View a markdown version of this page

Importar recursos da AWS para uma pilha do CloudFormation automaticamente - AWS CloudFormation

Importar recursos da AWS para uma pilha do CloudFormation automaticamente

Agora, é possível importar recursos nomeados automaticamente ao criar ou atualizar pilhas do CloudFormation. Um recurso nomeado é um recurso com nome personalizado. Para obter mais informações, consulte Tipo de nome na Referência de modelos do CloudFormation.

Quando a importação automática é iniciada, o CloudFormation verifica os recursos existentes que correspondem ao modelo e os importa durante a implantação. No caso de pilhas aninhadas, crie o conjunto de alterações a partir da pilha raiz.

Após a importação ter sido concluída, e antes de realizar as operações de pilhas subsequentes, recomendamos executar a detecção de desvios nos recursos importados. A detecção de desvios garante que a configuração do modelo corresponda à configuração real. Para obter mais informações, consulte Detectar desvio em uma pilha inteira do CloudFormation.

Para importar um recurso, é necessário que ele atenda aos seguintes requisitos:

  • O recurso deve ter um nome personalizado estático definido no modelo. No momento, não há suporte para nomes dinâmicos (usando !Ref ou outras funções).

  • O recurso deve ter DeletionPolicy de Retain ou RetainExceptOnCreate.

  • O recurso não deve pertencer a outra pilha do CloudFormation.

  • O tipo de recurso deve ser compatível com operações de importação do CloudFormation. Para obter mais informações, consulte Suporte a tipos de recursos.

  • O ID primário ou um identificador adicional do tipo de recurso deve estar no modelo. Não há suporte a IDs primários ou identificadores adicionais com propriedades somente leitura. Para descobrir qual é o ID primário ou identificadores adicionais de um tipo, procure as propriedades primaryIdentifier e additionalIdentifiers no esquema do recurso. Para obter mais informações, consulte esquema de definição do tipo de recurso.

exemplo Exemplo de importação automática

O exemplo a seguir usa um conjunto de alterações, CreateChangeSet, para criar uma pilha chamada my-stack com base em um arquivo de modelo, template.yaml, e importa os recursos correspondentes de maneira automática.

aws cloudformation create-change-set \ --stack-name my-stack \ --change-set-name CreateChangeSet \ --change-set-type CREATE \ --template-body file://template.yaml \ --import-existing-resources

Solução de problemas

Se a importação automática falhar, faça o seguinte para solucionar o problema:

  • Verifique se o nome do recurso no modelo corresponde exatamente ao nome do recurso

  • Verifique se o recurso não está sendo gerenciado por outra pilha

  • Certifique-se de que o tipo de recurso ofereça suporte à importação automática

  • Verifique se o modelo inclui todas as propriedades necessárias para o tipo de recurso

Tipos de recursos compatíveis

A tabela a seguir lista os tipos de recursos da AWS que atualmente oferecem suporte à importação automática.

Recurso

AWS::ACMPCA::CertificateAuthorityActivation

AWS::ACMPCA::Permission

AWS::APS::ResourcePolicy

AWS::ARCZonalShift::ZonalAutoshiftConfiguration

AWS::ApiGateway::BasePathMapping

AWS::ApiGateway::DocumentationVersion

AWS::ApiGateway::DomainName

AWS::ApiGateway::Method

AWS::ApiGateway::Model

AWS::ApiGateway::Stage

AWS::ApiGatewayV2::DomainName

AWS::AppFlow::Connector

AWS::AppFlow::ConnectorProfile

AWS::AppFlow::Flow

AWS::AppIntegrations::EventIntegration

AWS::AppStream::AppBlockBuilder

AWS::AppStream::ApplicationEntitlementAssociation

AWS::AppStream::ApplicationFleetAssociation

AWS::AppStream::DirectoryConfig

AWS::AppStream::Entitlement

AWS::AppStream::ImageBuilder

AWS::AppStream::Stack

AWS::AppSync::DomainName

AWS::AppSync::SourceApiAssociation

AWS::ApplicationAutoScaling::ScalableTarget

AWS::Athena::CapacityReservation

AWS::Athena::DataCatalog

AWS::Athena::PreparedStatement

AWS::Athena::WorkGroup

AWS::AutoScaling::AutoScalingGroup

AWS::AutoScaling::LaunchConfiguration

AWS::AutoScaling::LifecycleHook

AWS::AutoScaling::WarmPool

AWS::Backup::BackupVault

AWS::Backup::LogicallyAirGappedBackupVault

AWS::Backup::RestoreTestingPlan

AWS::Backup::RestoreTestingSelection

AWS::Backup::TieringConfiguration

AWS::Batch::ComputeEnvironment

AWS::Batch::JobDefinition

AWS::Batch::QuotaShare

AWS::Batch::ServiceEnvironment

AWS::Bedrock::ResourcePolicy

AWS::BedrockAgentCore::WorkloadIdentity

AWS::CUR::ReportDefinition

AWS::Cases::Field

AWS::Cassandra::Keyspace

AWS::Cassandra::Table

AWS::Cassandra::Type

AWS::CloudFormation::ModuleDefaultVersion

AWS::CloudFormation::Stack

AWS::CloudFormation::StackSet

AWS::CloudFront::ConnectionFunction

AWS::CloudFront::KeyValueStore

AWS::CloudFront::MonitoringSubscription

AWS::CloudFront::TrustStore

AWS::CloudTrail::ResourcePolicy

AWS::CloudTrail::Trail

AWS::CloudWatch::Alarm

AWS::CloudWatch::CompositeAlarm

AWS::CloudWatch::Dashboard

AWS::CloudWatch::MetricStream

AWS::CodeDeploy::Application

AWS::CodeDeploy::DeploymentConfig

AWS::CodeDeploy::DeploymentGroup

AWS::CodeGuruProfiler::ProfilingGroup

AWS::CodePipeline::CustomActionType

AWS::CodePipeline::Pipeline

AWS::CodeStarConnections::SyncConfiguration

AWS::Cognito::IdentityPoolPrincipalTag

AWS::Cognito::IdentityPoolRoleAttachment

AWS::Cognito::UserPoolDomain

AWS::Cognito::UserPoolGroup

AWS::Cognito::UserPoolIdentityProvider

AWS::Cognito::UserPoolResourceServer

AWS::Cognito::UserPoolRiskConfigurationAttachment

AWS::Cognito::UserPoolUICustomizationAttachment

AWS::Cognito::UserPoolUser

AWS::Cognito::UserPoolUserToGroupAttachment

AWS::Config::AggregationAuthorization

AWS::Config::ConfigRule

AWS::Config::ConfigurationAggregator

AWS::Config::ConformancePack

AWS::Config::OrganizationConformancePack

AWS::Config::StoredQuery

AWS::Connect::ApprovedOrigin

AWS::Connect::DataTableAttribute

AWS::Connect::IntegrationAssociation

AWS::Connect::PredefinedAttribute

AWS::ControlTower::EnabledControl

AWS::CustomerProfiles::CalculatedAttributeDefinition

AWS::CustomerProfiles::Domain

AWS::CustomerProfiles::EventStream

AWS::CustomerProfiles::EventTrigger

AWS::CustomerProfiles::Integration

AWS::CustomerProfiles::ObjectType

AWS::CustomerProfiles::Recommender

AWS::CustomerProfiles::SegmentDefinition

AWS::DMS::DataMigration

AWS::DMS::DataProvider

AWS::DMS::InstanceProfile

AWS::DMS::MigrationProject

AWS::DMS::ReplicationConfig

AWS::DataBrew::Dataset

AWS::DataBrew::Job

AWS::DataBrew::Project

AWS::DataBrew::Recipe

AWS::DataBrew::Ruleset

AWS::DataBrew::Schedule

AWS::DataZone::Domain

AWS::DataZone::Environment

AWS::DataZone::EnvironmentActions

AWS::DataZone::EnvironmentBlueprintConfiguration

AWS::DataZone::EnvironmentProfile

AWS::DataZone::FormType

AWS::DataZone::Project

AWS::Deadline::QueueFleetAssociation

AWS::Deadline::QueueLimitAssociation

AWS::Detective::MemberInvitation

AWS::Detective::OrganizationAdmin

AWS::DocDB::GlobalCluster

AWS::DynamoDB::GlobalTable

AWS::DynamoDB::Table

AWS::EC2::EnclaveCertificateIamRoleAssociation

AWS::EC2::GatewayRouteTableAssociation

AWS::EC2::KeyPair

AWS::EC2::LocalGatewayRoute

AWS::EC2::NetworkInterfaceAttachment

AWS::EC2::NetworkPerformanceMetricSubscription

AWS::EC2::RouteServerAssociation

AWS::EC2::RouteServerPropagation

AWS::EC2::SecurityGroupVpcAssociation

AWS::EC2::SqlHaStandbyDetectedInstance

AWS::EC2::TransitGatewayMeteringPolicyEntry

AWS::EC2::TransitGatewayMulticastDomainAssociation

AWS::EC2::TransitGatewayMulticastGroupMember

AWS::EC2::TransitGatewayMulticastGroupSource

AWS::EC2::TransitGatewayRoute

AWS::EC2::TransitGatewayRouteTableAssociation

AWS::EC2::TransitGatewayRouteTablePropagation

AWS::EC2::VPCDHCPOptionsAssociation

AWS::EC2::VPCEndpointServicePermissions

AWS::EC2::VPNConnectionRoute

AWS::EC2::VolumeAttachment

AWS::ECR::PublicRepository

AWS::ECR::PullThroughCacheRule

AWS::ECR::PullTimeUpdateExclusion

AWS::ECR::Repository

AWS::ECR::RepositoryCreationTemplate

AWS::ECS::CapacityProvider

AWS::ECS::Cluster

AWS::ECS::ClusterCapacityProviderAssociations

AWS::ECS::PrimaryTaskSet

AWS::EKS::AccessEntry

AWS::EKS::Addon

AWS::EKS::Cluster

AWS::EKS::FargateProfile

AWS::EKS::IdentityProviderConfig

AWS::EMR::SecurityConfiguration

AWS::EMR::StudioSessionMapping

AWS::EMR::WALWorkspace

AWS::ElastiCache::ReplicationGroup

AWS::ElastiCache::ServerlessCache

AWS::ElastiCache::SubnetGroup

AWS::ElastiCache::User

AWS::ElastiCache::UserGroup

AWS::ElasticBeanstalk::Application

AWS::ElasticBeanstalk::Environment

AWS::EntityResolution::IdMappingWorkflow

AWS::EntityResolution::IdNamespace

AWS::EntityResolution::MatchingWorkflow

AWS::EntityResolution::PolicyStatement

AWS::EntityResolution::SchemaMapping

AWS::Events::ApiDestination

AWS::Events::Archive

AWS::Events::Connection

AWS::Events::Endpoint

AWS::Events::EventBus

AWS::Events::EventBusPolicy

AWS::FIS::TargetAccountConfiguration

AWS::FMS::NotificationChannel

AWS::FSx::S3AccessPointAttachment

AWS::GameLift::ContainerGroupDefinition

AWS::GameLift::GameSessionQueue

AWS::GameLift::Location

AWS::GameLift::MatchmakingConfiguration

AWS::GameLift::MatchmakingRuleSet

AWS::Glue::Crawler

AWS::Glue::Database

AWS::Glue::Job

AWS::Glue::SchemaVersionMetadata

AWS::Glue::Trigger

AWS::Glue::UsageProfile

AWS::GuardDuty::Filter

AWS::GuardDuty::Master

AWS::GuardDuty::Member

AWS::IAM::Group

AWS::IAM::GroupPolicy

AWS::IAM::InstanceProfile

AWS::IAM::Role

AWS::IAM::RolePolicy

AWS::IAM::ServerCertificate

AWS::IAM::User

AWS::IAM::UserPolicy

AWS::InternetMonitor::Monitor

AWS::IoT::AccountAuditConfiguration

AWS::IoT::Authorizer

AWS::IoT::BillingGroup

AWS::IoT::CertificateProvider

AWS::IoT::Command

AWS::IoT::CustomMetric

AWS::IoT::Dimension

AWS::IoT::DomainConfiguration

AWS::IoT::FleetMetric

AWS::IoT::JobTemplate

AWS::IoT::Logging

AWS::IoT::MitigationAction

AWS::IoT::ProvisioningTemplate

AWS::IoT::RoleAlias

AWS::IoT::ScheduledAudit

AWS::IoT::SecurityProfile

AWS::IoT::SoftwarePackage

AWS::IoT::SoftwarePackageVersion

AWS::IoT::Thing

AWS::IoT::ThingGroup

AWS::IoT::ThingType

AWS::IoT::TopicRule

AWS::IoTEvents::AlarmModel

AWS::IoTEvents::DetectorModel

AWS::IoTEvents::Input

AWS::IoTFleetWise::Campaign

AWS::IoTFleetWise::DecoderManifest

AWS::IoTFleetWise::Fleet

AWS::IoTFleetWise::ModelManifest

AWS::IoTFleetWise::SignalCatalog

AWS::IoTFleetWise::StateTemplate

AWS::IoTFleetWise::Vehicle

AWS::IoTTwinMaker::ComponentType

AWS::IoTTwinMaker::Entity

AWS::IoTTwinMaker::Scene

AWS::IoTTwinMaker::SyncJob

AWS::IoTTwinMaker::Workspace

AWS::IoTWireless::Destination

AWS::IoTWireless::NetworkAnalyzerConfiguration

AWS::IoTWireless::PartnerAccount

AWS::KMS::Alias

AWS::KafkaConnect::Connector

AWS::KafkaConnect::CustomPlugin

AWS::KafkaConnect::WorkerConfiguration

AWS::Kinesis::ResourcePolicy

AWS::Kinesis::Stream

AWS::KinesisAnalyticsV2::Application

AWS::KinesisFirehose::DeliveryStream

AWS::KinesisVideo::SignalingChannel

AWS::KinesisVideo::Stream

AWS::LakeFormation::DataCellsFilter

AWS::LakeFormation::Tag

AWS::Lambda::CapacityProvider

AWS::Lambda::Function

AWS::Lex::ResourcePolicy

AWS::Lightsail::Alarm

AWS::Lightsail::Bucket

AWS::Lightsail::Certificate

AWS::Lightsail::Container

AWS::Lightsail::Database

AWS::Lightsail::DatabaseSnapshot

AWS::Lightsail::Disk

AWS::Lightsail::DiskSnapshot

AWS::Lightsail::Distribution

AWS::Lightsail::Domain

AWS::Lightsail::Instance

AWS::Lightsail::InstanceSnapshot

AWS::Lightsail::LoadBalancer

AWS::Lightsail::LoadBalancerTlsCertificate

AWS::Lightsail::StaticIp

AWS::Location::APIKey

AWS::Location::GeofenceCollection

AWS::Location::Map

AWS::Location::PlaceIndex

AWS::Location::RouteCalculator

AWS::Location::Tracker

AWS::Location::TrackerConsumer

AWS::Logs::DeliveryDestination

AWS::Logs::DeliverySource

AWS::Logs::Destination

AWS::Logs::Integration

AWS::Logs::LogGroup

AWS::Logs::LogStream

AWS::Logs::MetricFilter

AWS::Logs::ResourcePolicy

AWS::Logs::ScheduledQuery

AWS::Logs::SubscriptionFilter

AWS::Logs::Transformer

AWS::LookoutEquipment::InferenceScheduler

AWS::LookoutVision::Project

AWS::M2::Deployment

AWS::MSK::BatchScramSecret

AWS::MSK::ClusterPolicy

AWS::MSK::Replicator

AWS::MSK::Topic

AWS::MWAA::Environment

AWS::MWAAServerless::Workflow

AWS::Macie::FindingsFilter

AWS::MediaConnect::BridgeOutput

AWS::MediaConnect::BridgeSource

AWS::MediaConnect::FlowVpcInterface

AWS::MediaLive::Multiplexprogram

AWS::MediaPackage::Asset

AWS::MediaPackage::Channel

AWS::MediaPackage::OriginEndpoint

AWS::MediaPackage::PackagingConfiguration

AWS::MediaPackage::PackagingGroup

AWS::MediaPackageV2::Channel

AWS::MediaPackageV2::ChannelGroup

AWS::MediaPackageV2::ChannelPolicy

AWS::MediaPackageV2::OriginEndpoint

AWS::MediaPackageV2::OriginEndpointPolicy

AWS::MediaTailor::Channel

AWS::MediaTailor::ChannelPolicy

AWS::MediaTailor::LiveSource

AWS::MediaTailor::PlaybackConfiguration

AWS::MediaTailor::SourceLocation

AWS::MediaTailor::VodSource

AWS::MemoryDB::ACL

AWS::MemoryDB::Cluster

AWS::MemoryDB::ParameterGroup

AWS::MemoryDB::SubnetGroup

AWS::MemoryDB::User

AWS::Neptune::DBCluster

AWS::Neptune::DBClusterParameterGroup

AWS::Neptune::DBInstance

AWS::Neptune::DBParameterGroup

AWS::Neptune::DBSubnetGroup

AWS::Neptune::EventSubscription

AWS::NeptuneGraph::Graph

AWS::NeptuneGraph::PrivateGraphEndpoint

AWS::NetworkFirewall::LoggingConfiguration

AWS::NetworkManager::ConnectPeer

AWS::NetworkManager::CoreNetwork

AWS::NetworkManager::CoreNetworkPrefixListAssociation

AWS::NetworkManager::CustomerGatewayAssociation

AWS::NetworkManager::DirectConnectGatewayAttachment

AWS::NetworkManager::LinkAssociation

AWS::NetworkManager::SiteToSiteVpnAttachment

AWS::NetworkManager::TransitGatewayRegistration

AWS::NetworkManager::VpcAttachment

AWS::Notifications::ChannelAssociation

AWS::Notifications::ManagedNotificationAccountContactAssociation

AWS::Notifications::ManagedNotificationAdditionalChannelAssociation

AWS::Notifications::NotificationHub

AWS::Notifications::OrganizationalUnitAssociation

AWS::NovaAct::WorkflowDefinition

AWS::ObservabilityAdmin::OrganizationCentralizationRule

AWS::ObservabilityAdmin::TelemetryEnrichment

AWS::ObservabilityAdmin::TelemetryPipelines

AWS::Omics::AnnotationStore

AWS::Omics::Configuration

AWS::Omics::VariantStore

AWS::OpenSearchServerless::AccessPolicy

AWS::OpenSearchServerless::Collection

AWS::OpenSearchServerless::CollectionGroup

AWS::OpenSearchServerless::Index

AWS::OpenSearchServerless::LifecyclePolicy

AWS::OpenSearchServerless::SecurityConfig

AWS::OpenSearchServerless::SecurityPolicy

AWS::OpenSearchServerless::VpcEndpoint

AWS::OpenSearchService::Application

AWS::OpenSearchService::Domain

AWS::PCAConnectorAD::ServicePrincipalName

AWS::PCAConnectorAD::TemplateGroupAccessControlEntry

AWS::Panorama::PackageVersion

AWS::PaymentCryptography::Alias

AWS::Pinpoint::InAppTemplate

AWS::Pipes::Pipe

AWS::Proton::EnvironmentTemplate

AWS::Proton::ServiceTemplate

AWS::QBusiness::Permission

AWS::QuickSight::ActionConnector

AWS::QuickSight::Analysis

AWS::QuickSight::CustomPermissions

AWS::QuickSight::Dashboard

AWS::QuickSight::DataSet

AWS::QuickSight::DataSource

AWS::QuickSight::Folder

AWS::QuickSight::RefreshSchedule

AWS::QuickSight::Template

AWS::QuickSight::Theme

AWS::QuickSight::Topic

AWS::QuickSight::VPCConnection

AWS::RDS::CustomDBEngineVersion

AWS::RDS::DBCluster

AWS::RDS::DBClusterParameterGroup

AWS::RDS::DBInstance

AWS::RDS::DBParameterGroup

AWS::RDS::DBProxy

AWS::RDS::DBProxyEndpoint

AWS::RDS::DBShardGroup

AWS::RDS::DBSubnetGroup

AWS::RDS::EventSubscription

AWS::RDS::GlobalCluster

AWS::RDS::OptionGroup

AWS::RUM::AppMonitor

AWS::Redshift::Cluster

AWS::Redshift::ClusterParameterGroup

AWS::Redshift::EndpointAccess

AWS::Redshift::EndpointAuthorization

AWS::Redshift::EventSubscription

AWS::Redshift::ScheduledAction

AWS::RedshiftServerless::Namespace

AWS::RedshiftServerless::Snapshot

AWS::RedshiftServerless::Workgroup

AWS::Rekognition::Collection

AWS::Rekognition::Project

AWS::Rekognition::StreamProcessor

AWS::ResourceGroups::Group

AWS::Route53::DNSSEC

AWS::Route53::KeySigningKey

AWS::Route53RecoveryReadiness::Cell

AWS::Route53RecoveryReadiness::ReadinessCheck

AWS::Route53RecoveryReadiness::RecoveryGroup

AWS::Route53RecoveryReadiness::ResourceSet

AWS::Route53Resolver::ResolverConfig

AWS::S3::AccessPoint

AWS::S3::Bucket

AWS::S3::BucketPolicy

AWS::S3::MultiRegionAccessPoint

AWS::S3::MultiRegionAccessPointPolicy

AWS::S3::StorageLens

AWS::S3::StorageLensGroup

AWS::S3Express::AccessPoint

AWS::S3Express::BucketPolicy

AWS::S3Express::DirectoryBucket

AWS::S3Files::FileSystemPolicy

AWS::S3ObjectLambda::AccessPoint

AWS::S3ObjectLambda::AccessPointPolicy

AWS::S3Outposts::BucketPolicy

AWS::S3Tables::Namespace

AWS::S3Tables::TableBucketPolicy

AWS::S3Tables::TablePolicy

AWS::S3Vectors::Index

AWS::S3Vectors::VectorBucket

AWS::S3Vectors::VectorBucketPolicy

AWS::SES::ConfigurationSet

AWS::SES::ContactList

AWS::SES::CustomVerificationEmailTemplate

AWS::SES::DedicatedIpPool

AWS::SES::EmailIdentity

AWS::SES::MultiRegionEndpoint

AWS::SES::Tenant

AWS::SMSVOICE::ConfigurationSet

AWS::SMSVOICE::OptOutList

AWS::SMSVOICE::ResourcePolicy

AWS::SMSVOICE::SenderId

AWS::SNS::TopicInlinePolicy

AWS::SQS::QueueInlinePolicy

AWS::SSM::Document

AWS::SSM::Parameter

AWS::SSM::ResourceDataSync

AWS::SSO::ApplicationAssignment

AWS::SSO::Assignment

AWS::SSO::InstanceAccessControlAttributeConfiguration

AWS::SageMaker::App

AWS::SageMaker::AppImageConfig

AWS::SageMaker::Cluster

AWS::SageMaker::Device

AWS::SageMaker::DeviceFleet

AWS::SageMaker::FeatureGroup

AWS::SageMaker::Image

AWS::SageMaker::InferenceExperiment

AWS::SageMaker::MlflowTrackingServer

AWS::SageMaker::ModelCard

AWS::SageMaker::Pipeline

AWS::SageMaker::ProcessingJob

AWS::SageMaker::Space

AWS::SageMaker::StudioLifecycleConfig

AWS::SageMaker::UserProfile

AWS::Scheduler::Schedule

AWS::Scheduler::ScheduleGroup

AWS::SecurityHub::SecurityControl

AWS::SecurityHub::Standard

AWS::SecurityLake::AwsLogSource

AWS::SecurityLake::SubscriberNotification

AWS::ServiceCatalog::PortfolioPrincipalAssociation

AWS::ServiceCatalog::PortfolioProductAssociation

AWS::ServiceCatalog::PortfolioShare

AWS::ServiceCatalog::ServiceActionAssociation

AWS::ServiceCatalog::TagOptionAssociation

AWS::ServiceCatalogAppRegistry::Application

AWS::ServiceCatalogAppRegistry::AttributeGroup

AWS::Signer::ProfilePermission

AWS::StepFunctions::StateMachine

AWS::SupportApp::SlackChannelConfiguration

AWS::SupportApp::SlackWorkspaceConfiguration

AWS::Synthetics::Canary

AWS::Synthetics::Group

AWS::Timestream::Database

AWS::Timestream::Table

AWS::Transfer::User

AWS::VpcLattice::AccessLogSubscription

AWS::VpcLattice::AuthPolicy

AWS::VpcLattice::DomainVerification

AWS::VpcLattice::Listener

AWS::VpcLattice::ResourcePolicy

AWS::VpcLattice::Rule

AWS::VpcLattice::Service

AWS::VpcLattice::ServiceNetwork

AWS::VpcLattice::ServiceNetworkServiceAssociation

AWS::VpcLattice::ServiceNetworkVpcAssociation

AWS::VpcLattice::TargetGroup

AWS::WAFv2::LoggingConfiguration

AWS::WAFv2::WebACLAssociation

AWS::WorkspacesInstances::VolumeAssociation

AWS::XRay::ResourcePolicy