feat: update L1 CloudFormation resource definitions (#35256)

Updates the L1 CloudFormation resource definitions with the latest changes from `@aws-cdk/aws-service-spec`

**L1 CloudFormation resource definition changes:**
```
├[~] service aws-apigateway
│ └ resources
│    └[~]  resource AWS::ApiGateway::Deployment
│       └ types
│          └[~] type MethodSetting
│            └      - documentation: The `MethodSetting` property type configures settings for all methods in a stage.
│                   The `MethodSettings` property of the [Amazon API Gateway Deployment StageDescription](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-deployment-stagedescription.html) property type contains a list of `MethodSetting` property types.
│                   + documentation: The `MethodSetting` property type configures settings for all methods in a stage. If you modify this property type, you must create a new deployment for your API.
│                   The `MethodSettings` property of the [Amazon API Gateway Deployment StageDescription](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-deployment-stagedescription.html) property type contains a list of `MethodSetting` property types.
├[~] service aws-appintegrations
│ └ resources
│    └[~]  resource AWS::AppIntegrations::Application
│       ├ properties
│       │  ├[+] ApplicationConfig: ApplicationConfig
│       │  ├[+] IframeConfig: IframeConfig
│       │  ├[+] InitializationTimeout: integer
│       │  └[+] IsService: boolean (default=false)
│       └ types
│          ├[+]  type ApplicationConfig
│          │  ├      name: ApplicationConfig
│          │  └ properties
│          │     └ ContactHandling: ContactHandling
│          ├[+]  type ContactHandling
│          │  ├      name: ContactHandling
│          │  └ properties
│          │     └ Scope: string (required)
│          └[+]  type IframeConfig
│             ├      name: IframeConfig
│             └ properties
│                ├ Allow: Array<string>
│                └ Sandbox: Array<string>
├[~] service aws-arcregionswitch
│ └ resources
│    └[~]  resource AWS::ARCRegionSwitch::Plan
│       ├ attributes
│       │  └[+] Route53HealthChecks: Route53HealthChecks
│       └ types
│          └[+]  type Route53HealthChecks
│             ├      name: Route53HealthChecks
│             └ properties
│                ├ HealthCheckIds: Array<string>
│                ├ RecordNames: Array<string>
│                ├ Regions: Array<string>
│                └ HostedZoneIds: Array<string>
├[~] service aws-batch
│ └ resources
│    └[~]  resource AWS::Batch::JobDefinition
│       └ types
│          └[~] type RuntimePlatform
│            └ properties
│               ├ CpuArchitecture: (documentation changed)
│               └ OperatingSystemFamily: (documentation changed)
├[~] service aws-billingconductor
│ └ resources
│    └[~]  resource AWS::BillingConductor::CustomLineItem
│       └ types
│          └[~] type LineItemFilter
│            ├      - documentation: A representation of the line item filter for your custom line item. You can use line item filters to include or exclude specific resource values from the billing group's total cost. For example, if you create a custom line item and you want to filter out a value, such as Savings Plan discounts, you can update `LineItemFilter` to exclude it.
│            │      + documentation: A representation of the line item filter for your custom line item. You can use line item filters to include or exclude specific resource values from the billing group's total cost. For example, if you create a custom line item and you want to filter out a value, such as Savings Plans discounts, you can update `LineItemFilter` to exclude it.
│            └ properties
│               └ Values: (documentation changed)
├[~] service aws-cloudfront
│ └ resources
│    ├[~]  resource AWS::CloudFront::Distribution
│    │  └ types
│    │     └[~] type CustomOriginConfig
│    │       └ properties
│    │          └[+] IpAddressType: string
│    └[~]  resource AWS::CloudFront::Function
│       └ properties
│          └ Name: - string (required)
│                  + string (required, immutable)
├[~] service aws-codebuild
│ └ resources
│    └[~]  resource AWS::CodeBuild::Project
│       └ types
│          ├[~] type ProjectTriggers
│          │ └ properties
│          │    └[+] PullRequestBuildPolicy: PullRequestBuildPolicy
│          └[+]  type PullRequestBuildPolicy
│             ├      name: PullRequestBuildPolicy
│             └ properties
│                ├ RequiresCommentApproval: string (required)
│                └ ApproverRoles: Array<string>
├[~] service aws-codepipeline
│ └ resources
│    └[~]  resource AWS::CodePipeline::Webhook
│       ├ properties
│       │  └ TargetPipelineVersion: - integer (required)
│       │                           + integer
│       └ attributes
│          └ Id: (documentation changed)
├[~] service aws-connect
│ └ resources
│    ├[~]  resource AWS::Connect::PredefinedAttribute
│    │  └ properties
│    │     └ Values: - Values (required)
│    │               + Values
│    └[~]  resource AWS::Connect::User
│       └ types
│          └[~] type UserPhoneConfig
│            └ properties
│               └[+] PersistentConnection: boolean
├[~] service aws-deadline
│ └ resources
│    └[~]  resource AWS::Deadline::Fleet
│       ├ attributes
│       │  └[+] StatusMessage: string
│       └ types
│          ├[~] type ServiceManagedEc2FleetConfiguration
│          │ └ properties
│          │    └ VpcConfiguration: (documentation changed)
│          └[~] type VpcConfiguration
│            ├      - documentation: undefined
│            │      + documentation: The configuration options for a service managed fleet's VPC.
│            └ properties
│               └ ResourceConfigurationArns: (documentation changed)
├[~] service aws-dynamodb
│ └ resources
│    ├[~]  resource AWS::DynamoDB::GlobalTable
│    │  └ types
│    │     └[~] type ContributorInsightsSpecification
│    │       └ properties
│    │          └[+] Mode: string
│    └[~]  resource AWS::DynamoDB::Table
│       └ types
│          └[~] type ContributorInsightsSpecification
│            └ properties
│               └[+] Mode: string
├[~] service aws-ec2
│ └ resources
│    ├[~]  resource AWS::EC2::EC2Fleet
│    │  └ types
│    │     └[~] type Placement
│    │       └ properties
│    │          └ AvailabilityZone: (documentation changed)
│    ├[+]  resource AWS::EC2::IpPoolRouteTableAssociation
│    │  ├      name: IpPoolRouteTableAssociation
│    │  │      cloudFormationType: AWS::EC2::IpPoolRouteTableAssociation
│    │  │      documentation: Resource Type definition for AWS::EC2::IpPoolRouteTableAssociation
│    │  ├ properties
│    │  │  ├ PublicIpv4Pool: string (required, immutable)
│    │  │  └ RouteTableId: string (required, immutable)
│    │  └ attributes
│    │     └ AssociationId: string
│    ├[~]  resource AWS::EC2::LaunchTemplate
│    │  └ types
│    │     ├[~] type ElasticGpuSpecification
│    │     │ ├      - documentation: > Amazon Elastic Graphics reached end of life on January 8, 2024. 
│    │     │ │      Specifies a specification for an Elastic GPU for an Amazon EC2 launch template.
│    │     │ │      `ElasticGpuSpecification` is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html) .
│    │     │ │      + documentation: undefined
│    │     │ └ properties
│    │     │    └ Type: (documentation changed)
│    │     ├[~] type LaunchTemplateData
│    │     │ └ properties
│    │     │    ├ ElasticGpuSpecifications: (documentation changed)
│    │     │    └ ElasticInferenceAccelerators: (documentation changed)
│    │     ├[~] type LaunchTemplateElasticInferenceAccelerator
│    │     │ ├      - documentation: > Amazon Elastic Inference is no longer available. 
│    │     │ │      Specifies an elastic inference accelerator.
│    │     │ │      `LaunchTemplateElasticInferenceAccelerator` is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html) .
│    │     │ │      + documentation: undefined
│    │     │ └ properties
│    │     │    ├ Count: (documentation changed)
│    │     │    └ Type: (documentation changed)
│    │     ├[~] type NetworkInterface
│    │     │ └ properties
│    │     │    └ EnaQueueCount: (documentation changed)
│    │     └[~] type Placement
│    │       └ properties
│    │          └ AvailabilityZone: (documentation changed)
│    └[~]  resource AWS::EC2::Volume
│       └ properties
│          └ AvailabilityZone: (documentation changed)
├[~] service aws-ecs
│ └ resources
│    └[~]  resource AWS::ECS::CapacityProvider
│       └ types
│          └[~] type ManagedScaling
│            └ properties
│               └ MinimumScalingStepSize: (documentation changed)
├[~] service aws-eks
│ └ resources
│    └[~]  resource AWS::EKS::Cluster
│       └ properties
│          └ DeletionProtection: (documentation changed)
├[~] service aws-elasticloadbalancingv2
│ └ resources
│    └[~]  resource AWS::ElasticLoadBalancingV2::LoadBalancer
│       └ types
│          └[~] type LoadBalancerAttribute
│            └ properties
│               └ Key: (documentation changed)
├[~] service aws-gameliftstreams
│ └ resources
│    ├[~]  resource AWS::GameLiftStreams::Application
│    │  └ types
│    │     └[~] type RuntimeEnvironment
│    │       └      - documentation: Configuration settings that identify the operating system for an application resource. This can also include a compatibility layer and other drivers.
│    │              A runtime environment can be one of the following:
│    │              - For Linux applications
│    │              - Ubuntu 22.04 LTS ( `Type=UBUNTU, Version=22_04_LTS` )
│    │              - For Windows applications
│    │              - Microsoft Windows Server 2022 Base ( `Type=WINDOWS, Version=2022` )
│    │              - Proton 8.0-5 ( `Type=PROTON, Version=20241007` )
│    │              - Proton 8.0-2c ( `Type=PROTON, Version=20230704` )
│    │              + documentation: Configuration settings that identify the operating system for an application resource. This can also include a compatibility layer and other drivers.
│    │              A runtime environment can be one of the following:
│    │              - For Linux applications
│    │              - Ubuntu 22.04 LTS ( `Type=UBUNTU, Version=22_04_LTS` )
│    │              - For Windows applications
│    │              - Microsoft Windows Server 2022 Base ( `Type=WINDOWS, Version=2022` )
│    │              - Proton 9.0-2 ( `Type=PROTON, Version=20250516` )
│    │              - Proton 8.0-5 ( `Type=PROTON, Version=20241007` )
│    │              - Proton 8.0-2c ( `Type=PROTON, Version=20230704` )
│    └[~]  resource AWS::GameLiftStreams::StreamGroup
│       ├      - documentation: The `AWS::GameLiftStreams::StreamGroup` resource defines a group of compute resources that will be running and streaming your game. When you create a stream group, you specify the hardware configuration (CPU, GPU, RAM) that will run your game (known as the *stream class* ), the geographical locations where your game can run, and the number of streams that can run simultaneously in each location (known as *stream capacity* ). Stream groups manage how Amazon GameLift Streams allocates resources and handles concurrent streams, allowing you to effectively manage capacity and costs.
│       │      There are two types of stream capacity: always-on and on-demand.
│       │      - *Always-on* : The streaming capacity that is allocated and ready to handle stream requests without delay. You pay for this capacity whether it's in use or not. Best for quickest time from streaming request to streaming session.
│       │      - *On-demand* : The streaming capacity that Amazon GameLift Streams can allocate in response to stream requests, and then de-allocate when the session has terminated. This offers a cost control measure at the expense of a greater startup time (typically under 5 minutes).
│       │      > Application association is not currently supported in AWS CloudFormation . To link additional applications to a stream group, use the Amazon GameLift Streams console or the AWS CLI .
│       │      + documentation: The `AWS::GameLiftStreams::StreamGroup` resource defines a group of compute resources that will be running and streaming your game. When you create a stream group, you specify the hardware configuration (CPU, GPU, RAM) that will run your game (known as the *stream class* ), the geographical locations where your game can run, and the number of streams that can run simultaneously in each location (known as *stream capacity* ). Stream groups manage how Amazon GameLift Streams allocates resources and handles concurrent streams, allowing you to effectively manage capacity and costs.
│       │      There are two types of stream capacity: always-on and on-demand.
│       │      - *Always-on* : The streaming capacity that is allocated and ready to handle stream requests without delay. You pay for this capacity whether it's in use or not. Best for quickest time from streaming request to streaming session. Default is 1 when creating a stream group or adding a location.
│       │      - *On-demand* : The streaming capacity that Amazon GameLift Streams can allocate in response to stream requests, and then de-allocate when the session has terminated. This offers a cost control measure at the expense of a greater startup time (typically under 5 minutes). Default is 0 when creating a stream group or adding a location.
│       │      > Application association is not currently supported in AWS CloudFormation . To link additional applications to a stream group, use the Amazon GameLift Streams console or the AWS CLI .
│       └ types
│          └[~] type LocationConfiguration
│            └ properties
│               ├ AlwaysOnCapacity: (documentation changed)
│               └ OnDemandCapacity: (documentation changed)
├[~] service aws-glue
│ └ resources
│    └[~]  resource AWS::Glue::Job
│       └ properties
│          └ WorkerType: (documentation changed)
├[~] service aws-guardduty
│ └ resources
│    ├[+]  resource AWS::GuardDuty::ThreatEntitySet
│    │  ├      name: ThreatEntitySet
│    │  │      cloudFormationType: AWS::GuardDuty::ThreatEntitySet
│    │  │      documentation: Resource Type definition for AWS::GuardDuty::ThreatEntitySet
│    │  │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │  ├ properties
│    │  │  ├ Format: string (required, immutable)
│    │  │  ├ Activate: boolean
│    │  │  ├ DetectorId: string (immutable)
│    │  │  ├ Name: string
│    │  │  ├ Location: string (required)
│    │  │  ├ ExpectedBucketOwner: string
│    │  │  └ Tags: Array<TagItem>
│    │  ├ attributes
│    │  │  ├ Id: string
│    │  │  ├ Status: string
│    │  │  ├ CreatedAt: string
│    │  │  ├ UpdatedAt: string
│    │  │  └ ErrorDetails: string
│    │  └ types
│    │     └ type TagItem
│    │       ├      name: TagItem
│    │       └ properties
│    │          ├ Key: string (required)
│    │          └ Value: string (required)
│    └[+]  resource AWS::GuardDuty::TrustedEntitySet
│       ├      name: TrustedEntitySet
│       │      cloudFormationType: AWS::GuardDuty::TrustedEntitySet
│       │      documentation: Resource Type definition for AWS::GuardDuty::TrustedEntitySet
│       │      tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│       ├ properties
│       │  ├ Format: string (required, immutable)
│       │  ├ Activate: boolean
│       │  ├ DetectorId: string (immutable)
│       │  ├ Name: string
│       │  ├ Location: string (required)
│       │  ├ ExpectedBucketOwner: string
│       │  └ Tags: Array<TagItem>
│       ├ attributes
│       │  ├ Id: string
│       │  ├ Status: string
│       │  ├ CreatedAt: string
│       │  ├ UpdatedAt: string
│       │  └ ErrorDetails: string
│       └ types
│          └ type TagItem
│            ├      name: TagItem
│            └ properties
│               ├ Key: string (required)
│               └ Value: string (required)
├[~] service aws-imagebuilder
│ └ resources
│    ├[~]  resource AWS::ImageBuilder::Component
│    │  └ properties
│    │     └ KmsKeyId: (documentation changed)
│    ├[~]  resource AWS::ImageBuilder::ContainerRecipe
│    │  ├ properties
│    │  │  └ KmsKeyId: (documentation changed)
│    │  └ types
│    │     └[~] type EbsInstanceBlockDeviceSpecification
│    │       └ properties
│    │          └ KmsKeyId: (documentation changed)
│    ├[~]  resource AWS::ImageBuilder::DistributionConfiguration
│    │  └ types
│    │     └[~] type AmiDistributionConfiguration
│    │       └ properties
│    │          └ KmsKeyId: (documentation changed)
│    ├[~]  resource AWS::ImageBuilder::ImageRecipe
│    │  └ types
│    │     ├[~] type EbsInstanceBlockDeviceSpecification
│    │     │ └ properties
│    │     │    └ KmsKeyId: (documentation changed)
│    │     └[~] type SystemsManagerAgent
│    │       └ properties
│    │          └ UninstallAfterBuild: (documentation changed)
│    └[~]  resource AWS::ImageBuilder::Workflow
│       └ properties
│          └ KmsKeyId: (documentation changed)
├[~] service aws-inspectorv2
│ └ resources
│    ├[+]  resource AWS::InspectorV2::CodeSecurityIntegration
│    │  ├      name: CodeSecurityIntegration
│    │  │      cloudFormationType: AWS::InspectorV2::CodeSecurityIntegration
│    │  │      documentation: Inspector CodeSecurityIntegration resource schema
│    │  │      tagInformation: {"tagPropertyName":"Tags","variant":"map"}
│    │  ├ properties
│    │  │  ├ Name: string
│    │  │  ├ Type: string
│    │  │  ├ CreateIntegrationDetails: CreateDetails (immutable)
│    │  │  ├ UpdateIntegrationDetails: UpdateDetails
│    │  │  └ Tags: Map<string, string> (immutable)
│    │  ├ attributes
│    │  │  ├ Arn: string
│    │  │  ├ Status: string
│    │  │  ├ StatusReason: string
│    │  │  ├ AuthorizationUrl: string
│    │  │  ├ CreatedAt: string
│    │  │  └ LastUpdatedAt: string
│    │  └ types
│    │     ├ type CreateDetails
│    │     │ ├      name: CreateDetails
│    │     │ └ properties
│    │     │    └ gitlabSelfManaged: CreateGitLabSelfManagedIntegrationDetail (required)
│    │     ├ type CreateGitLabSelfManagedIntegrationDetail
│    │     │ ├      name: CreateGitLabSelfManagedIntegrationDetail
│    │     │ └ properties
│    │     │    ├ instanceUrl: string (required)
│    │     │    └ accessToken: string (required)
│    │     ├ type UpdateDetails
│    │     │ ├      name: UpdateDetails
│    │     │ └ properties
│    │     │    ├ gitlabSelfManaged: UpdateGitLabSelfManagedIntegrationDetail
│    │     │    └ github: UpdateGitHubIntegrationDetail
│    │     ├ type UpdateGitHubIntegrationDetail
│    │     │ ├      name: UpdateGitHubIntegrationDetail
│    │     │ └ properties
│    │     │    ├ code: string (required)
│    │     │    └ installationId: string (required)
│    │     └ type UpdateGitLabSelfManagedIntegrationDetail
│    │       ├      name: UpdateGitLabSelfManagedIntegrationDetail
│    │       └ properties
│    │          └ authCode: string (required)
│    └[+]  resource AWS::InspectorV2::CodeSecurityScanConfiguration
│       ├      name: CodeSecurityScanConfiguration
│       │      cloudFormationType: AWS::InspectorV2::CodeSecurityScanConfiguration
│       │      documentation: Inspector CodeSecurityScanConfiguration resource schema
│       │      tagInformation: {"tagPropertyName":"Tags","variant":"map"}
│       ├ properties
│       │  ├ Name: string (immutable)
│       │  ├ Level: string (immutable)
│       │  ├ Configuration: CodeSecurityScanConfiguration
│       │  ├ ScopeSettings: ScopeSettings (immutable)
│       │  └ Tags: Map<string, string> (immutable)
│       ├ attributes
│       │  └ Arn: string
│       └ types
│          ├ type CodeSecurityScanConfiguration
│          │ ├      name: CodeSecurityScanConfiguration
│          │ └ properties
│          │    ├ periodicScanConfiguration: PeriodicScanConfiguration
│          │    ├ continuousIntegrationScanConfiguration: ContinuousIntegrationScanConfiguration
│          │    └ ruleSetCategories: Array<string> (required)
│          ├ type ContinuousIntegrationScanConfiguration
│          │ ├      name: ContinuousIntegrationScanConfiguration
│          │ └ properties
│          │    └ supportedEvents: Array<string> (required)
│          ├ type PeriodicScanConfiguration
│          │ ├      name: PeriodicScanConfiguration
│          │ └ properties
│          │    ├ frequency: string
│          │    └ frequencyExpression: string
│          └ type ScopeSettings
│            ├      name: ScopeSettings
│            └ properties
│               └ projectSelectionScope: string
├[~] service aws-ivs
│ └ resources
│    └[~]  resource AWS::IVS::Stage
│       └ types
│          └[~] type ThumbnailConfiguration
│            └      - documentation: A complex type that allows you to enable/disable the recording of thumbnails for individual participant recording and modify the interval at which thumbnails are generated for the live session.
│                   + documentation: An object representing a configuration of thumbnails for recorded video.
├[~] service aws-omics
│ └ resources
│    └[~]  resource AWS::Omics::WorkflowVersion
│       └      - documentation: Creates a new workflow version for the workflow that you specify with the `workflowId` parameter.
│              When you create a new version of a workflow, you need to specify the configuration for the new version. It doesn't inherit any configuration values from the workflow.
│              Provide a version name that is unique for this workflow. You cannot change the name after HealthOmics creates the version.
│              > Don’t include any personally identifiable information (PII) in the version name. Version names appear in the workflow version ARN. 
│              For more information, see [Workflow versioning in AWS HealthOmics](https://docs.aws.amazon.com/omics/latest/dev/workflow-versions.html) in the *AWS HealthOmics User Guide* .
│              + documentation: Creates a new workflow version for the workflow that you specify with the `workflowId` parameter.
│              When you create a new version of a workflow, you need to specify the configuration for the new version. It doesn't inherit any configuration values from the workflow.
│              Provide a version name that is unique for this workflow. You cannot change the name after HealthOmics creates the version.
│              > Don't include any personally identifiable information (PII) in the version name. Version names appear in the workflow version ARN. 
│              For more information, see [Workflow versioning in AWS HealthOmics](https://docs.aws.amazon.com/omics/latest/dev/workflow-versions.html) in the *AWS HealthOmics User Guide* .
├[~] service aws-opensearchservice
│ └ resources
│    └[~]  resource AWS::OpenSearchService::Domain
│       └ types
│          ├[~] type AdvancedSecurityOptionsInput
│          │ └ properties
│          │    └[+] IAMFederationOptions: IAMFederationOptions
│          └[+]  type IAMFederationOptions
│             ├      name: IAMFederationOptions
│             └ properties
│                ├ Enabled: boolean
│                ├ RolesKey: string
│                └ SubjectKey: string
├[~] service aws-pcs
│ └ resources
│    ├[~]  resource AWS::PCS::Cluster
│    │  └ types
│    │     ├[~] type Endpoint
│    │     │ └ properties
│    │     │    ├ Ipv6Address: (documentation changed)
│    │     │    └ PrivateIpAddress: (documentation changed)
│    │     └[~] type Networking
│    │       ├      - documentation: TThe networking configuration for the cluster's control plane.
│    │       │      + documentation: The networking configuration for the cluster's control plane.
│    │       └ properties
│    │          └ NetworkType: (documentation changed)
│    └[~]  resource AWS::PCS::Queue
│       └ types
│          └[~] type ErrorInfo
│            └ properties
│               └ Message: (documentation changed)
├[~] service aws-quicksight
│ └ resources
│    └[~]  resource AWS::QuickSight::DataSet
│       └ types
│          ├[~] type CastColumnTypeOperation
│          │ └ properties
│          │    └ ColumnName: - string (required)
│          │                  + string
│          ├[~] type FilterOperation
│          │ └ properties
│          │    └ ConditionExpression: - string (required)
│          │                           + string
│          ├[~] type ProjectOperation
│          │ └ properties
│          │    └ ProjectedColumns: - Array<string> (required)
│          │                        + Array<string>
│          ├[~] type RenameColumnOperation
│          │ └ properties
│          │    └ ColumnName: - string (required)
│          │                  + string
│          ├[~] type RowLevelPermissionTagRule
│          │ └ properties
│          │    └ ColumnName: - string (required)
│          │                  + string
│          └[~] type UniqueKey
│            └ properties
│               └ ColumnNames: - Array<string> (required)
│                              + Array<string>
├[~] service aws-rds
│ └ resources
│    ├[~]  resource AWS::RDS::DBInstance
│    │  └ properties
│    │     └[-] StatusInfos: Array<DBInstanceStatusInfo>
│    └[~]  resource AWS::RDS::DBProxy
│       └ properties
│          └ DebugLogging: (documentation changed)
├[~] service aws-s3express
│ └ resources
│    └[~]  resource AWS::S3Express::AccessPoint
│       └ properties
│          └ Tags: (documentation changed)
├[~] service aws-s3tables
│ └ resources
│    ├[~]  resource AWS::S3Tables::TableBucketPolicy
│    │  └      - documentation: Creates a new maintenance configuration or replaces an existing table bucket policy for a table bucket. For more information, see [Adding a table bucket policy](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables-bucket-policy.html#table-bucket-policy-add) in the *Amazon Simple Storage Service User Guide* .
│    │         - **Permissions** - You must have the `s3tables:PutTableBucketPolicy` permission to use this operation.
│    │         + documentation: Creates a new table bucket policy or replaces an existing table bucket policy for a table bucket. For more information, see [Adding a table bucket policy](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables-bucket-policy.html#table-bucket-policy-add) in the *Amazon Simple Storage Service User Guide* .
│    │         - **Permissions** - You must have the `s3tables:PutTableBucketPolicy` permission to use this operation.
│    └[~]  resource AWS::S3Tables::TablePolicy
│       └      - documentation: Creates a new maintenance configuration or replaces an existing table policy for a table. For more information, see [Adding a table policy](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables-table-policy.html#table-policy-add) in the *Amazon Simple Storage Service User Guide* .
│              - **Permissions** - You must have the `s3tables:PutTablePolicy` permission to use this operation.
│              + documentation: Creates a new table policy or replaces an existing table policy for a table. For more information, see [Adding a table policy](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables-table-policy.html#table-policy-add) in the *Amazon Simple Storage Service User Guide* .
│              - **Permissions** - You must have the `s3tables:PutTablePolicy` permission to use this operation.
├[~] service aws-sagemaker
│ └ resources
│    ├[~]  resource AWS::SageMaker::Cluster
│    │  ├ properties
│    │  │  └[+] NodeProvisioningMode: string
│    │  └ types
│    │     └[~] type ClusterInstanceGroup
│    │       └ properties
│    │          └[+] ImageId: string
│    └[~]  resource AWS::SageMaker::Domain
│       └ types
│          └[~] type UnifiedStudioSettings
│            └ properties
│               └[-] SingleSignOnApplicationArn: string
├[~] service aws-sqs
│ └ resources
│    └[~]  resource AWS::SQS::Queue
│       └ properties
│          └ MaximumMessageSize: (documentation changed)
└[~] service aws-synthetics
  └ resources
     └[~]  resource AWS::Synthetics::Canary
        └ types
           ├[~] type Code
           │ └ properties
           │    └[+] Dependencies: Array<Dependency>
           └[+]  type Dependency
              ├      name: Dependency
              └ properties
                 ├ Type: string
                 └ Reference: string (required)
```

CHANGES TO L1 RESOURCES: L1 resources are automatically generated from public CloudFormation Resource Schemas. They are build to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:
* **aws-rds**: AWS::RDS::DBInstance:`StatusInfos` property is removed.
* **aws-sagemaker**: AWS::SageMaker::Domain: `SingleSignOnApplicationArn` property is removed.
* **aws-cloudfront**: AWS::CloudFront::Function: `Name` property is now set as immutable.

Author: aws-cdk-automation

packages/aws-cdk-lib/package.json

@@ -136,7 +136,7 @@
   },
   "devDependencies": {
     "@aws-cdk/lambda-layer-kubectl-v31": "^2.1.0",
-    "@aws-cdk/aws-service-spec": "^0.1.91",
+    "@aws-cdk/aws-service-spec": "^0.1.92",
     "@aws-cdk/cdk-build-tools": "0.0.0",
     "@aws-cdk/custom-resource-handlers": "0.0.0",
     "@aws-cdk/pkglint": "0.0.0",

tools/@aws-cdk/spec2cdk/package.json

@@ -32,9 +32,9 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-cdk/aws-service-spec": "^0.1.91",
+    "@aws-cdk/aws-service-spec": "^0.1.92",
     "@aws-cdk/service-spec-importers": "^0.0.82",
-    "@aws-cdk/service-spec-types": "^0.0.157",
+    "@aws-cdk/service-spec-types": "^0.0.158",
     "@cdklabs/tskb": "^0.0.3",
     "@cdklabs/typewriter": "^0.0.5",
     "camelcase": "^6",

yarn.lock

@@ -66,12 +66,12 @@
     "@aws-cdk/service-spec-types" "^0.0.156"
     "@cdklabs/tskb" "^0.0.3"
 
-"@aws-cdk/aws-service-spec@^0.1.91":
-  version "0.1.91"
-  resolved "https://registry.npmjs.org/@aws-cdk/aws-service-spec/-/aws-service-spec-0.1.91.tgz#5bb1e5f01054ca9f6a591d91ba9857b9e2beb672"
-  integrity sha512-G1AmMjOhWJ22OLYDhY+HM1yLvbvO6X59hkPR+ifru2ndQa7pIGzxivkHwL6CEQwTpoClPiMFvFzFAt9TA/KKkA==
+"@aws-cdk/aws-service-spec@^0.1.92":
+  version "0.1.92"
+  resolved "https://registry.npmjs.org/@aws-cdk/aws-service-spec/-/aws-service-spec-0.1.92.tgz#6027fc1ef4e957b2fc3bad0a229601581ff65883"
+  integrity sha512-raGRpbQ6F55jTiTta3DVYMX8rkl2HGYFxtkpe6P6ppGjweNz8w1HgiF6iHeA/asjZNf9CccGYzg+jybJSxRAsA==
   dependencies:
-    "@aws-cdk/service-spec-types" "^0.0.157"
+    "@aws-cdk/service-spec-types" "^0.0.158"
     "@cdklabs/tskb" "^0.0.3"
 
 "@aws-cdk/cloud-assembly-schema@^48.3.0":
@@ -152,10 +152,10 @@
   dependencies:
     "@cdklabs/tskb" "^0.0.3"
 
-"@aws-cdk/service-spec-types@^0.0.157":
-  version "0.0.157"
-  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-types/-/service-spec-types-0.0.157.tgz#6360b3736ce31e7f5ec95aa9b68b4cf29181c44c"
-  integrity sha512-RJ00+KIOzaN8wxo8q8NSeJnGCNvKGXLMa0OhCPplnPTJOZ5BBwPCYD+MqiUO1UxqQ4kpAvJRqHLPO7oP79sS1w==
+"@aws-cdk/service-spec-types@^0.0.158":
+  version "0.0.158"
+  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-types/-/service-spec-types-0.0.158.tgz#f2caa73cb5383f613dc4d297ce4393db8fad9df9"
+  integrity sha512-bWloZVh9AbLCJpNtWf4jBx9vMfMX7RW37nlWeidZ3i8emgPHsNQ0ytqR3RQ2RMYs1BRta1prexdd2MOL2Pww9Q==
   dependencies:
     "@cdklabs/tskb" "^0.0.3"