cdkd
SDK-provider ARN/URL attribute-coverage matrix
For every SDK-backed resource type (whose CFn schema is cached under tests/fixtures/cfn-schemas/), classifies each Arn / Url readOnly attribute by whether Fn::GetAtt can resolve it: cached (the SDK provider's create/update records it under the CFn name), construct-attribute (the resolver's constructAttribute handles the type), or a gap (neither — the resolver's shape guard HARD-FAILS the deploy, the #1179 class).
Summary
- SDK-backed types classified: 134
- Covered (every Arn/Url readOnly resolvable): 42
- No Arn/Url readOnly attribute: 92
- Latent gaps (blocks CI): 0
- Allow-listed KNOWN GAPs (real debt, tracked, does not block CI): 0
Latent gaps
None. Every Arn/Url read-only attribute on a cached SDK-backed type is cached or constructAttribute-resolvable.
Full classification (types with an Arn/Url readOnly)
| Resource type | Bucket | Arn/Url attributes (status) |
|---|---|---|
AWS::AppSync::ApiKey |
covered | Arn (cached) |
AWS::AppSync::GraphQLApi |
covered | Arn (cached), GraphQLEndpointArn (ctor), GraphQLUrl (cached), RealtimeUrl (ctor) |
AWS::BedrockAgentCore::Runtime |
covered | AgentRuntimeArn (cached) |
AWS::CloudTrail::Trail |
covered | Arn (cached), SnsTopicArn (ctor) |
AWS::CloudWatch::Alarm |
covered | Arn (cached) |
AWS::CodeBuild::Project |
covered | Arn (cached) |
AWS::CodeCommit::Repository |
covered | Arn (cached) |
AWS::Cognito::UserPool |
covered | Arn (cached) |
AWS::DLM::LifecyclePolicy |
covered | Arn (cached) |
AWS::DynamoDB::GlobalTable |
covered | Arn (cached), StreamArn (cached) |
AWS::DynamoDB::Table |
covered | Arn (cached), StreamArn (cached) |
AWS::ECR::Repository |
covered | Arn (cached) |
AWS::ECS::Cluster |
covered | Arn (cached) |
AWS::EFS::AccessPoint |
covered | Arn (cached) |
AWS::EFS::FileSystem |
covered | Arn (cached) |
AWS::Events::EventBus |
covered | Arn (cached) |
AWS::IAM::Group |
covered | Arn (cached) |
AWS::IAM::InstanceProfile |
covered | Arn (cached) |
AWS::IAM::Role |
covered | Arn (cached) |
AWS::IAM::User |
covered | Arn (cached) |
AWS::Kinesis::Stream |
covered | Arn (cached) |
AWS::KinesisFirehose::DeliveryStream |
covered | Arn (cached) |
AWS::KMS::Key |
covered | Arn (cached) |
AWS::Lambda::EventSourceMapping |
covered | EventSourceMappingArn (cached) |
AWS::Lambda::Function |
covered | Arn (cached) |
AWS::Lambda::Url |
covered | FunctionUrl (cached) |
AWS::Logs::LogGroup |
covered | Arn (cached) |
AWS::RDS::DBCluster |
covered | DBClusterArn (ctor) |
AWS::RDS::DBInstance |
covered | DBInstanceArn (ctor) |
AWS::RDS::DBProxy |
covered | DBProxyArn (cached) |
AWS::RDS::DBProxyEndpoint |
covered | DBProxyEndpointArn (cached) |
AWS::RDS::DBSubnetGroup |
covered | DBSubnetGroupArn (cached) |
AWS::S3::Bucket |
covered | Arn (cached) |
AWS::S3Express::DirectoryBucket |
covered | Arn (cached) |
AWS::Scheduler::Schedule |
covered | Arn (cached) |
AWS::ServiceDiscovery::HttpNamespace |
covered | Arn (cached) |
AWS::ServiceDiscovery::PrivateDnsNamespace |
covered | Arn (cached) |
AWS::ServiceDiscovery::PublicDnsNamespace |
covered | Arn (cached) |
AWS::ServiceDiscovery::Service |
covered | Arn (cached) |
AWS::SQS::Queue |
covered | Arn (cached) |
AWS::SSM::Parameter |
covered | Arn (cached) |
AWS::WAFv2::WebACL |
covered | Arn (cached) |