feat(sources): update cfn-schema

[aws-cdk-automation]

⚠️ This Pull Request updates daily and will overwrite all manual changes pushed to the branch

Updates the cfn-schema source from upstream. See details in workflow run.

---

Automatically created by projen via the "update-source-cfn-schema" workflow

[github-actions]

To work on this Pull Request, please create a new branch and PR. This prevents your work from being deleted by the automation.

Run the following commands inside the repo:

gh co 831
git switch -c fix-pr-831 && git push -u origin HEAD
gh pr create -t "fix: PR #831" --body "Fixes https://github.com/cdklabs/awscdk-service-spec/pull/831"

[github-actions]

@aws-cdk/aws-service-spec: Model database diff detected

├[~] service aws-cognito
│ └ resources
│    └[~] resource AWS::Cognito::IdentityPoolRoleAttachment
│      └ properties
│         └ Roles: - json
│                  + Map<string, string> ⇐ json
├[+] service aws-datazone
│ ├  capitalized: DataZone
│ │  cloudFormationNamespace: AWS::DataZone
│ │  name: aws-datazone
│ │  shortName: datazone
│ └ resources
│    ├resource AWS::DataZone::DataSource
│    │├  name: DataSource
│    ││  cloudFormationType: AWS::DataZone::DataSource
│    ││  documentation: Definition of AWS::DataZone::DataSource Resource Type
│    │├ properties
│    ││  ├AssetFormsInput: Array<FormInput>
│    ││  ├Description: string
│    ││  ├DomainIdentifier: string (required, immutable)
│    ││  ├EnableSetting: string
│    ││  ├EnvironmentIdentifier: string (required, immutable)
│    ││  ├Configuration: DataSourceConfigurationInput
│    ││  ├Name: string (required)
│    ││  ├ProjectIdentifier: string (required, immutable)
│    ││  ├PublishOnImport: boolean
│    ││  ├Recommendation: RecommendationConfiguration
│    ││  ├Schedule: ScheduleConfiguration
│    ││  └Type: string (required, immutable)
│    │├ attributes
│    ││  ├CreatedAt: string
│    ││  ├DomainId: string
│    ││  ├EnvironmentId: string
│    ││  ├Id: string
│    ││  ├LastRunAssetCount: number
│    ││  ├LastRunAt: string
│    ││  ├LastRunStatus: string
│    ││  ├ProjectId: string
│    ││  ├Status: string
│    ││  └UpdatedAt: string
│    │└ types
│    │   ├type FormInput
│    │   │├  documentation: The details of a metadata form.
│    │   ││  name: FormInput
│    │   │└ properties
│    │   │   ├FormName: string (required)
│    │   │   ├TypeIdentifier: string
│    │   │   ├TypeRevision: string
│    │   │   └Content: string
│    │   ├type DataSourceConfigurationInput
│    │   │├  name: DataSourceConfigurationInput
│    │   │└ properties
│    │   │   ├GlueRunConfiguration: GlueRunConfigurationInput
│    │   │   └RedshiftRunConfiguration: RedshiftRunConfigurationInput
│    │   ├type GlueRunConfigurationInput
│    │   │├  name: GlueRunConfigurationInput
│    │   │└ properties
│    │   │   ├DataAccessRole: string
│    │   │   └RelationalFilterConfigurations: Array<RelationalFilterConfiguration> (required)
│    │   ├type RelationalFilterConfiguration
│    │   │├  documentation: The relational filter configuration for the data source.
│    │   ││  name: RelationalFilterConfiguration
│    │   │└ properties
│    │   │   ├DatabaseName: string (required)
│    │   │   ├SchemaName: string
│    │   │   └FilterExpressions: Array<FilterExpression>
│    │   ├type FilterExpression
│    │   │├  documentation: The search filter expression.
│    │   ││  name: FilterExpression
│    │   │└ properties
│    │   │   ├Type: string (required)
│    │   │   └Expression: string (required)
│    │   ├type RedshiftRunConfigurationInput
│    │   │├  documentation: The configuration details of the Amazon Redshift data source.
│    │   ││  name: RedshiftRunConfigurationInput
│    │   │└ properties
│    │   │   ├DataAccessRole: string
│    │   │   ├RelationalFilterConfigurations: Array<RelationalFilterConfiguration> (required)
│    │   │   ├RedshiftCredentialConfiguration: RedshiftCredentialConfiguration (required)
│    │   │   └RedshiftStorage: RedshiftStorage (required)
│    │   ├type RedshiftCredentialConfiguration
│    │   │├  documentation: The ARN of a secret manager for an Amazon Redshift cluster.
│    │   ││  name: RedshiftCredentialConfiguration
│    │   │└ properties
│    │   │   └SecretManagerArn: string (required)
│    │   ├type RedshiftStorage
│    │   │├  documentation: The details of the Amazon Redshift cluster source.
│    │   ││  name: RedshiftStorage
│    │   │└ properties
│    │   │   ├RedshiftClusterSource: RedshiftClusterStorage
│    │   │   └RedshiftServerlessSource: RedshiftServerlessStorage
│    │   ├type RedshiftClusterStorage
│    │   │├  documentation: The name of an Amazon Redshift cluster.
│    │   ││  name: RedshiftClusterStorage
│    │   │└ properties
│    │   │   └ClusterName: string (required)
│    │   ├type RedshiftServerlessStorage
│    │   │├  documentation: The details of the Amazon Redshift Serverless workgroup storage.
│    │   ││  name: RedshiftServerlessStorage
│    │   │└ properties
│    │   │   └WorkgroupName: string (required)
│    │   ├type RecommendationConfiguration
│    │   │├  documentation: The recommendation to be updated as part of the UpdateDataSource action.
│    │   ││  name: RecommendationConfiguration
│    │   │└ properties
│    │   │   └EnableBusinessNameGeneration: boolean
│    │   └type ScheduleConfiguration
│    │    ├  documentation: The schedule of the data source runs.
│    │    │  name: ScheduleConfiguration
│    │    └ properties
│    │       ├Timezone: string
│    │       └Schedule: string
│    ├resource AWS::DataZone::Domain
│    │├  name: Domain
│    ││  cloudFormationType: AWS::DataZone::Domain
│    ││  documentation: A domain is an organizing entity for connecting together assets, users, and their projects
│    ││  tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│    │├ properties
│    ││  ├Description: string
│    ││  ├DomainExecutionRole: string (required)
│    ││  ├KmsKeyIdentifier: string (immutable)
│    ││  ├Name: string (required)
│    ││  ├SingleSignOn: SingleSignOn
│    ││  └Tags: Array<tag>
│    │├ attributes
│    ││  ├Arn: string
│    ││  ├CreatedAt: string
│    ││  ├Id: string
│    ││  ├LastUpdatedAt: string
│    ││  ├ManagedAccountId: string
│    ││  ├PortalUrl: string
│    ││  └Status: string
│    │└ types
│    │   └type SingleSignOn
│    │    ├  documentation: The single-sign on configuration of the Amazon DataZone domain.
│    │    │  name: SingleSignOn
│    │    └ properties
│    │       ├Type: string
│    │       └UserAssignment: string
│    ├resource AWS::DataZone::Environment
│    │├  name: Environment
│    ││  cloudFormationType: AWS::DataZone::Environment
│    ││  documentation: Definition of AWS::DataZone::Environment Resource Type
│    │├ properties
│    ││  ├Description: string
│    ││  ├DomainIdentifier: string (required, immutable)
│    ││  ├EnvironmentProfileIdentifier: string (required, immutable)
│    ││  ├GlossaryTerms: Array<string>
│    ││  ├Name: string (required)
│    ││  ├ProjectIdentifier: string (required, immutable)
│    ││  └UserParameters: Array<EnvironmentParameter> (immutable)
│    │├ attributes
│    ││  ├AwsAccountId: string
│    ││  ├AwsAccountRegion: string
│    ││  ├CreatedAt: string
│    ││  ├CreatedBy: string
│    ││  ├DomainId: string
│    ││  ├EnvironmentBlueprintId: string
│    ││  ├EnvironmentProfileId: string
│    ││  ├Id: string
│    ││  ├ProjectId: string
│    ││  ├Provider: string
│    ││  ├Status: string
│    ││  └UpdatedAt: string
│    │└ types
│    │   └type EnvironmentParameter
│    │    ├  documentation: The parameter details of an environment.
│    │    │  name: EnvironmentParameter
│    │    └ properties
│    │       ├Name: string
│    │       └Value: string
│    ├resource AWS::DataZone::EnvironmentBlueprintConfiguration
│    │├  name: EnvironmentBlueprintConfiguration
│    ││  cloudFormationType: AWS::DataZone::EnvironmentBlueprintConfiguration
│    ││  documentation: Definition of AWS::DataZone::EnvironmentBlueprintConfiguration Resource Type
│    │├ properties
│    ││  ├RegionalParameters: Array<RegionalParameter>
│    ││  ├ProvisioningRoleArn: string
│    ││  ├EnabledRegions: Array<string> (required)
│    ││  ├EnvironmentBlueprintIdentifier: string (required, immutable)
│    ││  ├DomainIdentifier: string (required, immutable)
│    ││  └ManageAccessRoleArn: string
│    │├ attributes
│    ││  ├CreatedAt: string
│    ││  ├DomainId: string
│    ││  ├EnvironmentBlueprintId: string
│    ││  └UpdatedAt: string
│    │└ types
│    │   └type RegionalParameter
│    │    ├  name: RegionalParameter
│    │    └ properties
│    │       ├Parameters: Map<string, string>
│    │       └Region: string
│    ├resource AWS::DataZone::EnvironmentProfile
│    │├  name: EnvironmentProfile
│    ││  cloudFormationType: AWS::DataZone::EnvironmentProfile
│    ││  documentation: AWS Datazone Environment Profile is pre-configured set of resources and blueprints that provide reusable templates for creating environments.
│    │├ properties
│    ││  ├AwsAccountId: string
│    ││  ├AwsAccountRegion: string
│    ││  ├Description: string
│    ││  ├DomainIdentifier: string (required, immutable)
│    ││  ├EnvironmentBlueprintIdentifier: string (required, immutable)
│    ││  ├Name: string (required)
│    ││  ├ProjectIdentifier: string (required, immutable)
│    ││  └UserParameters: Array<EnvironmentParameter>
│    │├ attributes
│    ││  ├CreatedAt: string
│    ││  ├CreatedBy: string
│    ││  ├DomainId: string
│    ││  ├EnvironmentBlueprintId: string
│    ││  ├Id: string
│    ││  ├ProjectId: string
│    ││  └UpdatedAt: string
│    │└ types
│    │   └type EnvironmentParameter
│    │    ├  documentation: The parameter details of an environment profile.
│    │    │  name: EnvironmentParameter
│    │    └ properties
│    │       ├Name: string
│    │       └Value: string
│    ├resource AWS::DataZone::Project
│    │├  name: Project
│    ││  cloudFormationType: AWS::DataZone::Project
│    ││  documentation: Amazon DataZone projects are business use case–based groupings of people, assets (data), and tools used to simplify access to the AWS analytics.
│    │├ properties
│    ││  ├Description: string
│    ││  ├DomainIdentifier: string (required, immutable)
│    ││  ├GlossaryTerms: Array<string>
│    ││  └Name: string (required)
│    │└ attributes
│    │   ├Id: string
│    │   ├CreatedAt: string
│    │   ├CreatedBy: string
│    │   ├DomainId: string
│    │   └LastUpdatedAt: string
│    └resource AWS::DataZone::SubscriptionTarget
│     ├  name: SubscriptionTarget
│     │  cloudFormationType: AWS::DataZone::SubscriptionTarget
│     │  documentation: Subscription targets enables one to access the data to which you have subscribed in your projects.
│     ├ properties
│     │  ├ApplicableAssetTypes: Array<string> (required)
│     │  ├AuthorizedPrincipals: Array<string> (required)
│     │  ├DomainIdentifier: string (required, immutable)
│     │  ├EnvironmentIdentifier: string (required, immutable)
│     │  ├ManageAccessRole: string (required)
│     │  ├Name: string (required)
│     │  ├Provider: string
│     │  ├SubscriptionTargetConfig: Array<SubscriptionTargetForm> (required)
│     │  └Type: string (required, immutable)
│     ├ attributes
│     │  ├CreatedAt: string
│     │  ├CreatedBy: string
│     │  ├DomainId: string
│     │  ├EnvironmentId: string
│     │  ├Id: string
│     │  ├ProjectId: string
│     │  ├UpdatedAt: string
│     │  └UpdatedBy: string
│     └ types
│        └type SubscriptionTargetForm
│         ├  documentation: The details of the subscription target configuration.
│         │  name: SubscriptionTargetForm
│         └ properties
│            ├FormName: string (required)
│            └Content: string (required)
├[~] service aws-ecs
│ └ resources
│    └[~] resource AWS::ECS::Service
│      └ types
│         ├[~] type ServiceConnectService
│         │ └ properties
│         │    ├[+] Timeout: TimeoutConfiguration
│         │    └[+] Tls: ServiceConnectTlsConfiguration
│         ├[+] type ServiceConnectTlsCertificateAuthority
│         │ ├  name: ServiceConnectTlsCertificateAuthority
│         │ └ properties
│         │    └AwsPcaAuthorityArn: string
│         ├[+] type ServiceConnectTlsConfiguration
│         │ ├  name: ServiceConnectTlsConfiguration
│         │ └ properties
│         │    ├IssuerCertificateAuthority: ServiceConnectTlsCertificateAuthority (required)
│         │    ├KmsKey: string
│         │    └RoleArn: string
│         └[+] type TimeoutConfiguration
│           ├  name: TimeoutConfiguration
│           └ properties
│              ├IdleTimeoutSeconds: integer
│              └PerRequestTimeoutSeconds: integer
└[~] service aws-elasticloadbalancingv2
  └ resources
     └[~] resource AWS::ElasticLoadBalancingV2::LoadBalancer
       └ properties
          └[+] EnforceSecurityGroupInboundRulesOnPrivateLinkTraffic: string