Integration Test Coverage Matrix

Run vp run integ-coverage to regenerate.

130 / 134 registered SDK Providers have at least one integ fixture exercising them. 4 are explicitly allow-listed (registered without an integ, with a rationale comment on the register line). 0 are orphans — registered with neither an integ nor an allow-list rationale.

How this is computed

For each fixture under tests/integration/<name>/, the script scans lib/*.ts and bin/*.ts for three signals against the resource types registered in src/provisioning/register-providers.ts:

literal — a 'AWS::Service::Type' string anywhere in the file (covers CfnResource usage and addPropertyOverride shapes).
l1 — a new <ns>.Cfn<TypeName>( call resolved via the aws-cdk-lib/aws-<module> import alias.
l2 — a new <ns>.<Construct>( call against the curated L2 -> L1 lookup table inside the script.

L2 detection is a hand-curated lower bound — a missed L2 wrapper produces a false-negative ("type appears uncovered"). When you add a fixture that uses an L2 the matrix does not see, extend CDK_L2_TO_L1 in scripts/build-integ-coverage-matrix.ts.

Orphan providers

None. Every registered SDK Provider has at least one integ fixture or an explicit // allow-no-integ: rationale.

Allow-listed providers (4)

Registered without an integ fixture, with an explicit // allow-no-integ: <rationale> comment on the register line in src/provisioning/register-providers.ts. The hook accepts these — but each is a deliberate verification gap and should be revisited if a real-AWS bug surfaces against the type.

Resource Type	Rationale
`AWS::Glue::Connection`	drift coverage only; Connection is a passive config object, no real-AWS lifecycle to exercise.
`AWS::Kinesis::StreamConsumer`	immutable type (every property change replaces); unit roundtrip suffices. Add integ if a Lambda EFO consumer pattern bug surfaces.
`AWS::RDS::DBProxy`	rds-aurora integ does not currently provision DBProxy + TargetGroup + Endpoint (cost + 5-15 min create/delete). Unit roundtrip covers the diff matrix; extend rds-aurora when a real-AWS Proxy lifecycle bug warrants the integ time.
`AWS::RDS::DBProxyTargetGroup`	see DBProxy above — same rds-aurora-extend reasoning.

Covered providers (130)

Resource Type	Integ Fixture(s)
`AWS::ApiGateway::Account`	`apigateway` (literal) `apigw-stage-throttling` (literal) `wafv2` (literal)
`AWS::ApiGateway::Authorizer`	`api-cognito` (l1) `apigateway` (l1) `local-start-api` (l2)
`AWS::ApiGateway::Deployment`	`api-cognito` (literal) `apigateway` (literal) `apigw-gateway-response` (literal) `apigw-stage-props` (l1,literal) `apigw-stage-throttling` (literal)
`AWS::ApiGateway::Method`	`api-cognito` (literal) `apigateway` (literal) `apigw-gateway-response` (literal) `apigw-stage-props` (l1,literal) `apigw-stage-throttling` (literal)
`AWS::ApiGateway::Resource`	`api-cognito` (literal) `apigateway` (literal) `apigw-stage-throttling` (literal)
`AWS::ApiGateway::Stage`	`api-cognito` (literal) `apigateway` (literal) `apigw-gateway-response` (literal) `apigw-stage-props` (l1,literal) `apigw-stage-throttling` (literal)
`AWS::ApiGatewayV2::Api`	`apigatewayv2-update-removal` (l1,literal) `drift-revert` (l1) `export` (l2,literal) `local-start-api` (l2) `local-start-api-container` (l2) `local-start-api-websocket` (l1,literal) `migrate-from-cfn` (l2) `serverless-api` (l1)
`AWS::ApiGatewayV2::Authorizer`	`apigatewayv2-update-removal` (l1) `serverless-api` (l1)
`AWS::ApiGatewayV2::Integration`	`apigatewayv2-update-removal` (l1) `export` (l2,literal) `local-start-api` (l1,l2) `local-start-api-container` (l2) `local-start-api-websocket` (l1,literal) `migrate-from-cfn` (l2) `serverless-api` (l1)
`AWS::ApiGatewayV2::Route`	`apigatewayv2-update-removal` (l1) `export` (l2) `local-start-api` (l1,l2) `local-start-api-container` (l2) `local-start-api-websocket` (l1,literal) `migrate-from-cfn` (l2) `serverless-api` (l1)
`AWS::ApiGatewayV2::Stage`	`apigatewayv2-update-removal` (l1) `drift-revert` (l1) `export` (l2,literal) `local-start-api` (l2) `local-start-api-container` (l2) `local-start-api-websocket` (l1,literal) `migrate-from-cfn` (l2) `serverless-api` (l1)
`AWS::AppSync::ApiKey`	`appsync` (l1)
`AWS::AppSync::DataSource`	`appsync` (l1,literal)
`AWS::AppSync::GraphQLApi`	`appsync` (l1)
`AWS::AppSync::GraphQLSchema`	`appsync` (l1)
`AWS::AppSync::Resolver`	`appsync` (l1)
`AWS::AutoScaling::AutoScalingGroup`	`drift-revert-vpc` (l1,literal) `launchtemplate-asg-inplace` (l2) `remove-protection` (l2,literal)
`AWS::BedrockAgentCore::Browser`	`agentcore-tools` (literal)
`AWS::BedrockAgentCore::CodeInterpreter`	`agentcore-tools` (literal)
`AWS::BedrockAgentCore::Evaluator`	`agentcore-tools` (literal)
`AWS::BedrockAgentCore::Runtime`	`bedrock-agentcore` (literal)
`AWS::Budgets::Budget`	`budgets` (literal)
`AWS::CertificateManager::Certificate`	`acm-certificate` (l2)
`AWS::CloudFormation::Stack`	`export-nested-stack` (literal) `import-nested-stack` (literal) `nested-stack` (literal) `nested-stack-3level` (literal) `nested-stack-deep` (literal) `nested-stack-secret` (literal)
`AWS::CloudFormation::WaitConditionHandle`	`wait-condition-handle` (literal)
`AWS::CloudFront::CloudFrontOriginAccessIdentity`	`s3-cloudfront` (l2)
`AWS::CloudFront::Distribution`	`bench-cdk-sample` (l2) `cloudfront-function-url` (l2) `local-start-cloudfront` (l2) `s3-cloudfront` (l2,literal)
`AWS::CloudFront::OriginAccessControl`	`s3-cloudfront` (l1,literal)
`AWS::CloudTrail::Trail`	`cloudtrail-trail` (l1,literal) `infra-security` (l2,literal)
`AWS::CloudWatch::Alarm`	`cloudwatch` (l2,literal) `composite-stack` (l2,literal) `deep-getatt-chains` (l1) `full-stack-demo` (l2) `log-pipeline` (l2) `replacement-immutable-name` (l2,literal) `scheduled-task` (l2)
`AWS::CloudWatch::AnomalyDetector`	`cloudwatch-anomaly-detector` (l1,literal)
`AWS::CodeBuild::Project`	`ci-cd` (l1,l2,literal) `codebuild-project` (l2,literal)
`AWS::CodeCommit::Repository`	`codecommit` (literal)
`AWS::Cognito::UserPool`	`api-cognito` (l2) `appsync` (l1) `cognito` (l1,l2,literal) `cognito-custom-attribute-add` (l2) `cognito-identity-pool` (l2) `cognito-lambda-triggers` (l2,literal) `cognito-resource-server` (l2) `cognito-userpool-user-ref` (l2) `remove-protection` (l2,literal) `serverless-api` (l2)
`AWS::DLM::LifecyclePolicy`	`dlm-lifecycle-policy` (literal)
`AWS::DocDB::DBCluster`	`docdb-neptune` (l1)
`AWS::DocDB::DBInstance`	`docdb-neptune` (l1)
`AWS::DocDB::DBSubnetGroup`	`docdb-neptune` (l1)
`AWS::DynamoDB::GlobalTable`	`dynamodb-globaltable` (l1,l2,literal) `lambda` (l2,literal) `rollback-replay-effective-props` (l1)
`AWS::DynamoDB::Table`	`appsync` (l2) `bench-sdk` (l2) `composite-stack` (l2,literal) `data-pipeline` (l2) `dynamodb-autoscaling` (l2,literal) `dynamodb-gsi-update` (l2) `dynamodb-ondemand` (l1,l2) `dynamodb-sse` (l2,literal) `dynamodb-stream-filter` (l2,literal) `dynamodb-streams` (l2) `dynamodb-tableclass-switch` (l2) `dynamodb-ttl-attr-change` (l2) `fifo-sqs-event-source` (l2,literal) `full-stack-demo` (l2) `glue-update-hardening` (l2) `lambda` (l2) `local-invoke-from-cfn-stack` (l2) `local-run-task-from-state` (l2) `multi-resource` (l2) `multi-stack-deps` (l2) `remove-protection` (l2,literal) `rename-refactor` (l2,literal) `s3-event-notification` (l2) `serverless-api` (l2) `sns-event-source` (l2) `tags-propagation` (l2)
`AWS::EC2::EIP`	`ec2-vpc` (l1) `export` (l1)
`AWS::EC2::Instance`	`deletion-ordering-complex` (l2) `ec2-instance` (l1) `ec2-instance-fanout` (l1) `propagation-races-2` (l1) `remove-protection` (l2,literal)
`AWS::EC2::InternetGateway`	`alb` (l2) `alb-advanced` (l2) `batch` (l2) `bench-cdk-sample` (l2) `cache-streaming` (l2) `cc-protection-flip-eks` (l2) `deletion-ordering-complex` (l2) `destroy-interrupt` (l2) `docdb-neptune` (l2) `drift-revert-arrays` (l2) `drift-revert-vpc` (l2) `ec2-instance` (l2) `ec2-instance-fanout` (l2) `ec2-route-targets` (l1) `ec2-vpc` (l2) `ecs-bluegreen` (l2) `ecs-fargate` (l2) `ecs-schedule-targets` (l2) `ecs-service-update-props` (l2) `efs-lambda` (l2) `efs-standalone` (l2) `elasticache-replicationgroup-getatt` (l2) `emr-cluster` (l2) `emr-instance-configs` (l2) `emr-instance-fleets` (l2) `export` (l1) `fsx-lustre` (l2) `fsx-ontap` (l2) `fsx-openzfs` (l2) `fsx-windows` (l2) `infra-security` (l2) `launchtemplate-asg-inplace` (l2) `local-start-alb-from-state` (l2,literal) `multi-stack-deps` (l2) `nlb-source-nat` (l2) `propagation-races-2` (l2) `rds-aurora` (l2) `rds-dbinstance-backfill` (l2) `rds-full-stack` (l2) `redshift-cluster-getatt` (l2) `remove-protection` (l2) `rollback-failure-injection` (l2) `rollback-replay-effective-props` (l1) `sg-circular-dependency` (l2) `vpc-lambda` (l2) `vpc-lambda-cr-race` (l2) `vpc-nat-gateway` (l2)
`AWS::EC2::NatGateway`	`alb` (l2) `alb-advanced` (l2) `batch` (l2) `bench-cdk-sample` (l2) `cache-streaming` (l2) `cc-protection-flip-eks` (l2) `deletion-ordering-complex` (l2) `destroy-interrupt` (l2) `docdb-neptune` (l2) `drift-revert-arrays` (l2) `drift-revert-vpc` (l2) `ec2-instance` (l2) `ec2-instance-fanout` (l2) `ec2-vpc` (l2) `ecs-bluegreen` (l2) `ecs-fargate` (l2) `ecs-schedule-targets` (l2) `ecs-service-update-props` (l2) `efs-lambda` (l2) `efs-standalone` (l2) `elasticache-replicationgroup-getatt` (l2) `emr-cluster` (l2) `emr-instance-configs` (l2) `emr-instance-fleets` (l2) `fsx-lustre` (l2) `fsx-ontap` (l2) `fsx-openzfs` (l2) `fsx-windows` (l2) `infra-security` (l2) `launchtemplate-asg-inplace` (l2) `local-start-alb-from-state` (l2) `multi-stack-deps` (l2) `nlb-source-nat` (l2) `propagation-races-2` (l2) `rds-aurora` (l2) `rds-dbinstance-backfill` (l2) `rds-full-stack` (l2) `redshift-cluster-getatt` (l2) `remove-protection` (l2) `rollback-failure-injection` (l2) `sg-circular-dependency` (l2) `vpc-lambda` (l2) `vpc-lambda-cr-race` (l2) `vpc-nat-gateway` (l1,l2,literal)
`AWS::EC2::NetworkAcl`	`ec2-vpc` (l2)
`AWS::EC2::NetworkAclEntry`	`ec2-vpc` (literal)
`AWS::EC2::Route`	`alb` (l2) `alb-advanced` (l2) `batch` (l2) `bench-cdk-sample` (l2) `cache-streaming` (l2) `cc-protection-flip-eks` (l2) `deletion-ordering-complex` (l2) `destroy-interrupt` (l2) `docdb-neptune` (l2) `drift-revert-arrays` (l2) `drift-revert-vpc` (l2) `ec2-instance` (l2) `ec2-instance-fanout` (l2) `ec2-route-targets` (l1,literal) `ec2-vpc` (l2) `ecs-bluegreen` (l2) `ecs-fargate` (l2) `ecs-schedule-targets` (l2) `ecs-service-update-props` (l2) `efs-lambda` (l2) `efs-standalone` (l2) `elasticache-replicationgroup-getatt` (l2) `emr-cluster` (l2) `emr-instance-configs` (l2) `emr-instance-fleets` (l2) `export` (l1,literal) `fsx-lustre` (l2) `fsx-ontap` (l2) `fsx-openzfs` (l2) `fsx-windows` (l2) `infra-security` (l2) `launchtemplate-asg-inplace` (l2) `local-start-alb-from-state` (l2,literal) `multi-stack-deps` (l2) `nlb-source-nat` (l2) `propagation-races-2` (l2) `rds-aurora` (l2) `rds-dbinstance-backfill` (l2) `rds-full-stack` (l2) `redshift-cluster-getatt` (l2) `remove-protection` (l2) `rollback-failure-injection` (l2) `rollback-replay-effective-props` (l1,literal) `sg-circular-dependency` (l2) `vpc-lambda` (l2) `vpc-lambda-cr-race` (l2) `vpc-nat-gateway` (l2)
`AWS::EC2::RouteTable`	`alb` (l2) `alb-advanced` (l2) `batch` (l2) `bench-cdk-sample` (l2) `cache-streaming` (l2) `cc-protection-flip-eks` (l2) `deletion-ordering-complex` (l2) `destroy-interrupt` (l2) `docdb-neptune` (l2) `drift-revert-arrays` (l2) `drift-revert-vpc` (l2) `ec2-instance` (l2) `ec2-instance-fanout` (l2) `ec2-route-targets` (l1) `ec2-vpc` (l2) `ecs-bluegreen` (l2) `ecs-fargate` (l2) `ecs-schedule-targets` (l2) `ecs-service-update-props` (l2) `efs-lambda` (l2) `efs-standalone` (l2) `elasticache-replicationgroup-getatt` (l2) `emr-cluster` (l2) `emr-instance-configs` (l2) `emr-instance-fleets` (l2) `export` (l1) `fsx-lustre` (l2) `fsx-ontap` (l2) `fsx-openzfs` (l2) `fsx-windows` (l2) `infra-security` (l2) `launchtemplate-asg-inplace` (l2) `local-start-alb-from-state` (l2,literal) `multi-stack-deps` (l2) `nlb-source-nat` (l2) `propagation-races-2` (l2) `rds-aurora` (l2) `rds-dbinstance-backfill` (l2) `rds-full-stack` (l2) `redshift-cluster-getatt` (l2) `remove-protection` (l2) `rollback-failure-injection` (l2) `rollback-replay-effective-props` (l1) `sg-circular-dependency` (l2) `vpc-lambda` (l2) `vpc-lambda-cr-race` (l2) `vpc-nat-gateway` (l2)
`AWS::EC2::SecurityGroup`	`alb` (l2) `alb-advanced` (l2) `batch` (l2) `bench-cdk-sample` (l2) `cache-streaming` (l2) `deletion-ordering-complex` (l2) `destroy-interrupt` (l2) `docdb-neptune` (l2) `drift-revert-arrays` (l2) `drift-revert-vpc` (l2) `ec2-instance` (l2) `ec2-instance-fanout` (l2) `ec2-vpc` (l2) `efs-standalone` (literal) `elasticache-replicationgroup-getatt` (l2) `emr-cluster` (l2,literal) `emr-instance-configs` (l2,literal) `emr-instance-fleets` (l2,literal) `export` (l1) `fsx-lustre` (literal) `local-start-alb-from-state` (l2,literal) `multi-stack-deps` (l2) `nlb-source-nat` (l2) `propagation-races-2` (l2) `rds-aurora` (l2) `rds-dbinstance-backfill` (l2) `rds-full-stack` (l2) `redshift-cluster-getatt` (l2) `remove-protection` (l2) `rollback-failure-injection` (l2) `sg-circular-dependency` (l1,l2,literal) `update-replace` (l2,literal) `vpc-lambda` (l2) `vpc-lambda-cr-race` (l2)
`AWS::EC2::SecurityGroupIngress`	`alb` (literal) `drift-revert-arrays` (l1) `export` (l1) `sg-circular-dependency` (l1,literal)
`AWS::EC2::Subnet`	`alb` (l2) `alb-advanced` (l2) `batch` (l2) `bench-cdk-sample` (l2) `cache-streaming` (l2) `cc-protection-flip-eks` (l2) `deletion-ordering-complex` (l2) `destroy-interrupt` (l2) `docdb-neptune` (l2) `drift-revert-arrays` (l2) `drift-revert-vpc` (l2) `ec2-instance` (l2) `ec2-instance-fanout` (l2) `ec2-route-targets` (l1) `ec2-vpc` (l2) `ecs-bluegreen` (l2) `ecs-fargate` (l2) `ecs-schedule-targets` (l2) `ecs-service-update-props` (l2) `efs-lambda` (l2) `efs-standalone` (l2) `elasticache-replicationgroup-getatt` (l2) `emr-cluster` (l2) `emr-instance-configs` (l2) `emr-instance-fleets` (l2) `fsx-lustre` (l2) `fsx-ontap` (l2) `fsx-openzfs` (l2) `fsx-windows` (l2) `infra-security` (l2) `launchtemplate-asg-inplace` (l2) `local-start-alb-from-state` (l2,literal) `multi-stack-deps` (l2) `nlb-source-nat` (l2) `propagation-races-2` (l2) `rds-aurora` (l2) `rds-dbinstance-backfill` (l2) `rds-full-stack` (l2) `redshift-cluster-getatt` (l2) `remove-protection` (l2) `rollback-failure-injection` (l2) `sg-circular-dependency` (l2) `vpc-lambda` (l2) `vpc-lambda-cr-race` (l2) `vpc-nat-gateway` (l2)
`AWS::EC2::SubnetNetworkAclAssociation`	`ec2-vpc` (literal)
`AWS::EC2::SubnetRouteTableAssociation`	`alb` (l2) `alb-advanced` (l2) `batch` (l2) `bench-cdk-sample` (l2) `cache-streaming` (l2) `cc-protection-flip-eks` (l2) `deletion-ordering-complex` (l2) `destroy-interrupt` (l2) `docdb-neptune` (l2) `drift-revert-arrays` (l2) `drift-revert-vpc` (l2) `ec2-instance` (l2) `ec2-instance-fanout` (l2) `ec2-vpc` (l2) `ecs-bluegreen` (l2) `ecs-fargate` (l2) `ecs-schedule-targets` (l2) `ecs-service-update-props` (l2) `efs-lambda` (l2) `efs-standalone` (l2) `elasticache-replicationgroup-getatt` (l2) `emr-cluster` (l2) `emr-instance-configs` (l2) `emr-instance-fleets` (l2) `fsx-lustre` (l2) `fsx-ontap` (l2) `fsx-openzfs` (l2) `fsx-windows` (l2) `infra-security` (l2) `launchtemplate-asg-inplace` (l2) `local-start-alb-from-state` (l2,literal) `multi-stack-deps` (l2) `nlb-source-nat` (l2) `propagation-races-2` (l2) `rds-aurora` (l2) `rds-dbinstance-backfill` (l2) `rds-full-stack` (l2) `redshift-cluster-getatt` (l2) `remove-protection` (l2) `rollback-failure-injection` (l2) `sg-circular-dependency` (l2) `vpc-lambda` (l2) `vpc-lambda-cr-race` (l2) `vpc-nat-gateway` (l2)
`AWS::EC2::VPC`	`alb` (l2) `alb-advanced` (l2) `batch` (l2) `bench-cdk-sample` (l2) `cache-streaming` (l2) `cc-protection-flip-eks` (l2) `deletion-ordering-complex` (l2) `destroy-interrupt` (l2) `docdb-neptune` (l2) `drift-revert-arrays` (l2) `drift-revert-vpc` (l2) `ec2-instance` (l2) `ec2-instance-fanout` (l2) `ec2-route-targets` (l1) `ec2-vpc` (l2) `ecs-bluegreen` (l2) `ecs-fargate` (l2) `ecs-schedule-targets` (l2) `ecs-service-update-props` (l2) `efs-lambda` (l2) `efs-standalone` (l2,literal) `elasticache-replicationgroup-getatt` (l2) `emr-cluster` (l2,literal) `emr-instance-configs` (l2,literal) `emr-instance-fleets` (l2,literal) `export` (l1) `fsx-lustre` (l2,literal) `fsx-ontap` (l2,literal) `fsx-openzfs` (l2,literal) `fsx-windows` (l2,literal) `infra-security` (l2) `launchtemplate-asg-inplace` (l2) `local-start-alb-from-state` (l2,literal) `multi-stack-deps` (l2) `nlb-source-nat` (l2) `propagation-races-2` (l2) `rds-aurora` (l2) `rds-dbinstance-backfill` (l2) `rds-full-stack` (l2) `redshift-cluster-getatt` (l2) `remove-protection` (l2) `rollback-failure-injection` (l2) `rollback-replay-effective-props` (l1) `servicediscovery` (l1) `sg-circular-dependency` (l1,l2,literal) `vpc-lambda` (l2) `vpc-lambda-cr-race` (l2) `vpc-nat-gateway` (l2)
`AWS::EC2::VPCGatewayAttachment`	`alb` (l2) `alb-advanced` (l2) `batch` (l2) `bench-cdk-sample` (l2) `cache-streaming` (l2) `cc-protection-flip-eks` (l2) `deletion-ordering-complex` (l2) `destroy-interrupt` (l2) `docdb-neptune` (l2) `drift-revert-arrays` (l2) `drift-revert-vpc` (l2) `ec2-instance` (l2) `ec2-instance-fanout` (l2) `ec2-route-targets` (l1) `ec2-vpc` (l2) `ecs-bluegreen` (l2) `ecs-fargate` (l2) `ecs-schedule-targets` (l2) `ecs-service-update-props` (l2) `efs-lambda` (l2) `efs-standalone` (l2) `elasticache-replicationgroup-getatt` (l2) `emr-cluster` (l2) `emr-instance-configs` (l2) `emr-instance-fleets` (l2) `export` (l1,literal) `fsx-lustre` (l2) `fsx-ontap` (l2) `fsx-openzfs` (l2) `fsx-windows` (l2) `infra-security` (l2) `launchtemplate-asg-inplace` (l2) `local-start-alb-from-state` (l2,literal) `multi-stack-deps` (l2) `nlb-source-nat` (l2) `propagation-races-2` (l2) `rds-aurora` (l2) `rds-dbinstance-backfill` (l2) `rds-full-stack` (l2) `redshift-cluster-getatt` (l2) `remove-protection` (l2) `rollback-failure-injection` (l2) `rollback-replay-effective-props` (l1) `sg-circular-dependency` (l2) `vpc-lambda` (l2) `vpc-lambda-cr-race` (l2) `vpc-nat-gateway` (l2)
`AWS::ECR::Repository`	`destroy-data-guard` (l2) `ecr` (l2,literal) `ecr-scanning` (l2) `local-run-task-from-state` (l2,literal) `migrate-from-cfn` (l2,literal)
`AWS::ECS::Cluster`	`drift-revert` (l1) `ecs-bluegreen` (l2) `ecs-fargate` (l2) `ecs-schedule-targets` (l2) `ecs-service-update-props` (l2) `local-ecs-service-connect` (l1) `local-start-alb` (l1,literal) `local-start-alb-from-state` (l2,literal) `local-start-service` (l1) `local-start-service-watch-fast` (l1)
`AWS::ECS::Service`	`ecs-bluegreen` (l2) `ecs-fargate` (l2,literal) `ecs-service-update-props` (l2,literal) `local-ecs-service-connect` (l1,literal) `local-start-alb` (l1,literal) `local-start-alb-from-state` (l2,literal) `local-start-service` (l1,literal) `local-start-service-watch-fast` (l1,literal)
`AWS::ECS::TaskDefinition`	`ecs-bluegreen` (l2) `ecs-fargate` (l2) `ecs-schedule-targets` (l2) `ecs-service-update-props` (l2) `local-ecs-service-connect` (l1) `local-run-task` (l2) `local-run-task-awsvpc` (l2,literal) `local-run-task-cdkd-assets` (l2) `local-run-task-from-state` (l1,l2,literal) `local-run-task-multi-container` (l2) `local-start-alb` (l1,literal) `local-start-alb-from-state` (l2,literal) `local-start-service` (l1) `local-start-service-watch-fast` (l2) `secrets-array-nested` (l1,literal)
`AWS::EFS::AccessPoint`	`ecs-fargate` (l2) `efs-lambda` (literal) `efs-standalone` (literal)
`AWS::EFS::FileSystem`	`drift-revert-vpc` (l1,literal) `ecs-fargate` (l2) `efs-immutable-replacement` (l1,literal) `efs-lambda` (l2,literal) `efs-standalone` (l2,literal)
`AWS::EFS::MountTarget`	`drift-revert-vpc` (l1,literal) `ecs-fargate` (l2) `efs-lambda` (l2,literal) `efs-standalone` (l2,literal)
`AWS::EMR::Cluster`	`emr-cluster` (literal) `emr-instance-configs` (literal) `emr-instance-fleets` (literal)
`AWS::EMR::InstanceFleetConfig`	`emr-instance-fleets` (literal)
`AWS::EMR::InstanceGroupConfig`	`emr-instance-configs` (literal)
`AWS::ElastiCache::CacheCluster`	`cache-streaming` (l1,l2)
`AWS::ElastiCache::SubnetGroup`	`cache-streaming` (l1,l2) `elasticache-replicationgroup-getatt` (l1,l2)
`AWS::ElasticLoadBalancingV2::Listener`	`alb` (literal) `deletion-ordering-complex` (literal) `local-start-alb` (l1,literal) `local-start-alb-from-state` (literal)
`AWS::ElasticLoadBalancingV2::LoadBalancer`	`alb` (l2,literal) `alb-advanced` (l2) `deletion-ordering-complex` (l2,literal) `drift-revert-vpc` (l2,literal) `ecs-bluegreen` (l2) `local-start-alb` (l1,literal) `local-start-alb-from-state` (l2,literal) `nlb-source-nat` (l1,literal) `remove-protection` (l2,literal)
`AWS::ElasticLoadBalancingV2::TargetGroup`	`alb` (literal) `deletion-ordering-complex` (literal) `drift-revert-arrays` (l1) `local-start-alb` (l1,literal) `local-start-alb-from-state` (literal)
`AWS::Events::EventBus`	`appsync` (l1) `eventbridge` (l2) `eventbridge-archive` (l2,literal) `eventbus-policy` (l2,literal)
`AWS::Events::Rule`	`ecs-schedule-targets` (l2,literal) `eventbridge` (l2,literal) `eventbridge-api-destination` (l2) `eventbridge-input-transformer` (l2,literal) `iam-propagation-stress` (l2) `nested-stack-secret` (l1,literal) `rename-refactor` (l2,literal) `replacement-immutable-name` (l2,literal) `scheduled-task` (l2)
`AWS::FSx::FileSystem`	`fsx-lustre` (literal) `fsx-ontap` (literal) `fsx-openzfs` (literal) `fsx-windows` (literal)
`AWS::Glue::Crawler`	`glue-update-hardening` (l1)
`AWS::Glue::Database`	`data-analytics` (l1,literal) `drift-revert` (l1) `glue-update-hardening` (l1) `import-auto-mode` (l1,literal)
`AWS::Glue::Job`	`glue-update-hardening` (l1)
`AWS::Glue::SecurityConfiguration`	`glue-securityconfig-replace` (l1,literal)
`AWS::Glue::Table`	`data-analytics` (l1,literal) `glue-update-hardening` (l1) `import-auto-mode` (l1,literal)
`AWS::Glue::Trigger`	`glue-update-hardening` (l1)
`AWS::Glue::Workflow`	`glue-update-hardening` (l1)
`AWS::IAM::AccessKey`	`iam-access-key` (literal)
`AWS::IAM::Group`	`infra-security` (l2)
`AWS::IAM::InstanceProfile`	`ec2-instance-fanout` (l1) `emr-cluster` (l1,literal) `emr-instance-configs` (l1,literal) `emr-instance-fleets` (l1,literal) `propagation-races-2` (l1) `remove-protection` (literal)
`AWS::IAM::ManagedPolicy`	`iam-managed-policy` (literal) `import-attributes` (literal) `import-auto-mode` (literal)
`AWS::IAM::Policy`	`asset-migration` (literal) `export` (l2,literal) `iam-propagation-stress` (literal) `iam-role-policies-drift-clean` (literal) `migrate-from-cfn` (literal)
`AWS::IAM::Role`	`agentcore-tools` (l2) `apigatewayv2-update-removal` (l2) `appsync` (l1,l2) `batch` (l2) `cc-api-fallback` (l2) `cc-api-fallback-transitions` (l2) `cc-getatt-readback` (l2) `cc-protection-flip-eks` (l2) `ci-cd` (l2) `cloudtrail-trail` (l2) `composite-stack` (l2,literal) `deep-getatt-chains` (l1) `destroy-interrupt` (l2) `diff-intrinsic-target-change` (l2) `dlm-lifecycle-policy` (l2,literal) `drift-revert` (l2) `ec2-instance-fanout` (l2) `ecs-bluegreen` (l2) `emr-cluster` (l2,literal) `emr-instance-configs` (l2,literal) `emr-instance-fleets` (l2,literal) `eventbridge` (l2) `eventbridge-pipes` (l2) `eventbridge-scheduler` (l2) `export` (l2,literal) `gc-custom-asset-names` (literal) `glue-update-hardening` (l2) `iam-managed-policy` (l2) `iam-oidc-provider` (l2,literal) `iam-propagation-stress` (l2) `iam-role-policies-drift-clean` (l2,literal) `iam-role-prefixed-name-update` (l2,literal) `infra-security` (l2) `intrinsic-functions` (l2) `lambda-esm-self-managed-kafka` (literal) `lambda-microvm-image` (l2) `lambda-snapstart` (literal) `local-invoke-dotnet` (l2) `local-invoke-java` (l2) `local-invoke-provided` (l2) `local-invoke-ruby` (l2) `local-run-task-from-state` (l2) `local-start-alb-from-state` (l2,literal) `local-start-api-websocket` (literal) `log-pipeline` (l2) `macro-expansion` (literal) `migrate-from-cfn` (l2) `multi-resource` (l2) `multi-stack-deps` (l2) `nested-stack` (l2) `propagation-races-2` (l2) `rds-aurora` (l2) `rds-dbinstance-backfill` (l2) `recreate-mixed-direction` (l2) `recreate-via-cc-api` (l2) `recreate-via-sdk-provider` (l2) `rollback-failure-injection` (l2) `s3-replication-and-filter` (l2,literal) `scheduler-custom-group` (l2) `sdk-ccapi-crossref` (l1,literal) `serverless-api` (l2) `sns-sqs-event` (l2) `stepfunctions-s3-definition` (l2) `synthetics-canary` (l2) `tags-propagation` (l2,literal) `throttle-wide-dag` (l1,literal) `update-replace` (l2,literal) `vpc-lambda-cr-race` (l2)
`AWS::IAM::User`	`iam-access-key` (l2) `infra-security` (l2)
`AWS::IAM::UserToGroupAddition`	`infra-security` (literal)
`AWS::KMS::Alias`	`composite-stack` (literal) `infra-security` (literal) `kms-encryption` (literal)
`AWS::KMS::Key`	`cloudtrail-trail` (l2) `composite-stack` (literal) `drift-revert` (l2) `dynamodb-streams` (l2) `ecr-scanning` (l2) `infra-security` (l2) `kms-encryption` (l2,literal) `loggroup-kms-associate` (l2) `propagation-races-2` (l1) `s3-replication-and-filter` (l2,literal) `s3-vectors` (l2)
`AWS::Kinesis::Stream`	`cache-streaming` (l2) `dynamodb-ondemand` (l2) `kinesis-esm-filter` (l2) `kinesis-stream-mode-switch` (l2) `log-pipeline` (l2) `replacement-immutable-name` (l2,literal) `sdk-ccapi-crossref` (l1,literal)
`AWS::KinesisFirehose::DeliveryStream`	`log-pipeline` (l1,literal)
`AWS::Lambda::EventInvokeConfig`	`export` (l1) `lambda-destinations` (literal) `lambda-event-invoke-config-update` (literal)
`AWS::Lambda::EventSourceMapping`	`dynamodb-stream-filter` (literal) `dynamodb-streams` (literal) `eventsourcemapping-race` (literal) `fifo-sqs-event-source` (literal) `lambda-esm-self-managed-kafka` (literal)
`AWS::Lambda::Function`	`agentcore-tools` (l2) `api-cognito` (l2) `apigateway` (l2) `apigatewayv2-update-removal` (l2,literal) `apigw-stage-throttling` (l2,literal) `appsync` (l1) `asset-auto-create` (l2) `asset-bootstrap` (l2) `asset-migration` (l2) `bench-cdk-sample` (l2) `bootstrap-free-region` (l2) `cache-streaming` (l2) `cc-api-fallback` (l1) `cc-api-fallback-transitions` (l1,literal) `cloudfront-function-url` (l2) `codedeploy-lambda-deployment-group` (l2) `cognito-lambda-triggers` (l2) `composite-stack` (l2,literal) `custom-resource-getatt-data` (l2) `custom-resource-provider` (l2) `data-pipeline` (l2) `deep-getatt-chains` (l1) `destroy-interrupt` (l2) `docker-image-asset` (l2,literal) `dynamodb-stream-filter` (l2) `dynamodb-streams` (l2) `ecr` (l2) `efs-lambda` (l2) `event-driven` (l2) `eventbridge` (l2) `eventbridge-scheduler` (l2) `eventsourcemapping-race` (l2) `export` (l2,literal) `fifo-sqs-event-source` (l2,literal) `full-stack-demo` (l2) `gc-custom-asset-names` (l2,literal) `iam-propagation-stress` (l2) `iam-role-policies-drift-clean` (l2) `kinesis-esm-filter` (l2) `lambda` (l2) `lambda-alias-provisioned-concurrency` (l2) `lambda-arch-switch` (l2) `lambda-config-field-removal` (l2,literal) `lambda-destinations` (l2,literal) `lambda-durable-replacement` (l2,literal) `lambda-env-removal` (l2,literal) `lambda-esm-self-managed-kafka` (l2,literal) `lambda-event-invoke-config-update` (l2) `lambda-layer-version-update` (l2) `lambda-log-retention` (l2) `lambda-reserved-concurrency` (l2) `lambda-snapstart` (l2,literal) `lambda-url-authtype-replay` (l2) `lambda-versioning` (l2,literal) `local-invoke` (l2) `local-invoke-buildkit` (l2) `local-invoke-container` (l2) `local-invoke-dotnet` (l1,l2) `local-invoke-from-cfn-stack` (l2) `local-invoke-from-cfn-stack-multi-stack` (l2) `local-invoke-from-state` (l2) `local-invoke-java` (l1,l2) `local-invoke-layers` (l2) `local-invoke-provided` (l1,l2) `local-invoke-python` (l2) `local-invoke-ruby` (l1,l2) `local-start-api` (l2) `local-start-api-container` (l2) `local-start-api-rest-v1-non-proxy` (l2) `local-start-api-websocket` (l2,literal) `log-pipeline` (l2) `macro-expansion` (literal) `microservices` (l2) `migrate-from-cfn` (l2) `monitoring` (l2) `multi-asset` (l2) `multi-resource` (l2) `multi-stack-deps` (l2) `nodejs-function` (literal) `orphan-resource` (l2,literal) `propagation-races-2` (l2) `recreate-mixed-direction` (l1) `recreate-via-cc-api` (l1) `recreate-via-sdk-provider` (l1) `rename-refactor` (l2,literal) `rollback-failure-injection` (l2) `s3-asset-deploy` (l2) `s3-event-notification` (l2) `scheduled-task` (l2) `sdk-ccapi-crossref` (l1,literal) `secrets-dynamic-ref` (l2) `secrets-rotation-schedule` (l2,literal) `serverless-api` (l2) `sns-event-source` (l2) `sns-sqs-event` (l2) `sqs-esm-max-concurrency` (l2) `stack-lock-renewal` (l2) `stepfunctions` (l2) `tags-propagation` (l2) `update-replace` (l2,literal) `vpc-lambda` (l2) `vpc-lambda-cr-race` (l2)
`AWS::Lambda::LayerVersion`	`lambda` (l2) `lambda-layer-version-update` (l2) `local-invoke-layers` (l2)
`AWS::Lambda::MicrovmImage`	`lambda-microvm-image` (literal)
`AWS::Lambda::Permission`	`apigw-stage-throttling` (literal) `appsync` (l1) `cloudfront-function-url` (l1,literal) `cognito-lambda-triggers` (literal) `export` (literal) `migrate-from-cfn` (literal) `propagation-races-2` (l1,literal) `rename-refactor` (literal) `s3-event-notification` (literal) `secrets-rotation-schedule` (literal) `serverless-api` (l1) `sns-event-source` (literal)
`AWS::Lambda::Url`	`composite-stack` (literal) `lambda-url-authtype-replay` (l1,literal)
`AWS::Logs::LogGroup`	`apigatewayv2-update-removal` (l2) `apigw-stage-props` (l1,literal) `apigw-stage-throttling` (l2,literal) `cloudtrail-trail` (l2) `cloudwatch` (l2) `composite-stack` (l2,literal) `drift-revert` (l1) `ec2-vpc` (l2) `ecs-fargate` (l2) `ecs-service-update-props` (l2) `full-stack-demo` (l2) `local-start-alb-from-state` (l2,literal) `log-pipeline` (l2) `loggroup-class-guard` (l2) `loggroup-kms-associate` (l2,literal) `monitoring` (l2) `remove-protection` (l1,literal) `route53` (l2) `scheduled-task` (l2) `stepfunctions-logging` (l2) `tags-propagation` (l2)
`AWS::Neptune::DBCluster`	`docdb-neptune` (l1)
`AWS::Neptune::DBInstance`	`docdb-neptune` (l1)
`AWS::Neptune::DBSubnetGroup`	`docdb-neptune` (l1)
`AWS::RDS::DBCluster`	`rds-aurora` (l1,l2)
`AWS::RDS::DBInstance`	`rds-aurora` (l2) `rds-dbinstance-backfill` (l1) `rds-full-stack` (l2)
`AWS::RDS::DBProxyEndpoint`	`rds-aurora` (literal)
`AWS::RDS::DBSubnetGroup`	`rds-aurora` (l2) `rds-dbinstance-backfill` (l2) `rds-full-stack` (l2)
`AWS::Route53::HostedZone`	`route53` (l2)
`AWS::Route53::RecordSet`	`route53` (l1,l2,literal)
`AWS::S3::Bucket`	`asset-migration` (l2) `basic` (l2) `bench-sdk` (l2) `bucket-deployment` (l2) `cc-getatt-readback` (l2) `ci-cd` (l2,literal) `cloudtrail-trail` (l2) `composite-stack` (l2,literal) `conditions` (l1,l2) `context-test` (l2) `cross-stack-references` (l2) `custom-resource-provider` (l2) `data-analytics` (l2,literal) `destroy-data-guard` (l2) `diff-intrinsic-target-change` (l2) `drift-revert` (l2) `drift-revert-arrays` (l2) `event-driven` (l2) `export` (l2,literal) `full-stack-demo` (l2) `glue-update-hardening` (l2) `import-value-strong-ref` (l2) `infra-security` (l2) `intrinsic-functions` (l2) `kms-encryption` (l2,literal) `local-invoke-agentcore-from-state` (l2) `local-invoke-from-state` (l2) `local-start-cloudfront` (l2) `log-pipeline` (l2) `migrate-from-cfn` (l2) `multi-resource` (l2) `multi-stack-deps` (l2) `nested-stack` (l2) `orphan-resource` (l2,literal) `outputs-only-export` (l2) `propagation-races-2` (l2) `recreate-via-cc-api` (l1) `rollback-replay-effective-props` (literal) `s3-analytics-inventory` (l1) `s3-cloudfront` (l2) `s3-event-notification` (l2) `s3-lifecycle` (l1,l2,literal) `s3-object-lock` (l1,literal) `s3-replication-and-filter` (l1,literal) `s3-subconfig-removal` (l1,literal) `state-destroy` (l2) `synthetics-canary` (l2) `tags-propagation` (l2) `update-policy-mutations` (l2,literal) `update-replace` (l2,literal)
`AWS::S3::BucketPolicy`	`asset-migration` (literal) `migrate-from-cfn` (literal) `propagation-races-2` (l1) `s3-analytics-inventory` (l1) `s3-replication-and-filter` (l1)
`AWS::S3Express::DirectoryBucket`	`s3-directory-bucket` (l1)
`AWS::S3Tables::Namespace`	`s3-tables` (l1)
`AWS::S3Tables::Table`	`s3-tables` (l1,literal)
`AWS::S3Tables::TableBucket`	`s3-tables` (l1,literal)
`AWS::S3Vectors::VectorBucket`	`s3-vectors` (l1)
`AWS::SNS::Subscription`	`composite-stack` (literal) `sns-event-source` (literal) `sns-inline-subscription` (literal) `sns-sqs-event` (literal) `sns-subscription-filter` (literal) `sns-subscription-update` (l1,literal)
`AWS::SNS::Topic`	`bench-sdk` (l2) `cloudtrail-trail` (l2) `cloudwatch` (l2) `codecommit` (l2) `composite-stack` (l2,literal) `conditions-and-if` (l1) `deep-getatt-chains` (l1) `deployment-events` (l2) `drift-revert` (l2) `drift-revert-arrays` (l2) `event-driven` (l2) `eventbridge-pipes` (l2) `export` (l2,literal) `full-stack-demo` (l2) `iam-propagation-stress` (l2) `importvalue-chain` (l2) `intrinsics-torture` (l2) `intrinsics-torture-2` (l2) `microservices` (l2) `migrate-from-cfn` (l2) `monitoring` (l2) `nested-stack-3level` (l2) `replacement-fanout` (l2,literal) `s3-lifecycle` (l2) `scheduled-task` (l2) `serverless-api` (l2) `sns-event-source` (l2) `sns-inline-subscription` (l1,literal) `sns-pending-subscription` (l2) `sns-sqs-event` (l1,l2) `sns-subscription-filter` (l2,literal) `sns-subscription-update` (l2,literal) `tags-propagation` (l2) `throttle-wide-dag` (l1,literal) `update-policy-mutations` (l2,literal)
`AWS::SNS::TopicPolicy`	`codecommit` (l2) `iam-propagation-stress` (literal) `migrate-from-cfn` (literal) `replacement-fanout` (l2,literal) `s3-lifecycle` (l2) `sns-sqs-event` (l2)
`AWS::SQS::Queue`	`basic` (l1) `bench-cdk-sample` (l2) `bench-sdk` (l2) `cc-getatt-readback` (l2) `cloudwatch-anomaly-detector` (l2) `composite-stack` (l2,literal) `conditions-update-2` (l1) `data-pipeline` (l2) `drift-revert-arrays` (l2) `event-driven` (l2) `eventbridge` (l2) `eventbridge-input-transformer` (l2,literal) `eventbridge-pipes` (l2) `eventsourcemapping-race` (l2,literal) `fifo-sqs-event-source` (l2,literal) `full-stack-demo` (l2) `iam-propagation-stress` (l2) `iam-role-policies-drift-clean` (l2) `intrinsics-torture` (l2) `lambda-destinations` (l2,literal) `lambda-event-invoke-config-update` (l2) `lambda-url-authtype-replay` (l1) `microservices` (l2) `migrate-from-cfn` (l2) `multi-resource` (l2) `rename-refactor` (l2,literal) `rollback-command` (l1) `rollback-cross-region-secret` (l1) `rollback-deletion-policy-snapshot` (l1,literal) `rollback-failure-injection` (l1) `rollback-replay-effective-props` (l1) `rollback-sqs-cooldown` (l1) `scheduler-custom-group` (l2) `secrets-dynamic-ref` (l1) `sns-inline-subscription` (l1) `sns-sqs-event` (l1,l2) `sns-subscription-filter` (l2,literal) `sns-subscription-update` (l2,literal) `sqs-esm-max-concurrency` (l2) `tags-propagation` (l2)
`AWS::SQS::QueuePolicy`	`iam-propagation-stress` (literal) `migrate-from-cfn` (literal) `sns-subscription-filter` (literal)
`AWS::SSM::Parameter`	`bench-sdk` (l2) `composite-stack` (l2,literal) `conditions-and-if` (l1) `conditions-update-2` (l1) `context-test` (l2) `cross-region-state-bucket` (l1) `cross-stack-cfn-fallback` (l1) `cross-stack-references` (l1) `cross-stack-secret-import` (l2) `custom-resource-getatt-data` (l2) `deep-getatt-chains` (l1) `deletion-policy-retain` (l2,literal) `deployment-events` (l2) `destroy-interrupt` (l2,literal) `dynamic-ref-cross-region` (l1) `elasticache-replicationgroup-getatt` (l1) `eventbridge` (l2) `export-nested-stack` (l2,literal) `getatt-fallback-guard` (l1,literal) `getstackoutput-crossregion` (l1,l2) `import-attributes` (literal) `import-nested-stack` (l2,literal) `import-value-strong-ref` (l2) `importvalue-chain` (l2) `infra-security` (l2) `inplace-attr-propagation` (l2,literal) `intrinsics-torture` (l1,literal) `intrinsics-torture-2` (l1,literal) `legacy-bucket-name-fallback` (l2) `legacy-state-migration` (l2) `local-invoke-from-cfn-stack-multi-stack` (l2) `microservices` (l2) `multi-region-same-stack` (l2) `nested-stack` (l2) `nested-stack-3level` (l2) `nested-stack-deep` (l2) `nested-stack-secret` (l2,literal) `opensearch-domain-getatt` (l1) `outputs-only-export` (l2) `rds-full-stack` (l2) `redshift-cluster-getatt` (l1) `rename-refactor` (l2,literal) `replacement-fanout` (l2,literal) `replacement-immutable-name` (l2,literal) `rollback-command` (l2) `rollback-cross-region-secret` (l1,l2) `rollback-failure-injection` (l2) `s3-tables` (l1) `schema-v5-to-v6-migration` (l2) `schema-v6-to-v7-migration` (l2) `schema-v7-to-v8-migration` (l1,l2) `schema-v8-to-v9-migration` (l1,l2) `sdk-ccapi-crossref` (l1,literal) `secrets-dynamic-ref` (l2) `state-info-command` (l2) `tags-propagation` (l2,literal) `throttle-wide-dag` (l1,literal) `update-policy-mutations` (l2,literal) `vpc-lookup` (l2) `wait-condition-handle` (l2)
`AWS::Scheduler::Schedule`	`ecs-schedule-targets` (literal) `eventbridge` (literal) `eventbridge-scheduler` (literal)
`AWS::SecretsManager::Secret`	`composite-stack` (l2,literal) `cross-stack-secret-import` (l2) `event-driven` (l2) `full-stack-demo` (l2) `iam-access-key` (l2) `lambda-esm-self-managed-kafka` (l2,literal) `local-run-task-from-state` (l2,literal) `replacement-immutable-name` (l2,literal) `secrets-array-nested` (l2,literal) `secrets-dynamic-ref` (l2) `secrets-rotation-schedule` (l2,literal)
`AWS::ServiceDiscovery::HttpNamespace`	`servicediscovery-namespaces` (l1,literal)
`AWS::ServiceDiscovery::PrivateDnsNamespace`	`drift-revert-vpc` (l2,literal) `local-ecs-service-connect` (literal) `servicediscovery` (l1)
`AWS::ServiceDiscovery::PublicDnsNamespace`	`servicediscovery-namespaces` (l1,literal)
`AWS::ServiceDiscovery::Service`	`local-ecs-service-connect` (literal) `servicediscovery` (l1,literal)
`AWS::StepFunctions::StateMachine`	`iam-propagation-stress` (l2) `replacement-immutable-name` (l2,literal) `stepfunctions` (l2) `stepfunctions-logging` (l2) `stepfunctions-s3-definition` (l1)
`AWS::WAFv2::WebACL`	`wafv2` (l1,literal)

Resource types referenced in integs without an SDK Provider (73)

These resource types appear in integ fixtures but no SDK Provider is registered for them — they fall through to the Cloud Control API fallback. Listed here for visibility; not actionable on its own.

AWS::ApiGateway::ApiKey
AWS::ApiGateway::ClientCertificate
AWS::ApiGateway::GatewayResponse
AWS::ApiGateway::Model
AWS::ApiGateway::RequestValidator
AWS::ApiGateway::RestApi
AWS::ApiGateway::UsagePlanKey
AWS::AppConfig::Application
AWS::AppConfig::ConfigurationProfile
AWS::AppConfig::Deployment
AWS::AppConfig::DeploymentStrategy
AWS::AppConfig::Environment
AWS::AppConfig::HostedConfigurationVersion
AWS::ApplicationAutoScaling::ScalableTarget
AWS::ApplicationAutoScaling::ScalingPolicy
AWS::Athena::NamedQuery
AWS::Athena::WorkGroup
AWS::Backup::BackupPlan
AWS::Backup::BackupSelection
AWS::Backup::BackupVault
AWS::CloudFormation::CustomResource
AWS::CloudWatch::CompositeAlarm
AWS::CodeDeploy::DeploymentGroup
AWS::CodePipeline::Pipeline
AWS::Cognito::IdentityPool
AWS::Cognito::UserPoolClient
AWS::Cognito::UserPoolDomain
AWS::Cognito::UserPoolGroup
AWS::Cognito::UserPoolUser
AWS::Cognito::UserPoolUserToGroupAttachment
AWS::DSQL::Cluster
AWS::DocDB::GlobalCluster
AWS::EC2::PrefixList
AWS::EC2::SecurityGroupEgress
AWS::EC2::TransitGateway
AWS::EC2::TransitGatewayAttachment
AWS::EC2::VPCCidrBlock
AWS::EC2::Volume
AWS::EKS::Cluster
AWS::ELBv2::LoadBalancer
AWS::ElastiCache::ReplicationGroup
AWS::ElasticLoadBalancingV2::ListenerRule
AWS::Events::ApiDestination
AWS::Events::Archive
AWS::Events::Connection
AWS::Events::EventBusPolicy
AWS::KMS::Grant
AWS::Lambda::Alias
AWS::Lambda::CodeSigningConfig
AWS::Lambda::Version
AWS::Logs::LogStream
AWS::Logs::MetricFilter
AWS::Logs::ResourcePolicy
AWS::Logs::SubscriptionFilter
AWS::NeptuneGraph::Graph
AWS::OpenSearchService::Domain
AWS::Pipes::Pipe
AWS::RDS::GlobalCluster
AWS::Redshift::Cluster
AWS::ResourceGroups::Group
AWS::Route53::CidrCollection
AWS::Route53::HealthCheck
AWS::S3::AccessPoint
AWS::SES::ConfigurationSet
AWS::SES::EmailIdentity
AWS::SMSVOICE::ProtectConfiguration
AWS::SSM::Document
AWS::SecretsManager::RotationSchedule
AWS::Serverless::Function
AWS::Signer::SigningProfile
AWS::VerifiedPermissions::PolicyStore
AWS::WAFv2::IPSet
AWS::WAFv2::WebACLAssociation