Update CloudFormation schemas to 2025-03-17 (#4004)

Co-authored-by: kddejong <[email protected]>

Author: github-actions[bot]

docs/rules.md

@@ -46,7 +46,7 @@ To include these rules, use the `-e/include-experimental` argument when running
 ## Rules
 (_This documentation is generated by running `cfn-lint --update-documentation`, do not alter this manually_)
 
-The following **253** rules are applied by this linter:
+The following **254** rules are applied by this linter:
 
 | Rule ID  | Title | Description | Config<br />(Name:Type:Default) | Source | Tags |
 | -------- | ----- | ----------- | ---------- | ------ | ---- |
@@ -243,6 +243,7 @@ The following **253** rules are applied by this linter:
 | [I1002<a name="I1002"></a>](../src/cfnlint/rules/templates/ApproachingLimitSize.py) | Validate approaching the template size limit | Check the size of the template is approaching the upper limit |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/cloudformation-limits.html) | `limits` |
 | [I1003<a name="I1003"></a>](../src/cfnlint/rules/templates/ApproachingLimitDescription.py) | Validate if we are approaching the max size of a description | Check if the size of the template description is approaching the upper limit |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/cloudformation-limits.html) | `description`,`limits` |
 | [I1022<a name="I1022"></a>](../src/cfnlint/rules/functions/SubNotJoin.py) | Use Sub instead of Join | Prefer a sub instead of Join when using a join delimiter that is empty |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-sub.html) | `functions`,`sub`,`join` |
+| [I2003<a name="I2003"></a>](../src/cfnlint/rules/parameters/AllowedPattern.py) | Validate AllowedPattern is a valid regexs | Validate the pattern defined in a AllowedPattern. This is informational as the service side regex library is different than the Python one |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/cloudformation-limits.html) | `parameters`,`allowed pattern` |
 | [I2010<a name="I2010"></a>](../src/cfnlint/rules/parameters/ApproachingMaxProperties.py) | Parameter limit | Check the number of Parameters in the template is approaching the upper limit |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/cloudformation-limits.html) | `parameters`,`limits` |
 | [I2011<a name="I2011"></a>](../src/cfnlint/rules/parameters/ApproachingMaxLength.py) | Parameter name limit | Check the size of Parameter names in the template is approaching the upper limit |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/cloudformation-limits.html) | `parameters`,`limits` |
 | [I2530<a name="I2530"></a>](../src/cfnlint/rules/resources/lmbd/SnapStartEnabled.py) | Validate that SnapStart is configured for >= Java11 runtimes | SnapStart is a no-cost feature that can increase performance up to 10x. Enable SnapStart for Java 11 and greater runtimes |  | [Source](https://docs.aws.amazon.com/lambda/latest/dg/snapstart.html) | `resources`,`lambda` |
@@ -286,7 +287,7 @@ The following **253** rules are applied by this linter:
 | [W3010<a name="W3010"></a>](../src/cfnlint/rules/resources/properties/AvailabilityZone.py) | Availability zone properties should not be hardcoded | Check if an Availability Zone property is hardcoded. |  | [Source](https://github.com/aws-cloudformation/cfn-lint) | `parameters`,`availabilityzone` |
 | [W3011<a name="W3011"></a>](../src/cfnlint/rules/resources/BothUpdateReplacePolicyDeletionPolicyNeeded.py) | Check resources with UpdateReplacePolicy/DeletionPolicy have both | Both UpdateReplacePolicy and DeletionPolicy are needed to protect resources from deletion |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html) | `resources`,`updatereplacepolicy`,`deletionpolicy` |
 | [W3034<a name="W3034"></a>](../src/cfnlint/rules/parameters/NumberRange.py) | Check if parameter values are between min and max | Check if parameter values value being between the minimum and maximum |  | [Source](https://github.com/aws-cloudformation/cfn-lint/blob/main/docs/cfn-schema-specification.md#number-size) | `resources`,`property`,`number`,`size` |
-| [W3037*<a name="W3037*"></a>](../src/cfnlint/rules/resources/iam/Permissions.py) | Check IAM Permission configuration | Check for valid IAM Permissions |  | [Source](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_action.html) | `properties`,`iam`,`permissions` |
+| [W3037<a name="W3037"></a>](../src/cfnlint/rules/resources/iam/Permissions.py) | Check IAM Permission configuration | Check for valid IAM Permissions |  | [Source](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_action.html) | `properties`,`iam`,`permissions` |
 | [W3045<a name="W3045"></a>](../src/cfnlint/rules/resources/s3/AccessControlObsolete.py) | Controlling access to an S3 bucket should be done with bucket policies | Nearly all access control configurations can be more successfully achieved with bucket policies. Consider using bucket policies instead of access control. |  | [Source](https://docs.aws.amazon.com/AmazonS3/latest/userguide/about-object-ownership.html) | `resources`,`s3` |
 | [W3660<a name="W3660"></a>](../src/cfnlint/rules/resources/apigateway/RestApiMixingDefinitions.py) | Validate if multiple resources are modifying a Rest API definition | When using AWS::ApiGateway::RestApi with 'Body' or 'BodyS3Location' the resource handler will use PutRestApi with mode overwrite. Depending on how resources are updated the IaC template will drift and create orphaned resources. |  | [Source]() | `resources`,`apigateway` |
 | [W3663<a name="W3663"></a>](../src/cfnlint/rules/resources/lmbd/PermissionSourceAccount.py) | Validate SourceAccount is required property | When configuration a Lambda permission with a SourceArn that doesn't have an AccountId you should also specify the SourceAccount |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-permission.html#cfn-lambda-permission-sourceaccount) | `resources`,`lambda`,`permission` |

pyproject.toml

@@ -37,7 +37,7 @@ classifiers = [
 dynamic = ["version", "readme"]
 dependencies = [
     "pyyaml>5.4",
-    "aws-sam-translator>=1.94.0",
+    "aws-sam-translator>=1.95.0",
     "jsonpatch",
     "networkx>=2.4,<4",
     "sympy>=1.0.0",

src/cfnlint/data/AdditionalSpecs/Policies.json

@@ -155,13 +155,11 @@
     "EnableRegion",
     "GetAccountInformation",
     "GetAlternateContact",
-    "GetChallengeQuestions",
     "GetContactInformation",
     "GetPrimaryEmail",
     "GetRegionOptStatus",
     "ListRegions",
     "PutAlternateContact",
-    "PutChallengeQuestions",
     "PutContactInformation",
     "StartPrimaryEmailUpdate"
    ],
@@ -1337,19 +1335,24 @@
    "Actions": [
     "CancelJob",
     "CreateComputeEnvironment",
+    "CreateConsumableResource",
     "CreateJobQueue",
     "CreateSchedulingPolicy",
     "DeleteComputeEnvironment",
+    "DeleteConsumableResource",
     "DeleteJobQueue",
     "DeleteSchedulingPolicy",
     "DeregisterJobDefinition",
     "DescribeComputeEnvironments",
+    "DescribeConsumableResource",
     "DescribeJobDefinitions",
     "DescribeJobQueues",
     "DescribeJobs",
     "DescribeSchedulingPolicies",
     "GetJobQueueSnapshot",
+    "ListConsumableResources",
     "ListJobs",
+    "ListJobsByConsumableResource",
     "ListSchedulingPolicies",
     "ListTagsForResource",
     "RegisterJobDefinition",
@@ -1358,6 +1361,7 @@
     "TerminateJob",
     "UntagResource",
     "UpdateComputeEnvironment",
+    "UpdateConsumableResource",
     "UpdateJobQueue",
     "UpdateSchedulingPolicy"
    ],
@@ -2562,7 +2566,8 @@
     "codeconnections:ProviderPermissionsRequired",
     "codeconnections:ProviderType",
     "codeconnections:ProviderTypeFilter",
-    "codeconnections:RepositoryName"
+    "codeconnections:RepositoryName",
+    "codeconnections:VpcId"
    ]
   },
   "AWS CodeDeploy": {
@@ -2788,7 +2793,8 @@
     "codestar-connections:ProviderPermissionsRequired",
     "codestar-connections:ProviderType",
     "codestar-connections:ProviderTypeFilter",
-    "codestar-connections:RepositoryName"
+    "codestar-connections:RepositoryName",
+    "codestar-connections:VpcId"
    ]
   },
   "AWS CodeStar Notifications": {
@@ -10944,13 +10950,15 @@
     "DescribeTrustedAdvisorCheckResult",
     "DescribeTrustedAdvisorCheckSummaries",
     "DescribeTrustedAdvisorChecks",
+    "GetInteraction",
     "InitiateCallForCase",
     "InitiateChatForCase",
     "PutCaseAttributes",
     "RateCaseCommunication",
     "RefreshTrustedAdvisorCheck",
     "ResolveCase",
-    "SearchForCases"
+    "SearchForCases",
+    "StartInteraction"
    ],
    "HasResource": false,
    "StringPrefix": "support"
@@ -12770,6 +12778,7 @@
     "CreateModelImportJob",
     "CreateModelInvocationJob",
     "CreatePrompt",
+    "CreatePromptRouter",
     "CreatePromptVersion",
     "CreateProvisionedModelThroughput",
     "CreateSession",
@@ -12795,6 +12804,7 @@
     "DeleteMarketplaceModelEndpoint",
     "DeleteModelInvocationLoggingConfiguration",
     "DeletePrompt",
+    "DeletePromptRouter",
     "DeleteProvisionedModelThroughput",
     "DeleteResourcePolicy",
     "DeleteSession",
@@ -13689,6 +13699,7 @@
    "ARNRegex": "^arn:aws:application-signals:.+:.+:.+",
    "Actions": [
     "BatchGetServiceLevelObjectiveBudgetReport",
+    "BatchUpdateExclusionWindows",
     "CreateServiceLevelObjective",
     "DeleteServiceLevelObjective",
     "GetService",
@@ -13697,6 +13708,7 @@
     "ListObservedEntities",
     "ListServiceDependencies",
     "ListServiceDependents",
+    "ListServiceLevelObjectiveExclusionWindows",
     "ListServiceLevelObjectives",
     "ListServiceOperations",
     "ListServices",
@@ -23329,6 +23341,8 @@
     "sagemaker:MinimumInstanceMetadataServiceVersion",
     "sagemaker:ModelApprovalStatus",
     "sagemaker:ModelArn",
+    "sagemaker:ModelLifeCycle:Stage",
+    "sagemaker:ModelLifeCycle:StageStatus",
     "sagemaker:NetworkIsolation",
     "sagemaker:OutputKmsKey",
     "sagemaker:OwnerUserProfileArn",

src/cfnlint/data/DownloadsMetadata/123ba181485ae293d5bd09722af0c19d5a0d14c62111ff864923fc7b7960dda6.meta.json

@@ -1 +1 @@
-{"etag": "\"1a70f797ab28f402161ca676257432f0\"", "url": "https://schema.cloudformation.eu-south-1.amazonaws.com/CloudformationSchema.zip"}
+{"etag": "\"d6ed9946d04fa71c710d766e65e8ce13\"", "url": "https://schema.cloudformation.eu-south-1.amazonaws.com/CloudformationSchema.zip"}

src/cfnlint/data/DownloadsMetadata/164e1bfc2823fbd49d8d0e7163ebf32b2b6653d7edfe98a64577daae0b481c38.meta.json

@@ -1 +1 @@
-{"etag": "\"4758faf16e9c2f4078bd127bf12dfdb1\"", "url": "https://schema.cloudformation.cn-north-1.amazonaws.com.cn/CloudformationSchema.zip"}
+{"etag": "\"7f1d55170602983f97d39857e3665465\"", "url": "https://schema.cloudformation.cn-north-1.amazonaws.com.cn/CloudformationSchema.zip"}

src/cfnlint/data/DownloadsMetadata/18624fcc4a1c571691d10b2508e6be565e4752bbc10d9552de8df8f81348c42b.meta.json

@@ -1 +1 @@
-{"etag": "\"147c773a687e9e0e1369c0275f4deeed\"", "url": "https://schema.cloudformation.us-gov-east-1.amazonaws.com/CloudformationSchema.zip"}
+{"etag": "\"6829527428f87bf4f76d89b9f9376d36\"", "url": "https://schema.cloudformation.us-gov-east-1.amazonaws.com/CloudformationSchema.zip"}

src/cfnlint/data/DownloadsMetadata/227d6e59c86482f7153466759080e65963a1bf4413531ad420ff60a5a0d7965d.meta.json

@@ -1 +1 @@
-{"etag": "\"2dae9b2fdd092557eff523dcd302779d\"", "url": "https://schema.cloudformation.me-south-1.amazonaws.com/CloudformationSchema.zip"}
+{"etag": "\"e04c81b63098fe891aaf8b0c7c22c2c0\"", "url": "https://schema.cloudformation.me-south-1.amazonaws.com/CloudformationSchema.zip"}

src/cfnlint/data/DownloadsMetadata/23be708e675cb6098b08969e4dbbc3f54cfc32461d10e077e7e5de1fc25d8b8f.meta.json

@@ -1 +1 @@
-{"etag": "\"5dfbadbc9097612d4dfdca4198d9e60b\"", "url": "https://schema.cloudformation.us-gov-west-1.amazonaws.com/CloudformationSchema.zip"}
+{"etag": "\"14585ddf461cf92380196f5ebb9cca3a\"", "url": "https://schema.cloudformation.us-gov-west-1.amazonaws.com/CloudformationSchema.zip"}

src/cfnlint/data/DownloadsMetadata/26cf4521b683d3267844178a6bcd1d0ad3fe2e7838c23f6acd054944cb2b1618.meta.json

@@ -1 +1 @@
-{"etag": "\"79d81662eb74b4dfad4e471f196b4ddf\"", "url": "https://schema.cloudformation.me-central-1.amazonaws.com/CloudformationSchema.zip"}
+{"etag": "\"bedc0f2412d28142d91a4883cfceca0f\"", "url": "https://schema.cloudformation.me-central-1.amazonaws.com/CloudformationSchema.zip"}

src/cfnlint/data/DownloadsMetadata/276cecfeb1ec5e608e2aaa06925a2da57e9907e4a512c10ddae70b98b4dada43.meta.json

@@ -1 +1 @@
-{"etag": "\"08a40f31e1a767c96df7991d00219f65\"", "url": "https://schema.cloudformation.eu-west-2.amazonaws.com/CloudformationSchema.zip"}
+{"etag": "\"a537a892b1d12609bed8f1b11862c4b6\"", "url": "https://schema.cloudformation.eu-west-2.amazonaws.com/CloudformationSchema.zip"}