Update CloudFormation schemas to 2025-08-29

Author: kddejong

docs/rules.md

@@ -46,7 +46,7 @@ To include these rules, use the `-e/include-experimental` argument when running
 ## Rules
 (_This documentation is generated by running `cfn-lint --update-documentation`, do not alter this manually_)
 
-The following **264** rules are applied by this linter:
+The following **263** rules are applied by this linter:
 
 | Rule ID  | Title | Description | Config<br />(Name:Type:Default) | Source | Tags |
 | -------- | ----- | ----------- | ---------- | ------ | ---- |
@@ -161,7 +161,6 @@ The following **264** rules are applied by this linter:
 | [E3053<a name="E3053"></a>](../src/cfnlint/rules/resources/ecs/TaskDefinitionAwsVpc.py) | Validate ECS task definition is has correct values for 'HostPort' | The 'HostPort' must either be undefined or equal to the 'ContainerPort' value |  | [Source]() | `resources`,`ecs` |
 | [E3054<a name="E3054"></a>](../src/cfnlint/rules/resources/ecs/ServiceFargate.py) | Validate ECS service using Fargate uses TaskDefinition that allows Fargate | When using an ECS service with 'LaunchType' of 'FARGATE' the associated task definition must have 'RequiresCompatibilities' specified with 'FARGATE' listed |  | [Source]() | `resources`,`ecs` |
 | [E3055<a name="E3055"></a>](../src/cfnlint/rules/resources/CreationPolicy.py) | Check CreationPolicy values for Resources | Check that the CreationPolicy values are valid |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-creationpolicy.html) | `resources`,`creationPolicy` |
-| [E3056<a name="E3056"></a>](../src/cfnlint/rules/resources/ecs/ServiceHealthCheckGracePeriodSeconds.py) | ECS service using HealthCheckGracePeriodSeconds must also have LoadBalancers specified | When using a HealthCheckGracePeriodSeconds on an ECS service, the service must also have a LoadBalancers specified with at least one LoadBalancer in the array. |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-service.html#cfn-ecs-service-healthcheckgraceperiodseconds) | `properties`,`ecs`,`service`,`container` |
 | [E3057<a name="E3057"></a>](../src/cfnlint/rules/resources/cloudfront/DistributionTargetOriginId.py) | Validate that CloudFront TargetOriginId is a specified Origin | CloudFront TargetOriginId has to map to an Origin Id that is in the same DistributionConfig |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-defaultcachebehavior.html#cfn-cloudfront-distribution-defaultcachebehavior-targetoriginid) | `properties`,`cloudfront` |
 | [E3058<a name="E3058"></a>](../src/cfnlint/rules/resources/properties/RequiredOr.py) | Validate at least one of the properties are required | Make sure at least one of the resource properties are included |  | [Source](https://github.com/aws-cloudformation/cfn-lint/blob/main/docs/cfn-schema-specification.md#requiredor) | `resources` |
 | [E3059<a name="E3059"></a>](../src/cfnlint/rules/resources/ectwo/VpcSubnetCidr.py) | Validate subnet CIDRs are within the CIDRs of the VPC | When specifying subnet CIDRs for a VPC the subnet CIDRs most be within the VPC CIDRs |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-subnet.html) | `resources`,`ec2`,`vpc`,`subnet` |

src/cfnlint/data/AdditionalSpecs/Policies.json

@@ -27244,6 +27244,11 @@
     ]
    },
    "describeadassessment": {},
+   "describecaenrollmentpolicy": {
+    "Resources": [
+     "directory"
+    ]
+   },
    "describecertificate": {
     "Resources": [
      "directory"
@@ -27307,6 +27312,11 @@
      "directory"
     ]
    },
+   "disablecaenrollmentpolicy": {
+    "Resources": [
+     "directory"
+    ]
+   },
    "disableclientauthentication": {
     "Resources": [
      "directory"
@@ -27337,6 +27347,11 @@
      "directory"
     ]
    },
+   "enablecaenrollmentpolicy": {
+    "Resources": [
+     "directory"
+    ]
+   },
    "enableclientauthentication": {
     "Resources": [
      "directory"
@@ -28312,6 +28327,7 @@
    "associateroutetable": {
     "Resources": [
      "internet-gateway",
+     "ipv4pool-ec2",
      "route-table",
      "subnet",
      "vpn-gateway"
@@ -28585,6 +28601,12 @@
      "snapshot"
     ]
    },
+   "createimageusagereport": {
+    "Resources": [
+     "image",
+     "image-usage-report"
+    ]
+   },
    "createinstanceconnectendpoint": {
     "Resources": [
      "instance-connect-endpoint",
@@ -28868,6 +28890,7 @@
      "fpga-image",
      "host-reservation",
      "image",
+     "image-usage-report",
      "import-image-task",
      "import-snapshot-task",
      "instance",
@@ -29187,6 +29210,11 @@
      "fpga-image"
     ]
    },
+   "deleteimageusagereport": {
+    "Resources": [
+     "image-usage-report"
+    ]
+   },
    "deleteinstanceconnectendpoint": {
     "Resources": [
      "instance-connect-endpoint"
@@ -29413,6 +29441,7 @@
      "fpga-image",
      "host-reservation",
      "image",
+     "image-usage-report",
      "import-image-task",
      "import-snapshot-task",
      "instance",
@@ -29753,7 +29782,10 @@
      "image"
     ]
    },
+   "describeimagereferences": {},
    "describeimages": {},
+   "describeimageusagereportentries": {},
+   "describeimageusagereports": {},
    "describeimportimagetasks": {},
    "describeimportsnapshottasks": {},
    "describeinstanceattribute": {
@@ -30542,6 +30574,12 @@
      "instance"
     ]
    },
+   "modifyinstanceconnectendpoint": {
+    "Resources": [
+     "instance-connect-endpoint",
+     "security-group"
+    ]
+   },
    "modifyinstancecpuoptions": {
     "Resources": [
      "instance"
@@ -31546,6 +31584,18 @@
      "ec2:RootDeviceType"
     ]
    },
+   "image-usage-report": {
+    "ARNFormats": [
+     "arn:${Partition}:ec2:${Region}:${Account}:image-usage-report/.*"
+    ],
+    "ConditionKeys": [
+     "aws:RequestTag/${TagKey}",
+     "aws:ResourceTag/${TagKey}",
+     "aws:TagKeys",
+     "ec2:Region",
+     "ec2:ResourceTag/${TagKey}"
+    ]
+   },
    "import-image-task": {
     "ARNFormats": [
      "arn:${Partition}:ec2:${Region}:${Account}:import-image-task/.*"
@@ -31581,6 +31631,7 @@
      "ec2:Attribute",
      "ec2:Attribute/${AttributeName}",
      "ec2:AvailabilityZone",
+     "ec2:AvailabilityZoneId",
      "ec2:CpuOptionsAmdSevSnp",
      "ec2:EbsOptimized",
      "ec2:InstanceAutoRecovery",
@@ -32204,6 +32255,7 @@
      "ec2:Attribute",
      "ec2:Attribute/${AttributeName}",
      "ec2:AvailabilityZone",
+     "ec2:AvailabilityZoneId",
      "ec2:Ipv4IpamPoolId",
      "ec2:Ipv6IpamPoolId",
      "ec2:IsLaunchTemplateResource",
@@ -32467,6 +32519,7 @@
      "ec2:Attribute",
      "ec2:Attribute/${AttributeName}",
      "ec2:AvailabilityZone",
+     "ec2:AvailabilityZoneId",
      "ec2:Encrypted",
      "ec2:IsLaunchTemplateResource",
      "ec2:KmsKeyId",
@@ -33533,6 +33586,11 @@
      "cluster"
     ]
    },
+   "describeinsightsrefresh": {
+    "Resources": [
+     "cluster"
+    ]
+   },
    "describenodegroup": {
     "Resources": [
      "nodegroup"
@@ -33632,6 +33690,11 @@
     ]
    },
    "registercluster": {},
+   "startinsightsrefresh": {
+    "Resources": [
+     "cluster"
+    ]
+   },
    "tagresource": {
     "Resources": [
      "access-entry",
@@ -62259,12 +62322,22 @@
      "graph"
     ]
    },
+   "startgraph": {
+    "Resources": [
+     "graph"
+    ]
+   },
    "startimporttask": {
     "Resources": [
      "graph",
      "import-task"
     ]
    },
+   "stopgraph": {
+    "Resources": [
+     "graph"
+    ]
+   },
    "tagresource": {
     "Resources": [
      "graph",
@@ -87308,6 +87381,7 @@
      "component"
     ]
    },
+   "getconfigurationcheckoperation": {},
    "getdatabase": {},
    "getoperation": {},
    "getresourcepermission": {},
@@ -87317,9 +87391,13 @@
      "application"
     ]
    },
+   "listconfigurationcheckdefinitions": {},
+   "listconfigurationcheckoperations": {},
    "listdatabases": {},
    "listoperationevents": {},
    "listoperations": {},
+   "listsubcheckresults": {},
+   "listsubcheckruleresults": {},
    "listtagsforresource": {},
    "putresourcepermission": {},
    "registerapplication": {},
@@ -87334,6 +87412,7 @@
      "application"
     ]
    },
+   "startconfigurationchecks": {},
    "stopapplication": {
     "Resources": [
      "application"

src/cfnlint/data/DownloadsMetadata/123ba181485ae293d5bd09722af0c19d5a0d14c62111ff864923fc7b7960dda6.meta.json

@@ -1 +1 @@
-{"etag": "\"3b9f93ab6453ddb4219ad23b34fbc9ab\"", "url": "https://schema.cloudformation.eu-south-1.amazonaws.com/CloudformationSchema.zip"}
+{"etag": "\"d7815cc61c4c84b0edf994b0a99f089c\"", "url": "https://schema.cloudformation.eu-south-1.amazonaws.com/CloudformationSchema.zip"}

src/cfnlint/data/DownloadsMetadata/164e1bfc2823fbd49d8d0e7163ebf32b2b6653d7edfe98a64577daae0b481c38.meta.json

@@ -1 +1 @@
-{"etag": "\"e66aff2bff4925f684af73ab6d764771\"", "url": "https://schema.cloudformation.cn-north-1.amazonaws.com.cn/CloudformationSchema.zip"}
+{"etag": "\"da95b2646f071705d2ab2b40605b30a4\"", "url": "https://schema.cloudformation.cn-north-1.amazonaws.com.cn/CloudformationSchema.zip"}

src/cfnlint/data/DownloadsMetadata/18624fcc4a1c571691d10b2508e6be565e4752bbc10d9552de8df8f81348c42b.meta.json

@@ -1 +1 @@
-{"etag": "\"38dbf791f62f8c4cf07461b4049f3fa5\"", "url": "https://schema.cloudformation.us-gov-east-1.amazonaws.com/CloudformationSchema.zip"}
+{"etag": "\"65db0e36b53099264a2a0073041d6acb\"", "url": "https://schema.cloudformation.us-gov-east-1.amazonaws.com/CloudformationSchema.zip"}

src/cfnlint/data/DownloadsMetadata/227d6e59c86482f7153466759080e65963a1bf4413531ad420ff60a5a0d7965d.meta.json

@@ -1 +1 @@
-{"etag": "\"f4934804ab4ce6872483e9bf26e0907c\"", "url": "https://schema.cloudformation.me-south-1.amazonaws.com/CloudformationSchema.zip"}
+{"etag": "\"004ba0194dd9d2fc54470b42b0d230e5\"", "url": "https://schema.cloudformation.me-south-1.amazonaws.com/CloudformationSchema.zip"}

src/cfnlint/data/DownloadsMetadata/23be708e675cb6098b08969e4dbbc3f54cfc32461d10e077e7e5de1fc25d8b8f.meta.json

@@ -1 +1 @@
-{"etag": "\"0e98e0a5218e1b21035cedd01b94adf4\"", "url": "https://schema.cloudformation.us-gov-west-1.amazonaws.com/CloudformationSchema.zip"}
+{"etag": "\"df76ec8e420244a4d4f203641f884ba2\"", "url": "https://schema.cloudformation.us-gov-west-1.amazonaws.com/CloudformationSchema.zip"}

src/cfnlint/data/DownloadsMetadata/26cf4521b683d3267844178a6bcd1d0ad3fe2e7838c23f6acd054944cb2b1618.meta.json

@@ -1 +1 @@
-{"etag": "\"24ae3f33274dd07c01453a710952b62e\"", "url": "https://schema.cloudformation.me-central-1.amazonaws.com/CloudformationSchema.zip"}
+{"etag": "\"388289af6049b87c4fc3a92359fd214c\"", "url": "https://schema.cloudformation.me-central-1.amazonaws.com/CloudformationSchema.zip"}

src/cfnlint/data/DownloadsMetadata/276cecfeb1ec5e608e2aaa06925a2da57e9907e4a512c10ddae70b98b4dada43.meta.json

@@ -1 +1 @@
-{"etag": "\"8a02f9793bb1a1c01f5c91400fe48a64\"", "url": "https://schema.cloudformation.eu-west-2.amazonaws.com/CloudformationSchema.zip"}
+{"etag": "\"a0a36e36c9e8b8fbaa670a1587de7df0\"", "url": "https://schema.cloudformation.eu-west-2.amazonaws.com/CloudformationSchema.zip"}

src/cfnlint/data/DownloadsMetadata/371e40c90b2e47c99f6e275e060ee83a3fbf0a0fb76625ba46dbe42abd34333c.meta.json

@@ -1 +1 @@
-{"etag": "\"2b25c91566a18224b954e6c820ce101c\"", "url": "https://schema.cloudformation.cn-northwest-1.amazonaws.com.cn/CloudformationSchema.zip"}
+{"etag": "\"d44a3cfc407e6ea72b7d6546fb170dbb\"", "url": "https://schema.cloudformation.cn-northwest-1.amazonaws.com.cn/CloudformationSchema.zip"}