AWS CDK L2 Constructs Unsupported Properties @badmintoncryer
Last Updated: 2026/09/02 04:56:25
This page displays a list of unsupported properties in AWS CDK L2 constructs. For more details, visit this materials.
Currently, only support direct inline props properly, and cases using the spread operator are not supported. Even if they are actually supported in L2, they are still counted as unsupported properties.
Direct Inline Props
new CfnConstruct(scope, 'Resource', {
hoge: 'hoge',
fuga: 123,
});Spread operator Props (false positive)
const props = {
hoge: 'hoge',
fuga: 123,
};
new CfnConstruct(scope, 'Resource', {
...props,
});aws-amplify-alpha - CfnApp
- autoBranchCreationConfig.enablePerformanceMode
- autoBranchCreationConfig.framework
- customRules.condition
- customRules.source
- customRules.status
- customRules.target
aws-amplify-alpha - CfnBranch
- backend
- framework
aws-apigateway - CfnAuthorizer
- authType
aws-apigateway - CfnBasePathMapping
- id
aws-apigateway - CfnDomainName
- endpointConfiguration.ipAddressType
- ownershipVerificationCertificateArn
- routingMode
aws-apigateway - CfnMethod
- integration.integrationTarget
aws-apigateway - CfnRestApi
- bodyS3Location.eTag
- endpointAccessMode
- securityPolicy
- version
aws-apigateway - CfnStage
- canarySetting
aws-apigateway - CfnUsagePlan
- apiStages.throttle.burstLimit
- apiStages.throttle.rateLimit
aws-apigatewayv2 - CfnApi
- basePath
- body
- bodyS3Location
- credentialsArn
- failOnWarnings
- routeKey
- target
- version
aws-apigatewayv2 - CfnAuthorizer
- identityValidationExpression
aws-apigatewayv2 - CfnDomainName
- routingMode
aws-apigatewayv2 - CfnIntegration
- description
- responseParameters
aws-apigatewayv2 - CfnRoute
- modelSelectionExpression
- operationName
- requestModels
- requestParameters
aws-apigatewayv2 - CfnRouteResponse
- modelSelectionExpression
- responseModels
- responseParameters
aws-apigatewayv2 - CfnStage
- accessPolicyId
- clientCertificateId
- defaultRouteSettings.dataTraceEnabled
- defaultRouteSettings.loggingLevel
- deploymentId
- routeSettings
aws-appconfig - CfnDeployment
- dynamicExtensionParameters
aws-applicationautoscaling - CfnScalableTarget
- suspendedState
aws-applicationautoscaling - CfnScalingPolicy
- predictiveScalingPolicyConfiguration
- resourceId
- scalableDimension
- serviceNamespace
- targetTrackingScalingPolicyConfiguration.customizedMetricSpecification.metrics
aws-apprunner-alpha - CfnService
- sourceConfiguration.codeRepository.sourceDirectory
- sourceConfiguration.imageRepository.imageConfiguration.runtimeEnvironmentSecrets.name
- sourceConfiguration.imageRepository.imageConfiguration.runtimeEnvironmentSecrets.value
- sourceConfiguration.imageRepository.imageConfiguration.runtimeEnvironmentVariables.name
- sourceConfiguration.imageRepository.imageConfiguration.runtimeEnvironmentVariables.value
aws-appsync - CfnChannelNamespace
- handlerConfigs.onPublish.integration.lambdaConfig
- handlerConfigs.onSubscribe.integration.lambdaConfig
aws-appsync - CfnDataSource
- dynamoDbConfig.deltaSyncConfig
- dynamoDbConfig.versioned
- relationalDatabaseConfig
aws-appsync - CfnFunctionConfiguration
- requestMappingTemplateS3Location
- responseMappingTemplateS3Location
- syncConfig
aws-appsync - CfnGraphQLSchema
- definitionS3Location
aws-appsync - CfnResolver
- requestMappingTemplateS3Location
- responseMappingTemplateS3Location
- syncConfig
aws-autoscaling - CfnAutoScalingGroup
- availabilityZoneIds
- availabilityZoneImpairmentPolicy
- availabilityZones
- capacityReservationSpecification
- context
- desiredCapacityType
- instanceId
- lifecycleHookSpecificationList
- mixedInstancesPolicy.instancesDistribution.distributionSegments
- mixedInstancesPolicy.launchTemplate.overrides.imageId
- placementGroup
- serviceLinkedRoleArn
- skipZonalShiftValidation
- trafficSources
aws-autoscaling - CfnLaunchConfiguration
- blockDeviceMappings.ebs.encrypted
- classicLinkVpcId
- classicLinkVpcSecurityGroups
- ebsOptimized
- instanceId
- kernelId
- launchConfigurationName
- metadataOptions
- placementTenancy
- ramDiskId
aws-autoscaling - CfnScalingPolicy
- predictiveScalingConfiguration
- scalingAdjustment
- targetTrackingConfiguration.customizedMetricSpecification.metrics
- targetTrackingConfiguration.customizedMetricSpecification.period
aws-backup - CfnBackupPlan
- backupPlan.backupPlanRule.copyActions.lifecycle.optInToArchiveForSupportedResources
- backupPlan.backupPlanRule.lifecycle.optInToArchiveForSupportedResources
- backupPlan.backupPlanRule.scanActions
- backupPlan.backupPlanRule.targetLogicallyAirGappedBackupVaultArn
- backupPlan.scanSettings
aws-backup - CfnBackupSelection
- backupSelection.conditions
- backupSelection.notResources
aws-batch - CfnComputeEnvironment
- computeResources.desiredvCpus
- computeResources.ec2Configuration.batchImageStatus
- computeResources.ec2Configuration.imageKubernetesVersion
- computeResources.ec2KeyPair
- computeResources.imageId
- computeResources.launchTemplate.launchTemplateName
- computeResources.launchTemplate.overrides
- computeResources.launchTemplate.version
- computeResources.managedInstancesProvider
- computeResources.scalingPolicy
- context
- ecsSettings
aws-batch - CfnJobDefinition
- consumableResourceProperties
- ecsProperties
- eksProperties.podProperties.containers.securityContext.allowPrivilegeEscalation
- eksProperties.podProperties.containers.volumeMounts.subPath
- eksProperties.podProperties.imagePullSecrets
- eksProperties.podProperties.initContainers
- eksProperties.podProperties.metadata
- eksProperties.podProperties.shareProcessNamespace
- eksProperties.podProperties.volumes.persistentVolumeClaim
- nodeProperties.nodeRangeProperties.consumableResourceProperties
- nodeProperties.nodeRangeProperties.ecsProperties
- nodeProperties.nodeRangeProperties.eksProperties
- nodeProperties.nodeRangeProperties.instanceTypes
- retryStrategy.evaluateOnExit.onExitCode
- retryStrategy.evaluateOnExit.onReason
- retryStrategy.evaluateOnExit.onStatusReason
aws-batch - CfnJobQueue
- jobQueueType
- serviceEnvironmentOrder
aws-batch - CfnSchedulingPolicy
- quotaSharePolicy
aws-bedrockagentcore - CfnApiKeyCredentialProvider
- apiKeySecretConfig
- apiKeySecretSource
aws-bedrockagentcore - CfnBrowserCustom
- certificates
- enterprisePolicies
aws-bedrockagentcore - CfnCodeInterpreterCustom
- certificates
aws-bedrockagentcore - CfnEvaluator
- kmsKeyArn
aws-bedrockagentcore - CfnGateway
- authorizerConfiguration.customJwtAuthorizer
- interceptorConfigurations.inputConfiguration
- interceptorConfigurations.interceptionPoints
- interceptorConfigurations.interceptor
- policyEngineConfiguration
- protocolConfiguration.mcp
- wafConfiguration
aws-bedrockagentcore - CfnGatewayTarget
- privateEndpoint
- targetConfiguration.http
- targetConfiguration.inference
- targetConfiguration.mcp
aws-bedrockagentcore - CfnMemory
- indexedKeys
aws-bedrockagentcore - CfnOnlineEvaluationConfig
- clusteringConfig
- insights
aws-bedrockagentcore - CfnRuntime
- agentRuntimeArtifact.codeConfiguration.code.s3
- capacityProviderConfiguration
- filesystemConfigurations
aws-chatbot - CfnSlackChannelConfiguration
- customizationResourceArns
aws-cloudfront - CfnDistribution
- distributionConfig.anycastIpListId
- distributionConfig.cacheBehaviors.fieldLevelEncryptionId
- distributionConfig.cacheTagConfig
- distributionConfig.cnamEs
- distributionConfig.connectionFunctionAssociation
- distributionConfig.connectionMode
- distributionConfig.continuousDeploymentPolicyId
- distributionConfig.customOrigin
- distributionConfig.defaultCacheBehavior.fieldLevelEncryptionId
- distributionConfig.s3Origin
- distributionConfig.staging
- distributionConfig.tenantConfig
- distributionConfig.viewerCertificate.iamCertificateId
- distributionConfig.viewerMtlsConfig
aws-cloudfront - CfnFunction
- functionMetadata
aws-cloudfront - CfnRealtimeLogConfig
- endPoints.kinesisStreamConfig
- endPoints.streamType
aws-cloudfront - CfnVpcOrigin
- vpcOriginEndpointConfig.ipAddressType
aws-cloudtrail - CfnTrail
- advancedEventSelectors
- aggregationConfigurations
- insightSelectors.eventCategories
aws-cloudwatch - CfnAlarm
- dimensions
- evaluationWindow
- extendedStatistic
- metricName
- metrics
- namespace
- statistic
- unit
- warmUpConfiguration
aws-codebuild - CfnFleet
- fleetProxyConfiguration
- imageId
- scalingConfiguration
aws-codebuild - CfnProject
- buildBatchConfig.batchReportMode
- buildBatchConfig.combineArtifacts
- buildBatchConfig.restrictions
- buildBatchConfig.timeoutInMins
- environment.hostKernel
- resourceAccessRole
aws-codebuild - CfnReportGroup
- exportConfig.s3Destination.bucketOwner
- exportConfig.s3Destination.path
aws-codedeploy - CfnDeploymentGroup
- blueGreenDeploymentConfiguration.greenFleetProvisioningOption
- deployment
- ec2TagFilters
- onPremisesInstanceTagFilters
- outdatedInstancesStrategy
- triggerConfigurations
aws-codeguruprofiler - CfnProfilingGroup
- agentPermissions
- anomalyDetectionNotificationConfiguration
aws-codepipeline - CfnCustomActionType
- settings.revisionUrlTemplate
- settings.thirdPartyConfigurationUrl
aws-codepipeline - CfnPipeline
- stages.actions.environmentVariables
- stages.blockers
aws-codestar-alpha - CfnGitHubRepository
- connectionArn
aws-codestarnotifications - CfnNotificationRule
- eventTypeId
- targetAddress
aws-cognito - CfnUserPool
- adminCreateUserConfig.unusedAccountValidityDays
- emailAuthenticationMessage
- emailAuthenticationSubject
- issuerConfiguration
- keyConfiguration
- lambdaConfig.createAuthChallenge
- lambdaConfig.customEmailSender
- lambdaConfig.customMessage
- lambdaConfig.customSmsSender
- lambdaConfig.defineAuthChallenge
- lambdaConfig.inboundFederation
- lambdaConfig.kmsKeyId
- lambdaConfig.postAuthentication
- lambdaConfig.postConfirmation
- lambdaConfig.preAuthentication
- lambdaConfig.preSignUp
- lambdaConfig.preTokenGeneration
- lambdaConfig.preTokenGenerationConfig
- lambdaConfig.userMigration
- lambdaConfig.verifyAuthChallengeResponse
- policies.passwordPolicy.minimumLength
- policies.passwordPolicy.passwordHistorySize
- policies.passwordPolicy.requireLowercase
- policies.passwordPolicy.requireNumbers
- policies.passwordPolicy.requireSymbols
- policies.passwordPolicy.requireUppercase
- policies.passwordPolicy.temporaryPasswordValidityDays
- policies.signInPolicy.allowedFirstAuthFactors
- schema.developerOnlyAttribute
- smsConfiguration.eumsSms
- userPoolAddOns.advancedSecurityAdditionalFlows.customAuthMode
- webAuthnFactorConfiguration
aws-cognito - CfnUserPoolDomain
- customDomainConfig.securityPolicy
- routing
aws-cognito - CfnUserPoolResourceServer
- scopes.scopeDescription
- scopes.scopeName
aws-config - CfnConfigRule
- compliance
aws-docdb - CfnDBCluster
- availabilityZones
- globalClusterIdentifier
- networkType
- restoreToTime
- restoreType
- rotateMasterUserPassword
- snapshotIdentifier
- sourceDbClusterIdentifier
- useLatestRestorableTime
aws-docdb - CfnDBInstance
- certificateRotationRestart
aws-docdb - CfnDBSubnetGroup
- dbSubnetGroupName
aws-dsql-alpha - CfnCluster
- kmsEncryptionKey
- multiRegionProperties
- policyDocument
aws-dynamodb - CfnGlobalTable
- readOnDemandThroughputSettings
- readProvisionedThroughputSettings
- replicas.globalSecondaryIndexes.readProvisionedThroughputSettings.readCapacityAutoScalingSettings
- replicas.globalSecondaryIndexes.readProvisionedThroughputSettings.readCapacityUnits
- replicas.kinesisStreamSpecification.approximateCreationDateTimePrecision
- replicas.readProvisionedThroughputSettings.readCapacityAutoScalingSettings
- replicas.readProvisionedThroughputSettings.readCapacityUnits
- replicas.sseSpecification.kmsMasterKeyId
- sseSpecification.sseEnabled
- sseSpecification.sseType
- writeProvisionedThroughputSettings.writeCapacityAutoScalingSettings
aws-dynamodb - CfnTable
- importSourceSpecification.inputFormat
- importSourceSpecification.inputFormatOptions
- streamSpecification.resourcePolicy
aws-ec2 - CfnClientVpnEndpoint
- authenticationOptions.activeDirectory
- authenticationOptions.federatedAuthentication
- endpointIpAddressType
- tagSpecifications
- trafficIpAddressType
- transitGatewayConfiguration
aws-ec2 - CfnClientVpnTargetNetworkAssociation
- availabilityZone
- availabilityZoneId
aws-ec2 - CfnCustomerGateway
- bgpAsnExtended
- certificateArn
- deviceName
aws-ec2 - CfnFlowLog
- deliverCrossAccountRole
- tagFieldSpecifications
aws-ec2 - CfnInstance
- additionalInfo
- affinity
- cpuOptions
- elasticGpuSpecifications
- elasticInferenceAccelerators
- hostId
- hostResourceGroupArn
- ipv6Addresses
- kernelId
- launchTemplate.launchTemplateId
- licenseSpecifications
- networkInterfaces.associateCarrierIpAddress
- networkInterfaces.deleteOnTermination
- networkInterfaces.description
- networkInterfaces.enaSrdSpecification
- networkInterfaces.ipv6AddressCount
- networkInterfaces.ipv6Addresses
- networkInterfaces.networkInterfaceId
- networkInterfaces.privateIpAddresses
- networkInterfaces.secondaryPrivateIpAddressCount
- privateDnsNameOptions
- ramdiskId
- securityGroups
- ssmAssociations
- tenancy
- volumes
aws-ec2 - CfnLaunchTemplate
- launchTemplateData.blockDeviceMappings.ebs.ebsCardIndex
- launchTemplateData.capacityReservationSpecification
- launchTemplateData.disableApiStop
- launchTemplateData.elasticGpuSpecifications
- launchTemplateData.elasticInferenceAccelerators
- launchTemplateData.iamInstanceProfile.name
- launchTemplateData.instanceRequirements
- launchTemplateData.kernelId
- launchTemplateData.licenseSpecifications
- launchTemplateData.maintenanceOptions
- launchTemplateData.networkInterfaces.associateCarrierIpAddress
- launchTemplateData.networkInterfaces.connectionTrackingSpecification
- launchTemplateData.networkInterfaces.deleteOnTermination
- launchTemplateData.networkInterfaces.description
- launchTemplateData.networkInterfaces.enaQueueCount
- launchTemplateData.networkInterfaces.enaSrdSpecification
- launchTemplateData.networkInterfaces.interfaceType
- launchTemplateData.networkInterfaces.ipv4PrefixCount
- launchTemplateData.networkInterfaces.ipv4Prefixes
- launchTemplateData.networkInterfaces.ipv6AddressCount
- launchTemplateData.networkInterfaces.ipv6Addresses
- launchTemplateData.networkInterfaces.ipv6PrefixCount
- launchTemplateData.networkInterfaces.ipv6Prefixes
- launchTemplateData.networkInterfaces.networkCardIndex
- launchTemplateData.networkInterfaces.networkInterfaceId
- launchTemplateData.networkInterfaces.primaryIpv6
- launchTemplateData.networkInterfaces.privateIpAddress
- launchTemplateData.networkInterfaces.privateIpAddresses
- launchTemplateData.networkInterfaces.secondaryPrivateIpAddressCount
- launchTemplateData.networkInterfaces.subnetId
- launchTemplateData.networkPerformanceOptions
- launchTemplateData.placement.affinity
- launchTemplateData.placement.availabilityZone
- launchTemplateData.placement.groupId
- launchTemplateData.placement.hostId
- launchTemplateData.placement.hostResourceGroupArn
- launchTemplateData.placement.partitionNumber
- launchTemplateData.placement.spreadDomain
- launchTemplateData.placement.tenancy
- launchTemplateData.privateDnsNameOptions
- launchTemplateData.ramDiskId
- launchTemplateData.securityGroups
aws-ec2 - CfnPlacementGroup
- parentGroupId
aws-ec2 - CfnSecurityGroupIngress
- groupName
- sourceSecurityGroupName
aws-ec2 - CfnVolume
- availabilityZoneId
- outpostArn
- sourceVolumeId
aws-ec2 - CfnVPCEndpoint
- dnsOptions.privateDnsPreference
- dnsOptions.privateDnsSpecifiedDomains
- resourceConfigurationArn
- serviceNetworkArn
aws-ec2 - CfnVPCEndpointService
- gatewayLoadBalancerArns
- payerResponsibility
- privateDnsName
- privateDnsNameConfiguration
aws-ec2 - CfnVPNConnection
- enableAcceleration
- localIpv4NetworkCidr
- localIpv6NetworkCidr
- outsideIpAddressType
- preSharedKeyStorage
- remoteIpv4NetworkCidr
- remoteIpv6NetworkCidr
- transitGatewayId
- transportTransitGatewayAttachmentId
- tunnelBandwidth
- tunnelInsideIpVersion
- vpnConcentratorId
- vpnTunnelOptionsSpecifications.dpdTimeoutAction
- vpnTunnelOptionsSpecifications.dpdTimeoutSeconds
- vpnTunnelOptionsSpecifications.enableTunnelLifecycleControl
- vpnTunnelOptionsSpecifications.ikeVersions
- vpnTunnelOptionsSpecifications.logOptions
- vpnTunnelOptionsSpecifications.phase1DhGroupNumbers
- vpnTunnelOptionsSpecifications.phase1EncryptionAlgorithms
- vpnTunnelOptionsSpecifications.phase1IntegrityAlgorithms
- vpnTunnelOptionsSpecifications.phase1LifetimeSeconds
- vpnTunnelOptionsSpecifications.phase2DhGroupNumbers
- vpnTunnelOptionsSpecifications.phase2EncryptionAlgorithms
- vpnTunnelOptionsSpecifications.phase2IntegrityAlgorithms
- vpnTunnelOptionsSpecifications.phase2LifetimeSeconds
- vpnTunnelOptionsSpecifications.rekeyFuzzPercentage
- vpnTunnelOptionsSpecifications.rekeyMarginTimeSeconds
- vpnTunnelOptionsSpecifications.replayWindowSize
- vpnTunnelOptionsSpecifications.startupAction
- vpnTunnelOptionsSpecifications.tunnelInsideIpv6Cidr
aws-ec2-alpha - CfnEIP
- address
- instanceId
- ipamPoolId
- networkBorderGroup
- publicIpv4Pool
- transferAddress
aws-ec2-alpha - CfnIPAM
- defaultResourceDiscoveryOrganizationalUnitExclusions
- description
- enablePrivateGua
- meteredAccount
- tier
aws-ec2-alpha - CfnIPAMPool
- allocationDefaultNetmaskLength
- allocationMaxNetmaskLength
- allocationMinNetmaskLength
- autoImport
- description
- publiclyAdvertisable
- sourceIpamPoolId
- sourceResource
aws-ec2-alpha - CfnIPAMScope
- description
- externalAuthorityConfiguration
aws-ec2-alpha - CfnNatGateway
- availabilityMode
- availabilityZoneAddresses
- vpcId
aws-ec2-alpha - CfnRoute
- carrierGatewayId
- coreNetworkArn
- destinationPrefixListId
- egressOnlyInternetGatewayId
- instanceId
- localGatewayId
- natGatewayId
- networkInterfaceId
- odbNetworkArn
- transitGatewayId
- vpcEndpointId
- vpcPeeringConnectionId
aws-ec2-alpha - CfnSubnet
- availabilityZoneId
- enableDns64
- enableLniAtDeviceIndex
- ipv4IpamPoolId
- ipv4NetmaskLength
- ipv6IpamPoolId
- ipv6Native
- ipv6NetmaskLength
- outpostArn
- privateDnsNameOptionsOnLaunch
aws-ec2-alpha - CfnTransitGateway
- associationDefaultRouteTableId
- encryptionSupport
- multicastSupport
- propagationDefaultRouteTableId
- vpnEcmpSupport
aws-ec2-alpha - CfnVPC
- vpcEncryptionControl
aws-ec2-alpha - CfnVPCCidrBlock
- ipv6CidrBlockNetworkBorderGroup
aws-ec2-alpha - CfnVPCPeeringConnection
- assumeRoleRegion
aws-ecs - CfnCapacityProvider
- managedInstancesProvider.autoRepairConfiguration
- managedInstancesProvider.infrastructureOptimization
- managedInstancesProvider.instanceLaunchTemplate.capacityReservations
- managedInstancesProvider.instanceLaunchTemplate.fipsEnabled
- managedInstancesProvider.instanceLaunchTemplate.instanceMetadataTagsPropagation
- managedInstancesProvider.instanceLaunchTemplate.localStorageConfiguration
aws-ecs - CfnCluster
- capacityProviders
- defaultCapacityProviderStrategy
aws-ecs - CfnService
- deploymentConfiguration.deploymentCircuitBreaker.resetOnHealthyTask
- deploymentConfiguration.deploymentCircuitBreaker.thresholdConfiguration
- deploymentConfiguration.lifecycleHooks.hookDetails
- deploymentConfiguration.lifecycleHooks.targetType
- deploymentConfiguration.lifecycleHooks.timeoutConfiguration
- monitoring
- placementConstraints.expression
- placementConstraints.type
- placementStrategies.field
- placementStrategies.type
- role
- serviceConnectConfiguration.services.clientAliases.testTrafficRules
- vpcLatticeConfigurations
aws-ecs - CfnTaskDefinition
- containerDefinitions.environment.name
- containerDefinitions.environment.value
- containerDefinitions.extraHosts.hostname
- containerDefinitions.extraHosts.ipAddress
- containerDefinitions.firelensConfiguration
- volumes.fSxWindowsFileServerVolumeConfiguration
- volumes.s3FilesVolumeConfiguration
aws-efs - CfnFileSystem
- bypassPolicyLockoutSafetyCheck
- replicationConfiguration.destinations.roleArn
- replicationConfiguration.destinations.status
- replicationConfiguration.destinations.statusMessage
aws-efs - CfnMountTarget
- ipAddress
- ipAddressType
- ipv6Address
aws-eks - CfnAccessEntry
- kubernetesGroups
- username
aws-eks - CfnAddon
- namespaceConfig
- podIdentityAssociations
- resolveConflicts
- serviceAccountRoleArn
aws-eks - CfnNodegroup
- launchTemplate.name
- nodeRepairConfig.maxParallelNodesRepairedCount
- nodeRepairConfig.maxParallelNodesRepairedPercentage
- nodeRepairConfig.maxUnhealthyNodeThresholdCount
- nodeRepairConfig.maxUnhealthyNodeThresholdPercentage
- nodeRepairConfig.nodeRepairConfigOverrides
- updateConfig.updateStrategy
- version
- warmPoolConfig
aws-eks - CfnPodIdentityAssociation
- policy
- targetRoleArn
aws-eks-v2 - CfnAccessEntry
- kubernetesGroups
- username
aws-eks-v2 - CfnAddon
- namespaceConfig
- podIdentityAssociations
- resolveConflicts
- serviceAccountRoleArn
aws-eks-v2 - CfnCluster
- activeCertificateAuthorityId
- certificateAuthority
- deletionProtection
- force
- kubeApiServerConfig
- kubeControllerManagerConfig
- kubernetesNetworkConfig.serviceIpv6Cidr
- kubeSchedulerConfig
- outpostConfig
- resourcesVpcConfig.controlPlaneEgressMode
- rollbackConfig
- upgradePolicy
- zonalShiftConfig
aws-eks-v2 - CfnFargateProfile
- tags.key
- tags.value
aws-eks-v2 - CfnNodegroup
- launchTemplate.name
- nodeRepairConfig.maxParallelNodesRepairedCount
- nodeRepairConfig.maxParallelNodesRepairedPercentage
- nodeRepairConfig.maxUnhealthyNodeThresholdCount
- nodeRepairConfig.maxUnhealthyNodeThresholdPercentage
- nodeRepairConfig.nodeRepairConfigOverrides
- updateConfig.updateStrategy
- version
- warmPoolConfig
aws-eks-v2 - CfnPodIdentityAssociation
- policy
- targetRoleArn
aws-elasticache-alpha - CfnServerlessCache
- endpoint
- networkType
- readerEndpoint
aws-elasticloadbalancing - CfnLoadBalancer
- accessLoggingPolicy
- appCookieStickinessPolicy
- availabilityZones
- connectionDrainingPolicy
- connectionSettings
- lbCookieStickinessPolicy
- loadBalancerName
- policies
aws-elasticloadbalancingv2 - CfnListenerRule
- conditions.hostHeaderConfig
- conditions.httpHeaderConfig
- conditions.httpRequestMethodConfig
- conditions.pathPatternConfig
- conditions.queryStringConfig
- conditions.regexValues
- conditions.sourceIpConfig
- transforms
aws-elasticloadbalancingv2 - CfnLoadBalancer
- enableCapacityReservationProvisionStabilize
- ipv4IpamPoolId
aws-elasticloadbalancingv2 - CfnTargetGroup
- targetControlPort
- targets.availabilityZone
- targets.id
- targets.port
- targets.quicServerId
aws-elasticsearch - CfnDomain
- accessPolicies
- advancedSecurityOptions.anonymousAuthEnabled
- domainArn
- elasticsearchClusterConfig.coldStorageOptions
- logPublishingOptions.cloudWatchLogsLogGroupArn
- logPublishingOptions.enabled
aws-events - CfnConnection
- authParameters.apiKeyAuthParameters
- authParameters.basicAuthParameters
- authParameters.connectivityParameters
- authParameters.invocationHttpParameters.bodyParameters.isValueSecret
- authParameters.invocationHttpParameters.bodyParameters.key
- authParameters.invocationHttpParameters.bodyParameters.value
- authParameters.invocationHttpParameters.headerParameters.isValueSecret
- authParameters.invocationHttpParameters.headerParameters.key
- authParameters.invocationHttpParameters.headerParameters.value
- authParameters.invocationHttpParameters.queryStringParameters.isValueSecret
- authParameters.invocationHttpParameters.queryStringParameters.key
- authParameters.invocationHttpParameters.queryStringParameters.value
- authParameters.oAuthParameters
- invocationConnectivityParameters
- kmsKeyIdentifier
aws-events - CfnEventBus
- policy
aws-events - CfnRule
- targets.sageMakerPipelineParameters
aws-fsx - CfnFileSystem
- lustreConfiguration.dataReadCacheConfiguration
- lustreConfiguration.efaEnabled
- lustreConfiguration.logConfiguration
- lustreConfiguration.metadataConfiguration
- lustreConfiguration.throughputCapacity
- networkType
- ontapConfiguration
- openZfsConfiguration
- windowsConfiguration
aws-gamelift-alpha - CfnFleet
- anywhereConfiguration
- applyCapacity
- computeType
- ec2InboundPermissions.ipRange
- instanceRoleCredentialsProvider
- locations.locationCapacity.managedCapacityConfiguration
- locations.playerGatewayStatus
- metricGroups
- playerGatewayConfiguration
- playerGatewayMode
- scalingPolicies
- scriptId
aws-gamelift-alpha - CfnMatchmakingConfiguration
- creationTime
- ruleSetArn
aws-gamelift-alpha - CfnScript
- nodeJsVersion
aws-globalaccelerator - CfnAccelerator
- flowLogsEnabled
- flowLogsS3Bucket
- flowLogsS3Prefix
aws-globalaccelerator - CfnEndpointGroup
- endpointConfigurations.attachmentArn
- endpointConfigurations.clientIpPreservationEnabled
- endpointConfigurations.endpointId
- endpointConfigurations.weight
aws-glue-alpha - CfnCatalog
- allowFullTableExternalDataAccess
- catalogProperties
- createDatabaseDefaultPermissions
- createTableDefaultPermissions
- federatedCatalog
- overwriteChildResourcePermissionsWithDefault
- parameters
- targetRedshiftCatalog
aws-glue-alpha - CfnConnection
- connectionInput.athenaProperties
- connectionInput.authenticationConfiguration
- connectionInput.pythonProperties
- connectionInput.sparkProperties
- connectionInput.validateCredentials
- connectionInput.validateForComputeEnvironments
aws-glue-alpha - CfnDatabase
- databaseInput.createTableDefaultPermissions
- databaseInput.federatedDatabase
- databaseInput.parameters
- databaseInput.targetDatabase
- databaseName
aws-glue-alpha - CfnDataQualityRuleset
- clientToken
- targetTable.databaseName
- targetTable.tableName
aws-glue-alpha - CfnJob
- allocatedCapacity
- jobMode
- logUri
- maintenanceWindow
- nonOverridableArguments
aws-glue-alpha - CfnTable
- name
- openTableFormatInput
- tableInput.owner
- tableInput.retention
- tableInput.storageDescriptor.bucketColumns
- tableInput.storageDescriptor.numberOfBuckets
- tableInput.storageDescriptor.schemaReference
- tableInput.storageDescriptor.serdeInfo.name
- tableInput.storageDescriptor.serdeInfo.parameters
- tableInput.storageDescriptor.skewedInfo
- tableInput.storageDescriptor.sortColumns
- tableInput.targetTable
- tableInput.viewDefinition
- tableInput.viewExpandedText
- tableInput.viewOriginalText
aws-iam - CfnGroup
- policies
aws-iam - CfnSAMLProvider
- addPrivateKey
- assertionEncryptionMode
- privateKeyList
- removePrivateKey
aws-iam - CfnUser
- policies
aws-imagebuilder-alpha - CfnImage
- imagePipelineExecutionSettings
- imageTestsConfiguration.timeoutMinutes
aws-imagebuilder-alpha - CfnImagePipeline
- imageTestsConfiguration.timeoutMinutes
- schedule.timezone
aws-imagebuilder-alpha - CfnImageRecipe
- amiWatermarks
aws-iot-alpha - CfnLogging
- eventConfigurations
aws-iotevents-alpha - CfnInput
- inputDescription
aws-kinesis - CfnStream
- maxRecordSizeInKiB
- warmThroughputMiBps
aws-kinesisfirehose - CfnDeliveryStream
- amazonOpenSearchServerlessDestinationConfiguration
- amazonopensearchserviceDestinationConfiguration
- databaseSourceConfiguration
- directPutSourceConfiguration
- elasticsearchDestinationConfiguration
- icebergDestinationConfiguration
- redshiftDestinationConfiguration
- s3DestinationConfiguration
- snowflakeDestinationConfiguration
- splunkDestinationConfiguration
aws-kms - CfnKey
- bypassPolicyLockoutSafetyCheck
- origin
aws-lambda - CfnEventSourceMapping
- documentDbEventSourceConfig
- filterCriteria.filters.pattern
- queues
aws-lambda - CfnFunction
- code.s3ObjectStorageMode
- durableConfig.kmsKeyArn
- fileSystemConfigs.s3FilesConfig
- snapStart.applyOn
aws-lambda - CfnLayerVersion
- content.s3ObjectStorageMode
aws-lambda - CfnVersion
- runtimePolicy
aws-location-alpha - CfnAPIKey
- restrictions.allowAndroidApps
- restrictions.allowAppleApps
aws-location-alpha - CfnMap
- pricingPlan
aws-location-alpha - CfnPlaceIndex
- pricingPlan
aws-location-alpha - CfnRouteCalculator
- pricingPlan
aws-logs - CfnLogGroup
- bearerTokenAuthenticationEnabled
- resourcePolicyDocument
aws-logs - CfnMetricFilter
- emitSystemFieldDimensions
- fieldSelectionCriteria
aws-logs - CfnQueryDefinition
- parameters
- queryLanguage
aws-logs - CfnSubscriptionFilter
- applyOnTransformedLogs
- emitSystemFields
- fieldSelectionCriteria
aws-logs - CfnTransformer
- transformerConfig.addKeys
- transformerConfig.copyValue
- transformerConfig.csv
- transformerConfig.dateTimeConverter
- transformerConfig.deleteKeys
- transformerConfig.grok
- transformerConfig.listToMap
- transformerConfig.lowerCaseString
- transformerConfig.moveKeys
- transformerConfig.parseCloudfront
- transformerConfig.parseJson
- transformerConfig.parseKeyValue
- transformerConfig.parsePostgres
- transformerConfig.parseRoute53
- transformerConfig.parseToOcsf
- transformerConfig.parseVpc
- transformerConfig.parseWaf
- transformerConfig.renameKeys
- transformerConfig.splitString
- transformerConfig.substituteString
- transformerConfig.trimString
- transformerConfig.typeConverter
- transformerConfig.upperCaseString
aws-mediaconnect-alpha - CfnFlowEntitlement
- encryption.constantInitializationVector
- encryption.deviceId
- encryption.region
- encryption.resourceId
- encryption.url
aws-mediaconnect-alpha - CfnFlowOutput
- mediaStreamOutputConfigurations
- ndiOutputTimecodeSource
aws-mediaconnect-alpha - CfnGateway
- networks.cidrBlock
- networks.name
aws-mediaconnect-alpha - CfnRouterInput
- contentQualityAnalysisConfiguration
aws-medialive-alpha - CfnChannel
- dryRun
- inferenceSettings.audioFeedInputs
aws-mediapackagev2-alpha - CfnChannel
- outputLockingMode
aws-mediapackagev2-alpha - CfnOriginEndpoint
- dashManifests.audioTimelinePattern
- dashManifests.availabilityStartTimeConfiguration
- dashManifests.baseUrls
- dashManifests.compactness
- dashManifests.drmSignaling
- dashManifests.dvbSettings
- dashManifests.filterConfiguration
- dashManifests.manifestName
- dashManifests.manifestWindowSeconds
- dashManifests.minBufferTimeSeconds
- dashManifests.minUpdatePeriodSeconds
- dashManifests.periodTriggers
- dashManifests.profiles
- dashManifests.programInformation
- dashManifests.scteDash
- dashManifests.segmentTemplateFormat
- dashManifests.subtitleConfiguration
- dashManifests.suggestedPresentationDelaySeconds
- dashManifests.uriPathType
- dashManifests.utcTiming
- hlsManifests.childManifestName
- hlsManifests.filterConfiguration
- hlsManifests.manifestName
- hlsManifests.manifestWindowSeconds
- hlsManifests.programDateTimeIntervalSeconds
- hlsManifests.scteHls
- hlsManifests.startTag
- hlsManifests.uriPathType
- hlsManifests.url
- hlsManifests.urlEncodeChildManifest
- lowLatencyHlsManifests.childManifestName
- lowLatencyHlsManifests.filterConfiguration
- lowLatencyHlsManifests.manifestName
- lowLatencyHlsManifests.manifestWindowSeconds
- lowLatencyHlsManifests.programDateTimeIntervalSeconds
- lowLatencyHlsManifests.scteHls
- lowLatencyHlsManifests.startTag
- lowLatencyHlsManifests.uriPathType
- lowLatencyHlsManifests.url
- lowLatencyHlsManifests.urlEncodeChildManifest
- mssManifests.filterConfiguration
- mssManifests.manifestLayout
- mssManifests.manifestName
- mssManifests.manifestWindowSeconds
- segment.outputTimestampMode
- segment.scte.customAdTypes
- uriSeparator
aws-msk-alpha - CfnCluster
- brokerNodeGroupInfo.brokerAzDistribution
- brokerNodeGroupInfo.connectivityInfo
- brokerNodeGroupInfo.storageInfo.ebsStorageInfo.provisionedThroughput
- clientAuthentication.tls.enabled
- clientAuthentication.unauthenticated
- currentVersion
- loggingInfo.authorizerLogs
- rebalancing
- zookeeperAccess
aws-neptune-alpha - CfnDBCluster
- associatedRoles.featureName
- availabilityZones
- dbInstanceParameterGroupName
- globalClusterIdentifier
- networkType
- restoreToTime
- restoreType
- snapshotIdentifier
- sourceDbClusterIdentifier
- useLatestRestorableTime
aws-neptune-alpha - CfnDBInstance
- allowMajorVersionUpgrade
- dbSubnetGroupName
- preferredMaintenanceWindow
- publiclyAccessible
aws-opensearchservice - CfnDomain
- accessPolicies
- advancedSecurityOptions.anonymousAuthDisableDate
- advancedSecurityOptions.anonymousAuthEnabled
- advancedSecurityOptions.iamFederationOptions
- advancedSecurityOptions.jwtOptions
- aimlOptions.serverlessVectorAcceleration
- automatedSnapshotPauseOptions
- deploymentStrategyOptions
- domainArn
- engineMode
- identityCenterOptions
- logPublishingOptions.cloudWatchLogsLogGroupArn
- logPublishingOptions.enabled
- skipShardMigrationWait
- softwareUpdateOptions.useLatestServiceSoftwareForBlueGreen
- useCase
- vpcOptions.egressEnabled
aws-rds - CfnDBCluster
- allocatedStorage
- availabilityZones
- dbClusterInstanceClass
- dbInstanceParameterGroupName
- dbSystemId
- enableGlobalWriteForwarding
- globalClusterIdentifier
- iops
- masterUserAuthenticationType
- masterUserSecret.secretArn
- publiclyAccessible
- restoreToTime
- restoreType
- sourceDbClusterIdentifier
- sourceDbClusterResourceId
- sourceRegion
- useLatestRestorableTime
aws-rds - CfnDBInstance
- additionalStorageVolumes
- automaticBackupReplicationKmsKeyId
- automaticBackupReplicationRegion
- automaticBackupReplicationRetentionPeriod
- backupTarget
- certificateRotationRestart
- customIamInstanceProfile
- dbSecurityGroups
- dbSystemId
- dedicatedLogVolume
- domainAuthSecretArn
- domainDnsIps
- domainFqdn
- domainOu
- masterUserAuthenticationType
- masterUserSecret.secretArn
- ncharCharacterSetName
- replicaMode
- restoreTime
- sourceDbClusterIdentifier
- sourceDbInstanceAutomatedBackupsArn
- sourceDbiResourceId
- sourceRegion
- useDefaultProcessorFeatures
- useLatestRestorableTime
aws-rds - CfnDBProxy
- auth.description
- endpointNetworkType
- targetConnectionNetworkType
aws-rds - CfnDBProxyEndpoint
- endpointNetworkType
aws-rds - CfnOptionGroup
- optionConfigurations.dbSecurityGroupMemberships
aws-redshift-alpha - CfnCluster
- aquaConfigurationStatus
- availabilityZone
- availabilityZoneRelocationStatus
- clusterSecurityGroups
- clusterVersion
- deferMaintenance
- deferMaintenanceDuration
- deferMaintenanceEndTime
- deferMaintenanceStartTime
- destinationRegion
- endpoint
- hsmClientCertificateIdentifier
- hsmConfigurationIdentifier
- loggingProperties.logDestinationType
- loggingProperties.logExports
- manageMasterPassword
- manualSnapshotRetentionPeriod
- masterPasswordSecretKmsKeyId
- namespaceResourcePolicy
- ownerAccount
- revisionTarget
- rotateEncryptionKey
- snapshotClusterIdentifier
- snapshotCopyGrantName
- snapshotCopyManual
- snapshotCopyRetentionPeriod
- snapshotIdentifier
aws-redshift-alpha - CfnClusterParameterGroup
- parameterGroupName
aws-route53 - CfnRecordSet
- cidrRoutingConfig.collectionId
- cidrRoutingConfig.locationName
- hostedZoneName
aws-route53resolver-alpha - CfnFirewallRuleGroup
- firewallRules.confidenceThreshold
- firewallRules.dnsThreatProtection
- firewallRules.firewallDomainRedirectionAction
- firewallRules.firewallRuleType
- firewallRules.firewallThreatProtectionId
- firewallRules.qtype
- firewallRules.status
aws-route53resolver-alpha - CfnFirewallRuleGroupAssociation
- mutationProtection
- name
aws-s3 - CfnBucket
- analyticsConfigurations
- lifecycleConfiguration.rules.noncurrentVersionExpirationInDays
- lifecycleConfiguration.rules.noncurrentVersionTransition
- lifecycleConfiguration.rules.transition
- metadataConfiguration
- metadataTableConfiguration
- metricsConfigurations.accessPointArn
- objectLockConfiguration.rule.defaultRetention.years
- replicationConfiguration.rules.filter.tagFilter
- replicationConfiguration.rules.prefix
aws-s3tables-alpha - CfnTable
- icebergMetadata.icebergSchemaV2
aws-s3tables-alpha - CfnTableBucket
- replicationConfiguration
aws-sagemaker-alpha - CfnEndpoint
- deploymentConfig
- excludeRetainedVariantProperties
- retainAllVariantProperties
- retainDeploymentConfig
aws-sagemaker-alpha - CfnEndpointConfig
- asyncInferenceConfig
- dataCaptureConfig
- enableNetworkIsolation
- executionRoleArn
- explainerConfig
- metricsConfig
- productionVariants.capacityReservationConfig
- productionVariants.coreDumpConfig
- productionVariants.enableSsmAccess
- productionVariants.inferenceAmiVersion
- productionVariants.instancePools
- productionVariants.managedInstanceScaling
- productionVariants.modelDataDownloadTimeoutInSeconds
- productionVariants.routingConfig
- productionVariants.variantInstanceProvisionTimeoutInSeconds
- productionVariants.volumeSizeInGb
- shadowProductionVariants
- vpcConfig
aws-sagemaker-alpha - CfnModel
- containers.imageConfig
- containers.inferenceSpecificationName
- containers.mode
- containers.modelDataSource
- containers.modelPackageName
- containers.multiModelConfig
- inferenceExecutionConfig
aws-secretsmanager - CfnResourcePolicy
- blockPublicPolicy
aws-secretsmanager - CfnRotationSchedule
- externalSecretRotationMetadata
- externalSecretRotationRoleArn
- hostedRotationLambda.runtime
- hostedRotationLambda.superuserSecretArn
- hostedRotationLambda.superuserSecretKmsKeyArn
- rotationRules.automaticallyAfterDays
- rotationRules.duration
aws-secretsmanager - CfnSecret
- type
aws-servicecatalog - CfnCloudFormationProduct
- productType
- provisioningArtifactParameters.type
- sourceConnection
aws-servicecatalog - CfnPortfolioPrincipalAssociation
- acceptLanguage
aws-servicecatalog - CfnPortfolioProductAssociation
- acceptLanguage
- sourcePortfolioId
aws-servicediscovery - CfnPrivateDnsNamespace
- properties
aws-servicediscovery - CfnPublicDnsNamespace
- properties
aws-servicediscovery - CfnService
- serviceAttributes
aws-ses - CfnConfigurationSet
- archivingOptions
aws-ses - CfnEmailIdentity
- dkimSigningAttributes
aws-ses - CfnReceiptRule
- rule.actions.connectAction
- rule.actions.s3Action.iamRoleArn
aws-sns - CfnSubscription
- replayPolicy
aws-sns - CfnTopic
- dataProtectionPolicy
- subscription
aws-sqs - CfnQueue
- kmsDataKeyReusePeriodSeconds
- kmsMasterKeyId
- sqsManagedSseEnabled
aws-ssm - CfnParameter
- policies
aws-synthetics - CfnCanary
- code.blueprintTypes
- code.dependencies
- code.sourceLocationArn
- kmsKeyArn
- replicas
- runConfig.ephemeralStorage
- visualReferences
- vpcConfig.ipv6AllowedForDualStack