AWS CDK L2 Constructs Unsupported Properties @badmintoncryer

Last Updated: 2026/09/02 04:56:25

This page displays a list of unsupported properties in AWS CDK L2 constructs. For more details, visit this materials.

Currently, only support direct inline props properly, and cases using the spread operator are not supported. Even if they are actually supported in L2, they are still counted as unsupported properties.

Direct Inline Props

new CfnConstruct(scope, 'Resource', {
  hoge: 'hoge',
  fuga: 123,
});

Spread operator Props (false positive)

const props = {
  hoge: 'hoge',
  fuga: 123,
};

new CfnConstruct(scope, 'Resource', {
  ...props,
});

aws-amplify-alpha - CfnApp

  • autoBranchCreationConfig.enablePerformanceMode
  • autoBranchCreationConfig.framework
  • customRules.condition
  • customRules.source
  • customRules.status
  • customRules.target

aws-amplify-alpha - CfnBranch

  • backend
  • framework

aws-apigateway - CfnAuthorizer

  • authType

aws-apigateway - CfnBasePathMapping

  • id

aws-apigateway - CfnDomainName

  • endpointConfiguration.ipAddressType
  • ownershipVerificationCertificateArn
  • routingMode

aws-apigateway - CfnMethod

  • integration.integrationTarget

aws-apigateway - CfnRestApi

  • bodyS3Location.eTag
  • endpointAccessMode
  • securityPolicy
  • version

aws-apigateway - CfnStage

  • canarySetting

aws-apigateway - CfnUsagePlan

  • apiStages.throttle.burstLimit
  • apiStages.throttle.rateLimit

aws-apigatewayv2 - CfnApi

  • basePath
  • body
  • bodyS3Location
  • credentialsArn
  • failOnWarnings
  • routeKey
  • target
  • version

aws-apigatewayv2 - CfnAuthorizer

  • identityValidationExpression

aws-apigatewayv2 - CfnDomainName

  • routingMode

aws-apigatewayv2 - CfnIntegration

  • description
  • responseParameters

aws-apigatewayv2 - CfnRoute

  • modelSelectionExpression
  • operationName
  • requestModels
  • requestParameters

aws-apigatewayv2 - CfnRouteResponse

  • modelSelectionExpression
  • responseModels
  • responseParameters

aws-apigatewayv2 - CfnStage

  • accessPolicyId
  • clientCertificateId
  • defaultRouteSettings.dataTraceEnabled
  • defaultRouteSettings.loggingLevel
  • deploymentId
  • routeSettings

aws-appconfig - CfnDeployment

  • dynamicExtensionParameters

aws-applicationautoscaling - CfnScalableTarget

  • suspendedState

aws-applicationautoscaling - CfnScalingPolicy

  • predictiveScalingPolicyConfiguration
  • resourceId
  • scalableDimension
  • serviceNamespace
  • targetTrackingScalingPolicyConfiguration.customizedMetricSpecification.metrics

aws-apprunner-alpha - CfnService

  • sourceConfiguration.codeRepository.sourceDirectory
  • sourceConfiguration.imageRepository.imageConfiguration.runtimeEnvironmentSecrets.name
  • sourceConfiguration.imageRepository.imageConfiguration.runtimeEnvironmentSecrets.value
  • sourceConfiguration.imageRepository.imageConfiguration.runtimeEnvironmentVariables.name
  • sourceConfiguration.imageRepository.imageConfiguration.runtimeEnvironmentVariables.value

aws-appsync - CfnChannelNamespace

  • handlerConfigs.onPublish.integration.lambdaConfig
  • handlerConfigs.onSubscribe.integration.lambdaConfig

aws-appsync - CfnDataSource

  • dynamoDbConfig.deltaSyncConfig
  • dynamoDbConfig.versioned
  • relationalDatabaseConfig

aws-appsync - CfnFunctionConfiguration

  • requestMappingTemplateS3Location
  • responseMappingTemplateS3Location
  • syncConfig

aws-appsync - CfnGraphQLSchema

  • definitionS3Location

aws-appsync - CfnResolver

  • requestMappingTemplateS3Location
  • responseMappingTemplateS3Location
  • syncConfig

aws-autoscaling - CfnAutoScalingGroup

  • availabilityZoneIds
  • availabilityZoneImpairmentPolicy
  • availabilityZones
  • capacityReservationSpecification
  • context
  • desiredCapacityType
  • instanceId
  • lifecycleHookSpecificationList
  • mixedInstancesPolicy.instancesDistribution.distributionSegments
  • mixedInstancesPolicy.launchTemplate.overrides.imageId
  • placementGroup
  • serviceLinkedRoleArn
  • skipZonalShiftValidation
  • trafficSources

aws-autoscaling - CfnLaunchConfiguration

  • blockDeviceMappings.ebs.encrypted
  • classicLinkVpcId
  • classicLinkVpcSecurityGroups
  • ebsOptimized
  • instanceId
  • kernelId
  • launchConfigurationName
  • metadataOptions
  • placementTenancy
  • ramDiskId

aws-autoscaling - CfnScalingPolicy

  • predictiveScalingConfiguration
  • scalingAdjustment
  • targetTrackingConfiguration.customizedMetricSpecification.metrics
  • targetTrackingConfiguration.customizedMetricSpecification.period

aws-backup - CfnBackupPlan

  • backupPlan.backupPlanRule.copyActions.lifecycle.optInToArchiveForSupportedResources
  • backupPlan.backupPlanRule.lifecycle.optInToArchiveForSupportedResources
  • backupPlan.backupPlanRule.scanActions
  • backupPlan.backupPlanRule.targetLogicallyAirGappedBackupVaultArn
  • backupPlan.scanSettings

aws-backup - CfnBackupSelection

  • backupSelection.conditions
  • backupSelection.notResources

aws-batch - CfnComputeEnvironment

  • computeResources.desiredvCpus
  • computeResources.ec2Configuration.batchImageStatus
  • computeResources.ec2Configuration.imageKubernetesVersion
  • computeResources.ec2KeyPair
  • computeResources.imageId
  • computeResources.launchTemplate.launchTemplateName
  • computeResources.launchTemplate.overrides
  • computeResources.launchTemplate.version
  • computeResources.managedInstancesProvider
  • computeResources.scalingPolicy
  • context
  • ecsSettings

aws-batch - CfnJobDefinition

  • consumableResourceProperties
  • ecsProperties
  • eksProperties.podProperties.containers.securityContext.allowPrivilegeEscalation
  • eksProperties.podProperties.containers.volumeMounts.subPath
  • eksProperties.podProperties.imagePullSecrets
  • eksProperties.podProperties.initContainers
  • eksProperties.podProperties.metadata
  • eksProperties.podProperties.shareProcessNamespace
  • eksProperties.podProperties.volumes.persistentVolumeClaim
  • nodeProperties.nodeRangeProperties.consumableResourceProperties
  • nodeProperties.nodeRangeProperties.ecsProperties
  • nodeProperties.nodeRangeProperties.eksProperties
  • nodeProperties.nodeRangeProperties.instanceTypes
  • retryStrategy.evaluateOnExit.onExitCode
  • retryStrategy.evaluateOnExit.onReason
  • retryStrategy.evaluateOnExit.onStatusReason

aws-batch - CfnJobQueue

  • jobQueueType
  • serviceEnvironmentOrder

aws-batch - CfnSchedulingPolicy

  • quotaSharePolicy

aws-bedrockagentcore - CfnApiKeyCredentialProvider

  • apiKeySecretConfig
  • apiKeySecretSource

aws-bedrockagentcore - CfnBrowserCustom

  • certificates
  • enterprisePolicies

aws-bedrockagentcore - CfnCodeInterpreterCustom

  • certificates

aws-bedrockagentcore - CfnEvaluator

  • kmsKeyArn

aws-bedrockagentcore - CfnGateway

  • authorizerConfiguration.customJwtAuthorizer
  • interceptorConfigurations.inputConfiguration
  • interceptorConfigurations.interceptionPoints
  • interceptorConfigurations.interceptor
  • policyEngineConfiguration
  • protocolConfiguration.mcp
  • wafConfiguration

aws-bedrockagentcore - CfnGatewayTarget

  • privateEndpoint
  • targetConfiguration.http
  • targetConfiguration.inference
  • targetConfiguration.mcp

aws-bedrockagentcore - CfnMemory

  • indexedKeys

aws-bedrockagentcore - CfnOnlineEvaluationConfig

  • clusteringConfig
  • insights

aws-bedrockagentcore - CfnRuntime

  • agentRuntimeArtifact.codeConfiguration.code.s3
  • capacityProviderConfiguration
  • filesystemConfigurations

aws-chatbot - CfnSlackChannelConfiguration

  • customizationResourceArns

aws-cloudfront - CfnDistribution

  • distributionConfig.anycastIpListId
  • distributionConfig.cacheBehaviors.fieldLevelEncryptionId
  • distributionConfig.cacheTagConfig
  • distributionConfig.cnamEs
  • distributionConfig.connectionFunctionAssociation
  • distributionConfig.connectionMode
  • distributionConfig.continuousDeploymentPolicyId
  • distributionConfig.customOrigin
  • distributionConfig.defaultCacheBehavior.fieldLevelEncryptionId
  • distributionConfig.s3Origin
  • distributionConfig.staging
  • distributionConfig.tenantConfig
  • distributionConfig.viewerCertificate.iamCertificateId
  • distributionConfig.viewerMtlsConfig

aws-cloudfront - CfnFunction

  • functionMetadata

aws-cloudfront - CfnRealtimeLogConfig

  • endPoints.kinesisStreamConfig
  • endPoints.streamType

aws-cloudfront - CfnVpcOrigin

  • vpcOriginEndpointConfig.ipAddressType

aws-cloudtrail - CfnTrail

  • advancedEventSelectors
  • aggregationConfigurations
  • insightSelectors.eventCategories

aws-cloudwatch - CfnAlarm

  • dimensions
  • evaluationWindow
  • extendedStatistic
  • metricName
  • metrics
  • namespace
  • statistic
  • unit
  • warmUpConfiguration

aws-codebuild - CfnFleet

  • fleetProxyConfiguration
  • imageId
  • scalingConfiguration

aws-codebuild - CfnProject

  • buildBatchConfig.batchReportMode
  • buildBatchConfig.combineArtifacts
  • buildBatchConfig.restrictions
  • buildBatchConfig.timeoutInMins
  • environment.hostKernel
  • resourceAccessRole

aws-codebuild - CfnReportGroup

  • exportConfig.s3Destination.bucketOwner
  • exportConfig.s3Destination.path

aws-codedeploy - CfnDeploymentGroup

  • blueGreenDeploymentConfiguration.greenFleetProvisioningOption
  • deployment
  • ec2TagFilters
  • onPremisesInstanceTagFilters
  • outdatedInstancesStrategy
  • triggerConfigurations

aws-codeguruprofiler - CfnProfilingGroup

  • agentPermissions
  • anomalyDetectionNotificationConfiguration

aws-codepipeline - CfnCustomActionType

  • settings.revisionUrlTemplate
  • settings.thirdPartyConfigurationUrl

aws-codepipeline - CfnPipeline

  • stages.actions.environmentVariables
  • stages.blockers

aws-codestar-alpha - CfnGitHubRepository

  • connectionArn

aws-codestarnotifications - CfnNotificationRule

  • eventTypeId
  • targetAddress

aws-cognito - CfnUserPool

  • adminCreateUserConfig.unusedAccountValidityDays
  • emailAuthenticationMessage
  • emailAuthenticationSubject
  • issuerConfiguration
  • keyConfiguration
  • lambdaConfig.createAuthChallenge
  • lambdaConfig.customEmailSender
  • lambdaConfig.customMessage
  • lambdaConfig.customSmsSender
  • lambdaConfig.defineAuthChallenge
  • lambdaConfig.inboundFederation
  • lambdaConfig.kmsKeyId
  • lambdaConfig.postAuthentication
  • lambdaConfig.postConfirmation
  • lambdaConfig.preAuthentication
  • lambdaConfig.preSignUp
  • lambdaConfig.preTokenGeneration
  • lambdaConfig.preTokenGenerationConfig
  • lambdaConfig.userMigration
  • lambdaConfig.verifyAuthChallengeResponse
  • policies.passwordPolicy.minimumLength
  • policies.passwordPolicy.passwordHistorySize
  • policies.passwordPolicy.requireLowercase
  • policies.passwordPolicy.requireNumbers
  • policies.passwordPolicy.requireSymbols
  • policies.passwordPolicy.requireUppercase
  • policies.passwordPolicy.temporaryPasswordValidityDays
  • policies.signInPolicy.allowedFirstAuthFactors
  • schema.developerOnlyAttribute
  • smsConfiguration.eumsSms
  • userPoolAddOns.advancedSecurityAdditionalFlows.customAuthMode
  • webAuthnFactorConfiguration

aws-cognito - CfnUserPoolDomain

  • customDomainConfig.securityPolicy
  • routing

aws-cognito - CfnUserPoolResourceServer

  • scopes.scopeDescription
  • scopes.scopeName

aws-config - CfnConfigRule

  • compliance

aws-docdb - CfnDBCluster

  • availabilityZones
  • globalClusterIdentifier
  • networkType
  • restoreToTime
  • restoreType
  • rotateMasterUserPassword
  • snapshotIdentifier
  • sourceDbClusterIdentifier
  • useLatestRestorableTime

aws-docdb - CfnDBInstance

  • certificateRotationRestart

aws-docdb - CfnDBSubnetGroup

  • dbSubnetGroupName

aws-dsql-alpha - CfnCluster

  • kmsEncryptionKey
  • multiRegionProperties
  • policyDocument

aws-dynamodb - CfnGlobalTable

  • readOnDemandThroughputSettings
  • readProvisionedThroughputSettings
  • replicas.globalSecondaryIndexes.readProvisionedThroughputSettings.readCapacityAutoScalingSettings
  • replicas.globalSecondaryIndexes.readProvisionedThroughputSettings.readCapacityUnits
  • replicas.kinesisStreamSpecification.approximateCreationDateTimePrecision
  • replicas.readProvisionedThroughputSettings.readCapacityAutoScalingSettings
  • replicas.readProvisionedThroughputSettings.readCapacityUnits
  • replicas.sseSpecification.kmsMasterKeyId
  • sseSpecification.sseEnabled
  • sseSpecification.sseType
  • writeProvisionedThroughputSettings.writeCapacityAutoScalingSettings

aws-dynamodb - CfnTable

  • importSourceSpecification.inputFormat
  • importSourceSpecification.inputFormatOptions
  • streamSpecification.resourcePolicy

aws-ec2 - CfnClientVpnEndpoint

  • authenticationOptions.activeDirectory
  • authenticationOptions.federatedAuthentication
  • endpointIpAddressType
  • tagSpecifications
  • trafficIpAddressType
  • transitGatewayConfiguration

aws-ec2 - CfnClientVpnTargetNetworkAssociation

  • availabilityZone
  • availabilityZoneId

aws-ec2 - CfnCustomerGateway

  • bgpAsnExtended
  • certificateArn
  • deviceName

aws-ec2 - CfnFlowLog

  • deliverCrossAccountRole
  • tagFieldSpecifications

aws-ec2 - CfnInstance

  • additionalInfo
  • affinity
  • cpuOptions
  • elasticGpuSpecifications
  • elasticInferenceAccelerators
  • hostId
  • hostResourceGroupArn
  • ipv6Addresses
  • kernelId
  • launchTemplate.launchTemplateId
  • licenseSpecifications
  • networkInterfaces.associateCarrierIpAddress
  • networkInterfaces.deleteOnTermination
  • networkInterfaces.description
  • networkInterfaces.enaSrdSpecification
  • networkInterfaces.ipv6AddressCount
  • networkInterfaces.ipv6Addresses
  • networkInterfaces.networkInterfaceId
  • networkInterfaces.privateIpAddresses
  • networkInterfaces.secondaryPrivateIpAddressCount
  • privateDnsNameOptions
  • ramdiskId
  • securityGroups
  • ssmAssociations
  • tenancy
  • volumes

aws-ec2 - CfnLaunchTemplate

  • launchTemplateData.blockDeviceMappings.ebs.ebsCardIndex
  • launchTemplateData.capacityReservationSpecification
  • launchTemplateData.disableApiStop
  • launchTemplateData.elasticGpuSpecifications
  • launchTemplateData.elasticInferenceAccelerators
  • launchTemplateData.iamInstanceProfile.name
  • launchTemplateData.instanceRequirements
  • launchTemplateData.kernelId
  • launchTemplateData.licenseSpecifications
  • launchTemplateData.maintenanceOptions
  • launchTemplateData.networkInterfaces.associateCarrierIpAddress
  • launchTemplateData.networkInterfaces.connectionTrackingSpecification
  • launchTemplateData.networkInterfaces.deleteOnTermination
  • launchTemplateData.networkInterfaces.description
  • launchTemplateData.networkInterfaces.enaQueueCount
  • launchTemplateData.networkInterfaces.enaSrdSpecification
  • launchTemplateData.networkInterfaces.interfaceType
  • launchTemplateData.networkInterfaces.ipv4PrefixCount
  • launchTemplateData.networkInterfaces.ipv4Prefixes
  • launchTemplateData.networkInterfaces.ipv6AddressCount
  • launchTemplateData.networkInterfaces.ipv6Addresses
  • launchTemplateData.networkInterfaces.ipv6PrefixCount
  • launchTemplateData.networkInterfaces.ipv6Prefixes
  • launchTemplateData.networkInterfaces.networkCardIndex
  • launchTemplateData.networkInterfaces.networkInterfaceId
  • launchTemplateData.networkInterfaces.primaryIpv6
  • launchTemplateData.networkInterfaces.privateIpAddress
  • launchTemplateData.networkInterfaces.privateIpAddresses
  • launchTemplateData.networkInterfaces.secondaryPrivateIpAddressCount
  • launchTemplateData.networkInterfaces.subnetId
  • launchTemplateData.networkPerformanceOptions
  • launchTemplateData.placement.affinity
  • launchTemplateData.placement.availabilityZone
  • launchTemplateData.placement.groupId
  • launchTemplateData.placement.hostId
  • launchTemplateData.placement.hostResourceGroupArn
  • launchTemplateData.placement.partitionNumber
  • launchTemplateData.placement.spreadDomain
  • launchTemplateData.placement.tenancy
  • launchTemplateData.privateDnsNameOptions
  • launchTemplateData.ramDiskId
  • launchTemplateData.securityGroups

aws-ec2 - CfnPlacementGroup

  • parentGroupId

aws-ec2 - CfnSecurityGroupIngress

  • groupName
  • sourceSecurityGroupName

aws-ec2 - CfnVolume

  • availabilityZoneId
  • outpostArn
  • sourceVolumeId

aws-ec2 - CfnVPCEndpoint

  • dnsOptions.privateDnsPreference
  • dnsOptions.privateDnsSpecifiedDomains
  • resourceConfigurationArn
  • serviceNetworkArn

aws-ec2 - CfnVPCEndpointService

  • gatewayLoadBalancerArns
  • payerResponsibility
  • privateDnsName
  • privateDnsNameConfiguration

aws-ec2 - CfnVPNConnection

  • enableAcceleration
  • localIpv4NetworkCidr
  • localIpv6NetworkCidr
  • outsideIpAddressType
  • preSharedKeyStorage
  • remoteIpv4NetworkCidr
  • remoteIpv6NetworkCidr
  • transitGatewayId
  • transportTransitGatewayAttachmentId
  • tunnelBandwidth
  • tunnelInsideIpVersion
  • vpnConcentratorId
  • vpnTunnelOptionsSpecifications.dpdTimeoutAction
  • vpnTunnelOptionsSpecifications.dpdTimeoutSeconds
  • vpnTunnelOptionsSpecifications.enableTunnelLifecycleControl
  • vpnTunnelOptionsSpecifications.ikeVersions
  • vpnTunnelOptionsSpecifications.logOptions
  • vpnTunnelOptionsSpecifications.phase1DhGroupNumbers
  • vpnTunnelOptionsSpecifications.phase1EncryptionAlgorithms
  • vpnTunnelOptionsSpecifications.phase1IntegrityAlgorithms
  • vpnTunnelOptionsSpecifications.phase1LifetimeSeconds
  • vpnTunnelOptionsSpecifications.phase2DhGroupNumbers
  • vpnTunnelOptionsSpecifications.phase2EncryptionAlgorithms
  • vpnTunnelOptionsSpecifications.phase2IntegrityAlgorithms
  • vpnTunnelOptionsSpecifications.phase2LifetimeSeconds
  • vpnTunnelOptionsSpecifications.rekeyFuzzPercentage
  • vpnTunnelOptionsSpecifications.rekeyMarginTimeSeconds
  • vpnTunnelOptionsSpecifications.replayWindowSize
  • vpnTunnelOptionsSpecifications.startupAction
  • vpnTunnelOptionsSpecifications.tunnelInsideIpv6Cidr

aws-ec2-alpha - CfnEIP

  • address
  • instanceId
  • ipamPoolId
  • networkBorderGroup
  • publicIpv4Pool
  • transferAddress

aws-ec2-alpha - CfnIPAM

  • defaultResourceDiscoveryOrganizationalUnitExclusions
  • description
  • enablePrivateGua
  • meteredAccount
  • tier

aws-ec2-alpha - CfnIPAMPool

  • allocationDefaultNetmaskLength
  • allocationMaxNetmaskLength
  • allocationMinNetmaskLength
  • autoImport
  • description
  • publiclyAdvertisable
  • sourceIpamPoolId
  • sourceResource

aws-ec2-alpha - CfnIPAMScope

  • description
  • externalAuthorityConfiguration

aws-ec2-alpha - CfnNatGateway

  • availabilityMode
  • availabilityZoneAddresses
  • vpcId

aws-ec2-alpha - CfnRoute

  • carrierGatewayId
  • coreNetworkArn
  • destinationPrefixListId
  • egressOnlyInternetGatewayId
  • instanceId
  • localGatewayId
  • natGatewayId
  • networkInterfaceId
  • odbNetworkArn
  • transitGatewayId
  • vpcEndpointId
  • vpcPeeringConnectionId

aws-ec2-alpha - CfnSubnet

  • availabilityZoneId
  • enableDns64
  • enableLniAtDeviceIndex
  • ipv4IpamPoolId
  • ipv4NetmaskLength
  • ipv6IpamPoolId
  • ipv6Native
  • ipv6NetmaskLength
  • outpostArn
  • privateDnsNameOptionsOnLaunch

aws-ec2-alpha - CfnTransitGateway

  • associationDefaultRouteTableId
  • encryptionSupport
  • multicastSupport
  • propagationDefaultRouteTableId
  • vpnEcmpSupport

aws-ec2-alpha - CfnVPC

  • vpcEncryptionControl

aws-ec2-alpha - CfnVPCCidrBlock

  • ipv6CidrBlockNetworkBorderGroup

aws-ec2-alpha - CfnVPCPeeringConnection

  • assumeRoleRegion

aws-ecs - CfnCapacityProvider

  • managedInstancesProvider.autoRepairConfiguration
  • managedInstancesProvider.infrastructureOptimization
  • managedInstancesProvider.instanceLaunchTemplate.capacityReservations
  • managedInstancesProvider.instanceLaunchTemplate.fipsEnabled
  • managedInstancesProvider.instanceLaunchTemplate.instanceMetadataTagsPropagation
  • managedInstancesProvider.instanceLaunchTemplate.localStorageConfiguration

aws-ecs - CfnCluster

  • capacityProviders
  • defaultCapacityProviderStrategy

aws-ecs - CfnService

  • deploymentConfiguration.deploymentCircuitBreaker.resetOnHealthyTask
  • deploymentConfiguration.deploymentCircuitBreaker.thresholdConfiguration
  • deploymentConfiguration.lifecycleHooks.hookDetails
  • deploymentConfiguration.lifecycleHooks.targetType
  • deploymentConfiguration.lifecycleHooks.timeoutConfiguration
  • monitoring
  • placementConstraints.expression
  • placementConstraints.type
  • placementStrategies.field
  • placementStrategies.type
  • role
  • serviceConnectConfiguration.services.clientAliases.testTrafficRules
  • vpcLatticeConfigurations

aws-ecs - CfnTaskDefinition

  • containerDefinitions.environment.name
  • containerDefinitions.environment.value
  • containerDefinitions.extraHosts.hostname
  • containerDefinitions.extraHosts.ipAddress
  • containerDefinitions.firelensConfiguration
  • volumes.fSxWindowsFileServerVolumeConfiguration
  • volumes.s3FilesVolumeConfiguration

aws-efs - CfnFileSystem

  • bypassPolicyLockoutSafetyCheck
  • replicationConfiguration.destinations.roleArn
  • replicationConfiguration.destinations.status
  • replicationConfiguration.destinations.statusMessage

aws-efs - CfnMountTarget

  • ipAddress
  • ipAddressType
  • ipv6Address

aws-eks - CfnAccessEntry

  • kubernetesGroups
  • username

aws-eks - CfnAddon

  • namespaceConfig
  • podIdentityAssociations
  • resolveConflicts
  • serviceAccountRoleArn

aws-eks - CfnNodegroup

  • launchTemplate.name
  • nodeRepairConfig.maxParallelNodesRepairedCount
  • nodeRepairConfig.maxParallelNodesRepairedPercentage
  • nodeRepairConfig.maxUnhealthyNodeThresholdCount
  • nodeRepairConfig.maxUnhealthyNodeThresholdPercentage
  • nodeRepairConfig.nodeRepairConfigOverrides
  • updateConfig.updateStrategy
  • version
  • warmPoolConfig

aws-eks - CfnPodIdentityAssociation

  • policy
  • targetRoleArn

aws-eks-v2 - CfnAccessEntry

  • kubernetesGroups
  • username

aws-eks-v2 - CfnAddon

  • namespaceConfig
  • podIdentityAssociations
  • resolveConflicts
  • serviceAccountRoleArn

aws-eks-v2 - CfnCluster

  • activeCertificateAuthorityId
  • certificateAuthority
  • deletionProtection
  • force
  • kubeApiServerConfig
  • kubeControllerManagerConfig
  • kubernetesNetworkConfig.serviceIpv6Cidr
  • kubeSchedulerConfig
  • outpostConfig
  • resourcesVpcConfig.controlPlaneEgressMode
  • rollbackConfig
  • upgradePolicy
  • zonalShiftConfig

aws-eks-v2 - CfnFargateProfile

  • tags.key
  • tags.value

aws-eks-v2 - CfnNodegroup

  • launchTemplate.name
  • nodeRepairConfig.maxParallelNodesRepairedCount
  • nodeRepairConfig.maxParallelNodesRepairedPercentage
  • nodeRepairConfig.maxUnhealthyNodeThresholdCount
  • nodeRepairConfig.maxUnhealthyNodeThresholdPercentage
  • nodeRepairConfig.nodeRepairConfigOverrides
  • updateConfig.updateStrategy
  • version
  • warmPoolConfig

aws-eks-v2 - CfnPodIdentityAssociation

  • policy
  • targetRoleArn

aws-elasticache-alpha - CfnServerlessCache

  • endpoint
  • networkType
  • readerEndpoint

aws-elasticloadbalancing - CfnLoadBalancer

  • accessLoggingPolicy
  • appCookieStickinessPolicy
  • availabilityZones
  • connectionDrainingPolicy
  • connectionSettings
  • lbCookieStickinessPolicy
  • loadBalancerName
  • policies

aws-elasticloadbalancingv2 - CfnListenerRule

  • conditions.hostHeaderConfig
  • conditions.httpHeaderConfig
  • conditions.httpRequestMethodConfig
  • conditions.pathPatternConfig
  • conditions.queryStringConfig
  • conditions.regexValues
  • conditions.sourceIpConfig
  • transforms

aws-elasticloadbalancingv2 - CfnLoadBalancer

  • enableCapacityReservationProvisionStabilize
  • ipv4IpamPoolId

aws-elasticloadbalancingv2 - CfnTargetGroup

  • targetControlPort
  • targets.availabilityZone
  • targets.id
  • targets.port
  • targets.quicServerId

aws-elasticsearch - CfnDomain

  • accessPolicies
  • advancedSecurityOptions.anonymousAuthEnabled
  • domainArn
  • elasticsearchClusterConfig.coldStorageOptions
  • logPublishingOptions.cloudWatchLogsLogGroupArn
  • logPublishingOptions.enabled

aws-events - CfnConnection

  • authParameters.apiKeyAuthParameters
  • authParameters.basicAuthParameters
  • authParameters.connectivityParameters
  • authParameters.invocationHttpParameters.bodyParameters.isValueSecret
  • authParameters.invocationHttpParameters.bodyParameters.key
  • authParameters.invocationHttpParameters.bodyParameters.value
  • authParameters.invocationHttpParameters.headerParameters.isValueSecret
  • authParameters.invocationHttpParameters.headerParameters.key
  • authParameters.invocationHttpParameters.headerParameters.value
  • authParameters.invocationHttpParameters.queryStringParameters.isValueSecret
  • authParameters.invocationHttpParameters.queryStringParameters.key
  • authParameters.invocationHttpParameters.queryStringParameters.value
  • authParameters.oAuthParameters
  • invocationConnectivityParameters
  • kmsKeyIdentifier

aws-events - CfnEventBus

  • policy

aws-events - CfnRule

  • targets.sageMakerPipelineParameters

aws-fsx - CfnFileSystem

  • lustreConfiguration.dataReadCacheConfiguration
  • lustreConfiguration.efaEnabled
  • lustreConfiguration.logConfiguration
  • lustreConfiguration.metadataConfiguration
  • lustreConfiguration.throughputCapacity
  • networkType
  • ontapConfiguration
  • openZfsConfiguration
  • windowsConfiguration

aws-gamelift-alpha - CfnFleet

  • anywhereConfiguration
  • applyCapacity
  • computeType
  • ec2InboundPermissions.ipRange
  • instanceRoleCredentialsProvider
  • locations.locationCapacity.managedCapacityConfiguration
  • locations.playerGatewayStatus
  • metricGroups
  • playerGatewayConfiguration
  • playerGatewayMode
  • scalingPolicies
  • scriptId

aws-gamelift-alpha - CfnMatchmakingConfiguration

  • creationTime
  • ruleSetArn

aws-gamelift-alpha - CfnScript

  • nodeJsVersion

aws-globalaccelerator - CfnAccelerator

  • flowLogsEnabled
  • flowLogsS3Bucket
  • flowLogsS3Prefix

aws-globalaccelerator - CfnEndpointGroup

  • endpointConfigurations.attachmentArn
  • endpointConfigurations.clientIpPreservationEnabled
  • endpointConfigurations.endpointId
  • endpointConfigurations.weight

aws-glue-alpha - CfnCatalog

  • allowFullTableExternalDataAccess
  • catalogProperties
  • createDatabaseDefaultPermissions
  • createTableDefaultPermissions
  • federatedCatalog
  • overwriteChildResourcePermissionsWithDefault
  • parameters
  • targetRedshiftCatalog

aws-glue-alpha - CfnConnection

  • connectionInput.athenaProperties
  • connectionInput.authenticationConfiguration
  • connectionInput.pythonProperties
  • connectionInput.sparkProperties
  • connectionInput.validateCredentials
  • connectionInput.validateForComputeEnvironments

aws-glue-alpha - CfnDatabase

  • databaseInput.createTableDefaultPermissions
  • databaseInput.federatedDatabase
  • databaseInput.parameters
  • databaseInput.targetDatabase
  • databaseName

aws-glue-alpha - CfnDataQualityRuleset

  • clientToken
  • targetTable.databaseName
  • targetTable.tableName

aws-glue-alpha - CfnJob

  • allocatedCapacity
  • jobMode
  • logUri
  • maintenanceWindow
  • nonOverridableArguments

aws-glue-alpha - CfnTable

  • name
  • openTableFormatInput
  • tableInput.owner
  • tableInput.retention
  • tableInput.storageDescriptor.bucketColumns
  • tableInput.storageDescriptor.numberOfBuckets
  • tableInput.storageDescriptor.schemaReference
  • tableInput.storageDescriptor.serdeInfo.name
  • tableInput.storageDescriptor.serdeInfo.parameters
  • tableInput.storageDescriptor.skewedInfo
  • tableInput.storageDescriptor.sortColumns
  • tableInput.targetTable
  • tableInput.viewDefinition
  • tableInput.viewExpandedText
  • tableInput.viewOriginalText

aws-iam - CfnGroup

  • policies

aws-iam - CfnSAMLProvider

  • addPrivateKey
  • assertionEncryptionMode
  • privateKeyList
  • removePrivateKey

aws-iam - CfnUser

  • policies

aws-imagebuilder-alpha - CfnImage

  • imagePipelineExecutionSettings
  • imageTestsConfiguration.timeoutMinutes

aws-imagebuilder-alpha - CfnImagePipeline

  • imageTestsConfiguration.timeoutMinutes
  • schedule.timezone

aws-imagebuilder-alpha - CfnImageRecipe

  • amiWatermarks

aws-iot-alpha - CfnLogging

  • eventConfigurations

aws-iotevents-alpha - CfnInput

  • inputDescription

aws-kinesis - CfnStream

  • maxRecordSizeInKiB
  • warmThroughputMiBps

aws-kinesisfirehose - CfnDeliveryStream

  • amazonOpenSearchServerlessDestinationConfiguration
  • amazonopensearchserviceDestinationConfiguration
  • databaseSourceConfiguration
  • directPutSourceConfiguration
  • elasticsearchDestinationConfiguration
  • icebergDestinationConfiguration
  • redshiftDestinationConfiguration
  • s3DestinationConfiguration
  • snowflakeDestinationConfiguration
  • splunkDestinationConfiguration

aws-kms - CfnKey

  • bypassPolicyLockoutSafetyCheck
  • origin

aws-lambda - CfnEventSourceMapping

  • documentDbEventSourceConfig
  • filterCriteria.filters.pattern
  • queues

aws-lambda - CfnFunction

  • code.s3ObjectStorageMode
  • durableConfig.kmsKeyArn
  • fileSystemConfigs.s3FilesConfig
  • snapStart.applyOn

aws-lambda - CfnLayerVersion

  • content.s3ObjectStorageMode

aws-lambda - CfnVersion

  • runtimePolicy

aws-location-alpha - CfnAPIKey

  • restrictions.allowAndroidApps
  • restrictions.allowAppleApps

aws-location-alpha - CfnMap

  • pricingPlan

aws-location-alpha - CfnPlaceIndex

  • pricingPlan

aws-location-alpha - CfnRouteCalculator

  • pricingPlan

aws-logs - CfnLogGroup

  • bearerTokenAuthenticationEnabled
  • resourcePolicyDocument

aws-logs - CfnMetricFilter

  • emitSystemFieldDimensions
  • fieldSelectionCriteria

aws-logs - CfnQueryDefinition

  • parameters
  • queryLanguage

aws-logs - CfnSubscriptionFilter

  • applyOnTransformedLogs
  • emitSystemFields
  • fieldSelectionCriteria

aws-logs - CfnTransformer

  • transformerConfig.addKeys
  • transformerConfig.copyValue
  • transformerConfig.csv
  • transformerConfig.dateTimeConverter
  • transformerConfig.deleteKeys
  • transformerConfig.grok
  • transformerConfig.listToMap
  • transformerConfig.lowerCaseString
  • transformerConfig.moveKeys
  • transformerConfig.parseCloudfront
  • transformerConfig.parseJson
  • transformerConfig.parseKeyValue
  • transformerConfig.parsePostgres
  • transformerConfig.parseRoute53
  • transformerConfig.parseToOcsf
  • transformerConfig.parseVpc
  • transformerConfig.parseWaf
  • transformerConfig.renameKeys
  • transformerConfig.splitString
  • transformerConfig.substituteString
  • transformerConfig.trimString
  • transformerConfig.typeConverter
  • transformerConfig.upperCaseString

aws-mediaconnect-alpha - CfnFlowEntitlement

  • encryption.constantInitializationVector
  • encryption.deviceId
  • encryption.region
  • encryption.resourceId
  • encryption.url

aws-mediaconnect-alpha - CfnFlowOutput

  • mediaStreamOutputConfigurations
  • ndiOutputTimecodeSource

aws-mediaconnect-alpha - CfnGateway

  • networks.cidrBlock
  • networks.name

aws-mediaconnect-alpha - CfnRouterInput

  • contentQualityAnalysisConfiguration

aws-medialive-alpha - CfnChannel

  • dryRun
  • inferenceSettings.audioFeedInputs

aws-mediapackagev2-alpha - CfnChannel

  • outputLockingMode

aws-mediapackagev2-alpha - CfnOriginEndpoint

  • dashManifests.audioTimelinePattern
  • dashManifests.availabilityStartTimeConfiguration
  • dashManifests.baseUrls
  • dashManifests.compactness
  • dashManifests.drmSignaling
  • dashManifests.dvbSettings
  • dashManifests.filterConfiguration
  • dashManifests.manifestName
  • dashManifests.manifestWindowSeconds
  • dashManifests.minBufferTimeSeconds
  • dashManifests.minUpdatePeriodSeconds
  • dashManifests.periodTriggers
  • dashManifests.profiles
  • dashManifests.programInformation
  • dashManifests.scteDash
  • dashManifests.segmentTemplateFormat
  • dashManifests.subtitleConfiguration
  • dashManifests.suggestedPresentationDelaySeconds
  • dashManifests.uriPathType
  • dashManifests.utcTiming
  • hlsManifests.childManifestName
  • hlsManifests.filterConfiguration
  • hlsManifests.manifestName
  • hlsManifests.manifestWindowSeconds
  • hlsManifests.programDateTimeIntervalSeconds
  • hlsManifests.scteHls
  • hlsManifests.startTag
  • hlsManifests.uriPathType
  • hlsManifests.url
  • hlsManifests.urlEncodeChildManifest
  • lowLatencyHlsManifests.childManifestName
  • lowLatencyHlsManifests.filterConfiguration
  • lowLatencyHlsManifests.manifestName
  • lowLatencyHlsManifests.manifestWindowSeconds
  • lowLatencyHlsManifests.programDateTimeIntervalSeconds
  • lowLatencyHlsManifests.scteHls
  • lowLatencyHlsManifests.startTag
  • lowLatencyHlsManifests.uriPathType
  • lowLatencyHlsManifests.url
  • lowLatencyHlsManifests.urlEncodeChildManifest
  • mssManifests.filterConfiguration
  • mssManifests.manifestLayout
  • mssManifests.manifestName
  • mssManifests.manifestWindowSeconds
  • segment.outputTimestampMode
  • segment.scte.customAdTypes
  • uriSeparator

aws-msk-alpha - CfnCluster

  • brokerNodeGroupInfo.brokerAzDistribution
  • brokerNodeGroupInfo.connectivityInfo
  • brokerNodeGroupInfo.storageInfo.ebsStorageInfo.provisionedThroughput
  • clientAuthentication.tls.enabled
  • clientAuthentication.unauthenticated
  • currentVersion
  • loggingInfo.authorizerLogs
  • rebalancing
  • zookeeperAccess

aws-neptune-alpha - CfnDBCluster

  • associatedRoles.featureName
  • availabilityZones
  • dbInstanceParameterGroupName
  • globalClusterIdentifier
  • networkType
  • restoreToTime
  • restoreType
  • snapshotIdentifier
  • sourceDbClusterIdentifier
  • useLatestRestorableTime

aws-neptune-alpha - CfnDBInstance

  • allowMajorVersionUpgrade
  • dbSubnetGroupName
  • preferredMaintenanceWindow
  • publiclyAccessible

aws-opensearchservice - CfnDomain

  • accessPolicies
  • advancedSecurityOptions.anonymousAuthDisableDate
  • advancedSecurityOptions.anonymousAuthEnabled
  • advancedSecurityOptions.iamFederationOptions
  • advancedSecurityOptions.jwtOptions
  • aimlOptions.serverlessVectorAcceleration
  • automatedSnapshotPauseOptions
  • deploymentStrategyOptions
  • domainArn
  • engineMode
  • identityCenterOptions
  • logPublishingOptions.cloudWatchLogsLogGroupArn
  • logPublishingOptions.enabled
  • skipShardMigrationWait
  • softwareUpdateOptions.useLatestServiceSoftwareForBlueGreen
  • useCase
  • vpcOptions.egressEnabled

aws-rds - CfnDBCluster

  • allocatedStorage
  • availabilityZones
  • dbClusterInstanceClass
  • dbInstanceParameterGroupName
  • dbSystemId
  • enableGlobalWriteForwarding
  • globalClusterIdentifier
  • iops
  • masterUserAuthenticationType
  • masterUserSecret.secretArn
  • publiclyAccessible
  • restoreToTime
  • restoreType
  • sourceDbClusterIdentifier
  • sourceDbClusterResourceId
  • sourceRegion
  • useLatestRestorableTime

aws-rds - CfnDBInstance

  • additionalStorageVolumes
  • automaticBackupReplicationKmsKeyId
  • automaticBackupReplicationRegion
  • automaticBackupReplicationRetentionPeriod
  • backupTarget
  • certificateRotationRestart
  • customIamInstanceProfile
  • dbSecurityGroups
  • dbSystemId
  • dedicatedLogVolume
  • domainAuthSecretArn
  • domainDnsIps
  • domainFqdn
  • domainOu
  • masterUserAuthenticationType
  • masterUserSecret.secretArn
  • ncharCharacterSetName
  • replicaMode
  • restoreTime
  • sourceDbClusterIdentifier
  • sourceDbInstanceAutomatedBackupsArn
  • sourceDbiResourceId
  • sourceRegion
  • useDefaultProcessorFeatures
  • useLatestRestorableTime

aws-rds - CfnDBProxy

  • auth.description
  • endpointNetworkType
  • targetConnectionNetworkType

aws-rds - CfnDBProxyEndpoint

  • endpointNetworkType

aws-rds - CfnOptionGroup

  • optionConfigurations.dbSecurityGroupMemberships

aws-redshift-alpha - CfnCluster

  • aquaConfigurationStatus
  • availabilityZone
  • availabilityZoneRelocationStatus
  • clusterSecurityGroups
  • clusterVersion
  • deferMaintenance
  • deferMaintenanceDuration
  • deferMaintenanceEndTime
  • deferMaintenanceStartTime
  • destinationRegion
  • endpoint
  • hsmClientCertificateIdentifier
  • hsmConfigurationIdentifier
  • loggingProperties.logDestinationType
  • loggingProperties.logExports
  • manageMasterPassword
  • manualSnapshotRetentionPeriod
  • masterPasswordSecretKmsKeyId
  • namespaceResourcePolicy
  • ownerAccount
  • revisionTarget
  • rotateEncryptionKey
  • snapshotClusterIdentifier
  • snapshotCopyGrantName
  • snapshotCopyManual
  • snapshotCopyRetentionPeriod
  • snapshotIdentifier

aws-redshift-alpha - CfnClusterParameterGroup

  • parameterGroupName

aws-route53 - CfnRecordSet

  • cidrRoutingConfig.collectionId
  • cidrRoutingConfig.locationName
  • hostedZoneName

aws-route53resolver-alpha - CfnFirewallRuleGroup

  • firewallRules.confidenceThreshold
  • firewallRules.dnsThreatProtection
  • firewallRules.firewallDomainRedirectionAction
  • firewallRules.firewallRuleType
  • firewallRules.firewallThreatProtectionId
  • firewallRules.qtype
  • firewallRules.status

aws-route53resolver-alpha - CfnFirewallRuleGroupAssociation

  • mutationProtection
  • name

aws-s3 - CfnBucket

  • analyticsConfigurations
  • lifecycleConfiguration.rules.noncurrentVersionExpirationInDays
  • lifecycleConfiguration.rules.noncurrentVersionTransition
  • lifecycleConfiguration.rules.transition
  • metadataConfiguration
  • metadataTableConfiguration
  • metricsConfigurations.accessPointArn
  • objectLockConfiguration.rule.defaultRetention.years
  • replicationConfiguration.rules.filter.tagFilter
  • replicationConfiguration.rules.prefix

aws-s3tables-alpha - CfnTable

  • icebergMetadata.icebergSchemaV2

aws-s3tables-alpha - CfnTableBucket

  • replicationConfiguration

aws-sagemaker-alpha - CfnEndpoint

  • deploymentConfig
  • excludeRetainedVariantProperties
  • retainAllVariantProperties
  • retainDeploymentConfig

aws-sagemaker-alpha - CfnEndpointConfig

  • asyncInferenceConfig
  • dataCaptureConfig
  • enableNetworkIsolation
  • executionRoleArn
  • explainerConfig
  • metricsConfig
  • productionVariants.capacityReservationConfig
  • productionVariants.coreDumpConfig
  • productionVariants.enableSsmAccess
  • productionVariants.inferenceAmiVersion
  • productionVariants.instancePools
  • productionVariants.managedInstanceScaling
  • productionVariants.modelDataDownloadTimeoutInSeconds
  • productionVariants.routingConfig
  • productionVariants.variantInstanceProvisionTimeoutInSeconds
  • productionVariants.volumeSizeInGb
  • shadowProductionVariants
  • vpcConfig

aws-sagemaker-alpha - CfnModel

  • containers.imageConfig
  • containers.inferenceSpecificationName
  • containers.mode
  • containers.modelDataSource
  • containers.modelPackageName
  • containers.multiModelConfig
  • inferenceExecutionConfig

aws-secretsmanager - CfnResourcePolicy

  • blockPublicPolicy

aws-secretsmanager - CfnRotationSchedule

  • externalSecretRotationMetadata
  • externalSecretRotationRoleArn
  • hostedRotationLambda.runtime
  • hostedRotationLambda.superuserSecretArn
  • hostedRotationLambda.superuserSecretKmsKeyArn
  • rotationRules.automaticallyAfterDays
  • rotationRules.duration

aws-secretsmanager - CfnSecret

  • type

aws-servicecatalog - CfnCloudFormationProduct

  • productType
  • provisioningArtifactParameters.type
  • sourceConnection

aws-servicecatalog - CfnPortfolioPrincipalAssociation

  • acceptLanguage

aws-servicecatalog - CfnPortfolioProductAssociation

  • acceptLanguage
  • sourcePortfolioId

aws-servicediscovery - CfnPrivateDnsNamespace

  • properties

aws-servicediscovery - CfnPublicDnsNamespace

  • properties

aws-servicediscovery - CfnService

  • serviceAttributes

aws-ses - CfnConfigurationSet

  • archivingOptions

aws-ses - CfnEmailIdentity

  • dkimSigningAttributes

aws-ses - CfnReceiptRule

  • rule.actions.connectAction
  • rule.actions.s3Action.iamRoleArn

aws-sns - CfnSubscription

  • replayPolicy

aws-sns - CfnTopic

  • dataProtectionPolicy
  • subscription

aws-sqs - CfnQueue

  • kmsDataKeyReusePeriodSeconds
  • kmsMasterKeyId
  • sqsManagedSseEnabled

aws-ssm - CfnParameter

  • policies

aws-synthetics - CfnCanary

  • code.blueprintTypes
  • code.dependencies
  • code.sourceLocationArn
  • kmsKeyArn
  • replicas
  • runConfig.ephemeralStorage
  • visualReferences
  • vpcConfig.ipv6AllowedForDualStack