Skip to content

Commit df7b19b

Browse files
kddejonggithub-actions[bot]
kddejong
authored and
github-actions[bot]
committed
Update CloudFormation schemas to 2026-05-08
1 parent 1492d3f commit df7b19b

191 files changed

Lines changed: 20278 additions & 15264 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎docs/rules.md‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ To include these rules, use the `-e/include-experimental` argument when running
4646
## Rules
4747
(_This documentation is generated by running `cfn-lint --update-documentation`, do not alter this manually_)
4848

49-
The following **307** rules are applied by this linter:
49+
The following **310** rules are applied by this linter:
5050

5151
| Rule ID | Title | Description | Config<br />(Name:Type:Default) | Source | Tags |
5252
| -------- | ----- | ----------- | ---------- | ------ | ---- |
@@ -78,6 +78,7 @@ The following **307** rules are applied by this linter:
7878
| [E1030<a name="E1030"></a>](../src/cfnlint/rules/functions/Length.py) | Length validation of parameters | Making sure Fn::Length is configured correctly | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-length.html) | `functions`,`length` |
7979
| [E1031<a name="E1031"></a>](../src/cfnlint/rules/functions/ToJsonString.py) | ToJsonString validation of parameters | Making sure Fn::ToJsonString is configured correctly | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference.html) | `functions`,`toJsonString` |
8080
| [E1032<a name="E1032"></a>](../src/cfnlint/rules/functions/ForEach.py) | Validates ForEach functions | Validates that ForEach parameters have a valid configuration | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-getatt.html) | `functions`,`foreach` |
81+
| [E1033<a name="E1033"></a>](../src/cfnlint/rules/functions/GetStackOutput.py) | GetStackOutput validation of parameters | Making sure the GetStackOutput function is properly configured | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference.html) | `functions`,`getstackoutput` |
8182
| [E1040<a name="E1040"></a>](../src/cfnlint/rules/functions/GetAttFormat.py) | Check if GetAtt matches destination format | Validate that if source and destination format exists that they match | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/best-practices.html#parmtypes) | `functions`,`getatt` |
8283
| [E1041<a name="E1041"></a>](../src/cfnlint/rules/functions/RefFormat.py) | Check if Ref matches destination format | When source and destination format exists validate that they match in a Ref | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/best-practices.html#parmtypes) | `functions`,`ref` |
8384
| [E1050<a name="E1050"></a>](../src/cfnlint/rules/functions/DynamicReference.py) | Validate the structure of a dynamic reference | Make sure dynamic reference strings have the correct syntax | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references.html) | `functions`,`dynamic reference` |
@@ -176,6 +177,7 @@ The following **307** rules are applied by this linter:
176177
| [E3061<a name="E3061"></a>](../src/cfnlint/rules/resources/s3/BucketTieringConfiguration.py) | Validate the days for tierings in IntelligentTieringConfigurations | When using AWS::S3::Bucket to configure IntelligentTieringConfigurations the Tierings have minimum and maximum values | | [Source](https://docs.aws.amazon.com/AmazonS3/latest/userguide/about-object-ownership.html) | `resources`,`s3` |
177178
| [E3062<a name="E3062"></a>](../src/cfnlint/rules/resources/rds/DbInstanceDbInstanceClassWithEngine.py) | Validates RDS DB Instance Class based on Engine and EngineVersion | Validates the RDS DB instance types based on 'Engine' and 'EngineVersion'. 'EngineVersion' is based on the minor version. | | [Source]() | `resources` |
178179
| [E3063<a name="E3063"></a>](../src/cfnlint/rules/resources/guardduty/DetectorExclusiveProperties.py) | Validate GuardDuty Detector property exclusivity | The request failed because both DataSources and Features were provided. You can provide only one; it is recommended to use Features. | | [Source](https://docs.aws.amazon.com/pt_br/guardduty/latest/ug/guardduty-features-activation-model.html) | `resources`,`guardduty` |
180+
| [E3064<a name="E3064"></a>](../src/cfnlint/rules/resources/ectwo/VpcEndpointPrivateDnsDuplicate.py) | Validate unique PrivateDnsEnabled per service per VPC | Only one Interface VPC Endpoint per service can have PrivateDnsEnabled set to true in a VPC. A second endpoint with the same service and PrivateDnsEnabled will fail to create due to a conflicting DNS domain. | | [Source](https://docs.aws.amazon.com/vpc/latest/privatelink/manage-dns-names.html) | `resources`,`ec2`,`vpc` |
179181
| [E3501<a name="E3501"></a>](../src/cfnlint/rules/resources/sqs/QueueProperties.py) | Validate SQS queue properties are valid | Depending on if the queue is FIFO or not the properties and allowed values change. This rule validates properties and values based on the queue type. | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sqs-queue.html) | `resources`,`sqs` |
180182
| [E3502<a name="E3502"></a>](../src/cfnlint/rules/resources/sqs/QueueDLQ.py) | Validate SQS DLQ queues are the same type | SQS queues using DLQ have to have the destination queue as the same type (FIFO or standard) | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sqs-queue.html) | `resources`,`sqs` |
181183
| [E3503<a name="E3503"></a>](../src/cfnlint/rules/resources/certificatemanager/DomainValidationOptions.py) | ValidationDomain is superdomain of DomainName | In ValidationDomainOptions, the ValidationDomain must be a superdomain of the DomainName being validated | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-certificatemanager-certificate-domainvalidationoption.html#cfn-certificatemanager-certificate-domainvalidationoption-validationdomain) | `certificate`,`certificatemanager`,`domainvalidationoptions`,`validationdomain` |
@@ -313,6 +315,7 @@ The following **307** rules are applied by this linter:
313315
| [W1040<a name="W1040"></a>](../src/cfnlint/rules/functions/ToJsonStringResolved.py) | Validate the values that come from a Fn::ToJsonString function | Resolve the Fn::ToJsonString and then validate the values against the schema | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ToJsonString.html) | `functions`,`tojsonstring` |
314316
| [W1051<a name="W1051"></a>](../src/cfnlint/rules/functions/DynamicReferenceSecretsManagerArn.py) | Validate dynamic references to secrets manager are not used when a secrets manager ARN was expected | Certain properties expect a secret manager ARN. This rule validates if you may be accidently using a secret in place of the ARN | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references.html#dynamic-references-secretsmanager) | `functions`,`dynamic reference` |
315317
| [W1053<a name="W1053"></a>](../src/cfnlint/rules/functions/DynamicReferenceSpaces.py) | Dynamic references should not contain spaces | Dynamic references with spaces between '{{' and 'resolve' will not be resolved by CloudFormation and will be treated as a literal string | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references.html) | `functions`,`dynamic reference` |
318+
| [W1054<a name="W1054"></a>](../src/cfnlint/rules/functions/RawPseudoParameter.py) | Pseudo-parameter string found without Ref | A pseudo-parameter such as 'AWS::NoValue' or 'AWS::Region' was used as a plain string value. In most cases you want 'Ref: AWS::...' instead of the raw string. | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/pseudo-parameter-reference.html) | `functions`,`pseudo-parameter` |
316319
| [W1100<a name="W1100"></a>](../src/cfnlint/rules/aws_cli/UsingMerge.py) | Validate if the template is using YAML merge | The CloudFormation service does not support YAML anchors, aliases, or merging. This rule validates if the merge capability is being used | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-formats.html) | `yaml` |
317320
| [W2001<a name="W2001"></a>](../src/cfnlint/rules/parameters/Used.py) | Check if Parameters are Used | Making sure the parameters defined are used | | [Source](https://github.com/aws-cloudformation/cfn-lint) | `parameters` |
318321
| [W2002<a name="W2002"></a>](../src/cfnlint/rules/parameters/UnsupportedParameterType.py) | Parameter type is not officially supported by CloudFormation | CloudFormation accepts any AWS::SSM::Parameter::Value<> or List<> pattern, but only validates specific types. Using unsupported types may work but CloudFormation will not validate the parameter values. | | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/cloudformation-supplied-parameter-types.html) | `parameters` |

0 commit comments

Comments
 (0)