2025-02-26 Schema Updates

CHANGELOG.md

@@ -1,4 +1,14 @@
 ## 1.31.0 (Unreleased)
+
+FEATURES:
+
+**New Data Source:** `batch_consumable_resource`
+**New Data Source:** `batch_consumable_resources`
+**New Data Source:** `guardduty_publishing_destination`
+**New Data Source:** `guardduty_publishing_destinations`
+**New Resource:** `batch_consumable_resource`
+**New Resource:** `guardduty_publishing_destination`
+
 ## 1.30.0 (February 20, 2025)
 
 FEATURES:
@@ -7,6 +17,8 @@ FEATURES:
 
 ## 1.29.0 (February 14, 2025)
 
+FEATURES:
+
 * **New Data Source:** `awscc_cognito_user_pool_domain`
 * **New Data Source:** `awscc_connect_contact_flow_version`
 * **New Data Source:** `awscc_transfer_web_apps`
@@ -17,13 +29,17 @@ FEATURES:
 
 ## 1.28.0 (February  6, 2025)
 
+FEATURES:
+
 * **New Data Source:** `awscc_deadline_limit`
 * **New Data Source:** `awscc_deadline_queue_limit_association`
 * **New Resource:** `awscc_deadline_limit`
 * **New Resource:** `awscc_deadline_queue_limit_association`
 
 ## 1.27.0 (January 30, 2025)
 
+FEATURES:
+
 * **New Data Source:** `awscc_cloudfront_vpc_origin`
 * **New Data Source:** `awscc_notifications_managed_notification_account_contact_association`
 * **New Data Source:** `awscc_notifications_managed_notification_account_contact_associations`

docs/data-sources/batch_consumable_resource.md

@@ -0,0 +1,31 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "awscc_batch_consumable_resource Data Source - terraform-provider-awscc"
+subcategory: ""
+description: |-
+  Data Source schema for AWS::Batch::ConsumableResource
+---
+
+# awscc_batch_consumable_resource (Data Source)
+
+Data Source schema for AWS::Batch::ConsumableResource
+
+
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `id` (String) Uniquely identifies the resource.
+
+### Read-Only
+
+- `available_quantity` (Number) Available Quantity of ConsumableResource.
+- `consumable_resource_arn` (String) ARN of the Consumable Resource.
+- `consumable_resource_name` (String) Name of ConsumableResource.
+- `created_at` (Number)
+- `in_use_quantity` (Number) In-use Quantity of ConsumableResource.
+- `resource_type` (String) Type of Consumable Resource.
+- `tags` (Map of String) A key-value pair to associate with a resource.
+- `total_quantity` (Number) Total Quantity of ConsumableResource.

docs/data-sources/batch_consumable_resources.md

@@ -0,0 +1,21 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "awscc_batch_consumable_resources Data Source - terraform-provider-awscc"
+subcategory: ""
+description: |-
+  Plural Data Source schema for AWS::Batch::ConsumableResource
+---
+
+# awscc_batch_consumable_resources (Data Source)
+
+Plural Data Source schema for AWS::Batch::ConsumableResource
+
+
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Read-Only
+
+- `id` (String) Uniquely identifies the data source.
+- `ids` (Set of String) Set of Resource Identifiers.

docs/data-sources/batch_job_definition.md

@@ -21,6 +21,7 @@ Data Source schema for AWS::Batch::JobDefinition
 
 ### Read-Only
 
+- `consumable_resource_properties` (Attributes) (see [below for nested schema](#nestedatt--consumable_resource_properties))
 - `container_properties` (Attributes) (see [below for nested schema](#nestedatt--container_properties))
 - `ecs_properties` (Attributes) (see [below for nested schema](#nestedatt--ecs_properties))
 - `eks_properties` (Attributes) (see [below for nested schema](#nestedatt--eks_properties))
@@ -35,6 +36,23 @@ Data Source schema for AWS::Batch::JobDefinition
 - `timeout` (Attributes) (see [below for nested schema](#nestedatt--timeout))
 - `type` (String)
 
+<a id="nestedatt--consumable_resource_properties"></a>
+### Nested Schema for `consumable_resource_properties`
+
+Read-Only:
+
+- `consumable_resource_list` (Attributes List) (see [below for nested schema](#nestedatt--consumable_resource_properties--consumable_resource_list))
+
+<a id="nestedatt--consumable_resource_properties--consumable_resource_list"></a>
+### Nested Schema for `consumable_resource_properties.consumable_resource_list`
+
+Read-Only:
+
+- `consumable_resource` (String) The ARN of the consumable resource the job definition should consume.
+- `quantity` (Number)
+
+
+
 <a id="nestedatt--container_properties"></a>
 ### Nested Schema for `container_properties`
 
@@ -690,12 +708,30 @@ Read-Only:
 
 Read-Only:
 
+- `consumable_resource_properties` (Attributes) (see [below for nested schema](#nestedatt--node_properties--node_range_properties--consumable_resource_properties))
 - `container` (Attributes) (see [below for nested schema](#nestedatt--node_properties--node_range_properties--container))
 - `ecs_properties` (Attributes) (see [below for nested schema](#nestedatt--node_properties--node_range_properties--ecs_properties))
 - `eks_properties` (Attributes) (see [below for nested schema](#nestedatt--node_properties--node_range_properties--eks_properties))
 - `instance_types` (List of String)
 - `target_nodes` (String)
 
+<a id="nestedatt--node_properties--node_range_properties--consumable_resource_properties"></a>
+### Nested Schema for `node_properties.node_range_properties.consumable_resource_properties`
+
+Read-Only:
+
+- `consumable_resource_list` (Attributes List) (see [below for nested schema](#nestedatt--node_properties--node_range_properties--consumable_resource_properties--consumable_resource_list))
+
+<a id="nestedatt--node_properties--node_range_properties--consumable_resource_properties--consumable_resource_list"></a>
+### Nested Schema for `node_properties.node_range_properties.consumable_resource_properties.consumable_resource_list`
+
+Read-Only:
+
+- `consumable_resource` (String) The ARN of the consumable resource the job definition should consume.
+- `quantity` (Number)
+
+
+
 <a id="nestedatt--node_properties--node_range_properties--container"></a>
 ### Nested Schema for `node_properties.node_range_properties.container`
 

docs/data-sources/bedrock_prompt.md

@@ -41,6 +41,7 @@ Read-Only:
 - `additional_model_request_fields` (String) Contains model-specific configurations
 - `gen_ai_resource` (Attributes) Target resource to invoke with Prompt (see [below for nested schema](#nestedatt--variants--gen_ai_resource))
 - `inference_configuration` (Attributes) Model inference configuration (see [below for nested schema](#nestedatt--variants--inference_configuration))
+- `metadata` (Attributes List) List of metadata to associate with the prompt variant. (see [below for nested schema](#nestedatt--variants--metadata))
 - `model_id` (String) ARN or Id of a Bedrock Foundational Model or Inference Profile, or the ARN of a imported model, or a provisioned throughput ARN for custom models.
 - `name` (String) Name for a variant.
 - `template_configuration` (Attributes) Prompt template configuration (see [below for nested schema](#nestedatt--variants--template_configuration))
@@ -81,6 +82,15 @@ Read-Only:
 
 
 
+<a id="nestedatt--variants--metadata"></a>
+### Nested Schema for `variants.metadata`
+
+Read-Only:
+
+- `key` (String) The key of a metadata tag for a prompt variant.
+- `value` (String) The value of a metadata tag for a prompt variant.
+
+
 <a id="nestedatt--variants--template_configuration"></a>
 ### Nested Schema for `variants.template_configuration`
 

docs/data-sources/bedrock_prompt_version.md

@@ -42,6 +42,7 @@ Read-Only:
 - `additional_model_request_fields` (String) Contains model-specific configurations
 - `gen_ai_resource` (Attributes) Target resource to invoke with Prompt (see [below for nested schema](#nestedatt--variants--gen_ai_resource))
 - `inference_configuration` (Attributes) Model inference configuration (see [below for nested schema](#nestedatt--variants--inference_configuration))
+- `metadata` (Attributes List) List of metadata to associate with the prompt variant. (see [below for nested schema](#nestedatt--variants--metadata))
 - `model_id` (String) ARN or Id of a Bedrock Foundational Model or Inference Profile, or the ARN of a imported model, or a provisioned throughput ARN for custom models.
 - `name` (String) Name for a variant.
 - `template_configuration` (Attributes) Prompt template configuration (see [below for nested schema](#nestedatt--variants--template_configuration))
@@ -82,6 +83,15 @@ Read-Only:
 
 
 
+<a id="nestedatt--variants--metadata"></a>
+### Nested Schema for `variants.metadata`
+
+Read-Only:
+
+- `key` (String) The key of a metadata tag for a prompt variant.
+- `value` (String) The value of a metadata tag for a prompt variant.
+
+
 <a id="nestedatt--variants--template_configuration"></a>
 ### Nested Schema for `variants.template_configuration`
 

docs/data-sources/datazone_domain.md

@@ -26,11 +26,13 @@ Data Source schema for AWS::DataZone::Domain
 - `description` (String) The description of the Amazon DataZone domain.
 - `domain_execution_role` (String) The domain execution role that is created when an Amazon DataZone domain is created. The domain execution role is created in the AWS account that houses the Amazon DataZone domain.
 - `domain_id` (String) The id of the Amazon DataZone domain.
+- `domain_version` (String) The version of the domain.
 - `kms_key_identifier` (String) The identifier of the AWS Key Management Service (KMS) key that is used to encrypt the Amazon DataZone domain, metadata, and reporting data.
 - `last_updated_at` (String) The timestamp of when the Amazon DataZone domain was last updated.
 - `managed_account_id` (String) The identifier of the AWS account that manages the domain.
 - `name` (String) The name of the Amazon DataZone domain.
 - `portal_url` (String) The URL of the data portal for this Amazon DataZone domain.
+- `service_role` (String) The service role of the domain that is created.
 - `single_sign_on` (Attributes) The single-sign on configuration of the Amazon DataZone domain. (see [below for nested schema](#nestedatt--single_sign_on))
 - `status` (String) The status of the Amazon DataZone domain.
 - `tags` (Attributes Set) The tags specified for the Amazon DataZone domain. (see [below for nested schema](#nestedatt--tags))

docs/data-sources/ecr_repository_creation_template.md

@@ -21,33 +21,35 @@ Data Source schema for AWS::ECR::RepositoryCreationTemplate
 
 ### Read-Only
 
-- `applied_for` (Set of String) A list of enumerable Strings representing the repository creation scenarios that the template will apply towards.
-- `created_at` (String) Create timestamp of the template.
-- `custom_role_arn` (String) The ARN of the role to be assumed by ECR. This role must be in the same account as the registry that you are configuring.
-- `description` (String) The description of the template.
-- `encryption_configuration` (Attributes) The encryption configuration for the repository. This determines how the contents of your repository are encrypted at rest. By default, when no encryption configuration is set or the AES256 encryption type is used, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts your data at rest using an AES-256 encryption algorithm. This does not require any action on your part.
-
-For more information, see https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html (see [below for nested schema](#nestedatt--encryption_configuration))
-- `image_tag_mutability` (String) The image tag mutability setting for the repository.
-- `lifecycle_policy` (String) The JSON lifecycle policy text to apply to the repository. For information about lifecycle policy syntax, see https://docs.aws.amazon.com/AmazonECR/latest/userguide/LifecyclePolicies.html
-- `prefix` (String) The prefix use to match the repository name and apply the template.
-- `repository_policy` (String) The JSON repository policy text to apply to the repository. For more information, see https://docs.aws.amazon.com/AmazonECR/latest/userguide/RepositoryPolicyExamples.html
-- `resource_tags` (Attributes Set) An array of key-value pairs to apply to this resource. (see [below for nested schema](#nestedatt--resource_tags))
-- `updated_at` (String) Update timestamp of the template.
+- `applied_for` (Set of String) A list of enumerable Strings representing the repository creation scenarios that this template will apply towards. The two supported scenarios are PULL_THROUGH_CACHE and REPLICATION
+- `created_at` (String)
+- `custom_role_arn` (String) The ARN of the role to be assumed by Amazon ECR. Amazon ECR will assume your supplied role when the customRoleArn is specified. When this field isn't specified, Amazon ECR will use the service-linked role for the repository creation template.
+- `description` (String) The description associated with the repository creation template.
+- `encryption_configuration` (Attributes) The encryption configuration associated with the repository creation template. (see [below for nested schema](#nestedatt--encryption_configuration))
+- `image_tag_mutability` (String) The tag mutability setting for the repository. If this parameter is omitted, the default setting of MUTABLE will be used which will allow image tags to be overwritten. If IMMUTABLE is specified, all image tags within the repository will be immutable which will prevent them from being overwritten.
+- `lifecycle_policy` (String) The lifecycle policy to use for repositories created using the template.
+- `prefix` (String) The repository namespace prefix associated with the repository creation template.
+- `repository_policy` (String) he repository policy to apply to repositories created using the template. A repository policy is a permissions policy associated with a repository to control access permissions.
+- `resource_tags` (Attributes Set) The metadata to apply to the repository to help you categorize and organize. Each tag consists of a key and an optional value, both of which you define. Tag keys can have a maximum character length of 128 characters, and tag values can have a maximum length of 256 characters. (see [below for nested schema](#nestedatt--resource_tags))
+- `updated_at` (String)
 
 <a id="nestedatt--encryption_configuration"></a>
 ### Nested Schema for `encryption_configuration`
 
 Read-Only:
 
 - `encryption_type` (String) The encryption type to use.
-- `kms_key` (String) If you use the KMS or KMS_DSSE encryption type, specify the CMK to use for encryption. The alias, key ID, or full ARN of the CMK can be specified. The key must exist in the same Region as the repository. If no key is specified, the default AWS managed CMK for Amazon ECR will be used.
+ If you use the ``KMS`` encryption type, the contents of the repository will be encrypted using server-side encryption with KMSlong key stored in KMS. When you use KMS to encrypt your data, you can either use the default AWS managed KMS key for Amazon ECR, or specify your own KMS key, which you already created.
+ If you use the ``KMS_DSSE`` encryption type, the contents of the repository will be encrypted with two layers of encryption using server-side encryption with the KMS Management Service key stored in KMS. Similar to the ``KMS`` encryption type, you can either use the default AWS managed KMS key for Amazon ECR, or specify your own KMS key, which you've already created. 
+ If you use the ``AES256`` encryption type, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts the images in the repository using an AES256 encryption algorithm.
+ For more information, see [Amazon ECR encryption at rest](https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html) in the *Amazon Elastic Container Registry User Guide*.
+- `kms_key` (String) If you use the ``KMS`` encryption type, specify the KMS key to use for encryption. The alias, key ID, or full ARN of the KMS key can be specified. The key must exist in the same Region as the repository. If no key is specified, the default AWS managed KMS key for Amazon ECR will be used.
 
 
 <a id="nestedatt--resource_tags"></a>
 ### Nested Schema for `resource_tags`
 
 Read-Only:
 
-- `key` (String) The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
-- `value` (String) The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+- `key` (String) One part of a key-value pair that make up a tag. A ``key`` is a general label that acts like a category for more specific tag values.
+- `value` (String) A ``value`` acts as a descriptor within a tag category (key).

docs/data-sources/ecs_cluster.md

@@ -97,7 +97,9 @@ Read-Only:
 Read-Only:
 
 - `fargate_ephemeral_storage_kms_key_id` (String) Specify the KMSlong key ID for the Fargate ephemeral storage.
+ The key must be a single Region key.
 - `kms_key_id` (String) Specify a KMSlong key ID to encrypt the managed storage.
+ The key must be a single Region key.
 
 
 
@@ -118,7 +120,7 @@ Read-Only:
 
 Read-Only:
 
-- `namespace` (String) The namespace name or full Amazon Resource Name (ARN) of the CMAPlong namespace that's used when you create a service and don't specify a Service Connect configuration. The namespace name can include up to 1024 characters. The name is case-sensitive. The name can't include hyphens (-), tilde (~), greater than (>), less than (<), or slash (/).
+- `namespace` (String) The namespace name or full Amazon Resource Name (ARN) of the CMAPlong namespace that's used when you create a service and don't specify a Service Connect configuration. The namespace name can include up to 1024 characters. The name is case-sensitive. The name can't include greater than (>), less than (<), double quotation marks ("), or slash (/).
  If you enter an existing namespace name or ARN, then that namespace will be used. Any namespace type is supported. The namespace must be in this account and this AWS Region.
  If you enter a new name, a CMAPlong namespace will be created. Amazon ECS creates a CMAP namespace with the "API calls" method of instance discovery only. This instance discovery method is the "HTTP" namespace type in the CLIlong. Other types of instance discovery aren't used by Service Connect.
  If you update the cluster with an empty string ``""`` for the namespace name, the cluster configuration for Service Connect is removed. Note that the namespace will remain in CMAP and must be deleted separately.

docs/data-sources/guardduty_publishing_destination.md

@@ -0,0 +1,47 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "awscc_guardduty_publishing_destination Data Source - terraform-provider-awscc"
+subcategory: ""
+description: |-
+  Data Source schema for AWS::GuardDuty::PublishingDestination
+---
+
+# awscc_guardduty_publishing_destination (Data Source)
+
+Data Source schema for AWS::GuardDuty::PublishingDestination
+
+
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `id` (String) Uniquely identifies the resource.
+
+### Read-Only
+
+- `destination_properties` (Attributes) (see [below for nested schema](#nestedatt--destination_properties))
+- `destination_type` (String) The type of resource for the publishing destination. Currently only Amazon S3 buckets are supported.
+- `detector_id` (String) The ID of the GuardDuty detector associated with the publishing destination.
+- `publishing_destination_id` (String) The ID of the publishing destination.
+- `publishing_failure_start_timestamp` (String) The time, in epoch millisecond format, at which GuardDuty was first unable to publish findings to the destination.
+- `status` (String) The status of the publishing destination.
+- `tags` (Attributes List) (see [below for nested schema](#nestedatt--tags))
+
+<a id="nestedatt--destination_properties"></a>
+### Nested Schema for `destination_properties`
+
+Read-Only:
+
+- `destination_arn` (String) The ARN of the resource to publish to.
+- `kms_key_arn` (String) The ARN of the KMS key to use for encryption.
+
+
+<a id="nestedatt--tags"></a>
+### Nested Schema for `tags`
+
+Read-Only:
+
+- `key` (String)
+- `value` (String)