@intentius/chant-lexicon-aws 0.124.31 → 0.124.32

package/dist/okf/types/ClientVpnEndpoint.md

@@ -13,11 +13,13 @@ resource_type: AWS::EC2::ClientVpnEndpoint
 - `AuthenticationOptions` (`ClientVpnEndpoint_ClientAuthenticationRequest[]`, required)
 - `ConnectionLogOptions` (`ClientVpnEndpoint_ConnectionLogOptions`, required)
 - `ServerCertificateArn` (`string`, required)
+- `AuthorizationPolicy` (`ClientVpnEndpoint_AuthorizationPolicy`, optional)
 - `ClientCidrBlock` (`string`, optional)
 - `ClientConnectOptions` (`ClientVpnEndpoint_ClientConnectOptions`, optional)
 - `ClientLoginBannerOptions` (`ClientVpnEndpoint_ClientLoginBannerOptions`, optional)
 - `ClientRouteEnforcementOptions` (`ClientVpnEndpoint_ClientRouteEnforcementOptions`, optional)
 - `Description` (`string`, optional)
+- `DevicePostureOptions` (`ClientVpnEndpoint_DevicePostureOptions`, optional)
 - `DisconnectOnSessionTimeout` (`boolean`, optional)
 - `DnsServers` (`string[]`, optional)
 - `EndpointIpAddressType` (`string`, optional)

package/dist/okf/types/ClientVpnRoute.md

@@ -10,11 +10,11 @@ resource_type: AWS::EC2::ClientVpnRoute
 
 ## Properties
 
-- `ClientVpnEndpointId` (`string`, required)
-- `DestinationCidrBlock` (`string`, required)
-- `Description` (`string`, optional)
-- `Id` (`string`, optional)
-- `TargetVpcSubnetId` (`string`, optional)
+- `ClientVpnEndpointId` (`string`, required): The ID of the Client VPN endpoint to which to add the route.
+- `DestinationCidrBlock` (`string`, required): The IPv4 address range, in CIDR notation, of the route destination. For example: To add a route for Internet access, enter 0.0.0.0/0. To add a route for a peered VPC, enter the peered VPC's IPv4 CIDR range. To add a route for an on-premises network, enter the AWS Site-to-Site VPN connection's IPv4 CIDR range. To add a route for the local network, enter the client CIDR range.
+- `Description` (`string`, optional): A brief description of the route.
+- `Id` (`string`, optional): The CloudFormation-generated identifier for this Client VPN route, derived from the logical resource id and client request token.
+- `TargetVpcSubnetId` (`string`, optional): The ID of the subnet through which you want to route traffic. The specified subnet must be an existing target network of the Client VPN endpoint. Alternatively, if you're adding a route for the local network, specify local.
 
 ## Attributes
 

package/dist/okf/types/CloudConnector.md

@@ -0,0 +1,29 @@
+---
+type: resource-type
+title: CloudConnector
+description: aws resource type AWS::SSM::CloudConnector
+name: CloudConnector
+lexicon: aws
+resource_type: AWS::SSM::CloudConnector
+---
+`AWS::SSM::CloudConnector`, a resource type of the aws lexicon.
+
+## Properties
+
+- `ConfigConnectorArn` (`string`, required): The ARN of the AWS Config connector.
+- `Configuration` (`CloudConnector_CloudConnectorConfiguration`, required): The configuration for the cloud connector.
+- `DisplayName` (`string`, required): The display name of the cloud connector.
+- `RoleArn` (`string`, required): The IAM role ARN used by the cloud connector.
+- `CloudConnectorArn` (`string`, optional): The ARN of the cloud connector.
+- `CloudConnectorId` (`string`, optional): The unique identifier of the cloud connector.
+- `CreatedAt` (`string`, optional): The timestamp when the cloud connector was created.
+- `Description` (`string`, optional): The description of the cloud connector.
+- `Tags` (`CloudConnector_Tag[]`, optional): Tags to apply to the cloud connector.
+- `UpdatedAt` (`string`, optional): The timestamp when the cloud connector was last updated.
+
+## Attributes
+
+- `CloudConnectorArn`
+- `CloudConnectorId`
+- `CreatedAt`
+- `UpdatedAt`

package/dist/okf/types/Cluster.md

@@ -0,0 +1,39 @@
+---
+type: resource-type
+title: Cluster
+description: aws resource type AWS::CloudHSM::Cluster
+name: Cluster
+lexicon: aws
+resource_type: AWS::CloudHSM::Cluster
+---
+`AWS::CloudHSM::Cluster`, a resource type of the aws lexicon.
+
+## Properties
+
+- `HsmType` (`string`, required): The type of HSM to use in the cluster.
+- `Arn` (`string`, optional): The Amazon Resource Name (ARN) of the cluster.
+- `BackupPolicy` (`"DEFAULT"`, optional): The cluster's backup policy.
+- `BackupRetentionPolicy` (`Record<string, unknown>`, optional): A policy that defines how the service retains backups.
+- `ClusterId` (`string`, optional): The cluster's identifier (ID).
+- `Mode` (`"FIPS" | "NON_FIPS"`, optional): The mode to use in the cluster.
+- `NetworkType` (`"DUALSTACK" | "IPV4"`, optional): The NetworkType to create a cluster with.
+- `SecurityGroup` (`string`, optional): The identifier (ID) of the cluster's security group.
+- `State` (`"ACTIVE" | "CREATE_IN_PROGRESS" | "DEGRADED" | "DELETED" | "DELETE_IN_PROGRESS" | "INITIALIZED" | "INITIALIZE_IN_PROGRESS" | "MODIFY_IN_PROGRESS" | "ROLLBACK_IN_PROGRESS" | "UNINITIALIZED" | "UPDATE_IN_PROGRESS"`, optional): The cluster's state.
+- `SubnetIds` (`string[]`, optional): The identifiers (IDs) of the subnets where the cluster is created. You must specify at least one subnet.
+- `SubnetMapping` (`Record<string, unknown>`, optional): A map from availability zone to the cluster's subnet in that availability zone.
+- `Tags` (`Record<string, unknown>[]`, optional): Tags to apply to the CloudHSM cluster.
+- `VpcId` (`string`, optional): The identifier (ID) of the virtual private cloud (VPC) that contains the cluster.
+
+## Attributes
+
+- `Arn`
+- `BackupPolicy`
+- `ClusterId`
+- `SecurityGroup`
+- `State`
+- `SubnetMapping`
+- `VpcId`
+
+## Governed by
+
+- [WAW030](/rules/WAW030.md): Missing DependsOn for known CloudFormation ordering patterns

package/dist/okf/types/ClusterSchedulerConfig.md

@@ -0,0 +1,30 @@
+---
+type: resource-type
+title: ClusterSchedulerConfig
+description: aws resource type AWS::SageMaker::ClusterSchedulerConfig
+name: ClusterSchedulerConfig
+lexicon: aws
+resource_type: AWS::SageMaker::ClusterSchedulerConfig
+---
+`AWS::SageMaker::ClusterSchedulerConfig`, a resource type of the aws lexicon.
+
+## Properties
+
+- `ClusterArn` (`string`, required): ARN of the cluster.
+- `Name` (`string`, required): Name for the cluster policy.
+- `SchedulerConfig` (`ClusterSchedulerConfig_SchedulerConfig`, required)
+- `ClusterSchedulerConfigArn` (`string`, optional): ARN of the cluster policy.
+- `ClusterSchedulerConfigId` (`string`, optional): ID of the cluster policy.
+- `ClusterSchedulerConfigVersion` (`number`, optional): Version of the cluster policy.
+- `CreationTime` (`string`, optional): Creation time of the cluster policy.
+- `Description` (`string`, optional): Description of the cluster policy.
+- `Status` (`"CreateFailed" | "CreateRollbackFailed" | "Created" | "Creating" | "DeleteFailed" | "DeleteRollbackFailed" | "Deleted" | "Deleting" | "UpdateFailed" | "UpdateRollbackFailed" | "Updated" | "Updating"`, optional): Status of the cluster policy.
+- `Tags` (`ClusterSchedulerConfig_Tag[]`, optional): Tags of the cluster policy.
+
+## Attributes
+
+- `ClusterSchedulerConfigArn`
+- `ClusterSchedulerConfigId`
+- `ClusterSchedulerConfigVersion`
+- `CreationTime`
+- `Status`

package/dist/okf/types/CodeCommitRepository.md

@@ -10,22 +10,22 @@ resource_type: AWS::CodeCommit::Repository
 
 ## Properties
 
-- `RepositoryName` (`string`, required)
-- `Arn` (`string`, optional)
-- `CloneUrlHttp` (`string`, optional)
-- `CloneUrlSsh` (`string`, optional)
-- `Code` (`CodeCommitRepository_Code`, optional)
-- `Id` (`string`, optional)
-- `KmsKeyId` (`string`, optional)
-- `Name` (`string`, optional)
-- `RepositoryDescription` (`string`, optional)
-- `Tags` (`CodeCommitRepository_Tag[]`, optional)
-- `Triggers` (`CodeCommitRepository_RepositoryTrigger[]`, optional)
+- `RepositoryName` (`string`, required): The name of the new repository to be created.
+- `Arn` (`string`, optional): The Amazon Resource Name (ARN) of the repository.
+- `CloneUrlHttp` (`string`, optional): The URL to use for cloning the repository over HTTPS.
+- `CloneUrlSsh` (`string`, optional): The URL to use for cloning the repository over SSH.
+- `Code` (`CodeCommitRepository_Code`, optional): Information about code to be committed to a repository after it is created in an AWS CloudFormation stack. Information about code is only used in resource creation. Updates to a stack will not reflect changes made to code properties after initial resource creation.
+- `KmsKeyId` (`string`, optional): The ID of the AWS Key Management Service encryption key used to encrypt and decrypt the repository.
+- `Name` (`string`, optional): The repository's name.
+- `RepositoryDescription` (`string`, optional): A comment or description about the new repository.
+- `RepositoryId` (`string`, optional): The ID of the repository.
+- `Tags` (`CodeCommitRepository_Tag[]`, optional): One or more tag key-value pairs to use when tagging this repository.
+- `Triggers` (`CodeCommitRepository_RepositoryTrigger[]`, optional): Information about a trigger for a repository.
 
 ## Attributes
 
 - `Arn`
 - `CloneUrlHttp`
 - `CloneUrlSsh`
-- `Id`
 - `Name`
+- `RepositoryId`

package/dist/okf/types/CodeConnectionsHost.md

@@ -0,0 +1,26 @@
+---
+type: resource-type
+title: CodeConnectionsHost
+description: aws resource type AWS::CodeConnections::Host
+name: CodeConnectionsHost
+lexicon: aws
+resource_type: AWS::CodeConnections::Host
+---
+`AWS::CodeConnections::Host`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Name` (`string`, required): The name of the host.
+- `ProviderEndpoint` (`string`, required): The endpoint of the infrastructure where your provider type is installed.
+- `ProviderType` (`"AzureDevOps" | "Bitbucket" | "GitHub" | "GitHubEnterpriseServer" | "GitLab" | "GitLabSelfManaged"`, required): The name of the installed provider to be associated with your connection.
+- `HostArn` (`string`, optional): The Amazon Resource Name (ARN) of the host.
+- `HostId` (`string`, optional): The server-generated unique identifier for the host.
+- `Status` (`string`, optional): The status of the host.
+- `Tags` (`CodeConnectionsHost_Tag[]`, optional): Tags to apply to the host.
+- `VpcConfiguration` (`CodeConnectionsHost_VpcConfiguration`, optional)
+
+## Attributes
+
+- `HostArn`
+- `HostId`
+- `Status`

package/dist/okf/types/CodeRepository.md

@@ -10,11 +10,11 @@ resource_type: AWS::SageMaker::CodeRepository
 
 ## Properties
 
-- `GitConfig` (`CodeRepository_GitConfig`, required)
-- `CodeRepositoryName` (`string`, optional)
-- `Id` (`string`, optional)
-- `Tags` (`CodeRepository_Tag[]`, optional)
+- `GitConfig` (`CodeRepository_GitConfig`, required): Configuration details for the Git repository, including the URL where it is located and the ARN of the AWS Secrets Manager secret that contains the credentials used to access the repository.
+- `CodeRepositoryArn` (`string`, optional): The Amazon Resource Name (ARN) of the code repository.
+- `CodeRepositoryName` (`string`, optional): The name of the Git repository.
+- `Tags` (`CodeRepository_Tag[]`, optional): An array of key-value pairs.
 
 ## Attributes
 
-- `Id`
+- `CodeRepositoryArn`

package/dist/okf/types/CompositeAlarm.md

@@ -11,6 +11,7 @@ resource_type: AWS::CloudWatch::CompositeAlarm
 ## Properties
 
 - `AlarmRule` (`string`, required): Expression which aggregates the state of other Alarms (Metric or Composite Alarms)
+- `ActionConfiguration` (`CompositeAlarm_ActionConfiguration`, optional): Configuration that applies to the notifications this alarm sends when it performs its actions.
 - `ActionsEnabled` (`boolean`, optional): Indicates whether actions should be executed during any changes to the alarm state. The default is TRUE.
 - `ActionsSuppressor` (`string`, optional): Actions will be suppressed if the suppressor alarm is in the ALARM state. ActionsSuppressor can be an AlarmName or an Amazon Resource Name (ARN) from an existing alarm.
 - `ActionsSuppressorExtensionPeriod` (`number`, optional): Actions will be suppressed if WaitPeriod is active. The length of time that actions are suppressed is in seconds.

package/dist/okf/types/ComputeEnvironment.md

@@ -15,6 +15,7 @@ resource_type: AWS::Batch::ComputeEnvironment
 - `ComputeEnvironmentName` (`string`, optional)
 - `ComputeResources` (`ComputeEnvironment_ComputeResources`, optional)
 - `Context` (`string`, optional)
+- `EcsSettings` (`ComputeEnvironment_EcsSettings`, optional)
 - `EksConfiguration` (`ComputeEnvironment_EksConfiguration`, optional)
 - `ReplaceComputeEnvironment` (`boolean`, optional)
 - `ServiceRole` (`string`, optional)
@@ -27,3 +28,4 @@ resource_type: AWS::Batch::ComputeEnvironment
 
 - `ComputeEnvironmentArn`
 - `ComputeResources.Ec2Configuration.*.BatchImageStatus`
+- `EksConfiguration.AccessEntry.Status`

package/dist/okf/types/ComputeNodeGroup.md

@@ -11,13 +11,13 @@ resource_type: AWS::PCS::ComputeNodeGroup
 ## Properties
 
 - `ClusterId` (`string`, required): The ID of the cluster of the compute node group.
-- `CustomLaunchTemplate` (`Record<string, unknown>`, required): An Amazon EC2 launch template AWS PCS uses to launch compute nodes.
 - `IamInstanceProfileArn` (`string`, required): The Amazon Resource Name (ARN) of the IAM instance profile used to pass an IAM role when launching EC2 instances. The role contained in your instance profile must have pcs:RegisterComputeNodeGroupInstance permissions attached to provision instances correctly.
 - `InstanceConfigs` (`ComputeNodeGroup_InstanceConfig[]`, required): A list of EC2 instance configurations that AWS PCS can provision in the compute node group.
 - `ScalingConfiguration` (`Record<string, unknown>`, required): Specifies the boundaries of the compute node group auto scaling.
 - `SubnetIds` (`string[]`, required): The list of subnet IDs where instances are provisioned by the compute node group. The subnets must be in the same VPC as the cluster.
 - `AmiId` (`string`, optional): The ID of the Amazon Machine Image (AMI) that AWS PCS uses to launch instances. If not provided, AWS PCS uses the AMI ID specified in the custom launch template.
 - `Arn` (`string`, optional): The unique Amazon Resource Name (ARN) of the compute node group.
+- `CustomLaunchTemplate` (`Record<string, unknown>`, optional): An Amazon EC2 launch template AWS PCS uses to launch compute nodes.
 - `ErrorInfo` (`ComputeNodeGroup_ErrorInfo[]`, optional): The list of errors that occurred during compute node group provisioning.
 - `Id` (`string`, optional): The generated unique ID of the compute node group.
 - `Name` (`string`, optional): The name that identifies the compute node group.

package/dist/okf/types/ComputeQuota.md

@@ -0,0 +1,34 @@
+---
+type: resource-type
+title: ComputeQuota
+description: aws resource type AWS::SageMaker::ComputeQuota
+name: ComputeQuota
+lexicon: aws
+resource_type: AWS::SageMaker::ComputeQuota
+---
+`AWS::SageMaker::ComputeQuota`, a resource type of the aws lexicon.
+
+## Properties
+
+- `ClusterArn` (`string`, required): The ARN of the EKS-orchestrated SageMaker HyperPod cluster the compute allocation definition is bound to. Slurm-orchestrated clusters are rejected by the service.
+- `ComputeQuotaConfig` (`ComputeQuota_ComputeQuotaConfig`, required): Compute allocation rules: per-resource quotas, idle-borrowing strategy, and team-task preemption policy.
+- `ComputeQuotaTarget` (`ComputeQuota_ComputeQuotaTarget`, required): The team this compute allocation rule applies to.
+- `Name` (`string`, required): The name of the compute allocation definition.
+- `ActivationState` (`"Disabled" | "Enabled"`, optional): Whether the compute allocation rule is active. Defaults service-side to 'Enabled' when omitted on Create.
+- `ComputeQuotaArn` (`string`, optional): The Amazon Resource Name (ARN) of the compute allocation definition.
+- `ComputeQuotaId` (`string`, optional): The unique 12-character identifier of the compute allocation definition.
+- `ComputeQuotaVersion` (`number`, optional): The version of the compute allocation definition. Incremented on each successful Update; used for optimistic concurrency control.
+- `CreationTime` (`string`, optional): The ISO-8601 timestamp at which the compute allocation definition was created.
+- `Description` (`string`, optional): A free-form description of the compute allocation definition.
+- `LastModifiedTime` (`string`, optional): The ISO-8601 timestamp at which the compute allocation definition was last modified.
+- `Status` (`"CreateFailed" | "CreateRollbackFailed" | "Created" | "Creating" | "DeleteFailed" | "DeleteRollbackFailed" | "Deleted" | "Deleting" | "UpdateFailed" | "UpdateRollbackFailed" | "Updated" | "Updating"`, optional): The current lifecycle status of the compute allocation definition.
+- `Tags` (`ComputeQuota_Tag[]`, optional): Tags to associate with the compute allocation definition.
+
+## Attributes
+
+- `ComputeQuotaArn`
+- `ComputeQuotaId`
+- `ComputeQuotaVersion`
+- `CreationTime`
+- `LastModifiedTime`
+- `Status`

package/dist/okf/types/ConfigRule.md

@@ -19,7 +19,7 @@ resource_type: AWS::Config::ConfigRule
 - `EvaluationModes` (`ConfigRule_EvaluationModeConfiguration[]`, optional): The modes the CC rule can be evaluated in. The valid values are distinct objects. By default, the value is Detective evaluation mode only.
 - `InputParameters` (`string`, optional): A string, in JSON format, that is passed to the CC rule Lambda function.
 - `MaximumExecutionFrequency` (`string`, optional): The maximum frequency with which CC runs evaluations for a rule. You can specify a value for ``MaximumExecutionFrequency`` when: + You are using an AWS managed rule that is triggered at a periodic frequency. + Your custom rule is triggered when CC delivers the configuration snapshot. For more information, see [ConfigSnapshotDeliveryProperties](https://docs.aws.amazon.com/config/latest/APIReference/API_ConfigSnapshotDeliveryProperties.html). By default, rules with a periodic trigger are evaluated every 24 hours. To change the frequency, specify a valid value for the ``MaximumExecutionFrequency`` parameter.
-- `Scope` (`ConfigRule_Scope`, optional): Defines which resources can trigger an evaluation for the rule. The scope can include one or more resource types, a combination of one resource type and one resource ID, or a combination of a tag key and value. Specify a scope to constrain the resources that can trigger an evaluation for the rule. If you do not specify a scope, evaluations are triggered when any resource in the recording group changes. The scope can be empty.
+- `Scope` (`ConfigRule_Scope`, optional): Defines which resources can trigger an evaluation for the rule. The scope can include one or more resource types, a combination of one resource type and one resource ID, or a combination of a tag key and value. Specify a scope to constrain the resources that can trigger an evaluation for the rule. If you do not specify a scope, evaluations are triggered when any resource in the recording group changes.
 
 ## Attributes
 

package/dist/okf/types/ConfigurationRecorder.md

@@ -10,12 +10,13 @@ resource_type: AWS::Config::ConfigurationRecorder
 
 ## Properties
 
-- `RoleARN` (`string`, required)
-- `Id` (`string`, optional)
-- `Name` (`string`, optional)
-- `RecordingGroup` (`ConfigurationRecorder_RecordingGroup`, optional)
-- `RecordingMode` (`ConfigurationRecorder_RecordingMode`, optional)
+- `RoleARN` (`string`, required): The Amazon Resource Name (ARN) of the role that allows AWS Config to read S3 objects.
+- `Name` (`string`, optional): The name of the configuration recorder. By default, AWS Config assigns the name "default" when creating the configuration recorder. To change the configuration recorder name, you must use the DeleteConfigurationRecorder action to delete your current configuration recorder, and then you must use the PutConfigurationRecorder command to create a configuration recorder that has the desired name.
+- `RecordingGroup` (`ConfigurationRecorder_RecordingGroup`, optional): Specifies which resource types are in scope for the configuration recorder to record.
+- `RecordingMode` (`ConfigurationRecorder_RecordingMode`, optional): Specifies the default recording frequency for the configuration recorder.
+- `ResourceARN` (`string`, optional): Returns the Amazon Resource Name (ARN) for the Configuration Recorder.
+- `StartedOnCreate` (`boolean`, optional): Defaults to 'true'. Controls whether the recorder starts recording after the create operation. Set this to 'false' for development and testing purposes.
 
 ## Attributes
 
-- `Id`
+- `ResourceARN`

package/dist/okf/types/ConnectAttachment.md

@@ -40,6 +40,8 @@ resource_type: AWS::NetworkManager::ConnectAttachment
 - `CreatedAt`
 - `LastModificationErrors`
 - `OwnerAccountId`
+- `ProposedNetworkFunctionGroupChange`
+- `ProposedSegmentChange`
 - `ResourceArn`
 - `SegmentName`
 - `State`

package/dist/okf/types/ConnectQueue.md

@@ -15,9 +15,11 @@ resource_type: AWS::Connect::Queue
 - `Name` (`string`, required): The name of the queue.
 - `AdditionalEmailAddresses` (`ConnectQueue_EmailAddress[]`, optional): The email addresses that agents can use when replying to or initiating email contacts
 - `Description` (`string`, optional): The description of the queue.
+- `LastModifiedRegion` (`string`, optional): The AWS Region where this resource was last modified.
+- `LastModifiedTime` (`number`, optional): The timestamp when this resource was last modified.
 - `MaxContacts` (`number`, optional): The maximum number of contacts that can be in the queue before it is considered full.
 - `OutboundCallerConfig` (`ConnectQueue_OutboundCallerConfig`, optional): The outbound caller ID name, number, and outbound whisper flow.
-- `OutboundEmailConfig` (`ConnectQueue_OutboundEmailConfig`, optional): The outbound email address ID.
+- `OutboundEmailConfig` (`ConnectQueue_OutboundEmailConfig`, optional): The outbound email configuration for a specified queue.
 - `QueueArn` (`string`, optional): The Amazon Resource Name (ARN) for the queue.
 - `QuickConnectArns` (`string[]`, optional): The quick connects available to agents who are working the queue.
 - `Status` (`"DISABLED" | "ENABLED"`, optional): The status of the queue.
@@ -26,5 +28,7 @@ resource_type: AWS::Connect::Queue
 
 ## Attributes
 
+- `LastModifiedRegion`
+- `LastModifiedTime`
 - `QueueArn`
 - `Type`

package/dist/okf/types/ConnectVocabulary.md

@@ -0,0 +1,28 @@
+---
+type: resource-type
+title: ConnectVocabulary
+description: aws resource type AWS::Connect::Vocabulary
+name: ConnectVocabulary
+lexicon: aws
+resource_type: AWS::Connect::Vocabulary
+---
+`AWS::Connect::Vocabulary`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Content` (`string`, required): The content of the custom vocabulary in plain-text format with a table of values.
+- `InstanceId` (`string`, required): The identifier of the Amazon Connect instance.
+- `LanguageCode` (`"ar-AE" | "ca-ES" | "da-DK" | "de-CH" | "de-DE" | "en-AB" | "en-AU" | "en-GB" | "en-IE" | "en-IN" | "en-NZ" | "en-US" | "en-WL" | "en-ZA" | "es-ES" | "es-US" | "fi-FI" | "fr-CA" | "fr-FR" | "hi-IN" | "id-ID" | "it-IT" | "ja-JP" | "ko-KR" | "ms-MY" | "nl-NL" | "no-NO" | "pl-PL" | "pt-BR" | "pt-PT" | "sv-SE" | "tl-PH" | "zh-CN"`, required): The language code of the vocabulary entries.
+- `VocabularyName` (`string`, required): A unique name of the custom vocabulary.
+- `Arn` (`string`, optional): The Amazon Resource Name (ARN) of the custom vocabulary.
+- `LastModifiedTime` (`string`, optional): The timestamp when the custom vocabulary was last modified.
+- `State` (`"ACTIVE" | "CREATION_FAILED" | "CREATION_IN_PROGRESS" | "DELETE_IN_PROGRESS"`, optional): The current state of the custom vocabulary.
+- `Tags` (`ConnectVocabulary_Tag[]`, optional): The tags used to organize, track, or control access for this resource.
+- `VocabularyId` (`string`, optional): The identifier of the custom vocabulary.
+
+## Attributes
+
+- `Arn`
+- `LastModifiedTime`
+- `State`
+- `VocabularyId`

package/dist/okf/types/ConnectionType.md

@@ -0,0 +1,24 @@
+---
+type: resource-type
+title: ConnectionType
+description: aws resource type AWS::Glue::ConnectionType
+name: ConnectionType
+lexicon: aws
+resource_type: AWS::Glue::ConnectionType
+---
+`AWS::Glue::ConnectionType`, a resource type of the aws lexicon.
+
+## Properties
+
+- `ConnectionType` (`string`, required): The name of the connection type. Must be prefixed with REST-.
+- `RestConfiguration` (`ConnectionType_RestConfiguration`, required)
+- `ConnectionProperties` (`ConnectionType_ConnectionPropertiesConfiguration`, optional)
+- `ConnectionTypeArn` (`string`, optional): The Amazon Resource Name (ARN) of the registered connection type.
+- `ConnectorAuthenticationConfiguration` (`ConnectionType_ConnectorAuthenticationConfiguration`, optional)
+- `Description` (`string`, optional): A description of the connection type.
+- `IntegrationType` (`"REST"`, optional): The integration type for the connection. Currently only REST is supported.
+- `Tags` (`ConnectionType_Tag[]`, optional): Tags to assign to the connection type.
+
+## Attributes
+
+- `ConnectionTypeArn`

package/dist/okf/types/ConsentPortal.md

@@ -0,0 +1,33 @@
+---
+type: resource-type
+title: ConsentPortal
+description: aws resource type AWS::BedrockAgentCore::ConsentPortal
+name: ConsentPortal
+lexicon: aws
+resource_type: AWS::BedrockAgentCore::ConsentPortal
+---
+`AWS::BedrockAgentCore::ConsentPortal`, a resource type of the aws lexicon.
+
+## Properties
+
+- `ExecutionRoleArn` (`string`, required)
+- `IdpConfig` (`ConsentPortal_IdpConfig`, required)
+- `Name` (`string`, required)
+- `Sources` (`ConsentPortal_ConsentPortalSource[]`, required)
+- `ConsentPortalArn` (`string`, optional): The Amazon Resource Name (ARN) of the resource.
+- `ConsentPortalId` (`string`, optional)
+- `CreatedAt` (`string`, optional)
+- `Description` (`string`, optional)
+- `PortalUrl` (`string`, optional)
+- `Status` (`"ACTIVE" | "CREATING" | "DELETING" | "FAILED" | "UPDATE_FAILED" | "UPDATING"`, optional)
+- `Tags` (`ConsentPortal_Tag[]`, optional): Tags to assign to the consent portal
+- `UpdatedAt` (`string`, optional)
+
+## Attributes
+
+- `ConsentPortalArn`
+- `ConsentPortalId`
+- `CreatedAt`
+- `PortalUrl`
+- `Status`
+- `UpdatedAt`

package/dist/okf/types/ContactMethod.md

@@ -0,0 +1,29 @@
+---
+type: resource-type
+title: ContactMethod
+description: aws resource type AWS::Lightsail::ContactMethod
+name: ContactMethod
+lexicon: aws
+resource_type: AWS::Lightsail::ContactMethod
+---
+`AWS::Lightsail::ContactMethod`, a resource type of the aws lexicon.
+
+## Properties
+
+- `ContactEndpoint` (`string`, required): The destination of the contact method, such as an email address or a mobile phone number.
+- `Protocol` (`"Email" | "SMS"`, required): The protocol of the contact method, such as Email or SMS (text messaging).
+- `Arn` (`string`, optional): The Amazon Resource Name (ARN) of the contact method.
+- `CreatedAt` (`string`, optional): The timestamp when the contact method was created.
+- `Name` (`string`, optional): The name of the contact method.
+- `ResourceType` (`string`, optional): The Lightsail resource type of the contact method.
+- `Status` (`"Invalid" | "PendingVerification" | "Valid"`, optional): The current status of the contact method.
+- `SupportCode` (`string`, optional): The support code for the contact method.
+
+## Attributes
+
+- `Arn`
+- `CreatedAt`
+- `Name`
+- `ResourceType`
+- `Status`
+- `SupportCode`

package/dist/okf/types/ContainerAssociation.md

@@ -0,0 +1,26 @@
+---
+type: resource-type
+title: ContainerAssociation
+description: aws resource type AWS::NetworkFirewall::ContainerAssociation
+name: ContainerAssociation
+lexicon: aws
+resource_type: AWS::NetworkFirewall::ContainerAssociation
+---
+`AWS::NetworkFirewall::ContainerAssociation`, a resource type of the aws lexicon.
+
+## Properties
+
+- `ContainerAssociationName` (`string`, required): The descriptive name of the container association. You can't change the name of a container association after you create it.
+- `ContainerMonitoringConfigurations` (`ContainerAssociation_ContainerMonitoringConfiguration[]`, required): The monitoring configurations for the container association. Each configuration specifies an Amazon ECS or Amazon EKS cluster to monitor and optional attribute filters to narrow which containers are tracked.
+- `Type` (`"ECS" | "EKS"`, required): The type of containers to monitor. You can't change the container type after creation.
+- `ContainerAssociationArn` (`string`, optional): The Amazon Resource Name (ARN) of the container association.
+- `Description` (`string`, optional): A description of the container association.
+- `ResolvedCidrCount` (`number`, optional): The number of CIDR blocks resolved from the monitored containers.
+- `Status` (`"ACTIVE" | "CREATING" | "DELETING" | "UPDATING"`, optional): The current status of the container association.
+- `Tags` (`ContainerAssociation_Tag[]`, optional): An array of key-value pairs to apply to this resource.
+
+## Attributes
+
+- `ContainerAssociationArn`
+- `ResolvedCidrCount`
+- `Status`

package/dist/okf/types/ContainerFleet.md

@@ -34,7 +34,7 @@ resource_type: AWS::GameLift::ContainerFleet
 - `PerInstanceContainerGroupDefinitionName` (`string`, optional): The name of the container group definition that will be created per instance. This field is optional if you specify GameServerContainerGroupDefinitionName.
 - `PlayerGatewayMode` (`"DISABLED" | "ENABLED" | "REQUIRED"`, optional): The player gateway mode for the container fleet.
 - `ScalingPolicies` (`ContainerFleet_ScalingPolicy[]`, optional): A list of rules that control how a fleet is scaled.
-- `Status` (`"ACTIVATING" | "ACTIVE" | "CREATED" | "CREATING" | "DELETING" | "PENDING" | "UPDATING"`, optional): The current status of the container fleet.
+- `Status` (`"ACTIVATING" | "ACTIVE" | "CREATED" | "CREATING" | "DELETING" | "EXPIRED" | "PENDING" | "UPDATING"`, optional): The current status of the container fleet.
 - `Tags` (`ContainerFleet_Tag[]`, optional): An array of key-value pairs to apply to this resource.
 
 ## Attributes

package/dist/okf/types/ContainerGroupDefinition.md

@@ -13,7 +13,6 @@ resource_type: AWS::GameLift::ContainerGroupDefinition
 - `Name` (`string`, required): A descriptive label for the container group definition.
 - `OperatingSystem` (`"AMAZON_LINUX_2023"`, required): The operating system of the container group
 - `TotalMemoryLimitMebibytes` (`number`, required): The total memory limit of container groups following this definition in MiB
-- `TotalVcpuLimit` (`number`, required): The total amount of virtual CPUs on the container group definition
 - `ContainerGroupDefinitionArn` (`string`, optional): The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift container group resource and uniquely identifies it across all AWS Regions.
 - `ContainerGroupType` (`"GAME_SERVER" | "PER_INSTANCE"`, optional): The scope of the container group
 - `CreationTime` (`string`, optional): A time stamp indicating when this data object was created. Format is a number expressed in Unix time as milliseconds (for example "1469498468.057").
@@ -23,6 +22,7 @@ resource_type: AWS::GameLift::ContainerGroupDefinition
 - `StatusReason` (`string`, optional): A string indicating the reason for ContainerGroupDefinition status.
 - `SupportContainerDefinitions` (`ContainerGroupDefinition_SupportContainerDefinition[]`, optional): A collection of support container definitions that define the containers in this group.
 - `Tags` (`ContainerGroupDefinition_Tag[]`, optional): An array of key-value pairs to apply to this resource.
+- `TotalVcpuLimit` (`number`, optional): The total amount of virtual CPUs on the container group definition
 - `VersionDescription` (`string`, optional): The description of this version
 - `VersionNumber` (`number`, optional): The version of this ContainerGroupDefinition
 

package/dist/okf/types/Content.md

@@ -0,0 +1,40 @@
+---
+type: resource-type
+title: Content
+description: aws resource type AWS::Wisdom::Content
+name: Content
+lexicon: aws
+resource_type: AWS::Wisdom::Content
+---
+`AWS::Wisdom::Content`, a resource type of the aws lexicon.
+
+## Properties
+
+- `KnowledgeBaseId` (`string`, required): The identifier of the knowledge base.
+- `Name` (`string`, required): The name of the content.
+- `ContentArn` (`string`, optional): The Amazon Resource Name (ARN) of the content.
+- `ContentId` (`string`, optional): The identifier of the content.
+- `ContentType` (`string`, optional): The media type of the content.
+- `KnowledgeBaseArn` (`string`, optional): The Amazon Resource Name (ARN) of the knowledge base.
+- `LinkOutUri` (`string`, optional): The URI of the content.
+- `Metadata` (`Record<string, unknown>`, optional): A key/value map to store attributes without affecting tagging or recommendations.
+- `OverrideLinkOutUri` (`string`, optional): The URI you want to use for the article.
+- `RevisionId` (`string`, optional): The identifier of the content revision.
+- `Status` (`"ACTIVE" | "CREATE_FAILED" | "CREATE_IN_PROGRESS" | "DELETED" | "DELETE_FAILED" | "DELETE_IN_PROGRESS" | "UPDATE_FAILED"`, optional): The status of the content.
+- `Tags` (`Content_Tag[]`, optional): The tags used to organize, track, or control access for this resource.
+- `Title` (`string`, optional): The title of the content.
+- `UploadId` (`string`, optional): A pointer to the uploaded asset. This value is returned by StartContentUpload.
+
+## Attributes
+
+- `ContentArn`
+- `ContentId`
+- `ContentType`
+- `KnowledgeBaseArn`
+- `LinkOutUri`
+- `RevisionId`
+- `Status`
+
+## Governed by
+
+- [WAW056](/rules/WAW056.md): SCP guardrail has no Deny statement — it constrains nothing

package/dist/okf/types/ContentAssociation.md

@@ -0,0 +1,28 @@
+---
+type: resource-type
+title: ContentAssociation
+description: aws resource type AWS::Wisdom::ContentAssociation
+name: ContentAssociation
+lexicon: aws
+resource_type: AWS::Wisdom::ContentAssociation
+---
+`AWS::Wisdom::ContentAssociation`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Association` (`ContentAssociation_ContentAssociationContents`, required): The identifier of the associated resource.
+- `AssociationType` (`"AMAZON_CONNECT_GUIDE"`, required): The type of association.
+- `ContentId` (`string`, required): The identifier of the content.
+- `KnowledgeBaseId` (`string`, required): The identifier of the knowledge base.
+- `ContentArn` (`string`, optional): The Amazon Resource Name (ARN) of the content.
+- `ContentAssociationArn` (`string`, optional): The Amazon Resource Name (ARN) of the content association.
+- `ContentAssociationId` (`string`, optional): The identifier of the content association.
+- `KnowledgeBaseArn` (`string`, optional): The Amazon Resource Name (ARN) of the knowledge base.
+- `Tags` (`ContentAssociation_Tag[]`, optional): The tags used to organize, track, or control access for this resource.
+
+## Attributes
+
+- `ContentArn`
+- `ContentAssociationArn`
+- `ContentAssociationId`
+- `KnowledgeBaseArn`

package/dist/okf/types/CustomDetectionRuleAssociation.md

@@ -0,0 +1,28 @@
+---
+type: resource-type
+title: CustomDetectionRuleAssociation
+description: aws resource type AWS::GuardDuty::CustomDetectionRuleAssociation
+name: CustomDetectionRuleAssociation
+lexicon: aws
+resource_type: AWS::GuardDuty::CustomDetectionRuleAssociation
+---
+`AWS::GuardDuty::CustomDetectionRuleAssociation`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Mode` (`"DRY_RUN" | "LIVE"`, required): Whether the rule runs in LIVE mode (generates findings) or DRY_RUN mode (evaluates without generating findings).
+- `RuleId` (`string`, required): The catalog identifier of the custom detection rule to associate.
+- `AccountId` (`string`, optional): The AWS account ID the association applies to.
+- `Arn` (`string`, optional): The Amazon Resource Name (ARN) of the association.
+- `AssociationId` (`string`, optional): The service-generated unique identifier of the association.
+- `CreatedAt` (`string`, optional): The time the association was created.
+- `Tags` (`CustomDetectionRuleAssociation_TagItem[]`, optional): The tags applied to the association.
+- `UpdatedAt` (`string`, optional): The time the association was last updated.
+
+## Attributes
+
+- `AccountId`
+- `Arn`
+- `AssociationId`
+- `CreatedAt`
+- `UpdatedAt`