feat: update L1 CloudFormation resource definitions (#31752)

Updates the L1 CloudFormation resource definitions with the latest changes from `@aws-cdk/aws-service-spec`

**L1 CloudFormation resource definition changes:**
```
├[~] service aws-b2bi
│ └ resources
│    ├[~] resource AWS::B2BI::Capability
│    │ └ types
│    │    └[~] type EdiConfiguration
│    │      └ properties
│    │         └ CapabilityDirection: (documentation changed)
│    ├[~] resource AWS::B2BI::Partnership
│    │ ├ properties
│    │ │  └ CapabilityOptions: (documentation changed)
│    │ └ types
│    │    ├[~] type CapabilityOptions
│    │    │ ├  - documentation: undefined
│    │    │ │  + documentation: Contains the details for an Outbound EDI capability.
│    │    │ └ properties
│    │    │    └ OutboundEdi: (documentation changed)
│    │    ├[~] type OutboundEdiOptions
│    │    │ ├  - documentation: undefined
│    │    │ │  + documentation: A container for outbound EDI options.
│    │    │ └ properties
│    │    │    └ X12: (documentation changed)
│    │    ├[~] type X12Envelope
│    │    │ ├  - documentation: undefined
│    │    │ │  + documentation: A wrapper structure for an X12 definition object.
│    │    │ │  the X12 envelope ensures the integrity of the data and the efficiency of the information exchange. The X12 message structure has hierarchical levels. From highest to the lowest, they are:
│    │    │ │  - Interchange Envelope
│    │    │ │  - Functional Group
│    │    │ │  - Transaction Set
│    │    │ └ properties
│    │    │    └ Common: (documentation changed)
│    │    └[~] type X12OutboundEdiHeaders
│    │      ├  - documentation: undefined
│    │      │  + documentation: A structure containing the details for an outbound EDI object.
│    │      └ properties
│    │         ├ Delimiters: (documentation changed)
│    │         ├ FunctionalGroupHeaders: (documentation changed)
│    │         ├ InterchangeControlHeaders: (documentation changed)
│    │         └ ValidateEdi: (documentation changed)
│    └[~] resource AWS::B2BI::Transformer
│      └ properties
│         ├ EdiType: (documentation changed)
│         ├ FileFormat: (documentation changed)
│         ├ InputConversion: (documentation changed)
│         ├ Mapping: (documentation changed)
│         ├ MappingTemplate: (documentation changed)
│         ├ OutputConversion: (documentation changed)
│         ├ SampleDocument: (documentation changed)
│         └ SampleDocuments: (documentation changed)
├[~] service aws-cloudformation
│ └ resources
│    ├[~] resource AWS::CloudFormation::ModuleVersion
│    │ └ attributes
│    │    └ Schema: (documentation changed)
│    ├[~] resource AWS::CloudFormation::Publisher
│    │ └ properties
│    │    └ ConnectionArn: (documentation changed)
│    └[~] resource AWS::CloudFormation::TypeActivation
│      └  - documentation: Activates a public third-party extension, making it available for use in stack templates. For more information, see [Using public extensions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry-public.html) in the *AWS CloudFormation User Guide* .
│         Once you have activated a public third-party extension in your account and Region, use [SetTypeConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_SetTypeConfiguration.html) to specify configuration properties for the extension. For more information, see [Configuring extensions at the account level](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry-private.html#registry-set-configuration) in the *AWS CloudFormation User Guide* .
│         + documentation: Activates a public third-party extension, making it available for use in stack templates. Once you have activated a public third-party extension in your account and Region, use [SetTypeConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_SetTypeConfiguration.html) to specify configuration properties for the extension. For more information, see [Using public extensions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry-public.html) in the *AWS CloudFormation User Guide* .
├[~] service aws-docdb
│ └ resources
│    ├[~] resource AWS::DocDB::DBCluster
│    │ └ properties
│    │    ├ CopyTagsToSnapshot: (documentation changed)
│    │    ├ EngineVersion: (documentation changed)
│    │    └ StorageEncrypted: (documentation changed)
│    └[~] resource AWS::DocDB::DBInstance
│      └ properties
│         └ CACertificateIdentifier: (documentation changed)
├[~] service aws-ecs
│ └ resources
│    └[~] resource AWS::ECS::TaskSet
│      ├ properties
│      │  └[+] CapacityProviderStrategy: Array<CapacityProviderStrategyItem> (immutable)
│      └ types
│         └[+] type CapacityProviderStrategyItem
│           ├  name: CapacityProviderStrategyItem
│           └ properties
│              ├CapacityProvider: string
│              ├Base: integer
│              └Weight: integer
├[~] service aws-elasticache
│ └ resources
│    ├[~] resource AWS::ElastiCache::CacheCluster
│    │ ├ properties
│    │ │  ├ AutoMinorVersionUpgrade: (documentation changed)
│    │ │  ├ CacheNodeType: (documentation changed)
│    │ │  ├ EngineVersion: (documentation changed)
│    │ │  ├ IpDiscovery: (documentation changed)
│    │ │  ├ NetworkType: (documentation changed)
│    │ │  ├ SnapshotArns: (documentation changed)
│    │ │  └ SnapshotName: (documentation changed)
│    │ └ attributes
│    │    ├ ConfigurationEndpoint.Address: (documentation changed)
│    │    ├ ConfigurationEndpoint.Port: (documentation changed)
│    │    ├ RedisEndpoint.Address: (documentation changed)
│    │    └ RedisEndpoint.Port: (documentation changed)
│    ├[~] resource AWS::ElastiCache::GlobalReplicationGroup
│    │ ├ properties
│    │ │  ├ AutomaticFailoverEnabled: (documentation changed)
│    │ │  └ EngineVersion: (documentation changed)
│    │ └ types
│    │    └[~] type ReshardingConfiguration
│    │      └ properties
│    │         └ NodeGroupId: (documentation changed)
│    ├[~] resource AWS::ElastiCache::ReplicationGroup
│    │ ├  - documentation: The `AWS::ElastiCache::ReplicationGroup` resource creates an Amazon ElastiCache (Redis OSS) replication group. A Redis OSS (cluster mode disabled) replication group is a collection of cache clusters, where one of the clusters is a primary read-write cluster and the others are read-only replicas.
│    │ │  A Redis OSS (cluster mode enabled) cluster is comprised of from 1 to 90 shards (API/CLI: node groups). Each shard has a primary node and up to 5 read-only replica nodes. The configuration can range from 90 shards and 0 replicas to 15 shards and 5 replicas, which is the maximum number or replicas allowed.
│    │ │  The node or shard limit can be increased to a maximum of 500 per cluster if the Redis OSS engine version is 5.0.6 or higher. For example, you can choose to configure a 500 node cluster that ranges between 83 shards (one primary and 5 replicas per shard) and 500 shards (single primary and no replicas). Make sure there are enough available IP addresses to accommodate the increase. Common pitfalls include the subnets in the subnet group have too small a CIDR range or the subnets are shared and heavily used by other clusters. For more information, see [Creating a Subnet Group](https://docs.aws.amazon.com/AmazonElastiCache/latest/red-ug/SubnetGroups.Creating.html) . For versions below 5.0.6, the limit is 250 per cluster.
│    │ │  To request a limit increase, see [Amazon Service Limits](https://docs.aws.amazon.com/general/latest/gr/aws_service_limits.html) and choose the limit type *Nodes per cluster per instance type* .
│    │ │  + documentation: The `AWS::ElastiCache::ReplicationGroup` resource creates an Amazon ElastiCache (Valkey or Redis OSS) replication group. A Valkey or Redis OSS (cluster mode disabled) replication group is a collection of cache clusters, where one of the clusters is a primary read-write cluster and the others are read-only replicas.
│    │ │  A Valkey or Redis OSS (cluster mode enabled) cluster is comprised of from 1 to 90 shards (API/CLI: node groups). Each shard has a primary node and up to 5 read-only replica nodes. The configuration can range from 90 shards and 0 replicas to 15 shards and 5 replicas, which is the maximum number or replicas allowed.
│    │ │  The node or shard limit can be increased to a maximum of 500 per cluster if the engine version is Valkey 7.2 or higher, or Redis OSS 5.0.6 or higher. For example, you can choose to configure a 500 node cluster that ranges between 83 shards (one primary and 5 replicas per shard) and 500 shards (single primary and no replicas). Make sure there are enough available IP addresses to accommodate the increase. Common pitfalls include the subnets in the subnet group have too small a CIDR range or the subnets are shared and heavily used by other clusters. For more information, see [Creating a Subnet Group](https://docs.aws.amazon.com/AmazonElastiCache/latest/dg/SubnetGroups.Creating.html) . For versions below 5.0.6, the limit is 250 per cluster.
│    │ │  To request a limit increase, see [Amazon Service Limits](https://docs.aws.amazon.com/general/latest/gr/aws_service_limits.html) and choose the limit type *Nodes per cluster per instance type* .
│    │ ├ properties
│    │ │  ├ AuthToken: (documentation changed)
│    │ │  ├ AutomaticFailoverEnabled: (documentation changed)
│    │ │  ├ AutoMinorVersionUpgrade: (documentation changed)
│    │ │  ├ CacheNodeType: (documentation changed)
│    │ │  ├ CacheParameterGroupName: (documentation changed)
│    │ │  ├ ClusterMode: (documentation changed)
│    │ │  ├ DataTieringEnabled: (documentation changed)
│    │ │  ├ EngineVersion: (documentation changed)
│    │ │  ├ IpDiscovery: (documentation changed)
│    │ │  ├ MultiAZEnabled: (documentation changed)
│    │ │  ├ NetworkType: (documentation changed)
│    │ │  ├ NodeGroupConfiguration: (documentation changed)
│    │ │  ├ NumNodeGroups: (documentation changed)
│    │ │  ├ SnapshotArns: (documentation changed)
│    │ │  ├ SnapshottingClusterId: (documentation changed)
│    │ │  └ TransitEncryptionMode: (documentation changed)
│    │ ├ attributes
│    │ │  └ ConfigurationEndPoint.Address: (documentation changed)
│    │ └ types
│    │    └[~] type NodeGroupConfiguration
│    │      ├  - documentation: `NodeGroupConfiguration` is a property of the `AWS::ElastiCache::ReplicationGroup` resource that configures an Amazon ElastiCache (ElastiCache) Redis OSS cluster node group.
│    │      │  + documentation: `NodeGroupConfiguration` is a property of the `AWS::ElastiCache::ReplicationGroup` resource that configures an Amazon ElastiCache (ElastiCache) Valkey or Redis OSS cluster node group.
│    │      └ properties
│    │         └ NodeGroupId: (documentation changed)
│    ├[~] resource AWS::ElastiCache::SecurityGroup
│    │ └  - documentation: The `AWS::ElastiCache::SecurityGroup` resource creates a cache security group. For more information about cache security groups, go to [CacheSecurityGroups](https://docs.aws.amazon.com/AmazonElastiCache/latest/mem-ug/VPCs.html) in the *Amazon ElastiCache User Guide* or go to [CreateCacheSecurityGroup](https://docs.aws.amazon.com/AmazonElastiCache/latest/APIReference/API_CreateCacheSecurityGroup.html) in the *Amazon ElastiCache API Reference Guide* .
│    │    For more information, see [CreateCacheSubnetGroup](https://docs.aws.amazon.com/AmazonElastiCache/latest/APIReference/API_CreateCacheSubnetGroup.html) .
│    │    + documentation: The `AWS::ElastiCache::SecurityGroup` resource creates a cache security group. For more information about cache security groups, go to [CacheSecurityGroups](https://docs.aws.amazon.com/AmazonElastiCache/latest/dg/VPCs.html) in the *Amazon ElastiCache User Guide* or go to [CreateCacheSecurityGroup](https://docs.aws.amazon.com/AmazonElastiCache/latest/APIReference/API_CreateCacheSecurityGroup.html) in the *Amazon ElastiCache API Reference Guide* .
│    │    For more information, see [CreateCacheSubnetGroup](https://docs.aws.amazon.com/AmazonElastiCache/latest/APIReference/API_CreateCacheSubnetGroup.html) .
│    ├[~] resource AWS::ElastiCache::ServerlessCache
│    │ └ properties
│    │    ├ DailySnapshotTime: (documentation changed)
│    │    ├ SnapshotRetentionLimit: (documentation changed)
│    │    └ UserGroupId: (documentation changed)
│    ├[~] resource AWS::ElastiCache::User
│    │ └  - documentation: For Redis OSS engine version 6.0 onwards: Creates a Redis OSS user. For more information, see [Using Role Based Access Control (RBAC)](https://docs.aws.amazon.com/AmazonElastiCache/latest/red-ug/Clusters.RBAC.html) .
│    │    + documentation: For Valkey 7.2 and onwards, or Redis OSS engine version 6.0 and onwards: Creates user. For more information, see [Using Role Based Access Control (RBAC)](https://docs.aws.amazon.com/AmazonElastiCache/latest/dg/Clusters.RBAC.html) .
│    └[~] resource AWS::ElastiCache::UserGroup
│      ├  - documentation: For Redis OSS engine version 6.0 onwards: Creates a Redis user group. For more information, see [Using Role Based Access Control (RBAC)](https://docs.aws.amazon.com/AmazonElastiCache/latest/red-ug/Clusters.RBAC.html)
│      │  + documentation: For Valkey 7.2 and onwards, or Redis OSS 6.0 and onwards: Creates a user group. For more information, see [Using Role Based Access Control (RBAC)](https://docs.aws.amazon.com/AmazonElastiCache/latest/dg/Clusters.RBAC.html)
│      └ properties
│         └ Engine: (documentation changed)
├[~] service aws-emr
│ └ resources
│    ├[~] resource AWS::EMR::Cluster
│    │ └ types
│    │    ├[~] type InstanceFleetConfig
│    │    │ └ properties
│    │    │    └ ResizeSpecifications: (documentation changed)
│    │    ├[~] type InstanceFleetResizingSpecifications
│    │    │ ├  - documentation: undefined
│    │    │ │  + documentation: The resize specification for On-Demand and Spot Instances in the fleet.
│    │    │ └ properties
│    │    │    ├ OnDemandResizeSpecification: (documentation changed)
│    │    │    └ SpotResizeSpecification: (documentation changed)
│    │    ├[~] type InstanceTypeConfig
│    │    │ └ properties
│    │    │    └ Priority: (documentation changed)
│    │    ├[~] type OnDemandCapacityReservationOptions
│    │    │ ├  - documentation: undefined
│    │    │ │  + documentation: Describes the strategy for using unused Capacity Reservations for fulfilling On-Demand capacity.
│    │    │ └ properties
│    │    │    ├ CapacityReservationPreference: (documentation changed)
│    │    │    ├ CapacityReservationResourceGroupArn: (documentation changed)
│    │    │    └ UsageStrategy: (documentation changed)
│    │    ├[~] type OnDemandProvisioningSpecification
│    │    │ └ properties
│    │    │    └ CapacityReservationOptions: (documentation changed)
│    │    ├[~] type OnDemandResizingSpecification
│    │    │ ├  - documentation: undefined
│    │    │ │  + documentation: The resize specification for On-Demand Instances in the instance fleet, which contains the resize timeout period.
│    │    │ └ properties
│    │    │    ├ AllocationStrategy: (documentation changed)
│    │    │    └ TimeoutDurationMinutes: (documentation changed)
│    │    └[~] type SpotResizingSpecification
│    │      ├  - documentation: undefined
│    │      │  + documentation: The resize specification for Spot Instances in the instance fleet, which contains the resize timeout period.
│    │      └ properties
│    │         ├ AllocationStrategy: (documentation changed)
│    │         └ TimeoutDurationMinutes: (documentation changed)
│    └[~] resource AWS::EMR::InstanceFleetConfig
│      ├ properties
│      │  └ ResizeSpecifications: (documentation changed)
│      └ types
│         ├[~] type InstanceFleetResizingSpecifications
│         │ ├  - documentation: undefined
│         │ │  + documentation: The resize specification for On-Demand and Spot Instances in the fleet.
│         │ └ properties
│         │    ├ OnDemandResizeSpecification: (documentation changed)
│         │    └ SpotResizeSpecification: (documentation changed)
│         ├[~] type InstanceTypeConfig
│         │ └ properties
│         │    └ Priority: (documentation changed)
│         ├[~] type OnDemandCapacityReservationOptions
│         │ ├  - documentation: undefined
│         │ │  + documentation: Describes the strategy for using unused Capacity Reservations for fulfilling On-Demand capacity.
│         │ └ properties
│         │    ├ CapacityReservationPreference: (documentation changed)
│         │    ├ CapacityReservationResourceGroupArn: (documentation changed)
│         │    └ UsageStrategy: (documentation changed)
│         ├[~] type OnDemandProvisioningSpecification
│         │ └ properties
│         │    └ CapacityReservationOptions: (documentation changed)
│         ├[~] type OnDemandResizingSpecification
│         │ ├  - documentation: undefined
│         │ │  + documentation: The resize specification for On-Demand Instances in the instance fleet, which contains the resize timeout period.
│         │ └ properties
│         │    ├ AllocationStrategy: (documentation changed)
│         │    └ TimeoutDurationMinutes: (documentation changed)
│         └[~] type SpotResizingSpecification
│           ├  - documentation: undefined
│           │  + documentation: The resize specification for Spot Instances in the instance fleet, which contains the resize timeout period.
│           └ properties
│              ├ AllocationStrategy: (documentation changed)
│              └ TimeoutDurationMinutes: (documentation changed)
├[~] service aws-glue
│ └ resources
│    ├[~] resource AWS::Glue::Job
│    │ └ attributes
│    │    └[-] Id: string
│    └[~] resource AWS::Glue::MLTransform
│      └ types
│         └[~] type TransformParameters
│           └ properties
│              └ TransformType: (documentation changed)
├[~] service aws-identitystore
│ └ resources
│    └[~] resource AWS::IdentityStore::Group
│      └ properties
│         └ DisplayName: (documentation changed)
├[~] service aws-iot
│ └ resources
│    └[~] resource AWS::IoT::DomainConfiguration
│      ├ properties
│      │  ├ ApplicationProtocol: (documentation changed)
│      │  ├ AuthenticationType: (documentation changed)
│      │  └ ClientCertificateConfig: (documentation changed)
│      └ types
│         └[~] type ClientCertificateConfig
│           ├  - documentation: undefined
│           │  + documentation: An object that specifies the client certificate configuration for a domain.
│           │  > This property isn't available in China.
│           └ properties
│              └ ClientCertificateCallbackArn: (documentation changed)
├[~] service aws-kinesis
│ └ resources
│    └[+] resource AWS::Kinesis::ResourcePolicy
│      ├  name: ResourcePolicy
│      │  cloudFormationType: AWS::Kinesis::ResourcePolicy
│      │  documentation: Resource Type definition for AWS::Kinesis::ResourcePolicy
│      │  scrutinizable: ResourcePolicyResource
│      └ properties
│         └ResourcePolicy: json (required)
├[~] service aws-memorydb
│ └ resources
│    └[~] resource AWS::MemoryDB::Cluster
│      └ properties
│         ├ DataTiering: (documentation changed)
│         └ EngineVersion: (documentation changed)
├[~] service aws-quicksight
│ └ resources
│    └[~] resource AWS::QuickSight::Folder
│      └ properties
│         ├ ParentFolderArn: (documentation changed)
│         └ Tags: (documentation changed)
├[~] service aws-route53resolver
│ └ resources
│    └[~] resource AWS::Route53Resolver::ResolverRule
│      └ types
│         └[~] type TargetAddress
│           └ properties
│              └ Protocol: (documentation changed)
├[~] service aws-s3
│ └ resources
│    └[~] resource AWS::S3::Bucket
│      └ types
│         └[~] type LifecycleConfiguration
│           └ properties
│              └ TransitionDefaultMinimumObjectSize: (documentation changed)
├[~] service aws-s3express
│ └ resources
│    └[~] resource AWS::S3Express::DirectoryBucket
│      └ types
│         ├[~] type BucketEncryption
│         │ └  - documentation: Specifies default encryption for a bucket using server-side encryption with Amazon S3 managed keys (SSE-S3) or AWS KMS keys (SSE-KMS).
│         │    + documentation: Specifies default encryption for a bucket using server-side encryption with Amazon S3 managed keys (SSE-S3) or AWS KMS keys (SSE-KMS). For information about default encryption for directory buckets, see [Setting and monitoring default encryption for directory buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-bucket-encryption.html) in the *Amazon S3 User Guide* .
│         ├[~] type ServerSideEncryptionByDefault
│         │ ├  - documentation: Specifies the default server-side encryption to apply to new objects in the bucket. If a PUT Object request doesn't specify any server-side encryption, this default encryption will be applied.
│         │ │  + documentation: Describes the default server-side encryption to apply to new objects in the bucket. If a PUT Object request doesn't specify any server-side encryption, this default encryption will be applied. For more information, see [PutBucketEncryption](https://docs.aws.amazon.com/AmazonS3/latest/API/RESTBucketPUTencryption.html) in the *Amazon S3 API Reference* .
│         │ └ properties
│         │    └ SSEAlgorithm: (documentation changed)
│         └[~] type ServerSideEncryptionRule
│           └ properties
│              └ BucketKeyEnabled: (documentation changed)
└[~] service aws-wisdom
  └ resources
     └[~] resource AWS::Wisdom::KnowledgeBase
       └ types
          └[~] type AppIntegrationsConfiguration
            └ properties
               └ AppIntegrationArn: (documentation changed)
```

Author: aws-cdk-automation

packages/@aws-cdk/cloudformation-diff/package.json

@@ -23,8 +23,8 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-cdk/aws-service-spec": "^0.1.26",
-    "@aws-cdk/service-spec-types": "^0.0.93",
+    "@aws-cdk/aws-service-spec": "^0.1.27",
+    "@aws-cdk/service-spec-types": "^0.0.94",
     "chalk": "^4",
     "diff": "^5.2.0",
     "fast-deep-equal": "^3.1.3",

packages/@aws-cdk/integ-runner/package.json

@@ -75,7 +75,7 @@
     "@aws-cdk/cloudformation-diff": "0.0.0",
     "@aws-cdk/cx-api": "0.0.0",
     "cdk-assets": "^2.154.0",
-    "@aws-cdk/aws-service-spec": "^0.1.26",
+    "@aws-cdk/aws-service-spec": "^0.1.27",
 
     "@aws-cdk/cdk-cli-wrapper": "0.0.0",
     "aws-cdk": "0.0.0",

packages/aws-cdk-lib/package.json

@@ -136,7 +136,7 @@
     "mime-types": "^2.1.35"
   },
   "devDependencies": {
-    "@aws-cdk/aws-service-spec": "^0.1.26",
+    "@aws-cdk/aws-service-spec": "^0.1.27",
     "@aws-cdk/cdk-build-tools": "0.0.0",
     "@aws-cdk/custom-resource-handlers": "0.0.0",
     "@aws-cdk/pkglint": "0.0.0",

tools/@aws-cdk/spec2cdk/package.json

@@ -32,9 +32,9 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-cdk/aws-service-spec": "^0.1.26",
-    "@aws-cdk/service-spec-importers": "^0.0.49",
-    "@aws-cdk/service-spec-types": "^0.0.93",
+    "@aws-cdk/aws-service-spec": "^0.1.27",
+    "@aws-cdk/service-spec-importers": "^0.0.50",
+    "@aws-cdk/service-spec-types": "^0.0.94",
     "@cdklabs/tskb": "^0.0.3",
     "@cdklabs/typewriter": "^0.0.3",
     "camelcase": "^6",

yarn.lock

@@ -51,12 +51,12 @@
   resolved "https://registry.npmjs.org/@aws-cdk/asset-node-proxy-agent-v6/-/asset-node-proxy-agent-v6-2.1.0.tgz#6d3c7860354d4856a7e75375f2f0ecab313b4989"
   integrity sha512-7bY3J8GCVxLupn/kNmpPc5VJz8grx+4RKfnnJiO1LG+uxkZfANZG3RMHhE+qQxxwkyQ9/MfPtTpf748UhR425A==
 
-"@aws-cdk/aws-service-spec@^0.1.26":
-  version "0.1.26"
-  resolved "https://registry.npmjs.org/@aws-cdk/aws-service-spec/-/aws-service-spec-0.1.26.tgz#9b08f2bff08650230d948596b171c7e8f8ce4979"
-  integrity sha512-VXkCdPB2cIKiDXpKK94EYd91Rh1V8SljA5B+GIOQOV5KtHkssqh1hTr5lL6TXYSE79kols/A5GX9pFVdw4fhVw==
+"@aws-cdk/aws-service-spec@^0.1.27":
+  version "0.1.27"
+  resolved "https://registry.npmjs.org/@aws-cdk/aws-service-spec/-/aws-service-spec-0.1.27.tgz#4bccb37648f0d314dc4b8aa707d1811e84a011c2"
+  integrity sha512-GSLGImaGzd+tfAIBSMBhMktxOviQK45EmPG74lsiHrBTpTMkhpz6waJaWi72wXDNBj/nW4S4Pv/ZBD9IW7PzhA==
   dependencies:
-    "@aws-cdk/service-spec-types" "^0.0.93"
+    "@aws-cdk/service-spec-types" "^0.0.94"
     "@cdklabs/tskb" "^0.0.3"
 
 "@aws-cdk/cloud-assembly-schema@^38.0.0":
@@ -94,12 +94,12 @@
   resolved "https://registry.npmjs.org/@aws-cdk/lambda-layer-kubectl-v31/-/lambda-layer-kubectl-v31-2.0.0.tgz#d87799d7d0d5dad77af45281a36942e4b7996b6b"
   integrity sha512-8JI0sMDbqCubOyt1TbQFEwicYok9KYSrNSfzREgjGJcoPy17/Kd0gbe44ATyLMfjae7dExUhhwKMhr6GK7Hmrw==
 
-"@aws-cdk/service-spec-importers@^0.0.49":
-  version "0.0.49"
-  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-importers/-/service-spec-importers-0.0.49.tgz#652b398999a345ea42319a0ab4724aaac934a12d"
-  integrity sha512-NINippOmojei4ZYUeCwaYz6iXPfTA6tZ83DTgf9slZn3U6JsieCfbHUxaT2mfAl/ExajX2ycdCVGYJcNWlo2ww==
+"@aws-cdk/service-spec-importers@^0.0.50":
+  version "0.0.50"
+  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-importers/-/service-spec-importers-0.0.50.tgz#55d7d586a5c622fc37050bf7dabf0e36661bc097"
+  integrity sha512-nmyRzPyRC+OjZmcGQEVZPioOuzkWAw4aBuhkNAQIUxkqnVj5ks+AebWvD+ynrqiHB7twOu4Ge6NsfhnE+tkDOA==
   dependencies:
-    "@aws-cdk/service-spec-types" "^0.0.92"
+    "@aws-cdk/service-spec-types" "^0.0.94"
     "@cdklabs/tskb" "^0.0.3"
     ajv "^6"
     canonicalize "^2.0.0"
@@ -110,17 +110,10 @@
     glob "^8"
     sort-json "^2.0.1"
 
-"@aws-cdk/service-spec-types@^0.0.92":
-  version "0.0.92"
-  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-types/-/service-spec-types-0.0.92.tgz#9f102887ef7a9a5b0829869ad6910d58a91e89fa"
-  integrity sha512-lqZa2/ieUB4ujqEsWl4+f0CFO60aabT1+5/F9z748Jgo7Q+zmv1G0awZuvjUWijkEM4VShg4aSl9s/WkMBbVXA==
-  dependencies:
-    "@cdklabs/tskb" "^0.0.3"
-
-"@aws-cdk/service-spec-types@^0.0.93":
-  version "0.0.93"
-  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-types/-/service-spec-types-0.0.93.tgz#322dc14942af734be00c8a2bba0604239e9d5901"
-  integrity sha512-nLT07w8q/of+8X5QGgNtS1tu68CQSGJHL0xQcLsRKgaxoIddZnUUf2d6WS+Yp0aZCXu2UZaacUxPYwU+qmNhpw==
+"@aws-cdk/service-spec-types@^0.0.94":
+  version "0.0.94"
+  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-types/-/service-spec-types-0.0.94.tgz#4063cbfe6912a3290d3d7f804e94f1944db88175"
+  integrity sha512-JoU3w2qs/uMa1DTrXZLoLJ0Amz1Beehy5uhcK8k3rKKmfhFio/aWAbR0atWprH+AJvpkFHt1injeyEE2rB0ieA==
   dependencies:
     "@cdklabs/tskb" "^0.0.3"