8000 Update CloudFormation schemas to 2025-03-20 (#4021) · aws-cloudformation/cfn-lint@8ed4399 · GitHub
[go: up one dir, main page]
Skip to content

Commit 8ed4399

Browse files
github-actions[bot]kddejong
github-actions[bot]
and
kddejong
authored
Update CloudFormation schemas to 2025-03-20 (#4021)
Co-authored-by: kddejong <36457093+kddejong@users.noreply.github.com>
1 parent ce36ba7 commit 8ed4399

File tree

349 files changed

+64355
-50714
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

349 files changed

+64355
-50714
lines changed

‎docs/rules.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ To include these rules, use the `-e/include-experimental` argument when running
4646
## Rules
4747
(_This documentation is generated by running `cfn-lint --update-documentation`, do not alter this manually_)
4848

49-
The following **254** rules are applied by this linter:
49+
The following **257** rules are applied by this linter:
5050

5151
| Rule ID | Title | Description | Config<br />(Name:Type:Default) | Source | Tags |
5252
| -------- | ----- | ----------- | ---------- | ------ | ---- |
@@ -173,6 +173,7 @@ The following **254** rules are applied by this linter:
173173
| [E3511<a name="E3511"></a>](../src/cfnlint/rules/resources/iam/RoleArnPattern.py) | Validate IAM role arn pattern | Validate an IAM role arn pattern matches | | [Source](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html) | `parameters`,`iam` |
174174
| [E3512<a name="E3512"></a>](../src/cfnlint/rules/resources/iam/ResourcePolicy.py) | Validate resource based IAM polices | IAM resources polices are embedded JSON in CloudFormation. This rule validates those embedded policies. | | [Source](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_identity-vs-resource.html) | `resources`,`iam` |
175175
| [E3513<a name="E3513"></a>](../src/cfnlint/rules/resources/iam/ResourceEcrPolicy.py) | Validate ECR repository policy | Private ECR repositories have a policy. This rule validates those policies. | | [Source](https://docs.aws.amazon.com/AmazonECR/latest/userguide/repository-policies.html) | `resources`,`iam`,`ecr` |
176+
| [E3514<a name="E3514"></a>](../src/cfnlint/rules/resources/iam/ResourcePolicyResourceArn.py) | Validate IAM resource policy resource ARNs | Validates an IAM resource policy has a compliant resource ARN | | [Source](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html) | `parameters`,`iam` |
176177
| [E3601<a name="E3601"></a>](../src/cfnlint/rules/resources/stepfunctions/StateMachineDefinition.py) | Validate the structure of a StateMachine definition | Validate the Definition or DefinitionString inside a AWS::StepFunctions::StateMachine resource | | [Source](https://docs.aws.amazon.com/step-functions/latest/dg/amazon-states-language-state-machine-structure.html) | `resources`,`statemachine` |
177178
| [E3615<a name="E3615"></a>](../src/cfnlint/rules/resources/cloudwatch/AlarmPeriod.py) | Validate the period is a valid value | Valid values are 10, 30, 60, and any multiple of 60. | | [Source]() | `resources`,`cloudwatch` |
178179
| [E3617<a name="E3617"></a>](../src/cfnlint/rules/resources/managedblockchain/NodeNodeConfigurationInstanceTypeEnum.py) | Validate ManagedBlockchain instance type | Validates the ManagedBlockchain instance types based on region and data gathered from the pricing APIs | | [Source]() | `resources` |
@@ -254,6 +255,7 @@ The following **254** rules are applied by this linter:
254255
| [I3037<a name="I3037"></a>](../src/cfnlint/rules/resources/properties/UniqueItemsAllowed.py) | Check if a list that allows duplicates has any duplicates | Certain lists support duplicate items.Provide an alert when list of strings or numbers have repeats. | | [Source](https://github.com/aws-cloudformation/cfn-lint/blob/main/docs/rules.md#rules-1) | `resources`,`property`,`list` |
255256
| [I3042<a name="I3042"></a>](../src/cfnlint/rules/resources/HardCodedArnProperties.py) | ARNs should use correctly placed Pseudo Parameters | Checks Resources if ARNs use correctly placed Pseudo Parameters instead of hardcoded Partition, Region, and Account Number | partition:boolean:True<br />region:boolean:False<br />accountId:boolean:False | [Source]() | `resources` |
256257
| [I3100<a name="I3100"></a>](../src/cfnlint/rules/resources/PreviousGenerationInstanceType.py) | Checks for legacy instance type generations | New instance type generations increase performance and decrease cost | | [Source](https://aws.amazon.com/ec2/previous-generation/) | `resources`,`ec2`,`rds`,`elasticcache`,`elasticsearch` |
258+
| [I3510<a name="I3510"></a>](../src/cfnlint/rules/resources/iam/StatementResources.py) | Validate statement resources match the actions | IAM policy statements have different constraints between actions and resources. This rule validates that resource ARNs or asterisks match the actions. | | [Source](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/iam-access-control-overview-cwl.html) | `resources`,`iam` |
257259
| [I6010<a name="I6010"></a>](../src/cfnlint/rules/outputs/ApproachingMaxProperties.py) | Output limit | Check the number of Outputs in the template is approaching the upper limit | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/cloudformation-limits.html) | `outputs`,`limits` |
258260
| [I6011<a name="I6011"></a>](../src/cfnlint/rules/outputs/ApproachingMaxLength.py) | Output name limit | Check the size of Output names in the template is approaching the upper limit | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/cloudformation-limits.html) | `outputs`,`limits` |
259261
| [I7002<a name="I7002"></a>](../src/cfnlint/rules/mappings/ApproachingMaxLength.py) | Mapping name limit | Check the size of Mapping names in the template is approaching the upper limit | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/cloudformation-limits.html) | `mappings`,`limits` |
@@ -272,6 +274,7 @@ The following **254** rules are applied by this linter:
272274
| [W1036<a name="W1036"></a>](../src/cfnlint/rules/functions/GetAzResolved.py) | Validate the values that come from a Fn::GetAZs function | Resolve the Fn::GetAZs and then validate the values against the schema | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-getavailabilityzones.html) | `functions`,`getazs` |
273275
| [W1040<a name="W1040"></a>](../src/cfnlint/rules/functions/ToJsonStringResolved.py) | Validate the values that come from a Fn::ToJsonString function | Resolve the Fn::ToJsonString and then validate the values against the schema | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ToJsonString.html) | `functions`,`tojsonstring` |
274276
| [W1051<a name="W1051"></a>](../src/cfnlint/rules/functions/DynamicReferenceSecretsManagerArn.py) | Validate dynamic references to secrets manager are not used when a secrets manager ARN was expected | Certain properties expect a secret manager ARN. This rule validates if you may be accidently using a secret in place of the ARN | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references.html#dynamic-references-secretsmanager) | `functions`,`dynamic reference` |
277+
| [W1100<a name="W1100"></a>](../src/cfnlint/rules/aws_cli/UsingMerge.py) | Validate if the template is using YAML merge | The CloudFormation service does not support YAML anchors, aliases, or merging. This rule validates if the merge capability is being used | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-formats.html) | `yaml` |
275278
| [W2001<a name="W2001"></a>](../src/cfnlint/rules/parameters/Used.py) | Check if Parameters are Used | Making sure the parameters defined are used | | [Source](https://github.com/aws-cloudformation/cfn-lint) | `parameters` |
276279
| [W2010<a name="W2010"></a>](../src/cfnlint/rules/parameters/NoEcho.py) | NoEcho parameters are not masked when used in Metadata and Outputs | Using the NoEcho attribute does not mask any information stored in the following: Metadata, Outputs, Resource Metadata | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/parameters-section-structure.html) | `functions`,`dynamic reference`,`ref` |
277280
| [W2030<a name="W2030"></a>](../src/cfnlint/rules/parameters/Enum.py) | Check if parameters have a valid value | Check if parameters have a valid value in case of an enumator. The Parameter's allowed values is based on the usages in property (Ref) | | [Source](https://github.com/aws-cloudformation/cfn-lint/blob/main/docs/cfn-schema-specification.md#enum) | `parameters`,`resources`,`property`,`allowed value` |

‎src/cfnlint/data/AdditionalSpecs/Policies.json

Lines changed: 38 additions & 96 deletions
Original file line numberDiff line numberDiff line change
@@ -5054,6 +5054,7 @@
50545054
"Resources": [
50555055
"api",
50565056
"channelNamespace",
5057+
"domain",
50575058
"graphqlapi"
50585059
]
50595060
},
@@ -5079,13 +5080,15 @@
50795080
"Resources": [
50805081
"api",
50815082
"channelNamespace",
5083+
"domain",
50825084
"graphqlapi"
50835085
]
50845086
},
50855087
"untagresource": {
50865088
"Resources": [
50875089
"api",
50885090
"channelNamespace",
5091+
"domain",
50895092
"graphqlapi"
50905093
]
50915094
},
@@ -5146,6 +5149,9 @@
51465149
"domain": {
51475150
"ARNFormats": [
51485151
"arn:${Partition}:appsync:${Region}:${Account}:domainnames/.*"
5152+
],
5153+
"ConditionKeys": [
5154+
"aws:ResourceTag/${TagKey}"
51495155
]
51505156
},
51515157
"field": {
@@ -11819,6 +11825,11 @@
1181911825
"privacybudgettemplate"
1182011826
]
1182111827
},
11828+
"getprotectedjob": {
11829+
"Resources": [
11830+
"membership"
11831+
]
11832+
},
1182211833
"getprotectedquery": {
1182311834
"Resources": [
1182411835
"membership"
@@ -11910,6 +11921,11 @@
1191011921
"privacybudgettemplate"
1191111922
]
1191211923
},
11924+
"listprotectedjobs": {
11925+
"Resources": [
11926+
"membership"
11927+
]
11928+
},
1191311929
"listprotectedqueries": {
1191411930
"Resources": [
1191511931
"membership"
@@ -11952,6 +11968,13 @@
1195211968
"membership"
1195311969
]
1195411970
},
11971+
"startprotectedjob": {
11972+
"Resources": [
11973+
"analysistemplate",
11974+
"configuredtableassociation",
11975+
"membership"
11976+
]
11977+
},
1195511978
"startprotectedquery": {
1195611979
"Resources": [
1195711980
"analysistemplate",
@@ -12043,6 +12066,11 @@
1204312066
"privacybudgettemplate"
1204412067
]
1204512068
},
12069+
"updateprotectedjob": {
12070+
"Resources": [
12071+
"membership"
12072+
]
12073+
},
1204612074
"updateprotectedquery": {
1204712075
"Resources": [
1204812076
"membership"
@@ -23231,100 +23259,6 @@
2323123259
}
2323223260
}
2323323261
},
23234-
"deeplens": {
23235-
"Actions": {
23236-
"associateserviceroletoaccount": {},
23237-
"batchgetdevice": {
23238-
"Resources": [
23239-
"device"
23240-
]
23241-
},
23242-
"batchgetmodel": {
23243-
"Resources": [
23244-
"model"
23245-
]
23246-
},
23247-
"batchgetproject": {
23248-
"Resources": [
23249-
"project"
23250-
]
23251-
},
23252-
"createdevicecertificates": {},
23253-
"createmodel": {},
23254-
"createproject": {},
23255-
"deletemodel": {
23256-
"Resources": [
23257-
"model"
23258-
]
23259-
},
23260-
"deleteproject": {
23261-
"Resources": [
23262-
"project"
23263-
]
23264-
},
23265-
"deployproject": {
23266-
"Resources": [
23267-
"device",
23268-
"project"
23269-
]
23270-
},
23271-
"deregisterdevice": {
23272-
"Resources": [
23273-
"device"
23274-
]
23275-
},
23276-
"getassociatedresources": {},
23277-
"getdeploymentstatus": {},
23278-
"getdevice": {
23279-
"Resources": [
23280-
"device"
23281-
]
23282-
},
23283-
"getmodel": {
23284-
"Resources": [
23285-
"model"
23286-
]
23287-
},
23288-
"getproject": {
23289-
"Resources": [
23290-
"project"
23291-
]
23292-
},
23293-
"importprojectfromtemplate": {},
23294-
"listdeployments": {},
23295-
"listdevices": {},
23296-
"listmodels": {},
23297-
"listprojects": {},
23298-
"registerdevice": {},
23299-
"removeproject": {
23300-
"Resources": [
23301-
"device"
23302-
]
23303-
},
23304-
"updateproject": {
23305-
"Resources": [
23306-
"project"
23307-
]
23308-
}
23309-
},
23310-
"Resources": {
23311-
"device": {
23312-
"ARNFormats": [
23313-
"arn:${Partition}:deeplens:${Region}:${Account}:device/.*"
23314-
]
23315-
},
23316-
"model": {
23317-
"ARNFormats": [
23318-
"arn:${Partition}:deeplens:${Region}:${Account}:model/.*"
23319-
]
23320-
},
23321-
"project": {
23322-
"ARNFormats": [
23323-
"arn:${Partition}:deeplens:${Region}:${Account}:project/.*"
23324-
]
23325-
}
23326-
}
23327-
},
2332823262
"deepracer": {
2332923263
"Actions": {
2333023264
"addleaderboardaccesspermission": {
@@ -51274,6 +51208,7 @@
5127451208
"listtransactions": {},
5127551209
"putdatalakesettings": {},
5127651210
"registerresource": {},
51211+
"registerresourcewithprivilegedaccess": {},
5127751212
"removelftagsfromresource": {},
5127851213
"revokepermissions": {},
5127951214
"searchdatabasesbylftags": {},
@@ -55559,6 +55494,7 @@
5555955494
]
5556055495
},
5556155496
"listversions": {},
55497+
"probe": {},
5556255498
"putpolicy": {},
5556355499
"searchjobs": {
5556455500
"Resources": [
@@ -62240,7 +62176,7 @@
6224062176
"site"
6224162177
]
6224262178
},
62243-
"deleteuser": {
62179+
"deleteuserv1": {
6224462180
"Resources": [
6224562181
"user"
6224662182
]
@@ -62280,7 +62216,7 @@
6228062216
"site"
6228162217
]
6228262218
},
62283-
"listusers": {},
62219+
"listusersv1": {},
6228462220
"rebootdevice": {
6228562221
"Resources": [
6228662222
"device-instance"
@@ -84400,11 +84336,17 @@
8440084336
"statemachinealias": {
8440184337
"ARNFormats": [
8440284338
"arn:${Partition}:states:${Region}:${Account}:stateMachine:.*"
84339+
],
84340+
"ConditionKeys": [
84341+
"aws:ResourceTag/${TagKey}"
8440384342
]
8440484343
},
8440584344
"statemachineversion": {
8440684345
"ARNFormats": [
8440784346
"arn:${Partition}:states:${Region}:${Account}:stateMachine:.*"
84347+
],
84348+
"ConditionKeys": [
84349+
"aws:ResourceTag/${TagKey}"
8440884350
]
8440984351
}
8441084352
}

‎src/cfnlint/data/DownloadsMetadata/123ba181485ae293d5bd09722af0c19d5a0d14c62111ff864923fc7b7960dda6.meta.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
{"etag": "\"d6ed9946d04fa71c710d766e65e8ce13\"", "url": "https://schema.cloudformation.eu-south-1.amazonaws.com/CloudformationSchema.zip"}
1+
{"etag": "\"8369a6788f36cdcd25ddedee2173db80\"", "url": "https://schema.cloudformation.eu-south-1.amazonaws.com/CloudformationSchema.zip"}

‎src/cfnlint/data/DownloadsMetadata/164e1bfc2823fbd49d8d0e7163ebf32b2b6653d7edfe98a64577daae0b481c38.meta.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
{"etag": "\"7f1d55170602983f97d39857e3665465\"", "url": "https://schema.cloudformation.cn-north-1.amazonaws.com.cn/CloudformationSchema.zip"}
1+
{"etag": "\"b46cb4effdf0d94dee73b28056afa6be\"", "url": "https://schema.cloudformation.cn-north-1.amazonaws.com.cn/CloudformationSchema.zip"}

‎src/cfnlint/data/DownloadsMetadata/18624fcc4a1c571691d10b2508e6be565e4752bbc10d9552de8df8f81348c42b.meta.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
{"etag": "\"6829527428f87bf4f76d89b9f9376d36\"", "url": "https://schema.cloudformation.us-gov-east-1.amazonaws.com/CloudformationSchema.zip"}
1+
{"etag": "\"7c580b19b6f61600b803c8da49ef32b1\"", "url": "https://schema.cloudformation.us-gov-east-1.amazonaws.com/CloudformationSchema.zip"}

‎src/cfnlint/data/DownloadsMetadata/227d6e59c86482f7153466759080e65963a1bf4413531ad420ff60a5a0d7965d.meta.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
{"etag": "\"e04c81b63098fe891aaf8b0c7c22c2c0\"", "url": "https://schema.cloudformation.me-south-1.amazonaws.com/CloudformationSchema.zip"}
1+
{"etag": "\"1a401d8d106978ea48c15231d2e64ec6\"", "url": "https://schema.cloudformation.me-south-1.amazonaws.com/CloudformationSchema.zip"}

‎src/cfnlint/data/DownloadsMetadata/23be708e675cb6098b08969e4dbbc3f54cfc32461d10e077e7e5de1fc25d8b8f.meta.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
{"etag": "\"14585ddf461cf92380196f5ebb9cca3a\"", "url": "https://schema.cloudformation.us-gov-west-1.amazonaws.com/CloudformationSchema.zip"}
1+
{"etag": "\"936c05d562537e7b2ae44030364e4f9b\"", "url": "https://schema.cloudformation.us-gov-west-1.amazonaws.com/CloudformationSchema.zip"}

‎src/cfnlint/data/DownloadsMetadata/26cf4521b683d3267844178a6bcd1d0ad3fe2e7838c23f6acd054944cb2b1618.meta.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
{"etag": "\"bedc0f2412d28142d91a4883cfceca0f\"", "url": "https://schema.cloudformation.me-central-1.amazonaws.com/CloudformationSchema.zip"}
1+
{"etag": "\"02c1dcbe79588af741d5e8fb87d105fa\"", "url": "https://schema.cloudformation.me-central-1.amazonaws.com/CloudformationSchema.zip"}

‎src/cfnlint/data/DownloadsMetadata/276cecfeb1ec5e608e2aaa06925a2da57e9907e4a512c10ddae70b98b4dada43.meta.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
{"etag": "\"a537a892b1d12609bed8f1b11862c4b6\"", "url": "https://schema.cloudformation.eu-west-2.amazonaws.com/CloudformationSchema.zip"}
1+
{"etag": "\"052f1ae824a949f88372f743868fceff\"", "url": "https://schema.cloudformation.eu-west-2.amazonaws.com/CloudformationSchema.zip"}

‎src/cfnlint/data/DownloadsMetadata/371e40c90b2e47c99f6e275e060ee83a3fbf0a0fb76625ba46dbe42abd34333c.meta.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
{"etag": "\"323bd0d72e19f2ea7bb4efa7423bf547\"", "url": "https://schema.cloudformation.cn-northwest-1.amazonaws.com.cn/CloudformationSchema.zip"}
1+
{"etag": "\"3f34aae2d4e7082b2fb983c02ce70de8\"", "url": "https://schema.cloudformation.cn-northwest-1.amazonaws.com.cn/CloudformationSchema.zip"}

0 commit comments

Comments
 (0)
0