feat: update L1 CloudFormation resource definitions (#34979)

Updates the L1 CloudFormation resource definitions with the latest changes from `@aws-cdk/aws-service-spec`

**L1 CloudFormation resource definition changes:**
```
├[~] service aws-aiops
│ └ resources
│    └[~]  resource AWS::AIOps::InvestigationGroup
│       ├      - documentation: Definition of AWS::AIOps::InvestigationGroup Resource Type
│       │      + documentation: Creates an *investigation group* in your account. Creating an investigation group is a one-time setup task for each Region in your account. It is a necessary task to be able to perform investigations.
│       │      Settings in the investigation group help you centrally manage the common properties of your investigations, such as the following:
│       │      - Who can access the investigations
│       │      - Whether investigation data is encrypted with a customer managed AWS Key Management Service key.
│       │      - How long investigations and their data are retained by default.
│       │      Currently, you can have one investigation group in each Region in your account. Each investigation in a Region is a part of the investigation group in that Region
│       │      To create an investigation group and set up Amazon Q Developer operational investigations, you must be signed in to an IAM principal that has the either the `AIOpsConsoleAdminPolicy` or the `AdministratorAccess` IAM policy attached, or to an account that has similar permissions.
│       │      > You can optionally configure CloudWatch alarms to start investigations and add events to investigations. The examples section on this page demonstrates creating an investigation group and an alarm at the same time.
│       │      > 
│       │      > For more information about configuring CloudWatch alarms to work with Amazon Q Developer operational investigations, see
│       ├ properties
│       │  ├ ChatbotNotificationChannels: (documentation changed)
│       │  ├ EncryptionConfig: (documentation changed)
│       │  ├ IsCloudTrailEventHistoryEnabled: (documentation changed)
│       │  ├ Name: (documentation changed)
│       │  ├ RetentionInDays: (documentation changed)
│       │  ├ RoleArn: (documentation changed)
│       │  ├ TagKeyBoundaries: (documentation changed)
│       │  └ Tags: (documentation changed)
│       ├ attributes
│       │  ├ Arn: (documentation changed)
│       │  ├ CreatedAt: (documentation changed)
│       │  ├ CreatedBy: (documentation changed)
│       │  ├ LastModifiedAt: (documentation changed)
│       │  └ LastModifiedBy: (documentation changed)
│       └ types
│          ├[~] type ChatbotNotificationChannel
│          │ └      - documentation: undefined
│          │        + documentation: This structure is a string array. The first string is the ARN of a Amazon SNS topic. The array of strings display the ARNs of Amazon Q in chat applications configurations that are associated with that topic. For more information about these configuration ARNs, see [Getting started with Amazon Q in chat applications](https://docs.aws.amazon.com/chatbot/latest/adminguide/getting-started.html) and [Resource type defined by AWS Chatbot](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awschatbot.html#awschatbot-resources-for-iam-policies) .
│          └[~] type EncryptionConfigMap
│            └ properties
│               └ KmsKeyId: (documentation changed)
├[~] service aws-arczonalshift
│ └ resources
│    └[~]  resource AWS::ARCZonalShift::ZonalAutoshiftConfiguration
│       └ types
│          └[~] type PracticeRunConfiguration
│            └ properties
│               └ BlockedWindows: (documentation changed)
├[~] service aws-cassandra
│ └ resources
│    └[~]  resource AWS::Cassandra::Table
│       ├ properties
│       │  └ CdcSpecification: (documentation changed)
│       └ types
│          └[~] type CdcSpecification
│            ├      - documentation: Represents the CDC configuration for the table
│            │      + documentation: The settings for the CDC stream of a table. For more information about CDC streams, see [Working with change data capture (CDC) streams in Amazon Keyspaces](https://docs.aws.amazon.com/keyspaces/latest/devguide/cdc.html) in the *Amazon Keyspaces Developer Guide* .
│            └ properties
│               ├ Status: (documentation changed)
│               └ ViewType: (documentation changed)
├[~] service aws-cloudformation
│ └ resources
│    ├[~]  resource AWS::CloudFormation::HookDefaultVersion
│    │  └ attributes
│    │     └ Arn: (documentation changed)
│    ├[~]  resource AWS::CloudFormation::HookTypeConfig
│    │  └ attributes
│    │     └ ConfigurationArn: (documentation changed)
│    ├[~]  resource AWS::CloudFormation::Macro
│    │  └ attributes
│    │     └ Id: (documentation changed)
│    ├[~]  resource AWS::CloudFormation::Stack
│    │  ├      - documentation: The `AWS::CloudFormation::Stack` resource nests a stack as a resource in a top-level template. For more information, see [Nested stacks](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-nested-stacks.html) in the *AWS CloudFormation User Guide* .
│    │  │      You can add output values from a nested stack within the containing template. You use the [GetAtt](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-getatt.html) function with the nested stack's logical name and the name of the output value in the nested stack in the format `Outputs. *NestedStackOutputName*` .
│    │  │      We strongly recommend that updates to nested stacks are run from the parent stack.
│    │  │      When you apply template changes to update a top-level stack, CloudFormation updates the top-level stack and initiates an update to its nested stacks. CloudFormation updates the resources of modified nested stacks, but doesn't update the resources of unmodified nested stacks.
│    │  │      For stacks that contain IAM resources, you must acknowledge IAM capabilities. Also, make sure that you have cancel update stack permissions, which are required if an update rolls back. For more information about IAM and CloudFormation , see [Controlling access with AWS Identity and Access Management](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html) in the *AWS CloudFormation User Guide* .
│    │  │      > A subset of `AWS::CloudFormation::Stack` resource type properties listed below are available to customers using CloudFormation , AWS CDK , and Cloud Control  to configure.
│    │  │      > 
│    │  │      > - `NotificationARNs`
│    │  │      > - `Parameters`
│    │  │      > - `Tags`
│    │  │      > - `TemplateURL`
│    │  │      > - `TimeoutInMinutes`
│    │  │      > 
│    │  │      > These properties can be configured only when using Cloud Control  . This is because the below properties are set by the parent stack, and thus cannot be configured using CloudFormation or AWS CDK but only Cloud Control  .
│    │  │      > 
│    │  │      > - `Capabilities`
│    │  │      > - `Description`
│    │  │      > - `DisableRollback`
│    │  │      > - `EnableTerminationProtection`
│    │  │      > - `RoleARN`
│    │  │      > - `StackName`
│    │  │      > - `StackPolicyBody`
│    │  │      > - `StackPolicyURL`
│    │  │      > - `StackStatusReason`
│    │  │      > - `TemplateBody`
│    │  │      > 
│    │  │      > Customers that configure `AWS::CloudFormation::Stack` using CloudFormation and AWS CDK can do so for nesting a CloudFormation stack as a resource in their top-level template.
│    │  │      > 
│    │  │      > These read-only properties can be accessed only when using Cloud Control  .
│    │  │      > 
│    │  │      > - `ChangeSetId`
│    │  │      > - `CreationTime`
│    │  │      > - `LastUpdateTime`
│    │  │      > - `Outputs`
│    │  │      > - `ParentId`
│    │  │      > - `RootId`
│    │  │      > - `StackId`
│    │  │      > - `StackStatus`
│    │  │      + documentation: The `AWS::CloudFormation::Stack` resource nests a stack as a resource in a top-level template. For more information, see [Nested stacks](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-nested-stacks.html) in the *AWS CloudFormation User Guide* .
│    │  │      You can add output values from a nested stack within the containing template. You use the [GetAtt](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html) function with the nested stack's logical name and the name of the output value in the nested stack in the format `Outputs. *NestedStackOutputName*` .
│    │  │      We strongly recommend that updates to nested stacks are run from the parent stack.
│    │  │      When you apply template changes to update a top-level stack, CloudFormation updates the top-level stack and initiates an update to its nested stacks. CloudFormation updates the resources of modified nested stacks, but doesn't update the resources of unmodified nested stacks.
│    │  │      For stacks that contain IAM resources, you must acknowledge IAM capabilities. Also, make sure that you have cancel update stack permissions, which are required if an update rolls back. For more information about IAM and CloudFormation , see [Controlling access with AWS Identity and Access Management](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html) in the *AWS CloudFormation User Guide* .
│    │  │      > A subset of `AWS::CloudFormation::Stack` resource type properties listed below are available to customers using CloudFormation , AWS CDK , and Cloud Control  to configure.
│    │  │      > 
│    │  │      > - `NotificationARNs`
│    │  │      > - `Parameters`
│    │  │      > - `Tags`
│    │  │      > - `TemplateURL`
│    │  │      > - `TimeoutInMinutes`
│    │  │      > 
│    │  │      > These properties can be configured only when using Cloud Control  . This is because the below properties are set by the parent stack, and thus cannot be configured using CloudFormation or AWS CDK but only Cloud Control  .
│    │  │      > 
│    │  │      > - `Capabilities`
│    │  │      > - `Description`
│    │  │      > - `DisableRollback`
│    │  │      > - `EnableTerminationProtection`
│    │  │      > - `RoleARN`
│    │  │      > - `StackName`
│    │  │      > - `StackPolicyBody`
│    │  │      > - `StackPolicyURL`
│    │  │      > - `StackStatusReason`
│    │  │      > - `TemplateBody`
│    │  │      > 
│    │  │      > Customers that configure `AWS::CloudFormation::Stack` using CloudFormation and AWS CDK can do so for nesting a CloudFormation stack as a resource in their top-level template.
│    │  │      > 
│    │  │      > These read-only properties can be accessed only when using Cloud Control  .
│    │  │      > 
│    │  │      > - `ChangeSetId`
│    │  │      > - `CreationTime`
│    │  │      > - `LastUpdateTime`
│    │  │      > - `Outputs`
│    │  │      > - `ParentId`
│    │  │      > - `RootId`
│    │  │      > - `StackId`
│    │  │      > - `StackStatus`
│    │  └ attributes
│    │     ├ ChangeSetId: (documentation changed)
│    │     └ CreationTime: (documentation changed)
│    ├[~]  resource AWS::CloudFormation::StackSet
│    │  ├      - documentation: The `AWS::CloudFormation::StackSet` resource enables you to provision stacks into AWS accounts and across Regions by using a single CloudFormation template. In the stack set, you specify the template to use, in addition to any parameters and capabilities that the template requires.
│    │  │      > Run deployments to nested StackSets from the parent stack, not directly through the StackSet API.
│    │  │      + documentation: The `AWS::CloudFormation::StackSet` resource contains information about a StackSet. With StackSets, you can provision stacks across AWS accounts and Regions from a single CloudFormation template. Each stack is based on the same CloudFormation template, but you can customize individual stacks using parameters.
│    │  │      > Run deployments to nested StackSets from the parent stack, not directly through the StackSet API.
│    │  ├ properties
│    │  │  ├ AdministrationRoleARN: (documentation changed)
│    │  │  ├ CallAs: (documentation changed)
│    │  │  ├ Capabilities: (documentation changed)
│    │  │  ├ Description: (documentation changed)
│    │  │  ├ ExecutionRoleName: (documentation changed)
│    │  │  ├ ManagedExecution: (documentation changed)
│    │  │  ├ OperationPreferences: (documentation changed)
│    │  │  ├ Parameters: (documentation changed)
│    │  │  ├ PermissionModel: (documentation changed)
│    │  │  └ StackSetName: (documentation changed)
│    │  ├ attributes
│    │  │  └ StackSetId: (documentation changed)
│    │  └ types
│    │     ├[~] type DeploymentTargets
│    │     │ └      - documentation: The AWS OrganizationalUnitIds or Accounts for which to create stack instances in the specified Regions.
│    │     │        + documentation: The AWS `OrganizationalUnitIds` or `Accounts` for which to create stack instances in the specified Regions.
│    │     ├[~] type ManagedExecution
│    │     │ └ properties
│    │     │    └ Active: (documentation changed)
│    │     ├[~] type OperationPreferences
│    │     │ ├      - documentation: The user-specified preferences for how CloudFormation performs a stack set operation. For more information on maximum concurrent accounts and failure tolerance, see [Stack set operation options](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-concepts.html#stackset-ops-options) in the *AWS CloudFormation User Guide* .
│    │     │ │      + documentation: The user-specified preferences for how CloudFormation performs a StackSet operation. For more information on maximum concurrent accounts and failure tolerance, see [StackSet operation options](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-concepts.html#stackset-ops-options) in the *AWS CloudFormation User Guide* .
│    │     │ └ properties
│    │     │    └ ConcurrencyMode: (documentation changed)
│    │     └[~] type StackInstances
│    │       └ properties
│    │          └ ParameterOverrides: (documentation changed)
│    ├[~]  resource AWS::CloudFormation::WaitCondition
│    │  ├      - documentation: The `AWS::CloudFormation::WaitCondition` resource provides a way to coordinate stack resource creation with configuration actions that are external to the stack creation or to track the status of a configuration process. In these situations, we recommend that you associate a `CreationPolicy` attribute with the wait condition instead of using a wait condition handle. For more information and an example, see [CreationPolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-creationpolicy.html) in the *AWS CloudFormation User Guide* . If you use a `CreationPolicy` with a wait condition, don't specify any of the wait condition's properties.
│    │  │      > If you use AWS PrivateLink , resources in the VPC that respond to wait conditions must have access to CloudFormation , specific Amazon S3 buckets. Resources must send wait condition responses to a presigned Amazon S3 URL. If they can't send responses to Amazon S3 , CloudFormation won't receive a response and the stack operation fails. For more information, see [Access CloudFormation using an interface endpoint ( AWS PrivateLink )](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/vpc-interface-endpoints.html) in the *AWS CloudFormation User Guide* . > For Amazon EC2 and Auto Scaling resources, we recommend that you use a `CreationPolicy` attribute instead of wait conditions. Add a `CreationPolicy` attribute to those resources, and use the `cfn-signal` helper script to signal when an instance creation process has completed successfully.
│    │  │      + documentation: The `AWS::CloudFormation::WaitCondition` resource provides a way to coordinate stack resource creation with configuration actions that are external to the stack creation or to track the status of a configuration process. In these situations, we recommend that you associate a `CreationPolicy` attribute with the wait condition instead of using a wait condition handle. For more information and an example, see [CreationPolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-attribute-creationpolicy.html) in the *AWS CloudFormation User Guide* . If you use a `CreationPolicy` with a wait condition, don't specify any of the wait condition's properties.
│    │  │      > If you use AWS PrivateLink , resources in the VPC that respond to wait conditions must have access to CloudFormation , specific Amazon S3 buckets. Resources must send wait condition responses to a presigned Amazon S3 URL. If they can't send responses to Amazon S3 , CloudFormation won't receive a response and the stack operation fails. For more information, see [Access CloudFormation using an interface endpoint ( AWS PrivateLink )](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/vpc-interface-endpoints.html) in the *AWS CloudFormation User Guide* . > For Amazon EC2 and Auto Scaling resources, we recommend that you use a `CreationPolicy` attribute instead of wait conditions. Add a `CreationPolicy` attribute to those resources, and use the `cfn-signal` helper script to signal when an instance creation process has completed successfully.
│    │  └ attributes
│    │     └ Id: (documentation changed)
│    └[~]  resource AWS::CloudFormation::WaitConditionHandle
│       └ attributes
│          └ Id: (documentation changed)
├[~] service aws-cloudfront
│ └ resources
│    └[~]  resource AWS::CloudFront::Distribution
│       └ types
│          └[~] type DistributionConfig
│            └ properties
│               ├ ConnectionMode: (documentation changed)
│               └ WebACLId: (documentation changed)
├[~] service aws-datasync
│ └ resources
│    └[~]  resource AWS::DataSync::LocationEFS
│       └ types
│          └[~] type Ec2Config
│            └ properties
│               └ SubnetArn: (documentation changed)
├[~] service aws-ec2
│ └ resources
│    ├[~]  resource AWS::EC2::CustomerGateway
│    │  └ properties
│    │     └ IpAddress: (documentation changed)
│    └[~]  resource AWS::EC2::VPNConnection
│       └ properties
│          └ OutsideIpAddressType: (documentation changed)
├[~] service aws-ecs
│ └ resources
│    └[~]  resource AWS::ECS::TaskDefinition
│       └ types
│          └[~] type InferenceAccelerator
│            ├      - documentation: Details on an Elastic Inference accelerator. For more information, see [Working with Amazon Elastic Inference on Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-inference.html) in the *Amazon Elastic Container Service Developer Guide*.
│            │      + documentation: undefined
│            └ properties
│               ├ DeviceName: (documentation changed)
│               └ DeviceType: (documentation changed)
├[~] service aws-fsx
│ └ resources
│    └[~]  resource AWS::FSx::FileSystem
│       ├ properties
│       │  ├ KmsKeyId: (documentation changed)
│       │  ├ LustreConfiguration: (documentation changed)
│       │  ├ OntapConfiguration: (documentation changed)
│       │  ├ OpenZFSConfiguration: (documentation changed)
│       │  └ WindowsConfiguration: (documentation changed)
│       └ types
│          ├[~] type DataReadCacheConfiguration
│          │ ├      - documentation: undefined
│          │ │      + documentation: The configuration for the optional provisioned SSD read cache on Amazon FSx for Lustre file systems that use the Intelligent-Tiering storage class.
│          │ └ properties
│          │    ├ SizeGiB: (documentation changed)
│          │    └ SizingMode: (documentation changed)
│          ├[~] type LustreConfiguration
│          │ └ properties
│          │    ├ DataReadCacheConfiguration: (documentation changed)
│          │    ├ EfaEnabled: (documentation changed)
│          │    ├ MetadataConfiguration: (documentation changed)
│          │    └ ThroughputCapacity: (documentation changed)
│          ├[~] type MetadataConfiguration
│          │ ├      - documentation: undefined
│          │ │      + documentation: The configuration that allows you to specify the performance of metadata operations for an FSx for Lustre file system.
│          │ └ properties
│          │    ├ Iops: (documentation changed)
│          │    └ Mode: (documentation changed)
│          └[~] type OpenZFSConfiguration
│            └ properties
│               └ ThroughputCapacity: (documentation changed)
├[~] service aws-glue
│ └ resources
│    └[~]  resource AWS::Glue::Job
│       └ properties
│          └ WorkerType: (documentation changed)
├[~] service aws-imagebuilder
│ └ resources
│    └[~]  resource AWS::ImageBuilder::Workflow
│       └ properties
│          └ Tags: - Map<string, string> (immutable)
│                  + Map<string, string>
├[~] service aws-kinesis
│ └ resources
│    └[~]  resource AWS::Kinesis::StreamConsumer
│       ├ properties
│       │  └ Tags: (documentation changed)
│       └ attributes
│          └[-] Id: string
├[~] service aws-odb
│ └ resources
│    ├[~]  resource AWS::ODB::CloudAutonomousVmCluster
│    │  ├      - documentation: The AWS::ODB::CloudAutonomousVmCluster resource creates a Cloud Autonomous VM Cluster
│    │  │      + documentation: The `AWS::ODB::CloudAutonomousVmCluster` resource creates an Autonomous VM cluster. An Autonomous VM cluster provides the infrastructure for running Autonomous Databases.
│    │  └ properties
│    │     ├ AutonomousDataStorageSizeInTBs: (documentation changed)
│    │     ├ CloudExadataInfrastructureId: (documentation changed)
│    │     ├ CpuCoreCountPerNode: (documentation changed)
│    │     ├ DisplayName: (documentation changed)
│    │     ├ IsMtlsEnabledVmCluster: (documentation changed)
│    │     ├ LicenseModel: (documentation changed)
│    │     ├ MemoryPerOracleComputeUnitInGBs: (documentation changed)
│    │     ├ OdbNetworkId: (documentation changed)
│    │     ├ Tags: (documentation changed)
│    │     └ TotalContainerDatabases: (documentation changed)
│    ├[~]  resource AWS::ODB::CloudExadataInfrastructure
│    │  ├      - documentation: The AWS::ODB::CloudExadataInfrastructure resource creates an Exadata Infrastructure
│    │  │      + documentation: The `AWS::ODB::CloudExadataInfrastructure` resource creates an Exadata infrastructure. An Exadata infrastructure provides the underlying compute and storage resources for Oracle Database workloads.
│    │  └ properties
│    │     ├ AvailabilityZone: (documentation changed)
│    │     ├ AvailabilityZoneId: (documentation changed)
│    │     ├ ComputeCount: (documentation changed)
│    │     ├ DatabaseServerType: (documentation changed)
│    │     ├ DisplayName: (documentation changed)
│    │     ├ Shape: (documentation changed)
│    │     ├ StorageCount: (documentation changed)
│    │     └ StorageServerType: (documentation changed)
│    ├[~]  resource AWS::ODB::CloudVmCluster
│    │  ├      - documentation: The AWS::ODB::CloudVmCluster resource creates a Cloud VM Cluster
│    │  │      + documentation: The `AWS::ODB::CloudVmCluster` resource creates a VM cluster on the specified Exadata infrastructure in the Oracle Database. A VM cluster provides the compute resources for Oracle Database workloads.
│    │  ├ properties
│    │  │  ├ CloudExadataInfrastructureId: (documentation changed)
│    │  │  ├ CpuCoreCount: (documentation changed)
│    │  │  ├ DataCollectionOptions: (documentation changed)
│    │  │  ├ DisplayName: (documentation changed)
│    │  │  ├ GiVersion: (documentation changed)
│    │  │  ├ Hostname: (documentation changed)
│    │  │  ├ IsLocalBackupEnabled: (documentation changed)
│    │  │  ├ IsSparseDiskgroupEnabled: (documentation changed)
│    │  │  ├ OdbNetworkId: (documentation changed)
│    │  │  ├ ScanListenerPortTcp: (documentation changed)
│    │  │  └ SshPublicKeys: (documentation changed)
│    │  ├ attributes
│    │  │  └ DiskRedundancy: (documentation changed)
│    │  └ types
│    │     └[~] type DataCollectionOptions
│    │       └ properties
│    │          ├ IsDiagnosticsEventsEnabled: (documentation changed)
│    │          ├ IsHealthMonitoringEnabled: (documentation changed)
│    │          └ IsIncidentLogsEnabled: (documentation changed)
│    └[~]  resource AWS::ODB::OdbNetwork
│       ├      - documentation: The AWS::ODB::OdbNetwork resource creates an ODB Network
│       │      + documentation: The `AWS::ODB::OdbNetwork` resource creates an ODB network. An ODB network provides the networking foundation for Oracle Database resources.
│       └ properties
│          ├ AvailabilityZone: (documentation changed)
│          ├ AvailabilityZoneId: (documentation changed)
│          ├ ClientSubnetCidr: (documentation changed)
│          ├ DeleteAssociatedResources: (documentation changed)
│          └ DisplayName: (documentation changed)
├[~] service aws-quicksight
│ └ resources
│    └[~]  resource AWS::QuickSight::CustomPermissions
│       └ types
│          └[~] type Capabilities
│            └ properties
│               ├ ExportToCsvInScheduledReports: (documentation changed)
│               ├ ExportToExcelInScheduledReports: (documentation changed)
│               ├ ExportToPdf: (documentation changed)
│               ├ ExportToPdfInScheduledReports: (documentation changed)
│               ├ IncludeContentInScheduledReportsEmail: (documentation changed)
│               └ PrintReports: (documentation changed)
├[~] service aws-s3tables
│ └ resources
│    └[~]  resource AWS::S3Tables::Table
│       ├      - documentation: Resource Type definition for AWS::S3Tables::Table
│       │      + documentation: Creates a new table associated with the given namespace in a table bucket. For more information, see [Creating an Amazon S3 table](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables-create.html) in the *Amazon Simple Storage Service User Guide* .
│       │      - **Permissions** - - You must have the `s3tables:CreateTable` permission to use this operation.
│       │      - If you use this operation with the optional `metadata` request parameter you must have the `s3tables:PutTableData` permission.
│       │      - If you use this operation with the optional `encryptionConfiguration` request parameter you must have the `s3tables:PutTableEncryption` permission.
│       │      > Additionally, If you choose SSE-KMS encryption you must grant the S3 Tables maintenance principal access to your KMS key. For more information, see [Permissions requirements for S3 Tables SSE-KMS encryption](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables-kms-permissions.html) .
│       ├ properties
│       │  └ Namespace: (documentation changed)
│       ├ attributes
│       │  └ TableARN: (documentation changed)
│       └ types
│          ├[~] type IcebergSchema
│          │ └      - documentation: Contains details about the schema for an Iceberg table
│          │        + documentation: Contains details about the schema for an Iceberg table.
│          └[~] type SchemaField
│            ├      - documentation: Contains details about the schema for an Iceberg table
│            │      + documentation: Contains details about a schema field.
│            └ properties
│               ├ Name: (documentation changed)
│               ├ Required: (documentation changed)
│               └ Type: (documentation changed)
├[~] service aws-sagemaker
│ └ resources
│    └[~]  resource AWS::SageMaker::Domain
│       └ types
│          └[~] type UnifiedStudioSettings
│            └ properties
│               └[+] SingleSignOnApplicationArn: string
└[~] service aws-transfer
  └ resources
     └[~]  resource AWS::Transfer::Connector
        └ types
           └[~] type SftpConfig
             └ properties
                └[+] MaxConcurrentConnections: integer (default=1)
```

Author: aws-cdk-automation

packages/aws-cdk-lib/package.json

@@ -136,7 +136,7 @@
   },
   "devDependencies": {
     "@aws-cdk/lambda-layer-kubectl-v31": "^2.1.0",
-    "@aws-cdk/aws-service-spec": "^0.1.85",
+    "@aws-cdk/aws-service-spec": "^0.1.86",
     "@aws-cdk/cdk-build-tools": "0.0.0",
     "@aws-cdk/custom-resource-handlers": "0.0.0",
     "@aws-cdk/pkglint": "0.0.0",

tools/@aws-cdk/spec2cdk/package.json

@@ -32,9 +32,9 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-cdk/aws-service-spec": "^0.1.85",
+    "@aws-cdk/aws-service-spec": "^0.1.86",
     "@aws-cdk/service-spec-importers": "^0.0.82",
-    "@aws-cdk/service-spec-types": "^0.0.151",
+    "@aws-cdk/service-spec-types": "^0.0.152",
     "@cdklabs/tskb": "^0.0.3",
     "@cdklabs/typewriter": "^0.0.5",
     "camelcase": "^6",

yarn.lock

@@ -66,12 +66,12 @@
     "@aws-cdk/service-spec-types" "^0.0.150"
     "@cdklabs/tskb" "^0.0.3"
 
-"@aws-cdk/aws-service-spec@^0.1.85":
-  version "0.1.85"
-  resolved "https://registry.npmjs.org/@aws-cdk/aws-service-spec/-/aws-service-spec-0.1.85.tgz#2d94f17b5ac0ba03c3f83d5a467f297da5bdab3f"
-  integrity sha512-F9JX8VdV+1HS4ITzh9AhwgyxZRrExTK3Yiqa2Xvj1mJIIE4zkimvgTFiqebVkkh3MoAIX3Udh0ykVJ0tjALjFQ==
+"@aws-cdk/aws-service-spec@^0.1.86":
+  version "0.1.86"
+  resolved "https://registry.npmjs.org/@aws-cdk/aws-service-spec/-/aws-service-spec-0.1.86.tgz#ef9a74a3a9ff6a2901e5489bab465ed5ee6163ab"
+  integrity sha512-/el9RfmBfwVnz1D7/Y3pKImLUnEpm+qTwaLSbWEg0iS7owYOvU/Ab5WivLN3EOVCZpE9XHkMhbaHiJ9WUGXdcg==
   dependencies:
-    "@aws-cdk/service-spec-types" "^0.0.151"
+    "@aws-cdk/service-spec-types" "^0.0.152"
     "@cdklabs/tskb" "^0.0.3"
 
 "@aws-cdk/cloud-assembly-schema@^45.0.0":
@@ -152,10 +152,10 @@
   dependencies:
     "@cdklabs/tskb" "^0.0.3"
 
-"@aws-cdk/service-spec-types@^0.0.151":
-  version "0.0.151"
-  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-types/-/service-spec-types-0.0.151.tgz#ba5edb665fa49aa61ad91f65381dd57c8a012e48"
-  integrity sha512-x3B7VQJo49AwmIv7RLl2bYmmKXA+np/OrKWWCCb1LQlK/B8/bx6QylHcqF+sLK7hmuOILRVrhMSrbo3B5FDnNA==
+"@aws-cdk/service-spec-types@^0.0.152":
+  version "0.0.152"
+  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-types/-/service-spec-types-0.0.152.tgz#09370362ef9fd26604f79075d9e7759cdfdd658c"
+  integrity sha512-zTEzp4EwUXrwqts48xV11GknGnQuEw3/l4tBZ1mePJXRZzBHcP5q4h/Q4AGJ9jrBtCqSks9EAoX2kTlgjkU4fg==
   dependencies:
     "@cdklabs/tskb" "^0.0.3"