@intentius/chant-lexicon-aws 0.124.30 → 0.124.32

package/dist/okf/rules/EXT001.md

@@ -13,5 +13,6 @@ Extension constraint violation — cross-property validation from cfn-lint exten
 ## Applies to
 
 - [Extension](/types/Extension.md)
+- [Lexicon](/types/Lexicon.md)
 - [Map](/types/Map.md)
 - [Type](/types/Type.md)

package/dist/okf/rules/WAW016.md

@@ -12,6 +12,8 @@ Deprecated property usage — flags properties marked as deprecated in the Cloud
 
 ## Applies to
 
+- [Lexicon](/types/Lexicon.md)
 - [Map](/types/Map.md)
+- [Registry](/types/Registry.md)
 - [Type](/types/Type.md)
 - [Url](/types/Url.md)

package/dist/okf/rules/WAW019.md

@@ -13,5 +13,6 @@ Security group allows unrestricted ingress on sensitive ports (SSH, RDP, databas
 ## Applies to
 
 - [EC2SecurityGroupIngress](/types/EC2SecurityGroupIngress.md)
+- [Group](/types/Group.md)
 - [SecurityGroup](/types/SecurityGroup.md)
 - [Type](/types/Type.md)

package/dist/okf/rules/WAW028.md

@@ -14,3 +14,4 @@ EBS volume is not encrypted — enable encryption at rest
 
 - [EC2Volume](/types/EC2Volume.md)
 - [Type](/types/Type.md)
+- [Volume](/types/Volume.md)

package/dist/okf/rules/WAW030.md

@@ -16,9 +16,11 @@ Missing DependsOn for known CloudFormation ordering patterns
 - [ApigwDeployment](/types/ApigwDeployment.md)
 - [Apigwv2Deployment](/types/Apigwv2Deployment.md)
 - [Apigwv2Route](/types/Apigwv2Route.md)
+- [Cluster](/types/Cluster.md)
 - [EC2Route](/types/EC2Route.md)
 - [EcsService](/types/EcsService.md)
 - [EKSCluster](/types/EKSCluster.md)
+- [Gateway](/types/Gateway.md)
 - [Listener](/types/Listener.md)
 - [Method](/types/Method.md)
 - [Nodegroup](/types/Nodegroup.md)

package/dist/okf/rules/WAW039.md

@@ -12,6 +12,7 @@ RDS instance or cluster has automated backups disabled — set a positive Backup
 
 ## Applies to
 
+- [Backup](/types/Backup.md)
 - [DbCluster](/types/DbCluster.md)
 - [DbInstance](/types/DbInstance.md)
 - [Type](/types/Type.md)

package/dist/okf/rules/WAW049.md

@@ -13,5 +13,6 @@ Security group allows unrestricted ingress on a port other than ALB:80/443
 ## Applies to
 
 - [EC2SecurityGroupIngress](/types/EC2SecurityGroupIngress.md)
+- [Group](/types/Group.md)
 - [SecurityGroup](/types/SecurityGroup.md)
 - [Type](/types/Type.md)

package/dist/okf/rules/WAW056.md

@@ -12,6 +12,7 @@ SCP guardrail has no Deny statement — it constrains nothing
 
 ## Applies to
 
+- [Content](/types/Content.md)
 - [Guardrail](/types/Guardrail.md)
 - [OrganizationsPolicy](/types/OrganizationsPolicy.md)
 - [Type](/types/Type.md)

package/dist/okf/rules/WAW058.md

@@ -13,5 +13,6 @@ Organization audit trail missing, not logging, or scoped down to a single region
 ## Applies to
 
 - [Organization](/types/Organization.md)
+- [Template](/types/Template.md)
 - [Trail](/types/Trail.md)
 - [Type](/types/Type.md)

package/dist/okf/rules/WAW062.md

@@ -24,4 +24,5 @@ Duplicate export name or explicit resource name within a template — fails at d
 - [SecurityGroup](/types/SecurityGroup.md)
 - [StateMachine](/types/StateMachine.md)
 - [Table](/types/Table.md)
+- [Template](/types/Template.md)
 - [Type](/types/Type.md)

package/dist/okf/rules/WAW064.md

@@ -12,6 +12,7 @@ Transit Gateway route table declares a Blackhole route — confirm the traffic d
 
 ## Applies to
 
+- [Gateway](/types/Gateway.md)
 - [Table](/types/Table.md)
 - [TransitGateway](/types/TransitGateway.md)
 - [TransitGatewayRoute](/types/TransitGatewayRoute.md)

package/dist/okf/rules/WAW065.md

@@ -12,6 +12,7 @@ Transit Gateway route table has associations but no propagations, or an attachme
 
 ## Applies to
 
+- [Gateway](/types/Gateway.md)
 - [Map](/types/Map.md)
 - [Table](/types/Table.md)
 - [TransitGateway](/types/TransitGateway.md)

package/dist/okf/rules/WAW066.md

@@ -13,6 +13,7 @@ Private subnet's route table has no default route, or its default route targets
 ## Applies to
 
 - [EC2Route](/types/EC2Route.md)
+- [Gateway](/types/Gateway.md)
 - [InternetGateway](/types/InternetGateway.md)
 - [Map](/types/Map.md)
 - [RouteTable](/types/RouteTable.md)

package/dist/okf/rules/WAW067.md

@@ -13,6 +13,7 @@ A single-AZ NAT gateway serves private subnets across multiple Availability Zone
 ## Applies to
 
 - [EC2Route](/types/EC2Route.md)
+- [Gateway](/types/Gateway.md)
 - [Map](/types/Map.md)
 - [NatGateway](/types/NatGateway.md)
 - [Subnet](/types/Subnet.md)

package/dist/okf/rules/WAW068.md

@@ -12,6 +12,7 @@ VPN Gateway or Transit Gateway has only one attached VPN Connection — no redun
 
 ## Applies to
 
+- [Gateway](/types/Gateway.md)
 - [Map](/types/Map.md)
 - [TransitGateway](/types/TransitGateway.md)
 - [Type](/types/Type.md)

package/dist/okf/rules/WAW069.md

@@ -9,3 +9,7 @@ lexicon: aws
 docs: https://intentius.io/chant/lexicons/aws/rules/
 ---
 Template references a condition it never declares — resource/output Condition keys, Fn::If, and Condition references must name an entry in the Conditions section
+
+## Applies to
+
+- [Template](/types/Template.md)

package/dist/okf/types/AIWorkloadConfig.md

@@ -0,0 +1,23 @@
+---
+type: resource-type
+title: AIWorkloadConfig
+description: aws resource type AWS::SageMaker::AIWorkloadConfig
+name: AIWorkloadConfig
+lexicon: aws
+resource_type: AWS::SageMaker::AIWorkloadConfig
+---
+`AWS::SageMaker::AIWorkloadConfig`, a resource type of the aws lexicon.
+
+## Properties
+
+- `AIWorkloadConfigName` (`string`, required): The name of the AI workload configuration. The name must be unique within your AWS account in the current AWS Region. Only lowercase letters and digits are accepted: DeleteAIWorkloadConfig lowercases the name before looking it up, so a name containing an uppercase letter produces a configuration that can be created and read but never deleted.
+- `AIWorkloadConfigArn` (`string`, optional): The Amazon Resource Name (ARN) of the AI workload configuration. The name segment is restricted to lowercase for the same reason as AIWorkloadConfigName: the engine derives that property from this ARN, so a permissive ARN would yield a derived name the schema itself rejects.
+- `AIWorkloadConfigs` (`AIWorkloadConfig_AIWorkloadConfigs`, optional): The benchmark tool configuration and workload specification.
+- `CreationTime` (`string`, optional): A timestamp that indicates when the AI workload configuration was created.
+- `DatasetConfig` (`AIWorkloadConfig_AIDatasetConfig`, optional): The dataset configuration for the workload. Specify input data channels with their data sources for benchmark workloads.
+- `Tags` (`AIWorkloadConfig_Tag[]`, optional): The metadata that you apply to the AI workload configuration to help you categorize and organize it.
+
+## Attributes
+
+- `AIWorkloadConfigArn`
+- `CreationTime`

package/dist/okf/types/ARCRegionSwitchPlan.md

@@ -25,6 +25,7 @@ resource_type: AWS::ARCRegionSwitch::Plan
 - `RecoveryTimeObjectiveMinutes` (`number`, optional)
 - `ReportConfiguration` (`ARCRegionSwitchPlan_ReportConfiguration`, optional)
 - `Route53HealthChecks` (`Record<string, unknown>`, optional)
+- `ServiceQuotaChecksEnabled` (`boolean`, optional)
 - `Tags` (`Record<string, unknown>`, optional)
 - `Triggers` (`ARCRegionSwitchPlan_Trigger[]`, optional)
 - `Version` (`string`, optional)

package/dist/okf/types/AccountAccessApplication.md

@@ -0,0 +1,28 @@
+---
+type: resource-type
+title: AccountAccessApplication
+description: aws resource type AWS::AccountAccess::Application
+name: AccountAccessApplication
+lexicon: aws
+resource_type: AWS::AccountAccess::Application
+---
+`AWS::AccountAccess::Application`, a resource type of the aws lexicon.
+
+## Properties
+
+- `IdentitySource` (`AccountAccessApplication_IdentitySource`, required): The identity source for the application
+- `ApplicationArn` (`string`, optional): The ARN of the application
+- `CreatedAt` (`string`, optional): The timestamp when the application was created
+- `Status` (`"ACTIVE" | "CREATE_FAILED" | "CREATE_IN_PROGRESS" | "DELETE_FAILED" | "DELETE_IN_PROGRESS"`, optional): The status of the application
+- `Tags` (`AccountAccessApplication_Tag[]`, optional): An array of key-value pairs to apply to this resource.
+- `TenantId` (`string`, optional): The tenant ID of the application
+- `UpdatedAt` (`string`, optional): The timestamp when the application was last updated
+
+## Attributes
+
+- `ApplicationArn`
+- `CreatedAt`
+- `IdentitySource.IdentityCenter.ApplicationArn`
+- `Status`
+- `TenantId`
+- `UpdatedAt`

package/dist/okf/types/AccountAccessEntitlement.md

@@ -0,0 +1,22 @@
+---
+type: resource-type
+title: AccountAccessEntitlement
+description: aws resource type AWS::AccountAccess::Entitlement
+name: AccountAccessEntitlement
+lexicon: aws
+resource_type: AWS::AccountAccess::Entitlement
+---
+`AWS::AccountAccess::Entitlement`, a resource type of the aws lexicon.
+
+## Properties
+
+- `ApplicationArn` (`string`, required): The ARN of the application
+- `Entitlement` (`AccountAccessEntitlement_Entitlement`, required): The entitlement details
+- `CreatedAt` (`string`, optional): The timestamp when the entitlement was created
+- `EntitlementId` (`string`, optional): The ID of the entitlement
+
+## Attributes
+
+- `CreatedAt`
+- `Entitlement.PrincipalRole.Account`
+- `EntitlementId`

package/dist/okf/types/ActionTarget.md

@@ -0,0 +1,20 @@
+---
+type: resource-type
+title: ActionTarget
+description: aws resource type AWS::SecurityHub::ActionTarget
+name: ActionTarget
+lexicon: aws
+resource_type: AWS::SecurityHub::ActionTarget
+---
+`AWS::SecurityHub::ActionTarget`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Description` (`string`, required): The description for the custom action target.
+- `Id` (`string`, required): The ID for the custom action target. Can contain up to 20 alphanumeric characters.
+- `Name` (`string`, required): The name of the custom action target. Can contain up to 20 characters.
+- `ActionTargetArn` (`string`, optional): The Amazon Resource Name (ARN) of the custom action target.
+
+## Attributes
+
+- `ActionTargetArn`

package/dist/okf/types/AdConfiguration.md

@@ -0,0 +1,21 @@
+---
+type: resource-type
+title: AdConfiguration
+description: aws resource type AWS::IVS::AdConfiguration
+name: AdConfiguration
+lexicon: aws
+resource_type: AWS::IVS::AdConfiguration
+---
+`AWS::IVS::AdConfiguration`, a resource type of the aws lexicon.
+
+## Properties
+
+- `MediaTailorPlaybackConfigurations` (`AdConfiguration_MediaTailorPlaybackConfiguration[]`, required): List of integration configurations with MediaTailor resources. The first item in the list is the default playback configuration used for the ad configuration.
+- `Arn` (`string`, optional): Ad configuration ARN.
+- `Name` (`string`, optional): Ad configuration name. The value does not need to be unique.
+- `PostRollConfiguration` (`AdConfiguration_PostRollConfiguration`, optional)
+- `Tags` (`AdConfiguration_Tag[]`, optional): Tags attached to the resource.
+
+## Attributes
+
+- `Arn`

package/dist/okf/types/Adapter.md

@@ -0,0 +1,26 @@
+---
+type: resource-type
+title: Adapter
+description: aws resource type AWS::Textract::Adapter
+name: Adapter
+lexicon: aws
+resource_type: AWS::Textract::Adapter
+---
+`AWS::Textract::Adapter`, a resource type of the aws lexicon.
+
+## Properties
+
+- `AdapterName` (`string`, required)
+- `FeatureTypes` (`Adapter_FeatureType[]`, required): The type of feature that the adapter is being trained on. Currently, supported feature types are: QUERIES
+- `AdapterId` (`string`, optional): A unique identifier for the adapter resource.
+- `Arn` (`string`, optional): The Amazon Resource Name (ARN) of the adapter.
+- `AutoUpdate` (`Adapter_AutoUpdate`, optional)
+- `CreationTime` (`string`, optional): The date and time that the adapter was created.
+- `Description` (`string`, optional)
+- `Tags` (`Adapter_Tag[]`, optional): A list of tags to be added to the adapter.
+
+## Attributes
+
+- `AdapterId`
+- `Arn`
+- `CreationTime`

package/dist/okf/types/AgentContext.md

@@ -0,0 +1,35 @@
+---
+type: resource-type
+title: AgentContext
+description: aws resource type AWS::WellArchitected::AgentContext
+name: AgentContext
+lexicon: aws
+resource_type: AWS::WellArchitected::AgentContext
+---
+`AWS::WellArchitected::AgentContext`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Content` (`Record<string, unknown>`, required): The free-form content of the Agent Context, supplied as an arbitrary JSON object.
+- `ContextType` (`AgentContext_ContextType`, required)
+- `ProfileArn` (`string`, required): The Amazon Resource Name (ARN) of the parent Agent Profile that owns this context. Pass `!Ref` of the parent AWS::WellArchitected::AgentProfile to flow its ARN here.
+- `Title` (`string`, required): The title of the Agent Context.
+- `ApplicationType` (`AgentContext_ApplicationType`, optional)
+- `Arn` (`string`, optional): The synthetic Amazon Resource Name (ARN) of the Agent Context, composed of the parent profile ARN and the context id.
+- `CreatedAt` (`string`, optional): The timestamp when the context was created.
+- `CreatedBy` (`string`, optional): The identifier of the system or user that created this context.
+- `Criticality` (`AgentContext_Criticality`, optional)
+- `Id` (`string`, optional): The service-generated unique identifier of the Agent Context.
+- `LastModifiedAt` (`string`, optional): The timestamp when the context was last modified.
+- `LastModifiedBy` (`string`, optional): The identifier of the system or user that last modified this context.
+
+## Attributes
+
+- `ApplicationType`
+- `Arn`
+- `CreatedAt`
+- `CreatedBy`
+- `Criticality`
+- `Id`
+- `LastModifiedAt`
+- `LastModifiedBy`

package/dist/okf/types/AgentGoal.md

@@ -0,0 +1,31 @@
+---
+type: resource-type
+title: AgentGoal
+description: aws resource type AWS::WellArchitected::AgentGoal
+name: AgentGoal
+lexicon: aws
+resource_type: AWS::WellArchitected::AgentGoal
+---
+`AWS::WellArchitected::AgentGoal`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Pillars` (`AgentGoal_Pillar[]`, required): The list of Well-Architected pillars this goal targets.
+- `ProfileArn` (`string`, required): The Amazon Resource Name (ARN) of the parent Agent Profile that owns this goal. Pass `!Ref` of the parent AWS::WellArchitected::AgentProfile to flow its ARN here.
+- `Title` (`string`, required): The title of the Agent Goal.
+- `Arn` (`string`, optional): The synthetic Amazon Resource Name (ARN) of the Agent Goal, composed of the parent profile ARN and the goal id.
+- `CreatedAt` (`string`, optional): The timestamp when the goal was created.
+- `CreatedBy` (`string`, optional): The identifier of the system or user that created this goal.
+- `Description` (`string`, optional): A description of the Agent Goal.
+- `Id` (`string`, optional): The service-generated unique identifier of the Agent Goal.
+- `LastModifiedAt` (`string`, optional): The timestamp when the goal was last modified.
+- `LastModifiedBy` (`string`, optional): The identifier of the system or user that last modified this goal.
+
+## Attributes
+
+- `Arn`
+- `CreatedAt`
+- `CreatedBy`
+- `Id`
+- `LastModifiedAt`
+- `LastModifiedBy`

package/dist/okf/types/AgentProfile.md

@@ -0,0 +1,34 @@
+---
+type: resource-type
+title: AgentProfile
+description: aws resource type AWS::WellArchitected::AgentProfile
+name: AgentProfile
+lexicon: aws
+resource_type: AWS::WellArchitected::AgentProfile
+---
+`AWS::WellArchitected::AgentProfile`, a resource type of the aws lexicon.
+
+## Properties
+
+- `AggregationConfiguration` (`AgentProfile_AggregationConfiguration[]`, required): The aggregation configuration entries (account, regions, access role) associated with this profile.
+- `ExecutionRoleArn` (`string`, required): The ARN of the IAM role assumed to execute recommendation actions.
+- `Name` (`string`, required): The name of the profile. Unique within the account and used as the last component of the ARN.
+- `Pillars` (`AgentProfile_Pillar[]`, required): The list of Well-Architected pillars to focus on.
+- `Arn` (`string`, optional): The Amazon Resource Name (ARN) of the Agent Profile.
+- `BusinessOverview` (`string`, optional): A business overview for the profile used to improve recommendation quality.
+- `CreatedAt` (`string`, optional): The timestamp when the profile was created.
+- `CreatedBy` (`string`, optional): The identifier of the system or user that created this profile.
+- `DeletionProtection` (`boolean`, optional): Whether deletion protection is enabled for the profile. When enabled, the profile cannot be deleted until deletion protection is disabled.
+- `Description` (`string`, optional): A description of the profile.
+- `DisplayName` (`string`, optional): The human-readable display name of the profile.
+- `LastModifiedAt` (`string`, optional): The timestamp when the profile was last modified.
+- `LastModifiedBy` (`string`, optional): The identifier of the system or user that last modified this profile.
+- `Tags` (`AgentProfile_Tag[]`, optional): Key-value pairs to associate with the Agent Profile.
+
+## Attributes
+
+- `Arn`
+- `CreatedAt`
+- `CreatedBy`
+- `LastModifiedAt`
+- `LastModifiedBy`

package/dist/okf/types/Alarm.md

@@ -10,6 +10,7 @@ resource_type: AWS::CloudWatch::Alarm
 
 ## Properties
 
+- `ActionConfiguration` (`Alarm_ActionConfiguration`, optional)
 - `ActionsEnabled` (`boolean`, optional): Indicates whether actions should be executed during any changes to the alarm state. The default is TRUE.
 - `AlarmActions` (`string[]`, optional): The list of actions to execute when this alarm transitions into an ALARM state from any other state. Specify each action as an Amazon Resource Name (ARN). For more information about creating alarms and the actions that you can specify, see [PutMetricAlarm](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutMetricAlarm.html) in the *API Reference*.
 - `AlarmDescription` (`string`, optional): The description of the alarm.
@@ -22,7 +23,7 @@ resource_type: AWS::CloudWatch::Alarm
 - `EvaluationCriteria` (`Alarm_EvaluationCriteria`, optional): The evaluation criteria for the alarm.
 - `EvaluationInterval` (`number`, optional): The frequency, in seconds, at which the alarm is evaluated.
 - `EvaluationPeriods` (`number`, optional): The number of periods over which data is compared to the specified threshold. If you are setting an alarm that requires that a number of consecutive data points be breaching to trigger the alarm, this value specifies that number. If you are setting an "M out of N" alarm, this value is the N, and ``DatapointsToAlarm`` is the M. For more information, see [Evaluating an Alarm](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/AlarmThatSendsEmail.html#alarm-evaluation) in the *User Guide*.
-- `EvaluationWindow` (`Alarm_EvaluationWindow`, optional)
+- `EvaluationWindow` (`Alarm_EvaluationWindow`, optional): The evaluation window that the alarm uses to select the range of metric data that it evaluates. This is either a sliding window or a wall clock window. For more information, see [Alarm evaluation windows](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/alarm-evaluation-window.html) in the *CloudWatch User Guide*.
 - `ExtendedStatistic` (`string`, optional): The percentile statistic for the metric associated with the alarm. Specify a value between p0.0 and p100. For an alarm based on a metric, you must specify either ``Statistic`` or ``ExtendedStatistic`` but not both. For an alarm based on a math expression, you can't specify ``ExtendedStatistic``. Instead, you use ``Metrics``.
 - `InsufficientDataActions` (`string[]`, optional): The actions to execute when this alarm transitions to the ``INSUFFICIENT_DATA`` state from any other state. Each action is specified as an Amazon Resource Name (ARN).
 - `MetricName` (`string`, optional): The name of the metric associated with the alarm. This is required for an alarm based on a metric. For an alarm based on a math expression, you use ``Metrics`` instead and you can't specify ``MetricName``.
@@ -36,6 +37,7 @@ resource_type: AWS::CloudWatch::Alarm
 - `ThresholdMetricId` (`string`, optional): In an alarm based on an anomaly detection model, this is the ID of the ``ANOMALY_DETECTION_BAND`` function used as the threshold for the alarm.
 - `TreatMissingData` (`"breaching" | "ignore" | "missing" | "notBreaching"`, optional): Sets how this alarm is to handle missing data points. Valid values are ``breaching``, ``notBreaching``, ``ignore``, and ``missing``. For more information, see [Configuring How Alarms Treat Missing Data](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/AlarmThatSendsEmail.html#alarms-and-missing-data) in the *Amazon User Guide*. If you omit this parameter, the default behavior of ``missing`` is used.
 - `Unit` (`string`, optional): The unit of the metric associated with the alarm. Specify this only if you are creating an alarm based on a single metric. Do not specify this if you are specifying a ``Metrics`` array. You can specify the following values: Seconds, Microseconds, Milliseconds, Bytes, Kilobytes, Megabytes, Gigabytes, Terabytes, Bits, Kilobits, Megabits, Gigabits, Terabits, Percent, Count, Bytes/Second, Kilobytes/Second, Megabytes/Second, Gigabytes/Second, Terabytes/Second, Bits/Second, Kilobits/Second, Megabits/Second, Gigabits/Second, Terabits/Second, Count/Second, or None.
+- `WarmUpConfiguration` (`Alarm_WarmUpConfiguration`, optional): The warm-up configuration for the alarm. A warm-up period delays alarm evaluation after you create or update the alarm. During the warm-up period, the alarm stays in ``INSUFFICIENT_DATA`` and does not perform alarm actions. For more information, see [Alarm warm-up periods](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/alarm-warm-up.html) in the *Amazon CloudWatch User Guide*.
 
 ## Attributes
 

package/dist/okf/types/AlarmModel.md

@@ -10,12 +10,17 @@ resource_type: AWS::IoTEvents::AlarmModel
 
 ## Properties
 
-- `AlarmRule` (`AlarmModel_AlarmRule`, required): Defines when your alarm is invoked.
-- `RoleArn` (`string`, required): The ARN of the IAM role that allows the alarm to perform actions and access AWS resources. For more information, see [Amazon Resource Names (ARNs)](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference*.
-- `AlarmCapabilities` (`AlarmModel_AlarmCapabilities`, optional): Contains the configuration information of alarm state changes.
-- `AlarmEventActions` (`AlarmModel_AlarmEventActions`, optional): Contains information about one or more alarm actions.
-- `AlarmModelDescription` (`string`, optional): The description of the alarm model.
-- `AlarmModelName` (`string`, optional): The name of the alarm model.
-- `Key` (`string`, optional): An input attribute used as a key to create an alarm. ITE routes [inputs](https://docs.aws.amazon.com/iotevents/latest/apireference/API_Input.html) associated with this key to the alarm.
-- `Severity` (`number`, optional): A non-negative integer that reflects the severity level of the alarm.
-- `Tags` (`AlarmModel_Tag[]`, optional): A list of key-value pairs that contain metadata for the alarm model. The tags help you manage the alarm model. For more information, see [Tagging your resources](https://docs.aws.amazon.com/iotevents/latest/developerguide/tagging-iotevents.html) in the *Developer Guide*. You can create up to 50 tags for one alarm model.
+- `AlarmRule` (`AlarmModel_AlarmRule`, required)
+- `RoleArn` (`string`, required)
+- `AlarmCapabilities` (`AlarmModel_AlarmCapabilities`, optional)
+- `AlarmEventActions` (`AlarmModel_AlarmEventActions`, optional)
+- `AlarmModelDescription` (`string`, optional)
+- `AlarmModelName` (`string`, optional)
+- `Id` (`string`, optional)
+- `Key` (`string`, optional)
+- `Severity` (`number`, optional)
+- `Tags` (`AlarmModel_Tag[]`, optional)
+
+## Attributes
+
+- `Id`

package/dist/okf/types/AmplifyWebhook.md

@@ -0,0 +1,25 @@
+---
+type: resource-type
+title: AmplifyWebhook
+description: aws resource type AWS::Amplify::Webhook
+name: AmplifyWebhook
+lexicon: aws
+resource_type: AWS::Amplify::Webhook
+---
+`AWS::Amplify::Webhook`, a resource type of the aws lexicon.
+
+## Properties
+
+- `BranchName` (`string`, required): The name for a branch that is part of an Amplify app.
+- `AppId` (`string`, optional): The unique ID for an Amplify app.
+- `Arn` (`string`, optional): The Amazon Resource Name (ARN) for the webhook.
+- `Description` (`string`, optional): The description for a webhook.
+- `Tags` (`AmplifyWebhook_Tag[]`, optional): Tags for the webhook.
+- `WebhookId` (`string`, optional): The unique ID for a webhook.
+- `WebhookUrl` (`string`, optional): The URL of the webhook.
+
+## Attributes
+
+- `Arn`
+- `WebhookId`
+- `WebhookUrl`

package/dist/okf/types/ApiCache.md

@@ -10,14 +10,14 @@ resource_type: AWS::AppSync::ApiCache
 
 ## Properties
 
-- `ApiCachingBehavior` (`string`, required)
-- `ApiId` (`string`, required)
-- `Ttl` (`number`, required)
-- `Type` (`string`, required)
-- `AtRestEncryptionEnabled` (`boolean`, optional)
-- `HealthMetricsConfig` (`string`, optional)
-- `Id` (`string`, optional)
-- `TransitEncryptionEnabled` (`boolean`, optional)
+- `ApiCachingBehavior` (`string`, required): Caching behavior, such as FULL_REQUEST_CACHING, PER_RESOLVER_CACHING, or OPERATION_LEVEL_CACHING
+- `ApiId` (`string`, required): Unique AWS AppSync GraphQL API identifier.
+- `Ttl` (`number`, required): TTL in seconds for cache entries. Valid values are 1-3600.
+- `Type` (`string`, required): The cache instance type, such as SMALL, LARGE and LARGE_4X
+- `AtRestEncryptionEnabled` (`boolean`, optional): At-rest encryption flag for cache. You cannot update this setting after creation.
+- `HealthMetricsConfig` (`string`, optional): Controls how cache health metrics will be emitted to CloudWatch. Cache health metrics include NetworkBandwidthOutAllowanceExceeded and EngineCPUUtilization
+- `Id` (`string`, optional): The CloudFormation primary identifier for an ApiCache. Mirrors ApiId once the resource exists; populated by the handler. Customers should reference the ApiCache by ApiId.
+- `TransitEncryptionEnabled` (`boolean`, optional): Transit encryption flag when connecting to cache. You cannot update this setting after creation.
 
 ## Attributes
 

package/dist/okf/types/ApiGatewayManagedOverrides.md

@@ -10,11 +10,11 @@ resource_type: AWS::ApiGatewayV2::ApiGatewayManagedOverrides
 
 ## Properties
 
-- `ApiId` (`string`, required)
-- `Id` (`string`, optional)
-- `Integration` (`ApiGatewayManagedOverrides_IntegrationOverrides`, optional)
-- `Route` (`ApiGatewayManagedOverrides_RouteOverrides`, optional)
-- `Stage` (`ApiGatewayManagedOverrides_StageOverrides`, optional)
+- `ApiId` (`string`, required): The ID of the API for which to override the configuration of API Gateway-managed resources.
+- `Id` (`string`, optional): A TPS Code is automatically generated on creation and assigned as the unique identifier.
+- `Integration` (`ApiGatewayManagedOverrides_IntegrationOverrides`, optional): Overrides the integration configuration for an API Gateway-managed integration.
+- `Route` (`ApiGatewayManagedOverrides_RouteOverrides`, optional): Overrides the route configuration for an API Gateway-managed route.
+- `Stage` (`ApiGatewayManagedOverrides_StageOverrides`, optional): Overrides the stage configuration for an API Gateway-managed stage.
 
 ## Attributes
 

package/dist/okf/types/AppAuthorization.md

@@ -0,0 +1,35 @@
+---
+type: resource-type
+title: AppAuthorization
+description: aws resource type AWS::AppFabric::AppAuthorization
+name: AppAuthorization
+lexicon: aws
+resource_type: AWS::AppFabric::AppAuthorization
+---
+`AWS::AppFabric::AppAuthorization`, a resource type of the aws lexicon.
+
+## Properties
+
+- `App` (`string`, required): The name of the application.
+- `AppBundleIdentifier` (`string`, required): The Amazon Resource Name (ARN) or Universal Unique Identifier (UUID) of the app bundle to use for the request.
+- `AuthType` (`"apiKey" | "oauth2"`, required): The authorization type.
+- `Tenant` (`AppAuthorization_Tenant`, required): Contains information about an application tenant.
+- `AppAuthorizationArn` (`string`, optional): The Amazon Resource Name (ARN) of the app authorization.
+- `AppAuthorizationIdentifier` (`string`, optional): The unique identifier of the app authorization.
+- `AppBundleArn` (`string`, optional): The Amazon Resource Name (ARN) of the app bundle for the app authorization.
+- `CreatedAt` (`string`, optional): The timestamp of when the app authorization was created.
+- `Credential` (`AppAuthorization_Credential`, optional): Contains credentials for the application.
+- `Persona` (`"admin" | "endUser"`, optional): The user persona of the app authorization.
+- `Status` (`"Connected" | "ConnectionValidationFailed" | "PendingConnect" | "TokenAutoRotationFailed"`, optional): The state of the app authorization.
+- `Tags` (`AppAuthorization_Tag[]`, optional): Tags to apply to the app authorization.
+- `UpdatedAt` (`string`, optional): The timestamp of when the app authorization was last updated.
+
+## Attributes
+
+- `AppAuthorizationArn`
+- `AppAuthorizationIdentifier`
+- `AppBundleArn`
+- `CreatedAt`
+- `Persona`
+- `Status`
+- `UpdatedAt`

package/dist/okf/types/AppBlockBuilder.md

@@ -19,6 +19,7 @@ resource_type: AWS::AppStream::AppBlockBuilder
 - `Arn` (`string`, optional)
 - `CreatedTime` (`string`, optional)
 - `Description` (`string`, optional)
+- `DisableIMDSV1` (`boolean`, optional)
 - `DisplayName` (`string`, optional)
 - `EnableDefaultInternetAccess` (`boolean`, optional)
 - `IamRoleArn` (`string`, optional)

package/dist/okf/types/AppInstance.md

@@ -12,8 +12,8 @@ resource_type: AWS::Chime::AppInstance
 
 - `Name` (`string`, required): The name of the AppInstance.
 - `AppInstanceArn` (`string`, optional): The Amazon Resource Number (ARN) of the AppInstance.
-- `CreatedTimestamp` (`number`, optional): The time at which an AppInstance was created. In epoch milliseconds.
-- `LastUpdatedTimestamp` (`number`, optional): The time an AppInstance was last updated. In epoch milliseconds.
+- `CreatedTimestamp` (`string`, optional): The time at which an AppInstance was created, as an ISO 8601 timestamp.
+- `LastUpdatedTimestamp` (`string`, optional): The time an AppInstance was last updated, as an ISO 8601 timestamp.
 - `Metadata` (`string`, optional): The metadata of the AppInstance. Limited to a 1KB string in UTF-8.
 - `Tags` (`AppInstance_Tag[]`, optional): Tags assigned to the AppInstance.
 

package/dist/okf/types/AppInstanceBot.md

@@ -13,8 +13,8 @@ resource_type: AWS::Chime::AppInstanceBot
 - `AppInstanceArn` (`string`, required): The ARN of the AppInstance.
 - `Configuration` (`AppInstanceBot_Configuration`, required)
 - `AppInstanceBotArn` (`string`, optional): The ARN of the AppInstanceBot.
-- `CreatedTimestamp` (`number`, optional): The time at which the AppInstanceBot was created. In epoch milliseconds.
-- `LastUpdatedTimestamp` (`number`, optional): The time at which the AppInstanceBot was last updated. In epoch milliseconds.
+- `CreatedTimestamp` (`string`, optional): The time at which the AppInstanceBot was created, as an ISO 8601 timestamp.
+- `LastUpdatedTimestamp` (`string`, optional): The time at which the AppInstanceBot was last updated, as an ISO 8601 timestamp.
 - `Metadata` (`string`, optional): The metadata of the AppInstanceBot.
 - `Name` (`string`, optional): The name of the AppInstanceBot.
 - `Tags` (`AppInstanceBot_Tag[]`, optional): The tags assigned to the AppInstanceBot.

package/dist/okf/types/AppStreamFleet.md

@@ -12,6 +12,8 @@ resource_type: AWS::AppStream::Fleet
 
 - `InstanceType` (`string`, required)
 - `Name` (`string`, required)
+- `Arn` (`string`, optional)
+- `AttributesToDelete` (`("DOMAIN_JOIN_INFO" | "IAM_ROLE_ARN" | "MAX_SESSIONS_PER_INSTANCE" | "SESSION_SCRIPT_S3_LOCATION" | "USB_DEVICE_FILTER_STRINGS" | "VPC_CONFIGURATION" | "VPC_CONFIGURATION_SECURITY_GROUP_IDS")[]`, optional)
 - `ComputeCapacity` (`AppStreamFleet_ComputeCapacity`, optional)
 - `Description` (`string`, optional)
 - `DisableIMDSV1` (`boolean`, optional)
@@ -21,7 +23,6 @@ resource_type: AWS::AppStream::Fleet
 - `EnableDefaultInternetAccess` (`boolean`, optional)
 - `FleetType` (`string`, optional)
 - `IamRoleArn` (`string`, optional)
-- `Id` (`string`, optional)
 - `IdleDisconnectTimeoutInSeconds` (`number`, optional)
 - `ImageArn` (`string`, optional)
 - `ImageName` (`string`, optional)
@@ -38,4 +39,4 @@ resource_type: AWS::AppStream::Fleet
 
 ## Attributes
 
-- `Id`
+- `Arn`