feat: update L1 CloudFormation resource definitions (#34497)

Updates the L1 CloudFormation resource definitions with the latest
changes from `@aws-cdk/aws-service-spec`

**L1 CloudFormation resource definition changes:**
```
├[~] service aws-apigateway
│ └ resources
│    ├[~]  resource AWS::ApiGateway::DomainName
│    │  ├ properties
│    │  │  └[+] RoutingMode: string (default="BASE_PATH_MAPPING_ONLY")
│    │  └ attributes
│    │     └ DomainNameArn: (documentation changed)
│    └[~]  resource AWS::ApiGateway::DomainNameV2
│       └ properties
│          └[+] RoutingMode: string (default="BASE_PATH_MAPPING_ONLY")
├[~] service aws-apigatewayv2
│ └ resources
│    ├[~]  resource AWS::ApiGatewayV2::DomainName
│    │  └ properties
│    │     └[+] RoutingMode: string (default="API_MAPPING_ONLY")
│    └[+]  resource AWS::ApiGatewayV2::RoutingRule
│       ├      name: RoutingRule
│       │      cloudFormationType: AWS::ApiGatewayV2::RoutingRule
│       │      documentation: Schema for AWS::ApiGatewayV2::RoutingRule
│       ├ properties
│       │  ├ DomainNameArn: string (required, immutable)
│       │  ├ Priority: integer (required)
│       │  ├ Conditions: Array<Condition> (required)
│       │  └ Actions: Array<Action> (required)
│       ├ attributes
│       │  ├ RoutingRuleArn: string
│       │  └ RoutingRuleId: string
│       └ types
│          ├ type Action
│          │ ├      name: Action
│          │ └ properties
│          │    └ InvokeApi: ActionInvokeApi (required)
│          ├ type ActionInvokeApi
│          │ ├      name: ActionInvokeApi
│          │ └ properties
│          │    ├ ApiId: string (required)
│          │    ├ Stage: string (required)
│          │    └ StripBasePath: boolean
│          ├ type Condition
│          │ ├      name: Condition
│          │ └ properties
│          │    ├ MatchHeaders: MatchHeaders
│          │    └ MatchBasePaths: MatchBasePaths
│          ├ type MatchBasePaths
│          │ ├      name: MatchBasePaths
│          │ └ properties
│          │    └ AnyOf: Array<string> (required)
│          ├ type MatchHeaders
│          │ ├      name: MatchHeaders
│          │ └ properties
│          │    └ AnyOf: Array<MatchHeaderValue> (required)
│          └ type MatchHeaderValue
│            ├      name: MatchHeaderValue
│            └ properties
│               ├ Header: string (required)
│               └ ValueGlob: string (required)
├[~] service aws-bedrock
│ └ resources
│    └[~]  resource AWS::Bedrock::IntelligentPromptRouter
│       ├      - documentation: Definition of AWS::Bedrock::IntelligentPromptRouter Resource Type
│       │      + documentation: Specifies an intelligent prompt router resource for Amazon Bedrock .
│       ├ properties
│       │  ├ Description: (documentation changed)
│       │  ├ FallbackModel: (documentation changed)
│       │  ├ Models: (documentation changed)
│       │  ├ PromptRouterName: (documentation changed)
│       │  └ Tags: (documentation changed)
│       └ attributes
│          ├ CreatedAt: (documentation changed)
│          ├ PromptRouterArn: (documentation changed)
│          ├ Status: (documentation changed)
│          ├ Type: (documentation changed)
│          └ UpdatedAt: (documentation changed)
├[~] service aws-cloudfront
│ └ resources
│    ├[~]  resource AWS::CloudFront::Distribution
│    │  └ types
│    │     └[~] type Definition
│    │       └      - documentation: undefined
│    │              + documentation: The value that you assigned to the parameter.
│    ├[~]  resource AWS::CloudFront::DistributionTenant
│    │  └ attributes
│    │     └ DomainResults: (documentation changed)
│    └[~]  resource AWS::CloudFront::VpcOrigin
│       └ types
│          └[~] type VpcOriginEndpointConfig
│            └ properties
│               └ OriginSSLProtocols: (documentation changed)
├[~] service aws-codebuild
│ └ resources
│    └[~]  resource AWS::CodeBuild::Fleet
│       └ types
│          └[~] type ComputeConfiguration
│            └ properties
│               └[+] instanceType: string
├[~] service aws-codepipeline
│ └ resources
│    └[~]  resource AWS::CodePipeline::Pipeline
│       └ types
│          └[~] type EnvironmentVariable
│            └ properties
│               └[+] Type: string
├[~] service aws-datasync
│ └ resources
│    └[~]  resource AWS::DataSync::StorageSystem
│       ├      - documentation: The `AWS::DataSync::StorageSystem` resource creates an AWS resource for an on-premises storage system that you want DataSync Discovery to collect information about. For more information, see [discovering your storage with DataSync Discovery.](https://docs.aws.amazon.com/datasync/latest/userguide/understanding-your-storage.html)
│       │      + documentation: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-datasync-storagesystem.html
│       ├ properties
│       │  ├ AgentArns: (documentation changed)
│       │  ├ CloudWatchLogGroupArn: (documentation changed)
│       │  ├ Name: (documentation changed)
│       │  ├ ServerConfiguration: (documentation changed)
│       │  ├ ServerCredentials: (documentation changed)
│       │  ├ SystemType: (documentation changed)
│       │  └ Tags: (documentation changed)
│       ├ attributes
│       │  ├ ConnectivityStatus: (documentation changed)
│       │  ├[+] Id: string
│       │  ├ SecretsManagerArn: (documentation changed)
│       │  └ StorageSystemArn: (documentation changed)
│       └ types
│          ├[~] type ServerConfiguration
│          │ ├      - documentation: The network settings that DataSync Discovery uses to connect with your on-premises storage system's management interface.
│          │ │      + documentation: undefined
│          │ └ properties
│          │    ├ ServerHostname: (documentation changed)
│          │    └ ServerPort: (documentation changed)
│          └[~] type ServerCredentials
│            ├      - documentation: The credentials that provide DataSync Discovery read access to your on-premises storage system's management interface.
│            │      DataSync Discovery stores these credentials in [AWS Secrets Manager](https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html) . For more information, see [Accessing your on-premises storage system](https://docs.aws.amazon.com/datasync/latest/userguide/discovery-configure-storage.html) .
│            │      + documentation: undefined
│            └ properties
│               ├ Password: (documentation changed)
│               └ Username: (documentation changed)
├[~] service aws-datazone
│ └ resources
│    ├[~]  resource AWS::DataZone::EnvironmentBlueprintConfiguration
│    │  ├ properties
│    │  │  ├[+] EnvironmentRolePermissionBoundary: string
│    │  │  └[+] ProvisioningConfigurations: Array<ProvisioningConfiguration>
│    │  └ types
│    │     ├[+]  type LakeFormationConfiguration
│    │     │  ├      name: LakeFormationConfiguration
│    │     │  └ properties
│    │     │     ├ LocationRegistrationExcludeS3Locations: Array<string>
│    │     │     └ LocationRegistrationRole: string
│    │     └[+]  type ProvisioningConfiguration
│    │        ├      name: ProvisioningConfiguration
│    │        └ properties
│    │           └ LakeFormationConfiguration: LakeFormationConfiguration (required)
│    └[~]  resource AWS::DataZone::Project
│       ├ properties
│       │  ├[+] DomainUnitId: string (immutable)
│       │  ├[+] ProjectProfileId: string (immutable)
│       │  ├[+] ProjectProfileVersion: string
│       │  └[+] UserParameters: Array<EnvironmentConfigurationUserParameter>
│       ├ attributes
│       │  └[+] ProjectStatus: string
│       └ types
│          ├[+]  type EnvironmentConfigurationUserParameter
│          │  ├      name: EnvironmentConfigurationUserParameter
│          │  └ properties
│          │     ├ EnvironmentId: string
│          │     ├ EnvironmentConfigurationName: string
│          │     └ EnvironmentParameters: Array<EnvironmentParameter>
│          └[+]  type EnvironmentParameter
│             ├      name: EnvironmentParameter
│             └ properties
│                ├ Name: string
│                └ Value: string
├[~] service aws-deadline
│ └ resources
│    └[~]  resource AWS::Deadline::Fleet
│       ├ properties
│       │  └[+] HostConfiguration: HostConfiguration
│       └ types
│          └[+]  type HostConfiguration
│             ├      name: HostConfiguration
│             └ properties
│                ├ ScriptBody: string (required)
│                └ ScriptTimeoutSeconds: integer (default=300)
├[~] service aws-dsql
│ └ resources
│    └[~]  resource AWS::DSQL::Cluster
│       └      - documentation: Creates a cluster in Amazon Aurora DSQL.
│              + documentation: The CreateCluster API allows you to create both single-region clusters and multi-Region clusters. With the addition of the *multiRegionProperties* parameter, you can create a cluster with witness Region support and establish peer relationships with clusters in other Regions during creation.
│              > Creating multi-Region clusters requires additional IAM permissions beyond those needed for single-Region clusters, as detailed in the *Required permissions* section below. 
│              *Required permissions*
│              - **dsql:CreateCluster** - Required to create a cluster.
│              Resources: `arn:aws:dsql:region:account-id:cluster/*`
│              - **dsql:TagResource** - Permission to add tags to a resource.
│              Resources: `arn:aws:dsql:region:account-id:cluster/*`
│              - **dsql:PutMultiRegionProperties** - Permission to configure multi-region properties for a cluster.
│              Resources: `arn:aws:dsql:region:account-id:cluster/*`
│              - **dsql:AddPeerCluster** - When specifying `multiRegionProperties.clusters` , permission to add peer clusters.
│              Resources:
│              - Local cluster: `arn:aws:dsql:region:account-id:cluster/*`
│              - Each peer cluster: exact ARN of each specified peer cluster
│              - **dsql:PutWitnessRegion** - When specifying `multiRegionProperties.witnessRegion` , permission to set a witness Region. This permission is checked both in the cluster Region and in the witness Region.
│              Resources: `arn:aws:dsql:region:account-id:cluster/*`
│              Condition Keys: `dsql:WitnessRegion` (matching the specified witness region)
│              > - The witness Region specified in `multiRegionProperties.witnessRegion` cannot be the same as the cluster's Region.
├[~] service aws-ec2
│ └ resources
│    ├[~]  resource AWS::EC2::IPAM
│    │  └ properties
│    │     └[+] MeteredAccount: string
│    ├[~]  resource AWS::EC2::LaunchTemplate
│    │  └ types
│    │     └[~] type Ebs
│    │       └ properties
│    │          └[+] VolumeInitializationRate: integer
│    └[~]  resource AWS::EC2::NetworkInsightsAnalysis
│       └ properties
│          └ FilterOutArns: (documentation changed)
├[~] service aws-ecs
│ └ resources
│    ├[~]  resource AWS::ECS::Cluster
│    │  └ types
│    │     └[~] type ManagedStorageConfiguration
│    │       └ properties
│    │          ├ FargateEphemeralStorageKmsKeyId: (documentation changed)
│    │          └ KmsKeyId: (documentation changed)
│    ├[~]  resource AWS::ECS::Service
│    │  └ types
│    │     └[~] type ServiceManagedEBSVolumeConfiguration
│    │       └ properties
│    │          ├ Encrypted: (documentation changed)
│    │          ├ FilesystemType: (documentation changed)
│    │          ├ KmsKeyId: (documentation changed)
│    │          ├ SnapshotId: (documentation changed)
│    │          └ VolumeInitializationRate: (documentation changed)
│    └[~]  resource AWS::ECS::TaskDefinition
│       └ types
│          └[~] type SystemControl
│            └ properties
│               └ Value: (documentation changed)
├[~] service aws-elasticache
│ └ resources
│    └[~]  resource AWS::ElastiCache::ReplicationGroup
│       └ properties
│          └ ClusterMode: (documentation changed)
├[~] service aws-gamelift
│ └ resources
│    ├[~]  resource AWS::GameLift::ContainerFleet
│    │  └ properties
│    │     └ Locations: - Array<LocationConfiguration> (immutable)
│    │                  + Array<LocationConfiguration>
│    └[~]  resource AWS::GameLift::Fleet
│       ├      - tagInformation: undefined
│       │      + tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│       ├ properties
│       │  ├ DesiredEC2Instances: - integer
│       │  │                      + integer (deprecated=WARN)
│       │  ├ MaxSize: - integer
│       │  │          + integer (deprecated=WARN)
│       │  ├ MinSize: - integer
│       │  │          + integer (deprecated=WARN)
│       │  └[+] Tags: Array<tag>
│       └ attributes
│          └[+] FleetArn: string
├[~] service aws-gameliftstreams
│ └ resources
│    └[~]  resource AWS::GameLiftStreams::StreamGroup
│       └ types
│          ├[~] type DefaultApplication
│          │ └ properties
│          │    ├ Arn: (documentation changed)
│          │    └ Id: (documentation changed)
│          └[~] type LocationConfiguration
│            └ properties
│               └ LocationName: (documentation changed)
├[~] service aws-logs
│ └ resources
│    └[~]  resource AWS::Logs::DeliveryDestination
│       └ properties
│          └ DeliveryDestinationPolicy: - json ⇐ DestinationPolicy
│                                       + DestinationPolicy
├[~] service aws-omics
│ └ resources
│    ├[~]  resource AWS::Omics::Workflow
│    │  ├ properties
│    │  │  └[+] StorageType: string
│    │  └ attributes
│    │     └[+] Uuid: string
│    └[+]  resource AWS::Omics::WorkflowVersion
│       ├      name: WorkflowVersion
│       │      cloudFormationType: AWS::Omics::WorkflowVersion
│       │      documentation: Definition of AWS::Omics::WorkflowVersion Resource Type.
│       │      tagInformation: {"tagPropertyName":"Tags","variant":"map"}
│       ├ properties
│       │  ├ WorkflowId: string (required, immutable)
│       │  ├ VersionName: string (required, immutable)
│       │  ├ DefinitionUri: string (immutable)
│       │  ├ Description: string
│       │  ├ Engine: string (immutable)
│       │  ├ Main: string (immutable)
│       │  ├ ParameterTemplate: Map<string, WorkflowParameter> (immutable)
│       │  ├ Accelerators: string (immutable)
│       │  ├ StorageType: string
│       │  ├ StorageCapacity: number
│       │  ├ Tags: Map<string, string>
│       │  └ WorkflowBucketOwnerId: string (immutable)
│       ├ attributes
│       │  ├ Arn: string
│       │  ├ CreationTime: string
│       │  ├ Status: string
│       │  ├ Type: string
│       │  └ Uuid: string
│       └ types
│          └ type WorkflowParameter
│            ├      name: WorkflowParameter
│            └ properties
│               ├ Description: string
│               └ Optional: boolean
├[~] service aws-route53resolver
│ └ resources
│    └[~]  resource AWS::Route53Resolver::ResolverRule
│       └ properties
│          └[-] DelegationRecord: string
├[~] service aws-ses
│ └ resources
│    ├[~]  resource AWS::SES::ConfigurationSetEventDestination
│    │  └ types
│    │     └[~] type EventDestination
│    │       └ properties
│    │          └ MatchingEventTypes: (documentation changed)
│    └[~]  resource AWS::SES::Template
│       └ types
│          └[~] type Template
│            └ properties
│               └ TemplateName: (documentation changed)
└[~] service aws-workspaces
  └ resources
     └[~]  resource AWS::WorkSpaces::WorkspacesPool
        └ properties
           └[+] RunningMode: string
```

Co-authored-by: aws-cdk-automation <[email protected]>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>

Author: aws-cdk-automation

packages/aws-cdk-lib/package.json

@@ -136,7 +136,7 @@
   },
   "devDependencies": {
     "@aws-cdk/lambda-layer-kubectl-v31": "^2.0.3",
-    "@aws-cdk/aws-service-spec": "^0.1.72",
+    "@aws-cdk/aws-service-spec": "^0.1.73",
     "@aws-cdk/cdk-build-tools": "0.0.0",
     "@aws-cdk/custom-resource-handlers": "0.0.0",
     "@aws-cdk/pkglint": "0.0.0",

tools/@aws-cdk/spec2cdk/package.json

@@ -32,9 +32,9 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-cdk/aws-service-spec": "^0.1.72",
-    "@aws-cdk/service-spec-importers": "^0.0.79",
-    "@aws-cdk/service-spec-types": "^0.0.138",
+    "@aws-cdk/aws-service-spec": "^0.1.73",
+    "@aws-cdk/service-spec-importers": "^0.0.80",
+    "@aws-cdk/service-spec-types": "^0.0.139",
     "@cdklabs/tskb": "^0.0.3",
     "@cdklabs/typewriter": "^0.0.5",
     "camelcase": "^6",

yarn.lock

@@ -58,14 +58,22 @@
   resolved "https://registry.npmjs.org/@aws-cdk/asset-node-proxy-agent-v6/-/asset-node-proxy-agent-v6-2.1.0.tgz#6d3c7860354d4856a7e75375f2f0ecab313b4989"
   integrity sha512-7bY3J8GCVxLupn/kNmpPc5VJz8grx+4RKfnnJiO1LG+uxkZfANZG3RMHhE+qQxxwkyQ9/MfPtTpf748UhR425A==
 
-"@aws-cdk/[email protected]", "@aws-cdk/aws-service-spec@^0.1.72":
+"@aws-cdk/[email protected]":
   version "0.1.72"
   resolved "https://registry.npmjs.org/@aws-cdk/aws-service-spec/-/aws-service-spec-0.1.72.tgz#e8bc6612656bac42ed3c891cca7c356afaefb778"
   integrity sha512-DvRPSYzH13B4VTtGuDIpYf2mQ+Wf9jP299VqvpZgEQwrlL5LeY0Kr0biGo+Yv9M8exB0UE/Dgm9gQoubJFYyhw==
   dependencies:
     "@aws-cdk/service-spec-types" "^0.0.138"
     "@cdklabs/tskb" "^0.0.3"
 
+"@aws-cdk/aws-service-spec@^0.1.73":
+  version "0.1.73"
+  resolved "https://registry.npmjs.org/@aws-cdk/aws-service-spec/-/aws-service-spec-0.1.73.tgz#bc34d318b2b153331a2dcdb2857583e761dc6a90"
+  integrity sha512-heSDSEYOCwHMdSrdb0DqifxRPqXE84uTNZn55bIKQAYmpT+E9wkVNH77jYYxSxgvaun555ck7lIiG9U8wHIiCg==
+  dependencies:
+    "@aws-cdk/service-spec-types" "^0.0.139"
+    "@cdklabs/tskb" "^0.0.3"
+
 "@aws-cdk/cloud-assembly-schema@^41.2.0":
   version "41.2.0"
   resolved "https://registry.npmjs.org/@aws-cdk/cloud-assembly-schema/-/cloud-assembly-schema-41.2.0.tgz#c1ef513e1cc0528dbc05948ae39d5631306af423"
@@ -109,12 +117,12 @@
   resolved "https://registry.npmjs.org/@aws-cdk/lambda-layer-kubectl-v32/-/lambda-layer-kubectl-v32-2.1.0.tgz#6b9beb4b6b09af74ec48f0c778e50732d7bbb54b"
   integrity sha512-a+zvCLapTg8R0P/Nrecc8mKV+ZgAwvkndn4/zlb43e14zRlc4/ozvmeghUT2eoyyaWJv+PwqgWohEXXec3kpSw==
 
-"@aws-cdk/service-spec-importers@^0.0.79":
-  version "0.0.79"
-  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-importers/-/service-spec-importers-0.0.79.tgz#5ed813f18d8c2edf0d22cfd63b7856bca522e49e"
-  integrity sha512-P/5hgMEFKehI8HW9ZhpMBHi8urqeSkVegjjWqb7CtqXg1n0lRrJQa95QOcQIZL7c7BKmPCqCSfhLGRSDew2VgQ==
+"@aws-cdk/service-spec-importers@^0.0.80":
+  version "0.0.80"
+  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-importers/-/service-spec-importers-0.0.80.tgz#196027da93abc9f14929e3b1cbd8b207298601ac"
+  integrity sha512-S7LVLO++HRAXo3wMxdQchIiLzgCRQ/6mwb2Aqi/D9895bmMLKQl9ebfRkyLcrqI4LQaoeshzGQ9Krb6YudfXuQ==
   dependencies:
-    "@aws-cdk/service-spec-types" "^0.0.138"
+    "@aws-cdk/service-spec-types" "^0.0.139"
     "@cdklabs/tskb" "^0.0.3"
     ajv "^6"
     canonicalize "^2.1.0"
@@ -132,6 +140,13 @@
   dependencies:
     "@cdklabs/tskb" "^0.0.3"
 
+"@aws-cdk/service-spec-types@^0.0.139":
+  version "0.0.139"
+  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-types/-/service-spec-types-0.0.139.tgz#6ba5173783f35036cc3cc8d961856be379a1b5b2"
+  integrity sha512-/x2q+oWI3/SxH4s8puIFYbgiydCuHri0GV0CAbNW3btkAvL9lXvZAsQ7Sp2o5YpxeC/lBoKhs7H6L7mhsocxww==
+  dependencies:
+    "@cdklabs/tskb" "^0.0.3"
+
 "@aws-crypto/[email protected]":
   version "5.2.0"
   resolved "https://registry.npmjs.org/@aws-crypto/crc32/-/crc32-5.2.0.tgz#cfcc22570949c98c6689cfcbd2d693d36cdae2e1"