AWS CDK L2 Constructs Unsupported Properties @badmintoncryer

Last Updated: 2025/10/31 00:59:29

This page displays a list of unsupported properties in AWS CDK L2 constructs. For more details, visit this materials.

Currently, only support direct inline props properly, and cases using the spread operator are not supported. Even if they are actually supported in L2, they are still counted as unsupported properties.

Direct Inline Props

new CfnConstruct(scope, 'Resource', {
  hoge: 'hoge',
  fuga: 123,
});

Spread operator Props (false positive)

const props = {
  hoge: 'hoge',
  fuga: 123,
};

new CfnConstruct(scope, 'Resource', {
  ...props,
});

aws-amplify-alpha - CfnApp

  • autoBranchCreationConfig.autoBranchCreationPatterns
  • autoBranchCreationConfig.basicAuthConfig
  • autoBranchCreationConfig.buildSpec
  • autoBranchCreationConfig.enableAutoBranchCreation
  • autoBranchCreationConfig.enableAutoBuild
  • autoBranchCreationConfig.enablePerformanceMode
  • autoBranchCreationConfig.enablePullRequestPreview
  • autoBranchCreationConfig.environmentVariables
  • autoBranchCreationConfig.framework
  • autoBranchCreationConfig.pullRequestEnvironmentName
  • autoBranchCreationConfig.stage
  • basicAuthConfig.enableBasicAuth
  • basicAuthConfig.password
  • basicAuthConfig.username
  • cacheConfig.type
  • customRules.condition
  • customRules.source
  • customRules.status
  • customRules.target
  • environmentVariables.name
  • environmentVariables.value
  • jobConfig.buildComputeType

aws-amplify-alpha - CfnBranch

  • backend
  • framework
  • basicAuthConfig.enableBasicAuth
  • basicAuthConfig.password
  • basicAuthConfig.username
  • environmentVariables.name
  • environmentVariables.value

aws-amplify-alpha - CfnDomain

  • certificateSettings.certificateType
  • certificateSettings.customCertificateArn
  • subDomainSettings.branchName
  • subDomainSettings.prefix

aws-apigateway - CfnApiKey

  • stageKeys.restApiId
  • stageKeys.stageName

aws-apigateway - CfnBasePathMapping

  • id

aws-apigateway - CfnDomainName

  • ownershipVerificationCertificateArn
  • routingMode
  • endpointConfiguration.ipAddressType
  • mutualTlsAuthentication.truststoreUri
  • mutualTlsAuthentication.truststoreVersion

aws-apigateway - CfnRestApi

  • apiKeySourceType
  • cloneFrom
  • description
  • securityPolicy
  • bodyS3Location.bucket
  • bodyS3Location.eTag
  • bodyS3Location.key
  • bodyS3Location.version
  • endpointConfiguration.ipAddressType
  • endpointConfiguration.types

aws-apigateway - CfnStage

  • canarySetting
  • accessLogSetting.destinationArn
  • accessLogSetting.format
  • methodSettings.cacheDataEncrypted
  • methodSettings.cacheTtlInSeconds
  • methodSettings.cachingEnabled
  • methodSettings.dataTraceEnabled
  • methodSettings.httpMethod
  • methodSettings.loggingLevel
  • methodSettings.metricsEnabled
  • methodSettings.resourcePath
  • methodSettings.throttlingBurstLimit
  • methodSettings.throttlingRateLimit

aws-apigateway - CfnUsagePlan

  • apiStages.apiId
  • apiStages.stage
  • apiStages.throttle
  • quota.limit
  • quota.offset
  • quota.period
  • throttle.burstLimit
  • throttle.rateLimit

aws-apigatewayv2 - CfnApi

  • basePath
  • body
  • bodyS3Location
  • corsConfiguration
  • credentialsArn
  • disableExecuteApiEndpoint
  • failOnWarnings
  • routeKey
  • target
  • version

aws-apigatewayv2 - CfnAuthorizer

  • authorizerCredentialsArn
  • authorizerPayloadFormatVersion
  • authorizerResultTtlInSeconds
  • enableSimpleResponses
  • identityValidationExpression
  • jwtConfiguration

aws-apigatewayv2 - CfnIntegration

  • connectionId
  • connectionType
  • description
  • integrationSubtype
  • payloadFormatVersion
  • responseParameters
  • tlsConfig

aws-apigatewayv2 - CfnRoute

  • authorizationScopes
  • modelSelectionExpression
  • operationName
  • requestModels
  • requestParameters

aws-apigatewayv2 - CfnStage

  • accessLogSettings
  • accessPolicyId
  • clientCertificateId
  • deploymentId
  • routeSettings
  • defaultRouteSettings.dataTraceEnabled
  • defaultRouteSettings.detailedMetricsEnabled
  • defaultRouteSettings.loggingLevel
  • defaultRouteSettings.throttlingBurstLimit
  • defaultRouteSettings.throttlingRateLimit

aws-appconfig - CfnConfigurationProfile

  • kmsKeyIdentifier
  • validators.content
  • validators.type

aws-appconfig - CfnEnvironment

  • monitors.alarmArn
  • monitors.alarmRoleArn

aws-appconfig - CfnExtension

  • parameters.description
  • parameters.dynamic
  • parameters.required

aws-applicationautoscaling - CfnScalableTarget

  • suspendedState
  • scheduledActions.endTime
  • scheduledActions.scalableTargetAction
  • scheduledActions.schedule
  • scheduledActions.scheduledActionName
  • scheduledActions.startTime
  • scheduledActions.timezone

aws-applicationautoscaling - CfnScalingPolicy

  • predictiveScalingPolicyConfiguration
  • resourceId
  • scalableDimension
  • serviceNamespace
  • stepScalingPolicyConfiguration
  • targetTrackingScalingPolicyConfiguration.customizedMetricSpecification.dimensions
  • targetTrackingScalingPolicyConfiguration.customizedMetricSpecification.metricName
  • targetTrackingScalingPolicyConfiguration.customizedMetricSpecification.metrics
  • targetTrackingScalingPolicyConfiguration.customizedMetricSpecification.namespace
  • targetTrackingScalingPolicyConfiguration.customizedMetricSpecification.statistic
  • targetTrackingScalingPolicyConfiguration.customizedMetricSpecification.unit
  • targetTrackingScalingPolicyConfiguration.predefinedMetricSpecification.predefinedMetricType
  • targetTrackingScalingPolicyConfiguration.predefinedMetricSpecification.resourceLabel

aws-appmesh - CfnGatewayRoute

  • spec.grpcRoute.action
  • spec.grpcRoute.match
  • spec.http2Route.action
  • spec.http2Route.match
  • spec.httpRoute.action
  • spec.httpRoute.match

aws-appmesh - CfnMesh

  • spec.egressFilter.type
  • spec.serviceDiscovery.ipPreference

aws-appmesh - CfnRoute

  • spec.grpcRoute.action
  • spec.grpcRoute.match
  • spec.grpcRoute.retryPolicy
  • spec.grpcRoute.timeout
  • spec.http2Route.action
  • spec.http2Route.match
  • spec.http2Route.retryPolicy
  • spec.http2Route.timeout
  • spec.httpRoute.action
  • spec.httpRoute.match
  • spec.httpRoute.retryPolicy
  • spec.httpRoute.timeout
  • spec.tcpRoute.action
  • spec.tcpRoute.match
  • spec.tcpRoute.timeout

aws-appmesh - CfnVirtualGateway

  • spec.backendDefaults.clientPolicy
  • spec.listeners.connectionPool
  • spec.listeners.healthCheck
  • spec.listeners.portMapping
  • spec.listeners.tls
  • spec.logging.accessLog

aws-appmesh - CfnVirtualNode

  • spec.backendDefaults.clientPolicy
  • spec.backends.virtualService
  • spec.listeners.connectionPool
  • spec.listeners.healthCheck
  • spec.listeners.outlierDetection
  • spec.listeners.portMapping
  • spec.listeners.timeout
  • spec.listeners.tls
  • spec.logging.accessLog
  • spec.serviceDiscovery.awsCloudMap
  • spec.serviceDiscovery.dns

aws-appmesh - CfnVirtualRouter

  • spec.listeners.portMapping

aws-appmesh - CfnVirtualService

  • spec.provider.virtualNode
  • spec.provider.virtualRouter

aws-apprunner-alpha - CfnService

  • encryptionConfiguration.kmsKey
  • healthCheckConfiguration.healthyThreshold
  • healthCheckConfiguration.interval
  • healthCheckConfiguration.path
  • healthCheckConfiguration.protocol
  • healthCheckConfiguration.timeout
  • healthCheckConfiguration.unhealthyThreshold
  • networkConfiguration.ingressConfiguration.isPubliclyAccessible
  • observabilityConfiguration.observabilityConfigurationArn
  • observabilityConfiguration.observabilityEnabled
  • sourceConfiguration.authenticationConfiguration.accessRoleArn
  • sourceConfiguration.authenticationConfiguration.connectionArn
  • sourceConfiguration.codeRepository.codeConfiguration
  • sourceConfiguration.codeRepository.repositoryUrl
  • sourceConfiguration.codeRepository.sourceCodeVersion
  • sourceConfiguration.codeRepository.sourceDirectory
  • sourceConfiguration.imageRepository.imageConfiguration
  • sourceConfiguration.imageRepository.imageIdentifier
  • sourceConfiguration.imageRepository.imageRepositoryType

aws-appsync - CfnApi

  • eventConfig.authProviders
  • eventConfig.connectionAuthModes
  • eventConfig.defaultPublishAuthModes
  • eventConfig.defaultSubscribeAuthModes
  • eventConfig.logConfig

aws-appsync - CfnChannelNamespace

  • handlerConfigs.onPublish
  • handlerConfigs.onSubscribe
  • publishAuthModes.authType
  • subscribeAuthModes.authType

aws-appsync - CfnDataSource

  • dynamoDbConfig
  • elasticsearchConfig
  • eventBridgeConfig
  • httpConfig
  • lambdaConfig
  • metricsConfig
  • openSearchServiceConfig
  • relationalDatabaseConfig
  • type

aws-appsync - CfnFunctionConfiguration

  • requestMappingTemplateS3Location
  • responseMappingTemplateS3Location
  • syncConfig
  • runtime.name
  • runtime.runtimeVersion

aws-appsync - CfnGraphQLApi

  • enhancedMetricsConfig
  • additionalAuthenticationProviders.authenticationType
  • additionalAuthenticationProviders.lambdaAuthorizerConfig
  • additionalAuthenticationProviders.openIdConnectConfig
  • additionalAuthenticationProviders.userPoolConfig
  • lambdaAuthorizerConfig.authorizerResultTtlInSeconds
  • lambdaAuthorizerConfig.authorizerUri
  • lambdaAuthorizerConfig.identityValidationExpression
  • logConfig.cloudWatchLogsRoleArn
  • logConfig.excludeVerboseContent
  • logConfig.fieldLogLevel
  • openIdConnectConfig.authTtl
  • openIdConnectConfig.clientId
  • openIdConnectConfig.iatTtl
  • openIdConnectConfig.issuer
  • userPoolConfig.appIdClientRegex
  • userPoolConfig.awsRegion
  • userPoolConfig.defaultAction
  • userPoolConfig.userPoolId

aws-appsync - CfnResolver

  • metricsConfig
  • requestMappingTemplateS3Location
  • responseMappingTemplateS3Location
  • syncConfig
  • cachingConfig.cachingKeys
  • cachingConfig.ttl
  • pipelineConfig.functions
  • runtime.name
  • runtime.runtimeVersion

aws-autoscaling - CfnScalingPolicy

  • adjustmentType
  • metricAggregationType
  • minAdjustmentMagnitude
  • predictiveScalingConfiguration
  • scalingAdjustment
  • stepAdjustments
  • targetTrackingConfiguration.customizedMetricSpecification.dimensions
  • targetTrackingConfiguration.customizedMetricSpecification.metricName
  • targetTrackingConfiguration.customizedMetricSpecification.metrics
  • targetTrackingConfiguration.customizedMetricSpecification.namespace
  • targetTrackingConfiguration.customizedMetricSpecification.period
  • targetTrackingConfiguration.customizedMetricSpecification.statistic
  • targetTrackingConfiguration.customizedMetricSpecification.unit
  • targetTrackingConfiguration.predefinedMetricSpecification.predefinedMetricType
  • targetTrackingConfiguration.predefinedMetricSpecification.resourceLabel

aws-autoscaling - CfnWarmPool

  • instanceReusePolicy.reuseOnScaleIn

aws-backup - CfnBackupPlan

  • backupPlan.advancedBackupSettings.backupOptions
  • backupPlan.advancedBackupSettings.resourceType
  • backupPlan.backupPlanRule.completionWindowMinutes
  • backupPlan.backupPlanRule.copyActions
  • backupPlan.backupPlanRule.enableContinuousBackup
  • backupPlan.backupPlanRule.indexActions
  • backupPlan.backupPlanRule.lifecycle
  • backupPlan.backupPlanRule.ruleName
  • backupPlan.backupPlanRule.scheduleExpression
  • backupPlan.backupPlanRule.scheduleExpressionTimezone
  • backupPlan.backupPlanRule.startWindowMinutes
  • backupPlan.backupPlanRule.targetBackupVault

aws-backup - CfnBackupSelection

  • backupSelection.conditions
  • backupSelection.notResources
  • backupSelection.listOfTags.conditionKey
  • backupSelection.listOfTags.conditionType
  • backupSelection.listOfTags.conditionValue

aws-backup - CfnBackupVault

  • lockConfiguration.changeableForDays
  • lockConfiguration.maxRetentionDays
  • lockConfiguration.minRetentionDays
  • notifications.backupVaultEvents
  • notifications.snsTopicArn

aws-batch - CfnComputeEnvironment

  • computeResources
  • context
  • eksConfiguration
  • replaceComputeEnvironment
  • updatePolicy

aws-batch - CfnJobDefinition

  • consumableResourceProperties
  • containerProperties
  • ecsProperties
  • eksProperties
  • parameters
  • retryStrategy
  • schedulingPriority
  • timeout
  • nodeProperties.nodeRangeProperties.consumableResourceProperties
  • nodeProperties.nodeRangeProperties.container
  • nodeProperties.nodeRangeProperties.ecsProperties
  • nodeProperties.nodeRangeProperties.eksProperties
  • nodeProperties.nodeRangeProperties.instanceTypes
  • nodeProperties.nodeRangeProperties.targetNodes

aws-batch - CfnJobQueue

  • jobQueueType
  • serviceEnvironmentOrder
  • computeEnvironmentOrder.computeEnvironment
  • computeEnvironmentOrder.order
  • jobStateTimeLimitActions.action
  • jobStateTimeLimitActions.maxTimeSeconds
  • jobStateTimeLimitActions.reason
  • jobStateTimeLimitActions.state

aws-batch - CfnSchedulingPolicy

  • fairsharePolicy.shareDistribution.shareIdentifier
  • fairsharePolicy.shareDistribution.weightFactor

aws-certificatemanager - CfnCertificate

  • certificateTransparencyLoggingPreference
  • domainValidationOptions
  • validationMethod

aws-chatbot - CfnSlackChannelConfiguration

  • customizationResourceArns

aws-cloud9-alpha - CfnEnvironmentEC2

  • repositories.pathComponent
  • repositories.repositoryUrl

aws-cloudfront - CfnCachePolicy

  • cachePolicyConfig.parametersInCacheKeyAndForwardedToOrigin.cookiesConfig
  • cachePolicyConfig.parametersInCacheKeyAndForwardedToOrigin.enableAcceptEncodingBrotli
  • cachePolicyConfig.parametersInCacheKeyAndForwardedToOrigin.enableAcceptEncodingGzip
  • cachePolicyConfig.parametersInCacheKeyAndForwardedToOrigin.headersConfig
  • cachePolicyConfig.parametersInCacheKeyAndForwardedToOrigin.queryStringsConfig

aws-cloudfront - CfnDistribution

  • distributionConfig.anycastIpListId
  • distributionConfig.cnamEs
  • distributionConfig.connectionMode
  • distributionConfig.continuousDeploymentPolicyId
  • distributionConfig.customOrigin
  • distributionConfig.s3Origin
  • distributionConfig.staging
  • distributionConfig.tenantConfig
  • distributionConfig.cacheBehaviors.allowedMethods
  • distributionConfig.cacheBehaviors.cachedMethods
  • distributionConfig.cacheBehaviors.cachePolicyId
  • distributionConfig.cacheBehaviors.compress
  • distributionConfig.cacheBehaviors.defaultTtl
  • distributionConfig.cacheBehaviors.fieldLevelEncryptionId
  • distributionConfig.cacheBehaviors.forwardedValues
  • distributionConfig.cacheBehaviors.functionAssociations
  • distributionConfig.cacheBehaviors.grpcConfig
  • distributionConfig.cacheBehaviors.lambdaFunctionAssociations
  • distributionConfig.cacheBehaviors.maxTtl
  • distributionConfig.cacheBehaviors.minTtl
  • distributionConfig.cacheBehaviors.originRequestPolicyId
  • distributionConfig.cacheBehaviors.pathPattern
  • distributionConfig.cacheBehaviors.realtimeLogConfigArn
  • distributionConfig.cacheBehaviors.responseHeadersPolicyId
  • distributionConfig.cacheBehaviors.smoothStreaming
  • distributionConfig.cacheBehaviors.targetOriginId
  • distributionConfig.cacheBehaviors.trustedKeyGroups
  • distributionConfig.cacheBehaviors.trustedSigners
  • distributionConfig.cacheBehaviors.viewerProtocolPolicy
  • distributionConfig.customErrorResponses.errorCachingMinTtl
  • distributionConfig.customErrorResponses.errorCode
  • distributionConfig.customErrorResponses.responseCode
  • distributionConfig.customErrorResponses.responsePagePath
  • distributionConfig.defaultCacheBehavior.allowedMethods
  • distributionConfig.defaultCacheBehavior.cachedMethods
  • distributionConfig.defaultCacheBehavior.cachePolicyId
  • distributionConfig.defaultCacheBehavior.compress
  • distributionConfig.defaultCacheBehavior.defaultTtl
  • distributionConfig.defaultCacheBehavior.fieldLevelEncryptionId
  • distributionConfig.defaultCacheBehavior.forwardedValues
  • distributionConfig.defaultCacheBehavior.functionAssociations
  • distributionConfig.defaultCacheBehavior.grpcConfig
  • distributionConfig.defaultCacheBehavior.lambdaFunctionAssociations
  • distributionConfig.defaultCacheBehavior.maxTtl
  • distributionConfig.defaultCacheBehavior.minTtl
  • distributionConfig.defaultCacheBehavior.originRequestPolicyId
  • distributionConfig.defaultCacheBehavior.realtimeLogConfigArn
  • distributionConfig.defaultCacheBehavior.responseHeadersPolicyId
  • distributionConfig.defaultCacheBehavior.smoothStreaming
  • distributionConfig.defaultCacheBehavior.targetOriginId
  • distributionConfig.defaultCacheBehavior.trustedKeyGroups
  • distributionConfig.defaultCacheBehavior.trustedSigners
  • distributionConfig.defaultCacheBehavior.viewerProtocolPolicy
  • distributionConfig.logging.bucket
  • distributionConfig.logging.enabled
  • distributionConfig.logging.prefix
  • distributionConfig.originGroups.items
  • distributionConfig.originGroups.quantity
  • distributionConfig.origins.connectionAttempts
  • distributionConfig.origins.connectionTimeout
  • distributionConfig.origins.customOriginConfig
  • distributionConfig.origins.domainName
  • distributionConfig.origins.id
  • distributionConfig.origins.originAccessControlId
  • distributionConfig.origins.originCustomHeaders
  • distributionConfig.origins.originPath
  • distributionConfig.origins.originShield
  • distributionConfig.origins.responseCompletionTimeout
  • distributionConfig.origins.s3OriginConfig
  • distributionConfig.origins.vpcOriginConfig
  • distributionConfig.restrictions.geoRestriction
  • distributionConfig.viewerCertificate.acmCertificateArn
  • distributionConfig.viewerCertificate.cloudFrontDefaultCertificate
  • distributionConfig.viewerCertificate.iamCertificateId
  • distributionConfig.viewerCertificate.minimumProtocolVersion
  • distributionConfig.viewerCertificate.sslSupportMethod

aws-cloudfront - CfnFunction

  • functionMetadata
  • functionConfig.keyValueStoreAssociations.keyValueStoreArn

aws-cloudfront - CfnKeyValueStore

  • importSource.sourceArn
  • importSource.sourceType

aws-cloudfront - CfnRealtimeLogConfig

  • endPoints.kinesisStreamConfig
  • endPoints.streamType

aws-cloudfront - CfnResponseHeadersPolicy

  • responseHeadersPolicyConfig.corsConfig.accessControlAllowCredentials
  • responseHeadersPolicyConfig.corsConfig.accessControlAllowHeaders
  • responseHeadersPolicyConfig.corsConfig.accessControlAllowMethods
  • responseHeadersPolicyConfig.corsConfig.accessControlAllowOrigins
  • responseHeadersPolicyConfig.corsConfig.accessControlExposeHeaders
  • responseHeadersPolicyConfig.corsConfig.accessControlMaxAgeSec
  • responseHeadersPolicyConfig.corsConfig.originOverride
  • responseHeadersPolicyConfig.customHeadersConfig.items
  • responseHeadersPolicyConfig.removeHeadersConfig.items
  • responseHeadersPolicyConfig.securityHeadersConfig.contentSecurityPolicy
  • responseHeadersPolicyConfig.securityHeadersConfig.contentTypeOptions
  • responseHeadersPolicyConfig.securityHeadersConfig.frameOptions
  • responseHeadersPolicyConfig.securityHeadersConfig.referrerPolicy
  • responseHeadersPolicyConfig.securityHeadersConfig.strictTransportSecurity
  • responseHeadersPolicyConfig.securityHeadersConfig.xssProtection
  • responseHeadersPolicyConfig.serverTimingHeadersConfig.enabled
  • responseHeadersPolicyConfig.serverTimingHeadersConfig.samplingRate

aws-cloudtrail - CfnTrail

  • advancedEventSelectors
  • eventSelectors.dataResources
  • eventSelectors.excludeManagementEventSources
  • eventSelectors.includeManagementEvents
  • eventSelectors.readWriteType
  • insightSelectors.insightType

aws-cloudwatch - CfnAlarm

  • dimensions
  • extendedStatistic
  • metricName
  • metrics
  • namespace
  • period
  • statistic
  • unit

aws-codebuild - CfnFleet

  • fleetProxyConfiguration
  • imageId
  • scalingConfiguration
  • computeConfiguration.disk
  • computeConfiguration.instanceType
  • computeConfiguration.machineType
  • computeConfiguration.memory
  • computeConfiguration.vCpu
  • fleetVpcConfig.securityGroupIds
  • fleetVpcConfig.subnets
  • fleetVpcConfig.vpcId

aws-codebuild - CfnProject

  • resourceAccessRole
  • artifacts.artifactIdentifier
  • artifacts.encryptionDisabled
  • artifacts.location
  • artifacts.name
  • artifacts.namespaceType
  • artifacts.overrideArtifactName
  • artifacts.packaging
  • artifacts.path
  • artifacts.type
  • buildBatchConfig.batchReportMode
  • buildBatchConfig.combineArtifacts
  • buildBatchConfig.restrictions
  • buildBatchConfig.serviceRole
  • buildBatchConfig.timeoutInMins
  • cache.cacheNamespace
  • cache.location
  • cache.modes
  • cache.type
  • environment.certificate
  • environment.computeType
  • environment.dockerServer
  • environment.environmentVariables
  • environment.fleet
  • environment.image
  • environment.imagePullCredentialsType
  • environment.privilegedMode
  • environment.registryCredential
  • environment.type
  • fileSystemLocations.identifier
  • fileSystemLocations.location
  • fileSystemLocations.mountOptions
  • fileSystemLocations.mountPoint
  • fileSystemLocations.type
  • logsConfig.cloudWatchLogs
  • logsConfig.s3Logs
  • secondaryArtifacts.artifactIdentifier
  • secondaryArtifacts.encryptionDisabled
  • secondaryArtifacts.location
  • secondaryArtifacts.name
  • secondaryArtifacts.namespaceType
  • secondaryArtifacts.overrideArtifactName
  • secondaryArtifacts.packaging
  • secondaryArtifacts.path
  • secondaryArtifacts.type
  • secondarySources.auth
  • secondarySources.buildSpec
  • secondarySources.buildStatusConfig
  • secondarySources.gitCloneDepth
  • secondarySources.gitSubmodulesConfig
  • secondarySources.insecureSsl
  • secondarySources.location
  • secondarySources.reportBuildStatus
  • secondarySources.sourceIdentifier
  • secondarySources.type
  • secondarySourceVersions.sourceIdentifier
  • secondarySourceVersions.sourceVersion
  • source.auth
  • source.buildStatusConfig
  • source.gitCloneDepth
  • source.gitSubmodulesConfig
  • source.insecureSsl
  • source.location
  • source.reportBuildStatus
  • source.sourceIdentifier
  • source.type
  • triggers.buildType
  • triggers.filterGroups
  • triggers.pullRequestBuildPolicy
  • triggers.scopeConfiguration
  • triggers.webhook
  • vpcConfig.securityGroupIds
  • vpcConfig.subnets
  • vpcConfig.vpcId

aws-codebuild - CfnReportGroup

  • exportConfig.s3Destination.bucket
  • exportConfig.s3Destination.bucketOwner
  • exportConfig.s3Destination.encryptionDisabled
  • exportConfig.s3Destination.encryptionKey
  • exportConfig.s3Destination.packaging
  • exportConfig.s3Destination.path

aws-codebuild - CfnSourceCredential

  • username

aws-codecommit - CfnRepository

  • code.branchName
  • code.s3
  • triggers.branches
  • triggers.customData
  • triggers.destinationArn
  • triggers.events
  • triggers.name

aws-codedeploy - CfnDeploymentConfig

  • minimumHealthyHosts.type
  • minimumHealthyHosts.value
  • trafficRoutingConfig.timeBasedCanary
  • trafficRoutingConfig.timeBasedLinear
  • trafficRoutingConfig.type
  • zonalConfig.firstZoneMonitorDurationInSeconds
  • zonalConfig.minimumHealthyHostsPerZone
  • zonalConfig.monitorDurationInSeconds

aws-codedeploy - CfnDeploymentGroup

  • blueGreenDeploymentConfiguration
  • deployment
  • ec2TagFilters
  • ecsServices
  • onPremisesInstanceTagFilters
  • outdatedInstancesStrategy
  • triggerConfigurations
  • alarmConfiguration.alarms
  • alarmConfiguration.enabled
  • alarmConfiguration.ignorePollAlarmFailure
  • autoRollbackConfiguration.enabled
  • autoRollbackConfiguration.events
  • deploymentStyle.deploymentOption
  • deploymentStyle.deploymentType
  • ec2TagSet.ec2TagSetList
  • loadBalancerInfo.elbInfoList
  • loadBalancerInfo.targetGroupInfoList
  • loadBalancerInfo.targetGroupPairInfoList
  • onPremisesTagSet.onPremisesTagSetList

aws-codepipeline - CfnCustomActionType

  • configurationProperties.description
  • configurationProperties.key
  • configurationProperties.name
  • configurationProperties.queryable
  • configurationProperties.required
  • configurationProperties.secret
  • configurationProperties.type
  • settings.revisionUrlTemplate
  • settings.thirdPartyConfigurationUrl

aws-codepipeline - CfnPipeline

  • artifactStore.encryptionKey
  • artifactStore.location
  • artifactStore.type
  • artifactStores.artifactStore
  • artifactStores.region
  • disableInboundStageTransitions.reason
  • disableInboundStageTransitions.stageName
  • stages.actions
  • stages.beforeEntry
  • stages.blockers
  • stages.name
  • stages.onFailure
  • stages.onSuccess
  • triggers.gitConfiguration
  • triggers.providerType
  • variables.defaultValue
  • variables.description
  • variables.name

aws-codestarnotifications - CfnNotificationRule

  • eventTypeId
  • targetAddress
  • targets.targetAddress
  • targets.targetType

aws-cognito - CfnUserPool

  • emailAuthenticationMessage
  • emailAuthenticationSubject
  • accountRecoverySetting.recoveryMechanisms
  • adminCreateUserConfig.unusedAccountValidityDays
  • adminCreateUserConfig.inviteMessageTemplate.emailMessage
  • adminCreateUserConfig.inviteMessageTemplate.emailSubject
  • adminCreateUserConfig.inviteMessageTemplate.smsMessage
  • deviceConfiguration.challengeRequiredOnNewDevice
  • deviceConfiguration.deviceOnlyRememberedOnUserPrompt
  • emailConfiguration.configurationSet
  • emailConfiguration.emailSendingAccount
  • emailConfiguration.from
  • emailConfiguration.replyToEmailAddress
  • emailConfiguration.sourceArn
  • lambdaConfig.createAuthChallenge
  • lambdaConfig.customEmailSender
  • lambdaConfig.customMessage
  • lambdaConfig.customSmsSender
  • lambdaConfig.defineAuthChallenge
  • lambdaConfig.kmsKeyId
  • lambdaConfig.postAuthentication
  • lambdaConfig.postConfirmation
  • lambdaConfig.preAuthentication
  • lambdaConfig.preSignUp
  • lambdaConfig.preTokenGeneration
  • lambdaConfig.preTokenGenerationConfig
  • lambdaConfig.userMigration
  • lambdaConfig.verifyAuthChallengeResponse
  • policies.passwordPolicy
  • policies.signInPolicy
  • schema.attributeDataType
  • schema.developerOnlyAttribute
  • schema.mutable
  • schema.name
  • schema.numberAttributeConstraints
  • schema.required
  • schema.stringAttributeConstraints
  • smsConfiguration.externalId
  • smsConfiguration.snsCallerArn
  • smsConfiguration.snsRegion
  • userAttributeUpdateSettings.attributesRequireVerificationBeforeUpdate
  • usernameConfiguration.caseSensitive
  • userPoolAddOns.advancedSecurityAdditionalFlows
  • userPoolAddOns.advancedSecurityMode
  • verificationMessageTemplate.defaultEmailOption
  • verificationMessageTemplate.emailMessage
  • verificationMessageTemplate.emailMessageByLink
  • verificationMessageTemplate.emailSubject
  • verificationMessageTemplate.emailSubjectByLink
  • verificationMessageTemplate.smsMessage

aws-cognito - CfnUserPoolClient

  • accessTokenValidity
  • authSessionValidity
  • idTokenValidity
  • refreshTokenRotation
  • refreshTokenValidity
  • tokenValidityUnits
  • analyticsConfiguration.applicationArn
  • analyticsConfiguration.applicationId
  • analyticsConfiguration.externalId
  • analyticsConfiguration.roleArn
  • analyticsConfiguration.userDataShared

aws-cognito - CfnUserPoolDomain

  • customDomainConfig.certificateArn

aws-cognito - CfnUserPoolResourceServer

  • scopes.scopeDescription
  • scopes.scopeName

aws-config - CfnConfigRule

  • compliance
  • evaluationModes.mode
  • scope.complianceResourceId
  • scope.complianceResourceTypes
  • scope.tagKey
  • scope.tagValue
  • source.customPolicyDetails
  • source.sourceDetails

aws-docdb - CfnDBCluster

  • availabilityZones
  • globalClusterIdentifier
  • manageMasterUserPassword
  • masterUserSecretKmsKeyId
  • networkType
  • restoreToTime
  • restoreType
  • rotateMasterUserPassword
  • snapshotIdentifier
  • sourceDbClusterIdentifier
  • useLatestRestorableTime
  • serverlessV2ScalingConfiguration.maxCapacity
  • serverlessV2ScalingConfiguration.minCapacity

aws-docdb - CfnDBInstance

  • certificateRotationRestart

aws-dynamodb - CfnGlobalTable

  • globalTableSettingsReplicationMode
  • globalTableSourceArn
  • attributeDefinitions.attributeName
  • attributeDefinitions.attributeType
  • globalSecondaryIndexes.contributorInsightsSpecification
  • globalSecondaryIndexes.indexName
  • globalSecondaryIndexes.keySchema
  • globalSecondaryIndexes.onDemandThroughput
  • globalSecondaryIndexes.projection
  • globalSecondaryIndexes.provisionedThroughput
  • globalSecondaryIndexes.warmThroughput
  • globalTableWitnesses.region
  • keySchema.attributeName
  • keySchema.keyType
  • localSecondaryIndexes.indexName
  • localSecondaryIndexes.keySchema
  • localSecondaryIndexes.projection
  • replicas.contributorInsightsSpecification
  • replicas.deletionProtectionEnabled
  • replicas.globalSecondaryIndexes
  • replicas.kinesisStreamSpecification
  • replicas.pointInTimeRecoverySpecification
  • replicas.readOnDemandThroughputSettings
  • replicas.readProvisionedThroughputSettings
  • replicas.region
  • replicas.replicaStreamSpecification
  • replicas.resourcePolicy
  • replicas.sseSpecification
  • replicas.tableClass
  • replicas.tags
  • sseSpecification.kmsMasterKeyId
  • sseSpecification.sseEnabled
  • sseSpecification.sseType
  • streamSpecification.resourcePolicy
  • streamSpecification.streamViewType
  • timeToLiveSpecification.attributeName
  • timeToLiveSpecification.enabled
  • warmThroughput.readUnitsPerSecond
  • warmThroughput.writeUnitsPerSecond
  • writeOnDemandThroughputSettings.maxWriteRequestUnits
  • writeProvisionedThroughputSettings.writeCapacityAutoScalingSettings

aws-dynamodb - CfnTable

  • globalTableSettingsReplicationMode
  • onDemandThroughput
  • resourcePolicy
  • attributeDefinitions.attributeName
  • attributeDefinitions.attributeType
  • contributorInsightsSpecification.enabled
  • contributorInsightsSpecification.mode
  • globalSecondaryIndexes.contributorInsightsSpecification
  • globalSecondaryIndexes.indexName
  • globalSecondaryIndexes.keySchema
  • globalSecondaryIndexes.onDemandThroughput
  • globalSecondaryIndexes.projection
  • globalSecondaryIndexes.provisionedThroughput
  • globalSecondaryIndexes.warmThroughput
  • importSourceSpecification.inputCompressionType
  • importSourceSpecification.inputFormat
  • importSourceSpecification.inputFormatOptions
  • importSourceSpecification.s3BucketSource
  • keySchema.attributeName
  • keySchema.keyType
  • kinesisStreamSpecification.approximateCreationDateTimePrecision
  • kinesisStreamSpecification.streamArn
  • localSecondaryIndexes.indexName
  • localSecondaryIndexes.keySchema
  • localSecondaryIndexes.projection
  • pointInTimeRecoverySpecification.pointInTimeRecoveryEnabled
  • pointInTimeRecoverySpecification.recoveryPeriodInDays
  • provisionedThroughput.readCapacityUnits
  • provisionedThroughput.writeCapacityUnits
  • sseSpecification.kmsMasterKeyId
  • sseSpecification.sseEnabled
  • sseSpecification.sseType
  • streamSpecification.resourcePolicy
  • streamSpecification.streamViewType
  • timeToLiveSpecification.attributeName
  • timeToLiveSpecification.enabled
  • warmThroughput.readUnitsPerSecond
  • warmThroughput.writeUnitsPerSecond

aws-ec2 - CfnClientVpnEndpoint

  • tagSpecifications
  • authenticationOptions.activeDirectory
  • authenticationOptions.federatedAuthentication
  • authenticationOptions.mutualAuthentication
  • authenticationOptions.type
  • clientConnectOptions.enabled
  • clientConnectOptions.lambdaFunctionArn
  • clientLoginBannerOptions.bannerText
  • clientLoginBannerOptions.enabled
  • clientRouteEnforcementOptions.enforced

aws-ec2 - CfnInstance

  • additionalInfo
  • affinity
  • cpuOptions
  • elasticGpuSpecifications
  • elasticInferenceAccelerators
  • hostId
  • hostResourceGroupArn
  • ipv6Addresses
  • kernelId
  • launchTemplate
  • licenseSpecifications
  • metadataOptions
  • privateDnsNameOptions
  • ramdiskId
  • securityGroups
  • ssmAssociations
  • tenancy
  • volumes
  • blockDeviceMappings.deviceName
  • blockDeviceMappings.ebs
  • blockDeviceMappings.noDevice
  • blockDeviceMappings.virtualName
  • creditSpecification.cpuCredits
  • enclaveOptions.enabled
  • hibernationOptions.configured
  • networkInterfaces.associateCarrierIpAddress
  • networkInterfaces.associatePublicIpAddress
  • networkInterfaces.connectionTrackingSpecification
  • networkInterfaces.deleteOnTermination
  • networkInterfaces.description
  • networkInterfaces.deviceIndex
  • networkInterfaces.enaQueueCount
  • networkInterfaces.enaSrdSpecification
  • networkInterfaces.groups
  • networkInterfaces.interfaceType
  • networkInterfaces.ipv4PrefixCount
  • networkInterfaces.ipv4Prefixes
  • networkInterfaces.ipv6AddressCount
  • networkInterfaces.ipv6Addresses
  • networkInterfaces.ipv6PrefixCount
  • networkInterfaces.ipv6Prefixes
  • networkInterfaces.networkCardIndex
  • networkInterfaces.networkInterfaceId
  • networkInterfaces.primaryIpv6
  • networkInterfaces.privateIpAddress
  • networkInterfaces.privateIpAddresses
  • networkInterfaces.secondaryPrivateIpAddressCount
  • networkInterfaces.subnetId

aws-ec2 - CfnLaunchTemplate

  • launchTemplateData.capacityReservationSpecification
  • launchTemplateData.cpuOptions
  • launchTemplateData.disableApiStop
  • launchTemplateData.elasticGpuSpecifications
  • launchTemplateData.elasticInferenceAccelerators
  • launchTemplateData.instanceRequirements
  • launchTemplateData.kernelId
  • launchTemplateData.licenseSpecifications
  • launchTemplateData.maintenanceOptions
  • launchTemplateData.networkPerformanceOptions
  • launchTemplateData.privateDnsNameOptions
  • launchTemplateData.ramDiskId
  • launchTemplateData.securityGroups
  • launchTemplateData.blockDeviceMappings.deviceName
  • launchTemplateData.blockDeviceMappings.ebs
  • launchTemplateData.blockDeviceMappings.noDevice
  • launchTemplateData.blockDeviceMappings.virtualName
  • launchTemplateData.creditSpecification.cpuCredits
  • launchTemplateData.enclaveOptions.enabled
  • launchTemplateData.hibernationOptions.configured
  • launchTemplateData.iamInstanceProfile.arn
  • launchTemplateData.iamInstanceProfile.name
  • launchTemplateData.instanceMarketOptions.marketType
  • launchTemplateData.instanceMarketOptions.spotOptions
  • launchTemplateData.metadataOptions.httpEndpoint
  • launchTemplateData.metadataOptions.httpProtocolIpv6
  • launchTemplateData.metadataOptions.httpPutResponseHopLimit
  • launchTemplateData.metadataOptions.httpTokens
  • launchTemplateData.monitoring.enabled
  • launchTemplateData.networkInterfaces.associateCarrierIpAddress
  • launchTemplateData.networkInterfaces.associatePublicIpAddress
  • launchTemplateData.networkInterfaces.connectionTrackingSpecification
  • launchTemplateData.networkInterfaces.deleteOnTermination
  • launchTemplateData.networkInterfaces.description
  • launchTemplateData.networkInterfaces.deviceIndex
  • launchTemplateData.networkInterfaces.enaQueueCount
  • launchTemplateData.networkInterfaces.enaSrdSpecification
  • launchTemplateData.networkInterfaces.groups
  • launchTemplateData.networkInterfaces.interfaceType
  • launchTemplateData.networkInterfaces.ipv4PrefixCount
  • launchTemplateData.networkInterfaces.ipv4Prefixes
  • launchTemplateData.networkInterfaces.ipv6AddressCount
  • launchTemplateData.networkInterfaces.ipv6Addresses
  • launchTemplateData.networkInterfaces.ipv6PrefixCount
  • launchTemplateData.networkInterfaces.ipv6Prefixes
  • launchTemplateData.networkInterfaces.networkCardIndex
  • launchTemplateData.networkInterfaces.networkInterfaceId
  • launchTemplateData.networkInterfaces.primaryIpv6
  • launchTemplateData.networkInterfaces.privateIpAddress
  • launchTemplateData.networkInterfaces.privateIpAddresses
  • launchTemplateData.networkInterfaces.secondaryPrivateIpAddressCount
  • launchTemplateData.networkInterfaces.subnetId
  • launchTemplateData.placement.affinity
  • launchTemplateData.placement.availabilityZone
  • launchTemplateData.placement.groupId
  • launchTemplateData.placement.groupName
  • launchTemplateData.placement.hostId
  • launchTemplateData.placement.hostResourceGroupArn
  • launchTemplateData.placement.partitionNumber
  • launchTemplateData.placement.spreadDomain
  • launchTemplateData.placement.tenancy
  • launchTemplateData.tagSpecifications.resourceType
  • launchTemplateData.tagSpecifications.tags
  • tagSpecifications.resourceType
  • tagSpecifications.tags

aws-ec2 - CfnNetworkAclEntry

  • cidrBlock
  • icmp
  • ipv6CidrBlock
  • portRange
  • protocol

aws-ec2 - CfnPrefixList

  • entries.cidr
  • entries.description

aws-ec2 - CfnSecurityGroup

  • securityGroupEgress.cidrIp
  • securityGroupEgress.cidrIpv6
  • securityGroupEgress.description
  • securityGroupEgress.destinationPrefixListId
  • securityGroupEgress.destinationSecurityGroupId
  • securityGroupEgress.fromPort
  • securityGroupEgress.ipProtocol
  • securityGroupEgress.toPort
  • securityGroupIngress.cidrIp
  • securityGroupIngress.cidrIpv6
  • securityGroupIngress.description
  • securityGroupIngress.fromPort
  • securityGroupIngress.ipProtocol
  • securityGroupIngress.sourcePrefixListId
  • securityGroupIngress.sourceSecurityGroupId
  • securityGroupIngress.sourceSecurityGroupName
  • securityGroupIngress.sourceSecurityGroupOwnerId
  • securityGroupIngress.toPort

aws-ec2 - CfnVolume

  • outpostArn

aws-ec2 - CfnVPCEndpoint

  • dnsOptions
  • ipAddressType
  • privateDnsEnabled
  • resourceConfigurationArn
  • securityGroupIds
  • serviceNetworkArn
  • serviceRegion
  • subnetIds

aws-ec2 - CfnVPNConnection

  • enableAcceleration
  • localIpv4NetworkCidr
  • localIpv6NetworkCidr
  • outsideIpAddressType
  • preSharedKeyStorage
  • remoteIpv4NetworkCidr
  • remoteIpv6NetworkCidr
  • transitGatewayId
  • transportTransitGatewayAttachmentId
  • tunnelInsideIpVersion
  • vpnTunnelOptionsSpecifications.dpdTimeoutAction
  • vpnTunnelOptionsSpecifications.dpdTimeoutSeconds
  • vpnTunnelOptionsSpecifications.enableTunnelLifecycleControl
  • vpnTunnelOptionsSpecifications.ikeVersions
  • vpnTunnelOptionsSpecifications.logOptions
  • vpnTunnelOptionsSpecifications.phase1DhGroupNumbers
  • vpnTunnelOptionsSpecifications.phase1EncryptionAlgorithms
  • vpnTunnelOptionsSpecifications.phase1IntegrityAlgorithms
  • vpnTunnelOptionsSpecifications.phase1LifetimeSeconds
  • vpnTunnelOptionsSpecifications.phase2DhGroupNumbers
  • vpnTunnelOptionsSpecifications.phase2EncryptionAlgorithms
  • vpnTunnelOptionsSpecifications.phase2IntegrityAlgorithms
  • vpnTunnelOptionsSpecifications.phase2LifetimeSeconds
  • vpnTunnelOptionsSpecifications.preSharedKey
  • vpnTunnelOptionsSpecifications.rekeyFuzzPercentage
  • vpnTunnelOptionsSpecifications.rekeyMarginTimeSeconds
  • vpnTunnelOptionsSpecifications.replayWindowSize
  • vpnTunnelOptionsSpecifications.startupAction
  • vpnTunnelOptionsSpecifications.tunnelInsideCidr
  • vpnTunnelOptionsSpecifications.tunnelInsideIpv6Cidr

aws-ecr - CfnRepository

  • encryptionConfiguration.encryptionType
  • encryptionConfiguration.kmsKey
  • imageScanningConfiguration.scanOnPush
  • imageTagMutabilityExclusionFilters.imageTagMutabilityExclusionFilterType
  • imageTagMutabilityExclusionFilters.imageTagMutabilityExclusionFilterValue
  • lifecyclePolicy.lifecyclePolicyText
  • lifecyclePolicy.registryId

aws-ecs - CfnCluster

  • capacityProviders
  • defaultCapacityProviderStrategy
  • serviceConnectDefaults
  • clusterSettings.name
  • clusterSettings.value
  • configuration.executeCommandConfiguration
  • configuration.managedStorageConfiguration

aws-efs - CfnAccessPoint

  • posixUser.gid
  • posixUser.secondaryGids
  • posixUser.uid
  • rootDirectory.creationInfo.ownerGid
  • rootDirectory.creationInfo.ownerUid
  • rootDirectory.creationInfo.permissions

aws-efs - CfnFileSystem

  • bypassPolicyLockoutSafetyCheck
  • backupPolicy.status
  • fileSystemProtection.replicationOverwriteProtection
  • lifecyclePolicies.transitionToArchive
  • lifecyclePolicies.transitionToIa
  • lifecyclePolicies.transitionToPrimaryStorageClass
  • replicationConfiguration.destinations

aws-eks - CfnAccessEntry

  • kubernetesGroups
  • username
  • accessPolicies.accessScope
  • accessPolicies.policyArn

aws-eks - CfnAddon

  • namespaceConfig
  • podIdentityAssociations
  • resolveConflicts
  • serviceAccountRoleArn

aws-eks - CfnNodegroup

  • version
  • launchTemplate.id
  • launchTemplate.name
  • launchTemplate.version
  • nodeRepairConfig.enabled
  • remoteAccess.ec2SshKey
  • remoteAccess.sourceSecurityGroups
  • taints.effect
  • taints.key
  • taints.value
  • updateConfig.maxUnavailable
  • updateConfig.maxUnavailablePercentage
  • updateConfig.updateStrategy

aws-elasticache-alpha - CfnServerlessCache

  • endpoint
  • readerEndpoint
  • cacheUsageLimits.dataStorage
  • cacheUsageLimits.ecpuPerSecond

aws-elasticloadbalancing - CfnLoadBalancer

  • accessLoggingPolicy
  • appCookieStickinessPolicy
  • availabilityZones
  • connectionDrainingPolicy
  • connectionSettings
  • lbCookieStickinessPolicy
  • loadBalancerName
  • policies
  • healthCheck.healthyThreshold
  • healthCheck.interval
  • healthCheck.target
  • healthCheck.timeout
  • healthCheck.unhealthyThreshold
  • listeners.instancePort
  • listeners.instanceProtocol
  • listeners.loadBalancerPort
  • listeners.policyNames
  • listeners.protocol
  • listeners.sslCertificateId

aws-elasticloadbalancingv2 - CfnListener

  • alpnPolicy
  • certificates
  • loadBalancerArn
  • mutualAuthentication
  • port
  • protocol
  • sslPolicy
  • defaultActions.authenticateCognitoConfig
  • defaultActions.authenticateOidcConfig
  • defaultActions.fixedResponseConfig
  • defaultActions.forwardConfig
  • defaultActions.order
  • defaultActions.redirectConfig
  • defaultActions.targetGroupArn
  • defaultActions.type
  • listenerAttributes.key
  • listenerAttributes.value

aws-elasticloadbalancingv2 - CfnListenerCertificate

  • certificates.certificateArn

aws-elasticloadbalancingv2 - CfnListenerRule

  • transforms
  • actions.authenticateCognitoConfig
  • actions.authenticateOidcConfig
  • actions.fixedResponseConfig
  • actions.forwardConfig
  • actions.order
  • actions.redirectConfig
  • actions.targetGroupArn
  • actions.type
  • conditions.field
  • conditions.hostHeaderConfig
  • conditions.httpHeaderConfig
  • conditions.httpRequestMethodConfig
  • conditions.pathPatternConfig
  • conditions.queryStringConfig
  • conditions.regexValues
  • conditions.sourceIpConfig
  • conditions.values

aws-elasticloadbalancingv2 - CfnLoadBalancer

  • enableCapacityReservationProvisionStabilize
  • enablePrefixForIpv6SourceNat
  • enforceSecurityGroupInboundRulesOnPrivateLinkTraffic
  • ipAddressType
  • ipv4IpamPoolId
  • securityGroups
  • type
  • loadBalancerAttributes.key
  • loadBalancerAttributes.value
  • minimumLoadBalancerCapacity.capacityUnits
  • subnetMappings.allocationId
  • subnetMappings.iPv6Address
  • subnetMappings.privateIPv4Address
  • subnetMappings.sourceNatIpv6Prefix
  • subnetMappings.subnetId

aws-elasticloadbalancingv2 - CfnTargetGroup

  • port
  • protocol
  • protocolVersion
  • matcher.grpcCode
  • matcher.httpCode
  • targetGroupAttributes.key
  • targetGroupAttributes.value
  • targets.availabilityZone
  • targets.id
  • targets.port

aws-elasticloadbalancingv2 - CfnTrustStoreRevocation

  • revocationContents.revocationType
  • revocationContents.s3Bucket
  • revocationContents.s3Key
  • revocationContents.s3ObjectVersion

aws-elasticsearch - CfnDomain

  • accessPolicies
  • domainArn
  • advancedSecurityOptions.anonymousAuthEnabled
  • advancedSecurityOptions.enabled
  • advancedSecurityOptions.internalUserDatabaseEnabled
  • advancedSecurityOptions.masterUserOptions
  • domainEndpointOptions.customEndpoint
  • domainEndpointOptions.customEndpointCertificateArn
  • domainEndpointOptions.customEndpointEnabled
  • elasticsearchClusterConfig.coldStorageOptions
  • elasticsearchClusterConfig.zoneAwarenessConfig.availabilityZoneCount
  • logPublishingOptions.cloudWatchLogsLogGroupArn
  • logPublishingOptions.enabled
  • snapshotOptions.automatedSnapshotStartHour
  • vpcOptions.securityGroupIds
  • vpcOptions.subnetIds

aws-events - CfnEventBus

  • policy
  • deadLetterConfig.arn
  • logConfig.includeDetail
  • logConfig.level

aws-events - CfnEventBusPolicy

  • action
  • condition
  • principal

aws-events - CfnRule

  • targets.appSyncParameters
  • targets.arn
  • targets.batchParameters
  • targets.deadLetterConfig
  • targets.ecsParameters
  • targets.httpParameters
  • targets.id
  • targets.input
  • targets.inputPath
  • targets.inputTransformer
  • targets.kinesisParameters
  • targets.redshiftDataParameters
  • targets.retryPolicy
  • targets.roleArn
  • targets.runCommandParameters
  • targets.sageMakerPipelineParameters
  • targets.sqsParameters

aws-fsx - CfnFileSystem

  • networkType
  • ontapConfiguration
  • openZfsConfiguration
  • windowsConfiguration
  • lustreConfiguration.autoImportPolicy
  • lustreConfiguration.automaticBackupRetentionDays
  • lustreConfiguration.copyTagsToBackups
  • lustreConfiguration.dailyAutomaticBackupStartTime
  • lustreConfiguration.dataCompressionType
  • lustreConfiguration.dataReadCacheConfiguration
  • lustreConfiguration.deploymentType
  • lustreConfiguration.driveCacheType
  • lustreConfiguration.efaEnabled
  • lustreConfiguration.exportPath
  • lustreConfiguration.importedFileChunkSize
  • lustreConfiguration.importPath
  • lustreConfiguration.metadataConfiguration
  • lustreConfiguration.perUnitStorageThroughput
  • lustreConfiguration.throughputCapacity
  • lustreConfiguration.weeklyMaintenanceStartTime

aws-gamelift-alpha - CfnAlias

  • routingStrategy.fleetId
  • routingStrategy.message
  • routingStrategy.type

aws-gamelift-alpha - CfnFleet

  • anywhereConfiguration
  • applyCapacity
  • computeType
  • instanceRoleCredentialsProvider
  • logPaths
  • metricGroups
  • scalingPolicies
  • scriptId
  • serverLaunchParameters
  • serverLaunchPath
  • ec2InboundPermissions.fromPort
  • ec2InboundPermissions.ipRange
  • ec2InboundPermissions.protocol
  • ec2InboundPermissions.toPort
  • locations.location
  • locations.locationCapacity
  • locations.stoppedActions
  • resourceCreationLimitPolicy.newGameSessionsPerCreator
  • resourceCreationLimitPolicy.policyPeriodInMinutes
  • runtimeConfiguration.gameSessionActivationTimeoutSeconds
  • runtimeConfiguration.maxConcurrentGameSessionActivations
  • runtimeConfiguration.serverProcesses

aws-gamelift-alpha - CfnGameServerGroup

  • autoScalingPolicy.estimatedInstanceWarmup
  • autoScalingPolicy.targetTrackingConfiguration
  • instanceDefinitions.instanceType
  • instanceDefinitions.weightedCapacity
  • launchTemplate.launchTemplateId
  • launchTemplate.launchTemplateName
  • launchTemplate.version

aws-gamelift-alpha - CfnGameSessionQueue

  • destinations.destinationArn
  • filterConfiguration.allowedLocations
  • playerLatencyPolicies.maximumIndividualPlayerLatencyMilliseconds
  • playerLatencyPolicies.policyDurationSeconds
  • priorityConfiguration.locationOrder
  • priorityConfiguration.priorityOrder

aws-glue-alpha - CfnConnection

  • connectionInput.athenaProperties
  • connectionInput.authenticationConfiguration
  • connectionInput.pythonProperties
  • connectionInput.sparkProperties
  • connectionInput.validateCredentials
  • connectionInput.validateForComputeEnvironments
  • connectionInput.physicalConnectionRequirements.availabilityZone
  • connectionInput.physicalConnectionRequirements.securityGroupIdList
  • connectionInput.physicalConnectionRequirements.subnetId

aws-glue-alpha - CfnDatabase

  • databaseName
  • databaseInput.createTableDefaultPermissions
  • databaseInput.federatedDatabase
  • databaseInput.locationUri
  • databaseInput.parameters
  • databaseInput.targetDatabase

aws-glue-alpha - CfnDataQualityRuleset

  • targetTable.databaseName
  • targetTable.tableName

aws-glue-alpha - CfnJob

  • allocatedCapacity
  • executionClass
  • jobMode
  • logUri
  • maintenanceWindow
  • maxCapacity
  • nonOverridableArguments
  • notificationProperty
  • command.pythonVersion
  • command.runtime
  • connections.connections
  • executionProperty.maxConcurrentRuns

aws-glue-alpha - CfnSecurityConfiguration

  • encryptionConfiguration.cloudWatchEncryption.cloudWatchEncryptionMode
  • encryptionConfiguration.cloudWatchEncryption.kmsKeyArn
  • encryptionConfiguration.jobBookmarksEncryption.jobBookmarksEncryptionMode
  • encryptionConfiguration.jobBookmarksEncryption.kmsKeyArn
  • encryptionConfiguration.s3Encryptions.kmsKeyArn
  • encryptionConfiguration.s3Encryptions.s3EncryptionMode

aws-iam - CfnGroup

  • policies

aws-iam - CfnRole

  • policies.policyDocument
  • policies.policyName

aws-iam - CfnSAMLProvider

  • addPrivateKey
  • assertionEncryptionMode
  • privateKeyList
  • removePrivateKey

aws-iam - CfnUser

  • policies
  • loginProfile.password
  • loginProfile.passwordResetRequired

aws-iot-alpha - CfnTopicRule

  • topicRulePayload.actions.cloudwatchAlarm
  • topicRulePayload.actions.cloudwatchLogs
  • topicRulePayload.actions.cloudwatchMetric
  • topicRulePayload.actions.dynamoDb
  • topicRulePayload.actions.dynamoDBv2
  • topicRulePayload.actions.elasticsearch
  • topicRulePayload.actions.firehose
  • topicRulePayload.actions.http
  • topicRulePayload.actions.iotAnalytics
  • topicRulePayload.actions.iotEvents
  • topicRulePayload.actions.iotSiteWise
  • topicRulePayload.actions.kafka
  • topicRulePayload.actions.kinesis
  • topicRulePayload.actions.lambda
  • topicRulePayload.actions.location
  • topicRulePayload.actions.openSearch
  • topicRulePayload.actions.republish
  • topicRulePayload.actions.s3
  • topicRulePayload.actions.sns
  • topicRulePayload.actions.sqs
  • topicRulePayload.actions.stepFunctions
  • topicRulePayload.actions.timestream
  • topicRulePayload.errorAction.cloudwatchAlarm
  • topicRulePayload.errorAction.cloudwatchLogs
  • topicRulePayload.errorAction.cloudwatchMetric
  • topicRulePayload.errorAction.dynamoDb
  • topicRulePayload.errorAction.dynamoDBv2
  • topicRulePayload.errorAction.elasticsearch
  • topicRulePayload.errorAction.firehose
  • topicRulePayload.errorAction.http
  • topicRulePayload.errorAction.iotAnalytics
  • topicRulePayload.errorAction.iotEvents
  • topicRulePayload.errorAction.iotSiteWise
  • topicRulePayload.errorAction.kafka
  • topicRulePayload.errorAction.kinesis
  • topicRulePayload.errorAction.lambda
  • topicRulePayload.errorAction.location
  • topicRulePayload.errorAction.openSearch
  • topicRulePayload.errorAction.republish
  • topicRulePayload.errorAction.s3
  • topicRulePayload.errorAction.sns
  • topicRulePayload.errorAction.sqs
  • topicRulePayload.errorAction.stepFunctions
  • topicRulePayload.errorAction.timestream

aws-iotevents-alpha - CfnDetectorModel

  • detectorModelDefinition.states.onEnter
  • detectorModelDefinition.states.onExit
  • detectorModelDefinition.states.onInput
  • detectorModelDefinition.states.stateName

aws-iotevents-alpha - CfnInput

  • inputDescription
  • inputDefinition.attributes.jsonPath

aws-ivs-alpha - CfnChannel

  • multitrackInputConfiguration.enabled
  • multitrackInputConfiguration.maximumResolution
  • multitrackInputConfiguration.policy

aws-ivs-alpha - CfnRecordingConfiguration

  • renditionConfiguration.renditions
  • renditionConfiguration.renditionSelection
  • thumbnailConfiguration.participantThumbnailConfiguration

aws-kinesis - CfnStream

  • streamModeDetails

aws-kinesisfirehose - CfnDeliveryStream

  • amazonOpenSearchServerlessDestinationConfiguration
  • amazonopensearchserviceDestinationConfiguration
  • databaseSourceConfiguration
  • directPutSourceConfiguration
  • elasticsearchDestinationConfiguration
  • extendedS3DestinationConfiguration
  • httpEndpointDestinationConfiguration
  • icebergDestinationConfiguration
  • kinesisStreamSourceConfiguration
  • mskSourceConfiguration
  • redshiftDestinationConfiguration
  • s3DestinationConfiguration
  • snowflakeDestinationConfiguration
  • splunkDestinationConfiguration
  • deliveryStreamEncryptionConfigurationInput.keyArn
  • deliveryStreamEncryptionConfigurationInput.keyType

aws-kms - CfnKey

  • bypassPolicyLockoutSafetyCheck
  • origin

aws-lambda - CfnAlias

  • provisionedConcurrencyConfig.provisionedConcurrentExecutions
  • routingConfig.additionalVersionWeights

aws-lambda - CfnEventInvokeConfig

  • destinationConfig.onFailure

aws-lambda - CfnEventSourceMapping

  • documentDbEventSourceConfig
  • queues
  • amazonManagedKafkaEventSourceConfig.consumerGroupId
  • amazonManagedKafkaEventSourceConfig.schemaRegistryConfig
  • destinationConfig.onFailure
  • filterCriteria.filters
  • metricsConfig.metrics
  • provisionedPollerConfig.maximumPollers
  • provisionedPollerConfig.minimumPollers
  • scalingConfig.maximumConcurrency
  • selfManagedEventSource.endpoints
  • selfManagedKafkaEventSourceConfig.consumerGroupId
  • selfManagedKafkaEventSourceConfig.schemaRegistryConfig
  • sourceAccessConfigurations.type
  • sourceAccessConfigurations.uri

aws-lambda - CfnFunction

  • tracingConfig
  • deadLetterConfig.targetArn
  • environment.variables
  • ephemeralStorage.size
  • fileSystemConfigs.arn
  • fileSystemConfigs.localMountPath
  • imageConfig.command
  • imageConfig.entryPoint
  • imageConfig.workingDirectory
  • loggingConfig.applicationLogLevel
  • loggingConfig.logFormat
  • loggingConfig.logGroup
  • loggingConfig.systemLogLevel
  • runtimeManagementConfig.runtimeVersionArn
  • runtimeManagementConfig.updateRuntimeOn
  • snapStart.applyOn
  • vpcConfig.ipv6AllowedForDualStack
  • vpcConfig.securityGroupIds
  • vpcConfig.subnetIds

aws-lambda - CfnUrl

  • cors.allowCredentials
  • cors.allowHeaders
  • cors.allowMethods
  • cors.allowOrigins
  • cors.exposeHeaders
  • cors.maxAge

aws-lambda - CfnVersion

  • runtimePolicy
  • provisionedConcurrencyConfig.provisionedConcurrentExecutions

aws-location-alpha - CfnAPIKey

  • restrictions.allowActions
  • restrictions.allowReferers
  • restrictions.allowResources

aws-location-alpha - CfnGeofenceCollection

  • pricingPlan
  • pricingPlanDataSource

aws-location-alpha - CfnMap

  • pricingPlan

aws-location-alpha - CfnPlaceIndex

  • pricingPlan
  • dataSourceConfiguration.intendedUse

aws-location-alpha - CfnRouteCalculator

  • pricingPlan

aws-location-alpha - CfnTracker

  • pricingPlan
  • pricingPlanDataSource

aws-logs - CfnLogGroup

  • fieldIndexPolicies
  • resourcePolicyDocument

aws-logs - CfnMetricFilter

  • emitSystemFieldDimensions
  • fieldSelectionCriteria
  • metricTransformations.defaultValue
  • metricTransformations.dimensions
  • metricTransformations.metricName
  • metricTransformations.metricNamespace
  • metricTransformations.metricValue
  • metricTransformations.unit

aws-logs - CfnQueryDefinition

  • queryLanguage

aws-logs - CfnSubscriptionFilter

  • applyOnTransformedLogs
  • emitSystemFields
  • fieldSelectionCriteria

aws-msk-alpha - CfnCluster

  • currentVersion
  • brokerNodeGroupInfo.brokerAzDistribution
  • brokerNodeGroupInfo.connectivityInfo
  • brokerNodeGroupInfo.storageInfo.ebsStorageInfo
  • clientAuthentication.sasl
  • configurationInfo.arn
  • configurationInfo.revision
  • encryptionInfo.encryptionAtRest.dataVolumeKmsKeyId
  • loggingInfo.brokerLogs
  • openMonitoring.prometheus

aws-msk-alpha - CfnServerlessCluster

  • vpcConfigs.securityGroups
  • vpcConfigs.subnetIds

aws-neptune-alpha - CfnDBCluster

  • availabilityZones
  • dbInstanceParameterGroupName
  • restoreToTime
  • restoreType
  • snapshotIdentifier
  • sourceDbClusterIdentifier
  • useLatestRestorableTime
  • associatedRoles.featureName
  • associatedRoles.roleArn
  • serverlessScalingConfiguration.maxCapacity
  • serverlessScalingConfiguration.minCapacity

aws-neptune-alpha - CfnDBInstance

  • allowMajorVersionUpgrade
  • dbSnapshotIdentifier
  • dbSubnetGroupName
  • preferredMaintenanceWindow
  • publiclyAccessible

aws-opensearchservice - CfnDomain

  • accessPolicies
  • domainArn
  • identityCenterOptions
  • skipShardMigrationWait
  • advancedSecurityOptions.anonymousAuthDisableDate
  • advancedSecurityOptions.anonymousAuthEnabled
  • advancedSecurityOptions.enabled
  • advancedSecurityOptions.iamFederationOptions
  • advancedSecurityOptions.internalUserDatabaseEnabled
  • advancedSecurityOptions.jwtOptions
  • advancedSecurityOptions.masterUserOptions
  • advancedSecurityOptions.samlOptions
  • clusterConfig.coldStorageOptions.enabled
  • clusterConfig.nodeOptions.nodeConfig
  • clusterConfig.nodeOptions.nodeType
  • clusterConfig.zoneAwarenessConfig.availabilityZoneCount
  • cognitoOptions.enabled
  • cognitoOptions.identityPoolId
  • cognitoOptions.roleArn
  • cognitoOptions.userPoolId
  • domainEndpointOptions.customEndpoint
  • domainEndpointOptions.customEndpointCertificateArn
  • domainEndpointOptions.customEndpointEnabled
  • logPublishingOptions.cloudWatchLogsLogGroupArn
  • logPublishingOptions.enabled
  • offPeakWindowOptions.enabled
  • offPeakWindowOptions.offPeakWindow
  • snapshotOptions.automatedSnapshotStartHour
  • softwareUpdateOptions.autoSoftwareUpdateEnabled
  • vpcOptions.securityGroupIds
  • vpcOptions.subnetIds

aws-pipes-alpha - CfnPipe

  • enrichmentParameters.httpParameters
  • enrichmentParameters.inputTemplate
  • logConfiguration.cloudwatchLogsLogDestination
  • logConfiguration.firehoseLogDestination
  • logConfiguration.includeExecutionData
  • logConfiguration.level
  • logConfiguration.s3LogDestination
  • sourceParameters.activeMqBrokerParameters
  • sourceParameters.dynamoDbStreamParameters
  • sourceParameters.kinesisStreamParameters
  • sourceParameters.managedStreamingKafkaParameters
  • sourceParameters.rabbitMqBrokerParameters
  • sourceParameters.selfManagedKafkaParameters
  • sourceParameters.sqsQueueParameters
  • sourceParameters.filterCriteria.filters
  • targetParameters.batchJobParameters
  • targetParameters.cloudWatchLogsParameters
  • targetParameters.ecsTaskParameters
  • targetParameters.eventBridgeEventBusParameters
  • targetParameters.httpParameters
  • targetParameters.inputTemplate
  • targetParameters.kinesisStreamParameters
  • targetParameters.lambdaFunctionParameters
  • targetParameters.redshiftDataParameters
  • targetParameters.sageMakerPipelineParameters
  • targetParameters.sqsQueueParameters
  • targetParameters.stepFunctionStateMachineParameters
  • targetParameters.timestreamParameters

aws-rds - CfnDBCluster

  • allocatedStorage
  • associatedRoles
  • autoMinorVersionUpgrade
  • availabilityZones
  • backtrackWindow
  • backupRetentionPeriod
  • clusterScalabilityType
  • copyTagsToSnapshot
  • databaseInsightsMode
  • databaseName
  • dbClusterIdentifier
  • dbClusterInstanceClass
  • dbClusterParameterGroupName
  • dbInstanceParameterGroupName
  • dbSubnetGroupName
  • dbSystemId
  • deleteAutomatedBackups
  • deletionProtection
  • domain
  • domainIamRoleName
  • enableCloudwatchLogsExports
  • enableGlobalWriteForwarding
  • enableHttpEndpoint
  • enableIamDatabaseAuthentication
  • enableLocalWriteForwarding
  • engine
  • engineLifecycleSupport
  • engineMode
  • engineVersion
  • globalClusterIdentifier
  • iops
  • manageMasterUserPassword
  • masterUserAuthenticationType
  • masterUserSecret
  • monitoringInterval
  • monitoringRoleArn
  • networkType
  • performanceInsightsEnabled
  • performanceInsightsKmsKeyId
  • performanceInsightsRetentionPeriod
  • port
  • preferredBackupWindow
  • preferredMaintenanceWindow
  • publiclyAccessible
  • replicationSourceIdentifier
  • restoreToTime
  • restoreType
  • scalingConfiguration
  • serverlessV2ScalingConfiguration
  • snapshotIdentifier
  • sourceDbClusterIdentifier
  • sourceDbClusterResourceId
  • sourceRegion
  • storageEncrypted
  • storageType
  • useLatestRestorableTime
  • vpcSecurityGroupIds

aws-rds - CfnDBInstance

  • allocatedStorage
  • allowMajorVersionUpgrade
  • applyImmediately
  • associatedRoles
  • automaticBackupReplicationKmsKeyId
  • automaticBackupReplicationRegion
  • automaticBackupReplicationRetentionPeriod
  • autoMinorVersionUpgrade
  • availabilityZone
  • backupRetentionPeriod
  • backupTarget
  • caCertificateIdentifier
  • certificateRotationRestart
  • copyTagsToSnapshot
  • customIamInstanceProfile
  • databaseInsightsMode
  • dbClusterIdentifier
  • dbClusterSnapshotIdentifier
  • dbInstanceClass
  • dbInstanceIdentifier
  • dbName
  • dbParameterGroupName
  • dbSecurityGroups
  • dbSnapshotIdentifier
  • dbSubnetGroupName
  • dbSystemId
  • dedicatedLogVolume
  • deleteAutomatedBackups
  • deletionProtection
  • domain
  • domainAuthSecretArn
  • domainDnsIps
  • domainFqdn
  • domainIamRoleName
  • domainOu
  • enableCloudwatchLogsExports
  • enableIamDatabaseAuthentication
  • enablePerformanceInsights
  • engine
  • engineLifecycleSupport
  • engineVersion
  • iops
  • licenseModel
  • manageMasterUserPassword
  • masterUserAuthenticationType
  • masterUserSecret
  • maxAllocatedStorage
  • monitoringInterval
  • monitoringRoleArn
  • multiAz
  • ncharCharacterSetName
  • networkType
  • optionGroupName
  • performanceInsightsKmsKeyId
  • performanceInsightsRetentionPeriod
  • port
  • preferredBackupWindow
  • preferredMaintenanceWindow
  • processorFeatures
  • promotionTier
  • publiclyAccessible
  • replicaMode
  • restoreTime
  • sourceDbClusterIdentifier
  • sourceDbInstanceAutomatedBackupsArn
  • sourceDbInstanceIdentifier
  • sourceDbiResourceId
  • sourceRegion
  • storageThroughput
  • storageType
  • tdeCredentialArn
  • tdeCredentialPassword
  • timezone
  • useDefaultProcessorFeatures
  • useLatestRestorableTime
  • vpcSecurityGroups

aws-rds - CfnDBProxy

  • defaultAuthScheme
  • endpointNetworkType
  • targetConnectionNetworkType
  • auth.authScheme
  • auth.clientPasswordAuthType
  • auth.description
  • auth.iamAuth
  • auth.secretArn

aws-rds - CfnDBProxyEndpoint

  • endpointNetworkType

aws-rds - CfnOptionGroup

  • optionGroupName
  • optionConfigurations.dbSecurityGroupMemberships
  • optionConfigurations.optionName
  • optionConfigurations.optionSettings
  • optionConfigurations.optionVersion
  • optionConfigurations.port
  • optionConfigurations.vpcSecurityGroupMemberships

aws-redshift-alpha - CfnCluster

  • aquaConfigurationStatus
  • availabilityZone
  • availabilityZoneRelocationStatus
  • clusterSecurityGroups
  • clusterVersion
  • deferMaintenance
  • deferMaintenanceDuration
  • deferMaintenanceEndTime
  • deferMaintenanceStartTime
  • destinationRegion
  • endpoint
  • hsmClientCertificateIdentifier
  • hsmConfigurationIdentifier
  • manageMasterPassword
  • manualSnapshotRetentionPeriod
  • masterPasswordSecretKmsKeyId
  • namespaceResourcePolicy
  • ownerAccount
  • revisionTarget
  • rotateEncryptionKey
  • snapshotClusterIdentifier
  • snapshotCopyGrantName
  • snapshotCopyManual
  • snapshotCopyRetentionPeriod
  • snapshotIdentifier
  • loggingProperties.bucketName
  • loggingProperties.logDestinationType
  • loggingProperties.logExports
  • loggingProperties.s3KeyPrefix

aws-redshift-alpha - CfnClusterParameterGroup

  • parameterGroupName
  • parameters.parameterName
  • parameters.parameterValue

aws-route53 - CfnHealthCheck

  • healthCheckConfig.alarmIdentifier.name
  • healthCheckConfig.alarmIdentifier.region

aws-route53 - CfnHostedZone

  • hostedZoneConfig.comment
  • queryLoggingConfig.cloudWatchLogsLogGroupArn
  • vpcs.vpcId
  • vpcs.vpcRegion

aws-route53 - CfnRecordSet

  • failover
  • geoProximityLocation
  • hostedZoneName
  • aliasTarget.dnsName
  • aliasTarget.evaluateTargetHealth
  • aliasTarget.hostedZoneId
  • cidrRoutingConfig.collectionId
  • cidrRoutingConfig.locationName
  • geoLocation.continentCode
  • geoLocation.countryCode
  • geoLocation.subdivisionCode

aws-route53resolver-alpha - CfnFirewallRuleGroup

  • firewallRules.action
  • firewallRules.blockOverrideDnsType
  • firewallRules.blockOverrideDomain
  • firewallRules.blockOverrideTtl
  • firewallRules.blockResponse
  • firewallRules.confidenceThreshold
  • firewallRules.dnsThreatProtection
  • firewallRules.firewallDomainListId
  • firewallRules.firewallDomainRedirectionAction
  • firewallRules.firewallThreatProtectionId
  • firewallRules.priority
  • firewallRules.qtype

aws-route53resolver-alpha - CfnFirewallRuleGroupAssociation

  • mutationProtection
  • name

aws-s3 - CfnBucket

  • analyticsConfigurations
  • metadataConfiguration
  • metadataTableConfiguration
  • notificationConfiguration
  • accelerateConfiguration.accelerationStatus
  • bucketEncryption.serverSideEncryptionConfiguration.bucketKeyEnabled
  • bucketEncryption.serverSideEncryptionConfiguration.serverSideEncryptionByDefault
  • corsConfiguration.corsRules
  • intelligentTieringConfigurations.id
  • intelligentTieringConfigurations.prefix
  • intelligentTieringConfigurations.status
  • intelligentTieringConfigurations.tagFilters
  • intelligentTieringConfigurations.tierings
  • inventoryConfigurations.destination
  • inventoryConfigurations.enabled
  • inventoryConfigurations.id
  • inventoryConfigurations.includedObjectVersions
  • inventoryConfigurations.optionalFields
  • inventoryConfigurations.prefix
  • inventoryConfigurations.scheduleFrequency
  • lifecycleConfiguration.rules
  • lifecycleConfiguration.transitionDefaultMinimumObjectSize
  • loggingConfiguration.destinationBucketName
  • loggingConfiguration.logFilePrefix
  • loggingConfiguration.targetObjectKeyFormat
  • metricsConfigurations.accessPointArn
  • metricsConfigurations.id
  • metricsConfigurations.prefix
  • metricsConfigurations.tagFilters
  • objectLockConfiguration.objectLockEnabled
  • objectLockConfiguration.rule
  • ownershipControls.rules
  • publicAccessBlockConfiguration.blockPublicAcls
  • publicAccessBlockConfiguration.blockPublicPolicy
  • publicAccessBlockConfiguration.ignorePublicAcls
  • publicAccessBlockConfiguration.restrictPublicBuckets
  • replicationConfiguration.role
  • replicationConfiguration.rules
  • versioningConfiguration.status
  • websiteConfiguration.errorDocument
  • websiteConfiguration.indexDocument
  • websiteConfiguration.redirectAllRequestsTo
  • websiteConfiguration.routingRules

aws-scheduler - CfnSchedule

  • target.deadLetterConfig.arn
  • target.ecsParameters.capacityProviderStrategy
  • target.ecsParameters.enableExecuteCommand
  • target.ecsParameters.group
  • target.ecsParameters.launchType
  • target.ecsParameters.networkConfiguration
  • target.ecsParameters.placementConstraints
  • target.ecsParameters.placementStrategy
  • target.ecsParameters.platformVersion
  • target.ecsParameters.referenceId
  • target.ecsParameters.tags
  • target.ecsParameters.taskCount
  • target.ecsParameters.taskDefinitionArn
  • target.eventBridgeParameters.detailType
  • target.eventBridgeParameters.source
  • target.kinesisParameters.partitionKey
  • target.retryPolicy.maximumEventAgeInSeconds
  • target.retryPolicy.maximumRetryAttempts
  • target.sageMakerPipelineParameters.pipelineParameterList
  • target.sqsParameters.messageGroupId

aws-secretsmanager - CfnResourcePolicy

  • blockPublicPolicy

aws-secretsmanager - CfnRotationSchedule

  • hostedRotationLambda.excludeCharacters
  • hostedRotationLambda.kmsKeyArn
  • hostedRotationLambda.masterSecretArn
  • hostedRotationLambda.masterSecretKmsKeyArn
  • hostedRotationLambda.rotationLambdaName
  • hostedRotationLambda.rotationType
  • hostedRotationLambda.runtime
  • hostedRotationLambda.superuserSecretArn
  • hostedRotationLambda.superuserSecretKmsKeyArn
  • hostedRotationLambda.vpcSecurityGroupIds
  • hostedRotationLambda.vpcSubnetIds
  • rotationRules.automaticallyAfterDays
  • rotationRules.duration
  • rotationRules.scheduleExpression

aws-servicecatalog - CfnCloudFormationProduct

  • productType
  • sourceConnection
  • provisioningArtifactParameters.description
  • provisioningArtifactParameters.disableTemplateValidation
  • provisioningArtifactParameters.info
  • provisioningArtifactParameters.name
  • provisioningArtifactParameters.type

aws-servicediscovery - CfnPrivateDnsNamespace

  • properties

aws-servicediscovery - CfnPublicDnsNamespace

  • properties

aws-servicediscovery - CfnService

  • serviceAttributes
  • dnsConfig.dnsRecords
  • dnsConfig.namespaceId
  • dnsConfig.routingPolicy
  • healthCheckConfig.failureThreshold
  • healthCheckConfig.resourcePath
  • healthCheckConfig.type
  • healthCheckCustomConfig.failureThreshold

aws-ses - CfnConfigurationSet

  • deliveryOptions.maxDeliverySeconds
  • deliveryOptions.sendingPoolName
  • deliveryOptions.tlsPolicy
  • reputationOptions.reputationMetricsEnabled
  • sendingOptions.sendingEnabled
  • suppressionOptions.suppressedReasons
  • trackingOptions.customRedirectDomain
  • trackingOptions.httpsPolicy
  • vdmOptions.dashboardOptions
  • vdmOptions.guardianOptions

aws-ses - CfnConfigurationSetEventDestination

  • eventDestination.cloudWatchDestination.dimensionConfigurations
  • eventDestination.eventBridgeDestination.eventBusArn
  • eventDestination.kinesisFirehoseDestination.deliveryStreamArn
  • eventDestination.kinesisFirehoseDestination.iamRoleArn
  • eventDestination.snsDestination.topicArn

aws-ses - CfnEmailIdentity

  • configurationSetAttributes.configurationSetName
  • dkimAttributes.signingEnabled
  • dkimSigningAttributes.domainSigningPrivateKey
  • dkimSigningAttributes.domainSigningSelector
  • dkimSigningAttributes.nextSigningKeyLength
  • feedbackAttributes.emailForwardingEnabled
  • mailFromAttributes.behaviorOnMxFailure
  • mailFromAttributes.mailFromDomain

aws-ses - CfnReceiptRule

  • rule.conditions
  • rule.unless
  • rule.actions.addHeader
  • rule.actions.archive
  • rule.actions.deliverToMailbox
  • rule.actions.deliverToQBusiness
  • rule.actions.drop
  • rule.actions.publishToSns
  • rule.actions.relay
  • rule.actions.replaceRecipient
  • rule.actions.send
  • rule.actions.writeToS3

aws-signer - CfnSigningProfile

  • signatureValidityPeriod.type
  • signatureValidityPeriod.value

aws-sns - CfnSubscription

  • replayPolicy

aws-sns - CfnTopic

  • dataProtectionPolicy
  • subscription
  • deliveryStatusLogging.failureFeedbackRoleArn
  • deliveryStatusLogging.protocol
  • deliveryStatusLogging.successFeedbackRoleArn
  • deliveryStatusLogging.successFeedbackSampleRate

aws-sqs - CfnQueue

  • contentBasedDeduplication
  • deduplicationScope
  • fifoQueue
  • fifoThroughputLimit
  • kmsDataKeyReusePeriodSeconds
  • kmsMasterKeyId
  • sqsManagedSseEnabled

aws-stepfunctions - CfnActivity

  • encryptionConfiguration.kmsDataKeyReusePeriodSeconds
  • encryptionConfiguration.kmsKeyId
  • encryptionConfiguration.type

aws-stepfunctions - CfnStateMachine

  • definition
  • definitionS3Location
  • definitionString
  • encryptionConfiguration.kmsDataKeyReusePeriodSeconds
  • encryptionConfiguration.kmsKeyId
  • encryptionConfiguration.type
  • loggingConfiguration.destinations
  • loggingConfiguration.includeExecutionData
  • loggingConfiguration.level
  • tracingConfiguration.enabled

aws-synthetics - CfnCanary

  • deleteLambdaResourcesOnCanaryDeletion
  • visualReference
  • visualReferences
  • artifactConfig.s3Encryption
  • browserConfigs.browserType
  • code.blueprintTypes
  • code.dependencies
  • code.handler
  • code.s3Bucket
  • code.s3Key
  • code.s3ObjectVersion
  • code.script
  • code.sourceLocationArn
  • runConfig.activeTracing
  • runConfig.environmentVariables
  • runConfig.ephemeralStorage
  • runConfig.memoryInMb
  • runConfig.timeoutInSeconds
  • schedule.durationInSeconds
  • schedule.expression
  • schedule.retryConfig
  • vpcConfig.ipv6AllowedForDualStack
  • vpcConfig.securityGroupIds
  • vpcConfig.subnetIds
  • vpcConfig.vpcId