feat: update L1 CloudFormation resource definitions (#28613)

Updates the L1 CloudFormation resource definitions with the latest changes from `@aws-cdk/aws-service-spec`

**L1 CloudFormation resource definition changes:**
```
├[+] service amzn-sdc
│ ├  capitalized: SDC
│ │  cloudFormationNamespace: AMZN::SDC
│ │  name: amzn-sdc
│ │  shortName: sdc
│ └ resources
│    └resource AMZN::SDC::Deployment
│     ├  name: Deployment
│     │  cloudFormationType: AMZN::SDC::Deployment
│     │  documentation: Resource Type definition for AMZN::SDC::Deployment
│     ├ properties
│     │  ├ConfigName: string (required)
│     │  ├S3Bucket: string (required)
│     │  ├TargetRegionOverride: string
│     │  ├S3Key: string (required, immutable)
│     │  ├Stage: string (required)
│     │  ├PipelineId: string
│     │  └Dimension: string (required)
│     └ attributes
│        └Id: string
├[~] service aws-appsync
│ └ resources
│    └[~] resource AWS::AppSync::GraphQLApi
│      └ properties
│         ├ IntrospectionConfig: (documentation changed)
│         ├ QueryDepthLimit: (documentation changed)
│         └ ResolverCountLimit: (documentation changed)
├[~] service aws-cloud9
│ └ resources
│    └[~] resource AWS::Cloud9::EnvironmentEC2
│      └ properties
│         └ ImageId: (documentation changed)
├[~] service aws-cloudfront
│ └ resources
│    └[~] resource AWS::CloudFront::Function
│      └ types
│         ├[~] type FunctionConfig
│         │ └ properties
│         │    └[+] KeyValueStoreAssociations: Array<KeyValueStoreAssociation>
│         └[+] type KeyValueStoreAssociation
│           ├  documentation: The Key Value Store association.
│           │  name: KeyValueStoreAssociation
│           └ properties
│              └KeyValueStoreARN: string (required)
├[~] service aws-cloudtrail
│ └ resources
│    ├[~] resource AWS::CloudTrail::EventDataStore
│    │ └ types
│    │    └[~] type AdvancedFieldSelector
│    │      └ properties
│    │         └ Field: (documentation changed)
│    └[~] resource AWS::CloudTrail::Trail
│      └ types
│         └[~] type AdvancedFieldSelector
│           └ properties
│              └ Field: (documentation changed)
├[~] service aws-codecommit
│ └ resources
│    └[~] resource AWS::CodeCommit::Repository
│      └ properties
│         └ KmsKeyId: (documentation changed)
├[+] service aws-codetest
│ ├  capitalized: CodeTest
│ │  cloudFormationNamespace: AWS::CodeTest
│ │  name: aws-codetest
│ │  shortName: codetest
│ └ resources
│    ├resource AWS::CodeTest::PersistentConfiguration
│    │├  name: PersistentConfiguration
│    ││  cloudFormationType: AWS::CodeTest::PersistentConfiguration
│    ││  documentation: Resource Type definition for AWS::CodeTest::PersistentConfiguration
│    │├ properties
│    ││  ├Version: string
│    ││  ├VpcConfig: VpcConfig
│    ││  ├Name: string (immutable)
│    ││  └ResultsRoleArn: string (required)
│    │├ attributes
│    ││  └Id: string
│    │└ types
│    │   └type VpcConfig
│    │    ├  name: VpcConfig
│    │    └ properties
│    │       ├SecurityGroupIds: Array<string>
│    │       └Subnets: Array<string>
│    └resource AWS::CodeTest::Series
│     ├  name: Series
│     │  cloudFormationType: AWS::CodeTest::Series
│     │  documentation: Resource Type definition for AWS::CodeTest::Series
│     ├ properties
│     │  ├PersistentConfigurationId: string (required, immutable)
│     │  ├RunDefinition: json (required)
│     │  ├State: string (required)
│     │  └Name: string (immutable)
│     └ attributes
│        └Id: string
├[~] service aws-cognito
│ └ resources
│    └[~] resource AWS::Cognito::UserPool
│      └ types
│         ├[~] type LambdaConfig
│         │ └ properties
│         │    └[+] PreTokenGenerationConfig: PreTokenGenerationConfig
│         └[+] type PreTokenGenerationConfig
│           ├  name: PreTokenGenerationConfig
│           └ properties
│              ├LambdaVersion: string
│              └LambdaArn: string
├[~] service aws-connect
│ └ resources
│    ├[~] resource AWS::Connect::Instance
│    │ └ properties
│    │    └ Tags: (documentation changed)
│    ├[~] resource AWS::Connect::PhoneNumber
│    │ └ properties
│    │    ├ CountryCode: - string (required, immutable)
│    │    │              + string (immutable)
│    │    ├[+] SourcePhoneNumberArn: string (immutable)
│    │    └ Type: - string (required, immutable)
│    │            + string (immutable)
│    ├[+] resource AWS::Connect::PredefinedAttribute
│    │ ├  name: PredefinedAttribute
│    │ │  cloudFormationType: AWS::Connect::PredefinedAttribute
│    │ │  documentation: Textual or numeric value that describes an attribute.
│    │ ├ properties
│    │ │  ├InstanceArn: string (required, immutable)
│    │ │  ├Name: string (required, immutable)
│    │ │  └Values: Values (required)
│    │ └ types
│    │    └type Values
│    │     ├  documentation: The values of a predefined attribute.
│    │     │  name: Values
│    │     └ properties
│    │        └StringList: Array<string>
│    ├[~] resource AWS::Connect::User
│    │ ├ properties
│    │ │  └[+] UserProficiencies: Array<UserProficiency>
│    │ └ types
│    │    └[+] type UserProficiency
│    │      ├  documentation: > A predefined attribute must be created before using `UserProficiencies` in the Cloudformation *User* template. For more information, see [Predefined attributes](https://docs.aws.amazon.com/connect/latest/adminguide/predefined-attributes.html) . 
│    │      │  Proficiency of a user.
│    │      │  name: UserProficiency
│    │      └ properties
│    │         ├AttributeName: string (required)
│    │         ├AttributeValue: string (required)
│    │         └Level: number (required)
│    └[~] resource AWS::Connect::UserHierarchyGroup
│      └ properties
│         └ Tags: (documentation changed)
├[~] service aws-docdb
│ └ resources
│    └[+] resource AWS::DocDB::EventSubscription
│      ├  name: EventSubscription
│      │  cloudFormationType: AWS::DocDB::EventSubscription
│      │  documentation: Creates an Amazon DocumentDB event notification subscription. This action requires a topic Amazon Resource Name (ARN) created by using the Amazon DocumentDB console, the Amazon SNS console, or the Amazon SNS API. To obtain an ARN with Amazon SNS, you must create a topic in Amazon SNS and subscribe to the topic. The ARN is displayed in the Amazon SNS console.
│      │  You can specify the type of source ( `SourceType` ) that you want to be notified of. You can also provide a list of Amazon DocumentDB sources ( `SourceIds` ) that trigger the events, and you can provide a list of event categories ( `EventCategories` ) for events that you want to be notified of. For example, you can specify `SourceType = db-instance` , `SourceIds = mydbinstance1, mydbinstance2` and `EventCategories = Availability, Backup` .
│      │  If you specify both the `SourceType` and `SourceIds` (such as `SourceType = db-instance` and `SourceIdentifier = myDBInstance1` ), you are notified of all the `db-instance` events for the specified source. If you specify a `SourceType` but do not specify a `SourceIdentifier` , you receive notice of the events for that source type for all your Amazon DocumentDB sources. If you do not specify either the `SourceType` or the `SourceIdentifier` , you are notified of events generated from all Amazon DocumentDB sources belonging to your customer account.
│      ├ properties
│      │  ├SourceType: string
│      │  ├Enabled: boolean
│      │  ├EventCategories: Array<string>
│      │  ├SubscriptionName: string (immutable)
│      │  ├SnsTopicArn: string (required, immutable)
│      │  └SourceIds: Array<string>
│      └ attributes
│         └Id: string
├[~] service aws-ec2
│ └ resources
│    ├[~] resource AWS::EC2::LaunchTemplate
│    │ └ types
│    │    └[~] type MaintenanceOptions
│    │      └ properties
│    │         └[+] RebootMigration: string
│    ├[~] resource AWS::EC2::NetworkInterface
│    │ ├ properties
│    │ │  └[+] EnablePrimaryIpv6: boolean
│    │ └ attributes
│    │    └[+] PrimaryIpv6Address: string
│    ├[~] resource AWS::EC2::Subnet
│    │ └ properties
│    │    ├[+] Ipv4IpamPoolId: string (immutable)
│    │    ├[+] Ipv4NetmaskLength: integer (immutable)
│    │    ├[+] Ipv6IpamPoolId: string (immutable)
│    │    └[+] Ipv6NetmaskLength: integer (immutable)
│    └[~] resource AWS::EC2::SubnetCidrBlock
│      └ properties
│         ├ Ipv6CidrBlock: - string (required, immutable)
│         │                + string (immutable)
│         ├[+] Ipv6IpamPoolId: string (immutable)
│         └[+] Ipv6NetmaskLength: integer (immutable)
├[~] service aws-emrserverless
│ └ resources
│    └[~] resource AWS::EMRServerless::Application
│      └ types
│         ├[~] type CloudWatchLoggingConfiguration
│         │ ├  - documentation: undefined
│         │ │  + documentation: The Amazon CloudWatch configuration for monitoring logs. You can configure your jobs to send log information to CloudWatch .
│         │ └ properties
│         │    ├ Enabled: (documentation changed)
│         │    ├ EncryptionKeyArn: (documentation changed)
│         │    ├ LogGroupName: (documentation changed)
│         │    └ LogStreamNamePrefix: (documentation changed)
│         └[~] type MonitoringConfiguration
│           └ properties
│              └ CloudWatchLoggingConfiguration: (documentation changed)
├[~] service aws-events
│ └ resources
│    ├[~] resource AWS::Events::EventBus
│    │ └  - documentation: Creates a new event bus within your account. This can be a custom event bus which you can use to receive events from your custom applications and services, or it can be a partner event bus which can be matched to a partner event source.
│    │    + documentation: Specifies an event bus within your account. This can be a custom event bus which you can use to receive events from your custom applications and services, or it can be a partner event bus which can be matched to a partner event source.
│    │    > As an aid to help you jumpstart developing CloudFormation templates, the EventBridge console enables you to create templates from the existing event buses in your account. For more information, see [Generating CloudFormation templates from an EventBridge event bus](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-generate-event-bus-template.html) in the *Amazon EventBridge User Guide* .
│    └[~] resource AWS::Events::Rule
│      ├  - documentation: Creates or updates the specified rule. Rules are enabled by default, or based on value of the state. You can disable a rule using [DisableRule](https://docs.aws.amazon.com/eventbridge/latest/APIReference/API_DisableRule.html) .
│      │  A single rule watches for events from a single event bus. Events generated by AWS services go to your account's default event bus. Events generated by SaaS partner services or applications go to the matching partner event bus. If you have custom applications or services, you can specify whether their events go to your default event bus or a custom event bus that you have created. For more information, see [CreateEventBus](https://docs.aws.amazon.com/eventbridge/latest/APIReference/API_CreateEventBus.html) .
│      │  If you are updating an existing rule, the rule is replaced with what you specify in this `PutRule` command. If you omit arguments in `PutRule` , the old values for those arguments are not kept. Instead, they are replaced with null values.
│      │  When you create or update a rule, incoming events might not immediately start matching to new or updated rules. Allow a short period of time for changes to take effect.
│      │  A rule must contain at least an EventPattern or ScheduleExpression. Rules with EventPatterns are triggered when a matching event is observed. Rules with ScheduleExpressions self-trigger based on the given schedule. A rule can have both an EventPattern and a ScheduleExpression, in which case the rule triggers on matching events as well as on a schedule.
│      │  Most services in AWS treat : or / as the same character in Amazon Resource Names (ARNs). However, EventBridge uses an exact match in event patterns and rules. Be sure to use the correct ARN characters when creating event patterns so that they match the ARN syntax in the event you want to match.
│      │  In EventBridge, it is possible to create rules that lead to infinite loops, where a rule is fired repeatedly. For example, a rule might detect that ACLs have changed on an S3 bucket, and trigger software to change them to the desired state. If the rule is not written carefully, the subsequent change to the ACLs fires the rule again, creating an infinite loop.
│      │  To prevent this, write the rules so that the triggered actions do not re-fire the same rule. For example, your rule could fire only if ACLs are found to be in a bad state, instead of after any change.
│      │  An infinite loop can quickly cause higher than expected charges. We recommend that you use budgeting, which alerts you when charges exceed your specified limit. For more information, see [Managing Your Costs with Budgets](https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/budgets-managing-costs.html) .
│      │  + documentation: Creates or updates the specified rule. Rules are enabled by default, or based on value of the state. You can disable a rule using [DisableRule](https://docs.aws.amazon.com/eventbridge/latest/APIReference/API_DisableRule.html) .
│      │  A single rule watches for events from a single event bus. Events generated by AWS services go to your account's default event bus. Events generated by SaaS partner services or applications go to the matching partner event bus. If you have custom applications or services, you can specify whether their events go to your default event bus or a custom event bus that you have created. For more information, see [CreateEventBus](https://docs.aws.amazon.com/eventbridge/latest/APIReference/API_CreateEventBus.html) .
│      │  If you are updating an existing rule, the rule is replaced with what you specify in this `PutRule` command. If you omit arguments in `PutRule` , the old values for those arguments are not kept. Instead, they are replaced with null values.
│      │  When you create or update a rule, incoming events might not immediately start matching to new or updated rules. Allow a short period of time for changes to take effect.
│      │  A rule must contain at least an EventPattern or ScheduleExpression. Rules with EventPatterns are triggered when a matching event is observed. Rules with ScheduleExpressions self-trigger based on the given schedule. A rule can have both an EventPattern and a ScheduleExpression, in which case the rule triggers on matching events as well as on a schedule.
│      │  Most services in AWS treat : or / as the same character in Amazon Resource Names (ARNs). However, EventBridge uses an exact match in event patterns and rules. Be sure to use the correct ARN characters when creating event patterns so that they match the ARN syntax in the event you want to match.
│      │  In EventBridge, it is possible to create rules that lead to infinite loops, where a rule is fired repeatedly. For example, a rule might detect that ACLs have changed on an S3 bucket, and trigger software to change them to the desired state. If the rule is not written carefully, the subsequent change to the ACLs fires the rule again, creating an infinite loop.
│      │  To prevent this, write the rules so that the triggered actions do not re-fire the same rule. For example, your rule could fire only if ACLs are found to be in a bad state, instead of after any change.
│      │  An infinite loop can quickly cause higher than expected charges. We recommend that you use budgeting, which alerts you when charges exceed your specified limit. For more information, see [Managing Your Costs with Budgets](https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/budgets-managing-costs.html) .
│      │  > As an aid to help you jumpstart developing CloudFormation templates, the EventBridge console enables you to create templates from the existing rules in your account. For more information, see [Generating CloudFormation templates from an EventBridge rule](https://docs.aws.amazon.com/eventbridge/latest/userguide/rule-generate-template.html) in the *Amazon EventBridge User Guide* .
│      └ types
│         ├[+] type AppSyncParameters
│         │ ├  name: AppSyncParameters
│         │ └ properties
│         │    └GraphQLOperation: string (required)
│         └[~] type Target
│           └ properties
│              └[+] AppSyncParameters: AppSyncParameters
├[~] service aws-fis
│ └ resources
│    └[~] resource AWS::FIS::ExperimentTemplate
│      ├  - documentation: Specifies an experiment template.
│      │  An experiment template includes the following components:
│      │  - *Targets* : A target can be a specific resource in your AWS environment, or one or more resources that match criteria that you specify, for example, resources that have specific tags.
│      │  - *Actions* : The actions to carry out on the target. You can specify multiple actions, the duration of each action, and when to start each action during an experiment.
│      │  - *Stop conditions* : If a stop condition is triggered while an experiment is running, the experiment is automatically stopped. You can define a stop condition as a CloudWatch alarm.
│      │  For more information, see [Experiment templates](https://docs.aws.amazon.com/fis/latest/userguide/experiment-templates.html) in the *AWS Fault Injection Service User Guide* .
│      │  + documentation: Describes an experiment template.
│      └ types
│         ├[~] type ExperimentTemplateAction
│         │ └  - documentation: Specifies an action for an experiment template.
│         │    For more information, see [Actions](https://docs.aws.amazon.com/fis/latest/userguide/actions.html) in the *AWS Fault Injection Service User Guide* .
│         │    + documentation: Describes an action for an experiment template.
│         ├[~] type ExperimentTemplateLogConfiguration
│         │ ├  - documentation: Specifies the configuration for experiment logging.
│         │ │  For more information, see [Experiment logging](https://docs.aws.amazon.com/fis/latest/userguide/monitoring-logging.html) in the *AWS Fault Injection Service User Guide* .
│         │ │  + documentation: Describes the configuration for experiment logging.
│         │ └ properties
│         │    ├ CloudWatchLogsConfiguration: (documentation changed)
│         │    └ S3Configuration: (documentation changed)
│         ├[~] type ExperimentTemplateStopCondition
│         │ └  - documentation: Specifies a stop condition for an experiment template.
│         │    For more information, see [Stop conditions](https://docs.aws.amazon.com/fis/latest/userguide/stop-conditions.html) in the *AWS Fault Injection Service User Guide* .
│         │    + documentation: Describes a stop condition for an experiment template.
│         ├[~] type ExperimentTemplateTarget
│         │ ├  - documentation: Specifies a target for an experiment. You must specify at least one Amazon Resource Name (ARN) or at least one resource tag. You cannot specify both ARNs and tags.
│         │ │  For more information, see [Targets](https://docs.aws.amazon.com/fis/latest/userguide/targets.html) in the *AWS Fault Injection Service User Guide* .
│         │ │  + documentation: Describes a target for an experiment template.
│         │ └ properties
│         │    └ Parameters: (documentation changed)
│         └[~] type ExperimentTemplateTargetFilter
│           └  - documentation: Specifies a filter used for the target resource input in an experiment template.
│              For more information, see [Resource filters](https://docs.aws.amazon.com/fis/latest/userguide/targets.html#target-filters) in the *AWS Fault Injection Service User Guide* .
│              + documentation: Describes a filter used for the target resources in an experiment template.
├[~] service aws-globalaccelerator
│ └ resources
│    └[~] resource AWS::GlobalAccelerator::EndpointGroup
│      └ types
│         └[~] type EndpointConfiguration
│           └ properties
│              └[+] AttachmentArn: string
├[~] service aws-glue
│ └ resources
│    └[+] resource AWS::Glue::CustomEntityType
│      ├  name: CustomEntityType
│      │  cloudFormationType: AWS::Glue::CustomEntityType
│      │  documentation: Creates a custom pattern that is used to detect sensitive data across the columns and rows of your structured data.
│      │  Each custom pattern you create specifies a regular expression and an optional list of context words. If no context words are passed only a regular expression is checked.
│      │  tagInformation: {"tagPropertyName":"Tags","variant":"map"}
│      ├ properties
│      │  ├RegexString: string
│      │  ├ContextWords: Array<string>
│      │  ├Tags: json
│      │  └Name: string
│      └ attributes
│         └Id: string
├[~] service aws-iot
│ └ resources
│    └[~] resource AWS::IoT::DomainConfiguration
│      ├ properties
│      │  └[+] ServerCertificateConfig: ServerCertificateConfig
│      └ types
│         └[+] type ServerCertificateConfig
│           ├  name: ServerCertificateConfig
│           └ properties
│              └EnableOCSPCheck: boolean
├[~] service aws-iotsitewise
│ └ resources
│    └[~] resource AWS::IoTSiteWise::Gateway
│      └ types
│         ├[~] type GatewayPlatform
│         │ └ properties
│         │    └ GreengrassV2: (documentation changed)
│         └[~] type GreengrassV2
│           └  - documentation: Contains details for a gateway that runs on AWS IoT Greengrass V2. To create a gateway that runs on AWS IoT Greengrass V2, you must deploy the IoT SiteWise Edge component to your gateway device. Your [Greengrass device role](https://docs.aws.amazon.com/greengrass/v2/developerguide/device-service-role.html) must use the `AWSIoTSiteWiseEdgeAccess` policy. For more information, see [Using AWS IoT SiteWise at the edge](https://docs.aws.amazon.com/iot-sitewise/latest/userguide/sw-gateways.html) in the *AWS IoT SiteWise User Guide* .
│              + documentation: Contains details for a gateway that runs on AWS IoT Greengrass V2 . To create a gateway that runs on AWS IoT Greengrass V2 , you must deploy the IoT SiteWise Edge component to your gateway device. Your [Greengrass device role](https://docs.aws.amazon.com/greengrass/v2/developerguide/device-service-role.html) must use the `AWSIoTSiteWiseEdgeAccess` policy. For more information, see [Using AWS IoT SiteWise at the edge](https://docs.aws.amazon.com/iot-sitewise/latest/userguide/sw-gateways.html) in the *AWS IoT SiteWise User Guide* .
├[~] service aws-kendra
│ └ resources
│    └[~] resource AWS::Kendra::DataSource
│      └ types
│         └[~] type S3DataSourceConfiguration
│           └ properties
│              └ ExclusionPatterns: (documentation changed)
├[~] service aws-kinesisfirehose
│ └ resources
│    └[~] resource AWS::KinesisFirehose::DeliveryStream
│      └ types
│         ├[+] type SplunkBufferingHints
│         │ ├  documentation: The buffering options. If no value is specified, the default values for Splunk are used.
│         │ │  name: SplunkBufferingHints
│         │ └ properties
│         │    ├IntervalInSeconds: integer
│         │    └SizeInMBs: integer
│         └[~] type SplunkDestinationConfiguration
│           └ properties
│              └[+] BufferingHints: SplunkBufferingHints
├[~] service aws-location
│ └ resources
│    ├[+] resource AWS::Location::APIKey
│    │ ├  name: APIKey
│    │ │  cloudFormationType: AWS::Location::APIKey
│    │ │  documentation: The API key resource in your AWS account, which lets you grant actions for Amazon Location resources to the API key bearer.
│    │ │  tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ ├ properties
│    │ │  ├Description: string
│    │ │  ├ExpireTime: string
│    │ │  ├ForceUpdate: boolean
│    │ │  ├KeyName: string (required, immutable)
│    │ │  ├NoExpiry: boolean
│    │ │  ├Restrictions: ApiKeyRestrictions (required)
│    │ │  ├Tags: Array<tag>
│    │ │  └ForceDelete: boolean
│    │ ├ attributes
│    │ │  ├CreateTime: string
│    │ │  ├Arn: string
│    │ │  ├KeyArn: string
│    │ │  └UpdateTime: string
│    │ └ types
│    │    └type ApiKeyRestrictions
│    │     ├  documentation: API Restrictions on the allowed actions, resources, and referers for an API key resource.
│    │     │  name: ApiKeyRestrictions
│    │     └ properties
│    │        ├AllowActions: Array<string> (required)
│    │        ├AllowResources: Array<string> (required)
│    │        └AllowReferers: Array<string>
│    ├[~] resource AWS::Location::GeofenceCollection
│    │ ├  - tagInformation: undefined
│    │ │  + tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ └ properties
│    │    └[+] Tags: Array<tag>
│    ├[~] resource AWS::Location::Map
│    │ ├  - tagInformation: undefined
│    │ │  + tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ ├ properties
│    │ │  └[+] Tags: Array<tag>
│    │ ├ attributes
│    │ │  └ DataSource: (documentation changed)
│    │ └ types
│    │    └[~] type MapConfiguration
│    │      └ properties
│    │         └[+] PoliticalView: string
│    ├[~] resource AWS::Location::PlaceIndex
│    │ ├  - tagInformation: undefined
│    │ │  + tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ └ properties
│    │    └[+] Tags: Array<tag>
│    ├[~] resource AWS::Location::RouteCalculator
│    │ ├  - tagInformation: undefined
│    │ │  + tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │ └ properties
│    │    └[+] Tags: Array<tag>
│    └[~] resource AWS::Location::Tracker
│      ├  - tagInformation: undefined
│      │  + tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│      └ properties
│         ├[+] EventBridgeEnabled: boolean
│         ├[+] KmsKeyEnableGeospatialQueries: boolean
│         └[+] Tags: Array<tag>
├[~] service aws-mediatailor
│ └ resources
│    └[~] resource AWS::MediaTailor::Channel
│      ├ properties
│      │  └[+] TimeShiftConfiguration: TimeShiftConfiguration
│      └ types
│         ├[~] type DashPlaylistSettings
│         │ └ properties
│         │    ├ ManifestWindowSeconds: - number (default=0)
│         │    │                        + number
│         │    ├ MinBufferTimeSeconds: - number (default=0)
│         │    │                       + number
│         │    ├ MinUpdatePeriodSeconds: - number (default=0)
│         │    │                         + number
│         │    └ SuggestedPresentationDelaySeconds: - number (default=0)
│         │                                         + number
│         ├[~] type HlsPlaylistSettings
│         │ └ properties
│         │    └ ManifestWindowSeconds: - number (default=0)
│         │                             + number
│         └[+] type TimeShiftConfiguration
│           ├  documentation: The configuration for time-shifted viewing.
│           │  name: TimeShiftConfiguration
│           └ properties
│              └MaxTimeDelaySeconds: number (required)
├[~] service aws-networkfirewall
│ └ resources
│    └[~] resource AWS::NetworkFirewall::FirewallPolicy
│      └ types
│         └[~] type FirewallPolicy
│           └ properties
│              └ TLSInspectionConfigurationArn: (documentation changed)
├[~] service aws-networkmanager
│ └ resources
│    └[~] resource AWS::NetworkManager::Device
│      └ attributes
│         └ CreatedAt: (documentation changed)
├[~] service aws-omics
│ └ resources
│    └[~] resource AWS::Omics::Workflow
│      └ properties
│         └ StorageCapacity: (documentation changed)
├[~] service aws-pinpoint
│ └ resources
│    └[~] resource AWS::Pinpoint::GCMChannel
│      └ properties
│         ├ DefaultAuthenticationMethod: (documentation changed)
│         └ ServiceJson: (documentation changed)
├[~] service aws-pipes
│ └ resources
│    └[~] resource AWS::Pipes::Pipe
│      ├  - documentation: Create a pipe. Amazon EventBridge Pipes connect event sources to targets and reduces the need for specialized knowledge and integration code.
│      │  + documentation: Specifies a pipe. Amazon EventBridge Pipes connect event sources to targets and reduces the need for specialized knowledge and integration code.
│      │  > As an aid to help you jumpstart developing CloudFormation templates, the EventBridge console enables you to create templates from the existing pipes in your account. For more information, see [Generate an CloudFormation template from EventBridge Pipes](https://docs.aws.amazon.com/eventbridge/latest/userguide/pipes-generate-template.html) in the *Amazon EventBridge User Guide* .
│      └ types
│         └[~] type PipeLogConfiguration
│           └ properties
│              └ IncludeExecutionData: (documentation changed)
├[~] service aws-rds
│ └ resources
│    └[~] resource AWS::RDS::DBInstance
│      └ properties
│         └ CACertificateIdentifier: (documentation changed)
├[~] service aws-redshift
│ └ resources
│    └[~] resource AWS::Redshift::Cluster
│      ├ properties
│      │  ├[+] ManageMasterPassword: boolean
│      │  └[+] MasterPasswordSecretKmsKeyId: string
│      └ attributes
│         └[+] MasterPasswordSecretArn: string
├[~] service aws-s3
│ └ resources
│    └[~] resource AWS::S3::Bucket
│      └ types
│         └[~] type OwnershipControlsRule
│           └ properties
│              └ ObjectOwnership: (documentation changed)
├[~] service aws-s3objectlambda
│ └ resources
│    └[~] resource AWS::S3ObjectLambda::AccessPoint
│      └ types
│         └[~] type TransformationConfiguration
│           └ properties
│              └ Actions: (documentation changed)
├[~] service aws-servicecatalogappregistry
│ └ resources
│    └[~] resource AWS::ServiceCatalogAppRegistry::Application
│      └ attributes
│         ├ ApplicationTagKey: (documentation changed)
│         └ ApplicationTagValue: (documentation changed)
└[~] service aws-ssm
  └ resources
     └[~] resource AWS::SSM::PatchBaseline
       ├ properties
       │  ├ ApprovedPatchesComplianceLevel: - string
       │  │                                 + string (default="UNSPECIFIED")
       │  ├ ApprovedPatchesEnableNonSecurity: - boolean
       │  │                                   + boolean (default=false)
       │  ├[+] DefaultBaseline: boolean (default=false)
       │  ├ OperatingSystem: - string (immutable)
       │  │                  + string (default="WINDOWS", immutable)
       │  └ RejectedPatchesAction: - string
       │                           + string (default="ALLOW_AS_DEPENDENCY")
       ├ attributes
       │  └ Id: (documentation changed)
       └ types
          ├[~] type PatchSource
          │ ├  - documentation: `PatchSource` is the property type for the `Sources` resource of the [AWS::SSM::PatchBaseline](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html) resource.
          │ │  The AWS CloudFormation `AWS::SSM::PatchSource` resource is used to provide information about the patches to use to update target instances, including target operating systems and source repository. Applies to Linux instances only.
          │ │  + documentation: `PatchSource` is the property type for the `Sources` resource of the [AWS::SSM::PatchBaseline](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html) resource.
          │ │  The AWS CloudFormation `AWS::SSM::PatchSource` resource is used to provide information about the patches to use to update target instances, including target operating systems and source repository. Applies to Linux managed nodes only.
          │ └ properties
          │    └ Products: (documentation changed)
          └[~] type Rule
            └ properties
               ├ ApproveUntilDate: - json ⇐ string
               │                   + string
               └ EnableNonSecurity: - boolean
                                    + boolean (default=false)
```

Author: aws-cdk-automation

packages/@aws-cdk/cloudformation-diff/package.json

@@ -23,8 +23,8 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-cdk/aws-service-spec": "^0.0.38",
-    "@aws-cdk/service-spec-types": "^0.0.38",
+    "@aws-cdk/aws-service-spec": "^0.0.40",
+    "@aws-cdk/service-spec-types": "^0.0.40",
     "chalk": "^4",
     "diff": "^5.1.0",
     "fast-deep-equal": "^3.1.3",

packages/@aws-cdk/integ-runner/package.json

@@ -74,7 +74,7 @@
     "@aws-cdk/cloud-assembly-schema": "0.0.0",
     "@aws-cdk/cloudformation-diff": "0.0.0",
     "@aws-cdk/cx-api": "0.0.0",
-    "@aws-cdk/aws-service-spec": "^0.0.38",
+    "@aws-cdk/aws-service-spec": "^0.0.40",
     "cdk-assets": "0.0.0",
     "@aws-cdk/cdk-cli-wrapper": "0.0.0",
     "aws-cdk": "0.0.0",

packages/aws-cdk-lib/amzn-sdc/.jsiirc.json

@@ -0,0 +1,13 @@
+{
+  "targets": {
+    "java": {
+      "package": "amzn.sdc"
+    },
+    "dotnet": {
+      "package": "Amazon.CDK.AMZN.SDC"
+    },
+    "python": {
+      "module": "aws_cdk.amzn_sdc"
+    }
+  }
+}

packages/aws-cdk-lib/amzn-sdc/README.md

@@ -0,0 +1,39 @@
+# AMZN::SDC Construct Library
+<!--BEGIN STABILITY BANNER-->
+
+---
+
+![cfn-resources: Stable](https://img.shields.io/badge/cfn--resources-stable-success.svg?style=for-the-badge)
+
+> All classes with the `Cfn` prefix in this module ([CFN Resources]) are always stable and safe to use.
+>
+> [CFN Resources]: https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_lib
+
+---
+
+<!--END STABILITY BANNER-->
+
+This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.
+
+```ts nofixture
+import * as amzn_sdc from 'aws-cdk-lib/amzn-sdc';
+```
+
+<!--BEGIN CFNONLY DISCLAIMER-->
+
+There are no official hand-written ([L2](https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_lib)) constructs for this service yet. Here are some suggestions on how to proceed:
+
+- Search [Construct Hub for SDC construct libraries](https://constructs.dev/search?q=sdc)
+- Use the automatically generated [L1](https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_l1_using) constructs, in the same way you would use [the CloudFormation AMZN::SDC resources](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AMZN_SDC.html) directly.
+
+
+<!--BEGIN CFNONLY DISCLAIMER-->
+
+There are no hand-written ([L2](https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_lib)) constructs for this service yet. 
+However, you can still use the automatically generated [L1](https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_l1_using) constructs, and use this service exactly as you would using CloudFormation directly.
+
+For more information on the resources and properties available for this service, see the [CloudFormation documentation for AMZN::SDC](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AMZN_SDC.html).
+
+(Read the [CDK Contributing Guide](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and submit an RFC if you are interested in contributing to this construct library.)
+
+<!--END CFNONLY DISCLAIMER-->

packages/aws-cdk-lib/amzn-sdc/index.ts

@@ -0,0 +1 @@
+export * from './lib';

packages/aws-cdk-lib/amzn-sdc/lib/index.ts

@@ -0,0 +1,2 @@
+// AMZN::SDC Cloudformation Resources
+export * from './sdc.generated';

packages/aws-cdk-lib/aws-codetest/.jsiirc.json

@@ -0,0 +1,13 @@
+{
+  "targets": {
+    "java": {
+      "package": "software.amazon.awscdk.services.codetest"
+    },
+    "dotnet": {
+      "package": "Amazon.CDK.AWS.CodeTest"
+    },
+    "python": {
+      "module": "aws_cdk.aws_codetest"
+    }
+  }
+}

packages/aws-cdk-lib/aws-codetest/README.md

@@ -0,0 +1,39 @@
+# AWS::CodeTest Construct Library
+<!--BEGIN STABILITY BANNER-->
+
+---
+
+![cfn-resources: Stable](https://img.shields.io/badge/cfn--resources-stable-success.svg?style=for-the-badge)
+
+> All classes with the `Cfn` prefix in this module ([CFN Resources]) are always stable and safe to use.
+>
+> [CFN Resources]: https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_lib
+
+---
+
+<!--END STABILITY BANNER-->
+
+This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.
+
+```ts nofixture
+import * as codetest from 'aws-cdk-lib/aws-codetest';
+```
+
+<!--BEGIN CFNONLY DISCLAIMER-->
+
+There are no official hand-written ([L2](https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_lib)) constructs for this service yet. Here are some suggestions on how to proceed:
+
+- Search [Construct Hub for CodeTest construct libraries](https://constructs.dev/search?q=codetest)
+- Use the automatically generated [L1](https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_l1_using) constructs, in the same way you would use [the CloudFormation AWS::CodeTest resources](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_CodeTest.html) directly.
+
+
+<!--BEGIN CFNONLY DISCLAIMER-->
+
+There are no hand-written ([L2](https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_lib)) constructs for this service yet. 
+However, you can still use the automatically generated [L1](https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_l1_using) constructs, and use this service exactly as you would using CloudFormation directly.
+
+For more information on the resources and properties available for this service, see the [CloudFormation documentation for AWS::CodeTest](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_CodeTest.html).
+
+(Read the [CDK Contributing Guide](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and submit an RFC if you are interested in contributing to this construct library.)
+
+<!--END CFNONLY DISCLAIMER-->

packages/aws-cdk-lib/aws-codetest/index.ts

@@ -0,0 +1 @@
+export * from './lib';

packages/aws-cdk-lib/aws-codetest/lib/index.ts

@@ -0,0 +1,2 @@
+// AWS::CodeTest Cloudformation Resources
+export * from './codetest.generated';

packages/aws-cdk-lib/index.ts

@@ -1,4 +1,5 @@
 export * as alexa_ask from './alexa-ask';
+export * as amzn_sdc from './amzn-sdc';
 export * as assertions from './assertions';
 export * as assets from './assets';
 export * as aws_accessanalyzer from './aws-accessanalyzer';
@@ -57,6 +58,7 @@ export * as aws_codepipeline_actions from './aws-codepipeline-actions';
 export * as aws_codestar from './aws-codestar';
 export * as aws_codestarconnections from './aws-codestarconnections';
 export * as aws_codestarnotifications from './aws-codestarnotifications';
+export * as aws_codetest from './aws-codetest';
 export * as aws_cognito from './aws-cognito';
 export * as aws_comprehend from './aws-comprehend';
 export * as aws_config from './aws-config';

packages/aws-cdk-lib/package.json

@@ -133,7 +133,7 @@
     "yaml": "1.10.2"
   },
   "devDependencies": {
-    "@aws-cdk/aws-service-spec": "^0.0.38",
+    "@aws-cdk/aws-service-spec": "^0.0.40",
     "@aws-cdk/cdk-build-tools": "0.0.0",
     "@aws-cdk/custom-resource-handlers": "0.0.0",
     "@aws-cdk/pkglint": "0.0.0",
@@ -209,6 +209,7 @@
     "./.jsii": "./.jsii",
     "./.warnings.jsii.js": "./.warnings.jsii.js",
     "./alexa-ask": "./alexa-ask/index.js",
+    "./amzn-sdc": "./amzn-sdc/index.js",
     "./assertions": "./assertions/index.js",
     "./assertions/lib/helpers-internal": "./assertions/lib/helpers-internal/index.js",
     "./assets": "./assets/index.js",
@@ -268,6 +269,7 @@
     "./aws-codestar": "./aws-codestar/index.js",
     "./aws-codestarconnections": "./aws-codestarconnections/index.js",
     "./aws-codestarnotifications": "./aws-codestarnotifications/index.js",
+    "./aws-codetest": "./aws-codetest/index.js",
     "./aws-cognito": "./aws-cognito/index.js",
     "./aws-comprehend": "./aws-comprehend/index.js",
     "./aws-config": "./aws-config/index.js",

packages/aws-cdk-lib/scripts/scope-map.json

@@ -2,6 +2,9 @@
   "alexa-ask": [
     "Alexa::ASK"
   ],
+  "amzn-sdc": [
+    "AMZN::SDC"
+  ],
   "aws-accessanalyzer": [
     "AWS::AccessAnalyzer"
   ],
@@ -146,6 +149,9 @@
   "aws-codestarnotifications": [
     "AWS::CodeStarNotifications"
   ],
+  "aws-codetest": [
+    "AWS::CodeTest"
+  ],
   "aws-cognito": [
     "AWS::Cognito"
   ],

tools/@aws-cdk/spec2cdk/package.json

@@ -32,9 +32,9 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-cdk/aws-service-spec": "^0.0.38",
+    "@aws-cdk/aws-service-spec": "^0.0.40",
     "@aws-cdk/service-spec-importers": "^0.0.14",
-    "@aws-cdk/service-spec-types": "^0.0.38",
+    "@aws-cdk/service-spec-types": "^0.0.40",
     "@cdklabs/tskb": "^0.0.3",
     "@cdklabs/typewriter": "^0.0.3",
     "camelcase": "^6",

yarn.lock

@@ -56,12 +56,12 @@
   resolved "https://registry.npmjs.org/@aws-cdk/asset-node-proxy-agent-v6/-/asset-node-proxy-agent-v6-2.0.1.tgz#6dc9b7cdb22ff622a7176141197962360c33e9ac"
   integrity sha512-DDt4SLdLOwWCjGtltH4VCST7hpOI5DzieuhGZsBpZ+AgJdSI2GCjklCXm0GCTwJG/SolkL5dtQXyUKgg9luBDg==
 
-"@aws-cdk/aws-service-spec@^0.0.38":
-  version "0.0.38"
-  resolved "https://registry.npmjs.org/@aws-cdk/aws-service-spec/-/aws-service-spec-0.0.38.tgz#bcc5fedaaec1358f3b299be7f6b60691b9d887eb"
-  integrity sha512-rnsZbD+S9RZxqQ6hhSmJEhW3iKgIkq1ztex74uYE7jFZszTIM0F1tdbnyb78RtC/+FuUwZ7FDnrXdQmWMMSsNg==
+"@aws-cdk/aws-service-spec@^0.0.40":
+  version "0.0.40"
+  resolved "https://registry.npmjs.org/@aws-cdk/aws-service-spec/-/aws-service-spec-0.0.40.tgz#f1b7cb34323b060d6ab72df456f5a92ec8346bdf"
+  integrity sha512-ujRd7lEnmwsoaHAAY04QjjzKoOHnyEcv6APSEH7airjv+rodJG6713wZOWo5su8ESaC/1SE/+cFix2mKtpcz1Q==
   dependencies:
-    "@aws-cdk/service-spec-types" "^0.0.38"
+    "@aws-cdk/service-spec-types" "^0.0.40"
     "@cdklabs/tskb" "^0.0.3"
 
 "@aws-cdk/lambda-layer-kubectl-v24@^2.0.242":
@@ -92,6 +92,13 @@
   dependencies:
     "@cdklabs/tskb" "^0.0.3"
 
+"@aws-cdk/service-spec-types@^0.0.40":
+  version "0.0.40"
+  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-types/-/service-spec-types-0.0.40.tgz#348f67da375fbed4538f3dcbefae6f5458662b37"
+  integrity sha512-+UWCCRQ5CtkLVaiJMCdG+r/0ifHo/YIE2u0hhD731Ud1iO99cMEzulzMztfBXxNdX4ySNq9WthyJTFSFWWAxYw==
+  dependencies:
+    "@cdklabs/tskb" "^0.0.3"
+
 "@aws-crypto/[email protected]":
   version "3.0.0"
   resolved "https://registry.npmjs.org/@aws-crypto/crc32/-/crc32-3.0.0.tgz#07300eca214409c33e3ff769cd5697b57fdd38fa"