The `AWS::CloudFormation::CustomResource` resource creates a custom resource.

Custom resources provide a way for you to write custom provisioning logic into your CloudFormation templates and have CloudFormation run it anytime you create, update (if you changed the custom resource), or delete a stack.

For more information, see [Create custom provisioning logic with custom resources](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-custom-resources.html) in the *CloudFormation User Guide* .

> If you use AWS PrivateLink , custom resources in the VPC must have access to CloudFormation -specific Amazon S3 buckets. Custom resources must send responses to a presigned Amazon S3 URL. If they can't send responses to Amazon S3 , CloudFormation won't receive a response and the stack operation fails. For more information, see [Access CloudFormation using an interface endpoint ( AWS PrivateLink )](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/vpc-interface-endpoints.html) in the *CloudFormation User Guide* .

CfnCustomResource

The service token, such as an Amazon  topic ARN or Lambda function ARN.

The service token must be from the same Region as the stack.

Updates aren't supported.

serviceToken

The maximum time, in seconds, that can elapse before a custom resource operation times out.

The value must be an integer from 1 to 3600. The default value is 3600 seconds (1 hour).

serviceTimeout

The `AWS::CloudFormation::GuardHook` resource creates and activates a Guard Hook.

Using the Guard domain specific language (DSL), you can author Guard Hooks to evaluate your resources before allowing stack operations.

For more information, see [Guard Hooks](https://docs.aws.amazon.com/cloudformation-cli/latest/hooks-userguide/guard-hooks.html) in the *CloudFormation Hooks User Guide* .

CfnGuardHook

The type name alias for the Hook. This alias must be unique per account and Region.

The alias must be in the form `Name1::Name2::Name3` and must not begin with `AWS` . For example, `Private::Guard::MyTestHook` .

alias

The IAM role that the Hook assumes to retrieve your Guard rules from S3 and optionally write a detailed Guard output report back.

executionRole

Specifies how the Hook responds when rules fail their evaluation.

- `FAIL` : Prevents the action from proceeding. This is helpful for enforcing strict compliance or security policies.
- `WARN` : Issues warnings to users but allows actions to continue. This is useful for non-critical validations or informational checks.

failureMode

Specifies if the Hook is `ENABLED` or `DISABLED` .

hookStatus

Specifies the S3 location of your Guard rules.

ruleLocation

Specifies the list of operations the Hook is run against.

For more information, see [Hook targets](https://docs.aws.amazon.com/cloudformation-cli/latest/hooks-userguide/hooks-concepts.html#hook-terms-hook-target) in the *CloudFormation Hooks User Guide* .

Valid values: `STACK` | `RESOURCE` | `CHANGE_SET` | `CLOUD_CONTROL`

targetOperations

Specifies the name of an S3 bucket to store the Guard output report.

This report contains the results of your Guard rule validations.

logBucket

Specifies the S3 location of your input parameters.

options

Specifies the stack level filters for the Hook.

Example stack level filter in JSON:

`"StackFilters": {"FilteringCriteria": "ALL", "StackNames": {"Exclude": [ "stack-1", "stack-2"]}}`

Example stack level filter in YAML:

`StackFilters: FilteringCriteria: ALL StackNames: Exclude: - stack-1 - stack-2`

stackFilters

Specifies the target filters for the Hook.

Example target filter in JSON:

`"TargetFilters": {"Actions": [ "CREATE", "UPDATE", "DELETE" ]}`

Example target filter in YAML:

`TargetFilters: Actions: - CREATE - UPDATE - DELETE`

targetFilters

The `AWS::CloudFormation::HookDefaultVersion` resource specifies the default version of a Hook.

The default version of the Hook is used in CloudFormation operations for this AWS account and AWS Region .

For information about the CloudFormation registry, see [Managing extensions with the CloudFormation registry](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry.html) in the *CloudFormation User Guide* .

This resource type is not compatible with Guard and Lambda Hooks.

CfnHookDefaultVersion

The name of the Hook.

You must specify either `TypeVersionArn` , or `TypeName` and `VersionId` .

typeName

The version ID of the type configuration.

You must specify either `TypeVersionArn` , or `TypeName` and `VersionId` .

typeVersionArn

The version ID of the type specified.

You must specify either `TypeVersionArn` , or `TypeName` and `VersionId` .

versionId

The `AWS::CloudFormation::HookTypeConfig` resource specifies the configuration of an activated Hook.

For information about the CloudFormation registry, see [Managing extensions with the CloudFormation registry](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry.html) in the *CloudFormation User Guide* .

CfnHookTypeConfig

Specifies the activated Hook type configuration, in this AWS account and AWS Region .

You must specify either `TypeName` and `Configuration` or `TypeArn` and `Configuration` .

configuration

An alias by which to refer to this configuration data.

Defaults to `default` alias. Hook types currently support default configuration alias.

configurationAlias

The Amazon Resource Number (ARN) for the Hook to set `Configuration` for.

You must specify either `TypeName` and `Configuration` or `TypeArn` and `Configuration` .

typeArn

The unique name for your Hook.

Specifies a three-part namespace for your Hook, with a recommended pattern of `Organization::Service::Hook` .

You must specify either `TypeName` and `Configuration` or `TypeArn` and `Configuration` .

The `AWS::CloudFormation::HookVersion` resource publishes new or first version of a Hook to the CloudFormation registry.

For information about the CloudFormation registry, see [Managing extensions with the CloudFormation registry](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry.html) in the *CloudFormation User Guide* .

This resource type is not compatible with Guard and Lambda Hooks.

CfnHookVersion

A URL to the Amazon S3 bucket for the Hook project package that contains the necessary files for the Hook you want to register.

For information on generating a schema handler package, see [Modeling custom CloudFormation Hooks](https://docs.aws.amazon.com/cloudformation-cli/latest/hooks-userguide/hooks-model.html) in the *CloudFormation Hooks User Guide* .

> To register the Hook, you must have `s3:GetObject` permissions to access the S3 objects.

schemaHandlerPackage

The unique name for your Hook.

Specifies a three-part namespace for your Hook, with a recommended pattern of `Organization::Service::Hook` .

> The following organization namespaces are reserved and can't be used in your Hook type names:
>
> - `Alexa`
> - `AMZN`
> - `Amazon`
> - `ASK`
> - `AWS`
> - `Custom`
> - `Dev`

The Amazon Resource Name (ARN) of the task execution role that grants the Hook permission.

executionRoleArn

Contains logging configuration information for an extension.

loggingConfig

The `AWS::CloudFormation::LambdaHook` resource creates and activates a Lambda Hook.

You can use a Lambda Hook to evaluate your resources before allowing stack operations. This resource forwards requests for resource evaluation to a Lambda function.

For more information, see [Lambda Hooks](https://docs.aws.amazon.com/cloudformation-cli/latest/hooks-userguide/lambda-hooks.html) in the *CloudFormation Hooks User Guide* .

CfnLambdaHook

The type name alias for the Hook. This alias must be unique per account and Region.

The alias must be in the form `Name1::Name2::Name3` and must not begin with `AWS` . For example, `Private::Lambda::MyTestHook` .

The IAM role that the Hook assumes to invoke your Lambda function.

Specifies how the Hook responds when the Lambda function invoked by the Hook returns a `FAILED` response.

- `FAIL` : Prevents the action from proceeding. This is helpful for enforcing strict compliance or security policies.
- `WARN` : Issues warnings to users but allows actions to continue. This is useful for non-critical validations or informational checks.

Specifies the Lambda function for the Hook. You can use:.

- The full Amazon Resource Name (ARN) without a suffix.
- A qualified ARN with a version or alias suffix.

lambdaFunction

The `AWS::CloudFormation::Macro` resource is a CloudFormation resource type that creates a CloudFormation macro to perform custom processing on CloudFormation templates.

For more information, see [Perform custom processing on CloudFormation templates with template macros](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-macros.html) in the *CloudFormation User Guide* .

CfnMacro

The Amazon Resource Name (ARN) of the underlying Lambda function that you want CloudFormation to invoke when the macro is run.

functionName

The name of the macro.

The name of the macro must be unique across all macros in the account.

name

description

The CloudWatch Logs group to which CloudFormation sends error logging information when invoking the macro's underlying Lambda function.

This will be an existing CloudWatch Logs LogGroup. Neither CloudFormation or Lambda will create the group.

logGroupName

The ARN of the role CloudFormation should assume when sending log entries to CloudWatch Logs .

logRoleArn

Specifies the default version of a module.

The default version of the module will be used in CloudFormation operations for this account and Region.

For more information, see [Create reusable resource configurations that can be included across templates with CloudFormation modules](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/modules.html) in the *CloudFormation User Guide* .

For information about the CloudFormation registry, see [Managing extensions with the CloudFormation registry](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry.html) in the *CloudFormation User Guide* .

CfnModuleDefaultVersion

The Amazon Resource Name (ARN) of the module version to set as the default version.

Conditional: You must specify either `Arn` , or `ModuleName` and `VersionId` .

The name of the module.

Conditional: You must specify either `Arn` , or `ModuleName` and `VersionId` .

moduleName

The ID for the specific version of the module.

Conditional: You must specify either `Arn` , or `ModuleName` and `VersionId` .

The `AWS::CloudFormation::ModuleVersion` resource registers the specified version of the module with the CloudFormation registry.

Registering a module makes it available for use in CloudFormation templates in your AWS account and Region.

For more information, see [Create reusable resource configurations that can be included across templates with CloudFormation modules](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/modules.html) in the *CloudFormation User Guide* .

For information about the CloudFormation registry, see [Managing extensions with the CloudFormation registry](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry.html) in the *CloudFormation User Guide* .

CfnModuleVersion

A URL to the S3 bucket for the package that contains the template fragment and schema files for the module version to register.

For more information, see [Module structure and requirements](https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/modules-structure.html) in the *CloudFormation Command Line Interface (CLI) User Guide* .

> To register the module version, you must have `s3:GetObject` permissions to access the S3 objects.

modulePackage

The `AWS::CloudFormation::PublicTypeVersion` resource tests and publishes a registered extension as a public, third-party extension.

CloudFormation first tests the extension to make sure it meets all necessary requirements for being published in the CloudFormation registry. If it does, CloudFormation then publishes it to the registry as a public third-party extension in this Region. Public extensions are available for use by all CloudFormation users.

- For resource types, testing includes passing all contracts tests defined for the type.
- For modules, testing includes determining if the module's model meets all necessary requirements.

For more information, see [Testing your public extension prior to publishing](https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/publish-extension.html#publish-extension-testing) in the *CloudFormation Command Line Interface (CLI) User Guide* .

If you don't specify a version, CloudFormation uses the default version of the extension in your account and Region for testing.

To perform testing, CloudFormation assumes the execution role specified when the type was registered.

An extension must have a test status of `PASSED` before it can be published. For more information, see [Publishing extensions to make them available for public use](https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/publish-extension.html) in the *CloudFormation Command Line Interface (CLI) User Guide* .

CfnPublicTypeVersion

The Amazon Resource Number (ARN) of the extension.

Conditional: You must specify `Arn` , or `TypeName` and `Type` .

The S3 bucket to which CloudFormation delivers the contract test execution logs.

CloudFormation delivers the logs by the time contract testing has completed and the extension has been assigned a test type status of `PASSED` or `FAILED` .

The user initiating the stack operation must be able to access items in the specified S3 bucket. Specifically, the user needs the following permissions:

- s3:GetObject
- s3:PutObject

logDeliveryBucket

The version number to assign to this version of the extension.

Use the following format, and adhere to semantic versioning when assigning a version number to your extension:

`MAJOR.MINOR.PATCH`

For more information, see [Semantic Versioning 2.0.0](https://docs.aws.amazon.com/https://semver.org/) .

If you don't specify a version number, CloudFormation increments the version number by one minor version release.

You cannot specify a version number the first time you publish a type. CloudFormation automatically sets the first version number to be `1.0.0` .

publicVersionNumber

The type of the extension to test.

Conditional: You must specify `Arn` , or `TypeName` and `Type` .

type

The name of the extension to test.

Conditional: You must specify `Arn` , or `TypeName` and `Type` .

The `AWS::CloudFormation::Publisher` resource registers your account as a publisher of public extensions in the CloudFormation registry.

Public extensions are available for use by all CloudFormation users.

For information on requirements for registering as a public extension publisher, see [Publishing extensions to make them available for public use](https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/publish-extension.htm) in the *CloudFormation Command Line Interface (CLI) User Guide* .

CfnPublisher

Whether you accept the [Terms and Conditions](https://docs.aws.amazon.com/https://cloudformation-registry-documents.s3.amazonaws.com/Terms_and_Conditions_for_AWS_CloudFormation_Registry_Publishers.pdf) for publishing extensions in the CloudFormation registry. You must accept the terms and conditions in order to register to publish public extensions to the CloudFormation registry.

The default is `false` .

acceptTermsAndConditions

If you are using a Bitbucket or GitHub account for identity verification, the Amazon Resource Name (ARN) for your connection to that account.

For more information, see [Prerequisite: Registering your account to publish CloudFormation extensions](https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/publish-extension.html#publish-extension-prereqs) in the *AWS CloudFormation Command Line Interface (CLI) User Guide* .

connectionArn

The `AWS::CloudFormation::ResourceDefaultVersion` resource specifies the default version of a resource.

The default version of a resource will be used in CloudFormation operations.

For information about the CloudFormation registry, see [Managing extensions with the CloudFormation registry](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry.html) in the *CloudFormation User Guide* .

CfnResourceDefaultVersion

The name of the resource.

Conditional: You must specify either `TypeVersionArn` , or `TypeName` and `VersionId` .

The Amazon Resource Name (ARN) of the resource version.

Conditional: You must specify either `TypeVersionArn` , or `TypeName` and `VersionId` .

The ID of a specific version of the resource.

The version ID is the value at the end of the Amazon Resource Name (ARN) assigned to the resource version when it's registered.

Conditional: You must specify either `TypeVersionArn` , or `TypeName` and `VersionId` .

The `AWS::CloudFormation::ResourceVersion` resource registers a resource version with the CloudFormation registry.

Registering a resource version makes it available for use in CloudFormation templates in your AWS account , and includes:

- Validating the resource schema.
- Determining which handlers, if any, have been specified for the resource.
- Making the resource available for use in your account.

For information about the CloudFormation registry, see [Managing extensions with the CloudFormation registry](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry.html) in the *CloudFormation User Guide* .

You can have a maximum of 50 resource versions registered at a time. This maximum is per account and per Region.

CfnResourceVersion

A URL to the S3 bucket for the resource project package that contains the necessary files for the resource you want to register.

For information on generating a schema handler package, see [Modeling resource types to use with CloudFormation](https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/resource-type-model.html) in the *CloudFormation Command Line Interface (CLI) User Guide* .

> To register the resource version, you must have `s3:GetObject` permissions to access the S3 objects.

The name of the resource being registered.

We recommend that resource names adhere to the following pattern: *company_or_organization* :: *service* :: *type* .

> The following organization namespaces are reserved and can't be used in your resource names:
>
> - `Alexa`
> - `AMZN`
> - `Amazon`
> - `AWS`
> - `Custom`
> - `Dev`

The Amazon Resource Name (ARN) of the IAM role for CloudFormation to assume when invoking the resource.

If your resource calls AWS APIs in any of its handlers, you must create an IAM execution role that includes the necessary permissions to call those AWS APIs, and provision that execution role in your account. When CloudFormation needs to invoke the resource type handler, CloudFormation assumes this execution role to create a temporary session token, which it then passes to the resource type handler, thereby supplying your resource type with the appropriate credentials.

Logging configuration information for a resource.

The `AWS::CloudFormation::Stack` resource nests a stack as a resource in a top-level template.

For more information, see [Nested stacks](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-nested-stacks.html) in the *CloudFormation User Guide* .

You can add output values from a nested stack within the containing template. You use the [GetAtt](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html) function with the nested stack's logical name and the name of the output value in the nested stack in the format `Outputs. *NestedStackOutputName*` .

We strongly recommend that updates to nested stacks are run from the parent stack.

When you apply template changes to update a top-level stack, CloudFormation updates the top-level stack and initiates an update to its nested stacks. CloudFormation updates the resources of modified nested stacks, but doesn't update the resources of unmodified nested stacks.

For stacks that contain IAM resources, you must acknowledge IAM capabilities. Also, make sure that you have cancel update stack permissions, which are required if an update rolls back. For more information about IAM and CloudFormation , see [Controlling access with AWS Identity and Access Management](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html) in the *CloudFormation User Guide* .

> A subset of `AWS::CloudFormation::Stack` resource type properties listed below are available to customers using CloudFormation , AWS CDK , and Cloud Control  to configure.
>
> - `NotificationARNs`
> - `Parameters`
> - `Tags`
> - `TemplateURL`
> - `TimeoutInMinutes`
>
> These properties can be configured only when using Cloud Control  . This is because the below properties are set by the parent stack, and thus cannot be configured using CloudFormation or AWS CDK but only Cloud Control  .
>
> - `Capabilities`
> - `Description`
> - `DisableRollback`
> - `EnableTerminationProtection`
> - `RoleARN`
> - `StackName`
> - `StackPolicyBody`
> - `StackPolicyURL`
> - `StackStatusReason`
> - `TemplateBody`
>
> Customers that configure `AWS::CloudFormation::Stack` using CloudFormation and AWS CDK can do so for nesting a CloudFormation stack as a resource in their top-level template.
>
> These read-only properties can be accessed only when using Cloud Control  .
>
> - `ChangeSetId`
> - `CreationTime`
> - `LastUpdateTime`
> - `Outputs`
> - `ParentId`
> - `RootId`
> - `StackId`
> - `StackStatus`

CfnStack

The Amazon SNS topic ARNs to publish stack related events.

You can find your Amazon SNS topic ARNs using the Amazon SNS console or your Command Line Interface (CLI).

notificationArns

The set value pairs that represent the parameters passed to CloudFormation when this nested stack is created.

Each parameter has a name corresponding to a parameter defined in the embedded template and a value representing the value that you want to set for the parameter.

> If you use the `Ref` function to pass a parameter value to a nested stack, comma-delimited list parameters must be of type `String` . In other words, you can't pass values that are of type `CommaDelimitedList` to nested stacks.

Required if the nested stack requires input parameters.

Whether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.

parameters

Key-value pairs to associate with this stack.

CloudFormation also propagates these tags to the resources created in the stack. A maximum number of 50 tags can be specified.

templateUrl

The length of time, in minutes, that CloudFormation waits for the nested stack to reach the `CREATE_COMPLETE` state.

The default is no timeout. When CloudFormation detects that the nested stack has reached the `CREATE_COMPLETE` state, it marks the nested stack resource as `CREATE_COMPLETE` in the parent stack and resumes creating the parent stack. If the timeout period expires before the nested stack reaches `CREATE_COMPLETE` , CloudFormation marks the nested stack as failed and rolls back both the nested stack and parent stack.

Updates aren't supported.

timeoutInMinutes

The `AWS::CloudFormation::StackSet` resource contains information about a StackSet.

With StackSets, you can provision stacks across AWS accounts and Regions from a single CloudFormation template. Each stack is based on the same CloudFormation template, but you can customize individual stacks using parameters.

> Run deployments to nested StackSets from the parent stack, not directly through the StackSet API.

CfnStackSet

Describes how the IAM roles required for StackSet operations are created.

- With `SELF_MANAGED` permissions, you must create the administrator and execution roles required to deploy to target accounts. For more information, see [Grant self-managed permissions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html) in the *CloudFormation User Guide* .
- With `SERVICE_MANAGED` permissions, StackSets automatically creates the IAM roles required to deploy to accounts managed by AWS Organizations . For more information, see [Activate trusted access for StackSets with AWS Organizations](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-activate-trusted-access.html) in the *CloudFormation User Guide* .

permissionModel

The name to associate with the StackSet.

The name must be unique in the Region where you create your StackSet.

stackSetName

The Amazon Resource Number (ARN) of the IAM role to use to create this StackSet.

Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific StackSets within the same administrator account.

Use customized administrator roles to control which users or groups can manage specific StackSets within the same administrator account. For more information, see [Grant self-managed permissions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html) in the *CloudFormation User Guide* .

Valid only if the permissions model is `SELF_MANAGED` .

administrationRoleArn

Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to a target organization or organizational unit (OU).

For more information, see [Enable or disable automatic deployments for StackSets in AWS Organizations](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-manage-auto-deployment.html) in the *CloudFormation User Guide* .

Required if the permissions model is `SERVICE_MANAGED` . (Not used with self-managed permissions.)

autoDeployment

Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account.

By default, `SELF` is specified. Use `SELF` for StackSets with self-managed permissions.

- To create a StackSet with service-managed permissions while signed in to the management account, specify `SELF` .
- To create a StackSet with service-managed permissions while signed in to a delegated administrator account, specify `DELEGATED_ADMIN` .

Your AWS account must be registered as a delegated admin in the management account. For more information, see [Register a delegated administrator](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html) in the *CloudFormation User Guide* .

StackSets with service-managed permissions are created in the management account, including StackSets that are created by delegated administrators.

Valid only if the permissions model is `SERVICE_MANAGED` .

callAs

The capabilities that are allowed in the StackSet.

Some StackSet templates might include resources that can affect permissions in your AWS account —for example, by creating new IAM users. For more information, see [Acknowledging IAM resources in CloudFormation templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities) in the *CloudFormation User Guide* .

capabilities

The name of the IAM execution role to use to create the StackSet.

If you don't specify an execution role, CloudFormation uses the `AWSCloudFormationStackSetExecutionRole` role for the StackSet operation.

Valid only if the permissions model is `SELF_MANAGED` .

*Pattern* : `[a-zA-Z_0-9+=,.@-]+`

executionRoleName

Describes whether StackSets performs non-conflicting operations concurrently and queues conflicting operations.

When active, StackSets performs non-conflicting operations concurrently and queues conflicting operations. After conflicting operations finish, StackSets starts queued operations in request order.

> If there are already running or queued operations, StackSets queues all incoming operations even if they are non-conflicting.
>
> You can't modify your StackSet's execution configuration while there are running or queued operations for that StackSet.

When inactive (default), StackSets performs one operation at a time in request order.

managedExecution

The user-specified preferences for how CloudFormation performs a StackSet operation.

operationPreferences

The input parameters for the StackSet template.

A group of stack instances with parameters in some specific accounts and Regions.

stackInstancesGroup

Key-value pairs to associate with this stack.

CloudFormation also propagates these tags to supported resources in the stack. You can specify a maximum number of 50 tags.

If you don't specify this parameter, CloudFormation doesn't modify the stack's tags. If you specify an empty value, CloudFormation removes all associated tags.

The structure that contains the template body, with a minimum length of 1 byte and a maximum length of 51,200 bytes.

You must include either `TemplateURL` or `TemplateBody` in a StackSet, but you can't use both. Dynamic references in the `TemplateBody` may not work correctly in all cases. It's recommended to pass templates that contain dynamic references through `TemplateUrl` instead.

templateBody

The URL of a file that contains the template body.

The URL must point to a template (max size: 1 MB) that's located in an Amazon S3 bucket or a Systems Manager document. The location for an Amazon S3 bucket must start with `https://` .

Conditional: You must specify only one of the following parameters: `TemplateBody` , `TemplateURL` .

The `AWS::CloudFormation::TypeActivation` resource activates a public third-party extension, making it available for use in stack templates.

For information about the CloudFormation registry, see [Managing extensions with the CloudFormation registry](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry.html) in the *CloudFormation User Guide* .

CfnTypeActivation

Whether to automatically update the extension in this account and Region when a new *minor* version is published by the extension publisher.

Major versions released by the publisher must be manually updated.

The default is `true` .

autoUpdate

The name of the IAM execution role to use to activate the extension.

Specifies logging configuration information for an extension.

The major version of this extension you want to activate, if multiple major versions are available.

The default is the latest major version. CloudFormation uses the latest available *minor* version of the major version selected.

You can specify `MajorVersion` or `VersionBump` , but not both.

majorVersion

The Amazon Resource Number (ARN) of the public extension.

Conditional: You must specify `PublicTypeArn` , or `TypeName` , `Type` , and `PublisherId` .

publicTypeArn

The ID of the extension publisher.

Conditional: You must specify `PublicTypeArn` , or `TypeName` , `Type` , and `PublisherId` .

publisherId

The extension type.

Conditional: You must specify `PublicTypeArn` , or `TypeName` , `Type` , and `PublisherId` .

The name of the extension.

Conditional: You must specify `PublicTypeArn` , or `TypeName` , `Type` , and `PublisherId` .

An alias to assign to the public extension in this account and Region.

If you specify an alias for the extension, CloudFormation treats the alias as the extension type name within this account and Region. You must use the alias to refer to the extension in your templates, API calls, and CloudFormation console.

An extension alias must be unique within a given account and Region. You can activate the same public resource multiple times in the same account and Region, using different type name aliases.

typeNameAlias

Manually updates a previously-activated type to a new major or minor version, if available.

You can also use this parameter to update the value of `AutoUpdate` .

- `MAJOR` : CloudFormation updates the extension to the newest major version, if one is available.
- `MINOR` : CloudFormation updates the extension to the newest minor version, if one is available.

versionBump

The `AWS::CloudFormation::WaitCondition` resource provides a way to coordinate stack resource creation with configuration actions that are external to the stack creation or to track the status of a configuration process.

In these situations, we recommend that you associate a `CreationPolicy` attribute with the wait condition instead of using a wait condition handle. For more information and an example, see [CreationPolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-attribute-creationpolicy.html) in the *CloudFormation User Guide* . If you use a `CreationPolicy` with a wait condition, don't specify any of the wait condition's properties.

> If you use AWS PrivateLink , resources in the VPC that respond to wait conditions must have access to CloudFormation , specific Amazon S3 buckets. Resources must send wait condition responses to a presigned Amazon S3 URL. If they can't send responses to Amazon S3 , CloudFormation won't receive a response and the stack operation fails. For more information, see [Access CloudFormation using an interface endpoint ( AWS PrivateLink )](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/vpc-interface-endpoints.html) in the *CloudFormation User Guide* . > For Amazon EC2 and Auto Scaling resources, we recommend that you use a `CreationPolicy` attribute instead of wait conditions. Add a `CreationPolicy` attribute to those resources, and use the `cfn-signal` helper script to signal when an instance creation process has completed successfully.

CfnWaitCondition

The number of success signals that CloudFormation must receive before it continues the stack creation process.

When the wait condition receives the requisite number of success signals, CloudFormation resumes the creation of the stack. If the wait condition doesn't receive the specified number of success signals before the Timeout period expires, CloudFormation assumes that the wait condition has failed and rolls the stack back.

Updates aren't supported.

count

A reference to the wait condition handle used to signal this wait condition.

Use the `Ref` intrinsic function to specify an [AWS::CloudFormation::WaitConditionHandle](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudformation-waitconditionhandle.html) resource.

Anytime you add a `WaitCondition` resource during a stack update, you must associate the wait condition with a new WaitConditionHandle resource. Don't reuse an old wait condition handle that has already been defined in the template. If you reuse a wait condition handle, the wait condition might evaluate old signals from a previous create or update stack command.

Updates aren't supported.

handle

The length of time (in seconds) to wait for the number of signals that the `Count` property specifies.

`Timeout` is a minimum-bound property, meaning the timeout occurs no sooner than the time you specify, but can occur shortly thereafter. The maximum time that can be specified for this property is 12 hours (43200 seconds).

Updates aren't supported.

timeout

The `AWS::CloudFormation::WaitConditionHandle` type has no properties.

When you reference the `WaitConditionHandle` resource by using the `Ref` function, CloudFormation returns a presigned URL. You pass this URL to applications or scripts that are running on your Amazon EC2 instances to send signals to that URL. An associated `AWS::CloudFormation::WaitCondition` resource checks the URL for the required number of success signals or for a failure signal.

For more information, see [Create wait conditions in a CloudFormation template](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-waitcondition.html) in the *CloudFormation User Guide* .

Anytime you add a `WaitCondition` resource during a stack update or update a resource with a wait condition, you must associate the wait condition with a new `WaitConditionHandle` resource. Don't reuse an old wait condition handle that has already been defined in the template. If you reuse a wait condition handle, the wait condition might evaluate old signals from a previous create or update stack command.

Updates aren't supported for this resource.

AWS CloudFormation

L1 Constructs18