@awboost/cfntypes 0.100.338 → 0.100.340

package/lib/resources.generated.d.ts

@@ -14762,6 +14762,44 @@ export type AthenaWorkGroupAclConfiguration = {
      */
     S3AclOption: AthenaWorkGroupS3AclOption;
 };
+/**
+ * Type definition for `AWS::Athena::WorkGroup.Classification`.
+ * A classification refers to a set of specific configurations.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-classification.html}
+ */
+export type AthenaWorkGroupClassification = {
+    /**
+     * The name of the configuration classification.
+     */
+    Name?: string;
+    /**
+     * A set of properties specified within a configuration classification.
+     */
+    Properties?: Record<string, string>;
+};
+/**
+ * Type definition for `AWS::Athena::WorkGroup.CloudWatchLoggingConfiguration`.
+ * Configuration settings for delivering logs to Amazon CloudWatch log groups.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-cloudwatchloggingconfiguration.html}
+ */
+export type AthenaWorkGroupCloudWatchLoggingConfiguration = {
+    /**
+     * Enables CloudWatch logging.
+     */
+    Enabled?: boolean;
+    /**
+     * The name of the log group in Amazon CloudWatch Logs where you want to publish your logs.
+     */
+    LogGroup?: string;
+    /**
+     * Prefix for the CloudWatch log stream name.
+     */
+    LogStreamNamePrefix?: string;
+    /**
+     * The types of logs that you want to publish to CloudWatch.
+     */
+    LogTypes?: Record<string, string[]>;
+};
 /**
  * Type definition for `AWS::Athena::WorkGroup.CustomerContentEncryptionConfiguration`.
  * Indicates the KMS key for encrypting notebook content.
@@ -14794,6 +14832,37 @@ export type AthenaWorkGroupEncryptionConfiguration = {
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-encryptionoption.html}
  */
 export type AthenaWorkGroupEncryptionOption = "SSE_S3" | "SSE_KMS" | "CSE_KMS";
+/**
+ * Type definition for `AWS::Athena::WorkGroup.EngineConfiguration`.
+ * The engine configuration for running queries.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-engineconfiguration.html}
+ */
+export type AthenaWorkGroupEngineConfiguration = {
+    /**
+     * Contains additional notebook engine MAP<string, string> parameter mappings in the form of key-value pairs. To specify an Athena notebook that the Jupyter server will download and serve, specify a value for the StartSessionRequest$NotebookVersion field, and then add a key named NotebookId to AdditionalConfigs that has the value of the Athena notebook ID.
+     */
+    AdditionalConfigs?: Record<string, string>;
+    /**
+     * The configuration classifications that can be specified for the engine.
+     */
+    Classifications?: AthenaWorkGroupClassification[];
+    /**
+     * The number of DPUs to use for the coordinator. A coordinator is a special executor that orchestrates processing work and manages other executors in a notebook session. The default is 1.
+     */
+    CoordinatorDpuSize?: number;
+    /**
+     * The default number of DPUs to use for executors. An executor is the smallest unit of compute that a notebook session can request from Athena. The default is 1.
+     */
+    DefaultExecutorDpuSize?: number;
+    /**
+     * The maximum number of DPUs that can run concurrently.
+     */
+    MaxConcurrentDpus?: number;
+    /**
+     * Specifies custom jar files and Spark properties for use cases like cluster encryption, table formats, and general Spark tuning.
+     */
+    SparkProperties?: Record<string, string>;
+};
 /**
  * Type definition for `AWS::Athena::WorkGroup.EngineVersion`.
  * The Athena engine version for running queries.
@@ -14805,6 +14874,21 @@ export type AthenaWorkGroupEngineVersion = {
      */
     SelectedEngineVersion?: string;
 };
+/**
+ * Type definition for `AWS::Athena::WorkGroup.ManagedLoggingConfiguration`.
+ * Configuration settings for managed log persistence.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-managedloggingconfiguration.html}
+ */
+export type AthenaWorkGroupManagedLoggingConfiguration = {
+    /**
+     * Enables managed log persistence.
+     */
+    Enabled?: boolean;
+    /**
+     * The KMS key ARN to encrypt the logs stored in managed log persistence.
+     */
+    KmsKey?: string;
+};
 /**
  * Type definition for `AWS::Athena::WorkGroup.ManagedQueryResultsConfiguration`.
  * The configuration for the managed query results and encryption option. ResultConfiguration and ManagedQueryResultsConfiguration cannot be set at the same time
@@ -14828,6 +14912,25 @@ export type AthenaWorkGroupManagedStorageEncryptionConfiguration = {
      */
     KmsKey?: string;
 };
+/**
+ * Type definition for `AWS::Athena::WorkGroup.MonitoringConfiguration`.
+ * Contains the configuration settings for managed log persistence, delivering logs to Amazon S3 buckets, Amazon CloudWatch log groups etc.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-monitoringconfiguration.html}
+ */
+export type AthenaWorkGroupMonitoringConfiguration = {
+    /**
+     * Configuration settings for delivering logs to Amazon CloudWatch log groups.
+     */
+    CloudWatchLoggingConfiguration?: AthenaWorkGroupCloudWatchLoggingConfiguration;
+    /**
+     * Configuration settings for managed log persistence.
+     */
+    ManagedLoggingConfiguration?: AthenaWorkGroupManagedLoggingConfiguration;
+    /**
+     * Configuration settings for delivering logs to Amazon S3 buckets.
+     */
+    S3LoggingConfiguration?: AthenaWorkGroupS3LoggingConfiguration;
+};
 /**
  * Type definition for `AWS::Athena::WorkGroup.ResultConfiguration`.
  * The location in Amazon S3 where query results are stored and the encryption option, if any, used for query results. These are known as "client-side settings". If workgroup settings override client-side settings, then the query uses the workgroup settings.
@@ -14885,6 +14988,25 @@ export type AthenaWorkGroupResultConfigurationUpdates = {
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-s3acloption.html}
  */
 export type AthenaWorkGroupS3AclOption = "BUCKET_OWNER_FULL_CONTROL";
+/**
+ * Type definition for `AWS::Athena::WorkGroup.S3LoggingConfiguration`.
+ * Configuration settings for delivering logs to Amazon S3 buckets.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-s3loggingconfiguration.html}
+ */
+export type AthenaWorkGroupS3LoggingConfiguration = {
+    /**
+     * Enables S3 log delivery.
+     */
+    Enabled?: boolean;
+    /**
+     * The KMS key ARN to encrypt the logs published to the given Amazon S3 destination.
+     */
+    KmsKey?: string;
+    /**
+     * The Amazon S3 destination URI for log publishing.
+     */
+    LogLocation?: string;
+};
 /**
  * Type definition for `AWS::Athena::WorkGroup.Tag`.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-tag.html}
@@ -14923,18 +15045,26 @@ export type AthenaWorkGroupWorkGroupConfiguration = {
      * If set to "true", the settings for the workgroup override client-side settings. If set to "false", client-side settings are used
      */
     EnforceWorkGroupConfiguration?: boolean;
+    /**
+     * The engine configuration for running queries.
+     */
+    EngineConfiguration?: AthenaWorkGroupEngineConfiguration;
     /**
      * The Athena engine version for running queries.
      */
     EngineVersion?: AthenaWorkGroupEngineVersion;
     /**
-     * Execution Role ARN required to run Athena Spark Calculations
+     * The ARN of the execution role used to access user resources for Spark sessions and Identity Center enabled workgroups. This property applies only to Spark enabled workgroups and Identity Center enabled workgroups.
      */
     ExecutionRole?: string;
     /**
      * The configuration for the managed query results and encryption option. ResultConfiguration and ManagedQueryResultsConfiguration cannot be set at the same time
      */
     ManagedQueryResultsConfiguration?: AthenaWorkGroupManagedQueryResultsConfiguration;
+    /**
+     * Contains the configuration settings for managed log persistence, delivering logs to Amazon S3 buckets, Amazon CloudWatch log groups etc.
+     */
+    MonitoringConfiguration?: AthenaWorkGroupMonitoringConfiguration;
     /**
      * Indicates that the Amazon CloudWatch metrics are enabled for the workgroup.
      */
@@ -14972,18 +15102,26 @@ export type AthenaWorkGroupWorkGroupConfigurationUpdates = {
      * If set to "true", the settings for the workgroup override client-side settings. If set to "false", client-side settings are used
      */
     EnforceWorkGroupConfiguration?: boolean;
+    /**
+     * The engine configuration for running queries.
+     */
+    EngineConfiguration?: AthenaWorkGroupEngineConfiguration;
     /**
      * The Athena engine version for running queries.
      */
     EngineVersion?: AthenaWorkGroupEngineVersion;
     /**
-     * Execution Role ARN required to run Athena Spark Calculations
+     * The ARN of the execution role used to access user resources for Spark sessions and Identity Center enabled workgroups. This property applies only to Spark enabled workgroups and Identity Center enabled workgroups.
      */
     ExecutionRole?: string;
     /**
      * The configuration for the managed query results and encryption option. ResultConfiguration and ManagedQueryResultsConfiguration cannot be set at the same time
      */
     ManagedQueryResultsConfiguration?: AthenaWorkGroupManagedQueryResultsConfiguration;
+    /**
+     * Contains the configuration settings for managed log persistence, delivering logs to Amazon S3 buckets, Amazon CloudWatch log groups etc.
+     */
+    MonitoringConfiguration?: AthenaWorkGroupMonitoringConfiguration;
     /**
      * Indicates that the Amazon CloudWatch metrics are enabled for the workgroup.
      */
@@ -24638,7 +24776,7 @@ export type BedrockKnowledgeBaseKnowledgeBaseStatus = "CREATING" | "ACTIVE" | "D
  * The storage type of a knowledge base.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-knowledgebase-knowledgebasestoragetype.html}
  */
-export type BedrockKnowledgeBaseKnowledgeBaseStorageType = "OPENSEARCH_SERVERLESS" | "PINECONE" | "RDS" | "MONGO_DB_ATLAS" | "NEPTUNE_ANALYTICS" | "OPENSEARCH_MANAGED_CLUSTER";
+export type BedrockKnowledgeBaseKnowledgeBaseStorageType = "OPENSEARCH_SERVERLESS" | "PINECONE" | "RDS" | "MONGO_DB_ATLAS" | "NEPTUNE_ANALYTICS" | "S3_VECTORS" | "OPENSEARCH_MANAGED_CLUSTER";
 /**
  * Type definition for `AWS::Bedrock::KnowledgeBase.KnowledgeBaseType`.
  * The type of a knowledge base.
@@ -25260,6 +25398,27 @@ export type BedrockKnowledgeBaseS3Location = {
      */
     URI: string;
 };
+/**
+ * Type definition for `AWS::Bedrock::KnowledgeBase.S3VectorsConfiguration`.
+ * Contains the storage configuration of the knowledge base for S3 vectors.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrock-knowledgebase-s3vectorsconfiguration.html}
+ */
+export type BedrockKnowledgeBaseS3VectorsConfiguration = {
+    /**
+     * The Amazon Resource Name (ARN) of the vector index used for the knowledge base. This ARN identifies the specific vector index resource within Amazon Bedrock.
+     */
+    IndexArn?: string;
+    /**
+     * The name of the vector index used for the knowledge base. This name identifies the vector index within the Amazon Bedrock service.
+     * @minLength `3`
+     * @maxLength `63`
+     */
+    IndexName?: string;
+    /**
+     * The Amazon Resource Name (ARN) of the S3 bucket where vector embeddings are stored. This bucket contains the vector data used by the knowledge base.
+     */
+    VectorBucketArn?: string;
+};
 /**
  * Type definition for `AWS::Bedrock::KnowledgeBase.SqlKnowledgeBaseConfiguration`.
  * Configurations for a SQL knowledge base
@@ -25305,6 +25464,10 @@ export type BedrockKnowledgeBaseStorageConfiguration = {
      * Contains details about the storage configuration of the knowledge base in Amazon RDS. For more information, see Create a vector index in Amazon RDS.
      */
     RdsConfiguration?: BedrockKnowledgeBaseRdsConfiguration;
+    /**
+     * Contains the storage configuration of the knowledge base for S3 vectors.
+     */
+    S3VectorsConfiguration?: BedrockKnowledgeBaseS3VectorsConfiguration;
     /**
      * The storage type of a knowledge base.
      */
@@ -28899,6 +29062,10 @@ export type CassandraTableProps = {
      * @maxLength `50`
      */
     Tags?: CassandraTableTag[];
+    /**
+     * Warm throughput configuration for the table
+     */
+    WarmThroughput?: CassandraTableWarmThroughput;
 };
 /**
  * Type definition for `AWS::Cassandra::Table.AutoScalingSetting`.
@@ -29099,6 +29266,21 @@ export type CassandraTableTargetTrackingScalingPolicyConfiguration = {
     ScaleOutCooldown?: number;
     TargetValue: number;
 };
+/**
+ * Type definition for `AWS::Cassandra::Table.WarmThroughput`.
+ * Warm throughput configuration for the table
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cassandra-table-warmthroughput.html}
+ */
+export type CassandraTableWarmThroughput = {
+    /**
+     * @min `1`
+     */
+    ReadUnitsPerSecond?: number;
+    /**
+     * @min `1`
+     */
+    WriteUnitsPerSecond?: number;
+};
 /**
  * Resource schema for AWS::Cassandra::Type
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cassandra-type.html}
@@ -32364,6 +32546,10 @@ export type CloudFormationStackSetAttributes = {
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-stackset-autodeployment.html}
  */
 export type CloudFormationStackSetAutoDeployment = {
+    /**
+     * A list of StackSet ARNs that this StackSet depends on for auto-deployment operations. When auto-deployment is triggered, operations will be sequenced to ensure all dependencies complete successfully before this StackSet's operation begins.
+     */
+    DependsOn?: string[];
     /**
      * If set to true, StackSets automatically deploys additional stack instances to AWS Organizations accounts that are added to a target organization or organizational unit (OU) in the specified Regions. If an account is removed from a target organization or OU, StackSets deletes stack instances from the account in the specified Regions.
      */
@@ -33389,6 +33575,13 @@ export type CloudFrontDistributionCacheBehavior = {
        */
     ViewerProtocolPolicy: string;
 };
+/**
+ * Type definition for `AWS::CloudFront::Distribution.ConnectionFunctionAssociation`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-connectionfunctionassociation.html}
+ */
+export type CloudFrontDistributionConnectionFunctionAssociation = {
+    Id: string;
+};
 /**
  * Type definition for `AWS::CloudFront::Distribution.ConnectionMode`.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-connectionmode.html}
@@ -33649,6 +33842,7 @@ export type CloudFrontDistributionDistributionConfig = {
      * A comment to describe the distribution. The comment cannot be longer than 128 characters.
      */
     Comment?: string;
+    ConnectionFunctionAssociation?: CloudFrontDistributionConnectionFunctionAssociation;
     /**
      * This field specifies whether the connection mode is through a standard distribution (direct) or a multi-tenant distribution with distribution tenants (tenant-only).
      */
@@ -33753,6 +33947,7 @@ export type CloudFrontDistributionDistributionConfig = {
      * A complex type that determines the distribution's SSL/TLS configuration for communicating with viewers.
      */
     ViewerCertificate?: CloudFrontDistributionViewerCertificate;
+    ViewerMtlsConfig?: CloudFrontDistributionViewerMtlsConfig;
     /**
        * Multi-tenant distributions only support WAF V2 web ACLs.
         A unique identifier that specifies the WAF web ACL, if any, to associate with this distribution. To specify a web ACL created using the latest version of WAF, use the ACL ARN, for example ``arn:aws:wafv2:us-east-1:123456789012:global/webacl/ExampleWebACL/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111``. To specify a web ACL created using WAF Classic, use the ACL ID, for example ``a1b2c3d4-5678-90ab-cdef-EXAMPLE11111``.
@@ -34222,6 +34417,15 @@ export type CloudFrontDistributionTag = {
        */
     Value: string;
 };
+/**
+ * Type definition for `AWS::CloudFront::Distribution.TrustStoreConfig`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-truststoreconfig.html}
+ */
+export type CloudFrontDistributionTrustStoreConfig = {
+    AdvertiseTrustStoreCaNames?: boolean;
+    IgnoreCertificateExpiry?: boolean;
+    TrustStoreId: string;
+};
 /**
  * Type definition for `AWS::CloudFront::Distribution.ViewerCertificate`.
  * A complex type that determines the distribution's SSL/TLS configuration for communicating with viewers.
@@ -34285,6 +34489,19 @@ export type CloudFrontDistributionViewerCertificate = {
        */
     SslSupportMethod?: string;
 };
+/**
+ * Type definition for `AWS::CloudFront::Distribution.ViewerMtlsConfig`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-viewermtlsconfig.html}
+ */
+export type CloudFrontDistributionViewerMtlsConfig = {
+    Mode?: CloudFrontDistributionViewerMtlsMode;
+    TrustStoreConfig?: CloudFrontDistributionTrustStoreConfig;
+};
+/**
+ * Type definition for `AWS::CloudFront::Distribution.ViewerMtlsMode`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-viewermtlsmode.html}
+ */
+export type CloudFrontDistributionViewerMtlsMode = "required" | "optional";
 /**
  * Type definition for `AWS::CloudFront::Distribution.VpcOriginConfig`.
  * An Amazon CloudFront VPC origin configuration.
@@ -35426,6 +35643,96 @@ export type CloudFrontStreamingDistributionTrustedSigners = {
     AwsAccountNumbers?: string[];
     Enabled: boolean;
 };
+/**
+ * Resource Type definition for AWS::CloudFront::TrustStore. TrustStores contain CA certificates for mTLS authentication and can be associated with CloudFront distributions.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-truststore.html}
+ */
+export type CloudFrontTrustStoreProps = {
+    CaCertificatesBundleSource?: CloudFrontTrustStoreCaCertificatesBundleSource;
+    /**
+     * A unique name to identify the trust store
+     */
+    Name: string;
+    /**
+     * Key-value pairs for resource tagging
+     */
+    Tags?: CloudFrontTrustStoreTag[];
+};
+/**
+ * Attribute type definition for `AWS::CloudFront::TrustStore`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-truststore.html#aws-resource-cloudfront-truststore-return-values}
+ */
+export type CloudFrontTrustStoreAttributes = {
+    /**
+     * The Amazon Resource Name (ARN) of the trust store
+     * @pattern `^arn:aws:cloudfront::[0-9]{12}:trust-store/[A-Za-z0-9_]+$`
+     */
+    Arn: string;
+    ETag: string;
+    /**
+     * The unique identifier for the trust store
+     */
+    Id: string;
+    /**
+     * The last modification timestamp of the trust store PEM file
+     */
+    LastModifiedTime: string;
+    /**
+     * The number of CA certificates in the trust store PEM file
+     */
+    NumberOfCaCertificates: number;
+    /**
+     * Current status of the trust store
+     */
+    Status: "PENDING" | "ACTIVE" | "FAILED";
+};
+/**
+ * Type definition for `AWS::CloudFront::TrustStore.CaCertificatesBundleS3Location`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-truststore-cacertificatesbundles3location.html}
+ */
+export type CloudFrontTrustStoreCaCertificatesBundleS3Location = {
+    /**
+     * The S3 bucket containing the CA certificates bundle PEM file
+     */
+    Bucket: string;
+    /**
+     * The S3 object key of the CA certificates bundle PEM file
+     */
+    Key: string;
+    /**
+     * The S3 bucket region
+     */
+    Region: string;
+    /**
+     * The S3 object version of the CA certificates bundle PEM file
+     */
+    Version?: string;
+};
+/**
+ * Type definition for `AWS::CloudFront::TrustStore.CaCertificatesBundleSource`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-truststore-cacertificatesbundlesource.html}
+ */
+export type CloudFrontTrustStoreCaCertificatesBundleSource = {
+    CaCertificatesBundleS3Location: CloudFrontTrustStoreCaCertificatesBundleS3Location;
+};
+/**
+ * Type definition for `AWS::CloudFront::TrustStore.Tag`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-truststore-tag.html}
+ */
+export type CloudFrontTrustStoreTag = {
+    /**
+     * @minLength `1`
+     * @maxLength `128`
+     * @pattern `^[a-zA-Z0-9 _.:/=+\-@]{1,128}\Z`
+     */
+    Key: string;
+    /**
+     * @minLength `0`
+     * @maxLength `256`
+     * @pattern `^[a-zA-Z0-9 _.:/=+\-@]{0,256}\Z`
+     */
+    Value: string;
+};
 /**
  * Resource type definition for `AWS::CloudFront::VpcOrigin`.
  * An Amazon CloudFront VPC origin.
@@ -67421,6 +67728,18 @@ export type ECRPullThroughCacheRuleProps = {
      */
     UpstreamRepositoryPrefix?: string;
 };
+/**
+ * Resource Type definition for AWS::ECR::PullTimeUpdateExclusion controls the exclusion configuration for ecr image pull time update.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pulltimeupdateexclusion.html}
+ */
+export type ECRPullTimeUpdateExclusionProps = {
+    /**
+     * Principal arn that should not update image pull times.
+     * @maxLength `200`
+     * @pattern `^arn:aws(-[a-z]+)*:iam::[0-9]{12}:(role|user)/[\w+=,.@-]+(/[\w+=,.@-]+)*$`
+     */
+    PrincipalArn: string;
+};
 /**
  * The ``AWS::ECR::RegistryPolicy`` resource creates or updates the permissions policy for a private registry.
  A private registry policy is used to specify permissions for another AWS-account and is used when configuring cross-account replication. For more information, see [Registry permissions](https://docs.aws.amazon.com/AmazonECR/latest/userguide/registry-permissions.html) in the *Amazon Elastic Container Registry User Guide*.
@@ -67911,6 +68230,71 @@ export type ECRRepositoryCreationTemplateTag = {
      */
     Value: string;
 };
+/**
+ * The AWS::ECR::SigningConfiguration resource creates or updates the signing configuration for an Amazon ECR registry.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-signingconfiguration.html}
+ */
+export type ECRSigningConfigurationProps = {
+    /**
+     * Array of signing rules that define which repositories should be signed and with which signing profiles.
+     * @minLength `0`
+     * @maxLength `50`
+     */
+    Rules: ECRSigningConfigurationRule[];
+};
+/**
+ * Attribute type definition for `AWS::ECR::SigningConfiguration`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-signingconfiguration.html#aws-resource-ecr-signingconfiguration-return-values}
+ */
+export type ECRSigningConfigurationAttributes = {
+    /**
+     * 12-digit AWS account ID of the ECR registry.
+     * @pattern `^[0-9]{12}$`
+     */
+    RegistryId: string;
+};
+/**
+ * Type definition for `AWS::ECR::SigningConfiguration.FilterType`.
+ * Type of repository filter
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-signingconfiguration-filtertype.html}
+ */
+export type ECRSigningConfigurationFilterType = "WILDCARD_MATCH";
+/**
+ * Type definition for `AWS::ECR::SigningConfiguration.RepositoryFilter`.
+ * An array of objects representing the details of a repository filter.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-signingconfiguration-repositoryfilter.html}
+ */
+export type ECRSigningConfigurationRepositoryFilter = {
+    /**
+     * Repository name pattern (supports '*' wildcard).
+     * @minLength `1`
+     * @maxLength `256`
+     * @pattern `^(?=.{1,256}$)(?:[a-z0-9*]+(?:[._-][a-z0-9*]*)/‍*)*[a-z0-9*]*(?:[._-][a-z0-9*]*)*$`
+     */
+    Filter: string;
+    /**
+     * Type of repository filter
+     */
+    FilterType: ECRSigningConfigurationFilterType;
+};
+/**
+ * Type definition for `AWS::ECR::SigningConfiguration.Rule`.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-signingconfiguration-rule.html}
+ */
+export type ECRSigningConfigurationRule = {
+    /**
+     * Optional array of repository filters. If omitted, the rule matches all repositories. If provided, must contain at least one filter. Empty arrays are not allowed.
+     * @minLength `1`
+     * @maxLength `100`
+     */
+    RepositoryFilters?: ECRSigningConfigurationRepositoryFilter[];
+    /**
+     * AWS Signer signing profile ARN to use for matched repositories.
+     * @maxLength `200`
+     * @pattern `^arn:aws(-[a-z]+)*:signer:[a-z0-9-]+:[0-9]{12}:\/signing-profiles\/[a-zA-Z0-9_]{2,}$`
+     */
+    SigningProfileArn: string;
+};
 /**
  * Resource Type definition for AWS::ECS::CapacityProvider.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-capacityprovider.html}
@@ -107557,6 +107941,10 @@ export type KinesisVideoStreamProps = {
      * @pattern `[a-zA-Z0-9_.-]+`
      */
     Name?: string;
+    /**
+     * Configuration for the storage tier of the Kinesis Video Stream.
+     */
+    StreamStorageConfiguration?: KinesisVideoStreamStreamStorageConfiguration;
     /**
      * An array of key-value pairs associated with the Kinesis Video Stream.
      * @minLength `1`
@@ -107574,6 +107962,17 @@ export type KinesisVideoStreamAttributes = {
      */
     Arn: string;
 };
+/**
+ * Type definition for `AWS::KinesisVideo::Stream.StreamStorageConfiguration`.
+ * Configuration for the storage tier of the Kinesis Video Stream.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisvideo-stream-streamstorageconfiguration.html}
+ */
+export type KinesisVideoStreamStreamStorageConfiguration = {
+    /**
+     * The storage tier for the Kinesis Video Stream. Determines the storage class used for stream data.
+     */
+    DefaultStorageTier?: "HOT" | "WARM";
+};
 /**
  * Type definition for `AWS::KinesisVideo::Stream.Tag`.
  * A key-value pair to associated with the Kinesis Video Stream.
@@ -180756,6 +181155,7 @@ export type S3AccessPointVpcConfiguration = {
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3-bucket.html}
  */
 export type S3BucketProps = {
+    AbacStatus?: "Enabled" | "Disabled";
     /**
      * Configures the transfer acceleration state for an Amazon S3 bucket. For more information, see [Amazon S3 Transfer Acceleration](https://docs.aws.amazon.com/AmazonS3/latest/dev/transfer-acceleration.html) in the *Amazon S3 User Guide*.
      */
@@ -184594,6 +184994,21 @@ export type SageMakerClusterClusterAutoScalingConfig = {
      */
     Mode: "Enable" | "Disable";
 };
+/**
+ * Type definition for `AWS::SageMaker::Cluster.ClusterCapacityRequirements`.
+ * Specifies the capacity requirements configuration for an instance group
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-cluster-clustercapacityrequirements.html}
+ */
+export type SageMakerClusterClusterCapacityRequirements = {
+    /**
+     * Options for OnDemand capacity
+     */
+    OnDemand?: SageMakerClusterClusterOnDemandOptions;
+    /**
+     * Options for Spot capacity
+     */
+    Spot?: SageMakerClusterClusterSpotOptions;
+};
 /**
  * Type definition for `AWS::SageMaker::Cluster.ClusterEbsVolumeConfig`.
  * Defines the configuration for attaching additional Amazon Elastic Block Store (EBS) volumes to the instances in the SageMaker HyperPod cluster instance group. The additional EBS volume is attached to each instance within the SageMaker HyperPod cluster instance group and mounted to /opt/sagemaker.
@@ -184620,6 +185035,10 @@ export type SageMakerClusterClusterEbsVolumeConfig = {
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-cluster-clusterinstancegroup.html}
  */
 export type SageMakerClusterClusterInstanceGroup = {
+    /**
+     * Specifies the capacity requirements configuration for an instance group
+     */
+    CapacityRequirements?: SageMakerClusterClusterCapacityRequirements;
     /**
      * The execution role for the instance group to assume.
      * @minLength `20`
@@ -184655,6 +185074,10 @@ export type SageMakerClusterClusterInstanceGroup = {
      * The instance type of the instance group of a SageMaker HyperPod cluster.
      */
     InstanceType: string;
+    /**
+     * Kubernetes configuration for cluster nodes including labels and taints.
+     */
+    KubernetesConfig?: SageMakerClusterClusterKubernetesConfig;
     /**
      * The lifecycle configuration for a SageMaker HyperPod cluster.
      */
@@ -184695,6 +185118,47 @@ export type SageMakerClusterClusterInstanceStorageConfig = {
      */
     EbsVolumeConfig?: SageMakerClusterClusterEbsVolumeConfig;
 };
+/**
+ * Type definition for `AWS::SageMaker::Cluster.ClusterKubernetesConfig`.
+ * Kubernetes configuration for cluster nodes including labels and taints.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-cluster-clusterkubernetesconfig.html}
+ */
+export type SageMakerClusterClusterKubernetesConfig = {
+    /**
+     * A map of Kubernetes labels to apply to cluster nodes.
+     */
+    Labels?: SageMakerClusterClusterKubernetesLabels;
+    /**
+     * A list of Kubernetes taints to apply to cluster nodes. Maximum of 50 taints.
+     * @maxLength `50`
+     */
+    Taints?: SageMakerClusterClusterKubernetesTaint[];
+};
+/**
+ * Type definition for `AWS::SageMaker::Cluster.ClusterKubernetesLabels`.
+ * A map of Kubernetes labels to apply to cluster nodes.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-cluster-clusterkuberneteslabels.html}
+ */
+export type SageMakerClusterClusterKubernetesLabels = Record<string, string>;
+/**
+ * Type definition for `AWS::SageMaker::Cluster.ClusterKubernetesTaint`.
+ * A Kubernetes taint to apply to cluster nodes.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-cluster-clusterkubernetestaint.html}
+ */
+export type SageMakerClusterClusterKubernetesTaint = {
+    /**
+     * The effect of the taint.
+     */
+    Effect: "NoSchedule" | "PreferNoSchedule" | "NoExecute";
+    /**
+     * The key of the taint.
+     */
+    Key: string;
+    /**
+     * The value of the taint.
+     */
+    Value?: string;
+};
 /**
  * Type definition for `AWS::SageMaker::Cluster.ClusterLifeCycleConfig`.
  * The lifecycle configuration for a SageMaker HyperPod cluster.
@@ -184715,6 +185179,12 @@ export type SageMakerClusterClusterLifeCycleConfig = {
      */
     SourceS3Uri: string;
 };
+/**
+ * Type definition for `AWS::SageMaker::Cluster.ClusterOnDemandOptions`.
+ * Options for OnDemand capacity
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-cluster-clusterondemandoptions.html}
+ */
+export type SageMakerClusterClusterOnDemandOptions = Record<string, any>;
 /**
  * Type definition for `AWS::SageMaker::Cluster.ClusterOrchestratorEksConfig`.
  * Specifies parameter(s) related to EKS as orchestrator, e.g. the EKS cluster nodes will attach to,
@@ -184786,6 +185256,12 @@ export type SageMakerClusterClusterRestrictedInstanceGroup = {
      */
     TrainingPlanArn?: string;
 };
+/**
+ * Type definition for `AWS::SageMaker::Cluster.ClusterSpotOptions`.
+ * Options for Spot capacity
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-cluster-clusterspotoptions.html}
+ */
+export type SageMakerClusterClusterSpotOptions = Record<string, any>;
 /**
  * Type definition for `AWS::SageMaker::Cluster.DeepHealthCheckType`.
  * The type of deep health check(s) to be performed on the instances in the SageMaker HyperPod cluster instance group.
@@ -194303,6 +194779,14 @@ export type SecretsManagerResourcePolicyAttributes = {
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-secretsmanager-rotationschedule.html}
  */
 export type SecretsManagerRotationScheduleProps = {
+    /**
+     * The list of metadata needed to successfully rotate a managed external secret.
+     */
+    ExternalSecretRotationMetadata?: SecretsManagerRotationScheduleExternalSecretRotationMetadataItem[];
+    /**
+     * The ARN of the IAM role that is used by Secrets Manager to rotate a managed external secret.
+     */
+    ExternalSecretRotationRoleArn?: string;
     /**
      * Creates a new Lambda rotation function based on one of the Secrets Manager rotation function templates. To use a rotation function that already exists, specify RotationLambdaARN instead.
      */
@@ -194334,6 +194818,21 @@ export type SecretsManagerRotationScheduleAttributes = {
      */
     Id: string;
 };
+/**
+ * Type definition for `AWS::SecretsManager::RotationSchedule.ExternalSecretRotationMetadataItem`.
+ * The metadata needed to successfully rotate a managed external secret. Each metadata item is a key and value pair of strings in a JSON text string.
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-secretsmanager-rotationschedule-externalsecretrotationmetadataitem.html}
+ */
+export type SecretsManagerRotationScheduleExternalSecretRotationMetadataItem = {
+    /**
+     * The key name of the metadata item. You can specify a value that's 1 to 256 characters in length.
+     */
+    Key: string;
+    /**
+     * The value for the metadata item. You can specify a value that's 1 to 2048 characters in length.
+     */
+    Value: string;
+};
 /**
  * Type definition for `AWS::SecretsManager::RotationSchedule.HostedRotationLambda`.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-secretsmanager-rotationschedule-hostedrotationlambda.html}
@@ -216081,6 +216580,7 @@ export interface ResourceTypes {
     "AWS::CloudFront::RealtimeLogConfig": CloudFrontRealtimeLogConfigProps;
     "AWS::CloudFront::ResponseHeadersPolicy": CloudFrontResponseHeadersPolicyProps;
     "AWS::CloudFront::StreamingDistribution": CloudFrontStreamingDistributionProps;
+    "AWS::CloudFront::TrustStore": CloudFrontTrustStoreProps;
     "AWS::CloudFront::VpcOrigin": CloudFrontVpcOriginProps;
     "AWS::CloudTrail::Channel": CloudTrailChannelProps;
     "AWS::CloudTrail::Dashboard": CloudTrailDashboardProps;
@@ -216375,11 +216875,13 @@ export interface ResourceTypes {
     "AWS::EC2::VPNGatewayRoutePropagation": EC2VPNGatewayRoutePropagationProps;
     "AWS::ECR::PublicRepository": ECRPublicRepositoryProps;
     "AWS::ECR::PullThroughCacheRule": ECRPullThroughCacheRuleProps;
+    "AWS::ECR::PullTimeUpdateExclusion": ECRPullTimeUpdateExclusionProps;
     "AWS::ECR::RegistryPolicy": ECRRegistryPolicyProps;
     "AWS::ECR::RegistryScanningConfiguration": ECRRegistryScanningConfigurationProps;
     "AWS::ECR::ReplicationConfiguration": ECRReplicationConfigurationProps;
     "AWS::ECR::Repository": ECRRepositoryProps;
     "AWS::ECR::RepositoryCreationTemplate": ECRRepositoryCreationTemplateProps;
+    "AWS::ECR::SigningConfiguration": ECRSigningConfigurationProps;
     "AWS::ECS::CapacityProvider": ECSCapacityProviderProps;
     "AWS::ECS::Cluster": ECSClusterProps;
     "AWS::ECS::ClusterCapacityProviderAssociations": ECSClusterCapacityProviderAssociationsProps;
@@ -217550,6 +218052,7 @@ export interface AttributeTypes {
     "AWS::CloudFront::RealtimeLogConfig": CloudFrontRealtimeLogConfigAttributes;
     "AWS::CloudFront::ResponseHeadersPolicy": CloudFrontResponseHeadersPolicyAttributes;
     "AWS::CloudFront::StreamingDistribution": CloudFrontStreamingDistributionAttributes;
+    "AWS::CloudFront::TrustStore": CloudFrontTrustStoreAttributes;
     "AWS::CloudFront::VpcOrigin": CloudFrontVpcOriginAttributes;
     "AWS::CloudTrail::Channel": CloudTrailChannelAttributes;
     "AWS::CloudTrail::Dashboard": CloudTrailDashboardAttributes;
@@ -217812,6 +218315,7 @@ export interface AttributeTypes {
     "AWS::ECR::ReplicationConfiguration": ECRReplicationConfigurationAttributes;
     "AWS::ECR::Repository": ECRRepositoryAttributes;
     "AWS::ECR::RepositoryCreationTemplate": ECRRepositoryCreationTemplateAttributes;
+    "AWS::ECR::SigningConfiguration": ECRSigningConfigurationAttributes;
     "AWS::ECS::Cluster": ECSClusterAttributes;
     "AWS::ECS::ExpressGatewayService": ECSExpressGatewayServiceAttributes;
     "AWS::ECS::Service": ECSServiceAttributes;
@@ -218891,6 +219395,7 @@ export declare const ResourceType: {
     readonly CloudFrontRealtimeLogConfig: "AWS::CloudFront::RealtimeLogConfig";
     readonly CloudFrontResponseHeadersPolicy: "AWS::CloudFront::ResponseHeadersPolicy";
     readonly CloudFrontStreamingDistribution: "AWS::CloudFront::StreamingDistribution";
+    readonly CloudFrontTrustStore: "AWS::CloudFront::TrustStore";
     readonly CloudFrontVpcOrigin: "AWS::CloudFront::VpcOrigin";
     readonly CloudTrailChannel: "AWS::CloudTrail::Channel";
     readonly CloudTrailDashboard: "AWS::CloudTrail::Dashboard";
@@ -219185,11 +219690,13 @@ export declare const ResourceType: {
     readonly EC2VPNGatewayRoutePropagation: "AWS::EC2::VPNGatewayRoutePropagation";
     readonly ECRPublicRepository: "AWS::ECR::PublicRepository";
     readonly ECRPullThroughCacheRule: "AWS::ECR::PullThroughCacheRule";
+    readonly ECRPullTimeUpdateExclusion: "AWS::ECR::PullTimeUpdateExclusion";
     readonly ECRRegistryPolicy: "AWS::ECR::RegistryPolicy";
     readonly ECRRegistryScanningConfiguration: "AWS::ECR::RegistryScanningConfiguration";
     readonly ECRReplicationConfiguration: "AWS::ECR::ReplicationConfiguration";
     readonly ECRRepository: "AWS::ECR::Repository";
     readonly ECRRepositoryCreationTemplate: "AWS::ECR::RepositoryCreationTemplate";
+    readonly ECRSigningConfiguration: "AWS::ECR::SigningConfiguration";
     readonly ECSCapacityProvider: "AWS::ECS::CapacityProvider";
     readonly ECSCluster: "AWS::ECS::Cluster";
     readonly ECSClusterCapacityProviderAssociations: "AWS::ECS::ClusterCapacityProviderAssociations";