AWS CloudFormation Properties Cheat Sheet

A cheat sheet that lists the properties for all available AWS CloudFormation resources types.


AWS CloudFormation Resource Type properties Cheat Sheet

This cheat sheet shows a single table overview of all available (900+) AWS resource types including their available properties. Bookmark this page so use you can use it to look up CloudFormation properties quickly.

To ease your life and help you be more productive, I've modified the resource type into a hyperlink. That means if you click on the resource type name e.g. AWS::Amplify::App, then you get redirected immediately to the official AWS CloudFormation documentation of that specific resource type.

If you like this AWS CloudFormation Attributes cheat sheet, then you might also like the CloudFormation Snippets VSCode extension that I published on the Visual Studio Code Marketplace.


Resource typeProperties
AWS::ACMPCA::CertificateApiPassthrough, CertificateAuthorityArn, CertificateSigningRequest, SigningAlgorithm, TemplateArn, Validity, ValidityNotBefore
AWS::ACMPCA::CertificateAuthorityCsrExtensions, KeyAlgorithm, KeyStorageSecurityStandard, RevocationConfiguration, SigningAlgorithm, Subject, Tags, Type
AWS::ACMPCA::CertificateAuthorityActivationCertificate, CertificateAuthorityArn, CertificateChain, Status
AWS::ACMPCA::PermissionActions, CertificateAuthorityArn, Principal, SourceAccount
AWS::APS::RuleGroupsNamespaceData, Name, Tags, Workspace
AWS::APS::WorkspaceAlertManagerDefinition, Alias, Tags
AWS::AccessAnalyzer::AnalyzerAnalyzerName, ArchiveRules, Tags, Type
AWS::AmazonMQ::BrokerAuthenticationStrategy, AutoMinorVersionUpgrade, BrokerName, Configuration, DeploymentMode, EncryptionOptions, EngineType, EngineVersion, HostInstanceType, LdapServerMetadata, Logs, MaintenanceWindowStartTime, PubliclyAccessible, SecurityGroups, StorageType, SubnetIds, Tags, Users
AWS::AmazonMQ::ConfigurationAuthenticationStrategy, Data, Description, EngineType, EngineVersion, Name, Tags
AWS::AmazonMQ::ConfigurationAssociationBroker, Configuration
AWS::Amplify::AppAccessToken, AutoBranchCreationConfig, BasicAuthConfig, BuildSpec, CustomHeaders, CustomRules, Description, EnableBranchAutoDeletion, EnvironmentVariables, IAMServiceRole, Name, OauthToken, Repository, Tags
AWS::Amplify::BranchAppId, BasicAuthConfig, BranchName, BuildSpec, Description, EnableAutoBuild, EnablePerformanceMode, EnablePullRequestPreview, EnvironmentVariables, PullRequestEnvironmentName, Stage, Tags
AWS::Amplify::DomainAppId, AutoSubDomainCreationPatterns, AutoSubDomainIAMRole, DomainName, EnableAutoSubDomain, SubDomainSettings
AWS::AmplifyUIBuilder::ComponentBindingProperties, Children, CollectionProperties, ComponentType, Events, Name, Overrides, Properties, SchemaVersion, SourceId, Tags, Variants
AWS::AmplifyUIBuilder::ThemeName, Overrides, Tags, Values
AWS::ApiGateway::AccountCloudWatchRoleArn
AWS::ApiGateway::ApiKeyCustomerId, Description, Enabled, GenerateDistinctId, Name, StageKeys, Tags, Value
AWS::ApiGateway::AuthorizerAuthType, AuthorizerCredentials, AuthorizerResultTtlInSeconds, AuthorizerUri, IdentitySource, IdentityValidationExpression, Name, ProviderARNs, RestApiId, Type
AWS::ApiGateway::BasePathMappingBasePath, DomainName, Id, RestApiId, Stage
AWS::ApiGateway::ClientCertificateDescription, Tags
AWS::ApiGateway::DeploymentDeploymentCanarySettings, Description, RestApiId, StageDescription, StageName
AWS::ApiGateway::DocumentationPartLocation, Properties, RestApiId
AWS::ApiGateway::DocumentationVersionDescription, DocumentationVersion, RestApiId
AWS::ApiGateway::DomainNameCertificateArn, DomainName, EndpointConfiguration, MutualTlsAuthentication, OwnershipVerificationCertificateArn, RegionalCertificateArn, SecurityPolicy, Tags
AWS::ApiGateway::GatewayResponseResponseParameters, ResponseTemplates, ResponseType, RestApiId, StatusCode
AWS::ApiGateway::MethodApiKeyRequired, AuthorizationScopes, AuthorizationType, AuthorizerId, HttpMethod, Integration, MethodResponses, OperationName, RequestModels, RequestParameters, RequestValidatorId, ResourceId, RestApiId
AWS::ApiGateway::ModelContentType, Description, Name, RestApiId, Schema
AWS::ApiGateway::RequestValidatorName, RestApiId, ValidateRequestBody, ValidateRequestParameters
AWS::ApiGateway::ResourceParentId, PathPart, RestApiId
AWS::ApiGateway::RestApiApiKeySourceType, BinaryMediaTypes, Body, BodyS3Location, CloneFrom, Description, DisableExecuteApiEndpoint, EndpointConfiguration, FailOnWarnings, MinimumCompressionSize, Mode, Name, Parameters, Policy, Tags
AWS::ApiGateway::StageAccessLogSetting, CacheClusterEnabled, CacheClusterSize, CanarySetting, ClientCertificateId, DeploymentId, Description, DocumentationVersion, MethodSettings, RestApiId, StageName, Tags, TracingEnabled, Variables
AWS::ApiGateway::UsagePlanApiStages, Description, Quota, Tags, Throttle, UsagePlanName
AWS::ApiGateway::UsagePlanKeyKeyId, KeyType, UsagePlanId
AWS::ApiGateway::VpcLinkDescription, Name, Tags, TargetArns
AWS::ApiGatewayV2::ApiApiKeySelectionExpression, BasePath, Body, BodyS3Location, CorsConfiguration, CredentialsArn, Description, DisableExecuteApiEndpoint, DisableSchemaValidation, FailOnWarnings, Name, ProtocolType, RouteKey, RouteSelectionExpression, Tags, Target, Version
AWS::ApiGatewayV2::ApiGatewayManagedOverridesApiId, Integration, Route, Stage
AWS::ApiGatewayV2::ApiMappingApiId, ApiMappingKey, DomainName, Stage
AWS::ApiGatewayV2::AuthorizerApiId, AuthorizerCredentialsArn, AuthorizerPayloadFormatVersion, AuthorizerResultTtlInSeconds, AuthorizerType, AuthorizerUri, EnableSimpleResponses, IdentitySource, IdentityValidationExpression, JwtConfiguration, Name
AWS::ApiGatewayV2::DeploymentApiId, Description, StageName
AWS::ApiGatewayV2::DomainNameDomainName, DomainNameConfigurations, MutualTlsAuthentication, Tags
AWS::ApiGatewayV2::IntegrationApiId, ConnectionId, ConnectionType, ContentHandlingStrategy, CredentialsArn, Description, IntegrationMethod, IntegrationSubtype, IntegrationType, IntegrationUri, PassthroughBehavior, PayloadFormatVersion, RequestParameters, RequestTemplates, ResponseParameters, TemplateSelectionExpression, TimeoutInMillis, TlsConfig
AWS::ApiGatewayV2::IntegrationResponseApiId, ContentHandlingStrategy, IntegrationId, IntegrationResponseKey, ResponseParameters, ResponseTemplates, TemplateSelectionExpression
AWS::ApiGatewayV2::ModelApiId, ContentType, Description, Name, Schema
AWS::ApiGatewayV2::RouteApiId, ApiKeyRequired, AuthorizationScopes, AuthorizationType, AuthorizerId, ModelSelectionExpression, OperationName, RequestModels, RequestParameters, RouteKey, RouteResponseSelectionExpression, Target
AWS::ApiGatewayV2::RouteResponseApiId, ModelSelectionExpression, ResponseModels, ResponseParameters, RouteId, RouteResponseKey
AWS::ApiGatewayV2::StageAccessLogSettings, AccessPolicyId, ApiId, AutoDeploy, ClientCertificateId, DefaultRouteSettings, DeploymentId, Description, RouteSettings, StageName, StageVariables, Tags
AWS::ApiGatewayV2::VpcLinkName, SecurityGroupIds, SubnetIds, Tags
AWS::AppConfig::ApplicationDescription, Name, Tags
AWS::AppConfig::ConfigurationProfileApplicationId, Description, LocationUri, Name, RetrievalRoleArn, Tags, Type, Validators
AWS::AppConfig::DeploymentApplicationId, ConfigurationProfileId, ConfigurationVersion, DeploymentStrategyId, Description, EnvironmentId, Tags
AWS::AppConfig::DeploymentStrategyDeploymentDurationInMinutes, Description, FinalBakeTimeInMinutes, GrowthFactor, GrowthType, Name, ReplicateTo, Tags
AWS::AppConfig::EnvironmentApplicationId, Description, Monitors, Name, Tags
AWS::AppConfig::HostedConfigurationVersionApplicationId, ConfigurationProfileId, Content, ContentType, Description, LatestVersionNumber
AWS::AppFlow::ConnectorProfileConnectionMode, ConnectorProfileConfig, ConnectorProfileName, ConnectorType, KMSArn
AWS::AppFlow::FlowDescription, DestinationFlowConfigList, FlowName, KMSArn, SourceFlowConfig, Tags, Tasks, TriggerConfig
AWS::AppIntegrations::DataIntegrationDescription, KmsKey, Name, ScheduleConfig, SourceURI, Tags
AWS::AppIntegrations::EventIntegrationDescription, EventBridgeBus, EventFilter, Name, Tags
AWS::AppMesh::GatewayRouteGatewayRouteName, MeshName, MeshOwner, Spec, Tags, VirtualGatewayName
AWS::AppMesh::MeshMeshName, Spec, Tags
AWS::AppMesh::RouteMeshName, MeshOwner, RouteName, Spec, Tags, VirtualRouterName
AWS::AppMesh::VirtualGatewayMeshName, MeshOwner, Spec, Tags, VirtualGatewayName
AWS::AppMesh::VirtualNodeMeshName, MeshOwner, Spec, Tags, VirtualNodeName
AWS::AppMesh::VirtualRouterMeshName, MeshOwner, Spec, Tags, VirtualRouterName
AWS::AppMesh::VirtualServiceMeshName, MeshOwner, Spec, Tags, VirtualServiceName
AWS::AppRunner::ObservabilityConfigurationObservabilityConfigurationName, Tags, TraceConfiguration
AWS::AppRunner::ServiceAutoScalingConfigurationArn, EncryptionConfiguration, HealthCheckConfiguration, InstanceConfiguration, NetworkConfiguration, ObservabilityConfiguration, ServiceName, SourceConfiguration, Tags
AWS::AppRunner::VpcConnectorSecurityGroups, Subnets, Tags, VpcConnectorName
AWS::AppStream::AppBlockDescription, DisplayName, Name, SetupScriptDetails, SourceS3Location, Tags
AWS::AppStream::ApplicationAppBlockArn, AttributesToDelete, Description, DisplayName, IconS3Location, InstanceFamilies, LaunchParameters, LaunchPath, Name, Platforms, Tags, WorkingDirectory
AWS::AppStream::ApplicationEntitlementAssociationApplicationIdentifier, EntitlementName, StackName
AWS::AppStream::ApplicationFleetAssociationApplicationArn, FleetName
AWS::AppStream::DirectoryConfigDirectoryName, OrganizationalUnitDistinguishedNames, ServiceAccountCredentials
AWS::AppStream::EntitlementAppVisibility, Attributes, Description, Name, StackName
AWS::AppStream::FleetComputeCapacity, Description, DisconnectTimeoutInSeconds, DisplayName, DomainJoinInfo, EnableDefaultInternetAccess, FleetType, IamRoleArn, IdleDisconnectTimeoutInSeconds, ImageArn, ImageName, InstanceType, MaxConcurrentSessions, MaxUserDurationInSeconds, Name, Platform, SessionScriptS3Location, StreamView, Tags, UsbDeviceFilterStrings, VpcConfig
AWS::AppStream::ImageBuilderAccessEndpoints, AppstreamAgentVersion, Description, DisplayName, DomainJoinInfo, EnableDefaultInternetAccess, IamRoleArn, ImageArn, ImageName, InstanceType, Name, Tags, VpcConfig
AWS::AppStream::StackAccessEndpoints, ApplicationSettings, AttributesToDelete, DeleteStorageConnectors, Description, DisplayName, EmbedHostDomains, FeedbackURL, Name, RedirectURL, StorageConnectors, Tags, UserSettings
AWS::AppStream::StackFleetAssociationFleetName, StackName
AWS::AppStream::StackUserAssociationAuthenticationType, SendEmailNotification, StackName, UserName
AWS::AppStream::UserAuthenticationType, FirstName, LastName, MessageAction, UserName
AWS::AppSync::ApiCacheApiCachingBehavior, ApiId, AtRestEncryptionEnabled, TransitEncryptionEnabled, Ttl, Type
AWS::AppSync::ApiKeyApiId, ApiKeyId, Description, Expires
AWS::AppSync::DataSourceApiId, Description, DynamoDBConfig, ElasticsearchConfig, HttpConfig, LambdaConfig, Name, OpenSearchServiceConfig, RelationalDatabaseConfig, ServiceRoleArn, Type
AWS::AppSync::DomainNameCertificateArn, Description, DomainName
AWS::AppSync::DomainNameApiAssociationApiId, DomainName
AWS::AppSync::FunctionConfigurationApiId, DataSourceName, Description, FunctionVersion, MaxBatchSize, Name, RequestMappingTemplate, RequestMappingTemplateS3Location, ResponseMappingTemplate, ResponseMappingTemplateS3Location, SyncConfig
AWS::AppSync::GraphQLApiAdditionalAuthenticationProviders, AuthenticationType, LambdaAuthorizerConfig, LogConfig, Name, OpenIDConnectConfig, Tags, UserPoolConfig, XrayEnabled
AWS::AppSync::GraphQLSchemaApiId, Definition, DefinitionS3Location
AWS::AppSync::ResolverApiId, CachingConfig, DataSourceName, FieldName, Kind, MaxBatchSize, PipelineConfig, RequestMappingTemplate, RequestMappingTemplateS3Location, ResponseMappingTemplate, ResponseMappingTemplateS3Location, SyncConfig, TypeName
AWS::ApplicationAutoScaling::ScalableTargetMaxCapacity, MinCapacity, ResourceId, RoleARN, ScalableDimension, ScheduledActions, ServiceNamespace, SuspendedState
AWS::ApplicationAutoScaling::ScalingPolicyPolicyName, PolicyType, ResourceId, ScalableDimension, ScalingTargetId, ServiceNamespace, StepScalingPolicyConfiguration, TargetTrackingScalingPolicyConfiguration
AWS::ApplicationInsights::ApplicationAutoConfigurationEnabled, CWEMonitorEnabled, ComponentMonitoringSettings, CustomComponents, LogPatternSets, OpsCenterEnabled, OpsItemSNSTopicArn, ResourceGroupName, Tags
AWS::Athena::DataCatalogDescription, Name, Parameters, Tags, Type
AWS::Athena::NamedQueryDatabase, Description, Name, QueryString, WorkGroup
AWS::Athena::PreparedStatementDescription, QueryStatement, StatementName, WorkGroup
AWS::Athena::WorkGroupDescription, Name, RecursiveDeleteOption, State, Tags, WorkGroupConfiguration
AWS::AuditManager::AssessmentAssessmentReportsDestination, AwsAccount, Description, FrameworkId, Name, Roles, Scope, Status, Tags
AWS::AutoScaling::AutoScalingGroupAutoScalingGroupName, AvailabilityZones, CapacityRebalance, Context, Cooldown, DesiredCapacity, DesiredCapacityType, HealthCheckGracePeriod, HealthCheckType, InstanceId, LaunchConfigurationName, LaunchTemplate, LifecycleHookSpecificationList, LoadBalancerNames, MaxInstanceLifetime, MaxSize, MetricsCollection, MinSize, MixedInstancesPolicy, NewInstancesProtectedFromScaleIn, NotificationConfigurations, PlacementGroup, ServiceLinkedRoleARN, Tags, TargetGroupARNs, TerminationPolicies, VPCZoneIdentifier
AWS::AutoScaling::LaunchConfigurationAssociatePublicIpAddress, BlockDeviceMappings, ClassicLinkVPCId, ClassicLinkVPCSecurityGroups, EbsOptimized, IamInstanceProfile, ImageId, InstanceId, InstanceMonitoring, InstanceType, KernelId, KeyName, LaunchConfigurationName, MetadataOptions, PlacementTenancy, RamDiskId, SecurityGroups, SpotPrice, UserData
AWS::AutoScaling::LifecycleHookAutoScalingGroupName, DefaultResult, HeartbeatTimeout, LifecycleHookName, LifecycleTransition, NotificationMetadata, NotificationTargetARN, RoleARN
AWS::AutoScaling::ScalingPolicyAdjustmentType, AutoScalingGroupName, Cooldown, EstimatedInstanceWarmup, MetricAggregationType, MinAdjustmentMagnitude, PolicyType, PredictiveScalingConfiguration, ScalingAdjustment, StepAdjustments, TargetTrackingConfiguration
AWS::AutoScaling::ScheduledActionAutoScalingGroupName, DesiredCapacity, EndTime, MaxSize, MinSize, Recurrence, StartTime, TimeZone
AWS::AutoScaling::WarmPoolAutoScalingGroupName, InstanceReusePolicy, MaxGroupPreparedCapacity, MinSize, PoolState
AWS::AutoScalingPlans::ScalingPlanApplicationSource, ScalingInstructions
AWS::Backup::BackupPlanBackupPlan, BackupPlanTags
AWS::Backup::BackupSelectionBackupPlanId, BackupSelection
AWS::Backup::BackupVaultAccessPolicy, BackupVaultName, BackupVaultTags, EncryptionKeyArn, LockConfiguration, Notifications
AWS::Backup::FrameworkFrameworkControls, FrameworkDescription, FrameworkName, FrameworkTags
AWS::Backup::ReportPlanReportDeliveryChannel, ReportPlanDescription, ReportPlanName, ReportPlanTags, ReportSetting
AWS::Batch::ComputeEnvironmentComputeEnvironmentName, ComputeResources, ReplaceComputeEnvironment, ServiceRole, State, Tags, Type, UnmanagedvCpus, UpdatePolicy
AWS::Batch::JobDefinitionContainerProperties, JobDefinitionName, NodeProperties, Parameters, PlatformCapabilities, PropagateTags, RetryStrategy, SchedulingPriority, Tags, Timeout, Type
AWS::Batch::JobQueueComputeEnvironmentOrder, JobQueueName, Priority, SchedulingPolicyArn, State, Tags
AWS::Batch::SchedulingPolicyFairsharePolicy, Name, Tags
AWS::BillingConductor::BillingGroupAccountGrouping, ComputationPreference, Description, Name, PrimaryAccountId, Tags
AWS::BillingConductor::CustomLineItemBillingGroupArn, BillingPeriodRange, CustomLineItemChargeDetails, Description, Name, Tags
AWS::BillingConductor::PricingPlanDescription, Name, PricingRuleArns, Tags
AWS::BillingConductor::PricingRuleDescription, ModifierPercentage, Name, Scope, Service, Tags, Type
AWS::Budgets::BudgetBudget, NotificationsWithSubscribers
AWS::Budgets::BudgetsActionActionThreshold, ActionType, ApprovalModel, BudgetName, Definition, ExecutionRoleArn, NotificationType, Subscribers
AWS::CE::AnomalyMonitorMonitorDimension, MonitorName, MonitorSpecification, MonitorType, ResourceTags
AWS::CE::AnomalySubscriptionFrequency, MonitorArnList, ResourceTags, Subscribers, SubscriptionName, Threshold
AWS::CE::CostCategoryDefaultValue, Name, RuleVersion, Rules, SplitChargeRules
AWS::CUR::ReportDefinitionAdditionalArtifacts, AdditionalSchemaElements, BillingViewArn, Compression, Format, RefreshClosedReports, ReportName, ReportVersioning, S3Bucket, S3Prefix, S3Region, TimeUnit
AWS::Cassandra::KeyspaceKeyspaceName, Tags
AWS::Cassandra::TableBillingMode, ClusteringKeyColumns, DefaultTimeToLive, EncryptionSpecification, KeyspaceName, PartitionKeyColumns, PointInTimeRecoveryEnabled, RegularColumns, TableName, Tags
AWS::CertificateManager::AccountExpiryEventsConfiguration
AWS::CertificateManager::CertificateCertificateAuthorityArn, CertificateTransparencyLoggingPreference, DomainName, DomainValidationOptions, SubjectAlternativeNames, Tags, ValidationMethod
AWS::Chatbot::SlackChannelConfigurationConfigurationName, GuardrailPolicies, IamRoleArn, LoggingLevel, SlackChannelId, SlackWorkspaceId, SnsTopicArns, UserRoleRequired
AWS::Cloud9::EnvironmentEC2AutomaticStopTimeMinutes, ConnectionType, Description, ImageId, InstanceType, Name, OwnerArn, Repositories, SubnetId, Tags
AWS::CloudFormation::CustomResourceServiceToken
AWS::CloudFormation::HookDefaultVersionTypeName, TypeVersionArn, VersionId
AWS::CloudFormation::HookTypeConfigConfiguration, ConfigurationAlias, TypeArn, TypeName
AWS::CloudFormation::HookVersionExecutionRoleArn, LoggingConfig, SchemaHandlerPackage, TypeName
AWS::CloudFormation::MacroDescription, FunctionName, LogGroupName, LogRoleARN, Name
AWS::CloudFormation::ModuleDefaultVersionArn, ModuleName, VersionId
AWS::CloudFormation::ModuleVersionModuleName, ModulePackage
AWS::CloudFormation::PublicTypeVersionArn, LogDeliveryBucket, PublicVersionNumber, Type, TypeName
AWS::CloudFormation::PublisherAcceptTermsAndConditions, ConnectionArn
AWS::CloudFormation::ResourceDefaultVersionTypeName, TypeVersionArn, VersionId
AWS::CloudFormation::ResourceVersionExecutionRoleArn, LoggingConfig, SchemaHandlerPackage, TypeName
AWS::CloudFormation::StackNotificationARNs, Parameters, Tags, TemplateURL, TimeoutInMinutes
AWS::CloudFormation::StackSetAdministrationRoleARN, AutoDeployment, CallAs, Capabilities, Description, ExecutionRoleName, ManagedExecution, OperationPreferences, Parameters, PermissionModel, StackInstancesGroup, StackSetName, Tags, TemplateBody, TemplateURL
AWS::CloudFormation::TypeActivationAutoUpdate, ExecutionRoleArn, LoggingConfig, MajorVersion, PublicTypeArn, PublisherId, Type, TypeName, TypeNameAlias, VersionBump
AWS::CloudFormation::WaitConditionCount, Handle, Timeout
AWS::CloudFormation::WaitConditionHandle
AWS::CloudFront::CachePolicyCachePolicyConfig
AWS::CloudFront::CloudFrontOriginAccessIdentityCloudFrontOriginAccessIdentityConfig
AWS::CloudFront::DistributionDistributionConfig, Tags
AWS::CloudFront::FunctionAutoPublish, FunctionCode, FunctionConfig, Name
AWS::CloudFront::KeyGroupKeyGroupConfig
AWS::CloudFront::OriginRequestPolicyOriginRequestPolicyConfig
AWS::CloudFront::PublicKeyPublicKeyConfig
AWS::CloudFront::RealtimeLogConfigEndPoints, Fields, Name, SamplingRate
AWS::CloudFront::ResponseHeadersPolicyResponseHeadersPolicyConfig
AWS::CloudFront::StreamingDistributionStreamingDistributionConfig, Tags
AWS::CloudTrail::TrailCloudWatchLogsLogGroupArn, CloudWatchLogsRoleArn, EnableLogFileValidation, EventSelectors, IncludeGlobalServiceEvents, InsightSelectors, IsLogging, IsMultiRegionTrail, IsOrganizationTrail, KMSKeyId, S3BucketName, S3KeyPrefix, SnsTopicName, Tags, TrailName
AWS::CloudWatch::AlarmActionsEnabled, AlarmActions, AlarmDescription, AlarmName, ComparisonOperator, DatapointsToAlarm, Dimensions, EvaluateLowSampleCountPercentile, EvaluationPeriods, ExtendedStatistic, InsufficientDataActions, MetricName, Metrics, Namespace, OKActions, Period, Statistic, Threshold, ThresholdMetricId, TreatMissingData, Unit
AWS::CloudWatch::AnomalyDetectorConfiguration, Dimensions, MetricMathAnomalyDetector, MetricName, Namespace, SingleMetricAnomalyDetector, Stat
AWS::CloudWatch::CompositeAlarmActionsEnabled, AlarmActions, AlarmDescription, AlarmName, AlarmRule, InsufficientDataActions, OKActions
AWS::CloudWatch::DashboardDashboardBody, DashboardName
AWS::CloudWatch::InsightRuleRuleBody, RuleName, RuleState, Tags
AWS::CloudWatch::MetricStreamExcludeFilters, FirehoseArn, IncludeFilters, Name, OutputFormat, RoleArn, StatisticsConfigurations, Tags
AWS::CodeArtifact::DomainDomainName, EncryptionKey, PermissionsPolicyDocument, Tags
AWS::CodeArtifact::RepositoryDescription, DomainName, DomainOwner, ExternalConnections, PermissionsPolicyDocument, RepositoryName, Tags, Upstreams
AWS::CodeBuild::ProjectArtifacts, BadgeEnabled, BuildBatchConfig, Cache, ConcurrentBuildLimit, Description, EncryptionKey, Environment, FileSystemLocations, LogsConfig, Name, QueuedTimeoutInMinutes, ResourceAccessRole, SecondaryArtifacts, SecondarySourceVersions, SecondarySources, ServiceRole, Source, SourceVersion, Tags, TimeoutInMinutes, Triggers, Visibility, VpcConfig
AWS::CodeBuild::ReportGroupDeleteReports, ExportConfig, Name, Tags, Type
AWS::CodeBuild::SourceCredentialAuthType, ServerType, Token, Username
AWS::CodeCommit::RepositoryCode, RepositoryDescription, RepositoryName, Tags, Triggers
AWS::CodeDeploy::ApplicationApplicationName, ComputePlatform, Tags
AWS::CodeDeploy::DeploymentConfigComputePlatform, DeploymentConfigName, MinimumHealthyHosts, TrafficRoutingConfig
AWS::CodeDeploy::DeploymentGroupAlarmConfiguration, ApplicationName, AutoRollbackConfiguration, AutoScalingGroups, BlueGreenDeploymentConfiguration, Deployment, DeploymentConfigName, DeploymentGroupName, DeploymentStyle, ECSServices, Ec2TagFilters, Ec2TagSet, LoadBalancerInfo, OnPremisesInstanceTagFilters, OnPremisesTagSet, OutdatedInstancesStrategy, ServiceRoleArn, Tags, TriggerConfigurations
AWS::CodeGuruProfiler::ProfilingGroupAgentPermissions, AnomalyDetectionNotificationConfiguration, ComputePlatform, ProfilingGroupName, Tags
AWS::CodeGuruReviewer::RepositoryAssociationBucketName, ConnectionArn, Name, Owner, Tags, Type
AWS::CodePipeline::CustomActionTypeCategory, ConfigurationProperties, InputArtifactDetails, OutputArtifactDetails, Provider, Settings, Tags, Version
AWS::CodePipeline::PipelineArtifactStore, ArtifactStores, DisableInboundStageTransitions, Name, RestartExecutionOnUpdate, RoleArn, Stages, Tags
AWS::CodePipeline::WebhookAuthentication, AuthenticationConfiguration, Filters, Name, RegisterWithThirdParty, TargetAction, TargetPipeline, TargetPipelineVersion
AWS::CodeStar::GitHubRepositoryCode, ConnectionArn, EnableIssues, IsPrivate, RepositoryAccessToken, RepositoryDescription, RepositoryName, RepositoryOwner
AWS::CodeStarConnections::ConnectionConnectionName, HostArn, ProviderType, Tags
AWS::CodeStarNotifications::NotificationRuleCreatedBy, DetailType, EventTypeId, EventTypeIds, Name, Resource, Status, Tags, TargetAddress, Targets
AWS::Cognito::IdentityPoolAllowClassicFlow, AllowUnauthenticatedIdentities, CognitoEvents, CognitoIdentityProviders, CognitoStreams, DeveloperProviderName, IdentityPoolName, OpenIdConnectProviderARNs, PushSync, SamlProviderARNs, SupportedLoginProviders
AWS::Cognito::IdentityPoolRoleAttachmentIdentityPoolId, RoleMappings, Roles
AWS::Cognito::UserPoolAccountRecoverySetting, AdminCreateUserConfig, AliasAttributes, AutoVerifiedAttributes, DeviceConfiguration, EmailConfiguration, EmailVerificationMessage, EmailVerificationSubject, EnabledMfas, LambdaConfig, MfaConfiguration, Policies, Schema, SmsAuthenticationMessage, SmsConfiguration, SmsVerificationMessage, UserPoolAddOns, UserPoolName, UserPoolTags, UsernameAttributes, UsernameConfiguration, VerificationMessageTemplate
AWS::Cognito::UserPoolClientAccessTokenValidity, AllowedOAuthFlows, AllowedOAuthFlowsUserPoolClient, AllowedOAuthScopes, AnalyticsConfiguration, CallbackURLs, ClientName, DefaultRedirectURI, EnableTokenRevocation, ExplicitAuthFlows, GenerateSecret, IdTokenValidity, LogoutURLs, PreventUserExistenceErrors, ReadAttributes, RefreshTokenValidity, SupportedIdentityProviders, TokenValidityUnits, UserPoolId, WriteAttributes
AWS::Cognito::UserPoolDomainCustomDomainConfig, Domain, UserPoolId
AWS::Cognito::UserPoolGroupDescription, GroupName, Precedence, RoleArn, UserPoolId
AWS::Cognito::UserPoolIdentityProviderAttributeMapping, IdpIdentifiers, ProviderDetails, ProviderName, ProviderType, UserPoolId
AWS::Cognito::UserPoolResourceServerIdentifier, Name, Scopes, UserPoolId
AWS::Cognito::UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfiguration, ClientId, CompromisedCredentialsRiskConfiguration, RiskExceptionConfiguration, UserPoolId
AWS::Cognito::UserPoolUICustomizationAttachmentCSS, ClientId, UserPoolId
AWS::Cognito::UserPoolUserClientMetadata, DesiredDeliveryMediums, ForceAliasCreation, MessageAction, UserAttributes, UserPoolId, Username, ValidationData
AWS::Cognito::UserPoolUserToGroupAttachmentGroupName, UserPoolId, Username
AWS::Config::AggregationAuthorizationAuthorizedAccountId, AuthorizedAwsRegion, Tags
AWS::Config::ConfigRuleConfigRuleName, Description, InputParameters, MaximumExecutionFrequency, Scope, Source
AWS::Config::ConfigurationAggregatorAccountAggregationSources, ConfigurationAggregatorName, OrganizationAggregationSource, Tags
AWS::Config::ConfigurationRecorderName, RecordingGroup, RoleARN
AWS::Config::ConformancePackConformancePackInputParameters, ConformancePackName, DeliveryS3Bucket, DeliveryS3KeyPrefix, TemplateBody, TemplateS3Uri
AWS::Config::DeliveryChannelConfigSnapshotDeliveryProperties, Name, S3BucketName, S3KeyPrefix, S3KmsKeyArn, SnsTopicARN
AWS::Config::OrganizationConfigRuleExcludedAccounts, OrganizationConfigRuleName, OrganizationCustomCodeRuleMetadata, OrganizationCustomRuleMetadata, OrganizationManagedRuleMetadata
AWS::Config::OrganizationConformancePackConformancePackInputParameters, DeliveryS3Bucket, DeliveryS3KeyPrefix, ExcludedAccounts, OrganizationConformancePackName, TemplateBody, TemplateS3Uri
AWS::Config::RemediationConfigurationAutomatic, ConfigRuleName, ExecutionControls, MaximumAutomaticAttempts, Parameters, ResourceType, RetryAttemptSeconds, TargetId, TargetType, TargetVersion
AWS::Config::StoredQueryQueryDescription, QueryExpression, QueryName, Tags
AWS::Connect::ContactFlowContent, Description, InstanceArn, Name, State, Tags, Type
AWS::Connect::ContactFlowModuleContent, Description, InstanceArn, Name, State, Tags
AWS::Connect::HoursOfOperationConfig, Description, InstanceArn, Name, Tags, TimeZone
AWS::Connect::PhoneNumberCountryCode, Description, Prefix, Tags, TargetArn, Type
AWS::Connect::QuickConnectDescription, InstanceArn, Name, QuickConnectConfig, Tags
AWS::Connect::UserDirectoryUserId, HierarchyGroupArn, IdentityInfo, InstanceArn, Password, PhoneConfig, RoutingProfileArn, SecurityProfileArns, Tags, Username
AWS::Connect::UserHierarchyGroupInstanceArn, Name, ParentGroupArn
AWS::CustomerProfiles::DomainDeadLetterQueueUrl, DefaultEncryptionKey, DefaultExpirationDays, DomainName, Tags
AWS::CustomerProfiles::IntegrationDomainName, FlowDefinition, ObjectTypeName, ObjectTypeNames, Tags, Uri
AWS::CustomerProfiles::ObjectTypeAllowProfileCreation, Description, DomainName, EncryptionKey, ExpirationDays, Fields, Keys, ObjectTypeName, Tags, TemplateId
AWS::DAX::ClusterAvailabilityZones, ClusterEndpointEncryptionType, ClusterName, Description, IAMRoleARN, NodeType, NotificationTopicARN, ParameterGroupName, PreferredMaintenanceWindow, ReplicationFactor, SSESpecification, SecurityGroupIds, SubnetGroupName, Tags
AWS::DAX::ParameterGroupDescription, ParameterGroupName, ParameterNameValues
AWS::DAX::SubnetGroupDescription, SubnetGroupName, SubnetIds
AWS::DLM::LifecyclePolicyDescription, ExecutionRoleArn, PolicyDetails, State, Tags
AWS::DMS::CertificateCertificateIdentifier, CertificatePem, CertificateWallet
AWS::DMS::EndpointCertificateArn, DatabaseName, DocDbSettings, DynamoDbSettings, ElasticsearchSettings, EndpointIdentifier, EndpointType, EngineName, ExtraConnectionAttributes, GcpMySQLSettings, IbmDb2Settings, KafkaSettings, KinesisSettings, KmsKeyId, MicrosoftSqlServerSettings, MongoDbSettings, MySqlSettings, NeptuneSettings, OracleSettings, Password, Port, PostgreSqlSettings, RedisSettings, RedshiftSettings, ResourceIdentifier, S3Settings, ServerName, SslMode, SybaseSettings, Tags, Username
AWS::DMS::EventSubscriptionEnabled, EventCategories, SnsTopicArn, SourceIds, SourceType, SubscriptionName, Tags
AWS::DMS::ReplicationInstanceAllocatedStorage, AllowMajorVersionUpgrade, AutoMinorVersionUpgrade, AvailabilityZone, EngineVersion, KmsKeyId, MultiAZ, PreferredMaintenanceWindow, PubliclyAccessible, ReplicationInstanceClass, ReplicationInstanceIdentifier, ReplicationSubnetGroupIdentifier, ResourceIdentifier, Tags, VpcSecurityGroupIds
AWS::DMS::ReplicationSubnetGroupReplicationSubnetGroupDescription, ReplicationSubnetGroupIdentifier, SubnetIds, Tags
AWS::DMS::ReplicationTaskCdcStartPosition, CdcStartTime, CdcStopPosition, MigrationType, ReplicationInstanceArn, ReplicationTaskIdentifier, ReplicationTaskSettings, ResourceIdentifier, SourceEndpointArn, TableMappings, Tags, TargetEndpointArn, TaskData
AWS::DataBrew::DatasetFormat, FormatOptions, Input, Name, PathOptions, Tags
AWS::DataBrew::JobDataCatalogOutputs, DatabaseOutputs, DatasetName, EncryptionKeyArn, EncryptionMode, JobSample, LogSubscription, MaxCapacity, MaxRetries, Name, OutputLocation, Outputs, ProfileConfiguration, ProjectName, Recipe, RoleArn, Tags, Timeout, Type, ValidationConfigurations
AWS::DataBrew::ProjectDatasetName, Name, RecipeName, RoleArn, Sample, Tags
AWS::DataBrew::RecipeDescription, Name, Steps, Tags
AWS::DataBrew::RulesetDescription, Name, Rules, Tags, TargetArn
AWS::DataBrew::ScheduleCronExpression, JobNames, Name, Tags
AWS::DataPipeline::PipelineActivate, Description, Name, ParameterObjects, ParameterValues, PipelineObjects, PipelineTags
AWS::DataSync::AgentActivationKey, AgentName, SecurityGroupArns, SubnetArns, Tags, VpcEndpointId
AWS::DataSync::LocationEFSEc2Config, EfsFilesystemArn, Subdirectory, Tags
AWS::DataSync::LocationFSxLustreFsxFilesystemArn, SecurityGroupArns, Subdirectory, Tags
AWS::DataSync::LocationFSxOpenZFSFsxFilesystemArn, Protocol, SecurityGroupArns, Subdirectory, Tags
AWS::DataSync::LocationFSxWindowsDomain, FsxFilesystemArn, Password, SecurityGroupArns, Subdirectory, Tags, User
AWS::DataSync::LocationHDFSAgentArns, AuthenticationType, BlockSize, KerberosKeytab, KerberosKrb5Conf, KerberosPrincipal, KmsKeyProviderUri, NameNodes, QopConfiguration, ReplicationFactor, SimpleUser, Subdirectory, Tags
AWS::DataSync::LocationNFSMountOptions, OnPremConfig, ServerHostname, Subdirectory, Tags
AWS::DataSync::LocationObjectStorageAccessKey, AgentArns, BucketName, SecretKey, ServerHostname, ServerPort, ServerProtocol, Subdirectory, Tags
AWS::DataSync::LocationS3S3BucketArn, S3Config, S3StorageClass, Subdirectory, Tags
AWS::DataSync::LocationSMBAgentArns, Domain, MountOptions, Password, ServerHostname, Subdirectory, Tags, User
AWS::DataSync::TaskCloudWatchLogGroupArn, DestinationLocationArn, Excludes, Includes, Name, Options, Schedule, SourceLocationArn, Tags
AWS::Detective::GraphTags
AWS::Detective::MemberInvitationDisableEmailNotification, GraphArn, MemberEmailAddress, MemberId, Message
AWS::DevOpsGuru::NotificationChannelConfig
AWS::DevOpsGuru::ResourceCollectionResourceCollectionFilter
AWS::DirectoryService::MicrosoftADCreateAlias, Edition, EnableSso, Name, Password, ShortName, VpcSettings
AWS::DirectoryService::SimpleADCreateAlias, Description, EnableSso, Name, Password, ShortName, Size, VpcSettings
AWS::DocDB::DBClusterAvailabilityZones, BackupRetentionPeriod, CopyTagsToSnapshot, DBClusterIdentifier, DBClusterParameterGroupName, DBSubnetGroupName, DeletionProtection, EnableCloudwatchLogsExports, EngineVersion, KmsKeyId, MasterUserPassword, MasterUsername, Port, PreferredBackupWindow, PreferredMaintenanceWindow, SnapshotIdentifier, StorageEncrypted, Tags, VpcSecurityGroupIds
AWS::DocDB::DBClusterParameterGroupDescription, Family, Name, Parameters, Tags
AWS::DocDB::DBInstanceAutoMinorVersionUpgrade, AvailabilityZone, DBClusterIdentifier, DBInstanceClass, DBInstanceIdentifier, EnablePerformanceInsights, PreferredMaintenanceWindow, Tags
AWS::DocDB::DBSubnetGroupDBSubnetGroupDescription, DBSubnetGroupName, SubnetIds, Tags
AWS::DynamoDB::GlobalTableAttributeDefinitions, BillingMode, GlobalSecondaryIndexes, KeySchema, LocalSecondaryIndexes, Replicas, SSESpecification, StreamSpecification, TableName, TimeToLiveSpecification, WriteProvisionedThroughputSettings
AWS::DynamoDB::TableAttributeDefinitions, BillingMode, ContributorInsightsSpecification, GlobalSecondaryIndexes, KeySchema, KinesisStreamSpecification, LocalSecondaryIndexes, PointInTimeRecoverySpecification, ProvisionedThroughput, SSESpecification, StreamSpecification, TableClass, TableName, Tags, TimeToLiveSpecification
AWS::EC2::CapacityReservationAvailabilityZone, EbsOptimized, EndDate, EndDateType, EphemeralStorage, InstanceCount, InstanceMatchCriteria, InstancePlatform, InstanceType, OutPostArn, PlacementGroupArn, TagSpecifications, Tenancy
AWS::EC2::CapacityReservationFleetAllocationStrategy, EndDate, InstanceMatchCriteria, InstanceTypeSpecifications, NoRemoveEndDate, RemoveEndDate, TagSpecifications, Tenancy, TotalTargetCapacity
AWS::EC2::CarrierGatewayTags, VpcId
AWS::EC2::ClientVpnAuthorizationRuleAccessGroupId, AuthorizeAllGroups, ClientVpnEndpointId, Description, TargetNetworkCidr
AWS::EC2::ClientVpnEndpointAuthenticationOptions, ClientCidrBlock, ClientConnectOptions, ClientLoginBannerOptions, ConnectionLogOptions, Description, DnsServers, SecurityGroupIds, SelfServicePortal, ServerCertificateArn, SessionTimeoutHours, SplitTunnel, TagSpecifications, TransportProtocol, VpcId, VpnPort
AWS::EC2::ClientVpnRouteClientVpnEndpointId, Description, DestinationCidrBlock, TargetVpcSubnetId
AWS::EC2::ClientVpnTargetNetworkAssociationClientVpnEndpointId, SubnetId
AWS::EC2::CustomerGatewayBgpAsn, IpAddress, Tags, Type
AWS::EC2::DHCPOptionsDomainName, DomainNameServers, NetbiosNameServers, NetbiosNodeType, NtpServers, Tags
AWS::EC2::EC2FleetContext, ExcessCapacityTerminationPolicy, LaunchTemplateConfigs, OnDemandOptions, ReplaceUnhealthyInstances, SpotOptions, TagSpecifications, TargetCapacitySpecification, TerminateInstancesWithExpiration, Type, ValidFrom, ValidUntil
AWS::EC2::EIPDomain, InstanceId, PublicIpv4Pool, Tags
AWS::EC2::EIPAssociationAllocationId, EIP, InstanceId, NetworkInterfaceId, PrivateIpAddress
AWS::EC2::EgressOnlyInternetGatewayVpcId
AWS::EC2::EnclaveCertificateIamRoleAssociationCertificateArn, RoleArn
AWS::EC2::FlowLogDeliverLogsPermissionArn, DestinationOptions, LogDestination, LogDestinationType, LogFormat, LogGroupName, MaxAggregationInterval, ResourceId, ResourceType, Tags, TrafficType
AWS::EC2::GatewayRouteTableAssociationGatewayId, RouteTableId
AWS::EC2::HostAutoPlacement, AvailabilityZone, HostRecovery, InstanceType
AWS::EC2::IPAMDescription, OperatingRegions, Tags
AWS::EC2::IPAMAllocationCidr, Description, IpamPoolId, NetmaskLength
AWS::EC2::IPAMPoolAddressFamily, AllocationDefaultNetmaskLength, AllocationMaxNetmaskLength, AllocationMinNetmaskLength, AllocationResourceTags, AutoImport, Description, IpamScopeId, Locale, ProvisionedCidrs, PubliclyAdvertisable, SourceIpamPoolId, Tags
AWS::EC2::IPAMScopeDescription, IpamId, Tags
AWS::EC2::InstanceAdditionalInfo, Affinity, AvailabilityZone, BlockDeviceMappings, CpuOptions, CreditSpecification, DisableApiTermination, EbsOptimized, ElasticGpuSpecifications, ElasticInferenceAccelerators, EnclaveOptions, HibernationOptions, HostId, HostResourceGroupArn, IamInstanceProfile, ImageId, InstanceInitiatedShutdownBehavior, InstanceType, Ipv6AddressCount, Ipv6Addresses, KernelId, KeyName, LaunchTemplate, LicenseSpecifications, Monitoring, NetworkInterfaces, PlacementGroupName, PrivateDnsNameOptions, PrivateIpAddress, PropagateTagsToVolumeOnCreation, RamdiskId, SecurityGroupIds, SecurityGroups, SourceDestCheck, SsmAssociations, SubnetId, Tags, Tenancy, UserData, Volumes
AWS::EC2::InternetGatewayTags
AWS::EC2::KeyPairKeyName, KeyType, PublicKeyMaterial, Tags
AWS::EC2::LaunchTemplateLaunchTemplateData, LaunchTemplateName, TagSpecifications
AWS::EC2::LocalGatewayRouteDestinationCidrBlock, LocalGatewayRouteTableId, LocalGatewayVirtualInterfaceGroupId
AWS::EC2::LocalGatewayRouteTableVPCAssociationLocalGatewayRouteTableId, Tags, VpcId
AWS::EC2::NatGatewayAllocationId, ConnectivityType, SubnetId, Tags
AWS::EC2::NetworkAclTags, VpcId
AWS::EC2::NetworkAclEntryCidrBlock, Egress, Icmp, Ipv6CidrBlock, NetworkAclId, PortRange, Protocol, RuleAction, RuleNumber
AWS::EC2::NetworkInsightsAccessScopeExcludePaths, MatchPaths, Tags
AWS::EC2::NetworkInsightsAccessScopeAnalysisNetworkInsightsAccessScopeId, Tags
AWS::EC2::NetworkInsightsAnalysisFilterInArns, NetworkInsightsPathId, Tags
AWS::EC2::NetworkInsightsPathDestination, DestinationIp, DestinationPort, Protocol, Source, SourceIp, Tags
AWS::EC2::NetworkInterfaceDescription, GroupSet, InterfaceType, Ipv6AddressCount, Ipv6Addresses, PrivateIpAddress, PrivateIpAddresses, SecondaryPrivateIpAddressCount, SourceDestCheck, SubnetId, Tags
AWS::EC2::NetworkInterfaceAttachmentDeleteOnTermination, DeviceIndex, InstanceId, NetworkInterfaceId
AWS::EC2::NetworkInterfacePermissionAwsAccountId, NetworkInterfaceId, Permission
AWS::EC2::PlacementGroupStrategy
AWS::EC2::PrefixListAddressFamily, Entries, MaxEntries, PrefixListName, Tags
AWS::EC2::RouteCarrierGatewayId, DestinationCidrBlock, DestinationIpv6CidrBlock, EgressOnlyInternetGatewayId, GatewayId, InstanceId, LocalGatewayId, NatGatewayId, NetworkInterfaceId, RouteTableId, TransitGatewayId, VpcEndpointId, VpcPeeringConnectionId
AWS::EC2::RouteTableTags, VpcId
AWS::EC2::SecurityGroupGroupDescription, GroupName, SecurityGroupEgress, SecurityGroupIngress, Tags, VpcId
AWS::EC2::SecurityGroupEgressCidrIp, CidrIpv6, Description, DestinationPrefixListId, DestinationSecurityGroupId, FromPort, GroupId, IpProtocol, ToPort
AWS::EC2::SecurityGroupIngressCidrIp, CidrIpv6, Description, FromPort, GroupId, GroupName, IpProtocol, SourcePrefixListId, SourceSecurityGroupId, SourceSecurityGroupName, SourceSecurityGroupOwnerId, ToPort
AWS::EC2::SpotFleetSpotFleetRequestConfigData
AWS::EC2::SubnetAssignIpv6AddressOnCreation, AvailabilityZone, AvailabilityZoneId, CidrBlock, EnableDns64, Ipv6CidrBlock, Ipv6Native, MapPublicIpOnLaunch, OutpostArn, PrivateDnsNameOptionsOnLaunch, Tags, VpcId
AWS::EC2::SubnetCidrBlockIpv6CidrBlock, SubnetId
AWS::EC2::SubnetNetworkAclAssociationNetworkAclId, SubnetId
AWS::EC2::SubnetRouteTableAssociationRouteTableId, SubnetId
AWS::EC2::TrafficMirrorFilterDescription, NetworkServices, Tags
AWS::EC2::TrafficMirrorFilterRuleDescription, DestinationCidrBlock, DestinationPortRange, Protocol, RuleAction, RuleNumber, SourceCidrBlock, SourcePortRange, TrafficDirection, TrafficMirrorFilterId
AWS::EC2::TrafficMirrorSessionDescription, NetworkInterfaceId, PacketLength, SessionNumber, Tags, TrafficMirrorFilterId, TrafficMirrorTargetId, VirtualNetworkId
AWS::EC2::TrafficMirrorTargetDescription, NetworkInterfaceId, NetworkLoadBalancerArn, Tags
AWS::EC2::TransitGatewayAmazonSideAsn, AssociationDefaultRouteTableId, AutoAcceptSharedAttachments, DefaultRouteTableAssociation, DefaultRouteTablePropagation, Description, DnsSupport, MulticastSupport, PropagationDefaultRouteTableId, Tags, TransitGatewayCidrBlocks, VpnEcmpSupport
AWS::EC2::TransitGatewayAttachmentSubnetIds, Tags, TransitGatewayId, VpcId
AWS::EC2::TransitGatewayConnectOptions, Tags, TransportTransitGatewayAttachmentId
AWS::EC2::TransitGatewayMulticastDomainOptions, Tags, TransitGatewayId
AWS::EC2::TransitGatewayMulticastDomainAssociationSubnetId, TransitGatewayAttachmentId, TransitGatewayMulticastDomainId
AWS::EC2::TransitGatewayMulticastGroupMemberGroupIpAddress, NetworkInterfaceId, TransitGatewayMulticastDomainId
AWS::EC2::TransitGatewayMulticastGroupSourceGroupIpAddress, NetworkInterfaceId, TransitGatewayMulticastDomainId
AWS::EC2::TransitGatewayPeeringAttachmentPeerAccountId, PeerRegion, PeerTransitGatewayId, Tags, TransitGatewayId
AWS::EC2::TransitGatewayRouteBlackhole, DestinationCidrBlock, TransitGatewayAttachmentId, TransitGatewayRouteTableId
AWS::EC2::TransitGatewayRouteTableTags, TransitGatewayId
AWS::EC2::TransitGatewayRouteTableAssociationTransitGatewayAttachmentId, TransitGatewayRouteTableId
AWS::EC2::TransitGatewayRouteTablePropagationTransitGatewayAttachmentId, TransitGatewayRouteTableId
AWS::EC2::TransitGatewayVpcAttachmentAddSubnetIds, Options, RemoveSubnetIds, SubnetIds, Tags, TransitGatewayId, VpcId
AWS::EC2::VPCCidrBlock, EnableDnsHostnames, EnableDnsSupport, InstanceTenancy, Ipv4IpamPoolId, Ipv4NetmaskLength, Tags
AWS::EC2::VPCCidrBlockAmazonProvidedIpv6CidrBlock, CidrBlock, Ipv4IpamPoolId, Ipv4NetmaskLength, Ipv6CidrBlock, Ipv6IpamPoolId, Ipv6NetmaskLength, Ipv6Pool, VpcId
AWS::EC2::VPCDHCPOptionsAssociationDhcpOptionsId, VpcId
AWS::EC2::VPCEndpointPolicyDocument, PrivateDnsEnabled, RouteTableIds, SecurityGroupIds, ServiceName, SubnetIds, VpcEndpointType, VpcId
AWS::EC2::VPCEndpointConnectionNotificationConnectionEvents, ConnectionNotificationArn, ServiceId, VPCEndpointId
AWS::EC2::VPCEndpointServiceAcceptanceRequired, GatewayLoadBalancerArns, NetworkLoadBalancerArns, PayerResponsibility
AWS::EC2::VPCEndpointServicePermissionsAllowedPrincipals, ServiceId
AWS::EC2::VPCGatewayAttachmentInternetGatewayId, VpcId, VpnGatewayId
AWS::EC2::VPCPeeringConnectionPeerOwnerId, PeerRegion, PeerRoleArn, PeerVpcId, Tags, VpcId
AWS::EC2::VPNConnectionCustomerGatewayId, StaticRoutesOnly, Tags, TransitGatewayId, Type, VpnGatewayId, VpnTunnelOptionsSpecifications
AWS::EC2::VPNConnectionRouteDestinationCidrBlock, VpnConnectionId
AWS::EC2::VPNGatewayAmazonSideAsn, Tags, Type
AWS::EC2::VPNGatewayRoutePropagationRouteTableIds, VpnGatewayId
AWS::EC2::VolumeAutoEnableIO, AvailabilityZone, Encrypted, Iops, KmsKeyId, MultiAttachEnabled, OutpostArn, Size, SnapshotId, Tags, Throughput, VolumeType
AWS::EC2::VolumeAttachmentDevice, InstanceId, VolumeId
AWS::ECR::PublicRepositoryRepositoryCatalogData, RepositoryName, RepositoryPolicyText, Tags
AWS::ECR::PullThroughCacheRuleEcrRepositoryPrefix, UpstreamRegistryUrl
AWS::ECR::RegistryPolicyPolicyText
AWS::ECR::ReplicationConfigurationReplicationConfiguration
AWS::ECR::RepositoryEncryptionConfiguration, ImageScanningConfiguration, ImageTagMutability, LifecyclePolicy, RepositoryName, RepositoryPolicyText, Tags
AWS::ECS::CapacityProviderAutoScalingGroupProvider, Name, Tags
AWS::ECS::ClusterCapacityProviders, ClusterName, ClusterSettings, Configuration, DefaultCapacityProviderStrategy, Tags
AWS::ECS::ClusterCapacityProviderAssociationsCapacityProviders, Cluster, DefaultCapacityProviderStrategy
AWS::ECS::PrimaryTaskSetCluster, Service, TaskSetId
AWS::ECS::ServiceCapacityProviderStrategy, Cluster, DeploymentConfiguration, DeploymentController, DesiredCount, EnableECSManagedTags, EnableExecuteCommand, HealthCheckGracePeriodSeconds, LaunchType, LoadBalancers, NetworkConfiguration, PlacementConstraints, PlacementStrategies, PlatformVersion, PropagateTags, Role, SchedulingStrategy, ServiceName, ServiceRegistries, Tags, TaskDefinition
AWS::ECS::TaskDefinitionContainerDefinitions, Cpu, EphemeralStorage, ExecutionRoleArn, Family, InferenceAccelerators, IpcMode, Memory, NetworkMode, PidMode, PlacementConstraints, ProxyConfiguration, RequiresCompatibilities, RuntimePlatform, Tags, TaskRoleArn, Volumes
AWS::ECS::TaskSetCluster, ExternalId, LaunchType, LoadBalancers, NetworkConfiguration, PlatformVersion, Scale, Service, ServiceRegistries, TaskDefinition
AWS::EFS::AccessPointAccessPointTags, ClientToken, FileSystemId, PosixUser, RootDirectory
AWS::EFS::FileSystemAvailabilityZoneName, BackupPolicy, BypassPolicyLockoutSafetyCheck, Encrypted, FileSystemPolicy, FileSystemTags, KmsKeyId, LifecyclePolicies, PerformanceMode, ProvisionedThroughputInMibps, ThroughputMode
AWS::EFS::MountTargetFileSystemId, IpAddress, SecurityGroups, SubnetId
AWS::EKS::AddonAddonName, AddonVersion, ClusterName, ResolveConflicts, ServiceAccountRoleArn, Tags
AWS::EKS::ClusterEncryptionConfig, KubernetesNetworkConfig, Logging, Name, ResourcesVpcConfig, RoleArn, Tags, Version
AWS::EKS::FargateProfileClusterName, FargateProfileName, PodExecutionRoleArn, Selectors, Subnets, Tags
AWS::EKS::IdentityProviderConfigClusterName, IdentityProviderConfigName, Oidc, Tags, Type
AWS::EKS::NodegroupAmiType, CapacityType, ClusterName, DiskSize, ForceUpdateEnabled, InstanceTypes, Labels, LaunchTemplate, NodeRole, NodegroupName, ReleaseVersion, RemoteAccess, ScalingConfig, Subnets, Tags, Taints, UpdateConfig, Version
AWS::EMR::ClusterAdditionalInfo, Applications, AutoScalingRole, BootstrapActions, Configurations, CustomAmiId, EbsRootVolumeSize, Instances, JobFlowRole, KerberosAttributes, LogEncryptionKmsKeyId, LogUri, ManagedScalingPolicy, Name, ReleaseLabel, ScaleDownBehavior, SecurityConfiguration, ServiceRole, StepConcurrencyLevel, Steps, Tags, VisibleToAllUsers
AWS::EMR::InstanceFleetConfigClusterId, InstanceFleetType, InstanceTypeConfigs, LaunchSpecifications, Name, TargetOnDemandCapacity, TargetSpotCapacity
AWS::EMR::InstanceGroupConfigAutoScalingPolicy, BidPrice, Configurations, CustomAmiId, EbsConfiguration, InstanceCount, InstanceRole, InstanceType, JobFlowId, Market, Name
AWS::EMR::SecurityConfigurationName, SecurityConfiguration
AWS::EMR::StepActionOnFailure, HadoopJarStep, JobFlowId, Name
AWS::EMR::StudioAuthMode, DefaultS3Location, Description, EngineSecurityGroupId, IdpAuthUrl, IdpRelayStateParameterName, Name, ServiceRole, SubnetIds, Tags, UserRole, VpcId, WorkspaceSecurityGroupId
AWS::EMR::StudioSessionMappingIdentityName, IdentityType, SessionPolicyArn, StudioId
AWS::EMRContainers::VirtualClusterContainerProvider, Name, Tags
AWS::ElastiCache::CacheClusterAZMode, AutoMinorVersionUpgrade, CacheNodeType, CacheParameterGroupName, CacheSecurityGroupNames, CacheSubnetGroupName, ClusterName, Engine, EngineVersion, LogDeliveryConfigurations, NotificationTopicArn, NumCacheNodes, Port, PreferredAvailabilityZone, PreferredAvailabilityZones, PreferredMaintenanceWindow, SnapshotArns, SnapshotName, SnapshotRetentionLimit, SnapshotWindow, Tags, VpcSecurityGroupIds
AWS::ElastiCache::GlobalReplicationGroupAutomaticFailoverEnabled, CacheNodeType, CacheParameterGroupName, EngineVersion, GlobalNodeGroupCount, GlobalReplicationGroupDescription, GlobalReplicationGroupIdSuffix, Members, RegionalConfigurations
AWS::ElastiCache::ParameterGroupCacheParameterGroupFamily, Description, Properties, Tags
AWS::ElastiCache::ReplicationGroupAtRestEncryptionEnabled, AuthToken, AutoMinorVersionUpgrade, AutomaticFailoverEnabled, CacheNodeType, CacheParameterGroupName, CacheSecurityGroupNames, CacheSubnetGroupName, DataTieringEnabled, Engine, EngineVersion, GlobalReplicationGroupId, KmsKeyId, LogDeliveryConfigurations, MultiAZEnabled, NodeGroupConfiguration, NotificationTopicArn, NumCacheClusters, NumNodeGroups, Port, PreferredCacheClusterAZs, PreferredMaintenanceWindow, PrimaryClusterId, ReplicasPerNodeGroup, ReplicationGroupDescription, ReplicationGroupId, SecurityGroupIds, SnapshotArns, SnapshotName, SnapshotRetentionLimit, SnapshotWindow, SnapshottingClusterId, Tags, TransitEncryptionEnabled, UserGroupIds
AWS::ElastiCache::SecurityGroupDescription, Tags
AWS::ElastiCache::SecurityGroupIngressCacheSecurityGroupName, EC2SecurityGroupName, EC2SecurityGroupOwnerId
AWS::ElastiCache::SubnetGroupCacheSubnetGroupName, Description, SubnetIds, Tags
AWS::ElastiCache::UserAccessString, Engine, NoPasswordRequired, Passwords, UserId, UserName
AWS::ElastiCache::UserGroupEngine, UserGroupId, UserIds
AWS::ElasticBeanstalk::ApplicationApplicationName, Description, ResourceLifecycleConfig
AWS::ElasticBeanstalk::ApplicationVersionApplicationName, Description, SourceBundle
AWS::ElasticBeanstalk::ConfigurationTemplateApplicationName, Description, EnvironmentId, OptionSettings, PlatformArn, SolutionStackName, SourceConfiguration
AWS::ElasticBeanstalk::EnvironmentApplicationName, CNAMEPrefix, Description, EnvironmentName, OperationsRole, OptionSettings, PlatformArn, SolutionStackName, Tags, TemplateName, Tier, VersionLabel
AWS::ElasticLoadBalancing::LoadBalancerAccessLoggingPolicy, AppCookieStickinessPolicy, AvailabilityZones, ConnectionDrainingPolicy, ConnectionSettings, CrossZone, HealthCheck, Instances, LBCookieStickinessPolicy, Listeners, LoadBalancerName, Policies, Scheme, SecurityGroups, Subnets, Tags
AWS::ElasticLoadBalancingV2::ListenerAlpnPolicy, Certificates, DefaultActions, LoadBalancerArn, Port, Protocol, SslPolicy
AWS::ElasticLoadBalancingV2::ListenerCertificateCertificates, ListenerArn
AWS::ElasticLoadBalancingV2::ListenerRuleActions, Conditions, ListenerArn, Priority
AWS::ElasticLoadBalancingV2::LoadBalancerIpAddressType, LoadBalancerAttributes, Name, Scheme, SecurityGroups, SubnetMappings, Subnets, Tags, Type
AWS::ElasticLoadBalancingV2::TargetGroupHealthCheckEnabled, HealthCheckIntervalSeconds, HealthCheckPath, HealthCheckPort, HealthCheckProtocol, HealthCheckTimeoutSeconds, HealthyThresholdCount, IpAddressType, Matcher, Name, Port, Protocol, ProtocolVersion, Tags, TargetGroupAttributes, TargetType, Targets, UnhealthyThresholdCount, VpcId
AWS::Elasticsearch::DomainAccessPolicies, AdvancedOptions, AdvancedSecurityOptions, CognitoOptions, DomainEndpointOptions, DomainName, EBSOptions, ElasticsearchClusterConfig, ElasticsearchVersion, EncryptionAtRestOptions, LogPublishingOptions, NodeToNodeEncryptionOptions, SnapshotOptions, Tags, VPCOptions
AWS::EventSchemas::DiscovererCrossAccount, Description, SourceArn, Tags
AWS::EventSchemas::RegistryDescription, RegistryName, Tags
AWS::EventSchemas::RegistryPolicyPolicy, RegistryName, RevisionId
AWS::EventSchemas::SchemaContent, Description, RegistryName, SchemaName, Tags, Type
AWS::Events::ApiDestinationConnectionArn, Description, HttpMethod, InvocationEndpoint, InvocationRateLimitPerSecond, Name
AWS::Events::ArchiveArchiveName, Description, EventPattern, RetentionDays, SourceArn
AWS::Events::ConnectionAuthParameters, AuthorizationType, Description, Name
AWS::Events::EndpointDescription, EventBuses, Name, ReplicationConfig, RoleArn, RoutingConfig
AWS::Events::EventBusEventSourceName, Name, Tags
AWS::Events::EventBusPolicyAction, Condition, EventBusName, Principal, Statement, StatementId
AWS::Events::RuleDescription, EventBusName, EventPattern, Name, RoleArn, ScheduleExpression, State, Targets
AWS::Evidently::ExperimentDescription, MetricGoals, Name, OnlineAbConfig, Project, RandomizationSalt, RunningStatus, SamplingRate, Tags, Treatments
AWS::Evidently::FeatureDefaultVariation, Description, EntityOverrides, EvaluationStrategy, Name, Project, Tags, Variations
AWS::Evidently::LaunchDescription, ExecutionStatus, Groups, MetricMonitors, Name, Project, RandomizationSalt, ScheduledSplitsConfig, Tags
AWS::Evidently::ProjectDataDelivery, Description, Name, Tags
AWS::FIS::ExperimentTemplateActions, Description, LogConfiguration, RoleArn, StopConditions, Tags, Targets
AWS::FMS::NotificationChannelSnsRoleName, SnsTopicArn
AWS::FMS::PolicyDeleteAllPolicyResources, ExcludeMap, ExcludeResourceTags, IncludeMap, PolicyName, RemediationEnabled, ResourceTags, ResourceType, ResourceTypeList, ResourcesCleanUp, SecurityServicePolicyData, Tags
AWS::FSx::FileSystemBackupId, FileSystemType, FileSystemTypeVersion, KmsKeyId, LustreConfiguration, OntapConfiguration, OpenZFSConfiguration, SecurityGroupIds, StorageCapacity, StorageType, SubnetIds, Tags, WindowsConfiguration
AWS::FSx::SnapshotName, Tags, VolumeId
AWS::FSx::StorageVirtualMachineActiveDirectoryConfiguration, FileSystemId, Name, RootVolumeSecurityStyle, SvmAdminPassword, Tags
AWS::FSx::VolumeBackupId, Name, OntapConfiguration, OpenZFSConfiguration, Tags, VolumeType
AWS::FinSpace::EnvironmentDataBundles, Description, FederationMode, FederationParameters, KmsKeyId, Name, SuperuserParameters
AWS::Forecast::DatasetDataFrequency, DatasetName, DatasetType, Domain, EncryptionConfig, Schema, Tags
AWS::Forecast::DatasetGroupDatasetArns, DatasetGroupName, Domain, Tags
AWS::FraudDetector::DetectorAssociatedModels, Description, DetectorId, DetectorVersionStatus, EventType, RuleExecutionMode, Rules, Tags
AWS::FraudDetector::EntityTypeDescription, Name, Tags
AWS::FraudDetector::EventTypeDescription, EntityTypes, EventVariables, Labels, Name, Tags
AWS::FraudDetector::LabelDescription, Name, Tags
AWS::FraudDetector::OutcomeDescription, Name, Tags
AWS::FraudDetector::VariableDataSource, DataType, DefaultValue, Description, Name, Tags, VariableType
AWS::GameLift::AliasDescription, Name, RoutingStrategy
AWS::GameLift::BuildName, OperatingSystem, StorageLocation, Version
AWS::GameLift::FleetBuildId, CertificateConfiguration, Description, DesiredEC2Instances, EC2InboundPermissions, EC2InstanceType, FleetType, InstanceRoleARN, Locations, MaxSize, MetricGroups, MinSize, Name, NewGameSessionProtectionPolicy, PeerVpcAwsAccountId, PeerVpcId, ResourceCreationLimitPolicy, RuntimeConfiguration, ScriptId
AWS::GameLift::GameServerGroupAutoScalingPolicy, BalancingStrategy, DeleteOption, GameServerGroupName, GameServerProtectionPolicy, InstanceDefinitions, LaunchTemplate, MaxSize, MinSize, RoleArn, Tags, VpcSubnets
AWS::GameLift::GameSessionQueueCustomEventData, Destinations, FilterConfiguration, Name, NotificationTarget, PlayerLatencyPolicies, PriorityConfiguration, Tags, TimeoutInSeconds
AWS::GameLift::MatchmakingConfigurationAcceptanceRequired, AcceptanceTimeoutSeconds, AdditionalPlayerCount, BackfillMode, CustomEventData, Description, FlexMatchMode, GameProperties, GameSessionData, GameSessionQueueArns, Name, NotificationTarget, RequestTimeoutSeconds, RuleSetName, Tags
AWS::GameLift::MatchmakingRuleSetName, RuleSetBody, Tags
AWS::GameLift::ScriptName, StorageLocation, Tags, Version
AWS::GlobalAccelerator::AcceleratorEnabled, IpAddressType, IpAddresses, Name, Tags
AWS::GlobalAccelerator::EndpointGroupEndpointConfigurations, EndpointGroupRegion, HealthCheckIntervalSeconds, HealthCheckPath, HealthCheckPort, HealthCheckProtocol, ListenerArn, PortOverrides, ThresholdCount, TrafficDialPercentage
AWS::GlobalAccelerator::ListenerAcceleratorArn, ClientAffinity, PortRanges, Protocol
AWS::Glue::ClassifierCsvClassifier, GrokClassifier, JsonClassifier, XMLClassifier
AWS::Glue::ConnectionCatalogId, ConnectionInput
AWS::Glue::CrawlerClassifiers, Configuration, CrawlerSecurityConfiguration, DatabaseName, Description, Name, RecrawlPolicy, Role, Schedule, SchemaChangePolicy, TablePrefix, Tags, Targets
AWS::Glue::DataCatalogEncryptionSettingsCatalogId, DataCatalogEncryptionSettings
AWS::Glue::DatabaseCatalogId, DatabaseInput
AWS::Glue::DevEndpointArguments, EndpointName, ExtraJarsS3Path, ExtraPythonLibsS3Path, GlueVersion, NumberOfNodes, NumberOfWorkers, PublicKey, PublicKeys, RoleArn, SecurityConfiguration, SecurityGroupIds, SubnetId, Tags, WorkerType
AWS::Glue::JobAllocatedCapacity, Command, Connections, DefaultArguments, Description, ExecutionProperty, GlueVersion, LogUri, MaxCapacity, MaxRetries, Name, NotificationProperty, NumberOfWorkers, Role, SecurityConfiguration, Tags, Timeout, WorkerType
AWS::Glue::MLTransformDescription, GlueVersion, InputRecordTables, MaxCapacity, MaxRetries, Name, NumberOfWorkers, Role, Tags, Timeout, TransformEncryption, TransformParameters, WorkerType
AWS::Glue::PartitionCatalogId, DatabaseName, PartitionInput, TableName
AWS::Glue::RegistryDescription, Name, Tags
AWS::Glue::SchemaCheckpointVersion, Compatibility, DataFormat, Description, Name, Registry, SchemaDefinition, Tags
AWS::Glue::SchemaVersionSchema, SchemaDefinition
AWS::Glue::SchemaVersionMetadataKey, SchemaVersionId, Value
AWS::Glue::SecurityConfigurationEncryptionConfiguration, Name
AWS::Glue::TableCatalogId, DatabaseName, TableInput
AWS::Glue::TriggerActions, Description, Name, Predicate, Schedule, StartOnCreation, Tags, Type, WorkflowName
AWS::Glue::WorkflowDefaultRunProperties, Description, Name, Tags
AWS::Greengrass::ConnectorDefinitionInitialVersion, Name, Tags
AWS::Greengrass::ConnectorDefinitionVersionConnectorDefinitionId, Connectors
AWS::Greengrass::CoreDefinitionInitialVersion, Name, Tags
AWS::Greengrass::CoreDefinitionVersionCoreDefinitionId, Cores
AWS::Greengrass::DeviceDefinitionInitialVersion, Name, Tags
AWS::Greengrass::DeviceDefinitionVersionDeviceDefinitionId, Devices
AWS::Greengrass::FunctionDefinitionInitialVersion, Name, Tags
AWS::Greengrass::FunctionDefinitionVersionDefaultConfig, FunctionDefinitionId, Functions
AWS::Greengrass::GroupInitialVersion, Name, RoleArn, Tags
AWS::Greengrass::GroupVersionConnectorDefinitionVersionArn, CoreDefinitionVersionArn, DeviceDefinitionVersionArn, FunctionDefinitionVersionArn, GroupId, LoggerDefinitionVersionArn, ResourceDefinitionVersionArn, SubscriptionDefinitionVersionArn
AWS::Greengrass::LoggerDefinitionInitialVersion, Name, Tags
AWS::Greengrass::LoggerDefinitionVersionLoggerDefinitionId, Loggers
AWS::Greengrass::ResourceDefinitionInitialVersion, Name, Tags
AWS::Greengrass::ResourceDefinitionVersionResourceDefinitionId, Resources
AWS::Greengrass::SubscriptionDefinitionInitialVersion, Name, Tags
AWS::Greengrass::SubscriptionDefinitionVersionSubscriptionDefinitionId, Subscriptions
AWS::GreengrassV2::ComponentVersionInlineRecipe, LambdaFunction, Tags
AWS::GroundStation::ConfigConfigData, Name, Tags
AWS::GroundStation::DataflowEndpointGroupEndpointDetails, Tags
AWS::GroundStation::MissionProfileContactPostPassDurationSeconds, ContactPrePassDurationSeconds, DataflowEdges, MinimumViableContactDurationSeconds, Name, Tags, TrackingConfigArn
AWS::GuardDuty::DetectorDataSources, Enable, FindingPublishingFrequency
AWS::GuardDuty::FilterAction, Description, DetectorId, FindingCriteria, Name, Rank
AWS::GuardDuty::IPSetActivate, DetectorId, Format, Location, Name
AWS::GuardDuty::MasterDetectorId, InvitationId, MasterId
AWS::GuardDuty::MemberDetectorId, DisableEmailNotification, Email, MemberId, Message, Status
AWS::GuardDuty::ThreatIntelSetActivate, DetectorId, Format, Location, Name
AWS::HealthLake::FHIRDatastoreDatastoreName, DatastoreTypeVersion, PreloadDataConfig, SseConfiguration, Tags
AWS::IAM::AccessKeySerial, Status, UserName
AWS::IAM::GroupGroupName, ManagedPolicyArns, Path, Policies
AWS::IAM::InstanceProfileInstanceProfileName, Path, Roles
AWS::IAM::ManagedPolicyDescription, Groups, ManagedPolicyName, Path, PolicyDocument, Roles, Users
AWS::IAM::OIDCProviderClientIdList, Tags, ThumbprintList, Url
AWS::IAM::PolicyGroups, PolicyDocument, PolicyName, Roles, Users
AWS::IAM::RoleAssumeRolePolicyDocument, Description, ManagedPolicyArns, MaxSessionDuration, Path, PermissionsBoundary, Policies, RoleName, Tags
AWS::IAM::SAMLProviderName, SamlMetadataDocument, Tags
AWS::IAM::ServerCertificateCertificateBody, CertificateChain, Path, PrivateKey, ServerCertificateName, Tags
AWS::IAM::ServiceLinkedRoleAWSServiceName, CustomSuffix, Description
AWS::IAM::UserGroups, LoginProfile, ManagedPolicyArns, Path, PermissionsBoundary, Policies, Tags, UserName
AWS::IAM::UserToGroupAdditionGroupName, Users
AWS::IAM::VirtualMFADevicePath, Tags, Users, VirtualMfaDeviceName
AWS::IVS::ChannelAuthorized, LatencyMode, Name, RecordingConfigurationArn, Tags, Type
AWS::IVS::PlaybackKeyPairName, PublicKeyMaterial, Tags
AWS::IVS::RecordingConfigurationDestinationConfiguration, Name, Tags, ThumbnailConfiguration
AWS::IVS::StreamKeyChannelArn, Tags
AWS::ImageBuilder::ComponentChangeDescription, Data, Description, KmsKeyId, Name, Platform, SupportedOsVersions, Tags, Uri, Version
AWS::ImageBuilder::ContainerRecipeComponents, ContainerType, Description, DockerfileTemplateData, DockerfileTemplateUri, ImageOsVersionOverride, InstanceConfiguration, KmsKeyId, Name, ParentImage, PlatformOverride, Tags, TargetRepository, Version, WorkingDirectory
AWS::ImageBuilder::DistributionConfigurationDescription, Distributions, Name, Tags
AWS::ImageBuilder::ImageContainerRecipeArn, DistributionConfigurationArn, EnhancedImageMetadataEnabled, ImageRecipeArn, ImageTestsConfiguration, InfrastructureConfigurationArn, Tags
AWS::ImageBuilder::ImagePipelineContainerRecipeArn, Description, DistributionConfigurationArn, EnhancedImageMetadataEnabled, ImageRecipeArn, ImageTestsConfiguration, InfrastructureConfigurationArn, Name, Schedule, Status, Tags
AWS::ImageBuilder::ImageRecipeAdditionalInstanceConfiguration, BlockDeviceMappings, Components, Description, Name, ParentImage, Tags, Version, WorkingDirectory
AWS::ImageBuilder::InfrastructureConfigurationDescription, InstanceMetadataOptions, InstanceProfileName, InstanceTypes, KeyPair, Logging, Name, ResourceTags, SecurityGroupIds, SnsTopicArn, SubnetId, Tags, TerminateInstanceOnFailure
AWS::Inspector::AssessmentTargetAssessmentTargetName, ResourceGroupArn
AWS::Inspector::AssessmentTemplateAssessmentTargetArn, AssessmentTemplateName, DurationInSeconds, RulesPackageArns, UserAttributesForFindings
AWS::Inspector::ResourceGroupResourceGroupTags
AWS::InspectorV2::FilterDescription, FilterAction, FilterCriteria, Name
AWS::IoT1Click::DeviceDeviceId, Enabled
AWS::IoT1Click::PlacementAssociatedDevices, Attributes, PlacementName, ProjectName
AWS::IoT1Click::ProjectDescription, PlacementTemplate, ProjectName
AWS::IoT::AccountAuditConfigurationAccountId, AuditCheckConfigurations, AuditNotificationTargetConfigurations, RoleArn
AWS::IoT::AuthorizerAuthorizerFunctionArn, AuthorizerName, EnableCachingForHttp, SigningDisabled, Status, Tags, TokenKeyName, TokenSigningPublicKeys
AWS::IoT::CertificateCACertificatePem, CertificateMode, CertificatePem, CertificateSigningRequest, Status
AWS::IoT::CustomMetricDisplayName, MetricName, MetricType, Tags
AWS::IoT::DimensionName, StringValues, Tags, Type
AWS::IoT::DomainConfigurationAuthorizerConfig, DomainConfigurationName, DomainConfigurationStatus, DomainName, ServerCertificateArns, ServiceType, Tags, ValidationCertificateArn
AWS::IoT::FleetMetricAggregationField, AggregationType, Description, IndexName, MetricName, Period, QueryString, QueryVersion, Tags, Unit
AWS::IoT::JobTemplateAbortConfig, Description, Document, DocumentSource, JobArn, JobExecutionsRetryConfig, JobExecutionsRolloutConfig, JobTemplateId, PresignedUrlConfig, Tags, TimeoutConfig
AWS::IoT::LoggingAccountId, DefaultLogLevel, RoleArn
AWS::IoT::MitigationActionActionName, ActionParams, RoleArn, Tags
AWS::IoT::PolicyPolicyDocument, PolicyName
AWS::IoT::PolicyPrincipalAttachmentPolicyName, Principal
AWS::IoT::ProvisioningTemplateDescription, Enabled, PreProvisioningHook, ProvisioningRoleArn, Tags, TemplateBody, TemplateName
AWS::IoT::ResourceSpecificLoggingLogLevel, TargetName, TargetType
AWS::IoT::ScheduledAuditDayOfMonth, DayOfWeek, Frequency, ScheduledAuditName, Tags, TargetCheckNames
AWS::IoT::SecurityProfileAdditionalMetricsToRetainV2, AlertTargets, Behaviors, SecurityProfileDescription, SecurityProfileName, Tags, TargetArns
AWS::IoT::ThingAttributePayload, ThingName
AWS::IoT::ThingPrincipalAttachmentPrincipal, ThingName
AWS::IoT::TopicRuleRuleName, Tags, TopicRulePayload
AWS::IoT::TopicRuleDestinationHttpUrlProperties, Status, VpcProperties
AWS::IoTAnalytics::ChannelChannelName, ChannelStorage, RetentionPeriod, Tags
AWS::IoTAnalytics::DatasetActions, ContentDeliveryRules, DatasetName, LateDataRules, RetentionPeriod, Tags, Triggers, VersioningConfiguration
AWS::IoTAnalytics::DatastoreDatastoreName, DatastorePartitions, DatastoreStorage, FileFormatConfiguration, RetentionPeriod, Tags
AWS::IoTAnalytics::PipelinePipelineActivities, PipelineName, Tags
AWS::IoTCoreDeviceAdvisor::SuiteDefinitionSuiteDefinitionConfiguration, Tags
AWS::IoTEvents::AlarmModelAlarmCapabilities, AlarmEventActions, AlarmModelDescription, AlarmModelName, AlarmRule, Key, RoleArn, Severity, Tags
AWS::IoTEvents::DetectorModelDetectorModelDefinition, DetectorModelDescription, DetectorModelName, EvaluationMethod, Key, RoleArn, Tags
AWS::IoTEvents::InputInputDefinition, InputDescription, InputName, Tags
AWS::IoTFleetHub::ApplicationApplicationDescription, ApplicationName, RoleArn, Tags
AWS::IoTSiteWise::AccessPolicyAccessPolicyIdentity, AccessPolicyPermission, AccessPolicyResource
AWS::IoTSiteWise::AssetAssetHierarchies, AssetModelId, AssetName, AssetProperties, Tags
AWS::IoTSiteWise::AssetModelAssetModelCompositeModels, AssetModelDescription, AssetModelHierarchies, AssetModelName, AssetModelProperties, Tags
AWS::IoTSiteWise::DashboardDashboardDefinition, DashboardDescription, DashboardName, ProjectId, Tags
AWS::IoTSiteWise::GatewayGatewayCapabilitySummaries, GatewayName, GatewayPlatform, Tags
AWS::IoTSiteWise::PortalAlarms, NotificationSenderEmail, PortalAuthMode, PortalContactEmail, PortalDescription, PortalName, RoleArn, Tags
AWS::IoTSiteWise::ProjectAssetIds, PortalId, ProjectDescription, ProjectName, Tags
AWS::IoTThingsGraph::FlowTemplateCompatibleNamespaceVersion, Definition
AWS::IoTTwinMaker::ComponentTypeComponentTypeId, Description, ExtendsFrom, Functions, IsSingleton, PropertyDefinitions, Tags, WorkspaceId
AWS::IoTTwinMaker::EntityComponents, Description, EntityId, EntityName, ParentEntityId, Tags, WorkspaceId
AWS::IoTTwinMaker::SceneCapabilities, ContentLocation, Description, SceneId, Tags, WorkspaceId
AWS::IoTTwinMaker::WorkspaceDescription, Role, S3Location, Tags, WorkspaceId
AWS::IoTWireless::DestinationDescription, Expression, ExpressionType, Name, RoleArn, Tags
AWS::IoTWireless::DeviceProfileLoRaWAN, Name, Tags
AWS::IoTWireless::FuotaTaskAssociateMulticastGroup, AssociateWirelessDevice, Description, DisassociateMulticastGroup, DisassociateWirelessDevice, FirmwareUpdateImage, FirmwareUpdateRole, LoRaWAN, Name, Tags
AWS::IoTWireless::MulticastGroupAssociateWirelessDevice, Description, DisassociateWirelessDevice, LoRaWAN, Name, Tags
AWS::IoTWireless::PartnerAccountAccountLinked, Fingerprint, PartnerAccountId, PartnerType, Sidewalk, SidewalkUpdate, Tags
AWS::IoTWireless::ServiceProfileLoRaWAN, Name, Tags
AWS::IoTWireless::TaskDefinitionAutoCreateTasks, LoRaWANUpdateGatewayTaskEntry, Name, Tags, TaskDefinitionType, Update
AWS::IoTWireless::WirelessDeviceDescription, DestinationName, LastUplinkReceivedAt, LoRaWAN, Name, Tags, ThingArn, Type
AWS::IoTWireless::WirelessGatewayDescription, LastUplinkReceivedAt, LoRaWAN, Name, Tags, ThingArn
AWS::KMS::AliasAliasName, TargetKeyId
AWS::KMS::KeyDescription, EnableKeyRotation, Enabled, KeyPolicy, KeySpec, KeyUsage, MultiRegion, PendingWindowInDays, Tags
AWS::KMS::ReplicaKeyDescription, Enabled, KeyPolicy, PendingWindowInDays, PrimaryKeyArn, Tags
AWS::KafkaConnect::ConnectorCapacity, ConnectorConfiguration, ConnectorDescription, ConnectorName, KafkaCluster, KafkaClusterClientAuthentication, KafkaClusterEncryptionInTransit, KafkaConnectVersion, LogDelivery, Plugins, ServiceExecutionRoleArn, WorkerConfiguration
AWS::Kendra::DataSourceCustomDocumentEnrichmentConfiguration, DataSourceConfiguration, Description, IndexId, Name, RoleArn, Schedule, Tags, Type
AWS::Kendra::FaqDescription, FileFormat, IndexId, Name, RoleArn, S3Path, Tags
AWS::Kendra::IndexCapacityUnits, Description, DocumentMetadataConfigurations, Edition, Name, RoleArn, ServerSideEncryptionConfiguration, Tags, UserContextPolicy, UserTokenConfigurations
AWS::Kinesis::StreamName, RetentionPeriodHours, ShardCount, StreamEncryption, StreamModeDetails, Tags
AWS::Kinesis::StreamConsumerConsumerName, StreamARN
AWS::KinesisAnalytics::ApplicationApplicationCode, ApplicationDescription, ApplicationName, Inputs
AWS::KinesisAnalytics::ApplicationOutputApplicationName, Output
AWS::KinesisAnalytics::ApplicationReferenceDataSourceApplicationName, ReferenceDataSource
AWS::KinesisAnalyticsV2::ApplicationApplicationConfiguration, ApplicationDescription, ApplicationMode, ApplicationName, RuntimeEnvironment, ServiceExecutionRole, Tags
AWS::KinesisAnalyticsV2::ApplicationOutputApplicationName, Output
AWS::KinesisAnalyticsV2::ApplicationReferenceDataSourceApplicationName, ReferenceDataSource
AWS::KinesisFirehose::DeliveryStreamAmazonopensearchserviceDestinationConfiguration, DeliveryStreamEncryptionConfigurationInput, DeliveryStreamName, DeliveryStreamType, ElasticsearchDestinationConfiguration, ExtendedS3DestinationConfiguration, HttpEndpointDestinationConfiguration, KinesisStreamSourceConfiguration, RedshiftDestinationConfiguration, S3DestinationConfiguration, SplunkDestinationConfiguration, Tags
AWS::KinesisVideo::SignalingChannelMessageTtlSeconds, Name, Tags, Type
AWS::KinesisVideo::StreamDataRetentionInHours, DeviceName, KmsKeyId, MediaType, Name, Tags
AWS::LakeFormation::DataLakeSettingsAdmins, TrustedResourceOwners
AWS::LakeFormation::PermissionsDataLakePrincipal, Permissions, PermissionsWithGrantOption, Resource
AWS::LakeFormation::ResourceResourceArn, RoleArn, UseServiceLinkedRole
AWS::Lambda::AliasDescription, FunctionName, FunctionVersion, Name, ProvisionedConcurrencyConfig, RoutingConfig
AWS::Lambda::CodeSigningConfigAllowedPublishers, CodeSigningPolicies, Description
AWS::Lambda::EventInvokeConfigDestinationConfig, FunctionName, MaximumEventAgeInSeconds, MaximumRetryAttempts, Qualifier
AWS::Lambda::EventSourceMappingBatchSize, BisectBatchOnFunctionError, DestinationConfig, Enabled, EventSourceArn, FilterCriteria, FunctionName, FunctionResponseTypes, MaximumBatchingWindowInSeconds, MaximumRecordAgeInSeconds, MaximumRetryAttempts, ParallelizationFactor, Queues, SelfManagedEventSource, SourceAccessConfigurations, StartingPosition, StartingPositionTimestamp, Topics, TumblingWindowInSeconds
AWS::Lambda::FunctionArchitectures, Code, CodeSigningConfigArn, DeadLetterConfig, Description, Environment, EphemeralStorage, FileSystemConfigs, FunctionName, Handler, ImageConfig, KmsKeyArn, Layers, MemorySize, PackageType, ReservedConcurrentExecutions, Role, Runtime, Tags, Timeout, TracingConfig, VpcConfig
AWS::Lambda::LayerVersionCompatibleArchitectures, CompatibleRuntimes, Content, Description, LayerName, LicenseInfo
AWS::Lambda::LayerVersionPermissionAction, LayerVersionArn, OrganizationId, Principal
AWS::Lambda::PermissionAction, EventSourceToken, FunctionName, FunctionUrlAuthType, Principal, PrincipalOrgID, SourceAccount, SourceArn
AWS::Lambda::UrlAuthType, Cors, Qualifier, TargetFunctionArn
AWS::Lambda::VersionCodeSha256, Description, FunctionName, ProvisionedConcurrencyConfig
AWS::Lex::BotAutoBuildBotLocales, BotFileS3Location, BotLocales, BotTags, DataPrivacy, Description, IdleSessionTTLInSeconds, Name, RoleArn, TestBotAliasSettings, TestBotAliasTags
AWS::Lex::BotAliasBotAliasLocaleSettings, BotAliasName, BotAliasTags, BotId, BotVersion, ConversationLogSettings, Description, SentimentAnalysisSettings
AWS::Lex::BotVersionBotId, BotVersionLocaleSpecification, Description
AWS::Lex::ResourcePolicyPolicy, ResourceArn
AWS::LicenseManager::GrantAllowedOperations, GrantName, HomeRegion, LicenseArn, Principals, Status
AWS::LicenseManager::LicenseBeneficiary, ConsumptionConfiguration, Entitlements, HomeRegion, Issuer, LicenseMetadata, LicenseName, ProductName, ProductSKU, Status, Validity
AWS::Lightsail::AlarmAlarmName, ComparisonOperator, ContactProtocols, DatapointsToAlarm, EvaluationPeriods, MetricName, MonitoredResourceName, NotificationEnabled, NotificationTriggers, Threshold, TreatMissingData
AWS::Lightsail::BucketAccessRules, BucketName, BundleId, ObjectVersioning, ReadOnlyAccessAccounts, ResourcesReceivingAccess, Tags
AWS::Lightsail::CertificateCertificateName, DomainName, SubjectAlternativeNames, Tags
AWS::Lightsail::ContainerContainerServiceDeployment, IsDisabled, Power, PublicDomainNames, Scale, ServiceName, Tags
AWS::Lightsail::DatabaseAvailabilityZone, BackupRetention, CaCertificateIdentifier, MasterDatabaseName, MasterUserPassword, MasterUsername, PreferredBackupWindow, PreferredMaintenanceWindow, PubliclyAccessible, RelationalDatabaseBlueprintId, RelationalDatabaseBundleId, RelationalDatabaseName, RelationalDatabaseParameters, RotateMasterUserPassword, Tags
AWS::Lightsail::DiskAddOns, AvailabilityZone, DiskName, SizeInGb, Tags
AWS::Lightsail::DistributionBundleId, CacheBehaviorSettings, CacheBehaviors, CertificateName, DefaultCacheBehavior, DistributionName, IpAddressType, IsEnabled, Origin, Tags
AWS::Lightsail::InstanceAddOns, AvailabilityZone, BlueprintId, BundleId, Hardware, InstanceName, KeyPairName, Networking, Tags, UserData
AWS::Lightsail::LoadBalancerAttachedInstances, HealthCheckPath, InstancePort, IpAddressType, LoadBalancerName, SessionStickinessEnabled, SessionStickinessLBCookieDurationSeconds, Tags
AWS::Lightsail::LoadBalancerTlsCertificateCertificateAlternativeNames, CertificateDomainName, CertificateName, IsAttached, LoadBalancerName
AWS::Lightsail::StaticIpAttachedTo, StaticIpName
AWS::Location::GeofenceCollectionCollectionName, Description, KmsKeyId, PricingPlan, PricingPlanDataSource
AWS::Location::MapConfiguration, Description, MapName, PricingPlan
AWS::Location::PlaceIndexDataSource, DataSourceConfiguration, Description, IndexName, PricingPlan
AWS::Location::RouteCalculatorCalculatorName, DataSource, Description, PricingPlan
AWS::Location::TrackerDescription, KmsKeyId, PositionFiltering, PricingPlan, PricingPlanDataSource, TrackerName
AWS::Location::TrackerConsumerConsumerArn, TrackerName
AWS::Logs::DestinationDestinationName, DestinationPolicy, RoleArn, TargetArn
AWS::Logs::LogGroupKmsKeyId, LogGroupName, RetentionInDays, Tags
AWS::Logs::LogStreamLogGroupName, LogStreamName
AWS::Logs::MetricFilterFilterPattern, LogGroupName, MetricTransformations
AWS::Logs::QueryDefinitionLogGroupNames, Name, QueryString
AWS::Logs::ResourcePolicyPolicyDocument, PolicyName
AWS::Logs::SubscriptionFilterDestinationArn, FilterPattern, LogGroupName, RoleArn
AWS::LookoutEquipment::InferenceSchedulerDataDelayOffsetInMinutes, DataInputConfiguration, DataOutputConfiguration, DataUploadFrequency, InferenceSchedulerName, ModelName, RoleArn, ServerSideKmsKeyId, Tags
AWS::LookoutMetrics::AlertAction, AlertDescription, AlertName, AlertSensitivityThreshold, AnomalyDetectorArn
AWS::LookoutMetrics::AnomalyDetectorAnomalyDetectorConfig, AnomalyDetectorDescription, AnomalyDetectorName, KmsKeyArn, MetricSetList
AWS::LookoutVision::ProjectProjectName
AWS::MSK::BatchScramSecretClusterArn, SecretArnList
AWS::MSK::ClusterBrokerNodeGroupInfo, ClientAuthentication, ClusterName, ConfigurationInfo, CurrentVersion, EncryptionInfo, EnhancedMonitoring, KafkaVersion, LoggingInfo, NumberOfBrokerNodes, OpenMonitoring, Tags
AWS::MSK::ConfigurationDescription, KafkaVersionsList, Name, ServerProperties
AWS::MWAA::EnvironmentAirflowConfigurationOptions, AirflowVersion, DagS3Path, EnvironmentClass, ExecutionRoleArn, KmsKey, LoggingConfiguration, MaxWorkers, MinWorkers, Name, NetworkConfiguration, PluginsS3ObjectVersion, PluginsS3Path, RequirementsS3ObjectVersion, RequirementsS3Path, Schedulers, SourceBucketArn, Tags, WebserverAccessMode, WeeklyMaintenanceWindowStart
AWS::Macie::CustomDataIdentifierDescription, IgnoreWords, Keywords, MaximumMatchDistance, Name, Regex
AWS::Macie::FindingsFilterAction, Description, FindingCriteria, Name, Position
AWS::Macie::SessionFindingPublishingFrequency, Status
AWS::ManagedBlockchain::MemberInvitationId, MemberConfiguration, NetworkConfiguration, NetworkId
AWS::ManagedBlockchain::NodeMemberId, NetworkId, NodeConfiguration
AWS::MediaConnect::FlowAvailabilityZone, Name, Source, SourceFailoverConfig
AWS::MediaConnect::FlowEntitlementDataTransferSubscriberFeePercent, Description, Encryption, EntitlementStatus, FlowArn, Name, Subscribers
AWS::MediaConnect::FlowOutputCidrAllowList, Description, Destination, Encryption, FlowArn, MaxLatency, MinLatency, Name, Port, Protocol, RemoteId, SmoothingLatency, StreamId, VpcInterfaceAttachment
AWS::MediaConnect::FlowSourceDecryption, Description, EntitlementArn, FlowArn, IngestPort, MaxBitrate, MaxLatency, Name, Protocol, StreamId, VpcInterfaceName, WhitelistCidr
AWS::MediaConnect::FlowVpcInterfaceFlowArn, Name, RoleArn, SecurityGroupIds, SubnetId
AWS::MediaConvert::JobTemplateAccelerationSettings, Category, Description, HopDestinations, Name, Priority, Queue, SettingsJson, StatusUpdateInterval, Tags
AWS::MediaConvert::PresetCategory, Description, Name, SettingsJson, Tags
AWS::MediaConvert::QueueDescription, Name, PricingPlan, Status, Tags
AWS::MediaLive::ChannelCdiInputSpecification, ChannelClass, Destinations, EncoderSettings, InputAttachments, InputSpecification, LogLevel, Name, RoleArn, Tags, Vpc
AWS::MediaLive::InputDestinations, InputDevices, InputSecurityGroups, MediaConnectFlows, Name, RoleArn, Sources, Tags, Type, Vpc
AWS::MediaLive::InputSecurityGroupTags, WhitelistRules
AWS::MediaPackage::AssetId, PackagingGroupId, ResourceId, SourceArn, SourceRoleArn, Tags
AWS::MediaPackage::ChannelDescription, EgressAccessLogs, Id, IngressAccessLogs, Tags
AWS::MediaPackage::OriginEndpointAuthorization, ChannelId, CmafPackage, DashPackage, Description, HlsPackage, Id, ManifestName, MssPackage, Origination, StartoverWindowSeconds, Tags, TimeDelaySeconds, Whitelist
AWS::MediaPackage::PackagingConfigurationCmafPackage, DashPackage, HlsPackage, Id, MssPackage, PackagingGroupId, Tags
AWS::MediaPackage::PackagingGroupAuthorization, EgressAccessLogs, Id, Tags
AWS::MediaStore::ContainerAccessLoggingEnabled, ContainerName, CorsPolicy, LifecyclePolicy, MetricPolicy, Policy, Tags
AWS::MediaTailor::PlaybackConfigurationAdDecisionServerUrl, AvailSuppression, Bumper, CdnConfiguration, ConfigurationAliases, DashConfiguration, LivePreRollConfiguration, ManifestProcessingRules, Name, PersonalizationThresholdSeconds, SessionInitializationEndpointPrefix, SlateAdUrl, Tags, TranscodeProfileName, VideoContentSourceUrl
AWS::MemoryDB::ACLACLName, Tags, UserNames
AWS::MemoryDB::ClusterACLName, AutoMinorVersionUpgrade, ClusterName, Description, EngineVersion, FinalSnapshotName, KmsKeyId, MaintenanceWindow, NodeType, NumReplicasPerShard, NumShards, ParameterGroupName, Port, SecurityGroupIds, SnapshotArns, SnapshotName, SnapshotRetentionLimit, SnapshotWindow, SnsTopicArn, SnsTopicStatus, SubnetGroupName, TLSEnabled, Tags
AWS::MemoryDB::ParameterGroupDescription, Family, ParameterGroupName, Parameters, Tags
AWS::MemoryDB::SubnetGroupDescription, SubnetGroupName, SubnetIds, Tags
AWS::MemoryDB::UserAccessString, AuthenticationMode, Tags, UserName
AWS::Neptune::DBClusterAssociatedRoles, AvailabilityZones, BackupRetentionPeriod, DBClusterIdentifier, DBClusterParameterGroupName, DBSubnetGroupName, DeletionProtection, EnableCloudwatchLogsExports, EngineVersion, IamAuthEnabled, KmsKeyId, Port, PreferredBackupWindow, PreferredMaintenanceWindow, RestoreToTime, RestoreType, SnapshotIdentifier, SourceDBClusterIdentifier, StorageEncrypted, Tags, UseLatestRestorableTime, VpcSecurityGroupIds
AWS::Neptune::DBClusterParameterGroupDescription, Family, Name, Parameters, Tags
AWS::Neptune::DBInstanceAllowMajorVersionUpgrade, AutoMinorVersionUpgrade, AvailabilityZone, DBClusterIdentifier, DBInstanceClass, DBInstanceIdentifier, DBParameterGroupName, DBSnapshotIdentifier, DBSubnetGroupName, PreferredMaintenanceWindow, Tags
AWS::Neptune::DBParameterGroupDescription, Family, Name, Parameters, Tags
AWS::Neptune::DBSubnetGroupDBSubnetGroupDescription, DBSubnetGroupName, SubnetIds, Tags
AWS::NetworkFirewall::FirewallDeleteProtection, Description, FirewallName, FirewallPolicyArn, FirewallPolicyChangeProtection, SubnetChangeProtection, SubnetMappings, Tags, VpcId
AWS::NetworkFirewall::FirewallPolicyDescription, FirewallPolicy, FirewallPolicyName, Tags
AWS::NetworkFirewall::LoggingConfigurationFirewallArn, FirewallName, LoggingConfiguration
AWS::NetworkFirewall::RuleGroupCapacity, Description, RuleGroup, RuleGroupName, Tags, Type
AWS::NetworkManager::CustomerGatewayAssociationCustomerGatewayArn, DeviceId, GlobalNetworkId, LinkId
AWS::NetworkManager::DeviceDescription, GlobalNetworkId, Location, Model, SerialNumber, SiteId, Tags, Type, Vendor
AWS::NetworkManager::GlobalNetworkDescription, Tags
AWS::NetworkManager::LinkBandwidth, Description, GlobalNetworkId, Provider, SiteId, Tags, Type
AWS::NetworkManager::LinkAssociationDeviceId, GlobalNetworkId, LinkId
AWS::NetworkManager::SiteDescription, GlobalNetworkId, Location, Tags
AWS::NetworkManager::TransitGatewayRegistrationGlobalNetworkId, TransitGatewayArn
AWS::NimbleStudio::LaunchProfileDescription, Ec2SubnetIds, LaunchProfileProtocolVersions, Name, StreamConfiguration, StudioComponentIds, StudioId, Tags
AWS::NimbleStudio::StreamingImageDescription, Ec2ImageId, Name, StudioId, Tags
AWS::NimbleStudio::StudioAdminRoleArn, DisplayName, StudioEncryptionConfiguration, StudioName, Tags, UserRoleArn
AWS::NimbleStudio::StudioComponentConfiguration, Description, Ec2SecurityGroupIds, InitializationScripts, Name, ScriptParameters, StudioId, Subtype, Tags, Type
AWS::OpenSearchService::DomainAccessPolicies, AdvancedOptions, AdvancedSecurityOptions, ClusterConfig, CognitoOptions, DomainEndpointOptions, DomainName, EBSOptions, EncryptionAtRestOptions, EngineVersion, LogPublishingOptions, NodeToNodeEncryptionOptions, SnapshotOptions, Tags, VPCOptions
AWS::OpsWorks::AppAppSource, Attributes, DataSources, Description, Domains, EnableSsl, Environment, Name, Shortname, SslConfiguration, StackId, Type
AWS::OpsWorks::ElasticLoadBalancerAttachmentElasticLoadBalancerName, LayerId
AWS::OpsWorks::InstanceAgentVersion, AmiId, Architecture, AutoScalingType, AvailabilityZone, BlockDeviceMappings, EbsOptimized, ElasticIps, Hostname, InstallUpdatesOnBoot, InstanceType, LayerIds, Os, RootDeviceType, SshKeyName, StackId, SubnetId, Tenancy, TimeBasedAutoScaling, VirtualizationType, Volumes
AWS::OpsWorks::LayerAttributes, AutoAssignElasticIps, AutoAssignPublicIps, CustomInstanceProfileArn, CustomJson, CustomRecipes, CustomSecurityGroupIds, EnableAutoHealing, InstallUpdatesOnBoot, LifecycleEventConfiguration, LoadBasedAutoScaling, Name, Packages, Shortname, StackId, Tags, Type, UseEbsOptimizedInstances, VolumeConfigurations
AWS::OpsWorks::StackAgentVersion, Attributes, ChefConfiguration, CloneAppIds, ClonePermissions, ConfigurationManager, CustomCookbooksSource, CustomJson, DefaultAvailabilityZone, DefaultInstanceProfileArn, DefaultOs, DefaultRootDeviceType, DefaultSshKeyName, DefaultSubnetId, EcsClusterArn, ElasticIps, HostnameTheme, Name, RdsDbInstances, ServiceRoleArn, SourceStackId, Tags, UseCustomCookbooks, UseOpsworksSecurityGroups, VpcId
AWS::OpsWorks::UserProfileAllowSelfManagement, IamUserArn, SshPublicKey, SshUsername
AWS::OpsWorks::VolumeEc2VolumeId, MountPoint, Name, StackId
AWS::OpsWorksCM::ServerAssociatePublicIpAddress, BackupId, BackupRetentionCount, CustomCertificate, CustomDomain, CustomPrivateKey, DisableAutomatedBackup, Engine, EngineAttributes, EngineModel, EngineVersion, InstanceProfileArn, InstanceType, KeyPair, PreferredBackupWindow, PreferredMaintenanceWindow, SecurityGroupIds, ServerName, ServiceRoleArn, SubnetIds, Tags
AWS::Panorama::ApplicationInstanceApplicationInstanceIdToReplace, DefaultRuntimeContextDevice, Description, DeviceId, ManifestOverridesPayload, ManifestPayload, Name, RuntimeRoleArn, StatusFilter, Tags
AWS::Panorama::PackagePackageName, Tags
AWS::Panorama::PackageVersionMarkLatest, OwnerAccount, PackageId, PackageVersion, PatchVersion, UpdatedLatestPatchVersion
AWS::Personalize::DatasetDatasetGroupArn, DatasetImportJob, DatasetType, Name, SchemaArn
AWS::Personalize::DatasetGroupDomain, KmsKeyArn, Name, RoleArn
AWS::Personalize::SchemaDomain, Name, Schema
AWS::Personalize::SolutionDatasetGroupArn, EventType, Name, PerformAutoML, PerformHPO, RecipeArn, SolutionConfig
AWS::Pinpoint::ADMChannelApplicationId, ClientId, ClientSecret, Enabled
AWS::Pinpoint::APNSChannelApplicationId, BundleId, Certificate, DefaultAuthenticationMethod, Enabled, PrivateKey, TeamId, TokenKey, TokenKeyId
AWS::Pinpoint::APNSSandboxChannelApplicationId, BundleId, Certificate, DefaultAuthenticationMethod, Enabled, PrivateKey, TeamId, TokenKey, TokenKeyId
AWS::Pinpoint::APNSVoipChannelApplicationId, BundleId, Certificate, DefaultAuthenticationMethod, Enabled, PrivateKey, TeamId, TokenKey, TokenKeyId
AWS::Pinpoint::APNSVoipSandboxChannelApplicationId, BundleId, Certificate, DefaultAuthenticationMethod, Enabled, PrivateKey, TeamId, TokenKey, TokenKeyId
AWS::Pinpoint::AppName, Tags
AWS::Pinpoint::ApplicationSettingsApplicationId, CampaignHook, CloudWatchMetricsEnabled, Limits, QuietTime
AWS::Pinpoint::BaiduChannelApiKey, ApplicationId, Enabled, SecretKey
AWS::Pinpoint::CampaignAdditionalTreatments, ApplicationId, CampaignHook, Description, HoldoutPercent, IsPaused, Limits, MessageConfiguration, Name, Priority, Schedule, SegmentId, SegmentVersion, Tags, TreatmentDescription, TreatmentName
AWS::Pinpoint::EmailChannelApplicationId, ConfigurationSet, Enabled, FromAddress, Identity, RoleArn
AWS::Pinpoint::EmailTemplateDefaultSubstitutions, HtmlPart, Subject, Tags, TemplateDescription, TemplateName, TextPart
AWS::Pinpoint::EventStreamApplicationId, DestinationStreamArn, RoleArn
AWS::Pinpoint::GCMChannelApiKey, ApplicationId, Enabled
AWS::Pinpoint::InAppTemplateContent, CustomConfig, Layout, Tags, TemplateDescription, TemplateName
AWS::Pinpoint::PushTemplateADM, APNS, Baidu, Default, DefaultSubstitutions, GCM, Tags, TemplateDescription, TemplateName
AWS::Pinpoint::SMSChannelApplicationId, Enabled, SenderId, ShortCode
AWS::Pinpoint::SegmentApplicationId, Dimensions, Name, SegmentGroups, Tags
AWS::Pinpoint::SmsTemplateBody, DefaultSubstitutions, Tags, TemplateDescription, TemplateName
AWS::Pinpoint::VoiceChannelApplicationId, Enabled
AWS::PinpointEmail::ConfigurationSetDeliveryOptions, Name, ReputationOptions, SendingOptions, Tags, TrackingOptions
AWS::PinpointEmail::ConfigurationSetEventDestinationConfigurationSetName, EventDestination, EventDestinationName
AWS::PinpointEmail::DedicatedIpPoolPoolName, Tags
AWS::PinpointEmail::IdentityDkimSigningEnabled, FeedbackForwardingEnabled, MailFromAttributes, Name, Tags
AWS::QLDB::LedgerDeletionProtection, KmsKey, Name, PermissionsMode, Tags
AWS::QLDB::StreamExclusiveEndTime, InclusiveStartTime, KinesisConfiguration, LedgerName, RoleArn, StreamName, Tags
AWS::QuickSight::AnalysisAnalysisId, AwsAccountId, Errors, Name, Parameters, Permissions, SourceEntity, Tags, ThemeArn
AWS::QuickSight::DashboardAwsAccountId, DashboardId, DashboardPublishOptions, Name, Parameters, Permissions, SourceEntity, Tags, ThemeArn, VersionDescription
AWS::QuickSight::DataSetAwsAccountId, ColumnGroups, ColumnLevelPermissionRules, DataSetId, FieldFolders, ImportMode, IngestionWaitPolicy, LogicalTableMap, Name, Permissions, PhysicalTableMap, RowLevelPermissionDataSet, Tags
AWS::QuickSight::DataSourceAlternateDataSourceParameters, AwsAccountId, Credentials, DataSourceId, DataSourceParameters, ErrorInfo, Name, Permissions, SslProperties, Tags, Type, VpcConnectionProperties
AWS::QuickSight::TemplateAwsAccountId, Name, Permissions, SourceEntity, Tags, TemplateId, VersionDescription
AWS::QuickSight::ThemeAwsAccountId, BaseThemeId, Configuration, Name, Permissions, Tags, ThemeId, VersionDescription
AWS::RAM::ResourceShareAllowExternalPrincipals, Name, PermissionArns, Principals, ResourceArns, Tags
AWS::RDS::DBClusterAssociatedRoles, AvailabilityZones, BacktrackWindow, BackupRetentionPeriod, CopyTagsToSnapshot, DBClusterIdentifier, DBClusterParameterGroupName, DBSubnetGroupName, DatabaseName, DeletionProtection, EnableCloudwatchLogsExports, EnableHttpEndpoint, EnableIAMDatabaseAuthentication, Engine, EngineMode, EngineVersion, GlobalClusterIdentifier, KmsKeyId, MasterUserPassword, MasterUsername, Port, PreferredBackupWindow, PreferredMaintenanceWindow, ReplicationSourceIdentifier, RestoreType, ScalingConfiguration, SnapshotIdentifier, SourceDBClusterIdentifier, SourceRegion, StorageEncrypted, Tags, UseLatestRestorableTime, VpcSecurityGroupIds
AWS::RDS::DBClusterParameterGroupDescription, Family, Parameters, Tags
AWS::RDS::DBInstanceAllocatedStorage, AllowMajorVersionUpgrade, AssociatedRoles, AutoMinorVersionUpgrade, AvailabilityZone, BackupRetentionPeriod, CACertificateIdentifier, CharacterSetName, CopyTagsToSnapshot, DBClusterIdentifier, DBInstanceClass, DBInstanceIdentifier, DBName, DBParameterGroupName, DBSecurityGroups, DBSnapshotIdentifier, DBSubnetGroupName, DeleteAutomatedBackups, DeletionProtection, Domain, DomainIAMRoleName, EnableCloudwatchLogsExports, EnableIAMDatabaseAuthentication, EnablePerformanceInsights, Engine, EngineVersion, Iops, KmsKeyId, LicenseModel, MasterUserPassword, MasterUsername, MaxAllocatedStorage, MonitoringInterval, MonitoringRoleArn, MultiAZ, OptionGroupName, PerformanceInsightsKMSKeyId, PerformanceInsightsRetentionPeriod, Port, PreferredBackupWindow, PreferredMaintenanceWindow, ProcessorFeatures, PromotionTier, PubliclyAccessible, SourceDBInstanceIdentifier, SourceRegion, StorageEncrypted, StorageType, Tags, Timezone, UseDefaultProcessorFeatures, VPCSecurityGroups
AWS::RDS::DBParameterGroupDescription, Family, Parameters, Tags
AWS::RDS::DBProxyAuth, DBProxyName, DebugLogging, EngineFamily, IdleClientTimeout, RequireTLS, RoleArn, Tags, VpcSecurityGroupIds, VpcSubnetIds
AWS::RDS::DBProxyEndpointDBProxyEndpointName, DBProxyName, Tags, TargetRole, VpcSecurityGroupIds, VpcSubnetIds
AWS::RDS::DBProxyTargetGroupConnectionPoolConfigurationInfo, DBClusterIdentifiers, DBInstanceIdentifiers, DBProxyName, TargetGroupName
AWS::RDS::DBSecurityGroupDBSecurityGroupIngress, EC2VpcId, GroupDescription, Tags
AWS::RDS::DBSecurityGroupIngressCIDRIP, DBSecurityGroupName, EC2SecurityGroupId, EC2SecurityGroupName, EC2SecurityGroupOwnerId
AWS::RDS::DBSubnetGroupDBSubnetGroupDescription, DBSubnetGroupName, SubnetIds, Tags
AWS::RDS::EventSubscriptionEnabled, EventCategories, SnsTopicArn, SourceIds, SourceType
AWS::RDS::GlobalClusterDeletionProtection, Engine, EngineVersion, GlobalClusterIdentifier, SourceDBClusterIdentifier, StorageEncrypted
AWS::RDS::OptionGroupEngineName, MajorEngineVersion, OptionConfigurations, OptionGroupDescription, Tags
AWS::RUM::AppMonitorAppMonitorConfiguration, CwLogEnabled, Domain, Name, Tags
AWS::Redshift::ClusterAllowVersionUpgrade, AquaConfigurationStatus, AutomatedSnapshotRetentionPeriod, AvailabilityZone, AvailabilityZoneRelocation, AvailabilityZoneRelocationStatus, Classic, ClusterIdentifier, ClusterParameterGroupName, ClusterSecurityGroups, ClusterSubnetGroupName, ClusterType, ClusterVersion, DBName, DeferMaintenance, DeferMaintenanceDuration, DeferMaintenanceEndTime, DeferMaintenanceStartTime, DestinationRegion, ElasticIp, Encrypted, EnhancedVpcRouting, HsmClientCertificateIdentifier, HsmConfigurationIdentifier, IamRoles, KmsKeyId, LoggingProperties, MaintenanceTrackName, ManualSnapshotRetentionPeriod, MasterUserPassword, MasterUsername, NodeType, NumberOfNodes, OwnerAccount, Port, PreferredMaintenanceWindow, PubliclyAccessible, ResourceAction, RevisionTarget, RotateEncryptionKey, SnapshotClusterIdentifier, SnapshotCopyGrantName, SnapshotCopyManual, SnapshotCopyRetentionPeriod, SnapshotIdentifier, Tags, VpcSecurityGroupIds
AWS::Redshift::ClusterParameterGroupDescription, ParameterGroupFamily, Parameters, Tags
AWS::Redshift::ClusterSecurityGroupDescription, Tags
AWS::Redshift::ClusterSecurityGroupIngressCIDRIP, ClusterSecurityGroupName, EC2SecurityGroupName, EC2SecurityGroupOwnerId
AWS::Redshift::ClusterSubnetGroupDescription, SubnetIds, Tags
AWS::Redshift::EndpointAccessClusterIdentifier, EndpointName, ResourceOwner, SubnetGroupName, VpcSecurityGroupIds
AWS::Redshift::EndpointAuthorizationAccount, ClusterIdentifier, Force, VpcIds
AWS::Redshift::EventSubscriptionEnabled, EventCategories, Severity, SnsTopicArn, SourceIds, SourceType, SubscriptionName, Tags
AWS::Redshift::ScheduledActionEnable, EndTime, IamRole, Schedule, ScheduledActionDescription, ScheduledActionName, StartTime, TargetAction
AWS::RefactorSpaces::ApplicationApiGatewayProxy, EnvironmentIdentifier, Name, ProxyType, Tags, VpcId
AWS::RefactorSpaces::EnvironmentDescription, Name, NetworkFabricType, Tags
AWS::RefactorSpaces::RouteApplicationIdentifier, EnvironmentIdentifier, RouteType, ServiceIdentifier, Tags, UriPathRoute
AWS::RefactorSpaces::ServiceApplicationIdentifier, Description, EndpointType, EnvironmentIdentifier, LambdaEndpoint, Name, Tags, UrlEndpoint, VpcId
AWS::Rekognition::CollectionCollectionId, Tags
AWS::Rekognition::ProjectProjectName
AWS::Rekognition::StreamProcessorBoundingBoxRegionsOfInterest, ConnectedHomeSettings, DataSharingPreference, FaceSearchSettings, KinesisDataStream, KinesisVideoStream, KmsKeyId, Name, NotificationChannel, PolygonRegionsOfInterest, RoleArn, S3Destination, Tags
AWS::ResilienceHub::AppAppTemplateBody, Description, Name, ResiliencyPolicyArn, ResourceMappings, Tags
AWS::ResilienceHub::ResiliencyPolicyDataLocationConstraint, Policy, PolicyDescription, PolicyName, Tags, Tier
AWS::ResourceGroups::GroupConfiguration, Description, Name, ResourceQuery, Resources, Tags
AWS::RoboMaker::FleetName, Tags
AWS::RoboMaker::RobotArchitecture, Fleet, GreengrassGroupId, Name, Tags
AWS::RoboMaker::RobotApplicationCurrentRevisionId, Environment, Name, RobotSoftwareSuite, Sources, Tags
AWS::RoboMaker::RobotApplicationVersionApplication, CurrentRevisionId
AWS::RoboMaker::SimulationApplicationCurrentRevisionId, Environment, Name, RenderingEngine, RobotSoftwareSuite, SimulationSoftwareSuite, Sources, Tags
AWS::RoboMaker::SimulationApplicationVersionApplication, CurrentRevisionId
AWS::Route53::DNSSECHostedZoneId
AWS::Route53::HealthCheckHealthCheckConfig, HealthCheckTags
AWS::Route53::HostedZoneHostedZoneConfig, HostedZoneTags, Name, QueryLoggingConfig, VPCs
AWS::Route53::KeySigningKeyHostedZoneId, KeyManagementServiceArn, Name, Status
AWS::Route53::RecordSetAliasTarget, Comment, Failover, GeoLocation, HealthCheckId, HostedZoneId, HostedZoneName, MultiValueAnswer, Name, Region, ResourceRecords, SetIdentifier, TTL, Type, Weight
AWS::Route53::RecordSetGroupComment, HostedZoneId, HostedZoneName, RecordSets
AWS::Route53RecoveryControl::ClusterName, Tags
AWS::Route53RecoveryControl::ControlPanelClusterArn, Name, Tags
AWS::Route53RecoveryControl::RoutingControlClusterArn, ControlPanelArn, Name
AWS::Route53RecoveryControl::SafetyRuleAssertionRule, ControlPanelArn, GatingRule, Name, RuleConfig, Tags
AWS::Route53RecoveryReadiness::CellCellName, Cells, Tags
AWS::Route53RecoveryReadiness::ReadinessCheckReadinessCheckName, ResourceSetName, Tags
AWS::Route53RecoveryReadiness::RecoveryGroupCells, RecoveryGroupName, Tags
AWS::Route53RecoveryReadiness::ResourceSetResourceSetName, ResourceSetType, Resources, Tags
AWS::Route53Resolver::FirewallDomainListDomainFileUrl, Domains, Name, Tags
AWS::Route53Resolver::FirewallRuleGroupFirewallRules, Name, Tags
AWS::Route53Resolver::FirewallRuleGroupAssociationFirewallRuleGroupId, MutationProtection, Name, Priority, Tags, VpcId
AWS::Route53Resolver::ResolverConfigAutodefinedReverseFlag, ResourceId
AWS::Route53Resolver::ResolverDNSSECConfigResourceId
AWS::Route53Resolver::ResolverEndpointDirection, IpAddresses, Name, SecurityGroupIds, Tags
AWS::Route53Resolver::ResolverQueryLoggingConfigDestinationArn, Name
AWS::Route53Resolver::ResolverRuleDomainName, Name, ResolverEndpointId, RuleType, Tags, TargetIps
AWS::Route53Resolver::ResolverRuleAssociationName, ResolverRuleId, VPCId
AWS::S3::AccessPointBucket, Name, Policy, PolicyStatus, PublicAccessBlockConfiguration, VpcConfiguration
AWS::S3::BucketAccelerateConfiguration, AccessControl, AnalyticsConfigurations, BucketEncryption, BucketName, CorsConfiguration, IntelligentTieringConfigurations, InventoryConfigurations, LifecycleConfiguration, LoggingConfiguration, MetricsConfigurations, NotificationConfiguration, ObjectLockConfiguration, ObjectLockEnabled, OwnershipControls, PublicAccessBlockConfiguration, ReplicationConfiguration, Tags, VersioningConfiguration, WebsiteConfiguration
AWS::S3::BucketPolicyBucket, PolicyDocument
AWS::S3::MultiRegionAccessPointName, PublicAccessBlockConfiguration, Regions
AWS::S3::MultiRegionAccessPointPolicyMrapName, Policy
AWS::S3::StorageLensStorageLensConfiguration, Tags
AWS::S3ObjectLambda::AccessPointName, ObjectLambdaConfiguration
AWS::S3ObjectLambda::AccessPointPolicyObjectLambdaAccessPoint, PolicyDocument
AWS::S3Outposts::AccessPointBucket, Name, Policy, VpcConfiguration
AWS::S3Outposts::BucketBucketName, LifecycleConfiguration, OutpostId, Tags
AWS::S3Outposts::BucketPolicyBucket, PolicyDocument
AWS::S3Outposts::EndpointAccessType, CustomerOwnedIpv4Pool, OutpostId, SecurityGroupId, SubnetId
AWS::SDB::DomainDescription
AWS::SES::ConfigurationSetName
AWS::SES::ConfigurationSetEventDestinationConfigurationSetName, EventDestination
AWS::SES::ContactListContactListName, Description, Tags, Topics
AWS::SES::ReceiptFilterFilter
AWS::SES::ReceiptRuleAfter, Rule, RuleSetName
AWS::SES::ReceiptRuleSetRuleSetName
AWS::SES::TemplateTemplate
AWS::SNS::SubscriptionDeliveryPolicy, Endpoint, FilterPolicy, Protocol, RawMessageDelivery, RedrivePolicy, Region, SubscriptionRoleArn, TopicArn
AWS::SNS::TopicContentBasedDeduplication, DisplayName, FifoTopic, KmsMasterKeyId, Subscription, Tags, TopicName
AWS::SNS::TopicPolicyPolicyDocument, Topics
AWS::SQS::QueueContentBasedDeduplication, DeduplicationScope, DelaySeconds, FifoQueue, FifoThroughputLimit, KmsDataKeyReusePeriodSeconds, KmsMasterKeyId, MaximumMessageSize, MessageRetentionPeriod, QueueName, ReceiveMessageWaitTimeSeconds, RedriveAllowPolicy, RedrivePolicy, SqsManagedSseEnabled, Tags, VisibilityTimeout
AWS::SQS::QueuePolicyPolicyDocument, Queues
AWS::SSM::AssociationApplyOnlyAtCronInterval, AssociationName, AutomationTargetParameterName, CalendarNames, ComplianceSeverity, DocumentVersion, InstanceId, MaxConcurrency, MaxErrors, Name, OutputLocation, Parameters, ScheduleExpression, ScheduleOffset, SyncCompliance, Targets, WaitForSuccessTimeoutSeconds
AWS::SSM::DocumentAttachments, Content, DocumentFormat, DocumentType, Name, Requires, Tags, TargetType, UpdateMethod, VersionName
AWS::SSM::MaintenanceWindowAllowUnassociatedTargets, Cutoff, Description, Duration, EndDate, Name, Schedule, ScheduleOffset, ScheduleTimezone, StartDate, Tags
AWS::SSM::MaintenanceWindowTargetDescription, Name, OwnerInformation, ResourceType, Targets, WindowId
AWS::SSM::MaintenanceWindowTaskCutoffBehavior, Description, LoggingInfo, MaxConcurrency, MaxErrors, Name, Priority, ServiceRoleArn, Targets, TaskArn, TaskInvocationParameters, TaskParameters, TaskType, WindowId
AWS::SSM::ParameterAllowedPattern, DataType, Description, Name, Policies, Tags, Tier, Type, Value
AWS::SSM::PatchBaselineApprovalRules, ApprovedPatches, ApprovedPatchesComplianceLevel, ApprovedPatchesEnableNonSecurity, Description, GlobalFilters, Name, OperatingSystem, PatchGroups, RejectedPatches, RejectedPatchesAction, Sources, Tags
AWS::SSM::ResourceDataSyncBucketName, BucketPrefix, BucketRegion, KMSKeyArn, S3Destination, SyncFormat, SyncName, SyncSource, SyncType
AWS::SSMContacts::ContactAlias, DisplayName, Plan, Type
AWS::SSMContacts::ContactChannelChannelAddress, ChannelName, ChannelType, ContactId, DeferActivation
AWS::SSMIncidents::ReplicationSetDeletionProtected, Regions
AWS::SSMIncidents::ResponsePlanActions, ChatChannel, DisplayName, Engagements, IncidentTemplate, Name, Tags
AWS::SSO::AssignmentInstanceArn, PermissionSetArn, PrincipalId, PrincipalType, TargetId, TargetType
AWS::SSO::InstanceAccessControlAttributeConfigurationAccessControlAttributes, InstanceArn
AWS::SSO::PermissionSetDescription, InlinePolicy, InstanceArn, ManagedPolicies, Name, RelayStateType, SessionDuration, Tags
AWS::SageMaker::AppAppName, AppType, DomainId, ResourceSpec, Tags, UserProfileName
AWS::SageMaker::AppImageConfigAppImageConfigName, KernelGatewayImageConfig, Tags
AWS::SageMaker::CodeRepositoryCodeRepositoryName, GitConfig, Tags
AWS::SageMaker::DataQualityJobDefinitionDataQualityAppSpecification, DataQualityBaselineConfig, DataQualityJobInput, DataQualityJobOutputConfig, JobDefinitionName, JobResources, NetworkConfig, RoleArn, StoppingCondition, Tags
AWS::SageMaker::DeviceDevice, DeviceFleetName, Tags
AWS::SageMaker::DeviceFleetDescription, DeviceFleetName, OutputConfig, RoleArn, Tags
AWS::SageMaker::DomainAppNetworkAccessType, AppSecurityGroupManagement, AuthMode, DefaultUserSettings, DomainName, DomainSettings, KmsKeyId, SubnetIds, Tags, VpcId
AWS::SageMaker::EndpointDeploymentConfig, EndpointConfigName, EndpointName, ExcludeRetainedVariantProperties, RetainAllVariantProperties, RetainDeploymentConfig, Tags
AWS::SageMaker::EndpointConfigAsyncInferenceConfig, DataCaptureConfig, EndpointConfigName, KmsKeyId, ProductionVariants, Tags
AWS::SageMaker::FeatureGroupDescription, EventTimeFeatureName, FeatureDefinitions, FeatureGroupName, OfflineStoreConfig, OnlineStoreConfig, RecordIdentifierFeatureName, RoleArn, Tags
AWS::SageMaker::ImageImageDescription, ImageDisplayName, ImageName, ImageRoleArn, Tags
AWS::SageMaker::ImageVersionBaseImage, ImageName
AWS::SageMaker::ModelContainers, EnableNetworkIsolation, ExecutionRoleArn, InferenceExecutionConfig, ModelName, PrimaryContainer, Tags, VpcConfig
AWS::SageMaker::ModelBiasJobDefinitionJobDefinitionName, JobResources, ModelBiasAppSpecification, ModelBiasBaselineConfig, ModelBiasJobInput, ModelBiasJobOutputConfig, NetworkConfig, RoleArn, StoppingCondition, Tags
AWS::SageMaker::ModelExplainabilityJobDefinitionJobDefinitionName, JobResources, ModelExplainabilityAppSpecification, ModelExplainabilityBaselineConfig, ModelExplainabilityJobInput, ModelExplainabilityJobOutputConfig, NetworkConfig, RoleArn, StoppingCondition, Tags
AWS::SageMaker::ModelPackageGroupModelPackageGroupDescription, ModelPackageGroupName, ModelPackageGroupPolicy, Tags
AWS::SageMaker::ModelQualityJobDefinitionJobDefinitionName, JobResources, ModelQualityAppSpecification, ModelQualityBaselineConfig, ModelQualityJobInput, ModelQualityJobOutputConfig, NetworkConfig, RoleArn, StoppingCondition, Tags
AWS::SageMaker::MonitoringScheduleEndpointName, FailureReason, LastMonitoringExecutionSummary, MonitoringScheduleConfig, MonitoringScheduleName, MonitoringScheduleStatus, Tags
AWS::SageMaker::NotebookInstanceAcceleratorTypes, AdditionalCodeRepositories, DefaultCodeRepository, DirectInternetAccess, InstanceType, KmsKeyId, LifecycleConfigName, NotebookInstanceName, PlatformIdentifier, RoleArn, RootAccess, SecurityGroupIds, SubnetId, Tags, VolumeSizeInGB
AWS::SageMaker::NotebookInstanceLifecycleConfigNotebookInstanceLifecycleConfigName, OnCreate, OnStart
AWS::SageMaker::PipelineParallelismConfiguration, PipelineDefinition, PipelineDescription, PipelineDisplayName, PipelineName, RoleArn, Tags
AWS::SageMaker::ProjectProjectDescription, ProjectName, ServiceCatalogProvisioningDetails, Tags
AWS::SageMaker::UserProfileDomainId, SingleSignOnUserIdentifier, SingleSignOnUserValue, Tags, UserProfileName, UserSettings
AWS::SageMaker::WorkteamDescription, MemberDefinitions, NotificationConfiguration, Tags, WorkteamName
AWS::SecretsManager::ResourcePolicyBlockPublicPolicy, ResourcePolicy, SecretId
AWS::SecretsManager::RotationScheduleHostedRotationLambda, RotateImmediatelyOnUpdate, RotationLambdaARN, RotationRules, SecretId
AWS::SecretsManager::SecretDescription, GenerateSecretString, KmsKeyId, Name, ReplicaRegions, SecretString, Tags
AWS::SecretsManager::SecretTargetAttachmentSecretId, TargetId, TargetType
AWS::SecurityHub::HubTags
AWS::ServiceCatalog::AcceptedPortfolioShareAcceptLanguage, PortfolioId
AWS::ServiceCatalog::CloudFormationProductAcceptLanguage, Description, Distributor, Name, Owner, ProvisioningArtifactParameters, ReplaceProvisioningArtifacts, SupportDescription, SupportEmail, SupportUrl, Tags
AWS::ServiceCatalog::CloudFormationProvisionedProductAcceptLanguage, NotificationArns, PathId, PathName, ProductId, ProductName, ProvisionedProductName, ProvisioningArtifactId, ProvisioningArtifactName, ProvisioningParameters, ProvisioningPreferences, Tags
AWS::ServiceCatalog::LaunchNotificationConstraintAcceptLanguage, Description, NotificationArns, PortfolioId, ProductId
AWS::ServiceCatalog::LaunchRoleConstraintAcceptLanguage, Description, LocalRoleName, PortfolioId, ProductId, RoleArn
AWS::ServiceCatalog::LaunchTemplateConstraintAcceptLanguage, Description, PortfolioId, ProductId, Rules
AWS::ServiceCatalog::PortfolioAcceptLanguage, Description, DisplayName, ProviderName, Tags
AWS::ServiceCatalog::PortfolioPrincipalAssociationAcceptLanguage, PortfolioId, PrincipalARN, PrincipalType
AWS::ServiceCatalog::PortfolioProductAssociationAcceptLanguage, PortfolioId, ProductId, SourcePortfolioId
AWS::ServiceCatalog::PortfolioShareAcceptLanguage, AccountId, PortfolioId, ShareTagOptions
AWS::ServiceCatalog::ResourceUpdateConstraintAcceptLanguage, Description, PortfolioId, ProductId, TagUpdateOnProvisionedProduct
AWS::ServiceCatalog::ServiceActionAcceptLanguage, Definition, DefinitionType, Description, Name
AWS::ServiceCatalog::ServiceActionAssociationProductId, ProvisioningArtifactId, ServiceActionId
AWS::ServiceCatalog::StackSetConstraintAcceptLanguage, AccountList, AdminRole, Description, ExecutionRole, PortfolioId, ProductId, RegionList, StackInstanceControl
AWS::ServiceCatalog::TagOptionActive, Key, Value
AWS::ServiceCatalog::TagOptionAssociationResourceId, TagOptionId
AWS::ServiceCatalogAppRegistry::ApplicationDescription, Name, Tags
AWS::ServiceCatalogAppRegistry::AttributeGroupAttributes, Description, Name, Tags
AWS::ServiceCatalogAppRegistry::ResourceAssociationApplication, Resource, ResourceType
AWS::ServiceDiscovery::HttpNamespaceDescription, Name, Tags
AWS::ServiceDiscovery::InstanceInstanceAttributes, InstanceId, ServiceId
AWS::ServiceDiscovery::PrivateDnsNamespaceDescription, Name, Properties, Tags, Vpc
AWS::ServiceDiscovery::PublicDnsNamespaceDescription, Name, Properties, Tags
AWS::ServiceDiscovery::ServiceDescription, DnsConfig, HealthCheckConfig, HealthCheckCustomConfig, Name, NamespaceId, Tags, Type
AWS::Signer::ProfilePermissionAction, Principal, ProfileName, ProfileVersion, StatementId
AWS::Signer::SigningProfilePlatformId, SignatureValidityPeriod, Tags
AWS::StepFunctions::ActivityName, Tags
AWS::StepFunctions::StateMachineDefinition, DefinitionS3Location, DefinitionString, DefinitionSubstitutions, LoggingConfiguration, RoleArn, StateMachineName, StateMachineType, Tags, TracingConfiguration
AWS::Synthetics::CanaryArtifactConfig, ArtifactS3Location, Code, ExecutionRoleArn, FailureRetentionPeriod, Name, RunConfig, RuntimeVersion, Schedule, StartCanaryAfterCreation, SuccessRetentionPeriod, Tags, VPCConfig, VisualReference
AWS::Timestream::DatabaseDatabaseName, KmsKeyId, Tags
AWS::Timestream::ScheduledQueryClientToken, ErrorReportConfiguration, KmsKeyId, NotificationConfiguration, QueryString, ScheduleConfiguration, ScheduledQueryExecutionRoleArn, ScheduledQueryName, Tags, TargetConfiguration
AWS::Timestream::TableDatabaseName, MagneticStoreWriteProperties, RetentionProperties, TableName, Tags
AWS::Transfer::ServerCertificate, Domain, EndpointDetails, EndpointType, IdentityProviderDetails, IdentityProviderType, LoggingRole, PostAuthenticationLoginBanner, PreAuthenticationLoginBanner, ProtocolDetails, Protocols, SecurityPolicyName, Tags, WorkflowDetails
AWS::Transfer::UserHomeDirectory, HomeDirectoryMappings, HomeDirectoryType, Policy, PosixProfile, Role, ServerId, SshPublicKeys, Tags, UserName
AWS::Transfer::WorkflowDescription, OnExceptionSteps, Steps, Tags
AWS::VoiceID::DomainDescription, Name, ServerSideEncryptionConfiguration, Tags
AWS::WAF::ByteMatchSetByteMatchTuples, Name
AWS::WAF::IPSetIPSetDescriptors, Name
AWS::WAF::RuleMetricName, Name, Predicates
AWS::WAF::SizeConstraintSetName, SizeConstraints
AWS::WAF::SqlInjectionMatchSetName, SqlInjectionMatchTuples
AWS::WAF::WebACLDefaultAction, MetricName, Name, Rules
AWS::WAF::XssMatchSetName, XssMatchTuples
AWS::WAFRegional::ByteMatchSetByteMatchTuples, Name
AWS::WAFRegional::GeoMatchSetGeoMatchConstraints, Name
AWS::WAFRegional::IPSetIPSetDescriptors, Name
AWS::WAFRegional::RateBasedRuleMatchPredicates, MetricName, Name, RateKey, RateLimit
AWS::WAFRegional::RegexPatternSetName, RegexPatternStrings
AWS::WAFRegional::RuleMetricName, Name, Predicates
AWS::WAFRegional::SizeConstraintSetName, SizeConstraints
AWS::WAFRegional::SqlInjectionMatchSetName, SqlInjectionMatchTuples
AWS::WAFRegional::WebACLDefaultAction, MetricName, Name, Rules
AWS::WAFRegional::WebACLAssociationResourceArn, WebACLId
AWS::WAFRegional::XssMatchSetName, XssMatchTuples
AWS::WAFv2::IPSetAddresses, Description, IPAddressVersion, Name, Scope, Tags
AWS::WAFv2::LoggingConfigurationLogDestinationConfigs, LoggingFilter, RedactedFields, ResourceArn
AWS::WAFv2::RegexPatternSetDescription, Name, RegularExpressionList, Scope, Tags
AWS::WAFv2::RuleGroupCapacity, CustomResponseBodies, Description, Name, Rules, Scope, Tags, VisibilityConfig
AWS::WAFv2::WebACLCaptchaConfig, CustomResponseBodies, DefaultAction, Description, Name, Rules, Scope, Tags, VisibilityConfig
AWS::WAFv2::WebACLAssociationResourceArn, WebACLArn
AWS::Wisdom::AssistantDescription, Name, ServerSideEncryptionConfiguration, Tags, Type
AWS::Wisdom::AssistantAssociationAssistantId, Association, AssociationType, Tags
AWS::Wisdom::KnowledgeBaseDescription, KnowledgeBaseType, Name, RenderingConfiguration, ServerSideEncryptionConfiguration, SourceConfiguration, Tags
AWS::WorkSpaces::ConnectionAliasConnectionString, Tags
AWS::WorkSpaces::WorkspaceBundleId, DirectoryId, RootVolumeEncryptionEnabled, Tags, UserName, UserVolumeEncryptionEnabled, VolumeEncryptionKey, WorkspaceProperties
AWS::XRay::GroupFilterExpression, GroupName, InsightsConfiguration, Tags
AWS::XRay::SamplingRuleRuleName, SamplingRule, SamplingRuleRecord, SamplingRuleUpdate, Tags
Alexa::ASK::SkillAuthenticationConfiguration, SkillPackage, VendorId

Note: The data was automatically fetched from the official AWS CloudFormation resource specification and got parsed in this markdown table using a custom python script.

Share on Twitter

Subscribe to the newsletter

If you're interested in AWS Cloud, Infrastructure as Code, DevOps, and getting certified in AWS then subscribe to my newsletter to get exclusive tips and tricks on becoming a successful Cloud Engineer.

- subscribers