aws-cloudformation · kddejong · May 11, 2026 · May 11, 2026
diff --git a/docs/rules.md b/docs/rules.md
@@ -46,7 +46,7 @@ To include these rules, use the `-e/include-experimental` argument when running
 ## Rules
 (_This documentation is generated by running `cfn-lint --update-documentation`, do not alter this manually_)
 
-The following **307** rules are applied by this linter:
+The following **310** rules are applied by this linter:
 
 | Rule ID  | Title | Description | Config<br />(Name:Type:Default) | Source | Tags |
 | -------- | ----- | ----------- | ---------- | ------ | ---- |
@@ -78,6 +78,7 @@ The following **307** rules are applied by this linter:
 | [E1030<a name="E1030"></a>](../src/cfnlint/rules/functions/Length.py) | Length validation of parameters | Making sure Fn::Length is configured correctly |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-length.html) | `functions`,`length` |
 | [E1031<a name="E1031"></a>](../src/cfnlint/rules/functions/ToJsonString.py) | ToJsonString validation of parameters | Making sure Fn::ToJsonString is configured correctly |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference.html) | `functions`,`toJsonString` |
 | [E1032<a name="E1032"></a>](../src/cfnlint/rules/functions/ForEach.py) | Validates ForEach functions | Validates that ForEach parameters have a valid configuration |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-getatt.html) | `functions`,`foreach` |
+| [E1033<a name="E1033"></a>](../src/cfnlint/rules/functions/GetStackOutput.py) | GetStackOutput validation of parameters | Making sure the GetStackOutput function is properly configured |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference.html) | `functions`,`getstackoutput` |
 | [E1040<a name="E1040"></a>](../src/cfnlint/rules/functions/GetAttFormat.py) | Check if GetAtt matches destination format | Validate that if source and destination format exists that they match |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/best-practices.html#parmtypes) | `functions`,`getatt` |
 | [E1041<a name="E1041"></a>](../src/cfnlint/rules/functions/RefFormat.py) | Check if Ref matches destination format | When source and destination format exists validate that they match in a Ref |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/best-practices.html#parmtypes) | `functions`,`ref` |
 | [E1050<a name="E1050"></a>](../src/cfnlint/rules/functions/DynamicReference.py) | Validate the structure of a dynamic reference | Make sure dynamic reference strings have the correct syntax |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references.html) | `functions`,`dynamic reference` |
@@ -176,6 +177,7 @@ The following **307** rules are applied by this linter:
 | [E3061<a name="E3061"></a>](../src/cfnlint/rules/resources/s3/BucketTieringConfiguration.py) | Validate the days for tierings in IntelligentTieringConfigurations | When using AWS::S3::Bucket to configure IntelligentTieringConfigurations the Tierings have minimum and maximum values |  | [Source](https://docs.aws.amazon.com/AmazonS3/latest/userguide/about-object-ownership.html) | `resources`,`s3` |
 | [E3062<a name="E3062"></a>](../src/cfnlint/rules/resources/rds/DbInstanceDbInstanceClassWithEngine.py) | Validates RDS DB Instance Class based on Engine and EngineVersion | Validates the RDS DB instance types based on 'Engine' and 'EngineVersion'. 'EngineVersion' is based on the minor version. |  | [Source]() | `resources` |
 | [E3063<a name="E3063"></a>](../src/cfnlint/rules/resources/guardduty/DetectorExclusiveProperties.py) | Validate GuardDuty Detector property exclusivity | The request failed because both DataSources and Features were provided. You can provide only one; it is recommended to use Features. |  | [Source](https://docs.aws.amazon.com/pt_br/guardduty/latest/ug/guardduty-features-activation-model.html) | `resources`,`guardduty` |
+| [E3064<a name="E3064"></a>](../src/cfnlint/rules/resources/ectwo/VpcEndpointPrivateDnsDuplicate.py) | Validate unique PrivateDnsEnabled per service per VPC | Only one Interface VPC Endpoint per service can have PrivateDnsEnabled set to true in a VPC. A second endpoint with the same service and PrivateDnsEnabled will fail to create due to a conflicting DNS domain. |  | [Source](https://docs.aws.amazon.com/vpc/latest/privatelink/manage-dns-names.html) | `resources`,`ec2`,`vpc` |
 | [E3501<a name="E3501"></a>](../src/cfnlint/rules/resources/sqs/QueueProperties.py) | Validate SQS queue properties are valid | Depending on if the queue is FIFO or not the properties and allowed values change. This rule validates properties and values based on the queue type. |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sqs-queue.html) | `resources`,`sqs` |
 | [E3502<a name="E3502"></a>](../src/cfnlint/rules/resources/sqs/QueueDLQ.py) | Validate SQS DLQ queues are the same type | SQS queues using DLQ have to have the destination queue as the same type (FIFO or standard) |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sqs-queue.html) | `resources`,`sqs` |
 | [E3503<a name="E3503"></a>](../src/cfnlint/rules/resources/certificatemanager/DomainValidationOptions.py) | ValidationDomain is superdomain of DomainName | In ValidationDomainOptions, the ValidationDomain must be a superdomain of the DomainName being validated |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-certificatemanager-certificate-domainvalidationoption.html#cfn-certificatemanager-certificate-domainvalidationoption-validationdomain) | `certificate`,`certificatemanager`,`domainvalidationoptions`,`validationdomain` |
@@ -313,6 +315,7 @@ The following **307** rules are applied by this linter:
 | [W1040<a name="W1040"></a>](../src/cfnlint/rules/functions/ToJsonStringResolved.py) | Validate the values that come from a Fn::ToJsonString function | Resolve the Fn::ToJsonString and then validate the values against the schema |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ToJsonString.html) | `functions`,`tojsonstring` |
 | [W1051<a name="W1051"></a>](../src/cfnlint/rules/functions/DynamicReferenceSecretsManagerArn.py) | Validate dynamic references to secrets manager are not used when a secrets manager ARN was expected | Certain properties expect a secret manager ARN. This rule validates if you may be accidently using a secret in place of the ARN |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references.html#dynamic-references-secretsmanager) | `functions`,`dynamic reference` |
 | [W1053<a name="W1053"></a>](../src/cfnlint/rules/functions/DynamicReferenceSpaces.py) | Dynamic references should not contain spaces | Dynamic references with spaces between '{{' and 'resolve' will not be resolved by CloudFormation and will be treated as a literal string |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references.html) | `functions`,`dynamic reference` |
+| [W1054<a name="W1054"></a>](../src/cfnlint/rules/functions/RawPseudoParameter.py) | Pseudo-parameter string found without Ref | A pseudo-parameter such as 'AWS::NoValue' or 'AWS::Region' was used as a plain string value. In most cases you want 'Ref: AWS::...' instead of the raw string. |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/pseudo-parameter-reference.html) | `functions`,`pseudo-parameter` |
 | [W1100<a name="W1100"></a>](../src/cfnlint/rules/aws_cli/UsingMerge.py) | Validate if the template is using YAML merge | The CloudFormation service does not support YAML anchors, aliases, or merging. This rule validates if the merge capability is being used |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-formats.html) | `yaml` |
 | [W2001<a name="W2001"></a>](../src/cfnlint/rules/parameters/Used.py) | Check if Parameters are Used | Making sure the parameters defined are used |  | [Source](https://github.com/aws-cloudformation/cfn-lint) | `parameters` |
 | [W2002<a name="W2002"></a>](../src/cfnlint/rules/parameters/UnsupportedParameterType.py) | Parameter type is not officially supported by CloudFormation | CloudFormation accepts any AWS::SSM::Parameter::Value<> or List<> pattern, but only validates specific types. Using unsupported types may work but CloudFormation will not validate the parameter values. |  | [Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/cloudformation-supplied-parameter-types.html) | `parameters` |