Provider Coverage Report
Auto-generated by scripts/audit-provider-coverage.ts. Do not edit by hand; re-run the script to regenerate.
- Generated:
2026-07-31T06:56:37.717Z - Schema version: 1
- Total CFn resource types audited: 1705
Summary
| Tier | Provisioning path | Count |
|---|---|---|
| Tier 1 | SDK Provider (preferred) | 134 |
| Tier 2 | Cloud Control API fallback | 1372 |
| Tier 3 | Not provisionable by cdkd today | 199 |
Tier 1 — SDK Provider registered
Direct SDK calls via src/provisioning/register-providers.ts. Fastest, drift-aware, and shape-stable on reads. This is the canonical path; new high-traffic types should land here.
AWS::ApiGateway::AccountAWS::ApiGateway::AuthorizerAWS::ApiGateway::DeploymentAWS::ApiGateway::MethodAWS::ApiGateway::ResourceAWS::ApiGateway::StageAWS::ApiGatewayV2::ApiAWS::ApiGatewayV2::AuthorizerAWS::ApiGatewayV2::IntegrationAWS::ApiGatewayV2::RouteAWS::ApiGatewayV2::StageAWS::AppSync::ApiKeyAWS::AppSync::DataSourceAWS::AppSync::GraphQLApiAWS::AppSync::GraphQLSchemaAWS::AppSync::ResolverAWS::AutoScaling::AutoScalingGroupAWS::BedrockAgentCore::BrowserAWS::BedrockAgentCore::CodeInterpreterAWS::BedrockAgentCore::EvaluatorAWS::BedrockAgentCore::RuntimeAWS::Budgets::BudgetAWS::CertificateManager::CertificateAWS::CloudFormation::StackAWS::CloudFormation::WaitConditionHandleAWS::CloudFront::CloudFrontOriginAccessIdentityAWS::CloudFront::DistributionAWS::CloudFront::OriginAccessControlAWS::CloudTrail::TrailAWS::CloudWatch::AlarmAWS::CloudWatch::AnomalyDetectorAWS::CodeBuild::ProjectAWS::CodeCommit::RepositoryAWS::Cognito::UserPoolAWS::DLM::LifecyclePolicyAWS::DocDB::DBClusterAWS::DocDB::DBInstanceAWS::DocDB::DBSubnetGroupAWS::DynamoDB::GlobalTableAWS::DynamoDB::TableAWS::EC2::EIPAWS::EC2::InstanceAWS::EC2::InternetGatewayAWS::EC2::NatGatewayAWS::EC2::NetworkAclAWS::EC2::NetworkAclEntryAWS::EC2::RouteAWS::EC2::RouteTableAWS::EC2::SecurityGroupAWS::EC2::SecurityGroupIngressAWS::EC2::SubnetAWS::EC2::SubnetNetworkAclAssociationAWS::EC2::SubnetRouteTableAssociationAWS::EC2::VPCAWS::EC2::VPCGatewayAttachmentAWS::ECR::RepositoryAWS::ECS::ClusterAWS::ECS::ServiceAWS::ECS::TaskDefinitionAWS::EFS::AccessPointAWS::EFS::FileSystemAWS::EFS::MountTargetAWS::EMR::ClusterAWS::EMR::InstanceFleetConfigAWS::EMR::InstanceGroupConfigAWS::ElastiCache::CacheClusterAWS::ElastiCache::SubnetGroupAWS::ElasticLoadBalancingV2::ListenerAWS::ElasticLoadBalancingV2::LoadBalancerAWS::ElasticLoadBalancingV2::TargetGroupAWS::Events::EventBusAWS::Events::RuleAWS::FSx::FileSystemAWS::Glue::ConnectionAWS::Glue::CrawlerAWS::Glue::DatabaseAWS::Glue::JobAWS::Glue::SecurityConfigurationAWS::Glue::TableAWS::Glue::TriggerAWS::Glue::WorkflowAWS::IAM::AccessKeyAWS::IAM::GroupAWS::IAM::InstanceProfileAWS::IAM::ManagedPolicyAWS::IAM::PolicyAWS::IAM::RoleAWS::IAM::UserAWS::IAM::UserToGroupAdditionAWS::KMS::AliasAWS::KMS::KeyAWS::Kinesis::StreamAWS::Kinesis::StreamConsumerAWS::KinesisFirehose::DeliveryStreamAWS::Lambda::EventInvokeConfigAWS::Lambda::EventSourceMappingAWS::Lambda::FunctionAWS::Lambda::LayerVersionAWS::Lambda::MicrovmImageAWS::Lambda::PermissionAWS::Lambda::UrlAWS::Logs::LogGroupAWS::Neptune::DBClusterAWS::Neptune::DBInstanceAWS::Neptune::DBSubnetGroupAWS::RDS::DBClusterAWS::RDS::DBInstanceAWS::RDS::DBProxyAWS::RDS::DBProxyEndpointAWS::RDS::DBProxyTargetGroupAWS::RDS::DBSubnetGroupAWS::Route53::HostedZoneAWS::Route53::RecordSetAWS::S3::BucketAWS::S3::BucketPolicyAWS::S3Express::DirectoryBucketAWS::S3Tables::NamespaceAWS::S3Tables::TableAWS::S3Tables::TableBucketAWS::S3Vectors::VectorBucketAWS::SNS::SubscriptionAWS::SNS::TopicAWS::SNS::TopicPolicyAWS::SQS::QueueAWS::SQS::QueuePolicyAWS::SSM::ParameterAWS::Scheduler::ScheduleAWS::SecretsManager::SecretAWS::ServiceDiscovery::HttpNamespaceAWS::ServiceDiscovery::PrivateDnsNamespaceAWS::ServiceDiscovery::PublicDnsNamespaceAWS::ServiceDiscovery::ServiceAWS::StepFunctions::StateMachineAWS::WAFv2::WebACL
Tier 2 — Cloud Control API fallback
No dedicated SDK Provider, but ProvisioningType is FULLY_MUTABLE or IMMUTABLE. cdkd routes these through the generic Cloud Control API today — deployable, but slower (async polling) and shape-divergent on reads (see CC_API_FALLBACK_DENY_LIST for known drift offenders). Frequency-weighted picks from this list are the next candidates for dedicated providers.
AWS::ACMPCA::CertificateAWS::ACMPCA::CertificateAuthorityAWS::ACMPCA::CertificateAuthorityActivationAWS::ACMPCA::PermissionAWS::AIOps::InvestigationGroupAWS::APS::AnomalyDetectorAWS::APS::ResourcePolicyAWS::APS::RuleGroupsNamespaceAWS::APS::ScraperAWS::APS::WorkspaceAWS::ARCRegionSwitch::PlanAWS::ARCZonalShift::AutoshiftObserverNotificationStatusAWS::ARCZonalShift::ZonalAutoshiftConfigurationAWS::AWSExternalAnthropic::WorkspaceAWS::AccessAnalyzer::AnalyzerAWS::AmazonMQ::BrokerAWS::AmazonMQ::ConfigurationAWS::Amplify::AppAWS::Amplify::BranchAWS::Amplify::DomainAWS::AmplifyUIBuilder::ComponentAWS::AmplifyUIBuilder::FormAWS::AmplifyUIBuilder::ThemeAWS::ApiGateway::ApiKeyAWS::ApiGateway::BasePathMappingAWS::ApiGateway::BasePathMappingV2AWS::ApiGateway::ClientCertificateAWS::ApiGateway::DocumentationPartAWS::ApiGateway::DocumentationVersionAWS::ApiGateway::DomainNameAWS::ApiGateway::DomainNameAccessAssociationAWS::ApiGateway::DomainNameV2AWS::ApiGateway::GatewayResponseAWS::ApiGateway::ModelAWS::ApiGateway::RequestValidatorAWS::ApiGateway::RestApiAWS::ApiGateway::UsagePlanAWS::ApiGateway::UsagePlanKeyAWS::ApiGateway::VpcLinkAWS::ApiGatewayV2::ApiMappingAWS::ApiGatewayV2::DeploymentAWS::ApiGatewayV2::DomainNameAWS::ApiGatewayV2::IntegrationResponseAWS::ApiGatewayV2::ModelAWS::ApiGatewayV2::RouteResponseAWS::ApiGatewayV2::RoutingRuleAWS::ApiGatewayV2::VpcLinkAWS::AppConfig::ApplicationAWS::AppConfig::ConfigurationProfileAWS::AppConfig::DeploymentAWS::AppConfig::DeploymentStrategyAWS::AppConfig::EnvironmentAWS::AppConfig::ExtensionAWS::AppConfig::ExtensionAssociationAWS::AppConfig::HostedConfigurationVersionAWS::AppFlow::ConnectorAWS::AppFlow::ConnectorProfileAWS::AppFlow::FlowAWS::AppIntegrations::ApplicationAWS::AppIntegrations::DataIntegrationAWS::AppIntegrations::EventIntegrationAWS::AppRunner::AutoScalingConfigurationAWS::AppRunner::ObservabilityConfigurationAWS::AppRunner::ServiceAWS::AppRunner::VpcConnectorAWS::AppRunner::VpcIngressConnectionAWS::AppStream::AppBlockAWS::AppStream::AppBlockBuilderAWS::AppStream::ApplicationAWS::AppStream::ApplicationEntitlementAssociationAWS::AppStream::ApplicationFleetAssociationAWS::AppStream::DirectoryConfigAWS::AppStream::EntitlementAWS::AppStream::ImageBuilderAWS::AppStream::StackAWS::AppStream::StackFleetAssociationAWS::AppStream::StackUserAssociationAWS::AppStream::UserAWS::AppSync::ApiAWS::AppSync::ChannelNamespaceAWS::AppSync::DomainNameAWS::AppSync::DomainNameApiAssociationAWS::AppSync::FunctionConfigurationAWS::AppSync::SourceApiAssociationAWS::AppTest::TestCaseAWS::ApplicationAutoScaling::ScalableTargetAWS::ApplicationAutoScaling::ScalingPolicyAWS::ApplicationInsights::ApplicationAWS::ApplicationSignals::DiscoveryAWS::ApplicationSignals::GroupingConfigurationAWS::ApplicationSignals::ServiceLevelObjectiveAWS::Athena::CapacityReservationAWS::Athena::DataCatalogAWS::Athena::NamedQueryAWS::Athena::PreparedStatementAWS::Athena::WorkGroupAWS::AuditManager::AssessmentAWS::AuditManager::AssessmentFrameworkAWS::AutoScaling::LaunchConfigurationAWS::AutoScaling::LifecycleHookAWS::AutoScaling::ScalingPolicyAWS::AutoScaling::ScheduledActionAWS::AutoScaling::WarmPoolAWS::B2BI::CapabilityAWS::B2BI::PartnershipAWS::B2BI::ProfileAWS::B2BI::TransformerAWS::BCM::DashboardAWS::BCMDataExports::ExportAWS::Backup::BackupPlanAWS::Backup::BackupSelectionAWS::Backup::BackupVaultAWS::Backup::FrameworkAWS::Backup::LegalHoldAWS::Backup::LogicallyAirGappedBackupVaultAWS::Backup::ReportPlanAWS::Backup::RestoreTestingPlanAWS::Backup::RestoreTestingSelectionAWS::Backup::TieringConfigurationAWS::BackupGateway::HypervisorAWS::Batch::ComputeEnvironmentAWS::Batch::ConsumableResourceAWS::Batch::JobDefinitionAWS::Batch::JobQueueAWS::Batch::QuotaShareAWS::Batch::SchedulingPolicyAWS::Batch::ServiceEnvironmentAWS::BcmPricingCalculator::BillScenarioAWS::Bedrock::AgentAWS::Bedrock::AgentAliasAWS::Bedrock::ApplicationInferenceProfileAWS::Bedrock::AutomatedReasoningPolicyAWS::Bedrock::AutomatedReasoningPolicyVersionAWS::Bedrock::BlueprintAWS::Bedrock::DataAutomationLibraryAWS::Bedrock::DataAutomationProjectAWS::Bedrock::DataSourceAWS::Bedrock::EnforcedGuardrailConfigurationAWS::Bedrock::FlowAWS::Bedrock::FlowAliasAWS::Bedrock::FlowVersionAWS::Bedrock::GuardrailAWS::Bedrock::GuardrailVersionAWS::Bedrock::IntelligentPromptRouterAWS::Bedrock::KnowledgeBaseAWS::Bedrock::KnowledgeBasePolicyAWS::Bedrock::PromptAWS::Bedrock::PromptVersionAWS::Bedrock::ResourcePolicyAWS::BedrockAgentCore::ApiKeyCredentialProviderAWS::BedrockAgentCore::BrowserCustomAWS::BedrockAgentCore::BrowserProfileAWS::BedrockAgentCore::CodeInterpreterCustomAWS::BedrockAgentCore::ConfigurationBundleAWS::BedrockAgentCore::DatasetAWS::BedrockAgentCore::GatewayAWS::BedrockAgentCore::GatewayTargetAWS::BedrockAgentCore::HarnessAWS::BedrockAgentCore::HarnessEndpointAWS::BedrockAgentCore::MemoryAWS::BedrockAgentCore::OAuth2CredentialProviderAWS::BedrockAgentCore::OnlineEvaluationConfigAWS::BedrockAgentCore::PaymentConnectorAWS::BedrockAgentCore::PaymentCredentialProviderAWS::BedrockAgentCore::PaymentManagerAWS::BedrockAgentCore::PolicyAWS::BedrockAgentCore::PolicyEngineAWS::BedrockAgentCore::ResourcePolicyAWS::BedrockAgentCore::RuntimeEndpointAWS::BedrockAgentCore::WorkloadIdentityAWS::BedrockMantle::ProjectAWS::Billing::BillingViewAWS::BillingConductor::BillingGroupAWS::BillingConductor::CustomLineItemAWS::BillingConductor::PricingPlanAWS::BillingConductor::PricingRuleAWS::Braket::SpendingLimitAWS::Budgets::BudgetsActionAWS::CE::AnomalyMonitorAWS::CE::AnomalySubscriptionAWS::CE::CostCategoryAWS::CUR::ReportDefinitionAWS::Cases::CaseRuleAWS::Cases::DomainAWS::Cases::FieldAWS::Cases::LayoutAWS::Cases::TemplateAWS::Cassandra::KeyspaceAWS::Cassandra::TableAWS::Cassandra::TypeAWS::CertificateManager::AccountAWS::CertificateManager::AcmeDomainValidationAWS::CertificateManager::AcmeEndpointAWS::CertificateManager::AcmeExternalAccountBindingAWS::Chatbot::CustomActionAWS::Chatbot::MicrosoftTeamsChannelConfigurationAWS::Chatbot::SlackChannelConfigurationAWS::Chime::AppInstanceAWS::Chime::AppInstanceBotAWS::Chime::AppInstanceUserAWS::CleanRooms::AnalysisTemplateAWS::CleanRooms::CollaborationAWS::CleanRooms::ConfiguredTableAWS::CleanRooms::ConfiguredTableAssociationAWS::CleanRooms::IdMappingTableAWS::CleanRooms::IdNamespaceAssociationAWS::CleanRooms::IntermediateTableAWS::CleanRooms::MembershipAWS::CleanRooms::PrivacyBudgetTemplateAWS::CleanRoomsML::ConfiguredModelAlgorithmAWS::CleanRoomsML::ConfiguredModelAlgorithmAssociationAWS::CleanRoomsML::TrainingDatasetAWS::CloudFormation::GeneratedTemplateAWS::CloudFormation::GuardHookAWS::CloudFormation::HookDefaultVersionAWS::CloudFormation::HookTypeConfigAWS::CloudFormation::HookVersionAWS::CloudFormation::LambdaHookAWS::CloudFormation::ModuleDefaultVersionAWS::CloudFormation::ModuleVersionAWS::CloudFormation::PublicTypeVersionAWS::CloudFormation::PublisherAWS::CloudFormation::ResourceDefaultVersionAWS::CloudFormation::ResourceVersionAWS::CloudFormation::StackSetAWS::CloudFormation::TypeActivationAWS::CloudFront::AnycastIpListAWS::CloudFront::CachePolicyAWS::CloudFront::ConnectionFunctionAWS::CloudFront::ConnectionGroupAWS::CloudFront::ContinuousDeploymentPolicyAWS::CloudFront::DistributionTenantAWS::CloudFront::FunctionAWS::CloudFront::KeyGroupAWS::CloudFront::KeyValueStoreAWS::CloudFront::MonitoringSubscriptionAWS::CloudFront::OriginRequestPolicyAWS::CloudFront::PublicKeyAWS::CloudFront::RealtimeLogConfigAWS::CloudFront::ResponseHeadersPolicyAWS::CloudFront::TrustStoreAWS::CloudFront::VpcOriginAWS::CloudTrail::ChannelAWS::CloudTrail::DashboardAWS::CloudTrail::EventDataStoreAWS::CloudTrail::ResourcePolicyAWS::CloudWatch::AlarmMuteRuleAWS::CloudWatch::CompositeAlarmAWS::CloudWatch::DashboardAWS::CloudWatch::InsightRuleAWS::CloudWatch::LogAlarmAWS::CloudWatch::MetricStreamAWS::CloudWatch::OTelEnrichmentAWS::CodeArtifact::DomainAWS::CodeArtifact::PackageGroupAWS::CodeArtifact::RepositoryAWS::CodeBuild::FleetAWS::CodeConnections::ConnectionAWS::CodeDeploy::ApplicationAWS::CodeDeploy::DeploymentConfigAWS::CodeDeploy::DeploymentGroupAWS::CodeGuruProfiler::ProfilingGroupAWS::CodeGuruReviewer::RepositoryAssociationAWS::CodePipeline::CustomActionTypeAWS::CodePipeline::PipelineAWS::CodePipeline::WebhookAWS::CodeStarConnections::ConnectionAWS::CodeStarConnections::RepositoryLinkAWS::CodeStarConnections::SyncConfigurationAWS::CodeStarNotifications::NotificationRuleAWS::Cognito::IdentityPoolAWS::Cognito::IdentityPoolPrincipalTagAWS::Cognito::IdentityPoolRoleAttachmentAWS::Cognito::LogDeliveryConfigurationAWS::Cognito::ManagedLoginBrandingAWS::Cognito::TermsAWS::Cognito::UserPoolClientAWS::Cognito::UserPoolDomainAWS::Cognito::UserPoolGroupAWS::Cognito::UserPoolIdentityProviderAWS::Cognito::UserPoolRegionalConfigurationAttachmentAWS::Cognito::UserPoolReplicaAWS::Cognito::UserPoolResourceServerAWS::Cognito::UserPoolRiskConfigurationAttachmentAWS::Cognito::UserPoolUICustomizationAttachmentAWS::Cognito::UserPoolUserAWS::Cognito::UserPoolUserToGroupAttachmentAWS::Comprehend::DocumentClassifierAWS::Comprehend::FlywheelAWS::ComputeOptimizer::AutomationRuleAWS::Config::AggregationAuthorizationAWS::Config::ConfigRuleAWS::Config::ConfigurationAggregatorAWS::Config::ConformancePackAWS::Config::ConnectorAWS::Config::OrganizationConformancePackAWS::Config::RemediationConfigurationAWS::Config::StoredQueryAWS::Connect::AgentStatusAWS::Connect::ApprovedOriginAWS::Connect::ContactFlowAWS::Connect::ContactFlowModuleAWS::Connect::ContactFlowModuleAliasAWS::Connect::ContactFlowModuleVersionAWS::Connect::ContactFlowVersionAWS::Connect::DataLakeAssociationAWS::Connect::DataTableAWS::Connect::DataTableAttributeAWS::Connect::DataTableRecordAWS::Connect::EmailAddressAWS::Connect::EvaluationFormAWS::Connect::HoursOfOperationAWS::Connect::InstanceAWS::Connect::InstanceStorageConfigAWS::Connect::IntegrationAssociationAWS::Connect::NotificationAWS::Connect::PhoneNumberAWS::Connect::PredefinedAttributeAWS::Connect::PromptAWS::Connect::QueueAWS::Connect::QuickConnectAWS::Connect::RoutingProfileAWS::Connect::RuleAWS::Connect::SecurityKeyAWS::Connect::SecurityProfileAWS::Connect::TaskTemplateAWS::Connect::TestCaseAWS::Connect::TrafficDistributionGroupAWS::Connect::UserAWS::Connect::UserHierarchyGroupAWS::Connect::UserHierarchyStructureAWS::Connect::ViewAWS::Connect::ViewVersionAWS::Connect::WorkspaceAWS::ConnectCampaigns::CampaignAWS::ConnectCampaignsV2::CampaignAWS::ControlTower::EnabledBaselineAWS::ControlTower::EnabledControlAWS::ControlTower::LandingZoneAWS::CustomerProfiles::CalculatedAttributeDefinitionAWS::CustomerProfiles::DomainAWS::CustomerProfiles::DomainObjectTypeAWS::CustomerProfiles::EventStreamAWS::CustomerProfiles::EventTriggerAWS::CustomerProfiles::IntegrationAWS::CustomerProfiles::ObjectTypeAWS::CustomerProfiles::RecommenderAWS::CustomerProfiles::SegmentDefinitionAWS::DMS::CertificateAWS::DMS::DataMigrationAWS::DMS::DataProviderAWS::DMS::EndpointAWS::DMS::InstanceProfileAWS::DMS::MigrationProjectAWS::DMS::ReplicationConfigAWS::DSQL::ClusterAWS::DataBrew::DatasetAWS::DataBrew::JobAWS::DataBrew::ProjectAWS::DataBrew::RecipeAWS::DataBrew::RulesetAWS::DataBrew::ScheduleAWS::DataPipeline::PipelineAWS::DataSync::AgentAWS::DataSync::LocationAzureBlobAWS::DataSync::LocationEFSAWS::DataSync::LocationFSxLustreAWS::DataSync::LocationFSxONTAPAWS::DataSync::LocationFSxOpenZFSAWS::DataSync::LocationFSxWindowsAWS::DataSync::LocationHDFSAWS::DataSync::LocationNFSAWS::DataSync::LocationObjectStorageAWS::DataSync::LocationS3AWS::DataSync::LocationSMBAWS::DataSync::TaskAWS::DataZone::ConnectionAWS::DataZone::DataSourceAWS::DataZone::DomainAWS::DataZone::DomainUnitAWS::DataZone::EnvironmentAWS::DataZone::EnvironmentActionsAWS::DataZone::EnvironmentBlueprintConfigurationAWS::DataZone::EnvironmentProfileAWS::DataZone::FormTypeAWS::DataZone::GroupProfileAWS::DataZone::OwnerAWS::DataZone::PolicyGrantAWS::DataZone::ProjectAWS::DataZone::ProjectMembershipAWS::DataZone::ProjectProfileAWS::DataZone::SubscriptionTargetAWS::DataZone::UserProfileAWS::Deadline::FarmAWS::Deadline::FleetAWS::Deadline::LicenseEndpointAWS::Deadline::LimitAWS::Deadline::MeteredProductAWS::Deadline::MonitorAWS::Deadline::QueueAWS::Deadline::QueueEnvironmentAWS::Deadline::QueueFleetAssociationAWS::Deadline::QueueLimitAssociationAWS::Deadline::StorageProfileAWS::Detective::GraphAWS::Detective::MemberInvitationAWS::Detective::OrganizationAdminAWS::DevOpsAgent::AgentSpaceAWS::DevOpsAgent::AssociationAWS::DevOpsAgent::PrivateConnectionAWS::DevOpsAgent::ServiceAWS::DevOpsGuru::LogAnomalyDetectionIntegrationAWS::DevOpsGuru::NotificationChannelAWS::DevOpsGuru::ResourceCollectionAWS::DirectConnect::ConnectionAWS::DirectConnect::DirectConnectGatewayAWS::DirectConnect::DirectConnectGatewayAssociationAWS::DirectConnect::LagAWS::DirectConnect::PrivateVirtualInterfaceAWS::DirectConnect::PublicVirtualInterfaceAWS::DirectConnect::TransitVirtualInterfaceAWS::DirectoryService::SimpleADAWS::DocDB::EventSubscriptionAWS::DocDB::GlobalClusterAWS::DocDBElastic::ClusterAWS::EC2::CapacityManagerDataExportAWS::EC2::CapacityReservationAWS::EC2::CapacityReservationFleetAWS::EC2::CarrierGatewayAWS::EC2::CustomerGatewayAWS::EC2::DHCPOptionsAWS::EC2::EC2FleetAWS::EC2::EIPAssociationAWS::EC2::EgressOnlyInternetGatewayAWS::EC2::EnclaveCertificateIamRoleAssociationAWS::EC2::FlowLogAWS::EC2::GatewayRouteTableAssociationAWS::EC2::HostAWS::EC2::IPAMAWS::EC2::IPAMAllocationAWS::EC2::IPAMPoolAWS::EC2::IPAMPoolCidrAWS::EC2::IPAMPrefixListResolverAWS::EC2::IPAMPrefixListResolverTargetAWS::EC2::IPAMResourceDiscoveryAWS::EC2::IPAMResourceDiscoveryAssociationAWS::EC2::IPAMScopeAWS::EC2::InstanceConnectEndpointAWS::EC2::IpPoolRouteTableAssociationAWS::EC2::KeyPairAWS::EC2::LaunchTemplateAWS::EC2::LocalGatewayRouteAWS::EC2::LocalGatewayRouteTableAWS::EC2::LocalGatewayRouteTableVPCAssociationAWS::EC2::LocalGatewayRouteTableVirtualInterfaceGroupAssociationAWS::EC2::LocalGatewayVirtualInterfaceAWS::EC2::LocalGatewayVirtualInterfaceGroupAWS::EC2::NetworkInsightsAccessScopeAWS::EC2::NetworkInsightsAccessScopeAnalysisAWS::EC2::NetworkInsightsAnalysisAWS::EC2::NetworkInsightsPathAWS::EC2::NetworkInterfaceAWS::EC2::NetworkInterfaceAttachmentAWS::EC2::NetworkPerformanceMetricSubscriptionAWS::EC2::PlacementGroupAWS::EC2::PrefixListAWS::EC2::RouteServerAWS::EC2::RouteServerAssociationAWS::EC2::RouteServerEndpointAWS::EC2::RouteServerPeerAWS::EC2::RouteServerPropagationAWS::EC2::SecurityGroupEgressAWS::EC2::SecurityGroupVpcAssociationAWS::EC2::SnapshotBlockPublicAccessAWS::EC2::SpotFleetAWS::EC2::SqlHaStandbyDetectedInstanceAWS::EC2::SubnetCidrBlockAWS::EC2::TrafficMirrorFilterAWS::EC2::TrafficMirrorFilterRuleAWS::EC2::TrafficMirrorSessionAWS::EC2::TrafficMirrorTargetAWS::EC2::TransitGatewayAWS::EC2::TransitGatewayAttachmentAWS::EC2::TransitGatewayConnectAWS::EC2::TransitGatewayConnectPeerAWS::EC2::TransitGatewayMeteringPolicyAWS::EC2::TransitGatewayMeteringPolicyEntryAWS::EC2::TransitGatewayMulticastDomainAWS::EC2::TransitGatewayMulticastDomainAssociationAWS::EC2::TransitGatewayMulticastGroupMemberAWS::EC2::TransitGatewayMulticastGroupSourceAWS::EC2::TransitGatewayPeeringAttachmentAWS::EC2::TransitGatewayPolicyTableAWS::EC2::TransitGatewayPolicyTableAssociationAWS::EC2::TransitGatewayPolicyTableEntryAWS::EC2::TransitGatewayRouteAWS::EC2::TransitGatewayRouteTableAWS::EC2::TransitGatewayRouteTableAssociationAWS::EC2::TransitGatewayRouteTablePropagationAWS::EC2::TransitGatewayVpcAttachmentAWS::EC2::VPCBlockPublicAccessExclusionAWS::EC2::VPCBlockPublicAccessOptionsAWS::EC2::VPCCidrBlockAWS::EC2::VPCDHCPOptionsAssociationAWS::EC2::VPCEncryptionControlAWS::EC2::VPCEndpointAWS::EC2::VPCEndpointConnectionNotificationAWS::EC2::VPCEndpointServiceAWS::EC2::VPCEndpointServicePermissionsAWS::EC2::VPCPeeringConnectionAWS::EC2::VPNConcentratorAWS::EC2::VPNConnectionAWS::EC2::VPNConnectionRouteAWS::EC2::VPNGatewayAWS::EC2::VerifiedAccessEndpointAWS::EC2::VerifiedAccessGroupAWS::EC2::VerifiedAccessInstanceAWS::EC2::VerifiedAccessTrustProviderAWS::EC2::VolumeAWS::EC2::VolumeAttachmentAWS::ECR::PublicRepositoryAWS::ECR::PullThroughCacheRuleAWS::ECR::PullTimeUpdateExclusionAWS::ECR::RegistryPolicyAWS::ECR::RegistryScanningConfigurationAWS::ECR::ReplicationConfigurationAWS::ECR::RepositoryCreationTemplateAWS::ECR::SigningConfigurationAWS::ECS::CapacityProviderAWS::ECS::ClusterCapacityProviderAssociationsAWS::ECS::DaemonAWS::ECS::DaemonTaskDefinitionAWS::ECS::ExpressGatewayServiceAWS::ECS::PrimaryTaskSetAWS::ECS::TaskSetAWS::EKS::AccessEntryAWS::EKS::AddonAWS::EKS::CapabilityAWS::EKS::ClusterAWS::EKS::FargateProfileAWS::EKS::IdentityProviderConfigAWS::EKS::NodegroupAWS::EKS::PodIdentityAssociationAWS::EMR::SecurityConfigurationAWS::EMR::StepAWS::EMR::StudioAWS::EMR::StudioSessionMappingAWS::EMR::WALWorkspaceAWS::EMRContainers::EndpointAWS::EMRContainers::SecurityConfigurationAWS::EMRContainers::VirtualClusterAWS::EMRServerless::ApplicationAWS::EVS::EnvironmentAWS::ElastiCache::GlobalReplicationGroupAWS::ElastiCache::ParameterGroupAWS::ElastiCache::ReplicationGroupAWS::ElastiCache::ServerlessCacheAWS::ElastiCache::UserAWS::ElastiCache::UserGroupAWS::ElasticBeanstalk::ApplicationAWS::ElasticBeanstalk::ApplicationVersionAWS::ElasticBeanstalk::ConfigurationTemplateAWS::ElasticBeanstalk::EnvironmentAWS::ElasticLoadBalancing::LoadBalancerAWS::ElasticLoadBalancingV2::ListenerRuleAWS::ElasticLoadBalancingV2::TrustStoreAWS::ElasticLoadBalancingV2::TrustStoreRevocationAWS::ElementalInference::DictionaryAWS::ElementalInference::FeedAWS::EntityResolution::IdMappingWorkflowAWS::EntityResolution::IdNamespaceAWS::EntityResolution::MatchingWorkflowAWS::EntityResolution::PolicyStatementAWS::EntityResolution::SchemaMappingAWS::EventSchemas::DiscovererAWS::EventSchemas::RegistryAWS::EventSchemas::RegistryPolicyAWS::EventSchemas::SchemaAWS::Events::ApiDestinationAWS::Events::ArchiveAWS::Events::ConnectionAWS::Events::EndpointAWS::Events::EventBusPolicyAWS::Evidently::ExperimentAWS::Evidently::FeatureAWS::Evidently::LaunchAWS::Evidently::ProjectAWS::Evidently::SegmentAWS::FIS::ExperimentTemplateAWS::FIS::TargetAccountConfigurationAWS::FMS::NotificationChannelAWS::FMS::PolicyAWS::FMS::ResourceSetAWS::FSx::DataRepositoryAssociationAWS::FSx::S3AccessPointAttachmentAWS::FinSpace::EnvironmentAWS::Forecast::DatasetAWS::Forecast::DatasetGroupAWS::FraudDetector::DetectorAWS::FraudDetector::EntityTypeAWS::FraudDetector::EventTypeAWS::FraudDetector::LabelAWS::FraudDetector::ListAWS::FraudDetector::OutcomeAWS::FraudDetector::VariableAWS::GameLift::AliasAWS::GameLift::BuildAWS::GameLift::ContainerFleetAWS::GameLift::ContainerGroupDefinitionAWS::GameLift::FleetAWS::GameLift::GameServerGroupAWS::GameLift::GameSessionQueueAWS::GameLift::LocationAWS::GameLift::MatchmakingConfigurationAWS::GameLift::MatchmakingRuleSetAWS::GameLift::ScriptAWS::GlobalAccelerator::AcceleratorAWS::GlobalAccelerator::CrossAccountAttachmentAWS::GlobalAccelerator::EndpointGroupAWS::GlobalAccelerator::ListenerAWS::Glue::BlueprintAWS::Glue::CatalogAWS::Glue::DataCatalogEncryptionSettingsAWS::Glue::IdentityCenterConfigurationAWS::Glue::IntegrationAWS::Glue::IntegrationResourcePropertyAWS::Glue::RegistryAWS::Glue::SchemaAWS::Glue::SchemaVersionAWS::Glue::SchemaVersionMetadataAWS::Glue::UsageProfileAWS::Glue::UserDefinedFunctionAWS::Grafana::WorkspaceAWS::GreengrassV2::ComponentVersionAWS::GreengrassV2::DeploymentAWS::GroundStation::ConfigAWS::GroundStation::DataflowEndpointGroupAWS::GroundStation::DataflowEndpointGroupV2AWS::GroundStation::MissionProfileAWS::GuardDuty::DetectorAWS::GuardDuty::FilterAWS::GuardDuty::IPSetAWS::GuardDuty::MalwareProtectionPlanAWS::GuardDuty::MasterAWS::GuardDuty::MemberAWS::GuardDuty::PublishingDestinationAWS::GuardDuty::ThreatEntitySetAWS::GuardDuty::ThreatIntelSetAWS::GuardDuty::TrustedEntitySetAWS::HealthImaging::DatastoreAWS::HealthLake::DataTransformationProfileAWS::HealthLake::FHIRDatastoreAWS::IAM::GroupPolicyAWS::IAM::OIDCProviderAWS::IAM::RolePolicyAWS::IAM::SAMLProviderAWS::IAM::ServerCertificateAWS::IAM::ServiceLinkedRoleAWS::IAM::UserPolicyAWS::IAM::VirtualMFADeviceAWS::IVS::ChannelAWS::IVS::EncoderConfigurationAWS::IVS::IngestConfigurationAWS::IVS::PlaybackKeyPairAWS::IVS::PlaybackRestrictionPolicyAWS::IVS::PublicKeyAWS::IVS::RecordingConfigurationAWS::IVS::StageAWS::IVS::StorageConfigurationAWS::IVS::StreamKeyAWS::IVSChat::LoggingConfigurationAWS::IVSChat::RoomAWS::IdentityStore::GroupAWS::IdentityStore::GroupMembershipAWS::ImageBuilder::ComponentAWS::ImageBuilder::ContainerRecipeAWS::ImageBuilder::DistributionConfigurationAWS::ImageBuilder::ImageAWS::ImageBuilder::ImagePipelineAWS::ImageBuilder::ImageRecipeAWS::ImageBuilder::InfrastructureConfigurationAWS::ImageBuilder::LifecyclePolicyAWS::ImageBuilder::WorkflowAWS::Inspector::AssessmentTargetAWS::Inspector::AssessmentTemplateAWS::Inspector::ResourceGroupAWS::InspectorV2::CisScanConfigurationAWS::InspectorV2::CodeSecurityIntegrationAWS::InspectorV2::CodeSecurityScanConfigurationAWS::InspectorV2::FilterAWS::Interconnect::ConnectionAWS::InternetMonitor::MonitorAWS::Invoicing::InvoiceUnitAWS::IoT::AccountAuditConfigurationAWS::IoT::AuthorizerAWS::IoT::BillingGroupAWS::IoT::CACertificateAWS::IoT::CertificateAWS::IoT::CertificateProviderAWS::IoT::CommandAWS::IoT::CustomMetricAWS::IoT::DimensionAWS::IoT::DomainConfigurationAWS::IoT::EncryptionConfigurationAWS::IoT::FleetMetricAWS::IoT::JobTemplateAWS::IoT::LoggingAWS::IoT::MitigationActionAWS::IoT::PolicyAWS::IoT::ProvisioningTemplateAWS::IoT::ResourceSpecificLoggingAWS::IoT::RoleAliasAWS::IoT::ScheduledAuditAWS::IoT::SecurityProfileAWS::IoT::SoftwarePackageAWS::IoT::SoftwarePackageVersionAWS::IoT::ThingAWS::IoT::ThingGroupAWS::IoT::ThingTypeAWS::IoT::TopicRuleAWS::IoT::TopicRuleDestinationAWS::IoTAnalytics::ChannelAWS::IoTAnalytics::DatasetAWS::IoTAnalytics::DatastoreAWS::IoTAnalytics::PipelineAWS::IoTCoreDeviceAdvisor::SuiteDefinitionAWS::IoTEvents::AlarmModelAWS::IoTEvents::DetectorModelAWS::IoTEvents::InputAWS::IoTFleetWise::CampaignAWS::IoTFleetWise::DecoderManifestAWS::IoTFleetWise::FleetAWS::IoTFleetWise::ModelManifestAWS::IoTFleetWise::SignalCatalogAWS::IoTFleetWise::StateTemplateAWS::IoTFleetWise::VehicleAWS::IoTSiteWise::AccessPolicyAWS::IoTSiteWise::AssetAWS::IoTSiteWise::AssetModelAWS::IoTSiteWise::ComputationModelAWS::IoTSiteWise::DashboardAWS::IoTSiteWise::DatasetAWS::IoTSiteWise::GatewayAWS::IoTSiteWise::PortalAWS::IoTSiteWise::ProjectAWS::IoTTwinMaker::ComponentTypeAWS::IoTTwinMaker::EntityAWS::IoTTwinMaker::SceneAWS::IoTTwinMaker::SyncJobAWS::IoTTwinMaker::WorkspaceAWS::IoTWireless::DestinationAWS::IoTWireless::DeviceProfileAWS::IoTWireless::FuotaTaskAWS::IoTWireless::MulticastGroupAWS::IoTWireless::NetworkAnalyzerConfigurationAWS::IoTWireless::PartnerAccountAWS::IoTWireless::ServiceProfileAWS::IoTWireless::TaskDefinitionAWS::IoTWireless::WirelessDeviceAWS::IoTWireless::WirelessDeviceImportTaskAWS::IoTWireless::WirelessGatewayAWS::KMS::ReplicaKeyAWS::KafkaConnect::ConnectorAWS::KafkaConnect::CustomPluginAWS::KafkaConnect::WorkerConfigurationAWS::Kendra::DataSourceAWS::Kendra::FaqAWS::Kendra::IndexAWS::KendraRanking::ExecutionPlanAWS::Kinesis::ResourcePolicyAWS::KinesisAnalyticsV2::ApplicationAWS::KinesisVideo::SignalingChannelAWS::KinesisVideo::StreamAWS::LakeFormation::DataCellsFilterAWS::LakeFormation::PrincipalPermissionsAWS::LakeFormation::TagAWS::LakeFormation::TagAssociationAWS::Lambda::AliasAWS::Lambda::CapacityProviderAWS::Lambda::CodeSigningConfigAWS::Lambda::LayerVersionPermissionAWS::Lambda::NetworkConnectorAWS::Lambda::VersionAWS::LaunchWizard::DeploymentAWS::Lex::BotAWS::Lex::BotAliasAWS::Lex::BotVersionAWS::Lex::ResourcePolicyAWS::LicenseManager::GrantAWS::LicenseManager::LicenseAWS::Lightsail::AlarmAWS::Lightsail::BucketAWS::Lightsail::CertificateAWS::Lightsail::ContainerAWS::Lightsail::DatabaseAWS::Lightsail::DatabaseSnapshotAWS::Lightsail::DiskAWS::Lightsail::DiskSnapshotAWS::Lightsail::DistributionAWS::Lightsail::DomainAWS::Lightsail::InstanceAWS::Lightsail::InstanceSnapshotAWS::Lightsail::LoadBalancerAWS::Lightsail::LoadBalancerTlsCertificateAWS::Lightsail::StaticIpAWS::Location::APIKeyAWS::Location::GeofenceCollectionAWS::Location::MapAWS::Location::PlaceIndexAWS::Location::RouteCalculatorAWS::Location::TrackerAWS::Location::TrackerConsumerAWS::Logs::AccountPolicyAWS::Logs::DeliveryAWS::Logs::DeliveryDestinationAWS::Logs::DeliverySourceAWS::Logs::DestinationAWS::Logs::IntegrationAWS::Logs::LogAnomalyDetectorAWS::Logs::LogStreamAWS::Logs::LogStreamAWS::Logs::MetricFilterAWS::Logs::QueryDefinitionAWS::Logs::ResourcePolicyAWS::Logs::ScheduledQueryAWS::Logs::SubscriptionFilterAWS::Logs::TransformerAWS::LookoutEquipment::InferenceSchedulerAWS::LookoutVision::ProjectAWS::M2::ApplicationAWS::M2::DeploymentAWS::M2::EnvironmentAWS::MPA::ApprovalTeamAWS::MPA::IdentitySourceAWS::MSK::BatchScramSecretAWS::MSK::ChannelAWS::MSK::ClusterAWS::MSK::ClusterPolicyAWS::MSK::ConfigurationAWS::MSK::ReplicatorAWS::MSK::ServerlessClusterAWS::MSK::TopicAWS::MSK::VpcConnectionAWS::MWAA::EnvironmentAWS::MWAAServerless::WorkflowAWS::Macie::AllowListAWS::Macie::CustomDataIdentifierAWS::Macie::FindingsFilterAWS::Macie::SessionAWS::ManagedBlockchain::AccessorAWS::MediaConnect::BridgeAWS::MediaConnect::BridgeOutputAWS::MediaConnect::BridgeSourceAWS::MediaConnect::FlowAWS::MediaConnect::FlowEntitlementAWS::MediaConnect::FlowOutputAWS::MediaConnect::FlowSourceAWS::MediaConnect::FlowVpcInterfaceAWS::MediaConnect::GatewayAWS::MediaConnect::RouterInputAWS::MediaConnect::RouterNetworkInterfaceAWS::MediaConnect::RouterOutputAWS::MediaLive::ChannelPlacementGroupAWS::MediaLive::CloudWatchAlarmTemplateAWS::MediaLive::CloudWatchAlarmTemplateGroupAWS::MediaLive::ClusterAWS::MediaLive::EventBridgeRuleTemplateAWS::MediaLive::EventBridgeRuleTemplateGroupAWS::MediaLive::MultiplexAWS::MediaLive::MultiplexprogramAWS::MediaLive::NetworkAWS::MediaLive::NodeAWS::MediaLive::SdiSourceAWS::MediaLive::SignalMapAWS::MediaPackage::AssetAWS::MediaPackage::ChannelAWS::MediaPackage::OriginEndpointAWS::MediaPackage::PackagingConfigurationAWS::MediaPackage::PackagingGroupAWS::MediaPackageV2::ChannelAWS::MediaPackageV2::ChannelGroupAWS::MediaPackageV2::ChannelPolicyAWS::MediaPackageV2::OriginEndpointAWS::MediaPackageV2::OriginEndpointPolicyAWS::MediaTailor::ChannelAWS::MediaTailor::ChannelPolicyAWS::MediaTailor::LiveSourceAWS::MediaTailor::PlaybackConfigurationAWS::MediaTailor::SourceLocationAWS::MediaTailor::VodSourceAWS::MemoryDB::ACLAWS::MemoryDB::ClusterAWS::MemoryDB::MultiRegionClusterAWS::MemoryDB::ParameterGroupAWS::MemoryDB::SubnetGroupAWS::MemoryDB::UserAWS::Neptune::DBClusterParameterGroupAWS::Neptune::DBParameterGroupAWS::Neptune::EventSubscriptionAWS::Neptune::GlobalClusterAWS::NeptuneGraph::GraphAWS::NeptuneGraph::GraphSnapshotAWS::NeptuneGraph::PrivateGraphEndpointAWS::NetworkFirewall::FirewallAWS::NetworkFirewall::FirewallPolicyAWS::NetworkFirewall::LoggingConfigurationAWS::NetworkFirewall::RuleGroupAWS::NetworkFirewall::TLSInspectionConfigurationAWS::NetworkFirewall::VpcEndpointAssociationAWS::NetworkFlowMonitor::MonitorAWS::NetworkManager::ConnectAttachmentAWS::NetworkManager::ConnectPeerAWS::NetworkManager::CoreNetworkAWS::NetworkManager::CoreNetworkPrefixListAssociationAWS::NetworkManager::CustomerGatewayAssociationAWS::NetworkManager::DeviceAWS::NetworkManager::DirectConnectGatewayAttachmentAWS::NetworkManager::GlobalNetworkAWS::NetworkManager::LinkAWS::NetworkManager::LinkAssociationAWS::NetworkManager::SiteAWS::NetworkManager::SiteToSiteVpnAttachmentAWS::NetworkManager::TransitGatewayPeeringAWS::NetworkManager::TransitGatewayRegistrationAWS::NetworkManager::TransitGatewayRouteTableAttachmentAWS::NetworkManager::VpcAttachmentAWS::Notifications::ChannelAssociationAWS::Notifications::EventRuleAWS::Notifications::ManagedNotificationAccountContactAssociationAWS::Notifications::ManagedNotificationAdditionalChannelAssociationAWS::Notifications::NotificationConfigurationAWS::Notifications::NotificationHubAWS::Notifications::OrganizationalUnitAssociationAWS::NotificationsContacts::EmailContactAWS::NovaAct::WorkflowDefinitionAWS::ODB::CloudAutonomousVmClusterAWS::ODB::CloudExadataInfrastructureAWS::ODB::CloudVmClusterAWS::ODB::OdbNetworkAWS::ODB::OdbPeeringConnectionAWS::OSIS::PipelineAWS::Oam::LinkAWS::Oam::SinkAWS::ObservabilityAdmin::OrganizationCentralizationRuleAWS::ObservabilityAdmin::OrganizationTelemetryRuleAWS::ObservabilityAdmin::S3TableIntegrationAWS::ObservabilityAdmin::TelemetryEnrichmentAWS::ObservabilityAdmin::TelemetryPipelinesAWS::ObservabilityAdmin::TelemetryRuleAWS::Omics::AnnotationStoreAWS::Omics::ConfigurationAWS::Omics::ReferenceStoreAWS::Omics::RunGroupAWS::Omics::SequenceStoreAWS::Omics::VariantStoreAWS::Omics::WorkflowAWS::Omics::WorkflowVersionAWS::OpenSearchServerless::AccessPolicyAWS::OpenSearchServerless::CollectionAWS::OpenSearchServerless::CollectionGroupAWS::OpenSearchServerless::CollectionIndexAWS::OpenSearchServerless::IndexAWS::OpenSearchServerless::LifecyclePolicyAWS::OpenSearchServerless::SecurityConfigAWS::OpenSearchServerless::SecurityPolicyAWS::OpenSearchServerless::VpcEndpointAWS::OpenSearchService::ApplicationAWS::OpenSearchService::DomainAWS::Organizations::AccountAWS::Organizations::OrganizationAWS::Organizations::OrganizationalUnitAWS::Organizations::PolicyAWS::Organizations::ResourcePolicyAWS::Outposts::SiteAWS::PCAConnectorAD::ConnectorAWS::PCAConnectorAD::DirectoryRegistrationAWS::PCAConnectorAD::ServicePrincipalNameAWS::PCAConnectorAD::TemplateAWS::PCAConnectorAD::TemplateGroupAccessControlEntryAWS::PCAConnectorSCEP::ChallengeAWS::PCAConnectorSCEP::ConnectorAWS::PCS::ClusterAWS::PCS::ComputeNodeGroupAWS::PCS::QueueAWS::Panorama::ApplicationInstanceAWS::Panorama::PackageAWS::Panorama::PackageVersionAWS::PaymentCryptography::AliasAWS::PaymentCryptography::KeyAWS::Personalize::DatasetAWS::Personalize::DatasetGroupAWS::Personalize::SchemaAWS::Personalize::SolutionAWS::Pinpoint::InAppTemplateAWS::Pipes::PipeAWS::Proton::EnvironmentAccountConnectionAWS::Proton::EnvironmentTemplateAWS::Proton::ServiceTemplateAWS::QBusiness::ApplicationAWS::QBusiness::DataAccessorAWS::QBusiness::DataSourceAWS::QBusiness::IndexAWS::QBusiness::PermissionAWS::QBusiness::PluginAWS::QBusiness::RetrieverAWS::QBusiness::WebExperienceAWS::QLDB::StreamAWS::QuickSight::ActionConnectorAWS::QuickSight::AgentAWS::QuickSight::AnalysisAWS::QuickSight::CustomPermissionsAWS::QuickSight::DashboardAWS::QuickSight::DataSetAWS::QuickSight::DataSourceAWS::QuickSight::FlowAWS::QuickSight::FolderAWS::QuickSight::KnowledgeBaseAWS::QuickSight::OAuthClientApplicationAWS::QuickSight::RefreshScheduleAWS::QuickSight::SpaceAWS::QuickSight::TemplateAWS::QuickSight::ThemeAWS::QuickSight::TopicAWS::QuickSight::VPCConnectionAWS::RAM::PermissionAWS::RAM::ResourceShareAWS::RDS::CustomDBEngineVersionAWS::RDS::DBClusterParameterGroupAWS::RDS::DBParameterGroupAWS::RDS::DBShardGroupAWS::RDS::EventSubscriptionAWS::RDS::GlobalClusterAWS::RDS::IntegrationAWS::RDS::OptionGroupAWS::RTBFabric::InboundExternalLinkAWS::RTBFabric::LinkAWS::RTBFabric::LinkRoutingRuleAWS::RTBFabric::OutboundExternalLinkAWS::RTBFabric::RequesterGatewayAWS::RTBFabric::ResponderGatewayAWS::RUM::AppMonitorAWS::Rbin::RuleAWS::Redshift::ClusterAWS::Redshift::ClusterParameterGroupAWS::Redshift::ClusterSubnetGroupAWS::Redshift::EndpointAccessAWS::Redshift::EndpointAuthorizationAWS::Redshift::EventSubscriptionAWS::Redshift::IntegrationAWS::Redshift::ScheduledActionAWS::RedshiftServerless::NamespaceAWS::RedshiftServerless::SnapshotAWS::RedshiftServerless::WorkgroupAWS::RefactorSpaces::ApplicationAWS::RefactorSpaces::EnvironmentAWS::RefactorSpaces::RouteAWS::RefactorSpaces::ServiceAWS::Rekognition::CollectionAWS::Rekognition::ProjectAWS::Rekognition::StreamProcessorAWS::ResilienceHub::AppAWS::ResilienceHub::ResiliencyPolicyAWS::ResilienceHubV2::PolicyAWS::ResilienceHubV2::ServiceAWS::ResilienceHubV2::ServiceFunctionAWS::ResilienceHubV2::SystemAWS::ResilienceHubV2::UserJourneyAWS::ResourceExplorer2::DefaultViewAssociationAWS::ResourceExplorer2::IndexAWS::ResourceExplorer2::ViewAWS::ResourceGroups::GroupAWS::ResourceGroups::TagSyncTaskAWS::RoboMaker::FleetAWS::RoboMaker::RobotAWS::RoboMaker::RobotApplicationAWS::RoboMaker::RobotApplicationVersionAWS::RoboMaker::SimulationApplicationAWS::RoboMaker::SimulationApplicationVersionAWS::RolesAnywhere::CRLAWS::RolesAnywhere::ProfileAWS::RolesAnywhere::TrustAnchorAWS::Route53::CidrCollectionAWS::Route53::DNSSECAWS::Route53::HealthCheckAWS::Route53::KeySigningKeyAWS::Route53GlobalResolver::AccessSourceAWS::Route53GlobalResolver::AccessTokenAWS::Route53GlobalResolver::DnsViewAWS::Route53GlobalResolver::FirewallDomainListAWS::Route53GlobalResolver::FirewallRuleAWS::Route53GlobalResolver::GlobalResolverAWS::Route53GlobalResolver::HostedZoneAssociationAWS::Route53Profiles::ProfileAWS::Route53Profiles::ProfileAssociationAWS::Route53Profiles::ProfileResourceAssociationAWS::Route53RecoveryControl::ClusterAWS::Route53RecoveryControl::ControlPanelAWS::Route53RecoveryControl::RoutingControlAWS::Route53RecoveryControl::SafetyRuleAWS::Route53RecoveryReadiness::CellAWS::Route53RecoveryReadiness::ReadinessCheckAWS::Route53RecoveryReadiness::RecoveryGroupAWS::Route53RecoveryReadiness::ResourceSetAWS::Route53Resolver::FirewallDomainListAWS::Route53Resolver::FirewallRuleGroupAWS::Route53Resolver::FirewallRuleGroupAssociationAWS::Route53Resolver::OutpostResolverAWS::Route53Resolver::ResolverConfigAWS::Route53Resolver::ResolverDNSSECConfigAWS::Route53Resolver::ResolverEndpointAWS::Route53Resolver::ResolverQueryLoggingConfigAWS::Route53Resolver::ResolverQueryLoggingConfigAssociationAWS::Route53Resolver::ResolverRuleAWS::Route53Resolver::ResolverRuleAssociationAWS::S3::AccessGrantAWS::S3::AccessGrantsInstanceAWS::S3::AccessGrantsLocationAWS::S3::AccessPointAWS::S3::MultiRegionAccessPointAWS::S3::MultiRegionAccessPointPolicyAWS::S3::StorageLensAWS::S3::StorageLensGroupAWS::S3Express::AccessPointAWS::S3Express::BucketPolicyAWS::S3Files::AccessPointAWS::S3Files::FileSystemAWS::S3Files::FileSystemPolicyAWS::S3Files::MountTargetAWS::S3ObjectLambda::AccessPointAWS::S3ObjectLambda::AccessPointPolicyAWS::S3Outposts::AccessPointAWS::S3Outposts::BucketAWS::S3Outposts::BucketPolicyAWS::S3Outposts::EndpointAWS::S3Tables::TableBucketPolicyAWS::S3Tables::TablePolicyAWS::S3Vectors::IndexAWS::S3Vectors::VectorBucketPolicyAWS::SCN::DatasetAWS::SCN::NamespaceAWS::SES::ConfigurationSetAWS::SES::ConfigurationSetEventDestinationAWS::SES::ContactListAWS::SES::CustomVerificationEmailTemplateAWS::SES::DedicatedIpPoolAWS::SES::EmailIdentityAWS::SES::MailManagerAddonInstanceAWS::SES::MailManagerAddonSubscriptionAWS::SES::MailManagerAddressListAWS::SES::MailManagerArchiveAWS::SES::MailManagerIngressPointAWS::SES::MailManagerRelayAWS::SES::MailManagerRuleSetAWS::SES::MailManagerTrafficPolicyAWS::SES::MultiRegionEndpointAWS::SES::TemplateAWS::SES::TenantAWS::SES::VdmAttributesAWS::SMSVOICE::ConfigurationSetAWS::SMSVOICE::OptOutListAWS::SMSVOICE::PhoneNumberAWS::SMSVOICE::PoolAWS::SMSVOICE::ProtectConfigurationAWS::SMSVOICE::RegistrationAWS::SMSVOICE::ResourcePolicyAWS::SMSVOICE::SenderIdAWS::SNS::TopicInlinePolicyAWS::SQS::QueueInlinePolicyAWS::SSM::AssociationAWS::SSM::DocumentAWS::SSM::MaintenanceWindowAWS::SSM::MaintenanceWindowTargetAWS::SSM::MaintenanceWindowTaskAWS::SSM::OpsItemAWS::SSM::PatchBaselineAWS::SSM::ResourceDataSyncAWS::SSM::ResourcePolicyAWS::SSMContacts::ContactAWS::SSMContacts::ContactChannelAWS::SSMContacts::PlanAWS::SSMContacts::RotationAWS::SSMGuiConnect::PreferencesAWS::SSMIncidents::ReplicationSetAWS::SSMIncidents::ResponsePlanAWS::SSMQuickSetup::ConfigurationManagerAWS::SSMQuickSetup::LifecycleAutomationAWS::SSO::ApplicationAWS::SSO::ApplicationAssignmentAWS::SSO::AssignmentAWS::SSO::InstanceAWS::SSO::InstanceAccessControlAttributeConfigurationAWS::SSO::PermissionSetAWS::SageMaker::ActionAWS::SageMaker::AlgorithmAWS::SageMaker::AppAWS::SageMaker::AppImageConfigAWS::SageMaker::ClusterAWS::SageMaker::ContextAWS::SageMaker::DataQualityJobDefinitionAWS::SageMaker::DeviceAWS::SageMaker::DeviceFleetAWS::SageMaker::DomainAWS::SageMaker::EndpointAWS::SageMaker::ExperimentAWS::SageMaker::ExperimentTrialComponentAWS::SageMaker::FeatureGroupAWS::SageMaker::HubAWS::SageMaker::ImageAWS::SageMaker::ImageVersionAWS::SageMaker::InferenceComponentAWS::SageMaker::InferenceExperimentAWS::SageMaker::MlflowAppAWS::SageMaker::MlflowTrackingServerAWS::SageMaker::ModelAWS::SageMaker::ModelBiasJobDefinitionAWS::SageMaker::ModelCardAWS::SageMaker::ModelExplainabilityJobDefinitionAWS::SageMaker::ModelPackageAWS::SageMaker::ModelPackageGroupAWS::SageMaker::ModelQualityJobDefinitionAWS::SageMaker::MonitoringScheduleAWS::SageMaker::PartnerAppAWS::SageMaker::PipelineAWS::SageMaker::ProcessingJobAWS::SageMaker::ProjectAWS::SageMaker::SpaceAWS::SageMaker::StudioLifecycleConfigAWS::SageMaker::TrialComponentAWS::SageMaker::UserProfileAWS::Scheduler::ScheduleGroupAWS::SecretsManager::ResourcePolicyAWS::SecretsManager::RotationScheduleAWS::SecretsManager::SecretTargetAttachmentAWS::SecurityAgent::AgentSpaceAWS::SecurityAgent::ApplicationAWS::SecurityAgent::PentestAWS::SecurityAgent::SecurityRequirementPackAWS::SecurityAgent::TargetDomainAWS::SecurityHub::AggregatorV2AWS::SecurityHub::AutomationRuleAWS::SecurityHub::AutomationRuleV2AWS::SecurityHub::ConfigurationPolicyAWS::SecurityHub::ConnectorAWS::SecurityHub::ConnectorV2AWS::SecurityHub::DelegatedAdminAWS::SecurityHub::FindingAggregatorAWS::SecurityHub::HubAWS::SecurityHub::HubV2AWS::SecurityHub::InsightAWS::SecurityHub::OrganizationConfigurationAWS::SecurityHub::PolicyAssociationAWS::SecurityHub::ProductSubscriptionAWS::SecurityHub::SecurityControlAWS::SecurityHub::StandardAWS::SecurityLake::AwsLogSourceAWS::SecurityLake::DataLakeAWS::SecurityLake::SubscriberAWS::SecurityLake::SubscriberNotificationAWS::ServiceCatalog::AcceptedPortfolioShareAWS::ServiceCatalog::CloudFormationProductAWS::ServiceCatalog::CloudFormationProvisionedProductAWS::ServiceCatalog::LaunchNotificationConstraintAWS::ServiceCatalog::LaunchRoleConstraintAWS::ServiceCatalog::LaunchTemplateConstraintAWS::ServiceCatalog::PortfolioAWS::ServiceCatalog::PortfolioPrincipalAssociationAWS::ServiceCatalog::PortfolioProductAssociationAWS::ServiceCatalog::PortfolioShareAWS::ServiceCatalog::ResourceUpdateConstraintAWS::ServiceCatalog::ServiceActionAWS::ServiceCatalog::ServiceActionAssociationAWS::ServiceCatalog::StackSetConstraintAWS::ServiceCatalog::TagOptionAWS::ServiceCatalog::TagOptionAssociationAWS::ServiceCatalogAppRegistry::ApplicationAWS::ServiceCatalogAppRegistry::AttributeGroupAWS::ServiceCatalogAppRegistry::AttributeGroupAssociationAWS::ServiceCatalogAppRegistry::ResourceAssociationAWS::Shield::DRTAccessAWS::Shield::ProactiveEngagementAWS::Shield::ProtectionAWS::Shield::ProtectionGroupAWS::Signer::ProfilePermissionAWS::Signer::SigningProfileAWS::SimSpaceWeaver::SimulationAWS::StepFunctions::ActivityAWS::StepFunctions::StateMachineAliasAWS::StepFunctions::StateMachineVersionAWS::StorageGateway::TapePoolAWS::SupportApp::AccountAliasAWS::SupportApp::SlackChannelConfigurationAWS::SupportApp::SlackWorkspaceConfigurationAWS::Synthetics::CanaryAWS::Synthetics::GroupAWS::SystemsManagerSAP::ApplicationAWS::Timestream::DatabaseAWS::Timestream::InfluxDBClusterAWS::Timestream::InfluxDBInstanceAWS::Timestream::ScheduledQueryAWS::Timestream::TableAWS::Transcribe::VocabularyFilterAWS::Transfer::AgreementAWS::Transfer::CertificateAWS::Transfer::ConnectorAWS::Transfer::ProfileAWS::Transfer::ServerAWS::Transfer::UserAWS::Transfer::WebAppAWS::Transfer::WorkflowAWS::UXC::AccountCustomizationAWS::VerifiedPermissions::IdentitySourceAWS::VerifiedPermissions::PolicyAWS::VerifiedPermissions::PolicyStoreAWS::VerifiedPermissions::PolicyStoreAliasAWS::VerifiedPermissions::PolicyTemplateAWS::VoiceID::DomainAWS::VpcLattice::AccessLogSubscriptionAWS::VpcLattice::AuthPolicyAWS::VpcLattice::DomainVerificationAWS::VpcLattice::ListenerAWS::VpcLattice::ResourceConfigurationAWS::VpcLattice::ResourceGatewayAWS::VpcLattice::ResourcePolicyAWS::VpcLattice::RuleAWS::VpcLattice::ServiceAWS::VpcLattice::ServiceNetworkAWS::VpcLattice::ServiceNetworkResourceAssociationAWS::VpcLattice::ServiceNetworkServiceAssociationAWS::VpcLattice::ServiceNetworkVpcAssociationAWS::VpcLattice::TargetGroupAWS::WAFv2::IPSetAWS::WAFv2::LoggingConfigurationAWS::WAFv2::RegexPatternSetAWS::WAFv2::RuleGroupAWS::WAFv2::WebACLAssociationAWS::WellArchitected::LensAWS::WellArchitected::ProfileAWS::WellArchitected::ReviewTemplateAWS::Wisdom::AIAgentAWS::Wisdom::AIAgentVersionAWS::Wisdom::AIGuardrailAWS::Wisdom::AIGuardrailVersionAWS::Wisdom::AIPromptAWS::Wisdom::AIPromptVersionAWS::Wisdom::AssistantAWS::Wisdom::AssistantAssociationAWS::Wisdom::KnowledgeBaseAWS::Wisdom::MessageTemplateAWS::Wisdom::MessageTemplateVersionAWS::Wisdom::QuickResponseAWS::WorkSpaces::ConnectionAliasAWS::WorkSpaces::WorkspaceAWS::WorkSpaces::WorkspaceIpGroupAWS::WorkSpaces::WorkspacesPoolAWS::WorkSpacesThinClient::EnvironmentAWS::WorkSpacesWeb::BrowserSettingsAWS::WorkSpacesWeb::DataProtectionSettingsAWS::WorkSpacesWeb::IdentityProviderAWS::WorkSpacesWeb::IpAccessSettingsAWS::WorkSpacesWeb::NetworkSettingsAWS::WorkSpacesWeb::PortalAWS::WorkSpacesWeb::SessionLoggerAWS::WorkSpacesWeb::TrustStoreAWS::WorkSpacesWeb::UserAccessLoggingSettingsAWS::WorkSpacesWeb::UserSettingsAWS::WorkspacesInstances::VolumeAWS::WorkspacesInstances::VolumeAssociationAWS::WorkspacesInstances::WorkspaceInstanceAWS::XRay::GroupAWS::XRay::ResourcePolicyAWS::XRay::SamplingRuleAWS::XRay::TransactionSearchConfig
Tier 3 — Not provisionable by cdkd today
ProvisioningType is NON_PROVISIONABLE (or DescribeType failed). Cloud Control API cannot create / update / delete these types; cdkd cannot support them at all without a dedicated SDK Provider. Most entries here are inherently read-only or registry-only types (AWS::*::*Type, data-only resources, etc.) and are NOT realistic targets for a provider.
AWS::AmazonMQ::ConfigurationAssociationAWS::ApiGatewayV2::ApiGatewayManagedOverridesAWS::AppMesh::GatewayRouteAWS::AppMesh::MeshAWS::AppMesh::RouteAWS::AppMesh::VirtualGatewayAWS::AppMesh::VirtualNodeAWS::AppMesh::VirtualRouterAWS::AppMesh::VirtualServiceAWS::AppStream::FleetAWS::AppSync::ApiCacheAWS::Artifact::ReportAWS::Athena::SessionAWS::AutoScalingPlans::ScalingPlanAWS::BCMDataExports::TableAWS::BackupSearch::SearchJobAWS::Bedrock::DefaultPromptRouterAWS::Bedrock::ModelInvocationJobAWS::BedrockAgentCore::TokenVaultAWS::Cloud9::EnvironmentEC2AWS::CloudFormation::CustomResourceAWS::CloudFormation::MacroAWS::CloudFormation::ResourceScanAWS::CloudFormation::WaitConditionAWS::CloudFront::StreamingDistributionAWS::CodeArtifact::PackageAWS::CodeBuild::ReportGroupAWS::CodeBuild::SandboxAWS::CodeBuild::SourceCredentialAWS::CodeStar::GitHubRepositoryAWS::CognitoSync::DatasetAWS::Config::ConfigurationRecorderAWS::Config::DeliveryChannelAWS::Config::OrganizationConfigRuleAWS::ControlCatalog::ObjectiveAWS::DAX::ClusterAWS::DAX::ParameterGroupAWS::DAX::SubnetGroupAWS::DMS::EventSubscriptionAWS::DMS::ReplicationInstanceAWS::DMS::ReplicationSubnetGroupAWS::DMS::ReplicationTaskAWS::DirectoryService::MicrosoftADAWS::DocDB::DBClusterParameterGroupAWS::DynamoDB::ExportAWS::EC2::ClientVpnAuthorizationRuleAWS::EC2::ClientVpnEndpointAWS::EC2::ClientVpnRouteAWS::EC2::ClientVpnTargetNetworkAssociationAWS::EC2::NetworkInterfacePermissionAWS::EC2::VPNGatewayRoutePropagationAWS::EMR::NotebookExecutionAWS::ElastiCache::ReservedCacheNodeAWS::ElastiCache::SecurityGroupAWS::ElastiCache::SecurityGroupIngressAWS::ElasticLoadBalancingV2::ListenerCertificateAWS::Elasticsearch::DomainAWS::Events::ReplayAWS::FIS::SafetyLeverAWS::FSx::SnapshotAWS::FSx::StorageVirtualMachineAWS::FSx::VolumeAWS::Glue::ClassifierAWS::Glue::CustomEntityTypeAWS::Glue::DataQualityRulesetAWS::Glue::DevEndpointAWS::Glue::MLTransformAWS::Glue::PartitionAWS::Glue::TableOptimizerAWS::Greengrass::ConnectorDefinitionAWS::Greengrass::ConnectorDefinitionVersionAWS::Greengrass::CoreDefinitionAWS::Greengrass::CoreDefinitionVersionAWS::Greengrass::DeviceDefinitionAWS::Greengrass::DeviceDefinitionVersionAWS::Greengrass::FunctionDefinitionAWS::Greengrass::FunctionDefinitionVersionAWS::Greengrass::GroupAWS::Greengrass::GroupVersionAWS::Greengrass::LoggerDefinitionAWS::Greengrass::LoggerDefinitionVersionAWS::Greengrass::ResourceDefinitionAWS::Greengrass::ResourceDefinitionVersionAWS::Greengrass::SubscriptionDefinitionAWS::Greengrass::SubscriptionDefinitionVersionAWS::GreengrassV2::ComponentAWS::GreengrassV2::CoreDeviceAWS::IdentityStore::AllGroupMembershipsAWS::ImageBuilder::AllImageBuildVersionsAWS::ImageBuilder::AllWorkflowBuildVersionsAWS::ImageBuilder::WorkflowExecutionAWS::ImageBuilder::WorkflowStepExecutionAWS::IoT::PolicyPrincipalAttachmentAWS::IoT::ThingPrincipalAttachmentAWS::IoTThingsGraph::FlowTemplateAWS::KinesisAnalytics::ApplicationAWS::KinesisAnalytics::ApplicationOutputAWS::KinesisAnalytics::ApplicationReferenceDataSourceAWS::KinesisAnalyticsV2::ApplicationCloudWatchLoggingOptionAWS::KinesisAnalyticsV2::ApplicationOutputAWS::KinesisAnalyticsV2::ApplicationReferenceDataSourceAWS::LakeFormation::DataLakeSettingsAWS::LakeFormation::PermissionsAWS::LakeFormation::ResourceAWS::ManagedBlockchain::MemberAWS::ManagedBlockchain::NodeAWS::MediaConnect::OfferingAWS::MediaConnect::ReservationAWS::MediaConvert::JobTemplateAWS::MediaConvert::PresetAWS::MediaConvert::QueueAWS::MediaLive::ChannelAWS::MediaLive::InputAWS::MediaLive::InputSecurityGroupAWS::MediaLive::OfferingAWS::MediaPackage::HarvestJobAWS::MediaStore::ContainerAWS::MemoryDB::MultiRegionParameterGroupAWS::MemoryDB::ReservedNodeAWS::OSIS::PipelineBlueprintAWS::Omics::ReferenceAWS::OpsWorks::AppAWS::OpsWorks::ElasticLoadBalancerAttachmentAWS::OpsWorks::InstanceAWS::OpsWorks::LayerAWS::OpsWorks::StackAWS::OpsWorks::UserProfileAWS::OpsWorks::VolumeAWS::Personalize::DataDeletionJobAWS::Personalize::RecipeAWS::Pinpoint::ADMChannelAWS::Pinpoint::APNSChannelAWS::Pinpoint::APNSSandboxChannelAWS::Pinpoint::APNSVoipChannelAWS::Pinpoint::APNSVoipSandboxChannelAWS::Pinpoint::AppAWS::Pinpoint::ApplicationSettingsAWS::Pinpoint::BaiduChannelAWS::Pinpoint::CampaignAWS::Pinpoint::EmailChannelAWS::Pinpoint::EmailTemplateAWS::Pinpoint::EventStreamAWS::Pinpoint::GCMChannelAWS::Pinpoint::PushTemplateAWS::Pinpoint::SMSChannelAWS::Pinpoint::SegmentAWS::Pinpoint::SmsTemplateAWS::Pinpoint::VoiceChannelAWS::PinpointEmail::ConfigurationSetAWS::PinpointEmail::ConfigurationSetEventDestinationAWS::PinpointEmail::DedicatedIpPoolAWS::PinpointEmail::IdentityAWS::QLDB::LedgerAWS::RDS::DBSecurityGroupAWS::RDS::DBSecurityGroupIngressAWS::Redshift::ClusterSecurityGroupAWS::Redshift::ClusterSecurityGroupIngressAWS::RedshiftServerless::RecoveryPointAWS::Route53::RecordSetGroupAWS::SDB::DomainAWS::SES::ReceiptFilterAWS::SES::ReceiptRuleAWS::SES::ReceiptRuleSetAWS::SSM::SessionAWS::SSO::ApplicationProviderAWS::SageMaker::CodeRepositoryAWS::SageMaker::EndpointConfigAWS::SageMaker::ModelCardExportJobAWS::SageMaker::MonitoringScheduleAlertAWS::SageMaker::NotebookInstanceAWS::SageMaker::NotebookInstanceLifecycleConfigAWS::SageMaker::TransformJobAWS::SageMaker::WorkteamAWS::ServiceDiscovery::InstanceAWS::Signer::SigningJobAWS::States::ExecutionAWS::StepFunctions::MapRunAWS::ThinClient::SoftwareSetAWS::Transcribe::MedicalTranscriptionJobAWS::UserNotifications::ManagedNotificationConfigurationAWS::WAF::ByteMatchSetAWS::WAF::IPSetAWS::WAF::RuleAWS::WAF::SizeConstraintSetAWS::WAF::SqlInjectionMatchSetAWS::WAF::WebACLAWS::WAF::XssMatchSetAWS::WAFRegional::ByteMatchSetAWS::WAFRegional::GeoMatchSetAWS::WAFRegional::IPSetAWS::WAFRegional::RateBasedRuleAWS::WAFRegional::RegexPatternSetAWS::WAFRegional::RuleAWS::WAFRegional::SizeConstraintSetAWS::WAFRegional::SqlInjectionMatchSetAWS::WAFRegional::WebACLAWS::WAFRegional::WebACLAssociationAWS::WAFRegional::XssMatchSetAlexa::ASK::Skill