feat: update L1 CloudFormation resource definitions (#36277)

aws-cdk-automation · web-flow · commit c4fa99b9149b · 2025-12-03T09:39:27.000Z
Updates the L1 CloudFormation resource definitions with the latest changes from `@aws-cdk/aws-service-spec`

**L1 CloudFormation resource definition changes:**
```
├[~] service aws-cloudfront
│ └ resources
│    ├[~]  resource AWS::CloudFront::ConnectionFunction
│    │  └      - arnTemplate: undefined
│    │         + arnTemplate: arn:${Partition}:cloudfront::${Account}:connection-function/${Id}
│    └[~]  resource AWS::CloudFront::TrustStore
│       └      - arnTemplate: undefined
│              + arnTemplate: arn:${Partition}:cloudfront::${Account}:trust-store/${Id}
├[~] service aws-lambda
│ └ resources
│    ├[~]  resource AWS::Lambda::CapacityProvider
│    │  └      - arnTemplate: undefined
│    │         + arnTemplate: arn:${Partition}:lambda:${Region}:${Account}:capacity-provider:${CapacityProviderName}
│    └[~]  resource AWS::Lambda::Function
│       ├ properties
│       │  └[+] DurableConfig: DurableConfig
│       └ types
│          └[+]  type DurableConfig
│             ├      name: DurableConfig
│             └ properties
│                ├ ExecutionTimeout: integer (required)
│                └ RetentionPeriodInDays: integer (default=14)
├[~] service aws-mediaconnect
│ └ resources
│    ├[~]  resource AWS::MediaConnect::RouterInput
│    │  └      - arnTemplate: undefined
│    │         + arnTemplate: arn:${Partition}:mediaconnect:${Region}:${Account}:routerInput:${RouterInputId}
│    ├[~]  resource AWS::MediaConnect::RouterNetworkInterface
│    │  └      - arnTemplate: undefined
│    │         + arnTemplate: arn:${Partition}:mediaconnect:${Region}:${Account}:routerNetworkInterface:${RouterNetworkInterfaceId}
│    └[~]  resource AWS::MediaConnect::RouterOutput
│       └      - arnTemplate: undefined
│              + arnTemplate: arn:${Partition}:mediaconnect:${Region}:${Account}:routerOutput:${RouterOutputId}
├[~] service aws-networkfirewall
│ └ resources
│    └[~]  resource AWS::NetworkFirewall::RuleGroup
│       └      - arnTemplate: arn:${Partition}:network-firewall:${Region}:${Account}:stateful-rulegroup/${Name}
│              + arnTemplate: arn:${Partition}:network-firewall:${Region}:${Account}:stateless-rulegroup/${Name}
└[~] service aws-pinpoint
  └ resources
     ├[~]  resource AWS::Pinpoint::PushTemplate
     │  └      - arnTemplate: arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/${TemplateName}/PUSH
     │         + arnTemplate: arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/${TemplateName}/EMAIL
     └[~]  resource AWS::Pinpoint::SmsTemplate
        └      - arnTemplate: arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/${TemplateName}/SMS
               + arnTemplate: arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/${TemplateName}/EMAIL
```
diff --git a/packages/@aws-cdk/mixins-preview/package.json b/packages/@aws-cdk/mixins-preview/package.json
@@ -655,7 +655,7 @@
     "@aws-cdk/integ-runner": "^2.192.2",
     "@aws-cdk/integ-tests-alpha": "0.0.0",
     "@aws-cdk/pkglint": "0.0.0",
-    "@aws-cdk/service-spec-types": "^0.0.192",
+    "@aws-cdk/service-spec-types": "^0.0.193",
     "@aws-cdk/spec2cdk": "0.0.0",
     "@cdklabs/tskb": "^0.0.4",
     "@cdklabs/typewriter": "^0.0.11",
diff --git a/packages/aws-cdk-lib/aws-lambda/lib/function-hash.ts b/packages/aws-cdk-lib/aws-lambda/lib/function-hash.ts
@@ -75,6 +75,7 @@ export const VERSION_LOCKED: { [key: string]: boolean } = {
   CapacityProviderConfig: true,
   FunctionScalingConfig: true,
   PublishToLatestPublished: true,
+  DurableConfig: true,
 
   // not locked to the version
   CodeSigningConfigArn: false,
diff --git a/packages/aws-cdk-lib/package.json b/packages/aws-cdk-lib/package.json
@@ -132,7 +132,7 @@
   },
   "devDependencies": {
     "@aws-cdk/lambda-layer-kubectl-v31": "^2.1.0",
-    "@aws-cdk/aws-service-spec": "^0.1.126",
+    "@aws-cdk/aws-service-spec": "^0.1.127",
     "@aws-cdk/cdk-build-tools": "0.0.0",
     "@aws-cdk/custom-resource-handlers": "0.0.0",
     "@aws-cdk/pkglint": "0.0.0",
diff --git a/tools/@aws-cdk/spec2cdk/package.json b/tools/@aws-cdk/spec2cdk/package.json
@@ -31,9 +31,9 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-cdk/aws-service-spec": "^0.1.126",
-    "@aws-cdk/service-spec-importers": "^0.0.98",
-    "@aws-cdk/service-spec-types": "^0.0.192",
+    "@aws-cdk/aws-service-spec": "^0.1.127",
+    "@aws-cdk/service-spec-importers": "^0.0.99",
+    "@aws-cdk/service-spec-types": "^0.0.193",
     "@cdklabs/tskb": "^0.0.4",
     "@cdklabs/typewriter": "^0.0.11",
     "camelcase": "^6",
diff --git a/yarn.lock b/yarn.lock
@@ -66,12 +66,12 @@
     "@aws-cdk/service-spec-types" "^0.0.164"
     "@cdklabs/tskb" "^0.0.3"
 
-"@aws-cdk/aws-service-spec@^0.1.126":
-  version "0.1.126"
-  resolved "https://registry.npmjs.org/@aws-cdk/aws-service-spec/-/aws-service-spec-0.1.126.tgz#a4485865f5be6c7564abeece534d051fa3bb0d3a"
-  integrity sha512-/hanVJxMUPpc1Sjx8HITsdmvD2fKVK9csQtXsAtOiuU1BmR/vevxJpQW1DCv79zywgzN+WveSguttrUCZJ7hFA==
+"@aws-cdk/aws-service-spec@^0.1.127":
+  version "0.1.127"
+  resolved "https://registry.npmjs.org/@aws-cdk/aws-service-spec/-/aws-service-spec-0.1.127.tgz#42b47b35d143e8962e4f6839869397589b6a2958"
+  integrity sha512-nIIfMY+Y9JKeLzLUIMS5M9Pd/r6UqZU6dQsXMioK7sqkJxu84pfissPFN91fAQrYV3p0sexcke8MaTe8eDeQCg==
   dependencies:
-    "@aws-cdk/service-spec-types" "^0.0.192"
+    "@aws-cdk/service-spec-types" "^0.0.193"
     "@cdklabs/tskb" "^0.0.4"
 
 "@aws-cdk/cloud-assembly-schema@^48.6.0":
@@ -127,12 +127,12 @@
   resolved "https://registry.npmjs.org/@aws-cdk/lambda-layer-kubectl-v34/-/lambda-layer-kubectl-v34-2.0.0.tgz#c2694ba861eef980f477a3e93c91fddac936b36d"
   integrity sha512-cof6aOHsVtf3xvg/QENnkOdELHDpsq4HDc3NAB5O4c285YsORvP/FFphLS338ZvuYRveI690mQSatg3891lOzQ==
 
-"@aws-cdk/service-spec-importers@^0.0.98":
-  version "0.0.98"
-  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-importers/-/service-spec-importers-0.0.98.tgz#b29ef834bffafe755425699e85d9091de18e766d"
-  integrity sha512-Gar5Pl4fkyWTVsmzMYcEpvbCeTzUlWBYx4HL8iszi5ApOteRoYvclGw/1w6n+D82ntwRD/Y+UuUZSB9BrxmhHA==
+"@aws-cdk/service-spec-importers@^0.0.99":
+  version "0.0.99"
+  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-importers/-/service-spec-importers-0.0.99.tgz#fbb2f3f6c8a8ef1ade078410c8f418c7e3e7932f"
+  integrity sha512-v1hJh5wCC22DoHo7rKMSCjklyq8Pn2sWJuMCJvZASQi1SVYH3jR+YDq4BIk1RXchM1zocwh5S3gC9DAhPxeOVw==
   dependencies:
-    "@aws-cdk/service-spec-types" "^0.0.191"
+    "@aws-cdk/service-spec-types" "^0.0.193"
     "@cdklabs/tskb" "^0.0.4"
     ajv "^6"
     canonicalize "^2.1.0"
@@ -150,17 +150,10 @@
   dependencies:
     "@cdklabs/tskb" "^0.0.3"
 
-"@aws-cdk/service-spec-types@^0.0.191":
-  version "0.0.191"
-  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-types/-/service-spec-types-0.0.191.tgz#bbcd18ff4a5a8f8d54f93bba51df7ae26333939f"
-  integrity sha512-Dr0HemmqSfIe+nM9ZQu9jnXbs9lgDwP8kz9EoSL90RsH/R02LwEJNnWYAQQUWNlmc2v5YC8i6EIE4usKOJv86w==
-  dependencies:
-    "@cdklabs/tskb" "^0.0.4"
-
-"@aws-cdk/service-spec-types@^0.0.192":
-  version "0.0.192"
-  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-types/-/service-spec-types-0.0.192.tgz#d6ed065d9bf5fa37ca90bf11e88ac338ab4f57d5"
-  integrity sha512-wpArHyzaJM/BrpaDd1xEUUm5GTUJ5+vbTVeYhJF9N/EUI0A8u9Vy8QGt4J7pH8y5QTl/ddpKFmzlvE/AXzCfHg==
+"@aws-cdk/service-spec-types@^0.0.193":
+  version "0.0.193"
+  resolved "https://registry.npmjs.org/@aws-cdk/service-spec-types/-/service-spec-types-0.0.193.tgz#3d99307bd539ed61272eee543dc2485ba8ded878"
+  integrity sha512-Wxki9z/ZgJuWjUbT6rBRytp7gMJGIz904a/2pus73Y3Tsx3CVgi1izwi5eCH1cp8dHrOaxCvAy9C5NODqRlQ8w==
   dependencies:
     "@cdklabs/tskb" "^0.0.4"
 
