Add missing fields to existing pycfmodel resources

Updated the following resources with fields that were added to the AWS
CloudFormation schemas since the models were originally created:

- IAMUser: Added Tags field
- KMSKey: Added RotationPeriodInDays field
- S3Bucket: Added AbacStatus, MetadataConfiguration, MetadataTableConfiguration
- OpenSearchDomain: Added AIMLOptions, IPAddressType, IdentityCenterOptions,
  OffPeakWindowOptions, SkipShardMigrationWait, SoftwareUpdateOptions
- EC2VPCEndpoint: Added DnsOptions, IpAddressType, ResourceConfigurationArn,
  ServiceNetworkArn, ServiceRegion, Tags

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: jsoucheiron

pycfmodel/model/resources/ec2_vpc_endpoint_policy.py

@@ -1,6 +1,7 @@
 from typing import List, Literal, Optional
 
 from pycfmodel.model.base import CustomModel
+from pycfmodel.model.generic import ResolvableGeneric
 from pycfmodel.model.resources.properties.policy_document import PolicyDocument as resource_policy_document
 from pycfmodel.model.resources.resource import Resource
 from pycfmodel.model.types import Resolvable, ResolvableBool, ResolvableStr
@@ -11,24 +12,36 @@ class EC2VpcEndpointPolicyProperties(CustomModel):
     """
     Properties:
 
+    - DnsOptions: DNS options for the endpoint.
+    - IpAddressType: The supported IP address types.
     - PolicyDocument: A [policy document][pycfmodel.model.resources.properties.policy_document.PolicyDocument] object.
     - PrivateDnsEnabled: Indicate whether to associate a private hosted zone with the specified VPC.
+    - ResourceConfigurationArn: The Amazon Resource Name (ARN) of the resource configuration.
     - RouteTableIds: One or more route table IDs.
     - SecurityGroupIds: The ID of one or more security groups to associate with the endpoint network interface.
     - ServiceName: The service name.
+    - ServiceNetworkArn: The Amazon Resource Name (ARN) of the service network.
+    - ServiceRegion: The region of the service.
     - SubnetIds: The ID of one or more subnets in which to create an endpoint network interface.
+    - Tags: The tags to associate with the endpoint.
     - VpcEndpointType: The type of endpoint.
     - VpcId: The ID of the VPC in which the endpoint will be used.
 
     More info at [AWS Docs](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcendpoint.html)
     """
 
+    DnsOptions: Optional[ResolvableGeneric] = None
+    IpAddressType: Optional[ResolvableStr] = None
     PolicyDocument: Optional[Resolvable[resource_policy_document]] = None
     PrivateDnsEnabled: Optional[ResolvableBool] = None
+    ResourceConfigurationArn: Optional[ResolvableStr] = None
     RouteTableIds: Optional[Resolvable[List[ResolvableStr]]] = None
     SecurityGroupIds: Optional[Resolvable[List[ResolvableStr]]] = None
     ServiceName: ResolvableStr
+    ServiceNetworkArn: Optional[ResolvableStr] = None
+    ServiceRegion: Optional[ResolvableStr] = None
     SubnetIds: Optional[Resolvable[List[ResolvableStr]]] = None
+    Tags: Optional[Resolvable[List[ResolvableGeneric]]] = None
     VpcEndpointType: Optional[ResolvableStr] = None
     VpcId: ResolvableStr
 

pycfmodel/model/resources/iam_user.py

@@ -1,6 +1,7 @@
 from typing import Dict, List, Literal, Optional
 
 from pycfmodel.model.base import CustomModel
+from pycfmodel.model.generic import ResolvableGeneric
 from pycfmodel.model.parameter import Parameter
 from pycfmodel.model.resources.properties.policy import Policy
 from pycfmodel.model.resources.resource import Resource
@@ -18,6 +19,7 @@ class IAMUserProperties(CustomModel):
     - Path: Path to the user.
     - PermissionsBoundary: ARN of the policy used to set the permissions boundary.
     - Policies: A list of [policy][pycfmodel.model.resources.properties.policy.Policy] objects.
+    - Tags: A list of tags to attach to the new user.
     - UserName: Name of the user.
 
     More info at [AWS Docs](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-user.html)
@@ -29,6 +31,7 @@ class IAMUserProperties(CustomModel):
     Path: Optional[ResolvableStr] = None
     PermissionsBoundary: Optional[ResolvableStr] = None
     Policies: Optional[Resolvable[List[Resolvable[Policy]]]] = None
+    Tags: Optional[Resolvable[List[ResolvableGeneric]]] = None
     UserName: Optional[ResolvableStr] = None
 
 

pycfmodel/model/resources/kms_key.py

@@ -19,6 +19,7 @@ class KMSKeyProperties(CustomModel):
     - KeySpec: Specifies the type of CMK to create.
     - MultiRegion: Allows multi-Region primary CMK to be replicated in other AWS Regions.
     - PendingWindowInDays: Number of days in the waiting period before AWS KMS deletes a CMK that has been removed from a CloudFormation stack.
+    - RotationPeriodInDays: Custom period of time between each rotation date.
     - Tags: Array of key-value pairs.
 
     More info at [AWS Docs](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html)
@@ -34,6 +35,7 @@ class KMSKeyProperties(CustomModel):
     MultiRegion: Optional[ResolvableBool] = None
     Origin: Optional[ResolvableStr] = None
     PendingWindowInDays: Optional[ResolvableInt] = None
+    RotationPeriodInDays: Optional[ResolvableInt] = None
     Tags: Optional[Resolvable[List[Tag]]] = None
 
 

pycfmodel/model/resources/opensearch_domain.py

@@ -5,7 +5,7 @@
 from pycfmodel.model.resources.properties.policy_document import PolicyDocument
 from pycfmodel.model.resources.properties.tag import Tag
 from pycfmodel.model.resources.resource import Resource
-from pycfmodel.model.types import Resolvable, ResolvableStr
+from pycfmodel.model.types import Resolvable, ResolvableBool, ResolvableStr
 
 
 class OpenSearchDomainProperties(CustomModel):
@@ -15,16 +15,22 @@ class OpenSearchDomainProperties(CustomModel):
     - AccessPolicies: A [policy document][pycfmodel.model.resources.properties.policy_document.PolicyDocument] object.
     - AdvancedOptions: Additional options to specify for the OpenSearch Service domain.
     - AdvancedSecurityOptions: Specifies options for fine-grained access control.
+    - AIMLOptions: Machine learning options for the domain.
     - ClusterConfig: ClusterConfig is a property of the AWS::OpenSearchService::Domain resource that configures an Amazon OpenSearch Service cluster.
     - CognitoOptions: Configures OpenSearch Service to use Amazon Cognito authentication for OpenSearch Dashboards.
     - DomainEndpointOptions: Specifies additional options for the domain endpoint, such as whether to require HTTPS for all traffic or whether to use a custom endpoint rather than the default endpoint.
     - DomainName: A name for the OpenSearch Service domain.
     - EBSOptions: The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the OpenSearch Service domain.
     - EncryptionAtRestOptions: Whether the domain should encrypt data at rest, and if so, the AWS Key Management Service key to use.
     - EngineVersion: The version of OpenSearch to use. The value must be in the format OpenSearch_X.Y or Elasticsearch_X.Y. If not specified, the latest version of OpenSearch is used.
+    - IdentityCenterOptions: Identity Center options for the domain.
+    - IPAddressType: The IP address type for the domain.
     - LogPublishingOptions: An object with one or more of the following keys: SEARCH_SLOW_LOGS, ES_APPLICATION_LOGS, INDEX_SLOW_LOGS, AUDIT_LOGS, depending on the types of logs you want to publish. Each key needs a valid LogPublishingOption value.
     - NodeToNodeEncryptionOptions: Specifies whether node-to-node encryption is enabled.
+    - OffPeakWindowOptions: Off-peak window options for the domain.
+    - SkipShardMigrationWait: Whether to skip the shard migration wait.
     - SnapshotOptions: DEPRECATED. The automated snapshot configuration for the OpenSearch Service domain indices.
+    - SoftwareUpdateOptions: Software update options for the domain.
     - Tags: An arbitrary set of tags (key–value pairs) to associate with the OpenSearch Service domain.
     - VPCOptions: The virtual private cloud (VPC) configuration for the OpenSearch Service domain.
 
@@ -34,16 +40,22 @@ class OpenSearchDomainProperties(CustomModel):
     AccessPolicies: Optional[Resolvable[PolicyDocument]] = None
     AdvancedOptions: Optional[ResolvableGeneric] = None
     AdvancedSecurityOptions: Optional[ResolvableGeneric] = None
+    AIMLOptions: Optional[ResolvableGeneric] = None
     ClusterConfig: Optional[ResolvableGeneric] = None
     CognitoOptions: Optional[ResolvableGeneric] = None
     DomainEndpointOptions: Optional[ResolvableGeneric] = None
     DomainName: Optional[ResolvableStr] = None
     EBSOptions: Optional[ResolvableGeneric] = None
     EncryptionAtRestOptions: Optional[ResolvableGeneric] = None
     EngineVersion: Optional[ResolvableStr] = None
+    IdentityCenterOptions: Optional[ResolvableGeneric] = None
+    IPAddressType: Optional[ResolvableStr] = None
     LogPublishingOptions: Optional[ResolvableGeneric] = None
     NodeToNodeEncryptionOptions: Optional[ResolvableGeneric] = None
+    OffPeakWindowOptions: Optional[ResolvableGeneric] = None
+    SkipShardMigrationWait: Optional[ResolvableBool] = None
     SnapshotOptions: Optional[ResolvableGeneric] = None
+    SoftwareUpdateOptions: Optional[ResolvableGeneric] = None
     Tags: Optional[Resolvable[List[Tag]]] = None
     VPCOptions: Optional[ResolvableGeneric] = None
 

pycfmodel/model/resources/s3_bucket.py

@@ -11,6 +11,7 @@ class S3BucketProperties(CustomModel):
     """
     Properties:
 
+    - AbacStatus: The ABAC status of the general purpose bucket.
     - AccelerateConfiguration: Configures the transfer acceleration state for an Amazon S3 bucket.
     - AccessControl: A canned access control list (ACL) that grants predefined permissions to the bucket.
     - AnalyticsConfigurations: Specifies the configuration and any analyses for the analytics filter of an Amazon S3 bucket.
@@ -21,6 +22,8 @@ class S3BucketProperties(CustomModel):
     - InventoryConfigurations: Specifies the inventory configuration for an Amazon S3 bucket.
     - LifecycleConfiguration: Specifies the lifecycle configuration for objects in an Amazon S3 bucket.
     - LoggingConfiguration: Settings that define where logs are stored.
+    - MetadataConfiguration: The S3 Metadata configuration for a general purpose bucket.
+    - MetadataTableConfiguration: The metadata table configuration of an S3 general purpose bucket.
     - MetricsConfigurations: Specifies a metrics configuration for the CloudWatch request metrics.
     - NotificationConfiguration: Defines how Amazon S3 handles bucket notifications.
     - ObjectLockConfiguration: Places an Object Lock configuration on the specified bucket.
@@ -35,6 +38,7 @@ class S3BucketProperties(CustomModel):
     More info at [AWS Docs](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket.html)
     """
 
+    AbacStatus: Optional[ResolvableStr] = None
     AccelerateConfiguration: Optional[ResolvableGeneric] = None
     AccessControl: Optional[ResolvableStr] = None
     AnalyticsConfigurations: Optional[Resolvable[List[ResolvableGeneric]]] = None
@@ -45,6 +49,8 @@ class S3BucketProperties(CustomModel):
     InventoryConfigurations: Optional[Resolvable[List[ResolvableGeneric]]] = None
     LifecycleConfiguration: Optional[ResolvableGeneric] = None
     LoggingConfiguration: Optional[ResolvableGeneric] = None
+    MetadataConfiguration: Optional[ResolvableGeneric] = None
+    MetadataTableConfiguration: Optional[ResolvableGeneric] = None
     MetricsConfigurations: Optional[Resolvable[List[ResolvableGeneric]]] = None
     NotificationConfiguration: Optional[ResolvableGeneric] = None
     ObjectLockConfiguration: Optional[ResolvableGeneric] = None