@intentius/chant-lexicon-aws 0.124.31 → 0.124.33

package/dist/okf/types/Function.md

@@ -18,7 +18,7 @@ resource_type: AWS::Lambda::Function
 - `CodeSigningConfigArn` (`string`, optional): To enable code signing for this function, specify the ARN of a code-signing configuration. A code-signing configuration includes a set of signing profiles, which define the trusted publishers for this function.
 - `DeadLetterConfig` (`Function_DeadLetterConfig`, optional): A dead-letter queue configuration that specifies the queue or topic where Lambda sends asynchronous events when they fail processing. For more information, see [Dead-letter queues](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async.html#invocation-dlq).
 - `Description` (`string`, optional): A description of the function.
-- `DurableConfig` (`Function_DurableConfig`, optional): Configuration settings for [durable functions](https://docs.aws.amazon.com/lambda/latest/dg/durable-functions.html), including execution timeout and retention period for execution history.
+- `DurableConfig` (`Function_DurableConfig`, optional): Configuration settings for [durable functions](https://docs.aws.amazon.com/lambda/latest/dg/durable-functions.html), including execution timeout, retention period for execution history, and an optional ARN of the KMSlong (KMS) customer managed key that is used to encrypt your durable execution's payload data, including input, output, and error payloads.
 - `Environment` (`Function_Environment`, optional): Environment variables that are accessible from function code during execution.
 - `EphemeralStorage` (`Function_EphemeralStorage`, optional): The size of the function's ``/tmp`` directory in MB. The default value is 512, but it can be any whole number between 512 and 10,240 MB.
 - `FileSystemConfigs` (`Function_FileSystemConfig[]`, optional): Connection settings for an Amazon EFS or Amazon S3 Files file system. To connect a function to a file system, a mount target must be available in every Availability Zone that your function connects to. If your template contains an [AWS::EFS::MountTarget](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-mounttarget.html) or [AWS::S3Files::MountTarget](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3files-mounttarget.html) resource, you must also specify a ``DependsOn`` attribute to ensure that the mount target is created or updated before the function. For more information about using the ``DependsOn`` attribute, see [DependsOn Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html).
@@ -40,7 +40,7 @@ resource_type: AWS::Lambda::Function
 - `SnapStartResponse` (`Function_SnapStartResponse`, optional)
 - `Tags` (`Function_Tag[]`, optional): A list of [tags](https://docs.aws.amazon.com/lambda/latest/dg/tagging.html) to apply to the function. You must have the ``lambda:TagResource``, ``lambda:UntagResource``, and ``lambda:ListTags`` permissions for your [principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html) to manage the CFN stack. If you don't have these permissions, there might be unexpected behavior with stack-level tags propagating to the resource during resource creation and update.
 - `TenancyConfig` (`Function_TenancyConfig`, optional): The function's tenant isolation configuration settings. Determines whether the Lambda function runs on a shared or dedicated infrastructure per unique tenant.
-- `Timeout` (`number`, optional): The amount of time (in seconds) that Lambda allows a function to run before stopping it. The default is 3 seconds. The maximum allowed value is 900 seconds. For more information, see [Lambda execution environment](https://docs.aws.amazon.com/lambda/latest/dg/runtimes-context.html).
+- `Timeout` (`number`, optional): The amount of time (in seconds) that Lambda allows a function to run before stopping it. The default is 3 seconds, and the maximum allowed value is 900 seconds. For functions using Lambda Managed Instances, asynchronous invocations and event source mapping invocations (except Amazon MQ and Amazon DocumentDB) support a maximum allowed value of 5,400 seconds (90 minutes). For more information, see [Lambda execution environment](https://docs.aws.amazon.com/lambda/latest/dg/runtimes-context.html).
 - `TracingConfig` (`Function_TracingConfig`, optional): Set ``Mode`` to ``Active`` to sample and trace a subset of incoming requests with [X-Ray](https://docs.aws.amazon.com/lambda/latest/dg/services-xray.html).
 - `VpcConfig` (`Function_VpcConfig`, optional): For network connectivity to AWS resources in a VPC, specify a list of security groups and subnets in the VPC. When you connect a function to a VPC, it can access resources and the internet only through that VPC. For more information, see [Configuring a Lambda function to access resources in a VPC](https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html).
 

package/dist/okf/types/Gateway.md

@@ -0,0 +1,41 @@
+---
+type: resource-type
+title: Gateway
+description: aws resource type AWS::ECS::Gateway
+name: Gateway
+lexicon: aws
+resource_type: AWS::ECS::Gateway
+---
+`AWS::ECS::Gateway`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Configuration` (`Gateway_GatewayConfiguration`, required): The configuration for the gateway.
+- `GatewayName` (`string`, required): The name of the gateway. Up to 255 letters (uppercase and lowercase), numbers, and hyphens are allowed.
+- `InfrastructureRoleArn` (`string`, required): The ARN of the IAM role that ECS uses to manage infrastructure for the gateway.
+- `AccessType` (`Gateway_AccessType`, optional): The access type of the gateway.
+- `Arn` (`string`, optional): The Amazon Resource Name (ARN) of the gateway.
+- `CreatedAt` (`string`, optional): The timestamp when the gateway was created.
+- `DeletionProtection` (`boolean`, optional): Whether deletion protection is enabled for the gateway.
+- `PropagateTags` (`Gateway_PropagateGatewayTags`, optional): Specifies whether to propagate the tags from the gateway to other resources.
+- `Status` (`Gateway_GatewayStatus`, optional): The status of the gateway.
+- `Tags` (`Gateway_Tag[]`, optional): The metadata that you apply to the gateway to help you categorize and organize them.
+- `UpdatedAt` (`string`, optional): The timestamp when the gateway was last updated.
+
+## Attributes
+
+- `AccessType`
+- `Arn`
+- `Configuration.HostSharedAlb.CurrentAlbCount`
+- `CreatedAt`
+- `Status`
+- `UpdatedAt`
+
+## Governed by
+
+- [WAW030](/rules/WAW030.md): Missing DependsOn for known CloudFormation ordering patterns
+- [WAW064](/rules/WAW064.md): Transit Gateway route table declares a Blackhole route — confirm the traffic drop is intentional, not an accident
+- [WAW065](/rules/WAW065.md): Transit Gateway route table has associations but no propagations, or an attachment wired into no route table
+- [WAW066](/rules/WAW066.md): Private subnet's route table has no default route, or its default route targets a gateway that does not exist in the template
+- [WAW067](/rules/WAW067.md): A single-AZ NAT gateway serves private subnets across multiple Availability Zones — single point of failure for cross-AZ egress
+- [WAW068](/rules/WAW068.md): VPN Gateway or Transit Gateway has only one attached VPN Connection — no redundant path for hybrid connectivity

package/dist/okf/types/GatewayClusterAssociations.md

@@ -0,0 +1,23 @@
+---
+type: resource-type
+title: GatewayClusterAssociations
+description: aws resource type AWS::ECS::GatewayClusterAssociations
+name: GatewayClusterAssociations
+lexicon: aws
+resource_type: AWS::ECS::GatewayClusterAssociations
+---
+`AWS::ECS::GatewayClusterAssociations`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Cluster` (`string`, required): The name or full Amazon Resource Name (ARN) of the cluster to associate the gateway with.
+- `Gateway` (`string`, required): The name or full Amazon Resource Name (ARN) of the gateway to associate with the cluster.
+- `ClusterArn` (`string`, optional): The full Amazon Resource Name (ARN) of the associated cluster.
+- `GatewayArn` (`string`, optional): The full Amazon Resource Name (ARN) of the associated gateway.
+- `Status` (`GatewayClusterAssociations_GatewayClusterAssociationStatus`, optional): The status of the association.
+
+## Attributes
+
+- `ClusterArn`
+- `GatewayArn`
+- `Status`

package/dist/okf/types/GatewayRateLimit.md

@@ -0,0 +1,26 @@
+---
+type: resource-type
+title: GatewayRateLimit
+description: aws resource type AWS::BedrockAgentCore::GatewayRateLimit
+name: GatewayRateLimit
+lexicon: aws
+resource_type: AWS::BedrockAgentCore::GatewayRateLimit
+---
+`AWS::BedrockAgentCore::GatewayRateLimit`, a resource type of the aws lexicon.
+
+## Properties
+
+- `DimensionKeys` (`string[]`, required): Ordered list of dimension names defining the scope of this limit. Unique per gateway — no two limits can share the same dimensionKeys.
+- `Entries` (`GatewayRateLimit_LimitEntry[]`, required): Rule entries mapping dimension values to rate configurations.
+- `CreatedAt` (`string`, optional)
+- `Description` (`string`, optional): Optional human-readable description for this limit.
+- `GatewayIdentifier` (`string`, optional)
+- `RateLimitId` (`string`, optional): Limit identifier. Optional on Create (system-generates if not provided by customer). Always present in responses.
+- `Status` (`GatewayRateLimit_GatewayRateLimitStatus`, optional)
+- `UpdatedAt` (`string`, optional)
+
+## Attributes
+
+- `CreatedAt`
+- `Status`
+- `UpdatedAt`

package/dist/okf/types/GatewayRule.md

@@ -0,0 +1,32 @@
+---
+type: resource-type
+title: GatewayRule
+description: aws resource type AWS::BedrockAgentCore::GatewayRule
+name: GatewayRule
+lexicon: aws
+resource_type: AWS::BedrockAgentCore::GatewayRule
+---
+`AWS::BedrockAgentCore::GatewayRule`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Actions` (`any[]`, required)
+- `Priority` (`number`, required)
+- `Conditions` (`any[]`, optional)
+- `CreatedAt` (`string`, optional)
+- `Description` (`string`, optional)
+- `GatewayArn` (`string`, optional)
+- `GatewayIdentifier` (`string`, optional)
+- `RuleId` (`string`, optional)
+- `Status` (`GatewayRule_GatewayRuleStatus`, optional)
+- `System` (`GatewayRule_SystemManagedBlock`, optional)
+- `UpdatedAt` (`string`, optional)
+
+## Attributes
+
+- `CreatedAt`
+- `GatewayArn`
+- `RuleId`
+- `Status`
+- `System`
+- `UpdatedAt`

package/dist/okf/types/GlobalReplicationGroup.md

@@ -11,6 +11,7 @@ resource_type: AWS::ElastiCache::GlobalReplicationGroup
 ## Properties
 
 - `Members` (`GlobalReplicationGroup_GlobalReplicationGroupMember[]`, required): The replication groups that comprise the Global Datastore.
+- `Arn` (`string`, optional): The ARN (Amazon Resource Name) of the Global Datastore.
 - `AutomaticFailoverEnabled` (`boolean`, optional): AutomaticFailoverEnabled
 - `CacheNodeType` (`string`, optional): The cache node type of the Global Datastore
 - `CacheParameterGroupName` (`string`, optional): Cache parameter group name to use for the new engine version. This parameter cannot be modified independently.
@@ -22,8 +23,10 @@ resource_type: AWS::ElastiCache::GlobalReplicationGroup
 - `GlobalReplicationGroupIdSuffix` (`string`, optional): The suffix name of a Global Datastore. Amazon ElastiCache automatically applies a prefix to the Global Datastore ID when it is created. Each AWS Region has its own prefix.
 - `RegionalConfigurations` (`GlobalReplicationGroup_RegionalConfiguration[]`, optional): Describes the replication group IDs, the AWS regions where they are stored and the shard configuration for each that comprise the Global Datastore
 - `Status` (`string`, optional): The status of the Global Datastore
+- `Tags` (`GlobalReplicationGroup_Tag[]`, optional): An array of key-value pairs to apply to this Global Datastore.
 
 ## Attributes
 
+- `Arn`
 - `GlobalReplicationGroupId`
 - `Status`

package/dist/okf/types/GlobalResolver.md

@@ -11,7 +11,7 @@ resource_type: AWS::Route53GlobalResolver::GlobalResolver
 ## Properties
 
 - `Name` (`string`, required)
-- `Regions` (`string[]`, required): A list of regions the Global Resolver will exist in. This list cannot be updated and will stay fixed for the duration of the Global Resolver.
+- `Regions` (`string[]`, required): The list of regions the Global Resolver exists in. Regions can be added or removed on update; the order of this list is not significant.
 - `Arn` (`string`, optional)
 - `ClientToken` (`string`, optional)
 - `CreatedAt` (`string`, optional)

package/dist/okf/types/GlobalTable.md

@@ -28,6 +28,7 @@ resource_type: AWS::DynamoDB::GlobalTable
 - `TableId` (`string`, optional)
 - `TableName` (`string`, optional)
 - `TimeToLiveSpecification` (`GlobalTable_TimeToLiveSpecification`, optional)
+- `VectorIndexes` (`GlobalTable_VectorIndex[]`, optional)
 - `WarmThroughput` (`GlobalTable_WarmThroughput`, optional)
 - `WriteOnDemandThroughputSettings` (`GlobalTable_WriteOnDemandThroughputSettings`, optional)
 - `WriteProvisionedThroughputSettings` (`GlobalTable_WriteProvisionedThroughputSettings`, optional)

package/dist/okf/types/GlueConnection.md

@@ -10,10 +10,11 @@ resource_type: AWS::Glue::Connection
 
 ## Properties
 
-- `CatalogId` (`string`, required)
-- `ConnectionInput` (`GlueConnection_ConnectionInput`, required)
-- `Id` (`string`, optional)
+- `CatalogId` (`string`, required): The ID of the data catalog to create the catalog object in. Currently, this should be the AWS account ID.
+- `ConnectionInput` (`GlueConnection_ConnectionInput`, required): The connection properties used for this connection.
+- `Name` (`string`, optional): The name of the connection.
+- `Tags` (`Record<string, unknown>`, optional): The collection of tags. Each tag element is associated with a given resource.
 
 ## Attributes
 
-- `Id`
+- `Name`

package/dist/okf/types/GlueSecurityConfiguration.md

@@ -11,9 +11,4 @@ resource_type: AWS::Glue::SecurityConfiguration
 ## Properties
 
 - `EncryptionConfiguration` (`GlueSecurityConfiguration_EncryptionConfiguration`, required)
-- `Name` (`string`, required)
-- `Id` (`string`, optional)
-
-## Attributes
-
-- `Id`
+- `Name` (`string`, required): The name for the security configuration.

package/dist/okf/types/GlueSession.md

@@ -0,0 +1,38 @@
+---
+type: resource-type
+title: GlueSession
+description: aws resource type AWS::Glue::Session
+name: GlueSession
+lexicon: aws
+resource_type: AWS::Glue::Session
+---
+`AWS::Glue::Session`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Command` (`GlueSession_SessionCommand`, required)
+- `Id` (`string`, required): The ID of the session.
+- `Role` (`string`, required): The IAM Role ARN.
+- `Arn` (`string`, optional): The Amazon Resource Name (ARN) of the session.
+- `Connections` (`GlueSession_ConnectionsList`, optional)
+- `CreatedOn` (`string`, optional): The time and date when the session was created.
+- `DefaultArguments` (`Record<string, unknown>`, optional): A map array of key-value pairs. Max is 75 pairs.
+- `Description` (`string`, optional): The description of the session.
+- `GlueVersion` (`string`, optional): The Glue version determines the versions of Apache Spark and Python that Glue supports. The GlueVersion must be greater than 2.0.
+- `IdleTimeout` (`number`, optional): The number of minutes when idle before session times out. Default is the value of Timeout.
+- `MaxCapacity` (`number`, optional): The number of Glue data processing units (DPUs) that can be allocated when the job runs.
+- `NumberOfWorkers` (`number`, optional): The number of workers of a defined WorkerType to use for the session.
+- `Progress` (`number`, optional): The code execution progress of the session.
+- `RequestOrigin` (`string`, optional): The origin of the request.
+- `SecurityConfiguration` (`string`, optional): The name of the SecurityConfiguration structure to be used with the session.
+- `Status` (`"FAILED" | "PROVISIONING" | "READY" | "STOPPED" | "STOPPING" | "TIMEOUT"`, optional): The session status.
+- `Tags` (`GlueSession_Tag[]`, optional): The tags belonging to the session.
+- `Timeout` (`number`, optional): The number of minutes before session times out.
+- `WorkerType` (`"G.025X" | "G.1X" | "G.2X" | "G.4X" | "G.8X" | "Standard" | "Z.2X"`, optional): The type of predefined worker that is allocated when a session runs.
+
+## Attributes
+
+- `Arn`
+- `CreatedOn`
+- `Progress`
+- `Status`

package/dist/okf/types/GlueTable.md

@@ -10,13 +10,8 @@ resource_type: AWS::Glue::Table
 
 ## Properties
 
-- `CatalogId` (`string`, required)
-- `DatabaseName` (`string`, required)
-- `Id` (`string`, optional)
-- `Name` (`string`, optional)
-- `OpenTableFormatInput` (`GlueTable_OpenTableFormatInput`, optional)
-- `TableInput` (`GlueTable_TableInput`, optional)
-
-## Attributes
-
-- `Id`
+- `CatalogId` (`string`, required): The ID of the Data Catalog in which to create the Table.
+- `DatabaseName` (`string`, required): The name of the database where the table metadata resides. For Hive compatibility, this must be all lowercase.
+- `Name` (`string`, optional): The table name. For Hive compatibility, this is folded to lowercase when it is stored.
+- `OpenTableFormatInput` (`GlueTable_OpenTableFormatInput`, optional): Specifies an OpenTableFormatInput structure when creating an open format table.
+- `TableInput` (`GlueTable_TableInput`, optional): A structure used to define a table.

package/dist/okf/types/GlueWorkflow.md

@@ -10,13 +10,8 @@ resource_type: AWS::Glue::Workflow
 
 ## Properties
 
-- `DefaultRunProperties` (`Record<string, unknown>`, optional)
-- `Description` (`string`, optional)
-- `Id` (`string`, optional)
-- `MaxConcurrentRuns` (`number`, optional)
-- `Name` (`string`, optional)
-- `Tags` (`Record<string, unknown>`, optional)
-
-## Attributes
-
-- `Id`
+- `DefaultRunProperties` (`Record<string, unknown>`, optional): A collection of properties to be used as part of each execution of the workflow
+- `Description` (`string`, optional): A description of the workflow
+- `MaxConcurrentRuns` (`number`, optional): You can use this parameter to prevent unwanted multiple updates to data, to control costs, or in some cases, to prevent exceeding the maximum number of concurrent runs of any of the component jobs. If you leave this parameter blank, there is no limit to the number of concurrent workflow runs.
+- `Name` (`string`, optional): The name of the workflow representing the flow
+- `Tags` (`Record<string, unknown>`, optional): The tags to use with this workflow.

package/dist/okf/types/Group.md

@@ -0,0 +1,27 @@
+---
+type: resource-type
+title: Group
+description: aws resource type AWS::QuickSight::Group
+name: Group
+lexicon: aws
+resource_type: AWS::QuickSight::Group
+---
+`AWS::QuickSight::Group`, a resource type of the aws lexicon.
+
+## Properties
+
+- `GroupName` (`string`, required): A name for the group.
+- `Namespace` (`string`, required): The namespace that you want the group to be a part of.
+- `Arn` (`string`, optional): The Amazon Resource Name (ARN) for the group.
+- `Description` (`string`, optional): A description for the group.
+- `PrincipalId` (`string`, optional): The principal ID of the group.
+
+## Attributes
+
+- `Arn`
+- `PrincipalId`
+
+## Governed by
+
+- [WAW019](/rules/WAW019.md): Security group allows unrestricted ingress on sensitive ports (SSH, RDP, database)
+- [WAW049](/rules/WAW049.md): Security group allows unrestricted ingress on a port other than ALB:80/443

package/dist/okf/types/Harness.md

@@ -21,6 +21,7 @@ resource_type: AWS::BedrockAgentCore::Harness
 - `EnvironmentArtifact` (`Harness_HarnessEnvironmentArtifact`, optional): The environment artifact for the harness, such as a custom container image.
 - `EnvironmentVariables` (`Record<string, unknown>`, optional): Environment variables to set in the harness runtime environment.
 - `HarnessId` (`string`, optional): The unique identifier of the harness.
+- `Hooks` (`Harness_HarnessHook[]`, optional): Lifecycle hooks that fire at well-defined points in the agent loop for policy enforcement, audit, and governance.
 - `MaxIterations` (`number`, optional): The maximum number of iterations the agent loop can execute per invocation.
 - `MaxTokens` (`number`, optional): The maximum number of tokens the agent can generate per iteration.
 - `Memory` (`Harness_HarnessMemoryConfiguration`, optional): The AgentCore Memory configuration for persisting conversation context.

package/dist/okf/types/HostKey.md

@@ -0,0 +1,33 @@
+---
+type: resource-type
+title: HostKey
+description: aws resource type AWS::Transfer::HostKey
+name: HostKey
+lexicon: aws
+resource_type: AWS::Transfer::HostKey
+---
+`AWS::Transfer::HostKey`, a resource type of the aws lexicon.
+
+## Properties
+
+- `ServerId` (`string`, required): The identifier of the server that contains the host key.
+- `Arn` (`string`, optional): The unique Amazon Resource Name (ARN) for the host key.
+- `DateImported` (`string`, optional): The date on which the host key was added to the server.
+- `Description` (`string`, optional): The text description for this host key.
+- `HostKeyBody` (`string`, optional): The private key portion of an SSH key pair. Transfer Family accepts RSA, ECDSA, and ED25519 keys.
+- `HostKeyFingerprint` (`string`, optional): The public key fingerprint, which is a short sequence of bytes used to identify the longer public key.
+- `HostKeyId` (`string`, optional): A unique identifier for the host key.
+- `KmsKey` (`string`, optional): The Amazon Resource Name (ARN) of a customer managed key used to encrypt the Secrets Manager secret that holds the host key. Applies only when StorageType is SECRETS_MANAGER. If omitted, the AWS managed key is used.
+- `SecretId` (`string`, optional): The Amazon Resource Name (ARN) of the Secrets Manager secret that holds the host key. Returned only when StorageType is SECRETS_MANAGER.
+- `StorageType` (`"SECRETS_MANAGER" | "SERVICE_MANAGED"`, optional): The type of storage used for the host key. SERVICE_MANAGED keys are stored within the Transfer Family service. SECRETS_MANAGER keys are stored in an AWS Secrets Manager secret in your account.
+- `Tags` (`HostKey_Tag[]`, optional): Key-value pairs that can be used to group and search for host keys.
+- `Type` (`string`, optional): The encryption algorithm that is used for the host key.
+
+## Attributes
+
+- `Arn`
+- `DateImported`
+- `HostKeyFingerprint`
+- `HostKeyId`
+- `SecretId`
+- `Type`

package/dist/okf/types/HostedZone.md

@@ -10,6 +10,7 @@ resource_type: AWS::Route53::HostedZone
 
 ## Properties
 
+- `DelegationSetId` (`string`, optional)
 - `HostedZoneConfig` (`HostedZone_HostedZoneConfig`, optional): A complex type that contains an optional comment. If you don't want to specify a comment, omit the ``HostedZoneConfig`` and ``Comment`` elements.
 - `HostedZoneFeatures` (`HostedZone_HostedZoneFeatures`, optional): The features configuration for the hosted zone, including accelerated recovery settings and status information.
 - `HostedZoneTags` (`HostedZone_HostedZoneTag[]`, optional): Adds, edits, or deletes tags for a health check or a hosted zone. For information about using tags for cost allocation, see [Using Cost Allocation Tags](https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html) in the *User Guide*.

package/dist/okf/types/HttpApi.md

@@ -21,6 +21,7 @@ resource_type: AWS::ApiGatewayV2::Api
 - `Description` (`string`, optional): The description of the API.
 - `DisableExecuteApiEndpoint` (`boolean`, optional): Specifies whether clients can invoke your API by using the default ``execute-api`` endpoint. By default, clients can invoke your API with the default https://{api_id}.execute-api.{region}.amazonaws.com endpoint. To require that clients use a custom domain name to invoke your API, disable the default endpoint.
 - `DisableSchemaValidation` (`boolean`, optional): Avoid validating models when creating a deployment. Supported only for WebSocket APIs.
+- `ExecuteApiArn` (`string`, optional)
 - `FailOnWarnings` (`boolean`, optional): Specifies whether to rollback the API creation when a warning is encountered. By default, API creation continues if a warning is encountered.
 - `IpAddressType` (`string`, optional): The IP address types that can invoke the API. Use ``ipv4`` to allow only IPv4 addresses to invoke your API, or use ``dualstack`` to allow both IPv4 and IPv6 addresses to invoke your API. Don’t use IP address type for an HTTP API based on an OpenAPI specification. Instead, specify the IP address type in the OpenAPI specification.
 - `Name` (`string`, optional): The name of the API. Required unless you specify an OpenAPI definition for ``Body`` or ``S3BodyLocation``.
@@ -35,3 +36,4 @@ resource_type: AWS::ApiGatewayV2::Api
 
 - `ApiEndpoint`
 - `ApiId`
+- `ExecuteApiArn`

package/dist/okf/types/HttpNamespace.md

@@ -10,11 +10,11 @@ resource_type: AWS::ServiceDiscovery::HttpNamespace
 
 ## Properties
 
-- `Name` (`string`, required)
-- `Arn` (`string`, optional)
-- `Description` (`string`, optional)
-- `Id` (`string`, optional)
-- `Tags` (`HttpNamespace_Tag[]`, optional)
+- `Name` (`string`, required): The name that you want to assign to this namespace.
+- `Arn` (`string`, optional): The Amazon Resource Name (ARN) of the namespace.
+- `Description` (`string`, optional): A description for the namespace.
+- `Id` (`string`, optional): The ID of the namespace.
+- `Tags` (`HttpNamespace_Tag[]`, optional): The tags for the namespace. Each tag consists of a key and an optional value, both of which you define. Tag keys can have a maximum character length of 128 characters, and tag values can have a maximum length of 256 characters.
 
 ## Attributes
 

package/dist/okf/types/HubV2.md

@@ -11,6 +11,7 @@ resource_type: AWS::SecurityHub::HubV2
 ## Properties
 
 - `HubV2Arn` (`string`, optional): The Amazon Resource Name of the Security Hub V2 resource.
+- `NetworkScanning` (`HubV2_NetworkScanning`, optional)
 - `SubscribedAt` (`string`, optional)
 - `Tags` (`Record<string, unknown>`, optional)
 

package/dist/okf/types/HumanTaskUi.md

@@ -0,0 +1,22 @@
+---
+type: resource-type
+title: HumanTaskUi
+description: aws resource type AWS::SageMaker::HumanTaskUi
+name: HumanTaskUi
+lexicon: aws
+resource_type: AWS::SageMaker::HumanTaskUi
+---
+`AWS::SageMaker::HumanTaskUi`, a resource type of the aws lexicon.
+
+## Properties
+
+- `HumanTaskUiName` (`string`, required): The name of the human task user interface.
+- `CreationTime` (`string`, optional): The timestamp when the human task user interface was created.
+- `HumanTaskUiArn` (`string`, optional): The Amazon Resource Name (ARN) of the human task user interface.
+- `Tags` (`HumanTaskUi_Tag[]`, optional): An array of key-value pairs that contain metadata to help you categorize and organize a human review workflow user interface.
+- `UiTemplate` (`HumanTaskUi_UiTemplate`, optional): The Liquid template for the worker user interface.
+
+## Attributes
+
+- `CreationTime`
+- `HumanTaskUiArn`

package/dist/okf/types/IPv4Pool.md

@@ -0,0 +1,28 @@
+---
+type: resource-type
+title: IPv4Pool
+description: aws resource type AWS::EC2::IPv4Pool
+name: IPv4Pool
+lexicon: aws
+resource_type: AWS::EC2::IPv4Pool
+---
+`AWS::EC2::IPv4Pool`, a resource type of the aws lexicon.
+
+## Properties
+
+- `Arn` (`string`, optional): The Amazon Resource Name (ARN) of the public IPv4 pool.
+- `Description` (`string`, optional): A description of the public IPv4 pool.
+- `NetworkBorderGroup` (`string`, optional): The name of the location from which the address pool is advertised.
+- `PoolId` (`string`, optional): The ID of the public IPv4 pool.
+- `Tags` (`IPv4Pool_Tag[]`, optional): Any tags assigned to the public IPv4 pool.
+- `TotalAddressCount` (`number`, optional): The total number of addresses in the pool.
+- `TotalAvailableAddressCount` (`number`, optional): The total number of available addresses in the pool.
+
+## Attributes
+
+- `Arn`
+- `Description`
+- `NetworkBorderGroup`
+- `PoolId`
+- `TotalAddressCount`
+- `TotalAvailableAddressCount`

package/dist/okf/types/ImageBuilder.md

@@ -15,6 +15,7 @@ resource_type: AWS::AppStream::ImageBuilder
 - `AccessEndpoints` (`ImageBuilder_AccessEndpoint[]`, optional)
 - `AppstreamAgentVersion` (`string`, optional)
 - `Description` (`string`, optional)
+- `DisableIMDSV1` (`boolean`, optional)
 - `DisplayName` (`string`, optional)
 - `DomainJoinInfo` (`ImageBuilder_DomainJoinInfo`, optional)
 - `EnableDefaultInternetAccess` (`boolean`, optional)

package/dist/okf/types/ImageBuilderImage.md

@@ -19,7 +19,7 @@ resource_type: AWS::ImageBuilder::Image
 - `ImageId` (`string`, optional): The AMI ID of the EC2 AMI in current region.
 - `ImagePipelineExecutionSettings` (`ImageBuilderImage_ImagePipelineExecutionSettings`, optional): The image pipeline execution settings of the image.
 - `ImageRecipeArn` (`string`, optional): The Amazon Resource Name (ARN) of the image recipe that defines how images are configured, tested, and assessed.
-- `ImageScanningConfiguration` (`ImageBuilderImage_ImageScanningConfiguration`, optional): Contains settings for vulnerability scans.
+- `ImageScanningConfiguration` (`ImageBuilderImage_ImageScanningConfiguration`, optional): Contains settings for vulnerability scans that Amazon Inspector runs against the test instance during image creation.
 - `ImageTestsConfiguration` (`ImageBuilderImage_ImageTestsConfiguration`, optional): The image tests configuration used when creating this image.
 - `ImageUri` (`string`, optional): URI for containers created in current Region with default ECR image tag
 - `InfrastructureConfigurationArn` (`string`, optional): The Amazon Resource Name (ARN) of the infrastructure configuration.

package/dist/okf/types/ImagePipeline.md

@@ -18,7 +18,7 @@ resource_type: AWS::ImageBuilder::ImagePipeline
 - `EnhancedImageMetadataEnabled` (`boolean`, optional): Collects additional information about the image being created, including the operating system (OS) version and package list.
 - `ExecutionRole` (`string`, optional): The execution role name/ARN for the image build, if provided
 - `ImageRecipeArn` (`string`, optional): The Amazon Resource Name (ARN) of the image recipe that defines how images are configured, tested, and assessed.
-- `ImageScanningConfiguration` (`ImagePipeline_ImageScanningConfiguration`, optional): Contains settings for vulnerability scans.
+- `ImageScanningConfiguration` (`ImagePipeline_ImageScanningConfiguration`, optional): Contains settings for vulnerability scans that Amazon Inspector runs against the test instance during image creation.
 - `ImageTags` (`Record<string, unknown>`, optional): The tags to be applied to images created by this pipeline.
 - `ImageTestsConfiguration` (`ImagePipeline_ImageTestsConfiguration`, optional): The image tests configuration of the image pipeline.
 - `InfrastructureConfigurationArn` (`string`, optional): The Amazon Resource Name (ARN) of the infrastructure configuration associated with this image pipeline.

package/dist/okf/types/InferenceComponent.md

@@ -11,7 +11,6 @@ resource_type: AWS::SageMaker::InferenceComponent
 ## Properties
 
 - `EndpointName` (`string`, required)
-- `Specification` (`InferenceComponent_InferenceComponentSpecification`, required)
 - `CreationTime` (`string`, optional)
 - `DeploymentConfig` (`InferenceComponent_InferenceComponentDeploymentConfig`, optional)
 - `EndpointArn` (`string`, optional)
@@ -21,6 +20,8 @@ resource_type: AWS::SageMaker::InferenceComponent
 - `InferenceComponentStatus` (`InferenceComponent_InferenceComponentStatus`, optional)
 - `LastModifiedTime` (`string`, optional)
 - `RuntimeConfig` (`InferenceComponent_InferenceComponentRuntimeConfig`, optional)
+- `Specification` (`InferenceComponent_InferenceComponentSpecification`, optional)
+- `Specifications` (`InferenceComponent_InferenceComponentSpecificationForInstanceType[]`, optional)
 - `Tags` (`InferenceComponent_Tag[]`, optional)
 - `VariantName` (`string`, optional)
 
@@ -33,4 +34,7 @@ resource_type: AWS::SageMaker::InferenceComponent
 - `LastModifiedTime`
 - `RuntimeConfig.CurrentCopyCount`
 - `RuntimeConfig.DesiredCopyCount`
+- `RuntimeConfig.PlacementStatus`
 - `Specification.Container.DeployedImage`
+- `Specification.CurrentDataCacheConfig`
+- `Specifications.*.CurrentDataCacheConfig`

package/dist/okf/types/InfluxDBBackup.md

@@ -0,0 +1,65 @@
+---
+type: resource-type
+title: InfluxDBBackup
+description: aws resource type AWS::Timestream::InfluxDBBackup
+name: InfluxDBBackup
+lexicon: aws
+resource_type: AWS::Timestream::InfluxDBBackup
+---
+`AWS::Timestream::InfluxDBBackup`, a resource type of the aws lexicon.
+
+## Properties
+
+- `DbResourceId` (`string`, required): The id of the DB instance or DB cluster to back up.
+- `Name` (`string`, required): The name of the backup. Must be unique within the account and region.
+- `AllocatedStorage` (`number`, optional): The allocated storage of the resource at the time of backup, in GiB.
+- `Arn` (`string`, optional): The Amazon Resource Name (ARN) of the backup.
+- `ClusterConfiguration` (`InfluxDBBackup_ClusterConfiguration`, optional)
+- `CreatedAt` (`string`, optional): The time when the backup was created.
+- `DbInstanceType` (`"db.influx.12xlarge" | "db.influx.16xlarge" | "db.influx.24xlarge" | "db.influx.2xlarge" | "db.influx.4xlarge" | "db.influx.8xlarge" | "db.influx.large" | "db.influx.medium" | "db.influx.xlarge"`, optional): The DB instance type of the resource at the time of backup.
+- `DbParameterGroupId` (`string`, optional): The identifier of the DB parameter group associated with the backup.
+- `DbStorageType` (`"InfluxIOIncludedT1" | "InfluxIOIncludedT2" | "InfluxIOIncludedT3"`, optional): The storage type of the resource at the time of backup.
+- `DeploymentType` (`"MULTI_NODE_READ_REPLICAS" | "SINGLE_AZ" | "WITH_MULTIAZ_STANDBY"`, optional): The deployment type of the resource that the backup was created from.
+- `EngineType` (`"INFLUXDB_V2" | "INFLUXDB_V3_CORE" | "INFLUXDB_V3_ENTERPRISE"`, optional): The engine type of the resource that the backup was created from.
+- `ExpiresAfter` (`string`, optional): The date after which the backup will be automatically deleted, as a calendar date in YYYY-MM-DD format.
+- `FailoverMode` (`"AUTOMATIC" | "NO_FAILOVER"`, optional): The failover mode of the resource at the time of backup.
+- `Id` (`string`, optional): Service-generated unique identifier of the backup.
+- `InfluxAuthParametersSecretArn` (`string`, optional): The ARN of the Secrets Manager secret containing the InfluxDB auth parameters.
+- `KmsKeyId` (`string`, optional): The Amazon Web Services KMS key ARN used for encryption of the resource at the time of backup.
+- `LogDeliveryConfiguration` (`InfluxDBBackup_LogDeliveryConfiguration`, optional)
+- `MaintenanceSchedule` (`InfluxDBBackup_MaintenanceSchedule`, optional)
+- `NetworkType` (`"DUAL" | "IPV4"`, optional): The network type of the resource at the time of backup.
+- `Port` (`number`, optional): The port number of the resource at the time of backup.
+- `PubliclyAccessible` (`boolean`, optional): Indicates whether the resource was publicly accessible at the time of backup.
+- `RetentionDays` (`number`, optional): The number of days to retain the backup. Valid values are 1 to 3650.
+- `Status` (`"COMPLETED" | "DELETED" | "DELETING" | "FAILED" | "IN_PROGRESS"`, optional): The current status of the backup.
+- `Tags` (`InfluxDBBackup_Tag[]`, optional): A list of key-value pairs to associate with the backup.
+- `Type` (`"CONTINUOUS" | "CUSTOM_SCHEDULE" | "DAILY" | "HOURLY" | "MONTHLY" | "ON_DEMAND" | "WEEKLY"`, optional): The type of backup. Backups created through this resource type are always ON_DEMAND.
+- `VpcSecurityGroupIds` (`string[]`, optional): The VPC security group IDs associated with the resource at the time of backup.
+- `VpcSubnetIds` (`string[]`, optional): The VPC subnet IDs associated with the resource at the time of backup.
+
+## Attributes
+
+- `AllocatedStorage`
+- `Arn`
+- `ClusterConfiguration`
+- `CreatedAt`
+- `DbInstanceType`
+- `DbParameterGroupId`
+- `DbStorageType`
+- `DeploymentType`
+- `EngineType`
+- `ExpiresAfter`
+- `FailoverMode`
+- `Id`
+- `InfluxAuthParametersSecretArn`
+- `KmsKeyId`
+- `LogDeliveryConfiguration`
+- `MaintenanceSchedule`
+- `NetworkType`
+- `Port`
+- `PubliclyAccessible`
+- `Status`
+- `Type`
+- `VpcSecurityGroupIds`
+- `VpcSubnetIds`

package/dist/okf/types/InfluxDBCluster.md

@@ -23,8 +23,10 @@ resource_type: AWS::Timestream::InfluxDBCluster
 - `Id` (`string`, optional): The service generated unique identifier for InfluxDB cluster.
 - `InfluxAuthParametersSecretArn` (`string`, optional): The Auth parameters secret Amazon Resource name (ARN) that is associated with the InfluxDB cluster.
 - `LogDeliveryConfiguration` (`Record<string, unknown>`, optional): Configuration for sending logs to customer account from the InfluxDB cluster.
+- `MaintenanceSchedule` (`InfluxDBCluster_MaintenanceSchedule`, optional): The maintenance schedule for the InfluxDB cluster.
 - `Name` (`string`, optional): The unique name that is associated with the InfluxDB cluster.
 - `NetworkType` (`"DUAL" | "IPV4"`, optional): Network type of the InfluxDB cluster.
+- `NextMaintenanceTime` (`string`, optional): The timestamp of the next scheduled maintenance event.
 - `Organization` (`string`, optional): The organization for the InfluxDB cluster.
 - `Password` (`string`, optional): The password for the InfluxDB cluster.
 - `Port` (`number`, optional): The port number on which InfluxDB accepts connections.
@@ -43,5 +45,6 @@ resource_type: AWS::Timestream::InfluxDBCluster
 - `EngineType`
 - `Id`
 - `InfluxAuthParametersSecretArn`
+- `NextMaintenanceTime`
 - `ReaderEndpoint`
 - `Status`

package/dist/okf/types/InfrastructureConfiguration.md

@@ -18,12 +18,14 @@ resource_type: AWS::ImageBuilder::InfrastructureConfiguration
 - `InstanceTypes` (`string[]`, optional): The instance types of the infrastructure configuration.
 - `KeyPair` (`string`, optional): The EC2 key pair of the infrastructure configuration..
 - `Logging` (`InfrastructureConfiguration_Logging`, optional): The logging configuration of the infrastructure configuration.
+- `ParentInstance` (`InfrastructureConfiguration_ParentInstance`, optional): The Amazon EC2 Auto Scaling group that Image Builder takes the build instance from, instead of launching a new instance. This applies only to the build phase.
 - `Placement` (`InfrastructureConfiguration_Placement`, optional): The placement option settings for the infrastructure configuration.
 - `ResourceTags` (`Record<string, unknown>`, optional): The tags attached to the resource created by Image Builder.
 - `SecurityGroupIds` (`string[]`, optional): The security group IDs of the infrastructure configuration.
 - `SnsTopicArn` (`string`, optional): The SNS Topic Amazon Resource Name (ARN) of the infrastructure configuration.
 - `SubnetId` (`string`, optional): The subnet ID of the infrastructure configuration.
 - `Tags` (`Record<string, unknown>`, optional): The tags associated with the component.
+- `TerminateInstanceOnCompletion` (`boolean`, optional): Specifies whether Image Builder terminates build and test instances that are still running when image creation ends without a failure. A TerminateInstance step in a workflow runs even when this is false.
 - `TerminateInstanceOnFailure` (`boolean`, optional): The terminate instance on failure configuration of the infrastructure configuration.
 
 ## Attributes