# Provider Coverage Report

Auto-generated by `scripts/audit-provider-coverage.ts`. Do not edit by hand; re-run the script to regenerate.

- Generated: `2026-07-31T06:56:37.717Z`
- Schema version: 1
- Total CFn resource types audited: **1705**

## Summary

| Tier | Provisioning path | Count |
|------|-------------------|-------|
| **Tier 1** | SDK Provider (preferred) | 134 |
| **Tier 2** | Cloud Control API fallback | 1372 |
| **Tier 3** | Not provisionable by cdkd today | 199 |

## Tier 1 — SDK Provider registered

Direct SDK calls via `src/provisioning/register-providers.ts`. Fastest, drift-aware, and shape-stable on reads. This is the canonical path; new high-traffic types should land here.

- `AWS::ApiGateway::Account`
- `AWS::ApiGateway::Authorizer`
- `AWS::ApiGateway::Deployment`
- `AWS::ApiGateway::Method`
- `AWS::ApiGateway::Resource`
- `AWS::ApiGateway::Stage`
- `AWS::ApiGatewayV2::Api`
- `AWS::ApiGatewayV2::Authorizer`
- `AWS::ApiGatewayV2::Integration`
- `AWS::ApiGatewayV2::Route`
- `AWS::ApiGatewayV2::Stage`
- `AWS::AppSync::ApiKey`
- `AWS::AppSync::DataSource`
- `AWS::AppSync::GraphQLApi`
- `AWS::AppSync::GraphQLSchema`
- `AWS::AppSync::Resolver`
- `AWS::AutoScaling::AutoScalingGroup`
- `AWS::BedrockAgentCore::Browser`
- `AWS::BedrockAgentCore::CodeInterpreter`
- `AWS::BedrockAgentCore::Evaluator`
- `AWS::BedrockAgentCore::Runtime`
- `AWS::Budgets::Budget`
- `AWS::CertificateManager::Certificate`
- `AWS::CloudFormation::Stack`
- `AWS::CloudFormation::WaitConditionHandle`
- `AWS::CloudFront::CloudFrontOriginAccessIdentity`
- `AWS::CloudFront::Distribution`
- `AWS::CloudFront::OriginAccessControl`
- `AWS::CloudTrail::Trail`
- `AWS::CloudWatch::Alarm`
- `AWS::CloudWatch::AnomalyDetector`
- `AWS::CodeBuild::Project`
- `AWS::CodeCommit::Repository`
- `AWS::Cognito::UserPool`
- `AWS::DLM::LifecyclePolicy`
- `AWS::DocDB::DBCluster`
- `AWS::DocDB::DBInstance`
- `AWS::DocDB::DBSubnetGroup`
- `AWS::DynamoDB::GlobalTable`
- `AWS::DynamoDB::Table`
- `AWS::EC2::EIP`
- `AWS::EC2::Instance`
- `AWS::EC2::InternetGateway`
- `AWS::EC2::NatGateway`
- `AWS::EC2::NetworkAcl`
- `AWS::EC2::NetworkAclEntry`
- `AWS::EC2::Route`
- `AWS::EC2::RouteTable`
- `AWS::EC2::SecurityGroup`
- `AWS::EC2::SecurityGroupIngress`
- `AWS::EC2::Subnet`
- `AWS::EC2::SubnetNetworkAclAssociation`
- `AWS::EC2::SubnetRouteTableAssociation`
- `AWS::EC2::VPC`
- `AWS::EC2::VPCGatewayAttachment`
- `AWS::ECR::Repository`
- `AWS::ECS::Cluster`
- `AWS::ECS::Service`
- `AWS::ECS::TaskDefinition`
- `AWS::EFS::AccessPoint`
- `AWS::EFS::FileSystem`
- `AWS::EFS::MountTarget`
- `AWS::EMR::Cluster`
- `AWS::EMR::InstanceFleetConfig`
- `AWS::EMR::InstanceGroupConfig`
- `AWS::ElastiCache::CacheCluster`
- `AWS::ElastiCache::SubnetGroup`
- `AWS::ElasticLoadBalancingV2::Listener`
- `AWS::ElasticLoadBalancingV2::LoadBalancer`
- `AWS::ElasticLoadBalancingV2::TargetGroup`
- `AWS::Events::EventBus`
- `AWS::Events::Rule`
- `AWS::FSx::FileSystem`
- `AWS::Glue::Connection`
- `AWS::Glue::Crawler`
- `AWS::Glue::Database`
- `AWS::Glue::Job`
- `AWS::Glue::SecurityConfiguration`
- `AWS::Glue::Table`
- `AWS::Glue::Trigger`
- `AWS::Glue::Workflow`
- `AWS::IAM::AccessKey`
- `AWS::IAM::Group`
- `AWS::IAM::InstanceProfile`
- `AWS::IAM::ManagedPolicy`
- `AWS::IAM::Policy`
- `AWS::IAM::Role`
- `AWS::IAM::User`
- `AWS::IAM::UserToGroupAddition`
- `AWS::KMS::Alias`
- `AWS::KMS::Key`
- `AWS::Kinesis::Stream`
- `AWS::Kinesis::StreamConsumer`
- `AWS::KinesisFirehose::DeliveryStream`
- `AWS::Lambda::EventInvokeConfig`
- `AWS::Lambda::EventSourceMapping`
- `AWS::Lambda::Function`
- `AWS::Lambda::LayerVersion`
- `AWS::Lambda::MicrovmImage`
- `AWS::Lambda::Permission`
- `AWS::Lambda::Url`
- `AWS::Logs::LogGroup`
- `AWS::Neptune::DBCluster`
- `AWS::Neptune::DBInstance`
- `AWS::Neptune::DBSubnetGroup`
- `AWS::RDS::DBCluster`
- `AWS::RDS::DBInstance`
- `AWS::RDS::DBProxy`
- `AWS::RDS::DBProxyEndpoint`
- `AWS::RDS::DBProxyTargetGroup`
- `AWS::RDS::DBSubnetGroup`
- `AWS::Route53::HostedZone`
- `AWS::Route53::RecordSet`
- `AWS::S3::Bucket`
- `AWS::S3::BucketPolicy`
- `AWS::S3Express::DirectoryBucket`
- `AWS::S3Tables::Namespace`
- `AWS::S3Tables::Table`
- `AWS::S3Tables::TableBucket`
- `AWS::S3Vectors::VectorBucket`
- `AWS::SNS::Subscription`
- `AWS::SNS::Topic`
- `AWS::SNS::TopicPolicy`
- `AWS::SQS::Queue`
- `AWS::SQS::QueuePolicy`
- `AWS::SSM::Parameter`
- `AWS::Scheduler::Schedule`
- `AWS::SecretsManager::Secret`
- `AWS::ServiceDiscovery::HttpNamespace`
- `AWS::ServiceDiscovery::PrivateDnsNamespace`
- `AWS::ServiceDiscovery::PublicDnsNamespace`
- `AWS::ServiceDiscovery::Service`
- `AWS::StepFunctions::StateMachine`
- `AWS::WAFv2::WebACL`

## Tier 2 — Cloud Control API fallback

No dedicated SDK Provider, but `ProvisioningType` is `FULLY_MUTABLE` or `IMMUTABLE`. cdkd routes these through the generic Cloud Control API today — deployable, but slower (async polling) and shape-divergent on reads (see `CC_API_FALLBACK_DENY_LIST` for known drift offenders). Frequency-weighted picks from this list are the next candidates for dedicated providers.

- `AWS::ACMPCA::Certificate`
- `AWS::ACMPCA::CertificateAuthority`
- `AWS::ACMPCA::CertificateAuthorityActivation`
- `AWS::ACMPCA::Permission`
- `AWS::AIOps::InvestigationGroup`
- `AWS::APS::AnomalyDetector`
- `AWS::APS::ResourcePolicy`
- `AWS::APS::RuleGroupsNamespace`
- `AWS::APS::Scraper`
- `AWS::APS::Workspace`
- `AWS::ARCRegionSwitch::Plan`
- `AWS::ARCZonalShift::AutoshiftObserverNotificationStatus`
- `AWS::ARCZonalShift::ZonalAutoshiftConfiguration`
- `AWS::AWSExternalAnthropic::Workspace`
- `AWS::AccessAnalyzer::Analyzer`
- `AWS::AmazonMQ::Broker`
- `AWS::AmazonMQ::Configuration`
- `AWS::Amplify::App`
- `AWS::Amplify::Branch`
- `AWS::Amplify::Domain`
- `AWS::AmplifyUIBuilder::Component`
- `AWS::AmplifyUIBuilder::Form`
- `AWS::AmplifyUIBuilder::Theme`
- `AWS::ApiGateway::ApiKey`
- `AWS::ApiGateway::BasePathMapping`
- `AWS::ApiGateway::BasePathMappingV2`
- `AWS::ApiGateway::ClientCertificate`
- `AWS::ApiGateway::DocumentationPart`
- `AWS::ApiGateway::DocumentationVersion`
- `AWS::ApiGateway::DomainName`
- `AWS::ApiGateway::DomainNameAccessAssociation`
- `AWS::ApiGateway::DomainNameV2`
- `AWS::ApiGateway::GatewayResponse`
- `AWS::ApiGateway::Model`
- `AWS::ApiGateway::RequestValidator`
- `AWS::ApiGateway::RestApi`
- `AWS::ApiGateway::UsagePlan`
- `AWS::ApiGateway::UsagePlanKey`
- `AWS::ApiGateway::VpcLink`
- `AWS::ApiGatewayV2::ApiMapping`
- `AWS::ApiGatewayV2::Deployment`
- `AWS::ApiGatewayV2::DomainName`
- `AWS::ApiGatewayV2::IntegrationResponse`
- `AWS::ApiGatewayV2::Model`
- `AWS::ApiGatewayV2::RouteResponse`
- `AWS::ApiGatewayV2::RoutingRule`
- `AWS::ApiGatewayV2::VpcLink`
- `AWS::AppConfig::Application`
- `AWS::AppConfig::ConfigurationProfile`
- `AWS::AppConfig::Deployment`
- `AWS::AppConfig::DeploymentStrategy`
- `AWS::AppConfig::Environment`
- `AWS::AppConfig::Extension`
- `AWS::AppConfig::ExtensionAssociation`
- `AWS::AppConfig::HostedConfigurationVersion`
- `AWS::AppFlow::Connector`
- `AWS::AppFlow::ConnectorProfile`
- `AWS::AppFlow::Flow`
- `AWS::AppIntegrations::Application`
- `AWS::AppIntegrations::DataIntegration`
- `AWS::AppIntegrations::EventIntegration`
- `AWS::AppRunner::AutoScalingConfiguration`
- `AWS::AppRunner::ObservabilityConfiguration`
- `AWS::AppRunner::Service`
- `AWS::AppRunner::VpcConnector`
- `AWS::AppRunner::VpcIngressConnection`
- `AWS::AppStream::AppBlock`
- `AWS::AppStream::AppBlockBuilder`
- `AWS::AppStream::Application`
- `AWS::AppStream::ApplicationEntitlementAssociation`
- `AWS::AppStream::ApplicationFleetAssociation`
- `AWS::AppStream::DirectoryConfig`
- `AWS::AppStream::Entitlement`
- `AWS::AppStream::ImageBuilder`
- `AWS::AppStream::Stack`
- `AWS::AppStream::StackFleetAssociation`
- `AWS::AppStream::StackUserAssociation`
- `AWS::AppStream::User`
- `AWS::AppSync::Api`
- `AWS::AppSync::ChannelNamespace`
- `AWS::AppSync::DomainName`
- `AWS::AppSync::DomainNameApiAssociation`
- `AWS::AppSync::FunctionConfiguration`
- `AWS::AppSync::SourceApiAssociation`
- `AWS::AppTest::TestCase`
- `AWS::ApplicationAutoScaling::ScalableTarget`
- `AWS::ApplicationAutoScaling::ScalingPolicy`
- `AWS::ApplicationInsights::Application`
- `AWS::ApplicationSignals::Discovery`
- `AWS::ApplicationSignals::GroupingConfiguration`
- `AWS::ApplicationSignals::ServiceLevelObjective`
- `AWS::Athena::CapacityReservation`
- `AWS::Athena::DataCatalog`
- `AWS::Athena::NamedQuery`
- `AWS::Athena::PreparedStatement`
- `AWS::Athena::WorkGroup`
- `AWS::AuditManager::Assessment`
- `AWS::AuditManager::AssessmentFramework`
- `AWS::AutoScaling::LaunchConfiguration`
- `AWS::AutoScaling::LifecycleHook`
- `AWS::AutoScaling::ScalingPolicy`
- `AWS::AutoScaling::ScheduledAction`
- `AWS::AutoScaling::WarmPool`
- `AWS::B2BI::Capability`
- `AWS::B2BI::Partnership`
- `AWS::B2BI::Profile`
- `AWS::B2BI::Transformer`
- `AWS::BCM::Dashboard`
- `AWS::BCMDataExports::Export`
- `AWS::Backup::BackupPlan`
- `AWS::Backup::BackupSelection`
- `AWS::Backup::BackupVault`
- `AWS::Backup::Framework`
- `AWS::Backup::LegalHold`
- `AWS::Backup::LogicallyAirGappedBackupVault`
- `AWS::Backup::ReportPlan`
- `AWS::Backup::RestoreTestingPlan`
- `AWS::Backup::RestoreTestingSelection`
- `AWS::Backup::TieringConfiguration`
- `AWS::BackupGateway::Hypervisor`
- `AWS::Batch::ComputeEnvironment`
- `AWS::Batch::ConsumableResource`
- `AWS::Batch::JobDefinition`
- `AWS::Batch::JobQueue`
- `AWS::Batch::QuotaShare`
- `AWS::Batch::SchedulingPolicy`
- `AWS::Batch::ServiceEnvironment`
- `AWS::BcmPricingCalculator::BillScenario`
- `AWS::Bedrock::Agent`
- `AWS::Bedrock::AgentAlias`
- `AWS::Bedrock::ApplicationInferenceProfile`
- `AWS::Bedrock::AutomatedReasoningPolicy`
- `AWS::Bedrock::AutomatedReasoningPolicyVersion`
- `AWS::Bedrock::Blueprint`
- `AWS::Bedrock::DataAutomationLibrary`
- `AWS::Bedrock::DataAutomationProject`
- `AWS::Bedrock::DataSource`
- `AWS::Bedrock::EnforcedGuardrailConfiguration`
- `AWS::Bedrock::Flow`
- `AWS::Bedrock::FlowAlias`
- `AWS::Bedrock::FlowVersion`
- `AWS::Bedrock::Guardrail`
- `AWS::Bedrock::GuardrailVersion`
- `AWS::Bedrock::IntelligentPromptRouter`
- `AWS::Bedrock::KnowledgeBase`
- `AWS::Bedrock::KnowledgeBasePolicy`
- `AWS::Bedrock::Prompt`
- `AWS::Bedrock::PromptVersion`
- `AWS::Bedrock::ResourcePolicy`
- `AWS::BedrockAgentCore::ApiKeyCredentialProvider`
- `AWS::BedrockAgentCore::BrowserCustom`
- `AWS::BedrockAgentCore::BrowserProfile`
- `AWS::BedrockAgentCore::CodeInterpreterCustom`
- `AWS::BedrockAgentCore::ConfigurationBundle`
- `AWS::BedrockAgentCore::Dataset`
- `AWS::BedrockAgentCore::Gateway`
- `AWS::BedrockAgentCore::GatewayTarget`
- `AWS::BedrockAgentCore::Harness`
- `AWS::BedrockAgentCore::HarnessEndpoint`
- `AWS::BedrockAgentCore::Memory`
- `AWS::BedrockAgentCore::OAuth2CredentialProvider`
- `AWS::BedrockAgentCore::OnlineEvaluationConfig`
- `AWS::BedrockAgentCore::PaymentConnector`
- `AWS::BedrockAgentCore::PaymentCredentialProvider`
- `AWS::BedrockAgentCore::PaymentManager`
- `AWS::BedrockAgentCore::Policy`
- `AWS::BedrockAgentCore::PolicyEngine`
- `AWS::BedrockAgentCore::ResourcePolicy`
- `AWS::BedrockAgentCore::RuntimeEndpoint`
- `AWS::BedrockAgentCore::WorkloadIdentity`
- `AWS::BedrockMantle::Project`
- `AWS::Billing::BillingView`
- `AWS::BillingConductor::BillingGroup`
- `AWS::BillingConductor::CustomLineItem`
- `AWS::BillingConductor::PricingPlan`
- `AWS::BillingConductor::PricingRule`
- `AWS::Braket::SpendingLimit`
- `AWS::Budgets::BudgetsAction`
- `AWS::CE::AnomalyMonitor`
- `AWS::CE::AnomalySubscription`
- `AWS::CE::CostCategory`
- `AWS::CUR::ReportDefinition`
- `AWS::Cases::CaseRule`
- `AWS::Cases::Domain`
- `AWS::Cases::Field`
- `AWS::Cases::Layout`
- `AWS::Cases::Template`
- `AWS::Cassandra::Keyspace`
- `AWS::Cassandra::Table`
- `AWS::Cassandra::Type`
- `AWS::CertificateManager::Account`
- `AWS::CertificateManager::AcmeDomainValidation`
- `AWS::CertificateManager::AcmeEndpoint`
- `AWS::CertificateManager::AcmeExternalAccountBinding`
- `AWS::Chatbot::CustomAction`
- `AWS::Chatbot::MicrosoftTeamsChannelConfiguration`
- `AWS::Chatbot::SlackChannelConfiguration`
- `AWS::Chime::AppInstance`
- `AWS::Chime::AppInstanceBot`
- `AWS::Chime::AppInstanceUser`
- `AWS::CleanRooms::AnalysisTemplate`
- `AWS::CleanRooms::Collaboration`
- `AWS::CleanRooms::ConfiguredTable`
- `AWS::CleanRooms::ConfiguredTableAssociation`
- `AWS::CleanRooms::IdMappingTable`
- `AWS::CleanRooms::IdNamespaceAssociation`
- `AWS::CleanRooms::IntermediateTable`
- `AWS::CleanRooms::Membership`
- `AWS::CleanRooms::PrivacyBudgetTemplate`
- `AWS::CleanRoomsML::ConfiguredModelAlgorithm`
- `AWS::CleanRoomsML::ConfiguredModelAlgorithmAssociation`
- `AWS::CleanRoomsML::TrainingDataset`
- `AWS::CloudFormation::GeneratedTemplate`
- `AWS::CloudFormation::GuardHook`
- `AWS::CloudFormation::HookDefaultVersion`
- `AWS::CloudFormation::HookTypeConfig`
- `AWS::CloudFormation::HookVersion`
- `AWS::CloudFormation::LambdaHook`
- `AWS::CloudFormation::ModuleDefaultVersion`
- `AWS::CloudFormation::ModuleVersion`
- `AWS::CloudFormation::PublicTypeVersion`
- `AWS::CloudFormation::Publisher`
- `AWS::CloudFormation::ResourceDefaultVersion`
- `AWS::CloudFormation::ResourceVersion`
- `AWS::CloudFormation::StackSet`
- `AWS::CloudFormation::TypeActivation`
- `AWS::CloudFront::AnycastIpList`
- `AWS::CloudFront::CachePolicy`
- `AWS::CloudFront::ConnectionFunction`
- `AWS::CloudFront::ConnectionGroup`
- `AWS::CloudFront::ContinuousDeploymentPolicy`
- `AWS::CloudFront::DistributionTenant`
- `AWS::CloudFront::Function`
- `AWS::CloudFront::KeyGroup`
- `AWS::CloudFront::KeyValueStore`
- `AWS::CloudFront::MonitoringSubscription`
- `AWS::CloudFront::OriginRequestPolicy`
- `AWS::CloudFront::PublicKey`
- `AWS::CloudFront::RealtimeLogConfig`
- `AWS::CloudFront::ResponseHeadersPolicy`
- `AWS::CloudFront::TrustStore`
- `AWS::CloudFront::VpcOrigin`
- `AWS::CloudTrail::Channel`
- `AWS::CloudTrail::Dashboard`
- `AWS::CloudTrail::EventDataStore`
- `AWS::CloudTrail::ResourcePolicy`
- `AWS::CloudWatch::AlarmMuteRule`
- `AWS::CloudWatch::CompositeAlarm`
- `AWS::CloudWatch::Dashboard`
- `AWS::CloudWatch::InsightRule`
- `AWS::CloudWatch::LogAlarm`
- `AWS::CloudWatch::MetricStream`
- `AWS::CloudWatch::OTelEnrichment`
- `AWS::CodeArtifact::Domain`
- `AWS::CodeArtifact::PackageGroup`
- `AWS::CodeArtifact::Repository`
- `AWS::CodeBuild::Fleet`
- `AWS::CodeConnections::Connection`
- `AWS::CodeDeploy::Application`
- `AWS::CodeDeploy::DeploymentConfig`
- `AWS::CodeDeploy::DeploymentGroup`
- `AWS::CodeGuruProfiler::ProfilingGroup`
- `AWS::CodeGuruReviewer::RepositoryAssociation`
- `AWS::CodePipeline::CustomActionType`
- `AWS::CodePipeline::Pipeline`
- `AWS::CodePipeline::Webhook`
- `AWS::CodeStarConnections::Connection`
- `AWS::CodeStarConnections::RepositoryLink`
- `AWS::CodeStarConnections::SyncConfiguration`
- `AWS::CodeStarNotifications::NotificationRule`
- `AWS::Cognito::IdentityPool`
- `AWS::Cognito::IdentityPoolPrincipalTag`
- `AWS::Cognito::IdentityPoolRoleAttachment`
- `AWS::Cognito::LogDeliveryConfiguration`
- `AWS::Cognito::ManagedLoginBranding`
- `AWS::Cognito::Terms`
- `AWS::Cognito::UserPoolClient`
- `AWS::Cognito::UserPoolDomain`
- `AWS::Cognito::UserPoolGroup`
- `AWS::Cognito::UserPoolIdentityProvider`
- `AWS::Cognito::UserPoolRegionalConfigurationAttachment`
- `AWS::Cognito::UserPoolReplica`
- `AWS::Cognito::UserPoolResourceServer`
- `AWS::Cognito::UserPoolRiskConfigurationAttachment`
- `AWS::Cognito::UserPoolUICustomizationAttachment`
- `AWS::Cognito::UserPoolUser`
- `AWS::Cognito::UserPoolUserToGroupAttachment`
- `AWS::Comprehend::DocumentClassifier`
- `AWS::Comprehend::Flywheel`
- `AWS::ComputeOptimizer::AutomationRule`
- `AWS::Config::AggregationAuthorization`
- `AWS::Config::ConfigRule`
- `AWS::Config::ConfigurationAggregator`
- `AWS::Config::ConformancePack`
- `AWS::Config::Connector`
- `AWS::Config::OrganizationConformancePack`
- `AWS::Config::RemediationConfiguration`
- `AWS::Config::StoredQuery`
- `AWS::Connect::AgentStatus`
- `AWS::Connect::ApprovedOrigin`
- `AWS::Connect::ContactFlow`
- `AWS::Connect::ContactFlowModule`
- `AWS::Connect::ContactFlowModuleAlias`
- `AWS::Connect::ContactFlowModuleVersion`
- `AWS::Connect::ContactFlowVersion`
- `AWS::Connect::DataLakeAssociation`
- `AWS::Connect::DataTable`
- `AWS::Connect::DataTableAttribute`
- `AWS::Connect::DataTableRecord`
- `AWS::Connect::EmailAddress`
- `AWS::Connect::EvaluationForm`
- `AWS::Connect::HoursOfOperation`
- `AWS::Connect::Instance`
- `AWS::Connect::InstanceStorageConfig`
- `AWS::Connect::IntegrationAssociation`
- `AWS::Connect::Notification`
- `AWS::Connect::PhoneNumber`
- `AWS::Connect::PredefinedAttribute`
- `AWS::Connect::Prompt`
- `AWS::Connect::Queue`
- `AWS::Connect::QuickConnect`
- `AWS::Connect::RoutingProfile`
- `AWS::Connect::Rule`
- `AWS::Connect::SecurityKey`
- `AWS::Connect::SecurityProfile`
- `AWS::Connect::TaskTemplate`
- `AWS::Connect::TestCase`
- `AWS::Connect::TrafficDistributionGroup`
- `AWS::Connect::User`
- `AWS::Connect::UserHierarchyGroup`
- `AWS::Connect::UserHierarchyStructure`
- `AWS::Connect::View`
- `AWS::Connect::ViewVersion`
- `AWS::Connect::Workspace`
- `AWS::ConnectCampaigns::Campaign`
- `AWS::ConnectCampaignsV2::Campaign`
- `AWS::ControlTower::EnabledBaseline`
- `AWS::ControlTower::EnabledControl`
- `AWS::ControlTower::LandingZone`
- `AWS::CustomerProfiles::CalculatedAttributeDefinition`
- `AWS::CustomerProfiles::Domain`
- `AWS::CustomerProfiles::DomainObjectType`
- `AWS::CustomerProfiles::EventStream`
- `AWS::CustomerProfiles::EventTrigger`
- `AWS::CustomerProfiles::Integration`
- `AWS::CustomerProfiles::ObjectType`
- `AWS::CustomerProfiles::Recommender`
- `AWS::CustomerProfiles::SegmentDefinition`
- `AWS::DMS::Certificate`
- `AWS::DMS::DataMigration`
- `AWS::DMS::DataProvider`
- `AWS::DMS::Endpoint`
- `AWS::DMS::InstanceProfile`
- `AWS::DMS::MigrationProject`
- `AWS::DMS::ReplicationConfig`
- `AWS::DSQL::Cluster`
- `AWS::DataBrew::Dataset`
- `AWS::DataBrew::Job`
- `AWS::DataBrew::Project`
- `AWS::DataBrew::Recipe`
- `AWS::DataBrew::Ruleset`
- `AWS::DataBrew::Schedule`
- `AWS::DataPipeline::Pipeline`
- `AWS::DataSync::Agent`
- `AWS::DataSync::LocationAzureBlob`
- `AWS::DataSync::LocationEFS`
- `AWS::DataSync::LocationFSxLustre`
- `AWS::DataSync::LocationFSxONTAP`
- `AWS::DataSync::LocationFSxOpenZFS`
- `AWS::DataSync::LocationFSxWindows`
- `AWS::DataSync::LocationHDFS`
- `AWS::DataSync::LocationNFS`
- `AWS::DataSync::LocationObjectStorage`
- `AWS::DataSync::LocationS3`
- `AWS::DataSync::LocationSMB`
- `AWS::DataSync::Task`
- `AWS::DataZone::Connection`
- `AWS::DataZone::DataSource`
- `AWS::DataZone::Domain`
- `AWS::DataZone::DomainUnit`
- `AWS::DataZone::Environment`
- `AWS::DataZone::EnvironmentActions`
- `AWS::DataZone::EnvironmentBlueprintConfiguration`
- `AWS::DataZone::EnvironmentProfile`
- `AWS::DataZone::FormType`
- `AWS::DataZone::GroupProfile`
- `AWS::DataZone::Owner`
- `AWS::DataZone::PolicyGrant`
- `AWS::DataZone::Project`
- `AWS::DataZone::ProjectMembership`
- `AWS::DataZone::ProjectProfile`
- `AWS::DataZone::SubscriptionTarget`
- `AWS::DataZone::UserProfile`
- `AWS::Deadline::Farm`
- `AWS::Deadline::Fleet`
- `AWS::Deadline::LicenseEndpoint`
- `AWS::Deadline::Limit`
- `AWS::Deadline::MeteredProduct`
- `AWS::Deadline::Monitor`
- `AWS::Deadline::Queue`
- `AWS::Deadline::QueueEnvironment`
- `AWS::Deadline::QueueFleetAssociation`
- `AWS::Deadline::QueueLimitAssociation`
- `AWS::Deadline::StorageProfile`
- `AWS::Detective::Graph`
- `AWS::Detective::MemberInvitation`
- `AWS::Detective::OrganizationAdmin`
- `AWS::DevOpsAgent::AgentSpace`
- `AWS::DevOpsAgent::Association`
- `AWS::DevOpsAgent::PrivateConnection`
- `AWS::DevOpsAgent::Service`
- `AWS::DevOpsGuru::LogAnomalyDetectionIntegration`
- `AWS::DevOpsGuru::NotificationChannel`
- `AWS::DevOpsGuru::ResourceCollection`
- `AWS::DirectConnect::Connection`
- `AWS::DirectConnect::DirectConnectGateway`
- `AWS::DirectConnect::DirectConnectGatewayAssociation`
- `AWS::DirectConnect::Lag`
- `AWS::DirectConnect::PrivateVirtualInterface`
- `AWS::DirectConnect::PublicVirtualInterface`
- `AWS::DirectConnect::TransitVirtualInterface`
- `AWS::DirectoryService::SimpleAD`
- `AWS::DocDB::EventSubscription`
- `AWS::DocDB::GlobalCluster`
- `AWS::DocDBElastic::Cluster`
- `AWS::EC2::CapacityManagerDataExport`
- `AWS::EC2::CapacityReservation`
- `AWS::EC2::CapacityReservationFleet`
- `AWS::EC2::CarrierGateway`
- `AWS::EC2::CustomerGateway`
- `AWS::EC2::DHCPOptions`
- `AWS::EC2::EC2Fleet`
- `AWS::EC2::EIPAssociation`
- `AWS::EC2::EgressOnlyInternetGateway`
- `AWS::EC2::EnclaveCertificateIamRoleAssociation`
- `AWS::EC2::FlowLog`
- `AWS::EC2::GatewayRouteTableAssociation`
- `AWS::EC2::Host`
- `AWS::EC2::IPAM`
- `AWS::EC2::IPAMAllocation`
- `AWS::EC2::IPAMPool`
- `AWS::EC2::IPAMPoolCidr`
- `AWS::EC2::IPAMPrefixListResolver`
- `AWS::EC2::IPAMPrefixListResolverTarget`
- `AWS::EC2::IPAMResourceDiscovery`
- `AWS::EC2::IPAMResourceDiscoveryAssociation`
- `AWS::EC2::IPAMScope`
- `AWS::EC2::InstanceConnectEndpoint`
- `AWS::EC2::IpPoolRouteTableAssociation`
- `AWS::EC2::KeyPair`
- `AWS::EC2::LaunchTemplate`
- `AWS::EC2::LocalGatewayRoute`
- `AWS::EC2::LocalGatewayRouteTable`
- `AWS::EC2::LocalGatewayRouteTableVPCAssociation`
- `AWS::EC2::LocalGatewayRouteTableVirtualInterfaceGroupAssociation`
- `AWS::EC2::LocalGatewayVirtualInterface`
- `AWS::EC2::LocalGatewayVirtualInterfaceGroup`
- `AWS::EC2::NetworkInsightsAccessScope`
- `AWS::EC2::NetworkInsightsAccessScopeAnalysis`
- `AWS::EC2::NetworkInsightsAnalysis`
- `AWS::EC2::NetworkInsightsPath`
- `AWS::EC2::NetworkInterface`
- `AWS::EC2::NetworkInterfaceAttachment`
- `AWS::EC2::NetworkPerformanceMetricSubscription`
- `AWS::EC2::PlacementGroup`
- `AWS::EC2::PrefixList`
- `AWS::EC2::RouteServer`
- `AWS::EC2::RouteServerAssociation`
- `AWS::EC2::RouteServerEndpoint`
- `AWS::EC2::RouteServerPeer`
- `AWS::EC2::RouteServerPropagation`
- `AWS::EC2::SecurityGroupEgress`
- `AWS::EC2::SecurityGroupVpcAssociation`
- `AWS::EC2::SnapshotBlockPublicAccess`
- `AWS::EC2::SpotFleet`
- `AWS::EC2::SqlHaStandbyDetectedInstance`
- `AWS::EC2::SubnetCidrBlock`
- `AWS::EC2::TrafficMirrorFilter`
- `AWS::EC2::TrafficMirrorFilterRule`
- `AWS::EC2::TrafficMirrorSession`
- `AWS::EC2::TrafficMirrorTarget`
- `AWS::EC2::TransitGateway`
- `AWS::EC2::TransitGatewayAttachment`
- `AWS::EC2::TransitGatewayConnect`
- `AWS::EC2::TransitGatewayConnectPeer`
- `AWS::EC2::TransitGatewayMeteringPolicy`
- `AWS::EC2::TransitGatewayMeteringPolicyEntry`
- `AWS::EC2::TransitGatewayMulticastDomain`
- `AWS::EC2::TransitGatewayMulticastDomainAssociation`
- `AWS::EC2::TransitGatewayMulticastGroupMember`
- `AWS::EC2::TransitGatewayMulticastGroupSource`
- `AWS::EC2::TransitGatewayPeeringAttachment`
- `AWS::EC2::TransitGatewayPolicyTable`
- `AWS::EC2::TransitGatewayPolicyTableAssociation`
- `AWS::EC2::TransitGatewayPolicyTableEntry`
- `AWS::EC2::TransitGatewayRoute`
- `AWS::EC2::TransitGatewayRouteTable`
- `AWS::EC2::TransitGatewayRouteTableAssociation`
- `AWS::EC2::TransitGatewayRouteTablePropagation`
- `AWS::EC2::TransitGatewayVpcAttachment`
- `AWS::EC2::VPCBlockPublicAccessExclusion`
- `AWS::EC2::VPCBlockPublicAccessOptions`
- `AWS::EC2::VPCCidrBlock`
- `AWS::EC2::VPCDHCPOptionsAssociation`
- `AWS::EC2::VPCEncryptionControl`
- `AWS::EC2::VPCEndpoint`
- `AWS::EC2::VPCEndpointConnectionNotification`
- `AWS::EC2::VPCEndpointService`
- `AWS::EC2::VPCEndpointServicePermissions`
- `AWS::EC2::VPCPeeringConnection`
- `AWS::EC2::VPNConcentrator`
- `AWS::EC2::VPNConnection`
- `AWS::EC2::VPNConnectionRoute`
- `AWS::EC2::VPNGateway`
- `AWS::EC2::VerifiedAccessEndpoint`
- `AWS::EC2::VerifiedAccessGroup`
- `AWS::EC2::VerifiedAccessInstance`
- `AWS::EC2::VerifiedAccessTrustProvider`
- `AWS::EC2::Volume`
- `AWS::EC2::VolumeAttachment`
- `AWS::ECR::PublicRepository`
- `AWS::ECR::PullThroughCacheRule`
- `AWS::ECR::PullTimeUpdateExclusion`
- `AWS::ECR::RegistryPolicy`
- `AWS::ECR::RegistryScanningConfiguration`
- `AWS::ECR::ReplicationConfiguration`
- `AWS::ECR::RepositoryCreationTemplate`
- `AWS::ECR::SigningConfiguration`
- `AWS::ECS::CapacityProvider`
- `AWS::ECS::ClusterCapacityProviderAssociations`
- `AWS::ECS::Daemon`
- `AWS::ECS::DaemonTaskDefinition`
- `AWS::ECS::ExpressGatewayService`
- `AWS::ECS::PrimaryTaskSet`
- `AWS::ECS::TaskSet`
- `AWS::EKS::AccessEntry`
- `AWS::EKS::Addon`
- `AWS::EKS::Capability`
- `AWS::EKS::Cluster`
- `AWS::EKS::FargateProfile`
- `AWS::EKS::IdentityProviderConfig`
- `AWS::EKS::Nodegroup`
- `AWS::EKS::PodIdentityAssociation`
- `AWS::EMR::SecurityConfiguration`
- `AWS::EMR::Step`
- `AWS::EMR::Studio`
- `AWS::EMR::StudioSessionMapping`
- `AWS::EMR::WALWorkspace`
- `AWS::EMRContainers::Endpoint`
- `AWS::EMRContainers::SecurityConfiguration`
- `AWS::EMRContainers::VirtualCluster`
- `AWS::EMRServerless::Application`
- `AWS::EVS::Environment`
- `AWS::ElastiCache::GlobalReplicationGroup`
- `AWS::ElastiCache::ParameterGroup`
- `AWS::ElastiCache::ReplicationGroup`
- `AWS::ElastiCache::ServerlessCache`
- `AWS::ElastiCache::User`
- `AWS::ElastiCache::UserGroup`
- `AWS::ElasticBeanstalk::Application`
- `AWS::ElasticBeanstalk::ApplicationVersion`
- `AWS::ElasticBeanstalk::ConfigurationTemplate`
- `AWS::ElasticBeanstalk::Environment`
- `AWS::ElasticLoadBalancing::LoadBalancer`
- `AWS::ElasticLoadBalancingV2::ListenerRule`
- `AWS::ElasticLoadBalancingV2::TrustStore`
- `AWS::ElasticLoadBalancingV2::TrustStoreRevocation`
- `AWS::ElementalInference::Dictionary`
- `AWS::ElementalInference::Feed`
- `AWS::EntityResolution::IdMappingWorkflow`
- `AWS::EntityResolution::IdNamespace`
- `AWS::EntityResolution::MatchingWorkflow`
- `AWS::EntityResolution::PolicyStatement`
- `AWS::EntityResolution::SchemaMapping`
- `AWS::EventSchemas::Discoverer`
- `AWS::EventSchemas::Registry`
- `AWS::EventSchemas::RegistryPolicy`
- `AWS::EventSchemas::Schema`
- `AWS::Events::ApiDestination`
- `AWS::Events::Archive`
- `AWS::Events::Connection`
- `AWS::Events::Endpoint`
- `AWS::Events::EventBusPolicy`
- `AWS::Evidently::Experiment`
- `AWS::Evidently::Feature`
- `AWS::Evidently::Launch`
- `AWS::Evidently::Project`
- `AWS::Evidently::Segment`
- `AWS::FIS::ExperimentTemplate`
- `AWS::FIS::TargetAccountConfiguration`
- `AWS::FMS::NotificationChannel`
- `AWS::FMS::Policy`
- `AWS::FMS::ResourceSet`
- `AWS::FSx::DataRepositoryAssociation`
- `AWS::FSx::S3AccessPointAttachment`
- `AWS::FinSpace::Environment`
- `AWS::Forecast::Dataset`
- `AWS::Forecast::DatasetGroup`
- `AWS::FraudDetector::Detector`
- `AWS::FraudDetector::EntityType`
- `AWS::FraudDetector::EventType`
- `AWS::FraudDetector::Label`
- `AWS::FraudDetector::List`
- `AWS::FraudDetector::Outcome`
- `AWS::FraudDetector::Variable`
- `AWS::GameLift::Alias`
- `AWS::GameLift::Build`
- `AWS::GameLift::ContainerFleet`
- `AWS::GameLift::ContainerGroupDefinition`
- `AWS::GameLift::Fleet`
- `AWS::GameLift::GameServerGroup`
- `AWS::GameLift::GameSessionQueue`
- `AWS::GameLift::Location`
- `AWS::GameLift::MatchmakingConfiguration`
- `AWS::GameLift::MatchmakingRuleSet`
- `AWS::GameLift::Script`
- `AWS::GlobalAccelerator::Accelerator`
- `AWS::GlobalAccelerator::CrossAccountAttachment`
- `AWS::GlobalAccelerator::EndpointGroup`
- `AWS::GlobalAccelerator::Listener`
- `AWS::Glue::Blueprint`
- `AWS::Glue::Catalog`
- `AWS::Glue::DataCatalogEncryptionSettings`
- `AWS::Glue::IdentityCenterConfiguration`
- `AWS::Glue::Integration`
- `AWS::Glue::IntegrationResourceProperty`
- `AWS::Glue::Registry`
- `AWS::Glue::Schema`
- `AWS::Glue::SchemaVersion`
- `AWS::Glue::SchemaVersionMetadata`
- `AWS::Glue::UsageProfile`
- `AWS::Glue::UserDefinedFunction`
- `AWS::Grafana::Workspace`
- `AWS::GreengrassV2::ComponentVersion`
- `AWS::GreengrassV2::Deployment`
- `AWS::GroundStation::Config`
- `AWS::GroundStation::DataflowEndpointGroup`
- `AWS::GroundStation::DataflowEndpointGroupV2`
- `AWS::GroundStation::MissionProfile`
- `AWS::GuardDuty::Detector`
- `AWS::GuardDuty::Filter`
- `AWS::GuardDuty::IPSet`
- `AWS::GuardDuty::MalwareProtectionPlan`
- `AWS::GuardDuty::Master`
- `AWS::GuardDuty::Member`
- `AWS::GuardDuty::PublishingDestination`
- `AWS::GuardDuty::ThreatEntitySet`
- `AWS::GuardDuty::ThreatIntelSet`
- `AWS::GuardDuty::TrustedEntitySet`
- `AWS::HealthImaging::Datastore`
- `AWS::HealthLake::DataTransformationProfile`
- `AWS::HealthLake::FHIRDatastore`
- `AWS::IAM::GroupPolicy`
- `AWS::IAM::OIDCProvider`
- `AWS::IAM::RolePolicy`
- `AWS::IAM::SAMLProvider`
- `AWS::IAM::ServerCertificate`
- `AWS::IAM::ServiceLinkedRole`
- `AWS::IAM::UserPolicy`
- `AWS::IAM::VirtualMFADevice`
- `AWS::IVS::Channel`
- `AWS::IVS::EncoderConfiguration`
- `AWS::IVS::IngestConfiguration`
- `AWS::IVS::PlaybackKeyPair`
- `AWS::IVS::PlaybackRestrictionPolicy`
- `AWS::IVS::PublicKey`
- `AWS::IVS::RecordingConfiguration`
- `AWS::IVS::Stage`
- `AWS::IVS::StorageConfiguration`
- `AWS::IVS::StreamKey`
- `AWS::IVSChat::LoggingConfiguration`
- `AWS::IVSChat::Room`
- `AWS::IdentityStore::Group`
- `AWS::IdentityStore::GroupMembership`
- `AWS::ImageBuilder::Component`
- `AWS::ImageBuilder::ContainerRecipe`
- `AWS::ImageBuilder::DistributionConfiguration`
- `AWS::ImageBuilder::Image`
- `AWS::ImageBuilder::ImagePipeline`
- `AWS::ImageBuilder::ImageRecipe`
- `AWS::ImageBuilder::InfrastructureConfiguration`
- `AWS::ImageBuilder::LifecyclePolicy`
- `AWS::ImageBuilder::Workflow`
- `AWS::Inspector::AssessmentTarget`
- `AWS::Inspector::AssessmentTemplate`
- `AWS::Inspector::ResourceGroup`
- `AWS::InspectorV2::CisScanConfiguration`
- `AWS::InspectorV2::CodeSecurityIntegration`
- `AWS::InspectorV2::CodeSecurityScanConfiguration`
- `AWS::InspectorV2::Filter`
- `AWS::Interconnect::Connection`
- `AWS::InternetMonitor::Monitor`
- `AWS::Invoicing::InvoiceUnit`
- `AWS::IoT::AccountAuditConfiguration`
- `AWS::IoT::Authorizer`
- `AWS::IoT::BillingGroup`
- `AWS::IoT::CACertificate`
- `AWS::IoT::Certificate`
- `AWS::IoT::CertificateProvider`
- `AWS::IoT::Command`
- `AWS::IoT::CustomMetric`
- `AWS::IoT::Dimension`
- `AWS::IoT::DomainConfiguration`
- `AWS::IoT::EncryptionConfiguration`
- `AWS::IoT::FleetMetric`
- `AWS::IoT::JobTemplate`
- `AWS::IoT::Logging`
- `AWS::IoT::MitigationAction`
- `AWS::IoT::Policy`
- `AWS::IoT::ProvisioningTemplate`
- `AWS::IoT::ResourceSpecificLogging`
- `AWS::IoT::RoleAlias`
- `AWS::IoT::ScheduledAudit`
- `AWS::IoT::SecurityProfile`
- `AWS::IoT::SoftwarePackage`
- `AWS::IoT::SoftwarePackageVersion`
- `AWS::IoT::Thing`
- `AWS::IoT::ThingGroup`
- `AWS::IoT::ThingType`
- `AWS::IoT::TopicRule`
- `AWS::IoT::TopicRuleDestination`
- `AWS::IoTAnalytics::Channel`
- `AWS::IoTAnalytics::Dataset`
- `AWS::IoTAnalytics::Datastore`
- `AWS::IoTAnalytics::Pipeline`
- `AWS::IoTCoreDeviceAdvisor::SuiteDefinition`
- `AWS::IoTEvents::AlarmModel`
- `AWS::IoTEvents::DetectorModel`
- `AWS::IoTEvents::Input`
- `AWS::IoTFleetWise::Campaign`
- `AWS::IoTFleetWise::DecoderManifest`
- `AWS::IoTFleetWise::Fleet`
- `AWS::IoTFleetWise::ModelManifest`
- `AWS::IoTFleetWise::SignalCatalog`
- `AWS::IoTFleetWise::StateTemplate`
- `AWS::IoTFleetWise::Vehicle`
- `AWS::IoTSiteWise::AccessPolicy`
- `AWS::IoTSiteWise::Asset`
- `AWS::IoTSiteWise::AssetModel`
- `AWS::IoTSiteWise::ComputationModel`
- `AWS::IoTSiteWise::Dashboard`
- `AWS::IoTSiteWise::Dataset`
- `AWS::IoTSiteWise::Gateway`
- `AWS::IoTSiteWise::Portal`
- `AWS::IoTSiteWise::Project`
- `AWS::IoTTwinMaker::ComponentType`
- `AWS::IoTTwinMaker::Entity`
- `AWS::IoTTwinMaker::Scene`
- `AWS::IoTTwinMaker::SyncJob`
- `AWS::IoTTwinMaker::Workspace`
- `AWS::IoTWireless::Destination`
- `AWS::IoTWireless::DeviceProfile`
- `AWS::IoTWireless::FuotaTask`
- `AWS::IoTWireless::MulticastGroup`
- `AWS::IoTWireless::NetworkAnalyzerConfiguration`
- `AWS::IoTWireless::PartnerAccount`
- `AWS::IoTWireless::ServiceProfile`
- `AWS::IoTWireless::TaskDefinition`
- `AWS::IoTWireless::WirelessDevice`
- `AWS::IoTWireless::WirelessDeviceImportTask`
- `AWS::IoTWireless::WirelessGateway`
- `AWS::KMS::ReplicaKey`
- `AWS::KafkaConnect::Connector`
- `AWS::KafkaConnect::CustomPlugin`
- `AWS::KafkaConnect::WorkerConfiguration`
- `AWS::Kendra::DataSource`
- `AWS::Kendra::Faq`
- `AWS::Kendra::Index`
- `AWS::KendraRanking::ExecutionPlan`
- `AWS::Kinesis::ResourcePolicy`
- `AWS::KinesisAnalyticsV2::Application`
- `AWS::KinesisVideo::SignalingChannel`
- `AWS::KinesisVideo::Stream`
- `AWS::LakeFormation::DataCellsFilter`
- `AWS::LakeFormation::PrincipalPermissions`
- `AWS::LakeFormation::Tag`
- `AWS::LakeFormation::TagAssociation`
- `AWS::Lambda::Alias`
- `AWS::Lambda::CapacityProvider`
- `AWS::Lambda::CodeSigningConfig`
- `AWS::Lambda::LayerVersionPermission`
- `AWS::Lambda::NetworkConnector`
- `AWS::Lambda::Version`
- `AWS::LaunchWizard::Deployment`
- `AWS::Lex::Bot`
- `AWS::Lex::BotAlias`
- `AWS::Lex::BotVersion`
- `AWS::Lex::ResourcePolicy`
- `AWS::LicenseManager::Grant`
- `AWS::LicenseManager::License`
- `AWS::Lightsail::Alarm`
- `AWS::Lightsail::Bucket`
- `AWS::Lightsail::Certificate`
- `AWS::Lightsail::Container`
- `AWS::Lightsail::Database`
- `AWS::Lightsail::DatabaseSnapshot`
- `AWS::Lightsail::Disk`
- `AWS::Lightsail::DiskSnapshot`
- `AWS::Lightsail::Distribution`
- `AWS::Lightsail::Domain`
- `AWS::Lightsail::Instance`
- `AWS::Lightsail::InstanceSnapshot`
- `AWS::Lightsail::LoadBalancer`
- `AWS::Lightsail::LoadBalancerTlsCertificate`
- `AWS::Lightsail::StaticIp`
- `AWS::Location::APIKey`
- `AWS::Location::GeofenceCollection`
- `AWS::Location::Map`
- `AWS::Location::PlaceIndex`
- `AWS::Location::RouteCalculator`
- `AWS::Location::Tracker`
- `AWS::Location::TrackerConsumer`
- `AWS::Logs::AccountPolicy`
- `AWS::Logs::Delivery`
- `AWS::Logs::DeliveryDestination`
- `AWS::Logs::DeliverySource`
- `AWS::Logs::Destination`
- `AWS::Logs::Integration`
- `AWS::Logs::LogAnomalyDetector`
- `AWS::Logs::LogStream`
- `AWS::Logs::LogStream`
- `AWS::Logs::MetricFilter`
- `AWS::Logs::QueryDefinition`
- `AWS::Logs::ResourcePolicy`
- `AWS::Logs::ScheduledQuery`
- `AWS::Logs::SubscriptionFilter`
- `AWS::Logs::Transformer`
- `AWS::LookoutEquipment::InferenceScheduler`
- `AWS::LookoutVision::Project`
- `AWS::M2::Application`
- `AWS::M2::Deployment`
- `AWS::M2::Environment`
- `AWS::MPA::ApprovalTeam`
- `AWS::MPA::IdentitySource`
- `AWS::MSK::BatchScramSecret`
- `AWS::MSK::Channel`
- `AWS::MSK::Cluster`
- `AWS::MSK::ClusterPolicy`
- `AWS::MSK::Configuration`
- `AWS::MSK::Replicator`
- `AWS::MSK::ServerlessCluster`
- `AWS::MSK::Topic`
- `AWS::MSK::VpcConnection`
- `AWS::MWAA::Environment`
- `AWS::MWAAServerless::Workflow`
- `AWS::Macie::AllowList`
- `AWS::Macie::CustomDataIdentifier`
- `AWS::Macie::FindingsFilter`
- `AWS::Macie::Session`
- `AWS::ManagedBlockchain::Accessor`
- `AWS::MediaConnect::Bridge`
- `AWS::MediaConnect::BridgeOutput`
- `AWS::MediaConnect::BridgeSource`
- `AWS::MediaConnect::Flow`
- `AWS::MediaConnect::FlowEntitlement`
- `AWS::MediaConnect::FlowOutput`
- `AWS::MediaConnect::FlowSource`
- `AWS::MediaConnect::FlowVpcInterface`
- `AWS::MediaConnect::Gateway`
- `AWS::MediaConnect::RouterInput`
- `AWS::MediaConnect::RouterNetworkInterface`
- `AWS::MediaConnect::RouterOutput`
- `AWS::MediaLive::ChannelPlacementGroup`
- `AWS::MediaLive::CloudWatchAlarmTemplate`
- `AWS::MediaLive::CloudWatchAlarmTemplateGroup`
- `AWS::MediaLive::Cluster`
- `AWS::MediaLive::EventBridgeRuleTemplate`
- `AWS::MediaLive::EventBridgeRuleTemplateGroup`
- `AWS::MediaLive::Multiplex`
- `AWS::MediaLive::Multiplexprogram`
- `AWS::MediaLive::Network`
- `AWS::MediaLive::Node`
- `AWS::MediaLive::SdiSource`
- `AWS::MediaLive::SignalMap`
- `AWS::MediaPackage::Asset`
- `AWS::MediaPackage::Channel`
- `AWS::MediaPackage::OriginEndpoint`
- `AWS::MediaPackage::PackagingConfiguration`
- `AWS::MediaPackage::PackagingGroup`
- `AWS::MediaPackageV2::Channel`
- `AWS::MediaPackageV2::ChannelGroup`
- `AWS::MediaPackageV2::ChannelPolicy`
- `AWS::MediaPackageV2::OriginEndpoint`
- `AWS::MediaPackageV2::OriginEndpointPolicy`
- `AWS::MediaTailor::Channel`
- `AWS::MediaTailor::ChannelPolicy`
- `AWS::MediaTailor::LiveSource`
- `AWS::MediaTailor::PlaybackConfiguration`
- `AWS::MediaTailor::SourceLocation`
- `AWS::MediaTailor::VodSource`
- `AWS::MemoryDB::ACL`
- `AWS::MemoryDB::Cluster`
- `AWS::MemoryDB::MultiRegionCluster`
- `AWS::MemoryDB::ParameterGroup`
- `AWS::MemoryDB::SubnetGroup`
- `AWS::MemoryDB::User`
- `AWS::Neptune::DBClusterParameterGroup`
- `AWS::Neptune::DBParameterGroup`
- `AWS::Neptune::EventSubscription`
- `AWS::Neptune::GlobalCluster`
- `AWS::NeptuneGraph::Graph`
- `AWS::NeptuneGraph::GraphSnapshot`
- `AWS::NeptuneGraph::PrivateGraphEndpoint`
- `AWS::NetworkFirewall::Firewall`
- `AWS::NetworkFirewall::FirewallPolicy`
- `AWS::NetworkFirewall::LoggingConfiguration`
- `AWS::NetworkFirewall::RuleGroup`
- `AWS::NetworkFirewall::TLSInspectionConfiguration`
- `AWS::NetworkFirewall::VpcEndpointAssociation`
- `AWS::NetworkFlowMonitor::Monitor`
- `AWS::NetworkManager::ConnectAttachment`
- `AWS::NetworkManager::ConnectPeer`
- `AWS::NetworkManager::CoreNetwork`
- `AWS::NetworkManager::CoreNetworkPrefixListAssociation`
- `AWS::NetworkManager::CustomerGatewayAssociation`
- `AWS::NetworkManager::Device`
- `AWS::NetworkManager::DirectConnectGatewayAttachment`
- `AWS::NetworkManager::GlobalNetwork`
- `AWS::NetworkManager::Link`
- `AWS::NetworkManager::LinkAssociation`
- `AWS::NetworkManager::Site`
- `AWS::NetworkManager::SiteToSiteVpnAttachment`
- `AWS::NetworkManager::TransitGatewayPeering`
- `AWS::NetworkManager::TransitGatewayRegistration`
- `AWS::NetworkManager::TransitGatewayRouteTableAttachment`
- `AWS::NetworkManager::VpcAttachment`
- `AWS::Notifications::ChannelAssociation`
- `AWS::Notifications::EventRule`
- `AWS::Notifications::ManagedNotificationAccountContactAssociation`
- `AWS::Notifications::ManagedNotificationAdditionalChannelAssociation`
- `AWS::Notifications::NotificationConfiguration`
- `AWS::Notifications::NotificationHub`
- `AWS::Notifications::OrganizationalUnitAssociation`
- `AWS::NotificationsContacts::EmailContact`
- `AWS::NovaAct::WorkflowDefinition`
- `AWS::ODB::CloudAutonomousVmCluster`
- `AWS::ODB::CloudExadataInfrastructure`
- `AWS::ODB::CloudVmCluster`
- `AWS::ODB::OdbNetwork`
- `AWS::ODB::OdbPeeringConnection`
- `AWS::OSIS::Pipeline`
- `AWS::Oam::Link`
- `AWS::Oam::Sink`
- `AWS::ObservabilityAdmin::OrganizationCentralizationRule`
- `AWS::ObservabilityAdmin::OrganizationTelemetryRule`
- `AWS::ObservabilityAdmin::S3TableIntegration`
- `AWS::ObservabilityAdmin::TelemetryEnrichment`
- `AWS::ObservabilityAdmin::TelemetryPipelines`
- `AWS::ObservabilityAdmin::TelemetryRule`
- `AWS::Omics::AnnotationStore`
- `AWS::Omics::Configuration`
- `AWS::Omics::ReferenceStore`
- `AWS::Omics::RunGroup`
- `AWS::Omics::SequenceStore`
- `AWS::Omics::VariantStore`
- `AWS::Omics::Workflow`
- `AWS::Omics::WorkflowVersion`
- `AWS::OpenSearchServerless::AccessPolicy`
- `AWS::OpenSearchServerless::Collection`
- `AWS::OpenSearchServerless::CollectionGroup`
- `AWS::OpenSearchServerless::CollectionIndex`
- `AWS::OpenSearchServerless::Index`
- `AWS::OpenSearchServerless::LifecyclePolicy`
- `AWS::OpenSearchServerless::SecurityConfig`
- `AWS::OpenSearchServerless::SecurityPolicy`
- `AWS::OpenSearchServerless::VpcEndpoint`
- `AWS::OpenSearchService::Application`
- `AWS::OpenSearchService::Domain`
- `AWS::Organizations::Account`
- `AWS::Organizations::Organization`
- `AWS::Organizations::OrganizationalUnit`
- `AWS::Organizations::Policy`
- `AWS::Organizations::ResourcePolicy`
- `AWS::Outposts::Site`
- `AWS::PCAConnectorAD::Connector`
- `AWS::PCAConnectorAD::DirectoryRegistration`
- `AWS::PCAConnectorAD::ServicePrincipalName`
- `AWS::PCAConnectorAD::Template`
- `AWS::PCAConnectorAD::TemplateGroupAccessControlEntry`
- `AWS::PCAConnectorSCEP::Challenge`
- `AWS::PCAConnectorSCEP::Connector`
- `AWS::PCS::Cluster`
- `AWS::PCS::ComputeNodeGroup`
- `AWS::PCS::Queue`
- `AWS::Panorama::ApplicationInstance`
- `AWS::Panorama::Package`
- `AWS::Panorama::PackageVersion`
- `AWS::PaymentCryptography::Alias`
- `AWS::PaymentCryptography::Key`
- `AWS::Personalize::Dataset`
- `AWS::Personalize::DatasetGroup`
- `AWS::Personalize::Schema`
- `AWS::Personalize::Solution`
- `AWS::Pinpoint::InAppTemplate`
- `AWS::Pipes::Pipe`
- `AWS::Proton::EnvironmentAccountConnection`
- `AWS::Proton::EnvironmentTemplate`
- `AWS::Proton::ServiceTemplate`
- `AWS::QBusiness::Application`
- `AWS::QBusiness::DataAccessor`
- `AWS::QBusiness::DataSource`
- `AWS::QBusiness::Index`
- `AWS::QBusiness::Permission`
- `AWS::QBusiness::Plugin`
- `AWS::QBusiness::Retriever`
- `AWS::QBusiness::WebExperience`
- `AWS::QLDB::Stream`
- `AWS::QuickSight::ActionConnector`
- `AWS::QuickSight::Agent`
- `AWS::QuickSight::Analysis`
- `AWS::QuickSight::CustomPermissions`
- `AWS::QuickSight::Dashboard`
- `AWS::QuickSight::DataSet`
- `AWS::QuickSight::DataSource`
- `AWS::QuickSight::Flow`
- `AWS::QuickSight::Folder`
- `AWS::QuickSight::KnowledgeBase`
- `AWS::QuickSight::OAuthClientApplication`
- `AWS::QuickSight::RefreshSchedule`
- `AWS::QuickSight::Space`
- `AWS::QuickSight::Template`
- `AWS::QuickSight::Theme`
- `AWS::QuickSight::Topic`
- `AWS::QuickSight::VPCConnection`
- `AWS::RAM::Permission`
- `AWS::RAM::ResourceShare`
- `AWS::RDS::CustomDBEngineVersion`
- `AWS::RDS::DBClusterParameterGroup`
- `AWS::RDS::DBParameterGroup`
- `AWS::RDS::DBShardGroup`
- `AWS::RDS::EventSubscription`
- `AWS::RDS::GlobalCluster`
- `AWS::RDS::Integration`
- `AWS::RDS::OptionGroup`
- `AWS::RTBFabric::InboundExternalLink`
- `AWS::RTBFabric::Link`
- `AWS::RTBFabric::LinkRoutingRule`
- `AWS::RTBFabric::OutboundExternalLink`
- `AWS::RTBFabric::RequesterGateway`
- `AWS::RTBFabric::ResponderGateway`
- `AWS::RUM::AppMonitor`
- `AWS::Rbin::Rule`
- `AWS::Redshift::Cluster`
- `AWS::Redshift::ClusterParameterGroup`
- `AWS::Redshift::ClusterSubnetGroup`
- `AWS::Redshift::EndpointAccess`
- `AWS::Redshift::EndpointAuthorization`
- `AWS::Redshift::EventSubscription`
- `AWS::Redshift::Integration`
- `AWS::Redshift::ScheduledAction`
- `AWS::RedshiftServerless::Namespace`
- `AWS::RedshiftServerless::Snapshot`
- `AWS::RedshiftServerless::Workgroup`
- `AWS::RefactorSpaces::Application`
- `AWS::RefactorSpaces::Environment`
- `AWS::RefactorSpaces::Route`
- `AWS::RefactorSpaces::Service`
- `AWS::Rekognition::Collection`
- `AWS::Rekognition::Project`
- `AWS::Rekognition::StreamProcessor`
- `AWS::ResilienceHub::App`
- `AWS::ResilienceHub::ResiliencyPolicy`
- `AWS::ResilienceHubV2::Policy`
- `AWS::ResilienceHubV2::Service`
- `AWS::ResilienceHubV2::ServiceFunction`
- `AWS::ResilienceHubV2::System`
- `AWS::ResilienceHubV2::UserJourney`
- `AWS::ResourceExplorer2::DefaultViewAssociation`
- `AWS::ResourceExplorer2::Index`
- `AWS::ResourceExplorer2::View`
- `AWS::ResourceGroups::Group`
- `AWS::ResourceGroups::TagSyncTask`
- `AWS::RoboMaker::Fleet`
- `AWS::RoboMaker::Robot`
- `AWS::RoboMaker::RobotApplication`
- `AWS::RoboMaker::RobotApplicationVersion`
- `AWS::RoboMaker::SimulationApplication`
- `AWS::RoboMaker::SimulationApplicationVersion`
- `AWS::RolesAnywhere::CRL`
- `AWS::RolesAnywhere::Profile`
- `AWS::RolesAnywhere::TrustAnchor`
- `AWS::Route53::CidrCollection`
- `AWS::Route53::DNSSEC`
- `AWS::Route53::HealthCheck`
- `AWS::Route53::KeySigningKey`
- `AWS::Route53GlobalResolver::AccessSource`
- `AWS::Route53GlobalResolver::AccessToken`
- `AWS::Route53GlobalResolver::DnsView`
- `AWS::Route53GlobalResolver::FirewallDomainList`
- `AWS::Route53GlobalResolver::FirewallRule`
- `AWS::Route53GlobalResolver::GlobalResolver`
- `AWS::Route53GlobalResolver::HostedZoneAssociation`
- `AWS::Route53Profiles::Profile`
- `AWS::Route53Profiles::ProfileAssociation`
- `AWS::Route53Profiles::ProfileResourceAssociation`
- `AWS::Route53RecoveryControl::Cluster`
- `AWS::Route53RecoveryControl::ControlPanel`
- `AWS::Route53RecoveryControl::RoutingControl`
- `AWS::Route53RecoveryControl::SafetyRule`
- `AWS::Route53RecoveryReadiness::Cell`
- `AWS::Route53RecoveryReadiness::ReadinessCheck`
- `AWS::Route53RecoveryReadiness::RecoveryGroup`
- `AWS::Route53RecoveryReadiness::ResourceSet`
- `AWS::Route53Resolver::FirewallDomainList`
- `AWS::Route53Resolver::FirewallRuleGroup`
- `AWS::Route53Resolver::FirewallRuleGroupAssociation`
- `AWS::Route53Resolver::OutpostResolver`
- `AWS::Route53Resolver::ResolverConfig`
- `AWS::Route53Resolver::ResolverDNSSECConfig`
- `AWS::Route53Resolver::ResolverEndpoint`
- `AWS::Route53Resolver::ResolverQueryLoggingConfig`
- `AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation`
- `AWS::Route53Resolver::ResolverRule`
- `AWS::Route53Resolver::ResolverRuleAssociation`
- `AWS::S3::AccessGrant`
- `AWS::S3::AccessGrantsInstance`
- `AWS::S3::AccessGrantsLocation`
- `AWS::S3::AccessPoint`
- `AWS::S3::MultiRegionAccessPoint`
- `AWS::S3::MultiRegionAccessPointPolicy`
- `AWS::S3::StorageLens`
- `AWS::S3::StorageLensGroup`
- `AWS::S3Express::AccessPoint`
- `AWS::S3Express::BucketPolicy`
- `AWS::S3Files::AccessPoint`
- `AWS::S3Files::FileSystem`
- `AWS::S3Files::FileSystemPolicy`
- `AWS::S3Files::MountTarget`
- `AWS::S3ObjectLambda::AccessPoint`
- `AWS::S3ObjectLambda::AccessPointPolicy`
- `AWS::S3Outposts::AccessPoint`
- `AWS::S3Outposts::Bucket`
- `AWS::S3Outposts::BucketPolicy`
- `AWS::S3Outposts::Endpoint`
- `AWS::S3Tables::TableBucketPolicy`
- `AWS::S3Tables::TablePolicy`
- `AWS::S3Vectors::Index`
- `AWS::S3Vectors::VectorBucketPolicy`
- `AWS::SCN::Dataset`
- `AWS::SCN::Namespace`
- `AWS::SES::ConfigurationSet`
- `AWS::SES::ConfigurationSetEventDestination`
- `AWS::SES::ContactList`
- `AWS::SES::CustomVerificationEmailTemplate`
- `AWS::SES::DedicatedIpPool`
- `AWS::SES::EmailIdentity`
- `AWS::SES::MailManagerAddonInstance`
- `AWS::SES::MailManagerAddonSubscription`
- `AWS::SES::MailManagerAddressList`
- `AWS::SES::MailManagerArchive`
- `AWS::SES::MailManagerIngressPoint`
- `AWS::SES::MailManagerRelay`
- `AWS::SES::MailManagerRuleSet`
- `AWS::SES::MailManagerTrafficPolicy`
- `AWS::SES::MultiRegionEndpoint`
- `AWS::SES::Template`
- `AWS::SES::Tenant`
- `AWS::SES::VdmAttributes`
- `AWS::SMSVOICE::ConfigurationSet`
- `AWS::SMSVOICE::OptOutList`
- `AWS::SMSVOICE::PhoneNumber`
- `AWS::SMSVOICE::Pool`
- `AWS::SMSVOICE::ProtectConfiguration`
- `AWS::SMSVOICE::Registration`
- `AWS::SMSVOICE::ResourcePolicy`
- `AWS::SMSVOICE::SenderId`
- `AWS::SNS::TopicInlinePolicy`
- `AWS::SQS::QueueInlinePolicy`
- `AWS::SSM::Association`
- `AWS::SSM::Document`
- `AWS::SSM::MaintenanceWindow`
- `AWS::SSM::MaintenanceWindowTarget`
- `AWS::SSM::MaintenanceWindowTask`
- `AWS::SSM::OpsItem`
- `AWS::SSM::PatchBaseline`
- `AWS::SSM::ResourceDataSync`
- `AWS::SSM::ResourcePolicy`
- `AWS::SSMContacts::Contact`
- `AWS::SSMContacts::ContactChannel`
- `AWS::SSMContacts::Plan`
- `AWS::SSMContacts::Rotation`
- `AWS::SSMGuiConnect::Preferences`
- `AWS::SSMIncidents::ReplicationSet`
- `AWS::SSMIncidents::ResponsePlan`
- `AWS::SSMQuickSetup::ConfigurationManager`
- `AWS::SSMQuickSetup::LifecycleAutomation`
- `AWS::SSO::Application`
- `AWS::SSO::ApplicationAssignment`
- `AWS::SSO::Assignment`
- `AWS::SSO::Instance`
- `AWS::SSO::InstanceAccessControlAttributeConfiguration`
- `AWS::SSO::PermissionSet`
- `AWS::SageMaker::Action`
- `AWS::SageMaker::Algorithm`
- `AWS::SageMaker::App`
- `AWS::SageMaker::AppImageConfig`
- `AWS::SageMaker::Cluster`
- `AWS::SageMaker::Context`
- `AWS::SageMaker::DataQualityJobDefinition`
- `AWS::SageMaker::Device`
- `AWS::SageMaker::DeviceFleet`
- `AWS::SageMaker::Domain`
- `AWS::SageMaker::Endpoint`
- `AWS::SageMaker::Experiment`
- `AWS::SageMaker::ExperimentTrialComponent`
- `AWS::SageMaker::FeatureGroup`
- `AWS::SageMaker::Hub`
- `AWS::SageMaker::Image`
- `AWS::SageMaker::ImageVersion`
- `AWS::SageMaker::InferenceComponent`
- `AWS::SageMaker::InferenceExperiment`
- `AWS::SageMaker::MlflowApp`
- `AWS::SageMaker::MlflowTrackingServer`
- `AWS::SageMaker::Model`
- `AWS::SageMaker::ModelBiasJobDefinition`
- `AWS::SageMaker::ModelCard`
- `AWS::SageMaker::ModelExplainabilityJobDefinition`
- `AWS::SageMaker::ModelPackage`
- `AWS::SageMaker::ModelPackageGroup`
- `AWS::SageMaker::ModelQualityJobDefinition`
- `AWS::SageMaker::MonitoringSchedule`
- `AWS::SageMaker::PartnerApp`
- `AWS::SageMaker::Pipeline`
- `AWS::SageMaker::ProcessingJob`
- `AWS::SageMaker::Project`
- `AWS::SageMaker::Space`
- `AWS::SageMaker::StudioLifecycleConfig`
- `AWS::SageMaker::TrialComponent`
- `AWS::SageMaker::UserProfile`
- `AWS::Scheduler::ScheduleGroup`
- `AWS::SecretsManager::ResourcePolicy`
- `AWS::SecretsManager::RotationSchedule`
- `AWS::SecretsManager::SecretTargetAttachment`
- `AWS::SecurityAgent::AgentSpace`
- `AWS::SecurityAgent::Application`
- `AWS::SecurityAgent::Pentest`
- `AWS::SecurityAgent::SecurityRequirementPack`
- `AWS::SecurityAgent::TargetDomain`
- `AWS::SecurityHub::AggregatorV2`
- `AWS::SecurityHub::AutomationRule`
- `AWS::SecurityHub::AutomationRuleV2`
- `AWS::SecurityHub::ConfigurationPolicy`
- `AWS::SecurityHub::Connector`
- `AWS::SecurityHub::ConnectorV2`
- `AWS::SecurityHub::DelegatedAdmin`
- `AWS::SecurityHub::FindingAggregator`
- `AWS::SecurityHub::Hub`
- `AWS::SecurityHub::HubV2`
- `AWS::SecurityHub::Insight`
- `AWS::SecurityHub::OrganizationConfiguration`
- `AWS::SecurityHub::PolicyAssociation`
- `AWS::SecurityHub::ProductSubscription`
- `AWS::SecurityHub::SecurityControl`
- `AWS::SecurityHub::Standard`
- `AWS::SecurityLake::AwsLogSource`
- `AWS::SecurityLake::DataLake`
- `AWS::SecurityLake::Subscriber`
- `AWS::SecurityLake::SubscriberNotification`
- `AWS::ServiceCatalog::AcceptedPortfolioShare`
- `AWS::ServiceCatalog::CloudFormationProduct`
- `AWS::ServiceCatalog::CloudFormationProvisionedProduct`
- `AWS::ServiceCatalog::LaunchNotificationConstraint`
- `AWS::ServiceCatalog::LaunchRoleConstraint`
- `AWS::ServiceCatalog::LaunchTemplateConstraint`
- `AWS::ServiceCatalog::Portfolio`
- `AWS::ServiceCatalog::PortfolioPrincipalAssociation`
- `AWS::ServiceCatalog::PortfolioProductAssociation`
- `AWS::ServiceCatalog::PortfolioShare`
- `AWS::ServiceCatalog::ResourceUpdateConstraint`
- `AWS::ServiceCatalog::ServiceAction`
- `AWS::ServiceCatalog::ServiceActionAssociation`
- `AWS::ServiceCatalog::StackSetConstraint`
- `AWS::ServiceCatalog::TagOption`
- `AWS::ServiceCatalog::TagOptionAssociation`
- `AWS::ServiceCatalogAppRegistry::Application`
- `AWS::ServiceCatalogAppRegistry::AttributeGroup`
- `AWS::ServiceCatalogAppRegistry::AttributeGroupAssociation`
- `AWS::ServiceCatalogAppRegistry::ResourceAssociation`
- `AWS::Shield::DRTAccess`
- `AWS::Shield::ProactiveEngagement`
- `AWS::Shield::Protection`
- `AWS::Shield::ProtectionGroup`
- `AWS::Signer::ProfilePermission`
- `AWS::Signer::SigningProfile`
- `AWS::SimSpaceWeaver::Simulation`
- `AWS::StepFunctions::Activity`
- `AWS::StepFunctions::StateMachineAlias`
- `AWS::StepFunctions::StateMachineVersion`
- `AWS::StorageGateway::TapePool`
- `AWS::SupportApp::AccountAlias`
- `AWS::SupportApp::SlackChannelConfiguration`
- `AWS::SupportApp::SlackWorkspaceConfiguration`
- `AWS::Synthetics::Canary`
- `AWS::Synthetics::Group`
- `AWS::SystemsManagerSAP::Application`
- `AWS::Timestream::Database`
- `AWS::Timestream::InfluxDBCluster`
- `AWS::Timestream::InfluxDBInstance`
- `AWS::Timestream::ScheduledQuery`
- `AWS::Timestream::Table`
- `AWS::Transcribe::VocabularyFilter`
- `AWS::Transfer::Agreement`
- `AWS::Transfer::Certificate`
- `AWS::Transfer::Connector`
- `AWS::Transfer::Profile`
- `AWS::Transfer::Server`
- `AWS::Transfer::User`
- `AWS::Transfer::WebApp`
- `AWS::Transfer::Workflow`
- `AWS::UXC::AccountCustomization`
- `AWS::VerifiedPermissions::IdentitySource`
- `AWS::VerifiedPermissions::Policy`
- `AWS::VerifiedPermissions::PolicyStore`
- `AWS::VerifiedPermissions::PolicyStoreAlias`
- `AWS::VerifiedPermissions::PolicyTemplate`
- `AWS::VoiceID::Domain`
- `AWS::VpcLattice::AccessLogSubscription`
- `AWS::VpcLattice::AuthPolicy`
- `AWS::VpcLattice::DomainVerification`
- `AWS::VpcLattice::Listener`
- `AWS::VpcLattice::ResourceConfiguration`
- `AWS::VpcLattice::ResourceGateway`
- `AWS::VpcLattice::ResourcePolicy`
- `AWS::VpcLattice::Rule`
- `AWS::VpcLattice::Service`
- `AWS::VpcLattice::ServiceNetwork`
- `AWS::VpcLattice::ServiceNetworkResourceAssociation`
- `AWS::VpcLattice::ServiceNetworkServiceAssociation`
- `AWS::VpcLattice::ServiceNetworkVpcAssociation`
- `AWS::VpcLattice::TargetGroup`
- `AWS::WAFv2::IPSet`
- `AWS::WAFv2::LoggingConfiguration`
- `AWS::WAFv2::RegexPatternSet`
- `AWS::WAFv2::RuleGroup`
- `AWS::WAFv2::WebACLAssociation`
- `AWS::WellArchitected::Lens`
- `AWS::WellArchitected::Profile`
- `AWS::WellArchitected::ReviewTemplate`
- `AWS::Wisdom::AIAgent`
- `AWS::Wisdom::AIAgentVersion`
- `AWS::Wisdom::AIGuardrail`
- `AWS::Wisdom::AIGuardrailVersion`
- `AWS::Wisdom::AIPrompt`
- `AWS::Wisdom::AIPromptVersion`
- `AWS::Wisdom::Assistant`
- `AWS::Wisdom::AssistantAssociation`
- `AWS::Wisdom::KnowledgeBase`
- `AWS::Wisdom::MessageTemplate`
- `AWS::Wisdom::MessageTemplateVersion`
- `AWS::Wisdom::QuickResponse`
- `AWS::WorkSpaces::ConnectionAlias`
- `AWS::WorkSpaces::Workspace`
- `AWS::WorkSpaces::WorkspaceIpGroup`
- `AWS::WorkSpaces::WorkspacesPool`
- `AWS::WorkSpacesThinClient::Environment`
- `AWS::WorkSpacesWeb::BrowserSettings`
- `AWS::WorkSpacesWeb::DataProtectionSettings`
- `AWS::WorkSpacesWeb::IdentityProvider`
- `AWS::WorkSpacesWeb::IpAccessSettings`
- `AWS::WorkSpacesWeb::NetworkSettings`
- `AWS::WorkSpacesWeb::Portal`
- `AWS::WorkSpacesWeb::SessionLogger`
- `AWS::WorkSpacesWeb::TrustStore`
- `AWS::WorkSpacesWeb::UserAccessLoggingSettings`
- `AWS::WorkSpacesWeb::UserSettings`
- `AWS::WorkspacesInstances::Volume`
- `AWS::WorkspacesInstances::VolumeAssociation`
- `AWS::WorkspacesInstances::WorkspaceInstance`
- `AWS::XRay::Group`
- `AWS::XRay::ResourcePolicy`
- `AWS::XRay::SamplingRule`
- `AWS::XRay::TransactionSearchConfig`

## Tier 3 — Not provisionable by cdkd today

`ProvisioningType` is `NON_PROVISIONABLE` (or DescribeType failed). Cloud Control API cannot create / update / delete these types; cdkd cannot support them at all without a dedicated SDK Provider. Most entries here are inherently read-only or registry-only types (`AWS::*::*Type`, data-only resources, etc.) and are NOT realistic targets for a provider.

- `AWS::AmazonMQ::ConfigurationAssociation`
- `AWS::ApiGatewayV2::ApiGatewayManagedOverrides`
- `AWS::AppMesh::GatewayRoute`
- `AWS::AppMesh::Mesh`
- `AWS::AppMesh::Route`
- `AWS::AppMesh::VirtualGateway`
- `AWS::AppMesh::VirtualNode`
- `AWS::AppMesh::VirtualRouter`
- `AWS::AppMesh::VirtualService`
- `AWS::AppStream::Fleet`
- `AWS::AppSync::ApiCache`
- `AWS::Artifact::Report`
- `AWS::Athena::Session`
- `AWS::AutoScalingPlans::ScalingPlan`
- `AWS::BCMDataExports::Table`
- `AWS::BackupSearch::SearchJob`
- `AWS::Bedrock::DefaultPromptRouter`
- `AWS::Bedrock::ModelInvocationJob`
- `AWS::BedrockAgentCore::TokenVault`
- `AWS::Cloud9::EnvironmentEC2`
- `AWS::CloudFormation::CustomResource`
- `AWS::CloudFormation::Macro`
- `AWS::CloudFormation::ResourceScan`
- `AWS::CloudFormation::WaitCondition`
- `AWS::CloudFront::StreamingDistribution`
- `AWS::CodeArtifact::Package`
- `AWS::CodeBuild::ReportGroup`
- `AWS::CodeBuild::Sandbox`
- `AWS::CodeBuild::SourceCredential`
- `AWS::CodeStar::GitHubRepository`
- `AWS::CognitoSync::Dataset`
- `AWS::Config::ConfigurationRecorder`
- `AWS::Config::DeliveryChannel`
- `AWS::Config::OrganizationConfigRule`
- `AWS::ControlCatalog::Objective`
- `AWS::DAX::Cluster`
- `AWS::DAX::ParameterGroup`
- `AWS::DAX::SubnetGroup`
- `AWS::DMS::EventSubscription`
- `AWS::DMS::ReplicationInstance`
- `AWS::DMS::ReplicationSubnetGroup`
- `AWS::DMS::ReplicationTask`
- `AWS::DirectoryService::MicrosoftAD`
- `AWS::DocDB::DBClusterParameterGroup`
- `AWS::DynamoDB::Export`
- `AWS::EC2::ClientVpnAuthorizationRule`
- `AWS::EC2::ClientVpnEndpoint`
- `AWS::EC2::ClientVpnRoute`
- `AWS::EC2::ClientVpnTargetNetworkAssociation`
- `AWS::EC2::NetworkInterfacePermission`
- `AWS::EC2::VPNGatewayRoutePropagation`
- `AWS::EMR::NotebookExecution`
- `AWS::ElastiCache::ReservedCacheNode`
- `AWS::ElastiCache::SecurityGroup`
- `AWS::ElastiCache::SecurityGroupIngress`
- `AWS::ElasticLoadBalancingV2::ListenerCertificate`
- `AWS::Elasticsearch::Domain`
- `AWS::Events::Replay`
- `AWS::FIS::SafetyLever`
- `AWS::FSx::Snapshot`
- `AWS::FSx::StorageVirtualMachine`
- `AWS::FSx::Volume`
- `AWS::Glue::Classifier`
- `AWS::Glue::CustomEntityType`
- `AWS::Glue::DataQualityRuleset`
- `AWS::Glue::DevEndpoint`
- `AWS::Glue::MLTransform`
- `AWS::Glue::Partition`
- `AWS::Glue::TableOptimizer`
- `AWS::Greengrass::ConnectorDefinition`
- `AWS::Greengrass::ConnectorDefinitionVersion`
- `AWS::Greengrass::CoreDefinition`
- `AWS::Greengrass::CoreDefinitionVersion`
- `AWS::Greengrass::DeviceDefinition`
- `AWS::Greengrass::DeviceDefinitionVersion`
- `AWS::Greengrass::FunctionDefinition`
- `AWS::Greengrass::FunctionDefinitionVersion`
- `AWS::Greengrass::Group`
- `AWS::Greengrass::GroupVersion`
- `AWS::Greengrass::LoggerDefinition`
- `AWS::Greengrass::LoggerDefinitionVersion`
- `AWS::Greengrass::ResourceDefinition`
- `AWS::Greengrass::ResourceDefinitionVersion`
- `AWS::Greengrass::SubscriptionDefinition`
- `AWS::Greengrass::SubscriptionDefinitionVersion`
- `AWS::GreengrassV2::Component`
- `AWS::GreengrassV2::CoreDevice`
- `AWS::IdentityStore::AllGroupMemberships`
- `AWS::ImageBuilder::AllImageBuildVersions`
- `AWS::ImageBuilder::AllWorkflowBuildVersions`
- `AWS::ImageBuilder::WorkflowExecution`
- `AWS::ImageBuilder::WorkflowStepExecution`
- `AWS::IoT::PolicyPrincipalAttachment`
- `AWS::IoT::ThingPrincipalAttachment`
- `AWS::IoTThingsGraph::FlowTemplate`
- `AWS::KinesisAnalytics::Application`
- `AWS::KinesisAnalytics::ApplicationOutput`
- `AWS::KinesisAnalytics::ApplicationReferenceDataSource`
- `AWS::KinesisAnalyticsV2::ApplicationCloudWatchLoggingOption`
- `AWS::KinesisAnalyticsV2::ApplicationOutput`
- `AWS::KinesisAnalyticsV2::ApplicationReferenceDataSource`
- `AWS::LakeFormation::DataLakeSettings`
- `AWS::LakeFormation::Permissions`
- `AWS::LakeFormation::Resource`
- `AWS::ManagedBlockchain::Member`
- `AWS::ManagedBlockchain::Node`
- `AWS::MediaConnect::Offering`
- `AWS::MediaConnect::Reservation`
- `AWS::MediaConvert::JobTemplate`
- `AWS::MediaConvert::Preset`
- `AWS::MediaConvert::Queue`
- `AWS::MediaLive::Channel`
- `AWS::MediaLive::Input`
- `AWS::MediaLive::InputSecurityGroup`
- `AWS::MediaLive::Offering`
- `AWS::MediaPackage::HarvestJob`
- `AWS::MediaStore::Container`
- `AWS::MemoryDB::MultiRegionParameterGroup`
- `AWS::MemoryDB::ReservedNode`
- `AWS::OSIS::PipelineBlueprint`
- `AWS::Omics::Reference`
- `AWS::OpsWorks::App`
- `AWS::OpsWorks::ElasticLoadBalancerAttachment`
- `AWS::OpsWorks::Instance`
- `AWS::OpsWorks::Layer`
- `AWS::OpsWorks::Stack`
- `AWS::OpsWorks::UserProfile`
- `AWS::OpsWorks::Volume`
- `AWS::Personalize::DataDeletionJob`
- `AWS::Personalize::Recipe`
- `AWS::Pinpoint::ADMChannel`
- `AWS::Pinpoint::APNSChannel`
- `AWS::Pinpoint::APNSSandboxChannel`
- `AWS::Pinpoint::APNSVoipChannel`
- `AWS::Pinpoint::APNSVoipSandboxChannel`
- `AWS::Pinpoint::App`
- `AWS::Pinpoint::ApplicationSettings`
- `AWS::Pinpoint::BaiduChannel`
- `AWS::Pinpoint::Campaign`
- `AWS::Pinpoint::EmailChannel`
- `AWS::Pinpoint::EmailTemplate`
- `AWS::Pinpoint::EventStream`
- `AWS::Pinpoint::GCMChannel`
- `AWS::Pinpoint::PushTemplate`
- `AWS::Pinpoint::SMSChannel`
- `AWS::Pinpoint::Segment`
- `AWS::Pinpoint::SmsTemplate`
- `AWS::Pinpoint::VoiceChannel`
- `AWS::PinpointEmail::ConfigurationSet`
- `AWS::PinpointEmail::ConfigurationSetEventDestination`
- `AWS::PinpointEmail::DedicatedIpPool`
- `AWS::PinpointEmail::Identity`
- `AWS::QLDB::Ledger`
- `AWS::RDS::DBSecurityGroup`
- `AWS::RDS::DBSecurityGroupIngress`
- `AWS::Redshift::ClusterSecurityGroup`
- `AWS::Redshift::ClusterSecurityGroupIngress`
- `AWS::RedshiftServerless::RecoveryPoint`
- `AWS::Route53::RecordSetGroup`
- `AWS::SDB::Domain`
- `AWS::SES::ReceiptFilter`
- `AWS::SES::ReceiptRule`
- `AWS::SES::ReceiptRuleSet`
- `AWS::SSM::Session`
- `AWS::SSO::ApplicationProvider`
- `AWS::SageMaker::CodeRepository`
- `AWS::SageMaker::EndpointConfig`
- `AWS::SageMaker::ModelCardExportJob`
- `AWS::SageMaker::MonitoringScheduleAlert`
- `AWS::SageMaker::NotebookInstance`
- `AWS::SageMaker::NotebookInstanceLifecycleConfig`
- `AWS::SageMaker::TransformJob`
- `AWS::SageMaker::Workteam`
- `AWS::ServiceDiscovery::Instance`
- `AWS::Signer::SigningJob`
- `AWS::States::Execution`
- `AWS::StepFunctions::MapRun`
- `AWS::ThinClient::SoftwareSet`
- `AWS::Transcribe::MedicalTranscriptionJob`
- `AWS::UserNotifications::ManagedNotificationConfiguration`
- `AWS::WAF::ByteMatchSet`
- `AWS::WAF::IPSet`
- `AWS::WAF::Rule`
- `AWS::WAF::SizeConstraintSet`
- `AWS::WAF::SqlInjectionMatchSet`
- `AWS::WAF::WebACL`
- `AWS::WAF::XssMatchSet`
- `AWS::WAFRegional::ByteMatchSet`
- `AWS::WAFRegional::GeoMatchSet`
- `AWS::WAFRegional::IPSet`
- `AWS::WAFRegional::RateBasedRule`
- `AWS::WAFRegional::RegexPatternSet`
- `AWS::WAFRegional::Rule`
- `AWS::WAFRegional::SizeConstraintSet`
- `AWS::WAFRegional::SqlInjectionMatchSet`
- `AWS::WAFRegional::WebACL`
- `AWS::WAFRegional::WebACLAssociation`
- `AWS::WAFRegional::XssMatchSet`
- `Alexa::ASK::Skill`