `ReplicaMode` property to define the open mode of an Oracle read replica.
The `DBInstanceArn` return value is the Amazon Resource Name (ARN) for the your instance.
The `DbiResourceId` return value is the AWS Region-unique, immutable identifier for the DB instance. | November 3, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBClusterParameterGroup
[AWS::RDS::DBClusterParameterGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbparametergroup.html)
Use the `DBClusterParameterGroupName` property to specify the name of the DB cluster parameter group. | November 3, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::OptionGroup
[AWS::RDS::OptionGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-optiongroup.html)
Use the `OptionGroupName` property to specify the name of the new option group. | November 3, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBInstance
[AWS::RDS::DBParameterGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbparametergroup.html)
Use the `DBParameterGroupName` property to specify the name of the DB parameter group. | November 3, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource and properties were added: AWS::SES::VdmAttributes, AWS::SES::ConfigurationSet VdmOptions .
[AWS::SES::VdmAttributes](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ses-vdmattributes.html)
Use the `VdmAttributes` resource to specify the Virtual Deliverability Manager (VDM) attributes that apply to your Amazon SES account.
[AWS::SES::ConfigurationSet VdmOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-configurationset-vdmoptions.html)
Use the `VdmOptions` property to specify the VDM properties that apply to a configuration set. | November 3, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::SupportApp::SlackWorkspaceConfiguration.
[AWS::SupportApp::SlackWorkspaceConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-supportapp-slackworkspaceconfiguration.html)
Use the `AWS::SupportApp::SlackWorkspaceConfiguration` resource to specify your configuration for the AWS Support App in Slack. | November 3, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AutoScaling::AutoScalingGroup.
[AWS::AutoScaling::AutoScalingGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-autoscalinggroup.html)
Use the `DefaultInstanceWarmup` property to unify all the warm-up and cooldown settings for an Auto Scaling group and optimize the performance of scaling policies that scale continuously, such as target tracking and step scaling policies. | November 2, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AppRunner::Service
[AWS::AppRunner::Service.IngressConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apprunner-service.html#cfn-apprunner-service-IngressConfiguration)
New property. The ingress configuration of the App Runner service. | October 31, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::AppRunner::VpcIngressConnection
[AWS::AppRunner::VpcIngressConnection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apprunner-vpcingressconnection.html)
Use the `AWS::AppRunner::VpcIngressConnection` resource to create or update an AWS App Runner VPC Ingress Connection. | October 31, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoT::TopicRule LocationAction.
[AWS::IoT::TopicRule LocationAction](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-topicrule-locationaction.html)
The AWS::IoT::TopicRule LocationAction resource to specify a Location Action. | October 31, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Connect::User UserIdentityInfo
[AWS::Connect::User UserIdentityInfo](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-connect-user-useridentityinfo.html)
Use the `Mobile` property to specify the user's mobile number.
Use the `SecondaryEmail` property to specify the user's secondary email address. | October 27, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RUM::AppMonitor.
[AWS::RUM::AppMonitor](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rum-appmonitor.html)
The `MetricDestination` and `MetricDefinition` properties were added to the `AWS::RUM::AppMonitor` resource to support Amazon CloudWatch extended metrics. For more information, see [ Custom metrics and extended metrics that you can send to CloudWatch and CloudWatch Evidently](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-vended-metrics.html). | October 27, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Cognito::UserPoolClient
[AWS::Cognito::UserPool](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpool.html)
The `DeletionProtection` property of a user pool prevents accidental deletion of user pools. | October 24, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following property was added to the AWS::SES::DedicatedIpPool resource:
[AWS::SES::DedicatedIpPool](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ses-dedicatedippool.html)
Use the `ScalingMode` property to specify the scaling mode of a dedicated IP pool. | October 20, 2022 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::AmplifyUIBuilder::Form.
[AWS::AmplifyUIBuilder::Form](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amplifyuibuilder-form.html)
Use the `AWS::AmplifyUIBuilder::Form` resource to specify a form within an Amplify app. | October 20, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following new resource was added: `AWS::FSx::DataRepositoryAssociation`
[AWS::FSx::DataRepositoryAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-datarepositoryassociation.html)
Use the `DataRepositoryAssociation` resource to link an FSx for Lustre file system to an Amazon S3 data repository. | October 20, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBCluster
[AWS::RDS::DBCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html)
Use the `Domain` property to specify the directory ID of the Active Directory to create the DB cluster.
Use the `DomainIAMRoleName` property to specify the name of the IAM role to use when making API calls to the Directory Service.
Use the `NetworkType` property to indicate the network type of the DB cluster.
The following properties now supported for Multi-AZ DB clusters: AllocatedStorage, AutoMinorVersionUpgrade, BackupRetentionPeriod, CopyTagsToSnapshot, DatabaseName, DBClusterIdentifier, DBClusterInstanceClass, DBClusterParameterGroupName, DBSubnetGroupName, DeletionProtection, EnableCloudwatchLogsExports, Engine, EngineVersion, Iops, KmsKeyId, MasterUsername, MasterUserPassword, MonitoringInterval, MonitoringRoleArn, PerformanceInsightsEnabled, PerformanceInsightsKmsKeyId, PerformanceInsightsRetentionPeriod, Port, PreferredBackupWindow, PreferredMaintenanceWindow, PubliclyAccessible, StorageEncrypted, StorageType, Tags, and VpcSecurityGroupIds | October 13, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBInstance
[AWS::RDS::DBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html)
Use the `NetworkType` property to indicate the network type of the DB cluster. | October 13, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Connect::PhoneNumber
[AWS::Connect::PhoneNumber](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-phonenumber.html)
Use the `AWS::Connect::PhoneNumber` resource to claim a phone number to an Amazon Connect instance or traffic distribution group. | October 10, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::GreengrassV2::Deployment.
[AWS::GreengrassV2::Deployment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-greengrassv2-deployment.html)
Use the `AWS::GreengrassV2::Deployment` resource to create a new deployment to your core devices in AWS IoT Greengrass. | October 6, 2022 |
| [New and updated resources](aws-template-resource-type-ref.md) | The following resources were added: AWS ::Transfer::Agreement, AWS ::Transfer::Connector, AWS ::Transfer::Certificate, and AWS ::Transfer::Profile. The following resource was updated: AWS ::Transfer::Server WorkflowDetails
[AWS ::Transfer::Agreement ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-agreement.html)
Use the `Agreement` resource to specify an agreement between trading partners in AWS Transfer Family .
[AWS ::Transfer::Certificate ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-certificate.html)
Use the `Certificate` resource to import signing and encryption certificates for AS2 in AWS Transfer Family .
[AWS ::Transfer::Connector ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-connector.html)
Use the `Connector` resource to create an entity that captures the parameters for an outbound AS2 connection in AWS Transfer Family .
[AWS ::Transfer::Profile ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-profile.html)
Use the `Profile` resource to specify local and partner profiles for servers in AWS Transfer Family that use the AS2 protocol.
[AWS ::Transfer::Server WorkflowDetails ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-server.html)
Use the `OnPartialUpload` parameter to trigger a workflow in the case a transfer is interrupted and does not complete. | October 6, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::KMS::Key`.
[AWS::KMS::Key](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html)
If you change the value of an immutable property of an existing `AWS::KMS::Key` resource, the request to update the resource fails. Previously, changing the value of an immutable property caused the existing `AWS::KMS::Key` to be deleted and replaced.
This change does not affect the `AWS::KMS::Alias` or `AWS::KMS::ReplicaKey` resources. If you change an immutable property of these resources, the resource is deleted and replaced. | September 30, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBCluster
[AWS::RDS::DBCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html)
Use the `ServerlessV2ScalingConfiguration` property to specify the scaling configuration of an Aurora Serverless V2 DB cluster.
The `DBClusterResourceId` return value is the AWS Region-unique, immutable identifier for the DB cluster.
Use the `DBInstanceParameterGroupName` property to specify the name of the DB parameter group to apply to all instances of the DB cluster. | September 29, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBInstance
[AWS::RDS::DBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html)
Use the `NcharCharacterSetName` property to specify the name of the NCHAR character set for the Oracle DB instance.
Use the `CustomIAMInstanceProfile` property to specify the instance profile associated with the underlying Amazon EC2 instance of an RDS Custom DB instance. | September 29, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CloudFront::MonitoringSubscription.
[AWS::CloudFront::MonitoringSubscription](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-monitoringsubscription.html)
Use the `AWS::CloudFront::MonitoringSubscription` resource to enable additional CloudWatch metrics for the specified Amazon CloudFront distribution.
For more information, see [Viewing additional CloudFront distribution metrics](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/viewing-cloudfront-metrics.html#monitoring-console.distributions-additional) in the *Amazon CloudFront Developer Guide*. | September 29, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IoT::CACertificate.
[AWS::IoT::CACertificate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-cacertificate.html)
The AWS::IoT::CACertificate resource adds RemoveAutoRegistration property. | September 22, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoTFleetWise::Campaign
[AWS::IoTFleetWise::Campaign](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotfleetwise-campaign.html)
Use the `AWS::IoTFleetWise::Campaign` resource to specify a campaign in AWS IoT FleetWise. | September 22, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoTFleetWise::DecoderManifest
[AWS::IoTFleetWise::DecoderManifest](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotfleetwise-decodermanifest.html)
Use the `AWS::IoTFleetWise::DecoderManifest` resource to specify a decoder manifest in AWS IoT FleetWise. | September 22, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoTFleetWise::Fleet
[AWS::IoTFleetWise::Fleet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotfleetwise-fleet.html)
Use the `AWS::IoTFleetWise::Fleet` resource to specify a fleet in AWS IoT FleetWise. | September 22, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoTFleetWise::ModelManifest
[AWS::IoTFleetWise::ModelManifest](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotfleetwise-modelmanifest.html)
Use the `AWS::IoTFleetWise::ModelManifest` resource to specify a model manifest in AWS IoT FleetWise. | September 22, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoTFleetWise::SignalCatalog
[AWS::IoTFleetWise::SignalCatalog](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotfleetwise-signalcatalog.html)
Use the `AWS::IoTFleetWise::SignalCatalog` resource to specify a signal catalog in AWS IoT FleetWise. | September 22, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoTFleetWise::Vehicle
[AWS::IoTFleetWise::Vehicle](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotfleetwise-vehicle.html)
Use the `AWS::IoTFleetWise::Vehicle` resource to specify a vehicle in AWS IoT FleetWise. | September 22, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Cognito::UserPoolClient
[AWS::Cognito::UserPoolClient](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpoolclient.html)
The `AuthSessionValidity` property of a user pool client makes it possible to increase the duration of a prompt for authentication input like a password or MFA code. | September 15, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following property was updated: `AWS::EKS::Cluster`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html)
Use the `OutpostConfig` property to specify the configuration of your local Amazon EKS cluster on an Outpost. | September 15, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::LaunchTemplate.
[ AWS::EC2::LaunchTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#cfn-ec2-launchtemplate-versiondescription)
A description for the first version of the launch template. | September 8, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::KMS::Key`.
[AWS::KMS::Key](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html)
Add full `AWS::KMS::Key` support to Middle East (UAE) Region (me-central-1), including support for using a CloudFormation template to create and manage asymmetric KMS keys and multi-Region KMS keys (primary or replica). | September 8, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::OpenSearchService::Domain.
[AWS::OpenSearchService::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html)
Use the `Throughput` property to specify the throughput of the EBS volumes attached to data nodes. This propertly applies only to the `gp3` volume type. | September 8, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::SNS::Topic.
[AWS::SNS::Topic](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sns-topic.html)
Use the `DataProtectionPolicy` property to attach a DataProtectionPolicy to an SNS topic. | September 8, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CloudFront::OriginAccessControl.
[AWS::CloudFront::OriginAccessControl](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-originaccesscontrol.html)
Use the `AWS::CloudFront::OriginAccessControl` resource to create a new origin access control in Amazon CloudFront.
For more information, see [Restricting access to an Amazon S3 origin](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html) in the *Amazon CloudFront Developer Guide*. | September 8, 2022 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::IdentityStore::Group and AWS::IdentityStore::GroupMembership.
[AWS::IdentityStore::Group](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-identitystore-group.html)
Use the `AWS::IdentityStore::Group` resource to manage groups in an identity store.
[AWS::IdentityStore::GroupMembership](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-identitystore-groupmembership.html)
Use the `AWS::IdentityStore::GroupMembership` resource to manage group membership in an identity store. | September 7, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Connect::InstanceStorageConfig
[AWS::Connect::InstanceStorageConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-instancestorageconfig.html)
Use the `AWS::Connect::InstanceStorageConfig` resource to configure instance storage. | September 1, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::ControlTower::EnabledControl.
[AWS::ControlTower::EnabledControl](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-controltower-enabledcontrol.html)
Use the `AWS::ControlTower::EnabledControl` resource to specify an asynchronous operation that manages a control. | September 1, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::Macie::AllowList`.
[AWS::Macie::AllowList](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-macie-allowlist.html)
Use the `AWS::Macie::AllowList` resource to specify text or a text pattern for Amazon Macie to ignore when it inspects data sources for sensitive data. | September 1, 2022 |
| [Updated resource ](aws-template-resource-type-ref.md) | The following resource was updated: AWS::APS::Workspace.
[AWS::APS::Workspace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-aps-workspace.html)
Use the `LoggingConfiguration` property to specify Amazon Managed Service for Prometheus workspace logging configuration. | August 30, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::AppMesh::VirtualNode, AWS::AppMesh::VirtualGateway, AWS::AppMesh::GatewayRoute and AWS::AppMesh::Route
[AWS::AppMesh::VirtualNode](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appmesh-virtualnode.html)
Use the `Format` property to represent the specified format for the logs. The format is either `json_format` or `text_format`.
Use the `JsonFormatRef` resource to represent object that represents the key value pairs for the JSON.
Use the `LoggingFormat` resource to represent object that represents the format for the logs.
[AWS::AppMesh::VirtualGateway](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appmesh-virtualgateway.html)
Use the `VirtualGatewayFileAccessLogFormat` property to represent the specified format for the logs. The format is either `json_format` or `text_format`.
Use the `JsonFormatRef` resource to represent object that represents the key value pairs for the JSON.
Use the `LoggingFormat` resource to represent object that represents the format for the logs.
[AWS::AppMesh::GatewayRoute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appmesh-gatewayroute.html)
Use the `Port` property to represent the port number of the gateway route target.
[AWS::AppMesh::Route](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appmesh-route.html)
Use the `Port` property to represent the port number of the gateway route target.
Use the `Port` property to represent an object that is the criteria for determining a request match.
Use the `TcpRouteMatch` resource to represent an object that is the TCP route to match. | August 25, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::MediaPackage::OriginEndpoint.
[AWS::MediaPackage::OriginEndpoint.](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackage-originendpoint.html)
Use the `DVB_DASH_2014` property to select the DVB\$1DASH\$12014 profile for the output. | August 25, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Connect::Instance
[AWS::Connect::Instance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-instance.html)
Use the `AWS::Connect::Instance` resource to create an instance. | August 25, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::SupportApp::SlackChannelConfiguration.
[AWS::SupportApp::SlackChannelConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-supportapp-slackchannelconfiguration.html)
Use the `AWS::SupportApp::SlackChannelConfiguration` resource to specify your configuration for the AWS Support App in Slack. | August 25, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::SupportApp::AccountAlias.
[AWS::SupportApp::AccountAlias](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-supportapp-accountalias.html)
Use the `AWS::SupportApp::AccountAlias` resource to specify your alias name. You can use this alias to identify your AWS account in the AWS Support App. | August 25, 2022 |
| [`Fn::ToJsonString` intrinsic function](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-tojsonstring.html) | The `Fn::ToJsonString` intrinsic function converts an object or array to its corresponding JSON string. | August 24, 2022 |
| [`Fn::Length` intrinsic function](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-length.html) | The `Fn::Length` intrinsic function returns the number of elements within an array or an intrinsic function that returns an array. | August 24, 2022 |
| [`AWS::LanguageExtensions` transform](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/transform-aws-languageextensions.html) | The `AWS::LanguageExtensions` transform is a macro hosted by CloudFormation that lets you use intrinsic functions and other functionalities not included by default in CloudFormation. | August 24, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::WAFv2::WebACLAssociation.
[AWS::WAFv2::WebACLAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webaclassociation.html)
The `ResourceArn` property now accepts `AWS::Cognito::UserPool` ARNs. | August 23, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FMS::Policy.
[AWS::FMS::Policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fms-policy.html)
The `AWS::FMS::Policy` resource now allows you to manage third-party firewalls, as well as AWS Network Firewall policies that use centralized or distributed deployment models. | August 18, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Lambda::EventSourceMapping.
[AWS::Lambda::EventSourceMapping](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventsourcemapping.html)
Use the `SelfManagedKafkaEventSourceConfig` property to define specific configuration settings for a self-managed Kafka event source, such as the consumer group ID. Use the `AmazonManagedKafkaEventSourceConfig` property to define specific configuration settings for an MSK event source, such as the consumer group ID. | August 18, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::DynamoDB::Table.ImportSourceSpecification
[AWS::DynamoDB::Table.ImportSourceSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dynamodb-table.html)
Use the `AWS::DynamoDB::Table.ImportSourceSpecification` resource to import from S3 into DynamoDB. | August 18, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudFront::Distribution.
[AWS::CloudFront::Distribution](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-distribution.html)
In the [HttpVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-distributionconfig.html#cfn-cloudfront-distribution-distributionconfig-httpversion) property, use the `http2and3` and `http3` values to specify the HTTP version(s) that you want viewers to use to communicate with Amazon CloudFront.
For more information, see [Supported HTTP versions](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesSupportedHTTPVersions) in the *Amazon CloudFront Developer Guide*. | August 15, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::GuardDuty::Filter`, `AWS::GuardDuty::IPSet`, and `AWS::GuardDuty::ThreatIntelSet`
[AWS::GuardDuty::Filter](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-filter.html)
Use `Tags` property to specify metadata to add to a new filter resource.
Use `Rank` property to specify position of the filter in the list of the current filters.
[AWS::GuardDuty::IPSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-ipset.html)
Use `Tags` property to specify metadata to add to a new IP set resource.
[AWS::GuardDuty::ThreatIntelSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html)
Use `Tags` property to specify metadata to add to a new threat list resource. | August 15, 2022 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::M2::Application and AWS::M2::Environment.
[AWS::M2::Application](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-m2-application.html)
Use the `AWS::M2::Application` resource to specify an application in the AWS Mainframe Modernization service.
[AWS::M2::Environment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-m2-environment.html)
Use the `AWS::M2::Environment` resource to specify a runtime environment in the AWS Mainframe Modernization service. | August 11, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup.
[AWS::WAFv2::WebACL](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webacl.html)
In the [SqliMatchStatement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-sqlimatchstatement.html) property type, use the `SensitivityLevel` property to specify the sensitivity that you want to use to inspect for SQL injection attacks.
[AWS::WAFv2::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-rulegroup.html)
In the [SqliMatchStatement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-sqlimatchstatement.html) property type, use the `SensitivityLevel` property to specify the sensitivity that you want to use to inspect for SQL injection attacks. | August 4, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::GuardDuty::Detector
[AWS::GuardDuty::Detector](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-detector.html)
Use the `CFNDataSourceConfigurations` property to specify the data source when detector is created.
Use the `CFNMalwareProtectionConfiguration` property to specify enabling Malware Protection data source.
Use the `CFNScanEc2InstanceWithFindingsConfiguration` property to specify enabling data source as Malware Protection for EC2 findings. | August 4, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IoT::CACertificate.
[AWS::IoT::CACertificate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-cacertificate.html)
The AWS::IoT::CACertificate resource adds RegistrationConfig type in RegistrationConfig property. | August 4, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IoT::ProvisioningTemplate.
[AWS::IoT::ProvisioningTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-provisioningtemplate.html)
The AWS::IoT::ProvisioningTemplate resource now supports TemplateType property. | August 4, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RedshiftServerless::Workgroup
[AWS::RedshiftServerless::Workgroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshiftserverless-workgroup.html)
The `additionalinfo` parameter was removed from `AWS::RedshiftServerless::Workgroup`. | July 28, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated:
[AWS ::Transfer::Server ProtocolDetails ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-server-protocoldetails.html)
Use the `As2Transports` property to indicate the transport method for the AS2 messages. | July 28, 2022 |
| [Updates to resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::SSO::PermissionSet`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-permissionset.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-permissionset.html)
Use the `CustomerManagedPolicyReferences` and `PermissionsBoundary` properties of the `AWS::SSO::PermissionSet` resource to assign customer managed policies and permissions boundaries in IAM Identity Center. | July 21, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::PlacementGroup.
[ AWS::EC2::PlacementGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-placementgroup.html#aws-resource-ec2-placementgroup-properties)
Use the `SpreadLevel` parameter to determine how placement groups spread instances. | July 21, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::MediaPackage::OriginEndpoint.
[AWS::MediaPackage::OriginEndpoint.](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackage-originendpoint.html)
Updated the `presetSpeke20Audio` and `presetSpeke20Video`properties. | July 21, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Synthetics::Group.
[AWS::Synthetics::Group](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-synthetics-group.html)
Use the `AWS::Synthetics::Group` resource to create a group. You can use groups to associate canaries with each other, including cross-Region canaries. Using groups can help you with managing and automating your canaries, and you can also view aggregated run results and statistics for all canaries in a group. | July 21, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::KMS::Key`.
[AWS::KMS::Key](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html)
Added support for SM2 key pairs (China Regions only), including the SM2 value for the `KeySpec` property. | July 14, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::SageMaker::NotebookInstance
[AWS::SageMaker::NotebookInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-notebookinstance.html)
Use the `InstanceMetadataServiceConfiguration` property to specify information about the IMDS configuration of the notebook instance.
Use the `InstanceMetadataServiceConfiguration.MinimumInstanceMetadataServiceVersion` property to specify the minimum IMDS version that the notebook instance supports. | July 14, 2022 |
| [New resources](aws-template-resource-type-ref.md) | Use these resources to manage your Amazon Redshift Serverless instance.
[AWS::RedshiftServerless::Workgroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshiftserverless-workgroup.html)
Use the `AWS::RedshiftServerless::Workgroup` resource to manage compute resources in Amazon Redshift Serverless.
[AWS::RedshiftServerless::Namespace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshiftserverless-namespace.html)
Use the `AWS::RedshiftServerless::Namespace` resource to manage database objects and users in Amazon Redshift Serverless. | July 12, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RefactorSpaces::Route.
[AWS::RefactorSpaces::Route](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-refactorspaces-route.html)
In the [DefaultRouteInput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-refactorspaces-route-defaultrouteinput.html) property type, use the `ActivationState` property to specify the activation state of the route.
In the [UriPathRouteInput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-refactorspaces-route-uripathrouteinput.html) property type, use the `ActivationState` property to specify the activation state of the route. | June 30, 2022 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::LakeFormation::DataCellsFilter, AWS::LakeFormation::TagAssociation, documentation target="AWS::LakeFormation::Tag, AWS::LakeFormation::PrincipalPermissions
[AWS::LakeFormation::DataCellsfilter](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lakeformation-datacellsfilter.html)
Use the `DataCellsFilter` resource to specify a structure for a data cell filter.
[AWS::LakeFormation::PrincipalPermissions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lakeformation-PrincipalPermissions.html)
Use the `AWS::LakeFormation::PrincipalPermissions` resource to specify the permissions that a principal has on an resource.
[AWS::LakeFormation::Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lakeformation-tag.html)
Use the `AWS::LakeFormation::Tag` resource to specify an LF-tag, which consists of a key and one or more possible values for the key.
[AWS::LakeFormation::TagAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lakeformation-tagassociation.html)
Use the `AWS::LakeFormation::TagAssociation` resource to assign an LF-tag to a Data Catalog resource. | June 30, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::DataSync::LocationFSxONTAP.
[AWS::DataSync::LocationFSxONTAP](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationfsxontap.html)
Use the `AWS::DataSync::LocationFSxONTAP` resource to create a location for an Amazon FSx for ONTAP file system. | June 30, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoT::CACertificate
[AWS::IoT::CACertificate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-cacertificate.html)
Use the `AWS::IoT::CACertificate`to specify a CA certificate. | June 30, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::SES::DedicatedIpPool.
[AWS::SES::DedicatedIpPool](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ses-dedicatedippool.html)
Use the `DedicatedIpPool` resource to create a new pool of dedicated IP addresses. | June 30, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource and properties were added: AWS::SES::EmailIdentity, AWS::SES::EmailIdentity ConfigurationSetAttributes, AWS::SES::EmailIdentity DkimAttributes, AWS::SES::EmailIdentity DkimSigningAttributes, AWS::SES::EmailIdentity FeedbackAttributes, and AWS::SES::EmailIdentity MailFromAttributes.
[AWS::SES::EmailIdentity](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ses-emailidentity.html)
Use the `EmailIdentity` resource to specify an identity, such as an email address or domain, for using within SES.
[AWS::SES::EmailIdentity ConfigurationSetAttributes](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-emailidentity-configurationsetattributes.html)
Use the `ConfigurationSetAttributes` property to associate a configuration set with an email identity.
[AWS::SES::EmailIdentity DkimAttributes](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-emailidentity-dkimattributes.html)
Use the `DkimAttributes` property to enable or disable DKIM authentication for an email identity.
[AWS::SES::EmailIdentity DkimSigningAttributes](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-emailidentity-dkimsigningattributes.html)
Use the `DkimSigningAttributes` property to configure or change the DKIM authentication settings for an email domain identity.
[AWS::SES::EmailIdentity FeedbackAttributes](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-emailidentity-feedbackattributes.html)
Use the `FeedbackAttributes` property to enable or disable feedback forwarding for an identity.
[AWS::SES::EmailIdentity MailFromAttributes](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-emailidentity-mailfromattributes.html)
Use the `MailFromAttributes` property to enable or disable the custom Mail-From domain configuration for an email identity. | June 30, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::AppStream::Stack`
[AWS::AppStream::Stack](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appstream-stack.html)
Use the `StreamingExperienceSettings` property to specify the streaming protocol you want your stack to prefer. This can be UDP or TCP. Currently, UDP is only supported in the Windows native client. | June 28, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CloudTrail::EventDataStore
[AWS::CloudTrail::EventDataStore](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-eventdatastore.html)
Use the `EventDataStore` resource to specify an event data store in CloudTrail Lake. Event data stores are immutable collections of events based on criteria that you select by applying advanced event selectors. For more information, see [Working with CloudTrail Lake](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake.html) in the *AWS CloudTrail User Guide*.
[AWS::CloudTrail::EventDataStore.AdvancedEventSelector](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-eventdatastore-advancedeventselector.html)
Use the `AdvancedEventSelector` property to specify fine-grained event properties for data events that you want to log to an event data store. For more information, see [Data events](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html#logging-data-events) in the *AWS CloudTrail User Guide*.
[AWS::CloudTrail::EventDataStore.AdvancedFieldSelector](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-eventdatastore-advancedfieldselector.html)
Use the `AdvancedFieldSelector` property to specify fine-grained event properties for data events that you want to log to an event data store. An `AdvancedFieldSelector` is a single selector statement within an advanced event selector. For more information, see [Data events](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html#logging-data-events) in the *AWS CloudTrail User Guide*. | June 23, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::ConnectCampaigns::Campaign
[AWS::ConnectCampaigns::Campaign](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_ConnectCampaigns.html)
Use the `AWS::ConnectCampaigns::Campaign` resource to create a high-volume outbound campaign. | June 23, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::MediaTailor::Channel, AWS::MediaTailor::LiveSource, AWS::MediaTailor::SourceLocation, and AWS::MediaTailor::VodSource.
[AWS::MediaTailor::Channel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediatailor-channel.html)
Added `DashPlaylistSettings`, `HlsPlaylistSettings`, `LogConfigurationForChannel`, `RequestOutputItem`, and `SlateSource` properties.
[AWS::MediaTailor::ChannelPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediatailor-channelpolicy.html)
Added `ChannelName`and `Policy` properties.
[AWS::MediaTailor::LiveSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediatailor-livesource.html)
Added `HttpPackageConfiguration` property.
[AWS::MediaTailor::SourceLocation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediatailor-sourcelocation.html)
Added `AccessConfiguration`, `DefaultSegmentDeliveryConfiguration`, `HttpConfiguration`, `SecretsManagerAccessTokenConfiguration`, and `SegmentDeliveryConfiguration` properties.
[AWS::MediaTailor::VodSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediatailor-vodsource.html)
Added `HttpPackageConfiguration` property. | June 22, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::MediaTailor::PlaybackConfiguration.
[AWS::MediaTailor::PlaybackConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediatailor-playbackconfiguration.html)
Added `DashConfiguration.ManifestEndpointPrefix`, `HlsConfiguration.ManifestEndpointPrefix`, `PlaybackConfigurationArn`, `PlaybackEndpointPrefix`, and `SessionInitializationEndpointPrefix` return values. | June 16, 2022 |
| [New resources](aws-template-resource-type-ref.md) | The following resource and properties were added: AWS::Route53::CidrCollection, AWS::Route53::RecordSet.CidrRoutingConfig, and AWS::Route53::RecordSetGroup CidrRoutingConfig
[AWS::Route53::CidrCollection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53-cidrcollection.html)
Use the `AWS::Route53::CidrCollection` resource to create a CIDR collection for IP-based DNS routing.
[AWS::Route53::RecordSet.CidrRoutingConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53-cidrroutingconfig.html)
Use the `AWS::Route53::RecordSet.CidrRoutingConfig` property to update IP-routing information for the DNS record that you want to create.
[AWS::Route53::RecordSetGroup CidrRoutingConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53-cidrroutingconfig.html)
Use the `AWS::Route53::RecordSetGroup CidrRoutingConfig` property to link a resource record set to a CIDR location. | June 16, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::LaunchTemplate.
[ AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-disableapistop)
Use the `DisableApiStop` parameter to enable or disable an instance for stop protection. | June 9, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::DataSync::LocationEFS.
[AWS::DataSync::LocationEFS](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationefs.html)
Use the `AccessPointArn` property to specify an access point for your Amazon EFS file system.
Use the `FileSystemAccessRoleArn` property to specify an IAM role that DataSync assumes when mounting your file system.
Use the `InTransitEncryption` property to specify whether you want DataSync to use Transport Layer Security (TLS) 1.2 encryption when it copies data to or from your file system. | June 9, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following property was added to the AWS::SES::ConfigurationSetEventDestination resource:
[AWS::SES::ConfigurationSetEventDestination SnsDestination](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-configurationseteventdestination-snsdestination.html)
Use the `SnsDestination` property to specify an Amazon Simple Notification Service (Amazon SNS) event destination to publish email sending events. | June 9, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following properties were updated to SES API v2 for the AWS::SES::ConfigurationSet resource:
[AWS::SES::ConfigurationSet DeliveryOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-configurationset-deliveryoptions.html)
Use the `DeliveryOptions` property to assign a dedicated IP pool to this configuration set.
[AWS::SES::ConfigurationSet ReputationOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-configurationset-reputationoptions.html)
Use the `ReputationOptions` property to enable or disable collection of reputation metrics for emails sent with this configuration set.
[AWS::SES::ConfigurationSet SendingOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-configurationset-sendingoptions.html)
Use the `SendingOptions` property to enable or disable email sending for messages that use this configuration set.
[AWS::SES::ConfigurationSet SuppressionOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-configurationset-suppressionoptions.html)
Use the `SuppressionOptions` property to specify a list that contains the reasons that email addresses are automatically added to the suppression list.
[AWS::SES::ConfigurationSet TrackingOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-configurationset-trackingoptions.html)
Use the `TrackingOptions` property to specify a custom domain to use for open and click tracking elements in emails that you send from this configuration set. | June 9, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::Connect::TaskTemplate
[AWS::Connect::TaskTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-tasktemplate.html)
Use the `AWS::Connect::TaskTemplate` resource to create a task template. | June 9, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated:
[AWS ::Transfer::Server ProtocolDetails ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-transfer-server-protocoldetails.html)
Use the `SetStatOption` to ignore the error that is generated when the client attempts to use SETSTAT on a file you are uploading to an S3 bucket. | May 26, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::EMRServerless::Application`.
[AWS::EMRServerless::Application](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-emrserverless-application.html)
Use the `AWS::EMRServerless::Application` resource to specify an EMR Serverless application. | May 26, 2022 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::IoTWireless::NetworkAnalyzerConfiguration
[AWS::IoTWireless::NetworkAnalyzerConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotwireless-networkanalyzerconfiguration.html)
Gets information about a network analyzer configuration. | May 25, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Cognito::UserPoolClient
[AWS::Cognito::UserPoolClient](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpoolclient.html)
The `EnablePropagateAdditionalUserContextData` property of a user pool client makes it possible to pass IP address information to advanced security features with unauthenticated API requests. | May 20, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::AppMesh::VirtualNode and AWS::AppMesh::Mesh
[AWS::AppMesh::VirtualNode](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appmesh-virtualnode.html)
Use the `DnsServiceDiscovery` property to represent the DNS service discovery information for your virtual node.
Use the `AwsCloudMapServiceDiscovery` property to represent the AWS Cloud Map service discovery information for your virtual node.
[AWS::AppMesh::Mesh](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appmesh-mesh.html)
Use the `MeshServiceDiscovery` resource to represent the service discovery information for a service mesh. | May 19, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::Lightsail::LoadBalancer and AWS::Lightsail::LoadBalancerTlsCertificate
[AWS::Lightsail::LoadBalancer](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lightsail-loadbalancer.html)
Use the `tlsPolicyName` property to specify a TLS security policy for the load balancer.
[AWS::Lightsail::LoadBalancerTlsCertificate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lightsail-loadbalancertlscertificate.html)
Use the `httpsRedirectionEnabled` property to indicate whether HTTPS redirection is enabled for the load balancer that the TLS certificate is attached to. | May 19, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Synthetics::Canary.
[AWS::Synthetics::Canary](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-synthetics-canary.html)
The `DeleteLambdaResourcesOnCanaryDeletion` parameter was added. You can specify this parameter when you create or update a canary to have the canary's Lambda resources deleted when the canary is deleted. | May 12, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::DataSync::Task.
[AWS::DataSync::Task](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-datasync-task-options.html)
In the `Options` property type, use the `ObjectTags` property to specify whether object tags are maintained when transferring between object storage systems. | May 12, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoT::RoleAlias
[AWS::IoT::RoleAlias](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-rolealias.html)
Use the `AWS::IoT::RoleAlias`to specify a role alias. | May 12, 2022 |
| [New resources](aws-template-resource-type-ref.md) | New resources were added to Network Manager: AWS::NetworkManager::CoreNetwork, AWS::NetworkManager::ConnectAttachment, AWS::NetworkManager::ConnectPeer, AWS::NetworkManager::SiteToSiteVpnAttachment, and AWS::NetworkManager::VpcAttachment.
[AWS::NetworkManager::CoreNetwork](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkmanager-corenetwork.html)
Use the `AWS::NetworkManager::CoreNetwork` to create a core network.
[AWS::NetworkManager::ConnectAttachment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkmanager-connectattachment.html)
Use the `AWS::NetworkManager::CoreNetwork.ConnectAttachment` to create a Connect attachment.
[AWS::NetworkManager::ConnectPeer](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkmanager-connectpeer.html)
Use the `AWS::NetworkManager::ConnectPeer` to create a Connect peer attachment.
[AWS::NetworkManager::SiteToSiteVpnAttachment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkmanager-sitetositevpnattachment.html)
Use the `AWS::NetworkManager::SiteToSiteVpnAttachment` to create a site-to-site VPN attachment.
[AWS::NetworkManager::VpcAttachment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkmanager-vpcattachment.html)
Use the `AWS::NetworkManager::VpcAttachment` to create a VPC attachment. | May 11, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup.
[AWS::WAFv2::WebACL](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webacl.html)
Use the `Cookies` property to specify that a rule statement should inspect the cookies in web requests.
Use the `CookieMatchPattern` property to specify a subset of all cookies for inspection.
Use the `Headers` property to specify that a rule statement should inspect the headers in web requests.
Use the `HeaderMatchPattern` property to specify a subset of all headers for inspection.
In the [Body](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-body.html) property type, use the `OversizeHandling` property to specify how to handle web requests that have oversize body contents.
In the [JsonBody](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-jsonbody.html) property type, use the `OversizeHandling` property to specify how to handle web requests that have oversize body contents.
[AWS::WAFv2::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-rulegroup.html)
Use the `Cookies` property to specify that a rule statement should inspect the cookies in web requests.
Use the `CookieMatchPattern` property to specify a subset of all cookies for inspection.
Use the `Headers` property to specify that a rule statement should inspect the headers in web requests.
Use the `HeaderMatchPattern` property to specify a subset of all headers for inspection.
In the [Body](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-body.html) property type, use the `OversizeHandling` property to specify how to handle web requests that have oversize body contents.
In the [JsonBody](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-jsonbody.html) property type, use the `OversizeHandling` property to specify how to handle web requests that have oversize body contents. | May 5, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Rekognition::StreamProcessor.
[AWS::Rekognition::StreamProcessor](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_Rekognition.html)
The `AWS::Rekognition::StreamProcessor` type creates a stream processor used to detect and recognize faces or to detect connected home labels in a streaming video. | May 5, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::VoiceID::Domain
[AWS::VoiceID::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-voiceid-domain.html)
Use the `AWS::VoiceID::Domain` resource to create a Voice ID domain. | May 5, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::EC2::KeyPair.
[AWS::EC2::KeyPair](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-keypair.html)
Use the `KeyPair` resource to create or import a key pair. | April 28, 2022 |
| [New resource ](aws-template-resource-type-ref.md) | The following resource was added: `AWS::Route53Profiles::Profile`.
[AWS::Route53Profiles::Profile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53profiles-profile.html)
Added the `AWS::Route53Profiles::Profile` resource was added to support the shareing of Route 53 configurations across VPCs and AWS accounts. | April 24, 2022 |
| [New resource ](aws-template-resource-type-ref.md) | The following resource was added: `AWS::Route53Profiles::ProfileAssociation`.
[AWS::Route53Profiles::ProfileAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53profiles-profileassociation.html)
Added the `AWS::Route53Profiles::ProfileAssociation` resource was added to support associating a Route 53 Profile to a VPC. | April 24, 2022 |
| [New resource ](aws-template-resource-type-ref.md) | The following resource was added: `AWS::Route53Profiles::ProfileAssociation`.
[AWS::Route53Profiles::ProfileResourceAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53profiles-profileresourceassociation.html)
Added the `AWS::Route53Profiles::ProfileResourceAssociation` resource was added to support associating resources to a Route 53 Profile. | April 24, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: [AWS::Batch::ComputeEnvironment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-computeenvironment.html)
[AWS::Batch::ComputeEnvironment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-computeenvironment.html)
Use the `ReplaceComputeEnvironment` property to specify whether the compute environment should be replaced if an update is made that requires replacing the instances in the compute environment.
Use the `UpdatePolicy` property to specify the infrastructure update policy for the compute environment.
[AWS::Batch::JobDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobdefinition.html)
Added a `JobQueueArn` attribute to the [return values](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobqueue.html#aws-resource-batch-jobqueue-return-values). | April 21, 2022 |
| [New resources ](aws-template-resource-type-ref.md) | The following resources were added: AWS::IoTTwinMaker::ComponentType, AWS::IoTTwinMaker::Entity, AWS::IoTTwinMaker::Scene, and AWS::IoTTwinMaker::Workspace
[ AWS::IoTTwinMaker::ComponentType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iottwinmaker-componenttype.html)
Use the `AWS::IoTTwinMaker::ComponentType` resource to declare a component type.
[ AWS::IoTTwinMaker::Entity](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iottwinmaker-entity.html)
Use the `AWS::IoTTwinMaker::Entity` resource to declare an entity.
[AWS::IoTTwinMaker::Scene](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iottwinmaker-scene.html)
Use the `AWS::IoTTwinMaker::Scene` resource to declare a scene.
[CFNResource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iottwinmaker-workspace.html)
Use the `AWS::IoTTwinMaker::Workspace` resource to declare a workspace. | April 21, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::Connect::PhoneNumber
[AWS::Connect::PhoneNumber](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-phonenumber.html)
Use the `AWS::Connect::PhoneNumber` resource to create a phone number. | April 21, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::KMS::Key`.
[AWS::KMS::Key](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html)
Added support for HMAC KMS keys, including new HMAC values for the `KeySpec` property and the `GENERATE_VERIFY_MAC` value for the `KeyUsage` property. You can also use the `AWS::KMS::ReplicaKey` resource to create a replica of a multi-Region HMAC key. However, the properties of this resource did not change. | April 19, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::AppStream::Fleet`
[AWS::AppStream::Fleet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appstream-fleet.html)
Use the `SessionScriptS3Location` property to specify the S3 location of the session scripts configuration zip file. This only applies to Elastic fleets. | April 14, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudWatch::MetricStream.
[AWS::CloudWatch::MetricStream](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-metricstream.html)
In the [MetricStream](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudwatch-alarm-metricstream.html) resource, use the `MetricStreamStatisticsConfiguration` to have the metric stream include additional statistics such as percentile statistics in the stream. | April 14, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AppRunner::Service
[AWS::AppRunner::Service.ObservabilityConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apprunner-service.html#cfn-apprunner-service-observabilityconfiguration)
New property. The observability configuration of the App Runner service. | April 12, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::AppRunner::ObservabilityConfiguration
[AWS::AppRunner::ObservabilityConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apprunner-observabilityconfiguration.html)
Use the `AWS::AppRunner::ObservabilityConfiguration` resource to create or update an AWS App Runner observability configuration. | April 12, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::LaunchTemplate.
[AWS::EC2::LaunchTemplate NetworkInterface](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-networkinterface.html)
Use the `Ipv4PrefixCount` or `Ipv4Prefixes` properties to assign IPv4 prefixes to a network interface.
Use the `Ipv6PrefixCount` or `Ipv6Prefixes` properties to assign IPv6 prefixes to a network interface. | April 7, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: [AWS::Events::Endpoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-endpoint.html).
[AWS::Events::Endpoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-endpoint.html)
Use the `AWS::Events::Endpoint` resource to create a Amazon EventBridge global endpoint and mae your application Regional-fault tolerant. | April 7, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Lambda::Url.
[AWS::Lambda::Url](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-url.html)
Use the `Url` resource to add a function URL endpoint to your Lambda function. | April 7, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::SageMaker::Domain, AWS::SageMaker::UserProfile
[AWS::SageMaker::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-domain.html)
Use the `UserSettings.RStudioServerProAppSettings` property to configure user interaction with the `RStudioServerPro` app.
Use the `RStudioServerProAppSettings` property to configure user interaction with the `RStudioServerPro` app.
Use the `RStudioServerProAppSettings.AccessStatus` property to indicate whether the current user has access to the `RStudioServerPro` app.
Use the `RStudioServerProAppSettings.UserGroup` property to indicate the level of permissions that the user has within the `RStudioServerPro` app.
Use the `RStudioServerProDomainSettings` property to configure the `RStudioServerPro` Domain-level app.
Use the `RStudioServerProDomainSettings.DefaultResourceSpec` property to define the default `InstanceType`, `SageMakerImageArn` and `SageMakerImageVersionArn` for the Domain.
Use the `RStudioServerProDomainSettings.DomainExecutionRoleArn` property to indicate the ARN of the execution role for the `RStudioServerPro` Domain-level app.
Use the `RStudioServerProDomainSettings.RStudioConnectUrl` property to indicate a URL pointing to an RStudio Connect server.
Use the `RStudioServerProDomainSettings.RStudioPackageManagerUrl` property to indicate a URL pointing to an RStudio Package Manager server.
Use the `DomainSettings` property to indicate a collection of settings that apply to the `SageMaker Domain`.
Use the `DomainSettings.RStudioServerProDomainSettings` property to configure the `RStudioServerPro` Domain-level app.
Use the `DomainSettings.SecurityGroupIds` property to indicate security groups for the Amazon Virtual Private Cloud (Amazon VPC) that the `Domain` uses for communication between Domain-level apps and user apps.
[AWS::SageMaker::UserProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-userprofile.html.html)
Use the `UserSettings.RStudioServerProAppSettings` property to configure user interaction with the `RStudioServerPro` app.
Use the `RStudioServerProAppSettings` property to configure user interaction with the `RStudioServerPro` app.
Use the `RStudioServerProAppSettings.AccessStatus` property to indicate whether the current user has access to the `RStudioServerPro` app.
Use the `RStudioServerProAppSettings.UserGroup` property to indicate the level of permissions that the user has within the `RStudioServerPro` app. | March 31, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::DataSync::LocationFSxOpenZFS.
[AWS::DataSync::LocationFSxOpenZFS](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationfsxopenzfs.html)
Use the `AWS::DataSync::LocationFSxOpenZFS` resource to specify an Amazon FSx for OpenZFS file system. | March 31, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ServiceCatalog::CloudFormationProduct ProvisioningArtifactProperties.
[AWS::ServiceCatalog::CloudFormationProduct ProvisioningArtifactProperties](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-servicecatalog-cloudformationproduct-provisioningartifactproperties.html)
The AWS::ServiceCatalog::CloudFormationProduct ProvisioningArtifactProperties resource now supports the Type property. | March 30, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Lambda::Function.
[AWS::Lambda::Function](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html)
Use the `EphemeralStorage` property to set the function's ephemeral (/tmp) storage to any any whole number between 512 and 10240 MB. | March 24, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following property type was updated: AWS::Lex::Bot.
[AWS::Lex::Bot](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lex-bot.html)
Use the [AudioLogSetting](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-audiologsetting.html) property to configure logging of audio conversation with your users.
Use the [AudioLogSetting](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-botaliaslocalesettings.html) property to configure the Lambda functions used for each of your bot's locales.
Use the [ConversationLogsSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-conversationlogsettings.html) property to manage logging that saves audio, text, and metadata of the conversations with your users.
Use the [CustomVocabulary](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-customvocabulary.html) property to define custom vocabularies for your slot types.
Use the [LambdaCodeHook](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-lambdacodehook.html) property to specify a Lambda function that verifies requests to the bot or fulfills the user's request.
Use the [S3BucketLogDestination](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-s3bucketlogdestination.html) property to configure the Amazon S3 bucket to hold audio conversation logs.
Use the [SlotValueSelectionSetting](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-slotvalueselectionsetting.html) property to configure advanced settings for recognizing slot values.
Use the [TestBotAliasSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-testbotaliassettings.html) property to configure the alias used for testing a bot.
Use the [TextLogSetting](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-textlogsetting.html) property to configure text logs for conversations. | March 24, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoTEvents::AlarmModel.
[ AWS::IoTEvents::AlarmModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotevents-alarmmodel.html)
Use the `AlarmModel` resource to monitor an AWS IoT Events input attribute. | March 24, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::FSx::Filesystem`
[AWS::FSx::Filesystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html)
FSx for OpenZFS file system root volumes now support the LZ4 `DataCompressionType`. | March 17, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::FSx::Volume`
[AWS::FSx::Volume](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-volume.html)
FSx for OpenZFS volumes now support the LZ4 `DataCompressionType`. | March 17, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::FSx::Volume`
[AWS::FSx::Volume](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-volume.html)
FSx for OpenZFS volumes now support using the value `0` to un-set the `StorageCapacityQuotaGiB` for a volume. | March 17, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::FSx::Volume`
[AWS::FSx::Volume](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-volume.html)
FSx for OpenZFS volumes now support using the value `0` to un-set the `StorageCapacityReservationGiB` for a volume. | March 17, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::FSx::Volume`
[AWS::FSx::Volume](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-volume.html)
FSx for OpenZFS volumes now support setting the suggested block size for a volume. | March 17, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FSx::Filesystem
[AWS::FSx::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html)
FSx for ONTAP file systems now support lower ThroughputCapacity settings. | March 17, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FIS::ExperimentTemplate.
[AWS::FIS::ExperimentTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fis-experimenttemplate.html)
Use the `LogConfiguration` property to configure experiment logging.
Use the `Parameters` property to specify criteria used to identify target resources. | March 11, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AutoScaling::ScalingPolicy.
[AWS::AutoScaling::ScalingPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-scalingpolicy.html)
Use the `AWS::AutoScaling::ScalingPolicy` property to specify custom metrics when you create predictive scaling policies. You can also use metric math to further customize the metrics that you include in your policy. | March 10, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::StepFunctions::StateMachine`
[AWS::StepFunctions::StateMachine](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-stepfunctions-statemachine.html)
The `StateMachineType` attribute is now `IMMUTABLE`. | March 10, 2022 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::Personalize::Dataset`, `AWS::Personalize::Dataset DatasetImportJob`, `AWS::Personalize::DatasetGroup`, `AWS::Personalize::Schema`, `AWS::Personalize::Solution`, and `AWS::Personalize::Solution SolutionConfig`.
[AWS::Personalize::Dataset](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-personalize-dataset.html)
Use the `AWS::Personalize::Dataset` resource to specify a dataset in Amazon Personalize.
[AWS::Personalize::Dataset DatasetImportJob](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-personalize-dataset-datasetimportjob.html)
Use the `AWS::Personalize::Dataset DatasetImportJob` resource to specify a dataset import job in Amazon Personalize.
[AWS::Personalize::DatasetGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-personalize-datasetgroup.html)
Use the `AWS::Personalize::DatasetGroup` resource to specify a dataset group in Amazon Personalize.
[AWS::Personalize::Schema](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-personalize-schema.html)
Use the `AWS::Personalize::Schema` resource to specify a schema in Amazon Personalize.
[AWS::Personalize::Solution](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-personalize-solution.html)
Use the `AWS::Personalize::Solution` resource to specify a solution in Amazon Personalize.
[AWS::Personalize::Solution SolutionConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-personalize-solution-solutionconfig.html)
Use the `AWS::Personalize::Solution SolutionConfig` resource to specify a solution configuration in Amazon Personalize. | March 10, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::RedshiftServerless::Workgroup and AWS::RedshiftServerless::Namespace
[AWS::RedshiftServerless::Workgroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshiftserverless-workgroup.html)
Added a number of return values to the `AWS::RedshiftServerless::Workgroup` resource.
[AWS::RedshiftServerless::Namespace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshiftserverless-namespace.html)
Added a number of return values to the `AWS::RedshiftServerless::Namespace` resource. | March 9, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::EKS::IdentityProviderConfig`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-identityproviderconfig.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-identityproviderconfig.html)
Use the `OidcIdentityProviderConfig` resources to specify an identity provider config and `RequiredClaim` to specify required claims. | March 7, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::DataBrew::Job
[AWS::DataBrew::Job](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-databrew-job-output.html)
Add MaxOutputFiles parameter to the Output data type to specify the maximum number of files to be generated by a profile job and written to the output folder. | March 3, 2022 |
| [Added resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::ManagedBlockchain::Accessor
[AWS::ManagedBlockchain::Accessor](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-managedblockchain-accessor.html)
Use the `Accessor` to create a new accessor for use with Managed Blockchain Ethereum nodes. | March 2, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: [AWS::Batch::ComputeEnvironment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-computeenvironment.html), and [AWS::Batch::JobQueue](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobqueue.html)
[AWS::Batch::ComputeEnvironment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-computeenvironment.html)
Added a `ComputeEnvironmentArn` attribute to the [return values](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-computeenvironment.html#aws-resource-batch-computeenvironment-return-values).
[AWS::Batch::JobQueue](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobqueue.html)
Added a `JobQueueArn` attribute to the [return values](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobqueue.html#aws-resource-batch-jobqueue-return-values). | February 24, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AutoScaling::WarmPool.
[AWS::AutoScaling::WarmPool](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-warmpool.html)
Use the `PoolState` property to specify `Hibernated` to stop instances in a warm pool without deleting their RAM contents. Use the `InstanceReusePolicy` property to return instances to the warm pool on scale in, instead of always terminating instance capacity that you will need later. | February 24, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated:
[AWS ::Transfer::Server ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-server.html)
Use the `PreAuthenticationLoginBanner` property to specify a string to display when users connect to a server, before they authenticate.
Use the `PostAuthenticationLoginBanner` property to specify a string to display when users connect to a server, after they authenticate. | February 24, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::DataSync::LocationFSxLustre.
[AWS::DataSync::LocationFSxLustre](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationfsxlustre.html)
Use the `AWS::DataSync::LocationFSxLustre` resource to specify an Amazon FSx for Lustre file system. | February 24, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::WAFv2::WebACL.
[AWS::WAFv2::WebACL](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webacl.html)
You can now define `ManagedRuleGroupConfigs` for a `ManagedRuleGroupStatement`, to provide configuration specific to the managed rule group. This is required to use the managed rule group, `AWSManagedRulesATPRuleSet`. | February 17, 2022 |
| [New resources](aws-template-resource-type-ref.md) | The following new resources were added to Network Manager: AWS::NetworkManager::ConnectAttachment, AWS::NetworkManager::ConnectPeer, AWS::NetworkManager::CoreNetwork, AWS::NetworkManager::SiteToSiteVPNAttachment, and AWS::NetworkManager::VPCAttachment.
[AWS::NetworkManager::ConnectAttachment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkmanager-connectattachment.html)
Use the `AWS::NetworkManager::ConnectAttachment` to create a core network Connect attachment.
[AWS::NetworkManager::ConnectPeer](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkmanager-connectpeer.html)
Use the `AWS::NetworkManager::ConnectPeer` create a core network Connect Peer attachment.
[AWS::NetworkManager::CoreNetwork](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkmanager-corenetwork.html)
Use the `AWS::NetworkManager::CoreNetwork` to create a core network.
[AWS::NetworkManager::SiteToSiteVPNAttachment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkmanager-sitetositevpnattachment.html)
Use the `AWS::NetworkManager::SiteToSiteVPNAttachment` create a core network site-to-site VPN attachment.
[AWS::NetworkManager::VPCAttachment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkmanager-vpcattachment.html)
Use the `AWS::NetworkManager::VPCAttachment` create a core network VPC attachment. | February 17, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::LaunchTemplate.
[AWS::EC2::LaunchTemplate PrivateDnsNameOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata-privatednsnameoptions.html)
Use the `PrivateDnsNameOptions` property to set options for instance hostnames.
[AWS::EC2::LaunchTemplate MetadataOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata-metadataoptions.html#cfn-ec2-launchtemplate-launchtemplatedata-metadataoptions-instancemetadatatags)
Use the `InstanceMetadataTags` property to allow access to instance tags from the instance metadata. | February 10, 2022 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::CloudFormation::HookDefaultVersion`, `AWS::CloudFormation::HookTypeConfig`, and `AWS::CloudFormation::HookVersion`.
[AWS::CloudFormation::HookDefaultVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-hookdefaultversion.html)
Use the `AWS::CloudFormation::HookDefaultVersion` resource to specify the default version of the Hook.
[AWS::CloudFormation::HookTypeConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-hooktypeconfig.html)
Use the `AWS::CloudFormation::HookTypeConfig` resource to specify the configuration of a Hook.
[AWS::CloudFormation::HookVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-hookversion.html)
Use the `AWS::CloudFormation::HookVersion` resource to publish the Hook version in the CloudFormation registry. | February 10, 2022 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added:
[AWS::ECR::PullThroughCacheRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pullthroughcacherule.html)
Use the `AWS::ECR::PullThroughCacheRule` property to create a pull through cache rule for your private registry. Pull through cache rules provide a way to cache images from an external public registry in your private registry | February 10, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AppRunner::Service
[AWS::AppRunner::Service.NetworkConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apprunner-service.html#cfn-apprunner-service-networkconfiguration)
New property. Configuration settings related to network traffic of the web application that the App Runner service runs. | February 8, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::AppRunner::VpcConnector
[AWS::AppRunner::VpcConnector](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apprunner-vpcconnector.html)
Use the `AWS::AppRunner::VpcConnector` resource to create or update an AWS App Runner VPC connector. | February 8, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: [AWS::Events::Rule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-rule.html).
[AWS::Events::Rule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-rule.html)
The [Rule.SageMakerPipelineParameter.PipelineParameterList](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-rule-sagemakerpipelineparameter.html#cfn-events-rule-sagemakerpipelineparameters-pipelineparameterlist) is a list of parameter names and values for SageMaker AI Model Building Pipeline execution.
The [Rule.SageMakerPipelineParameter.Name](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-rule-sagemakerpipelineparameters.html#cfn-events-rule-sagemakerpipelineparameter-name) is the name of parameter to start execution of a SageMaker AI Model Building Pipeline.
The [Rule.SageMakerPipelineParameter.Value](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-rule-sagemakerpipelineparameters.html#cfn-events-rule-sagemakerpipelineparameter-value) is the value of parameter to start execution of a SageMaker AI Model Building Pipeline. | February 3, 2022 |
| [New properties](aws-template-resource-type-ref.md) | The following properties were added under [AWS::ApplicationInsights::Application.ConfigurationDetails](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationinsights-application-configurationdetails.html):
[HANAPrometheusExporter](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationinsights-application-configurationdetails.html#aws-properties-applicationinsights-application-configurationdetails-properties)
Use the `HANAPrometheusExporter` property of the `AWS::ApplicationInsights::Application` resource to define the HANA DB Prometheus Exporter settings.
[HAClusterPrometheusExporter](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationinsights-application-configurationdetails.html#aws-properties-applicationinsights-application-configurationdetails-properties)
Use the `HAClusterPrometheusExporter` property of the `AWS::ApplicationInsights::Application` resource to define the HA Cluster Prometheus Exporter settings. | February 3, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `RotationRules`
[AWS::SecretsManager::RotationSchedule RotationRules](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-secretsmanager-rotationschedule-rotationrules.html)
Use `RotationRules` to set a detailed schedule to rotate your secret. | January 31, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CustomerProfiles::Integration.
[AWS::CustomerProfiles::Integration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-customerprofiles-integration.html)
Use the `AWS::CustomerProfiles::Integration` resource to create a new integration in the Amazon Connect Customer Profiles Service. | January 27, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::Location::GeofenceCollection`, `AWS::Location::Map`, `AWS::Location::PlaceIndex`, `AWS::Location::RouteCalculator`, and `AWS::Location::Tracker`.
[AWS::Location::GeofenceCollection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-location-geofencecollection.html)
Updated the `AWS::Location::GeofenceCollection` resource to no longer use `PricingPlan` or `PricingPlanDataSource`.
[AWS::Location::Map](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-location-map.html)
Updated the `AWS::Location::Map` resource to no longer use `PricingPlan`.
[AWS::Location::PlaceIndex](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-location-placeindex.html)
Updated the `AWS::Location::PlaceIndex` resource to no longer use `PricingPlan`.
[AWS::Location::RouteCalculator](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-location-routecalculator.html)
Update the `AWS::Location::RouteCalculator` resource to no longer use `PricingPlan`.
[AWS::Location::Tracker](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-location-tracker.html)
Update the `AWS::Location::Tracker` resource to no longer use `PricingPlan` or `PricingPlanDataSource`. | January 27, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IVS::RecordingConfiguration
[AWS::IVS::RecordingConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-recordingconfiguration.html)
Use the `ThumbnailConfiguration` property to specify an Amazon IVS ThumbnailConfiguration, which stores configuration information related to generating thumbnail images for your live stream. | January 27, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::AppIntegrations::DataIntegration
[AWS::AppIntegrations::DataIntegration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appintegrations-dataintegration.html)
Use the `AWS::AppIntegrations::DataIntegration` resource to create a DataIntegration. | January 27, 2022 |
| [New collection resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Rekognition::Collection.
[AWS::Rekognition::Collection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_Rekognition.html)
The `AWS::Rekognition::Collection` type creates a server-side container called a collection. You can use a collection to store information about detected faces and search for known faces in images, stored videos, and streaming videos. | January 27, 2022 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::Forecast::Dataset and AWS::Forecast::DatasetGroup.
[AWS::Forecast::Dataset](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-forecast-dataset.html)
Use the `AWS::Forecast::Dataset` resource to import a new or updated dataset in Amazon Forecast.
[AWS::Forecast::DatasetGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-forecast-datasetgroup.html)
Use the `AWS::Forecast::DatasetGroup` resource to create a Dataset Group in Amazon Forecast. | January 23, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::DataBrew::Job
[AWS::DataBrew::Job](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-databrew-job-s3location.html)
Add BucketOwner parameter to the S3Location data type to define the owner of the specified S3 bucket. | January 20, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::Location::Tracker`,
[AWS::Location::Tracker](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-location-tracker.html)
Added `AccuracyBased` as a new value for `PositionFiltering` for trackers. | January 20, 2022 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::Lightsail::Certificate, AWS::Lightsail::Container, and AWS::Lightsail::Distribution
[AWS::Lightsail::Certificate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lightsail-certificate.html)
Use the `AWS::Lightsail::Certificate` resource to specify an Amazon Lightsail certificate that you can use with a Lightsail content delivery network (CDN) distribution and a Lightsail container service.
[AWS::Lightsail::Container](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lightsail-container.html)
Use the `AWS::Lightsail::Container` resource to specify an Amazon Lightsail container service.
[AWS::Lightsail::Distribution](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lightsail-distribution.html)
Use the `AWS::Lightsail::Distribution` resource to specify an Amazon Lightsail CDN distribution. | January 20, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::KafkaConnect::Connector
[AWS::KafkaConnect::Connector](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kafkaconnect-connector.html)
Creates an MSK Connect connector. | January 20, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::AppSync::Resolver and AWS::AppSync::FunctionConfiguration
[AWS::AppSync::Resolver](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-resolver.html#cfn-appsync-resolver-maxbatchsize)
Use the `MaxBatchSize` property to specify the maximum number of resolver request inputs that will be sent to a single AWS Lambda function in a `BatchInvoke` operation.
[AWS::AppSync::FunctionConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-functionconfiguration.html#cfn-appsync-functionconfiguration-maxbatchsize)
Use the `MaxBatchSize` property to specify the maximum number of resolver request inputs that will be sent to a single AWS Lambda function in a `BatchInvoke` operation. | January 13, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FMS::Policy.
[AWS::FMS::Policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fms-policy.html)
The `AWS::FMS::Policy` resource now allows you to manage Shield Advanced automatic application layer DDoS mitigation for Shield Advanced policies that you use for Amazon CloudFront distributions. | January 7, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following property was updated: `AWS::EKS::Cluster KubernetesNetworkConfig`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-kubernetesnetworkconfig.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-kubernetesnetworkconfig.html)
Use the `IpFamily` property to specify whether you want your version 1.21 or later cluster to assign IPv4 or IPv6 addresses to pods and services. | January 6, 2022 |
| [Updated resource](aws-template-resource-type-ref.md) | The following property type was updated: AWS::Lex::Bot.
[AWS::Lex::Bot](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lex-bot.html)
In the [ExternalSourceSetting](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-externalsourcesetting.html) property type, use the `GrammarSlotTypeSetting` property to specify that the slot type is defined by an external grammar.
In the [GrammarSlotTypeSetting](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-grammarslottypesetting.html) property type, use the `Source` property to specify the location of a file that contains a grammar defining the slot type.
In the [GrammarSlotTypeSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-grammarslottypesource.html) property type, use the `KmsKeyArn`, `S3BucketName`, and `S3ObjectKey` properties to specify the S3 bucket location of a file that contains a grammar defining the slot type. | January 6, 2022 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::Lightsail::Alarm, AWS::Lightsail::Bucket, AWS::Lightsail::LoadBalancer, and AWS::Lightsail::LoadBalancerTlsCertificate
[AWS::Lightsail::Alarm](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lightsail-alarm.html)
Use the `AWS::Lightsail::Alarm` resource to specify an Amazon Lightsail alarm.
[AWS::Lightsail::Bucket](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lightsail-bucket.html)
Use the `AWS::Lightsail::Bucket` resource to specify an Amazon Lightsail bucket.
[AWS::Lightsail::LoadBalancer](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lightsail-loadbalancer.html)
Use the `AWS::Lightsail::LoadBalancer` resource to specify an Amazon Lightsail load balancer.
[AWS::Lightsail::LoadBalancerTlsCertificate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lightsail-loadbalancertlscertificate.html)
Use the `AWS::Lightsail::LoadBalancerTlsCertificate` resource to specify a certificate that you can use with an Amazon Lightsail load balancer that is in the same AWS Region and Availability Zone. | January 6, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::InspectorV2::Filter.
[AWS::InspectorV2::Filter](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-inspectorv2-filter.html)
Use the `AWS::InspectorV2::Filter` resource to specify a filter. | January 6, 2022 |
| [New resource](aws-template-resource-type-ref.md) | The following resource is new: AWS::IoT::JobTemplate
[AWS::IoT::JobTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-jobtemplate.html)
Use the `AWS::IoT::JobTemplate` resource to specify a job template. | January 6, 2022 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::AppStream::ApplicationEntitlementAssociation` and `AWS::AppStream::Entitlement`
[AWS::AppStream::ApplicationEntitlementAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appstream-applicationentitlementassociation.html)
Use the `AWS::AppStream::ApplicationEntitlementAssociation` resource to specify an association between an application and entitlement.
[AWS::AppStream::Entitlement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appstream-entitlement.html)
Use the `AWS::AppStream::Entitlement` resource to specify an entitlement. | January 5, 2022 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup.
[AWS::WAFv2::WebACL](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webacl.html)
You can now use single regular expression (regex) match statements with `RegexMatchStatement`. You can now specify a `CAPTCHA` rule action.
[AWS::WAFv2::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-rulegroup.html)
You can now use single regular expression (regex) match statements with `RegexMatchStatement`. You can now specify a `CAPTCHA` rule action. | December 9, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Kinesis::Stream.
[AWS::Kinesis::Stream](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kinesis-stream.html)
Use the `StreamModeDetails` property to specify the capacity mode to which you want to set your data stream. Currently, in Kinesis Data Streams, you can choose between an **on-demand** capacity mode and a **provisioned** capacity mode for your data streams. | December 9, 2021 |
| [Properties updated](aws-template-resource-type-ref.md) | For the `AWS::Chatbot::SlackChannelConfiguration` resource, the GuardrailPolicies property was updated and the UserRoleRequired property was added.
[AWS::Chatbot::SlackChannelConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-chatbot-slackchannelconfiguration.html)
Use the `GuardrailPolicies` property to list policy ARNs applied as channel guardrails for Amazon Q Developer.
[AWS::Chatbot::SlackChannelConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-chatbot-slackchannelconfiguration.html)
Use the `UserRoleRequired` property to enable the use of a user role requirement in Amazon Q Developer configurations. | December 9, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::Lex:Bot, AWS::Lex::BotAlias, AWS::Lex::BotVersion, and AWS::Lex::ResourcePolicy.
[AWS::Lex::Bot](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lex-bot.html)
Use the `AWS::Lex::Bot` resource to specify an Amazon Lex chatbot.
[AWS::Lex::BotAlias](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lex-botalias.html)
Use the `AWS::Lex::BotAlias` resource to specify an alias for an Amazon Lex chatbot.
[AWS::Lex::BotVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lex-botversion.html)
Use the `AWS::Lex::BotVersion` resource to specify a version of an Amazon Lex chatbot.
[AWS::Lex::ResourcePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lex-resourcepolicy.html)
Use the `AWS::Lex::ResourcePolicy` resource to specify a new resource policy for an Amazon Lex chatbot. | December 9, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::GameLift::GameSessionQueue, AWS::GameLift::MatchmakingConfiguration, AWS::GameLift::MatchmakingRuleSet, AWS::GameLift::Script
[AWS::GameLift::GameSessionQueue](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gamelift-gamesessionqueue.html)
Use the `Tags` property to add a list of labels to new game session queue resources.
[AWS::GameLift::MatchmakingConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gamelift-matchmakingconfiguration.html)
Use the `Tags` property to add a list of labels to new matchmaking configurations.
[AWS::GameLift::MatchmakingRuleSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gamelift-matchmakingruleset.html)
Use the `Tags` property to add a list of labels to new matchmaking rule sets.
[AWS::GameLift::Script](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gamelift-script.html)
Use the `Tags` property to add a list of labels to new scripts. | December 8, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::AppSync::DomainName and AWS::AppSync::DomainNameApiAssociation
[AWS::AppSync::DomainName](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-domainname.html)
Use the `AWS::AppSync::DomainName` resource to specify the configuration for a custom domain.
[AWS::AppSync::DomainNameApiAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-domainnameapiassociation.html)
Use the `AWS::AppSync::DomainNameApiAssociation` property to specify the mapping of a custom domain name to an assigned API URL. | December 6, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::WAFv2::LoggingConfiguration.
[AWS::WAFv2::LoggingConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-loggingconfiguration.html)
You can now log web ACL traffic to an Amazon CloudWatch Logs log group or an Amazon Simple Storage Service (Amazon S3) bucket. These options are in addition to the existing option of logging to an Amazon Data Firehose. | December 3, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::S3::StorageLens.
[AWS::S3::StorageLens CloudWatchMetrics](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-storagelens-cloudwatchmetrics.html)
Use the `AWS::S3::StorageLens CloudWatchMetrics` resource to enable the Amazon CloudWatch publishing option for S3 Storage Lens metrics. | December 3, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::S3::Bucket OwnershipControlsRule.
[AWS::S3::Bucket OwnershipControlsRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-ownershipcontrolsrule.html)
Updated `ObjectOwnership` property to add a new allowed value: `BucketOwnerEnforced`. You can apply this S3 Object Ownership setting to disable access control lists (ACLs) and take ownership of all the objects in your bucket. | December 3, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::SageMaker::EndpointConfig
[AWS::SageMaker::EndpointConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-endpointconfig.html)
Use the `ServerlessConfig` property to specify a serverless configuration for a serverless endpoint.
Use the `MaxConcurrency` property to specify the maximum concurrent invocations for a serverless endpoint.
Use the `MemorySizeInMB` property to specify the memory size (in MB) for a serverless endpoint. | December 3, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::AmplifyUIBuilder::Component and AWS::AmplifyUIBuilder::Theme.
[AWS::AmplifyUIBuilder::Component](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amplifyuibuilder-component.html)
Use the `AWS::AmplifyUIBuilder::Component` resource to specify a component within an Amplify app.
[AWS::AmplifyUIBuilder::Theme](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amplifyuibuilder-theme.html)
Use the `AWS::AmplifyUIBuilder::Theme` resource to specify a collection of style settings to apply globally to the components in an Amplify app. | December 3, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added:
[AWS::ResilienceHub::App](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-resiliencehub-app.html)
Creates an AWS Resilience Hub application.
[AWS::ResilienceHub::ResiliencyPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-resiliencehub-resiliencypolicy.html)
Defines a resiliency policy. | December 3, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::Connect::ContactFlow and AWS::Connect::ContactFlowModule
[AWS::Connect::ContactFlow](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-contactflow.html)
Use the `AWS::Connect::ContactFlow` resource to create a flow.
[AWS::Connect::ContactFlowModule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-contactflowmodule.html)
Use the `AWS::Connect::ContactFlowModule` resource to create a flow module. | December 3, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following new resource was added: AWS::FSx::Snapshot
[AWS::FSx::Snapshot](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-snapshot.html)
Use the `Snapshot` resource to create a snapshot of an FSx for ONTAP or Amazon FSx for OpenZFS volume. | December 3, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following new resource was added: AWS::FSx::StorageVirtualMachine
[AWS::FSx::StorageVirtualMachine](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-storagevirtualmachine.html)
Use the `StorageVirtualMachine` resource to create an FSx for ONTAP storage virtual machine. | December 3, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following new resource was added: AWS::FSx::Volume
[AWS::FSx::Volume](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-volume.html)
Use the `Volume` resource to create an FSx for ONTAP or Amazon FSx for OpenZFS volume. | December 3, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::RUM::AppMonitor.
[AWS::RUM::AppMonitor](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rum-appmonitor.html)
Use the AWS::RUM::AppMonitor resource to create or update an Amazon CloudWatch RUM app monitor. For more information, see [ Set up an application to use CloudWatch RUM](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-get-started.html). | December 3, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Timestream::ScheduledQuery.
[AWS::Timestream::ScheduledQuery](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-timestream-scheduledquery.html)
Use the `AWS::Timestream::ScheduledQuery` resource to create a new scheduled query for an existing table in Amazon Timestream. | December 3, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::SES::ConfigurationSetEventDestination
[AWS::SES::ConfigurationSetEventDestination](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ses-configurationseteventdestination.html)
Use the new property [SnsDestination](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-configurationseteventdestination-snsdestination.html) with the `ConfigurationSetEventDestination` resource as an event destination associated with a configuration set which enables you to publish email sending events.
In the property type [EventDestination](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ses-configurationseteventdestination-eventdestination.html), new property `SnsDestination` specifies the topic ARN associated with an Amazon Simple Notification Service (Amazon SNS) event destination. | November 25, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | `AWS::ElastiCache::ReplicationGroup.`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-replicationgroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-replicationgroup.html)
The `data-tiering-enabled` parameter enables data tiering. Data tiering is only supported for replication groups using the r6gd node type. If you elect not to use data-tiering, set the parameter to `no-data-tiering-enabled.` For more information, see [Data tiering](https://docs.aws.amazon.com/AmazonElastiCache/latest/dg/data-tiering.html). | November 23, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Logs::LogGroup.
[AWS::Logs::LogGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-loggroup.html)
The AWS::Logs::LogGroup resource now supports tags. | November 22, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::AppStream::Fleet`
[AWS::AppStream::Fleet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appstream-fleet.html)
Use the `FleetType` property to specify an ELASTIC fleet.
Use the `Platform` property to specify platform of the fleet.
Use the `MaxConcurrentSessions` property to specify the maximum concurrent sessions of an Elastic fleet.
Use the `UsbDeviceFilterStrings` property to specify the USB device filter strings for an Elastic fleet.. | November 18, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::DataBrew::Job, AWS::DataBrew::Ruleset
[AWS::DataBrew::Job](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-databrew-job-datacatalogoutput.html)
Updates to support the following features: handling personally identifiable information (PII), data quality rules, and custom SQL queries. | November 18, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated:
[AWS ::Transfer::Server ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-server.html#cfn-transfer-server-identityprovidertype)
Use the `IdentityProviderType` resource to specify a the identity provider to use with your AWS Transfer Family server. A new type, `LAMBDA` , was added. | November 18, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FinSpace::Environment
[AWS::FinSpace::Environment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-finspace-environment.html)
Use the `DataBundles` property to specify a list of data bundles to install.
Use the `SuperuserParameters` property to specify configuration information of the superuser. | November 18, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FSx::FileSystem
[AWS::FSx::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html)
Use ONTAP for the FileSystemType, to use an ONTAP file system. Use `OntapConfiguration` parameter to configure an Amazon FSx ONTAP file system. | November 18, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::AppStream::Application`, `AWS::AppStream::AppBlock`, and `AWS::AppStream::ApplicationFleetAssociation`
[AWS::AppStream::Application](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appstream-application.html)
Use the `AWS::AppStream::Application` resource to specify an application.
[AWS::AppStream::AppBlock](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appstream-appblock.html)
Use the `AWS::AppStream::AppBlock` resource to specify an app block.
[AWS::AppStream::ApplicationFleetAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appstream-applicationfleetassociation.html)
Use the `AWS::AppStream::ApplicationFleetAssociation` resource to specify an association between an application and fleet. | November 18, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FSx::FileSystem
[AWS::FSx::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html)
Use the `FileSystemTypeVersion` attribute to specify the file system version of an Amazon FSx for Lustre file system. | November 18, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added:
[AWS ::Transfer::Workflow ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-workflow.html)
Use the `Workflow` resource to specify a managed workflow for file processing using AWS Transfer Family . | November 18, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::SSM::ResourcePolicy
[AWS::SSM::ResourcePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-document.html)
Creates or updates a Systems Manager resource policy. A resource policy helps you to define the IAM entity (for example, an AWS account) that can manage your Systems Manager resources. Currently, `OpsItemGroup` is the only resource that supports Systems Manager resource policies. The resource policy for `OpsItemGroup` enables AWS accounts to view and interact with OpsCenter operational work items (OpsItems). OpsCenter is a tool in Systems Manager. For more information about OpsCenter, see [Systems Manager OpsCenter](https://docs.aws.amazon.com/systems-manager/latest/userguide/OpsCenter.html) in the Systems Manager User Guide. | November 17, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Location::Tracker
[AWS::Location::Tracker](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-location-tracker.html)
Use the `PositionFiltering` property to specify how you want positions in your tracker to be filtered. | November 12, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: [AWS::Batch::ComputeEnvironment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-computeenvironment.html), [AWS::Batch::JobDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobdefinition.html), and [AWS::Batch::JobQueue](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobqueue.html)
[AWS::Batch::ComputeEnvironment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-computeenvironment.html)
Use the `UnmanagedvCpus` property to specify the maximum number of vCPUs for an unmanaged compute environment.
[AWS::Batch::JobDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobdefinition.html)
Use the `SchedulingPriority` property to specify the scheduling priority for job definition.
[AWS::Batch::JobQueue](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobqueue.html)
Use the `SchedulingPolicyArn` property to specify the scheduling policy for a job queue. | November 11, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::SageMaker::Endpoint
[AWS::SageMaker::Endpoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-endpoint.html)
Use the `DeploymentConfig` property to specify the deployment configuration for an endpoint, which contains the desired deployment strategy and rollback configurations.
Use the `AutoRollbackConfig` property to specify the the automatic rollback configuration for handling endpoint deployment failures and recovery.
Use the `Alarm` property to specify a list of CloudWatch alarms that are configured to monitor metrics on an endpoint.
Use the `AlarmName` property to specify the name of a CloudWatch alarm in your account.
Use the `BlueGreenUpdatePolicy` property to specify the update policy for a blue/green deployment.
Use the `MaximumExecutionTimeoutInSeconds` property to specify the maximum execution timeout for a blue/green deployment.
Use the `TerminationWaitInSeconds` property to specify additional waiting time in seconds after the completion of an endpoint deployment before terminating the old endpoint fleet
Use the `TrafficRoutingConfig` property to specify the traffic routing strategy during a blue/green endpoint deployment.
Use the `CanarySize` property to specify the batch size for the first step to turn on traffic on the new endpoint fleet.
Use the `LinearStepSize` property to specify the batch size for each step to turn on traffic on the new endpoint fleet
Use the `Type` property to specify the traffic routing strategy type (all at once, canary, or linear).
Use the `WaitIntervalInSeconds` property to specify the waiting time (in seconds) between incremental steps to turn on traffic on the new endpoint fleet.
Use the `CapacitySize` property to specify the endpoint capacity to activate for production.
Use the `Type` property to specify the endpoint capacity type to use (instance count or capacity percent).
Use the `Value` property to specify the capacity size, either as a number of instances or a capacity percentage.
Use the `RetainDeploymentConfig` property to specify whether to reuse the last deployment configuration. The default value is false (the configuration is not reused) | November 11, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resource was added: [AWS::Batch::SchedulingPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-schedulingpolicy.html)
[AWS::Batch::SchedulingPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-schedulingpolicy.html)
Use the `AWS::Batch::SchedulingPriority` resource to specify a scheduling policy. | November 11, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::IoTWireless::FuotaTask, AWS::IoTWireless::MulticastGroup
[AWS::IoTWireless::FuotaTask](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotwireless-fuotatask.html)
Gets information about a FUOTA task.
[AWS::IoTWireless::MulticastGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotwireless-taskdefinition.html)
Gets information about a multicast group. | November 11, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Backup::BackupSelection
[AWS::Backup::BackupSelection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-backup-backupselection.html)
The `BackupSelection` resource type supports a number of new resource assignment options, including `StringLike` and the ability to exclude resources from your backup plans. | November 10, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::EKS::Cluster`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-clusterlogging.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-clusterlogging.html)
Use the `ClusterLogging` property to specify the cluster control plane configuration for your cluster.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-logging.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-logging.html)
Use the `Logging` property to enable or disable exporting the Kubernetes control plane logs for your cluster to CloudWatch Log.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-loggingtypeconfig.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-loggingtypeconfig.html)
Use the `LoggingTypeConfig` property to specify the enabled logging type.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-resourcesvpcconfig.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-resourcesvpcconfig.html)
Use the `EndpointPrivateAccess` property to enable or disable private access for your cluster's Kubernetes API server endpoint.
Use the `EndpointPublicAccess` property to enable or disable public access to your cluster's Kubernetes API server endpoint.
Use the `PublicAccessCidrs` property to specify the CIDR blocks that are allowed access to your cluster's public Kubernetes API server endpoint. | November 10, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::EC2::SpotFleet and AWS::EC2::EC2Fleet.
[AWS::EC2::SpotFleet.SpotCapacityRebalance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-spotfleet-spotcapacityrebalance.html)
Use the `TerminationDelay` property type to specify a delay in termination of your Spot Instances that receive a rebalance notification.
[AWS::EC2::EC2Fleet.SpotOptionsRequest](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-ec2fleet-spotoptionsrequest.html#cfn-ec2-ec2fleet-spotoptionsrequest-maintenancestrategies)
Use the `MaintenanceStrategies` property type to manage your Spot Instances that are at an elevated risk of being interrupted.
[AWS::EC2::EC2Fleet.CapacityRebalance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-ec2fleet-capacityrebalance.html)
Use the `CapacityRebalance` property to proactively augment your fleet with a new Spot Instance before a running Spot Instance is interrupted by Amazon EC2. | November 4, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::NetworkFirewall::FirewallPolicy and AWS::NetworkFirewall::RuleGroup
[AWS::NetworkFirewall::FirewallPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-firewallpolicy.html)
Use the `StatefulDefaultActions` property to establish default actions to take on a packet that doesn't match any stateful rules when using strict rule ordering.
Use the `StatefulEngineOptions` property to govern how Network Firewall handles stateful rules.
[AWS::NetworkFirewall::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-rulegroup.html)
Use the `StatefulRuleOptions` property to govern how Network Firewall handles stateful rules. | November 4, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Pinpoint::Campaign.
[AWS::Pinpoint::Campaign InAppMessageBodyConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pinpoint-campaign-inappmessagebodyconfig.html)
Specifies the configuration of main body text of the in-app message.
[AWS::Pinpoint::Campaign InAppMessageButton](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pinpoint-campaign-inappmessagebutton.html)
Specifies the configuration of a button that appears in an in-app message.
[AWS::Pinpoint::Campaign InAppMessageContent](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pinpoint-campaign-inappmessagecontent.html)
Specifies the configuration and contents of an in-app message.
[AWS::Pinpoint::Campaign InAppMessageHeaderConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pinpoint-campaign-inappmessageheaderconfig.html)
Specifies the configuration and content of the header or title text of the in-app message. | November 4, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudFront::Distribution.
[AWS::CloudFront::Distribution](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-distribution.html)
In the [CacheBehavior](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-cachebehavior.html) and [DefaultCacheBehavior](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-defaultcachebehavior.html) property types, use the `ResponseHeadersPolicyId` property to specify a response headers policy to associate with the cache behavior.
For more information, see [Adding HTTP headers to CloudFront responses](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/adding-response-headers.html) in the *Amazon CloudFront Developer Guide*. | November 4, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::MWAA::Environment
TagMap
The `TagMap` property has been removed the service resource specification. | November 4, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Redshift.
[Amazon Redshift resource type reference](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_Redshift.html)
AWS::Redshift::EndpointAccess to create a Amazon Redshift-managed VPC endpoint.
[Amazon Redshift resource type reference](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_Redshift.html)
AWS::Redshift::EndpointAuthorization to describe an endpoint authorization for authorizing Amazon Redshift-managed VPC endpoint access to a cluster across AWS accounts.
[Amazon Redshift resource type reference](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_Redshift.html)
AWS::Redshift::EventSubscription to create an event notification subscription.
[Amazon Redshift resource type reference](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_Redshift.html)
AWS::Redshift::ScheduledAction to create a scheduled action to run an API operation. | November 4, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resource was added: AWS::Pinpoint::InAppTemplate.
[AWS::Pinpoint::InAppTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pinpoint-inapptemplate.html)
Creates a message template that you can use to send in-app messages. | November 4, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CloudFront::ResponseHeadersPolicy.
[AWS::CloudFront::ResponseHeadersPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-responseheaderspolicy.html)
Use the `AWS::CloudFront::ResponseHeadersPolicy` resource to create a new response headers policy in Amazon CloudFront.
For more information, see [Adding HTTP headers to CloudFront responses](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/adding-response-headers.html) in the *Amazon CloudFront Developer Guide*. | November 4, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::DataSync::LocationHDFS.
[AWS::DataSync::LocationHDFS](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationhdfs.html)
Use the `AWS::DataSync::LocationHDFS` resource to specify an endpoint for a Hadoop Distributed File System (HDFS). | November 4, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::EC2::CapacityReservationFleet.
[AWS::EC2::CapacityReservationFleet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-capacityreservationfleet.html)
Use the `CapacityReservationFleet` property to create a Capacity Reservation Fleet. | November 4, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::EC2Fleet.
[InstanceRequirementsRequest](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-ec2fleet-instancerequirementsrequest.html)
Use the `InstanceRequirementsRequest` property to specify instance attributes, which Amazon EC2 uses to identify instance types. | October 28, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::SpotFleet.
[InstanceRequirementsRequest](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-spotfleet-instancerequirementsrequest.html)
Use the `InstanceRequirementsRequest` property to specify instance attributes, which Amazon EC2 uses to identify instance types. | October 28, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AutoScaling::AutoScalingGroup.
[AWS::AutoScaling::AutoScalingGroup MixedInstancesPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-mixedinstancespolicy.html)
Use the `OnDemandAllocationStrategy` property to specify `lowest-price` as the allocation strategy for your On-Demand capacity.
[AWS::AutoScaling::AutoScalingGroup MixedInstancesPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-mixedinstancespolicy.html)
Use the `InstanceRequirements` property to specify the instance attributes that Amazon EC2 Auto Scaling uses for selecting instance types to fulfill your On-Demand and Spot capacities. | October 28, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::Lightsail::Database and AWS::Lightsail::StaticIp
[AWS::Lightsail::Database](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lightsail-database.html)
Use the `AWS::Lightsail::Database` resource to specify an Amazon Lightsail database.
[AWS::Lightsail::StaticIp](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lightsail-staticip.html)
Use the `AWS::Lightsail::StaticIp` resource to specify a static IP that can be attached to an Amazon Lightsail instance that is in the same AWS Region and Availability Zone. | October 28, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::MediaConnect::Flow.Source`, `AWS::MediaConnect::FlowOutput`
[AWS::MediaConnect::Flow Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-source.html)
Use the `AWS::MediaConnect::Flow.Source` resource to specify the details of the sources of the flow.
[AWS::MediaConnect::FlowOutput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowoutput.html)
Use the `AWS::MediaConnect::FlowOutput` resource to specify the destination address, protocol, and port to send the ingested video to. | October 27, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FMS::Policy.
[AWS::FMS::Policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fms-policy.html)
The `AWS::FMS::Policy` resource now allows you to automatically remove protections from resources that leave policy scope. | October 21, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::Cassandra::Table`.
[AWS::Cassandra::Table.DefaultTimeToLive](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cassandra-table.html)
Use the `AWS::Cassandra::Table.DefaultTimeToLive` property to set a default Time to Live (TTL) value for a table in Amazon Keyspaces (for Apache Cassandra). | October 21, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::SageMaker::NotebookInstance
[AWS::SageMaker::NotebookInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-notebookinstance.html)
Use the `PlatformIdentifier` property to set the platform identifier of the notebook instance runtime environment. | October 21, 2021 |
| [New resources](aws-template-resource-type-ref.md) | Use these resources to deploy computer vision applications to an AWS Panorama Appliance.
[AWS::Panorama::ApplicationInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-panorama-applicationinstance.html)
Creates and deploys an application instance.
[AWS::Panorama::Package](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-panorama-package.html)
Creates an application package.
[AWS::Panorama::PackageVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-panorama-packageversion.html)
Registers an application version. | October 21, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Rekognition:Project.
[AWS::Rekognition:Project](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_Rekognition.html)
Use the `Project` resource to create an Amazon Rekognition Custom Labels project. | October 21, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::DeviceFarm::DevicePool, AWS::DeviceFarm::InstanceProfile, AWS::DeviceFarm::NetworkProfile, AWS::DeviceFarm::Project AWS::DeviceFarm::TestGridProject, and AWS::DeviceFarm::VPCEConfiguration.
[AWS::DeviceFarm::DevicePool](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-devicefarm-devicepool.html)
Use the `AWS::DeviceFarm::DevicePool` resource to specify a device pool operation.
[AWS::DeviceFarm::InstanceProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-devicefarm-instanceprofile.html)
Use the `AWS::DeviceFarm::InstanceProfile` resource to specify a profile that can be applied to one or more private fleet device instances.
[AWS::DeviceFarm::NetworkProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-devicefarm-networkprofile.html)
Use the `AWS::DeviceFarm::NetworkProfile` resource to specify a network profile.
[AWS::DeviceFarm::Project](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-devicefarm-project.html)
Use the `AWS::DeviceFarm::Project` resource to specify a project.
[AWS::DeviceFarm::TestGridProject](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-devicefarm-testgridproject.html)
Use the `AWS::DeviceFarm::TestGridProject` resource to specify a Selenium testing project.
[AWS::DeviceFarm::VPCEConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-devicefarm-vpceconfiguration.html)
Use the `AWS::DeviceFarm::VPCEConfiguration` resource to specify a configuration record in Device Farm for your Amazon Virtual Private Cloud (VPC) endpoint service. | October 14, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: `AWS::Wisdom::Assistant`, `AWS::Wisdom::AssistantAssociation`, and `AWS::Wisdom::KnowledgeBase`
[AWS::Wisdom::Assistant](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wisdom-assistant.html)
Use the `AWS::Wisdom::Assistant` resource to specify an Amazon Connect Wisdom assistant.
[AWS::Wisdom::AssistantAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wisdom-assistantassociation.html)
Use the `AWS::Wisdom::AssistantAssociation` resource to specify an association between an Amazon Connect Wisdom assistant and another resource.
[AWS::Wisdom::KnowledgeBase](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wisdom-knowledgebase.html)
Use the `AWS::Wisdom::KnowledgeBase` resource to specify a knowledge base. | October 14, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CodeBuild::Project ProjectBuildBatchConfig
[AWS::CodeBuild::Project ProjectBuildBatchConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-codebuild-project-projectbuildbatchconfig.html)
The `BatchReportMode` property was added to specify the how batch build reports are sent to the source provider. | October 13, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::Connect::HoursOfOperation, AWS::Connect::User, AWS::Connect::UserHierarchyGroup
[AWS::Connect::HoursOfOperation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-hoursofoperation.html)
Use the `AWS::Connect::HoursOfOperation` resource to create an hours of operation.
[AWS::Connect::User](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-user.html)
Use the `AWS::Connect::User` resource to create a user.
[AWS::Connect::UserHierarchyGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-userhierarchygroup.html)
Use the `AWS::Connect::UserHierarchyGroup` resource to create a user hierarchy group. | October 12, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Backup::BackupVault
[AWS::Backup::BackupVault](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-backup-backupvault.html)
Use the `LockConfiguration` property to specify the configuration of AWS Backup; Vault Lock.
[AWS::Backup::Framework](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-backup-framework.html)
Use the `Framework` property to specify the configuration of an AWS Backup; Audit Manager framework.
[AWS::Backup::ReportPlan](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-backup-reportplan.html)
Use the `Report Plan` property to specify the configuration of an AWS Backup; Audit Manager report plan. | October 7, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::Lightsail::Disk and AWS::Lightsail::Instance
[AWS::Lightsail::Instance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lightsail-instance.html)
Use the `AWS::Lightsail::Instance` resource to specify an Amazon Lightsail instance.
[AWS::Lightsail::Disk](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lightsail-disk.html)
Use the `AWS::Lightsail::Disk` resource to specify a disk that can be attached to an Amazon Lightsail instance that is in the same AWS Region and Availability Zone. | October 7, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoT::JobTemplate.
[AWS::IoT::JobTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-jobtemplate.html)
Use the `AWS::IoT::DomainConfJobTemplateiguration` resource to specify a job template in AWS IoT Core. | October 7, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::Route53Resolver::ResolverConfig`
[AWS::Route53Resolver::ResolverConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverconfig.html)
Use the `AWS::Route53Resolver::ResolverConfig` resource to specify information about a Route 53 Resolver configuration for a VPC. | October 7, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated:
[AWS::ECR::ReplicationConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-replicationconfiguration.html)
Use the `AWS::ECR::ReplicationConfiguration` property to configure replication for the contents of a private repository. Support has been added to specify repository filters on a replication rule. | September 30, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::KinesisFirehose::DeliveryStream.
[AWS::KinesisFirehose::DeliveryStream](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kinesisfirehose-deliverystream.html)
Use the `AmazonopensearchserviceDestinationConfiguration` property type to specify the destination in Amazon OpenSearch Service. You can specify only one destination. | September 30, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::Lambda::LayerVersion and AWS::Lambda::Function.
[AWS::Lambda::Function](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html)
Use the `Architectures` property to set the instruction set architecture for the function. | September 30, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::APS::Workspace.
[AWS::APS::Workspace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-aps-workspace.html)
The AWS::APS::Workspace resource was updated to include the `AlertManagerDefinition` property. For more information, see [Alert manager and templating](https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alert-manager.html). | September 30, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::APS::RuleGroupsNamespace.
[AWS::APS::RuleGroupsNamespace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-aps-rulegroupsnamespace.html)
Use the AWS::APS::RuleGroupsNamespace resource to create or update an Amazon Managed Service for Prometheus rule groups namespace. A rule groups namespace contains Prometheus recording rules and alerting rules. For more information, see [Recording rules and alerting rules](https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-Ruler.html). | September 30, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AppSync::DataSource
[AWS::AppSync::DataSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-datasource.html)
Use the `OpenSearchServiceConfig` property to specify the configuration for an Amazon OpenSearch Service domain for an AWS AppSync data source. | September 23, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::MemoryDB::Cluster, AWS::MemoryDB::ACL, AWS::MemoryDB::ParameterGroup, AWS::MemoryDB::SubnetGroup, and AWS::MemoryDB::User.
[AWS::MemoryDB::Cluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-memorydb-cluster.html)
Use the ` Cluster ` resource to specify a MemoryDBcluster.
[AWS::MemoryDB::ACL](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-memorydb-acl.html)
Use the `ACL` resource to specify a MemoryDB access control list and associate it with a cluster.
[AWS::MemoryDB::ParameterGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-memorydb-parametergroup.html)
Use the `ParameterGroup` resource to specify a MemoryDB parameter group and associate it with a cluster.
[AWS::MemoryDB::SubnetGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-memorydb-subnetgroup.html)
Use the `SubnetGroup` resource to specify a MemoryDB subnet group and associate it with a cluster.
[AWS::MemoryDB::User](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-memorydb-user.html)
Use the `User` resource to specify a MemoryDB user and add it to an access control list. | September 23, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EMR::Studio.
[AWS::EMR::Studio](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-emr-studio.html)
Use the `IdpAuthUrl` property to specify the authentication endpoint of your identity provider (IdP) when you use IAM authentication and want to let federated users log in to an Amazon EMR Studio with the Studio URL and credentials from your IdP.
Use the `IdpRelayStateParameterName` property to specify the name that your identity provider uses for its RelayState parameter.
Use the `UserRole` property only when you set `AuthMode` to `SSO`. | September 17, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::S3::Bucket.
[Monitoring metrics with Amazon CloudWatch](https://docs.aws.amazon.com/AmazonS3/latest/userguide/cloudwatch-monitoring.html)
Use the `AccessPointArn` property in `AWS::S3::Bucket MetricsConfiguration` to filter CloudWatch request metrics by access point. | September 17, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::ACMPCA::Permission.
[AWS::ACMPCA::Permission](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aaws-resource-acmpca-permission.html)
Use the `AWS::ACMPCA::Permission` object to grant permissions on a private CA to the AWS Certificate Manager (ACM) service principal (acm.amazonaws.com). These permissions allow ACM to issue and renew ACM certificates that reside in the same AWS account as the CA. | September 16, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resource was added: AWS::OpenSearchService::Domain.
[AWS::OpenSearchService::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html)
Use the `AWS::OpenSearchService::Domain` resource to create an Amazon OpenSearch Service domain. | September 16, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::APS::Workspace.
[AWS::APS::Workspace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-aps-workspace.html)
Use the AWS::APS::Workspace resource to create an Amazon Managed Service for Prometheus workspace. For more information, see [Create a workspace](https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-onboard-create-workspace.html). | September 16, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::SQS::Queue`RedriveAllowPolicy` includes the parameters for the dead-letter queue redrive permission. It defines which source queues can specify dead-letter queues as a JSON object. | September 9, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::Cassandra::Table`.
[AWS::Cassandra::Table](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cassandra-table.html)
Use the `AWS::Cassandra::Table` resource to add new regular columns to existing tables in Amazon Keyspaces (for Apache Cassandra). | September 3, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Transfer::Server
[AWS::Transfer::Server WorkflowDetail](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-server.html#cfn-transfer-server-workflowdetail)
Use the `WorkflowDetail` property to specify the steps and other details for a workflow.
[AWS::Transfer::Server WorkflowDetails](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-server.html#cfn-transfer-server-workflowdetails)
Use the `WorkflowDetails` property as a container for the `WorkflowDetails` property. | September 2, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::DataSync::Task.
[AWS::DataSync::Task](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-task.html)
Use the `Includes` property to specify files to include in a task. | September 2, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was Updated: `AWS::EventSchemas::Discoverer`.
[AWS::EventSchemas::Discoverer](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eventschemas-discoverer.html)
Use the `CrossAccount` property to allow event schemas from other accounts to be discovered. | September 2, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::KinesisFirehose::DeliveryStream.
[AWS::KinesisFirehose::DeliveryStream](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kinesisfirehose-deliverystream.html)
DynamicPartitioningConfiguration property type is now supported for the delivery streams in CloudFormation. | September 2, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::ACMPCA::CertificateAuthority OcspConfiguration. The following resource was updated: AWS::ACMPCA::CertificateAuthority RevocationConfiguration.
[AWS::ACMPCA::CertificateAuthority OcspConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-acmpca-certificateauthority-ocspconfiguration.html)
Use the `AWS::ACMPCA::CertificateAuthority OcspConfiguration` object to configure Online Certificate Status Protocol (OCSP) support on a CA. | September 2, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource is new: AWS::IoT::FleetMetric
[AWS::IoT::FleetMetric](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-fleetmetric.html)
Use the `AWS::IoT::FleetMetric` resource to specify a fleet metric. | September 2, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::S3::MultiRegionAccessPoint and AWS::S3::MultiRegionAccessPointPolicy.
[AWS::S3::MultiRegionAccessPoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3-multiregionaccesspoint.html)
Use the `AWS::S3::MultiRegionAccessPoint` resource to create an S3 Multi-Region Access Point configuration.
[AWS::S3::MultiRegionAccessPointPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3-multiregionaccesspointpolicy.html)
Use the `AWS::S3::MultiRegionAccessPointPolicy` resource to create an S3 Multi-Region Access Point Policy configuration. | September 2, 2021 |
| [Terminology change](aws-template-resource-type-ref.md) | AWS KMS is replacing the term *customer master key (CMK)* with * AWS KMS key * and *KMS key*. The concept has not changed. To prevent breaking changes, AWS KMS is keeping some variations of this term. | August 30, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CodeBuild::Project
[AWS::CodeBuild::Project](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codebuild-project.html)
The `ResourceAccessRole` and `Visibility` properties were added to support public builds. | August 19, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AutoScaling::ScalingPolicy.
[AWS::AutoScaling::ScalingPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-scalingpolicy.html)
Use the `PredictiveScalingConfiguration` property to specify a predictive scaling policy configuration for an Auto Scaling group. | August 19, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::SageMaker::EndpointConfig
[AWS::SageMaker::EndpointConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-endpointconfig.html)
In the [AsyncInferenceClientConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-endpointconfig-asyncinferenceclientconfig.html) property type, use the `MaxConcurrentInvocationsPerInstance` property to set the maximum number of concurent requests.
In the [AsyncInferenceConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-endpointconfig-asyncinferenceconfig.html) property type, use the `ClientConfig` to configure the behavior of the client SageMaker uses. Use `OutputConfig` to spcify invocation outputs.
In the [AsyncInferenceNotificationConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-endpointconfig-asyncinferencenotificationconfig.html) property, use the `ErrorTopic` and `SuccessTopic` to define Amazon SNS topics to post a notification if the inference fails or completes successfully, respectively.
In the [OutputConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-endpointconfig-asyncinferenceoutputconfig.html) property type use the `KmsKeyId` to encrypt the asynchronous inference output. Use `NotificationConfig` to specify the notification configuration and `S3OutputPath` to specify the output location in S3. | August 19, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Elasticsearch::Domain.
[AWS::Elasticsearch::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticsearch-domain.html)
Use the `ColdStorageOptions` property to specify whether to enable cold storage for the cluster. | August 17, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::WAFv2::WebACL.
[AWS::WAFv2::WebACL](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webacl.html)
You can now specify the version to use for managed rule groups. For information, see `ManagedRuleGroupStatement`. | August 12, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ApiGateway::DomainName.
[AWS::ApiGateway::DomainName](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html)
Use the `OwnershipVerificationCertificateArn` property to specify the certificate ARN used to verify ownership of the domain using mutual TLS. | August 12, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::LookoutEquipment::InferenceScheduler
[AWS::LookoutEquipment::InferenceScheduler](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lookoutequipment-inferencescheduler.html)
The ModelName property has changed so that an update requires replacement.
The ServerSideKmsKeyId property has changed so that an update requires replacement. | August 12, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::SageMaker::Model.
[AWS::SageMaker::Model](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-model.html)
In the [ImageConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-model-containerdefinition-imageconfig.html) property type, use the `RepositoryAuthConfig` property to specify an authentication configuration for the private docker registry where your model image is hosted. | August 12, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::WAFv2::LoggingConfiguration.
[AWS::WAFv2::LoggingConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-loggingconfiguration.html)
You can now define an association between Amazon Kinesis Data Firehose destinations and a web ACL resource, for logging. | August 12, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AppSync::GraphQLApi
[AWS::AppSync::GraphQLApi](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-graphqlapi.html)
Use the `LambdaAuthorizerConfig` property to specify the configuration for AWS Lambda function authorization. | August 5, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FSx::FileSystem
[AWS::FSx::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html)
In the [WindowsConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-windowsconfiguration.html) property type, use the `AuditLogConfiguration` property to enable audit event logging of end-user accesses of files, folders, and file shares on an Amazon FSx Windows File Server instance. | August 5, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Athena::PreparedStatement
[AWS::Athena::PreparedStatement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-preparedstatement.html)
Use the `AWS::Athena::PreparedStatement` resource to specify a prepared statement for use with SQL queries in Athena. Use prepared statements for repeated execution of the same query with different query parameters. A prepared statement contains parameter placeholders whose values are supplied at execution time. | August 5, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::DataBrew::Job
[AWS::DataBrew::Job](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-databrew-job-databaseoutput.html)
Use the `AWS::DataBrew::Job.DatabaseOutputs` property type to define the output destination for a DataBrew job to be written into.
Use the `AWS::DataBrew::Job.ProfileConfiguration` property type to configure which statistics to include when running DataBrew profile jobs. | July 29, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::S3Outposts::EndPoint
[AWS::S3Outposts::EndPoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3outposts-endpoint.html)
Use the `AWS::S3Outposts::EndPoint.AccessType` property to create an endpoint using [customer owned IP (CoIP) addresses](https://docs.aws.amazon.com/outposts/latest/userguide/outposts-networking-components.html) and access your Amazon S3 on AWS Outposts objects by creating a [ local gateway](https://docs.aws.amazon.com/outposts/latest/userguide/outposts-networking-components.html) from your on-premises network. | July 29, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were released: AWS::Route53RecoveryControl::Cluster, AWS::Route53RecoveryControl::ControlPanel, AWS::Route53RecoveryControl::RoutingControl, AWS::Route53RecoveryControl::SafetyRule
[AWS::Route53RecoveryControl::Cluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53recoverycontrol-cluster.html)
Use the `AWS::Route53RecoveryControl::Cluster` to host routing controls, which are simple on/off switches for routing traffic.
[AWS::Route53RecoveryControl::ControlPanel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53recoverycontrol-controlpanel.html)
Use the `AWS::Route53RecoveryControl::ControlPanel` to define a group of routing controls that can be updated together in a single transaction.
[AWS::Route53RecoveryControl::RoutingControl](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53recoverycontrol-routingcontrol.html)
Use the `AWS::Route53RecoveryControl::RoutingControl` to fail over traffic to an application replica, to recover your application across Availability Zones or Regions.
[AWS::Route53RecoveryControl::SafetyRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53recoverycontrol-safetyrule.html)
Use the `AWS::Route53RecoveryControl::SafetyRule` to configure safeguards for routing controls, to avoid a scenario like stopping all traffic flow by setting all routing controls to off. | July 29, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were released: AWS::Route53RecoveryReadiness::Cell, AWS::Route53RecoveryReadiness::ReadinessCheck, AWS::Route53RecoveryReadiness::RecoveryGroup, AWS::Route53RecoveryReadiness::ResourceSet
[AWS::Route53RecoveryReadiness::Cell](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53recoveryreadiness-cell.html)
Use the `AWS::Route53RecoveryReadiness::Cell` to define a single cell for an application.
[AWS::Route53RecoveryReadiness::ReadinessCheck](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53recoveryreadiness-readinesscheck.html)
Use the `AWS::Route53RecoveryReadiness::ReadinessCheck` to check application readiness for failover. Amazon Route 53 Application Recovery Controller uses readiness checks to determine the readiness of the resources in a resource set.
[AWS::Route53RecoveryReadiness::RecoveryGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53recoveryreadiness-recoverygroup.html)
Use the `AWS::Route53RecoveryReadiness::RecoveryGroup` to define a recovery group for an application. A recovery group models an application and includes cells that represent application replicas.
[AWS::Route53RecoveryReadiness::ResourceSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53recoveryreadiness-resourceset.html)
Use the `AWS::Route53RecoveryReadiness::ResourceSet` to define a group of resources of a single type that you can associate with a readiness check. | July 29, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudWatch::Alarm.
[AWS::CloudWatch::Alarm](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cw-alarm.html)
In the [MetricDataQuery](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudwatch-alarm-metricdataquery.html) property type, use the `AccountId` property to specify the ID of the account where the metrics are located, if this is a cross-account alarm. | July 22, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::LookoutEquipment::InferenceScheduler
[AWS::LookoutEquipment::InferenceScheduler](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lookoutequipment-inferencescheduler.html)
Use the `AWS::LookoutEquipment::InferenceScheduler` resource to set up a continuous real-time inference plan to analyze new measurement data. | July 22, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::VPCCidrBlock.
[AWS::EC2::VPCCidrBlock](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpccidrblock.html)
Use the `Ipv6CidrBlock` property to specify an IPv6 CIDR block from the IPv6 address pool.
Use the `Ipv6Pool` property to specify the ID of an IPv6 address pool from which to allocate the IPv6 CIDR block. | July 21, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::Cassandra::Table`.
[AWS::Cassandra::Table.EncryptionSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cassandra-table.html)
Use the `AWS::Cassandra::Table.EncryptionSpecification` property to choose the encryption option for new or existing tables in Amazon Keyspaces (for Apache Cassandra). | July 21, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added : AWS::Logs::ResourcePolicy
[AWS::Logs::ResourcePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-resourcepolicy.html)
Use the `AWS::Logs::ResourcePolicy` resource to create a IAM policy that allows other AWS services to write log events to this account. For more information, see [ Logs sent to CloudWatch Logs](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.html#AWS-logs-infrastructure-CWL). | July 15, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::DataBrew::Job
[AWS::DataBrew::Job](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-databrew-job-datacatalogoutput.html)
Use the `AWS::DataBrew::Job.DataCatalogOutput` property type to define outputs from DataBrew recipe jobs to the AWS Glue Data Catalog. | July 9, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::ServiceDiscovery::PrivateDnsNamespace` and `AWS::ServiceDiscovery::PublicDnsNamespace`.
[AWS::ServiceDiscovery::PrivateDnsNamespace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicediscovery-privatednsnamespace.html)
Use the `Properties` property to specify DNS properties for an AWS Cloud Map private DNS namespace.
[AWS::ServiceDiscovery::PublicDnsNamespace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicediscovery-publicdnsnamespace.html)
Use the `Properties` property to specify DNS properties for an AWS Cloud Map public DNS namespace. | July 8, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, and AWS::CodeDeploy::DeploymentGroup
[AWS::CodeDeploy::Application](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codedeploy-application.html)
Use the `Tags` property to specify metadata to add to CodeDeploy applications.
[AWS::CodeDeploy::DeploymentConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codedeploy-deploymentconfig.html)
Use the `TrafficRoutingConfig` property to specify how deployment traffic is routed.
Use the `ComputePlatform` property to specify the destination platform type for the deployment (` Lambda `, `Server`, or `ECS`).
[AWS::CodeDeploy::DeploymentGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codedeploy-deploymentgroup.html)
Use the `BlueGreenDeploymentConfiguration` property to specify information about blue/green deployment options for a deployment group.
Use the `ECSServices` property to specify the target Amazon ECS services in the deployment group. | July 8, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AutoScaling::LaunchConfiguration.
[AWS::AutoScaling::LaunchConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-launchconfiguration.html)
Use the `BlockDevice` property to specify GP3 volumes in the block device mappings for launch configurations. | July 8, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::ImageBuilder::ContainerRecipe and AWS::ImageBuilder::DistributionConfiguration.
[AWS::ImageBuilder::DistributionConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-distributionconfiguration.html)
Use the `LaunchTemplateConfiguration` property to use an Amazon EC2 launch template for specified accounts where you distribute your Image Builder image.
[AWS::ImageBuilder::ContainerRecipe](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-containerrecipe.html)
+ Retrieve the container recipe `Name` attribute with the `GN::GetAtt` function.
+ Use the `InstanceBlockDeviceMapping` property to define block device mappings for the build instance used to configure your image. | July 1, 2021 |
| [China Rebrand Update](aws-template-resource-type-ref.md) | China rebrand updates | June 29, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Transfer::Server ProtocolDetails
[AWS::Transfer::Server ProtocolDetails](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-server.html#cfn-transfer-server-protocoldetails)
Use the `ProtocolDetails` property to specify the `PassiveIp` address for FTP and FTPS protocols. | June 24, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::DAX::Cluster
[AWS::DAX::Cluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dax-cluster.html)
Use the `ClusterEndpointEncryptionType` to specify the encryption type of the cluster's endpoint. | June 24, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::CloudFormation::PublicTypeVersion`, `AWS::CloudFormation::Publisher`, and `AWS::CloudFormation::TypeActivation`.
[AWS::CloudFormation::PublicTypeVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-publictypeversion.html)
Use the `AWS::CloudFormation::PublicTypeVersion` resource to test and publish a registered extension as a public, third-party extension.
[AWS::CloudFormation::Publisher](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-publisher.html)
Use the `AWS::CloudFormation::Publisher` resource to register your account as a publisher of public extensions in the CloudFormation registry.
[AWS::CloudFormation::TypeActivation](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-typeactivation.html)
Use the `AWS::CloudFormation::TypeActivation` resource to activate a public third-party extension, making it available for use in CloudFormation operations. | June 24, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Connect::QuickConnect
[AWS::Connect::QuickConnect](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-quickconnect.html)
Use the `AWS::Connect::QuickConnect` resource to create a quick connect. | June 24, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::MWAA::Environment
[Schedulers](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-schedulers)
Use the `Schedulers` property to specify the number of Apache Airflow schedulers that run in an environment. | June 21, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AutoScaling::ScheduledAction.
[AWS::AutoScaling::ScheduledAction](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-as-scheduledaction.html)
Use the `TimeZone` property to create recurring scheduled actions in the local time zone. If your time zone observes Daylight Saving Time (DST), the recurring action automatically adjusts for Daylight Saving Time. | June 18, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::AppMesh::VirtualNode, AWS::AppMesh::GatewayRoute, and AWS::AppMesh::Route
[AWS::AppMesh::VirtualNode](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appmesh-virtualnode.html)
Use the `DnsServiceDiscovery` property to represent the DNS service discovery information for your virtual node.
[AWS::AppMesh::GatewayRoute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appmesh-gatewayroute.html)
Use the `GatewayRouteHostnameMatch` property to represent the gateway route hostname to match.
Use the `GatewayRouteHostnameRewrite ` property to represent the gateway route host name to rewrite.
Use the `GrpcGatewayRouteMetadata` property to represent the metadata of the gateway route.
Use the `GrpcGatewayRouteRewrite` property to represent the the gateway route to rewrite.
Use the `GrpcMetadataMatchMethod` property to represent the method header to be matched.
Use the `HttpGatewayRouteHeader` property to represent the HTTP header in the gateway route.
Use the `HttpGatewayRoutePathRewrite` property to represent the path to rewrite.
Use the `HttpGatewayRoutePrefixRewrite` property to represent the beginning characters of the route to rewrite.
Use the `HttpGatewayRouteRewrite` property to represent the beginning characters of the route to rewrite.
Use the `HttpGatewayRoutePathRewrite` property to represent the beginning characters of the route to rewrite.
[AWS::AppMesh::Route](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appmesh-route.html)
Use the `HttpQueryParameter` property to represent the query parameter in the request. | June 17, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::KMS::Key.
[AWS::KMS::Key](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html)
Use the `MultiRegionKey` property to specify multi-Region primary keys. | June 17, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::KMS::ReplicaKey.
[AWS::KMS::ReplicaKey](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-replicakey.html)
Use the `AWS::KMS::ReplicaKey` resource to specify a replica of a specified multi-Region primary key. | June 17, 2021 |
| [Parallel Node Upgrade and Scale to Zero](aws-template-resource-type-ref.md) | In the NodegroupUpdateConfig, use either the MaxUnavailable and MaxUnavailablePercentage values to define the number of nodes to upgrade in parallel. In the scalingconfig, the minsize and desiredsize values can both be set to zero. | June 16, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::NatGateway
[AWS::EC2::NatGateway](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-natgateway.html)
Use the `ConnectivityType` property to indicate whether the NAT gateway supports public or private connectivity. | June 11, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::RAM:ResourceShare`
[AWS::RAM::ResourceShare](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ram-resourceshare.html)
Use the `PermissionArns` property to specify the Amazon Resource Names (ARNs) of the permissions to associate with the resource share. | June 10, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::KinesisAnalyticsV2::Application
[AWS::KinesisAnalyticsV2::Application ApplicationConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisanalyticsv2-application-applicationconfiguration.html)
You can use the ZeppelinApplicationConfiguration property to create Studio notebook applications that use Apache Zeppelin. You can use the notebook interactively, and you can deploy it as a continuously running streaming application with durable state and auto-scaling features. | June 10, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::SQS::Queue
[AWS::SQS::Queue](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sqs-queues.html)
You can now use the `DeduplicationScope` and `FifoThroughputLimit`properties to enable higher throughput for FIFO queues. | June 10, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::SSM::Document
[AWS::SSM::Document](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-document.html)
Use the `Attachments` property to specify a list of key and value pairs that describe attachments to a version of a document. Use the `Requires` property to specify a list of SSM documents required by a document. This parameter is used exclusively by AWS AppConfig. When a user creates an AWS AppConfig configuration in an SSM document, the user must also specify a required document for validation purposes. In this case, an ApplicationConfiguration document requires an ApplicationConfigurationSchema document for validation purposes. For more information, see [Creating a configuration and a configuration profile ](https://docs.aws.amazon.com/appconfig/latest/userguide/appconfig-creating-configuration-and-profile.html) in the *AWS AppConfig User Guide*. | June 10, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FSx::FileSystem
[AWS::FSx::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html)
Use the `DNSName` attribute to access the DNS name of your Amazon FSx file system. | June 7, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: `AWS::Location::GeofenceCollection`, `AWS::Location::Map`, `AWS::Location::PlaceIndex`, `AWS::Location::RouteCalculator`, `AWS::Location::Tracker`, and `AWS::Location::TrackerConsumer`.
[AWS::Location::GeofenceCollection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-location-geofencecollection.html)
Use the `AWS::Location::GeofenceCollection` resource to specify the ability to detect and act when a tracked device enters or exits a defined geographical boundary.
[AWS::Location::Map](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-location-map.html)
Use the `AWS::Location::Map` resource to specify a map resource in your AWS account, which provides map tiles of different styles sourced from available data providers.
[AWS::Location::PlaceIndex](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-location-placeindex.html)
Use the `AWS::Location::PlaceIndex` resource to specify a place index resource in your AWS account, which supports Places functions with geospatial data sourced from your chosen data provider.
[AWS::Location::RouteCalculator](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-location-routecalculator.html)
Use the `AWS::Location::RouteCalculator` resource to specify a route calculator resource in your AWS account.
[AWS::Location::Tracker](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-location-tracker.html)
Use the `AWS::Location::Tracker` resource to specify a tracker resource in your AWS account, which lets you receive current and historical location of devices.
[AWS::Location::TrackerConsumer](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-location-trackerconsumer.html)
Use the `AWS::Location::TrackerConsumer` resource to specify an association between a geofence collection and a tracker resource. | June 7, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::MediaPackage::Channel, AWS::MediaPackage::OriginEndpoint, AWS::MediaPackage::PackagingConfiguration, and AWS::MediaPackage::PackagingGroup.
[AWS::MediaPackage::Channel.](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackage-channel.html)
Use the `EgressAccessLogs` property to specify egress access logs for your channel.
Use the `IngressAccessLogs` property to specify ingress access logs for your channel.
[AWS::MediaPackage::OriginEndpoint.](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackage-originendpoint.html)
Use the `CmafEncryption.ConstantInitializationVector` property to specify an optional 128-bit, 16-byte hex value represented by a 32-character string, used in conjunction with the key for encrypting blocks. If you don't specify a value, then AWS Elemental MediaPackage creates the constant initialization vector (IV).
[AWS::MediaPackage::PackagingConfiguration.](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackage-packagingconfiguration.html)
Use the `CmafPackage.IncludeEncoderConfigurationInSegments` property to place your encoder's metadata into every video segment instead of the init fragment, which is the default behavior. This lets you use different SPS/PPS/VPS settings for your assets during content playback.
[AWS::MediaPackage::PackagingGroup.](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackage-packaginggroup.html)
Use the `EgressAccessLogs` property to configure egress access logs for your packaging group. | May 27, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup.
[AWS::WAFv2::WebACL](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webacl.html)
You now have additional text transformation options.
[AWS::WAFv2::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-rulegroup.html)
You now have additional text transformation options. | May 27, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FraudDetector::Detector.
[AWS::FraudDetector::Detector](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-frauddetector-detector.html)
Use the `AssociatedModels` property to associate models with the detector. | May 27, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FSx::FileSystem
[AWS::FSx::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html)
In the [LustreConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-lustreconfiguration.html) property type, use `DataCompressionType` to specify the type of data compression used by an Amazon FSx for Lustre file system. | May 27, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::MWAA::Environment
[ModuleLoggingConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-mwaa-environment-moduleloggingconfiguration.html)
In the `ModuleLoggingConfiguration` property type, the `CloudWatchLogGroupArn` response property type for the CloudWatch Logs ARN where Apache Airflow DAG logs are published was removed from the request to enable logs, and is being returned in the response.
[AirflowConfigurationOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html)
In the `AirflowConfigurationOptions` property type, use a `PrimitiveType` of `Json` to add an Apache Airflow configuration option.
[MinWorkers](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#cfn-mwaa-environment-minworkers)
Use the `MinWorkers` property to specify the minimum number of Apache Airflow workers that run in an environment. | May 27, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ACMPCA::CertificateAuthority.
[AWS::ACMPCA::CertificateAuthority](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-acmpca-certificateauthority.html)
Use the `S3ObjectAcl` property to restrict public access to your CRLs. | May 27, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CUR::ReportDefinition
[AWS::CUR::ReportDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cur-reportdefinition.html)
Use the `AWS::CUR::ReportDefinition` resource to define AWS Cost and Usage Report. | May 27, 2021 |
| [Region availability](aws-template-resource-type-ref.md) | The following resources were updated: AWS::AmazonMQ::Broker
[AWS::AmazonMQ::Broker](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amazonmq-broker.html)
Amazon MQ for RabbitMQ is now available in the Amazon Web Services China (Bejing) and the Amazon Web Services China (Ningxia) Regions. | May 26, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resource was added: AWS::EC2::TransitGatewayPeeringAttachment.
[AWS::EC2::TransitGatewayPeeringAttachment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewaypeeringattachment.html)
Use the `TransitGatewayPeeringAttachment` resource to request transit gateway peering attachment between the specified transit gateway (requester) and a peer transit gateway (accepter). | May 20, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::AppRunner::Service
[AWS::AppRunner::Service](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apprunner-service.html)
Use the `AWS::AppRunner::Service` resource to create or update an AWS App Runner service. | May 20, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoTCoreDeviceAdvisor::SuiteDefinition
[SuiteDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotcoredeviceadvisor-suitedefinition.htm)
Use the `SuiteDefinition` resource to create a new test suite configuration for Device Advisor. | May 20, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::CloudFormation::StackSet`.
[AWS::CloudFormation::StackSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-stackset.html)
Use the `CallAs` property type to specify whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account. | May 14, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ECS::TaskDefinition.
[AWS::ECS::TaskDefinition EphemeralStorage](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-ephemeralstorage.html)
Use the `AWS::ECS::TaskDefinition EphemeralStorage` resource to define a custom ephemeral storage setting for your Amazon ECS tasks that are hosted on AWS Fargate. | May 14, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ECS::CapacityProvider.
[AWS::ECS::CapacityProvider ManagedScaling](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-capacityprovider-managedscaling.html)
Use the `AWS::ECS::CapacityProvider ManagedScaling.InstanceWarmupPeriod` property to set an instance warmup period for newly launched Amazon EC2 instances. | May 14, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::EKS::Nodegroup`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-nodegroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-nodegroup.html)
Use the `Taints` property to specify whether you want to have the effect of `No_Schedule`, `Prefer_No_Schedule`, or `No_Execute` applied to your node group. | May 14, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Elasticsearch::Domain.
[AWS::Elasticsearch::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticsearch-domain.html)
Use the `EncryptionAtRestOptions` property to specify whether the domain should encrypt data at rest, and if so, the AWS Key Management Service (KMS) key to use.
Use the `NodeToNodeEncryptionOptions` property to specify whether node-to-node encryption is enabled. | May 14, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::SSMContacts::Contact` and `AWS::SSMContacts::ContactChannel`
[AWS::SSMContacts::Contact](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmcontacts-contact.html)
Use the `AWS::SSMContacts::Contact` resource to specify an Incident Manager contact or escalation plan.
[AWS::SSMContacts::ContactChannel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmcontacts-contactchannel.html)
Use the `AWS::SSMContacts::ContactChannel` resource to specify a contact channel as the method that Incident Manager uses to engage your contact. | May 14, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::DynamoDB::GlobalTable
[AWS::DynamoDB::GlobalTable](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dynamodb-globaltable.html)
Use the `AWS::DynamoDB::GlobalTable` resource to create DynamoDB global tables. | May 14, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: `AWS::SSMIncidents::ReplicationSet` and `AWS::SSMIncidents::ResponsePlan`
[AWS::SSMIncidents::ReplicationSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmincidents-replicationset.html)
Use the `ReplicationSet` resource to specify a set of Regions that Incident Manager data is replicated to and the AWS KMS key used to encrypt the data.
[AWS::SSMIncidents::ResponsePlan](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssmincidents-responseplan.html)
Use the `ResponsePlan` resource to specify the details of the response plan that are used when creating an incident. | May 14, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated:
[AWS::ECR::Repository](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repository.html)
Use the `AWS::ECR::Repository.EncryptionConfiguration` property to configure encryption for the contents of a private repository. | May 13, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::S3::Bucket.
[AWS::S3::Bucket](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket.html)
Use the `ExpiredObjectDeleteMarker` property to specify whether Amazon S3 will remove a delete marker with no noncurrent versions. | May 13, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudFront::Distribution.
[AWS::CloudFront::Distribution](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-distribution.html)
In the [CacheBehavior](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-cachebehavior.html) and [DefaultCacheBehavior](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-defaultcachebehavior.html) property types, use the `FunctionAssociations` property to specify the CloudFront functions associated with the cache behavior.
For more information, see [Customizing with CloudFront Functions](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cloudfront-functions.html) in the *Amazon CloudFront Developer Guide*. | May 6, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::GameLift:Fleet, AWS::GameLift::GameSessionQueue.
[AWS::GameLift::Fleet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gamelift-fleet.html)
In the `LocationCapacity` property type, use `DesiredEc2Instance` to specify the number of desired EC2 instance and `MinSize` and `MaxSize` to specify the minimum and maximum capacity size.
In the `LocationConfiguration` property type, use location `Location` to specify an AWS Region code and `LocationConfiguration` to specify resource capacity settings in a specified fleet.
[AWS::GameLift::GameSessionQueue](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gamelift-gamesessionqueue.html)
Use the `PriorityConfiguration` property to specify priority destinations and locations for game session placements.
Use the `FilterConfiguration` property to specify a list of locations where a queue is allowed to place new game sessions. | May 6, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IoT::TopicRule
[AWS::IoT::TopicRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-topicrule.html)
Use the `CloudwatchLogsAction` property to specify a Cloudwatch logs action.
Use the `TimestreamAction` property to specify a timestream action.
Use the `KafkaAction` property to specify a kafka action.
In the `S3Action` property, use the `CannedAcl` value to specify a canned ACL action. | May 6, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ACMPCA::CertificateAuthority.
[AWS::ACMPCA::CertificateAuthority](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-acmpca-certificateauthority.html)
Use the `KeyStorageSecurityStandard` property to specify the minimum FIPS key security standard. | May 6, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::FraudDetector::Detector, AWS::FraudDetector::EntityType, AWS::FraudDetector::EventType, AWS::FraudDetector::Label, AWS::FraudDetector::Outcome, and AWS::FraudDetector::Variable
[AWS::FraudDetector::Detector](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-frauddetector-detector.html)
Use the `AWS::FraudDetector::Detector` resource to manage a detector or associated detector versions in Amazon Fraud Detector.
[AWS::FraudDetector::EntityType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-frauddetector-entitytype.html)
Use the `AWS::FraudDetector::EntityType` resource to create or update an entity type in Amazon Fraud Detector.
[AWS::FraudDetector::EventType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-frauddetector-eventtype.html)
Use the `AWS::FraudDetector::EventType` resource to create or update an event type in Amazon Fraud Detector.
[AWS::FraudDetector::Label](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-frauddetector-label.html)
Use the `AWS::FraudDetector::Label` resource to create or update label in Amazon Fraud Detector.
[AWS::FraudDetector::Outcome](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-frauddetector-outcome.html)
Use the `AWS::FraudDetector::Outcome` resource to create or update an outcome in Amazon Fraud Detector.
[AWS::FraudDetector::Variable](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-frauddetector-variable.html)
Use the `AWS::FraudDetector::Variable` resource to create a variable in Amazon Fraud Detector. | May 6, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::XRay::Group and AWS::XRay::SamplingRule.
[AWS::XRay::Group](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-xray-group.html)
Use the `AWS::XRay::Group` resource to specify an X-Ray group.
[AWS::XRay::SamplingRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-xray-samplingrule.html)
Use the `AWS::XRay::SamplingRule` resource to specify an X-Ray sampling rule. | May 6, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CloudFront::Function.
[AWS::CloudFront::Function](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-function.html)
Use the `AWS::CloudFront::Function` resource to create a function in CloudFront Functions.
For more information, see [Customizing with CloudFront Functions](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cloudfront-functions.html) in the *Amazon CloudFront Developer Guide*. | May 6, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::FinSpace::Environment
[AWS::FinSpace::Environment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-finspace-environment.html)
Use the `AWS::FinSpace::Environment` resource to specify an Amazon FinSpace environment. | May 6, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Detective::Graph
[AWS::Detective::Graph](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-detective-graph.html)
Use the `Tags` property to assign tag values to the behavior graph. | April 29, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::SES::ContactList
[AWS::SES::ContactList](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ses-contactlist.html)
Use the `AWS::SES::ContactList` resource to create a list that contains contacts that have subscribed to a particular topic or topics. | April 29, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::IAM::InstanceProfile` and `AWS::IAM::ManagedPolicy`.
[AWS::IAM::InstanceProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-instanceprofile.html)
Use the `Tags` property to specify a list of tags that you want to attach to the newly created instance profile.
[AWS::IAM::ManagedPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.html)
Use the `Tags` property to specify a list of tags that you want to attach to the newly created managed policy. | April 27, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::IoTWireless::PartnerAccount, AWS::IoTWireless::TaskDefinition
[AWS::IoTWireless::PartnerAccount](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotwireless-partneraccount.html)
Gets information about a partner account. If `PartnerAccountId` and `PartnerType` are `null`, returns all partner accounts.
[AWS::IoTWireless::TaskDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotwireless-taskdefinition.html)
Gets information about the gateway task definition for a wireless gateway. | April 26, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | `AWS::ElastiCache::CacheCluster`, `AWS::ElastiCache::ReplicationGroup.`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticache-cache-cluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticache-cache-cluster.html)
You can now specify log delivery to a CloudWatch Logs or Kinesis Data Firehose destination.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-replicationgroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-replicationgroup.html)
You can now specify log delivery to a CloudWatch Logs or Kinesis Data Firehose destination. | April 22, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup.
[AWS::WAFv2::WebACL](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webacl.html)
You can now nest rule statements without using different names for statements at different levels. For example, instead of using `AndStatementOne` and `AndStatementTwo` to nest an `AND` rule statement inside another `AND` rule statement, you can use `AndStatement` for both. The new statement properties are `AndStatement`, `NotStatement`, `OrStatement`, `RateBasedStatement`, and `Statement`.
[AWS::WAFv2::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-rulegroup.html)
You can now nest rule statements without using different names for statements at different levels. For example, instead of using `AndStatementOne` and `AndStatementTwo` to nest an `AND` rule statement inside another `AND` rule statement, you can use `AndStatement` for both. The new statement properties are `AndStatement`, `NotStatement`, `OrStatement`, `RateBasedStatement`, and `Statement`. | April 22, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ResourceGroups::Group
[AWS::ResourceGroups::Group](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-resourcegroups-group.html)
Use the `Configuration` property to specify settings for an AWS service that automatically apply to members of the resource group. | April 22, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::AutoScaling::WarmPool.
[AWS::AutoScaling::WarmPool](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-warmpool.html)
Use the `AWS::AutoScaling::WarmPool` resource to specify a warm pool for an Auto Scaling group. | April 22, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::CloudFormation::StackSet`.
[AWS::CloudFormation::StackSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-stackset.html)
Use the `RegionConcurrencyType` property type to specify the concurrency type of deploying StackSets operations in Regions. | April 15, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ApiGateway::RestApi.
[AWS::ApiGateway::RestApi](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-restapi.html)
Use the `Mode` property to specify how API Gateway handles resource updates when you use OpenAPI to define your REST API. | April 15, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IVS::Channel
[AWS::IVS::Channel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-channel.html)
Use the `RecordingConfiguration` property to specify an Amazon IVS RecordingConfiguration, which stores configuration information related to recording your live stream to a data store. | April 15, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resource was added: AWS::EC2::EnclaveCertificateIamRoleAssociation.
[AWS::EC2::EnclaveCertificateIamRoleAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-enclavecertificateiamroleassociation.html)
Use the `EnclaveCertificateIamRoleAssociation` resource to associate an AWS Identity and Access Management (IAM) role with an AWS Certificate Manager (ACM) certificate. | April 15, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IVS::RecordingConfiguration
[AWS::IVS::RecordingConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-recordingconfiguration.html)
Use the `AWS::IVS::RecordingConfiguration` resource to specify an Amazon IVS RecordingConfiguration, which stores configuration information related to recording your live stream to a data store. | April 15, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | `AWS::ElastiCache::ParameterGroup`, `AWS::ElastiCache::SecurityGroup`, `AWS::ElastiCache::SubnetGroup.`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticache-parameter-group.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticache-parameter-group.html)
You can now add tags to the `AWS::ElastiCache::ParameterGroup` type.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticache-security-group.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticache-security-group.html)
You can now add tags to the `AWS::ElastiCache::SecurityGroup` resource.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticache-subnet-group.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticache-subnet-group.html)
You can now add tags to the `AWS::ElastiCache::SubnetGroup` resource. | April 8, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::DynamoDB::Table.
[AWS::DynamoDB::Table](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dynamodb-table.html)
Use the `KinesisStreamSpecification` property to specify the Kinesis Data Streams configuration for a table. | April 8, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::DataBrew::Dataset and AWS::DataBrew::Job
[AWS::DataBrew::Dataset](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-databrew-dataset.html)
Use the `CsvOptions` property to define how DataBrew will read a comma-separated value (CSV) file when creating a dataset from that file.
Use the `DatabaseInputDefinition` property to define connection information for dataset input files stored in a database.
Use the `DataCatalogInputDefinition` property to define how metadata stored in the AWS Glue Data Catalog is defined in a DataBrew dataset.
Use the `DatasetParameter` property to define the type and conditions for a parameter in the Amazon S3 path of the dataset.
Use the `DatetimeOptions` property to define the correct interpretation of datetime parameters used in the Amazon S3 path of a dataset.
Use the `ExcelOptions` property to define how DataBrew will interpret a Microsoft Excel file when creating a dataset from that file.
Use the `FilesLimit` property to limit the number of Amazon S3 files that should be selected for a dataset from a connected Amazon S3 path.
Use the `FilterExpression` property to define parameter conditions.
Use the `FilterValue` property to define a single entry in the `ValuesMap` of a `FilterExpression`.
Use the `FormatOptions` property to define the structure of either comma-separated value (CSV), Excel, or JSON input.
Use the `Input` property to define how DataBrew can find data, in either the AWS Glue Data Catalog or Amazon S3.
Use the `JsonOptions` property to define how input is to be interpreted by AWS Glue DataBrew.
Use the `PathOptions` property to define how DataBrew selects files for a given Amazon S3 path in a dataset.
Use the `PathParameter` property to define the file format of a dataset.
Use the `S3Location` property to define a single entry in the path parameters of a dataset.
[AWS::DataBrew::Job](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-databrew-job.html)
Use the `JobSample` property to define the number of rows on which a profile job is run.
Use the `OutputLocation` property to define the location in Amazon S3 where the job writes its output.
Use the `Recipe` property to define the actions to be performed on a dataset. | April 1, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup.
[AWS::WAFv2::WebACL](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webacl.html)
You can now inspect a web request body as JSON. You can now add custom request and response handling to web ACL default action and rule action settings. You can now define labels for rules, which are added automatically to matching requests and that persist with requests during web ACL evaluation. You can match against labels using the new rule `LabelMatchStatement`. You can now add a scope-down statement to managed rule group statements.
[AWS::WAFv2::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-rulegroup.html)
You can now inspect a web request body as JSON. You can now add custom request and response handling to rule action settings. You can now define labels for rules, which are added automatically to matching requests and that persist with requests during web ACL evaluation. You can match against labels using the new rule `LabelMatchStatement`. | April 1, 2021 |
| [Updated resource ](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Config::DeliveryChannel.
[ AWS::Config::DeliveryChannel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-config-deliverychannel.html)
Use the `S3KmsKeyArn` property to specify the Amazon Resource Name (ARN) of the AWS Key Management Service (KMS) customer managed key (CMK) used to encrypt objects delivered by AWS Config. | April 1, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ApiGateway::RestApi.
[AWS::ApiGateway::RestApi](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-restapi.html)
Use the `DisableExecuteApiEndpoint` property to disable the default endpoint for a REST API. | April 1, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Budgets::BudgetsAction
[AWS::Budgets::BudgetsAction](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-budgets-budgetsaction.html)
Use the `AWS::Budgets::BudgetsAction` resource to take predefined actions that are initiated when a budget threshold has been exceeded. | April 1, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Cloud9::EnvironmentEC2
[AWS::Cloud9::EnvironmentEC2](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/ws-resource-cloud9-environmentec2.html.html)
Use the `ImageId` property to specify the Amazon Machine Image (AMI) that's used to create the EC2 instance. | April 1, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::LaunchTemplate.
[AWS::EC2::LaunchTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html)
Use the `TagSpecifications` property to tag a launch template on creation. | April 1, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ElasticBeanstalk::Environment.
[AWS::ElasticBeanstalk::Environment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-beanstalk-environment.html)
Use the `OperationsRole` property to specify the Amazon Resource Name (ARN) of an existing IAM role to be used as the environment's operations role. | April 1, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: [AWS::Events::Rule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-rule.html).
[AWS::Events::Rule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-rule.html)
The [SageMakerPipelineParameter](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-rule-sagemakerpipelineparameter.html) property is a Name / Value pair of a parameter to start execution of a SageMaker AI Model Building Pipeline to create an API destination. An API destination defines an HTTP invocation endpoint to use as the target of a rule.
The [SageMakerPipelineParameters](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-rule-sagemakerpipelineparameters.html) contains the SageMaker AI Model Building Pipeline parameters to start execution of a SageMaker AI Model Building Pipeline. | April 1, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FMS::Policy.
[AWS::FMS::Policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fms-policy.html)
The `AWS::FMS::Policy` resource now allows you to manage DNS Firewall policies for Amazon Route 53 Resolver DNS Firewall. | April 1, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::GameLift::GameSessionQueue.
[AWS::GameLift::GameSessionQueue](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gamelift-gamesessionqueue.html)
Use the `NotificationTarget` property to specify an SNS topic ARN to publish game session placement events that are emitted by the queue.
Use the `CustomEventData` property to specify a string value to add to all game session placement events that are emitted by the queue. | April 1, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::Route53Resolver::FirewallDomainList`, `AWS::Route53Resolver::FirewallRuleGroup`, `AWS::Route53Resolver::FirewallRuleGroupAssociation`
[AWS::Route53Resolver::FirewallDomainList](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-firewalldomainlist.html)
Use the `AWS::Route53Resolver::FirewallDomainList` resource to specify a domain list configuration for Route 53 Resolver DNS Firewall.
[AWS::Route53Resolver::FirewallRuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-firewallrulegroup.html)
Use the `AWS::Route53Resolver::FirewallRuleGroup` resource to specify a rule group configuration for Route 53 Resolver DNS Firewall.
[AWS::Route53Resolver::FirewallRuleGroupAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-firewallrulegroupassociation.html)
Use the `AWS::Route53Resolver::FirewallRuleGroupAssociation` resource to specify an association between a firewall rule group and a VPC. | April 1, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CloudWatch::MetricStream.
[AWS::CloudWatch::MetricStream](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudwatch-metricstream.html)
Use the AWS::CloudWatch::MetricStream resource to create a metric stream of CloudWatch metric data to a destination of your choice. For more information, see [ Metric streams](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Metric-Streams.html). | April 1, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added : AWS::Logs::QueryDefinition
[AWS::Logs::QueryDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-querydefinition.html)
Use the `AWS::Logs::QueryDefinition` resource to create a CloudWatch Logs Insights query definition. For more information, see [ Analyzing Log Data with CloudWatch Logs Insights](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AnalyzingLogData.html). | April 1, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: [AWS::Batch::JobDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobdefinition.html)
[AWS::Batch::JobDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobdefinition.html)
In the [Volumes](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-volumes.html) property type, use the [EfsVolumeConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-volumes.html#cfn-batch-jobdefinition-volumes-efsvolumeconfiguration) property to specify the Amazon EFS configuration for a job definition. | March 31, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::AppIntegrations::EventIntegration
[AWS::AppIntegrations::EventIntegration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appintegrations-eventintegration.html)
Use the `AWS::AppIntegrations::EventIntegration` resource to create an EventIntegration. | March 25, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::CustomerProfiles::Domain, AWS::CustomerProfiles::Integration and AWS::CustomerProfiles::ObjectType.
[AWS::CustomerProfiles::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-customerprofiles-domain.html)
Use the `AWS::CustomerProfiles::Domain` resource to create a new domain in the Amazon Connect Customer Profiles Service.
[AWS::CustomerProfiles::Integration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-customerprofiles-integration.html)
Use the `AWS::CustomerProfiles::Integration` resource to create a new integration in the Amazon Connect Customer Profiles Service.
[AWS::CustomerProfiles::ObjectType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-customerprofiles-objecttype.html)
Use the `AWS::CustomerProfiles::ObjectType` resource to create a new object type in the Amazon Connect Customer Profiles Service. | March 24, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::ServiceDiscovery::Service`.
[AWS::ServiceDiscovery::Service](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicediscovery-service.html)
Use the `Type` property to allow service instances in a service in a public or private DNS namespace to only be discovered with the `DiscoverInstances` API operation. | March 18, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::FIS::ExperimentTemplate.
[AWS::FIS::ExperimentTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fis-experimenttemplate.html)
Use the `AWS::FIS::ExperimentTemplate` resource to create an experiment template in AWS Fault Injection Service. | March 18, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::S3ObjectLambda::AccessPoint and AWS::S3ObjectLambda::AccessPointPolicy
[AWS::S3ObjectLambda::AccessPoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3objectlambda-accesspoint.html)
Use the `AWS::S3ObjectLambda::AccessPoint` resource to create a S3 Object Lambda access point.
[AWS::S3ObjectLambda::AccessPointPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3objectlambda-accesspointpolicy.html)
Use the `AWS::S3ObjectLambda::AccessPointPolicy` resource to create a policy for your S3 Object Lambda access point. | March 18, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::ECS::Service.
[AWS::ECS::Service](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-service.html)
Use the `AWS::ECS::Service` resource and the `EnableExecuteCommand` property to turn on ECS Exec for the tasks in a service. | March 16, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::ECS::Cluster ExecuteCommandLogConfiguration.
[AWS::ECS::Cluster ExecuteCommandLogConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-cluster-executecommandlogconfiguration.html)
Use the `AWS::ECS::Cluster ExecuteCommandLogConfiguration` resource to define a logging configuration for the ECS Exec actions on the tasks in a cluster. | March 16, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::ECS::Cluster ExecuteCommandConfiguration.
[AWS::ECS::Cluster ExecuteCommandConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-cluster-executecommandconfiguration.html)
Use the `AWS::ECS::Cluster ExecuteCommandConfiguration` resource to turn on ECS Exec for a cluster. | March 16, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Detective::MemberInvitation
[AWS::Detective::MemberInvitation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-detective-memberinvitation.html)
Use the `DisableEmailNotification` property to prevent the sending of invitation emails to member accounts.
The term "master account" is changed to "administrator account." | March 15, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated:
[AWS::ECR::PublicRepository](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-replicationconfiguration.html)
Use the `AWS::ECR::PublicRepository.Tags` property to add tags to your public repositories. | March 11, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CertificateManager::Account
[AWS::CertificateManager::Account](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-certificatemanager-account.html)
Use the `ExpiryEventsConfiguration` property to specify options for certificate expiration events associated with an AWS account. | March 11, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EFS::FileSystem
[AWS::EFS::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-filesystem.html#cfn-efs-filesystem-availabilityzonename)
Use the `AvailabilityZoneName` property to create a file system that uses One Zone storage, which stores data redundantly within a single Availability Zone within an AWS Region. | March 11, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::CE::AnomalySubscription and AWS::CE::AnomalyMonitor.
[AWS::CE::AnomalySubscription](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ce-anomalysubscription.html)
Use the `AWS::CE::AnomalySubscription` resource to deliver notifications about anomalies detected by a monitor that exceeds a threshold.
[AWS::CE::AnomalyMonitor](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ce-anomalymonitor.html)
Use the `AWS::CE::AnomalyMonitor` resource to continuously inspect your account's cost data for anomalies, based on `MonitorType` and `MonitorSpecification`. | March 11, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::ECS::ClusterCapacityProviderAssociations.
[AWS::ECS::ClusterCapacityProviderAssociations](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-clustercapacityproviderassociations.html)
Use the `AWS::ECS::ClusterCapacityProviderAssociations` resource to associate capacity providers with a cluster. | March 11, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::RDS::DBProxyEndpoint.
[AWS::RDS::DBProxyEndpoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbproxyendpoint.html)
Use the `AWS::RDS::DBProxyEndpoint` resource to create or update a custom DB proxy endpoint. | March 11, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::StepFunctions::StateMachine`.
[AWS::StepFunctions::StateMachine](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-stepfunctions-statemachine.html)
The `AWS::StepFunctions::StateMachine` has a new `Definition` property that lets you define your state machine in the language of your template file. | March 10, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AutoScaling::AutoScalingGroup.
[AWS::AutoScaling::AutoScalingGroup MixedInstancesPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-mixedinstancespolicy.html)
Use the `SpotAllocationStrategy` property to specify `capacity-optimized-prioritized` as the allocation strategy for your Spot capacity when you use a mixed instances policy. | March 8, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following new resource was updated: `AWS::SecretsManager::Secret`
[AWS::SecretsManager::Secret](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-secretsmanager-secret.html)
Use the `ReplicaRegions` property to replicate secrets into additional Regions for resiliency and disaster recovery. | March 4, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Events::ApiDestination.
[AWS::Events::ApiDestination](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-apidestination.html)
Use the `ApiDestination` resource to create an API destination. An API destination defines an HTTP invocation endpoint to use as the target of a rule. | March 4, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Events::Connection.
[AWS::Events::Connection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-connection.html)
Use the `Connection` resource to create a connection to use with Api destinations. A connection defines the authorization method and parameters to use to connect to the HTTP invocation endpoint for an Api destination. | March 4, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::IoT::AccountAuditConfiguration,AWS::IoT::CustomMetric, AWS::IoT::Dimension, AWS::IoT::MitigationAction, AWS::IoT::ScheduledAudit, AWS::IoT::SecurityProfile.
[AWS::IoT::AccountAuditConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-accountauditconfiguration.html)
Use the `AWS::IoT::AccountAuditConfiguration` resource to specify an account audit configuration in AWS IoT Core.
[AWS::IoT::CustomMetric](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-custommetric.html)
Use the `AWS::IoT::CustomMetric` resource to specify a custom metric in AWS IoT Core.
[AWS::IoT::Dimension](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-dimension.html)
Use the `AWS::IoT::Dimension` resource to specify a dimension in AWS IoT Core.
[AWS::IoT::MitigationAction](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-mitigationaction.html)
Use the `AWS::IoT::MitigationAction` resource to specify a mitigation action in AWS IoT Core.
[AWS::IoT::ScheduledAudit](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-scheduledaudit.html)
Use the `AWS::IoT::ScheduledAudit` resource to specify a Scheduled Audit in AWS IoT Core.
[AWS::IoT::SecurityProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-securityprofile.html)
Use the `AWS::IoT::SecurityProfile` resource to specify a security profile in AWS IoT Core. | March 4, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::S3Outposts::Bucket, AWS::S3Outposts::BucketPolicy, AWS::S3Outposts::AccessPoint, and AWS::S3Outposts::EndPoint
[AWS::S3Outposts::Bucket](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3outposts-bucket.html)
Use the `AWS::S3Outposts::Bucket` resource to create an S3 on Outposts bucket.
[AWS::S3Outposts::BucketPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3outposts-bucketpolicy.html)
Use the `AWS::S3Outposts::BucketPolicy` resource to create a bucket policy for your S3 on Outposts bucket.
[AWS::S3Outposts::AccessPoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3outposts-accesspoint.html)
Use the `AWS::S3Outposts::AccessPoint` resource to create an access point for your S3 on Outposts bucket.
[AWS::S3Outposts::EndPoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3outposts-endpoint.html)
Use the `AWS::S3Outposts::EndPoint` resource to create an endpoint for Amazon S3 on AWS Outposts. | March 4, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::IoTSiteWise::AccessPolicy and AWS::IoTSiteWise::Portal.
[ AWS::IoTSiteWise::AccessPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-accesspolicy.html)
Added the following properties: `IamRole` and `IamUser`.
[AWS::IoTSiteWise::Portal](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-portal.html)
Added the following property: `PortalAuthMode`. | March 2, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IoTSiteWise::AssetModel.
[ AWS::IoTSiteWise::AssetModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-assetmodel.html)
Added the following property: `AssetModelCompositeModel`.
You can use this property to define an alarm in AWS IoT SiteWise.
For more information, see [Monitoring data with alarms](https://docs.aws.amazon.com/iot-sitewise/latest/userguide/industrial-alarms.html) in the *AWS IoT SiteWise User Guide*. | March 1, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::DataBrew::Dataset Format.
[AWS::DataBrew::Dataset Format](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-databrew-dataset.html#cfn-databrew-dataset-format)
Use the `Format` property to define the file format of a dataset. | February 25, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ManagedBlockchain::Node
[AWS::ManagedBlockchain::Node](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-managedblockchain-node.html)
Use the `NodeConfiguration` property to create a node on an Ethereum network. | February 25, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::SageMaker::Model
[AWS::SageMaker::Model](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-model.html)
Use the `InferenceExecutionConfig` property to specify details of how containers in a multi-container endpoint are called. | February 25, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resource was added: AWS::EC2::TransitGatewayConnect.
[AWS::EC2::TransitGatewayConnect](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewayconnect.html)
Use the `TransitGatewayConnect` resource to create a Connect attachment from a specified transit gateway attachment. | February 25, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::EMR::Studio and AWS::EMR::StudioSessionMapping.
[AWS::EMR::Studio](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-emr-studio.html)
Use the `AWS::EMR::Studio` resource to create a new Amazon EMR Studio.
[AWS::EMR::StudioSessionMapping](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-emr-studiosessionmapping.html)
Use the `AWS::EMR::StudioSessionMapping` resource to assign a user or group to an Amazon EMR Studio, and apply an IAM session policy to refine Studio permissions for that user or group. | February 25, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::IAM::OIDCProvider`, `AWS::IAM::SAMLProvider`, `AWS::IAM::ServerCertificate`, and `AWS::IAM::VirtualMFADevice`.
[AWS::IAM::OIDCProvider](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-oidcprovider.html)
Use the `AWS::IAM::OIDCProvider` resource to create an IAM entity to describe an identity provider (IdP) that supports OpenID Connect (OIDC).
[AWS::IAM::SAMLProvider](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-samlprovider.html)
Use the `AWS::IAM::SAMLProvider` resource to create an IAM resource that describes an identity provider (IdP) that supports SAML 2.0.
[AWS::IAM::ServerCertificate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-servercertificate.html)
Use the `AWS::IAM::ServerCertificate` resource to retrieve information about the specified server certificate stored in IAM.
[AWS::IAM::VirtualMFADevice](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-virtualmfadevice.html)
Use the `AWS::IAM::VirtualMFADevice` resource to create a new virtual MFA device for the AWS account. | February 25, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::SageMaker::Image, AWS::SageMaker::ImageVersion.
[AWS::SageMaker::Image](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-image.html)
Use the `AWS::SageMaker::Image` resource to create a new Image in Amazon SageMaker.
[AWS::SageMaker::ImageVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-imageversion.html)
Use the `AWS::SageMaker::ImageVersion` resource to create a new ImageVersion in Amazon SageMaker. | February 25, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::EKS::Addon`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-addon.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-addon.html)
Use the `AWS::EKS::Addon` resource to create an Amazon EKS add-on. | February 25, 2021 |
| [New attributes](aws-template-resource-type-ref.md) | The following parameters were added for 10DLC support: EntityId, TemplateId, OriginationNumber.
[AWS::Pinpoint::Campaign CampaignSmsMessage](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pinpoint-campaign-campaignsmsmessage.html)
Specifies the content and settings for an SMS message that's sent to recipients of a campaign. | February 24, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::DynamoDB::Table
[AWS::DynamoDB::Table](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dynamodb-table.html)
Use the `ContributorInsightsSpecification` property to enable or disable CloudWatch Contributor Insights on a table or global secondary index. | February 22, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CodeCommit::Repository Code
[AWS::CodeCommit::Repository Code](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-codecommit-repository-code.html)
The behavior of the `BranchName` property on update has changed to be consistent with all other aspects of `AWS:CodeCommit:Repository Code`. All properties of `AWS:CodeCommit:Repository Code` are ignored on update, as they only apply to initial resource creation. | February 19, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::AppMesh::VirtualNode and AWS::AppMesh::VirtualGateway
[AWS::AppMesh::VirtualNode](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appmesh-virtualnode.html)
Use the `ClientTlsCertificate` property to represent the client's certificate.
Use the `SubjectAlternativeNames` property to represent the subject alternative names secured by the certificate.
Use the `TlsValidationContextSdsTrust` property to represent a Transport Layer Security (TLS) Secret Discovery Service validation context trust.
Use the `ListenerTlsValidationContextTrust` property to represent a listener's Transport Layer Security (TLS) validation context trust.
Use the `SubjectAlternativeNameMatchers` property to represent the methods by which a subject alternative name on a peer Transport Layer Security (TLS) certificate can be matched.
Use the `ListenerTlsSdsCertificate` property to represent the listener's Secret Discovery Service certificate.
Use the `ListenerTlsValidationContext` property to represent a listener's Transport Layer Security (TLS) validation context.
[AWS::AppMesh::VirtualGateway](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appmesh-virtualgateway.html)
Use the `VirtualGatewayListenerTlsValidationContextTrust` property to specify validation context trust.
Use the `VirtualGatewayTlsValidationContextSdsTrust ` property to represent a virtual gateway's listener's Transport Layer Security (TLS) Secret Discovery Service validation context trust.
Use the `SubjectAlternativeNames` property represents the subject alternative names secured by the certificate.
Use the `VirtualGatewayListenerTlsSdsCertificate` property to represent the virtual gateway's listener's Secret Discovery Service certificate.
Use the `VirtualGatewayClientTlsCertificate` property to represent the virtual gateway's client's Transport Layer Security (TLS) certificate.
Use the `VirtualGatewayListenerTlsValidationContext` property to represent a virtual gateway's listener's Transport Layer Security (TLS) validation context.
Use the `SubjectAlternativeNameMatchers` property to represent the methods by which a subject alternative name on a peer Transport Layer Security (TLS) certificate can be matched. | February 18, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IoTWireless::ServiceProfile
[AWS::IoTWireless::ServiceProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotwireless-serviceprofile.html)
Use the attributes of `LoRaWANGetServiceProfileInfo` with `LoRaWANServiceProfile` instead as `ReadOnly` properties that you can return using `Fn::GetAtt`. | February 18, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::Kendra::DataSource, AWS::Kendra::Index.
[AWS::Kendra::DataSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kendra-datasource.html)
Use the `ConfluenceConfiguration` property of the resource to specify configuration information for indexing a Confluence data source.
[AWS::Kendra::DataSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kendra-datasource.html)
Use the `GoogleDriveConfiguration` property of the resource to specify configuration information for indexing a Google Drive data source.
[AWS::Kendra::Index](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kendra-index.html)
Use the `UserContextPolicy` and `UserTokenConfiguration` properties of the resource to specify how Amazon Kendra uses user tokens for access to the index. | February 18, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FSx::FileSystem
[AWS::FSx::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html)
In the [WindowsConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-windowsconfiguration.html) property type, use `Aliases` to specify one or more DNS alias names that you want to associate with the Amazon FSx file system. | February 18, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::DataBrew::Job JobSample.
[AWS::DataBrew::Job JobSample](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-databrew-job.html#cfn-databrew-job-jobsample)
Use the `JobSample` property to define the sample configuration for profile jobs. | February 18, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IoTAnalytics::Dataset.
[ AWS::IoTAnalytics::Dataset](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotanalytics-dataset.html)
Added the following properties: `LateDataRule` and `LateDataRuleConfiguration`.
You can use these properties to specify a late data rule for your dataset. The late data rule enables AWS IoT Analytics to send notifications through Amazon CloudWatch when late data arrives.
For more information, see [Getting late data notifications](https://docs.aws.amazon.com/iotanalytics/latest/userguide/late-data-notification.html) in the *AWS IoT Analytics User Guide*. | February 18, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::EC2::TransitGatewayMulticastDomain, AWS::EC2::TransitGatewayMulticastDomainAssociation, AWS::EC2::TransitGatewayMulticastGroupMembers and AWS::EC2::TransitGatewayMulticastGroupSource.
[AWS::EC2::TransitGatewayMulticastDomain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewaymulticastdomain.html)
Use the `TransitGatewayMulticastDomain` resource to create a transit gateway multicast domain.
[AWS::EC2::TransitGatewayMulticastDomainAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewaymulticastdomainassociation.html)
Use the `TransitGatewayMulticastDomainAssociation` resource to associate the specified subnets and transit gateway attachments with the specified transit gateway multicast domain.
[AWS::EC2::TransitGatewayMulticastGroupMember](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewaymulticastgroupmember.html)
Use the `TransitGatewayMulticastGroupMembers` resource to register members (network interfaces) with the transit gateway multicast group.
[AWS::EC2::TransitGatewayMulticastGroupSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgatewaymulticastgroupsource.html)
Use the `TransitGatewayMulticastGroupSource` resource to register sources (network interfaces) with the specified transit gateway multicast group. | February 12, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::IoTWireless::Destination, AWS::IoTWireless::DeviceProfile, AWS::IoTWireless::ServiceProfile, AWS::IoTWireless::WirelessDevice, and AWS::IoTWireless::WirelessGateway.
[AWS::IoTWireless::Destination](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotwireless-destination.html)
Use the `ExpressionType` property of the resource to specify whether to use a new value `MqttTopic` or to use `RuleName`. In addition, the property descriptions now list any maximum values, minimum values, and patterns.
[AWS::IoTWireless::DeviceProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotwireless-deviceprofile.html)
Use the new `LoRaWAN` property which is a renaming of the `LoRaWANDeviceProfile` property. The property type has not changed from `LoRaWANDeviceProfile`. In addition, the property descriptions now list any maximum values, minimum values, and patterns.
[AWS::IoTWireless::ServiceProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotwireless-serviceprofile.html)
Use the new `LoRaWAN` property which is a renaming of the `LoRaWANServiceProfile` property. The property type has not changed from `LoRaWANServiceProfile`. In addition, the property descriptions now list any maximum values, minimum values, and patterns.
[AWS::IoTWireless::WirelessDevice](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotwireless-wirelessdevice.html)
Use the new `LoRaWAN` property which is a renaming of the `LoRaWANDevice` property. The property type has not changed from `LoRaWANDevice`. In addition, the property descriptions now list any maximum values, minimum values, and patterns.
[AWS::IoTWireless::WirelessGateway](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotwireless-wirelessgateway.html)
Use the new `LoRaWAN` property which is a renaming of the `LoRaWANGateway` property. The property type has not changed from `LoRaWANGateway`. In addition, the property descriptions now list any maximum values, minimum values, and patterns. | February 11, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::DMS::Endpoint`.
[AWS::DMS::Endpoint.MongoDbSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dms-endpoint-mongodbsettings.html)
Added `SecretsManager` attributes to `MongoDbSettings`.
[AWS::DMS::Endpoint.MySqlSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dms-endpoint-mysqlsettings.html)
Added `SecretsManager` attributes to `MySqlSettings`.
[AWS::DMS::Endpoint.RedshiftSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dms-endpoint-redshiftsettings.html)
Added `SecretsManager` attributes to `RedshiftSettings`.
[AWS::DMS::Endpoint.SybaseSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dms-endpoint-sybasesettings.html)
Added `SecretsManager` attributes to `SybaseSettings`.
[AWS::DMS::Endpoint.PostgreSqlSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dms-endpoint-postgresqlsettings.html)
Added `SecretsManager` attributes to `PostgreSqlSettings`.
[AWS::DMS::Endpoint.MicrosoftSqlServerSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dms-endpoint-microsoftsqlserversettings.html)
Added `SecretsManager` attributes to `MicorsoftSqlServerSettings`.
[AWS::DMS::Endpoint.IbmDb2Settings](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dms-endpoint-ibmdb2settings.html)
Added `SecretsManager` attributes to `IbmDb2Settings`.
[AWS::DMS::Endpoint.DocDbSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dms-endpoint-docdbsettings.html)
Added `SecretsManager` attributes to `DocDbSettings`.
[AWS::DMS::Endpoint.OracleSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dms-endpoint-oraclesettings.html)
Added `SecretsManager` attributes to `OracleSettings`. | February 11, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::GroundStation::Config.
[AWS::GroundStation::Config S3RecordingConfig CloudFormation property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-groundstation-config-s3recordingconfig.html)
The `S3RecordingConfig` property sets the information for a S3 recording config object. | February 11, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::CloudFormation::ResourceDefaultVersion` and `AWS::CloudFormation::ResourceVersion`.
[AWS::CloudFormation::ResourceDefaultVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-resourcedefaultversion.html)
Use the `AWS::CloudFormation::ResourceDefaultVersion` resource to specify the default resource version to be used in CloudFormation operations.
[AWS::CloudFormation::ResourceVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-resourceversion.html)
Use the `AWS::CloudFormation::ResourceVersion` resource to specify a resource version with the CloudFormation service, making it available for use in CloudFormation operations. | February 11, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::SageMaker::App, AWS::SageMaker::AppImageConfig, AWS::SageMaker::Domain, AWS::SageMaker::UserProfile.
[AWS::SageMaker::App](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-app.html)
Use the `AWS::SageMaker::App` resource to create a running app for a user profile in SageMaker Studio.
[AWS::SageMaker::AppImageConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-appimageconfig.html)
Use the `AWS::SageMaker::AppImageConfig` resource to create a configuration for running a SageMaker image as a KernelGateway app in SageMaker Studio.
[AWS::SageMaker::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-domain.html)
Use the `AWS::SageMaker::Domain` resource to create a Domain used by SageMaker Studio.
[AWS::SageMaker::UserProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-userprofile.html)
Use the `AWS::SageMaker::UserProfile` resource to create a user profile used by SageMaker Studio. | February 11, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::ServiceCatalog::ServiceAction and AWS::ServiceCatalog::ServiceActionAssociation.
[ AWS::ServiceCatalog::ServiceAction](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-serviceaction.html)
Use this self-service action feature to create CloudFormation templates that create Service Actions.
[ AWS::ServiceCatalog::ServiceActionAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-serviceactionassociation.html)
Use this self-service action association feature to create AWS CloudFormation templates that create Service Actions. | February 11, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IoTAnalytics::Datastore.
[ AWS::IoTAnalytics::Datastore](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotanalytics-datastore.html)
Added the following properties: `Column`, `FileFormatConfiguration`, `JsonConfiguration`, `ParquetConfiguration`, and `SchemaDefinition`.
You can use these properties to specify JSON or Parquet file format for your data store.
For more information, see [File formats](https://docs.aws.amazon.com/iotanalytics/latest/userguide/iotanalytics-schema.html) in the *AWS IoT Analytics User Guide*. | February 5, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated:
[AWS::ECR::ReplicationConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-replicationconfiguration.html)
Use the `ReplicationConfiguration` property to create or update the replication configuration for a private repository. | February 4, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::IoTWireless::DeviceProfile, AWS::IoTWireless::ServiceProfile, AWS::IoTWireless::WirelessDevice, and AWS::IoTWireless::WirelessGateway.
[AWS::IoTWireless::DeviceProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotwireless-deviceprofile.html)
Use the `DeviceProfile` resource to specify a device profile for a wireless device to use.
[AWS::IoTWireless::ServiceProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotwireless-serviceprofile.html)
Use the `ServiceProfile` resource to specify a service profile for a wireless device to use.
[AWS::IoTWireless::WirelessDevice](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotwireless-wirelessdevice.html)
Use the `WirelessDevice` resource to specify a wireless device in an AWS IoT Core for LoRaWAN solution.
[AWS::IoTWireless::WirelessGateway](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotwireless-wirelessgateway.html)
Use the `WirelessGateway` resource to specify a wireless gateway in an AWS IoT Core for LoRaWAN solution. | February 4, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::Cassandra::Keyspace` and `AWS::Cassandra::Table`.
[AWS::Cassandra::Keyspace.Tags](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cassandra-keyspace.html)
Use the `AWS::Cassandra::Keyspace.Tags` property to add tags to new or existing keyspaces in Amazon Keyspaces (for Apache Cassandra).
[AWS::Cassandra::Table.Tags](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cassandra-table.html)
Use the `AWS::Cassandra::Table.Tags` property to create and add tags to new or existing tables in Amazon Keyspaces (for Apache Cassandra).
[AWS::Cassandra::Table.PointInTimeRecoveryEnabled](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cassandra-table.html)
Use the `AWS::Cassandra::Table.PointInTimeRecoveryEnabled` property to enable point-in-time recovery in Amazon Keyspaces (for Apache Cassandra). | February 4, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::ElastiCache::GlobalReplicationGroup.`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-globalreplicationgroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-globalreplicationgroup.html)
Consists of a primary cluster that accepts writes and an associated secondary cluster that resides in a different Region. The secondary cluster accepts only reads. The primary cluster automatically replicates updates to the secondary cluster. | February 4, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::DataBrew::Job.
[AWS::DataBrew::Job](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-databrew-job.html)
Use the `CsvOutputOptions` property to define how DataBrew will write a CSV file.
Use the `OutputFormatOptions` property to define the structure of CSV job output. | February 4, 2021 |
| [New resource](aws-template-resource-type-ref.md) | Added the following resource: AWS::ImageBuilder::ContainerRecipe.
[AWS::ImageBuilder::ContainerRecipe](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-containerrecipe.html)
Use the `AWS::ImageBuilder::ContainerRecipe` resource to create a container recipe in the Image Builder service. | February 4, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::ApiGatewayV2::Stage`.
[AWS::ApiGatewayV2::Stage](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-stage.html)
Added the attribute `AccessPolicyId` for internal use only. | January 28, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::MediaConnect::FlowVpcInterface`.
[AWS::MediaConnect::FlowVpcInterface](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowvpcinterface.html)
Use the `FlowArn` property to specify the ARN of the flow.
Use the `Name` property to specify the name of the VPC Interface. | January 21, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ACMPCA::Certificate.
[AWS::ACMPCA::Certificate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-acmpca-certificate.html)
Use the `ApiPassthrough` property to include parameters in certificates during issuance.
Use the `ValidityNotBefore` property to customize the start of certificate validity. | January 21, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::SageMaker::Device, AWS::SageMaker::DeviceFleet, and AWS::SageMaker::Model.
[AWS::SageMaker::Device](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-device.html)
Use the `DeviceFleetName` property to get the name of the fleet the device belongs to.
Use the `Device` property to make the edge device you want to create.
Use the `Tags` property to get the tags registered to a specific device.
Use the `Device.Device` property/resource to get information about a particular device.
Use the `Device.Device.Description` property/resource to get a description of the device.
Use the `Device.Device.DeviceName` property/resource to get the device name.
Use the `Device.Device.IotThingName` property/resource to get the IoT object name.
[AWS::SageMaker::DeviceFleet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-devicefleet.html)
Use the `DeviceFleet.Description` property to get information about a fleet.
Use the `OutputConfig` property to get the output configuration for the fleet.
Use the `RoleArn` property to get the ARN of the IoT thing.
Use the `Tags` property to get the tags registered to a specific fleet.
Use the `EdgeOutputConfig.KmsKeyId` property/resource to set the KMS key ID.
Use the `EdgeOutputConfig.S3OutputLocation` property/resource to set the S3 bucket URI.
[AWS::SageMaker::Model](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-model.html)
Use the `MultiModelConfiguration` property to specify configuration details for a multi-model endpoint. | January 21, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resource was added: AWS::SageMaker::Project.
[AWS::SageMaker::Project](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-project.html)
Use the `AWS::SageMaker::Project` resource to create a new project in Amazon SageMaker. | January 21, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated with examples: AWS::S3::AccessPoint
[Access Points](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points.html)
Use the `AWS::S3::AccessPoint` resource to specify an S3 access point. | January 20, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The AWS::EMRContainers::VirtualCluster resource was added.
[AWS::EMRContainers::VirtualCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-emrcontainers-virtualcluster.html)
The `AWS::EMRContainers::VirtualCluster` resource specifies a virtual cluster. | January 14, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::QuickSight::DataSet and AWS::QuickSight::DataSource.
[ AWS::QuickSight::DataSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-quicksight-dataset.html)
Use the `AWS::QuickSight::DataSet` resource to create a dataset in Amazon Quick.
[ AWS::QuickSight::DataSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-quicksight-datasource.html)
Use the `AWS::QuickSight::DataSource` resource to create a data source in Amazon Quick. | January 14, 2021 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::QuickSight::Analysis, AWS::QuickSight::Dashboard, AWS::QuickSight::Template, and AWS::QuickSight::Theme.
[ AWS::QuickSight::Analysis](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-quicksight-analysis.html)
Use the `AWS::QuickSight::Analysis` resource to create an analysis in Amazon Quick.
[ AWS::QuickSight::Dashboard](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-quicksight-dashboard.html)
Use the `AWS::QuickSight::Dashboard` resource to create a dashboard from a template in Amazon Quick.
[ AWS::QuickSight::Template](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-quicksight-template.html)
Use the `AWS::QuickSight::Template` resource to create a template from an existing Amazon Quick analysis or template.
[ AWS::QuickSight::Theme](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-quicksight-theme.html)
Use the `AWS::QuickSight::Theme` resource to create a theme in Amazon Quick. | January 14, 2021 |
| [Updates to resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::SSO::InstanceAccessControlAttributeConfiguration`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-instanceaccesscontrolattributeconfiguration.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-instanceaccesscontrolattributeconfiguration.html)
Use the `AWS::SSO::InstanceAccessControlAttributeConfiguration` resource to configure attribute-based access control (ABAC) in IAM Identity Center. | January 7, 2021 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::IoTWireless::Destination, AWS::IoTWireless::DeviceProfile, AWS::IoTWireless::ServiceProfile, AWS::IoTWireless::WirelessDevice, and AWS::IoTWireless::WirelessGateway.
[AWS::IoTWireless::Destination](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotwireless-destination.html)
Use the `Destination` resource to specify a destination for a wireless device to use.
[AWS::IoTWireless::DeviceProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotwireless-deviceprofile.html)
Use the `DeviceProfile` resource to specify a device profile for a wireless device to use.
[AWS::IoTWireless::ServiceProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotwireless-serviceprofile.html)
Use the `ServiceProfile` resource to specify a service profile for a wireless device to use.
[AWS::IoTWireless::WirelessDevice](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotwireless-wirelessdevice.html)
Use the `WirelessDevice` resource to specify a wireless device in an AWS IoT Core for LoRaWAN solution.
[AWS::IoTWireless::WirelessGateway](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotwireless-wirelessgateway.html)
Use the `WirelessGateway` resource to specify a wireless gateway in an AWS IoT Core for LoRaWAN solution. | January 7, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::ApiGatewayV2::Integration`.
[AWS::ApiGatewayV2::Integration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-integration.html)
Use the `AWS::ApiGatewayV2::Integration` resource to configure request and response parameter mapping for an HTTP API. | January 7, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::LaunchTemplate
[AWS::EC2::LaunchTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html)
Use the `Throughput` property to specify the throughput to provision for gp3 volumes. | January 7, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::FMS::Policy.
[AWS::FMS::Policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fms-policy.html)
The `AWS::FMS::Policy` resource now allows you to manage AWS Network Firewall policies. | January 7, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::MediaConnect::Flow`, `AWS::MediaConnect::FlowEntitlement`, `AWS::MediaConnect::FlowOutput`, `AWS::MediaConnect::FlowSource`, and `AWS::MediaConnect::FlowVpcInterface`.
[AWS::MediaConnect::Flow](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flow.html)
Use the `AWS::MediaConnect::Flow` resource to create a connection between one or more video sources and one or more outputs.
[AWS::MediaConnect::FlowEntitlement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowentitlement.html)
Use the `AWS::MediaConnect::FlowEntitlement` resource to grant permission to another AWS account to allow access to the content in a specific AWS Elemental MediaConnect flow.
[AWS::MediaConnect::FlowOutput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowoutput.html)
Use the `AWS::MediaConnect::FlowOutput` resource to define the destination address, protocol, and port that you want MediaConnect to send the ingested video to.
[AWS::MediaConnect::FlowSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowsource.html)
Use the `AWS::MediaConnect::FlowSource` resource to define where the external video content comes from.
[AWS::MediaConnect::FlowVpcInterface](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediaconnect-flowvpcinterface.html)
Use the `AWS::MediaConnect::FlowVpcInterface` resource to create a connection between your MediaConnect flow and a virtual private cloud (VPC) that you created using the Amazon Virtual Private Cloud service. | January 7, 2021 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::Route53::DNSSEC and AWS::Route53::KeySigningKey.
[AWS::Route53::DNSSEC](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53-dnssec.html)
Use the `AWS::Route53::DNSSEC` resource to enable DNSSEC signing for a hosted zone.
[AWS::Route53::KeySigningKey](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53-keysigningkey.html)
Use the `AWS::Route53::KeySigningKey` resource to specify configuration settings for a key-signing key (KSK) that's associated with a hosted zone. | January 7, 2021 |
| [New Resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::DataSync::Agent, AWS::DataSync::LocationEFS, AWS::DataSync::LocationFSxWindows, AWS::DataSync::LocationNFS, AWS::DataSync::LocationObjectStorage, AWS::DataSync::LocationS3, AWS::DataSync::LocationSMB, and AWS::DataSync::Task.
[AWS::DataSync::Agent](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-agent.html)
Use the `AWS::DataSync::Agent` resource to specify an AWS DataSync agent.
[AWS::DataSync::LocationEFS](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationefs.html)
Use the `AWS::DataSync::LocationEFS` resource to specify a location for an Amazon EFS location.
[AWS::DataSync::LocationFSxWindows](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationfsxwindows.html)
Use the `AWS::DataSync::LocationFSxWindows` resource to specify an Amazon FSx for Windows Server file system.
[AWS::DataSync::LocationNFS](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationnfs.html)
Use the `AWS::DataSync::LocationNFS` resource to specify a file system on a Network File System (NFS) server.
[AWS::DataSync::LocationObjectStorage](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationobjectstorage.html)
Use the `AWS::DataSync::LocationObjectStorage` resource to specify an endpoint for a self-managed object storage bucket.
[AWS::DataSync::LocationS3](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locations3.html)
Use the `AWS::DataSync::LocationS3` resource to specify an endpoint for an Amazon S3 bucket.
[AWS::DataSync::LocationSMB](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-locationsmb.html)
Use the `AWS::DataSync::LocationSMB` resource to specify a Server Message Block (SMB) location.
[AWS::DataSync::Task](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-task.html)
Use the `AWS::DataSync::Task` resource to specify a task. | January 7, 2021 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Glue::Table
[AWS::Glue::Table](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-table.html)
Use the `SchemaReference` property to specify an object that references a schema stored in the AWS Glue Schema Registry.
Use the `TableInput.TargetTable` property to specify a `TableIdentifier` structure that describes a target table for resource linking.
Use the `Table.TableIdentifier` property to specify a target table for resource linking. | December 22, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Glue::Partition
[AWS::Glue::Partition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-partition.html)
Use the `SchemaReference` property to specify an object that references a schema stored in the AWS Glue Schema Registry. | December 22, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Glue::Database
[AWS::Glue::Database](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-database.html)
Use the `DatabaseInput.TargetDatabase` property to specify a `TableIdentifier` structure that describes a target table for resource linking.
Use the `Database.DatabaseIdentifier` property to specify a target database for resource linking. | December 22, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Glue::MLTransform
[AWS::Glue::MLTransform](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-mltransform.html)
Use the `TransformEncryption` property to specify the encryption-at-rest settings of the transform that apply to accessing user data.
Use the `MLUserDataEncryption` property to specify the encryption mode and customer-provided KMS key ID. | December 22, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::MWAA::Environment
[AWS::MWAA::Environment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html)
Use the `AWS::MWAA::Environment` resource to create an Amazon Managed Workflows for Apache Airflow (MWAA) environment. | December 21, 2020 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::EC2::Instance, AWS::EC2::SpotFleet, AWS::EC2::Volume.
[AWS::EC2::Instance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html)
Use the `EnclaveOptions` property to indicate whether the instance is enabled for AWS Nitro Enclaves.
[AWS::EC2::SpotFleet SpotCapacityRebalance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-spotfleet-spotcapacityrebalance.html)
Use the `SpotCapacityRebalance` property when Amazon EC2 emits a signal that your Spot Instance is at an elevated risk of being interrupted.
[AWS::EC2::SpotFleet SpotMaintenanceStrategies](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-spotfleet-spotmaintenancestrategies.html)
Use the `SpotMaintenanceStrategies` property to manage your Spot Instances that are at an elevated risk of being interrupted. .
[AWS::EC2::Volume](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-ebs-volume.html)
Use the `Throughput` property to specify the throughput that the volume supports, in MiB/s. | December 18, 2020 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::ECS::Service.
[AWS::ECS::Service](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-service.html)
Use the `DeploymentCircuitBreaker` property to turn on the deployment circuit breaker for a service. | December 18, 2020 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::ElastiCache::User``AWS::ElastiCache::UserGroup` and `AWS::ElastiCache::ReplicationGroup.`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-user.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-user.html)
For Valkey 7.2 and onwards, and Redis OSS engine version 6.0 onwards: Creates a user. For more information, see [Using Role Based Access Control (RBAC)](https://docs.aws.amazon.com/AmazonElastiCache/latest/dg/Clusters.RBAC.html)
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-usergroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-usergroup.html)
For Valkey 7.2 and onwards, and Redis OSS engine version 6.0 onwards: Creates a user group. For more information, see [Using Role Based Access Control (RBAC)](https://docs.aws.amazon.com/AmazonElastiCache/latest/dg/Clusters.RBAC.html)
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-replicationgroup.html#cfn-elasticache-replicationgroup-usergroupids](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-replicationgroup.html#cfn-elasticache-replicationgroup-usergroupids)
Use the `UserGroupIds` property to associate a list of user groups with the replication group. | December 18, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: [AWS::Batch::JobDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobdefinition.html)
[AWS::Batch::JobDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobdefinition.html)
Use the `PlatformCapabilities` property to specify whether the job requires `EC2` or `FARGATE` resources.
Use the `PropagateTags` property to specify whether to propagate tags from the job definition to the corresponding Amazon ECS task.
In the [ContainerProperties](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-containerproperties.html) property type:
+ Use the `FargatePlatformConfiguration` property to specify the Fargate platform version to use for jobs running on Fargate resources.
+ Use the `NetworkConfiguration` property to specify the network configuration for jobs running on Fargate resources.
[AWS::Batch::JobDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobdefinition.html)
In the [ContainerProperties](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-containerproperties.html) property type, use the [FargatePlatformConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-containerproperties.html#cfn-batch-jobdefinition-containerproperties-fargateplatformconfiguration) property to define the version of the Fargate platform used for the job. | December 18, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FSx::FileSystem
[AWS::FSx::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html)
The `StorageCapacity` property was updated to `"Required": conditional`.
In the [WindowsConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-windowsconfiguration.html) property type, the `ThroughputCapacity` property was updated to `"Required": true`. | December 18, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::S3::Bucket
[SourceSelectionCriteria](https://docs.aws.amazon.com/AmazonS3/latest/API/API_SourceSelectionCriteria.html)
Use the `ReplicaModifications` property in `AWS::S3::Bucket SourceSelectionCriteria` to filter modifications on replicas.
[Amazon S3 Bucket Keys](https://docs.aws.amazon.com/AmazonS3/latest/dev/bucket-key.html)
Use the `BucketKeyEnabled` property to specify an S3 Bucket Key with default encryption using AWS Key Management Service. | December 18, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::CloudFormation::ModuleDefaultVersion` and `AWS::CloudFormation::ModuleVersion`.
[AWS::CloudFormation::ModuleDefaultVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-moduledefaultversion.html)
Use the `AWS::CloudFormation::ModuleDefaultVersion` resource to specify the default version of a module, which will be used in CloudFormation operations for this account and Region.
[AWS::CloudFormation::ModuleVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-moduleversion.html)
Use the `AWS::CloudFormation::ModuleVersion` resource to register the specified version of the module with the CloudFormation service, making it available for use in CloudFormation templates in this account and Region. | December 18, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::DevOpsGuru::NotificationChannel`, `AWS::DevOpsGuru::ResourceCollection`
[AWS::DevOpsGuru::NotificationChannel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-devopsguru-notificationchannel.html)
Use the `AWS::DevOpsGuru::NotificationChannel` resource to add a notification channel to Amazon DevOps Guru. The notification channel is used to notify you about important events. For example, the creation of an insight or a change in an insight's severity.
[AWS::DevOpsGuru::ResourceCollection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-devopsguru-resourcecollection.html)
Use the `AWS::DevOpsGuru::ResourceCollection` resource to specify a collection of resources in your account that you want Amazon DevOps Guru to analyze. The specified resources are analyzed to generate insights that contain recommendations, related metrics, and operational data to help you improve the performance of your operational solutions. | December 18, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::EC2::NetworkInsightsPath and AWS::EC2::NetworkInsightsAnalysis.
[AWS::EC2::NetworkInsightsPath](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkinsightspath.html)
Use the `NetworkInsightsPath` property to specify a path to analyze for reachability.
[AWS::EC2::NetworkInsightsAnalysis](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkinsightsanalysis.html)
Use the `NetworkInsightsAnalysis` property to specify a network insights analysis. | December 18, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added:
[AWS::ECR::PublicRepository](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-publicrepository.html)
Use the `PublicRepository` property to create or update a public repository. | December 18, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::LicenseManager::Grant and AWS::LicenseManager::License.
[AWS::LicenseManager::Grant](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-licensemanager-grant.html)
Use the `AWS::LicenseManager::Grant` resource to specify a grant in the AWS License Manager service.
[AWS::LicenseManager::License](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-licensemanager-license.html)
Use the `AWS::LicenseManager::License` resource to specify a granted license in the AWS License Manager service. | December 18, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::SageMaker::DataQualityJobDefinition, AWS::SageMaker::Device, AWS::SageMaker::DeviceFleet, AWS::SageMaker::ModelBiasJobDefinition, AWS::SageMaker::ModelExplainabilityJobDefinition, AWS::SageMaker::ModelQualityJobDefinition, AWS::SageMaker::ModelPackageGroup, and AWS::SageMaker::Pipeline.
[AWS::SageMaker::DataQualityJobDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-dataqualityjobdefinition.html)
Use the `AWS::SageMaker::DataQualityJobDefinition` resource to create a monitoring job that monitors drift in data quality.
[AWS::SageMaker::Device](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-device.html)
Use the `AWS::SageMaker::Device` resource to register your Devices against an existing SageMaker Edge Manager DeviceFleet. Each device must be listed individually in the CFN specification.
[AWS::SageMaker::DeviceFleet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-devicefleet.html)
Use the `AWS::SageMaker::DeviceFleet` resource to create a DeviceFleet that manages your SageMaker Edge Manager Devices. You must register your devices against the `DeviceFleet` separately.
[AWS::SageMaker::ModelBiasJobDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-modelbiasjobdefinition.html)
Use the `AWS::SageMaker::ModelBiasJobDefinition` resource to create a monitoring job that monitors potential bias in your model.
[AWS::SageMaker::ModelExplainabilityJobDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-modelexplainabilityjobdefinition.html)
Use the `AWS::SageMaker::ModelExplainabilityJobDefinition` resource to create a monitoring job that monitors feature attribution drift in your model.
[AWS::SageMaker::ModelQualityJobDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-modelqualityjobdefinition.html)
Use the `AWS::SageMaker::ModelQualityJobDefinition` resource to create a monitoring job that monitors quality drift in your model.
[AWS::SageMaker::ModelPackageGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-modelpackagegroup.html)
Use the `AWS::SageMaker::ModelPackageGroup` resource to create a group of related models.
[AWS::SageMaker::Pipeline](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-pipeline.html)
Use the `AWS::SageMaker::Pipeline` resource to specify shell scripts that run when you create and/or start a SageMaker Pipeline. For information about SageMaker Pipelines, see [SageMaker Pipelines](https://docs.aws.amazon.com/sagemaker/latest/dg/pipelines.html) in the *Amazon SageMaker Developer Guide*. | December 18, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::AuditManager::Assessment`
[AWS::AuditManager::Assessment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-auditmanager-assessment.html)
Use the `AWS::AuditManager::Assessment` resource to specify a new assessment in AWS Audit Manager. | December 18, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::SSO::InstanceAccessControlAttributeConfiguration`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-instanceaccesscontrolattributeconfiguration.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-instanceaccesscontrolattributeconfiguration.html)
Use the `AWS::SSO::InstanceAccessControlAttributeConfiguration` resource to configure attribute-based access control (ABAC) in IAM Identity Center. | December 18, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::GreengrassV2::ComponentVersion.
[AWS::GreengrassV2::ComponentVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-greengrassv2-componentversion.html)
Use the `AWS::GreengrassV2::ComponentVersion` resource to create a new component version in AWS IoT Greengrass. | December 18, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::IoTSitewise::AccessPolicy, AWS::IoTSiteWise::Dasboard, AWS::IoTSiteWise::Portal, and AWS::IoTSiteWise::Project.
[AWS::IoTSiteWise::AccessPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-accesspolicy.html)
Use the `AWS::IoTSiteWise::AccessPolicy` resource to create a new access policy in AWS IoT SiteWise.
[AWS::IoTSiteWise::Dasboard](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-dashboard.html)
Use the `AWS::IoTSiteWise::Dasboard` resource to create a new dashboard in AWS IoT SiteWise.
[AWS::IoTSiteWise::Portal](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-portal.html)
Use the `AWS::IoTSiteWise::Portal` resource to create a new portal in AWS IoT SiteWise.
[AWS::IoTSiteWise::Project](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-project.html)
Use the `AWS::IoTSiteWise::Project` resource to create a new project in AWS IoT SiteWise. | December 18, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::Lambda::CreateEventSourceMapping and AWS::Lambda::Function.
[AWS::Lambda::EventSourceMapping](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventsourcemapping.html#cfn-lambda-eventsourcemapping)
Use the `TumblingWindowInSeconds` property to set the window size for SQS event sources.
Lambda now supports a Self-Managed Apache Kafka cluster as an event source.
[AWS::Lambda::Function](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html)
Lambda now supports functions deployed as container images. Use the [ImageUri](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-code.html#cfn-lambda-function-code-imageuri) property to specify the container image location.
In the [Code](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-code.html) property type, new property `ImageUri` specifies the image to associate with your Lambda function. | December 18, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated to support specifying a capacity type for a node group: `AWS::EKS::Nodegroup`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-nodegroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-nodegroup.html)
Use the `CapacityType` property to specify whether you want to use Spot or On-Demand instance types for your node group. | December 17, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::GameLift::MatchmakingConfiguration.
[AWS::GameLift::MatchmakingConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gamelift-matchmakingconfiguration.html)
Use the `FlexMatchMode` property to specify that the matchmaker is for a standalone FlexMatch solution or for matchmaking with GameLift managed hosting. | November 24, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Lambda::CreateEventSourceMapping.
[AWS::Lambda::EventSourceMapping.BatchSize](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventsourcemapping.html#cfn-lambda-eventsourcemapping-batchsize)
The `BatchSize` has been increased for standard SQS queues, and allows for the use of a `MaximumBatchingWindowInSeconds`. | November 24, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Lambda::CodeSigningConfig.
[AWS::Lambda::CodeSigningConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-codesigningconfig.html)
Use the `CodeSigningConfig` resource to specify code-signing capability to your Lambda functions. | November 23, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudFront::Distribution.
[AWS::CloudFront::Distribution](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-distribution.html)
In the [CacheBehavior](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-cachebehavior.html) and [DefaultCacheBehavior](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-defaultcachebehavior.html) property types, use the `TrustedKeyGroups` property to specify a list of the key groups that CloudFront can use to verify signed URLs or signed cookies.
For more information, see [Serving private content](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html) in the *Amazon CloudFront Developer Guide*. | November 19, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::EC2::LaunchTemplate and AWS::EC2::ClientVpnEndpoint.
[AWS::EC2::ClientVpnEndpoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-clientvpnendpoint.html)
Use the `ClientConnectOptions` property to indicate whether client connect options are used for Client VPN.
[AWS::EC2::LaunchTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html)
Use the `AssociateCarrierIpAddress` property to indicates whether to associate a Carrier IP address with eth0 for a new network interface.
[AWS::EC2::LaunchTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html)
Use the `EnclaveOptions` property to indicate whether the instance is enabled for AWS Nitro Enclaves.
[AWS::EC2::LaunchTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html)
Use the `NetworkCardIndex` property to specify the network card index. | November 19, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Events::EventBusPolicy.
[AWS::Events::EventBusPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-eventbuspolicy.html)
Added the `Statement` property. Use the `Statement` property to add a statement to the policy attached to an event bus. | November 19, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::KMS::Key.
[AWS::KMS::Key](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html)
Added support for asymmetric KMS keys, including the `KeySpec` property and the SIGN\$1VERIFY value for the `KeyUsage` property. | November 19, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::CloudFront::KeyGroup and AWS::CloudFront::PublicKey.
[AWS::CloudFront::KeyGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-keygroup.html)
Use the `AWS::CloudFront::KeyGroup` resource to create a key group in Amazon CloudFront to use with CloudFront signed URLs and signed cookies.
For more information, see [Serving private content](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html) in the *Amazon CloudFront Developer Guide*.
[AWS::CloudFront::PublicKey](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-publickey.html)
Use the `AWS::CloudFront::PublicKey` resource to create a public key in Amazon CloudFront to use with CloudFront signed URLs and signed cookies, or with field-level encryption.
For more information, see [Serving private content](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html) or [Using field-level encryption to help protect sensitive data](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level-encryption.html) in the *Amazon CloudFront Developer Guide*. | November 19, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Glue::Registry
[AWS::Glue::Registry](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-registry.html)
Use the `AWS::Glue::Registry` resource to manage registries in the AWS Glue Schema Registry. | November 19, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Glue::Schema
[AWS::Glue::Schema](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-schema.html)
Use the `AWS::Glue::Schema` resource to manage schemas in the AWS Glue Schema Registry. | November 19, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Glue::SchemaVersion
[AWS::Glue::SchemaVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-schemaversion.html)
Use the `AWS::Glue::SchemaVersion` resource to manage schema versions in the AWS Glue Schema Registry. | November 19, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Glue::SchemaVersionMetadata
[AWS::Glue::SchemaVersionMetadata](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-schemaversionmetadata.html)
Use the `AWS::Glue::SchemaVersionMetadata` resource to manage schema version metadata in the AWS Glue Schema Registry. | November 19, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource is new: AWS::IoT::TopicRuleDestination
[AWS::IoT::TopicRuleDestination](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-topicruledestination.html)
Use the `AWS::IoT::TopicRuleDestination` to specify a topic rule destination. | November 19, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::LoggingConfiguration, and AWS::NetworkFirewall::RuleGroup
[AWS::NetworkFirewall::Firewall](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-firewall.html)
Use the `AWS::NetworkFirewall::Firewall` resource to specify stateful, managed, network firewall and intrusion detection and prevention for your VPCs in Amazon VPC.
[AWS::NetworkFirewall::FirewallPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-firewallpolicy.html)
Use the `AWS::NetworkFirewall::FirewallPolicy` resource to specify the stateless and stateful network traffic filtering behavior for your `AWS::NetworkFirewall::Firewall`.
[AWS::NetworkFirewall::LoggingConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-loggingconfiguration.html)
Use the `AWS::NetworkFirewall::LoggingConfiguration` resource to specify the destinations and logging options for an `AWS::NetworkFirewall::Firewall`.
[AWS::NetworkFirewall::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-rulegroup.html)
Use the `AWS::NetworkFirewall::RuleGroup` resource to specify a reusable collection of stateless or stateful network traffic filtering rules for use in your `AWS::NetworkFirewall::FirewallPolicy`. | November 19, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::S3::StorageLens
[S3 Storage Lens](https://docs.aws.amazon.com/AmazonS3/latest/dev/storage_lens.html)
Use the `AWS::S3::StorageLens` resource to create a S3 Storage Lens configuration in the *Amazon Simple Storage Service*. | November 19, 2020 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::AppMesh::VirtualNode and AWS::AppMesh::VirtualGateway
[AWS::AppMesh::VirtualNode](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appmesh-virtualnode.html)
Use the `ConnectionPool` property to specify the type of connection pool for the listener.
Use the `VirtualNodeHttp2ConnectionPool` property to specify an http2 type of connection pool.
Use the `VirtualNodeGrpcConnectionPool` property to specify a grpc type of connection pool.
Use the `VirtualNodeConnectionPool` property to specify the type of virtual node connection pool.
Use the `VirtualNodeHttpConnectionPool` property to specify an http type of connection pool.
Use the `OutlierDetection` property to specify the type of outlier detection for the listener.
Use the `VirtualNodeTcpConnectionPool` property to specify an http2 type of connection pool.
[AWS::AppMesh::VirtualGateway](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appmesh-virtualgateway.html)
Use the `ConnectionPool` property to specify the type of connection pool for the listener.
Use the `VirtualGatewayHttpConnectionPool` property to specify an http type of connection pool.
Use the `VirtualGatewayHttp2ConnectionPool` property to specify an http2 type of connection pool.
Use the `VirtualGatewayConnectionPool` property to specify the type of virtual gateway connection pool.
Use the `VirtualGatewayGrpcConnectionPool` property to specify a grpc type of connection pool. | November 12, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::EC2::Route and AWS::EC2::VPCEndpointService.
[AWS::EC2::Route](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-route.html)
Use the `VpcEndpointId` property to create a route to a Gateway Load Balancer endpoint.
[AWS::EC2::VPCEndpointService](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcendpointservice.html)
Use the `GatewayLoadBalancerArns` property to specify a Gateway Load Balancer for your VPC endpoint service. | November 12, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Kendra::DataSource.
[AWS::Kendra::DataSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kendra-datasource.html)
Use the new `CUSTOM` value to specify the custom data sources. | November 12, 2020 |
| [New resources:](aws-template-resource-type-ref.md) | This is the first release of [AWS Glue DataBrew](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_DataBrew.html). | November 12, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::S3::Bucket
[IntelligentTieringConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/dev/storage-class-intro.html#sc-dynamic-data-access)
Use the `IntelligentTieringConfiguration` property to specify an S3 Intelligent-Tiering configuration.
[OwnershipControls](https://docs.aws.amazon.com/AmazonS3/latest/dev/about-object-ownership.html)
Use the `OwnershipControls` property to specify object ownership on a bucket. | November 9, 2020 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::CodeArtifact::Domain and AWS::CodeArtifact::Repository.
[AWS::CodeArtifact::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codeartifact-domain.html)
The `AWS::CodeArtifact::Domain` resource now supports tags.
[AWS::CodeArtifact::Repository](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codeartifact-repository.html)
The `AWS::CodeArtifact::Repository` resource now supports tags. | November 5, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: [AWS::Batch::JobDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobdefinition.html)
[AWS::Batch::JobDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobdefinition.html)
In the [RetryStrategy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-retrystrategy.html) property type, use the [EvaluateOnExit](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-retrystrategy.html#cfn-batch-jobdefinition-retrystrategy-evaluateonexit) property to specify a set of conditions to be met, and an action to take (`RETRY` or `EXIT`) if all conditions are met. | November 5, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::Route.
[AWS::EC2::Route](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-route.html)
Use the `CarrierGatewayId` property to create a route to a carrier gateway. | November 5, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AutoScaling::AutoScalingGroup.
[AWS::AutoScaling::AutoScalingGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-autoscalinggroup.html)
Use the `CapacityRebalance` property to indicate whether Capacity Rebalancing is enabled. | November 5, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Lambda::EventSourceMapping.
[AWS::Lambda::EventSourceMapping](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventsourcemapping.html)
Use the `Queues` property to specify the Amazon MQ queue to stream to a Lambda function. Use the `Source access configuration` property to specify the Secrets Manager secret that stores your MQ broker credentials. | November 5, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following new resource was added: AWS::Events::Archive.
[AWS::Events::Archive](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-archive.html)
Use the `Archive` resource to create an EventBridge archive to store events in. | November 5, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::IoT::DomainConfiguration.
[AWS::IoT::DomainConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-domainconfiguration.html)
Use the `AWS::IoT::DomainConfiguration` resource to specify a domain configuration in AWS IoT Core. | November 5, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::RDS::GlobalCluster.
[AWS::RDS::GlobalCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-globalcluster.html)
Use the `AWS::RDS::GlobalCluster` resource to create or update an Aurora global database cluster. | November 5, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::AmazonMQ::Broker, AWS::AmazonMQ::Configuration, AWS::AmazonMQ::ConfigurationAssociation
[AWS::AmazonMQ::Broker](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amazonmq-broker.html)
Amazon MQ now supports RabbitMQ broker engine. | November 4, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::GlobalAccelerator::EndpointGroup.
[ AWS::GlobalAccelerator::EndpointGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-globalaccelerator-endpointgroup.html)
Use the `PortOverride` property to override the listener port used for routing traffic to endpoints. | October 29, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::IVS::Channel, AWS::IVS::StreamKey, and AWS::IVS::PlaybackKeyPair
[AWS::IVS::Channel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-channel.html)
Use the `AWS::IVS::Channel` resource to specify an Amazon IVS Channel, which stores configuration information related to your live stream.
[AWS::IVS::StreamKey](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-streamkey.html)
Use the `AWS::IVS::StreamKey` resource to specify an Amazon IVS Stream Key, which creates a stream key for the specified IVS Channel. Use a stream key to initiate a live stream.
[AWS::IVS::PlaybackKeyPair](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ivs-playbackkeypair.html)
Use the `AWS::IVS::PlaybackKeyPair` resource to specify an Amazon IVS PlaybackKeyPair, which is used to sign and validate a playback authorization token for a private channel. | October 29, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::IoTSitewise::Asset, AWS::IoTSiteWise::AssetModel, and AWS::IoTSiteWise::Gateway.
[AWS::IoTSiteWise::Asset](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-asset.html)
Use the `AWS::IoTSiteWise::Asset` resource to create a new asset in AWS IoT SiteWise.
[AWS::IoTSiteWise::AssetModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-assetmodel.html)
Use the `AWS::IoTSiteWise::AssetModel` resource to create a new asset model in AWS IoT SiteWise.
[AWS::IoTSiteWise::Gateway](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-gateway.html)
Use the `AWS::IoTSiteWise::Gateway` resource to create a new gateway in AWS IoT SiteWise. | October 28, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AutoScaling::AutoScalingGroup.
[AWS::AutoScaling::AutoScalingGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-autoscalinggroup.html)
Use the `NewInstancesProtectedFromScaleIn` property to specify whether newly launched instances are protected from termination by Amazon EC2 Auto Scaling when scaling in. | October 26, 2020 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: [AWS::Batch::ComputeEnvironment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-computeenvironment.html), [AWS::Batch::JobDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobdefinition.html), and [AWS::Batch::JobQueue](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobqueue.html).
[AWS::Batch::ComputeEnvironment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-computeenvironment.html)
Use the `Tags` property to specify tags for the compute environment.
[AWS::Batch::JobDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobdefinition.html)
Use the `Tags` property to specify tags for the job definition.
[AWS::Batch::JobQueue](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobqueue.html)
Use the `Tags` property to specify tags for the job queue. | October 22, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AppSync::ApiKey.
[AWS::AppSync::ApiKey](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apikey.html)
Use the `ApiKeyId` property to specify the API key ID. | October 22, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudFront::Distribution.
[AWS::CloudFront::Distribution](https://docs.aws.amazon.com//AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-distribution.html)
In the [Origin](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-origin.html) property type, use the `OriginShield` property to enable CloudFront Origin Shield.
For more information, see [Using Origin Shield](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/origin-shield.html) in the *Amazon CloudFront Developer Guide*. | October 22, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EMR::Cluster.
[AWS::EMR::Cluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticmapreduce-cluster.html)
Use the `LogEncryptionKmsKeyId` property to specify the AWS KMS key used for encrypting log files.
Use the `ManagedScalingPolicy` property to create a managed scaling policy for an Amazon EMR cluster.
Use the `StepConcurrencyLevel` property to specify the number of steps that can be executed concurrently. | October 22, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Events::Rule.
[AWS::Events::Rule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-rule.html)
Added [AWS::Events::Rule DeadLetterConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-rule-deadletterconfig.html)
Added [AWS::Events::Rule RetryPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-rule-retrypolicy.html)
[AWS::Events::Rule Target](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-rule-target.html)
Added the [DeadLetterConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-rule-target.html#cfn-events-rule-target-deadletterconfig) property of the Target property type.
Added the [RetryPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-rule-target.html##cfn-events-rule-target-retrypolicy) property of the Target property type. | October 22, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | Added a new property, `FileFormat`, to the FAQ resource. For more information, see [https://docs.aws.amazon.com/kendra/latest/dg/in-creating-faq.html](https://docs.aws.amazon.com/kendra/latest/dg/in-creating-faq.html) | October 22, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::KinesisFirehose::DeliveryStream.
[AWS::KinesisFirehose::DeliveryStream](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kinesisfirehose-deliverystream.html)
DeliveryStreamEncryptionConfigurationInput property type is now supported for the delivery streams in CloudFormation. | October 22, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Elasticsearch::Domain.
[AWS::Elasticsearch::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticsearch-domain.html)
In the [ElasticsearchClusterConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticsearch-domain-elasticsearchclusterconfig.html) property type:
+ Use the `WarmCount` property to specify the number of warm nodes in the cluster.
+ Use the `WarmEnabled` property to specify whether to enable warm storage for the cluster.
+ Use the `WarmType` property to specify the instance type for the cluster's warm nodes. | October 22, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::MediaPackage::Asset, AWS::MediaPackage::Channel, AWS::MediaPackage::OriginEndpoint, AWS::MediaPackage::PackagingConfiguration, and AWS::MediaPackage::PackagingGroup.
[AWS::MediaPackage::Asset.](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackage-asset.html)
Use the `AWS::MediaPackage::Asset` to specify an asset to ingest VOD content.
[AWS::MediaPackage::Channel.](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackage-channel.html)
Use the `AWS::MediaPackage::Channel` to specify a channel to receive content.
[AWS::MediaPackage::OriginEndpoint.](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackage-originendpoint.html)
Use the `AWS::MediaPackage::OriginEndpoint` to specify an endpoint on an AWS Elemental MediaPackage channel.
[AWS::MediaPackage::PackagingConfiguration.](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackage-packagingconfiguration.html)
Use the `AWS::MediaPackage::PackagingConfiguration` to specify a packaging configuration in a packaging group.
[AWS::MediaPackage::PackagingGroup.](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mediapackage-packaginggroup.html)
Use the `AWS::MediaPackage::PackagingGroup` to specify a packaging group. | October 22, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following updated resource was added: `BlockPublicPolicy`
[AWS::SecretsManager::Resource Policies.BlockPublicPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-secretsmanager-resourcepolicy.html)
Use the `BlockPublicPolicy` when adding resource policies to Secrets Manager. | October 22, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Synthetics::Canary.
[AWS::Synthetics::Canary](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-synthetics-canary.html)
The ArtifactConfig and S3Encryption parameters were added. | October 21, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AmazonMQ::Broker.
[AWS::AmazonMQ::Broker](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amazonmq-broker.html)
Use the `LdapServerMetadata` property to to authenticate and authorize connections to a broker. | October 9, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::CodeArtifact::Domain and AWS::CodeArtifact::Repository.
[AWS::CodeArtifact::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codeartifact-domain.html)
Use the `AWS::CodeArtifact::Domain` resource to create an AWS CodeArtifact domain.
[AWS::CodeArtifact::Repository](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codeartifact-repository.html)
Use the `AWS::CodeArtifact::Repository` resource to create an AWS CodeArtifact repository. | October 8, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::Timestream::Table and AWS::Timestream::Database.
[AWS::Timestream::Table](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-timestream-table.html)
Use the `AWS::Timestream::Table` resource to create a new table in an existing database in Amazon Timestream.
[AWS::Timestream::Database](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-timestream-database.html)
Use the `AWS::Timestream::Database` resource to create a new database in Amazon Timestream. | October 8, 2020 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::ECS::Service.
[AWS::ECS::Service](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-service.html)
Use the `CapacityProviderStrategy` property to specify a custom capacity provider strategy when creating a service. | October 1, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: [AWS::Batch::JobDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobdefinition.html).These property types were added.
[LogConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-containerproperties-logconfiguration.html)
Use the [LogConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-containerproperties-logconfiguration.html) property type to specify the log configuration options to send to a custom log driver for the container.
[Secrets](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-secret.html)
Use the [Secrets](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-secret.html) property type to specify a secret to expose to the container.
[Tmpfs](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-tmpfs.html)
Use the [Tmpfs](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-tmpfs.html) property type to specify the details of a `tmpfs` mount. These property types were updated.
[ContainerProperties](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-containerproperties.html)
These properties were added.
ExecutionRoleArn
Specifies the execution role to be assumed for the job.
LogConfiguration
Specifies the log configuration for a custom log driver for the job.
Secrets
Specifies the secrets provided for the job.
[LinuxParameters](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-containerproperties-linuxparameters.html)
These properties were added.
InitProcessEnabled
Indicates that an init process should be enabled inside the container that forwards signals and reaps processes.
MaxSwap
Specifies the total amount of swap memory (in MiB) a job can use.
SharedMemorySize
Specifies the size (in MiB) of the `/dev/shm` volume.
Swappiness
Specifies the job container's memory swappiness behavior.
Tmpfs
Specifies the details of the job's `tmpfs` mount. | October 1, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudFront::CachePolicy.
[AWS::CloudFront::CachePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-cachepolicy.html)
In the `AWS::CloudFront::CachePolicy` resource, some properties are now required that previously were not required.
In the [AWS::CloudFront::CachePolicy ParametersInCacheKeyAndForwardedToOrigin](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-cachepolicy-parametersincachekeyandforwardedtoorigin.html) property type, use the `EnableAcceptEncodingBrotli` property to enable CloudFront to serve compressed objects to viewers that support the Brotli compression format. For more information, see [Compression support](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-policy-compressed-objects) in the *Amazon CloudFront Developer Guide*. | October 1, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated to support specifying a custom CIDR for Kubernetes service IP address assignment: `AWS::EKS::Cluster`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html)
Use the `KubernetesNetworkConfig` property to specify a Kubernetes network configuration.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-kubernetesnetworkconfig.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-kubernetesnetworkconfig.html)
Use the `ServiceIpv4Cidr` property to specify the CIDR block that you want Kubernetes to assign service IP addresses from. | October 1, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::WorkSpaces::ConnectionAlias`
[AWS::WorkSpaces::ConnectionAlias](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspaces-connectionalias.html)
Use the `AWS::WorkSpaces::ConnectionAlias` resource to specify a connection alias. Connection aliases are used for cross-Region redirection. | October 1, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::ApiGateway::DomainName`.
[AWS::ApiGateway::DomainName](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html)
Use the `AWS::ApiGateway::DomainName` resource to configure mutual TLS authentication for an API. | September 17, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::ApiGatewayV2::DomainName`.
[AWS::ApiGatewayV2::DomainName](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-domainname.html)
Use the `AWS::ApiGatewayV2::DomainName` resource to configure mutual TLS authentication for an API. | September 17, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::ApiGatewayV2::Api`.
[AWS::ApiGatewayV2::Api](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-api.html)
Use the `AWS::ApiGatewayV2::Api` resource to disable the default endpoint for an HTTP API. | September 17, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::AppFlow::Flow and AWS::AppFlow::ConnectorProfile.
[AWS::AppFlow::Flow](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appflow-flow.html)
Use the `AWS::AppFlow::Flow` resource to specify a new flow in Amazon AppFlow.
[AWS::AppFlow::ConnectorProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appflow-connectorprofile.html)
Use the `AWS::AppFlow::ConnectorProfile` describe an instance of a connector in Amazon AppFlow. | September 17, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::CloudFormation::StackSet`.
[AWS::CloudFormation::StackSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-stackset.html)
Use the `AWS::CloudFormation::StackSet` resource to provision stacks into AWS accounts and across Regions by using a single CloudFormation template. | September 17, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::ApiGatewayV2::Authorizer`.
[AWS::ApiGatewayV2::Authorizer](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-authorizer.html)
Use the `AWS::ApiGatewayV2::Authorizer` resource to create a Lambda authorizer for an HTTP API. | September 10, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CodeBuild::ReportGroup
[AWS::CodeBuild::ReportGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codebuild-reportgroup.html)
Use the `DeleteReports` property to specify if any reports that belong to the report group should be deleted when the report group is deleted. | September 10, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::StepFunctions::StateMachine`.
[AWS::StepFunctions::StateMachine](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-stepfunctions-statemachine.html)
The `AWS::StepFunctions::StateMachine` now supports X-Ray tracing. You can use the `TracingConfiguration` property to enable X-Ray tracing for your state machines. | September 10, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::SSO::Assignment`, `AWS::SSO::PermissionSet`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-assignment.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-assignment.html)
Use the `AWS::SSO::Assignment` resource to assign access to a principal for a specified AWS account using a specified permission set.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-permissionset.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-permissionset.html)
Use the `AWS::SSO::PermissionSet` resource to create a permission set within a specified IAM Identity Center instance. | September 10, 2020 |
| [New resources](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/AWS_Kendra.html) | This is the first release of Amazon Kendra in AWS CloudFormation. | September 10, 2020 |
| [Update resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudFront::Distribution.
[AWS::CloudFront::Distribution](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-distribution.html)
In the [CacheBehavior](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-cachebehavior.html) and [DefaultCacheBehavior](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-defaultcachebehavior.html) property types, use the `RealtimeLogConfigArn` property to specify the Amazon Resource Name (ARN) of the real-time log configuration for the cache behavior.
For more information, see [Real-time logs](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/real-time-logs.html) in the *Amazon CloudFront Developer Guide*. | September 3, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::CloudFront::CachePolicy, AWS::CloudFront::OriginRequestPolicy, and AWS::CloudFront::RealtimeLogConfig.
[AWS::CloudFront::CachePolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-cachepolicy.html)
Use the `AWS::CloudFront::CachePolicy` resource to create a new cache policy in Amazon CloudFront.
[AWS::CloudFront::OriginRequestPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-originrequestpolicy.html)
Use the `AWS::CloudFront::OriginRequestPolicy` resource to create a new origin request policy in Amazon CloudFront.
[AWS::CloudFront::RealtimeLogConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-realtimelogconfig.html)
Use the `AWS::CloudFront::RealtimeLogConfig` resource to create a new real-time log configuration in Amazon CloudFront. | September 3, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CodeGuruReviewer::RepositoryAssociation
[AWS::CodeGuruReviewer::RepositoryAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codegurureviewer-repositoryassociation.html)
The `AWS::CodeGuruReviewer::RepositoryAssociation` resource describes an associated repository that contains source code to be analyzed by AWS CodeGuru Reviewer. For more information, see [RespositoryAssociation](https://docs.aws.amazon.com/codeguru/latest/reviewer-api/API_RepositoryAssociation.html) in the *AWS CodeGuru Reviewer API Reference*. | September 3, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::EKS::FargateProfile`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-fargateprofile.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-fargateprofile.html)
Use the `AWS::EKS::FargateProfile` resource to create an AWS Fargate profile. | September 3, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::CodeCommit::Repository Code`
[AWS::CodeCommit::Repository Code](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-codecommit-repository-code.html)
Use the `BranchName` property to specify a branch name to be used as the default branch when importing code into a repository. | August 31, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ServiceCatalog::CloudFormationProvisionedProduct.
[AWS::ServiceCatalog::CloudFormationProvisionedProduct](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-cloudformationprovisionedproduct.html)
The `PathName` property is now available as an alternative to `PathId`. | August 27, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::GameLift::GameServerGroup
[AWS::GameLift::GameServerGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gamelift-gameservergroup.html)
Use the `AWS::GameLift::GameServerGroup` resource to create a GameLift FleetIQ game server group to run low-cost game hosting on your Amazon EC2 instances. | August 27, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::Route53Resolver::ResolverQueryLoggingConfig` and `AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation`.
[AWS::Route53Resolver::ResolverQueryLoggingConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverqueryloggingconfig.html)
Use the `AWS::Route53Resolver::ResolverQueryLoggingConfig` resource to specify settings for a query logging configuration.
[AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53resolver-resolverqueryloggingconfigassociation.html)
Use the `AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation` resource to configure DNS query logging. | August 27, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::KMS::Key.
[AWS::KMS::Key](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html)
Added a `KeyId` attribute to the [return values](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html#aws-resource-kms-key-return-values). | August 26, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated to support use of a launch template: `AWS::EKS::Nodegroup`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-nodegroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-nodegroup.html)
Use the `LaunchTemplate` property to specify a launch template specification that can be used to deploy or update a managed node group. If you use a launch template to deploy a node group, some settings that you normally set for a node group must be moved into the launch template. The text for affected settings has been updated to note that. | August 20, 2020 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::ECS::TaskDefinition.
[AWS::ECS::TaskDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-taskdefinition.html)
Use the `EnvironmentFiles` property to specify a list of files containing the environment variables to pass to a container. | August 13, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FSx::FileSystem
[AWS::FSx::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html)
In the [LustreConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-lustreconfiguration.html) property type, use `DriveCacheType` to specify the type of drive cache used by `PERSISTENT_1` file systems that are provisioned with HDD storage devices. | August 13, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Lambda::EventSourceMapping.
[AWS::Lambda::EventSourceMapping](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventsourcemapping.html)
Use the `Topics` property to specify the Amazon MSK topics to stream to a Lambda function. | August 13, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::ApplicationInsights::Application
[AWS::ApplicationInsights::Application](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-applicationinsights-application.html)
Use the `AWS::ApplicationInsights::Application` resource to add an application that is created from a resource group. | August 13, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::EC2::CarrierGateway.
[AWS::EC2::CarrierGateway](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-carriergateway.html)
Use the `CarrierGateway` resource to create a carrier gateway. | August 13, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CodeBuild::Project
[AWS::CodeBuild::Project](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codebuild-project.html)
Use the `BuildBatchConfig` property to specify configuration information for a batch build. | August 6, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FSx::FileSystem
[AWS::FSx::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html)
In the [LustreConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-lustreconfiguration.html) property type, `AutoImportPolicyType` was changed to `AutoImportPolicy`. Use `AutoImportPolicy` to configure your Amazon FSx for Lustre file system to automatically import metadata of objects that are added to or changed in your linked S3 bucket after file system creation. | August 6, 2020 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::ECS::TaskDefinition.
[AWS::ECS::TaskDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-taskdefinition.html)
Use the `EFSVolumeConfiguration` property to specify an Amazon Elastic File System file system for task storage. | July 30, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::FlowLog.
[AWS::EC2::FlowLog](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-flowlog.html)
Use the `LogFormat` property to specify the fields for the flow log record.
Use the `MaxAggregationInterval` property to specify the maximum interval for capturing and aggregating flows.
Use the `Tags` property to specify tags for the flow log. | July 30, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::GroundStation::DataflowEndpointGroup.
[MTU property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-groundstation-dataflowendpointgroup-dataflowendpoint.html#cfn-groundstation-dataflowendpointgroup-dataflowendpoint-mtu)
The `MTU` property sets the maximum transmission unit used for a dataflow endpoint. | July 30, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::AppMesh::VirtualGateway and AWS::AppMesh::GatewayRoute
[AWS::AppMesh::VirtualGateway](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appmesh-virtualgateway.html)
Use the `AWS::AppMesh::VirtualGateway` resource to create a virtual gateway that allows resources outside of your mesh to communicate to resources that are inside of your mesh.
[AWS::AppMesh::GatewayRoute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appmesh-gatewayroute.html)
Use the `AWS::AppMesh::GatewayRoute` resource to create a gateway route that routes traffic to a virtual service. | July 30, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resource was added: AWS::SageMaker::MonitoringSchedule
[AWS::SageMaker::MonitoringSchedule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-monitoringschedule.html)
Use the `AWS::SageMaker::MonitoringSchedule` resource to create a monitoring schedule to regularly start an Amazon SageMaker processing job to monitor the data captured for a SageMaker endpoint. | July 30, 2020 |
| [New property](aws-template-resource-type-ref.md) | The following properties were added: `AWS::CodeGuruProfiler::ProfilingGroup.AnomalyDetectionNotificationConfiguration` and `AWS::CodeGuruProfiler::ProfilingGroup.Tags`.
[AWS::CodeGuruProfiler::ProfilingGroup.AnomalyDetectionNotificationConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codeguruprofiler-profilinggroup.html)
Use the `AWS::CodeGuruProfiler::ProfilingGroup.AnomalyDetectionNotificationConfiguration` property to configure notifications for your profiling group.
[AWS::CodeGuruProfiler::ProfilingGroup.Tags](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codeguruprofiler-profilinggroup.html)
Use the `AWS::CodeGuruProfiler::ProfilingGroup.Tags` property to add tags to a profiling group. | July 30, 2020 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::WAFv2::WebACL and AWS::WAFv2::RuleGroup.
[AWS::WAFv2::WebACL](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webacl.html)
Rule statements that use IP addresses now support using IP addresses that are forwarded in an HTTP header in the web request, instead of using the IP address that's reported by the web request origin. This option is available for all rule statements that use an IP address: `GeoMatchStatement`, `RateBasedStatement`, and `IPSetReferenceStatement`. The following new properties support this functionality: `IPSetForwardedIPConfiguration` and `ForwardedIPConfiguration`.
[AWS::WAFv2::RuleGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-rulegroup.html)
Rule statements that use IP addresses now support using IP addresses that are forwarded in an HTTP header in the web request, instead of using the IP address that's reported by the web request origin. This option is available for all rule statements that use an IP address: `GeoMatchStatement`, `RateBasedStatement`, and `IPSetReferenceStatement`. The following new properties support this functionality: `IPSetForwardedIPConfiguration` and `ForwardedIPConfiguration`. | July 23, 2020 |
| [Updated resource ](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EFS::FileSystem
[AWS::EFS::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-efs-filesystem-backuppolicy.html)
Use the `BackupPolicy` property to turn automatic backups on or off for your Amazon EFS file system. | July 23, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudFront::Distribution.
[AWS::CloudFront::Distribution](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-distribution.html)
In the [CacheBehavior](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-cachebehavior.html) and [DefaultCacheBehavior](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-defaultcachebehavior.html) property types:
+ Use the `CachePolicyId` property to specify the ID of the cache policy for the cache behavior.
+ Use the `OriginRequestPolicyId` property to specify the ID of the origin request policy for the cache behavior.
For more information, see [Working with policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/working-with-policies.html) in the *Amazon CloudFront Developer Guide*. | July 23, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CodeStarConnections::Connection
[AWS::CodeStarConnections::Connection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codestarconnections-connection.html)
Use the `HostArn` property to specify the host associated with connections you want to make to an installed provider. | July 23, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FSx::FileSystem
[AWS::FSx::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html)
In the [LustreConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-lustreconfiguration.html) property type, use `AutoImportPolicyType` to configure how FSx imports new files and file changes in the linked data repository into the file system. | July 23, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: EndpointConfig
[AWS::SageMaker::EndpointConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-endpointconfig.html)
Use the `CaptureContentTypeHeader` property to specify content types (JSON and/or CSV) to capture.
Use the `CaptureOption` property to specify whether to capture input data, output data, or both.
Use the `DataCaptureConfig` resource/property to configure how the endpoint captures data. | July 23, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::SecretsManager::RotationSchedule.HostedRotationLambda.
[AWS::SecretsManager::RotationSchedule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-secretsmanager-rotationschedule.html)
Use the `HostedRotationLambda` property type to create a rotation Lambda. | July 23, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Amplify::App
[AWS::Amplify::App](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-app.html)
Use the `EnableBranchAutoDeletion` property to automatically disconnect a branch in the Amplify Console when you delete a branch from your Git repository. | July 9, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Amplify::Domain
[AWS::Amplify::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-domain.html)
Use the `AutoSubDomainCreationPatterns` property to set branch patterns for automatic subdomain creation.
Use the `AutoSubDomainIAMRole` property to specify the required AWS Identity and Access Management (IAM) service role for the Amazon Resource Name (ARN) for automatically creating subdomains.
Use the `EnableAutoSubDomain` property to enable the automated creation of subdomains for branches. | July 9, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Synthetics::Canary.
[AWS::Synthetics::Canary](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-synthetics-canary.html)
The MemoryInMB parameter was added. Also, the RunConfig parameter is no longer required, and DurationInSeconds is no longer required. | July 9, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ElasticLoadBalancingV2::Listener.
[AWS::ElasticLoadBalancingV2::Listener](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticloadbalancingv2-listener.html)
Use the `AlpnPolicy` property to specify the name of the Application-Layer Protocol Negotiation (ALPN) policy for TLS listeners. | July 9, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FSx::FileSystem
[AWS::FSx::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html)
The `StorageCapacity` property has changed so that an update requires no interruption.
In the [WindowsConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-windowsconfiguration.html) property type, the `ThroughputCapacity` property has changed so that an update requires no interruption.
In the [LustreConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-lustreconfiguration.html) property type:
+ Use the `DailyAutomaticBackupStartTime` property to specify the time that the daily automatic backup window starts.
+ Use the `CopyTagsToBackups` boolean property to copy file system tags to its backups.
+ Use the `AutomaticBackupRetentionDays` property to set the number of days to retain file system backups. | July 9, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ServiceCatalog::CloudFormationProvisionedProduct.
[AWS::ServiceCatalog::CloudFormationProvisionedProduct](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-cloudformationprovisionedproduct.html)
Use the `Outputs` property to view the output of the product you are provisioning. | July 9, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Athena::DataCatalog
[AWS::Athena::DataCatalog](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-datacatalog.html)
Use the `AWS::Athena::DataCatalog` resource to register external data sources with Athena. | July 9, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::EC2::PrefixList.
[AWS::EC2::PrefixList](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-prefixlist.html)
Use the `PrefixList` resource to create a prefix list. | July 9, 2020 |
| [New property](aws-template-resource-type-ref.md) | The following property was added to AWS::CodeBuild::Project Source: BuildStatusConfig
[AWS::CodeBuild::Project Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-codebuild-project-source.html#cfn-codebuild-project-source-buildstatusconfig)
Use the `buildStatusConfig` property to specify build status information to the source provider. | July 9, 2020 |
| [New property](aws-template-resource-type-ref.md) | The following resource was added: `AWS::CodeGuruProfiler::ProfilingGroup.ComputePlatform`.
[AWS::CodeGuruProfiler::ProfilingGroup.ComputePlatform](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codeguruprofiler-profilinggroup.html)
Use `AWS::CodeGuruProfiler::ProfilingGroup.ComputePlatform` to specify the compute platform of the profiling group. | July 9, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Events::Rule.
[AWS::Events::Rule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-rule.html)
In the [Target](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-rule-target.html) property type, use the `HttpParameters` property to specify the HTTP parameters to use when the target is a API Gateway REST endpoint. | July 6, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ApplicationAutoScaling::ScalableTarget.
[AWS::ApplicationAutoScaling::ScalableTarget](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-applicationautoscaling-scalabletarget.html)
In the [ScheduledAction](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationautoscaling-scalabletarget-scheduledaction.html) property type, use the `Timezone` property to create scheduled actions in the local time zone. If your time zone observes Daylight Saving Time (DST), it automatically adjusts for Daylight Saving Time. | July 1, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::AppConfig::HostedConfigurationVersion
[AWS::AppConfig::HostedConfigurationVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appconfig-hostedconfigurationversion.html)
This resource lets you create a new configuration in the AWS AppConfig hosted configuration store. | June 25, 2020 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::ServiceDiscovery::HttpNamespace`, `AWS::ServiceDiscovery::PrivateDnsNamespace`, `AWS::ServiceDiscovery::PublicDnsNamespace`, `AWS::ServiceDiscovery::Service`.
[AWS::ServiceDiscovery::HttpNamespace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicediscovery-httpnamespace.html)
Use the `Tags` property to add tag keys and values to an AWS Cloud Map HTTP namespace.
[AWS::ServiceDiscovery::PrivateDnsNamespace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicediscovery-privatednsnamespace.html)
Use the `Tags` property to add tag keys and values to an AWS Cloud Map private DNS namespace.
[AWS::ServiceDiscovery::PublicDnsNamespace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicediscovery-publicdnsnamespace.html)
Use the `Tags` property to add tag keys and values to an AWS Cloud Map public DNS namespace.
[AWS::ServiceDiscovery::Service](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicediscovery-service.html)
Use the `Tags` property to add tag keys and values to an AWS Cloud Map service. | June 22, 2020 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::ECS::Cluster.
[AWS::ECS::Cluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-cluster.html)
Use the `CapacityProviderStrategyItem` property to specify the capacity provider strategy when creating a cluster. | June 18, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::FMS::Policy IEMap.
[AWS::FMS::Policy IEMap](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-iemap.html)
The `AWS::FMS::Policy IEMap` resource now allows you to specify accounts using AWS Organizations organizational units (OUs), in addition to account IDs. | June 18, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::ECS::CapacityProvider.
[AWS::ECS::CapacityProvider](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-capacityprovider.html)
Use the `AWS::ECS::CapacityProvider` resource to create a new capacity provider. | June 18, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EFS::FileSystem
[AWS::EFS::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-filesystem.html)
Use the `FileSystemPolicy` property to create a new resource policy to control NFS access to your Amazon EFS file system. | June 16, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EFS::AccessPoint
[AWS::EFS::AccessPoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-accesspoint.html)
Fn::GetAtt now returns the `AccessPointId` and `Arn` attributes. | June 16, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Lambda::Function.
[AWS::Lambda::Function](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html)
Use the `FileSystemConfigs` property to specify connection settings for an Amazon EFS file system. | June 16, 2020 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::Volume.
[AWS::EC2::Volume](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-ebs-volume.html)
Use the `OutpostArn` property to specify the Amazon Resource Name (ARN) of the Outpost. | June 11, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CertificateManager::Certificate
[AWS::CertificateManager::Certificate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-certificatemanager-certificate.html)
Use the `CertificateAuthorityArn` property to specify the Amazon Resource Name (ARN) of the private certificate authority (CA) that will be used to issue the certificate.
Use the `CertificateTransparencyLoggingPreference` property to enable or disable certificate transparency logging. | June 11, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudFront::Distribution.
[AWS::CloudFront::Distribution](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-distribution.html)
In the [Origin](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-origin.html) property type, use the `ConnectionAttempts` property to specify the number of times that CloudFront attempts to connect to the origin.
In the [Origin](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-origin.html) property type, use the `ConnectionTimeout` property to specify the number of seconds that CloudFront waits when trying to establish a connection to the origin. | June 11, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ElasticLoadBalancingV2::LoadBalancer.
[AWS::ElasticLoadBalancingV2::LoadBalancer](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-loadbalancer-subnetmapping.html)
Use the `SubnetMapping` attribute to specify a subnet to attach to a load balancer. | June 11, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::ElastiCache::ReplicationGroup.`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-replicationgroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-replicationgroup.html)
Use the `MultiAZEnabled` attribute to indicate if you have Multi-AZ enabled. | June 11, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::RDS::DBProxy and AWS::RDS::DBProxyTargetGroup.
[AWS::RDS::DBProxy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbproxy.html)
Use the `AWS::RDS::DBProxy` resource to create or update a DB proxy. Use the `AWS::RDS::DBProxyTargetGroup` resource to specify a set of RDS DB instances, Aurora DB clusters, or both that a proxy can connect to. | June 4, 2020 |
| [New property](aws-template-resource-type-ref.md) | The following property was added: `AWS::CodeGuruProfiler::ProfilingGroup.AgentPermissions`.
[AWS::CodeGuruProfiler::ProfilingGroup.AgentPermissions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codeguruprofiler-profilinggroup.html)
The `AWS::CodeGuruProfiler::ProfilingGroup.AgentPermissions` property shows the agent permissions attached to this profiling group. | June 3, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::ClientVpnEndpoint
[AWS::EC2::ClientVpnEndpoint ClientAuthenticationRequest](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-clientvpnendpoint-clientauthenticationrequest.html)
Use the `FederatedAuthentication` property to specify an IAM SAML identity provider for your Client VPN endpoint. | May 28, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CodeBuild::ReportGroup
[AWS::CodeBuild::ReportGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codebuild-reportgroup.html)
Use the `tags` property to specify the name and value of any tags that you want supporting AWS services to use for a report group. | May 21, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::StepFunctions::StateMachine`.
[AWS::StepFunctions::StateMachine](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-stepfunctions-statemachine.html)
The `AWS::StepFunctions::StateMachine` has two new properties. You can use the `DefinitionS3Location` property to reference a state machine JSON definition file stored in an S3 bucket. You can use the `DefinitionSubstitutions` property to pass variables into the state machine definition file referenced by `DefinitionS3Location`. | May 21, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::SSM::Parameter`
[AWS::SSM::Parameter](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-parameter.html)
When you create a `String` parameter, you can now specify a DataType value as `aws:ec2:image` to ensure that the parameter value you enter is a valid Amazon Machine Image (AMI) ID format. Support for AMI ID formats lets you avoid updating all your scripts and templates with a new ID each time the AMI that you want to use in your processes changes. You can create a parameter with the data type `aws:ec2:image`, and for its value, enter the ID of an AMI. This is the AMI from which you currently want new instances to be created. You then reference this parameter in your templates and commands. When you’re ready to use a different AMI, update the parameter value. Parameter Store validates the new AMI ID, and you don’t need to update your scripts and templates. | May 21, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Synthetics::Canary.
[AWS::Synthetics::Canary](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-synthetics-canary.html)
The RunConfig parameter is required. | May 14, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CodeStarConnections::Connection
[AWS::CodeStarConnections::Connection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codestarconnections-connection.html)
Use the `Tags` property to specify the tags applied to your connections resource. | May 14, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ServiceCatalog::CloudFormationProduct.
[AWS::ServiceCatalog::CloudFormationProduct](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-cloudformationproduct.html)
Use the `ReplaceProvisioningArtifacts` property to choose whether provisioning artifact identifiers are replaced when you update a product. | May 14, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, and AWS::GlobalAccelerator::Listener
[ AWS::GlobalAccelerator::Accelerator](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-globalaccelerator-accelerator.html)
Use the `AWS::GlobalAccelerator::Accelerator` resource to create or update an accelerator for AWS Global Accelerator.
[ AWS::GlobalAccelerator::EndpointGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-globalaccelerator-endpointgroup.html)
Use the `AWS::GlobalAccelerator::EndpointGroup` resource to create or update an endpoint group for AWS Global Accelerator.
[ AWS::GlobalAccelerator::Listener](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-globalaccelerator-listener.html)
Use the `AWS::GlobalAccelerator::Listener` resource to create or update a listener for AWS Global Accelerator. | May 14, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::Macie::CustomDataIdentifier`, `AWS::Macie::FindingsFilter`, and `AWS::Macie::Session`
[AWS::Macie::CustomDataIdentifier](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-macie-customdataidentifier.html)
Use the `AWS::Macie::CustomDataIdentifier` resource to create a custom data identifier in Amazon Macie.
[AWS::Macie::FindingsFilter](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-macie-findingsfilter.html)
Use the `AWS::Macie::FindingsFilter` resource to create a custom filter for findings in Amazon Macie.
[AWS::Macie::Session](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-macie-session.html)
Use the `AWS::Macie::Session` resource to enable Amazon Macie. | May 14, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IoTEvents::DetectorModel.
[ AWS::IoTEvents::DetectorModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotevents-detectormodel.html)
Added the following properties: `AssetPropertyTimestamp`, `AssetPropertyValue`, `AssetPropertyVariant`, `DynamoDB`, `DynamoDBv2`, `IotSiteWise`, and `Payload`.
Updated the following property: `SetTimer`. | May 7, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::SSM::Association`
[AWS::SSM::Association](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-association.html)
Use the `WaitForSuccessTimeoutSeconds` property to specify the number of seconds the service should wait for the association status to show "Success" before proceeding with the stack execution. If the association status doesn't show "Success" after the specified number of seconds, then stack creation fails. | May 7, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::ImageBuilder::Image.
[AWS::ImageBuilder::Image](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-image.html)
Use the `AWS::ImageBuilder::Image` resource to create an image in the Image Builder service. | May 7, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Synthetics::Canary.
[AWS::Synthetics::Canary](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-synthetics-canary.html)
Use the `Name` property to specify the name for this canary. | April 30, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::EventSchemas::RegistryPolicy`.
[AWS::EventSchemas::RegistryPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eventschemas-registrypolicy.html)
Use the `AWS::EventSchemas::RegistryPolicy` resource to specify a resource-based policy associated with a schema registry. | April 30, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FSx::FileSystem
[AWS::FSx::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html)
Use the `LustreMountName` attribute when mounting an Amazon FSx for Lustre file system. | April 23, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::ImageBuilder::Component, AWS::ImageBuilder::DistributionConfiguration, AWS::ImageBuilder::ImagePipeline, AWS::ImageBuilder::ImageRecipe, and AWS::ImageBuilder::InfrastructureConfiguration.
[AWS::ImageBuilder::Component](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-component.html)
Use the `AWS::ImageBuilder::Component` resource to create a component in the Image Builder service.
[AWS::ImageBuilder::DistributionConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-distributionconfiguration.html)
Use the `AWS::ImageBuilder::DistributionConfiguration` resource to create a distribution configuration in the Image Builder service.
[AWS::ImageBuilder::ImagePipeline](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-imagepipeline.html)
Use the `AWS::ImageBuilder::ImagePipeline` resource to create an image pipeline in the Image Builder service.
[AWS::ImageBuilder::ImageRecipe](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-imagerecipe.html)
Use the `AWS::ImageBuilder::ImageRecipe` resource to create an image recipe in the Image Builder service.
[AWS::ImageBuilder::InfrastructureConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html)
Use the `AWS::ImageBuilder::InfrastructureConfiguration` resource to create an infrastructure configuration in the Image Builder service. | April 23, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Synthetics::Canary.
[AWS::Synthetics::Canary](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-synthetics-canary.html)
Use the `AWS::Synthetics::Canary` resource to create a canary. Canaries are configurable scripts that run on a schedule and monitor your endpoints and APIs. By using canaries, you can discover issues before your customers do. | April 23, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CE::CostCategory
[AWS::CE::CostCategory](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_CE.html)
Use the `AWS::CE::CostCategory` resource to create groupings of costs that you can use across products in the AWS Billing and Cost Management console. | April 23, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Glue::DevEndpoint
[AWS::Glue::DevEndpoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-devendpoint.html)
Use the `PublicKeys` property to specify a list of public keys to be used by a development endpoint for authentication. | April 16, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Glue::MLTransform
[AWS::Glue::MLTransform](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-mltransform.html)
Use the `Tags` property to specify the AWS resource tags to use to manage access to a machine learning transform. | April 16, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::ResourceGroups::Group
[AWS::ResourceGroups::Group](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-resourcegroups-group.html)
Use the `AWS::ResourceGroups::Group` resource to create a resource group with the specified name, description, and resource query. | April 16, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudWatch::InsightRule.
[AWS::CloudWatch::InsightRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudwatch-insightrule.html)
The AWS::CloudWatch::InsightRule resource now supports tags. Use the AWS::CloudWatch::InsightRule resource to create Contributor Insights rules. For more information, see [ Using Contributor Insights to Analyze High-Cardinality Data](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/ContributorInsights.html). | April 2, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FSx::FileSystem
[AWS::FSx::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html)
Use the `StorageType` property to specify the type of storage for the file system, either solid state drive, `SSD` or hard disk drive, `HDD`.
In the [WindowsConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-windowsconfiguration.html) property type, use the `DeploymentType` property to specify a new Amazon FSx for Windows File Server file system deployment type, `SINGLE_AZ_2`, the latest generation of Single-AZ file systems. | April 2, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ServiceCatalog::LaunchRoleConstraint.
[AWS::ServiceCatalog::LaunchRoleConstraint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-launchroleconstraint.html)
Use the `LocalRoleName` property to specify an IAM role to use when an account uses a launch constraint. | April 2, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::ApiGatewayV2::Integration`.
[AWS::ApiGatewayV2::Integration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-integration.html)
Use the `AWS::ApiGatewayV2::Integration` resource to create a private integration for an HTTP API. | March 26, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Cognito::UserPool
[AWS::Cognito::UserPool](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpool.html)
Use the `UsernameConfiguration` property to set case sensitivity on the username input for the selected sign-in option. | March 26, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::Volume
[AWS::EC2::Volume](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-ebs-volume.html)
Use the `MultiAttachEnabled` property to indicate whether Amazon EBS Multi-Attach is enabled. | March 26, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AutoScaling::AutoScalingGroup.
[AWS::AutoScaling::AutoScalingGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-autoscalinggroup.html)
Use the `MaxInstanceLifetime` property to specify the maximum amount of time, in seconds, that an instance can be in service. | March 26, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBInstance
[AWS::RDS::DBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html)
The `AWS::RDS::DBInstance` resource now supports Read Replica across multiple Availability Zone deployments. | March 26, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::Detective::Graph and AWS::Detective::MemberInvitation
[AWS::Detective::Graph](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-detective-graph.html)
Use the `AWS::Detective::Graph` resource to specify a Detective behavior graph.
[AWS::Detective::MemberInvitation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-detective-memberinvitation.html)
Use the `AWS::Detective::MemberInvitation` resource to send an invitation to join a Detective behavior graph. | March 26, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::ClientVpnEndpoint.
[AWS::EC2::ClientVpnEndpoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-clientvpnendpoint.html)
Use the `VpcId` and `SecurityGroupIds` properties to assign security groups to your Client VPN endpoint. | March 19, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::NetworkManager::CustomerGatewayAssociation, AWS::NetworkManager::Device, AWS::NetworkManager::GlobalNetwork, AWS::NetworkManager::Link, AWS::NetworkManager::LinkAssociation, AWS::NetworkManager::Site, and AWS::NetworkManager::TransitGatewayRegistration
[AWS::NetworkManager::CustomerGatewayAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkmanager-customergatewayassociation.html)
Use the `AWS::NetworkManager::CustomerGatewayAssociation` resource to specify an association between a customer gateway, device, and link.
[AWS::NetworkManager::Device](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkmanager-device.html)
Use the `AWS::NetworkManager::Device` resource to specify a device in a global network.
[AWS::NetworkManager::GlobalNetwork](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkmanager-globalnetwork.html)
Use the `AWS::NetworkManager::GlobalNetwork` resource to specify a global network.
[AWS::NetworkManager::Link](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkmanager-link.html)
Use the `AWS::NetworkManager::Link` resource to specify a link for a site.
[AWS::NetworkManager::LinkAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkmanager-linkassociation.html)
Use the `AWS::NetworkManager::LinkAssociation` resource to specify an association between a device and a link.
[AWS::NetworkManager::Site](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkmanager-site.html)
Use the `AWS::NetworkManager::Site` resource to specify a site in a global network.
[AWS::NetworkManager::TransitGatewayRegistration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkmanager-transitgatewayregistration.html)
Use the `AWS::NetworkManager::TransitGatewayRegistration` resource to specify the registration of a transit gateway in a global network. | March 19, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::CodeGuruProfiler::ProfilingGroup`.
[AWS::CodeGuruProfiler::ProfilingGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codeguruprofiler-profilinggroup.html)
Use the `AWS::CodeGuruProfiler::ProfilingGroup` resource to create a profiling group. | March 19, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: `AWS::Cassandra::Keyspace` and `AWS::Cassandra::Table`.
[AWS::Cassandra::Keyspace](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cassandra-keyspace.html)
Use the `AWS::Cassandra::Keyspace` resource to create a new keyspace in Amazon Keyspaces (for Apache Cassandra).
[AWS::Cassandra::Table](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cassandra-table.html)
Use the `AWS::Cassandra::Table` resource to create a new table in Amazon Keyspaces (for Apache Cassandra). | March 16, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::AppMesh::VirtualNode, AWS::AppMesh::VirtualRouter, AWS::AppMesh::VirtualService, and AWS::AppMesh::Route
[AWS::AppMesh::VirtualNode](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appmesh-virtualnode.html)
Use the `MeshOwner` property to specify the account ID that owns a shared mesh.
[AWS::AppMesh::Route](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appmesh-route.html)
Use the `MeshOwner` property to specify the account ID that owns a shared mesh.
[AWS::AppMesh::VirtualRouter](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appmesh-virtualrouter.html)
Use the `MeshOwner` property to specify the account ID that owns a shared mesh.
[AWS::AppMesh::VirtualService](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appmesh-virtualservice.html)
Use the `MeshOwner` property to specify the account ID that owns a shared mesh. | March 12, 2020 |
| [New and updated resources](aws-template-resource-type-ref.md) | The following resources were added or updated: `AWS::ApiGatewayV2::ApiGatewayManagedOverrides`, `AWS::ApiGatewayV2::Integration`, and `AWS::ApiGatewayV2::VpcLink`.
[AWS::ApiGatewayV2::ApiGatewayManagedOverrides](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-apigatewaymanagedoverrides.html)
Use the `AWS::ApiGatewayV2::ApiGatewayManagedOverrides` resource to override the default properties of API Gateway managed resources.
[AWS::ApiGatewayV2::Integration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-integration.html)
Use the `AWS::ApiGatewayV2::Integration` resource to create a private integration for an HTTP API.
[AWS::ApiGatewayV2::VpcLink](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-vpclink.html)
Use the `AWS::ApiGatewayV2::VpcLink` resource to create a VPC link for an HTTP API. | March 12, 2020 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::Greengrass::ResourceDefinition and AWS::Greengrass::ResourceDefinitionVersion
[AWS::Greengrass::ResourceDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-greengrass-resourcedefinition.html)
In the [ S3MachineLearningModelResourceData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-greengrass-resourcedefinition-s3machinelearningmodelresourcedata.html) property type that defines a resource instance, use the `OwnerSetting` property to specify the Linux OS group owner and permissions for the downloaded machine learning resource.
In the [ SageMakerMachineLearningModelResourceData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-greengrass-resourcedefinition-sagemakermachinelearningmodelresourcedata.html) property type that defines a resource instance, use the `OwnerSetting` property to specify the Linux OS group owner and permissions for the downloaded machine learning resource.
[AWS::Greengrass::ResourceDefinitionVersion](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-greengrass-resourcedefinitionversion.html)
In the [ S3MachineLearningModelResourceData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-greengrass-resourcedefinitionversion-s3machinelearningmodelresourcedata.html) property type that defines a resource instance, use the `OwnerSetting` property to specify the Linux OS group owner and permissions for the downloaded machine learning resource.
In the [ SageMakerMachineLearningModelResourceData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-greengrass-resourcedefinitionversion-sagemakermachinelearningmodelresourcedata.html) property type that defines a resource instance, use the `OwnerSetting` property to specify the Linux OS group owner and permissions for the downloaded machine learning resource. | March 9, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudFront::Distribution.
[AWS::CloudFront::Distribution](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-distribution.html)
In the [DistributionConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-distributionconfig.html) property type, use the `OriginGroups` property to specify information about origin groups for this distribution. | March 5, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated to support envelope encryption of secrets with AWS Key Management Service: `AWS::EKS::Cluster`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-encryptionconfig.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-encryptionconfig.html)
Use the `AWS::EKS::Cluster EncryptionConfig` property to specify the encryption configuration for an Amazon EKS cluster.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-provider.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-cluster-provider.html)
Use the `AWS::EKS::Cluster Provider` property to specify the AWS Key Management Service customer master key (CMK) used to encrypt the secrets for an Amazon EKS cluster. | March 5, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Athena::WorkGroup
[AWS::Athena::WorkGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-athena-workgroup.html)
Use the `AWS::Athena::WorkGroup` resource to separate users, teams, applications, or workloads, set limits on the amount of data the workgroup or its queries can process, and track costs. | March 5, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Chatbot::SlackChannelConfiguration
[AWS::Chatbot::SlackChannelConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-chatbot-slackchannelconfiguration.html)
Use the `AWS::Chatbot::SlackChannelConfiguration` resource to configure a Slack channel with Amazon Q Developer. | March 5, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CodeStarConnections::Connection
[AWS::CodeStarConnections::Connection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codestarconnections-connection.html)
Use the `AWS::CodeStarConnections::Connection` resource to specify Connection. | March 5, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CloudWatch::CompositeAlarm.
[AWS::CloudWatch::CompositeAlarm](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudwatch-compositealarm.html)
Use the `AWS::CloudWatch::CompositeAlarm` property to create a composite alarm. Composite alarms evaluate their alarm state based on the alarm states of other CloudWatchrules. | March 2, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AppMesh::VirtualNode
[AWS::AppMesh::VirtualNode](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appmesh-virtualnode.html)
Use the `BackendDefaults` property to specify a client policy for a backend.
Use the `ClientPolicy` property to specify a client policy.
Use the `ClientPolicyTls` property to specify a Transport Layer Security (TLS) client policy.
Use the `ListenerTls` property to specify a TLS listener.
Use the `ListenerTlsCertificate` property to specify the type of certificate to use for a client policy.
Use the `ListenerTlsAcmCertificate` property to specify an AWS Certificate Manager certificate.
Use the `ListenerTlsFileCertificate` property to specify properties of a local file certificate.
Use the `TlsValidationContext` property to specify a TLS validation context trust.
Use the `TlsValidationContextAcmTrust` property to specify a context trust for an AWS Certificate Manager certificate.
Use the `TlsValidationContextFileTrust` property to specify a file that contains the certificate trust chain for a local file certificate.
Use the `TlsValidationContextTrust` property to specify a TLS validation context trust.
Use the `VirtualNodeSpec` property to specify `BackendDefaults`.
Use the `Listener` property to specify a `ListenerTls`. | February 27, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FSx::FileSystem
[AWS::FSx::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html)
In the [LustreConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-lustreconfiguration.html) property type:
+ Use the `DeploymentType` property to specify the Amazon FSx for Lustre file system deployment type, either `PERSISTENT_1`, `SCRATCH_2`, or `SCRATCH_1`.
+ Use the `PerUnitStorageThroughput` property to specify the throughput in MB/s/TiB for a `PERSISTENT_1` Amazon FSx for Lustre file system deployment type. | February 27, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::GroundStation::Config, AWS::GroundStation::DataflowEndpointGroup, and AWS::GroundStation::MissionProfile
[AWS::GroundStation::Config](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-groundstation-config.html)
Use the `AWS::GroundStation::Config` resource to specify a Config with the specified parameters.
[AWS::GroundStation::DataflowEndpointGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-groundstation-dataflowendpointgroup.html)
Use the `AWS::GroundStation::DataflowEndpointGroup` resource to specify a Dataflow Endpoint Group request.
[AWS::GroundStation::MissionProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-groundstation-missionprofile.html)
Use the `AWS::GroundStation::MissionProfile` resource to specify parameters and provide references to config objects to define how Ground Station lists and executes contacts. | February 27, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources was updated: AWS::CodeBuild::Project
[AWS::CodeBuild::Project](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codebuild-project.html)
Use the `ProjectFileSystemLocation` property to specify a file system that your AWS CodeBuild build project mounts. You use Amazon Elastic File System (EFS) to create the file system. For more information, see [Amazon Elastic File System Sample for CodeBuild](https://docs.aws.amazon.com/codebuild/latest/userguide/sample-efs.html). | February 20, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Neptune::DBCluster
[AWS::Neptune::DBCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-neptune-dbcluster.html)
Use the `DeletionProtection` property to help prevent inadvertent deletion of your DB cluster.
Use the `EngineVersion` property to specify the engine version that your new DB cluster will use.
When you change this parameter for an existing DB cluster, CloudFormation will replace your existing DB cluster with a new, empty one that uses the engine version you specified. | February 18, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::EC2::LocalGatewayRoute and AWS::EC2::LocalGatewayRouteTableVPCAssociation.
[AWS::EC2::LocalGatewayRoute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-localgatewayroute.html)
Use the `LocalGatewayRoute` resource to associate the specified VPC with the specified local gateway route table.
[AWS::EC2::LocalGatewayRouteTableVPCAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-localgatewayroutetablevpcassociation.html)
Use the `LocalGatewayRouteTableVPCAssociation` resource to associate the specified VPC with the specified local gateway route table. | February 14, 2020 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource were updated: AWS::ElasticLoadBalancingV2::Listener and AWS::ElasticLoadBalancingV2::ListenerRule
[AWS::ElasticLoadBalancingV2::Listener](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticloadbalancingv2-listener.html)
In the [Action](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listener-defaultactions.html) property type, use the `ForwardConfig` property to specify an action that distributes requests among one or more target groups.
[AWS::ElasticLoadBalancingV2::ListenerRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticloadbalancingv2-listenerrule.html)
In the [Action](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-listenerrule-actions.html) property type, use the `ForwardConfig` property to specify an action that distributes requests among one or more target groups. | February 13, 2020 |
| [New resource ](aws-template-resource-type-ref.md) | The following resource was added: AWS::Config::ConformancePack
[ AWS::Config::ConformancePack](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-config-conformancepack.html)
Use the `AWS::Config::ConformancePack` resource to create a Conformance Pack that is a collection of AWS rules that can be easily deployed in an account and a region and across AWS Organizations. | February 13, 2020 |
| [New resource ](aws-template-resource-type-ref.md) | The following resource was added: AWS::Config::OrganizationConformancePack
[ AWS::Config::OrganizationConformancePack](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-config-organizationconformancepack.html)
Use the `AWS::Config::OrganizationConformancePack` resource to create an OrganizationConformancePack that has information about conformance packs that AWS Config creates in the member accounts. | February 13, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::FMS::NotificationChannel and AWS::FMS::Policy.
[AWS::FMS::NotificationChannel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fms-notificationchannel.html)
Use the `AWS::FMS::NotificationChannel` resource to designate the IAM role and Amazon Simple Notification Service (SNS) topic that AWS Firewall Manager uses to record SNS logs.
[AWS::FMS::Policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fms-policy.html)
Use the `AWS::FMS::Policy` resource to specify an AWS Firewall Manager policy. | February 13, 2020 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::EC2::LaunchTemplate and AWS::EC2::ClientVpnEndpoint
[AWS::EC2::LaunchTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html)
Use the `MetadataOptions` property to configure the Instance Metadata Service (IMDS) for the instance.
Use the `HostResourceGroupArn` property to specify the ARN of the host resource group in which to launch the instances.
Use the `PartitionNumber` property to specify a target partition in a partition placement group.
Use the `LaunchTemplateElasticInferenceAccelerator` property to specify the number of elastic inference accelerators to attach to the instance.
[AWS::EC2::ClientVpnEndpoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-clientvpnendpoint.html)
Use the `VpnPort` property to assign a port number for TCP and UDP traffic. | February 6, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AppSync::GraphQLApi.
[AWS::AppSync::GraphQLApi](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-graphqlapi.html)
When the property `XrayEnabled` is set to `TRUE`, X-Ray tracing is enabled for this `GraphqlApi`. | February 6, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Cognito::UserPool
[AWS::Cognito::UserPool](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool.html)
Added `AccountRecoverySetting` parameter to define which verified available method a user can use to recover their password. | February 6, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::WAFv2::WebACLAssociation.
[AWS WAFv2](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_WAFv2.html)
Use the web ACL association to define an association between a web ACL and a regional application resource, to protect the resource. A regional application can be an Application Load Balancer (ALB), Amazon API Gateway REST API, an AWS AppSync GraphQL API, or an Amazon Cognito user pool. For Amazon CloudFront distributions, you use `AWS::CloudFront::Distribution` to manage the association. | February 6, 2020 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::ACMPCA::Certificate, AWS::ACMPCA::CertificateAuthority, AWS::ACMPCA::CertificateAuthorityActivation.
[AWS::ACMPCA::Certificate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-acmpca-certificate.html)
The `AWS::ACMPCA::Certificate` resource is used to issue a certificate using your private certificate authority.
[AWS::ACMPCA::CertificateAuthority](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-acmpca-certificateauthority.html)
Use the `AWS::ACMPCA::CertificateAuthority` resource to create a private CA.
[AWS::ACMPCA::CertificateAuthorityActivation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-acmpca-certificateauthorityactivation.html)
The `AWS::ACMPCA::CertificateAuthorityActivation` resource creates and installs a CA certificate on a CA. | January 23, 2020 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: AWS::AppConfig::Application, AWS::AppConfig::ConfigurationProfile, AWS::AppConfig::Deployment, AWS::AppConfig::Environment, and AWS::AppConfig::DeploymentStrategy
[AWS::AppConfig::Application](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appconfig-application.html)
The `AWS::AppConfig::Application` resource creates an application, which is a logical unit of code that provides capabilities for your customers.
[AWS::AppConfig::ConfigurationProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appconfig-configurationprofile.html)
The `AWS::AppConfig::ConfigurationProfile` resource creates a configuration profile that enables AWS AppConfig to access the configuration source.
[AWS::AppConfig::Deployment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appconfig-deployment.html)
The `AWS::AppConfig::Deployment` resource starts a deployment.
[AWS::AppConfig::Environment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appconfig-environment.html)
The `AWS::AppConfig::Environment` resource creates an environment, which is a logical deployment group of AWS AppConfig targets, such as applications in a `Beta` or `Production` environment.
[AWS::AppConfig::DeploymentStrategy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appconfig-deploymentstrategy.html)
The `AWS::AppConfig::DeploymentStrategy` resource creates an AWS AppConfig deployment strategy. | January 23, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Glue::Crawler
[AWS::Glue::Crawler](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-table.html)
Use the `MongoDBTarget` property to specify an Amazon DocumentDB or MongoDB data store to crawl.
Use the `RecrawlPolicy.RecrawlBehavior` property to specify a new `CRAWL_EVENT_MODE` that specifies crawling only the changes identified by Amazon S3 events.
Use the `S3Target.SampleSize` property to specify the number of files in each leaf folder to be crawled when crawling sample files in a dataset.
Use the `S3Target.EventQueueArn` property to specify a valid Amazon SQS ARN.
Use the `S3Target.DlqEventQueueArn` property to specify a valid Amazon dead-letter SQS ARN. | January 20, 2020 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Lambda::Function.
[AWS::Lambda::Function](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html)
In the [Code](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-code.html) property type, `ZipFile` supports `nodejs12.x` for `RunTime`. | January 16, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::Instance.
[AWS::EC2::Instance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html)
Use the `HibernationOptions` property to indicate whether the instance is enabled for hibernation.
Use the `HostResourceGroupArn` property to specify the ARN of the host resource group in which to launch the instances. | January 16, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AutoScaling::AutoScalingGroup.
[AWS::AutoScaling::AutoScalingGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-autoscalinggroup.html)
Use the `WeightedCapacity` property to specify the number of capacity units, which gives the instance type a proportional weight to other instance types. | January 16, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::LakeFormation::Permissions
[AWS::LakeFormation::Permissions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lakeformation-permissions.html)
Use the `DataLocationResource` property to specify a structure for a data location object where permissions are granted or revoked.
Use the `TableWithColumnsResource` property to specify a structure for a table with columns object. This object is only used when granting a SELECT permission. | January 16, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBInstance.
[AWS::RDS::DBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html)
Use the `CACertificateIdentifier` property to specify the identifier of the CA certificate for this DB instance. | January 16, 2020 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::SSM::ResourceDataSync`
[AWS::SSM::ResourceDataSync](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-resourcedatasync.html)
Use the `SyncType` property with `SyncFromSource` to synchronize Systems Manager Explorer OpsItems and OpsData from AWS Organizations or from multiple AWS Regions. | January 16, 2020 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::MSK::Cluster`, `AWS::RDS::DBInstance`, and `AWS::SSM::Document`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-msk-cluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-msk-cluster.html)
Use the `OpenMonitoring` property to enable monitoring with Prometheus, an open-source monitoring system for time-series metric data. You can also use tools that are compatible with Prometheus-formatted metrics or tools that integrate with Amazon MSK Open Monitoring.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ssm-document.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ssm-document.html)
Use the `Name` property to specify a name for the Systems Manager document.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbinstance.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbinstance.html)
Use the `MaxAllocatedStorage` property to specify the upper limit to which Amazon RDS can automatically scale the storage of the DB instance. | December 20, 2019 |
| [New resource](#doc-history) | The following resource was added: `AWS::CodeBuild::ReportGroup`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-reportgroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-reportgroup.html)
Use the `AWS::CodeBuild::ReportGroup` resource to specify information about a report group. When you specify a report group in a CodeBuild project, a build of the project creates reports in the report group that contain results from running test cases. | December 20, 2019 |
| [New resource](#doc-history) | The following resource was added: `AWS::EC2::GatewayRouteTableAssociation`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-gatewayroutetableassociation.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-gatewayroutetableassociation.html)
Use the `AWS::EC2::GatewayRouteTableAssociation` property to associate a virtual private gateway or internet gateway with a route table. | December 20, 2019 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::RDS::DBInstance.
[AWS::RDS::DBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html)
Use the `MaxAllocatedStorage` property to specify the upper limit to which Amazon RDS can automatically scale the storage of the DB instance. | December 19, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FSx::FileSystem
[AWS::FSx::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html)
In the [WindowsConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-windowsconfiguration.html) property type:
+ Use the `DeploymentType` property to specify the Amazon FSx Windows file system deployment type.
+ Use the `PreferredSubnetId` property to specify the subnet in which you want the preferred file server to be located for a `MULTI_AZ_1` Amazon FSx for Windows file system deployment type. | December 19, 2019 |
| [Updated resource](#doc-history) | The following resource was updated: `AWS::FSx::FileSystem`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-fsx-filesystem.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-fsx-filesystem.html)
In the [WindowsConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-fsx-filesystem-windowsconfiguration.html) property type:
+ Use the `DeploymentType` property to specify the file system deployment type.
+ Use the `PreferredSubnetId` property to specify the subnet in which you want the preferred file server to be located. | December 19, 2019 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::EC2::GatewayRouteTableAssociation.
[AWS::EC2::GatewayRouteTableAssociation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-gatewayroutetableassociation.html)
Use the `AWS::EC2::GatewayRouteTableAssociation` property to associate a virtual private gateway or internet gateway with a route table. | December 19, 2019 |
| [Updated resource](#doc-history) | The following resource was updated: `AWS::EC2::Instance`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-instance.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-instance.html)
In the [ElasticInferenceAccelerator](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ec2-instance-elasticinferenceaccelerator.html) property type, use the `Count` property to specify the number of elastic inference accelerators to attach to the instance. | December 12, 2019 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CodeBuild::ReportGroup
[AWS::CodeBuild::ReportGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codebuild-reportgroup.html)
Use the `AWS::CodeBuild::ReportGroup` resource to specify information about a report group. When you specify a report group in a CodeBuild project, a build of the project creates reports in the report group that contain results from running test cases. | December 12, 2019 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: `AWS::ApiGatewayV2::Api`, `AWS::ApiGatewayV2::Authorizer`, `AWS::ApiGatewayV2::Integration`, `AWS::ApiGatewayV2::Stage`.
[AWS::ApiGatewayV2::Api](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-api.html)
Use the `AWS::ApiGatewayV2::Api` resource to create an HTTP API (beta).
[AWS::ApiGatewayV2::Authorizer](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-authorizer.html)
Use the `AWS::ApiGatewayV2::Authorizer` resource to create a JWT authorizer for an HTTP API (beta).
[AWS::ApiGatewayV2::Integration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-integration.html)
Use the `AWS::ApiGatewayV2::Integration` resource to create an integration for an HTTP API (beta).
[AWS::ApiGatewayV2::Stage](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-stage.html)
Use the `AWS::ApiGatewayV2::Stage` resource to create a stage for an HTTP API (beta). | December 4, 2019 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::Lambda::Alias and AWS::Lambda::Version.
[AWS::Lambda::Alias](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-alias.html)
Use the `ProvisionedConcurrencyConfiguration` property to specify a provisioned concurrency configuration for a function's alias.
[AWS::Lambda::Version](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-version.html)
Use the `ProvisionedConcurrencyConfiguration` property to specify a provisioned concurrency configuration for a function's version. | December 3, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: `AWS::StepFunctions::StateMachine`.
[AWS::StepFunctions::StateMachine](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-stepfunctions-statemachine.html)
The `AWS::StepFunctions::StateMachine` now supports Express workflows using the new `StateMachineType` parameter. You can also configure CloudWatch Logging information for Express workflows using `LoggingConfiguration`, `LogDestination`, and `CloudWatchLogsLogGroup`. | December 3, 2019 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::S3::AccessPoint
[Access Points](https://docs.aws.amazon.com/AmazonS3/latest/dev/access-points.html)
Use the `AWS::S3::AccessPoint` resource to specify an S3 access point. | December 3, 2019 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::AccessAnalyzer::Analyzer
[AWS::AccessAnalyzer::Analyzer](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-accessanalyzer-analyzer.html)
Use the `AWS::AccessAnalyzer::Analyzer` resource to create an analyzer for IAM Access Analyzer. | December 2, 2019 |
| [New resource](aws-template-resource-type-ref.md) | The following resources were added: `AWS::EventSchemas::Discoverer`, `AWS::EventSchemas::Registry`, and `AWS::EventSchemas::Schema`.
[AWS::EventSchemas::Discoverer](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eventschemas-discoverer.html)
Use the `AWS::EventSchemas::Discoverer` resource to specify a discoverer that is associated with an event bus. A discoverer allows the Amazon EventBridge Schema Registry to automatically generate schemas based on events on an event bus.
[AWS::EventSchemas::Registry](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eventschemas-registry.html)
Use the `AWS::EventSchemas::Registry` to specify a schema registry. Schema registries are containers for Schemas. Registries collect and organize schemas so that your schemas are in logical groups.
[AWS::EventSchemas::Schema](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eventschemas-schema.html)
Use the `AWS::EventSchemas::Schema` resource to specify an event schema. | December 1, 2019 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Lambda::EventInvokeConfig
[AWS::Lambda::EventInvokeConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventinvokeconfig.html)
Use the `EventInvokeConfig` resource to configure destinations and error handling for asynchronous invocation. | November 26, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudWatch::Alarm.
[AWS::CloudWatch::Alarm](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cw-alarm.html)
In the [MetricDataQuery](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudwatch-alarm-metricdataquery.html) property type, use the `Period` property to specify the granularity, in seconds, of the returned data points. | November 25, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CodePipeline::Pipeline.
[AWS::CodePipeline::Pipeline](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codepipeline-pipeline.html)
In the [ActionDeclaration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-codepipeline-pipeline-stages-actions.html) property type, use the `Namespace` property to specify the variable namespace associated with the action. All variables produced as output by this action fall under this namespace. | November 25, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Lambda::EventSourceMapping.
[AWS::Lambda::EventSourceMapping](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventsourcemapping.html)
For stream sources (DynamoDB and Kinesis), use the `BisectBatchOnFunctionError` property to split the batch in two and retry if the function returns an error.
For stream sources (DynamoDB and Kinesis), use the `DestinationConfig` property to specify an Amazon SQS queue or Amazon SNS topic destination for discarded records.
For stream sources (DynamoDB and Kinesis), use the `MaximumRecordAgeInSeconds` property to specify the maximum age of a record that Lambda sends to a function for processing.
For stream sources (DynamoDB and Kinesis), use the `MaximumRetryAttempts` property to specify the maximum number of times to retry when the function returns an error.
For stream sources (DynamoDB and Kinesis), use the `ParallelizationFactor` property to specify the number of batches to process from each shard concurrently. | November 25, 2019 |
| [Updated resource](#doc-history) | The following resource was updated: `AWS::CloudWatch::Alarm`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudwatch-alarm.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudwatch-alarm.html)
In the [MetricDataQuery](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-cloudwatch-alarm-metricdataquery.html) property type, use the `Period` property to specify the granularity, in seconds, of the returned data points. | November 25, 2019 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::ECS::PrimaryTaskSet, AWS::ECS::TaskSet.
[AWS::ECS::PrimaryTaskSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-primarytaskset.html)
Use the `AWS::ECS::PrimaryTaskSet` resource to specify which task set in a service is the primary task set. Any parameters that are updated on the primary task set in a service will transition to the service. This is used when a service uses the `EXTERNAL` deployment controller type.
[AWS::ECS::TaskSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-taskset.html)
Use the `AWS::ECS::TaskSet` resource to create a task set in the specified cluster and service. This is used when a service uses the `EXTERNAL` deployment controller type. | November 25, 2019 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CloudWatch::InsightRule.
[AWS::CloudWatch::InsightRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudwatch-insightrule.html)
Use the `AWS::CloudWatch::InsightRule` property to create a Contributor Insights rule. Rules evaluate log events in a CloudWatch Logs log group, enabling you to find contributor data for the log events in that log group. | November 25, 2019 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS WAFv2.
[AWS WAFv2](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_WAFv2.html)
This is the latest version of AWS WAF, a web application firewall that lets you monitor HTTP(S) requests that are forwarded to an Amazon API Gateway REST API, Amazon CloudFront, Application Load Balancer, an AWS AppSync GraphQL API, or an Amazon Cognito user pool. AWS WAF also lets you control access to your content. | November 25, 2019 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::AppSync::Resolver, AWS::AppSync::DataSource.
[AWS::AppSync::Resolver](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-resolver.html)
Use the `CachingConfig` property to specify the caching behavior of your AWS AppSync resolver.
[AWS::AppSync::Resolver](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-resolver.html)
Use the `SyncConfig` property to specify the conflict detection and resolution strategy of your AWS AppSync resolver.
[AWS::AppSync::Resolver](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-resolver.html)
Use the `LambdaConflictHandlerConfig` property to specify the ARN of the lambda that is used for handling conflicts in your AWS AppSync resolver.
[AWS::AppSync::DataSource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-datasource.html)
Use the `DeltaSyncConfig` property to specify the delta sync configurations for your versioned AWS AppSync data source. | November 21, 2019 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::ECS::Cluster, AWS::ECS::Service, and AWS::ECS::TaskDefinition.
[AWS::ECS::Cluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-cluster.html)
Use the `ClusterSettings` property to specify the setting to use when creating a cluster. This parameter is used to use CloudWatch Container Insights for a cluster.
[AWS::ECS::Service](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-service.html)
Use the `DeploymentController` property to specify the deployment controller to use for the service.
[AWS::ECS::TaskDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-taskdefinition.html)
In the [ContainerDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-containerdefinitions.html) property type, use the `FirelensConfiguration` property to specify the FireLens configuration for the container. This is used to specify and configure a log router for container logs.
In the [LinuxParameters](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-linuxparameters.html) property type:
+ use the `MaxSwap` property to specify the total amount of swap memory (in MiB) a container can use.
+ use the `Swappiness` property to tune a container's memory swappiness behavior. A `swappiness` value of `0` will cause swapping to not happen unless absolutely necessary. A `swappiness` value of `100` will cause pages to be swapped very aggressively. | November 21, 2019 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::RDS::DBCluster and AWS::RDS::DBInstance.
[AWS::RDS::DBCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html)
Use the `EnableHttpEndpoint` property to indicate whether to enable the HTTP endpoint for an Aurora Serverless DB cluster. By default, the HTTP endpoint is disabled. When enabled, the HTTP endpoint provides a connectionless web service API for running SQL queries on the Aurora Serverless DB cluster. You can also query your database from inside the RDS console with the query editor.
[AWS::RDS::DBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html)
For Oracle DB instances, Amazon RDS can use Kerberos Authentication to authenticate users that connect to the DB instance. | November 21, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ApiGateway::RestApi.
[AWS::ApiGateway::RestApi](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-restapi.html)
Use the `VpcEndpointIds` property to specify VPC endpoint IDs of an API ([AWS::ApiGateway::RestApi](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-restapi.html)) against which to create Route53 ALIASes. It is only supported for `PRIVATE` endpoint type. | November 21, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CertificateManager::Certificate
[AWS::CertificateManager::Certificate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-certificatemanager-certificate.html)
Use the `CertificateTransparencyLoggingPreference` property to enable or disable certificate transparency logging.
Use the `PrivateCertificateAuthorityArn` property to specify a private certificate authority (CA) from AWS Private CA as certificate issuer.
Use the `GetAtt` function to retrieve the `CertificateARN` of the `AWS::CertificateManager::Certificate` resource.
Use the `GetAtt` function to retrieve the `CertificateStatus` of the `AWS::CertificateManager::Certificate` resource.
In the [DomainValidationOption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-certificatemanager-certificate-domainvalidationoption.html.html) property type, use the `HostedZoneId` property to validate a domain with a Route 53 hosted zone ID. | November 21, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resources were updated: AWS::Cognito::UserPool
[AWS::Cognito::UserPool](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool.html)
Added `ConfigurationSet` and `From` properties to the `EmailConfiguration` parameter.
[AWS::Cognito::UserPoolClient](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpoolclient.html)
Added `PreventUserExistenceErrors` parameter to help manage errors and responses when a user does not exist in the user pool.
[AWS::Cognito::UserPoolUser](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpooluser.html)
Use the `ClientMetadata` parameter to provide input to the AWS Lambda function that is invoked by the *pre sign-up* trigger. | November 21, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::EC2::EIP.
[AWS::EC2::EIP](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-eip.html)
Use the `Tags` property to specify any tags for the Elastic IP address. | November 21, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Glue::MLTransform
[AWS::Glue::MLTransform](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-mltransform.html)
Use the `GlueVersion` property to specify which version of AWS Glue this machine learning transform is compatible with. | November 21, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::IAM::User.
[AWS::IAM::User](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-user.html)
Use the `Tags` property to specify a list of tags that you want to attach to the newly created user. | November 21, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Elasticsearch::Domain.
[AWS::Elasticsearch::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticsearch-domain.html)
Use the `CognitoOptions` property to configure OpenSearch Service to use Amazon Cognito authentication for OpenSearch Dashboards.
Use the [EnableVersionUpgrade](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatepolicy.html#cfn-attributes-updatepolicy-upgradeelasticsearchversion) update policy to update the `ElasticsearchVersion` property without replacing the `AWS::Elasticsearch::Domain` resource. | November 21, 2019 |
| [Updated resource](#doc-history) | The following resource was updated: `AWS::S3::Bucket`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-s3-bucket.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-s3-bucket.html)
In the [Transition](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-s3-bucket-transition.html) property type, the `StorageClass` property supports `DEEP_ARCHIVE`. | November 21, 2019 |
| [Updated resource](#doc-history) | The following resource was updated: `AWS::Lambda::Function`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-lambda-function.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-lambda-function.html)
In the [Code](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-lambda-function-code.html) property type, `ZipFile` supports `nodejs10.x` for `RunTime`. | November 21, 2019 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::AppSync::ApiCache.
[AWS::AppSync::ApiCache](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-apicache.html)
Use the `AWS::AppSync::ApiCache` resource to enable resolver caching with AWS AppSync. | November 21, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated to support Amazon EKS managed node groups: `AWS::EKS::Cluster`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-cluster.html)
Use the `AWS::EKS::Cluster` resource to create a new Amazon EKS cluster. | November 18, 2019 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: `AWS::EKS::Nodegroup`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-nodegroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-nodegroup.html)
Use the `AWS::EKS::Nodegroup` resource to create a new Amazon EKS managed node group. | November 18, 2019 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::GameLift::Build, AWS::GameLift::Fleet.
[AWS::GameLift::Build](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gamelift-build.html)
Use the `OperatingSystem` property to specify the operating system that the build files run on.
[AWS::GameLift::Fleet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gamelift-fleet.html)
Use the `CertificateConfiguration` property to generate a TLS/SSL certificate for the new fleet.
Use the `FleetType` property to specify use of On-Demand or Spot instances in the fleet.
Use the `InstanceRoleArn` property to manage access to your non-GameLift AWS resources from GameLift fleet instances.
Use the `MetricGroups` property to add fleet metrics to a CloudWatch metric group.
Use the `NewGameSessionProtectionPolicy` property to prevent the fleet's active game sessions from being terminated during a scale down event.
Use the `PeerVpcAwsAccountId` property when setting up VPC peering for the fleet.
Use the `PeerVpcId` property when setting up VPC peering for the fleet.
Use the `ResourceCreationLimitPolicy` property to limit an individual player's ability to use the fleet's available hosting resources.
Use the `RuntimeConfiguration` property to configure what processes are run on each instance in the fleet.
Use the `ScriptId` property to create a Realtime Servers fleet and configure it with a Realtime script. | November 14, 2019 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::GameLift::Script, AWS::GameLift::GameSessionQueue, AWS::GameLift::MatchmakingConfiguration, AWS::GameLift::MatchmakingRuleSet.
[AWS::GameLift::Script](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gamelift-script.html)
Use the `Script` resource to upload a configuration script for a Realtime Servers fleet.
[AWS::GameLift::GameSessionQueue](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gamelift-gamesessionqueue.html)
Use the `GameSessionQueue` resource to create a game session queue that processes player requests for new game sessions.
[AWS::GameLift::MatchmakingConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gamelift-matchmakingconfiguration.html)
Use the `MatchmakingConfiguration` resource to create a matchmaker that processes player requests for new matched game sessions.
[AWS::GameLift::MatchmakingRuleSet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gamelift-matchmakingruleset.html)
Use the `MatchmakingRuleSet` resource to create rules that specify how to form matches and evaluate players for inclusion in a match. | November 14, 2019 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CodeStarNotifications::NotificationRule
[AWS::CodeStarNotifications::NotificationRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codestarnotifications-notificationrule.html)
Use the `AWS::CodeStarNotifications::NotificationRule` resource to create notification rules for resources in AWS CodeBuild, AWS CodeCommit, AWS CodeDeploy, and AWS CodePipeline. | November 7, 2019 |
| [New resource](#doc-history) | The following resources were added: `AWS::MediaConvert::JobTemplate`, `AWS::MediaConvert::Preset`, `AWS::MediaConvert::Queue`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediaconvert-jobtemplate.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediaconvert-jobtemplate.html)
Use the `AWS::MediaConvert::JobTemplate` resource to specify a job template for transcoding jobs.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediaconvert-preset.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediaconvert-preset.html)
Use the `AWS::MediaConvert::Preset` resource to specify an output preset as part of a transcoding job.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediaconvert-queue.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediaconvert-queue.html)
Use the `AWS::MediaConvert::Queue` resource to specify an on-demand transcoding queue. | November 6, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Glue::Crawler
[AWS::Glue::Crawler](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-crawler.html)
Use the `DynamoDBTargets` property to specify a list of Amazon DynamoDB targets.
Use the `CatalogTargets` property to specify a list of AWS Glue Data Catalog targets. | November 4, 2019 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::ApiGateway::ApiKey, AWS::ApiGateway::ClientCertificate, AWS::ApiGateway::DomainName, AWS::ApiGateway::RestApi, and AWS::ApiGateway::UsagePlan.
[AWS::ApiGateway::ApiKey](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-apikey.html)
Use the `Tags` property to specify an array of arbitrary tags (key-value pairs) to associate with the API key.
[AWS::ApiGateway::ClientCertificate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-clientcertificate.html)
Use the `Tags` property to specify an array of arbitrary tags (key-value pairs) to associate with the client certificate.
[AWS::ApiGateway::DomainName](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html)
Use the `SecurityPolicy` property to the Transport Layer Security (TLS) version \$1 cipher suite for this domain name.
Use the `Tags` property to specify an array of arbitrary tags (key-value pairs) to associate with the domain name.
[AWS::ApiGateway::RestApi](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-restapi.html)
Use the `Tags` property to specify an array of arbitrary tags (key-value pairs) to associate with the API.
[AWS::ApiGateway::UsagePlan](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-usageplan.html)
Use the `Tags` property to specify an array of arbitrary tags (key-value pairs) to associate with the usage plan. | October 31, 2019 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::CodePipeline::CustomActionType, AWS::CodePipeline::Pipeline.
[AWS::CodePipeline::CustomActionType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codepipeline-customactiontype.html)
Use the `Tags` property to specify the tags for the custom action.
[AWS::CodePipeline::Pipeline](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codepipeline-pipeline.html)
Use the `Tags` property to specify the tags for the pipeline. | October 31, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Amplify::App
[AWS::Amplify::App](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-app.html)
Use the `EnablePullRequestPreview` property to specify whether pull request previews are enabled for each branch that Amplify Console automatically creates for your app.
Use the `PullRequestEnvironmentName` property to specify a dedicated backend environment for your pull request previews. | October 31, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::ECS::TaskDefinition.
[AWS::ECS::TaskDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-taskdefinition.html)
Use the `InferenceAccelerator` property to specify the Elastic Inference accelerators to use for the containers in the task. | October 31, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Events::Rule.
[AWS::Events::Rule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-rule.html)
In the [Target](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-events-rule-target.html) property type, use the `BatchParameters` property to specify the job definition, job name, and other parameters, if the event target is an AWS Batch job. | October 31, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Elasticsearch::Domain.
[AWS::Elasticsearch::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticsearch-domain.html)
Use the `LogPublishingOptions` property to configure slow log publishing. | October 31, 2019 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::Pinpoint::EmailTemplate, AWS::Pinpoint::PushTemplate, and AWS::Pinpoint::SmsTemplate.
[AWS::Pinpoint::EmailTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pinpoint-emailtemplate.html)
Use the `AWS::Pinpoint::EmailTemplate` resource to create a message template that you can use in messages that are sent through the email channel.
[AWS::Pinpoint::PushTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pinpoint-pushtemplate.html)
Use the `AWS::Pinpoint::PushTemplate` resource to create a message template that you can use in messages that are sent through a push notification channel.
[AWS::Pinpoint::SmsTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pinpoint-smstemplate.html)
Use the `AWS::Pinpoint::SmsTemplate` resource to create a message template that you can use in messages that are sent through the SMS channel. | October 31, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Amplify::Branch
[AWS::Amplify::Branch](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-branch.html)
Use the `EnablePullRequestPreview` property to specify whether Amplify Console creates a preview for each pull request that is made for the branch.
Use the `PullRequestEnvironmentName` property to specify a dedicated backend environment for your pull request previews. | October 24, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Cognito::UserPool
[AWS::Cognito::UserPool](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpool.html)
Use the `Schema` parameter to add or update schema attributes.
[AWS::Cognito::UserPool](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpool.html)
Use the `AliasAttributes` parameter to add or update an alias for the user pool.
[AWS::Cognito::UserPool](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpool.html)
Use the `UsernameAttributes` parameter to determine if email addresses or phone numbers can be used as user names when a user signs up. | October 24, 2019 |
| [Updated resources](#doc-history) | The following resource was updated: `AWS::MSK::Cluster`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-msk-cluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-msk-cluster.html)
Use the `NumberOfBrokerNodes` property to submit an update to change the number of broker nodes in the cluster. | October 17, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Cognito::IdentityPoolRoleAttachment
[AWS::Cognito::IdentityPoolRoleAttachment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-identitypoolroleattachment.html)
Use the `IdentityProvider` parameter to specify the identity provider for which the role is mapped. | October 17, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::FSx::FileSystem
[AWS::FSx::FileSystem](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fsx-filesystem.html)
In the [WindowsConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fsx-filesystem-windowsconfiguration.html) property type, use the `SelfManagedActiveDirectoryConfiguration` property to join an Amazon FSx Windows File Server instance to your self-managed (including on-premises) Microsoft Active Directory (AD) directory. | October 17, 2019 |
| [Updated Resource](#doc-history) | The following resource was updated: `AWS::Batch::ComputeEnvironment`
[ComputeResources](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-batch-computeenvironment-computeresources.html)
In the [ComputeResources](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-batch-computeenvironment-computeresources.html) property type, use the `AllocationStrategy` property to specify the strategy to use to select instance types. | October 17, 2019 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource were updated: AWS::Events::EventBusPolicy, AWS::Events::Rule
[AWS::Events::EventBusPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-eventbuspolicy.html)
Use the `EventBusName` property to specify the name of the event bus to associate with this policy.
[AWS::Events::Rule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-rule.html)
Use the `EventBusName` property to specify the name of the event bus to associate with this rule. | October 3, 2019 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Pinpoint::App, AWS::Pinpoint::Campaign, and AWS::Pinpoint::Segment.
[AWS::Pinpoint::App](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pinpoint-app.html)
The `ARN` attribute returns the Amazon Resource Name (ARN) of the application.
Use the `Tags` property to specify a string-to-string map of key-value pairs that defines the tags to associate with the application.
[AWS::Pinpoint::Campaign](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pinpoint-campaign.html)
The `ARN` attribute returns the Amazon Resource Name (ARN) of the campaign.
Use the `Tags` property to specify a string-to-string map of key-value pairs that defines the tags to associate with the campaign.
[AWS::Pinpoint::Segment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pinpoint-segment.html)
The `ARN` attribute returns the Amazon Resource Name (ARN) of the segment.
Use the `Tags` property to specify a string-to-string map of key-value pairs that defines the tags to associate with the segment. | October 3, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Budgets::Budget
[AWS::Budgets::Budget](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-budgets-budget.html)
In the [BudgetData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-budgets-budget-budgetdata.html) property type, use the `PlannedBudgetLimits` property to specify a map containing multiple budget limits, including current or future limits. | October 3, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Cognito::UserPool
[AWS::Cognito::UserPool](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpool.html)
Use the `EnabledMfas` parameter to enable MFA on a specified user pool. | October 3, 2019 |
| [New resources](aws-template-resource-type-ref.md) | The following resources were added: AWS::Cognito::UserPoolDomain, AWS::Cognito::UserPoolResourceServer, AWS::Cognito::UserPoolIdentityProvider, AWS::Cognito::RiskConfigurationAttachment, AWS::Cognito::UICustomizationAttachment.
[AWS::Cognito::UserPoolDomain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpooldomain.html)
Use the `AWS::Cognito::UserPoolDomain` resource to create a new domain for a user pool.
[AWS::Cognito::UserPoolResourceServer](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpoolresourceserver.html)
Use the `AWS::Cognito::UserPoolResourceServer` resource to create a new OAuth2.0 resource server and define custom scopes in it.
[AWS::Cognito::UserPoolIdentityProvider](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpoolidentityprovider.html)
Use the `AWS::Cognito::UserPoolIdentityProvider` resource to create an identity provider for a user pool.
[AWS::Cognito::UserPoolRiskConfigurationAttachment ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpoolriskconfigurationattachment.html)
Use the `AWS::Cognito::UserPoolRiskConfigurationAttachment` resource to set the risk configuration that is used for Amazon Cognito advanced security features.
[AWS::Cognito::UserPoolUICustomizationAttachment ](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpooluicustomizationattachment.html)
Use the `AWS::Cognito::UserPoolUICustomizationAttachment` resource to set the UI customization information for a user pool's built-in app UI. | October 3, 2019 |
| [New resources](aws-template-resource-type-ref.md) | The following resource were added: AWS::EC2::TrafficMirrorFilter, AWS::EC2::TrafficMirrorFilterRule, AWS::EC2::TrafficMirrorSession, and AWS::EC2::TrafficMirrorTarget
[AWS::EC2::TrafficMirrorFilter](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-trafficmirrorfilter.html)
Use the `AWS::EC2::TrafficMirrorFilter` resource to specify a traffic mirror filter.
[AWS::EC2::TrafficMirrorFilterRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-trafficmirrorfilterrule.html)
Use the `AWS::EC2::TrafficMirrorFilterRule` resource to manage traffic mirror filter rules.
[AWS::EC2::TrafficMirrorSession](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-trafficmirrorsession.html)
Use the `AWS::EC2::TrafficMirrorSession` resource to specify a traffic mirror session.
[AWS::EC2::TrafficMirrorTarget](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-trafficmirrortarget.html)
Use the `AWS::EC2::TrafficMirrorTarget` resource to specify a traffic mirror target. | October 3, 2019 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Events::EventBus
[AWS::Events::EventBus](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-eventbus.html)
Use the `EventBus` resource to create or update a custom event bus or a partner event bus. | October 3, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Glue::DevEndpoint
[AWS::Glue::DevEndpoint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-devendpoint.html)
Use the `WorkerType` property to specify a type of predefined worked allocated to the development endpoint.
Use the `NumberOfWorkers` property to specify the number of workers of a defined `workerType` that are allocated to the development endpoint.
Use the `GlueVersion` property to specify the versions of Apache Spark and Python that AWS Glue supports for the development endpoint.
Use the `Arguments` property to specify a map of arguments used to configure the `DevEndpoint`. | September 27, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Glue::Job
[AWS::Glue::Job](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-job.html)
Use the `Timeout` property to specify the job timeout in minutes.
Use the `NotificationProperty` property to specify the configuration properties of a notification.
Use the `NotifyDelayAfter` property to specify the number of minutes to wait before sending a job run delay notification after a job run starts. | September 26, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Glue::Trigger
[AWS::Glue::Trigger](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-trigger.html)
Use the `StartOnCreation` property to specify starting `SCHEDULED` and `CONDITIONAL` triggers when created.
Use the `WorkflowName` property to specify the name of the workflow associated with the trigger. | September 26, 2019 |
| [Updated resource](#doc-history) | The following resource was updated: `AWS::DocDB::DBCluster`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-docdb-dbcluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-docdb-dbcluster.html)
Use the `EnableCloudwatchLogsExports` property to specify the list of log types that need to be enabled for exporting to CloudWatch Logs. | September 26, 2019 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Glue::Workflow
[AWS::Glue::Workflow](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-workflow.html)
Use the AWS::Glue::Workflow resource to manage AWS Glue workflows. | September 26, 2019 |
| [Updated resource](#doc-history) | The following resource was updated: `AWS::Config::RemediationConfiguration`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-config-remediationconfiguration.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-config-remediationconfiguration.html)
Use the `ExecutionControls` property to specify an ExecutionControls object. | September 12, 2019 |
| [Updated resources](aws-template-resource-type-ref.md) | The following resources were updated: AWS::RDS::DBCluster and AWS::RDS::DBInstance
[AWS::RDS::DBCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html)
Use the `AssociatedRoles` property to specify the AWS Identity and Access Management (IAM) roles associated with the DB instance.
Use the `RestoreType` property to specify the type of restore to be performed.
Use the `SourceDBClusterIdentifier` property to specify the identifier of the source DB cluster from which to restore.
Use the `UseLatestRestorableTime` property to specify whether to restore the DB cluster to the latest restorable backup time.
[AWS::RDS::DBInstance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html)
Use the `AssociatedRoles` property to specify the AWS Identity and Access Management (IAM) roles associated with the DB instance. | August 29, 2019 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::ApplicationAutoScaling::ScalableTarget`, `AWS::DynamoDB::Table`, `AWS::EC2::Instance`, `AWS::ECS::TaskDefinition`, `AWS::ElastiCache::ReplicationGroup`, `AWS::Events::Rule`, `AWS::IAM::Role`, and `AWS::Lambda::EventSourceMapping`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-applicationautoscaling-scalabletarget.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-applicationautoscaling-scalabletarget.html)
Use the `SuspendedState` property to suspend and resume automatic scaling. Setting the value of an attribute to `true` suspends the specified scaling activities. Setting it to `false` (default) resumes the specified scaling activities.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dynamodb-table.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dynamodb-table.html)
In the [SSESpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-dynamodb-table-ssespecification.html) property type, use the `SSEType` property to specify server-side encryption type.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-instance.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-instance.html)
Use the `CpuOptions` property to specify the CPU options for the instance.
In the [Ebs](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ec2-instance-ebs.html) property type, use the `KmsKeyId` property to specify an identifier (key ID, key alias, ID ARN, or alias ARN) for a customer managed key under which the EBS volume is encrypted.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-taskdefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-taskdefinition.html)
Use the `IpcMode` property to specify the IPC resource namespace to use for the containers in the task. The valid values are `host`, `task`, or `none`.
Use the `PidMode` property to specify the process namespace to use for the containers in the task. The valid values are `host` or `task`.
In the [ContainerDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ecs-taskdefinition-containerdefinitions.html) property type:
+ When the `Interactive` property is set to `true`, this allows you to deploy containerized applications that require `stdin` or a `tty` to be allocated.
+ When the `PseudoTerminal` proprety is set to `true`, a TTY is allocated.
+ Use the `SystemControls` property to specify a list of namespaced kernel parameters to set in the container.
In the [LogConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ecs-taskdefinition-containerdefinitions-logconfiguration.html) property type, use the `SecretOptions` property to specify the secrets to pass to the log configuration.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticache-replicationgroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticache-replicationgroup.html)
Use the `KmsKeyId` property to specify the ID of the KMS key used to encrypt the disk on the cluster.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-events-rule.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-events-rule.html)
In the [EcsParameters](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-events-rule-ecsparameters.html) property type:
+ Use the `Group` property to specify an ECS task group for the task.
+ Use the `LaunchType` property to specify the launch type on which your task is running.
+ If the ECS task uses the `awsvpc` network mode, use the `NetworkConfiguration` property to specify the VPC subnets and security groups associated with the task and whether a public IP address is to be used.
+ Use the `PlatformVersion` property to specify the platform version for the task.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-role.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-role.html)
Use the `Description` property to provide a description for the role.
Use the `Tags` property to specify a list of tags that are attached to the specified role.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-lambda-eventsourcemapping.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-lambda-eventsourcemapping.html)
Use the `MaximumBatchingWindowInSeconds` property to specify the maximum amount of time to gather records before invoking the function, in seconds. | August 29, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::CloudWatch::Alarm
[AWS::CloudWatch::Alarm](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cw-alarm.html)
Use the `ThresholdMetricId` property to specify the ID of the ANOMALY\$1DETECTION\$1BAND function used as the threshold for the alarm. | August 29, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::Elasticsearch::Domain.
[AWS::Elasticsearch::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticsearch-domain.html)
In the [ElasticsearchClusterConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticsearch-domain-elasticsearchclusterconfig.html) property type, use the `ZoneAwarenessConfig` property to specify zone awareness configuration options. | August 29, 2019 |
| [New resource ](aws-template-resource-type-ref.md) | The following resource was added: AWS::Config::OrganizationConfigRule
[AWS::Config::OrganizationConfigRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-config-organizationconfigrule.html)
Use the `AWS::Config::OrganizationConfigRule` resource to create an OrganizationConfigRule that has information about config rules that AWS Config creates in the member accounts. | August 29, 2019 |
| [Updated resource](#doc-history) | The following resource was updated: `AWS::Neptune::DBCluster`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-neptune-dbcluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-neptune-dbcluster.html)
Use the `EnableCloudwatchLogsExports` property to specify a list of log types that are enabled for export to CloudWatch Logs. | August 22, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::DMS::ReplicationTask
[AWS::DMS::ReplicationTask](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dms-replicationtask.html)
Use the `CdcStartPosition` property to indicate when you want a change data capture (CDC) operation to start.
Use the `CdcStopPosition` property to indicate when you want a change data capture (CDC) operation to stop. | August 16, 2019 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::EC2::ClientVpnEndpoint`, `AWS::Greengrass::Group`, `AWS::Greengrass::ConnectorDefinition`, `AWS::Greengrass::CoreDefinition`, `AWS::Greengrass::DeviceDefinition`, `AWS::Greengrass::FunctionDefinition`, `AWS::Greengrass::LoggerDefinition`, `AWS::Greengrass::ResourceDefinition`, and `AWS::Greengrass::SubscriptionDefinition`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-clientvpnendpoint.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-clientvpnendpoint.html)
Use the `SplitTunnel` parameter to specify whether split-tunnel is enabled on the AWS Client VPN endpoint.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-connectordefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-connectordefinition.html)
Use the `Tags` property to attach metadata to the `AWS::Greengrass::ConnectorDefinition` resource.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-coredefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-coredefinition.html)
Use the `Tags` property to attach metadata to the `AWS::Greengrass::CoreDefinition` resource.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-devicedefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-devicedefinition.html)
Use the `Tags` property to attach metadata to the `AWS::Greengrass::DeviceDefinition` resource.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-functiondefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-functiondefinition.html)
Use the `Tags` property to attach metadata to the `AWS::Greengrass::FunctionDefinition` resource.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-group.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-group.html)
Use the `Tags` property to attach metadata to the `AWS::Greengrass::Group` resource.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-loggerdefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-loggerdefinition.html)
Use the `Tags` property to attach metadata to the `AWS::Greengrass::LoggerDefinition` resource.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-resourcedefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-resourcedefinition.html)
Use the `Tags` property to attach metadata to the `AWS::Greengrass::ResourceDefinition` resource.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-subscriptiondefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-subscriptiondefinition.html)
Use the `Tags` property to attach metadata to the `AWS::Greengrass::SubscriptionDefinition` resource. | August 8, 2019 |
| [Updated resource](aws-template-resource-type-ref.md) | The following resource was updated: AWS::AppSync::GraphQLApi.
[AWS::AppSync::GraphQLApi](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-graphqlapi.html)
In the [LogConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-graphqlapi-logconfig.html) property type, when set to `TRUE`, the `excludeVerboseContent` property excludes sections that contain information such as headers, context, and evaluated mapping templates, regardless of logging level. | August 8, 2019 |
| [New resources](#doc-history) | The following resources were added: `AWS::ManagedBlockchain::Member` and `AWS::ManagedBlockchain::Node`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-managedblockchain-member.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-managedblockchain-member.html)
Use the `Member` resource to create the first member or an additional member of an Amazon Managed Blockchain network.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-managedblockchain-node.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-managedblockchain-node.html)
Use the `Node` resource to create a peer node in a member of an Amazon Managed Blockchain network. | August 8, 2019 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::Glue::MLTransform
[AWS::Glue::MLTransform](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-glue-mltransform.html)
Use the `AWS::Glue::MLTransform` resource to manage machine learning transforms. | August 8, 2019 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::LakeFormation::DataLakeSettings
[AWS::LakeFormation::DataLakeSettings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lakeformation-datalakesettings.html)
Use the `AWS::LakeFormation::DataLakeSettings` resource to manage data lake settings. | August 8, 2019 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::LakeFormation::Permissions
[AWS::LakeFormation::Permissions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lakeformation-permissions.html)
Use the `AWS::LakeFormation:Permissions` resource to grant or revoke Lake Formation permissions. | August 8, 2019 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::LakeFormation::Resource
[AWS::LakeFormation::Resource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lakeformation-resource.html)
Use the `AWS::LakeFormation::Resource` resource to define the resources to which permissions are to be granted. | August 8, 2019 |
| [New resource](aws-template-resource-type-ref.md) | The following resource was added: AWS::CodeBuild::SourceCredential
[AWS::CodeBuild::SourceCredential](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codebuild-source-credential.html)
Use the `AWS::CodeBuild::SourceCredential` resource to specify information about the credentials for a GitHub, GitHub Enterprise, or Bitbucket repository used in an AWS CodeBuild build project. | August 7, 2019 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::Batch::JobDefinition`, `AWS::Cognito::UserPool`, `AWS::Cognito::UserPoolClient`, and `AWS::Glue::Job`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-batch-jobdefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-batch-jobdefinition.html)
In the [ContainerProperties](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-batch-jobdefinition-containerproperties.html) property type, use the `LinuxParameters` property to specify Linux-specific modifications that are applied to the container, such as details for device mappings.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cognito-userpool.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cognito-userpool.html)
Use the `UserPoolAddOns` property to enable advanced security risk detection.
Use the `VerificationMessageTemplate` property to define the template for verification messages.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cognito-userpoolclient.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cognito-userpoolclient.html)
Use the `AnalyticsConfiguration` property to define the Amazon Pinpoint analytics configuration for collecting metrics for this user pool.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-glue-job.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-glue-job.html)
Use the `GlueVersion` property to determine the versions of Apache Spark and Python that AWS Glue supports. The Python version indicates the version supported for jobs of type Spark.
Use the `MaxCapacity` property to specify the number of AWS Glue data processing units (DPUs) that can be allocated when this job runs. A DPU is a relative measure of processing power that consists of 4 vCPUs of compute capacity and 16 GB of memory.
For the `NumberofWorkers` property, when you specify a Python shell job (`JobCommand.Name`="pythonshell"), you can allocate either 0.0625 or 1 DPU. The default is 0.0625 DPU. When you specify an Apache Spark ETL job (`JobCommand.Name`="glueetl"), you can allocate from 2 to 100 DPUs. The default is 10 DPUs. This job type can't have a fractional DPU allocation.
Use the `WorkerType` property to specify the type of predefined worker that is allocated when a job runs.
In the [JobCommand](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-glue-job-jobcommand.html) property type, use the `PythonVersion` property to specify the Python version being used to execute a Python shell job. | August 2, 2019 |
| [New resource](#doc-history) | The following resource was added: `AWS::CodeStar::GitHubRepository`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codestar-githubrepository.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codestar-githubrepository.html)
Use the `AWS::CodeStar::GitHubRepository` resource to create a GitHub repository where you can store source code for use with AWS workflows. If provided, your source code is uploaded to the repository after it is created. | August 2, 2019 |
| [Updated resource](#doc-history) | You can now add tags to a CodeCommit repository in your CloudFormation template.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codecommit-repository.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codecommit-repository.html)
Use the `Tags` property to provide information about one or more tag key-value pairs to use when tagging a repository. | July 25, 2019 |
| [Updated resources](#doc-history) | The following resource was updated: `AWS::AmazonMQ::Broker`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-broker.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-broker.html)
Use the `encryptionOptions` property to specify an AWS owned key or a customer managed key. | July 22, 2019 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::Amplify::App` and `AWS::Amplify::Branch`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amplify-app.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amplify-app.html)
Use the `AutoBranchCreationConfig` property type to automatically create branches that match a certain pattern.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amplify-branch.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amplify-branch.html)
Use the `EnableAutoBuild` property to enable automatic builds for a branch. | July 18, 2019 |
| [New resources](#doc-history) | The following resources were added: `AWS::IoTEvents::DetectorModel` and `AWS::IoTEvents::Input`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotevents-detectormodel.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotevents-detectormodel.html)
Use the `DetectorModel` resource to create a detector model.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotevents-input.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotevents-input.html)
Use the `Input` resource to create an input. | July 18, 2019 |
| [New resource](#doc-history) | The following resource was added: `AWS::CloudWatch::AnomalyDetector`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudwatch-anomalydetector.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudwatch-anomalydetector.html)
Use the `AWS::CloudWatch::AnomalyDetector` resource to specify an anomaly detection band for a certain metric and statistic. The band represents the expected "normal" range for the metric values. | July 12, 2019 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::IoTAnalytics::Channel` and `AWS::IoTAnalytics::Datastore`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotanalytics-channel.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotanalytics-channel.html)
Use the `ChannelStorage` property to specify channel data is stored.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotanalytics-datastore.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotanalytics-datastore.html)
Use the `DatastoreStorage` property to specify where data store data is stored. | June 27, 2019 |
| [New resources](#doc-history) | The following resources were added: `AWS::MediaLive::Channel`, `AWS::MediaLive::Input`, and `AWS::MediaLive::InputSecurityGroup`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-medialive-channel.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-medialive-channel.html)
The `AWS::MediaLive::Channel` resource creates a channel. A MediaLive channel ingests and transcodes (decodes and encodes) source content from the inputs that are attached to that channel, and packages the new content into outputs.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-medialive-input.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-medialive-input.html)
The `AWS::MediaLive::Input` resource creates an input. A MediaLive input holds information that describes how the MediaLive channel is connected to the upstream system that is providing the source content that is to be transcoded.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-medialive-inputsecuritygroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-medialive-inputsecuritygroup.html)
The `AWS::MediaLive::InputSecurityGroup` resource creates an input security group. A MediaLive input security group is associated with a MediaLive input. The input security group is an "allow list" of IP addresses that controls whether an external IP address can push content to the associated MediaLive input. | June 27, 2019 |
| [Updated resource](#doc-history) | The following resource was updated: `AWS::EC2::LaunchTemplate`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-launchtemplate.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-launchtemplate.html)
In the [ SpotOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ec2-launchtemplate-spotoptions.html) property type, use `BlockDurationMinutes` to specify the required duration for the Spot Instances, and use `ValidUntil` to specify the end date for the Spot request. | June 25, 2019 |
| [New resource](#doc-history) | The following resource was added: `AWS::SecurityHub::Hub`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-securityhub-hub.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-securityhub-hub.html)
Use the [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-securityhub-hub.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-securityhub-hub.html) resource to specify the implementation of the AWS Security Hub service in your account. | June 25, 2019 |
| [Updated resources](#doc-history) | The following resource were updated: `AWS::AppStream::Fleet`, `AWS::ServiceCatalog::CloudFormationProvisionedProduct`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-cloudformationprovisionedproduct.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-cloudformationprovisionedproduct.html)
Use the `ProvisioningPreferences` property to specify user-defined preferences that will be applied when updating a provisioned product.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-fleet.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-fleet.html)
Use the `IdleDisconnectTimeoutInSeconds` property to specify the amount of time that users can be idle (inactive) before they are disconnected from their streaming session and the `DisconnectTimeoutInSeconds` time interval begins. | June 20, 2019 |
| [New resources](#doc-history) | The following resource was added: `AWS::Config::RemediationConfiguration`, `AWS::ServiceCatalog::StackSetConstraint`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-config-remediationconfiguration.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-config-remediationconfiguration.html)
Use the `AWS::Config::RemediationConfiguration` resource to specify the details about the remediation configuration, including the remediation action, parameters, and data to execute the action.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-stacksetconstraint.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-stacksetconstraint.html)
Use the `AWS::ServiceCatalog::StackSetConstraint` resource to specify a stack set constraint. | June 20, 2019 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::AppMesh::VirtualNode`, `AWS::CodeBuild::Project`, `AWS::EC2::Host`, `AWS::EC2::Route`, `AWS::EC2::VPNConnection`, `AWS::ECS::Cluster`, `AWS::ECS::Service`, `AWS::ECS::TaskDefinition`, `AWS::EFS::MountTarget`, `AWS::ElasticLoadBalancingV2::ListenerRule`, `AWS::EMR::Cluster`, `AWS::IoTAnalytics::Dataset`, `AWS::KinesisFirehose::DeliveryStream`, `AWS::S3::Bucket`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appmesh-virtualnode.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appmesh-virtualnode.html)
Use `ServiceDiscovery` to specify whether to use `AWSCloudMap` or `DNS` for service discovery. If using AWS Cloud Map for service discovery, use `AwsCloudMapServiceDiscovery` to specify `ServiceName`, `NamespaceName`, and `Attributes` properties. Use `AwsCloudMapInstanceAttribute` to specify key-value pairs for `AwsCloudMapServiceDiscovery`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-project.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-project.html)
Use the `SecondarySourceVersions` property to specify an array of `ProjectSourceVersion` objects. If `secondarySourceVersions` is specified at the build level, then they take over these `secondarySourceVersions` (at the project level).
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dlm-lifecyclepolicy.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dlm-lifecyclepolicy.html)
In the [PolicyDetails](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-dlm-lifecyclepolicy-policydetails.html) property type:
+ Use the `PolicyType` property to determine the valid target resource types and actions a policy can manage. This field defaults to EBS\$1SNAPSHOT\$1MANAGEMENT if not present.
+ Use the `Parameters` property to specify a set of optional parameters that can be provided by the policy.
In the [Schedule](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-dlm-lifecyclepolicy-schedule.html) property type, use the `VariableTags` property to specify a collection of key-value pairs with values determined dynamically when the policy is executed. Keys may be any valid Amazon EC2 tag key. Values must be in one of the two following formats: `$(instance-id)` or `$(timestamp)`. Variable tags are only valid for EBS Snapshot Management Instance policies.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-host.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-host.html)
Use the `HostRecovery` property to indicates whether to enable or disable host recovery for the Dedicated Host.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-route.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-route.html)
Use the `TransitGatewayId` property to specify the ID of a transit gateway.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-vpn-connection.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-vpn-connection.html)
Use the `TransitGatewayId` property to specify the ID of the transit gateway associated with the VPN connection.
Use the `VpnGatewayId` property to specify the ID of the virtual private gateway at the AWS side of the VPN connection.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ecr-repository.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ecr-repository.html)
Use the `Tags` property to specify an array of key-value pairs to apply to this resource.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-cluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-cluster.html)
Use the `Tags` property to apply metadata to clusters to help you categorize and organize them.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-service.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-service.html)
Use the `EnableECSManagedTags` property to specify whether to enable Amazon ECS managed tags for the tasks within the service.
Use the `PropagateTags` property to specify whether to propagate the tags from the task definition or the service to the tasks in the service.
Use the `Tags` property to apply metadata to services to help you categorize and organize them.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-taskdefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-taskdefinition.html)
In the [ContainerDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ecs-taskdefinition-containerdefinitions.html) property type:
+ Use the `ResourceRequirements` property to specify the type and amount of a resource to assign to a container. The only supported resource is a GPU.
+ Use the `Secrets` property to specify the secrets to pass to the container.
Use the `Tags` property to apply metadata to task definitions to help you categorize and organize them.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-efs-filesystem.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-efs-filesystem.html)
Use the `LifecyclePolicies` property to specify a list of policies used by EFS lifecycle management to transition files to the Infrequent Access (IA) storage class.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-efs-mounttarget.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-efs-mounttarget.html)
Use the `IpAddress` attribute to return the IPv4 address of the mount target.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticloadbalancingv2-listenerrule.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticloadbalancingv2-listenerrule.html)
In the [RuleCondition](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-elasticloadbalancingv2-listenerrule-conditions.html) property type:
+ Use the `HostHeaderConfig` property to specify information for a host header condition.
+ Use the `HttpHeaderConfig` property to specify information for an HTTP header condition.
+ Use the `HttpRequestMethodConfig` property to specify information for an HTTP method condition.
+ Use the `PathPatternConfig` property to specify information for a path pattern condition.
+ Use the `QueryStringConfig` property to specify information for a query string condition.
+ Use the `SourceIpConfig` property to specify information for a source IP condition.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-emr-cluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-emr-cluster.html)
In the [JobFlowInstancesConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-emr-cluster-jobflowinstancesconfig.html) property type, use the `Ec2SubnetIds` property to specify multiple EC2 subnet IDs.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotanalytics-dataset.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotanalytics-dataset.html)
When data set contents are created they are delivered to destinations specified in the `ContentDeliveryRules` property.
Use the `VersioningConfiguration` property to specify how many versions of data set contents are kept. If not specified or set to null, only the latest version plus the latest succeeded version (if they are different) are kept for the time period specified by the "retentionPeriod" parameter.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-kinesisfirehose-deliverystream-extendeds3destinationconfiguration.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-kinesisfirehose-deliverystream-extendeds3destinationconfiguration.html)
In the [ExtendedS3DestinationConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-kinesisfirehose-deliverystream-extendeds3destinationconfiguration.html) property type:
+ Use the `DataFormatConversionConfiguration` property to specify the serializer, deserializer, and schema for converting data from the JSON format to the Parquet or ORC format before writing it to Amazon S3.
+ Use the `ErrorOutputPrefix` property to specify a prefix that Amazon Data Firehose evaluates and adds to failed records before writing them to S3.
+ The `Prefix` property is no longer required.
In the [S3DestinationConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-kinesisfirehose-deliverystream-s3destinationconfiguration.html) property type, use the `ErrorOutputPrefix` property to specify a prefix that Amazon Data Firehose evaluates and adds to failed records before writing them to S3.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-s3-bucket.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-s3-bucket.html)
Use the `ObjectLockConfiguration` property to specify an object lock configuration for the specified bucket.
Use the `ObjectLockEnabled` property to specify whether this bucket has an object lock configuration enabled. | June 13, 2019 |
| [New resources](#doc-history) | The following resources were added: `AWS::Amplify::App`, `AWS::Amplify::Branch`, `AWS::Amplify::Domain`, `AWS::EC2::ClientVpnAuthorizationRule`, `AWS::EC2::ClientVpnEndpoint`, `AWS::EC2::ClientVpnRoute`, `AWS::EC2::ClientVpnTargetNetworkAssociation`, `AWS::MSK::Cluster`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amplify-app.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amplify-app.html)
Creates apps in AWS Amplify Console. An app is a collection of branches.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amplify-branch.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amplify-branch.html)
Creates a new branch within an AWS Amplify Console app.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amplify-domain.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amplify-domain.html)
Allows you to connect a custom domain to your AWS Amplify Console app.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-clientvpnauthorizationrule.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-clientvpnauthorizationrule.html)
Specifies an ingress authorization rule to add to a Client VPN endpoint. Ingress authorization rules act as firewall rules that grant access to networks.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-clientvpnendpoint.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-clientvpnendpoint.html)
Specifies a Client VPN endpoint. A Client VPN endpoint is the resource you create and configure to enable and manage Client VPN sessions. It is the destination endpoint at which all Client VPN sessions are terminated.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-clientvpnroute.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-clientvpnroute.html)
Specifies a network route to add to a Client VPN endpoint. Each Client VPN endpoint has a route table that describes the available destination network routes. Each route in the route table specifies the path for traffic to specific resources or networks.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-clientvpntargetnetworkassociation.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-clientvpntargetnetworkassociation.html)
Specifies a target network to associate with a Client VPN endpoint. A target network is a subnet in a VPC. You can associate multiple subnets from the same VPC with a Client VPN endpoint.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-msk-cluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-msk-cluster.html)
Use the `AWS::MSK::Cluster` resource to create an Amazon MSK cluster. | June 13, 2019 |
| [Updated resources](#doc-history) | The following resource was updated: `AWS::SageMaker::NotebookInstance`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-notebookinstance.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-notebookinstance.html)
Use the `AcceleratorTypes` property to specify a list of Amazon Elastic Inference (EI) instance types to associate with this notebook instance.
Use the `AdditionalCodeRepositories` property to specify an array of up to three Git repositories associated with the notebook instance.
Use the `DefaultCodeRepository` property to specify the Git repository associated with the notebook instance as its default code repository. | June 3, 2019 |
| [New resources](#doc-history) | The following resources were added: `AWS::IoTThingsGraph::FlowTemplate`, `AWS::Pinpoint::ADMChannel`, `AWS::Pinpoint::APNSChannel`, `AWS::Pinpoint::APNSSandboxChannel`, `AWS::Pinpoint::APNSVoipChannel`, `AWS::Pinpoint::APNSVoipSandboxChannel`, `AWS::Pinpoint::App`, `AWS::Pinpoint::ApplicationSettings`, `AWS::Pinpoint::BaiduChannel`, `AWS::Pinpoint::Campaign`, `AWS::Pinpoint::EmailChannel`, `AWS::Pinpoint::EventStream`, `AWS::Pinpoint::GCMChannel`, `AWS::Pinpoint::SMSChannel`, `AWS::Pinpoint::Segment`, `AWS::Pinpoint::VoiceChannel`, `AWS::SageMaker::CodeRepository`, and `AWS::MSK::Cluster`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotthingsgraph-flowtemplate.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotthingsgraph-flowtemplate.html)
Use the `AWS::IoTThingsGraph::FlowTemplate` resource to specify a workflow template.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-admchannel.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-admchannel.html)
Use the `AWS::Pinpoint::ADMChannel` resource to specify an ADM channel. You can use the ADM channel to send push notifications through the Amazon Device Messaging (ADM) service to apps that run on Amazon devices, such as Kindle Fire tablets.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-apnschannel.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-apnschannel.html)
Use the `AWS::Pinpoint::APNSChannel` resource to specify an APNs channel. You can use the APNs channel to send push notification messages to the Apple Push Notification service (APNs).
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-apnssandboxchannel.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-apnssandboxchannel.html)
Use the `AWS::Pinpoint::APNSSandboxChannel` resource to specify an APNs sandbox channel. You can use the APNs sandbox channel to send push notification messages to the sandbox environment of the Apple Push Notification service (APNs).
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-apnsvoipchannel.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-apnsvoipchannel.html)
Use the `AWS::Pinpoint::APNSVoipChannel` resource to specify an APNs VoIP channel. You can use the APNs VoIP channel to send VoIP notification messages to the Apple Push Notification service (APNs).
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-apnsvoipsandboxchannel.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-apnsvoipsandboxchannel.html)
Use the `AWS::Pinpoint::APNSVoipSandboxChannel` resource to specify an APNs VoIP sandbox channel. You can use the APNs VoIP sandbox channel to send VoIP notification messages to the sandbox environment of the Apple Push Notification service (APNs).
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-app.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-app.html)
Use the `AWS::Pinpoint::App` resource to specify an app.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-applicationsettings.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-applicationsettings.html)
Use the `AWS::Pinpoint::ApplicationSettings` resource to specify the settings for an Amazon Pinpoint app.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-baiduchannel.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-baiduchannel.html)
Use the `AWS::Pinpoint::BaiduChannel` resource to update the settings of the Baidu channel for an application.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-campaign.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-campaign.html)
Use the `AWS::Pinpoint::Campaign` resource to update the settings for a campaign.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-emailchannel.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-emailchannel.html)
Use the `AWS::Pinpoint::EmailChannel` resource to update the status and settings of the email channel for an application.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-eventstream.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-eventstream.html)
Use the `AWS::Pinpoint::EventStream` resource to create a new event stream for an application or update the settings of an existing event stream for an application.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-gcmchannel.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-gcmchannel.html)
Use the `AWS::Pinpoint::GCMChannel` resource to specify a GCM channel. You can use the GCM channel to send push notification messages to the Firebase Cloud Messaging (FCM) service, which replaced the Google Cloud Messaging (GCM) service.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-smschannel.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-smschannel.html)
Use the `AWS::Pinpoint::SMSChannel` resource to specify an SMS channel. To send an SMS text message, you send the message through the SMS channel.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-segment.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-segment.html)
Use the `AWS::Pinpoint::Segment` resource to create a new segment for an application or update the configuration, dimension, and other settings for an existing segment that's associated with an application.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-voicechannel.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpoint-voicechannel.html)
Use the `AWS::Pinpoint::VoiceChannel` resource to update the status and settings of the voice channel for an application.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-coderepository.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-coderepository.html)
Use the `AWS::SageMaker::CodeRepository` resource to specify a Git repository as a resource in your SageMaker AI account. | June 3, 2019 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::CodeCommit::Repository` and `AWS::EC2::LaunchTemplate`.
[Code](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-codecommit-repository-code.html)
Use the `Code` resource to provide information about code to be committed.
[S3](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-codecommit-repository-s3.html)
Use the `S3` resource to provide information about the Amazon S3 bucket that contains the code that will be committed to the new repository.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-launchtemplate.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-launchtemplate.html)
In the [NetworkInterface](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ec2-launchtemplate-networkinterface.html) property, use `InterfaceType` to specify the type of network interface. | May 23, 2019 |
| [New resources](#doc-history) | The following resources were added: `AWS::Backup::BackupPlan`, `AWS::Backup::BackupSelection`, `AWS::Backup::BackupVault`, `AWS::PinpointEmail::ConfigurationSet`, `AWS::PinpointEmail::ConfigurationSetEventDestination`, `AWS::PinpointEmail::DedicatedIpPool`, `AWS::PinpointEmail::Identity`, `AWS::Transfer::Server`, `AWS::Transfer::User`, `AWS::WAFRegional::GeoMatchSet`, `AWS::WAFRegional::RateBasedRule`, and `AWS::WAFRegional::RegexPatternSet`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-backup-backupplan.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-backup-backupplan.html)
Contains an optional backup plan display name and an array of BackupRule objects, each of which specifies a backup rule. Each rule in a backup plan is a separate scheduled task and can back up a different selection of AWS resources.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-backup-backupselection.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-backup-backupselection.html)
Specifies a set of resources to assign to a backup plan.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-backup-backupvault.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-backup-backupvault.html)
Creates a logical container where backups are stored. A CreateBackupVault request includes a name, optionally one or more resource tags, an encryption key, and a request ID.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpointemail-configurationset.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpointemail-configurationset.html)
Use the `AWS::PinpointEmail::ConfigurationSet` resource to specify configuration sets for the Amazon Pinpoint Email API.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpointemail-configurationseteventdestination.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpointemail-configurationseteventdestination.html)
Use the `AWS::PinpointEmail::ConfigurationSetEventDestination` resource to specify destinations for events related to sending email in the Amazon Pinpoint Email API.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpointemail-dedicatedippool.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpointemail-dedicatedippool.html)
Use the `AWS::PinpointEmail::DedicatedIpPool` resource to specify groups of dedicated IP addresses in the Amazon Pinpoint Email API.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpointemail-identity.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-pinpointemail-identity.html)
Use the `AWS::PinpointEmail::Identity` resource to specify identities (email addresses or domains) for sending email through the Amazon Pinpoint Email API.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-transfer-server.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-transfer-server.html)
Creates an autoscaling virtual server based on Secure File Transfer Protocol (SFTP) in AWS.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-transfer-user.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-transfer-user.html)
Creates a user and associates them with an existing Secure File Transfer Protocol (SFTP) server.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-wafregional-geomatchset.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-wafregional-geomatchset.html)
The `AWS::WAFRegional::GeoMatchSet` resource contains one or more countries that AWS WAF will search for.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-wafregional-ratebasedrule.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-wafregional-ratebasedrule.html)
The `AWS::WAFRegional::RateBasedRule` resource is identical to a regular Rule, with one addition: a RateBasedRule counts the number of requests that arrive from a specified IP address every 5 minutes.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-wafregional-regexpatternset.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-wafregional-regexpatternset.html)
The `AWS::WAFRegional::RegexPatternSet` resource specifies the regular expression (regex) pattern that you want AWS WAF to search for. | May 23, 2019 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::AppSync::GraphQLApi`, `AWS::Cognito::UserPool`, `AWS::Glue::Classifier`, `AWS::Glue::Crawler`, `AWS::Glue::DevEndpoint`, `AWS::Glue::Job`, and `AWS::Glue::Trigger`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appsync-graphqlapi.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appsync-graphqlapi.html)
Use the `AdditionalAuthenticationProviders` property to specify a list of additional authentication providers for the GraphqlApi API.
Use the `Tags` property to specify an arbitrary set of tags (key-value pairs) for this GraphQL API.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cognito-userpool.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cognito-userpool.html)
In the [PasswordPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-cognito-userpool-passwordpolicy.html) property type, use the `TemporaryPasswordValidityDays` property to specify the number of days a temporary password is valid. If the user does not sign-in during this time, their password will need to be reset by an administrator.
When you set `TemporaryPasswordValidityDays` for a user pool, you will no longer be able to set the deprecated `UnusedAccountValidityDays` value for that user pool.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-glue-classifier.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-glue-classifier.html)
Use the `CsvClassifier` property to specify a classifier for comma-separated values (CSV).
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-glue-crawler.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-glue-crawler.html)
Use the `CrawlerSecurityConfiguration` property to specify the name of the `SecurityConfiguration` structure to be used by this crawler.
Use the `Tags` property to specify the tags to use with this crawler request. You can use tags to limit access to the crawler.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-glue-devendpoint.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-glue-devendpoint.html)
Use the `SecurityConfiguration` property to specify the name of the `SecurityConfiguration` structure to be used by this `DevEndpoint`.
Use the `Tags` property to specify the tags to use with this `DevEndpoint`. You can use tags to limit access to the `DevEndpoint`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-glue-job.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-glue-job.html)
Use the `SecurityConfiguration` property to specify the name of the `SecurityConfiguration` structure to be used with this job.
Use the `Tags` property to specify the tags to use with this job. You can use tags to limit access to the job.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-glue-trigger.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-glue-trigger.html)
Use the `Tags` property to specify the tags to use with this trigger. You can use tags to limit access to the trigger. | May 17, 2019 |
| [New resources](#doc-history) | The following resources were added: `AWS::Glue::DataCatalogEncryptionSettings`, `AWS::Glue::SecurityConfiguration`, and `AWS::MediaStore::Container`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-glue-datacatalogencryptionsettings.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-glue-datacatalogencryptionsettings.html)
Sets the security configuration for a specified catalog. After the configuration has been set, the specified encryption is applied to every catalog write thereafter.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-glue-securityconfiguration.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-glue-securityconfiguration.html)
Creates a new security configuration.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediastore-container.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-mediastore-container.html)
The `AWS::MediaStore::Container` resource specifies a storage container to hold objects. A container is similar to a bucket in Amazon S3.
When you create a container using CloudFormation, the template manages data for five API actions: creating a container, setting access logging, updating the default container policy, adding a cross-origin resource sharing (CORS) policy, and adding an object lifecycle policy. | May 17, 2019 |
| [Updated resource](#doc-history) | The following resource was updated: `AWS::ServiceCatalog::CloudFormationProduct`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-cloudformationproduct.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-cloudformationproduct.html)
In the [ProvisioningArtifactProperties](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-servicecatalog-cloudformationproduct-provisioningartifactproperties.html) property type, if `DisableTemplateValidation` is set to `true`, Service Catalog stops validating the specified provisioning artifact even if it is invalid. | May 3, 2019 |
| [New resources](#doc-history) | The following resources were added: `AWS::ApiGatewayV2::ApiMapping` and `AWS::ApiGatewayV2::DomainName`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigatewayv2-apimapping.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigatewayv2-apimapping.html)
The `AWS::ApiGatewayV2::ApiMapping` resource contains an API mapping.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigatewayv2-domainname.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigatewayv2-domainname.html)
Use the `AWS::ApiGatewayV2::DomainName` resource to specify a custom, friendly URL for your API in API Gateway. | May 3, 2019 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::Greengrass::FunctionDefinition` and `AWS::Greengrass::FunctionDefinitionVersion`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-functiondefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-functiondefinition.html)
In the `FunctionConfiguration` property type, the `MemorySize` and `Timeout` properties are no longer required.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-functiondefinitionversion.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-functiondefinitionversion.html)
In the `FunctionConfiguration` property type, the `MemorySize` and `Timeout` properties are no longer required. | April 25, 2019 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::ECS::TaskDefinition`, `AWS::ElasticLoadBalancingV2::TargetGroup`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-taskdefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-taskdefinition.html)
Use the `ProxyConfiguration` property to specify the configuration details for an App Mesh proxy.
In the `[ContainerDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ecs-taskdefinition-containerdefinitions.html)` property type:
+ Use the `DependsOn` property to specify the dependencies defined for container startup and shutdown.
+ Use the `StartTimeout` property to specify the time duration to wait before giving up on resolving dependencies for a container.
+ Use the `StopTimeout` property to specify the time duration to wait before the container is forcefully killed if it doesn't exit normally on its own.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticloadbalancingv2-targetgroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticloadbalancingv2-targetgroup.html)
Use the `HealthCheckEnabled` property to indicate whether health checks are enabled.
The `Port`, `Protocol`, and `VpcId` properties are now required only if the target type is `instance` or `ip`. | April 18, 2019 |
| [New resource](#doc-history) | The following resource was added: `AWS::EC2::CapacityReservation`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-capacityreservation.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-capacityreservation.html)
Use the `AWS::EC2::CapacityReservation` resource to create a Capacity Reservation. | April 18, 2019 |
| [Updated resources](#doc-history) | The following resource was updated: `AWS::Batch::JobDefinition` and `AWS::ServiceCatalog::CloudFormationProvisionedProduct`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-batch-jobdefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-batch-jobdefinition.html)
Use the [ResourceRequirement](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-batch-jobdefinition-resourcerequirement.html) property type to specify the type and amount of a resource to assign to a container. Currently, the only supported resource type is `GPU`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-cloudformationprovisionedproduct.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-cloudformationprovisionedproduct.html)
The `Tags` property requires the provisioned product to have a `RESOURCE_UPDATE` constraint with `TagUpdatesOnProvisionedProduct` set to `ALLOWED` to allow tag updates.
The `Tags` property now requires no interruption upon update. | April 4, 2019 |
| [New resource](#doc-history) | The following resource was added: `AWS::ServiceCatalog::ResourceUpdateConstraint`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-resourceupdateconstraint.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-resourceupdateconstraint.html)
Use the `AWS::ServiceCatalog::ResourceUpdateConstraint` resource to create a RESOURCE\$1UPDATE constraint for AWS Service Catalog. | April 4, 2019 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::AppStream::Fleet`, `AWS::AppStream::ImageBuilder`, `AWS::AppStream::Stack`, and `AWS::EKS::Cluster`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-fleet.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-fleet.html), [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-imagebuilder.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-imagebuilder.html), and [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-stack.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-stack.html)
Use the `Tags` property to add or overwrite one or more tags for an Amazon WorkSpaces Applications fleet, stack, or image builder.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-eks-cluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-eks-cluster.html)
Updates to the `Version` property no longer require replacement. | March 28, 2019 |
| [New resources](#doc-history) | The following resources were added: `AWS::AppMesh::Mesh`, `AWS::AppMesh::Route`, `AWS::AppMesh::VirtualNode`, `AWS::AppMesh::VirtualRouter`, and `AWS::AppMesh::VirtualService`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appmesh-mesh.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appmesh-mesh.html)
The `AWS::AppMesh::Mesh` resource to specify a service mesh. A service mesh is a logical boundary for network traffic between the services that reside within it.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appmesh-route.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appmesh-route.html)
Use the `AWS::AppMesh::Route` resource to specify a route that's associated with a virtual router.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appmesh-virtualnode.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appmesh-virtualnode.html)
Use the `AWS::AppMesh::VirtualNode` resource to specify a virtual node within a service mesh.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appmesh-virtualrouter.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appmesh-virtualrouter.html)
Use the `AWS::AppMesh::VirtualRouter` resource to specify a virtual router within a service mesh.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appmesh-virtualservice.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appmesh-virtualservice.html)
Use the `AWS::AppMesh::VirtualService` resource to specify a virtual service within a service mesh. | March 27, 2019 |
| [New resources](#doc-history) | The following resources were added: `AWS::Greengrass::ConnectorDefinition`, `AWS::Greengrass::ConnectorDefinitionVersion`, `AWS::Greengrass::CoreDefinition`, `AWS::Greengrass::CoreDefinitionVersion`, `AWS::Greengrass::DeviceDefinition`, `AWS::Greengrass::DeviceDefinitionVersion`, `AWS::Greengrass::FunctionDefinition`, `AWS::Greengrass::FunctionDefinitionVersion`, `AWS::Greengrass::Group`, `AWS::Greengrass::GroupVersion`, `AWS::Greengrass::LoggerDefinition`, `AWS::Greengrass::LoggerDefinitionVersion`, `AWS::Greengrass::ResourceDefinition`, `AWS::Greengrass::ResourceDefinitionVersion`, `AWS::Greengrass::SubscriptionDefinition`, and `AWS::Greengrass::SubscriptionDefinitionVersion`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-connectordefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-connectordefinition.html) and [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-connectordefinitionversion.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-connectordefinitionversion.html)
Use the `AWS::Greengrass::ConnectorDefinition` and `AWS::Greengrass::ConnectorDefinitionVersion` resources to create and manage your connectors.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-coredefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-coredefinition.html) and [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-coredefinitionversion.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-coredefinitionversion.html)
Use the `AWS::Greengrass::CoreDefinition` and `AWS::Greengrass::CoreDefinitionVersion` resources to create and manage your cores.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-devicedefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-devicedefinition.html) and [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-devicedefinitionversion.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-devicedefinitionversion.html)
Use the `AWS::Greengrass::DeviceDefinition` and `AWS::Greengrass::DeviceDefinitionVersion` resources to create and manage your devices.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-functiondefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-functiondefinition.html) and [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-functiondefinitionversion.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-functiondefinitionversion.html)
Use the `AWS::Greengrass::FunctionDefinition` and `AWS::Greengrass::FunctionDefinitionVersion` resources to create and manage your functions.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-group.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-group.html) and [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-groupversion.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-groupversion.html)
Use the `AWS::Greengrass::Group` and `AWS::Greengrass::GroupVersion` resources to create and manage your Greengrass groups.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-loggerdefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-loggerdefinition.html) and [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-loggerdefinitionversion.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-loggerdefinitionversion.html)
Use the `AWS::Greengrass::LoggerDefinition` and `AWS::Greengrass::LoggerDefinitionVersion` resources to create and manage your logging configuration.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-resourcedefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-resourcedefinition.html) and [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-resourcedefinitionversion.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-resourcedefinitionversion.html)
Use the `AWS::Greengrass::ResourceDefinition` and `AWS::Greengrass::ResourceDefinitionVersion` resources to create and manage your local, machine learning, and secret resources.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-subscriptiondefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-subscriptiondefinition.html) and [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-subscriptiondefinitionversion.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-greengrass-subscriptiondefinitionversion.html)
Use the `AWS::Greengrass::SubscriptionDefinition` and `AWS::Greengrass::SubscriptionDefinitionVersion` resources to create and manage your subscriptions. | March 15, 2019 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::CodeBuild::Project`, `AWS::OpsWorksCM::Server`, and `AWS::SageMaker::NotebookInstance`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-project.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-project.html)
In the [Project Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-codebuild-project-source.html) property type, use the `GitSubmodulesConfig` property to get information about Git submodules for a project.
In the [Project S3Logs](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-codebuild-project-s3logs.html) property type, use the `EncryptionDisabled` property to disable encryption on S3 build logs.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-opsworkscm-server.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-opsworkscm-server.html)
Use the `AssociatePublicIpAddress` property to associate a public IP address with the server.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-notebookinstance.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-notebookinstance.html)
Use the `RootAccess` property to specify whether root access is enabled or disabled for users of the notebook instance. | March 14, 2019 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::StepFunctions::Activity` and `AWS::StepFunctions::StateMachine`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-stepfunctions-activity.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-stepfunctions-activity.html)
Use the `Tags` property to specify the tags (key-value pairs) that you want to attach to the Step Functions activity.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-stepfunctions-statemachine.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-stepfunctions-statemachine.html)
Use the `Tags` property to specify the tags (key-value pairs) that you want to attach to the Step Functions state machine. | March 7, 2019 |
| [Updated resource](#doc-history) | The following resource was updated: `AWS::SageMaker::NotebookInstance`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-notebookinstance.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-notebookinstance.html)
Use the `VolumeSizeInGB` property to specify the size in GB of the persisted machine learning storage volume that is provisioned and attached to the SageMaker AI notebook instance. | February 28, 2019 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::ApiGateway::ApiKey`, `AWS::CodeBuild::Project`, `AWS::Elasticsearch::Domain`, `AWS::RDS::DBCluster`, and `AWS::RDS::DBInstance`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-apikey.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-apikey.html)
Use the `Value` property to specify the value of the API key.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-project.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-project.html)
In the [ProjectCache](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-codebuild-project-projectcache.html) property type, you can use the `Modes` property to specify the type cache an AWS CodeBuild project uses.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticsearch-domain.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticsearch-domain.html)
Use the `NodeToNodeEncryptionOptions` property to specify whether node-to-node encryption is enabled.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbcluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbcluster.html)
Use the `SourceRegion` property to specify the AWS Region which contains the source DB cluster when replicating a DB cluster.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbinstance.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbinstance.html)
Use the `UseDefaultProcessorFeatures` property to specify that the DB instance class of the DB instance uses its default processor features. | February 21, 2019 |
| [New resources](#doc-history) | The following resources were added: `AWS::RAM::ResourceShare`, `AWS::RoboMaker::Fleet`, `AWS::RoboMaker::Robot`, `AWS::RoboMaker::RobotApplication`, `AWS::RoboMaker::RobotApplicationVersion`, `AWS::RoboMaker::SimulationApplication`, and `AWS::RoboMaker::SimulationApplicationVersion`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ram-resourceshare.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ram-resourceshare.html)
Use the `AWS::RAM::ResourceShare` resource to create, update, and delete an Amazon ResourceShare.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-robomaker-fleet.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-robomaker-fleet.html)
Use the `AWS::RoboMaker::Fleet` resource to create an AWS RoboMaker fleet.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-robomaker-robot.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-robomaker-robot.html)
Use the `AWS::RoboMaker::Robot` resource to create an AWS RoboMaker robot.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-robomaker-robotapplication.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-robomaker-robotapplication.html)
Use the `AWS::RoboMaker::RobotApplication` resource to create an AWS RoboMaker robot application.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-robomaker-robotapplicationversion.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-robomaker-robotapplicationversion.html)
Use the `AWS::RoboMaker::RobotApplicationVersion` resource to create a version of an AWS RoboMaker robot application.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-robomaker-simulationapplication.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-robomaker-simulationapplication.html)
Use the `AWS::RoboMaker::SimulationApplication` resource to create an AWS RoboMaker simulation application.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-robomaker-simulationapplicationversion.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-robomaker-simulationapplicationversion.html)
Use the `AWS::RoboMaker::SimulationApplicationVersion` resource to create a version of an AWS RoboMaker simulation application. | February 21, 2019 |
| [Updated resource](#doc-history) | The following resource was updated: `AWS::CodeBuild::Project`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-project.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-project.html)
In the [ProjectTriggers](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-codebuild-project-projecttriggers.html) property type, you can use the `WebhookFilters` property to specify the webhook events that trigger a new CodeBuild build. | February 15, 2019 |
| [New resources](#doc-history) | The following resources were added: `AWS::FSx::FileSystem`, `AWS::KinesisAnalyticsv2::Application`, `AWS::KinesisAnalyticsv2::ApplicationCloudWatchLoggingOption`, `AWS::KinesisAnalyticsv2::ApplicationOutput`, and `AWS::KinesisAnalyticsv2::ApplicationReferenceDataSource`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-fsx-filesystem.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-fsx-filesystem.html)
Use the `AWS::FSx::FileSystem` resource to create a new FSx for Lustre or FSx for Windows File Server file system.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-kinesisanalyticsv2-application.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-kinesisanalyticsv2-application.html)
Use the `AWS::KinesisAnalyticsV2::Application` resource to create an Amazon Managed Service for Apache Flink application.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-kinesisanalyticsv2-applicationcloudwatchloggingoption.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-kinesisanalyticsv2-applicationcloudwatchloggingoption.html)
Use the `AWS::KinesisAnalyticsV2::ApplicationCloudWatchLoggingOption` resource to add an Amazon CloudWatch log stream to monitor application configuration errors.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-kinesisanalyticsv2-applicationoutput.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-kinesisanalyticsv2-applicationoutput.html)
Use the `AWS::KinesisAnalyticsV2::ApplicationOutput` resource to describe a SQL-based Amazon Managed Service for Apache Flink application's output configuration.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-kinesisanalyticsv2-applicationreferencedatasource.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-kinesisanalyticsv2-applicationreferencedatasource.html)
Use the `AWS::KinesisAnalyticsV2::ApplicationReferenceDataSource` resource to describe a reference data source for a SQL-based Amazon Managed Service for Apache Flink application. | February 15, 2019 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::OpsWorksCM::Server`, `AWS::ServiceDiscovery::Instance`, and `AWS::ServiceDiscovery::Service`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-opsworkscm-server.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-opsworkscm-server.html)
`EngineAttributes` were updated to include additional attributes that you can use to create an AWS OpsWorks for Puppet Enterprise master server.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicediscovery-instance.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicediscovery-instance.html)
The `InstanceAttributes` property now takes a `String map` value.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicediscovery-service.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicediscovery-service.html)
The `DNSConfig` property is no longer required.
An update to the `HealthCheckCustomConfig` property now requires replacement. | February 8, 2019 |
| [New resources](#doc-history) | The following resources were added: `AWS::ApiGatewayV2::Api`, `AWS::ApiGatewayV2::Authorizer`, `AWS::ApiGatewayV2::Deployment`, `AWS::ApiGatewayV2::Integration`, `AWS::ApiGatewayV2::IntegrationResponse`, `AWS::ApiGatewayV2::Model`, `AWS::ApiGatewayV2::Route`, `AWS::ApiGatewayV2::RouteResponse`, and `AWS::ApiGatewayV2::Stage`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigatewayv2-api.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigatewayv2-api.html)
Use the `AWS::ApiGatewayV2::Api` resource to manage an API Gateway WebSocket API.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigatewayv2-authorizer.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigatewayv2-authorizer.html)
Use the `AWS::ApiGatewayV2::Authorizer` resource to represent an API Gateway authorizer function.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigatewayv2-deployment.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigatewayv2-deployment.html)
Use the `AWS::ApiGatewayV2::Deployment` resource to create an API Gateway WebSocket API deployment.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigatewayv2-integration.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigatewayv2-integration.html)
Use the `AWS::ApiGatewayV2::Integration` resource to specify information about the target backend that an API Gateway route calls.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigatewayv2-integrationresponse.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigatewayv2-integrationresponse.html)
Use the `AWS::ApiGatewayV2::IntegrationResponse` resource to specify the response that API Gateway sends after a route's backend finishes processing a WebSocket message.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigatewayv2-model.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigatewayv2-model.html)
Use the `AWS::ApiGatewayV2::Model` resource to define the structure of a route request or response payload for an API Gateway WebSocket API.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigatewayv2-route.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigatewayv2-route.html)
Use the `AWS::ApiGatewayV2::Route` resource to specify information that is expected to be present in a WebSocket message payload.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigatewayv2-routeresponse.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigatewayv2-routeresponse.html)
Use the `AWS::ApiGatewayV2::RouteResponse` resource to define the responses that can be sent to the client that sends a message to an API Gateway WebSocket API.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigatewayv2-stage.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigatewayv2-stage.html)
Use the `AWS::ApiGatewayV2::Stage` resource to create a stage for an API Gateway WebSocket API deployment. | February 8, 2019 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::CodeBuild::Project` and `AWS::ElasticLoadBalancingV2::Listener`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-project.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-project.html)
In the [Environment](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-codebuild-project-environment.html) property type, you can use the `ImagePullCredentialsType` property to specify the type of credentials CodeBuild uses to pull images in your build.
In the [Environment](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-codebuild-project-environment.html) property type, you can use the `RegistryCredential` property to provide information about credentials that provide access to a private Docker registry.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticloadbalancingv2-listener.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticloadbalancingv2-listener.html)
Create TLS listeners for your Network Load Balancers. | January 24, 2019 |
| [New resource](#doc-history) | The following resource was added: `AWS::OpsWorksCM::Server`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-opsworkscm-server.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-opsworkscm-server.html)
Use the `AWS::OpsWorksCM::Server` resource to create an AWS OpsWorks for Chef Automate or AWS OpsWorks for Puppet Enterprise server. | January 24, 2019 |
| [`UpdateReplacePolicy` attribute added](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-attribute-updatereplacepolicy.html) | Use the `UpdateReplacePolicy` attribute to retain or (in some cases) backup the existing physical instance of a resource when it is replaced during a stack update operation. | January 23, 2019 |
| [Updated resource](#doc-history) | The following resource was updated: `AWS::Inspector::AssessmentTarget`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-inspector-assessmenttarget.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-inspector-assessmenttarget.html)
The `ResourceGroupArn` property is no longer required. If unspecified, all Amazon EC2 instances in your AWS account in the current region will be included in the assessment target. | January 17, 2019 |
| [Updated resource](#doc-history) | The following resource was updated: `AWS::ServiceCatalog::CloudFormationProvisionedProduct`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-cloudformationprovisionedproduct.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-cloudformationprovisionedproduct.html)
The `ProductId` property now requires no interruption upon update.
The `ProductName` property now requires no interruption upon update.
Each time a stack is created or updated, if `ProductName` is provided it will successfully resolve to `ProductId` as long as only one product exists in the account/region with that `ProductName`. | January 10, 2019 |
| [New resources](#doc-history) | The following resources were added: `AWS::DocDB::DBCluster`, `AWS::DocDB::DBClusterParameterGroup`, `AWS::DocDB::DBInstance`, and `AWS::DocDB::DBSubnetGroup`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-docdb-dbcluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-docdb-dbcluster.html)
Use the `AWS::DocDB::DBCluster` resource to manage an Amazon DocumentDB cluster.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-docdb-dbclusterparametergroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-docdb-dbclusterparametergroup.html)
Use the `AWS::DocDB::DBClusterParameterGroup` resource to manage an Amazon DocumentDB cluster parameter group.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-docdb-dbinstance.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-docdb-dbinstance.html)
Use the `AWS::DocDB::DBInstance` resource to manage an Amazon DocumentDB instance.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-docdb-dbsubnetgroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-docdb-dbsubnetgroup.html)
Use the `AWS::DocDB::DBSubnetGroup` resource to describe an Amazon DocumentDB subnet group. | January 10, 2019 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::AmazonMQ::Broker`, `AWS::AmazonMQ::Configuration`, and `AWS::SageMaker::Model`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-broker.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-broker.html)
Use the `Tags` property to specify an array of key-value pairs for cost allocation tagging.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-configuration.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-configuration.html)
Use the `Tags` property to specify an array of key-value pairs for cost allocation tagging.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-model.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-model.html)
Use the `Containers` property to specify the list of containers in the inference pipeline. | January 3, 2019 |
| [New resource](#doc-history) | The following resource was added: `AWS::Route53Resolver::ResolverRuleAssociation`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-route53resolver-resolverruleassociation.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-route53resolver-resolverruleassociation.html)
Use the `AWS::Route53Resolver::ResolverRuleAssociation` resource to associate an Amazon Route 53 Resolver rule and a VPC that you created using Amazon Virtual Private Cloud (Amazon VPC). | January 3, 2019 |
| [Updated resource](#doc-history) | The following resource was updated: `AWS::AmazonMQ::Broker`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-broker.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-broker.html)
The following attributes are now available using the `Fn::Getatt` intrinsic function:
+ `IpAddresses`
+ `MqttEndpoints`
+ `OpenWireEndpoints`
+ `AmqpEndpoints`
+ `StompEndpoints`
+ `WssEndpoints` | December 13, 2018 |
| [New resources](#doc-history) | The following resources were added: `AWS::AmazonMQ::ConfigurationAssociation`, `AWS::IoTAnalytics::Channel`, `AWS::IoTAnalytics::Dataset`, `AWS::IoTAnalytics::Datastore`, and `AWS::IoTAnalytics::Pipeline`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-configurationassociation.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-configurationassociation.html)
Use the `AWS::AmazonMQ::ConfigurationAssociation` resource to associate a configuration with a broker, or return information about the specified configuration association.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotanalytics-channel.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotanalytics-channel.html)
Use the `AWS::IoTAnalytics::Channel` resource to create a channel. A channel collects data from an MQTT topic and archives the raw, unprocessed messages before publishing the data to a pipeline.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotanalytics-dataset.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotanalytics-dataset.html)
Use the `AWS::IoTAnalytics::Dataset` resource to create a data set. A data set retrieves data from a data store and allows you to explore and analyze your data using machine learning tools.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotanalytics-datastore.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotanalytics-datastore.html)
Use the `AWS::IoTAnalytics::Datastore` resource to create a data store. A data store holds messages from a channel which have been processed through a pipeline.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotanalytics-pipeline.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iotanalytics-pipeline.html)
Use the `AWS::IoTAnalytics::Pipeline` resource to create a pipeline. A pipeline consumes messages from one or more channels and allows you to process the messages before storing them in a data store. | December 13, 2018 |
| [Updated resource](#doc-history) | The following resource was updated: `AWS::CodeBuild::Project`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-project.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-project.html)
+ In the [Environment](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-codebuild-project-environment.html) property type, you can use the `Certificate` property to specify a certificate to use with your build project.
+ In the [Artifacts](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-codebuild-project-artifacts.html) property type, you can use the `ArtifactIdentifier` property to identify the project artifact.
+ In the [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-codebuild-project-source.html) property type, you can use the `SourceIdentifier` property to identify the project source. | December 6, 2018 |
| [Updated resource](#doc-history) | The following resource was updated: `AWS::Lambda::Function`
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-lambda-function.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-lambda-function.html)
Use the `Layers` property to specify a list of Amazon Resource Names (ARNs) for the function layers to add to the function's execution environment. | November 29, 2018 |
| [New resources](#doc-history) | The following resources were added: `AWS::Lambda::LayerVersion`, `AWS::Lambda::LayerVersionPermission`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-lambda-layerversion.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-lambda-layerversion.html)
Use the `AWS::Lambda::LayerVersion` resource to create a layer version in AWS Lambda.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-lambda-layerversionpermission.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-lambda-layerversionpermission.html)
Use the `AWS::Lambda::LayerVersionPermission` resource to give other accounts permission to use a layer version in AWS Lambda. | November 29, 2018 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::DynamoDB::Table`, `AWS::EC2::Instance`, and `AWS::ServiceDiscovery::Service`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dynamodb-table.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dynamodb-table.html)
Use the `BillingMode` property to specify how you are charged for read and write throughput and how you manage capacity.
The `ProvisionedThroughput` property is now conditional.
In the [GlobalSecondaryIndex](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-dynamodb-gsi.html) property type, the `ProvisionedThroughput` property is now conditional.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-instance.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-instance.html)
Use the `ElasticInferenceAccelerators` property to specify a list of elastic inference accelerators for an instance.
Use the `LicenseSpecifications` property to associate a list of license configuration with an instance.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicediscovery-service.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicediscovery-service.html)
Use the `NamespaceId` property to specify the ID of the namespace that you want to use to create the service.
In the [DnsConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-servicediscovery-service-dnsconfig.html) property type, use the `RoutingPolicy` property to specify the routing policy that you want to apply to all DNS records that AWS Cloud Map creates when you register an instance and specify this service. | November 28, 2018 |
| [New resource](#doc-history) | The following resource was added: `AWS::ServiceDiscovery::HttpNamespace`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicediscovery-httpnamespace.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicediscovery-httpnamespace.html)
Use the `HttpNamespace` resource to create an HTTP namespace for Cloud Map. | November 28, 2018 |
| [New resources](#doc-history) | The following resources were added: `AWS::EC2::TransitGateway`, `AWS::EC2::TransitGatewayAttachment`, `AWS::EC2::TransitGatewayRoute`, `AWS::EC2::TransitGatewayRouteTable`, `AWS::EC2::TransitGatewayRouteTableAssociation`, and `AWS::EC2::TransitGatewayRouteTablePropagation`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-transitgateway.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-transitgateway.html)
Use the `AWS::EC2::TransitGateway` resource to create a transit gateway.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-transitgatewayattachment.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-transitgatewayattachment.html)
Use the `AWS::EC2::TransitGatewayAttachment` resource to create an attachment between a VPC and a transit gateway.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-transitgatewayroute.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-transitgatewayroute.html)
Use the `AWS::EC2::TransitGatewayRoute` resource to create a static route for a transit gateway route table.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-transitgatewayroutetable.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-transitgatewayroutetable.html)
Use the `AWS::EC2::TransitGatewayRouteTable` resource to create a route table for a transit gateway.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-transitgatewayroutetableassociation.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-transitgatewayroutetableassociation.html)
Use the `AWS::EC2::TransitGatewayRouteTableAssociation` resource to associate an attachment with a transit gateway route table.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-transitgatewayroutetablepropagation.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-transitgatewayroutetablepropagation.html)
Use the `AWS::EC2::TransitGatewayRouteTablePropagation` resource to enable an attachment to propagate routes. | November 26, 2018 |
| [New resources](#doc-history) | The following resources were added: `Alexa::ASK::Skill`, `AWS::AppSync::FunctionConfiguration`, `AWS::EC2::EC2Fleet`, `AWS::Kinesis::StreamConsumer`, `AWS::Route53Resolver:ResolverEndpoint`, and `AWS::Route53Resolver::ResolverRule`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ask-skill.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ask-skill.html)
Use the `Alexa::ASK::Skill` resource to create an Alexa skill.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appsync-functionconfiguration.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appsync-functionconfiguration.html)
Use the `AWS::AppSync::FunctionConfiguration` resource to describe the functions defined with appsync datasource in AWS AppSync.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-ec2fleet.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-ec2fleet.html)
Use the `AWS::EC2::EC2Fleet` resource to launch an EC2 Fleet that can include multiple launch specifications that vary by instance type, AMI, Availability Zone, or subnet.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-kinesis-streamconsumer.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-kinesis-streamconsumer.html)
Use the `AWS::Kinesis::StreamConsumer` resource to register a consumer with a Kinesis data stream.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-route53resolver-resolverendpoint.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-route53resolver-resolverendpoint.html)
Use the `AWS::Route53Resolver::ResolverEndpoint` resource to specify settings for inbound or outbound endpoints for Amazon Route 53.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-route53resolver-resolverrule.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-route53resolver-resolverrule.html)
Use the `AWS::Route53Resolver::ResolverRule` resource to specify detailed information about a resolver rule, which specifies how to route DNS queries out of a VPC for Amazon Route 53. | November 20, 2018 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::ApiGateway::Deployment`, `AWS::ApiGateway::Stage`, `AWS::AutoScaling::AutoScalingGroup`, `AWS::EC2::EIP`, `AWS::ElasticLoadBalancingV2::Listener`, `AWS::EMR::Cluster`, `AWS::OpsWorks::Layer`, `AWS::RDS::DBCluster`, `AWS::RDS::DBInstance`, `AWS::S3::Bucket`, and `AWS::SNS::Topic`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-deployment.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-deployment.html)
In the [StageDescription](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-apigateway-deployment-stagedescription.html) property type, use the `Tags` property to specify the CloudFormation resource tags to associate with the stage.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-stage.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-stage.html)
Use the `Tags` property to specify the CloudFormation resource tags to associate with the stage.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-autoscaling-autoscalinggroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-autoscaling-autoscalinggroup.html)
Use the `MixedInstancesPolicy` property to provision a combination of On-Demand Instances and Spot Instances across multiple instance types. When you create your Auto Scaling group, you can specify a launch configuration or template as a parameter for the top-level object, or you can specify a mixed instances policy, but not both at the same time.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-eip.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-eip.html)
Use the `PublicIpv4Pool` property to specify the ID of an address pool that you own to let Amazon EC2 select an address from the address pool.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticloadbalancingv2-listener.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticloadbalancingv2-listener.html)
In the [Action](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-elasticloadbalancingv2-listener-defaultactions.html) property type:
+ Use the `AuthenticateCognitoConfig` property to specify request parameters to use when integrating with Amazon Cognito to authenticate users.
+ Use the `AuthenticateOidcConfig` property to request parameters when using an identity provider (IdP) that is compliant with OpenID Connect (OIDC) to authenticate users.
+ Use the `FixedResponseConfig` property to specify information about an action that returns a custom HTTP response.
+ Use the `RedirectConfig` property to specify information about a redirect action.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticloadbalancingv2-listenerrule.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticloadbalancingv2-listenerrule.html)
In the [Actions](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-elasticloadbalancingv2-listenerrule-actions.html) property type:
+ Use the `AuthenticateCognitoConfig` property to specify request parameters to use when integrating with Amazon Cognito to authenticate users.
+ Use the `AuthenticateOidcConfig` property to request parameters when using an identity provider (IdP) that is compliant with OpenID Connect (OIDC) to authenticate users.
+ Use the `FixedResponseConfig` property to specify information about an action that returns a custom HTTP response.
+ Use the `RedirectConfig` property to specify information about a redirect action.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-emr-cluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-emr-cluster.html)
Use the [HadoopJarStepConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-emr-cluster-hadoopjarstepconfig.html) property type to specify a job flow step consisting of a JAR file whose main function will be executed.
Use the [StepConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-elasticmapreduce-cluster-stepconfig.html) property type to specify a cluster (job flow) step.
Use the [KeyValue](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-elasticmapreduce-cluster-keyvalue.html) property type to specify a key value pair.
In the [JobFlowInstancesConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-emr-cluster-jobflowinstancesconfig.html) property type, use `KeepJobFlowAliveWhenNoSteps` property to specify whether the cluster should remain available after completing all steps.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-opsworks-layer-volumeconfig.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-opsworks-layer-volumeconfig.html)
In the [VolumeConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-opsworks-layer-volumeconfig.html) property type, use the `Encrypted` property to specify whether an Amazon EBS volume is encrypted.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbcluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbcluster.html)
Use the `DeletionProtection` property to indicate whether the DB cluster should have deletion protection enabled. The database can't be deleted when this value is set to `true`. If you want to delete a stack with a protected cluster, update this value to `false` before you delete the stack.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbinstance.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbinstance.html)
Use the `DeleteAutomatedBackups` property to indicate whether automated backups should be deleted (`true`) or retained (`false`) when you delete a DB instance. The default is `true`.
Use the `DeletionProtection` property to indicate whether the DB instance should have deletion protection enabled. The database can't be deleted when this value is set to `true`. If you want to delete a stack with a protected instance, update this value to `false` before you delete the stack.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-s3-bucket.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-s3-bucket.html)
Use the `PublicAccessBlockConfiguration` property to specify the public access configuration for an Amazon S3 bucket.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sns-topic.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sns-topic.html)
Use the `KmsMasterKeyId` property to specify an AWS KMS key identifier. This can be a key ID, key ARN, or key alias. | November 19, 2018 |
| [Updated resource](#doc-history) | The following resource was updated: `AWS::CodePipeline::Pipeline`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codepipeline-pipeline.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codepipeline-pipeline.html)
Use the `ArtifactStores` property to specify a list of `ArtifactStoreMap` mappings. There must be an artifact store for the pipeline region and for each cross-region action within the pipeline. You can only use either `ArtifactStore` or `ArtifactStores`, not both.
In the [Actions](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-codepipeline-pipeline-stages-actions.html) property type, use the `Region` property to specify the action's AWS Region, such as `us-east-1`. | November 13, 2018 |
| [Updated resources](#doc-history) | The following resources have been updated: `AWS::ApiGateway::Deployment`, `AWS::ApiGateway::Stage`, `AWS::CloudWatch::Alarm`, `AWS::EC2::SecurityGroupIngress`, `AWS::IAM::Role`, `AWS::IAM::User`, `AWS::IoT::TopicRule`, `AWS::KMS::Key`, `AWS::RDS::DBCluster`, `AWS::RDS::DBInstance`, `AWS::Route53::RecordSet`, `AWS::S3::Bucket`, and `AWS::Workspaces::Workspace`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-deployment.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-deployment.html)
In the [StageDescription](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-apigateway-deployment-stagedescription.html) property type, use the `TracingEnabled` property to specify whether active tracing with X-Ray is enabled for this stage.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-stage.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-stage.html)
Use the `TracingEnabled` property to specify whether active tracing with X-Ray is enabled for this stage.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudwatch-alarm.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudwatch-alarm.html)
Use the `DatapointsToAlarm` property to specify the number of datapoints that must be breaching to trigger the alarm. This is used only if you are setting an "M out of N" alarm. In that case, this value is the M.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-securitygroupingress.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-securitygroupingress.html)
Use the `SourcePrefixListId` property to specify the AWS service prefix of an Amazon VPC endpoint.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-role.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-role.html)
Use the `PermissionsBoundary` property to specify the policy that is used to set the permissions boundary for the role.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-user.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-user.html)
Use the `PermissionsBoundary` property to specify the policy that is used to set the permissions boundary for the user.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iot-topicrule.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iot-topicrule.html)
In the [TopicRulePayload](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-iot-topicrule-topicrulepayload.html) property type, use the `ErrorActions` property to specify the action to take when an error occurs.
In the [Action](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-iot-topicrule-action.html) property type:
+ Use the `IoTAnalytics` property to send message data to an AWS IoT Analytics channel.
+ Use the `StepFunctionsAction` property to start execution of a Step Functions state machine.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-kms-key.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-kms-key.html)
Use the `PendingWindowInDays` property to specify the waiting period, specified in number of days, after which AWS Key Management Service deletes the AWS KMS key.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbinstance.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbinstance.html)
Use the `EnableCloudwatchLogsExports` property to specify the list of log types that need to be enabled for exporting to CloudWatch Logs.
Use the `EnableIAMDatabaseAuthentication` property to enable mapping of AWS Identity and Access Management (IAM) accounts to database accounts.
Use the `EnablePerformanceInsights` property to enable Performance Insights for the DB instance.
Use the `PerformanceInsightsKMSKeyId` property to specify the KMS key identifier for encryption of Performance Insights data. The KMS key ID is the Amazon Resource Name (ARN), KMS key identifier, or the KMS key alias for the AWS KMS encryption key.
Use the `PerformanceInsightsRetentionPeriod` property to specify the amount of time, in days, to retain Performance Insights data.
Use the `ProcessorFeatures` property to specify the number of CPU cores and the number of threads per core for the DB instance class of the DB instance.
Use the `PromotionTier` property to specify the order in which an Aurora Replica is promoted to the primary instance after a failure of the existing primary instance.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbcluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbcluster.html)
Use the `EnableCloudwatchLogsExports` property to specify the list of log types that need to be enabled for exporting to CloudWatch Logs.
Use the `EnableIAMDatabaseAuthentication` property to enable mapping of AWS Identity and Access Management (IAM) accounts to database accounts.
Use the `BacktrackWindow` property to specify the target backtrack window, in seconds. To disable backtracking, specify 0. If specified, this property must be set to a number from 0 to 259,200 (72 hours).
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-route53-recordset.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-route53-recordset.html)
Use the `MultiValueAnswer` property to route traffic approximately randomly to multiple resources, such as web servers. Create one multivalue answer record for each resource and specify true for `MultiValueAnswer`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-s3-bucket.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-s3-bucket.html)
Use the `RegionalDomainName` attribute with the `Fn::GetAtt` function to return the regional domain name of the specified bucket.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-workspaces-workspace.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-workspaces-workspace.html)
Use the `Tags` property to specify the tags (key-value pairs) that you want to attach to the WorkSpace.
Use the `WorkspaceProperties` property to specify information about a WorkSpace. | November 9, 2018 |
| [New resources](#doc-history) | The following resources were added: `AWS::DLM::LifecyclePolicy`, `AWS::SecretsManager::ResourcePolicy`, `AWS::SecretsManager::RotationSchedule`, `AWS::SecretsManager::Secret`, and `AWS::SecretsManager::SecretTargetAttachment`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dlm-lifecyclepolicy.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dlm-lifecyclepolicy.html)
The `AWS::DLM::LifecyclePolicy` resource creates a lifecycle policy for Amazon Data Lifecycle Manager.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-secretsmanager-resourcepolicy.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-secretsmanager-resourcepolicy.html)
Use the `AWS::SecretsManager::ResourcePolicy` resource to define a resource-based policy and attach it to a secret that's stored in Secrets Manager.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-secretsmanager-rotationschedule.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-secretsmanager-rotationschedule.html)
Use the `AWS::SecretsManager::RotationSchedule` resource to configure rotation for a secret.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-secretsmanager-secret.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-secretsmanager-secret.html)
Use the `AWS::SecretsManager::Secret` resource to create a secret and stores it in Secrets Manager.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-secretsmanager-secrettargetattachment.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-secretsmanager-secrettargetattachment.html)
Use the `AWS::SecretsManager::SecretTargetAttachment` resource to complete the final link between a Secrets Manager secret and its associated database. | November 9, 2018 |
| [Updated resource](#doc-history) | The following resource was updated: `AWS::SSM:MaintenanceWindow`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ssm-maintenancewindow.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ssm-maintenancewindow.html)
Use the `StartDate` and `StartDate` property types to specify when you want the Maintenance Window to become active or inactive. Use the `ScheduleTimezone` property type to specify the time zone to base scheduled Maintenance Window executions on, in Internet Assigned Numbers Authority (IANA) format. | November 1, 2018 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::AppSync::DataSource`, `AWS::AppSync::Resolver`, `AWS::AutoScalingPlans::ScalingPlan`, `AWS::Batch::JobDefinition`, `AWS::Batch::ComputeEnvironment`, `AWS::CloudWatch::Alarm`, `AWS::IoT1Click::Placement`, and `AWS::IoT1Click::Project`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appsync-datasource.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appsync-datasource.html)
Use the `RelationalDatabaseConfig` property type to specify RelationalDatabaseConfig for an AWS AppSync data source.
In the `HttpConfig` property type, use the `AuthorizationConfig` property to specify the authorization type and configurations for an AWS AppSync http data source.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appsync-resolver.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appsync-resolver.html)
Use the `PipelineConfig` property type to specify PipelineConfig for an AWS AppSync data source to connect with functions.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-autoscalingplans-scalingplan.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-autoscalingplans-scalingplan.html)
Use the `ScalingInstruction` property type to configure predictive scaling as part of the scaling configuration for an Amazon EC2 Auto Scaling group in an AWS Auto Scaling scaling plan.
Use the `PredefinedLoadMetricSpecification` property type to specify a predefined load metric for predictive scaling to use with AWS Auto Scaling.
Use the `CustomizedLoadMetricSpecification` property type to specify a customized load metric for predictive scaling to use with AWS Auto Scaling.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-batch-jobdefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-batch-jobdefinition.html)
The `AWS::Batch::JobDefinition` resource was updated to support AWS Batch multi-node parallel jobs.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-batch-computeenvironment.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-batch-computeenvironment.html)
The `AWS::Batch::ComputeEnvironment` resource was updated to support Amazon EC2 launch templates and placement groups.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudwatch-alarm.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudwatch-alarm.html)
Use the `Metrics` property to specify the metric data to return.
The `MetricName`, `Namespace`, and `Period` properties are now optional.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iot1click-placement.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iot1click-placement.html)
The `PlacementName` property is now optional.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iot1click-project.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iot1click-project.html)
The `ProjectName` property is now optional. | October 25, 2018 |
| [New resources](#doc-history) | The following resources were added: `AWS::AppStream::DirectoryConfig`, `AWS::AppStream::Fleet`, `AWS::AppStream::ImageBuilder`, `AWS::AppStream::Stack`, `AWS::AppStream::StackFleetAssociation`, `AWS::AppStream::StackUserAssociation`, `AWS::AppStream::User`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-directoryconfig.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-directoryconfig.html)
Use the `AWS::AppStream::DirectoryConfig` resource to describe the configuration information required to join Amazon WorkSpaces Applications fleets and image builders to Microsoft Active Directory domains.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-fleet.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-fleet.html)
Use the `AWS::AppStream::Fleet` resource to create a fleet for Amazon WorkSpaces Applications. A fleet consists of streaming instances that run a specified image.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-imagebuilder.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-imagebuilder.html)
Use the `AWS::AppStream::ImageBuilder` resource to create an image builder for Amazon WorkSpaces Applications.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-stack.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-stack.html)
Use the `AWS::AppStream::Stack` resource to create a stack to start streaming applications to Amazon WorkSpaces Applications users.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-stackfleetassociation.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-stackfleetassociation.html)
Use the `AWS::AppStream::StackFleetAssociation` resource to associate a fleet with a stack for Amazon WorkSpaces Applications.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-stackuserassociation.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-stackuserassociation.html)
Use the `AWS::AppStream::StackUserAssociation` resource to associate the specified stacks with the specified users for Amazon WorkSpaces Applications. Users in a user pool cannot be assigned to stacks with fleets that are joined to an Active Directory domain.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-user.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-user.html)
Use the `AWS::AppStream::User` resource to create a new user in the user pool for Amazon WorkSpaces Applications. | October 25, 2018 |
| [Updated resource](#doc-history) | Updated the following resources: `AWS::AmazonMQ::Broker`, `AWS::GuardDuty::Detector`, and `AWS::SSM::PatchBaseline`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-broker.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-broker.html)
Amazon MQ now supports engine versions 5.15.6 and 5.15.0. Property changes include:
+ The `EngineVersion` property now requires some interruptions upon update.
+ The `AutoMinorVersionUpgrade` property now requires no interruption upon update.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-guardduty-detector.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-guardduty-detector.html)
Use the `FindingPublishingFrequency` property to specify the frequency of notifications sent about the subsequent finding occurrences.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ssm-patchbaseline.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ssm-patchbaseline.html)
Use the `PatchSource` property type to provide information about the patches to use to update target instances. | October 18, 2018 |
| [New resource](#doc-history) | Added the `AWS::Events::EventBusPolicy` resource.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-events-eventbuspolicy.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-events-eventbuspolicy.html)
Use the `AWS::Events::EventBusPolicy` resource to grant permission to other AWS accounts that send events to your account. | October 18, 2018 |
| [`UseOnlineResharding` update policy now available](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-attribute-updatepolicy.html#cfn-attributes-updatepolicy-useonlineresharding) | To modify a replication group's shards by adding or removing shards, rather than replacing the entire `AWS::ElastiCache::ReplicationGroup` resource, use the `UseOnlineResharding` update policy. | September 20, 2018 |
| [Updated resources](#doc-history) | The following resources have been updated: `AWS::ApiGateway::Deployment`, `AWS::ApiGateway::Method`, `AWS::ApiGateway::Stage`, `AWS::ApiGateway::UsagePlan`, `AWS::CodeBuild::Project`, `AWS::CodeDeploy::DeploymentGroup`, `AWS::EC2::FlowLog`, `AWS::EC2::SpotFleet`, `AWS::EC2::VPCEndpoint`, `AWS::ECS::Service`, `AWS::ECS::TaskDefinition`, and `AWS::RDS::DBCluster`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-deployment.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-deployment.html)
Use the `DeploymentCanarySettings` property to specify settings for the canary deployment.
In the [StageDescription](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-apigateway-deployment-stagedescription.html) property type:
+ Use the `AccessLogSetting` property to specify settings for logging access in this stage.
+ Use the `CanarySetting` property to specify settings for the canary deployment in this stage.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-method.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-method.html)
Use the `AuthorizationScopes` property to specify a list of authorization scopes configured on the method.
In the [Integration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-apitgateway-method-integration.html):
+ Use the `ConnectionId` property to specify the ID of the VpcLink used for the integration when `connectionType=VPC_LINK`.
+ Use the `ConnectionType` property to specify the type of the network connection to the integration endpoint.
+ Use the `TimeoutInMillis` property to specify a custom timeout between 50 and 29,000 milliseconds.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-stage.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-stage.html)
Use the `AccessLogSetting` property to specify settings for logging access in this stage.
Use the `CanarySetting` property to specify settings for the canary deployment in this stage.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-usageplan.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-usageplan.html)
In the [ApiStage](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-apigateway-usageplan-apistage.html) property type, use the `Throttle` property to specify a map containing method-level throttling information for API stage in a usage plan.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-project.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-project.html)
Use the `LogsConfig` property specify logs for a project. Logs can be CloudWatch Logs, uploaded to a specified S3 bucket, or both.
In the [LogsConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-codebuild-project-logsconfig.html) property type:
+ Use the `CloudWatchLogs` property to specify details about CloudWatch Logs.
+ Use the `S3Logs` property to specify details about logs that are uploaded to an S3 bucket.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codedeploy-deploymentgroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codedeploy-deploymentgroup.html)
Use the `Ec2TagSet` property to specify information about groups of tags applied to EC2 instances. The deployment group will include only EC2 instances identified by all the tag groups.
Use the `OnPremisesInstanceTagSet` property to specify information about groups of tags applied to on-premises instances. The deployment group will include only on-premises instances identified by all the tag groups.
The `DeliverLogsPermissionArn` and `LogGroupName` properties are no longer required.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-flowlog.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-flowlog.html)
Use the `LogDestination` property to specify the destination to which the flow log data is to be published.
Use the `LogDestinationType` property to specify the type of destination to which the flow log data is to be published. Flow log data can be published to Amazon CloudWatch Logs or Amazon S3.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-spotfleet.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-spotfleet.html)
In the `SpotFleetRequestConfigData` property type, use the `InstanceInterruptionBehavior` property to specify the behavior when a Spot Instance is interrupted.
In the `SpotFleetRequestConfigData` property type, use the `LoadBalancersConfig` property to specify one or more Classic Load Balancers and target groups to attach to the Spot Fleet request. Spot Fleet registers the running Spot Instances with the specified Classic Load Balancers and target groups.
In the `Placement` property type, use the `Tenancy` property to specify the tenancy of the instance (if the instance is running in a VPC). An instance with a tenancy of dedicated runs on single-tenant hardware. The host tenancy isn't supported for Spot Instances.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-vpcendpoint.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-vpcendpoint.html)
Use the following attributes with the `Fn::GetAtt` function to return attribute values.
+ Use `CreationTimestamp` to return the date and time the VPC endpoint was created.
+ Use `DnsEntries` to return the DNS entries for the endpoint.
+ Use `NetworkInterfaceIds` to return the network interfaces for the endpoint.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-service.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-service.html)
The `ServiceRegistries` property now requires replacement upon update.
Use the `SchedulingStrategy` property to specify the scheduling strategy to use for the service.
In the [ServiceRegistry](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ecs-service-serviceregistry.html) property type:
+ Use the `ContainerName` property to specify the container name value, already specified in the task definition, to be used for your service discovery service.
+ Use the `ContainerPort` property to specify the port value, already specified in the task definition, to be used for your service discovery service.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-taskdefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-taskdefinition.html)
In the [LinuxParameters](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ecs-taskdefinition-linuxparameters.html) property type:
+ Use the `Tmpfs` property to specify the container path, mount options, and size of the tmpfs mount.
+ Use the `SharedMemorySize` property to specify the size (in MiB) of the `/dev/shm` volume.
In the [Volumes](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ecs-taskdefinition-volumes.html) property type, use the `DockerVolumeConfiguration` property to specify the configuration of a Docker volume.
In the [ContainerDefinition](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-ecs-taskdefinition-containerdefinitions.html) property type, use the `RepositoryCredentials` property to specify the repository credentials for private registry authentication.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticache-replicationgroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticache-replicationgroup.html)
The `NodeGroupConfiguration` and `NumNodeGroups` properties are now conditional for some update operations.
In the [NodeGroupConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-elasticache-replicationgroup-nodegroupconfiguration.html) property type, use the `NodeGroupId` property to specify either the ElastiCache (Redis OSS) supplied 4-digit id or a user supplied id for the node group these configuration values apply to.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbcluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbcluster.html)
Use the `EngineMode` property to specify the DB engine mode of the DB cluster.
Use the `ScalingConfiguration` property to specify the scaling properties of the DB cluster, for DB clusters in `serverless` DB engine mode. | September 20, 2018 |
| [New resources](#doc-history) | The following resources were added: `AWS::IoT1Click::Device`, `AWS::IoT1Click::Placement`, and `AWS::IoT1Click::Project`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iot1click-device.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iot1click-device.html)
Use the `AWS::IoT1Click::Device` resource to change the enabled state of an AWS IoT 1-Click compatible device.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iot1click-placement.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iot1click-placement.html)
Use the `AWS::IoT1Click::Placement` resource to create an empty AWS IoT 1-Click placement.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iot1click-project.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iot1click-project.html)
Use the `AWS::IoT1Click::Project` resource to create an empty project with a placement template. | September 20, 2018 |
| [New resource](#doc-history) | Added the `AWS::CloudFormation::Macro` resource.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-macro.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-macro.html)
Use the `AWS::CloudFormation::Macro` resource to create a template macro to perform custom processing on CloudFormation templates. | September 6, 2018 |
| [Updated resources](#doc-history) | Added the Logs property to `AWS::AmazonMQ::Broker`. Added the SecondaryArtifacts and SecondarySources properties to `AWS::CodeBuild::Project`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-broker.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-broker.html)
Use the `Logs` property to enable general or audit logging for an Amazon MQ broker.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-project.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-project.html)
In the [Artifacts](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-codebuild-project-artifacts.html) property type, you can use the `SecondaryArtifacts` property to specify secondary artifacts for a build project. You can use the `SecondarySources` property to specify secondary inputs for a build project. | August 30, 2018 |
| [Updated resources](#doc-history) | Added the Configuration property to `AWS::Glue::Crawler`. Added the JsonClassifier and XMLClassifier properties to `AWS::Glue::Classifier`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-glue-crawler.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-glue-crawler.html)
Use the `Configuration` property to specify crawler configuration information. This versioned JSON string allows users to specify aspects of a crawler's behavior.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-glue-classifier.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-glue-classifier.html)
Use the `JsonClassifier` property to specify AWS Glue classifier for JSON.
Use the `XMLClassifier` property to specify AWS Glue classifier for XML content. | August 23, 2018 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::ApiGateway::DomainName`, `AWS::CertificateManager::Certificate`, `AWS::EC2::VPCPeeringConnection`, `AWS::EFS::FileSystem`, `AWS::EMR::Cluster`, `AWS::RDS::DBClusterParameterGroup`, `AWS::SNS::Subscription`, and `AWS::SQS::Queue`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-domainname.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-domainname.html)
Use the following attributes with the `Fn::GetAtt` intrinsic function:
+ The `DistributionHostedZoneId` attribute returns the region-agnostic Route 53 Hosted Zone ID of the edge-optimized endpoint.
+ The `RegionalDomainName` attribute returns the domain name associated with the regional endpoint for this custom domain name.
+ The `RegionalHostedZoneId` attribute returns the region-specific Route 53 Hosted Zone ID of the regional endpoint.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-certificatemanager-certificate.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-certificatemanager-certificate.html)
Use the `ValidationMethod` property to specify the method you want to use if you are requesting a public certificate to validate that you own or control a domain.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-vpcpeeringconnection.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-vpcpeeringconnection.html)
Use the `PeerRegion` property to specify the region code for the accepter VPC, if the accepter VPC is located in a region other than the region in which you make the request.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-efs-filesystem.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-efs-filesystem.html)
+ Use the `ProvisionedThroughputInMibps` property to specify the throughput, measured in MiB/s, that you want to provision for a file system that you're creating.
+ Use the `ThroughputMode` property to specify the throughput mode for the file system to be created.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-emr-cluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-emr-cluster.html)
Use the `KerberosAttributes` property to specify attributes for Kerberos configuration when Kerberos authentication is enabled using a security configuration.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbclusterparametergroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbclusterparametergroup.html)
The `Tags` property now requires no interruption to update.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sns-subscription.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sns-subscription.html)
+ Use the `DeliveryPolicy` property to specify the JSON serialization of the subscription's delivery policy.
+ Use the `FilterPolicy` property to specify the filter policy JSON that is assigned to the subscription.
+ Use the `RawMessageDelivery` property to specify if raw message delivery is enabled for the subscription.
+ Use the `Region` property to specify the region in which the topic resides.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sqs-queue.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sqs-queue.html)
Use the `Tags` property to specify the tags that you want to attach to this queue. | August 15, 2018 |
| [Updated resource](#doc-history) | Added the SSESpecification property to `AWS::DAX::Cluster`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dax-cluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dax-cluster.html)
Use the `SSESpecification` property to specify the settings to enable server-side encryption. | August 9, 2018 |
| [New resource](#doc-history) | Added the `AWS::EC2::VPCEndpointServicePermissions` resource.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-vpcendpointservicepermissions.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-vpcendpointservicepermissions.html)
Grant or revoke permissions for service consumers to connect the VPC endpoint service. | August 9, 2018 |
| [Updated resource](#doc-history) | Added the OverrideArtifactName property to `AWS::CodeBuild::Project`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-project.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-project.html)
In the [Artifacts](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-codebuild-project-artifacts.html) property type, set the `OverrideArtifactName` property to true to override the artifact name with a name specified in the buildspec file. The name specified in a buildspec file is calculated at build time and uses the Shell command language. For example, you can append a date and time to your artifact name so that it is always unique. | August 7, 2018 |
| [Updated resource](#doc-history) | Added the EncryptionDisabled property to `AWS::CodeBuild::Project`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-project.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-project.html)
In the [Artifacts](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-codebuild-project-artifacts.html) property type, set the `EncryptionDisabled` property to true to disable encryption for build output artifacts. This option is only valid if your artifact type is Amazon S3. If this is set to true with another artifact type, an invalidInputException will be thrown. | July 26, 2018 |
| [Updated resource](#doc-history) | Added the Timeout property to `AWS::Batch::JobDefinition`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-batch-jobdefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-batch-jobdefinition.html)
Use the `Timeout` property type to specify a job timeout configuration. | July 19, 2018 |
| [New resource](#doc-history) | The following resource was added: `AWS::IAM::ServiceLinkedRole`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-servicelinkedrole.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-servicelinkedrole.html)
Use the `AWS::IAM::ServiceLinkedRole` resource to create a service-linked role in IAM. A service-linked role is a unique type of IAM role that is linked directly to an AWS service. Service-linked roles are predefined by the service and include all the permissions that the service requires to call other AWS services on your behalf. | July 19, 2018 |
| [Updated resources](#doc-history) | Added the FieldLevelEncryptionId property to `AWS::CloudFront::Distribution` property types.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudfront-distribution.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudfront-distribution.html)
In the [CacheBehavior](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-cloudfront-distribution-cachebehavior.html) and [DefaultCacheBehavior](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-cloudfront-distribution-defaultcachebehavior.html) property types, use the `FieldLevelEncryptionId` property to specify the ID for the field-level encryption configuration that you want CloudFront to use for encrypting specific fields of data for a cache behavior or for the default cache behavior. | July 18, 2018 |
| [Updated resource](#doc-history) | Added the `HttpConfig` property to `AWS::AppSync::DataSource`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appsync-datasource.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appsync-datasource.html)
Use the `HttpConfig` property type to specify HttpConfig for an AWS AppSync data source. | July 12, 2018 |
| [Updated resource](#doc-history) | Added the R`eportBuildStatus` property to `AWS::CodeBuild::Project`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-project.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codebuild-project.html)
In the [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-codebuild-project-source.html) property type, use the `ReportBuildStatus` property to specify whether to send your source provider the status of a build's start and completion. | July 10, 2018 |
| [New resource](#doc-history) | The following resource was added: `AWS::CodePipeline::Webhook`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codepipeline-webhook.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-codepipeline-webhook.html)
Use the `AWS::CodePipeline::Webhook` resource to create a webhook that connects your pipeline to an external event, such as a GitHub source repository change, which triggers your pipeline to start every time the external event occurs. | July 5, 2018 |
| [Updated resource](#doc-history) | Added the following properties to `AWS::EC2::VPCEndpoint`: PrivateDnsEnabled, SecurityGroupIds, SubnetIds, and VpcEndpointType.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-vpcendpoint.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-vpcendpoint.html)
Use the `PrivateDnsEnabled` property to indicate whether to associate a private hosted zone with the specified VPC.
Use the `SecurityGroupIds` property to specify the ID of one or more security groups to associate with the endpoint network interface.
Use the `SubnetIds` property to specify the ID of one or more subnets in which to create an endpoint network interface.
Use the `VpcEndpointType` property to specify the type of endpoint. | June 21, 2018 |
| [New resources](#doc-history) | The following resources were added: `AWS::EC2::VPCEndpointConnectionNotification` and `AWS::EC2::VPCEndpointService`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-vpcendpointconnectionnotification.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-vpcendpointconnectionnotification.html)
Use the `AWS::EC2::VPCEndpointConnectionNotification` resource to create a connection notification for the specified VPC endpoint or VPC endpoint service.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-vpcendpointservice.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-vpcendpointservice.html)
Use the `AWS::EC2::VPCEndpointService` resource to create a VPC endpoint service configuration to which service consumers (AWS accounts, IAM users, and IAM roles) can connect. | June 21, 2018 |
| [Updated resource](#doc-history) | Added the following property to `AWS::ServiceDiscovery::Service`: HealthCheckCustomConfig.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicediscovery-service.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicediscovery-service.html)
Use the `HealthCheckCustomConfig` property to specify information about an optional custom health check. | June 14, 2018 |
| [New resources](#doc-history) | The following new resources were released: `AWS::AmazonMQ::Broker` and `AWS::AmazonMQ::Configuration`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-broker.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-broker.html)
Use the `AWS::AmazonMQ::Broker` resource to create a broker, add configuration changes or modify users for the specified broker, return information about the specified broker, or delete the specified broker.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-configuration.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-amazonmq-configuration.html)
Use the `AWS::AmazonMQ::Configuration` resource to create a configuration, update the specified configuration, or return information about the specified configuration. | June 14, 2018 |
| [New resource](#doc-history) | The following resource was added: `AWS::SSM::ResourceDataSync`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ssm-resourcedatasync.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ssm-resourcedatasync.html)
Use the `AWS::SSM::ResourceDataSync` resource to create or delete a Resource Data Sync for Systems Manager Inventory. You can use Resource Data Sync to send Inventory data collected from all your Systems Manager managed instances to a single Amazon S3 bucket. | June 11, 2018 |
| [New resource](#doc-history) | The following resource was released: `AWS::EKS::Cluster`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-eks-cluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-eks-cluster.html)
Use the `AWS::EKS::Cluster` resource to create Amazon EKS clusters. | June 5, 2018 |
| [Updated resource](#doc-history) | For the `AWS::GuardDuty::Master` resource, the InvitationId property is now optional.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-guardduty-master.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-guardduty-master.html)
The `InvitationId` property is now optional. | May 31, 2018 |
| [New resources](#doc-history) | The following new resources were released: `AWS::SageMaker::Endpoint`, `AWS::SageMaker::EndpointConfig`, `AWS::SageMaker::Model`, `AWS::SageMaker::NotebookInstance`, and `AWS::SageMaker::NotebookInstanceLifecycleConfig`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-endpoint.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-endpoint.html)
Use the `AWS::SageMaker::Endpoint` resource to create a Amazon SageMaker AI endpoint to host trained models.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-endpointconfig.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-endpointconfig.html)
Use the `AWS::SageMaker::EndpointConfig` resource to create a configuration for an endpoint.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-model.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-model.html)
Use the `AWS::SageMaker::Model` resource to create a model to host at an Amazon SageMaker AI endpoint.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-notebookinstance.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-notebookinstance.html)
Use the `AWS::SageMaker::NotebookInstance` resource to create an Amazon SageMaker AI notebook instance.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-notebookinstancelifecycleconfig.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-sagemaker-notebookinstancelifecycleconfig.html)
Use the `AWS::SageMaker::NotebookInstanceLifecycleConfig` resource to specify shell scripts that run when you create or start a notebook instance. | May 31, 2018 |
| [New resources](#doc-history) | The following new resources were released: `AWS::Neptune::DBCluster`, `AWS::Neptune::DBClusterParameterGroup`, `AWS::Neptune::DBInstance`, `AWS::Neptune::DBParameterGroup`, and `AWS::Neptune::DBSubnetGroup`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-neptune-dbcluster.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-neptune-dbcluster.html)
Use the `AWS::Neptune::DBCluster` resource to create an Amazon Neptune DB cluster.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-neptune-dbclusterparametergroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-neptune-dbclusterparametergroup.html)
Use the `AWS::Neptune::DBClusterParameterGroup` resource to create a DB cluster parameter group.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-neptune-dbinstance.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-neptune-dbinstance.html)
Use the `AWS::Neptune::DBInstance` resource to create an Amazon Neptune database instance.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-neptune-dbparametergroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-neptune-dbparametergroup.html)
Use the `AWS::Neptune::DBParameterGroup` resource to create a custom parameter group for Amazon Neptune.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-neptune-dbsubnetgroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-neptune-dbsubnetgroup.html)
Use the `AWS::Neptune::DBSubnetGroup` resource to create an Amazon Neptune database subnet group that contains subnets. | May 30, 2018 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::ApiGateway::RestApi`, `AWS::AutoScaling::AutoScalingGroup`, `AWS::AutoScaling::LaunchConfiguration`, `AWS::DirectoryService::MicrosoftAD`, `AWS::DynamoDB::Table`, `AWS::EC2::Instance`, `AWS::ECS::Service`, `AWS::ECS::TaskDefinition`, `AWS::Elasticsearch::Domain`, `AWS::IAM::Role`, `AWS::KinesisFirehose::DeliveryStream`, `AWS::Lambda::EventSourceMapping`, `AWS::Logs::MetricFilter`, and `AWS::SSM::Association`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-restapi.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-apigateway-restapi.html)
Use the `Policy` property to specify a policy document that contains the permissions for the specified RestAPI.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-autoscaling-autoscalinggroup.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-autoscaling-autoscalinggroup.html)
Use the `ServiceLinkedRoleARN` property to specify the Amazon Resource Name (ARN) of the service-linked role that the Auto Scaling group uses to call other AWS services on your behalf.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-autoscaling-launchconfiguration.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-autoscaling-launchconfiguration.html)
Use the `LaunchConfigurationName` property to specify the name of the launch configuration.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-directoryservice-microsoftad.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-directoryservice-microsoftad.html)
Use the `Edition` property to specify the AWS Microsoft AD edition to use.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dynamodb-table.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-dynamodb-table.html)
Use the `PointInTimeRecoverySpecification` property to specify the settings used to enable point in time recovery.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-instance.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-instance.html)
Use the `LaunchTemplate` property to specify the launch template to use for an Amazon EC2 instance.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-service.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-service.html)
Use the `ServiceRegistry` property type to specify the details of the service registry.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-taskdefinition.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-taskdefinition.html)
Use the `HealthCheck` property type to specify a container health check.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticsearch-domain.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticsearch-domain.html)
Use the `EncryptionAtRestOptions` property type to specify whether the domain should encrypt data at rest, and if so, the AWS Key Management Service key to use.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-role.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-role.html)
Use the `RoleId` attribute to have `Fn::GetAtt` return the stable and unique string identifying the role.
Use the `MaxSessionDuration` property to specify the maximum session duration (in seconds) for the specified role.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-kinesisfirehose-deliverystream.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-kinesisfirehose-deliverystream.html)
Use the `SplunkDestinationConfiguration` property to specify the configuration of a destination in Splunk for a Firehose delivery stream.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-lambda-eventsourcemapping.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-lambda-eventsourcemapping.html)
The `StartingPosition` property is no longer required.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-logs-metricfilter.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-logs-metricfilter.html)
In the [MetricTransformation](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-logs-metricfilter-metrictransformation.html) property type, use the `DefaultValue` property to specify the value to emit when a filter pattern doesn't match a log event.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ssm-association.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ssm-association.html)
Use the `OutputLocation` property to specify an Amazon S3 bucket where you want to store the results of an association request. | May 24, 2018 |
| [New resources](#doc-history) | The following new resources were released: `AWS::ServiceCatalog::AcceptedPortfolioShare`, `AWS::ServiceCatalog::CloudFormationProduct`, `AWS::ServiceCatalog::LaunchNotificationConstraint`, `AWS::ServiceCatalog::LaunchRoleConstraint`, `AWS::ServiceCatalog::LaunchTemplateConstraint`, `AWS::ServiceCatalog::Portfolio`, `AWS::ServiceCatalog::PortfolioPrincipalAssociation`, `AWS::ServiceCatalog::PortfolioProductAssociation`, `AWS::ServiceCatalog::PortfolioShare`, `AWS::ServiceCatalog::TagOption`, and `AWS::ServiceCatalog::TagOptionAssociation`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-acceptedportfolioshare.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-acceptedportfolioshare.html)
Use the `AWS::ServiceCatalog::AcceptedPortfolioShare` resource to accept an offer to share the specified portfolio for Service Catalog.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-cloudformationproduct.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-cloudformationproduct.html)
Use the `AWS::ServiceCatalog::CloudFormationProduct` resource to create a product for Service Catalog.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-launchnotificationconstraint.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-launchnotificationconstraint.html)
Use the `AWS::ServiceCatalog::LaunchNotificationConstraint` resource to create a notification constraint for Service Catalog.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-launchroleconstraint.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-launchroleconstraint.html)
Use the `AWS::ServiceCatalog::LaunchRoleConstraint` resource to create a launch constraint for Service Catalog.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-launchtemplateconstraint.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-launchtemplateconstraint.html)
Use the `AWS::ServiceCatalog::LaunchTemplateConstraint` resource to create a template constraint for Service Catalog.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-portfolio.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-portfolio.html)
Use the `AWS::ServiceCatalog::Portfolio` resource to create a portfolio for Service Catalog.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-portfolioprincipalassociation.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-portfolioprincipalassociation.html)
Use the `AWS::ServiceCatalog::PortfolioPrincipalAssociation` resource to associate a principal with a portfolio for Service Catalog.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-portfolioproductassociation.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-portfolioproductassociation.html)
Use the `AWS::ServiceCatalog::PortfolioProductAssociation` resource to associate a product with a portfolio for Service Catalog.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-portfolioshare.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-portfolioshare.html)
Use the `AWS::ServiceCatalog::PortfolioShare` resource to share a portfolio for Service Catalog.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-tagoption.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-tagoption.html)
Use the `AWS::ServiceCatalog::TagOption` resource to create a TagOption.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-tagoptionassociation.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-tagoptionassociation.html)
Use the `AWS::ServiceCatalog::TagOptionAssociation` resource to associate a TagOption with a resource for Service Catalog. | May 24, 2018 |
| [New resource](#doc-history) | The following resource was released: `AWS::Budgets::Budget`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-budgets-budget.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-budgets-budget.html)
Use the `AWS::Budgets::Budget` resource to create a budget. | May 22, 2018 |
| [New resource](#doc-history) | The following resource was released: `AWS::AutoScalingPlans::ScalingPlan`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-autoscalingplans-scalingplan.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-autoscalingplans-scalingplan.html)
Use the `AWS::AutoScalingPlans::ScalingPlan` resource to create a scaling plan for the scalable resources for your application. | May 9, 2018 |
| [New resource](#doc-history) | The following resource was released: `AWS::GuardDuty::Filter`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-guardduty-filter.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-guardduty-filter.html)
Use the `AWS::GuardDuty::Filter` resource to create a filter for your GuardDuty findings. | May 8, 2018 |
| [Updated resources](#doc-history) | The following resources were updated: `AWS::AppSync::GraphQLApi` and `AWS::GuardDuty::Member`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appsync-graphqlapi.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-appsync-graphqlapi.html)
Use the `OpenIDConnectConfig` property to specify the authorization configuration for using an OpenId Connect compliant service with your GraphQL endpoint.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-guardduty-member.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-guardduty-member.html)
Use the `DisableEmailNotification` property to specify whether an email notification is to be sent to the accounts that you want to invite to GuardDuty as members. When set to 'True', email notification is not sent to the invitees. | May 1, 2018 |
| [New resource](#doc-history) | The following resource was released: `AWS::ServiceCatalog::CloudFormationProvisionedProduct`.
[https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-cloudformationprovisionedproduct.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-servicecatalog-cloudformationprovisionedproduct.html)
Use the `AWS::ServiceCatalog::CloudFormationProvisionedProduct` resource to provision the specified product for Service Catalog. | May 1, 2018 |
For updates to the *AWS CloudFormation User Guide*, see [Document history for the AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/doc-history.html) in the *AWS CloudFormation User Guide*.
# Release history for CloudFormation helper scripts
The following table describes the changes to the `aws-cfn-bootstrap` package, which contains the CloudFormation helper scripts.
You can also download the latest version of the helper scripts at the following links. These links redirect to the most recent version of the helper scripts listed in the table below.
+ [TAR.GZ](https://s3.amazonaws.com/cloudformation-examples/aws-cfn-bootstrap-py3-latest.tar.gz)
+ [ZIP](https://s3.amazonaws.com/cloudformation-examples/aws-cfn-bootstrap-py3-latest.zip)
+ [EXE (32-bit Windows)](https://s3.amazonaws.com/cloudformation-examples/aws-cfn-bootstrap-py3-latest.exe)
+ [EXE (64-bit Windows)](https://s3.amazonaws.com/cloudformation-examples/aws-cfn-bootstrap-py3-win64-latest.exe)
**Note**
Version 2.0-1 and above of the helper scripts support Python 3.4 and above. If you need helper scripts that support an earlier version of Python, see [Release History for CloudFormation Helper Scripts 1.4](#releasehistory-aws-cfn-bootstrap-v1) .
| Version | Release Date | Change Description | Download Packages |
| --- | --- | --- | --- |
| 2.0-38 (Latest; recommended) | 12/4/2025 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-36 | 9/2/2025 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-34 | 4/9/2025 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-33 | 2/27/2025 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-32 | 1/8/2025 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-31 | 10/9/2024 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-29 | 2/8/2024 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-28 | 10/12/2023 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-27 | 09/12/2023 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-26 | 08/9/2023 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-25 | 05/2/2023 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-24 | 02/20/2023 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-22 | 02/6/2023 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-21 | 01/9/2023 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-19 | 11/8/2022 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-18 | 10/31/2022 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-17 | 10/24/2022 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-16 | 08/19/2022 | Addressing issues with temp files being locked when logging commands for Windows . | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-15 | 07/28/2022 | Bug fixes issue causing some commands in Windows to fail. | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-14 | 07/20/2022 | Update for Windows installers to use Python 3.9.13 version. | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-12 | 6/13/2022 | Bug fixes for issues on Windows AMI caused by the KB5010359 security patch. | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-10 | 1/11/2022 | Added support for `Zypper` package manager and `systemd` service management tool. | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-6 | 3/17/2021 | Bug fixes for: [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-5 | 3/5/2021 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-4 | 2/3/2021 | Updated Visual Studio C\$1\$1 2010 redistributable. | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-3 | 1/8/2021 | Windows installer succeeds even if a newer Visual Studio C\$1\$1 Redistributable is already installed. | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-2 | 9/14/2020 | The default and user specified interval for `cfn-hup` has an accuracy of plus or minus 30 seconds. | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 2.0-1 | 6/24/2020 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
## Release History for CloudFormation Helper Scripts 1.4
The table below provides access to previous versions of the helper scripts, which support Python version 2.7 and 2.6. It is provided for backwards compatibility. We recommend using the latest version of the helper scripts, which require Python 3.4 or above.
**Note**
The CloudFormation helper scripts are preinstalled on Amazon Linux AMI images. The download packages listed in the table apply to other Linux/Unix distributions and Microsoft Windows (2008 or later). To learn how to use the helper scripts, see the [CloudFormation helper scripts reference](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/cfn-helper-scripts-reference.html) .
| Version | Release date | Change description | Download packages |
| --- | --- | --- | --- |
| 1.4-34 | 9/14/2020 | The default and user specified interval for `cfn-hup` has an accuracy of plus or minus 30 seconds. | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 1.4-33 | 5/28/2020 | Supports Python 2.6 and 2.7. | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 1.4-32 | | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | |
| 1.4-31 | 9/10/2018 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 1.4-30 | 3/21/2018 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 1.4-29 | 2/12/2018 | Extending support for newer AWS Regions. | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 1.4-27 | 1/24/2018 | Extending support for newer AWS Regions. | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 1.4-24, 1.4-26 | 10/12/2017 | Fixed an incompatibility for customers using an older version of Python. | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 1.4-23 | 10/3/2017 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 1.4-22 | 9/14/2017 | Changed `umask` default value from `0` to `0022`. | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 1.4-21 | 8/31/2017 | Added the `umask` parameter for the `cfn-hup` daemon, with a default value of `0` . | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 1.4-20 | 8/2/2017 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |
| 1.4-19 | 7/20/2017 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/releasehistory-aws-cfn-bootstrap.html) |