AWS AWSCloudFormation documentation change
Summary
Updated documentation structure with improved explanations about resource import/drift detection support, added Cloud Control API references, reorganized content about private resource types, and updated AWS::IoTSiteWise resource entries (including adding AWS::IoTSiteWise::Dataset).
Security assessment
Changes focus on documentation clarity, resource listing updates, and integration with Cloud Control API. No security vulnerabilities or security-specific features are mentioned. The AWS::IoTSiteWise::Dataset addition appears to be a standard resource support update.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/resource-import-supported-resources.md b/AWSCloudFormation/latest/UserGuide/resource-import-supported-resources.md index daedcb223..1b30924d4 100644 --- a/AWSCloudFormation/latest/UserGuide/resource-import-supported-resources.md +++ b/AWSCloudFormation/latest/UserGuide/resource-import-supported-resources.md @@ -5 +5 @@ -AWS CloudFormation supports resource import, drift detection, and _IaC generator_ (infrastructure as code generator) operations for the following public (AWS) resource types. +The following table lists AWS resource types that currently support resource import, drift detection, and infrastructure as code (IaC) generator operations. Each resource type name links to its corresponding reference topic in the [AWS resource and property types reference](./aws-template-resource-type-ref.html). @@ -7 +7 @@ AWS CloudFormation supports resource import, drift detection, and _IaC generator -In addition, CloudFormation supports import and drift detection operations for private resource types that are _provisionable_ ; that is, whose provisioning type is either `FULLY_MUTABLE` or `IMMUTABLE`. To import or perform drift detection on a resource of a private resource type, the default version of the resource type _that you have registered in your account_ must be provisionable. For more information about resource provision type, see the `ProvisioningType` parameter of the [`DescribeType`](https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeType.html) action in the AWS CloudFormation API Reference and of the [`describe-type`](https://docs.aws.amazon.com/cli/latest/reference/cloudformation/describe-type.html) command in the AWS CLI Command Reference. +This is not an exhaustive list of AWS resources. If a specific resource type isn't listed, it likely means that it's not accessible through the AWS Cloud Control API. For more information, see [Resource types that support Cloud Control API](https://docs.aws.amazon.com/cloudcontrolapi/latest/userguide/supported-resources.html) in the _Cloud Control API User Guide_. Each AWS service independently determines which resource types to make accessible through Cloud Control API. @@ -9 +9 @@ In addition, CloudFormation supports import and drift detection operations for p -For more information about resource import, see [Import AWS resources into a CloudFormation stack with a resource import](./resource-import.html). +CloudFormation also supports import and drift detection operations for private resource types that are provisionable (those with provisioning types of either `FULLY_MUTABLE` or `IMMUTABLE`). To import or perform drift detection on a private resource type, you must first register the default version of that resource type in your account, and ensure it's provisionable. For more information, see [Use third-party private extensions that have been shared with you](./registry-private.html). @@ -11 +11,11 @@ For more information about resource import, see [Import AWS resources into a Clo -For more information about resource drift detection, see [Detect unmanaged configuration changes to stacks and resources with drift detection](./using-cfn-stack-drift.html). +Note that IaC generator only supports AWS resources that are compatible with Cloud Control API in your Region. + +To programmatically access information about public and private provisionable resource types, you can use the AWS Cloud Control API. For more information, see [Determining if a resource type supports Cloud Control API](https://docs.aws.amazon.com/cloudcontrolapi/latest/userguide/resource-types.html#resource-types-determine-support) in the _Cloud Control API User Guide_. + +To get started with resource import, drift detection, or IaC generator, here are some useful topics to review: + + * [Import AWS resources into a CloudFormation stack with a resource import](./resource-import.html) + + * [Detect unmanaged configuration changes to stacks and resources with drift detection](./using-cfn-stack-drift.html) + + * [Generate templates from existing resources with IaC generator](./generate-IaC.html) @@ -13 +22,0 @@ For more information about resource drift detection, see [Detect unmanaged confi -For more information about the IaC generator, see [Generate templates from existing resources with IaC generator](./generate-IaC.html). Note that IaC generator only supports resources that are supported by Cloud Control API in your Region. For more information, see [Determining if a resource type supports Cloud Control API](https://docs.aws.amazon.com/cloudcontrolapi/latest/userguide/resource-types.html#resource-types-determine-support) in the _Cloud Control API User Guide_. @@ -15 +23,0 @@ For more information about the IaC generator, see [Generate templates from exist -###### Important @@ -17 +24,0 @@ For more information about the IaC generator, see [Generate templates from exist -This list is not an exhaustive list of AWS resources. If a specific resource type is not listed below, it's likely not accessible through the AWS Cloud Control API. For more information, see [Resource types that support Cloud Control API](https://docs.aws.amazon.com/cloudcontrolapi/latest/userguide/supported-resources.html) in the _Cloud Control API User Guide_. Each individual AWS service decides which resource types to make accessible through Cloud Control API. @@ -635,3 +641,0 @@ Resource | Import | Drift detection | IaC generator -[`AWS::IoTSiteWise::AccessPolicy`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-accesspolicy.html) | Yes | Yes | No -[`AWS::IoTSiteWise::Asset`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-asset.html) | Yes | Yes | Yes -[`AWS::IoTSiteWise::AssetModel`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-assetmodel.html) | Yes | Yes | Yes @@ -639 +642,0 @@ Resource | Import | Drift detection | IaC generator -[`AWS::IoTSiteWise::Dashboard`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-dashboard.html) | Yes | Yes | No @@ -642 +644,0 @@ Resource | Import | Drift detection | IaC generator -[`AWS::IoTSiteWise::Gateway`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-gateway.html) | Yes | Yes | Yes @@ -644,2 +645,0 @@ Resource | Import | Drift detection | IaC generator -[`AWS::IoTSiteWise::Portal`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-portal.html) | Yes | Yes | No -[`AWS::IoTSiteWise::Project`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-project.html) | Yes | Yes | No @@ -648,0 +649,8 @@ Resource | Import | Drift detection | IaC generator +[`AWS::IoTSiteWise::AccessPolicy`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-accesspolicy.html) | Yes | Yes | No +[`AWS::IoTSiteWise::Asset`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-asset.html) | Yes | Yes | Yes +[`AWS::IoTSiteWise::AssetModel`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-assetmodel.html) | Yes | Yes | Yes +[`AWS::IoTSiteWise::Dashboard`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-dashboard.html) | Yes | Yes | No +[`AWS::IoTSiteWise::Dataset`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-dataset.html) | Yes | Yes | No +[`AWS::IoTSiteWise::Gateway`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-gateway.html) | Yes | Yes | Yes +[`AWS::IoTSiteWise::Portal`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-portal.html) | Yes | Yes | No +[`AWS::IoTSiteWise::Project`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iotsitewise-project.html) | Yes | Yes | No