CloudFormation Resource Properties Reference
Search AWS CloudFormation resource types and their configurable properties with direct AWS documentation links.
Generated CloudFormation property data
Generated from the AWS CloudFormation resource specification with AWS documentation links.
200 of 1,648 matching rows shown
| Resource type | Properties |
|---|---|
| AWS::ACMPCA::Certificate | ApiPassthrough, CertificateAuthorityArn, CertificateSigningRequest, SigningAlgorithm, TemplateArn, Validity, ValidityNotBefore |
| AWS::ACMPCA::CertificateAuthority | CsrExtensions, KeyAlgorithm, KeyStorageSecurityStandard, RevocationConfiguration, SigningAlgorithm, Subject, Tags, Type, UsageMode |
| AWS::ACMPCA::CertificateAuthorityActivation | Certificate, CertificateAuthorityArn, CertificateChain, Status |
| AWS::ACMPCA::Permission | Actions, CertificateAuthorityArn, Principal, SourceAccount |
| AWS::AIOps::InvestigationGroup | ChatbotNotificationChannels, CrossAccountConfigurations, EncryptionConfig, InvestigationGroupPolicy, IsCloudTrailEventHistoryEnabled, Name, RetentionInDays, RoleArn, TagKeyBoundaries, Tags |
| AWS::APS::AnomalyDetector | Alias, Configuration, EvaluationIntervalInSeconds, Labels, MissingDataAction, Tags, Workspace |
| AWS::APS::ResourcePolicy | PolicyDocument, WorkspaceArn |
| AWS::APS::RuleGroupsNamespace | Data, Name, Tags, Workspace |
| AWS::APS::Scraper | Alias, Destination, RoleConfiguration, ScrapeConfiguration, ScraperLoggingConfiguration, Source, Tags |
| AWS::APS::Workspace | AlertManagerDefinition, Alias, KmsKeyArn, LoggingConfiguration, QueryLoggingConfiguration, Tags, WorkspaceConfiguration |
| AWS::ARCRegionSwitch::Plan | AssociatedAlarms, Description, ExecutionRole, Name, PrimaryRegion, RecoveryApproach, RecoveryTimeObjectiveMinutes, Regions, ReportConfiguration, Tags, Triggers, Workflows |
| AWS::ARCZonalShift::AutoshiftObserverNotificationStatus | Status |
| AWS::ARCZonalShift::ZonalAutoshiftConfiguration | PracticeRunConfiguration, ResourceIdentifier, ZonalAutoshiftStatus |
| AWS::AWSExternalAnthropic::Workspace | DataResidency, Name, Tags |
| AWS::AccessAnalyzer::Analyzer | AnalyzerConfiguration, AnalyzerName, ArchiveRules, Tags, Type |
| AWS::AmazonMQ::Broker | AuthenticationStrategy, AutoMinorVersionUpgrade, BrokerName, Configuration, DataReplicationMode, DataReplicationPrimaryBrokerArn, DeploymentMode, EncryptionOptions, EngineType, EngineVersion, HostInstanceType, LdapServerMetadata, Logs, MaintenanceWindowStartTime, PubliclyAccessible, ResourceShareArns, SecurityGroups, StorageSize, StorageType, SubnetIds, Tags, Users |
| AWS::AmazonMQ::Configuration | AuthenticationStrategy, Data, Description, EngineType, EngineVersion, Name, Tags |
| AWS::AmazonMQ::ConfigurationAssociation | Broker, Configuration |
| AWS::Amplify::App | AccessToken, AutoBranchCreationConfig, BasicAuthConfig, BuildSpec, CacheConfig, ComputeRoleArn, CustomHeaders, CustomRules, Description, EnableBranchAutoDeletion, EnvironmentVariables, IAMServiceRole, JobConfig, Name, OauthToken, Platform, Repository, Tags |
| AWS::Amplify::Branch | AppId, Backend, BasicAuthConfig, BranchName, BuildSpec, ComputeRoleArn, Description, EnableAutoBuild, EnablePerformanceMode, EnablePullRequestPreview, EnableSkewProtection, EnvironmentVariables, Framework, PullRequestEnvironmentName, Stage, Tags |
| AWS::Amplify::Domain | AppId, AutoSubDomainCreationPatterns, AutoSubDomainIAMRole, CertificateSettings, DomainName, EnableAutoSubDomain, SubDomainSettings |
| AWS::AmplifyUIBuilder::Component | AppId, BindingProperties, Children, CollectionProperties, ComponentType, EnvironmentName, Events, Name, Overrides, Properties, SchemaVersion, SourceId, Tags, Variants |
| AWS::AmplifyUIBuilder::Form | AppId, Cta, DataType, EnvironmentName, Fields, FormActionType, LabelDecorator, Name, SchemaVersion, SectionalElements, Style, Tags |
| AWS::AmplifyUIBuilder::Theme | AppId, EnvironmentName, Name, Overrides, Tags, Values |
| AWS::ApiGateway::Account | CloudWatchRoleArn |
| AWS::ApiGateway::ApiKey | CustomerId, Description, Enabled, GenerateDistinctId, Name, StageKeys, Tags, Value |
| AWS::ApiGateway::Authorizer | AuthType, AuthorizerCredentials, AuthorizerResultTtlInSeconds, AuthorizerUri, IdentitySource, IdentityValidationExpression, Name, ProviderARNs, RestApiId, Type |
| AWS::ApiGateway::BasePathMapping | BasePath, DomainName, Id, RestApiId, Stage |
| AWS::ApiGateway::BasePathMappingV2 | BasePath, DomainNameArn, RestApiId, Stage |
| AWS::ApiGateway::ClientCertificate | Description, Tags |
| AWS::ApiGateway::Deployment | DeploymentCanarySettings, Description, RestApiId, StageDescription, StageName |
| AWS::ApiGateway::DocumentationPart | Location, Properties, RestApiId |
| AWS::ApiGateway::DocumentationVersion | Description, DocumentationVersion, RestApiId |
| AWS::ApiGateway::DomainName | CertificateArn, DomainName, EndpointAccessMode, EndpointConfiguration, MutualTlsAuthentication, OwnershipVerificationCertificateArn, RegionalCertificateArn, RoutingMode, SecurityPolicy, Tags |
| AWS::ApiGateway::DomainNameAccessAssociation | AccessAssociationSource, AccessAssociationSourceType, DomainNameArn, Tags |
| AWS::ApiGateway::DomainNameV2 | CertificateArn, DomainName, EndpointAccessMode, EndpointConfiguration, Policy, RoutingMode, SecurityPolicy, Tags |
| AWS::ApiGateway::GatewayResponse | ResponseParameters, ResponseTemplates, ResponseType, RestApiId, StatusCode |
| AWS::ApiGateway::Method | ApiKeyRequired, AuthorizationScopes, AuthorizationType, AuthorizerId, HttpMethod, Integration, MethodResponses, OperationName, RequestModels, RequestParameters, RequestValidatorId, ResourceId, RestApiId |
| AWS::ApiGateway::Model | ContentType, Description, Name, RestApiId, Schema |
| AWS::ApiGateway::RequestValidator | Name, RestApiId, ValidateRequestBody, ValidateRequestParameters |
| AWS::ApiGateway::Resource | ParentId, PathPart, RestApiId |
| AWS::ApiGateway::RestApi | ApiKeySourceType, BinaryMediaTypes, Body, BodyS3Location, CloneFrom, Description, DisableExecuteApiEndpoint, EndpointAccessMode, EndpointConfiguration, FailOnWarnings, MinimumCompressionSize, Mode, Name, Parameters, Policy, SecurityPolicy, Tags |
| AWS::ApiGateway::Stage | AccessLogSetting, CacheClusterEnabled, CacheClusterSize, CanarySetting, ClientCertificateId, DeploymentId, Description, DocumentationVersion, MethodSettings, RestApiId, StageName, Tags, TracingEnabled, Variables |
| AWS::ApiGateway::UsagePlan | ApiStages, Description, Quota, Tags, Throttle, UsagePlanName |
| AWS::ApiGateway::UsagePlanKey | KeyId, KeyType, UsagePlanId |
| AWS::ApiGateway::VpcLink | Description, Name, Tags, TargetArns |
| AWS::ApiGatewayV2::Api | ApiKeySelectionExpression, BasePath, Body, BodyS3Location, CorsConfiguration, CredentialsArn, Description, DisableExecuteApiEndpoint, DisableSchemaValidation, FailOnWarnings, IpAddressType, Name, ProtocolType, RouteKey, RouteSelectionExpression, Tags, Target, Version |
| AWS::ApiGatewayV2::ApiGatewayManagedOverrides | ApiId, Integration, Route, Stage |
| AWS::ApiGatewayV2::ApiMapping | ApiId, ApiMappingKey, DomainName, Stage |
| AWS::ApiGatewayV2::Authorizer | ApiId, AuthorizerCredentialsArn, AuthorizerPayloadFormatVersion, AuthorizerResultTtlInSeconds, AuthorizerType, AuthorizerUri, EnableSimpleResponses, IdentitySource, IdentityValidationExpression, JwtConfiguration, Name |
| AWS::ApiGatewayV2::Deployment | ApiId, Description, StageName |
| AWS::ApiGatewayV2::DomainName | DomainName, DomainNameConfigurations, MutualTlsAuthentication, RoutingMode, Tags |
| AWS::ApiGatewayV2::Integration | ApiId, ConnectionId, ConnectionType, ContentHandlingStrategy, CredentialsArn, Description, IntegrationMethod, IntegrationSubtype, IntegrationType, IntegrationUri, PassthroughBehavior, PayloadFormatVersion, RequestParameters, RequestTemplates, ResponseParameters, TemplateSelectionExpression, TimeoutInMillis, TlsConfig |
| AWS::ApiGatewayV2::IntegrationResponse | ApiId, ContentHandlingStrategy, IntegrationId, IntegrationResponseKey, ResponseParameters, ResponseTemplates, TemplateSelectionExpression |
| AWS::ApiGatewayV2::Model | ApiId, ContentType, Description, Name, Schema |
| AWS::ApiGatewayV2::Route | ApiId, ApiKeyRequired, AuthorizationScopes, AuthorizationType, AuthorizerId, ModelSelectionExpression, OperationName, RequestModels, RequestParameters, RouteKey, RouteResponseSelectionExpression, Target |
| AWS::ApiGatewayV2::RouteResponse | ApiId, ModelSelectionExpression, ResponseModels, ResponseParameters, RouteId, RouteResponseKey |
| AWS::ApiGatewayV2::RoutingRule | Actions, Conditions, DomainNameArn, Priority |
| AWS::ApiGatewayV2::Stage | AccessLogSettings, ApiId, AutoDeploy, ClientCertificateId, DefaultRouteSettings, DeploymentId, Description, RouteSettings, StageName, StageVariables, Tags |
| AWS::ApiGatewayV2::VpcLink | Name, SecurityGroupIds, SubnetIds, Tags |
| AWS::AppConfig::Application | Description, Name, Tags |
| AWS::AppConfig::ConfigurationProfile | ApplicationId, DeletionProtectionCheck, Description, KmsKeyIdentifier, LocationUri, Name, RetrievalRoleArn, Tags, Type, Validators |
| AWS::AppConfig::Deployment | ApplicationId, ConfigurationProfileId, ConfigurationVersion, DeploymentStrategyId, Description, DynamicExtensionParameters, EnvironmentId, KmsKeyIdentifier, Tags |
| AWS::AppConfig::DeploymentStrategy | DeploymentDurationInMinutes, Description, FinalBakeTimeInMinutes, GrowthFactor, GrowthType, Name, ReplicateTo, Tags |
| AWS::AppConfig::Environment | ApplicationId, DeletionProtectionCheck, Description, Monitors, Name, Tags |
| AWS::AppConfig::Extension | Actions, Description, LatestVersionNumber, Name, Parameters, Tags |
| AWS::AppConfig::ExtensionAssociation | ExtensionIdentifier, ExtensionVersionNumber, Parameters, ResourceIdentifier, Tags |
| AWS::AppConfig::HostedConfigurationVersion | ApplicationId, ConfigurationProfileId, Content, ContentType, Description, LatestVersionNumber, VersionLabel |
| AWS::AppFlow::Connector | ConnectorLabel, ConnectorProvisioningConfig, ConnectorProvisioningType, Description |
| AWS::AppFlow::ConnectorProfile | ConnectionMode, ConnectorLabel, ConnectorProfileConfig, ConnectorProfileName, ConnectorType, KMSArn |
| AWS::AppFlow::Flow | Description, DestinationFlowConfigList, FlowName, FlowStatus, KMSArn, MetadataCatalogConfig, SourceFlowConfig, Tags, Tasks, TriggerConfig |
| AWS::AppIntegrations::Application | ApplicationConfig, ApplicationSourceConfig, ApplicationType, Description, IframeConfig, InitializationTimeout, IsService, Name, Namespace, Permissions, Tags |
| AWS::AppIntegrations::DataIntegration | Description, FileConfiguration, KmsKey, Name, ObjectConfiguration, ScheduleConfig, SourceURI, Tags |
| AWS::AppIntegrations::EventIntegration | Description, EventBridgeBus, EventFilter, Name, Tags |
| AWS::AppMesh::GatewayRoute | GatewayRouteName, MeshName, MeshOwner, Spec, Tags, VirtualGatewayName |
| AWS::AppMesh::Mesh | MeshName, Spec, Tags |
| AWS::AppMesh::Route | MeshName, MeshOwner, RouteName, Spec, Tags, VirtualRouterName |
| AWS::AppMesh::VirtualGateway | MeshName, MeshOwner, Spec, Tags, VirtualGatewayName |
| AWS::AppMesh::VirtualNode | MeshName, MeshOwner, Spec, Tags, VirtualNodeName |
| AWS::AppMesh::VirtualRouter | MeshName, MeshOwner, Spec, Tags, VirtualRouterName |
| AWS::AppMesh::VirtualService | MeshName, MeshOwner, Spec, Tags, VirtualServiceName |
| AWS::AppRunner::AutoScalingConfiguration | AutoScalingConfigurationName, MaxConcurrency, MaxSize, MinSize, Tags |
| AWS::AppRunner::ObservabilityConfiguration | ObservabilityConfigurationName, Tags, TraceConfiguration |
| AWS::AppRunner::Service | AutoScalingConfigurationArn, EncryptionConfiguration, HealthCheckConfiguration, InstanceConfiguration, NetworkConfiguration, ObservabilityConfiguration, ServiceName, SourceConfiguration, Tags |
| AWS::AppRunner::VpcConnector | SecurityGroups, Subnets, Tags, VpcConnectorName |
| AWS::AppRunner::VpcIngressConnection | IngressVpcConfiguration, ServiceArn, Tags, VpcIngressConnectionName |
| AWS::AppStream::AppBlock | Description, DisplayName, Name, PackagingType, PostSetupScriptDetails, SetupScriptDetails, SourceS3Location, Tags |
| AWS::AppStream::AppBlockBuilder | AccessEndpoints, AppBlockArns, Description, DisplayName, EnableDefaultInternetAccess, IamRoleArn, InstanceType, Name, Platform, Tags, VpcConfig |
| AWS::AppStream::Application | AppBlockArn, AttributesToDelete, Description, DisplayName, IconS3Location, InstanceFamilies, LaunchParameters, LaunchPath, Name, Platforms, Tags, WorkingDirectory |
| AWS::AppStream::ApplicationEntitlementAssociation | ApplicationIdentifier, EntitlementName, StackName |
| AWS::AppStream::ApplicationFleetAssociation | ApplicationArn, FleetName |
| AWS::AppStream::DirectoryConfig | CertificateBasedAuthProperties, DirectoryName, OrganizationalUnitDistinguishedNames, ServiceAccountCredentials |
| AWS::AppStream::Entitlement | AppVisibility, Attributes, Description, Name, StackName |
| AWS::AppStream::Fleet | ComputeCapacity, Description, DisableIMDSV1, DisconnectTimeoutInSeconds, DisplayName, DomainJoinInfo, EnableDefaultInternetAccess, FleetType, IamRoleArn, IdleDisconnectTimeoutInSeconds, ImageArn, ImageName, InstanceType, MaxConcurrentSessions, MaxSessionsPerInstance, MaxUserDurationInSeconds, Name, Platform, RootVolumeConfig, SessionScriptS3Location, StreamView, Tags, UsbDeviceFilterStrings, VpcConfig |
| AWS::AppStream::ImageBuilder | AccessEndpoints, AppstreamAgentVersion, Description, DisplayName, DomainJoinInfo, EnableDefaultInternetAccess, IamRoleArn, ImageArn, ImageName, InstanceType, Name, RootVolumeConfig, SoftwaresToInstall, SoftwaresToUninstall, Tags, VpcConfig |
| AWS::AppStream::Stack | AccessEndpoints, AgentAccessConfig, ApplicationSettings, AttributesToDelete, ContentRedirection, DeleteStorageConnectors, Description, DisplayName, EmbedHostDomains, FeedbackURL, Name, RedirectURL, StorageConnectors, StreamingExperienceSettings, Tags, UserSettings |
| AWS::AppStream::StackFleetAssociation | FleetName, StackName |
| AWS::AppStream::StackUserAssociation | AuthenticationType, SendEmailNotification, StackName, UserName |
| AWS::AppStream::User | AuthenticationType, FirstName, LastName, MessageAction, UserName |
| AWS::AppSync::Api | EventConfig, Name, OwnerContact, Tags |
| AWS::AppSync::ApiCache | ApiCachingBehavior, ApiId, AtRestEncryptionEnabled, HealthMetricsConfig, TransitEncryptionEnabled, Ttl, Type |
| AWS::AppSync::ApiKey | ApiId, ApiKeyId, Description, Expires |
| AWS::AppSync::ChannelNamespace | ApiId, CodeHandlers, CodeS3Location, HandlerConfigs, Name, PublishAuthModes, SubscribeAuthModes, Tags |
| AWS::AppSync::DataSource | ApiId, Description, DynamoDBConfig, EventBridgeConfig, HttpConfig, LambdaConfig, MetricsConfig, Name, OpenSearchServiceConfig, RelationalDatabaseConfig, ServiceRoleArn, Type |
| AWS::AppSync::DomainName | CertificateArn, Description, DomainName, Tags |
| AWS::AppSync::DomainNameApiAssociation | ApiId, DomainName |
| AWS::AppSync::FunctionConfiguration | ApiId, Code, CodeS3Location, DataSourceName, Description, FunctionVersion, MaxBatchSize, Name, RequestMappingTemplate, RequestMappingTemplateS3Location, ResponseMappingTemplate, ResponseMappingTemplateS3Location, Runtime, SyncConfig |
| AWS::AppSync::GraphQLApi | AdditionalAuthenticationProviders, ApiType, AuthenticationType, EnhancedMetricsConfig, EnvironmentVariables, IntrospectionConfig, LambdaAuthorizerConfig, LogConfig, MergedApiExecutionRoleArn, Name, OpenIDConnectConfig, OwnerContact, QueryDepthLimit, ResolverCountLimit, Tags, UserPoolConfig, Visibility, XrayEnabled |
| AWS::AppSync::GraphQLSchema | ApiId, Definition, DefinitionS3Location |
| AWS::AppSync::Resolver | ApiId, CachingConfig, Code, CodeS3Location, DataSourceName, FieldName, Kind, MaxBatchSize, MetricsConfig, PipelineConfig, RequestMappingTemplate, RequestMappingTemplateS3Location, ResponseMappingTemplate, ResponseMappingTemplateS3Location, Runtime, SyncConfig, TypeName |
| AWS::AppSync::SourceApiAssociation | Description, MergedApiIdentifier, SourceApiAssociationConfig, SourceApiIdentifier |
| AWS::AppTest::TestCase | Description, Name, Steps, Tags |
| AWS::ApplicationAutoScaling::ScalableTarget | MaxCapacity, MinCapacity, ResourceId, RoleARN, ScalableDimension, ScheduledActions, ServiceNamespace, SuspendedState |
| AWS::ApplicationAutoScaling::ScalingPolicy | PolicyName, PolicyType, PredictiveScalingPolicyConfiguration, ResourceId, ScalableDimension, ScalingTargetId, ServiceNamespace, StepScalingPolicyConfiguration, TargetTrackingScalingPolicyConfiguration |
| AWS::ApplicationInsights::Application | AttachMissingPermission, AutoConfigurationEnabled, CWEMonitorEnabled, ComponentMonitoringSettings, CustomComponents, GroupingType, LogPatternSets, OpsCenterEnabled, OpsItemSNSTopicArn, ResourceGroupName, SNSNotificationArn, Tags |
| AWS::ApplicationSignals::Discovery | No properties |
| AWS::ApplicationSignals::GroupingConfiguration | GroupingAttributeDefinitions |
| AWS::ApplicationSignals::ServiceLevelObjective | BurnRateConfigurations, Description, ExclusionWindows, Goal, Name, RequestBasedSli, Sli, Tags |
| AWS::Athena::CapacityReservation | CapacityAssignmentConfiguration, Name, Tags, TargetDpus |
| AWS::Athena::DataCatalog | ConnectionType, Description, Error, Name, Parameters, Status, Tags, Type |
| AWS::Athena::NamedQuery | Database, Description, Name, QueryString, WorkGroup |
| AWS::Athena::PreparedStatement | Description, QueryStatement, StatementName, WorkGroup |
| AWS::Athena::WorkGroup | Description, Name, RecursiveDeleteOption, State, Tags, WorkGroupConfiguration |
| AWS::AuditManager::Assessment | AssessmentReportsDestination, AwsAccount, Delegations, Description, FrameworkId, Name, Roles, Scope, Status, Tags |
| AWS::AuditManager::AssessmentFramework | ComplianceType, ControlSets, Description, Name, Tags |
| AWS::AutoScaling::AutoScalingGroup | AutoScalingGroupName, AvailabilityZoneDistribution, AvailabilityZoneIds, AvailabilityZoneImpairmentPolicy, AvailabilityZones, CapacityRebalance, CapacityReservationSpecification, Context, Cooldown, DefaultInstanceWarmup, DeletionProtection, DesiredCapacity, DesiredCapacityType, HealthCheckGracePeriod, HealthCheckType, InstanceId, InstanceLifecyclePolicy, InstanceMaintenancePolicy, LaunchConfigurationName, LaunchTemplate, LifecycleHookSpecificationList, LoadBalancerNames, MaxInstanceLifetime, MaxSize, MetricsCollection, MinSize, MixedInstancesPolicy, NewInstancesProtectedFromScaleIn, NotificationConfigurations, PlacementGroup, ServiceLinkedRoleARN, SkipZonalShiftValidation, Tags, TargetGroupARNs, TerminationPolicies, TrafficSources, VPCZoneIdentifier |
| AWS::AutoScaling::LaunchConfiguration | AssociatePublicIpAddress, BlockDeviceMappings, ClassicLinkVPCId, ClassicLinkVPCSecurityGroups, EbsOptimized, IamInstanceProfile, ImageId, InstanceId, InstanceMonitoring, InstanceType, KernelId, KeyName, LaunchConfigurationName, MetadataOptions, PlacementTenancy, RamDiskId, SecurityGroups, SpotPrice, UserData |
| AWS::AutoScaling::LifecycleHook | AutoScalingGroupName, DefaultResult, HeartbeatTimeout, LifecycleHookName, LifecycleTransition, NotificationMetadata, NotificationTargetARN, RoleARN |
| AWS::AutoScaling::ScalingPolicy | AdjustmentType, AutoScalingGroupName, Cooldown, EstimatedInstanceWarmup, MetricAggregationType, MinAdjustmentMagnitude, PolicyType, PredictiveScalingConfiguration, ScalingAdjustment, StepAdjustments, TargetTrackingConfiguration |
| AWS::AutoScaling::ScheduledAction | AutoScalingGroupName, DesiredCapacity, EndTime, MaxSize, MinSize, Recurrence, StartTime, TimeZone |
| AWS::AutoScaling::WarmPool | AutoScalingGroupName, InstanceReusePolicy, MaxGroupPreparedCapacity, MinSize, PoolState |
| AWS::AutoScalingPlans::ScalingPlan | ApplicationSource, ScalingInstructions |
| AWS::B2BI::Capability | Configuration, InstructionsDocuments, Name, Tags, Type |
| AWS::B2BI::Partnership | Capabilities, CapabilityOptions, Email, Name, Phone, ProfileId, Tags |
| AWS::B2BI::Profile | BusinessName, Email, Logging, Name, Phone, Tags |
| AWS::B2BI::Transformer | InputConversion, Mapping, Name, OutputConversion, SampleDocuments, Status, Tags |
| AWS::BCM::Dashboard | Description, Name, Tags, Widgets |
| AWS::BCMDataExports::Export | Export, Tags |
| AWS::Backup::BackupPlan | BackupPlan, BackupPlanTags |
| AWS::Backup::BackupSelection | BackupPlanId, BackupSelection |
| AWS::Backup::BackupVault | AccessPolicy, BackupVaultName, BackupVaultTags, EncryptionKeyArn, LockConfiguration, Notifications |
| AWS::Backup::Framework | FrameworkControls, FrameworkDescription, FrameworkName, FrameworkTags |
| AWS::Backup::LegalHold | Description, RecoveryPointSelection, Tags, Title |
| AWS::Backup::LogicallyAirGappedBackupVault | AccessPolicy, BackupVaultName, BackupVaultTags, EncryptionKeyArn, MaxRetentionDays, MinRetentionDays, MpaApprovalTeamArn, Notifications |
| AWS::Backup::ReportPlan | ReportDeliveryChannel, ReportPlanDescription, ReportPlanName, ReportPlanTags, ReportSetting |
| AWS::Backup::RestoreTestingPlan | RecoveryPointSelection, RestoreTestingPlanName, ScheduleExpression, ScheduleExpressionTimezone, StartWindowHours, Tags |
| AWS::Backup::RestoreTestingSelection | IamRoleArn, ProtectedResourceArns, ProtectedResourceConditions, ProtectedResourceType, RestoreMetadataOverrides, RestoreTestingPlanName, RestoreTestingSelectionName, ValidationWindowHours |
| AWS::Backup::TieringConfiguration | BackupVaultName, ResourceSelection, TieringConfigurationName, TieringConfigurationTags |
| AWS::BackupGateway::Hypervisor | Host, KmsKeyArn, LogGroupArn, Name, Password, Tags, Username |
| AWS::Batch::ComputeEnvironment | ComputeEnvironmentName, ComputeResources, Context, EksConfiguration, ReplaceComputeEnvironment, ServiceRole, State, Tags, Type, UnmanagedvCpus, UpdatePolicy |
| AWS::Batch::ConsumableResource | ConsumableResourceName, ResourceType, Tags, TotalQuantity |
| AWS::Batch::JobDefinition | ConsumableResourceProperties, ContainerProperties, EcsProperties, EksProperties, JobDefinitionName, NodeProperties, Parameters, PlatformCapabilities, PropagateTags, ResourceRetentionPolicy, RetryStrategy, SchedulingPriority, Tags, Timeout, Type |
| AWS::Batch::JobQueue | ComputeEnvironmentOrder, JobQueueName, JobQueueType, JobStateTimeLimitActions, Priority, SchedulingPolicyArn, ServiceEnvironmentOrder, State, Tags |
| AWS::Batch::QuotaShare | CapacityLimits, JobQueue, PreemptionConfiguration, QuotaShareName, ResourceSharingConfiguration, State, Tags |
| AWS::Batch::SchedulingPolicy | FairsharePolicy, Name, QuotaSharePolicy, Tags |
| AWS::Batch::ServiceEnvironment | CapacityLimits, ServiceEnvironmentName, ServiceEnvironmentType, State, Tags |
| AWS::BcmPricingCalculator::BillScenario | CostCategoryGroupSharingPreferenceArn, ExpiresAt, GroupSharingPreference, Name, Tags |
| AWS::Bedrock::Agent | ActionGroups, AgentCollaboration, AgentCollaborators, AgentName, AgentResourceRoleArn, AutoPrepare, CustomOrchestration, CustomerEncryptionKeyArn, Description, FoundationModel, GuardrailConfiguration, IdleSessionTTLInSeconds, Instruction, KnowledgeBases, MemoryConfiguration, OrchestrationType, PromptOverrideConfiguration, SkipResourceInUseCheckOnDelete, Tags, TestAliasTags |
| AWS::Bedrock::AgentAlias | AgentAliasName, AgentId, Description, RoutingConfiguration, Tags |
| AWS::Bedrock::ApplicationInferenceProfile | Description, InferenceProfileName, ModelSource, Tags |
| AWS::Bedrock::AutomatedReasoningPolicy | Description, ForceDelete, KmsKeyId, Name, PolicyDefinition, Tags |
| AWS::Bedrock::AutomatedReasoningPolicyVersion | LastUpdatedDefinitionHash, PolicyArn, Tags |
| AWS::Bedrock::Blueprint | BlueprintName, KmsEncryptionContext, KmsKeyId, Schema, Tags, Type |
| AWS::Bedrock::DataAutomationLibrary | EncryptionConfiguration, LibraryDescription, LibraryName, Tags |
| AWS::Bedrock::DataAutomationProject | CustomOutputConfiguration, KmsEncryptionContext, KmsKeyId, OverrideConfiguration, ProjectDescription, ProjectName, ProjectType, StandardOutputConfiguration, Tags |
| AWS::Bedrock::DataSource | DataDeletionPolicy, DataSourceConfiguration, Description, KnowledgeBaseId, Name, ServerSideEncryptionConfiguration, VectorIngestionConfiguration |
| AWS::Bedrock::EnforcedGuardrailConfiguration | GuardrailIdentifier, GuardrailVersion, ModelEnforcement, SelectiveContentGuarding |
| AWS::Bedrock::Flow | CustomerEncryptionKeyArn, Definition, DefinitionS3Location, DefinitionString, DefinitionSubstitutions, Description, ExecutionRoleArn, Name, Tags, TestAliasTags |
| AWS::Bedrock::FlowAlias | ConcurrencyConfiguration, Description, FlowArn, Name, RoutingConfiguration, Tags |
| AWS::Bedrock::FlowVersion | Description, FlowArn |
| AWS::Bedrock::Guardrail | AutomatedReasoningPolicyConfig, BlockedInputMessaging, BlockedOutputsMessaging, ContentPolicyConfig, ContextualGroundingPolicyConfig, CrossRegionConfig, Description, KmsKeyArn, Name, SensitiveInformationPolicyConfig, Tags, TopicPolicyConfig, WordPolicyConfig |
| AWS::Bedrock::GuardrailVersion | Description, GuardrailIdentifier |
| AWS::Bedrock::IntelligentPromptRouter | Description, FallbackModel, Models, PromptRouterName, RoutingCriteria, Tags |
| AWS::Bedrock::KnowledgeBase | Description, KnowledgeBaseConfiguration, Name, RoleArn, StorageConfiguration, Tags |
| AWS::Bedrock::KnowledgeBasePolicy | KnowledgeBaseId, PolicyDocument |
| AWS::Bedrock::Prompt | CustomerEncryptionKeyArn, DefaultVariant, Description, Name, Tags, Variants |
| AWS::Bedrock::PromptVersion | Description, PromptArn, Tags |
| AWS::Bedrock::ResourcePolicy | PolicyDocument, ResourceArn |
| AWS::BedrockAgentCore::ApiKeyCredentialProvider | ApiKey, ApiKeySecretConfig, ApiKeySecretSource, Name, Tags |
| AWS::BedrockAgentCore::BrowserCustom | BrowserSigning, Certificates, Description, EnterprisePolicies, ExecutionRoleArn, Name, NetworkConfiguration, RecordingConfig, Tags |
| AWS::BedrockAgentCore::BrowserProfile | Description, Name, Tags |
| AWS::BedrockAgentCore::CodeInterpreterCustom | Certificates, Description, ExecutionRoleArn, Name, NetworkConfiguration, Tags |
| AWS::BedrockAgentCore::ConfigurationBundle | BranchName, BundleName, CommitMessage, Components, CreatedBy, Description, KmsKeyArn, Tags |
| AWS::BedrockAgentCore::Dataset | DatasetName, Description, KmsKeyArn, SchemaType, Source, Tags |
| AWS::BedrockAgentCore::Evaluator | Description, EvaluatorConfig, EvaluatorName, KmsKeyArn, Level, Tags |
| AWS::BedrockAgentCore::Gateway | AuthorizerConfiguration, AuthorizerType, Description, ExceptionLevel, InterceptorConfigurations, KmsKeyArn, Name, PolicyEngineConfiguration, ProtocolConfiguration, ProtocolType, RoleArn, Tags |
| AWS::BedrockAgentCore::GatewayTarget | CredentialProviderConfigurations, Description, GatewayIdentifier, MetadataConfiguration, Name, PrivateEndpoint, TargetConfiguration |
| AWS::BedrockAgentCore::Harness | AllowedTools, AuthorizerConfiguration, Environment, EnvironmentArtifact, EnvironmentVariables, ExecutionRoleArn, HarnessName, MaxIterations, MaxTokens, Memory, Model, Skills, SystemPrompt, Tags, TimeoutSeconds, Tools, Truncation |
| AWS::BedrockAgentCore::Memory | Description, EncryptionKeyArn, EventExpiryDuration, IndexedKeys, MemoryExecutionRoleArn, MemoryStrategies, Name, StreamDeliveryResources, Tags |
| AWS::BedrockAgentCore::OAuth2CredentialProvider | CredentialProviderVendor, Name, Oauth2ProviderConfigInput, Tags |
| AWS::BedrockAgentCore::OnlineEvaluationConfig | ClusteringConfig, DataSourceConfig, Description, EvaluationExecutionRoleArn, Evaluators, ExecutionStatus, Insights, OnlineEvaluationConfigName, Rule, Tags |
| AWS::BedrockAgentCore::PaymentConnector | ConnectorName, ConnectorType, CredentialProviderConfigurations, Description, PaymentManagerId |
| AWS::BedrockAgentCore::PaymentCredentialProvider | CredentialProviderVendor, Name, ProviderConfigurationInput, Tags |
| AWS::BedrockAgentCore::PaymentManager | AuthorizerConfiguration, AuthorizerType, Description, Name, RoleArn, Tags |
| AWS::BedrockAgentCore::Policy | Definition, Description, EnforcementMode, Name, PolicyEngineId, ValidationMode |
| AWS::BedrockAgentCore::PolicyEngine | Description, EncryptionKeyArn, Name, Tags |
| AWS::BedrockAgentCore::ResourcePolicy | Policy, ResourceArn |
| AWS::BedrockAgentCore::Runtime | AgentRuntimeArtifact, AgentRuntimeName, AuthorizerConfiguration, Description, EnvironmentVariables, FilesystemConfigurations, LifecycleConfiguration, NetworkConfiguration, ProtocolConfiguration, RequestHeaderConfiguration, RoleArn, Tags |
| AWS::BedrockAgentCore::RuntimeEndpoint | AgentRuntimeId, AgentRuntimeVersion, Description, Name, Tags |
| AWS::BedrockAgentCore::WorkloadIdentity | AllowedResourceOauth2ReturnUrls, Name, Tags |
Why use this CloudFormation properties reference?
Building AWS infrastructure with CloudFormation requires knowing the exact properties available for each AWS resource type. This reference provides quick access to every CloudFormation resource type and its configurable properties, making template development faster and more accurate.
The official AWS documentation spreads this information across many resource pages. This tool consolidates those properties into a single searchable table so you can find the exact property names you need without hunting through service documentation.
Quick CloudFormation property syntax
Properties sit under a resource's Properties block. The names must match the CloudFormation resource specification exactly.
Resources:
MyS3Bucket:
Type: AWS::S3::Bucket
Properties:
BucketName: my-unique-bucket-name
VersioningConfiguration:
Status: Enabled
PublicAccessBlockConfiguration:
BlockPublicAcls: true
BlockPublicPolicy: trueHow to use the properties table
- Search for an AWS service, resource type, or property name, such as
AWS::S3::BucketorBucketName. - Find the available properties in the properties column.
- Open the resource type link when you need the official AWS documentation.
- Copy the property names into your CloudFormation template.
- Configure each property according to your infrastructure requirements.
Why exact property names matter
CloudFormation validates resource properties before it creates or updates a stack. A typo, wrong casing, or property from a different resource type can fail validation before deployment. Searching the table helps you confirm whether a property is supported before you add it to a template.
This is especially useful when you move between similar resources. For example, AWS::ApiGateway::Stage and AWS::ApiGatewayV2::Stage look related, but their property sets are not identical.
Useful workflow for template authoring
- Start with the resource type you want to create.
- Search this table for the resource and scan the supported properties.
- Open the AWS documentation link for nested property shapes and update behavior.
- Validate locally with
cfn-lintor your IDE before deploying. - Create a change set when updating production stacks.
Generate CloudFormation resources in VS Code
If you prefer working directly in your IDE, the CloudFormation Snippets VS Code extension can scaffold CloudFormation resources in YAML.
Related tools
CloudFormation Resource Attributes Reference
Search AWS CloudFormation resource types and the attributes available through Fn::GetAtt for each resource.
IAM Policy Converter
Convert AWS IAM JSON policy documents into Terraform, CloudFormation, CDK TypeScript, or CDK Python snippets.
Amazon VPC Endpoint policy generator
Generate VPC endpoint policies from AWS Policy Generator action metadata and export JSON, Terraform, or CloudFormation snippets.
Next step
Want AWS engineering that feels this practical?
I build these tools to make AWS easier to manage. If this level of quality is what you want in your own cloud platform, Towards The Cloud can help with landing zones, infrastructure as code, security reviews, migrations, and cost optimization.